chore(governance): adopt wellmanifest/new-project 0.20.32 (ticket-170)

.aider.conf.yml

@@ -1,3 +1,11 @@
+# <!-- wellmanifest:source-links:v1 -->
+# Managed standard sources: local .governance/manifest.json,
+# .governance/manifest.lock.json and .governance/package-manifest.json are
+# authoritative. Remote links are navigation only and are never fetched at runtime.
+# Canonical instructions: https://github.com/wellmanifest/new-project/blob/main/template/files/AGENTS.template.md
+# Host contract: https://github.com/wellmanifest/new-project/blob/main/governance/agent-hosts.json
+# Immutable adoption/updater: https://github.com/wellmanifest/new-project/blob/main/scripts/create_adoption_lock.py
+# <!-- end wellmanifest:source-links:v1 -->
 # wellmanifest/new-project — fail-closed contract for aider.
 # aider loads these files into every session, so the same rules apply here as
 # in Cursor, Claude Code or Gemini. The pre-commit hook enforces them.
@@ -8,3 +16,7 @@ read:
 # Never let the tool create commits the governance hook has not seen.
 auto-commits: false
 attribute-commit-message-author: true
+
+# Bounded session controls: respect the ticket's maxActiveMinutes, create a
+# checkpoint before a context or tool boundary, and leave a handoff then stop
+# after a deterministic failure instead of retrying indefinitely.

.cursor/rules/new-project-standard.mdc

@@ -3,6 +3,21 @@ description: wellmanifest/new-project fail-closed ticket contract for every Curs
 alwaysApply: true
 ---
 
+<!-- wellmanifest:source-links:v1 -->
+## Managed standard sources
+
+Local adoption files are authoritative. Remote links are navigation only and
+must not be fetched or executed at runtime.
+
+- Local adoption manifest: [.governance/manifest.json](.governance/manifest.json)
+- Local adoption lock: [.governance/manifest.lock.json](.governance/manifest.lock.json)
+- Local package map: [.governance/package-manifest.json](.governance/package-manifest.json)
+- Canonical instructions: [AGENTS template](https://github.com/wellmanifest/new-project/blob/main/template/files/AGENTS.template.md)
+- Host contract: [agent-hosts.json](https://github.com/wellmanifest/new-project/blob/main/governance/agent-hosts.json)
+- Immutable adoption/updater: [create_adoption_lock.py](https://github.com/wellmanifest/new-project/blob/main/scripts/create_adoption_lock.py)
+
+<!-- end wellmanifest:source-links:v1 -->
+
 # new-project standard (host-agnostic)
 
 Before writing code in this repository:
@@ -15,3 +30,7 @@ Before writing code in this repository:
 6. Run `./project/governance-check.sh` before claiming done.
 
 The pre-commit hook rejects commits that are not bound to an `IN_PROGRESS` ticket. Do not invent ticket numbers. Do not ask the human to approve a merge; invoke validator-agent when publication needs trusted approval.
+
+Bounded session controls: respect the ticket's `maxActiveMinutes`, create a
+`checkpoint` before a context or tool boundary, and leave a `handoff` then
+`stop` after a deterministic failure instead of retrying indefinitely.

.github/copilot-instructions.md

@@ -1,5 +1,20 @@
 # GitHub Copilot instructions
 
+<!-- wellmanifest:source-links:v1 -->
+## Managed standard sources
+
+The local adoption manifest, lock and package are authoritative. Remote links
+are navigation only and must not be fetched or executed at runtime.
+
+- Local adoption manifest: [.governance/manifest.json](.governance/manifest.json)
+- Local adoption lock: [.governance/manifest.lock.json](.governance/manifest.lock.json)
+- Local package map: [.governance/package-manifest.json](.governance/package-manifest.json)
+- Canonical instructions: [AGENTS template](https://github.com/wellmanifest/new-project/blob/main/template/files/AGENTS.template.md)
+- Host contract: [agent-hosts.json](https://github.com/wellmanifest/new-project/blob/main/governance/agent-hosts.json)
+- Immutable adoption/updater: [create_adoption_lock.py](https://github.com/wellmanifest/new-project/blob/main/scripts/create_adoption_lock.py)
+
+<!-- end wellmanifest:source-links:v1 -->
+
 This repository follows the `wellmanifest/new-project` policy-as-code standard.
 Same fail-closed contract as `AGENTS.md`, `CLAUDE.md`, `GEMINI.md` and the Cursor
 rule. Copilot Chat and the Copilot coding agent load this file automatically.
@@ -15,3 +30,7 @@ rule. Copilot Chat and the Copilot coding agent load this file automatically.
 
 Suggestions that skip these steps are rejected by the pre-commit hook and by the
 `governance / enforce` CI job. Markdown is not a substitute for either.
+
+Bounded session controls: respect the ticket's `maxActiveMinutes`, create a
+`checkpoint` before a context or tool boundary, and leave a `handoff` then
+`stop` after a deterministic failure instead of retrying indefinitely.

.governance/AGENT_DECISIONS.md

@@ -29,6 +29,7 @@ observation. It grants no new Git, deployment, credential or cleanup authority.
 | Same authorized scope, routine reversible fix and required tests | Proceed within the ticket. |
 | Protected delivery is part of the authorized outcome | Invoke the declared validator/controller; its trusted evidence still governs merge/apply. |
 | Detached snapshot shares the writer's HEAD and has no competing source delta | Preserve it; common history alone is not a second writer. |
+| Branch without a worktree has every unique commit tree present in target history after divergence | Preserve the branch; managed admission can exclude that historical copy from competing deltas, without closing or discarding it. |
 | Real competing dirty changes or active overlapping intent | Stop the affected write and resolve ownership; keep disjoint work progressing. |
 | Missing or contradictory evidence | Report uncertainty, gather bounded observations; do not infer permission. |
 | CI capacity, credentials or another external prerequisite is unavailable | Persist the exact blocker and remaining stages; do not manufacture successful checks. |
@@ -55,6 +56,49 @@ hand, add a blanket ignore, or delete evidence merely to make a gate green.
 
 ## Report the achieved stage
 
+### Cheap preflight before expensive validation
+
+First resolve the existing ticket and checkout, dirty paths, actual remote
+publication and the next requested effect. The managed work-start query's
+optional `--observe-publication` reports remote branch evidence without fetch;
+its default local admission and authority boundaries remain unchanged. A local
+branch ahead of `main` or its upstream can already be published on a different
+remote ticket branch. Reconcile that binding, not an imaginary lost push.
+
+Before launching a long publication suite, use the declared publisher's
+read-only preflight, when available, to check ticket/branch identity, accepted
+base, commit-message syntax, delivery mode, configuration and pinned tools.
+Report an unavailable preflight rather than inventing a command or bypassing
+the publisher. Put the cheap checks first; still run required validation and
+recheck exact HEAD and fencing at the effect boundary. There is no new gate.
+
+Report the current phase, elapsed time, evidence timestamp, exact HEAD and
+next bounded action. Do not reset a retry counter or rerun an unchanged
+deterministic failure as if it were progress. Cache only against all evidence
+inputs; a cached test result never becomes trusted approval.
+
+### Recovery before another attempt
+
+Resolve the emitted diagnostic in the canonical diagnostics registry and use
+its managed runbook. In particular, branch lifecycle `002` means a branch
+without an open PR, whereas `003` means a missing, malformed or inconsistent
+snapshot. Neither finding grants cleanup authority. Read closed PRs and exact
+refs before deciding whether delivery, observation or reconciliation is needed.
+
+Every recovery answer names the next bounded action, its existing authority,
+the verification that completes it and what remains preserved if it fails.
+Reuse the current ticket, checkout and pending-effect journal. A repeated
+deterministic failure with unchanged inputs calls for diagnosis or a changed
+prerequisite, not another identical effect, fresh ticket or empty PR. A timed-out
+remote operation is observed before retry; a matching remote head means the
+push is already present, not that its PR was merged.
+
+Run the gate appropriate to the adopted delivery path; this guidance does not
+create a draft-push exemption or waive a failed required check. Continue safe
+diagnosis and authorized disjoint work while the dependent effect waits.
+
+### Evidence by stage
+
 Distinguish source edited, tests passed, commit created, PR open, trusted merge,
 deployment applied and public behavior verified. Each claim needs evidence
 from that stage. A local preview, HTTP 200, an unchanged version number, or a

.governance/agent-hosts.json

@@ -1,6 +1,6 @@
 {
   "schema": "new-project.agent-hosts/v1",
-  "note": "Single source of truth for the host-agnostic agent contract (AGENTS.md rule 22). scripts/agent_host_check.py proves these files are present, that the fail-closed hook is installed and active, and that the packaging metadata a repository already carries actually runs the gate. Instruction files are advisory to a model; the hook, the CI job and the packaging lifecycle bindings declared here are the parts that are not. Adding a host here without adding it to governance/package-manifest.json makes the requirement unshippable, so both change together.",
+  "note": "Single source of truth for the host-agnostic agent contract (AGENTS.md rule 22). scripts/agent_host_check.py proves these files are present, that the fail-closed hook is installed and active, that source links point at the local adoption contract and concrete remote standard files, that bounded-session controls are present, and that the packaging metadata a repository already carries actually runs the gate. Instruction files are advisory to a model; the hook, the CI job and the packaging lifecycle bindings declared here are the parts that are not. Adding a host here without adding it to governance/package-manifest.json makes the requirement unshippable, so both change together.",
   "hook": {
     "path": ".githooks/pre-commit",
     "hooksPathConfig": ".githooks",
@@ -58,6 +58,54 @@
       ]
     }
   ],
+  "sourceLinks": {
+    "schema": "new-project.agent-source-links/v1",
+    "authority": "Local adoption lock, local managed-file digests and protected validation are authoritative. Remote main URLs are navigation only; host instructions never fetch or execute them.",
+    "local": [
+      {"id": "hub-manifest", "path": "governance/manifest.hub.json"},
+      {"id": "hub-package", "path": "governance/package-manifest.json"},
+      {"id": "adopter-manifest", "path": ".governance/manifest.json"},
+      {"id": "adopter-lock", "path": ".governance/manifest.lock.json"},
+      {"id": "adopter-package", "path": ".governance/package-manifest.json"}
+    ],
+    "remote": [
+      {"id": "new-project-agents", "repository": "wellmanifest/new-project", "path": "template/files/AGENTS.template.md", "url": "https://github.com/wellmanifest/new-project/blob/main/template/files/AGENTS.template.md"},
+      {"id": "new-project-hosts", "repository": "wellmanifest/new-project", "path": "governance/agent-hosts.json", "url": "https://github.com/wellmanifest/new-project/blob/main/governance/agent-hosts.json"},
+      {"id": "new-project-adoption", "repository": "wellmanifest/new-project", "path": "scripts/create_adoption_lock.py", "url": "https://github.com/wellmanifest/new-project/blob/main/scripts/create_adoption_lock.py"},
+      {"id": "worktrees-schema", "repository": "wellmanifest/worktrees", "path": "models/worktrees.schema.json", "url": "https://github.com/wellmanifest/worktrees/blob/main/models/worktrees.schema.json"},
+      {"id": "git-lifecycle-schema", "repository": "wellmanifest/git-lifecycle", "path": "standard/git-lifecycle.schema.json", "url": "https://github.com/wellmanifest/git-lifecycle/blob/main/standard/git-lifecycle.schema.json"},
+      {"id": "ticket-lifecycle-schema", "repository": "wellmanifest/ticket-lifecycle", "path": "standard/ticket-lifecycle.schema.json", "url": "https://github.com/wellmanifest/ticket-lifecycle/blob/main/standard/ticket-lifecycle.schema.json"},
+      {"id": "policy-dsl", "repository": "wellmanifest/policy-dsl", "path": "spec/POLICY_DSL.md", "url": "https://github.com/wellmanifest/policy-dsl/blob/main/spec/POLICY_DSL.md"},
+      {"id": "logs-contract", "repository": "wellmanifest/logs", "path": "contracts/logs.contract.json", "url": "https://github.com/wellmanifest/logs/blob/main/contracts/logs.contract.json"},
+      {"id": "agent-schema", "repository": "wellmanifest/agent", "path": "standard/agent.schema.json", "url": "https://github.com/wellmanifest/agent/blob/main/standard/agent.schema.json"},
+      {"id": "llm-policy", "repository": "wellmanifest/llm", "path": "README.md", "url": "https://github.com/wellmanifest/llm/blob/main/README.md"},
+      {"id": "offer-pointer", "repository": "wellmanifest/offer", "path": "README.md", "url": "https://github.com/wellmanifest/offer/blob/main/README.md"},
+      {"id": "brand-pointer", "repository": "wellmanifest/brand", "path": "README.md", "url": "https://github.com/wellmanifest/brand/blob/main/README.md"}
+    ],
+    "requiredInEveryHost": ["new-project-agents", "new-project-hosts", "new-project-adoption"],
+    "requiredInAgents": ["new-project-agents", "new-project-hosts", "new-project-adoption", "worktrees-schema", "git-lifecycle-schema", "ticket-lifecycle-schema", "policy-dsl", "logs-contract", "agent-schema", "llm-policy", "offer-pointer", "brand-pointer"]
+  },
+  "anomalyChecks": {
+    "schema": "new-project.agent-guidance-audit/v1",
+    "maxInstructionBytes": 65536,
+    "requiredTerms": ["checkpoint", "handoff", "stop", "maxActiveMinutes"],
+    "contradictions": [
+      {
+        "id": "direct-default-branch-delivery",
+        "patterns": ["push directly to main", "never push directly to main"]
+      },
+      {
+        "id": "self-merge",
+        "patterns": ["merge directly", "never merge directly"]
+      }
+    ],
+    "ci": {
+      "requiredChecksCandidates": [
+        "governance/required-checks.json",
+        ".governance/required-checks.json"
+      ]
+    }
+  },
   "packaging": {
     "python": {
       "marker": "pyproject.toml",

.governance/agent-hosts.schema.json

@@ -5,7 +5,7 @@
   "description": "Declares the instruction files every LLM host loads, the fail-closed git hook, and the packaging touchpoints that make the contract executable rather than advisory.",
   "type": "object",
   "additionalProperties": false,
-  "required": ["schema", "hook", "hosts", "packaging", "declarationFields"],
+  "required": ["schema", "hook", "hosts", "sourceLinks", "anomalyChecks", "packaging", "declarationFields"],
   "properties": {
     "schema": { "const": "new-project.agent-hosts/v1" },
     "note": { "type": "string" },
@@ -42,6 +42,102 @@
         }
       }
     },
+    "sourceLinks": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema", "authority", "local", "remote", "requiredInEveryHost", "requiredInAgents"],
+      "properties": {
+        "schema": { "const": "new-project.agent-source-links/v1" },
+        "authority": { "type": "string", "minLength": 1 },
+        "local": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["id", "path"],
+            "properties": {
+              "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+              "path": { "type": "string", "pattern": "^[^/][^\\\\]*$" }
+            }
+          }
+        },
+        "remote": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["id", "repository", "path", "url"],
+            "properties": {
+              "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+              "repository": { "type": "string", "pattern": "^wellmanifest/[a-z0-9.-]+$" },
+              "path": { "type": "string", "pattern": "^[^/][^\\\\]*$" },
+              "url": { "type": "string", "pattern": "^https://github\\.com/wellmanifest/[a-z0-9.-]+/blob/main/.+$" }
+            }
+          }
+        },
+        "requiredInEveryHost": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" }
+        },
+        "requiredInAgents": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" }
+        }
+      }
+    },
+    "anomalyChecks": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema", "maxInstructionBytes", "requiredTerms", "contradictions", "ci"],
+      "properties": {
+        "schema": { "const": "new-project.agent-guidance-audit/v1" },
+        "maxInstructionBytes": { "type": "integer", "minimum": 1 },
+        "requiredTerms": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "contradictions": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["id", "patterns"],
+            "properties": {
+              "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+              "patterns": {
+                "type": "array",
+                "minItems": 2,
+                "uniqueItems": true,
+                "items": { "type": "string", "minLength": 1 }
+              }
+            }
+          }
+        },
+        "ci": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["requiredChecksCandidates"],
+          "properties": {
+            "requiredChecksCandidates": {
+              "type": "array",
+              "minItems": 1,
+              "uniqueItems": true,
+              "items": { "type": "string", "minLength": 1 }
+            }
+          }
+        }
+      }
+    },
     "packaging": {
       "type": "object",
       "minProperties": 1,