fix(release): enforce reference and CLI documentation coverage

.llm/runs/fix-1377-gate--leaf/context-pack.md

@@ -0,0 +1,89 @@
+# Context Pack: #1377 gate half
+
+## Run Metadata
+
+| Field | Value |
+| --- | --- |
+| Run ID | `fix-1377-gate--leaf` |
+| Branch | `fix/1377-docs-reference-gate-scope` |
+| Current phase | `implement` — S3 complete; IMPL-EVAL pending |
+| Archetype | 6 — CLI / tooling |
+| Scope overlays | Docs |
+
+## Current State
+
+Fallback PLAN-EVAL cycle 1 returned `FAIL_PLAN` on `5ba4bc339`; cycle 2 returned `PASS` on
+`706c2bf05`. S1–S3 are implemented and gate-green. The implementation retains the confirmed alias
+and whole-publish-set design, locks command coverage to the exact two-page union, requires
+structural root matching plus tokenized path resolution and exact equality with 91 root/direct
+obligations, and includes only the four authorised deploy rows as bounded prose scope.
+
+## Completed
+
+- Required skills and harness policy read.
+- `supervisor.md` created first.
+- Carried research, live #1377, comments, merged PR-C #1541, reference index, release tool/tests,
+  docs checker/tests, and live public command catalog inspected.
+- 35/35 alias-resolved reference arrival coverage verified.
+- FAIL_PLAN B1–B3 and non-blocking findings resolved in the revised plan.
+- Native Opus 5 fallback PLAN-EVAL cycle 2 passed immutable head `706c2bf05`.
+- S1 whole-publish-set reference coverage committed as `dedd7804508f6cbe0d1ce97174cb7642f49dc96a`.
+- S2 tree-derived command coverage committed as `29557faa858e832d8cabdc452ed4692ae26031e2`.
+- Both raw negative controls exited 1 and named the missing page/command.
+- S3 composed gates passed, including publish dry-run with no worktree churn and the full repository
+  suite with 3,258 passed, 0 failed, and 17 ignored.
+
+## In Progress
+
+- Final run-artifact commit, explicit push, PR/issue evidence update, then stop.
+
+## Next Steps
+
+1. Commit and push the final S3 evidence.
+2. Update PR #1586 and truthfully tick #1377's completed gate rows, leaving the post-merge row
+   unticked.
+3. Stop for orchestrator-dispatched native Opus 5 IMPL-EVAL on the final immutable head.
+
+## Key Decisions
+
+| Decision | Source | Notes |
+| --- | --- | --- |
+| Alias map | `plan.md` D-1 | Four exact deployable-plugin aliases; no URL moves |
+| Whole-set placement | `plan.md` D-2 | Directly after publish-set; separate evidence row |
+| Release unblock | `plan.md` D-3 | Canonical page or explicit tracked stub; no bypass |
+| Command coverage | `plan.md` D-4–D-8 | Materialized tree, two-page union, structural/tokenized match, colon-safe, exact 91 obligations |
+| Prose unblock | `plan.md` D-9 | Four bounded deploy lifecycle rows are S2 scope |
+
+## Files Changed
+
+- S1: release readiness tool/test, reference index convention, and run artifacts including
+  `plan-eval.md`.
+- S2: docs accuracy tool/test, four deploy command rows, exact two-page union wording including the
+  two authorised `cli-reference.md` sentences, reference-index command contract, and run artifacts.
+
+## Gates
+
+| Gate family | Current status | Evidence |
+| --- | --- | --- |
+| Plan | PASS | Native Opus 5 fallback, cycle 2, head `706c2bf05` |
+| Static / Fitness | PASS | Release wrappers: 42 files; docs wrappers: 22 files; 0 findings |
+| Docs / Release | PASS | Accuracy 91/91 from 149; links 102/0/0; publish dry-run exit 0 with clean status |
+| Negative controls | COMPLETE | Both raw controls exited 1 with required diagnostics |
+| Repository tests | PASS | 3,258 passed (622 steps), 0 failed, 17 ignored in 8m46s |
+
+Gate counts, raw exits, and diagnostics are recorded in `worklog.md`.
+
+## Open Questions
+
+- None for implementation design; no external content predecessor remains.
+
+## Drift and Debt
+
+- Drift: PLAN-EVAL correction recorded append-only in `drift.md`.
+- Debt: none created.
+
+## Commits
+
+- `dedd7804508f6cbe0d1ce97174cb7642f49dc96a` — S1 whole-publish-set reference audit.
+- `29557faa858e832d8cabdc452ed4692ae26031e2` — S2 public-tree command-reference audit.
+- S3 evidence commit: pending final sign-off commit.

.llm/runs/fix-1377-gate--leaf/drift.md

@@ -0,0 +1,49 @@
+# Drift Log: #1377 gate half
+
+Append-only.
+
+## 2026-08-12 — strict direct-subcommand census finds four additional prose gaps
+
+- **What:** Executing the existing public command catalog and checking root/immediate-child paths
+  against the public CLI reference surfaces found four paths with no exact occurrence:
+  `netscript deploy start`, `netscript deploy stop`, `netscript deploy status`, and
+  `netscript deploy uninstall`.
+- **Source:** `createPublicCommandRegistry()` materialized through `PublicCliCommandCatalog`; focused
+  search over `docs/site/reference/cli/commands.md`, `docs/site/cli-reference.md`, and `docs/site`.
+- **Expected:** PR-C had landed all content required for the strict subcommand gate to be green.
+- **Actual:** 87 of 91 root/direct-child paths have an exact occurrence; these four do not.
+- **Severity:** significant.
+- **Action:** defer to PR-C/orchestrator as a sequencing dependency. PR-D will neither author the
+  prose nor weaken the predicate. PLAN-EVAL must assess the boundary before implementation.
+- **Evidence:** `research.md` finding 9; `plan.md` D-7.
+
+## 2026-08-12 — PLAN-EVAL corrects corpus scope, unblock ownership, and path-consumer premise
+
+- **What:** The first plan left the command corpus implicit, treated four missing deploy rows as an
+  ownerless external dependency, and inherited a false claim that the accuracy checker hardcodes
+  the short sagas reference path.
+- **Source:** fallback PLAN-EVAL `FAIL_PLAN` on `5ba4bc339`; independently confirmed corpus counts
+  25/25/4 and checker search.
+- **Expected:** A decision-complete plan whose S2 can reach green and whose alias decision rests on
+  true consumers.
+- **Actual:** `commands.md` and `cli-reference.md` each miss 25/91 while their union misses 4/91;
+  no open content owner existed; `check-accuracy-and-discoverability.ts` has no sagas path.
+- **Severity:** significant.
+- **Action:** fix. Lock the two-page union, ratify it in the reference index, let S2 add the four
+  bounded rows, require structural longest-path matching and exact 91 equality, and restate the
+  alias rationale without the retracted premise. This entry supersedes the earlier action that
+  deferred the four rows externally; the original finding remains as historical provenance.
+- **Evidence:** revised `research.md` findings 9/11 and `plan.md` D-1/D-4/D-6–D-9 on the
+  superseding plan head.
+
+## 2026-08-12 — cloud evaluators stalled; native fallback completed PLAN-EVAL
+
+- **What:** Forward-looking run artifacts named an automatic status-driven evaluator and paid
+  retrigger that did not complete either plan cycle.
+- **Source:** orchestrator Phase-2 resume after native Opus 5 read-only fallback verdicts.
+- **Expected:** A separate evaluator verdict for each immutable plan head.
+- **Actual:** Cloud evaluators stalled and were cancelled; the orchestrator dispatched native Opus 5
+  fallbacks without label cycling. Cycle 1 failed `5ba4bc339`; cycle 2 passed `706c2bf05`.
+- **Severity:** procedural.
+- **Action:** correct active routing instructions and preserve both verdicts in `plan-eval.md`.
+- **Evidence:** `supervisor.md`, `plan-eval.md`, `worklog.md`, and `context-pack.md`.

.llm/runs/fix-1377-gate--leaf/plan-eval.md

@@ -0,0 +1,41 @@
+# PLAN-EVAL — fix-1377-gate--leaf
+
+- Plan evaluator: native Claude · Anthropic · Opus 5 read-only fallback
+- Run: `fix-1377-gate--leaf`
+- Surface / archetype: release tooling and public CLI docs gate / Archetype 6
+- Scope overlay: docs
+- Dispatch: orchestrator-dispatched per immutable head; no label cycling or paid retrigger
+
+## Verdict cycles
+
+| Cycle | Immutable head | Verdict | Outcome |
+| --- | --- | --- | --- |
+| 1 | `5ba4bc339` | `FAIL_PLAN` | Lock the exact command corpus; reconcile the two-page IA contract; give the four missing deploy rows an executable owner; retract the false sagas-path consumer premise; clarify census and matching semantics. |
+| 2 | `706c2bf05` | `PASS` | Cycle-1 blockers verified fixed by execution; counts 15 roots / 76 direct children / 91 root+direct / 149 recursive and five colon roots reproduced from the live tree. |
+
+## Cycle 2 checklist results
+
+| Plan-Gate item | Result | Evidence / location |
+| --- | --- | --- |
+| Research present and current | PASS | `research.md`, including finding 11 retraction |
+| Decisions locked | PASS | `plan.md` D-1–D-10 |
+| Open-decision sweep | PASS | `plan.md` Open-Decision Sweep |
+| Commit slices (< 30, gate + files each) | PASS | `plan.md` S1–S3 |
+| Risk register | PASS | `plan.md` Risk Register |
+| Gate set selected | PASS | `plan.md` Validation Plan |
+| Deferred scope explicit | PASS | `plan.md` Deferred Scope |
+| jsr-audit surface scan (pkg/plugin) | N/A | Tooling/docs gate; no package export or manifest surface change |
+
+## Open-decision sweep (evaluator-run)
+
+None. The two-page corpus, alias resolver, whole-publish-set placement, subcommand depth, colon
+rendering, exact census, four-row content owner, and raw negative controls are decision-complete.
+
+## Verdict
+
+`PASS`
+
+## Notes
+
+The evaluator confirmed cycle 1's three blockers by executing the live tree/corpus measurements,
+not only by reading the revised diff. Implementation was forbidden until this cycle-2 verdict.