git:20260924.cf90ce4 to git:20261014.24845e8

21 added, 119 removed. Audit A to A.

---
name: executing-plans
- description: The checkpoint coordinator for /feature. Routed to by /feature once a writing-plans plan exists. Uses authored HTML checkpoints or bounded legacy batches, delegates each scope to subagent-driven-development (fresh author agent per task, full review chain, fresh verification), then stops for a human checkpoint before the next batch. The checkpointed counterpart to /sprint's autonomous run.
+ description: Assistive /feature coordinator. Select relevant tasks from a maintained spec/plan, delegate a useful batch when warranted, record verified versus pending checks honestly, and give progress summaries without default human-approval stops.
disable-model-invocation: true
---
# executing-plans
- ## Structured-artifact format boundary
-
- New full-lane workflows default to HTML through the installed engine. Existing
- HTML pairs use the same path. Load
- `{{PLUGIN_ROOT}}/includes/artifacts.md` before HTML artifact I/O;
- its typed identity, binding, receipt, contextual-read, and scope-state rules
- replace rendered-document parsing and direct status-cell edits. Existing
- authoritative Markdown pairs stay on their exact legacy path without conversion.
- A missing, invalid, or unqualified HTML capability must fail closed rather than
- fall back to new Markdown authority. HTML `--farm` dispatch remains disabled.
- Keep every other workflow gate, including human checkpoints, unchanged.
-
-
- Coordinate the plan in small, user-acknowledged batches. Routed to by `/feature` after
- `writing-plans` has produced a plan. Each batch is executed by `subagent-driven-development` — fresh
- author agent per task, spec-compliance review, quality review, fresh verification — and the user
- checkpoints between batches. The orchestrator never implements; it schedules and checkpoints.
- An HTML checkpoint is an acceptance scope, not a new user checkpoint in `/sprint`. Sprint routes
- directly to `subagent-driven-development` and does not inherit this attended coordinator's pauses.
-
- ## Pre-flight
-
- Read these, or STOP and surface the gap — never guess a path, a command, or a task boundary:
-
- - The discovered authoritative spec/plan pair. Existing Markdown pairs retain
- their current ledger. For an HTML pair, load
- `{{PLUGIN_ROOT}}/includes/artifacts.md`, retain the exact artifact identities
- and engine-written receipts, and obtain task, scope, dependency, and binding
- state only through `identity`, `index`, `outline`, symbol-scoped `read`, and
- `eligible`. The engine `eligible` response is authoritative; the coordinator
- must not infer authority from rendered text, checkboxes, status words,
- digests, or caller-supplied labels, and must not read or write a shadow
- Markdown ledger.
- - `{{PROJECT_DIR}}/.codearbiter/CONTEXT.md` — the `stage:` frontmatter (the maturity value) and project context.
- - `{{PROJECT_DIR}}/.codearbiter/tech-stack.md` — the exact verification, test, and build invocations.
-
- ## Phase 1 — Batch plan · gate: BLOCK
-
- For Markdown, group remaining tasks into small batches; the three-to-five task ceiling is legacy
- presentation guidance, not a reason to rewrite typed scope. For HTML, read the authored checkpoint partition
- through the installed engine. Build the sequence from the plan's exact checkpoint membership and ordering,
- retaining each checkpoint's full task-ID set as its acceptance scope. Skip a checkpoint only when current
- engine evidence establishes its accepted state. Do not remove `REVIEW` tasks from an unfinished checkpoint:
- they still need the combined review and whole-scope acceptance. Likewise, do not drop `BLOCKED` members:
- excluding one does not make the checkpoint complete. Resume it only through the supported reconciliation path
- and refreshed eligibility. Respect explicit dependencies in either format.
+ Coordinate implementation of an already-authorized `/feature` plan. The spec/plan is a **maintained working agreement**, not an additional permission system. This coordinator schedules work and reports progress; `subagent-driven-development` owns implementation and scoped checks.
- A smaller display grouping must not split an HTML acceptance scope, combine checkpoints, or change their
- membership to fit a task-count ceiling. Execute and accept one authored scope at a time. If the partition
- itself is unsuitable, return the actual problem to `writing-plans` for the existing amendment/approval path;
- do not mutate scope identity in the coordinator or add a new batching registry.
+ ## Structured-artifact format boundary
- **Resume is the normal re-entry.** For Markdown, a task already `ACCEPTED` in
- the plan's status column was verified before an earlier interruption. For HTML,
- derive resume from current `eligible` evidence and the authored checkpoint partition above.
- For Markdown, exclude accepted tasks from new batches. For HTML, retain checkpoint membership while
- selecting only eligible work, and say which current accepted checkpoints are already complete.
- Stale proof requires its existing reconciliation and revalidation, not automatic reimplementation.
- Never restart the pipeline at brainstorming merely because the session died mid-plan.
+ New full-lane workflows default to HTML through the installed engine. Existing authoritative Markdown pairs retain their exact legacy representation. Load `{{PLUGIN_ROOT}}/includes/artifacts.md` before HTML I/O. For HTML, use typed identity/read/progress operations, not scraped status cells or a shadow ledger. A missing writer fails the artifact write and must be reported; never claim an unsaved plan was saved or quietly create a Markdown counterpart. HTML `--farm` is disabled.
- After process recreation on an HTML pair, rediscover the same authoritative pair
- and query `identity` and `eligible` again. An `IN_PROGRESS` task is not proof of
- completion. Use the installed reconciliation adapter in `{{PLUGIN_ROOT}}/includes/artifacts.md` for the exact task,
- including its genuine host-observed decision and exact stored retry identity; do not construct
- an authority event in this coordinator. A supported `task-reconcile` transition must precede
- redispatch through `task-start` with a fresh complete context ticket. A task in `REVIEW` still requires fresh evidence and the current
- scope review before `accept-scope`; conversation memory cannot advance it.
+ An HTML checkpoint is **not a new user checkpoint in `/sprint`**. The sprint route hands the whole plan directly to `subagent-driven-development`. For `/feature`, checkpoints group meaningful progress. A user-requested attended pause is respected, but no artifact-created approval prompt is required between routine batches.
- For each task, confirm the plan names its exact target paths and its verification command. A task
- missing either is underspecified — return it to `writing-plans`, do not improvise the gap.
+ ## Phase 1 - Select the next meaningful work
- Present the batch breakdown to the user as information, not a question: which tasks land in batch 1,
- and what follows. Do NOT stop for a separate acknowledgment — the user approved the plan in
- `writing-plans`, and the first Phase 3 checkpoint arrives after batch 1; a breakdown objection
- surfaces there (or the user interrupts). Each unresolved unknown is a `[CONFIRM-NN]` in
- `open-questions.md` — surface it, do not guess past it.
+ After process recreation, rediscover the same authoritative pair and query `identity` and `eligible` again. Read the relevant criteria, current plan tasks, and actual dependencies through `index`, `outline`, and symbol-scoped `read`. The engine `eligible` response is **advisory**, never a permission grant or a current-test claim. `REVIEW` or `DONE` records implementation progress, not a passing test.
- Gate: a batch sequence exists and every task has a target path and a verification command.
- Missing current authority or capability, a stale prerequisite, or a `[CONFIRM-NN]` blocking the
- first scope is a gate failure. Follow the existing diagnostic or reconciliation owner; do not
- invent a plan, drop blocked members, or restart the interview to clear it.
+ For HTML, inspect the plan's exact checkpoint membership and use the authored checkpoint partition to organize the work. A three-to-five task grouping is optional presentation guidance; it **must not split an HTML acceptance scope** just to meet a count. Retain each checkpoint's full task-ID set for accurate reporting, but do not treat earlier checkpoint numbering as a dependency or approval. A `BLOCKED` member is still visible and cannot silently make the checkpoint complete. Group independent work so it can continue when another member has a real unmet prerequisite.
- ## Phase 2 — Execute batch · gate: BLOCK
+ For Markdown, retain its recorded task statuses and dependencies without auto-conversion. The coordinator may return an underspecified task to `writing-plans` or amend the authorized method and check with a reason. Ask only about a consequential missing decision; no repeated plan approval, negative intent interview, or prerequisite code.
- Invoke `subagent-driven-development` (`{{PLUGIN_ROOT}}/skills/subagent-driven-development/SKILL.md`) with `scope = [current batch task IDs]`. Pass the plan slug and
- spec slug so it can read its own pre-flight files. Do not implement anything here — the author agents,
- review chain, and verification all run inside that skill.
+ On resume, examine `IN_PROGRESS` work and outstanding workers before attempting any new start. If the state needs correction, use a reasoned `task-reconcile` under current CAS/operation ID. Never infer that work is done merely because a process died; never automatically clear `BLOCKED` or duplicate execution. A stale proof observation is visible but is not a reason to restart the whole specification process.
- For HTML, pass the selected spec/plan identities and the complete task-ID set for one authored checkpoint;
- do not pass a partial or cross-checkpoint task set. Labels and presentation batches do not confer acceptance.
- The nested workflow uses engine eligibility to select work inside that scope, records dispatch with `task-start`, records
- the separate verification and spec-review receipts with `task-review`, and
- records whole-scope acceptance once with `accept-scope`. Preserve every returned
- identity and receipt for the checkpoint and later commit proof.
+ **Progress assessment:** identify actionable tasks, relevant checks, and genuinely missing inputs. A disputed source requirement or irreversible operation is a real question. Missing optional code-map text, a reviewer adapter, approval nonce, or delivery ticket is not a universal blocker.
- `subagent-driven-development` returns when every task in the scope is `ACCEPTED` (Phase 3–5 green,
- verification passed on a fresh run). A `tdd` BLOCK, a security CRITICAL finding, or an unresolved
- `[CONFIRM-NN]` surfaced inside that skill halts the loop — surface it to the user and do not proceed.
+ ## Phase 2 - Execute and record a coherent batch
- Gate: `subagent-driven-development` signals batch complete with all scoped tasks `ACCEPTED`. Any
- unresolved halt from inside the skill is a gate failure here.
+ Invoke `subagent-driven-development` with an explicit `scope` containing the selected task IDs (normally an authored checkpoint's relevant work). Do not pass a partial or cross-checkpoint task set **as if** it were evidence of whole-checkpoint acceptance; presentation batches do not confer acceptance. The nested implementation skill may use one author, several well-scoped agents, or direct implementation based on actual value. A fresh author plus two reviewers for each task is not compulsory.
- ## Phase 3 — Checkpoint · gate: STOP
+ For HTML, progress through ordinary `task-start`, `task-review` (implementation ready), and receipt-free `accept-scope` (implementation `DONE`) as applicable. A fact prerequisite can be checked and recorded with a reported source; an unresolved decision needs the actual user's choice. No `arm-sprint`, `satisfy-prerequisite` reply, `task-reconcile` approval nonce, mandatory context ticket, or `_preflight_current_acceptance` call is necessary for ordinary execution.
- Every task in the batch is done and verified. STOP and checkpoint with the user before any further
- work:
+ The worker returns actual work and checks, including failures or still-unrun verification. These remain outstanding in the batch report. Do not describe `DONE` as `ACCEPTED` or replace command output with a model assertion. If a required check fails, repair the affected work or report incomplete verification; do not rerun all unrelated reviewers solely because an evidence receipt changed.
- - **Landed** — the tasks completed this batch, each verified by `subagent-driven-development` Phase 5.
- - **Next** — the tasks in the upcoming batch.
- - **Open** — any `[NEEDS-TRIAGE]` marker raised inside the batch, any `[CONFIRM-NN]` still blocking.
+ ## Phase 3 - Report progress; pause only when requested
- Do not begin the next batch until the user acknowledges. This gate is the point of `/feature` — the
- human checkpoint that separates it from `/sprint`'s autonomous run.
+ Report what changed, the applicable tests/checks actually run and their results, what remains, and the next dependency-clean batch. Use `[NEEDS-TRIAGE]` for discoveries outside the agreed scope. Do not claim the batch shipped or passed every check unless current evidence supports that statement.
- Gate: the user has acknowledged the checkpoint. On acknowledgement, loop to Phase 2 for the next
- batch. When the final batch is acknowledged and the plan is fully verified, route to `commit-gate` —
- do not commit from here.
+ **Normal behavior:** continue to the next authorized batch without waiting for the user to acknowledge a routine status report. A checkpoint is a progress summary, not an implicit human permission boundary. If the user explicitly requested a review, pause, signoff, or constrained attended execution point, honor it and do not proceed past that chosen point until answered. Also stop at genuine new product choices, explicit user denials, independent host/security restrictions, or irreversible actions outside the existing authority.
- Before claiming that an HTML plan's final batch completed, use the installed
- bridge's `_preflight_current_acceptance` with the exact route returned by
- `_resolve_workflow_pair`, the repository-bound client, and the engine-returned
- spec and plan artifact IDs. Pass no caller status, digest, receipt, or label.
- Retain the returned engine identities and receipt set for `commit-gate`. Any
- refusal leaves the batch incomplete and blocks the handoff.
+ Once implementation is complete, send the current plan state, actual verification results, and open work to `commit-gate` **only if committing is authorized**. The commit gate owns its actual Git permissions, focused checks, staged diff review, and independent security controls. Advisory engine status is not a substitute for those checks, but the engine's receipt chain is not an additional permission to make a commit.
- ## Hard rules
+ ## Hard boundaries
- - MUST NOT execute tasks inline — delegate every batch to `subagent-driven-development` with an explicit `scope`.
- - MUST NOT advance past a checkpoint the user has not acknowledged.
- - MUST NOT call `commit-gate` until all batches are acknowledged and every plan
- task is accepted; for HTML this means a fresh `eligible` result reports
- `all_accepted_and_current: true` for the selected plan identity.
- - MUST surface any halt from `subagent-driven-development` (tdd BLOCK, CRITICAL, CONFIRM-NN) to the user — do not swallow it or re-dispatch around it.
- - MUST NOT absorb scope the plan does not name — mark it `[NEEDS-TRIAGE]`.
- - MUST NOT commit; route to `commit-gate` when the plan is fully verified.
- - MUST return an underspecified task (missing path or verification command) to `writing-plans` — do not improvise the gap.
- - MUST surface a plan-versus-code conflict via `/conflict`, never silently reconcile it.
+ Do not create new HTML from a legacy Markdown pair, discard a blocked task, synthesize receipts, label unrun tests green, or silently reinterpret requirements. Never reset the entire feature on process recreation. Keep explicit human stops and actual host permissions intact. Do not personally create a commit or PR; use their owning workflows, with normal authorized branch protections.