CLAUDE.md · diff
git:20260818.1183930 to git:20260818.da24674
8 added, 8 removed. Audit A to A.
# CLAUDE.md — claude-skills
The canonical home of every Revenantworks Agent Skill (repository
- `revenantworks/claude-skills`; renamed from `citadel` 2026-08-17). Two packs under
- `packs/` — **foundation** (nine `-wright` members) and **ossuary** (two
- `-caller` members) — each with its own router `CLAUDE.md` that loads when you
+ `revenantworks/claude-skills`, renamed from `citadel` 2026-08-17). Two packs live under
+ `packs/`: **foundation** (ten `-wright` members) and **ossuary** (two
+ `-caller` members). Each pack has its own router `CLAUDE.md` that loads when you
work under that pack. This root file exists because the repo's top level,
`tools/`, and `audit/` previously loaded no standing context at all (audit
finding `citadel-no-root-claude-md`, 2026-08-15).
## Layout
- `packs/<pack>/skills/<member>/` — SKILL.md + references + evals; the pack's
`.claude-plugin/plugin.json` carries the pack version, which must equal its
entry in `.claude-plugin/marketplace.json` (the build check enforces it)
- `tools/` — `build.py`, `release.py` (the whole close-of-pass loop), and the
tests; `audit/` — COLLISION.md and audit records
- `RUNBOOK.md` · `NEXT.md` · `CHANGELOG.md` — operations, backlog, history
## Commands
```bash
python tools/build.py --check # read-only gate: versions, counts, seams
python tools/build.py --parity # read-only: installed-copy parity
python -m unittest discover -s tools -p "test_*.py"
python tools/build.py # REAL build — regenerates references/pack.md manifests
python tools/release.py <pack>=X.Y.Z -m "..." # bump, build, check, tests, commit, tag, push, mirror, brand copies
```
(`python` on the rig, `python3` on Linux clones. A bare `build.py` and
`--footprint` can WRITE manifest drift — the read-only pair above is what
report-only passes are allowed to run.)
## The one arming step
The brand firewall (`.claude/hooks/firewall.py`, PreToolUse) **fails closed**:
with its gitignored `blocklist.txt` absent, every Write/Edit/Bash/PowerShell
call is blocked. On a fresh clone, recreate `.claude/hooks/blocklist.txt`
(one `regex-pattern<TAB>label` per line, work-identity tokens only — never a
name), then verify: `python .claude/hooks/firewall.py --selftest`.
## Hard rules
- **This repo is public and ships neutral.** No brand styling content here —
the definition lives in the private brand repo and overlays at package time.
No personal, employer, or client name, ever; the firewall's blocklist is the
machine layer for the work-identity tokens, judgment holds the rest.
- **Edit here, then re-sync the longshot mirror** (`longshot/skills/` holds
verbatim copies of both ossuary members; `diff -r` must stay empty;
`python tools/release.py --mirror-only` does it). A member change ships to
the public via a PACK version bump — the pack version is the plugin cache
key, so a member-only bump never ships there.
- - **The rig loads by junction, not by plugin** (2026-08-17): every foundation
- member and bonecaller are junctioned from `~/.claude/skills/<member>` into
- this working tree; linecaller from the longshot mirror. Edit here — it is
- live next session. `claude plugin update` is not part of the rig loop; the
- two packs are uninstalled here. claude.ai copies still move by
+ - **The rig loads by junction, not by plugin** (2026-08-17). The rig junctions
+ every foundation member and bonecaller from `~/.claude/skills/<member>` into
+ this working tree, and junctions linecaller from the longshot mirror. Edit
+ here — it is live next session. `claude plugin update` is not part of the
+ rig loop; the two packs are uninstalled here. claude.ai copies still move by
delete-and-re-upload; `release.py` prints which zips changed.
- **Frozen (2026-08-17):** tokenwright, commwright, evalwright — no bumps
unless broken (a security finding counts as broken). The ossuary marketplace
release train is frozen — that pack ships to its only consumer by the
longshot mirror + rig junctions.
- **No `ask` rules** in any tracked `.claude/settings.json`; a committed `ask`
freezes an unattended run. Hooks here: the brand firewall (PreToolUse) and
the post-commit pack-bump nudge (PostToolUse on `git commit`).