fix(skills): add story start gate

[dbcall2]

Summary

• add a Story Start Gate to generated AGENTS.md and the consumer template requiring git status --short --branch, dirty-work operator choice, one-story default scope, canonical scope activation, preflight, checkpoint commits, and task scope:complete
• strengthen deft-directive-build so one story is the default implementation unit and multi-story batching requires explicit approval
• tighten swarm batching language and add content tests for the new contract

Tests

• uv --project . run pytest tests/content/test_story_start_gate.py tests/content/test_agents_entry_contract.py tests/content/test_skills.py::test_deft_directive_swarm_flexible_allocation tests/content/test_skills.py::test_deft_directive_swarm_phase5_vbrief_completion tests/content/test_skills_preflight_call.py -q
• UV_FROZEN=1 task check

Notes

• Fetched upstream tags before the final check so the pyproject version freshness test sees v0.36.0.

[deft-slizard]

⚠️ Superseded by a newer SLizard review

⚠️ Superseded by a newer SLizard review

⚠️ Superseded by a newer SLizard review

⚠️ Superseded by a newer SLizard review

Machine-readable verdict

{
  "slizard_verdict": {
    "schema_version": 1,
    "decision": "approve",
    "severity": {
      "P0": 0,
      "P1": 0,
      "P2": 0,
      "P3": 0
    },
    "confidence": 0.7497,
    "decision_confidence": 0.7497,
    "finding_count": 0,
    "merge_impact": "non-blocking",
    "version": "slizard v0.3.865",
    "analysis_outcome": "clean_with_rationale",
    "head_sha": "79eb4c369dffed7ac638fe305619959af8bf1c0c"
  }
}

**SLizard Review** — 0 findings across 8 file(s)

No issues detected. Code looks clean based on completed analysis passes.

Clean-review rationale:

• Changed invariant: The system now enforces stricter pre-conditions for starting new implementation stories and for batching small/independent stories to a single agent. Specifically, a dirty working tree check is added before beginning or switching stories, and explicit operator approval or an approved allocation plan is required for batching small stories. These changes primarily affect the procedural guidelines for agents rather than direct code execution logic.
• Preserved behavior: AGENTS.md (AGENTS.md:103): The description of task vbrief:preflight remains largely the same, focusing on its role in ensuring a vBRIEF is active and a plan is running before code-writing or agent dispatch.; templates/agents-entry.md (templates/agents-entry.md:124): The core functionality and purpose of the task vbrief:preflight gate are unchanged in its description within the agent entry template.; skills/deft-directive-build/SKILL.md (skills/deft-directive-build/SKILL.md:23): The previous requirement to run task vbrief:preflight before any code-writing tool call is maintained, now augmented with additional pre-checks for story implementation.; skills/deft-directive-swarm/SKILL.md (skills/deft-directive-swarm/SKILL.md:199): The general principle of batching small/independent stories to a single agent is preserved, but a new condition for explicit approval/plan is added.; CHANGELOG.md (CHANGELOG.md:23): The 'fix(gate)' entry for SPECIFICATION.md recognition and uv --frozen behavior is untouched, indicating unrelated fixes are preserved.
• Tests reviewed: n/a

Deterministic checks: passed — vBRIEF traceability checks passed.

Review coverage

• Reviewed files: AGENTS.md, CHANGELOG.md, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/content/test_agents_entry_contract.py, tests/content/test_story_start_gate.py, vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json
• Skipped files: none
• Source: github @ 79eb4c369dff

Context used

• Static findings: 2
• Static tools: description-diff-consistency; vbrief-schema-check
• Graph/blast radius: 22 changed node(s), 10 affected node(s)
• Vector context chunks: 9
• Context availability: full
• Review categories: default
• Deterministic checks:
  303/309 passed, 6 failed: vbrief-schema, description-diff-consistency, graph-incompleteness, graph-callsite-not-updated, orphaned-module, graph-validation-gap

  vbrief-traceability=passed, markdown-fences=passed, unused-exports=passed, query-docstring=passed, xss-sprintf=passed, markdown-xref=passed, aria-target=passed, semantic-role=passed, aria-containment=passed, redundant-assertion=passed, tautological-assertion=passed, resource-lifecycle=passed, cross-diff-consistency=passed, redundant-css-block=passed, template-placeholder=passed, void-async-signal=passed, spread-override=passed, json-indent-consistency=passed, dep-swap=passed, powershell-scoping=passed, diff-truncation=passed, exception-type-contract=passed, dead-none-guard=passed, access-declaration=passed, unused-option=passed, css-property-interaction=passed, jsx-style-indent=passed, regex-breadth=passed, cartesian-fan-out=passed, exec-stdout-parse=passed, sentinel-error-wiring=passed, hardcoded-filemode=passed, api-response-shape=passed, python-cli-arg=passed, taskfile-namespace=passed, vbrief-schema=failed, go-shell-injection=passed, go-discarded-error=passed, go-json-field-exposure=passed, go-mutable-exported-slice=passed, go-silent-error-branch=passed, go-comment-log-contradiction=passed, go-unconditional-message=passed, inline-style-proliferation=passed, unnecessary-nonnull-assertion=passed, double-cast=passed, unguarded-await-cast=passed, ssrf-guard-completeness=passed, error-message-leak=passed, puppeteer-resource-cap=passed, trivial-argument=passed, unused-imports=passed, dead-store=passed, phantom-import=passed, fetch-timeout-guard=passed, log-level-expected-path=passed, unified-diff-construction=passed, sentinel-index-assertion=passed, unguarded-map-lookup=passed, unbounded-prompt-injection=passed, description-diff-consistency=failed, render-branch-symmetry=passed, go-gorm-unchained-error=passed, go-gorm-rowsaffected-noop=passed, error-handling-loop-break=passed, sync-state-batching=passed, sync-revoke-object-url=passed, go-like-wildcard-injection=passed, go-basename-dedup-gap=passed, go-missing-seed-in-migrate=passed, go-write-then-read-unfiltered=passed, go-direct-db-access=passed, async-handler-try-catch=passed, chat-sdk-history=passed, dead-code-ternary=passed, go-context-background=passed, go-git-arg-order=passed, go-n-plus-one=passed, go-nested-transaction=passed, go-ref-injection=passed, go-scanner-error=passed, go-toctou-db=passed, go-unused-validated-field=passed, hardcoded-literal=passed, hardcoded-undefined-field=passed, python-exception=passed, python-path-construction=passed, python-isdigit-int=passed, deprecated-python-utcnow=passed, python-variable-shadow=passed, frozen-dataclass-mutable-field=passed, sentinel-value=passed, sibling-constant=passed, url-interpolation=passed, jsx-guard-removal=passed, asymmetric-clamp=passed, optional-prop-guard=passed, server-lifecycle=passed, go-asymmetric-org-scope=passed, fetch-body-scope-omission=passed, regex-breadth-inconsistency=passed, typeof-object-array-guard=passed, test-production-divergence=passed, argument-axis-mismatch=passed, click-propagation-gap=passed, sanitization-gap=passed, response-shape-consistency=passed, keydown-target-guard=passed, changelog-test-count=passed, unbounded-metadata-assignment=passed, unchecked-json-response=passed, response-body-leak=passed, useref-dead-store=passed, fetch-redirect-guard=passed, response-body-buffering=passed, svg-content-type=passed, conditional-mode-exclusion=passed, join-separator-inconsistency=passed, prompt-injection-guard=passed, asymmetric-guard=passed, unsafe-json-cast=passed, storage-unsafe-cast=passed, markdown-single-line-interpolation=passed, postmessage-origin-guard=passed, css-iframe-scope=passed, markdown-entry-completeness=passed, python-set-duplicate=passed, state-setter-symmetry=passed, changelog-sibling-truncation=passed, ternary-exhaustiveness=passed, exclusive-output-constraint=passed, nullish-fallback-regression=passed, shell-pipefail=passed, vbrief-acceptance-contradiction=passed, css-property-diff=passed, go-sync-call-labeled-background=passed, prompt-guardrail-conflict=passed, prompt-identity-duplication=passed, asymmetric-truncation=passed, claim-source-tracing=passed, go-duplicate-event-publish=passed, go-create-without-cleanup=passed, go-find-then-create-without-cleanup=passed, go-persist-without-validate=passed, ts-put-without-get=passed, go-fetch-id-without-liveness=passed, go-event-subscribe-without-publish=passed, go-log-aggregation-run-scoping=passed, falsy-string-fallback=passed, useeffect-unstable-prop-dep=passed, unused-state-read=passed, blob-mime-mismatch=passed, parseint-nan-guard=passed, shared-state-across-map=passed, context-menu-click-guard=passed, touch-action-ancestor=passed, usestate-innerwidth-matchmedia=passed, prefix-match-loop=passed, hardcoded-new-field=passed, enum-subset-completeness=passed, optional-guard-fallthrough=passed, html-template-token=passed, label-association=passed, empty-src-img=passed, jsx-prose-link-mismatch=passed, try-catch-scope=passed, viewport-meta-accessibility=passed, go-github-api-response-id=passed, go-github-api-pagination=passed, go-gorm-first-without-errrecordnotfound=passed, fetch-cache-consistency=passed, oauth-session-state-binding=passed, go-switch-exhaustiveness=passed, go-test-mutex-asymmetry=passed, nextjs-suspense-boundary=passed, nullable-nested-response=passed, nullish-coalesce-empty-url=passed, asymmetric-callback-state-reset=passed, go-docstring-contract-mismatch=passed, replace-dollar-pattern=passed, conditional-fallthrough-gap=passed, sanitization-completeness=passed, bare-selector-fallback=passed, sanitization-context-mismatch=passed, json-escape-completeness=passed, catch-block-guard-parity=passed, early-exit-guard-subset=passed, html-escape-context-collision=passed, cross-file-inline-duplication=passed, collection-gate-ordering=passed, regex-denylist-anchor-gap=passed, handler-validation-symmetry=passed, go-http-handler-body-persist-without-authz=passed, go-first-element-without-disambiguation=passed, ternary-wrapper-asymmetry=passed, promise-then-without-outer-catch=passed, effect-persist-hydration-race=passed, css-animation-ref=passed, idb-open-lifecycle=passed, interactive-role-mismatch=passed, array-duplicate-field=passed, mid-file-static-import=passed, changelog-section-deletion=passed, comment-anchored-regex=passed, go-sprintf-json-body=passed, observer-boundary-mismatch=passed, hook-return-shape-mismatch=passed, raw-vs-effective-state=passed, unstable-mapped-key=passed, parallel-state-init-divergence=passed, value-callback-prop-coherence=passed, cap-expansion-order=passed, cross-file-comment-claim=passed, useeffect-cleanup=passed, filter-ratio-threshold=passed, setter-argument-asymmetry=passed, panel-scoped-notification=passed, unawaited-async-dependency=passed, prompt-html-anti-pattern=passed, go-empty-collection-write-guard=passed, go-inconsistent-error-wrapping=passed, sentinel-substring-guard=passed, hardcoded-color-in-themed-context=passed, modal-escape-handler=passed, property-read-without-write-path=passed, iframe-nav-intercept-completeness=passed, tagname-case-sensitivity=passed, guard-clause-subsumption=passed, effect-cleanup-race=passed, style-template-injection=passed, textarea-min-height=passed, greedy-lookahead-futility=passed, window-open-null-guard=passed, orphaned-ambient-declaration=passed, char-ordinal-bounds=passed, stale-ref-callback-race=passed, missing-init-check=passed, stderr-redirect=passed, gitignore-tracked-file=passed, eager-defeats-lazy-import=passed, redundant-call-in-scope=passed, test-source-list-diff=passed, mixed-dict-access-pattern=passed, md-fragile-regex-lookahead=passed, misleading-none-branch=passed, discarded-validation-return=passed, loopback-range=passed, trust-proxy=passed, fly-toml-schema=passed, dockerfile-copy-shell-op=passed, dockerfile-build-secret=passed, string-dispatch=passed, python-toctou-file-lock=passed, python-non-reentrant-lock=passed, go-sibling-handler-guard=passed, stale-test-assertion=passed, go-batch-response-counter=passed, go-single-status-error-handler=passed, go-base64-body-size-mismatch=passed, dict-write-lookup-asymmetry=passed, identical-branch=passed, postmessage-targetorigin-regression=passed, react-namespace-import=passed, comment-payload-contradiction=passed, conditional-gating-dead-path=passed, go-mock-interface-completeness=passed, toggle-setter-mismatch=passed, localhost-in-allowlist=passed, unawaited-waitfor=passed, cli-example-validator=passed, python-tz-comparison-asymmetry=passed, missing-wildcard-guard=passed, react-ref-hydration-trigger=passed, react-unused-callback-dep=passed, scope-intent-mismatch=passed, supabase-join-path-mismatch=passed, incomplete-optional-property-guard=passed, retry-reenqueue-without-guard=passed, stale-self-call-in-callback=passed, python-weak-substring-match=passed, python-docstring-class-ref=passed, python-unused-subprocess-output=passed, python-narrow-exception-handler=passed, usememo-missing-dep=passed, localstorage-stale-cache=passed, localstorage-scope=passed, dead-action-variant=passed, switch-param-forwarding-gap=passed, changelog-entry-style=passed, vbrief-edge-completeness=passed, pr-body-vbrief-scope=passed, abort-signal-timeout-guard=passed, whitespace-control-char=passed, transient-error-permanent-state=passed, unused-variable=passed, postmessage-source-null-check=passed, atob-encoding-check=passed, phantom-identity-fallback-check=passed, workflow-comment-secret=passed, rls-circular-dep=passed, writable-stream-abort=passed, error-type-shadowing=passed, unguarded-iteration-component=passed, ci-checksum-provenance=passed, graph-incompleteness=skipped, graph-callsite-not-updated=skipped, orphaned-module=skipped, graph-validation-gap=skipped, lockfile-version-suppression=passed
• Embedding index:
  22/22 ok

  attempted=22 succeeded=22 failed=0 pooled=0

Suggested verification

• (agent) Spot-check the highest-risk changed files and confirm the clean review did not skip relevant files or context.
• (static) Review 2 deterministic/static finding(s) included in the evidence set.

Agent verification brief

• PR/CR: deftai/directive#1371
• Head SHA: 79eb4c369dffed7ac638fe305619959af8bf1c0c
• Decision: approve
• Highest-risk claims: none
• Reviewed files: AGENTS.md, CHANGELOG.md, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/content/test_agents_entry_contract.py, tests/content/test_story_start_gate.py, vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json
• Skipped files: none
• Evidence sources: static analysis, call graph/blast radius, vector context, deterministic checks
• Known blind spots: none recorded

Decision: approve
Merge impact: non-blocking
Review confidence: 0.75
Decision confidence: 0.75
Finding confidence: n/a
Reason: No findings survived validation and all configured analysis completed.
Important files: 8 changed file(s) reviewed; no finding hotspots identified.
Review scope: 8 files, 214 additions, 8 deletions

_{slizard v0.3.865}

[greptile-apps]

Greptile Summary

This PR adds a Story Start Gate to AGENTS.md, templates/agents-entry.md, and skills/deft-directive-build/SKILL.md that requires a git status --short --branch check and operator consent before starting or switching implementation stories, enforces one-story-per-branch as the default unit, and mandates task scope:complete before final handoff. Swarm batching language is tightened to require explicit approval or an approved allocation plan with rationale.

• Story Start Gate (7 bullets) added to both AGENTS.md sections and the consumer template, covering dirty-tree check, one-story default, swarm-cohort carve-out, inter-story silent checkpoint-commit, canonical activation sequence, and scope completion before handoff.
• _implementation_intent_gate_region() refactor switches the region delimiter from `r"\

"tor"\

#{2,6} ", correctly stopping at the new ###`-level heading and preventing the Intent Gate bullet-count tests from absorbing Story Start Gate bullets.

• Ten new content tests in test_story_start_gate.py plus one new CLI docstring test pin every contract string across all five surfaces.

Confidence Score: 5/5

Safe to merge — all changes are markdown contract documentation and Python content tests with no executable production logic altered.

The change is confined to documentation files and test additions. The one executable file touched receives only docstring edits. The _implementation_intent_gate_region() refactor correctly narrows the scanned region to the Intent Gate alone, all new propagation markers are present in both required files, and all new content-test assertions align with the strings in the updated documents.

No files require special attention.

Important Files Changed

Filename	Overview
AGENTS.md	Adds a ### Story Start Gate section (7 bullets) in both the project-owned and consumer-facing sections; updates the Implementation Intent Gate first bullet to reference the new gate.
templates/agents-entry.md	Mirrors the AGENTS.md Story Start Gate addition into the consumer template; propagation tests verify lockstep between the two files.
skills/deft-directive-build/SKILL.md	Step 0 expanded from one bullet into 8 covering dirty-tree check, one-story default, swarm carve-out, inter-story auto-commit, canonical activation, and scope completion before handoff.
skills/deft-directive-swarm/SKILL.md	Batching language tightened to require explicit operator approval or an approved allocation plan with rationale before multi-story batching.
tests/content/test_agents_entry_contract.py	Extracts _implementation_intent_gate_region() using r"\n#{2,6} " to stop at the new ### heading; adds four new command markers and the Story Start Gate header marker to the propagation gates.
tests/content/test_story_start_gate.py	New 107-line content-test file with 10 tests pinning the Story Start Gate contract across all five surfaces.
tests/cli/test_preflight_implementation.py	Adds docstring boundary test verifying preflight_implementation.py is scoped to structural lifecycle checks only.
scripts/preflight_implementation.py	Docstring updated to document that Story Start Gate controls live outside this script; adds #1371 cross-reference.
vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json	New completed vBRIEF; all six acceptance items marked completed.

_{Reviews (13): Last reviewed commit: "Merge branch 'master' into fix/story-sta..." | Re-trigger Greptile}

[deft-slizard]

⚠️ Superseded by a newer SLizard review

⚠️ Superseded by a newer SLizard review

⚠️ Superseded by a newer SLizard review

Machine-readable verdict

{
  "slizard_verdict": {
    "schema_version": 1,
    "decision": "approve",
    "severity": {
      "P0": 0,
      "P1": 0,
      "P2": 0,
      "P3": 0
    },
    "confidence": 0.5942,
    "decision_confidence": 0.5942,
    "finding_count": 0,
    "merge_impact": "non-blocking",
    "version": "slizard v0.3.865",
    "analysis_outcome": "clean_with_rationale",
    "head_sha": "06919fcba79c6b718333034c74959f280ad77f29"
  }
}

**SLizard Review** — 0 findings across 8 file(s)

⚠️ Low-confidence clean review — 0 findings at confidence 0.59 (below 0.60). The reviewer could not confirm whether zero findings reflects clean code or insufficient analytical depth.

Files reviewed:

• AGENTS.md
• CHANGELOG.md
• skills/deft-directive-build/SKILL.md
• skills/deft-directive-swarm/SKILL.md
• templates/agents-entry.md
• tests/content/test_agents_entry_contract.py
• tests/content/test_story_start_gate.py
• vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json

Recommendation: A human reviewer should spot-check the files above, especially those with risk tags.

Clean-review rationale:

• Changed invariant: The system now enforces more stringent pre-flight checks and approval mechanisms for agent-driven code implementation and story batching. Specifically, skills/deft-directive-build/SKILL.md (24:1-26:1) introduces checks for a clean working tree before starting or switching stories, preventing unrelated changes from being included. skills/deft-directive-swarm/SKILL.md (199:1-200:1) now requires explicit operator approval or an approved allocation plan for batching small/independent stories, adding a safety net against unintended agent actions. The core AGENTS.md (100:1-100:2) and templates/agents-entry.md (121:1-121:2) documents update the preflight gate description.
• Preserved behavior: AGENTS.md (100:1-100:2): The overall description of the preflight implementation gate remains focused on ensuring a vBRIEF is active and the plan is running, with minor textual clarifications.; skills/deft-directive-build/SKILL.md (21:1-22:1): The requirement to run task vbrief:preflight before any code-writing tool call or start_agent dispatch is preserved as the foundational preflight step.; skills/deft-directive-swarm/SKILL.md (196:1-196:2): The monitor's role in allocating vBRIEFs to agents based on scope, complexity, and dependencies is unchanged.; templates/agents-entry.md (121:1-121:2): The description of the preflight implementation gate's core function (checking active vBRIEF and running plan status) is maintained, with minor textual clarifications.
• Tests reviewed: n/a
• Residual advisory gaps: No new test cases (unit, integration, or end-to-end) were added to validate the new pre-flight checks in skills/deft-directive-build/SKILL.md or the approval requirement in skills/deft-directive-swarm/SKILL.md. Manual verification of these process changes will be necessary.

Deterministic checks: passed — vBRIEF traceability checks passed.

Review coverage

• Reviewed files: AGENTS.md, CHANGELOG.md, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/content/test_agents_entry_contract.py, tests/content/test_story_start_gate.py, vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json
• Skipped files: none
• Source: github @ 06919fcba79c

Context used

• Static findings: 2
• Static tools: description-diff-consistency; vbrief-schema-check
• Graph/blast radius: 22 changed node(s), 10 affected node(s)
• Vector context chunks: 9
• Context availability: full
• Review categories: default
• Deterministic checks:
  303/309 passed, 6 failed: vbrief-schema, description-diff-consistency, graph-incompleteness, graph-callsite-not-updated, orphaned-module, graph-validation-gap

  vbrief-traceability=passed, markdown-fences=passed, unused-exports=passed, query-docstring=passed, xss-sprintf=passed, markdown-xref=passed, aria-target=passed, semantic-role=passed, aria-containment=passed, redundant-assertion=passed, tautological-assertion=passed, resource-lifecycle=passed, cross-diff-consistency=passed, redundant-css-block=passed, template-placeholder=passed, void-async-signal=passed, spread-override=passed, json-indent-consistency=passed, dep-swap=passed, powershell-scoping=passed, diff-truncation=passed, exception-type-contract=passed, dead-none-guard=passed, access-declaration=passed, unused-option=passed, css-property-interaction=passed, jsx-style-indent=passed, regex-breadth=passed, cartesian-fan-out=passed, exec-stdout-parse=passed, sentinel-error-wiring=passed, hardcoded-filemode=passed, api-response-shape=passed, python-cli-arg=passed, taskfile-namespace=passed, vbrief-schema=failed, go-shell-injection=passed, go-discarded-error=passed, go-json-field-exposure=passed, go-mutable-exported-slice=passed, go-silent-error-branch=passed, go-comment-log-contradiction=passed, go-unconditional-message=passed, inline-style-proliferation=passed, unnecessary-nonnull-assertion=passed, double-cast=passed, unguarded-await-cast=passed, ssrf-guard-completeness=passed, error-message-leak=passed, puppeteer-resource-cap=passed, trivial-argument=passed, unused-imports=passed, dead-store=passed, phantom-import=passed, fetch-timeout-guard=passed, log-level-expected-path=passed, unified-diff-construction=passed, sentinel-index-assertion=passed, unguarded-map-lookup=passed, unbounded-prompt-injection=passed, description-diff-consistency=failed, render-branch-symmetry=passed, go-gorm-unchained-error=passed, go-gorm-rowsaffected-noop=passed, error-handling-loop-break=passed, sync-state-batching=passed, sync-revoke-object-url=passed, go-like-wildcard-injection=passed, go-basename-dedup-gap=passed, go-missing-seed-in-migrate=passed, go-write-then-read-unfiltered=passed, go-direct-db-access=passed, async-handler-try-catch=passed, chat-sdk-history=passed, dead-code-ternary=passed, go-context-background=passed, go-git-arg-order=passed, go-n-plus-one=passed, go-nested-transaction=passed, go-ref-injection=passed, go-scanner-error=passed, go-toctou-db=passed, go-unused-validated-field=passed, hardcoded-literal=passed, hardcoded-undefined-field=passed, python-exception=passed, python-path-construction=passed, python-isdigit-int=passed, deprecated-python-utcnow=passed, python-variable-shadow=passed, frozen-dataclass-mutable-field=passed, sentinel-value=passed, sibling-constant=passed, url-interpolation=passed, jsx-guard-removal=passed, asymmetric-clamp=passed, optional-prop-guard=passed, server-lifecycle=passed, go-asymmetric-org-scope=passed, fetch-body-scope-omission=passed, regex-breadth-inconsistency=passed, typeof-object-array-guard=passed, test-production-divergence=passed, argument-axis-mismatch=passed, click-propagation-gap=passed, sanitization-gap=passed, response-shape-consistency=passed, keydown-target-guard=passed, changelog-test-count=passed, unbounded-metadata-assignment=passed, unchecked-json-response=passed, response-body-leak=passed, useref-dead-store=passed, fetch-redirect-guard=passed, response-body-buffering=passed, svg-content-type=passed, conditional-mode-exclusion=passed, join-separator-inconsistency=passed, prompt-injection-guard=passed, asymmetric-guard=passed, unsafe-json-cast=passed, storage-unsafe-cast=passed, markdown-single-line-interpolation=passed, postmessage-origin-guard=passed, css-iframe-scope=passed, markdown-entry-completeness=passed, python-set-duplicate=passed, state-setter-symmetry=passed, changelog-sibling-truncation=passed, ternary-exhaustiveness=passed, exclusive-output-constraint=passed, nullish-fallback-regression=passed, shell-pipefail=passed, vbrief-acceptance-contradiction=passed, css-property-diff=passed, go-sync-call-labeled-background=passed, prompt-guardrail-conflict=passed, prompt-identity-duplication=passed, asymmetric-truncation=passed, claim-source-tracing=passed, go-duplicate-event-publish=passed, go-create-without-cleanup=passed, go-find-then-create-without-cleanup=passed, go-persist-without-validate=passed, ts-put-without-get=passed, go-fetch-id-without-liveness=passed, go-event-subscribe-without-publish=passed, go-log-aggregation-run-scoping=passed, falsy-string-fallback=passed, useeffect-unstable-prop-dep=passed, unused-state-read=passed, blob-mime-mismatch=passed, parseint-nan-guard=passed, shared-state-across-map=passed, context-menu-click-guard=passed, touch-action-ancestor=passed, usestate-innerwidth-matchmedia=passed, prefix-match-loop=passed, hardcoded-new-field=passed, enum-subset-completeness=passed, optional-guard-fallthrough=passed, html-template-token=passed, label-association=passed, empty-src-img=passed, jsx-prose-link-mismatch=passed, try-catch-scope=passed, viewport-meta-accessibility=passed, go-github-api-response-id=passed, go-github-api-pagination=passed, go-gorm-first-without-errrecordnotfound=passed, fetch-cache-consistency=passed, oauth-session-state-binding=passed, go-switch-exhaustiveness=passed, go-test-mutex-asymmetry=passed, nextjs-suspense-boundary=passed, nullable-nested-response=passed, nullish-coalesce-empty-url=passed, asymmetric-callback-state-reset=passed, go-docstring-contract-mismatch=passed, replace-dollar-pattern=passed, conditional-fallthrough-gap=passed, sanitization-completeness=passed, bare-selector-fallback=passed, sanitization-context-mismatch=passed, json-escape-completeness=passed, catch-block-guard-parity=passed, early-exit-guard-subset=passed, html-escape-context-collision=passed, cross-file-inline-duplication=passed, collection-gate-ordering=passed, regex-denylist-anchor-gap=passed, handler-validation-symmetry=passed, go-http-handler-body-persist-without-authz=passed, go-first-element-without-disambiguation=passed, ternary-wrapper-asymmetry=passed, promise-then-without-outer-catch=passed, effect-persist-hydration-race=passed, css-animation-ref=passed, idb-open-lifecycle=passed, interactive-role-mismatch=passed, array-duplicate-field=passed, mid-file-static-import=passed, changelog-section-deletion=passed, comment-anchored-regex=passed, go-sprintf-json-body=passed, observer-boundary-mismatch=passed, hook-return-shape-mismatch=passed, raw-vs-effective-state=passed, unstable-mapped-key=passed, parallel-state-init-divergence=passed, value-callback-prop-coherence=passed, cap-expansion-order=passed, cross-file-comment-claim=passed, useeffect-cleanup=passed, filter-ratio-threshold=passed, setter-argument-asymmetry=passed, panel-scoped-notification=passed, unawaited-async-dependency=passed, prompt-html-anti-pattern=passed, go-empty-collection-write-guard=passed, go-inconsistent-error-wrapping=passed, sentinel-substring-guard=passed, hardcoded-color-in-themed-context=passed, modal-escape-handler=passed, property-read-without-write-path=passed, iframe-nav-intercept-completeness=passed, tagname-case-sensitivity=passed, guard-clause-subsumption=passed, effect-cleanup-race=passed, style-template-injection=passed, textarea-min-height=passed, greedy-lookahead-futility=passed, window-open-null-guard=passed, orphaned-ambient-declaration=passed, char-ordinal-bounds=passed, stale-ref-callback-race=passed, missing-init-check=passed, stderr-redirect=passed, gitignore-tracked-file=passed, eager-defeats-lazy-import=passed, redundant-call-in-scope=passed, test-source-list-diff=passed, mixed-dict-access-pattern=passed, md-fragile-regex-lookahead=passed, misleading-none-branch=passed, discarded-validation-return=passed, loopback-range=passed, trust-proxy=passed, fly-toml-schema=passed, dockerfile-copy-shell-op=passed, dockerfile-build-secret=passed, string-dispatch=passed, python-toctou-file-lock=passed, python-non-reentrant-lock=passed, go-sibling-handler-guard=passed, stale-test-assertion=passed, go-batch-response-counter=passed, go-single-status-error-handler=passed, go-base64-body-size-mismatch=passed, dict-write-lookup-asymmetry=passed, identical-branch=passed, postmessage-targetorigin-regression=passed, react-namespace-import=passed, comment-payload-contradiction=passed, conditional-gating-dead-path=passed, go-mock-interface-completeness=passed, toggle-setter-mismatch=passed, localhost-in-allowlist=passed, unawaited-waitfor=passed, cli-example-validator=passed, python-tz-comparison-asymmetry=passed, missing-wildcard-guard=passed, react-ref-hydration-trigger=passed, react-unused-callback-dep=passed, scope-intent-mismatch=passed, supabase-join-path-mismatch=passed, incomplete-optional-property-guard=passed, retry-reenqueue-without-guard=passed, stale-self-call-in-callback=passed, python-weak-substring-match=passed, python-docstring-class-ref=passed, python-unused-subprocess-output=passed, python-narrow-exception-handler=passed, usememo-missing-dep=passed, localstorage-stale-cache=passed, localstorage-scope=passed, dead-action-variant=passed, switch-param-forwarding-gap=passed, changelog-entry-style=passed, vbrief-edge-completeness=passed, pr-body-vbrief-scope=passed, abort-signal-timeout-guard=passed, whitespace-control-char=passed, transient-error-permanent-state=passed, unused-variable=passed, postmessage-source-null-check=passed, atob-encoding-check=passed, phantom-identity-fallback-check=passed, workflow-comment-secret=passed, rls-circular-dep=passed, writable-stream-abort=passed, error-type-shadowing=passed, unguarded-iteration-component=passed, ci-checksum-provenance=passed, graph-incompleteness=skipped, graph-callsite-not-updated=skipped, orphaned-module=skipped, graph-validation-gap=skipped, lockfile-version-suppression=passed
• Embedding index:
  22/22 ok

  attempted=22 succeeded=22 failed=0 pooled=0

Suggested verification

• (agent) Spot-check the highest-risk changed files and confirm the clean review did not skip relevant files or context.
• (static) Review 2 deterministic/static finding(s) included in the evidence set.

Agent verification brief

• PR/CR: deftai/directive#1371
• Head SHA: 06919fcba79c6b718333034c74959f280ad77f29
• Decision: approve
• Highest-risk claims: none
• Reviewed files: AGENTS.md, CHANGELOG.md, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/content/test_agents_entry_contract.py, tests/content/test_story_start_gate.py, vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json
• Skipped files: none
• Evidence sources: static analysis, call graph/blast radius, vector context, deterministic checks
• Known blind spots: none recorded

Decision: approve
Merge impact: non-blocking
Review confidence: 0.59
Decision confidence: 0.59
Finding confidence: n/a
Reason: No findings survived validation and all configured analysis completed.
Important files: 8 changed file(s) reviewed; no finding hotspots identified.
Review scope: 8 files, 227 additions, 22 deletions

_{slizard v0.3.865}

[MScottAdams]

Approving the substance of this PR -- the gate's safety properties are right. Filing one small request-change to prevent a runtime impediment to active swarm work before merge.

Why this carve-out is needed

The new Story Start Gate language in skills/deft-directive-build/SKILL.md Step 0 -- specifically "Resolve exactly one target story vBRIEF path by default. Batching multiple stories in one branch/PR requires explicit operator approval and a short rationale recorded in the handoff" -- has a runtime failure mode in the swarm-dispatched case.

Trace: swarm monitor allocates a 5-story cohort to one agent (the swarm skill's documented norm per Phase 0 Step 3); agent dispatches, reads the build skill at Step 0, sees the one-story default + batching-needs-approval bullet, and pauses to ask the parent for explicit batching approval. That triggers exactly the mid-scope user-approval failure mode documented at AGENTS.md ## Multi-agent orchestration discipline (#954):

"workers MUST be all-or-nothing on their dispatch envelope. Mid-scope user-approval gates require two separate dispatches... A worker that finishes its tool loop while emitting a 'paused, awaiting reply' status message will be observed as succeeded (terminal) by the platform; its agent_id then becomes unreachable and reply messages have no live runtime to deliver to."

The agent terminates as succeeded-while-paused, its agent_id becomes unreachable, and the remaining 4 stories in the cohort are stranded. The framework is in active swarm mode right now (Wave 1-3 of #1166 just landed via #1364/#1366/#1368/#1369); next cohort dispatch will hit this.

The fix is two bullets that name the approved Phase 5 allocation plan as the satisfaction mechanism for "explicit operator approval and a short rationale recorded in the handoff." Suggested inline below.

What's in scope vs deferred

This PR (after the carve-out lands):

• Prose-tier Story Start Gate (your work -- keep)
• Prose-tier swarm-cohort dispatch carve-out (the two new bullets -- small ask)

Deferred to #1378 (filed; depends on this PR merging):

• First-class ## Allocation context field in templates/agent-prompt-preamble.md (structural schema)
• Build skill recognition of the structured field as the canonical consent token
• Deterministic-tier elevation: scripts/preflight_story_start.py + task verify:story-ready as Gate 0 of the pre-start_agent gate stack

The structural piece intentionally doesn't live in #1371 because the dispatch envelope schema decision shouldn't be made under this PR's time pressure, and #1371's prose carve-out IS the design surface #1378 elevates. Reading the merged carve-out wording will be #1378's first task.

The ask

Two new bullets, mirrored across three files per the #1309 propagation discipline. Suggestion blocks inline below for one-click apply. Test additions to tests/content/test_story_start_gate.py also suggested to lock the new contract at the same prose-tier as the existing Story Start Gate bullets.

[deft-slizard]

⚠️ Superseded by a newer SLizard review

⚠️ Superseded by a newer SLizard review

Machine-readable verdict

{
  "slizard_verdict": {
    "schema_version": 1,
    "decision": "approve",
    "severity": {
      "P0": 0,
      "P1": 0,
      "P2": 0,
      "P3": 0
    },
    "confidence": 0.7401,
    "decision_confidence": 0.7401,
    "finding_count": 0,
    "merge_impact": "non-blocking",
    "version": "slizard v0.3.951",
    "analysis_outcome": "clean_with_rationale",
    "head_sha": "b95364301d44764712204223fc98886813745755"
  }
}

**SLizard Review** — 0 findings across 8 file(s)

No issues detected. Code looks clean based on completed analysis passes.

Clean-review rationale:

• Changed invariant: Agent operational guidelines and preflight checks have been updated to include stricter git status verification before implementation, and refined rules for agent-story allocation. The changelog also reflects a previous fix.
• Preserved behavior: AGENTS.md (AGENTS.md:100): The core mechanism for skill triggering remains unchanged, with updates clarifying preflight intent gate documentation.; CHANGELOG.md (CHANGELOG.md:37): The changelog accurately reflects a previously merged fix, preserving historical accuracy.; skills/deft-directive-build/SKILL.md (skills/deft-directive-build/SKILL.md:21): The fundamental sequence and purpose of implementation preflight (Step 0) are preserved, with added steps for git status checks enhancing robustness.; skills/deft-directive-swarm/SKILL.md (skills/deft-directive-swarm/SKILL.md:196): The general principle of allocating vBRIEFs to agents based on scope is preserved, with a refinement to batching small stories requiring explicit operator approval.; templates/agents-entry.md (templates/agents-entry.md:121): The high-level description of the Implementation Intent Gate remains consistent, with minor textual adjustments to its explanation.
• Tests reviewed: n/a
• Residual advisory gaps: While the documentation updates enhance agent guidance, the effectiveness relies on agent adherence and the monitoring of these new directives.; The truncated lines in AGENTS.md (The helpe) and templates/agents-entry.md (candidate vBRI) are minor formatting inconsistencies that do not impact the logical correctness or primary purpose of the documentation changes, but could be tidied up for aesthetic completeness.

Deterministic checks: passed — vBRIEF traceability checks passed.

Review coverage

• Reviewed files: AGENTS.md, CHANGELOG.md, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/content/test_agents_entry_contract.py, tests/content/test_story_start_gate.py, vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json
• Skipped files: none
• Source: github @ b95364301d44

Context used

• Static findings: 1
• Static tools: description-diff-consistency
• Graph/blast radius: 22 changed node(s), 10 affected node(s)
• Vector context chunks: 9
• Context availability: full
• Review categories: default
• Deterministic checks:
  353/358 passed, 5 failed: description-diff-consistency, graph-incompleteness, graph-callsite-not-updated, orphaned-module, graph-validation-gap

  vbrief-traceability=passed, markdown-fences=passed, unused-exports=passed, query-docstring=passed, xss-sprintf=passed, markdown-xref=passed, aria-target=passed, semantic-role=passed, aria-containment=passed, redundant-assertion=passed, tautological-assertion=passed, resource-lifecycle=passed, cross-diff-consistency=passed, redundant-css-block=passed, template-placeholder=passed, void-async-signal=passed, spread-override=passed, json-indent-consistency=passed, dep-swap=passed, powershell-scoping=passed, diff-truncation=passed, exception-type-contract=passed, dead-none-guard=passed, access-declaration=passed, unused-option=passed, css-property-interaction=passed, jsx-style-indent=passed, regex-breadth=passed, cartesian-fan-out=passed, exec-stdout-parse=passed, sentinel-error-wiring=passed, hardcoded-filemode=passed, api-response-shape=passed, python-cli-arg=passed, taskfile-namespace=passed, vbrief-schema=passed, go-shell-injection=passed, go-discarded-error=passed, go-json-field-exposure=passed, go-mutable-exported-slice=passed, go-silent-error-branch=passed, go-comment-log-contradiction=passed, go-unconditional-message=passed, inline-style-proliferation=passed, unnecessary-nonnull-assertion=passed, double-cast=passed, unguarded-await-cast=passed, ssrf-guard-completeness=passed, error-message-leak=passed, puppeteer-resource-cap=passed, trivial-argument=passed, unused-imports=passed, dead-store=passed, phantom-import=passed, fetch-timeout-guard=passed, log-level-expected-path=passed, unified-diff-construction=passed, sentinel-index-assertion=passed, unguarded-map-lookup=passed, unbounded-prompt-injection=passed, description-diff-consistency=failed, render-branch-symmetry=passed, go-gorm-unchained-error=passed, go-gorm-rowsaffected-noop=passed, error-handling-loop-break=passed, sync-state-batching=passed, sync-revoke-object-url=passed, go-like-wildcard-injection=passed, go-basename-dedup-gap=passed, go-missing-seed-in-migrate=passed, go-write-then-read-unfiltered=passed, go-direct-db-access=passed, async-handler-try-catch=passed, chat-sdk-history=passed, dead-code-ternary=passed, go-context-background=passed, go-git-arg-order=passed, go-n-plus-one=passed, go-nested-transaction=passed, go-ref-injection=passed, go-scanner-error=passed, go-toctou-db=passed, go-unused-validated-field=passed, hardcoded-literal=passed, hardcoded-undefined-field=passed, python-exception=passed, python-path-construction=passed, python-isdigit-int=passed, deprecated-python-utcnow=passed, python-variable-shadow=passed, frozen-dataclass-mutable-field=passed, sentinel-value=passed, sibling-constant=passed, url-interpolation=passed, jsx-guard-removal=passed, asymmetric-clamp=passed, optional-prop-guard=passed, server-lifecycle=passed, go-asymmetric-org-scope=passed, fetch-body-scope-omission=passed, regex-breadth-inconsistency=passed, typeof-object-array-guard=passed, test-production-divergence=passed, argument-axis-mismatch=passed, click-propagation-gap=passed, sanitization-gap=passed, response-shape-consistency=passed, keydown-target-guard=passed, changelog-test-count=passed, unbounded-metadata-assignment=passed, unchecked-json-response=passed, response-body-leak=passed, json-syntax=passed, requestid-route-param=passed, dict-key-as-value=passed, redundant-transitive-call=passed, incomplete-iteration=passed, call-site-parameter-consistency=passed, markdown-heading-level=passed, cross-section-order-contradiction=passed, dangling-reference=passed, useref-dead-store=passed, fetch-redirect-guard=passed, response-body-buffering=passed, svg-content-type=passed, conditional-mode-exclusion=passed, join-separator-inconsistency=passed, prompt-injection-guard=passed, asymmetric-guard=passed, unsafe-json-cast=passed, storage-unsafe-cast=passed, markdown-single-line-interpolation=passed, postmessage-origin-guard=passed, css-iframe-scope=passed, markdown-entry-completeness=passed, python-set-duplicate=passed, state-setter-symmetry=passed, changelog-sibling-truncation=passed, ternary-exhaustiveness=passed, exclusive-output-constraint=passed, nullish-fallback-regression=passed, shell-pipefail=passed, vbrief-acceptance-contradiction=passed, css-property-diff=passed, go-sync-call-labeled-background=passed, prompt-guardrail-conflict=passed, prompt-identity-duplication=passed, asymmetric-truncation=passed, claim-source-tracing=passed, go-duplicate-event-publish=passed, go-create-without-cleanup=passed, go-find-then-create-without-cleanup=passed, go-persist-without-validate=passed, ts-put-without-get=passed, go-fetch-id-without-liveness=passed, go-event-subscribe-without-publish=passed, go-log-aggregation-run-scoping=passed, falsy-string-fallback=passed, useeffect-unstable-prop-dep=passed, unused-state-read=passed, blob-mime-mismatch=passed, parseint-nan-guard=passed, shared-state-across-map=passed, context-menu-click-guard=passed, touch-action-ancestor=passed, usestate-innerwidth-matchmedia=passed, prefix-match-loop=passed, hardcoded-new-field=passed, enum-subset-completeness=passed, optional-guard-fallthrough=passed, html-template-token=passed, label-association=passed, empty-src-img=passed, jsx-prose-link-mismatch=passed, try-catch-scope=passed, viewport-meta-accessibility=passed, go-github-api-response-id=passed, go-github-api-pagination=passed, go-gorm-first-without-errrecordnotfound=passed, fetch-cache-consistency=passed, oauth-session-state-binding=passed, go-switch-exhaustiveness=passed, go-test-mutex-asymmetry=passed, nextjs-suspense-boundary=passed, nullable-nested-response=passed, nullish-coalesce-empty-url=passed, asymmetric-callback-state-reset=passed, go-docstring-contract-mismatch=passed, replace-dollar-pattern=passed, conditional-fallthrough-gap=passed, sanitization-completeness=passed, bare-selector-fallback=passed, sanitization-context-mismatch=passed, json-escape-completeness=passed, catch-block-guard-parity=passed, early-exit-guard-subset=passed, html-escape-context-collision=passed, cross-file-inline-duplication=passed, collection-gate-ordering=passed, regex-denylist-anchor-gap=passed, handler-validation-symmetry=passed, go-http-handler-body-persist-without-authz=passed, go-first-element-without-disambiguation=passed, ternary-wrapper-asymmetry=passed, promise-then-without-outer-catch=passed, effect-persist-hydration-race=passed, css-animation-ref=passed, idb-open-lifecycle=passed, interactive-role-mismatch=passed, array-duplicate-field=passed, mid-file-static-import=passed, changelog-section-deletion=passed, comment-anchored-regex=passed, go-sprintf-json-body=passed, observer-boundary-mismatch=passed, hook-return-shape-mismatch=passed, raw-vs-effective-state=passed, unstable-mapped-key=passed, parallel-state-init-divergence=passed, value-callback-prop-coherence=passed, cap-expansion-order=passed, cross-file-comment-claim=passed, useeffect-cleanup=passed, filter-ratio-threshold=passed, setter-argument-asymmetry=passed, panel-scoped-notification=passed, unawaited-async-dependency=passed, prompt-html-anti-pattern=passed, go-empty-collection-write-guard=passed, go-inconsistent-error-wrapping=passed, sentinel-substring-guard=passed, hardcoded-color-in-themed-context=passed, modal-escape-handler=passed, property-read-without-write-path=passed, iframe-nav-intercept-completeness=passed, tagname-case-sensitivity=passed, guard-clause-subsumption=passed, effect-cleanup-race=passed, style-template-injection=passed, textarea-min-height=passed, greedy-lookahead-futility=passed, window-open-null-guard=passed, orphaned-ambient-declaration=passed, char-ordinal-bounds=passed, stale-ref-callback-race=passed, missing-init-check=passed, stderr-redirect=passed, gitignore-tracked-file=passed, eager-defeats-lazy-import=passed, redundant-call-in-scope=passed, test-source-list-diff=passed, mixed-dict-access-pattern=passed, md-fragile-regex-lookahead=passed, misleading-none-branch=passed, discarded-validation-return=passed, loopback-range=passed, trust-proxy=passed, fly-toml-schema=passed, dockerfile-copy-shell-op=passed, dockerfile-build-secret=passed, string-dispatch=passed, python-toctou-file-lock=passed, python-non-reentrant-lock=passed, go-sibling-handler-guard=passed, stale-test-assertion=passed, go-batch-response-counter=passed, go-single-status-error-handler=passed, go-base64-body-size-mismatch=passed, dict-write-lookup-asymmetry=passed, identical-branch=passed, postmessage-targetorigin-regression=passed, react-namespace-import=passed, comment-payload-contradiction=passed, conditional-gating-dead-path=passed, go-mock-interface-completeness=passed, toggle-setter-mismatch=passed, localhost-in-allowlist=passed, unawaited-waitfor=passed, cli-example-validator=passed, python-tz-comparison-asymmetry=passed, missing-wildcard-guard=passed, react-ref-hydration-trigger=passed, react-unused-callback-dep=passed, scope-intent-mismatch=passed, supabase-join-path-mismatch=passed, incomplete-optional-property-guard=passed, retry-reenqueue-without-guard=passed, stale-self-call-in-callback=passed, empty-body-control-flow=passed, self-increment-comparison=passed, sequential-replace-dedup=passed, breaking-export-removal=passed, vacuous-test-assertion=passed, silent-fallible-coalesce=passed, dual-threshold-warning=passed, unresolved-relative-import=passed, coalescing-callback-dispatch=passed, removed-event-propagation-stopper=passed, jsx-inline-style-scope-leak=passed, hook-after-early-return=passed, fs-access-overwrite=passed, type-import-divergence=passed, conditional-state-no-clear=passed, gated-operation-silent-persist=passed, python-weak-substring-match=passed, python-docstring-class-ref=passed, python-unused-subprocess-output=passed, python-narrow-exception-handler=passed, usememo-missing-dep=passed, localstorage-stale-cache=passed, localstorage-scope=passed, dead-action-variant=passed, switch-param-forwarding-gap=passed, changelog-entry-style=passed, vbrief-edge-completeness=passed, pr-body-vbrief-scope=passed, abort-signal-timeout-guard=passed, whitespace-control-char=passed, transient-error-permanent-state=passed, unused-variable=passed, postmessage-source-null-check=passed, atob-encoding-check=passed, phantom-identity-fallback-check=passed, workflow-comment-secret=passed, rls-circular-dep=passed, writable-stream-abort=passed, error-type-shadowing=passed, unguarded-iteration-component=passed, ci-checksum-provenance=passed, react-error-cache-nav-reset=passed, shell-injection-template=passed, flag-reset=passed, excess-property=passed, timestamp-sanitization-reuse=passed, boolean-null-guard=passed, catch-typeof-swallow=passed, optional-strict-compare=passed, leaked-debug-text=passed, inconsistent-component-import=passed, wrong-domain-copy=passed, unconditional-lfs-filter=passed, toml-config-injection=passed, dead-popen-timeout-except=passed, python-unused-local=passed, async-event-lock-no-recovery=passed, webkit-cancel-compat=passed, dom-cleanup-racing-interaction=passed, nonstandard-code-fence=passed, vba-value2-single-cell=passed, vba-doc-error-handler=passed, officejs-doc-sync-batching=passed, regex-word-boundary-method-name=passed, sliding-window-dedup=passed, graph-incompleteness=skipped, graph-callsite-not-updated=skipped, orphaned-module=skipped, graph-validation-gap=skipped, lockfile-version-suppression=passed
• Embedding index:
  22/22 ok

  attempted=22 succeeded=22 failed=0 pooled=0

Suggested verification

• (agent) Spot-check the highest-risk changed files and confirm the clean review did not skip relevant files or context.
• (static) Review 1 deterministic/static finding(s) included in the evidence set.

Agent verification brief

• PR/CR: deftai/directive#1371
• Head SHA: b95364301d44764712204223fc98886813745755
• Decision: approve
• Highest-risk claims: none
• Reviewed files: AGENTS.md, CHANGELOG.md, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/content/test_agents_entry_contract.py, tests/content/test_story_start_gate.py, vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json
• Skipped files: none
• Evidence sources: static analysis, call graph/blast radius, vector context, deterministic checks
• Known blind spots: none recorded

Decision: approve
Merge impact: non-blocking
Review confidence: 0.74
Decision confidence: 0.74
Finding confidence: n/a
Reason: No findings survived validation and all configured analysis completed.
Important files: 8 changed file(s) reviewed; no finding hotspots identified.
Review scope: 8 files, 237 additions, 23 deletions

_{slizard v0.3.951}

[deft-slizard]

⚠️ Superseded by a newer SLizard review

Machine-readable verdict

{
  "slizard_verdict": {
    "schema_version": 1,
    "decision": "comment",
    "severity": {
      "P0": 0,
      "P1": 0,
      "P2": 0,
      "P3": 0
    },
    "confidence": 0.551,
    "decision_confidence": 0.551,
    "finding_count": 0,
    "merge_impact": "non-blocking",
    "version": "slizard v0.3.951",
    "head_sha": "7fd6f7c8566c503ae6f2542e98a2f869899b0f9d"
  }
}

**SLizard Review** — [low-signal review] 0 finding(s) across 0 file(s); 1 advisory note(s)

P2 · AGENTS.md:103 · confidence 0.75

Clean-review gap references vbrief, preflight, script, scripts, preflight_implementation, updated, require, directly as unverified, but 8 of these symbols appear in the diff (first at AGENTS.md:103). The gap claimed: "While the documentation for vbrief:preflight has been clarified, the actual script scripts/preflight_implementation.py was not part of this diff. Ensuring the script's behavior perfectly matches t…". Contradicted by diff content.

Blast radius graph (32 nodes)

%%{init: {'flowchart': {'rankSpacing': 30, 'nodeSpacing': 20}}}%%
graph TD
  tests_content_test_agents_entry_contract_py__read_template["🔴 _read_template"]
  tests_content_test_agents_entry_contract_py__read_spec["🔴 _read_spec"]
  tests_content_test_agents_entry_contract_py_test_template_exists_at_expected_path["🔴 test_template_exists_at_expected_path"]
  tests_content_test_agents_entry_contract_py_test_template_carries_open_marker["🔴 test_template_carries_open_marker"]
  tests_content_test_agents_entry_contract_py_test_template_carries_close_marker["🔴 test_template_carries_close_marker"]
  tests_content_test_agents_entry_contract_py_test_open_marker_precedes_close_marker["🔴 test_open_marker_precedes_close_marker"]
  tests_content_test_agents_entry_contract_py_test_placeholder_spec_file_exists["🔴 test_placeholder_spec_file_exists"]
  tests_content_test_agents_entry_contract_py_test_placeholder_spec_documents_known_tokens["🔴 test_placeholder_spec_documents_known_tokens"]
  tests_content_test_agents_entry_contract_py_test_template_uses_only_documented_tokens["🔴 test_template_uses_only_documented_tokens"]
  tests_content_test_agents_entry_contract_py_test_render_managed_section_extracts_bracketed_block["🔴 test_render_managed_section_extracts_bracketed_block"]
  tests_content_test_agents_entry_contract_py_test_render_is_byte_stable["🔴 test_render_is_byte_stable"]
  tests_content_test_agents_entry_contract_py__managed_section_text["🔴 _managed_section_text"]
  tests_content_test_agents_entry_contract_py_test_managed_section_contains_implementation_intent_gate_anchor["🔴 test_managed_section_contains_implementation_intent_gate_anchor"]
  tests_content_test_agents_entry_contract_py_test_managed_section_implementation_intent_gate_has_four_bullets["🔴 test_managed_section_implementation_intent_gate_has_four_bullets"]
  tests_content_test_agents_entry_contract_py_test_managed_section_implementation_intent_gate_uses_required_tokens["🔴 test_managed_section_implementation_intent_gate_uses_required_tokens"]
  tests_content_test_agents_entry_contract_py__normalize_whitespace["🔴 _normalize_whitespace"]
  tests_content_test_agents_entry_contract_py__read_agents_md["🔴 _read_agents_md"]
  tests_content_test_agents_entry_contract_py__missing_markers["🔴 _missing_markers"]
  tests_content_test_agents_entry_contract_py_test_propagation_command_markers_present_in_both_files["🔴 test_propagation_command_markers_present_in_both_files"]
  tests_content_test_agents_entry_contract_py_test_propagation_policy_key_markers_present_in_both_files["🔴 test_propagation_policy_key_markers_present_in_both_files"]
  tests_content_test_agents_entry_contract_py_test_propagation_header_markers_present_in_both_files["🔴 test_propagation_header_markers_present_in_both_files"]
  tests_content_test_agents_entry_contract_py_test_propagation_action_verb_list_present_in_both_files["🔴 test_propagation_action_verb_list_present_in_both_files"]
  tests_content_test_agents_entry_contract_py_test_template_carries_open_marker --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_template_carries_close_marker --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_open_marker_precedes_close_marker --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_placeholder_spec_documents_known_tokens --> tests_content_test_agents_entry_contract_py__read_spec
  tests_content_test_agents_entry_contract_py_test_template_uses_only_documented_tokens --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_template_uses_only_documented_tokens --> tests_content_test_agents_entry_contract_py__read_spec
  tests_content_test_agents_entry_contract_py_test_render_managed_section_extracts_bracketed_block --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_render_is_byte_stable --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py__managed_section_text --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_managed_section_contains_implementation_intent_gate_anchor --> tests_content_test_agents_entry_contract_py__managed_section_text
  tests_content_test_agents_entry_contract_py_test_managed_section_implementation_intent_gate_has_four_bullets --> tests_content_test_agents_entry_contract_py__managed_section_text
  tests_content_test_agents_entry_contract_py_test_managed_section_implementation_intent_gate_uses_required_tokens --> tests_content_test_agents_entry_contract_py__managed_section_text
  tests_content_test_agents_entry_contract_py__missing_markers --> tests_content_test_agents_entry_contract_py__normalize_whitespace
  tests_content_test_agents_entry_contract_py_test_propagation_command_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_propagation_command_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__read_agents_md
  tests_content_test_agents_entry_contract_py_test_propagation_command_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__missing_markers
  tests_content_test_agents_entry_contract_py_test_propagation_policy_key_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_propagation_policy_key_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__read_agents_md
  tests_content_test_agents_entry_contract_py_test_propagation_policy_key_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__missing_markers
  tests_content_test_agents_entry_contract_py_test_propagation_header_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_propagation_header_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__read_agents_md
  tests_content_test_agents_entry_contract_py_test_propagation_header_markers_present_in_both_files --> tests_content_test_agents_entry_contract_py__missing_markers
  tests_content_test_agents_entry_contract_py_test_propagation_action_verb_list_present_in_both_files --> tests_content_test_agents_entry_contract_py__read_template
  tests_content_test_agents_entry_contract_py_test_propagation_action_verb_list_present_in_both_files --> tests_content_test_agents_entry_contract_py__read_agents_md
  tests_content_test_agents_entry_contract_py_test_propagation_action_verb_list_present_in_both_files --> tests_content_test_agents_entry_contract_py__missing_markers
  %% 10 additional affected node(s) omitted for diagram size

Loading

Review coverage

• Reviewed files: AGENTS.md, CHANGELOG.md, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/content/test_agents_entry_contract.py, tests/content/test_story_start_gate.py, vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json
• Skipped files: none
• Source: github @ 7fd6f7c8566c

Context used

• Static findings: 1
• Static tools: description-diff-consistency
• Graph/blast radius: 22 changed node(s), 10 affected node(s)
• Vector context chunks: 9
• Context availability: full
• Review categories: default
• Deterministic checks:
  353/358 passed, 5 failed: description-diff-consistency, graph-incompleteness, graph-callsite-not-updated, orphaned-module, graph-validation-gap

  vbrief-traceability=passed, markdown-fences=passed, unused-exports=passed, query-docstring=passed, xss-sprintf=passed, markdown-xref=passed, aria-target=passed, semantic-role=passed, aria-containment=passed, redundant-assertion=passed, tautological-assertion=passed, resource-lifecycle=passed, cross-diff-consistency=passed, redundant-css-block=passed, template-placeholder=passed, void-async-signal=passed, spread-override=passed, json-indent-consistency=passed, dep-swap=passed, powershell-scoping=passed, diff-truncation=passed, exception-type-contract=passed, dead-none-guard=passed, access-declaration=passed, unused-option=passed, css-property-interaction=passed, jsx-style-indent=passed, regex-breadth=passed, cartesian-fan-out=passed, exec-stdout-parse=passed, sentinel-error-wiring=passed, hardcoded-filemode=passed, api-response-shape=passed, python-cli-arg=passed, taskfile-namespace=passed, vbrief-schema=passed, go-shell-injection=passed, go-discarded-error=passed, go-json-field-exposure=passed, go-mutable-exported-slice=passed, go-silent-error-branch=passed, go-comment-log-contradiction=passed, go-unconditional-message=passed, inline-style-proliferation=passed, unnecessary-nonnull-assertion=passed, double-cast=passed, unguarded-await-cast=passed, ssrf-guard-completeness=passed, error-message-leak=passed, puppeteer-resource-cap=passed, trivial-argument=passed, unused-imports=passed, dead-store=passed, phantom-import=passed, fetch-timeout-guard=passed, log-level-expected-path=passed, unified-diff-construction=passed, sentinel-index-assertion=passed, unguarded-map-lookup=passed, unbounded-prompt-injection=passed, description-diff-consistency=failed, render-branch-symmetry=passed, go-gorm-unchained-error=passed, go-gorm-rowsaffected-noop=passed, error-handling-loop-break=passed, sync-state-batching=passed, sync-revoke-object-url=passed, go-like-wildcard-injection=passed, go-basename-dedup-gap=passed, go-missing-seed-in-migrate=passed, go-write-then-read-unfiltered=passed, go-direct-db-access=passed, async-handler-try-catch=passed, chat-sdk-history=passed, dead-code-ternary=passed, go-context-background=passed, go-git-arg-order=passed, go-n-plus-one=passed, go-nested-transaction=passed, go-ref-injection=passed, go-scanner-error=passed, go-toctou-db=passed, go-unused-validated-field=passed, hardcoded-literal=passed, hardcoded-undefined-field=passed, python-exception=passed, python-path-construction=passed, python-isdigit-int=passed, deprecated-python-utcnow=passed, python-variable-shadow=passed, frozen-dataclass-mutable-field=passed, sentinel-value=passed, sibling-constant=passed, url-interpolation=passed, jsx-guard-removal=passed, asymmetric-clamp=passed, optional-prop-guard=passed, server-lifecycle=passed, go-asymmetric-org-scope=passed, fetch-body-scope-omission=passed, regex-breadth-inconsistency=passed, typeof-object-array-guard=passed, test-production-divergence=passed, argument-axis-mismatch=passed, click-propagation-gap=passed, sanitization-gap=passed, response-shape-consistency=passed, keydown-target-guard=passed, changelog-test-count=passed, unbounded-metadata-assignment=passed, unchecked-json-response=passed, response-body-leak=passed, json-syntax=passed, requestid-route-param=passed, dict-key-as-value=passed, redundant-transitive-call=passed, incomplete-iteration=passed, call-site-parameter-consistency=passed, markdown-heading-level=passed, cross-section-order-contradiction=passed, dangling-reference=passed, useref-dead-store=passed, fetch-redirect-guard=passed, response-body-buffering=passed, svg-content-type=passed, conditional-mode-exclusion=passed, join-separator-inconsistency=passed, prompt-injection-guard=passed, asymmetric-guard=passed, unsafe-json-cast=passed, storage-unsafe-cast=passed, markdown-single-line-interpolation=passed, postmessage-origin-guard=passed, css-iframe-scope=passed, markdown-entry-completeness=passed, python-set-duplicate=passed, state-setter-symmetry=passed, changelog-sibling-truncation=passed, ternary-exhaustiveness=passed, exclusive-output-constraint=passed, nullish-fallback-regression=passed, shell-pipefail=passed, vbrief-acceptance-contradiction=passed, css-property-diff=passed, go-sync-call-labeled-background=passed, prompt-guardrail-conflict=passed, prompt-identity-duplication=passed, asymmetric-truncation=passed, claim-source-tracing=passed, go-duplicate-event-publish=passed, go-create-without-cleanup=passed, go-find-then-create-without-cleanup=passed, go-persist-without-validate=passed, ts-put-without-get=passed, go-fetch-id-without-liveness=passed, go-event-subscribe-without-publish=passed, go-log-aggregation-run-scoping=passed, falsy-string-fallback=passed, useeffect-unstable-prop-dep=passed, unused-state-read=passed, blob-mime-mismatch=passed, parseint-nan-guard=passed, shared-state-across-map=passed, context-menu-click-guard=passed, touch-action-ancestor=passed, usestate-innerwidth-matchmedia=passed, prefix-match-loop=passed, hardcoded-new-field=passed, enum-subset-completeness=passed, optional-guard-fallthrough=passed, html-template-token=passed, label-association=passed, empty-src-img=passed, jsx-prose-link-mismatch=passed, try-catch-scope=passed, viewport-meta-accessibility=passed, go-github-api-response-id=passed, go-github-api-pagination=passed, go-gorm-first-without-errrecordnotfound=passed, fetch-cache-consistency=passed, oauth-session-state-binding=passed, go-switch-exhaustiveness=passed, go-test-mutex-asymmetry=passed, nextjs-suspense-boundary=passed, nullable-nested-response=passed, nullish-coalesce-empty-url=passed, asymmetric-callback-state-reset=passed, go-docstring-contract-mismatch=passed, replace-dollar-pattern=passed, conditional-fallthrough-gap=passed, sanitization-completeness=passed, bare-selector-fallback=passed, sanitization-context-mismatch=passed, json-escape-completeness=passed, catch-block-guard-parity=passed, early-exit-guard-subset=passed, html-escape-context-collision=passed, cross-file-inline-duplication=passed, collection-gate-ordering=passed, regex-denylist-anchor-gap=passed, handler-validation-symmetry=passed, go-http-handler-body-persist-without-authz=passed, go-first-element-without-disambiguation=passed, ternary-wrapper-asymmetry=passed, promise-then-without-outer-catch=passed, effect-persist-hydration-race=passed, css-animation-ref=passed, idb-open-lifecycle=passed, interactive-role-mismatch=passed, array-duplicate-field=passed, mid-file-static-import=passed, changelog-section-deletion=passed, comment-anchored-regex=passed, go-sprintf-json-body=passed, observer-boundary-mismatch=passed, hook-return-shape-mismatch=passed, raw-vs-effective-state=passed, unstable-mapped-key=passed, parallel-state-init-divergence=passed, value-callback-prop-coherence=passed, cap-expansion-order=passed, cross-file-comment-claim=passed, useeffect-cleanup=passed, filter-ratio-threshold=passed, setter-argument-asymmetry=passed, panel-scoped-notification=passed, unawaited-async-dependency=passed, prompt-html-anti-pattern=passed, go-empty-collection-write-guard=passed, go-inconsistent-error-wrapping=passed, sentinel-substring-guard=passed, hardcoded-color-in-themed-context=passed, modal-escape-handler=passed, property-read-without-write-path=passed, iframe-nav-intercept-completeness=passed, tagname-case-sensitivity=passed, guard-clause-subsumption=passed, effect-cleanup-race=passed, style-template-injection=passed, textarea-min-height=passed, greedy-lookahead-futility=passed, window-open-null-guard=passed, orphaned-ambient-declaration=passed, char-ordinal-bounds=passed, stale-ref-callback-race=passed, missing-init-check=passed, stderr-redirect=passed, gitignore-tracked-file=passed, eager-defeats-lazy-import=passed, redundant-call-in-scope=passed, test-source-list-diff=passed, mixed-dict-access-pattern=passed, md-fragile-regex-lookahead=passed, misleading-none-branch=passed, discarded-validation-return=passed, loopback-range=passed, trust-proxy=passed, fly-toml-schema=passed, dockerfile-copy-shell-op=passed, dockerfile-build-secret=passed, string-dispatch=passed, python-toctou-file-lock=passed, python-non-reentrant-lock=passed, go-sibling-handler-guard=passed, stale-test-assertion=passed, go-batch-response-counter=passed, go-single-status-error-handler=passed, go-base64-body-size-mismatch=passed, dict-write-lookup-asymmetry=passed, identical-branch=passed, postmessage-targetorigin-regression=passed, react-namespace-import=passed, comment-payload-contradiction=passed, conditional-gating-dead-path=passed, go-mock-interface-completeness=passed, toggle-setter-mismatch=passed, localhost-in-allowlist=passed, unawaited-waitfor=passed, cli-example-validator=passed, python-tz-comparison-asymmetry=passed, missing-wildcard-guard=passed, react-ref-hydration-trigger=passed, react-unused-callback-dep=passed, scope-intent-mismatch=passed, supabase-join-path-mismatch=passed, incomplete-optional-property-guard=passed, retry-reenqueue-without-guard=passed, stale-self-call-in-callback=passed, empty-body-control-flow=passed, self-increment-comparison=passed, sequential-replace-dedup=passed, breaking-export-removal=passed, vacuous-test-assertion=passed, silent-fallible-coalesce=passed, dual-threshold-warning=passed, unresolved-relative-import=passed, coalescing-callback-dispatch=passed, removed-event-propagation-stopper=passed, jsx-inline-style-scope-leak=passed, hook-after-early-return=passed, fs-access-overwrite=passed, type-import-divergence=passed, conditional-state-no-clear=passed, gated-operation-silent-persist=passed, python-weak-substring-match=passed, python-docstring-class-ref=passed, python-unused-subprocess-output=passed, python-narrow-exception-handler=passed, usememo-missing-dep=passed, localstorage-stale-cache=passed, localstorage-scope=passed, dead-action-variant=passed, switch-param-forwarding-gap=passed, changelog-entry-style=passed, vbrief-edge-completeness=passed, pr-body-vbrief-scope=passed, abort-signal-timeout-guard=passed, whitespace-control-char=passed, transient-error-permanent-state=passed, unused-variable=passed, postmessage-source-null-check=passed, atob-encoding-check=passed, phantom-identity-fallback-check=passed, workflow-comment-secret=passed, rls-circular-dep=passed, writable-stream-abort=passed, error-type-shadowing=passed, unguarded-iteration-component=passed, ci-checksum-provenance=passed, react-error-cache-nav-reset=passed, shell-injection-template=passed, flag-reset=passed, excess-property=passed, timestamp-sanitization-reuse=passed, boolean-null-guard=passed, catch-typeof-swallow=passed, optional-strict-compare=passed, leaked-debug-text=passed, inconsistent-component-import=passed, wrong-domain-copy=passed, unconditional-lfs-filter=passed, toml-config-injection=passed, dead-popen-timeout-except=passed, python-unused-local=passed, async-event-lock-no-recovery=passed, webkit-cancel-compat=passed, dom-cleanup-racing-interaction=passed, nonstandard-code-fence=passed, vba-value2-single-cell=passed, vba-doc-error-handler=passed, officejs-doc-sync-batching=passed, regex-word-boundary-method-name=passed, sliding-window-dedup=passed, graph-incompleteness=skipped, graph-callsite-not-updated=skipped, orphaned-module=skipped, graph-validation-gap=skipped, lockfile-version-suppression=passed
• Embedding index:
  22/22 ok

  attempted=22 succeeded=22 failed=0 pooled=0

Suggested verification

• (agent) Independently inspect each SLizard finding against the referenced file, surrounding code, and linked context before accepting or dismissing it.
• (static) Review 1 deterministic/static finding(s) included in the evidence set.

Agent verification brief

• PR/CR: deftai/directive#1371
• Head SHA: 7fd6f7c8566c503ae6f2542e98a2f869899b0f9d
• Decision: comment
• Highest-risk claims: P2 AGENTS.md:103 residual-gap-contradiction (0.75)
• Reviewed files: AGENTS.md, CHANGELOG.md, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/content/test_agents_entry_contract.py, tests/content/test_story_start_gate.py, vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json
• Skipped files: none
• Evidence sources: static analysis, call graph/blast radius, vector context, deterministic checks
• Known blind spots: none recorded

Decision: comment
Merge impact: non-blocking
Review confidence: 0.55
Decision confidence: 0.55
Finding confidence: n/a
Reason: Findings are advisory under the current severity/confidence policy.
Severity counts: P0: 0, P1: 0, P2: 0, P3: 0
Important files: 8 changed file(s) reviewed; no finding hotspots identified.
Review scope: 8 files, 268 additions, 23 deletions

_{slizard v0.3.951}

[deft-slizard]

Machine-readable verdict

{
  "slizard_verdict": {
    "schema_version": 1,
    "decision": "approve",
    "severity": {
      "P0": 0,
      "P1": 0,
      "P2": 0,
      "P3": 0
    },
    "confidence": 0.5831,
    "decision_confidence": 0.5831,
    "finding_count": 0,
    "merge_impact": "non-blocking",
    "version": "slizard v0.3.951",
    "analysis_outcome": "clean_with_rationale",
    "head_sha": "a686a1a874e26613fcc659f527546aec403809da"
  }
}

**SLizard Review** — 0 findings across 10 file(s)

⚠️ Low-confidence clean review — 0 findings at confidence 0.58 (below 0.60). The reviewer could not confirm whether zero findings reflects clean code or insufficient analytical depth.

Files reviewed:

• AGENTS.md
• CHANGELOG.md
• scripts/preflight_implementation.py
• skills/deft-directive-build/SKILL.md
• skills/deft-directive-swarm/SKILL.md
• templates/agents-entry.md
• tests/cli/test_preflight_implementation.py
• tests/content/test_agents_entry_contract.py
• tests/content/test_story_start_gate.py
• vbrief/completed/2026-05-27-story-start-gate-lifecycle-implementation-contract.vbrief.json

Recommendation: A human reviewer should spot-check the files above, especially those with risk tags.

Re-review context

This is a follow-up review on new commits. Prior review: comment with 0 finding(s) at confidence 0.55.

⚠️ Prior review also found 0 issues at confidence 0.55 — this area may require deeper manual inspection.

Clean-review rationale:

• Changed invariant: The documentation clarifies that preflight_implementation.py is a deterministic, side-effect-free, and path-prefix agnostic structural gate, and that story-workflow controls (like git status) are separate and must run before this helper. The intent gate for implementation now explicitly allows batching of small/independent stories only after explicit operator approval or an approved allocation plan, rather than just grouping them.
• Preserved behavior: AGENTS.md:103: The task vbrief:preflight command remains the required gate before code-writing tools or start_agent dispatch.; AGENTS.md:104: The conditions for vbrief:preflight to exit 0 (vBRIEF in vbrief/active/ AND plan.status == "running") are unchanged.; scripts/preflight_implementation.py:1: The preflight_implementation.py script continues to assert vBRIEF eligibility based on its structural conditions.; skills/deft-directive-build/SKILL.md:23: The requirement to run task vbrief:preflight before any code-writing tool call is maintained.
• Tests reviewed: n/a

Deterministic checks: passed — vBRIEF traceability checks passed.

Review coverage

• Reviewed files: AGENTS.md, CHANGELOG.md, scripts/preflight_implementation.py, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/cli/test_preflight_implementation.py, tests/content/test_agents_entry_contract.py, +2 more
• Skipped files: none
• Source: github @ a686a1a874e2

Context used

• Static findings: 1
• Static tools: description-diff-consistency
• Graph/blast radius: 46 changed node(s), 617 affected node(s)
• Vector context chunks: 12
• Context availability: full
• Review categories: default
• Deterministic checks:
  353/358 passed, 5 failed: description-diff-consistency, graph-incompleteness, graph-callsite-not-updated, orphaned-module, graph-validation-gap

  vbrief-traceability=passed, markdown-fences=passed, unused-exports=passed, query-docstring=passed, xss-sprintf=passed, markdown-xref=passed, aria-target=passed, semantic-role=passed, aria-containment=passed, redundant-assertion=passed, tautological-assertion=passed, resource-lifecycle=passed, cross-diff-consistency=passed, redundant-css-block=passed, template-placeholder=passed, void-async-signal=passed, spread-override=passed, json-indent-consistency=passed, dep-swap=passed, powershell-scoping=passed, diff-truncation=passed, exception-type-contract=passed, dead-none-guard=passed, access-declaration=passed, unused-option=passed, css-property-interaction=passed, jsx-style-indent=passed, regex-breadth=passed, cartesian-fan-out=passed, exec-stdout-parse=passed, sentinel-error-wiring=passed, hardcoded-filemode=passed, api-response-shape=passed, python-cli-arg=passed, taskfile-namespace=passed, vbrief-schema=passed, go-shell-injection=passed, go-discarded-error=passed, go-json-field-exposure=passed, go-mutable-exported-slice=passed, go-silent-error-branch=passed, go-comment-log-contradiction=passed, go-unconditional-message=passed, inline-style-proliferation=passed, unnecessary-nonnull-assertion=passed, double-cast=passed, unguarded-await-cast=passed, ssrf-guard-completeness=passed, error-message-leak=passed, puppeteer-resource-cap=passed, trivial-argument=passed, unused-imports=passed, dead-store=passed, phantom-import=passed, fetch-timeout-guard=passed, log-level-expected-path=passed, unified-diff-construction=passed, sentinel-index-assertion=passed, unguarded-map-lookup=passed, unbounded-prompt-injection=passed, description-diff-consistency=failed, render-branch-symmetry=passed, go-gorm-unchained-error=passed, go-gorm-rowsaffected-noop=passed, error-handling-loop-break=passed, sync-state-batching=passed, sync-revoke-object-url=passed, go-like-wildcard-injection=passed, go-basename-dedup-gap=passed, go-missing-seed-in-migrate=passed, go-write-then-read-unfiltered=passed, go-direct-db-access=passed, async-handler-try-catch=passed, chat-sdk-history=passed, dead-code-ternary=passed, go-context-background=passed, go-git-arg-order=passed, go-n-plus-one=passed, go-nested-transaction=passed, go-ref-injection=passed, go-scanner-error=passed, go-toctou-db=passed, go-unused-validated-field=passed, hardcoded-literal=passed, hardcoded-undefined-field=passed, python-exception=passed, python-path-construction=passed, python-isdigit-int=passed, deprecated-python-utcnow=passed, python-variable-shadow=passed, frozen-dataclass-mutable-field=passed, sentinel-value=passed, sibling-constant=passed, url-interpolation=passed, jsx-guard-removal=passed, asymmetric-clamp=passed, optional-prop-guard=passed, server-lifecycle=passed, go-asymmetric-org-scope=passed, fetch-body-scope-omission=passed, regex-breadth-inconsistency=passed, typeof-object-array-guard=passed, test-production-divergence=passed, argument-axis-mismatch=passed, click-propagation-gap=passed, sanitization-gap=passed, response-shape-consistency=passed, keydown-target-guard=passed, changelog-test-count=passed, unbounded-metadata-assignment=passed, unchecked-json-response=passed, response-body-leak=passed, json-syntax=passed, requestid-route-param=passed, dict-key-as-value=passed, redundant-transitive-call=passed, incomplete-iteration=passed, call-site-parameter-consistency=passed, markdown-heading-level=passed, cross-section-order-contradiction=passed, dangling-reference=passed, useref-dead-store=passed, fetch-redirect-guard=passed, response-body-buffering=passed, svg-content-type=passed, conditional-mode-exclusion=passed, join-separator-inconsistency=passed, prompt-injection-guard=passed, asymmetric-guard=passed, unsafe-json-cast=passed, storage-unsafe-cast=passed, markdown-single-line-interpolation=passed, postmessage-origin-guard=passed, css-iframe-scope=passed, markdown-entry-completeness=passed, python-set-duplicate=passed, state-setter-symmetry=passed, changelog-sibling-truncation=passed, ternary-exhaustiveness=passed, exclusive-output-constraint=passed, nullish-fallback-regression=passed, shell-pipefail=passed, vbrief-acceptance-contradiction=passed, css-property-diff=passed, go-sync-call-labeled-background=passed, prompt-guardrail-conflict=passed, prompt-identity-duplication=passed, asymmetric-truncation=passed, claim-source-tracing=passed, go-duplicate-event-publish=passed, go-create-without-cleanup=passed, go-find-then-create-without-cleanup=passed, go-persist-without-validate=passed, ts-put-without-get=passed, go-fetch-id-without-liveness=passed, go-event-subscribe-without-publish=passed, go-log-aggregation-run-scoping=passed, falsy-string-fallback=passed, useeffect-unstable-prop-dep=passed, unused-state-read=passed, blob-mime-mismatch=passed, parseint-nan-guard=passed, shared-state-across-map=passed, context-menu-click-guard=passed, touch-action-ancestor=passed, usestate-innerwidth-matchmedia=passed, prefix-match-loop=passed, hardcoded-new-field=passed, enum-subset-completeness=passed, optional-guard-fallthrough=passed, html-template-token=passed, label-association=passed, empty-src-img=passed, jsx-prose-link-mismatch=passed, try-catch-scope=passed, viewport-meta-accessibility=passed, go-github-api-response-id=passed, go-github-api-pagination=passed, go-gorm-first-without-errrecordnotfound=passed, fetch-cache-consistency=passed, oauth-session-state-binding=passed, go-switch-exhaustiveness=passed, go-test-mutex-asymmetry=passed, nextjs-suspense-boundary=passed, nullable-nested-response=passed, nullish-coalesce-empty-url=passed, asymmetric-callback-state-reset=passed, go-docstring-contract-mismatch=passed, replace-dollar-pattern=passed, conditional-fallthrough-gap=passed, sanitization-completeness=passed, bare-selector-fallback=passed, sanitization-context-mismatch=passed, json-escape-completeness=passed, catch-block-guard-parity=passed, early-exit-guard-subset=passed, html-escape-context-collision=passed, cross-file-inline-duplication=passed, collection-gate-ordering=passed, regex-denylist-anchor-gap=passed, handler-validation-symmetry=passed, go-http-handler-body-persist-without-authz=passed, go-first-element-without-disambiguation=passed, ternary-wrapper-asymmetry=passed, promise-then-without-outer-catch=passed, effect-persist-hydration-race=passed, css-animation-ref=passed, idb-open-lifecycle=passed, interactive-role-mismatch=passed, array-duplicate-field=passed, mid-file-static-import=passed, changelog-section-deletion=passed, comment-anchored-regex=passed, go-sprintf-json-body=passed, observer-boundary-mismatch=passed, hook-return-shape-mismatch=passed, raw-vs-effective-state=passed, unstable-mapped-key=passed, parallel-state-init-divergence=passed, value-callback-prop-coherence=passed, cap-expansion-order=passed, cross-file-comment-claim=passed, useeffect-cleanup=passed, filter-ratio-threshold=passed, setter-argument-asymmetry=passed, panel-scoped-notification=passed, unawaited-async-dependency=passed, prompt-html-anti-pattern=passed, go-empty-collection-write-guard=passed, go-inconsistent-error-wrapping=passed, sentinel-substring-guard=passed, hardcoded-color-in-themed-context=passed, modal-escape-handler=passed, property-read-without-write-path=passed, iframe-nav-intercept-completeness=passed, tagname-case-sensitivity=passed, guard-clause-subsumption=passed, effect-cleanup-race=passed, style-template-injection=passed, textarea-min-height=passed, greedy-lookahead-futility=passed, window-open-null-guard=passed, orphaned-ambient-declaration=passed, char-ordinal-bounds=passed, stale-ref-callback-race=passed, missing-init-check=passed, stderr-redirect=passed, gitignore-tracked-file=passed, eager-defeats-lazy-import=passed, redundant-call-in-scope=passed, test-source-list-diff=passed, mixed-dict-access-pattern=passed, md-fragile-regex-lookahead=passed, misleading-none-branch=passed, discarded-validation-return=passed, loopback-range=passed, trust-proxy=passed, fly-toml-schema=passed, dockerfile-copy-shell-op=passed, dockerfile-build-secret=passed, string-dispatch=passed, python-toctou-file-lock=passed, python-non-reentrant-lock=passed, go-sibling-handler-guard=passed, stale-test-assertion=passed, go-batch-response-counter=passed, go-single-status-error-handler=passed, go-base64-body-size-mismatch=passed, dict-write-lookup-asymmetry=passed, identical-branch=passed, postmessage-targetorigin-regression=passed, react-namespace-import=passed, comment-payload-contradiction=passed, conditional-gating-dead-path=passed, go-mock-interface-completeness=passed, toggle-setter-mismatch=passed, localhost-in-allowlist=passed, unawaited-waitfor=passed, cli-example-validator=passed, python-tz-comparison-asymmetry=passed, missing-wildcard-guard=passed, react-ref-hydration-trigger=passed, react-unused-callback-dep=passed, scope-intent-mismatch=passed, supabase-join-path-mismatch=passed, incomplete-optional-property-guard=passed, retry-reenqueue-without-guard=passed, stale-self-call-in-callback=passed, empty-body-control-flow=passed, self-increment-comparison=passed, sequential-replace-dedup=passed, breaking-export-removal=passed, vacuous-test-assertion=passed, silent-fallible-coalesce=passed, dual-threshold-warning=passed, unresolved-relative-import=passed, coalescing-callback-dispatch=passed, removed-event-propagation-stopper=passed, jsx-inline-style-scope-leak=passed, hook-after-early-return=passed, fs-access-overwrite=passed, type-import-divergence=passed, conditional-state-no-clear=passed, gated-operation-silent-persist=passed, python-weak-substring-match=passed, python-docstring-class-ref=passed, python-unused-subprocess-output=passed, python-narrow-exception-handler=passed, usememo-missing-dep=passed, localstorage-stale-cache=passed, localstorage-scope=passed, dead-action-variant=passed, switch-param-forwarding-gap=passed, changelog-entry-style=passed, vbrief-edge-completeness=passed, pr-body-vbrief-scope=passed, abort-signal-timeout-guard=passed, whitespace-control-char=passed, transient-error-permanent-state=passed, unused-variable=passed, postmessage-source-null-check=passed, atob-encoding-check=passed, phantom-identity-fallback-check=passed, workflow-comment-secret=passed, rls-circular-dep=passed, writable-stream-abort=passed, error-type-shadowing=passed, unguarded-iteration-component=passed, ci-checksum-provenance=passed, react-error-cache-nav-reset=passed, shell-injection-template=passed, flag-reset=passed, excess-property=passed, timestamp-sanitization-reuse=passed, boolean-null-guard=passed, catch-typeof-swallow=passed, optional-strict-compare=passed, leaked-debug-text=passed, inconsistent-component-import=passed, wrong-domain-copy=passed, unconditional-lfs-filter=passed, toml-config-injection=passed, dead-popen-timeout-except=passed, python-unused-local=passed, async-event-lock-no-recovery=passed, webkit-cancel-compat=passed, dom-cleanup-racing-interaction=passed, nonstandard-code-fence=passed, vba-value2-single-cell=passed, vba-doc-error-handler=passed, officejs-doc-sync-batching=passed, regex-word-boundary-method-name=passed, sliding-window-dedup=passed, graph-incompleteness=skipped, graph-callsite-not-updated=skipped, orphaned-module=skipped, graph-validation-gap=skipped, lockfile-version-suppression=passed
• Embedding index:
  46/46 ok

  attempted=46 succeeded=46 failed=0 pooled=0

Suggested verification

• (agent) Spot-check the highest-risk changed files and confirm the clean review did not skip relevant files or context.
• (static) Review 1 deterministic/static finding(s) included in the evidence set.

Agent verification brief

• PR/CR: deftai/directive#1371
• Head SHA: a686a1a874e26613fcc659f527546aec403809da
• Decision: approve
• Highest-risk claims: none
• Reviewed files: AGENTS.md, CHANGELOG.md, scripts/preflight_implementation.py, skills/deft-directive-build/SKILL.md, skills/deft-directive-swarm/SKILL.md, templates/agents-entry.md, tests/cli/test_preflight_implementation.py, tests/content/test_agents_entry_contract.py, +2 more
• Skipped files: none
• Evidence sources: static analysis, call graph/blast radius, vector context, deterministic checks
• Known blind spots: none recorded

Decision: approve
Merge impact: non-blocking
Review confidence: 0.58
Decision confidence: 0.58
Finding confidence: n/a
Reason: No findings survived validation and all configured analysis completed.
Important files: 10 changed file(s) reviewed; no finding hotspots identified.
Review scope: 10 files, 289 additions, 24 deletions

_{slizard v0.3.951}

[dbcall2]

Addressed the new review round on head a686a1a:

• Added the swarm-cohort Story Start Gate carve-out in skills/deft-directive-build/SKILL.md, both AGENTS.md mirrors, and templates/agents-entry.md.
• Added content coverage for the carve-out and inter-story dirty-tree behavior.
• Clarified scripts/preflight_implementation.py as the structural lifecycle sub-gate so Story Start Gate controls remain documented outside the executable preflight helper.

Local verification: UV_FROZEN=1 task check passed (6580 passed, 5 skipped, 9 deselected, 1 xfailed). GitHub CI is green; Greptile reviewed the latest head with 0 comments; SLizard approved with 0 findings.