feat(shield): single canonical output — Markdown source, HTML as a build artifact

.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "shield",
       "description": "Unified SDLC plugin \u2014 research, planning, PM integration, implementation, and continuous review with multi-domain support and specialist agents",
-      "version": "2.27.0",
+      "version": "2.28.0",
       "source": "./shield",
       "category": "development"
     },

.gitignore

@@ -41,3 +41,14 @@ shield/tests/output/
 # outputs/, and reviews/ (see docs/superpowers/plans/2026-05-22-shield-output-
 # structure-cutover.md). Only the hidden Q&A scratch transcript is disposable.
 **/docs/shield/*/.session-transcript.md
+
+# Shield HTML is a BUILD ARTIFACT, not a source. Markdown + JSON sidecars are
+# the committed source of truth. Regenerate the site locally with /shield
+# render (scripts/render-output.sh). See docs/superpowers/specs/
+# 2026-06-08-shield-single-canonical-output-design.md
+**/docs/shield/*/outputs/
+**/docs/shield/index.html
+**/docs/shield/manifest.js
+**/docs/shield/shield.css
+**/docs/shield/shield-nav.js
+**/docs/shield/shield-dashboard.js

docs/lld/backlog-store.md

@@ -103,15 +103,15 @@ live in `reconciler`; this is the mechanical delete it calls.
 
 ```mermaid
 sequenceDiagram
-  participant C as caller (/backlog add or skill)
+  participant C as caller via /backlog add or skill
   participant S as backlog_store
   participant FS as filesystem
   C->>S: capture(text, ..., source)
   S->>FS: read backlog.json (validate-or-refuse) + record version/count
   alt malformed
     S-->>C: raise BacklogInvalid
   else ok
-    S->>S: append entry (uuid4 id, next order); validate in-memory doc
+    S->>S: append entry (uuid4 id, next order) then validate in-memory doc
     S->>FS: write backlog.json.tmp (full doc) + fsync
     S->>FS: re-check on-disk version/count (compare-before-replace)
     alt store changed underneath

docs/shield/backlog-20260527/lld-backlog-store.md

@@ -103,15 +103,15 @@ live in `reconciler`; this is the mechanical delete it calls.
 
 ```mermaid
 sequenceDiagram
-  participant C as caller (/backlog add or skill)
+  participant C as caller via /backlog add or skill
   participant S as backlog_store
   participant FS as filesystem
   C->>S: capture(text, ..., source)
   S->>FS: read backlog.json (validate-or-refuse) + record version/count
   alt malformed
     S-->>C: raise BacklogInvalid
   else ok
-    S->>S: append entry (uuid4 id, next order); validate in-memory doc
+    S->>S: append entry (uuid4 id, next order) then validate in-memory doc
     S->>FS: write backlog.json.tmp (full doc) + fsync
     S->>FS: re-check on-disk version/count (compare-before-replace)
     alt store changed underneath