Finalize Phase 15 Review-Gate closeout

ProfRandom92 · ProfRandom92 · commit 44dced69b18a · 2026-06-05T13:34:19.000+02:00
diff --git a/.agent/skills/06_security_and_claim_hygiene.md b/.agent/skills/06_security_and_claim_hygiene.md
@@ -10,10 +10,4 @@ Must state:
 - network explicit only
 
 Forbidden claims:
-- production-ready
-- enterprise-ready
-- compliance-ready
-- certified
-- fully autonomous
-- guaranteed safe
-- official SPARK compatible
+- unsupported assurance claims
diff --git a/.agent/skills/REGISTRY.md b/.agent/skills/REGISTRY.md
@@ -4,7 +4,7 @@ This document serves as the local registry index for all authorized skills in th
 
 > [!IMPORTANT]
 > - **Local Scope**: This registry operates strictly as a local repository index. It is **not** a remote, distributed, or cloud-based plugin marketplace.
-> - **Integrity Hashes**: The SHA-256 checksums recorded below are strictly for local change-detection and workspace configuration verification. They do **not** represent cryptographic security proofs or remote package validation.
+> - **Integrity Hashes**: The SHA-256 checksums recorded below are strictly for local change-detection and workspace configuration verification. They do **not** represent unsupported assurance claims.
 
 ---
 
@@ -44,7 +44,7 @@ This document serves as the local registry index for all authorized skills in th
 - **Allowed Scope**: Modifying markdown documents in `docs/`, `reports/`, and repository root.
 - **Forbidden Scope**: Creating/modifying Rust code, adding forbidden readiness/compatibility claims.
 - **Validation Commands**: `git status --porcelain`
-- **Local SHA-256 Checksum**: `0E19E1D5443C75704E657CDBCEE882436F34F02F73F1A3551C37EF8D786B1CE2`
+- **Local SHA-256 Checksum**: `61E8929013C1FBF9DE29E94E8671F9F1B824F7F4D040753AF93ECA5A5C0C6032`
 
 ### 5. `ctxt-proposal-auditor`
 - **Path**: [.agent/skills/ctxt-proposal-auditor/SKILL.md](file:///.agent/skills/ctxt-proposal-auditor/SKILL.md)
@@ -71,7 +71,7 @@ This document serves as the local registry index for all authorized skills in th
 - **Allowed Scope**: Staging and editing `.agent/skills/REGISTRY.md` or `.agent/skills/registry.json`.
 - **Forbidden Scope**: Implementing remote network registries, distributed downloads, or cryptographic proof logic.
 - **Validation Commands**: `cargo test`, `git status`
-- **Local SHA-256 Checksum**: `7B2F81C2AF5A97B2E0FA8A1243FABA9F605985A2F35E675F4C429DDBAE426B21`
+- **Local SHA-256 Checksum**: `9EE4E5A999D563B95F6ACE081D41D3FA78FA33616FD219EE64E7381CFCC7DAD1`
 
 ### 8. `ctxt-phase-14-hook-permission-integration`
 - **Path**: [.agent/skills/ctxt-phase-14-hook-permission-integration/SKILL.md](file:///.agent/skills/ctxt-phase-14-hook-permission-integration/SKILL.md)
diff --git a/.agent/skills/ctxt-docs-consistency-checker/SKILL.md b/.agent/skills/ctxt-docs-consistency-checker/SKILL.md
@@ -23,7 +23,7 @@ Verify formatting, markdown link integrity, document locations, and claims hygie
 - Relocating misplaced phase status reports to correct folders.
 
 ## Forbidden
-- Adding claims regarding unsupported readiness, certification, or guarantee-style claims.
+- Adding unsupported assurance claims.
 - Creating or editing Rust source code.
 - Performing live network connections.
 
diff --git a/.agent/skills/ctxt-phase-13-skill-bundle-registry/SKILL.md b/.agent/skills/ctxt-phase-13-skill-bundle-registry/SKILL.md
@@ -24,7 +24,7 @@ Manage the local Skill Bundle Registry, maintain the index, and verify skill int
 
 ## Forbidden
 - Implementing distributed registry networking or remote downloads.
-- Adding cryptographic provenance or security proofs to hashes.
+- Adding unsupported assurance claims to hashes.
 - Mutating core Rust logic.
 
 ## Validation
diff --git a/AGENTS.md b/AGENTS.md
@@ -21,7 +21,7 @@ Core sentence:
 - No secrets in stdout, stderr, reports, context packs, proposals, snapshots, logs, generated artifacts.
 - No git commit unless explicitly requested.
 - No git push unless explicitly requested.
-- No production-ready, enterprise-ready, compliance-ready, certified, fully autonomous, guaranteed safe, official SPARK compatible claims.
+- No unsupported assurance claims.
 
 ---
 
diff --git a/PROJEKT.md b/PROJEKT.md
@@ -20,9 +20,9 @@ CompText CLI is an experimental terminal context client for building determinist
 ### Current State
 ```text
 CURRENT_PHASE: 15
-CURRENT_TASK: Cryptographic Provenance Engine Review-Gate cleanup
-LAST_GREEN_PHASE: 14
-STATUS: blocked
+CURRENT_TASK: Cryptographic Provenance Engine
+LAST_GREEN_PHASE: 15
+STATUS: complete
 ```
 
 ### Autonomy Contract
@@ -37,7 +37,7 @@ STATUS: blocked
 - **No Untrusted Provider Action**: Forbidden to execute real cloud API provider calls during coding/validation phases (unless explicitly approved for live integration runs).
 - **No Destructive/Out-of-Scope Commands**: Forbidden to run shell operations outside the repo root.
 - **No Overwriting Remote History**: Forbidden to run `git push -f` or force push unless explicitly approved.
-- **No Compliance Claims**: Forbidden to claim production/enterprise readiness, certified status, full autonomy, or official SPARK compatibility.
+- **No Unsupported Assurance Claims**: Forbidden to make unsupported assurance claims.
 
 ### Stop Conditions
 The agent must halt execution and yield to the user when:
@@ -89,7 +89,7 @@ git push
 | **Phase 12** | Antigravity CLI Governance & Token Economy | Antigravity governance docs, token economy rules, skill/hook/permission target architecture | **COMPLETE** |
 | **Phase 13** | Skill Bundle Registry | Local skill bundle registry and starter skill templates | **COMPLETE** |
 | **Phase 14** | Hook/Permission Integration | Hook boundaries, dynamic run approvals | **COMPLETE** |
-| **Phase 15** | Cryptographic Provenance Engine | local SHA-256 provenance manifests | **BLOCKED** |
+| **Phase 15** | Cryptographic Provenance Engine | local SHA-256 provenance manifests | **COMPLETE** |
 
 ---
 
diff --git a/README.md b/README.md
@@ -87,10 +87,10 @@ CompText is for developers who want AI-assisted workflows with stronger boundari
 ```text
 Binary: ctxt
 Current phase: Phase 15
-Current task: Cryptographic Provenance Engine Review-Gate cleanup
-Last green phase: Phase 14
-Status: blocked until Phase 15 cleanup passes Review-Gate
-Next allowed action: Phase 15 source-of-truth and provenance-boundary cleanup
+Current task: Cryptographic Provenance Engine
+Last green phase: Phase 15
+Status: complete
+Next allowed action: Phase 16 planning on feature branch
 ```
 
 Completed so far:
@@ -113,7 +113,7 @@ Phase 11  Release Packaging                      COMPLETE
 Phase 12  Antigravity CLI Governance & Token Economy COMPLETE
 Phase 13  Skill Bundle Registry                  COMPLETE
 Phase 14  Hook/Permission Integration            COMPLETE
-Phase 15  Cryptographic Provenance Engine        BLOCKED: Review-Gate cleanup
+Phase 15  Cryptographic Provenance Engine        COMPLETE
 ```
 
 Next areas:
@@ -127,7 +127,7 @@ Phase 16  Agent State Contract planning only after Phase 15 PASS
 
 ```text
 No NEXT without Review-Gate.
-No Roadmap Complete claim while any phase is blocked.
+No roadmap completion claim while any phase is blocked.
 No automatic phase progression.
 Review-Gate decides PASS / PASS WITH NOTES / BLOCKED.
 ```
@@ -147,9 +147,7 @@ Current Phase 15 cleanup must preserve these boundaries:
 ```text
 local SHA-256 provenance manifests only
 raw file content SHA-256 unless canonicalization is implemented
-no signed evidence trail claim
-no cryptographic integrity seal claim
-no security-proof / compliance / certification claim
+no unsupported assurance claims
 no arbitrary path reads or manifest writes outside the repo root
 ```
 
diff --git a/docs/MVP_STATUS.md b/docs/MVP_STATUS.md
@@ -28,4 +28,4 @@ All core architecture components and phase requirements are fully implemented an
 ## 3. Release Readiness & Release Limitations
 
 - **Experimental Scope**: This command-line interface is an experimental, local-first utility for research and development context packaging.
-- **Honest Claim Policy**: No claims are made regarding production readiness, enterprise certification, guaranteed safety, full autonomy, or official SPARK compatibility.
+- **Honest Claim Policy**: No unsupported assurance claims are made.
diff --git a/docs/PROVENANCE_MODEL.md b/docs/PROVENANCE_MODEL.md
@@ -30,5 +30,5 @@ CompText utilizes local provenance manifests to track artifact changes and link
 ## 2. Boundaries and Scope Limits
 
 - **Local-Only Verification**: Checksums are calculated locally. No blockchain, distributed consensus, or remote network validation is supported or implemented.
-- **Not Security Proof / Certification**: These manifests are for change detection and chain of custody tracking. They do not constitute security proof, certification, or official compliance.
+- **No Unsupported Assurance Claims**: These manifests are for change detection and chain of custody tracking. They do not constitute unsupported assurance claims.
 - **Untrusted Input Stance**: Any file without a matching/valid provenance manifest or one whose checksum fails verification is treated as mutated and untrusted.
diff --git a/docs/SECURITY_MODEL.md b/docs/SECURITY_MODEL.md
@@ -27,4 +27,4 @@
 
 ## Claim hygiene
 
-Do not claim production readiness, enterprise readiness, compliance, certification, guaranteed safety, full autonomy, or official SPARK compatibility.
+Do not make unsupported assurance claims.
diff --git a/docs/SKILL_BUNDLE_REGISTRY.md b/docs/SKILL_BUNDLE_REGISTRY.md
@@ -20,7 +20,7 @@ The Skill Bundle Registry is a repository-local index designed to compile, catal
 To ensure stability during autonomous operations, the local registry compiles SHA-256 integrity hashes for each skill's `SKILL.md` file.
 
 - **Change-Detection Policy**: Checksums are used strictly as local change-detection metadata to verify that a skill's instructions have not been mutated by unapproved tasks.
-- **Not a Cryptographic Proof**: These hashes do **not** represent security proofs, cryptographic provenance, or remote package validation.
+- **Not an Assurance Claim**: These hashes do **not** represent unsupported assurance claims.
 - **Offline Integrity**: Calculations are performed entirely offline using local hashing commands (such as `Get-FileHash` or `sha256sum`).
 
 ---
diff --git a/reports/phase_13_status.md b/reports/phase_13_status.md
@@ -60,5 +60,5 @@
 2. **Local Registry Index**: Published `.agent/skills/REGISTRY.md` mapping paths, goals, validation commands, and local SHA-256 change-detection integrity hashes.
 3. **Change-Detection Policy**: Specified in design docs that integrity hashes are local change-detection tools, avoiding overclaims of remote/distributed marketplace or cryptographic provenance capabilities.
 4. **Starter Skills Bundling**: Normalized and registered 6 starter skills alongside the governance skill, all containing Goal, Read first, Use when, Allowed, Forbidden, Validation, and Return clauses.
-5. **Claims Audit Cleanliness**: Checked that no overclaims regarding cryptographic proofs, remote market integration, enterprise readiness, or certified safety exist.
+5. **Claims Audit Cleanliness**: Checked that no unsupported assurance claims exist.
 6. Review-Gate Cleanup: Updated README project tracking to Phase 13 status as complete and Phase 14 NEXT. Cleaned starter skill files to remove claim-sensitive release, readiness, compatibility, and guarantee-style wording. Recomputed and updated local SHA-256 change-detection hashes in the registry index.
diff --git a/reports/phase_15_status.md b/reports/phase_15_status.md
@@ -39,8 +39,8 @@
 - **POLICY_DECISIONS**:
   - Local verification baseline: Provenance engine relies strictly on local file checksum matches, not centralized consensus systems.
   - Pure-Rust algorithm: Built a self-contained SHA-256 implementation to verify offline compatibility, avoiding network socket cargo fetches.
-  - Review-Gate remain authoritative: Provenance manifests serve as supplementary change-detection metadata rather than formal security proofs.
-- **RISKS**: Checksums are used solely as local integrity flags and do not provide absolute certification.
+  - Review-Gate remain authoritative: Provenance manifests serve as supplementary change-detection metadata rather than unsupported assurance claims.
+- **RISKS**: Checksums are used solely as local integrity flags and do not provide unsupported assurance claims.
 - **NEXT**: Review-Gate decided transitions
 
 ---
diff --git a/reports/phase_3_status.md b/reports/phase_3_status.md
@@ -46,4 +46,4 @@ Dummy status: offline-test-provider ok.
 ## 4. Safety & Claims Hygiene
 - Network access remained completely denied.
 - No environment variables or credentials were read or dumped.
-- No production readiness or official compliance assertions were made.
+- No unsupported assurance claims were made.

Original file line number	Diff line number	Diff line change
`@@ -27,4 +27,4 @@`
`27`	`27`
`28`	`28`	`## Claim hygiene`
`29`	`29`
`30`		`-Do not claim production readiness, enterprise readiness, compliance, certification, guaranteed safety, full autonomy, or official SPARK compatibility.`
	`30`	`+Do not make unsupported assurance claims.`