Fifty-two real failures so far, and the rule each one paid for: the register grows with every new one. None was invented for the example: every rule in the kit was bought by a failure on a project in production.
Continuity
A real test of the handover
If a new session requires the human to repeat recent operational context, the continuity system has failed.* Entry reads the journal; the journal is…
The completed next action
Precedence orders sources, not claims. A next action that observed Git already falsifies is not current, whatever its rank, and the entry that won…
The 400-character cap
A field limit that exists for a screen must never reach the artefact. Format 2; display truncation only, marked, beside the path to the full text.
Two invalid refspecs in one night
Every mission gets the branch its contract names, read-only included; the exit command prints the complete preservation procedure itself; a…
Exit 0 under a warning
The durability verdict decides the exit code, never the shape of the handover. No automation may read exit status as the outcome of a mission unless…
Twenty-five entries that said "none"
Three states, told apart structurally: named, declared absent, undeclared. No string is matched.
Routing and capabilities
The 117 KB file
A three-atom capability vocabulary; a mission declares what it requires and the launcher matches exactly; a 20 KB transport threshold for the…
"Observed, not assumed", false in four hours
Every cell carries how and when it was established. unknown is a permitted value and routes as cannot execute.
The prose host
The Host field, a closed vocabulary of machine names, exactly one.
The screen
The Screen demand field, three values and a duration, classified by what the mission takes from the human and not by whether the toolkit draws a…
The composited capture
Exclusive foreground* is a measurement, not an implementation choice. A window pushed behind another is not a slower measurement; it is a false one.
The silent default agent
The launcher resolves the profile itself, from the governance commit, before anything starts; the regime is part of the claim and every refusal…
The seat that could not execute
A seat’s safety property is a mechanism, never a location. The launcher strips the seat’s session markers from every mission it starts, so no…
Written, said the bridge
An acknowledgement is not a write. Every file put on a machine by a bridge is read back and compared to what was sent (size first, bytes after)…
The launcher
The wrong role
Condition 3.
Six commits behind
Fetch first; resolve the governance ref to a commit once; read every policy out of that commit; create the worktree from the same commit; print the…
Effort: MEDIUM
The mapping is exact; a value outside it is a refusal. Then the form was widened to offer every level the seat carries, so the misdeclaration the…
The empty vocabulary
Declared constants, measured by exercising the program and recorded beside the constant. Documentation about a program is not the program.
The refusal that moved the mission
A refusal does not prevent the mission; it moves it outside the gate.* The launcher warns, starts, and obliges the seat to repeat the warning in its…
The ungoverned resume
The --resume door; execution parameters mandatory in every report and every pull request.
The oldest return governed
The newest return governs; the report names the one read and how many older ones were passed over.
Three files deleted by hand
A refused resume prints the absolute path, the branch, every field the marker carries, and the remedy in order: the exit command first.
The ### inside the Objective
Write #### inside a field.
Roughly nine, actually thirty
A predicted figure is a hypothesis to test and account for, never a target to reach; where it contradicts a ruling, the ruling wins and the…
Seventeen or twenty-five
Every figure in a criterion names where it was measured. The measurement governs the criterion's restatement of it, never the reverse.
Three hours on a scrollbar
A criterion that says enumerate every X says how it is satisfied.
The manual worktree in the handover
Launch instructions are the launcher's or they are manual, never both.
Another mission's number
Condition 7: the number is compared against the issue it sits on, never matched as a shape.
The comment that set a field
Condition 6 reads both spellings; a comment naming the value the body already declares is not an amendment; the instruction states what was checked…
Three closed contracts, relaunchable
The closed-contract warning: appended after the conditions, belonging to none of them, changing no exit code.
Both errors at once
--list reads the process table; the marker reads the disk; neither is the other's proof, and the two lists are printed together.
The Store stub
The interpreter is the environment's, spelled in full.
Delivery and disposal
Five lifecycle failures in a day
The Mission: line with three states; a closed pull request records its carrier reciprocally; a refused delivery is closed at the refusal.
Five refused launches in a day
The disposition is owed at the moment the run ends, by the party that ends it. Silence is debris.
Five branches holding the only copy
A branch that is the only ref holding something is kept, the reason recorded, and disposed of by carrying its content to the integration branch first.
The 445 KB changelog
One changelog fragment per mission; assembly once at release; the assembly check deliberately not wired into pull-request CI.
Twenty-nine issues closed by hand
The closeout tool closes contracts from the merged delivery's Mission: line, with four refusals that are the deliverable.
The ignored file that git worktree remove destroys
Condition 2 asks for untracked and ignored explicitly; the only exception is a committed manifest a person wrote down.
?? misread as "absent from the repository"
Untracked entries are reported in two classes, and the report says what each means.
The second lock
One condition per door; the manifest names the directory as regenerable and states the residual risk beside it.
Two figures for one commit
A gate line records the command as run, including any environment variable that selects a platform. Measure the merge result, not the branch tip.
Two writers, one file, forty minutes
One file, one writer. A change on another writer’s file is asked for by message, never made in passing. No file is rewritten whole from a copy older…
The commit that lived in a workshop
Durable means reachable from a pushed ref, for a seat’s own workshop too. A clone that cannot push keeps no commit and no modified file between two…
Labels and forms
The mission surface that did not render
The resolution matrix; the standing human render check; conservative option ordering enforced by the governance check.
Four labels that did not exist
Creating a label and applying one are two different acts; the check verifies that the document names a label, never that GitHub has one, and says so.
Five useless routes out of thirty-three
A routing label is an event, never a state.
Eleven lots filed under the nearest page
The frame gets its own term, with the test that bounds it and the sentence that keeps it the smallest term, not the largest.
Documents
Three correct reports, no correction
A lot that changes the launcher, the conditions, the form or the gates updates the workflow document in the same lot; naming the fault is the floor,…
True at the commit, false forty minutes later
A dated pin is not a defence when the tree moves inside your own session; freshness is the owner's obligation, discharged by the lot that changes…
Three collisions, no correction
A lot that introduces a name checks it against the glossary, reports the check, and adds the row in the same lot where it can.
One frame in sixty
When the only user reports what he sees, ask what the instrument missed. Where an observation cannot be reproduced, the finding is not reproduced by…
The seat that was read from history
A fact about a seat is read from the seat’s charter, never from the history of the document that describes it. History says what was believed; the…