Merge pull request 'chore: gardener housekeeping' (#465) from chore/gardener-20260409-0602 into main

AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Disinto — Agent Instructions
 
 ## What this repo is

architect/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Architect — Agent Instructions
 
 ## What this agent is

dev/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Dev Agent
 
 **Role**: Implement issues autonomously — write code, push branches, address

gardener/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Gardener Agent
 
 **Role**: Backlog grooming — detect duplicate issues, missing acceptance

gardener/pending-actions.json

@@ -1,12 +1,17 @@
 [
   {
-    "action": "edit_body",
-    "issue": 454,
-    "body": "Flagged by AI reviewer in PR #453.\n\n## Problem\n\n`vault/vault-env.sh` `validate_vault_action` (line 70-73) validates field names against an allowlist that does NOT include `blast_radius`:\n\n```\nid|formula|context|secrets|model|tools|timeout_minutes\n```\n\nIf an operator adds `blast_radius = \"low\"` to a vault action TOML (as documented in `vault/SCHEMA.md` and supported by `vault/classify.sh`), the validator rejects it with \"ERROR: Unknown fields in TOML: blast_radius\". The feature is documented and implemented but cannot be exercised without triggering a validation error.\n\n## Fix\n\nAdd `blast_radius` to the allowed fields list in `validate_vault_action` in `vault/vault-env.sh`.\n\n---\n*Auto-created from AI review*\n\n## Affected files\n\n- `vault/vault-env.sh` (line 76 — `id|formula|context|secrets|model|tools|timeout_minutes|dispatch_mode` allowlist)\n\n## Acceptance criteria\n\n- [ ] `blast_radius` is added to the allowed fields list in `validate_vault_action` in `vault/vault-env.sh`\n- [ ] A vault action TOML containing `blast_radius = \"low\"` passes `validate_vault_action` without error\n- [ ] A vault action TOML containing an unrecognised field (e.g. `bogus_field = \"x\"`) still fails validation\n- [ ] `vault/validate.sh` and existing tests continue to pass after the change"
+    "action": "comment",
+    "issue": 446,
+    "body": "Closing as resolved: sub-issues #442, #443, #444, #445 are all closed. The gardener formula now includes an `agents-update` step that checks watermarks and keeps AGENTS.md files current. The last gardener run (commit faaaeb0) confirmed the step is working — all per-directory AGENTS.md files were updated."
   },
   {
-    "action": "add_label",
-    "issue": 454,
-    "label": "backlog"
+    "action": "close",
+    "issue": 446,
+    "reason": "resolved: sub-issues fixed and gardener agents-update step is operational"
+  },
+  {
+    "action": "remove_label",
+    "issue": 419,
+    "label": "blocked"
   }
 ]

lib/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Shared Helpers (`lib/`)
 
 All agents source `lib/env.sh` as their first action. Additional helpers are

planner/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Planner Agent
 
 **Role**: Strategic planning using a Prerequisite Tree (Theory of Constraints),

predictor/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Predictor Agent
 
 **Role**: Abstract adversary (the "goblin"). Runs a 2-step formula

review/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Review Agent
 
 **Role**: AI-powered PR review — post structured findings and formal

supervisor/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- last-reviewed: d5e63a801ed48f9bd54c77e4915bc076b7490958 -->
+<!-- last-reviewed: b79484d5810abfcac48fb5eb0259242cdd250060 -->
 # Supervisor Agent
 
 **Role**: Health monitoring and auto-remediation, executed as a formula-driven