[Exploitacious]

Summary

Brings the template up to the maintainer's private harness as of 2026-11-07, as generic rewrites (the last port was 2026-10-19). One rule runs through all of it: on your copy, the template adds and offers. It never deletes, caps or blocks what you chose (your remotes, backups, memory layout, plugins, hooks and pins stay yours); the only things it overrules are unsafe ones.

What a copy gains:

• Memory loads again on current Stage 1. Stage 1 turns native auto-memory off and registers hooks/memory-digest.sh, which the template did not ship, so a copy started every session with no memory. The hook is here now, with the tiered digest, memory-hint, and a pool-size warning at 60 entries (a warning only).
• Safer guards. git-guard warns when a commit stages conflict markers (it never blocks) and reads more shell forms that used to slip past the push check. secrets-guard and secrets-scan.sh fail closed when a scan cannot finish, instead of reading an error as clean.
• Lane-aware hooks. lane-class tells the main thread from a spawned lane; context-watch, session-briefing and the new lane-rules and foreman-context hooks give each the right amount of text. CONTEXT/foreman.md holds the main-thread-only rules, split out of core.md.
• Stop-time helpers. report-lint turns an over-long report into a short ask card once; askuser-cancel makes sure a dismissed question is never read as an answer. Both can be turned off with an environment variable.
• Tools. await (wait on a background command inside a tool limit), safe-pkill (refuses a pattern that would match your own shell; the shims stay opt-in), wf-resume, mcp-http-call.py (a small MCP-over-HTTP client, endpoint and key from configuration) and a configuration-driven await-approval built on it.
• Deploy. Retired plugins are reported with their removal command and left installed. verify-ops runs the new suites and warns on skill size.
• Doctrine, model roles and skills updated; mounted skills re-vendored at agent-skills 0.1.10.

Verification

• CI's three loops run locally on the final tree: every bin/tests suite in the sandbox (0 failed), every self-test beside its subject with the Stage-1 settings (0 failed), both PowerShell suites (pass).
• Fresh-install smoke: two deploys into a throwaway HOME (both exit 0), skill mounts verified, verify-ops 31 ok, 0 warn, 0 fail.
• Stage-1 contract: test_stage1.py against this tree, 73 OK, including the verify-ops model-rules parity test.
• guard-selftest.sh 196 PASS; gitleaks over the full history clean.
• Second-vendor review of the guards, the gate, deploy, the lane classifier, the memory tools and the MCP client: integrate after fixes, all applied with regression tests (credential and URL masking in the waiter's result line, refusal precedence, unknown-outcome rows on a gateway failure, unreadable files and incomplete walks in the scanner, a large tool response no longer silences the context warning). The one item it left (owner-only output on Windows) is closed: the client refuses an out file on Windows before any call is sent.
• Private-term scan of the tree, the diff, the commit message and this text: clean.