Update project controls and README assets for v0.1.0 RC

Author: ProfRandom92

AGENTS.md

@@ -60,6 +60,297 @@ Each task must declare:
 - validation commands
 - return schema
 
+## Startup source order
+
+To reduce startup friction, agents must use this order:
+1. Read `AGENTS.md` for safety rules and working-mode constraints.
+2. Read `PROJEKT.md` for current project state. `PROJEKT.md` is the source of truth.
+3. Read the referenced `tasks/*.md` file for the concrete work slice.
+4. Read only directly relevant `.agents/skills/*` files when a reusable skill is needed.
+
+Current project state from `PROJEKT.md`:
+- `CURRENT_PHASE: 5e`
+- `CURRENT_TASK: README R1 community upgrade and v0.1.0 release candidate preparation`
+- `STATUS: release-candidate-prep`
+- `NEXT_ALLOWED_ACTION: Step 1 README community upgrade using tasks/README_R1_COMMUNITY.md`
+- Branch was synced with `origin/main` before local edits.
+- Validation baseline is green: `cargo fmt --all --check`, `cargo check`, `cargo test`, `cargo clippy -- -D warnings`, `cargo run --bin ctxt -- --json validate --run`.
+- Tests baseline is 37 unit tests and 83 smoke tests.
+
+Global gates for all modes:
+- Network is off unless a mode explicitly allows it and the user explicitly requests it.
+- Provider calls are off.
+- External agent execution is off.
+- MCP server use is off.
+- Figma and generated asset work are allowed only in `visual-assets` mode and only with explicit user instruction.
+- Commit, push, tag, and release are allowed only with explicit user instruction for that exact action.
+- `tasks/*.md` defines concrete work packages.
+- `.agents/skills/*` defines reusable working skills.
+
+## Working Modes
+
+### docs-only
+
+Use for non-README documentation edits that do not change runtime behavior.
+
+Allowed files:
+- `docs/**`
+- `prompts/**`
+- `context/**` for analysis artifacts
+- `PROJEKT.md` only for task-state updates
+
+Forbidden files/actions:
+- `src/**`
+- `tests/**`
+- `README.md` unless the active task explicitly includes it
+- `Cargo.toml`
+- `Cargo.lock`
+- workflows
+- generated assets
+- tags
+- releases
+- provider configs
+- secrets
+
+Allowed commands:
+- `git status`
+- `git diff`
+- `git log`
+- `Get-Content`
+- `Select-String`
+
+Required validation:
+- `git --no-pager diff -- docs prompts context PROJEKT.md`
+- `Select-String` forbidden claim scan on changed docs
+- `git --no-pager status --short --branch`
+
+Git policy:
+- Read-only Git inspection is allowed.
+- No staging, commit, push, tag, release, PR, or merge unless explicitly requested.
+
+Network policy:
+- Offline-only.
+- No browser, provider, external agent, MCP, or live network calls.
+
+Stop conditions:
+- Required change touches forbidden files.
+- Validation requires network or provider execution.
+- Secret material or private auth material is needed.
+- The active task and `PROJEKT.md` disagree.
+
+### README/community
+
+Use for the current Phase 5e README R1 community upgrade work.
+
+Allowed files:
+- `README.md`
+- `tasks/**`
+- `PROJEKT.md` only for task-state updates
+
+Forbidden files/actions:
+- `src/**`
+- `tests/**`
+- `docs/**` unless the active task explicitly allows it
+- `.agents/**`
+- `Cargo.toml`
+- `Cargo.lock`
+- workflows
+- generated assets
+- tags
+- releases
+- provider configs
+- secrets
+
+Allowed commands:
+- `git status`
+- `git diff`
+- `git log`
+- `Get-Content`
+- `Select-String`
+
+Required validation:
+- `git --no-pager diff -- README.md`
+- `Select-String` forbidden claim scan
+- `git --no-pager status --short --branch`
+
+Git policy:
+- Read-only Git inspection is allowed.
+- No staging, commit, push, tag, release, PR, or merge unless explicitly requested.
+
+Network policy:
+- Offline-only.
+- No browser, provider, external agent, MCP, Figma, asset generation, or live network calls.
+
+Stop conditions:
+- Required change touches runtime, tests, Cargo files, workflows, generated assets, provider configs, tags, releases, or secrets.
+- README claims require unsupported production, compliance, legal, forensic, official compatibility, or guaranteed correctness assurance.
+- Validation requires network or provider execution.
+- `tasks/README_R1_COMMUNITY.md` and `PROJEKT.md` disagree.
+
+### runtime-code
+
+Use for changes to CLI behavior, runtime contracts, tests, validation logic, provider boundaries, or apply/proposal mechanics.
+
+Allowed files:
+- `src/**`
+- `tests/**`
+- `Cargo.toml`
+- `Cargo.lock` only when dependency resolution actually changes and is explicitly in scope
+- `comptext.example.toml`
+- `docs/**` only when documenting the runtime change
+- `PROJEKT.md` only for task-state updates
+
+Forbidden files/actions:
+- `.env`
+- private keys
+- credential files
+- generated assets
+- tags
+- releases
+- workflows unless explicitly in scope
+- provider config secrets
+
+Allowed commands:
+- `git status`
+- `git diff`
+- `git log`
+- `Get-Content`
+- `Select-String`
+- `cargo fmt --all --check`
+- `cargo check`
+- `cargo test`
+- `cargo clippy -- -D warnings`
+- `cargo run --bin ctxt -- --json validate --run`
+
+Required validation:
+- `cargo fmt --all --check`
+- `cargo check`
+- `cargo test`
+- `cargo clippy -- -D warnings`
+- `cargo run --bin ctxt -- --json validate --run`
+- `git --no-pager diff`
+- `git --no-pager status --short --branch`
+
+Git policy:
+- Read-only Git inspection is allowed.
+- No staging, commit, push, tag, release, PR, or merge unless explicitly requested.
+
+Network policy:
+- Local-only.
+- No provider calls, external agent execution, MCP server use, or live external network calls.
+
+Stop conditions:
+- Validation fails and cannot be fixed with small in-scope changes.
+- Dependency download, provider call, external agent execution, or network access is required.
+- Secret material or private auth material is needed.
+- Applying untrusted proposal output would mutate active source without approval.
+
+### release-prep
+
+Use for local release-candidate preparation, manifests, release checklists, and final local validation before an explicitly requested release action.
+
+Allowed files:
+- `README.md`
+- `docs/**`
+- `Cargo.toml`
+- `Cargo.lock`
+- `comptext.example.toml`
+- `PROJEKT.md` only for task-state updates
+- release notes only when explicitly requested
+
+Forbidden files/actions:
+- tags unless explicitly requested
+- releases unless explicitly requested
+- pushes unless explicitly requested
+- PRs unless explicitly requested
+- workflows unless explicitly in scope
+- provider configs
+- secrets
+- generated binary artifacts unless explicitly requested
+
+Allowed commands:
+- `git status`
+- `git diff`
+- `git log`
+- `Get-Content`
+- `Select-String`
+- `cargo fmt --all --check`
+- `cargo check`
+- `cargo test`
+- `cargo clippy -- -D warnings`
+- `cargo run --bin ctxt -- --json validate --run`
+
+Required validation:
+- `cargo fmt --all --check`
+- `cargo check`
+- `cargo test`
+- `cargo clippy -- -D warnings`
+- `cargo run --bin ctxt -- --json validate --run`
+- release-claim scan with `Select-String`
+- `git --no-pager status --short --branch`
+
+Git policy:
+- Read-only Git inspection is allowed.
+- No staging, commit, push, tag, release, PR, or merge unless explicitly requested.
+
+Network policy:
+- Offline-only by default.
+- No provider calls, external agent execution, MCP server use, or live external network calls.
+
+Stop conditions:
+- A tag, release, push, remote branch, PR, merge, or registry publication is needed without explicit authorization.
+- Release claims exceed validated local evidence.
+- Secret material or private auth material is needed.
+- Validation fails and cannot be fixed within the declared task scope.
+
+### visual-assets
+
+Use only for explicitly requested Figma, screenshot, image, or asset preparation work.
+
+Allowed files:
+- `assets/**` only when explicitly requested
+- `docs/**` only when the active task explicitly allows asset references
+- `README.md` only when the active task explicitly allows asset references
+- `PROJEKT.md` only for task-state updates
+
+Forbidden files/actions:
+- `src/**`
+- `tests/**`
+- `Cargo.toml`
+- `Cargo.lock`
+- workflows
+- provider configs
+- secrets
+- tags
+- releases
+
+Allowed commands:
+- `git status`
+- `git diff`
+- `git log`
+- `Get-Content`
+- `Select-String`
+
+Required validation:
+- `git --no-pager diff -- assets docs README.md PROJEKT.md`
+- asset reference scan with `Select-String`
+- `git --no-pager status --short --branch`
+
+Git policy:
+- Read-only Git inspection is allowed.
+- No staging, commit, push, tag, release, PR, or merge unless explicitly requested.
+
+Network policy:
+- Offline-only unless the user explicitly enables Figma or asset generation for this mode.
+- Figma, image generation, browser screenshots, MCP, and external asset tools remain forbidden unless explicitly requested for the active task.
+- Provider LLM calls remain forbidden.
+
+Stop conditions:
+- Asset work is requested outside `visual-assets` mode.
+- Figma, browser, MCP, network, or generated assets are needed without explicit user instruction.
+- Required change touches runtime, tests, Cargo files, workflows, provider configs, tags, releases, or secrets.
+- Asset provenance or license status is unclear.
+
 ## Default allowed paths
 
 - `README.md`

PROJEKT.md

@@ -19,13 +19,35 @@ CompText CLI is an experimental terminal context client for building determinist
 
 ### Current State
 ```text
-CURRENT_PHASE: 17
-CURRENT_TASK: Antigravity Plugin Bundle Skeleton
-LAST_GREEN_PHASE: 17
-STATUS: complete
-NEXT_ALLOWED_ACTION: Phase 18 planning on feature branch
+REPOSITORY: ProfRandom92/comptext-cli
+LATEST_SYNCED_COMMIT: 3706133 Local snapshot: add phase 5e review workflow contract
+BRANCH: main synced with origin/main
+CURRENT_PHASE: 5e
+CURRENT_TASK: README R1 community upgrade and v0.1.0 release candidate preparation
+LAST_GREEN_PHASE: 5e
+STATUS: release-candidate-prep
+NEXT_ALLOWED_ACTION: Step 1 README community upgrade using tasks/README_R1_COMMUNITY.md
 ```
 
+### Current Validation Baseline
+```text
+cargo fmt --all --check: green
+cargo check: green
+cargo test: green
+cargo clippy -- -D warnings: green
+cargo run --bin ctxt -- --json validate --run: green
+unit tests: 37 green
+smoke tests: 83 green
+```
+
+### Current Local Working Model
+- `PROJEKT.md` is the project source of truth.
+- `AGENTS.md` defines repository agent safety rules.
+- `tasks/*.md` defines concrete work slices.
+- `.agents/skills/*` defines reusable working skills.
+- Codex/Antigravity may work only inside declared task scope.
+- Commit, push, tag, and release only when explicitly requested.
+
 ### Autonomy Contract
 - **Allowed Modifications**: May edit source code (`src/**`), tests (`tests/**`), docs (`docs/**`), skills (`.agent/skills/**`, `.agents/skills/**`), prompts (`prompts/**`), and configurations (`Cargo.toml`, `comptext.example.toml`).
 - **Allowed Commands**: May run local compilation, lint checks, tests, and formatting validation.
@@ -85,26 +107,9 @@ If remote Git interaction is required without explicit remote authorization, sto
 
 | Phase | Description | Goal / Scope | Status |
 |---|---|---|---|
-| **Phase 0** | Repo Genesis & Bootstrap | Scaffold Rust project, basic commands (`help`, `doctor`, `providers list`, `version`), verify CI | **COMPLETE** |
-| **Phase 1** | CLI Shell Hardening | Hardening argument parsing, input handling, and errors for the base shell commands | **COMPLETE** |
-| **Phase 2** | Context Pack Contract | Implement `ctxt context inspect`, `ctxt context pack --task "..."`, and `ctxt ask --dry-run "..."` | **COMPLETE** |
-| **Phase 3** | Provider Adapter Layer | Define provider interface and Dummy offline test provider | **COMPLETE** |
-| **Phase 4** | Ollama Local Adapter | Support local Ollama integrations with explicit network boundaries | **COMPLETE** |
-| **Phase 4B** | Skill Registry Normalization | Normalize the local Antigravity skill structure and crystallize autonomy rules | **COMPLETE** |
-| **Phase 4C** | Long-Run Autonomy Hardening | Harden state machine progression rules and git safety boundaries | **COMPLETE** |
-| **Phase 5** | Proposal Mode | Implement `ctxt propose` to output changes as structured proposals | **COMPLETE** |
-| **Phase 6** | Apply Gate | Implement `ctxt apply` to confirm/apply changes and run verification | **COMPLETE** |
-| **Phase 7** | Provider Config Layer | Support dynamic provider profile switching and configurations | **COMPLETE** |
-| **Phase 8** | OpenAI-Compatible Adapter | Implement OpenAI adapter skeleton | **COMPLETE** |
-| **Phase 9** | Validate and Benchmark | Local validation, dry-runs, and deterministic benchmark flows | **COMPLETE** |
-| **Phase 10** | MVP Stabilization & Release Readiness | Audit documentation, verify command flows, safety hygiene checks | **COMPLETE** |
-| **Phase 11** | Release Packaging | Package CLI binary, finalize manifests, release artifact generation | **COMPLETE** |
-| **Phase 12** | Antigravity CLI Governance & Token Economy | Antigravity governance docs, token economy rules, skill/hook/permission target architecture | **COMPLETE** |
-| **Phase 13** | Skill Bundle Registry | Local skill bundle registry and starter skill templates | **COMPLETE** |
-| **Phase 14** | Hook/Permission Integration | Hook boundaries, dynamic run approvals | **COMPLETE** |
-| **Phase 15** | Cryptographic Provenance Engine | local SHA-256 provenance manifests | **COMPLETE** |
-| **Phase 16** | Agent State Contract | Add local agent-state capture/verify/report | **COMPLETE** |
-| **Phase 17** | Antigravity Plugin Bundle | Implement ctxt antigravity commands, local templates, and docs | **COMPLETE** |
+| **Phase 5e** | README R1 Community Upgrade & v0.1.0 Release Candidate Preparation | Upgrade README through `tasks/README_R1_COMMUNITY.md`, keep deterministic context and safety boundaries intact, and prepare release-candidate review state | **ACTIVE: release-candidate-prep** |
+
+Historical implementation phases are not the active planning source for this branch snapshot. The current executable work queue is task-scoped and must be read from `tasks/*.md`, with `tasks/README_R1_COMMUNITY.md` as the next allowed task.
 
 ---
 
@@ -118,6 +123,9 @@ COMMANDS_RUN: <list of commands executed>
 VALIDATION: <validation output summary>
 ARTIFACTS: <list of generated artifacts>
 GIT: <read-only status by default; local commit only if explicitly authorized; remote action only if separately explicitly authorized>
+NETWORK: <offline-only | local-only | allowed-external>
+SECRETS: <secrets status>
+POLICY_DECISIONS: <policy status>
 RISKS: <analysis of potential risks>
 NEXT: <next action or phase name>
 ```