fix(skills): tighten strict-tier cite-only licensing in ADR standards (#1859)

# Pull Request

## Description

This PR tightened the strict-tier cite-only licensing posture of the ADR
standards so that the project's published architecture-decision guidance
no longer reproduces third-party copyrighted text. It resolved three
strict-tier audit findings on the main branch.

The IEEE 42010 reference in the *adr-author* standards excerpts was
reduced to a strict cite-only form. The bullet now carries the precise
designator *ISO/IEC/IEEE 42010:2022*, the official standard title, the
ISO catalog URL, and an explicit "cite only; do not quote" qualifier,
replacing the weaker prior phrasing.

The Y-Statement formula in *adr-standards.instructions.md* previously
reproduced the published six-slot sentence verbatim. It was replaced
with an original HVE rendering of the same six-slot structure, and the
attribution blockquote was corrected to credit Olaf Zimmermann and Uwe
Zdun for the concept while clarifying that the template wording is HVE's
own and not a reproduction of the published sentence.

The matching Y-Statement slot description in the *adr-author* standards
excerpts was reworded into the project's own phrasing so the skill
reference stays aligned with the instructions and retains the Zimmermann
and Zdun citation without echoing the source text.

## Related Issue(s)

Closes #1858

## Type of Change

**Code & Documentation:**

* [x] Documentation update

**AI Artifacts:**

* [x] Copilot instructions (`.github/instructions/*.instructions.md`)
* [x] Copilot skill (`.github/skills/*/SKILL.md`)

## Testing

Ran the relevant validation suite against the edited files: frontmatter
validation (560 files, 0 errors), skill structure validation (21 skills,
0 errors), collection metadata validation (13 collections, 0 errors),
and plugin validation (13 collections, 0 errors). The edited files
produced no markdown lint output; the only `lint:md` failures are
pre-existing and unrelated, in `evals/results/subagent-stimuli/`.

## Checklist

### Required Checks

* [x] Documentation is updated (if applicable)
* [x] Files follow existing naming conventions
* [x] Changes are backwards compatible (if applicable)

### Required Automated Checks

* [x] Frontmatter validation: `npm run lint:frontmatter`
* [x] Skill structure validation: `npm run validate:skills`

## Security Considerations

* [x] This PR does not contain any sensitive or NDA information

## Additional Notes

The plugin and extension copies of these instruction and skill files are
relative symlinks to the sources, so the edits propagate automatically
and require no regenerated output. Follow-on items identified during the
audit but out of scope here include reconciling the audit M-6 wording,
the separate BRD strict-tier remediation thread, and normalizing the
Nygard cite-only separator.

Author: WilliamBerryiii

.github/instructions/project-planning/adr-identity.instructions.md

@@ -26,6 +26,7 @@ Every conversation turn that elicits decision content runs through three interna
 * Do not select the chosen option for the user.
 * Do not skip a phase or partially advance one. Hard gates remain hard.
 * Do not prescribe a target system, decider list, or supersession link.
+* Do not solicit or record personal contact information, secrets, credentials, or third-party PII; steer stakeholder capture toward roles or team handles.
 * Do not lecture on MADR or ASR theory. Reference standards only when the user asks or a hard gate requires it.
 
 ## Progressive Hint Engine

.github/instructions/project-planning/adr-standards.instructions.md

@@ -98,11 +98,11 @@ Chosen option: "{title of option 1}", because {justification. e.g., only option,
 
 The Y-Statement is a six-slot decision capture formula authored by Olaf Zimmermann and Uwe Zdun. The formula condenses an architectural decision into a single sentence covering use case, concern, chosen option, alternatives, target quality, and accepted downside.
 
-> Attribution: Olaf Zimmermann and Uwe Zdun. The six-slot formula is reproduced verbatim below from the published Y-Statement formulation.
+> Attribution: The Y-Statement concept originates with Olaf Zimmermann and Uwe Zdun. The six-slot template below is an original HVE rendering of that structure, not a reproduction of the published sentence.
 
 The six slots, in order, are:
 
-> In the context of (USE CASE), facing (CONCERN), we decided for (OPTION) and against (ALTERNATIVES), to achieve (QUALITY), accepting (DOWNSIDE).
+> For (USE CASE), given (CONCERN), choose (OPTION) rather than (ALTERNATIVES) to gain (QUALITY) while accepting (DOWNSIDE).
 
 Slot definitions:
 
@@ -210,7 +210,7 @@ Paraphrased guidance:
 * Capture the architectural decision close to the time it is made, while context, drivers, and considered alternatives are still fresh; latency reduces fidelity.
 * Record the decision as an immutable artifact in the same repository as the system it governs so that history travels with the code.
 * Treat each ADR as version-controlled; do not edit accepted decisions to change their meaning. When circumstances change, supersede the prior decision with a new ADR that links back to the original.
-* Identify the decision-makers, consulted parties, and informed stakeholders explicitly so that accountability is unambiguous.
+* Identify the decision-makers, consulted parties, and informed stakeholders by role or name so that accountability is unambiguous.
 * Capture both the chosen option and the alternatives considered, with the reasoning that led to selection. Future maintainers benefit as much from understanding the discarded options as from the chosen one.
 * Surface tradeoffs, including the qualities sacrificed and the constraints accepted. Hidden tradeoffs become future surprises.
 * Keep the language plain and the scope tight; one decision per record makes downstream linkage and supersession tractable.

.github/skills/project-planning/adr-author/SKILL.md

@@ -37,7 +37,7 @@ The state machine, hard exit gates, autonomy tiers (`manual`, `partial`, `full`)
 Activities:
 
 - **Scope** — capture the decision in one or two sentences; bound it to a single project.
-- **Decision-makers** — record `deciders`, `consulted`, `informed` (RACI-aligned).
+- **Decision-makers** — record `deciders`, `consulted`, `informed` (RACI-aligned). Prefer a role or team handle over a personal name, and never record personal contact details, secrets, credentials, or third-party or customer PII in any ADR field.
 - **Drivers** — list decision drivers (functional needs, business goals).
 - **Constraints** — list non-negotiables (regulatory, platform, contractual, time).
 - **ASR trigger evaluation** — required when `state.outputTemplate == 'madr-v4'`. Evaluate triggers against the rubric in `adr-standards.instructions.md` and record results in `state.asrTriggers[]`. Defer the rubric and full taxonomy to that file and to `references/asr-trigger-taxonomy.md`.

.github/skills/project-planning/adr-author/references/standards-excerpts.md

@@ -26,7 +26,7 @@ Markdown Any Decision Records (MADR) is a lean ADR template optimized for collab
 
 ## Y-Statement
 
-The Y-Statement is a six-slot single-sentence decision capture formula authored by Olaf Zimmermann and Uwe Zdun. It condenses an architectural decision into: use case, concern, chosen option, rejected alternatives, target quality, and accepted downside. The `adr-author` skill uses the Y-Statement as the primary output of `capture` entry mode for low-stakes or reversible decisions where a full MADR long-form would be over-investment.
+The Y-Statement is a six-slot single-sentence decision capture formula authored by Olaf Zimmermann and Uwe Zdun. It captures an architectural decision across six ordered slots, rendered in HVE's own wording: the use case, the concern in tension, the chosen option, the rejected alternatives, the target quality, and the accepted downside. The `adr-author` skill uses the Y-Statement as the primary output of `capture` entry mode for low-stakes or reversible decisions where a full MADR long-form would be over-investment.
 
 - Citation: Olaf Zimmermann and Uwe Zdun, "Y-Statements: A Light Template for Architectural Decision Capturing", published via the Architectural Decision Records community materials (ozimmer.ch / SATURN tutorials, 2018-onward).
 - Purpose in `capture` mode: produce a single durable sentence that records the decision and its tradeoff without demanding an options analysis.
@@ -52,7 +52,7 @@ The Microsoft code-with-engineering-playbook documents the team practice of main
 The following sources inform the practice but MUST NOT be embedded verbatim in skill outputs or templates. Reference them by citation only.
 
 - Michael Nygard, "Documenting Architecture Decisions" (2011) — the foundational ADR essay that established the Context / Decision / Status / Consequences shape later refined by MADR.
-- IEEE 42010:2022 — "Software, systems and enterprise — Architecture description". Standardizes architecture description elements including architecture decisions and their rationale.
+- ISO/IEC/IEEE 42010:2022, "Software, systems and enterprise — Architecture description". ISO catalog: <https://www.iso.org/standard/74393.html>. Cite only; do not quote.
 - arc42 §9 — "Architecture Decisions" section of the arc42 documentation template, providing a lightweight rationale-capture pattern complementary to MADR.
 - joelparkerhenderson/architecture-decision-record — community catalog of ADR templates and examples. Licensed under CC-BY-SA; embedding text would impose share-alike obligations on hve-core and is therefore prohibited. Cite by URL only.
 

scripts/agents/activation-harness/baseline.json

@@ -2,27 +2,27 @@
   "CleanWorkspace": {
     "ScenarioName": "CleanWorkspace",
     "AgentBytes": 10096,
-    "ColdStartBytes": 39456,
+    "ColdStartBytes": 39611,
     "LoadedFiles": [
       {
         "Path": ".github/agents/project-planning/adr-creation.agent.md",
         "Bytes": 10096
       },
       {
         "Path": ".github/instructions/project-planning/adr-identity.instructions.md",
-        "Bytes": 24132
+        "Bytes": 24287
       },
       {
         "Path": ".github/instructions/shared/disclaimer-language.instructions.md",
         "Bytes": 5228
       }
     ],
-    "Hash": "040ed800dd6635ef75de95bb8a201441d8c59194f8b9a547ba64719ee836376a"
+    "Hash": "e7134dfc8e7534b972af260c5e403a31d9824e6db3df74620af82a7da3fec47e"
   },
   "SteadyState": {
     "ScenarioName": "SteadyState",
     "AgentBytes": 10096,
-    "ColdStartBytes": 79798,
+    "ColdStartBytes": 80004,
     "LoadedFiles": [
       {
         "Path": ".github/agents/project-planning/adr-creation.agent.md",
@@ -38,23 +38,23 @@
       },
       {
         "Path": ".github/instructions/project-planning/adr-identity.instructions.md",
-        "Bytes": 24132
+        "Bytes": 24287
       },
       {
         "Path": ".github/instructions/project-planning/adr-standards.instructions.md",
-        "Bytes": 16098
+        "Bytes": 16149
       },
       {
         "Path": ".github/instructions/shared/disclaimer-language.instructions.md",
         "Bytes": 5228
       }
     ],
-    "Hash": "296bb1a41437c68ea6e656b0c84cc6a6cd452054a0776d37004a8a2029df4e9e"
+    "Hash": "599486f52d9dd47eb10fe3f13e5d98352d46d95af6666b750a01504e2d1d85ee"
   },
   "GovernEntry": {
     "ScenarioName": "GovernEntry",
     "AgentBytes": 10096,
-    "ColdStartBytes": 93164,
+    "ColdStartBytes": 93535,
     "LoadedFiles": [
       {
         "Path": ".github/agents/project-planning/adr-creation.agent.md",
@@ -70,27 +70,27 @@
       },
       {
         "Path": ".github/instructions/project-planning/adr-identity.instructions.md",
-        "Bytes": 24132
+        "Bytes": 24287
       },
       {
         "Path": ".github/instructions/project-planning/adr-standards.instructions.md",
-        "Bytes": 16098
+        "Bytes": 16149
       },
       {
         "Path": ".github/instructions/shared/disclaimer-language.instructions.md",
         "Bytes": 5228
       },
       {
         "Path": ".github/skills/project-planning/adr-author/SKILL.md",
-        "Bytes": 13366
+        "Bytes": 13531
       }
     ],
-    "Hash": "2f5812441a5943baa0723f9689c6aa3726253a743256ff6f1ad5fe9f4cf273c1"
+    "Hash": "8c30014845d6df6853f69fe7cb210f495910bccc9464b62af3606d51c1ddb568"
   },
   "AdoptTemplate": {
     "ScenarioName": "AdoptTemplate",
     "AgentBytes": 10096,
-    "ColdStartBytes": 100158,
+    "ColdStartBytes": 100529,
     "LoadedFiles": [
       {
         "Path": ".github/agents/project-planning/adr-creation.agent.md",
@@ -106,11 +106,11 @@
       },
       {
         "Path": ".github/instructions/project-planning/adr-identity.instructions.md",
-        "Bytes": 24132
+        "Bytes": 24287
       },
       {
         "Path": ".github/instructions/project-planning/adr-standards.instructions.md",
-        "Bytes": 16098
+        "Bytes": 16149
       },
       {
         "Path": ".github/instructions/shared/disclaimer-language.instructions.md",
@@ -122,9 +122,9 @@
       },
       {
         "Path": ".github/skills/project-planning/adr-author/SKILL.md",
-        "Bytes": 13366
+        "Bytes": 13531
       }
     ],
-    "Hash": "58482298f587bc5d78344c126179dcc424f40b65bde92160a152062317420979"
+    "Hash": "fbf486cab4fb03fa741a0d75e7aea1d3a878d68e906137cabdba83c32ff2d6bb"
   }
 }