Merge origin/main into feature/issue-64-auto-default-milestone

Resolve conflicts in STATE.md (keep all quick task entries from both sides)
and requirements.json (recompute content hash for merged set).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: jobordu

.github/pull_request_template.md

@@ -18,6 +18,7 @@
 - [ ] Updates CHANGELOG.md for user-facing changes
 - [ ] No unnecessary dependencies added
 - [ ] Works on Windows (backslash paths tested)
+- [ ] Relevant agent-skill workflow considered (`task-intake`, `idea-refine`, `code-review-and-quality`, `security-and-hardening`, `shipping-and-launch`)
 
 ## Breaking Changes
 

.github/workflows/secret-scan.yml

@@ -36,8 +36,15 @@ jobs:
           fetch-depth: 0
 
       - name: Install gitleaks
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          GITLEAKS_VERSION=$(curl -s https://api.github.com/repos/gitleaks/gitleaks/releases/latest | grep '"tag_name"' | sed 's/.*"v\(.*\)".*/\1/')
+          GITLEAKS_VERSION=$(curl -sH "Authorization: Bearer $GH_TOKEN" https://api.github.com/repos/gitleaks/gitleaks/releases/latest | grep '"tag_name"' | sed 's/.*"v\(.*\)".*/\1/')
+          if [ -z "$GITLEAKS_VERSION" ]; then
+            echo "::error::Failed to fetch latest gitleaks version from GitHub API"
+            exit 1
+          fi
+          echo "Installing gitleaks v${GITLEAKS_VERSION}"
           curl -sSfL "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" | tar xz
           chmod +x gitleaks
 

.gitignore

@@ -98,6 +98,15 @@ states/
 .planning/formal/coverage-gaps.md
 .planning/formal/assumption-gaps.md
 
+# Formal verification run artifacts (regenerated every verify cycle)
+.planning/formal/diff-report.md
+.planning/formal/gates/
+.planning/formal/promotion-changelog.json
+.planning/formal/suspects.md
+
+# Agent memory logs (runtime artifacts)
+.planning/memory/
+
 # Nested planning artifacts in .formal
 .planning/formal/alloy/.planning/
 
@@ -141,3 +150,7 @@ bin/.planning/
 # Session artifacts from cycle2 simulations (route to os.tmpdir() instead)
 .planning/formal/cycle2-simulations/
 .planning/quorum/slot-results/
+
+# Routing policy runtime state (learned bandit data)
+.nf-routing-rewards.jsonl
+.nf-river-state.json

.planning/STATE.md

@@ -15,12 +15,28 @@ See: .planning/PROJECT.md
 | # | Description | Date | Commit | Status | Directory |
 |---|---|---|---|---|---|
 | 374 | Make API slots backup-only | 2026-04-04 | 99b79b4f | Verified | [374-make-api-slots-backup-only-dispatch-to-a](./quick/374-make-api-slots-backup-only-dispatch-to-a/) |
+| 375 | issue-47-agents-skip-formal-modeling | 2026-04-05 | d174cae7 | Verified | [375-issue-47-agents-skip-formal-modeling](./quick/375-issue-47-agents-skip-formal-modeling/) |
 | 379 | Issue #46: Add formal model staleness detection via content hashing | 2026-04-05 | 7ae0fe01 | Needs Review | [379-issue-46-add-formal-model-staleness-dete](./quick/379-issue-46-add-formal-model-staleness-dete/) |
+| 380 | Improve nForma reporting for feature usefulness and bugs caught | 2026-04-07 | 0e3bb9ee | Verified | [380-improve-nforma-reporting-for-feature-use](./quick/380-improve-nforma-reporting-for-feature-use/) |
+| 380 | Delegate quorum slot coding to external agents via quorum-slot-dispatch.cjs | 2026-04-06 | f56c7d43 | Verified | [380-delegate-quorum-slot-coding-to-external-](./quick/380-delegate-quorum-slot-coding-to-external-/) |
+| 380 | Trim packaged skills to 6, merge into lifecycle | 2026-04-07 | 807f0c5b | Pending | [380-trim-packaged-skills-to-6-merge-removed-](./quick/380-trim-packaged-skills-to-6-merge-removed-/) |
 | 380 | Issue #64: Make --auto the default for milestone workflows — complete default_milestone config feature | 2026-04-07 | c7df57eb | Verified | [380-issue-64-make-auto-the-default-for-miles](./quick/380-issue-64-make-auto-the-default-for-miles/) |
+| 381 | Add --delegate flag to nf:quick for full task delegation via Mode C dispatch | 2026-04-07 | e77c29eb | Verified | [381-add-delegate-flag-to-nf-quick-for-full-t](./quick/381-add-delegate-flag-to-nf-quick-for-full-t/) |
+| 381 | Create checklist registry JSON + matching script | 2026-04-07 | 0c515031 | Pending | [381-create-checklist-registry-json-with-trig](./quick/381-create-checklist-registry-json-with-trig/) |
+| 382 | Implement Tier 0 policy interface and Tier 1 River bandit layer for routing authority ladder in selectSlot | 2026-04-07 | 1fc88449 | Verified | [382-implement-tier-0-policy-interface-and-ti](./quick/382-implement-tier-0-policy-interface-and-ti/) |
+| 383 | Wire task-intake routing into PresetPolicy, update nf:quick command metadata with delegate flag, add delegation docs | 2026-04-07 | 40ef3ab3 | Verified | [383-wire-task-intake-routing-into-presetpoli](./quick/383-wire-task-intake-routing-into-presetpoli/) |
 
 ## Session Log
 
+- 2026-04-05 - Completed quick task 375: issue-47-agents-skip-formal-modeling
 - 2026-04-04: Completed quick task 374 - Make API slots backup-only
 - 2026-04-04: STATE.md regenerated by /gsd:health --repair
 - 2026-04-05: Completed quick task 379 - Issue #46: Add formal model staleness detection via content hashing
+- 2026-04-07: Completed quick task 380 - Improve nForma reporting for feature usefulness and bugs caught
+- 2026-04-06 - Completed quick task 380: Delegate quorum slot coding to external agents via quorum-slot-dispatch.cjs
+- 2026-04-07: Completed quick task 380: Trim packaged skills to 6
 - 2026-04-07: Completed quick task 380 - Issue #64: Make --auto the default for milestone workflows
+- 2026-04-07 - Completed quick task 381: Add --delegate flag to nf:quick for full task delegation via Mode C dispatch
+- 2026-04-07: Completed quick task 381: Create checklist registry JSON + matching script
+- 2026-04-07 - Completed quick task 382: Implement Tier 0 policy interface and Tier 1 River bandit layer for routing authority ladder in selectSlot
+- 2026-04-07 - Completed quick task 383: Wire task-intake routing into PresetPolicy, update command metadata, add delegation docs

.planning/STATE.md.bak-2026-02-26T19-33-36

@@ -2,7 +2,7 @@
 -- GENERATED — do not edit by hand.
 -- Source of truth: src/machines/nf-workflow.machine.ts
 -- Regenerate:      node bin/generate-formal-specs.cjs
--- Generated:       2026-04-06
+-- Generated:       2026-04-07
 
 -- nForma Quorum Vote-Counting Model (Alloy 6)
 -- Requirements: ALY-01