docs: regenerate rules from documentation@e73e5ef

[harper-skills-sync]

Automated regeneration of docs-driven skill rules, now synced to HarperFast/documentation@e73e5ef.

Why these rules changed

This PR changes each rule below relative to main, where it was last synced from the docs commit shown. The trigger commit is not necessarily what changed a given rule — drift accumulates across every docs commit since the rule’s recorded baseline (below).

• custom-resources — last synced from docs@9e6ecf8
• deploying-to-harper-fabric — last synced from docs@2cfb813
• programmatic-table-requests — last synced from docs@9e6ecf8

Docs commits since baseline (9e6ecf8..e73e5ef)

e73e5efb	Clarify worker sharing and preview policy setup
e93f5ebe	Clean previews independently on each node and verify removal
759b2e0c	Guard preview cleanup and align isolation references
e068f296	Add isolated per-PR previews to the CI deployment guide
94c5e59f	Limit the fork exception to the harper import, and note isolated apps' listener
b18dffc7	Give the fork and replication warnings sentences of their own
1f8f6198	Qualify the guide's restart claim, and the heap limit's timing
a678342d	Correct the fork, socket, heap and restart details the review raised
cd63060c	Document isolated applications, branched databases, and threads.maxIsolated
3c4426f8	Fail on a missing job id, authenticate npm ci, qualify LB routing, and keep a password
79931719	Keep the cluster URL for the wait step, and say when the job was not found
bb1be3b2	Define RELEASE_TAG for the curl recipe, and tighten round-5 wording
49fea2dc	Retry failed job polls, and poll the node that received the deploy
f35f5cc5	Run the scratch Harper's own CLI, and move example labels into prose
8b07fdf9	Limit the core-only rolling-job failure to the restart-only path
4c74451e	Tell agents to run documented commands against a throwaway Harper with a scratch HOME
6994addd	Stop the wait recipes on a failed deploy, and qualify what the rolling job does
9f296bed	Lead the CI deploy guide with OIDC, and correct the deploy reference where it disagrees with Harper
aff769bc	Correct the http.compressionThreshold default to 0 and document compression of every serializeStream return form (#697)
2cfb8131	Give the fallbacks of a rejected release sentences of their own
f6dab12a	Date canary certification to 5.4.0, and add it to the 5.4 release notes
d2bd2998	Say the canary replaces worker 0
9313a3d8	Wait for the rolling job in CI, and say when a restart goes unchecked or fails closed
7a4a60d0	Badge canary certification for v5.3.2, since v5.3.1 shipped without it
bc6e5969	Tighten four sentences of the canary certification docs
7c51abfc	Say that a worker not yet replaced ignores the release's files until its rollout ends
687d99c8	Document canary certification of a restarting deploy
a79ba2ff	Say a durable session resumes best-effort after a restore or copy, and resets only on pruned history
a75ae2d1	Say that a durable session's positions are checked on the node that saved them
b2c5eda9	Date the checked resume and durable-session changes to 5.4.0, on a new 5.4 release-notes page
6c0b3e2b	Note that each MQTT connection keeps its own Last Will, so a taken-over connection publishes its own
3ad3778d	Badge the durable-sessions section with the release that changed it
175f48f9	Lead each way a durable session resets with a bold label, like the page's other lists
9ebf8c65	Badge the resume-position section with the release that adds it
7e6b92fd	Note that resubscribing continues a durable topic, and that a clean start takes the session over
d70cf417	Document how a durable MQTT session resets when it can no longer catch up
000cf58f	Say a record subscription resumes while its own history is retained
ede39616	Note that a resume position cannot see a transaction committing below it
12f74a1e	Document resuming a subscription from a checked position
9df1db19	Date agent.httpFetch to v5.3.2, and say what it does not bound
4e3da70e	Keep the version note in the http_fetch warning as plain text
e6078e15	Say agent.httpFetch can be set by env var, CLI argument or set_configuration
ee59481e	Document agent.httpFetch: turn off or host-limit the agent's http_fetch
2bf8b1ee	Match a decision to its calibration summary on the population key (#706)
ea7e78ac	Document `models.decide`: decision backends, the generative adapter, likelihood scoring, the `@decide` directive, and durable decisions (#688)
70124a4b	Say a local file: source is unidentified, as HarperFast/harper#2954 records it
d7bffc3a	Scope the install fingerprint to deploys and stages, and document the file: and unreadable-lockfile cases
29c77350	Say that a mutable reference resolves differently between installs, and list every peer_results field precisely
46b5ce5c	Say exactly when a peer's install_matches is null, and name the unidentified source
a9022ee2	Document how a replicated deploy reports what each node installed
c0c27eeb	docs(v4 analytics): mark apply-failures as added in v4.7.39
6cbf28c1	docs(v4 analytics): match the replication rows to what 4.7 records
2848fe0b	docs(v4 analytics): split the apply-failures description into two sentences
54bd7eb4	docs(v4 analytics): list the apply-failures replication metric
76b173f5	Document the optional AWS SDK peer requirement for S3 import/export jobs (v5.3) (#672)
61920abb	docs(mcp): word allowlist filtering for 5.3+, isolate the 5.1/5.2 bug
5ebd3818	docs(mcp): date the allowlist-first dispatch order to v5.3.0
42fcd75c	docs(mcp): split the dispatch-mirroring paragraph into scannable sentences
023715b7	docs(mcp): correct the structure_user and canonical-name filtering rules
8a2fd652	docs(mcp): an `operations` allowlist bounds structure_user in tools/list
a2814921	docs(release-notes): split 5.3 warnings into separate sentences
9a9eee84	docs(release-notes): refine native HNSW eligibility and backport ref
7525342a	docs(release-notes): tighten 5.3 claims per review
0309f0cb	docs(release-notes): complete the 5.3.0 release summary
bf2fc5ec	Date the restore subscription change to 5.3.1, which ships it, instead of 5.3.0
10c0c80c	Say the restore behavior change in plain text instead of a badge at the start of a paragraph
a86e8dc6	Say that a restore which fails before changing anything ends subscriptions with DATABASE_CLOSING
83fbfc41	Document that a restore ends subscriptions opened before it
51d15175	docs(ssh-keys): say the release-noted block starts at its #name line
f0d1d97a	docs(ssh-keys): name the exact IdentityFile path and what delete leaves
7428c029	docs(ssh-keys): document the BEGIN/END lines around each key's ssh config block
fd83d149	docs(ssh-keys): say a clone that can't get its SSH keys stops and retries
20e8c817	docs(ssh-keys): say which enc:v1: values pass through, and list the HostName % rule
10dc8e13	docs(ssh-keys): list a backslash among the refused host values
da77de66	docs(ssh-keys): list generate, name every host rule, and add a 5.3 release note
39207060	docs(ssh-keys): list an SSH certificate among the refused keys
05cf515a	docs(ssh-keys): document which keys and host values add_ssh_key accepts
e7c0ae18	docs(deploy): tighten the kept-release wording, and say an already-live retry restarts every worker
12d2c627	docs(deploy): document returning to a previous release by deployment_id, and retrying an activation
0111884c	docs(deploy): put the no-test-load caveat in a warning block
60633af2	docs(deploy): say a deploy is not test-loaded before it goes live under the default lockdown
0c7ca981	Say a role can store a non-grantable operation name without being granted it
4276e27d	docs(roles): the legacy catchup operation can no longer be granted
68760d9c	docs(roles): give the literal-token caveat its own sentence
44ee4f0b	docs(roles): say which operations a role allowlist can grant
88e29dff	docs(replication): document sendsTo/receivesFrom on Update Node (#684)
e3d3321d	docs(deploy): lead the root-config list items with bold terms, like the rest of the page
5d748ca8	docs(deploy): say when a deploy updates the root config entry
6e8a01cb	docs(roles): state the limits of the operations allowlist (#631)
96371aa5	Keep the version out of the badge in the get_status table
795c12de	Make the other two pages agree about the deploy response and get_status
7c066321	Match the page's version convention, and let the super_user gate stand alone
37a9e653	Correct the deploy response and document the restart it does not do
fb611006	Match the table's own version convention for activated_from
8154e864	Bring the staged-deploy docs to the shape that merged
72e10853	Split the mixed-version warning into single-claim sentences
45ef13f2	Document staging a component build and activating it later
5b2b8bb4	Revert "Document Table.oldestRetainedAuditTime() and the subscription catch-up horizon (#660)"
d33af897	Badge payloadRetention.maxSize with the release it first shipped in (v5.1.15)
e407f312	Document deployment.stagingRetention.maxCount and payloadRetention.maxSize
b1001d72	Add AI review workflows, aimed at the stale-contradiction class (#667)

Repaired during generation

The first regeneration of these rules failed its checks, and a repair pass fixed it. Check that each restored fact landed where it belongs.

• deploying-to-harper-fabric — 1 repair: restored .env, HARPER_CLI_TARGET, git fetch, package="@harperdb/status-check", package="HarperFast/status-check", package="git+ssh://git@github.com:HarperDB/secret-app.git", package="https://example.com/application.tar.gz", package="https://github.com/HarperFast/status-check"

Produced by .github/workflows/generate.yaml. Review the diff as you would any rule change — the generator reads the docs build output and rewrites mode: generate / imports mode: direct rule bodies, then reassembles AGENTS.md. See docs/plans/docs-driven-skills.md.

🤖 Generated with Claude Code