Skip to content

docs(superpowers): consolidate completed artifacts #45

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
therealhieu merged 2 commits into from
Aug 1, 2026
Merged

docs(superpowers): consolidate completed artifacts #45

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a395c75
docs(superpowers): consolidate completed artifacts
therealhieu Aug 1, 2026
3398844
test(docs): follow consolidated checklist path
therealhieu Aug 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
0 ...o-e2e/2026-07-24-md-to-video-e2e-check.md → ...o-e2e/2026-07-24-md-to-video-e2e-check.md
View file
Open in desktop
File renamed without changes.
0 ...e/2026-07-24-md-to-video-e2e-checklist.md → ...e/2026-07-24-md-to-video-e2e-checklist.md
View file
Open in desktop
File renamed without changes.
0 .../2026-07-24-md-to-video-e2e-checkpoint.md → .../2026-07-24-md-to-video-e2e-checkpoint.md
View file
Open in desktop
File renamed without changes.
0 ...4-md-to-video-e2e-final-gate-checklist.md → ...4-md-to-video-e2e-final-gate-checklist.md
View file
Open in desktop
File renamed without changes.
0 ...-md-to-video-e2e-remediation-checklist.md → ...-md-to-video-e2e-remediation-checklist.md
View file
Open in desktop
File renamed without changes.
0 ...26-07-24-stabilize-cli-workflows-check.md → ...26-07-24-stabilize-cli-workflows-check.md
View file
Open in desktop
File renamed without changes.
0 ...6-07-24-stabilize-cli-workflows-design.md → ...6-07-24-stabilize-cli-workflows-design.md
View file
Open in desktop
File renamed without changes.
0 ...026-07-24-stabilize-cli-workflows-goal.md → ...026-07-24-stabilize-cli-workflows-goal.md
View file
Open in desktop
File renamed without changes.
0 ...6-07-24-stabilize-cli-workflows-plan-1.md → ...6-07-24-stabilize-cli-workflows-plan-1.md
View file
Open in desktop
File renamed without changes.
0 ...6-07-24-stabilize-cli-workflows-plan-2.md → ...6-07-24-stabilize-cli-workflows-plan-2.md
View file
Open in desktop
File renamed without changes.
0 ...6-07-24-stabilize-cli-workflows-plan-3.md → ...6-07-24-stabilize-cli-workflows-plan-3.md
View file
Open in desktop
File renamed without changes.
0 ...6-07-24-stabilize-cli-workflows-plan-4.md → ...6-07-24-stabilize-cli-workflows-plan-4.md
View file
Open in desktop
File renamed without changes.
0 ...026-07-24-stabilize-cli-workflows-plan.md → ...026-07-24-stabilize-cli-workflows-plan.md
View file
Open in desktop
File renamed without changes.
0 .../2026-07-26-md2vid-pr-completion-check.md → .../2026-07-26-md2vid-pr-completion-check.md
View file
Open in desktop
File renamed without changes.
0 ...-07-26-md2vid-pr-completion-checkpoint.md → ...-07-26-md2vid-pr-completion-checkpoint.md
View file
Open in desktop
File renamed without changes.
0 ...2026-07-26-md2vid-pr-completion-design.md → ...2026-07-26-md2vid-pr-completion-design.md
View file
Open in desktop
File renamed without changes.
0 ...n/2026-07-26-md2vid-pr-completion-goal.md → ...n/2026-07-26-md2vid-pr-completion-goal.md
View file
Open in desktop
File renamed without changes.
0 ...2026-07-26-md2vid-pr-completion-plan-1.md → ...2026-07-26-md2vid-pr-completion-plan-1.md
View file
Open in desktop
File renamed without changes.
0 ...2026-07-26-md2vid-pr-completion-plan-2.md → ...2026-07-26-md2vid-pr-completion-plan-2.md
View file
Open in desktop
File renamed without changes.
0 ...2026-07-26-md2vid-pr-completion-plan-3.md → ...2026-07-26-md2vid-pr-completion-plan-3.md
View file
Open in desktop
File renamed without changes.
0 ...n/2026-07-26-md2vid-pr-completion-plan.md → ...n/2026-07-26-md2vid-pr-completion-plan.md
View file
Open in desktop
File renamed without changes.
0 ...yperframes-text-occlusion-reproduction.md → ...yperframes-text-occlusion-reproduction.md
View file
Open in desktop
File renamed without changes.
0 ...letion/2026-07-27-visual-integrity-fix.md → ...letion/2026-07-27-visual-integrity-fix.md
View file
Open in desktop
File renamed without changes.
0 ...pgrade/2026-07-27-md2vid-upgrade-check.md → ...pgrade/2026-07-27-md2vid-upgrade-check.md
View file
Open in desktop
File renamed without changes.
0 ...grade/2026-07-27-md2vid-upgrade-design.md → ...grade/2026-07-27-md2vid-upgrade-design.md
View file
Open in desktop
File renamed without changes.
8 changes: 4 additions & 4 deletions ...upgrade/2026-07-27-md2vid-upgrade-goal.md → ...upgrade/2026-07-27-md2vid-upgrade-goal.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,10 +7,10 @@ You are a senior implementation agent working in this repository. Follow project
## Context

- Required execution skill: use `superpowers:subagent-driven-development` (recommended) or `superpowers:executing-plans`.
- Design: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-design.md`.
- Plan index: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan.md`.
- Core plan: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-1.md`.
- Integration plan: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-2.md`.
- Design: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-design.md`.
- Plan index: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan.md`.
- Core plan: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-1.md`.
- Integration plan: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-2.md`.
- Git standard: `docs/standards/git.md`.
- Goal: add a safe `md2vid upgrade` command that updates a verified global npm installation to `md2vid@latest`, launches the new CLI to refresh the Claude skill, and reports synchronized or recoverable partial state accurately.
- Architecture: `scripts/upgrade.ts` verifies the running package against `npm root --global`, invokes npm with fixed arguments and `shell: false`, validates the new package, and uses `process.execPath` plus the new absolute `dist/bin/md2vid.js` to run `install-skill`. The router only dispatches, and `scripts/install_skill.ts` remains the only skill-copy implementation.
Expand Down
0 ...grade/2026-07-27-md2vid-upgrade-plan-1.md → ...grade/2026-07-27-md2vid-upgrade-plan-1.md
View file
Open in desktop
File renamed without changes.
0 ...grade/2026-07-27-md2vid-upgrade-plan-2.md → ...grade/2026-07-27-md2vid-upgrade-plan-2.md
View file
Open in desktop
File renamed without changes.
8 changes: 4 additions & 4 deletions ...upgrade/2026-07-27-md2vid-upgrade-plan.md → ...upgrade/2026-07-27-md2vid-upgrade-plan.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,11 +12,11 @@

## Source Artifacts

- Design: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-design.md`
- Design: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-design.md`
- Standard: `docs/standards/git.md`
- Core plan: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-1.md`
- Integration plan: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-2.md`
- Execution goal: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-goal.md`
- Core plan: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-1.md`
- Integration plan: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-2.md`
- Execution goal: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-goal.md`

## File Responsibility Map

Expand Down
0 ...-tasks-1-through-5-code-quality-review.md → ...-tasks-1-through-5-code-quality-review.md
View file
Open in desktop
File renamed without changes.
0 ...s/part-1-tasks-1-through-5-spec-review.md → ...s/part-1-tasks-1-through-5-spec-review.md
View file
Open in desktop
File renamed without changes.
0 ...s/part-1-tasks-1-through-5-test-review.md → ...s/part-1-tasks-1-through-5-test-review.md
View file
Open in desktop
File renamed without changes.
2 changes: 1 addition & 1 deletion ...-tasks-6-through-8-code-quality-review.md → ...-tasks-6-through-8-code-quality-review.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,4 +62,4 @@ No real `md2vid upgrade` was executed, so this review did not mutate the active

The Part 2 plan’s bare `corepack npm run public:snapshot` command is incompatible with the current snapshot CLI because `--output` is mandatory and the destination must be outside the repository. Mode A generated and checked a candidate under `/private/tmp` and documented this deviation. This review independently ran `corepack npm run public:snapshot:check`; it completed successfully, including 830 passing tests and packed-artifact installation/smoke verification. The tracked `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/feat-md2vid-upgrade/public-snapshot.json` remained unchanged.

The working tree is dirty only because of the three known, intentionally untracked and unchanged Part 1 canonical review artifacts under `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/feat-md2vid-upgrade/docs/superpowers/active/2026-07-27-md2vid-upgrade/reviews/`. They were excluded from Part 2 findings as required.
The working tree is dirty only because of the three known, intentionally untracked and unchanged Part 1 canonical review artifacts under `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/feat-md2vid-upgrade/docs/superpowers/done/2026-07-27-md2vid-upgrade/reviews/`. They were excluded from Part 2 findings as required.
0 ...s/part-2-tasks-6-through-8-spec-review.md → ...s/part-2-tasks-6-through-8-spec-review.md
View file
Open in desktop
File renamed without changes.
4 changes: 2 additions & 2 deletions ...s/part-2-tasks-6-through-8-test-review.md → ...s/part-2-tasks-6-through-8-test-review.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@
- Current HEAD: `4a128b75c5a6205102cfb569f087e841c558d9e8`
- Task-scope patch: `/tmp/md2vid-upgrade-integration-current/task-scope.patch`
- Immutable baseline: `/tmp/md2vid-upgrade-integration-baseline`
- Known baseline artifacts: three Part 1 review files under `docs/superpowers/active/2026-07-27-md2vid-upgrade/reviews/`; excluded from findings and unchanged.
- Known baseline artifacts: three Part 1 review files under `docs/superpowers/done/2026-07-27-md2vid-upgrade/reviews/`; excluded from findings and unchanged.
- Real upgrade executed: no

---
Expand Down Expand Up @@ -147,7 +147,7 @@ No Must fix or Nice to have findings survived verification.
- No tracked implementation, documentation, manifest, or test file changed.
- Final repository status contains only the known, intentionally untracked Part 1 review directory:
```text
?? docs/superpowers/active/2026-07-27-md2vid-upgrade/reviews/
?? docs/superpowers/done/2026-07-27-md2vid-upgrade/reviews/
```
- The three known Part 1 review artifacts retained their baseline SHA-256 values:
- `part-1-tasks-1-through-5-code-quality-review.md`
Expand Down
0 ...6-07-28-auto-dependency-updates-design.md → ...6-07-28-auto-dependency-updates-design.md
View file
Open in desktop
File renamed without changes.
10 changes: 5 additions & 5 deletions ...026-07-28-auto-dependency-updates-goal.md → ...026-07-28-auto-dependency-updates-goal.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,11 @@ You are a senior implementation agent working in this repository. Follow strict
## Context

- Required execution skill: use `superpowers:subagent-driven-development` (recommended) or `superpowers:executing-plans`.
- Design: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-design.md`.
- Research: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-research.md`.
- Plan index: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan.md`.
- Dependency-authority plan: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-1.md`.
- Automation/rollout plan: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md`.
- Design: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-design.md`.
- Research: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-research.md`.
- Plan index: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan.md`.
- Dependency-authority plan: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-1.md`.
- Automation/rollout plan: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md`.
- Git standard: `docs/standards/git.md`.
- Goal: add weekly grouped Dependabot patch updates that safely auto-merge across runtime, optional, development, and GitHub Actions dependencies after repository-enforced checks pass.
- Architecture: root `package.json` supplies operational dependency versions; source templates use stable materialization tokens; Dependabot creates three patch groups; a checkout-free workflow validates immutable metadata and requests native squash auto-merge; protected `main` remains the merge authority.
Expand Down
0 ...6-07-28-auto-dependency-updates-plan-1.md → ...6-07-28-auto-dependency-updates-plan-1.md
View file
Open in desktop
File renamed without changes.
2 changes: 1 addition & 1 deletion ...6-07-28-auto-dependency-updates-plan-2.md → ...6-07-28-auto-dependency-updates-plan-2.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -745,7 +745,7 @@ Verifier evidence retained on 2026-07-28: the single read-only verifier returned
- [x] **Step 6: Commit the remediation**

```bash
git add docs/superpowers/active/2026-07-28-auto-dependency-updates \\
git add docs/superpowers/done/2026-07-28-auto-dependency-updates \\
test/ci/workflows.test.ts .github/workflows/dependabot-auto-merge.yml public-snapshot.json
git commit -m "ci(deps): remove redundant auto-merge approval"
```
Expand Down
16 changes: 8 additions & 8 deletions ...026-07-28-auto-dependency-updates-plan.md → ...026-07-28-auto-dependency-updates-plan.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,18 +12,18 @@

## Source Artifacts

- Design: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-design.md`
- Research: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-research.md`
- Design: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-design.md`
- Research: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-research.md`
- Git standard: `docs/standards/git.md`
- Part 1: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-1.md`
- Part 2: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md`
- Execution goal: `docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-goal.md`
- Part 1: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-1.md`
- Part 2: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md`
- Execution goal: `docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-goal.md`

## Standards Used

- Plan structure: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan.md`
- Part-plan structure: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-2.md`
- Goal structure: `docs/superpowers/active/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-goal.md`
- Plan structure: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan.md`
- Part-plan structure: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-plan-2.md`
- Goal structure: `docs/superpowers/done/2026-07-27-md2vid-upgrade/2026-07-27-md2vid-upgrade-goal.md`
- Git/worktree/commit rules: `docs/standards/git.md`

## Verified Initial Remote State
Expand Down
0 ...07-28-auto-dependency-updates-research.md → ...07-28-auto-dependency-updates-research.md
View file
Open in desktop
File renamed without changes.
0 ...-tasks-1-through-3-code-quality-review.md → ...-tasks-1-through-3-code-quality-review.md
View file
Open in desktop
File renamed without changes.
2 changes: 1 addition & 1 deletion ...s/part-1-tasks-1-through-3-spec-review.md → ...s/part-1-tasks-1-through-3-spec-review.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@

### SPEC-2 — Nice to have — Completed Part 1 steps remain unchecked
- Requirement: The Part 1 plan says its checkboxes track execution, and the execution goal requires every checkbox in the plan to be executed.
- Evidence: `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-1.md:28-648` — all 19 Task 1–3 step checkboxes remain `- [ ]`, including red-test, implementation, verification, and commit steps.
- Evidence: `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-1.md:28-648` — all 19 Task 1–3 step checkboxes remain `- [ ]`, including red-test, implementation, verification, and commit steps.
- Guidance: Mark the completed Task 1–3 steps and record the documented command correction for `public:snapshot`. Do not mark a step unless its corresponding evidence is retained.
- Success checklist:
- [ ] Every completed Task 1–3 step is marked.
Expand Down
0 ...s/part-1-tasks-1-through-3-test-review.md → ...s/part-1-tasks-1-through-3-test-review.md
View file
Open in desktop
File renamed without changes.
2 changes: 1 addition & 1 deletion ...ws/part-2-task-5.1-code-quality-review.md → ...ws/part-2-task-5.1-code-quality-review.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ None identified.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/test/ci/workflows.test.ts:991-1025`
- Existing mutation coverage continues to reject trigger broadening, authority escalation, code execution, weakened provenance, unbound approval, and altered merge behavior.

- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:689-695`
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:689-695`
- The deviation records the concrete canary, observer/trusted run IDs, failed endpoint, HTTP result, root cause, minimal remediation, preserved guards, and requirement for a real Dependabot rerun.

- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/public-snapshot.json:1-7,44-50,804-810`
Expand Down
8 changes: 4 additions & 4 deletions ...es/reviews/part-2-task-5.1-spec-review.md → ...es/reviews/part-2-task-5.1-spec-review.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,10 +16,10 @@
### SPEC-1 — Must fix — Canonical permission requirements contradict the remediation
- Requirement: “add only `actions: read` to the trusted job’s exact permissions” while retaining top-level `permissions: {}`, `contents: write`, and `pull-requests: write`.
- Evidence:
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-goal.md:61` — success criterion still requires only `contents: write` and `pull-requests: write`.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-design.md:269` — data-flow contract still says the trusted job grants only those two permissions.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan.md:164` — completion criterion repeats the obsolete two-permission contract.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:689-693` correctly documents the canary failure and required deviation before commit `e3044ea`, but does not reconcile the other active canonical criteria.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-goal.md:61` — success criterion still requires only `contents: write` and `pull-requests: write`.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-design.md:269` — data-flow contract still says the trusted job grants only those two permissions.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan.md:164` — completion criterion repeats the obsolete two-permission contract.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:689-693` correctly documents the canary failure and required deviation before commit `e3044ea`, but does not reconcile the other active canonical criteria.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/.github/workflows/dependabot-auto-merge.yml:25-28` correctly implements the new three-permission contract.
- Guidance: Update the active goal, design, and plan-index criteria to require exactly:
```yaml
Expand Down
0 ...es/reviews/part-2-task-5.1-test-review.md → ...es/reviews/part-2-task-5.1-test-review.md
View file
Open in desktop
File renamed without changes.
6 changes: 3 additions & 3 deletions ...ws/part-2-task-5.2-code-quality-review.md → ...ws/part-2-task-5.2-code-quality-review.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ Scope reviewed in read-only mode:

- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/.github/workflows/dependabot-auto-merge.yml`
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/test/ci/workflows.test.ts`
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md`
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md`
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/public-snapshot.json`

Reviewed for: removal of approval side effect while preserving trusted `workflow_run` validation, exact live-head recheck, exact native auto-squash match-head merge, no checkout/project execution, exact permissions, strict tests, docs/snapshot coherence, and stale approval behavior.
Expand All @@ -28,7 +28,7 @@ Reviewed for: removal of approval side effect while preserving trusted `workflow

### Evidence

`/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:29` still lists:
`/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:29` still lists:

```text
- review POST with commit_id
Expand All @@ -38,7 +38,7 @@ That line appears inside the “Approved Mode B architecture revision” replace

It conflicts with the Task 5.2 no-review decision in the same file:

`/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:36-40`
`/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:36-40`

```text
The user explicitly decided: `if green auto merge => don't need approval`.
Expand Down
6 changes: 3 additions & 3 deletions ...es/reviews/part-2-task-5.2-spec-review.md → ...es/reviews/part-2-task-5.2-spec-review.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,9 @@

**Problem**

- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:941-982` — Step 10 still captures `reviews` and requires an `APPROVED` review from `github-actions[bot]`.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:984-1052` — Step 11 repeats the same approval requirement and treats it as canary success evidence.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-goal.md:28` and `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/active/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-design.md:31-34` already say the trusted workflow must be merge-request-only and must not create a review or approval side effect.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:941-982` — Step 10 still captures `reviews` and requires an `APPROVED` review from `github-actions[bot]`.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-plan-2.md:984-1052` — Step 11 repeats the same approval requirement and treats it as canary success evidence.
- `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-goal.md:28` and `/Users/hieunguyen/git/hieu/projects/md2vid-public/.worktrees/auto-dependency-updates-impl/docs/superpowers/done/2026-07-28-auto-dependency-updates/2026-07-28-auto-dependency-updates-design.md:31-34` already say the trusted workflow must be merge-request-only and must not create a review or approval side effect.

**Why this is a spec mismatch**

Expand Down
Loading