# S11 — Project-local scripts

## Completion pass 2026-08-07 — the three amendments ratified, the 474 unparked

Re-scanned 2026-08-07 (snapshot 2026-08-08 02:35 UTC). This pass completes the partial re-survey of 02:08 UTC, which had ended with **474 project-automation-script paths parked** behind three unratified spec amendments. The conductor ratified all three; this pass applied them, then wrote the rows they left behind. Every number here was **re-derived live**, not carried over from the parked report: one single-pass `find` across all 140 roots, prune list and `-maxdepth 4` intact, mac-atlas excluded per `self_reference_rule`, ~1s. No sudo; `find`/`grep`/`head`/`file`/`md5` only. Nothing under `~/Projects` was written and no discovered script was executed.

**227 inventory rows:** 33 kit-tool-mirror · 180 project-automation-script · 13 claude-skill-script · 1 mac-atlas scan apparatus. Unknowns: **5**, unchanged — the Godot `gate.sh` name collision plus four `holt-ecosystem-packets` backup copies whose headers do not establish which variant is authoritative. None of the 114 new rows added an unknown, and none of the five was cleared without evidence.

### The 474 was mostly a measurement artefact

That is the honest headline, and it is worth stating plainly because "the surface has doubled" was the wrong conclusion. Of the 474-path gap, **360 were files this census was already looking at and filing in the wrong place**, and 10 were files it should never have been looking at. Only 114 were new automation.

| Class | Files | What it actually was |
| --- | ---: | --- |
| Kit `tools/` mirrors | **301** | Misfiled. `KIT_RE` predates the kit growing a `tools/` directory, so 11 mirrored tools exploded into per-file rows |
| Milkshake worktree | **83** | Misfiled. Already-summarized factory output, in a git worktree the regex was one path segment too shallow to see |
| Virtualenv console scripts | **10** | Out of scope by the spec's own words; only the prune glob disagreed |
| **Genuinely new** | **114** | Real automation, now itemized with bounded head-reads |

### Amendment 1 — `KIT_RE` learns the kit's `tools/` directory

Eleven tools (`check-canon-reads.py`, `check-generated.sh`, `check-install-lane.py`, `frontmatter.py`, `generate-watch-payload.py`, `install-surfaces.py`, `kit-codex-session-start.py`, `kit-remember-hook.sh`, `packet-lint.sh`, `tools-gate.sh`, `verify-conductor.py`) across 301 files. The collapse was **proved, not assumed** — `md5` across every location of every name:

```
check-canon-reads.py       28 files   1 distinct md5
check-generated.sh         28 files   1
check-install-lane.py      28 files   1
frontmatter.py             25 files   1
generate-watch-payload.py  26 files   1
install-surfaces.py        26 files   1
kit-codex-session-start.py 28 files   1
kit-remember-hook.sh       28 files   2   <-- see below
packet-lint.sh             28 files   1
tools-gate.sh              28 files   1
verify-conductor.py        28 files   1
```

The one divergence is not drift. Both odd copies of `kit-remember-hook.sh` are **dated archive snapshots** — `Holt/think-like-fable-holt-anchor-archive-2026-07-30/tools/` and `Kit/_kit-backups/think-like-fable.bak-hygiene-20260729T121858Z/tools/` — i.e. backups doing exactly what a backup is for. A live mirror that differed would have been a real finding; a frozen one is not.

`KIT_RE` was deliberately **not** path-anchored to `think-like-fable/tools/`, even though that is where 275 of the 301 live. The kit is also mirrored into project `_build/` directories — that is how the original 22 names already behave — and 26 of these files sit in `terminus3/_build/`, the Holt archive, and `Kit/_kit-backups/`. Anchoring on the path would have re-split those 26 back into per-file rows: a smaller copy of the defect being fixed. The known cost of basename matching is a same-named impostor, and this surface has already met one (a Godot `gate.sh` inside milkshake, still carried with an `unknown` flag). That cost is accepted and handled per item, not paid by weakening the collapse.

**Effect:** kit-tool-mirror 22 → **33** names, 699 → **1000** mirror files.

### Amendment 2 — the milkshake regex was one segment too shallow

`/milkshake/[^/]*/scripts/` matched `game/scripts` and `play/scripts` and could not match `_worktrees/first-pour-m1-native/scripts/`. Those 83 files are a **git worktree copy of the very cluster being summarized** — same `*_audit.sh` / `*_compositor.py` / `campaign_m<N>_*` factory pattern, all in one directory. Widened to `/milkshake/.*/scripts/`. Over-capture was checked rather than hoped for: the widened form adds exactly those 83 paths and nothing else. Summarized cluster 172 → **255** files, still not itemized.

### Amendment 3 — a virtualenv the prune list could not see

`milkshake/.native-runtime-first-pour-m1-a13da4feb-82c6c449/venv-scons-4.10.1` is a real virtualenv, confirmed by reading its `pyvenv.cfg` (`python3.14 -m venv --copies`, home `/opt/homebrew/opt/python@3.14/bin`). Its ten `bin/` entries — `pip`, `pip3`, `pip3.14`, `python`, `python3`, `python3.14`, `scons`, `scons-configure-cache`, `sconsign`, and a unicode-named python alias — are the interpreter and its own packages, which `item_granularity_threshold` already declares out of scope. Only the prune glob disagreed, because it matched the literal names `venv`/`.venv`. Widened to `'venv*'`/`'.venv*'` (quoted, so the shell cannot expand the glob against the CWD before `find` sees it). This is the one amendment that changes the **candidate set** rather than a classification: 1445 → **1435**.

### The 114 new rows — all characterized, none guessed

Every one got `file -b` plus a bounded head-read (`head -14` to `head -20`, never a full file, no script executed), and every purpose paraphrases that file's **own** header or docstring. **Zero required an `[unknown]`** — this corpus is unusually well-commented, and that is the reason, not a lowered bar.

**71 are terminus3 gate oracles** (`_build/oracles/<task>/gate-oracle.sh`). They share a filename and a shape, which is exactly the pattern the summarization rule exists for — so the question was asked properly and answered with evidence: `md5` shows **all 71 differ from one another**. This is a factory's per-task *output*, not a mirrored tool, so each carries its own row. Each head-read yielded the task name, its stage in the review pipeline (`tasks/working|reviewing|revising|accepted/`), and its two Docker images (`fbtask-<task>-env`, `fbtask-<task>-tests`). Two header variants exist — `$root` with `env_image`/`test_image`, and `$project` with `environment_image`/`tests_image` — and both were parsed rather than one being assumed.

**43 are everything else:** terminus3's hand-maintained `gate-task.sh` (which names the nine guardrails it enforces and the TBench 3.0 schema authority it was reconciled against on 2026-08-05), a task-local `zip_verify.sh`, `terminus3/company/scripts/teardown-chiefs.sh` (the Article IV one-command undo, whose own header records a 2026-08-07 glob-safety verification proving its `terminus3-*` token glob cannot reach a sibling project's run dir), and **40 under `Kit/`** — the `book-it-{pilot2,fleet,stitch}` publishing toolchains plus the kit's own ship/build scripts and six dated backups of them.

The `book-it` toolchain is worth a sentence on its own, because it is a small case study in gates that can actually fail. Its verifiers do not read the source and declare victory: `verify_cornell.py` samples the **rendered pixels** at exact device coordinates, `verify_code.py` measures the rightmost inked pixel per code panel, `gate_raster.sh` proves every page rasterises to exactly 1620×2160 at 229 dpi, and `verify_images.py` exists because a shipped PDF once opened on a typographic title page with the cover art prepared and never placed — a defect none of the pilot's sixteen gates could see, because every one of them measured things that *were* there.

### The kit's build home has moved

The previous pass retired four rows as "genuinely deleted": `holt-ecosystem-packets/scripts/{build-kit-v2.sh, ship-kit.sh, +2 .bak copies}`. This pass found all four **live again at `~/Projects/Kit/scripts/`**. They were not deleted and re-created — the canonical kit's build/ship home **relocated** from `holt-ecosystem-packets` to `Kit/`. `holt-ecosystem-packets/scripts` still exists and still holds other scripts, so this was a targeted move, not a directory disappearing. Worth knowing, because "deleted" and "moved" imply very different things about whether the kit still ships.

The fifth retirement stands unchanged and is still the more interesting one: `Snorkel/terminus/tools/review_gates.py` **still exists**. It was rewritten 2026-08-03 at mode `0644` and lost the executable bit this surface's scan keys on. It *left scope*; it was not removed.

### Gate status

`parity-project-automation-script-count` had been **failing** since 2026-08-08T01:48. It now passes, along with the other two parity probes, and no number was tuned to get there — the probe was corrected, the rows were written, and the two met. Full output: `_pipeline/gate-run.txt`.

## Surface story

The bounded scan finds **1435** automation-relevant executable paths across 140 project roots after excluding mac-atlas. Of those, **1000 files / 33 unique names (69.7%)** are think-like-fable kit mirrors collapsed to one row per tool; **255** are milkshake's summarized factory output; **180** are itemized project automation. Thirteen Claude-skill payload scripts are catalogued separately, and mac-atlas itself is represented by one self-referential apparatus row.

The proportion is the story: **roughly seven in ten executable automation files under `~/Projects` are the same orchestration kit, copied.** That is deliberate architecture, not sprawl — but it does mean a single canonical change has a thousand-file blast radius, and it is why `ship-kit.sh` opens with an L34 drift check that *aborts* rather than syncing over unharvested work.

The S1/S4 cross-check still finds no S11 path referenced in the launchd or cron ledgers, so every row honestly retains the manual trigger. `live_now` is `n/a` throughout: this is a source-file census and it does not claim whether a deployed consumer is running.

mac-atlas is now a persistent project on Wolf's machine. It is excluded from the parity probe and represented only by the apparatus summary, because the census creates and changes that project's tooling while it runs.

## Self-use answers

1. **Shared kit versus project-unique automation.** 1000 of 1435 candidate files (69.7%) are think-like-fable kit mirrors, across 33 unique tool names. The fixed basename rule still pulls one unrelated Godot platform gate into that bucket; its row is flagged `unknown` rather than claimed as a kit mirror. The rest is 255 summarized milkshake factory outputs and 180 individually catalogued project scripts. The 227 rows describe the structure instead of repeating 1435 near-identical files.
2. **Remote-facing scripts.** Unchanged from the last pass in substance: Agentify's egress policy script names provider/control-plane host categories; Cinderdoc's sync targets a GitHub remote and its monitor accepts a runtime-provided alert-webhook URL; Holt's backup uses SSH/rsync to a Tailscale Pi and Wolf Go; Wolf Orchestra's NotebookLM helper calls that CLI; `watch-local/payload/remote-loop.sh` is an SSH watcher whose target comes from its caller. The 114 new rows add **no new remote reach**: the terminus3 oracles talk to local Docker images, and `teardown-chiefs.sh` operates only on local run/seat/handoff directories. No remote was contacted in this read-only scan.
3. **Stale or superseded copies.** Now **13** prune candidates. Six are `ship-kit.sh` generations (`.orig`, `.bak-kit-ratify-land`, `.bak-kit-ship-order`, `.bak-pre-liveskills-…`, `.bak-predupfix-…`, and the `_kit-backups/watcher-dedup-…` snapshot); five are the previously-known `build-pool.sh.bak-*` ×2, `claude-fallback.sh.bak-*` ×2 and `keep-fed.sh.old-preswap`; one is `watch-local/payload/watch-local.sh.bak-restart`; one is milkshake's `art-pipeline.sh`, marked retired by its own header. The oldest `ship-kit.sh` backup is genuinely a different program — its header still describes the pre-live-skills lane, where steps 3-4 re-zipped v1 and rebuilt v2 and no `~/.claude/skills` sync existed — which is worth noting before anyone assumes the backups are redundant copies of each other.
4. **Credentials.** The path-only safe hard-coded-assignment check returned no candidate path, and every row records `contains_secrets: false`. No secret value was read into an artifact.
5. **Kit completeness.** The live basename probe finds exactly 33 kit-tool names across 1000 mirror paths. Per-name mirror counts are now uneven by design rather than by accident — the 11 `tools/` members appear in 25-28 locations while the older 22 appear in up to 37 — because the newer tools shipped later. The bounded evidence still does not establish a per-project required-tool manifest, so no project is named as a proven partial sync; uneven mirrors remain an investigate signal, not a failure claim. **The 17 previously-itemized `kit-codex-session-start.py` / `kit-remember-hook.sh` project copies are no longer a special case** — they were only itemized because `KIT_RE` did not know their names, and they now sit inside their tools' mirror rows where they belong.
6. **Milkshake factory cluster.** Now **255** paths across `game/scripts`, `play/scripts` and `_worktrees/first-pour-m1-native/scripts`. Their filenames form repeated feature/phase audit, evidence, compositor and `campaign_*` families. They are the script-factory class the spec requires us to summarize; no body in that cluster was read end-to-end.
7. **Safe trimming order.** Start with the 13 backup/retired copies above, after owner confirmation, and note that the ten virtualenv console scripts are now simply out of scope rather than a trimming decision. Investigate the Godot `gate.sh` name collision before deciding its home. Keep the shared kit, the Codex SessionStart hook sources, the terminus3 gate apparatus and its 71 task oracles (deleting one leaves that task unverifiable), the `book-it` publishing toolchains, Agentify's generator and deploy-kit tooling, Cinderdoc's server scripts, the kit-shipping paths now under `Kit/scripts`, and Wolf Orchestra's dispatchers. No S11 path was found in the S1/S4 launchd/cron ledgers.

## Per-item disposition

- `assess-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `audit-done-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `build-index-py` — **keep** — deliberate think-like-fable kit mirror, 29 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `bus-sweep-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `check-canon-reads-py` — **keep** — deliberate think-like-fable kit mirror, 28 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `check-generated-sh` — **keep** — deliberate think-like-fable kit mirror, 28 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `check-install-lane-py` — **keep** — deliberate think-like-fable kit mirror, 28 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `claude-all-watch-py` — **keep** — deliberate think-like-fable kit mirror, 30 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `claude-context-pack-py` — **keep** — deliberate think-like-fable kit mirror, 6 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `claude-grep-sh` — **keep** — deliberate think-like-fable kit mirror, 6 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `claude-verify-sh` — **keep** — deliberate think-like-fable kit mirror, 6 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `codex-all-watch-py` — **keep** — deliberate think-like-fable kit mirror, 30 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `dashboard-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `dispatch-sh` — **keep** — deliberate think-like-fable kit mirror, 35 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `dogfood-verify-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `frontmatter-py` — **keep** — deliberate think-like-fable kit mirror, 25 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `gate-sh` — **investigate** — a same-named Godot platform gate is mechanically grouped with the kit gates by the required basename rule; the collision is flagged, not resolved.
- `generate-watch-payload-py` — **keep** — deliberate think-like-fable kit mirror, 26 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `inject-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `install-surfaces-py` — **keep** — deliberate think-like-fable kit mirror, 26 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `keep-fed-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `kit-codex-session-start-py` — **keep** — deliberate think-like-fable kit mirror, 28 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `kit-remember-hook-sh` — **keep** — deliberate think-like-fable kit mirror, 28 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `lib-sh` — **keep** — deliberate think-like-fable kit mirror, 39 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `normalize-report-sh` — **keep** — deliberate think-like-fable kit mirror, 36 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `offload-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `packet-lint-sh` — **keep** — deliberate think-like-fable kit mirror, 28 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `pool-sh` — **keep** — deliberate think-like-fable kit mirror, 36 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `progress-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `tools-gate-sh` — **keep** — deliberate think-like-fable kit mirror, 28 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `verdict-sh` — **keep** — deliberate think-like-fable kit mirror, 35 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `verify-conductor-py` — **keep** — deliberate think-like-fable kit mirror, 28 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `watch-sh` — **keep** — deliberate think-like-fable kit mirror, 37 locations; the canonical copy governs and a per-project `rm` affects that mirror only.
- `codex-holt-packets-packet-gate-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `codex-holt-packets-packet-state-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `authify-api-smoke-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `ground-api-dev-doctor-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `incentify-api-v1-backup-rotate-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `incentify-api-v1-backup-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `indexify-api-codex-verify-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `indexify-web-codex-verify-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-ship-kit-sh-bak-kit-ratify-land` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation.
- `kit-ship-kit-sh-orig` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation.
- `kit-ship-kit-sh` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation.
- `kit-set-title-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-compose-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-eink-sim-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-prep-figure-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-prep-cover-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-verify-board-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-verify-code-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-verify-cornell-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-verify-cues-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-verify-images-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-compose-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-compose-epub-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-eink-sim-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-prep-figure-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-verify-board-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-verify-code-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-verify-cornell-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-verify-epub-nocss-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-book-it-stitch-tools-compose-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-compose-epub-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-compose-part-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-book-it-stitch-tools-eink-sim-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-gate-raster-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-make-front-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-order-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-book-it-stitch-tools-prep-figure-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-render-part-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-set-title-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-book-it-stitch-tools-verify-board-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-book-it-stitch-tools-verify-code-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-book-it-stitch-tools-verify-cornell-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-tools-verify-epub-nocss-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-build-kit-v2-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-scripts-ship-kit-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `kit-ship-kit-sh-bak-kit-ship-order` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation.
- `kit-ship-kit-sh-bak-pre-liveskills-20260722t232157z` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation.
- `kit-ship-kit-sh-bak-predupfix-20260725t094523z` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation.
- `terminus-sync-skills` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `terminus-correction-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `terminus-review-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `agentify-consumer-kits-run-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `agentify-consumer-kits-status-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `agentify-vendor-kit-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `agentify-egress-nft-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `agentify-verify-box-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `agentify-worker-entrypoint-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-monorepo-backup-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-monorepo-monitor-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-monorepo-restore-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-sandboxed-claude-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-sync-monorepo-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-wait-and-launch-ew-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-wait-and-launch-wave2-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-wait-and-launch-wave3-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-wait-and-launch-wave34-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-wait-and-launch-wave5-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-wait-and-launch-wave6-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-wait-and-launch-wave7-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-backup-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-monitor-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `cinderdoc-restore-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `clipify-sandboxed-claude-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `conductify-agy-worker-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `conductify-grok-worker-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-build-pool-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-build-pool-sh-bak-acceptance` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation. Its bounded header does not establish which variant is authoritative, so it also carries `unknown`.
- `holt-ecosystem-packets-build-pool-sh-bak-queues` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation. Its bounded header does not establish which variant is authoritative, so it also carries `unknown`.
- `holt-ecosystem-packets-claude-fallback-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-claude-fallback-sh-bak-acceptance` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation. Its bounded header does not establish which variant is authoritative, so it also carries `unknown`.
- `holt-ecosystem-packets-claude-fallback-sh-bak-queues` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation. Its bounded header does not establish which variant is authoritative, so it also carries `unknown`.
- `holt-ecosystem-packets-continue-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-keep-fed-sh-old-preswap` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation.
- `holt-ecosystem-packets-onboard-supervisor-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-onboard-supervisor2-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-correction-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-review-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-holt-backup-to-wolfgo-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-local-coder-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `holt-ecosystem-packets-observe-render-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `latered-land-unit-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `latered-launch-unit-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `milkshake-world-queue-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `milkshake-world-super-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `milkshake-art-pipeline-sh` — **prune** — its bounded header marks the automation retired; remove only after owner confirmation.
- `milkshake-launch-lane-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `milkshake-run-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `milkshake-status-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `milkshake-generate-art-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `terminus3-gate-task-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `terminus3-auger-assembly-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `auger-assembly`; deleting it would leave that task unverifiable.
- `terminus3-auger-screw-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `auger-screw`; deleting it would leave that task unverifiable.
- `terminus3-ball-valve-downsize-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `ball-valve-downsize`; deleting it would leave that task unverifiable.
- `terminus3-ball-valve-parametric-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `ball-valve-parametric`; deleting it would leave that task unverifiable.
- `terminus3-ball-valve-remix-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `ball-valve-remix`; deleting it would leave that task unverifiable.
- `terminus3-bench-power-supply-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `bench-power-supply`; deleting it would leave that task unverifiable.
- `terminus3-benchy-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `benchy`; deleting it would leave that task unverifiable.
- `terminus3-binary-decoder-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `binary-decoder`; deleting it would leave that task unverifiable.
- `terminus3-bluetooth-controller-2-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `bluetooth-controller-2`; deleting it would leave that task unverifiable.
- `terminus3-bluetooth-controller-mini-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `bluetooth-controller-mini`; deleting it would leave that task unverifiable.
- `terminus3-bottle-opener-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `bottle-opener`; deleting it would leave that task unverifiable.
- `terminus3-bucket-fitting-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `bucket-fitting`; deleting it would leave that task unverifiable.
- `terminus3-colour-sensor-housing-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `colour-sensor-housing`; deleting it would leave that task unverifiable.
- `terminus3-coroa-pendant-light-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `coroa-pendant-light`; deleting it would leave that task unverifiable.
- `terminus3-decorative-vase-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `decorative-vase`; deleting it would leave that task unverifiable.
- `terminus3-desktop-organizer-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `desktop-organizer`; deleting it would leave that task unverifiable.
- `terminus3-digidice-scad-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `digidice-scad`; deleting it would leave that task unverifiable.
- `terminus3-display-stand-legs-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `display-stand-legs`; deleting it would leave that task unverifiable.
- `terminus3-eir-dc-motor-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `eir-dc-motor`; deleting it would leave that task unverifiable.
- `terminus3-ek-stencil-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `ek-stencil`; deleting it would leave that task unverifiable.
- `terminus3-fan-gear-connector-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `fan-gear-connector`; deleting it would leave that task unverifiable.
- `terminus3-fender-guitar-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `fender-guitar`; deleting it would leave that task unverifiable.
- `terminus3-fishing-lure-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `fishing-lure`; deleting it would leave that task unverifiable.
- `terminus3-flying-wing-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `flying-wing`; deleting it would leave that task unverifiable.
- `terminus3-glasses-drawer-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `glasses-drawer`; deleting it would leave that task unverifiable.
- `terminus3-headphone-stand-cad-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `headphone-stand-cad`; deleting it would leave that task unverifiable.
- `terminus3-headphone-stand-quad-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `headphone-stand-quad`; deleting it would leave that task unverifiable.
- `terminus3-headphone-stand-solo-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `headphone-stand-solo`; deleting it would leave that task unverifiable.
- `terminus3-headphone-stands-duo-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `headphone-stands-duo`; deleting it would leave that task unverifiable.
- `terminus3-horizon-dock-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `horizon-dock`; deleting it would leave that task unverifiable.
- `terminus3-infinity-fidget-cube-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `infinity-fidget-cube`; deleting it would leave that task unverifiable.
- `terminus3-keychains-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `keychains`; deleting it would leave that task unverifiable.
- `terminus3-line-follower-robot-2-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `line-follower-robot-2`; deleting it would leave that task unverifiable.
- `terminus3-line-follower-robot-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `line-follower-robot`; deleting it would leave that task unverifiable.
- `terminus3-logo-plates-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `logo-plates`; deleting it would leave that task unverifiable.
- `terminus3-luggage-bookmark-clip-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `luggage-bookmark-clip`; deleting it would leave that task unverifiable.
- `terminus3-mic-array-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `mic-array`; deleting it would leave that task unverifiable.
- `terminus3-minecraft-ore-lamp-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `minecraft-ore-lamp`; deleting it would leave that task unverifiable.
- `terminus3-mini-water-pump-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `mini-water-pump`; deleting it would leave that task unverifiable.
- `terminus3-motovalve-versions-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `motovalve-versions`; deleting it would leave that task unverifiable.
- `terminus3-number-plates-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `number-plates`; deleting it would leave that task unverifiable.
- `terminus3-oculus-wall-mount-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `oculus-wall-mount`; deleting it would leave that task unverifiable.
- `terminus3-oomds-part-versions-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `oomds-part-versions`; deleting it would leave that task unverifiable.
- `terminus3-orson-pendant-lamp-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `orson-pendant-lamp`; deleting it would leave that task unverifiable.
- `terminus3-phone-stands-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `phone-stands`; deleting it would leave that task unverifiable.
- `terminus3-pipe-parts-scad-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `pipe-parts-scad`; deleting it would leave that task unverifiable.
- `terminus3-quadcopter-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `quadcopter`; deleting it would leave that task unverifiable.
- `terminus3-raspberry-pi-enclosure-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `raspberry-pi-enclosure`; deleting it would leave that task unverifiable.
- `terminus3-rc-airplane-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `rc-airplane`; deleting it would leave that task unverifiable.
- `terminus3-rc-body-pegs-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `rc-body-pegs`; deleting it would leave that task unverifiable.
- `terminus3-rotating-parts-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `rotating-parts`; deleting it would leave that task unverifiable.
- `terminus3-sb-tag-parts-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `sb-tag-parts`; deleting it would leave that task unverifiable.
- `terminus3-seamless-table-lamp-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `seamless-table-lamp`; deleting it would leave that task unverifiable.
- `terminus3-seatbelt-clip-scad-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `seatbelt-clip-scad`; deleting it would leave that task unverifiable.
- `terminus3-seatbelt-muter-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `seatbelt-muter`; deleting it would leave that task unverifiable.
- `terminus3-sensor-housing-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `sensor-housing`; deleting it would leave that task unverifiable.
- `terminus3-setto-container-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `setto-container`; deleting it would leave that task unverifiable.
- `terminus3-sign-parts-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `sign-parts`; deleting it would leave that task unverifiable.
- `terminus3-sine-wave-chandelier-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `sine-wave-chandelier`; deleting it would leave that task unverifiable.
- `terminus3-skeleton-bike-rack-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `skeleton-bike-rack`; deleting it would leave that task unverifiable.
- `terminus3-skeleton-shelf-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `skeleton-shelf`; deleting it would leave that task unverifiable.
- `terminus3-speaker-face-plate-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `speaker-face-plate`; deleting it would leave that task unverifiable.
- `terminus3-spur-stand-scad-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `spur-stand-scad`; deleting it would leave that task unverifiable.
- `terminus3-sun-tracking-robot-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `sun-tracking-robot`; deleting it would leave that task unverifiable.
- `terminus3-tag-plates-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `tag-plates`; deleting it would leave that task unverifiable.
- `terminus3-tdisplay-enclosure-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `tdisplay-enclosure`; deleting it would leave that task unverifiable.
- `terminus3-tea-box-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `tea-box`; deleting it would leave that task unverifiable.
- `terminus3-tread-track-robot-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `tread-track-robot`; deleting it would leave that task unverifiable.
- `terminus3-valet-tray-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `valet-tray`; deleting it would leave that task unverifiable.
- `terminus3-venturi-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `venturi`; deleting it would leave that task unverifiable.
- `terminus3-wall-hook-gate-oracle-sh` — **keep** — the terminus3 functional gate oracle for task `wall-hook`; deleting it would leave that task unverifiable.
- `terminus3-zip-verify-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `terminus3-teardown-chiefs-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `wolf-orchestra-ask-notebooklm-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `wolf-orchestra-run-async-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `wolf-orchestra-run-codex-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `wolf-orchestra-run-gemini-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `wolf-orchestra-run-grok-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `wolf-orchestra-run-nemotron-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `wolf-orchestra-worktree-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `mac-atlas-scan-apparatus` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `how-much-how-much-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `scratch-ass-scratch-ass-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-agy-all-watch-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-claude-all-watch-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-codex-all-watch-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-grok-all-watch-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-observer-router-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-observify-inbox-watch-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-remote-loop-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-verify-payload-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-watch-local-sh` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `create-company-verify-delegation-py` — **keep** — bounded header shows an active automation, kit, or skill-payload role.
- `watch-local-watch-local-sh-bak-restart` — **prune** — appears to be a superseded backup copy, not live tooling; remove only after owner confirmation.

## Evidence boundary

Every row cites the spec's bounded single-pass candidate scan plus `file -b` and a bounded `head -14`/`head -20` classification. No candidate script was executed — not even with `--help` or `--dry-run` — and none was read end-to-end. `md5` was used as a read-only content-identity check to decide collapse-versus-itemize, which is what turned "these 301 files look like mirrors" and "these 71 files look like a factory" into verified claims that happen to point in opposite directions. Potential credential-related header lines were suppressed from review output, and the hard-coded-assignment check emitted paths only. `live_now` is `n/a` for every S11 row because this surface inventories source scripts, not deployed processes.
