chore(gds): resync projections

.claude/CLAUDE.md

@@ -1,67 +1 @@
-<!--
-GENERATED FILE - DO NOT EDIT DIRECTLY
-generator: gds
-bundle: 0.1.0-dev
-source-commit: 97e8bbaa3a0734b156b03bad704503bc46d7575b
-input-digest: sha256:0ee061ed1f1eb43e945f37a4e75841c8ab6f3070841380b251cda91f86ddaade
-output-digest: sha256:e561feedc28e8dcdbd4d4dc98b9132eae63127852538bcb68ba6d487a7bee8ac
-edit-source:
-  - .gds/repository.yaml
-  - policies/base/repository-default.yaml
-  - policies/owners/organization-default.yaml
-  - policies/roles/public-module.yaml
-  - templates/agents/repository.md.tmpl
-  - templates/github-actions/go.yml.tmpl
-  - templates/harnesses/claude.md.tmpl
--->
-# Claude Code repository contract
-
-## Scope
-
-- GDS repository ID: `repo_01KYFBZ4AK44Y9B7MRQ1C2WKPF`.
-- Roles: `module`.
-- Canonical repository facts: `.gds/repository.yaml`.
-- Applied policy bundle: `.gds/bundle.lock.yaml` (`0.1.0-dev`).
-- This is a first-class Claude Code projection compiled from the same typed
-  inputs as `AGENTS.md`; neither projection is a manual policy source.
-
-## Repository boundaries
-
-- Treat this Git repository as one independent mutation boundary.
-- Preserve unrelated dirty changes, branches, worktrees, and submodules.
-- Run `gds context --json` before work crosses repository boundaries.
-- Do not edit generated projections; change the declared canonical input and
-  regenerate.
-
-## Safety
-
-- External writes require explicit approval: `true`.
-- Generated projection edits: `forbidden`.
-- Private parent context persistence: `forbidden`.
-- Visibility: `public`; data: `public`.
-
-## Verification commands
-
-- Test: `python3 -m json.tool config/nddev-contract.json`.
-
-## Claude workflow routing
-
-- Start here: run `gds-orient` (or `gds context --json`) to resolve scope before
-  any cross-repository work.
-- Active skill profiles: `core, module`. Five profiles exist in total
-  (`core`, `estate-admin`, `module`, `device`, `portfolio`); only the listed ones
-  are active for this repository. The catalog is `skills/registry.yaml`, and each
-  skill lives under `skills/canonical/<name>/SKILL.md`.
-- Load procedural detail from the applicable installed GDS skill projection or
-  plugin only when the task matches it.
-- Destructive workflows remain explicit-only and still require their concrete
-  plan and approval gates.
-- Treat documentation and Serena memories as derived evidence, never mutation
-  authority.
-
-## Done
-
-- Required checks pass or are explicitly reported `NOT_PROVEN`.
-- Every affected Git boundary and remote result is classified.
-- No secret, private-context leak, unrelated change, or unapproved projection
-  drift is introduced.
+@../AGENTS.md

.gds/bundle.lock.yaml

@@ -5,16 +5,16 @@ bundle:
   version: "0.1.0-dev"
   release_sequence: 0
   channel: "development"
-  source_commit: "97e8bbaa3a0734b156b03bad704503bc46d7575b"
-  digest: "sha256:fd66beb15c847e94b68a00083df5f218c22f4e1174d39d4bd10ed7fb321b13bc"
+  source_commit: "5912c2259c99ac300eaea6b6d7b982eefd90a854"
+  digest: "sha256:1c7ead28013248601e7e8522b2242140ace706bb25e975a8a13df6d52e2b56e7"
 
 projection:
-  input_digest: "sha256:0ee061ed1f1eb43e945f37a4e75841c8ab6f3070841380b251cda91f86ddaade"
-  output_digest: "sha256:43ce24b8e3f7816abc07b65fbdebaab228b98c55ae9c7f63c02736c1273ecc91"
+  input_digest: "sha256:fb3f07f984e454c52bd639474c6dc32da82b411d6944ff6905842174cdffe29c"
+  output_digest: "sha256:fbc38b85064d97d7f63e0ebc868a52784ad54a083479beb2cbad4f2d14ba8eb0"
   files:
     - path: ".claude/CLAUDE.md"
-      digest: "sha256:ce8278418348ec1a95560ea4882a0271c24feced6268b56712793fc7146ec81c"
+      digest: "sha256:7b50d15feae7b63b94d845b2fa6e19e3220527c5b0cac69303b7fc19bd7484a8"
     - path: ".gds/compiled-policy.json"
       digest: "sha256:a791ad509953c6e0add712848da1d558ab38922410bf90c73946fc51986c904d"
     - path: "AGENTS.md"
-      digest: "sha256:cfff1d8edd2809930a6dbe4ac0e357e3899e597847f133cdf1a3178f9ff7d18a"
+      digest: "sha256:37a41633f771e7a95804071538e67836c47c36a142237a2fb8097297b34113d8"

AGENTS.md

@@ -1,60 +1,11 @@
-<!--
-GENERATED FILE - DO NOT EDIT DIRECTLY
-generator: gds
-bundle: 0.1.0-dev
-source-commit: 97e8bbaa3a0734b156b03bad704503bc46d7575b
-input-digest: sha256:0ee061ed1f1eb43e945f37a4e75841c8ab6f3070841380b251cda91f86ddaade
-output-digest: sha256:e80ed2b12590f51065368c650151aaab91269eac059e94f7a161b12e195ff7b8
-edit-source:
-  - .gds/repository.yaml
-  - policies/base/repository-default.yaml
-  - policies/owners/organization-default.yaml
-  - policies/roles/public-module.yaml
-  - templates/agents/repository.md.tmpl
-  - templates/github-actions/go.yml.tmpl
-  - templates/harnesses/claude.md.tmpl
--->
-# GDS repository contract
+# Repository instructions
 
-## Scope
-
-- Repository ID: `repo_01KYFBZ4AK44Y9B7MRQ1C2WKPF`.
-- Roles: `module`.
-- Canonical repository facts: `.gds/repository.yaml`.
-- Applied bundle: `.gds/bundle.lock.yaml` (`0.1.0-dev`).
-- Compiled policy: `.gds/compiled-policy.json`.
-
-## Boundaries
-
-- This Git repository is one independent mutation boundary.
+- Treat this clone as one independent Git mutation boundary.
 - Preserve unrelated branches, worktrees, submodules, and dirty changes.
-- Resolve cross-repository work with `gds context --json` before acting.
-- Generated files are projections; change their canonical inputs and regenerate.
-
-## Safety
-
-- External writes require explicit approval: `true`.
-- Generated projection edits: `forbidden`.
-- Private parent context persistence: `forbidden`.
-- Visibility contract: `public`; data classification: `public`.
+- Follow the repository's local documentation and source-owned contracts.
+- Keep secrets, credentials, runtime state, caches, logs, and generated evidence
+  out of version control.
 
-## Development
+## Verification
 
 - Test: `python3 -m json.tool config/nddev-contract.json`.
-
-## Agent routing
-
-- Start here: run `gds-orient` (or `gds context --json`) to resolve scope before
-  any cross-repository work. It is the orientation entry point.
-- Active skill profiles: `core, module`. Five profiles exist in total
-  (`core`, `estate-admin`, `module`, `device`, `portfolio`); only the listed ones
-  are active for this repository. The catalog is `skills/registry.yaml`, and each
-  skill lives under `skills/canonical/<name>/SKILL.md`.
-- Use on-demand skills for procedures; do not duplicate them here.
-- Treat docs and memories as derived evidence, not mutation authority.
-
-## Done
-
-- Required verification is complete or explicitly `NOT_PROVEN`.
-- Git state and every affected repository boundary are classified.
-- No private data, secret, or unapproved generated drift is introduced.