@cryptotaxi247 / SquadScope-1 / commits / 89156b3

squad nap --deep + reskill: merge inbox, trim charters (#547)

* Remove committed node_modules and harden .gitignore Removes 171 vendored node_modules files from git tracking (kept on disk) and adds node_modules/ to .gitignore. Also adds common leak guards: .env/.env.*, __pycache__/, venv/, dist/, build/, .DS_Store, and IDE folders (.idea/, user-specific .vscode/ while preserving shared settings.json/extensions.json). Verified: full pytest suite (1209 passed) runs clean after removal; the repo has no root package.json, so nothing in the build/test pipeline depended on the committed node_modules. Closes #538 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * squad nap --deep + reskill: merge inbox, trim charters - Inbox empty: no decisions entries to merge - Trim charters (calculon, farnsworth, nibbler): drop collaboration handoff, model rationale boilerplate, reviewer-rejection reminder, skill-promotion lines - No history.md exceeded 12KB (max fry 11.3KB) - Refresh identity/now.md to current DevSecOps guardrails focus (#540-#546) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Juan Manuel Servera committed Jun 26, 2026 at 23:46 UTC 89156b3b6458798f091d2ab7b8a045f2980a20ad
4 files changed +16 -28
.squad/agents/calculon/charter.md
-4
@@ -18,9 +18,5 @@
18 **I handle:** visual direction, brand assets, design specs, component design, icon design
19 **I don't handle:** implementation in templates (that's Amy), editorial content (Farnsworth), architecture (Leela)
20
21 -**Handoff:** I produce specs + SVG + design tokens → Amy implements in Hugo templates and CSS → Leela reviews.
22 -
21 ## Model
22 Preferred: auto
25 -
26 -Vision-capable model preferred when reviewing reference sites or producing icon concepts (claude-opus-4.5 or equivalent).
.squad/agents/farnsworth/charter.md
-2
@@ -16,12 +16,10 @@
16 - Favor durable ecosystem signals over short-lived hype spikes.
17 - Explain why a pattern matters, not just that it appeared.
18 - Keep analysis useful to both readers and downstream automation.
19 -- Use shared skills for run protocol and learning capture.
19
20 ## Boundaries
21 **I handle:** analysis content, trend framing, editorial synthesis, and taxonomy judgment
22 **I don't handle:** data collection, frontend implementation, or architecture decisions
24 -**I may write:** Farnsworth history, skills, and designated analysis output only
23
24 ## Analysis Framework
25 - **Hot:** fastest star gain and rapid adoption.
.squad/agents/nibbler/charter.md
+1 -2
@@ -17,8 +17,7 @@
17 - Start with "what harm could this cause?" before "does it work?"
18 - Review against canonical sources: ADL, OWASP Top 10 for LLM, WCAG, Nielsen dark patterns, GDPR/ePrivacy.
19 - Stay quiet on passes; spend words only on findings that matter.
20 -- Block harmful user-facing work and route rejected work to a different reviewer.
21 -- Promote repeatable checks into skills so the team does not relearn the same safety lesson.
20 +- Block harmful user-facing work before it ships.
21
22 ## Boundaries
23 **I handle:** RAI/safety review, hate-symbol checks, dark-pattern checks, prompt-injection review, accessibility floor, content harm, AI-output bias
.squad/identity/now.md
+15 -20
@@ -1,28 +1,23 @@
1 ---
2 -updated_at: 2026-05-18T10:26:47Z
3 -phase: Phase 1 COMPLETE → Phase 2 STARTING
4 -focus_area: Automation & Schema Finalization
5 -active_issues: []
6 -closed_phase1_issues: [1, 2, 3, 4, 5, 6, 7]
2 +updated_at: 2026-06-26T20:59:59Z
3 +phase: Production — Pipeline mature, hardening DevSecOps
4 +focus_area: Security Guardrails & CI Enforcement
5 +active_issues: [540, 541, 542, 543, 544, 545, 546]
6 ---
7
8 # What We're Focused On
9
11 -**Phase 1 complete.** All 7 foundational issues closed. PRs #25 and #26 merged.
10 +**Pipeline is in production.** Weekly/monthly/yearly trend analysis ships with SEO, month/year synthesis, and Podcaster handoff all live.
11
13 -**Phase 2 (Automation) starting** — GitHub Actions workflows, Copilot integration, cron scheduling.
12 +**Current thrust: DevSecOps guardrails** — staged rollout of linting and security gates without breaking the publish pipeline.
13
15 -## Phase 1 Achievements
16 -✅ Hugo frontend with PaperMod theme
17 -✅ Stdlib-only Python crawler with hardening
18 -✅ Weekly validation pipeline
19 -✅ Copilot review integration
20 -✅ Manual dry-run validation complete
14 +## Active Workstream — Security Guardrails (#540–#546)
15 +- **Phase A (baselines, warning-only):** Ruff Python lint (#540), Checkov IaC/container (#541), Zizmor Actions security (#542)
16 +- **Phase B:** Fix existing ruff/checkov/zizmor violations (#543)
17 +- **Phase C (enforcement):** CI gates in blocking mode (#545), pre-commit/pre-push hooks (#544)
18 +- **DevSecOps agent:** New specialist + copilot-instructions guardrail rules (#546)
19
22 -## Phase 2 Priorities
23 -1. Schema finalization: `Signal`/`Noise`/`Gaps` contract alignment
24 -2. GitHub Actions: Weekly crawl scheduling
25 -3. Hugo version pinning across CI/CD
26 -4. Trending algorithm: Momentum-based computation
27 -5. Content quality gates: Auto-publish readiness
28 -6. Analyze/Generate contract: Explicit markdown → Hugo mapping
20 +## Standing Constraints
21 +- ⛔ Never bypass branch rulesets — all changes via feature branch + PR (operator directive, 2026-06-13)
22 +- 🤝 `config/podcast.json` and `scripts/podcaster_handoff.py` changes must coordinate with SquadScope-Podcaster
23 +- ✅ CI must be correct, not just green — never weaken tests/gates to pass