[MatejGomboc]

Summary

Writes down how the work is done, where a session reads it. Seven skills, TODO.md, and CLAUDE.md § Never do these. Documents and instructions only; no code.

Explanation for the maintainer

• /handoff replaces one-off handoff files: one "resume here" block in TODO.md, overwritten from commands rather than memory, and committed by the branch that merges next.
• /pre-push is the path from finished work to an open pull request, ending with this commit's CI watched to green.
• /pr-review sets reviewers by risk, fixed lenses, what a reviewer is told, severity, and a stop rule.
• /model-routing records your Opus-at-medium trial, the three-agent limit, and a token log kept outside the repository.
• /rfc-draft, /fact-check, /steward cover drafting RFCs, verifying claims and keeping skills true.
• CLAUDE.md § Never do these gathers the rules, including no littering, which is owned there.

Worth your eye:

• CLAUDE.md now tells a session to start from git show origin/main:TODO.md, because the working tree may be behind.
• TODO.md's order of work is the one you agreed: demo parts first, the executable model as the real Pool crate, and x86_64 booted early.
• The ideas from your other projects are adopted in my own words. Nothing is copied, and no commercial project is named.

Which pillar does this serve?

Toil: process and tooling.

If this changes a document or the constitution

The constitution is untouched.

• Cross-references still resolve; no clause is left contradicting another (/check-coherence)
• If this is a constitution amendment, it is the maintainer's, and docs/CHANGELOG.md records it: not an amendment
• No section other documents cite has been renumbered

Borrow Ledger

• I checked the Borrow Ledger (CONSTITUTION.md §4) for this subsystem
• The verdict for this subsystem is: write ourselves
• Vendored code retains its original licence notices; new files carry an SPDX header

unsafe register

• New unsafe blocks: None
• Every new unsafe block carries a // SAFETY: comment
• Every unsafe block is inside a module CLAUDE.md designates for it
• I have listed them in the session summary / PR description above

Checklist

• The pre-push checks pass: not run in the devcontainer, because Docker is not running here. markdownlint 0.23.1, spelling and code spans passed on the host
• Boots in QEMU where applicable: n/a, no code changed
• CHANGELOG.md updated under [Unreleased]
• Commit messages follow Conventional Commits (see CONTRIBUTING.md)

Reviews

Ordinary tier: two reviewers, Opus at medium, one round. Between them, 2 high, 14 medium and the rest low or nit.

• High, fixed: /review and /checkpoint are Claude Code aliases, so typing one would not have run the skill; renamed /pr-review and /handoff. The handoff record was never committed, so it could not reach a cold session.
• Also fixed: a command that fails as written, a CI watch that could follow the wrong run, gates not re-run after review fixes, cleanup that could drop unpushed commits, TODO.md paraphrasing the RFCs, and citations that did not say what was claimed.
• Not applied: the existing skills' missing Lessons lists and SPDX headers, which are outside this change.
• Renaming caveat: the alias collision comes from Claude Code's documentation and was not tested live.
• Not applied, for you: the threat model calls O-19 Built while Claude Code is unpinned in the Dockerfile. TODO.md carries the fix.

These fixes have not been reviewed again.

🤖 Generated with Claude Code