todo2code

Ticket 008 audit

Before

• new-ticket.sh accepted --users but did not consistently materialize the documented structure.
• Documentation claimed automatic user-* generation despite the rule that an agent must not write human-owned content.
• readme.sh assumed ownership of project/README.md, colliding with the generated analysis namespace used by todo2code.
• Participant templates mixed human instructions, agent plans and completion claims without explicit role metadata.
• The index update silently depended on Python and reported success even if its replacement failed.

After

Gate	Result
Human files generated by scaffolder	0
Generated agent identity	agent:codex / agent
Missing human route in todo2code	unresolved:human
Existing analysis project/README.md	byte-for-byte preserved
Active second ticket without override	rejected, exit 3
Index traversal	rejected, exit 2
Repeated index generation	idempotent
Machine-local file:/// documentation links	0

Publication

• wellmanifest/new-project@72e5f6c on main.
• Version 0.6.0 with policy DSL versions 7/5.
• Existing unrelated staged .gitignore and rompt.txt were excluded from the upstream commit and remain owned by their original author.

This site is open source. Improve this page.