docs: correct claims left stale by today's apm-only commits

A five-agent review of today's seven commits found no executable
regressions and no dangling references, but a set of documents still
asserting, in present tense, machinery that ADR-0024 and its commits
removed. This corrects them in place, keeping the original text as the
historical record wherever the repo's amendment convention applies.

LESSONS.md: the 2026-06-21 entry prescribed a `claude plugin validate`
sweep that now fails on every plugin, so it is marked superseded with
the surviving gates named. The 2026-08-09 entry gained a recurrence
note: today's manifest deletion broke apm's MCP propagation exactly as
that lesson describes, and its prescribed repo-local grep could not
have caught it, because `plugin_parser.py` ships in the apm toolchain
installed outside this repository.

ADR-0019, ADR-0011 and ADR-0021: amendments extended to passages the
earlier correction passes stepped over -- a dead native-consumer guard,
Consequences bullets still calling for a `plugins/gitea/.mcp.json` that
must not be recreated, and a drift-gate list naming a deleted script.
ADR-0021's list is down to one gate, not two: `apm audit --ci` never
read `description` and was never a drift gate.

architecture.md and enrichments.md: the self-containment constraint is
restated on its live source, the agentskills.io APM package-mode spec,
rather than on Claude Code's plugin cache-install, which ADR-0024
consequence 6 pins as a superseded rationale. releasing.md's pointer to
the deleted sync script is rewritten as history.

tests/run-bats.sh and scripts/lib/batch-run.sh: comment-only. The
`.claude/skills/` exclusion comment claimed a duplication that is not
live yet; apm does not strip `tests/`, and the deployed tree is empty
of them only because the lockfile still resolves the six dependencies
to a pre-ADR-0024 commit carrying the flat mirror. The exclusion is
correct but forward-looking, and now says so.

SIMPLIFICATION-AUDIT.md: reconciled against what the commits actually
did. Two closed findings recorded conclusions that ADR-0024 reversed
hours later; findings 1, 3, 31 and 35 carried prescriptions voided the
same day; finding 28 is now recorded as having moved backwards, with
docs/adr/ measured at +336 lines over the day. The section 1 headline
table is re-measured at a6434e0 and labelled with its basis. The
ADR-0012 contradiction between finding 2b and section 8 is resolved in
2b's favour after reading the ADR: only finding 24 is governed by it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YR2CjVumUbEGWcMikcoXBD

docs/adr/0011-gitea-skill-deep-modules.md

@@ -113,5 +113,16 @@ avoids two near-empty skills each routing to a single tool family.
 - Follow-up issues are needed for: the deferred domains (Actions/CI, Wiki, Notifications,
   Packages, User/Org), the `.mcp.json` wiring gap, and the eventual removal of
   `plugins/bin/skills/gitea/`.
+
+  **Correction (2026-09-14):** the three bullets above are historical — do not act on them. The
+  `.mcp.json` half is closed by the correction in Decision: `c96ca9c` deleted every
+  `plugins/*/.mcp.json`, including this plugin's, because apm reads that file only on the
+  marketplace-plugin code path that ADR-0024 removed. **Do not recreate `plugins/gitea/.mcp.json`**
+  — an MCP server a plugin needs is declared in `dependencies.mcp` in its `apm.yml`. The
+  standalone-installability caveat is moot for the same reason: `claude plugin install
+  gitea@holocron` is not a supported route. `plugins/bin/skills/gitea/` no longer exists either —
+  `3a1305c` (2026-07-23) removed it as superseded by `plugins/gitea`, the cleanup this bullet
+  anticipated — so the "remains in place" claim and its follow-up are both spent. Only the deferred
+  domains remain open.
 - Future domain-plugin work in this repo can point to this ADR as the template for splitting an
   MCP-wrapping skill into deep modules.

docs/adr/0019-session-start-hook-keeps-the-apm-install-current.md

@@ -158,6 +158,17 @@ all. The script therefore exits silently when there is no `apm.lock.yaml` in the
 which is what makes it inert in a repo that does not consume packages through apm. Copilot CLI sees
 no hook at all, for the reasons already documented in `plugins/kyberforge/docs/hooks.md`.
 
+> **Amendment (2026-09-14) — both halves of that paragraph are gone; the guard is kept on other
+> grounds.** There is no `hooks/hooks.json` to auto-discover: `718c79a` deleted
+> `plugins/kyberforge/hooks/` with the rest of the flat mirror, and the only hooks manifest left in
+> the tree is `plugins/kyberforge/.apm/hooks/hooks.json`, which apm reads and a convention scan of
+> the package root never sees. And there are no native consumers to protect: ADR-0024 ended
+> `claude plugin install` support outright. The `apm.lock.yaml` guard itself stays, for the reason
+> that survives both — kyberforge ships to any apm consumer, and in a working directory with no
+> lockfile there is nothing for `apm update` to refresh, so exiting silently is the correct
+> behaviour rather than a defensive measure aimed at a second installer. The Copilot CLI sentence is
+> unaffected.
+
 **`scripts/git-hooks/` is now empty.** `post-push` and `test-post-push.sh` are deleted.
 `install.sh`'s copy block is generic and is kept; `test-git-hooks-install.sh` now synthesizes its
 own fixture hook instead of depending on a real one existing, so the mechanism stays tested and can

docs/adr/0021-plugin-descriptions-state-a-domain-boundary.md

@@ -91,6 +91,18 @@ output against `apm.yml`, so their entire job is to propagate whatever the descr
 those four files byte-for-byte and confirm they match. The `wiki` claim passed every one of the fourteen pre-push hooks, every day it
 was published.
 
+**Correction (2026-09-14): that gate list is down to one, and it was never two.**
+`scripts/sync-plugin-content.sh --check --all` does not exist — `718c79a` deleted the script and its
+`check-plugin-content-sync` hook with the flat mirror (ADR-0024). Of the two names left,
+`apm audit --ci` was never a drift gate at all: against this repo it checks only that each `apm.yml`
+parses and that a manifest declaring dependencies has a consistent `apm.lock.yaml`, and it reads no
+`description`. So the sole surviving gate that compares compiled output against `apm.yml` is
+`apm pack --check-versions --check-clean --dry-run`, run by the `apm-pack-check-clean` pre-push hook
+— and with the per-plugin manifests gone it propagates a description into exactly one file,
+`.claude-plugin/marketplace.json`, not four. This narrows the mechanism and changes nothing about
+the finding: propagation is still not verification, and nothing anywhere reads the `description`
+key for sense.
+
 **And the obligation is unbounded.** Under enumeration, adding one skill to `bin`, `git` or `gitea`
 means editing two copies of a prose string on top of the version bumps and regeneration any skill
 addition already owes under this repo's release policy

docs/spec/architecture.md

@@ -25,9 +25,11 @@ Skills are **not** deployed by `install.sh`. They are distributed as plugins and
 
 ## Plugin model
 
-Skills, agents, MCP servers, and hooks are distributed as self-contained plugin units under `plugins/`, installed independently via `apm install`, here and in any consuming repo (ADR-0018). Self-contained is a hard constraint, not a description: a plugin is copied to a cache on install, so nothing inside it may reference a file outside its own directory. That is why the Vale styles are duplicated across two skills rather than shared (ADR-0014), and why ADR-0020's constants are copied into three validators rather than sourced from one. Each plugin is an **apm package**: `plugins/<name>/apm.yml` plus a hand-authored `plugins/<name>/.apm/{skills,agents,hooks,commands,instructions,extensions}/` tree (ADR-0015). There is no per-plugin `plugin.json` at all — apm reads `apm.yml`, and the repo's one generated manifest, `.claude-plugin/marketplace.json`, is compiled from that source.
+Skills, agents, MCP servers, and hooks are distributed as self-contained plugin units under `plugins/`, installed independently via `apm install`, here and in any consuming repo (ADR-0018). Each unit is an **apm package**: `plugins/<name>/apm.yml` plus a hand-authored `plugins/<name>/.apm/{skills,agents,hooks,commands,instructions,extensions}/` tree (ADR-0015). There is no per-plugin `plugin.json` at all — apm reads `apm.yml`, and the repo's one generated manifest, `.claude-plugin/marketplace.json`, is compiled from that source.
 
-Which plugin a new skill belongs in follows from what each one is scoped to. The boundary that matters most in practice is `core` vs `kyberforge`: `core` is the home for cross-cutting, repo-agnostic utility skills that a consumer would want against *their* repo, while `kyberforge` is meta-tooling for the holocron marketplace itself. A skill that authors a target repo's `AGENTS.md` is `core`; a skill that audits a `SKILL.md` against this marketplace's contract is `kyberforge`.
+Self-contained is a hard constraint, not a description: a file reference inside `.apm/skills/<name>/` may not reach outside that skill's own directory, and there is no cross-skill sharing mechanism to reach for instead. That is why the Vale styles are duplicated across two skills rather than shared (ADR-0014), and why ADR-0020's constants are copied into three validators rather than sourced from one. The constraint used to be explained by Claude Code's plugin cache-install copying a plugin to a cache; that is no longer the reason and never was the only one. It is stated independently for APM package mode by the agentskills.io spec (`plugins/kyberforge/.apm/skills/skill-author/references/deployment-modes.md`), which is why ADR-0024 consequence 6 pins it as a negative result: ending native install did not relax it, and it is not to be re-litigated on the assumption that it did.
+
+Which apm package a new skill belongs in follows from what each one is scoped to. The boundary that matters most in practice is `core` vs `kyberforge`: `core` is the home for cross-cutting, repo-agnostic utility skills that a consumer would want against *their* repo, while `kyberforge` is meta-tooling for the holocron marketplace itself. A skill that authors a target repo's `AGENTS.md` is `core`; a skill that audits a `SKILL.md` against this marketplace's contract is `kyberforge`.
 
 The second boundary worth stating is `git` vs `gitea`, because both own things called branches and both touch pull requests: `git` is whatever works over the git wire protocol against a local clone, `gitea` is whatever goes through the forge's HTTP API. That is why `git-branches` and `gitea-branches` both exist and are not duplicates.