[greatbridf]

Summary

Split PR publication out of fix-and-pr into a standalone create-pr skill,
made subagent delegation mandatory in both skills with preflight reserved to
the supervisor, corrected the Assisted-by: LLM disclosure rule to a
per-commit test, and trimmed the fix-and-pr reference library from twelve
numbered documents to seven, folding the removed content into the survivors.
The body contract no longer requires a Fixes #N or Refs #N line. Docs only:
19 markdown files changed under .agents/skills/, +755/-1374, no code.

Why

fix-and-pr required the whole intake, reproduction, fix, and verification
pipeline even when the only remaining work was pushing a verified branch and
opening a pull request, and it kept publication inside a single 191-line
reference document. The two halves also fail differently: a mis-scoped analysis
wastes effort, while a mis-scoped push publishes a mistake.

Delegation was advisory in practice. A step could be performed inline when that
looked cheaper, reviewer passes could be skipped, and a phase could clear its
gate on the supervisor reading the code. A self-certified gate is not evidence.

The trailer rule read as blanket repository policy and said nothing about what
a maintainer-only commit needs: Assisted-by: LLM was "mandatory in this
repository: all commits produced with agent assistance must disclose it". The
trailer marks a commit written with agent help, so a commit from the maintainer
alone carries nothing and must not be tagged retroactively.

What changed

• New create-pr skill. Owns preflight, title and body, credential-safe
  push, gh pr create, and a read-back check. It refuses to edit code or
  force-push, merges only when asked, and sends an unverified or half-finished
  change back to authoring. A credential gate runs before anything else; the
  push goes over SSH, or through an askpass helper when HTTPS is unavoidable,
  so the token never reaches a URL, a file, a log, or a prompt. Title and body
  are written before the API call, and the created PR is read back and diffed
  against the local branch.
• fix-and-pr reduced to intake through commit. Phase 5 is now the handoff
  to create-pr, a rule forbids pushing from the skill, and the document heading
  reads "Fix and Commit" while the directory keeps its name.
• Mandatory delegation, with preflight reserved. The delegated set is named
  per skill instead of being summarised as "every phase": create-pr delegates
  phases 1-3, and fix-and-pr delegates the rest of intake and phases 1-4.
  Preflight is the supervisor's own work in both, with no subagent and no
  report file, because it is the decision to spend subagents or publish at all;
  fix-and-pr's phase 5 handoff is the supervisor's as well. Every other gate
  passes on the report its named subagent returns for the part it runs: no
  report, no gate. fix-and-pr's preflight fence also loses a build command,
  which belongs to scout and not to a supervisor forbidden to build. Where a
  step previously allowed an inline run or an optional reviewer, the text now
  requires the subagent and stops the workflow when none can be launched. Body
  drafting and review are delegated too, so the authoring skill no longer runs
  the push.
• Issue links are conditional. Fixes #N and Refs #N were mandatory, so
  a change with no matching issue could not satisfy the body check this PR
  installs. The body worker now searches for an existing issue, cites it as
  Fixes or Refs when one genuinely matches, never invents a number, and
  records the search result; no match means no link line anywhere in the body.
  The local and read-back checks report the missing link and exit 0 instead of
  failing the PR.
• Per-commit disclosure. Assisted-by: LLM goes on agent-written commits,
  immediately before Signed-off-by; maintainer-written commits stay untouched.
  Preflight and create-pr's stop conditions apply the same per-commit test.
  The PR body footer stays, because it discloses who drafted the description
  rather than who wrote the commits.
• Consolidated references. Deleted 07-pr-submission, 08-failure-handling,
  09-analysis-template, 10-command-reference, and 11-prompt-hygiene. Roles,
  brief format, artifact layout, and stop conditions fold into
  00-operating-contract; the analysis template folds into 03-analysis; each
  command moves into the phase that uses it; credential rules fold into the
  publish document.

Verification

Docs-only diff: no build and no QEMU run were performed, because no code changed
and nothing in the diff is executable.

Checks recorded in the doc-integrity log at 7657fe85dd8f:

• Dangling relative markdown links: none found.
• Stale references to the deleted reference documents: none found.
• Unconditional delegation claims: none found.
• Mandatory issue-link claims: none found.
• Build command on the supervisor inside a preflight fence: none found.
• Unpaired markdown code fences: none found.
• Every references/*.md named in a SKILL.md exists.
• An issue-less body does not fail its own link check: the check reports
  no issue link.
• git diff --check: clean, no whitespace errors reported.

Risks / notes

• No functional risk: no code, build files, or configuration changed. The
  exposure is documentation drift, since the two skills share gate, report, and
  trailer vocabulary and must be edited together.
• Publication now depends on the credential gate, so a run without a token stops
  instead of degrading into a push with inline credentials.
• Notes outside this repository that reference the old 07–11 document numbers
  would no longer resolve; the integrity check found no such references inside
  the repo.

Assisted-by: LLM