Hygiene debt cleanup

Three independent sources of recurring development noise — git pull warnings during `work complete`, Dependabot false positives on test fixtures, and transitive dependency vulnerability alerts. All share the same root cause: incremental maintenance that wasn't done, accumulating into confusing signals. The user wants to clean house — eliminate the noise permanently with minimal regression risk.

verdict PASSscore 14 / 14findings 5 (0 risk · 0 debt · 5 obs)duration 11h 57mrejection cycles 1shipped May 12, 2026surface cli

Pipeline timeline

Intent to proven code in 11h 57m across Think, Plan, Build, and Verify.

Think
14m
Plan
4m
Build
185m
Verify
26m

Assertion ledger

14 claims, each independently verified. Showing 8 — show all →

IDSaysMatcher
A001Git pull in work-complete uses autostash to handle dirty working treesverifiedok
A002Git pull retry in work-complete also uses autostashverifiedok
A003Git pull in work-start uses autostash to handle dirty working treesverifiedok
A004Dead Python fixture files no longer exist in the repositoryverifiedok
A005Dead Node fixture files no longer exist in the repositoryverifiedok
A006The empty fixtures directory itself is removedverifiedok
A007Deleting fixture files causes zero test failuresverifiedok
A008Test count remains stable — no tests lostverifiedok

Findings 5 total

obspackages/cli/src/commands/work.tsclosed
--autostash bypasses content-match guard for tracked dirty planning artifacts — theoretical gap remains
obsclosed
Contract A008 test count value stale — says 2177 but main has 2178 due to merge gap
obsclosed
Audit reduced from 20 to 12, not 0 — remaining 12 are postcss dev-only transitives awaiting upstream fix
obsclosed
A011/A012 target file changed from template to project-level by human override — not a spec deviation
obspackages/cli/tests/commands/work.test.tsclosed
planningOnlyInMerge flag improves test fidelity — now models real production scenario of untracked artifacts

Integrity seal

scopesha256:bf4fab71b4d52...
contractsha256:192d614020776...
plansha256:7672dc6337634...
specsha256:4e993ffbcdb80...
build-reportsha256:7229d12a205a1...
build-datasha256:f17029ef01f49...
verify-reportsha256:690fe3baa6feb...
verify-datasha256:f121b036afdbf...
audit cmd$ ana proof audit hygiene-debt-cleanup   → all hashes match