Tribunal Audit Pass that validates architecture plans against QoreLogic governance standards. Produces AUDIT_REPORT.md with PASS/FAIL verdict, unlocking the implementation gate. Use when: (1) Before /ql-implement, (2) After creating ARCHITECTURE_PLAN.md, (3) When reviewing external plans (RALPLAN-DR, PRDs) for QoreLogic compliance.

2026-04-032

ql-debug

electron-rare/mascarade

Two-phase diagnostic system combining rapid root-cause identification with residual sweep verification. Prevents cascading AI debugging damage by enforcing four mandatory analysis layers before any code change.

2026-03-292

ql-implement

electron-rare/mascarade

Implementation Pass

2026-03-292

ql-substantiate

electron-rare/mascarade

Session Seal

2026-03-292

bash-cli-tui

electron-rare/mascarade

Build, refactor, and debug Bash command-line and terminal UI scripts with safe argument parsing, non-interactive fallback, and robust error handling. Use when tasks involve shell tools with flags/subcommands, interactive prompts/menus (gum/dialog/select), colored output/logging, or portable scripting on Linux/macOS.

2026-03-042

name	ql-repo-release
description	Delivery Gate Orchestration
user-invocable	true
allowed-tools	Read, Glob, Grep, Edit, Write, Bash

name: ql-repo-release description: /ql-repo-release - Delivery Gate Orchestration

/ql-repo-release - Delivery Gate Orchestration

/ql-repo-release DELIVER Governor Version bump, metadata sync, git tag, release pipeline trigger

Purpose

Orchestrate the full local release workflow after /ql-substantiate seals a session. Transitions substantiated deliverables to production-ready releases with confirmation gates at every irreversible step.

Execution Protocol

Step 1: Verify Branch and Seal

Branch Gate

git branch --show-current

The release branch must follow the naming convention hotfix/vX.Y.Z or release/vX.Y.Z.

If on a feature branch (e.g., feat/*, plan/*):

ABORT
Report: "Cannot release from a feature branch. Create a release or hotfix branch first:
  git checkout -b hotfix/vX.Y.Z   (from the branch with all changes)
  git checkout -b release/vX.Y.Z  (from main after merging)"

If on main:

WARN: "Direct push to main is blocked by pre-push policy. Switching to release branch."
git checkout -b release/vX.Y.Z

Pull Latest

git pull --rebase

Note: After release, create a PR to merge the release/hotfix branch into main.

Seal Check

Read: docs/SYSTEM_STATE.md
Read: docs/META_LEDGER.md (last entry)

Confirm the latest ledger entry is a SUBSTANTIATE seal. If not:

ABORT
Report: "No seal found. Run /ql-substantiate before releasing."

Step 2: Run Pre-Flight

Execute release-gate.cjs --preflight from FailSafe/extension/:

node scripts/release-gate.cjs --preflight

Additionally, verify:

Skill files uncommitted check

git diff --name-only -- .claude/commands/ql-*.md

If any skill files are modified but not committed, warn:

Skill files modified but uncommitted: [list]. Include in release commit or stash before proceeding.

Help doc version markers

Read FailSafe/extension/docs/COMPONENT_HELP.md and FailSafe/extension/docs/PROCESS_GUIDE.md. Verify version markers match the target release version. If stale, flag for update in Step 5.

Backlog coherence

Read: docs/BACKLOG.md

Verify:

No duplicate B-item numbers — scan all [B###] references for collisions
Version summary table is current — the latest released version appears in the table with correct status
No backlog items reference a version older than the current release as PLANNED/IN PROGRESS — flag stale version targets

Report any issues. If any pre-flight check fails, report which checks need attention and STOP.

Step 3: Confirm Version Bump

Read current version from FailSafe/extension/package.json.

Ask the user:

Current version is vX.Y.Z. What bump level? (patch / minor / major)

Wait for response before proceeding.

Step 4: Apply Version Bump

Execute:

node scripts/release-gate.cjs --bump <level>

Report: vX.Y.Z -> vA.B.C (<level> bump)

Step 5: Author Release Metadata

Invoke /ql-document in RELEASE_METADATA mode with the target version:

Read recent META_LEDGER entries (from last DELIVER or SUBSTANTIATE to current)
Read SYSTEM_STATE.md for implementation summary
Author the 3 required files:
- FailSafe/extension/CHANGELOG.md — ## [A.B.C] - YYYY-MM-DD
- FailSafe/extension/README.md — Current Release + What's New
- Root CHANGELOG.md — ## [A.B.C]
Present authored content to user for review before writing

Confirmation gate — Show authored content. User approves or edits before files are written.

Step 6: Documentation Gate (HARD STOP)

INTERDICTION: Documentation versioning MUST be verified complete before any commit or tag. This gate cannot be bypassed.

Execute release-gate.cjs --preflight:

node scripts/release-gate.cjs --preflight

INTERDICTION: If ANY check shows [FAIL]:

ABORT
Report: "Documentation versioning incomplete. The following markers must be resolved:
  [list each [FAIL] check with its message]

Required files for vA.B.C:
  - FailSafe/extension/CHANGELOG.md  →  ## [A.B.C]
  - CHANGELOG.md (root)              →  ## [A.B.C]
  - FailSafe/extension/README.md     →  Current Release: vA.B.C
  - README.md (root)                 →  Current Release: vA.B.C + Socket badge
  - FailSafe/extension/docs/COMPONENT_HELP.md  →  vA.B.C
  - FailSafe/extension/docs/PROCESS_GUIDE.md   →  vA.B.C
  - docs/BACKLOG.md version summary  →  vA.B.C row

Return to Step 5 and complete all missing documentation before proceeding."

Only when all checks show [PASS] may you proceed to Step 7.

Step 7: Stage and Commit

Confirmation gate — Show the user the diff:

git diff --stat

Ask: "Stage and commit these changes as [RELEASE] vA.B.C? (y/n)"

If confirmed:

git add -f FailSafe/extension/package.json FailSafe/extension/CHANGELOG.md FailSafe/extension/README.md FailSafe/extension/docs/COMPONENT_HELP.md FailSafe/extension/docs/PROCESS_GUIDE.md CHANGELOG.md README.md docs/BACKLOG.md
git commit -m "[RELEASE] vA.B.C"

Note: -f is required because FailSafe/extension/docs/ is in .gitignore but tracked.

Step 8: Create Tag

Execute:

node scripts/release-gate.cjs --tag

This runs preflight internally and creates an annotated git tag.

Step 9: Confirm Push

Confirmation gate — Present:

Tag vA.B.C created locally. Push to origin to trigger the release pipeline?

Remote: origin Branch: current branch Tag: vA.B.C

Proceed? (y/n)

If confirmed:

git push && git push --tags

Step 10: Record Ledger

Add META_LEDGER entry:

### Entry #[N]: DELIVER — vA.B.C

**Timestamp**: [ISO 8601]
**Phase**: DELIVER
**Author**: Governor

**Version**: A.B.C
**Tag**: vA.B.C
**Commit**: [short hash]

**Decision**: Release vA.B.C delivered. Tag pushed to trigger release pipeline.

Calculate and record content hash and chain hash per standard Merkle chain protocol.

Confirmation Gates

Two irreversible actions require explicit user confirmation:

Before commit — Shows diff summary
Before push — Shows tag + remote target

Constraints

NEVER push without user confirmation
NEVER write metadata without user review of authored content
NEVER release without a preceding SUBSTANTIATE seal
NEVER skip the pre-flight validation
NEVER proceed past Step 6 if preflight has ANY [FAIL] — Step 6 is a hard ABORT gate
NEVER commit [RELEASE] vX.Y.Z without confirmed preflight PASS (the commit-msg hook enforces this at the git layer)
NEVER release from a feature branch — must be on main
NEVER tag without pulling latest main first
ALWAYS use /ql-document for release metadata authoring
ALWAYS run pre-flight twice (before and after metadata authoring)
ALWAYS use [RELEASE] vX.Y.Z commit message format
ALWAYS record the delivery in META_LEDGER
ALWAYS update version markers in docs/COMPONENT_HELP.md and docs/PROCESS_GUIDE.md
ALWAYS update README.md (root) Current Release marker and Socket badge version
ALWAYS update docs/BACKLOG.md version summary table: mark previous version RELEASED, add new version row
ALWAYS use git add -f for gitignored-but-tracked paths (e.g., FailSafe/extension/docs/)