Audits the framework workspace for reference drift, stale commands, attached-tool resolution gaps, and instruction-locality drift. Use when verifying that skills, agents, tests, thin wrappers, and read-only improve dry-runs still point at real repo-local…
Persists a rejection record in raw/rejected/ when source intake fails. Use when source-intake-steward or evidence-verifier rejects a source and the rejection must be recorded for organizational memory. Write-once, sha256-keyed, locked.
Validates wiki governance gates with fixed read-only checks. Use when reviewing wiki safety, proving governance compliance, or before any state-changing wiki action.
Runs fixed deterministic validators from the allowlisted knowledgebase execution surface. Use when you need a typed, read-only validator sequence without opening broader automation paths.
Synchronizes deterministic knowledgebase state through narrow allowlisted wrappers. Use when checking or refreshing wiki/index.md without expanding beyond MVP script boundaries.
Writes canonical SourceRef citations from committed repository artifacts. Use when a deterministic helper needs an authoritative provenance string for a raw artifact.
Recommends governed backlink opportunities between already-cleared pages. Use when editorial follow-up needs contract-aligned related-link suggestions without silently editing the graph.
Extracts candidate entities, concepts, claims, and chronology from a policy-cleared evidence package without opening a write path. Use when a governed synthesis workflow needs a deterministic extraction bundle before drafting or escalation.