Tighten discovery route rejections

[kriptoburak]

Summary

• Add route-rejection coverage for owner-only public Claude Code catalogs whose plugins live only in the owner's repositories.
• Reject developer-workflow-only marketplaces without a social, X/Twitter, Hermes Agent, or external source-repository lane.
• Reject account-dependent social research skill routes that forbid private accounts, credentials, or paid-service dependencies.

Discovery Evidence

• Full PR audit: /tmp/hermes-tweet-open-prs-20260621-1155.json and /tmp/hermes-tweet-pr-audit-20260621-1155.jsonl.
• Crawler artifact: /tmp/hermes-tweet-20260621-1155-governance-crawl.json.
• External routes checked this run were duplicate, owner-specific, developer-workflow-only, product-specific, or incompatible with account-dependent social research constraints.

Validation

• ============================= test session starts ==============================
  platform darwin -- Python 3.12.13, pytest-9.1.0, pluggy-1.6.0
  rootdir: /Users/burak/Developer/hermes-tweet
  configfile: pyproject.toml
  plugins: cov-7.1.0, anyio-4.13.0
  collected 6 items

tests/test_submission_readiness.py ...... [100%]

============================== 6 passed in 0.04s ===============================

• checked=35 findings=0
• ============================= test session starts ==============================
  platform darwin -- Python 3.12.13, pytest-9.1.0, pluggy-1.6.0
  rootdir: /Users/burak/Developer/hermes-tweet
  configfile: pyproject.toml
  plugins: cov-7.1.0, anyio-4.13.0
  collected 16 items

tests/test_public_safety.py ................ [100%]

============================== 16 passed in 0.03s ==============================

• Submission readiness stayed at 960 lines; the edited fixture stayed below the 600-line cap.

Note

Tighten discovery route rejection criteria with three new catalog and marketplace patterns

Adds three new rejection phrases to agent_runtime.txt and documents them in SUBMISSION_READINESS.md:

• Rejects owner-only public Claude Code catalogs where every plugin lives in the owner's repositories
• Rejects developer-workflow-only marketplaces lacking social, X/Twitter, Hermes Agent, or external source-repository lanes
• Rejects account-dependent social research skills that forbid private accounts, local credentials, or paid service dependencies

^{Macroscope summarized 7481736.}