Distilled from the 2026-08 repo-wide purge and its review rounds. Use them to identify the governing principle, not as text templates. This file deliberately quotes leaked wording as calibration material — the recall batteries exclude the skill's directory, and its wording is not a license elsewhere.
Leaked: "Slash input resolves against the visible catalog (decision 21)."
Fixed: "Slash input resolves against the visible catalog — the plain-text-reference decision, owned by the web input-machine note."
The ordinal resolves nowhere at HEAD; the decision's name and owning note path do. Name the owning note's path at least once per file — as a link where the surface supports one — and later mentions may use the searchable name alone.
Leaked: "The registry rejects duplicate names (decision 7: names are flat, no namespacing)."
Fixed: "The registry rejects duplicate names; names are flat, with no namespacing."
No committed artifact owns "decision 7", so the citation is deleted — but its factual clause (flat names) is restated to stand alone, not deleted with it.
Leaked: "Rendering is pure: same snapshot, same string (audit R3)."
Fixed: "Rendering is pure: same snapshot, same string."
There is no audit document in the repo; the code is pure session shorthand carrying zero propositions.
Leaked: "Layering follows the design (v2 §3.2): src/core/ is the pure core."
Fixed: "Layering: src/core/ is the pure core."
§N of a draft nobody committed is unresolvable. Contrast: "escapes per RFC 9110 §10.1.5" stays — an external standard resolves outside the repo by design, and a committed doc that owns its §-numbering may be cited by section.
Leaked: "src/client/ is the shell (T4); the P-I migration owns the adapters."
Fixed: "src/client/ is the shell; the adapters live in src/client/adapters/."
Phase labels index a plan that never landed. Replace the label with what the phase produced.
Leaked: "A future remote backend implements this interface (the sandbox backend is a later PR in this stack)."
Fixed: "A remote backend can implement this interface without changing the render layer."
Durable prose cannot see the stack. Keep the extension-point contract; the pending work's home is the PR itself, a TODO, or an issue.
Leaked: "This PR adds cursor-based pagination to the session list."
Fixed: "The session list paginates by cursor."
A README outlives every PR; state the mechanism as current fact.
Leaked: "Colors used to come from --widget-* tokens, which nothing defined, so it always rendered the fallbacks; the alias tokens fixed that (PR #88)."
Fixed: "Colors come from the alias tokens; an undefined token renders the fallbacks."
Both live facts survive — the current mechanism and the standing failure behavior — restated in the present. The bug's biography belongs to the PR and its Agent Note.
Leaked: "The probe field is gone with the removal cut; badges ride the generic projection pair now."
Fixed: "Badges use the generic projection pair."
Readers who never saw probe learn nothing from its absence. "Now" contrasting with a deleted past is a version stamp.
Leaked: "This used to double-encode multibyte labels."
Fixed: "Without the byte-length guard, multibyte labels double-encode."
The regression pin survives as a present-tense counterfactual that names the guard; "used to" pins it to repo archaeology instead.
Leaked: "Batch rendering is synchronous this cut; the async path is roadmap work."
Fixed: "Batch rendering is synchronous." (The deferral lives in TODO(widget-batch): at the call site.)
"This cut" / "v1" / "today" go stale the moment they merge. A historical stage name inside an Agent Note's change-story section ("the first cut shipped X") is current-state-safe; the indexical form never is.
Leaked: "Rejected in review: caching the resolved spec. We keep resolution per-call."
Fixed (in an Agent Note's Alternatives considered): "Caching the resolved spec. Rejected: the spec depends on per-call cwd, so a cache keyed by request would serve stale roots."
The alternatives-considered genre is the sanctioned home; the reviewer and the round are not part of the rationale.
Leaked: "As of v5 of this note, the loader also validates manifests."
Fixed: "The loader validates manifests."
An implemented note states shipped reality; its own revision history lives in git.
Leaked: "The cast is safe — the SDK constructed the object, it simply doesn't declare the optionals strictly enough."
Fixed: "The SDK constructs this object with every optional populated; the declared type is looser than the runtime guarantee."
State the invariant a maintainer must not break. "It simply…" is a voice answering an objection nobody at HEAD raised. If the invariant is visible in the code, delete the comment instead.
Leaked: "This is correct because the reviewer confirmed the wrapping order."
Fixed: (deleted; the wrapping order is stated in the function's @returns.)
Correctness claims cite invariants or tests, never people.
Leaked: "First we normalize the label, then we truncate it, then we wrap it."
Fixed: (deleted.)
The three lines below the comment say the same thing in code.
Leaked: "This test creates a session, sends two messages, waits for the second reply, and then asserts the log has four entries."
Fixed: "Two round-trips must produce exactly four log entries — the projection dedupes the shared prefix."
Keep only the non-obvious assertion rationale; the walkthrough restates the test body.
Leaked: "Probably fine to render eagerly for now."
Fixed: (deleted; the deferral already has its TODO(widget-batch): marker.)
A hedge without an owner is planning residue. If no marker exists, write one (TODO(name): coalesce per animation frame) instead of keeping the hedge.
Leaked: "A 64 KiB buffer should be enough for most cases."
Fixed: "64 KiB holds the largest observed frame (48 KiB) with headroom; a larger frame fails loudly in decode."
Replace the hedge with the actual bound and the failure behavior when it is exceeded.
Leaked: "The renderer runs on the client 端; see the 设计稿 for spacing. ---- 私有 ----"
Fixed: "The renderer runs on the client side; spacing follows the Figma frame widget-badges."
Working-language fragments and session separators are transcription residue. The Figma frame name stays: external provenance that resolves outside the repo by design.
Keep: "The cap applies to the complete rendered value, wrappers included (issue #1470 owns the follow-up)."
An unaided pass deleted this, reasoning that issue citations belong in Agent Notes. Wrong direction: issues resolve at HEAD from any surface, and "#N owns the follow-up" is the sanctioned home for deferred work in a README. What Agent Notes and postmortems additionally sanction is citing merged PRs as evidence.
Delete: "Badge renderer over the widget seam (see the widget-rendering RFC)."
An unaided pass kept this as "naming the owning document by topic". The test is resolvability, not form: no committed file answers to "the widget-rendering RFC", so the pointer is dead. Retarget it to the committed owner if one exists; otherwise delete it.
Keep (after fixing): // oxlint-disable-next-line no-non-null-assertion -- the one-element literal guarantees index 0.
The justification clause is required prose. When the stated reason is false (the original said "the loop guard above proves a frame exists" with no loop in sight), fix the reason; never delete it.
Keep: "Depth cap (measured: 512 nests ≈ 0.15s synchronous; 4096 blocks the loop)."
The measurement pins the constant against uninformed retuning, and "measured" is the provenance that distinguishes data from a guess.
Keep: "The old connection drains before the new one accepts."
"Old" and "new" here name two live runtime objects during handover, not repository states. The change-narration ban is about repo history, not lifecycle vocabulary.
Every trap below shipped in the original purge and was caught in review. Enumerate a passage's propositions before trimming it.
Original: "These direct registrations are exceptions pending migration to slots."
Overcorrected: "These direct registrations are sanctioned exceptions."
Right: "These direct registrations are exceptions pending migration to slots."
"Pending migration" is an obligation; "sanctioned" blesses the status quo. The trim inverted the sentence's modality while shortening it.
Original: "A future IPC-based shell subclasses the executor and overrides spawn."
Overcorrected: "An IPC-based shell subclasses the executor and overrides spawn."
Right: "A hypothetical IPC-based shell — no such shell exists — would subclass the executor and override spawn."
Deleting the future-marker alone turns a design illustration into a claim that the class ships. Mark the hypothetical explicitly instead of just unmarking the future.
Original: "The gate notice narrates the check order; the notice text is also what verify-doc-typecheck compiles against."
Overcorrected: "…" (whole sentence deleted as narration.)
Right: "The notice text is what verify-doc-typecheck compiles against."
Half the sentence was narration; the other half was a load-bearing coupling. Delete clauses, not sentences, when propositions share a line.
Original: "The 4 MiB ceiling is measured: the largest generated py-types module is 3.1 MiB."
Overcorrected: "The ceiling is 4 MiB; the largest generated py-types module is 3.1 MiB."
Right: keep "measured".
Without "measured" the 3.1 MiB reads as a definition rather than an observation, and nobody re-measures before raising the ceiling.