chore: repo pronto para abrir — docs internos movidos p/ repo privado, README público sucinto, LICENSE MIT

- docs/ inteiro migrado para elberrd/impactus-internal-docs (privado); todas
  as referências (DOCS.md, CLAUDE.md, comentários em src/bin/fia-templates)
  apontam para lá por nome, sem link
- README reescrito: oficial e curto, Alpha em destaque, acesso exclusivo a
  aluno com matrícula ativa na Impactus Academy (link), MIT esclarecendo que
  templates/harness são proprietários e fora do pacote
- LICENSE MIT adicionada; package.json com author/homepage/repository/bugs
- .gitignore sem nome de kit de terceiro

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: elberrd

.gitignore

@@ -9,8 +9,8 @@ daytona-test/
 # NÃO versionar aqui: pushes dentro de live1/ vão para o repo do template.
 live1/
 
-# Estudo — clones de repos de terceiros só para análise (ex.: vds-saas-starter-kit).
-# Nunca versionar: material comprado, não redistribuível.
+# Estudo — clones de repos de terceiros só para análise local.
+# Nunca versionar: material não redistribuível.
 estudo/
 
 # Template multi-tenant local — repositório Git independente.

CLAUDE.md

@@ -24,7 +24,9 @@ keys or extra usage).
 - `harness/`, `live1/`, `live2/` — the harness and the two live templates
   (separate repos checked out here; the harness is the single source of truth
   for skills/commands — templates never carry their own copies).
-- `test/` — `node:test` suite. `docs/` + `DOCS.md` — the deep documentation.
+- `test/` — `node:test` suite. `DOCS.md` — the deep documentation. Internal
+  planning/design docs live in the private `impactus-internal-docs` repo —
+  never add them back here (this repo is public).
 
 ## Commands
 

DOCS.md

@@ -32,8 +32,8 @@ both templates (no org claims) and the webhook subscribes only to `user.*` (and
 is optional — `users.ensure` syncs on first login). Both templates ship the
 `/admin` panel; in live2 the FIRST user to sign in becomes super-admin, and the
 CLI additionally sets `SUPERADMIN_EMAILS` in Convex with the Clerk account
-email during installation (extra bootstrap). Spec/roadmap:
-[docs/live2-spec.md](./docs/live2-spec.md).
+email during installation (extra bootstrap). Spec/roadmap: `live2-spec.md`
+in the private `impactus-internal-docs` repo.
 
 ### Install modes and stack paths
 
@@ -156,7 +156,8 @@ its own groups without requiring a CLI release. Without those fields, the
 CLI's built-in catalog applies (current live1/live2 behavior).
 
 To ADD a template: an entry in `TEMPLATES` + repo on the community backend's
-allowlist (`docs/cli-paid-gate.md`) + `TEMPLATE_GITHUB_TOKEN` scope.
+allowlist (`cli-paid-gate.md`, private `impactus-internal-docs` repo) +
+`TEMPLATE_GITHUB_TOKEN` scope.
 
 ### 2.5 Post-install audit (`--verify`)
 
@@ -500,19 +501,27 @@ provider without login/key). The switch is logged and traced as
 - **Agent phases retry once by default** (`retries: 1`) before failing the run.
 - **One FDA at a time per project**: a best-effort `imp/data/.fda.lock`
   (pid + fda_id + runner + started_at) blocks a second concurrent run — the
-  permission gates of two parallel runs would revert each other's work. If a
-  crash leaves a stale lock, deleting the file is the recovery.
+  permission gates of two parallel runs would revert each other's work.
+  Acquisition is atomic (create-exclusive with a stale-retry), so two runs
+  started in the same instant cannot both pass the liveness probe; a pid that
+  answers EPERM counts as ALIVE (it exists under another user), and elapsed
+  time alone never discards a lock — only a dead pid does. If a crash leaves
+  a stale lock, deleting the file is the recovery.
 - **Interactive sessions go read-only while an FDA runs**: the same lock has
   a reader side (`imp/scripts/fda-lock.mjs`, also `npm run fda:status`). A
   Claude session opened in the project during a run gets a READ-ONLY
   notice at session start (SessionStart hook) and a PreToolUse hook blocks
   file edits and write-shaped bash commands (incl. `git commit`/`add`/…)
   aimed inside the repo — an external write mid-run would be attributed to
   the phase agent and rolled back. Interactive Pi gets the same guard via the
-  `.pi/extensions/fda-lock.ts` extension. The FDA's own child agents are
-  exempt (the runner exports `FIA_FDA_RUN` into their environment), writes
-  outside the repo stay allowed, everything fails open, and the block lifts
-  the moment the run ends.
+  `.pi/extensions/fda-lock.ts` extension, and Cursor via the
+  `.cursor/hooks.json` `beforeShellExecution` hook
+  (`.cursor/hooks/fda-lock-cursor.mjs` — Cursor has no before-edit hook, so
+  shell commands are the guarded surface; stray agent edits are still swept
+  by the run's own gate). The FDA's own child agents are exempt (the runner
+  exports `FIA_FDA_RUN` into their environment), writes outside the repo stay
+  allowed, everything fails open, and the block lifts the moment the run
+  ends.
 - **Envelopes must declare artifacts**: `artifactsExist`/`filesNonEmpty` gates
   now fail on an empty `artifacts` list — an agent that produced nothing can
   no longer count as a success.
@@ -546,7 +555,12 @@ provider without login/key). The switch is logged and traced as
   the brief FROM DISK (`checkAcceptanceChecklist` in `imp/modules/gates.mjs`;
   the file path survives `--resume` via a session marker), one `fix_checklist`
   builder round repairs a forgotten checklist, and `checklist_2` fails the run
-  if any `- [ ]` survives — the gate refuses, it never ticks a box itself. In
+  if any `- [ ]` survives — the gate refuses, it never ticks a box itself.
+  The second pass also compares box IDENTITIES against the first
+  (`checklistDrift`): rewording, moving or swapping a box for a trivial
+  ticked one is refused the same as deleting it — only the tick and the
+  `— N/A (<reason>)` annotation are legal edits, and an N/A tick without a
+  parenthesized reason fails on its own. In
   `fda_sdlc` this happens BEFORE review, so the reviewer audits the ticks
   against the diff (a false tick is grounds for rejection). Prompts that are
   not brief files, and briefs without checkboxes, skip the gate. The ticked
@@ -810,7 +824,7 @@ Services
   --tenancy <value>        single (Live 1, default) | multi (Live 2: your app's
                            own organizations in Convex — per-organization
                            data/billing, roles/permissions, /admin with org
-                           management; spec history in docs/live2-spec.md)
+                           management)
   --skip-webhook           No Clerk → Convex webhook
   --storage <value>        convex | r2
   --skip-storage           Stays on Convex Storage without asking

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Impactus Academy (Elber Domingos)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.