chore(memory): journal + TODO — hotfix gitignore-diagram-allowlist

.claude/tasks/TODO.md

@@ -5,8 +5,9 @@ User go after the "why is gstack off under full?" answer (it was not: unapplied
 default). `scrape`, `skillify`, `diagram`, `make-pdf` join full.profile; the rest
 of the BDR-017 exclusion list stays out. /hotfix: smoke 4/4, suites 29 + 17 green,
 security PASS, bbe1087. Merged into develop db8c179 (user go 2026-09-25);
-`apply full` run, four skills linked. Follow-up: `.gitignore` allowlist lacks
-`skills/diagram` (untracked symlink) → chore/gitignore-diagram.
+`apply full` run, four skills linked. Follow-up done: `.gitignore` allowlist +
+`skills/diagram` (f363f11, bugfix/gitignore-diagram-allowlist, UNMERGED —
+human gate).
 
 ## 2026-09-25 — default profile = full + magic-MCP residue scrub (feature/default-profile-full)
 User: "retirer l'API de magic 21st … mettre un profil par défaut … full". Live magic

.claude/tasks/contracts/2026-09-25-gitignore-diagram-allowlist-1930.md

@@ -0,0 +1,23 @@
+# CONTRACT — gitignore-diagram-allowlist
+- date: 2026-09-25 | flow: hotfix | branch: bugfix/gitignore-diagram-allowlist
+- status: active
+
+## REQUEST (verbatim — IMMUTABLE)
+> `.gitignore` : l'allowlist des symlinks gstack (`skills/<name>`, lignes 3-56) ne contient pas `skills/diagram`, donc le symlink créé par `profile.sh apply full` apparaît untracked (`?? skills/diagram`). Ajouter la ligne `skills/diagram` à sa place alphabétique dans cette liste (LRN-025 : l'allowlist doit couvrir TOUS les skills gstack toggleables). Un seul fichier, une ligne.
+
+## CLARIFICATIONS
+none — pass A silent autofill (hotfix weight); pass B: nothing visible open
+(the slot is alphabetical: between `skills/devex-review` and `skills/document-release`).
+
+## ACCEPTANCE CRITERIA
+1. Symptom gone: `skills/diagram` is ignored and no longer untracked.
+   CHECK: git check-ignore -q skills/diagram && [ -z "$(git status --short -- skills/diagram)" ] && echo DIAGRAM_IGNORED
+   EXPECT: DIAGRAM_IGNORED
+   EVIDENCE: MET exit=0 marker-found :: DIAGRAM_IGNORED
+2. Build/tests green: the allowlist covers every gstack skill that full lists (LRN-025 census) — every bare gstack entry of full.profile is matched by an ignore rule.
+   CHECK: miss=0; for s in $(grep -v '^#' lib/profiles/full.profile | awk 'NF==1{print $1}'); do git check-ignore -q "skills/$s" || { echo "not ignored: skills/$s"; miss=1; }; done; [ "$miss" -eq 0 ] && echo ALLOWLIST_COVERS_FULL
+   EXPECT: ALLOWLIST_COVERS_FULL
+   EVIDENCE: MET exit=0 marker-found :: ALLOWLIST_COVERS_FULL
+
+## FILE SCOPE
+- .gitignore (one line added)