chore(memory): journal + TODO — hotfix gitignore-diagram-allowlist

.claude/memory/journal.md

@@ -514,3 +514,4 @@ rules:
 - feature/default-profile-full merged into develop on user go, `gitflow finish` → 1ee6cf6, pushed (develop == origin/develop), local + origin copies removed by the lib. User committed `.env.example` scrub himself (16fea11) before the merge. BDR-101 shipped. Still open for the user: first `bash lib/profile.sh reset` on this machine + new session.
 - User: "why is gstack off under full?" → premise stale: it was off before the first `reset` (BDR-030: gstack only via a profile), live state now = full (34 gstack linked, 21st design 5 linked). Browser tools already in full. User go: `scrape`, `skillify`, `diagram`, `make-pdf` added to full.profile via /hotfix (contract `2026-09-25-full-profile-web-doc-skills-1809`, smoke 4/4 + suites green, security PASS) → bbe1087 on bugfix/full-profile-web-doc-skills, pushed, UNMERGED — human gate. After merge: `bash lib/profile.sh apply full` to link the 4.
 - bugfix/full-profile-web-doc-skills merged into develop on user go, `gitflow finish` → db8c179, pushed, copies removed by the lib. `bash lib/profile.sh apply full` run on this machine: scrape, skillify, diagram, make-pdf linked (gstack on-demand). `skills/diagram` shows untracked: `.gitignore` gstack allowlist lacks it (LRN-025 class) → chore branch.
+- /hotfix `.gitignore`: gstack symlink allowlist lacked `skills/diagram` (LRN-025 class, surfaced by `apply full`). One line, contract `2026-09-25-gitignore-diagram-allowlist-1930`, census oracle: every bare gstack entry of full.profile ignored. Security PASS. f363f11 on bugfix/gitignore-diagram-allowlist, pushed, UNMERGED — human gate.

.claude/tasks/TODO.md

@@ -5,8 +5,9 @@ User go after the "why is gstack off under full?" answer (it was not: unapplied
 default). `scrape`, `skillify`, `diagram`, `make-pdf` join full.profile; the rest
 of the BDR-017 exclusion list stays out. /hotfix: smoke 4/4, suites 29 + 17 green,
 security PASS, bbe1087. Merged into develop db8c179 (user go 2026-09-25);
-`apply full` run, four skills linked. Follow-up: `.gitignore` allowlist lacks
+`apply full` run, four skills linked. Follow-up done: `.gitignore` allowlist +
-`skills/diagram` (untracked symlink) → chore/gitignore-diagram.
+`skills/diagram` (f363f11, bugfix/gitignore-diagram-allowlist, UNMERGED —
+human gate).
 
 ## 2026-09-25 — default profile = full + magic-MCP residue scrub (feature/default-profile-full)
 User: "retirer l'API de magic 21st … mettre un profil par défaut … full". Live magic

.claude/tasks/contracts/2026-09-25-gitignore-diagram-allowlist-1930.md

@@ -0,0 +1,23 @@
+# CONTRACT — gitignore-diagram-allowlist
+- date: 2026-09-25 | flow: hotfix | branch: bugfix/gitignore-diagram-allowlist
+- status: active
+
+## REQUEST (verbatim — IMMUTABLE)
+> `.gitignore` : l'allowlist des symlinks gstack (`skills/<name>`, lignes 3-56) ne contient pas `skills/diagram`, donc le symlink créé par `profile.sh apply full` apparaît untracked (`?? skills/diagram`). Ajouter la ligne `skills/diagram` à sa place alphabétique dans cette liste (LRN-025 : l'allowlist doit couvrir TOUS les skills gstack toggleables). Un seul fichier, une ligne.
+
+## CLARIFICATIONS
+none — pass A silent autofill (hotfix weight); pass B: nothing visible open
+(the slot is alphabetical: between `skills/devex-review` and `skills/document-release`).
+
+## ACCEPTANCE CRITERIA
+1. Symptom gone: `skills/diagram` is ignored and no longer untracked.
+   CHECK: git check-ignore -q skills/diagram && [ -z "$(git status --short -- skills/diagram)" ] && echo DIAGRAM_IGNORED
+   EXPECT: DIAGRAM_IGNORED
+   EVIDENCE: MET exit=0 marker-found :: DIAGRAM_IGNORED
+2. Build/tests green: the allowlist covers every gstack skill that full lists (LRN-025 census) — every bare gstack entry of full.profile is matched by an ignore rule.
+   CHECK: miss=0; for s in $(grep -v '^#' lib/profiles/full.profile | awk 'NF==1{print $1}'); do git check-ignore -q "skills/$s" || { echo "not ignored: skills/$s"; miss=1; }; done; [ "$miss" -eq 0 ] && echo ALLOWLIST_COVERS_FULL
+   EXPECT: ALLOWLIST_COVERS_FULL
+   EVIDENCE: MET exit=0 marker-found :: ALLOWLIST_COVERS_FULL
+
+## FILE SCOPE
+- .gitignore (one line added)