chore(memory): journal + TODO — effort-pins LOW round, 3 residual parked

.claude/memory/journal.md

@@ -550,3 +550,5 @@ rules:
 - Effort round on feature/effort-round ([[BDR-108]]): user table re-applied to all 88 linked skills; 30 existing levels hold, 3 repo skills pinned, 25 vendored externals pinned from `lib/effort-pins.txt` via `lib/effort-pins.sh` after the LAST vendoring step of install + resync (resync had dropped the BDR-107 pins, [[BLK-024]]); design stack ONE level high ([[LRN-181]]); model pins stay aliases, trade-off = tier × effort ([[LRN-182]]). Verifier ECARTS(3) caught my re-apply placed before the late 21st refresh (rtk-truncated grep read as complete) → fresh executor, CONFORME 7/7 then 9/9 after the 4-LOW hardening; security PASS ×2; `make test` 44 suites rc 0. Sub-agent thinking found unmeasured, not ≈0 ([[EVAL-038]]). 5 residual LOW parked in TODO. UNMERGED — human gate.
 
 - User go "merge le": feature/effort-round merged into develop via `gitflow finish` → 902bc76, no conflict, pushed (develop == origin/develop), local + origin copies removed by the lib. BDR-108 on develop; pins live on disk here, no `make plugin` needed; 5 residual LOW parked in TODO.
+- User go "fais les cinq low restants": bugfix/effort-pins-low, contract `2026-09-29-effort-pins-low-1644`, fresh bugfixer (T13b stub reaches the re-read branch, T15 self-kill INT fixture, T15b trap restore, T16 `%q`, T14 root SKIP, mktemp guard). GATE 0 MET, verifier CONFORME 5/5 with 3 mutation runs, security PASS (3 new LOW parked, none exploitable: control bytes via `%q`+`echo -e`, trap-install window, TERM rc). Suite 30/0. UNMERGED — human gate.
+

.claude/tasks/TODO.md

@@ -20,7 +20,8 @@ quality/price trade-off is tier × effort, never version.
 - [x] S8 registries BDR-108, LRN-181, LRN-182, BLK-024, EVAL-038 (user go) + journal
 - [x] S9 hardening of lib/effort-pins.sh (4 LOW, user go): fresh executor, T11-T14, verifier CONFORME 9/9, security PASS
 - [x] parked LOW (security re-gate 2026-09-29, none exploitable; done on bugfix/effort-pins-low, user go "fais les cinq low restants"): no RETURN trap on the mktemp sibling (SIGINT during awk leaves `SKILL.md.XXXXXX`); T13 never reaches the post-write re-read branch (CRLF opener fails `_effort_pin_closed` first, fixture with LF delimiters + CRLF `name:` line would); T14 fails under root (chmod ignored); `WORK="$(mktemp -d)"` unguarded in the suite (`|| exit 1`); install-plugins.sh `err()` uses `echo -e` on the rejected map line
-- UNMERGED — human gate ("merge it")
+- [ ] parked LOW round 2 (security gate on bugfix/effort-pins-low, none exploitable, diminishing returns): `%q` re-encodes real control bytes (ESC, CR) that the installer's `echo -e` err() would render (needs a malicious commit to the tracked map; strip `[[:cntrl:]]` before printing); INT/TERM trap installed after mktemp (microsecond window, install before with `tmp=""`); TERM exits 130 not 143; T15 fails closed when SIGINT is ignored at shell entry (nohup/async)
+- bugfix/effort-pins-low UNMERGED — human gate ("merge it")
 
 ## 2026-09-28 — effort tiering: session high, agent pins, skill levels, phase shifts (feature/effort-tiering)
 Spec `docs/superpowers/specs/2026-09-28-effort-tiering-design.md`, plan