forked from bchanot/claude
Orchestrator over 1..N projects: security-auditor (pinned semgrep) + cso (gstack ON) -> clean -> re-verify -> reconcile (report-only) -> doc-syncer silent mode, looping until a zero-fix pass, max 3 iterations. Fixes commit on chore/tour-<date>, never merged by the skill; per-project append-only .claude/audits/TOUR.md with BREAKING tags on contract-changing fixes. TDD per superpowers:writing-skills: 6 baseline gaps countered + 2 GREEN-run holes patched (scratch-file self-block, unflagged breaking fix). CLAUDE.md routing line + CHANGELOG Unreleased entry.