Another deep audit and production-hardening pass is complete. 102 tests, smoke, operator smoke, and production audit all pass.

Project fingerprint — governance & monorepo
project_fingerprint.py now detects industry-standard repo signals:

Signal	Source
governance_files
SECURITY.md, CODE_OF_CONDUCT.md, .editorconfig, CHANGELOG.md, docs/adr/
workspace_packages
pnpm-workspace.yaml, npm workspaces in package.json
These flow through steering context, digest, and live steering lines (Governance, Packages, CI, Origin).

Bootstrap fill — no manual dead-ends
_fallback_replacement() no longer returns manual — review bootstrap_fill_plan.tasks. The chain is:

purpose_hint → operators_hint → runtime_center_hint → stack_summary → steering_brief → entry_points/makefile_targets → git_remote → archetype-specific guidance

Every unmapped phrase gets an evidence-backed replacement and source tag.

Operator hints — always project-aware
build_agent_operator_hints() now attaches:

project_steering_brief — for all workspaces with a README/manifest
verification_commands — e.g. make verify
project_steering_digest — when bootstrap is incomplete
Agents see per-project identity on every roadmap tool response, not only during bootstrap fill.

Doctor & health — full evidence wiring
doctor.run_checks() uses gather_evidence() + build_project_fingerprint() for fill plans (not a stripped steering dict). project_steering_digest is always built when ROADMAP.md exists.

Formatted output in doctor and /dietcode doctor now includes Verify: lines from the digest.

Gate & JoyZoning
Schema gate default fix → roadmap(action='validate') + explain-gate (no generic “Edit ROADMAP.md”)
JoyZoning merge adds CI and Origin hints from roadmap_brief
Production audit expansion
Verifies:

SECURITY.md governance detection
Operator hints include project_steering_brief + verification_commands
No manual-only bootstrap phrase sources
End-to-end flow
fingerprint (governance, packages, verify, compose, cursor rules, …)
  → evidence → bootstrap_fill_plan → project_steering_digest
  → session / cockpit / kernel cockpit / operator hints / doctor / joyzoning
  → apply_bootstrap_fill → validate → recommended_next_action
Per-project steering is now wired through fingerprint → digest → every agent-facing surface, with evidence-backed autofill and no manual-only placeholder paths.

Author: CardSorting

health.py

@@ -528,6 +528,9 @@ def format_status_report(
         if roadmap.get("steering_brief"):
             lines.append(f"   Project: {roadmap['steering_brief']}")
         digest = roadmap.get("project_steering_digest") or {}
+        verify_cmds = digest.get("verification_commands") or []
+        if verify_cmds:
+            lines.append(f"   Verify: {verify_cmds[0]}")
         remaining = digest.get("bootstrap_remaining")
         if remaining and int(remaining) > 0:
             lines.append(

lib/agent/joyzoning/workflow.py

@@ -50,6 +50,18 @@ def _merge_steering_next_actions(
             if id_hint not in base and id_hint not in hints:
                 hints.append(id_hint)
 
+        ci = roadmap_brief.get("ci_systems") or []
+        if ci:
+            ci_hint = f"CI: {ci[0]}"
+            if ci_hint not in base and ci_hint not in hints:
+                hints.append(ci_hint)
+
+        git_remote = roadmap_brief.get("git_remote")
+        if git_remote:
+            origin_hint = f"Origin: {git_remote}"
+            if origin_hint not in base and origin_hint not in hints:
+                hints.append(origin_hint)
+
         stack = roadmap_brief.get("stack_summary")
         if stack:
             stack_hint = f"Stack: {stack}"

lib/agent/roadmap/agent_steering.py

@@ -48,6 +48,22 @@ def _project_context_lines(steering: dict[str, Any]) -> list[str]:
     if compose:
         lines.append(f"Compose: {', '.join(compose[:4])}")
 
+    packages = steering.get("workspace_packages") or []
+    if packages:
+        lines.append(f"Packages: {', '.join(packages[:4])}")
+
+    governance = steering.get("governance_files") or []
+    if governance:
+        lines.append(f"Governance: {', '.join(governance[:3])}")
+
+    ci = steering.get("ci_systems") or []
+    if ci:
+        lines.append(f"CI: {', '.join(ci[:2])}")
+
+    git_remote = steering.get("git_remote")
+    if git_remote:
+        lines.append(f"Origin: {git_remote}")
+
     docs_roots = steering.get("docs_roots") or []
     if docs_roots:
         lines.append(f"Docs: {', '.join(docs_roots[:3])}")

lib/agent/roadmap/bootstrap_fill.py

@@ -214,7 +214,17 @@ def _fallback_replacement(phrase: str, *, fingerprint: dict[str, Any]) -> tuple[
         return f"Document project-specific detail for {brief} ({stack}).", "project_fingerprint.stack_summary"
     if brief:
         return f"Document project-specific detail for {brief}.", "project_fingerprint.steering_brief"
-    return phrase, "manual — review bootstrap_fill_plan.tasks"
+    entry = fingerprint.get("entry_points") or fingerprint.get("makefile_targets") or []
+    if entry:
+        return f"Align with project workflows via `{entry[0]}` and documented center of gravity.", "project_fingerprint.entry_points"
+    git_remote = fingerprint.get("git_remote")
+    if git_remote:
+        return f"Document project-specific detail for repository {git_remote}.", "project_fingerprint.git_remote"
+    archetype = fingerprint.get("project_archetype") or "project"
+    return (
+        f"Replace template guidance with {archetype}-specific steering from README and repo evidence.",
+        "project_fingerprint.project_archetype",
+    )
 
 
 def _architecture_hint(
@@ -510,6 +520,8 @@ def build_project_steering_digest(
         "license": fingerprint.get("license"),
         "runtime_versions": fingerprint.get("runtime_versions"),
         "compose_services": fingerprint.get("compose_services"),
+        "governance_files": fingerprint.get("governance_files") or [],
+        "workspace_packages": fingerprint.get("workspace_packages") or [],
         "has_codeowners": fingerprint.get("has_codeowners"),
         "dependency_automation": fingerprint.get("dependency_automation"),
         "has_backstage_catalog": fingerprint.get("has_backstage_catalog"),

lib/agent/roadmap/doctor.py

@@ -174,18 +174,25 @@ def _check(name: str, ok: bool, detail: str = "") -> None:
     )
 
     fill_plan = None
-    if bootstrap_inc and roadmap_path.is_file():
+    steering_digest = None
+    if roadmap_path.is_file():
         try:
             from plugins.dietcode.lib.agent.roadmap.bootstrap_fill import (
                 build_bootstrap_fill_plan,
                 build_project_steering_digest,
             )
+            from plugins.dietcode.lib.agent.roadmap.evidence import gather_evidence
+            from plugins.dietcode.lib.agent.roadmap.project_fingerprint import build_project_fingerprint
 
             text = roadmap_path.read_text(encoding="utf-8", errors="replace")
-            evidence = {"project_fingerprint": dict(steering), "git": (snap.evidence or {}).get("git") or {}}
-            fill_plan = build_bootstrap_fill_plan(roadmap_text=text, evidence=evidence)
+            evidence = gather_evidence(root, tier="light", roadmap_text=text)
+            fp = evidence.get("project_fingerprint") or build_project_fingerprint(root)
+            if bootstrap_inc:
+                fill_plan = build_bootstrap_fill_plan(roadmap_text=text, evidence=evidence)
+            steering_digest = build_project_steering_digest(fp, fill_plan=fill_plan)
         except OSError:
             fill_plan = None
+            steering_digest = None
 
     if bootstrap_inc:
         count = gate_state.get("bootstrap_placeholder_count") or steering.get("bootstrap_placeholder_count")
@@ -207,11 +214,7 @@ def _check(name: str, ok: bool, detail: str = "") -> None:
         "project_archetype": steering.get("project_archetype"),
         "stack_summary": steering.get("stack_summary"),
         "bootstrap_fill_plan": fill_plan,
-        "project_steering_digest": (
-            build_project_steering_digest(dict(steering), fill_plan=fill_plan)
-            if fill_plan
-            else None
-        ),
+        "project_steering_digest": steering_digest,
         "enabled": cfg.enabled,
         "checks": checks,
         "validation": validation.to_dict() if validation else None,
@@ -235,6 +238,10 @@ def format_doctor_report(*, workspace: Optional[str] = None) -> str:
         lines.append(f"Project: {data['steering_brief']}")
     if data.get("stack_summary"):
         lines.append(f"Stack: {data['stack_summary']}")
+    digest = data.get("project_steering_digest") or {}
+    verify_cmds = digest.get("verification_commands") or []
+    if verify_cmds:
+        lines.append(f"Verify: {', '.join(verify_cmds[:3])}")
     lines.append(f"Enabled: {data.get('enabled')}")
     lines.append("")
 

lib/agent/roadmap/gate.py

@@ -201,7 +201,7 @@ def _check_bootstrap_complete(_: dict[str, Any], inputs: dict[str, Any]) -> bool
         "label": "ROADMAP.md schema valid",
         "is_open": _check_schema_valid,
         "why_closed": "Schema validation failed — checkpoint pass incomplete",
-        "fix": "Edit ROADMAP.md, then roadmap(action='validate')",
+        "fix": "roadmap(action='validate') — use /roadmap explain-gate for schema fixes",
         "safe": True,
         "blocks_kanban_complete": False,
     },

lib/agent/roadmap/operator.py

@@ -299,7 +299,15 @@ def build_agent_operator_hints(
             from plugins.dietcode.lib.agent.roadmap.steering_context import build_steering_context
 
             steering = build_steering_context(workspace=workspace)
+            if steering.get("steering_brief"):
+                hints["project_steering_brief"] = steering["steering_brief"]
+            verify_cmds = steering.get("verification_commands") or []
+            if verify_cmds:
+                hints["verification_commands"] = verify_cmds
             attached = attach_bootstrap_steering_fields(steering, tier="light")
+            digest = attached.get("project_steering_digest") or {}
+            if digest:
+                hints["project_steering_digest"] = digest
             plan = attached.get("bootstrap_fill_plan") or {}
             hint = format_bootstrap_fill_hint(plan)
             if hint:
@@ -308,4 +316,16 @@ def build_agent_operator_hints(
                     hints["recovery_suggestion"] = hint
         except Exception:
             pass
+    elif workspace and str(workspace).strip():
+        try:
+            from plugins.dietcode.lib.agent.roadmap.steering_context import build_steering_context
+
+            steering = build_steering_context(workspace=workspace)
+            if steering.get("steering_brief"):
+                hints["project_steering_brief"] = steering["steering_brief"]
+            verify_cmds = steering.get("verification_commands") or []
+            if verify_cmds:
+                hints["verification_commands"] = verify_cmds
+        except Exception:
+            pass
     return hints

lib/agent/roadmap/project_fingerprint.py

@@ -100,7 +100,9 @@ def _fingerprint_cache_token(root: Path) -> float:
         "renovate.json",
         ".github/dependabot.yml",
         "docker-compose.yml",
-        "compose.yml",
+        "pnpm-workspace.yaml",
+        "turbo.json",
+        "SECURITY.md",
     ):
         path = root / rel
         if path.is_file():
@@ -458,6 +460,45 @@ def _compose_services(root: Path) -> list[str]:
     return []
 
 
+def _governance_files(root: Path) -> list[str]:
+    found: list[str] = []
+    for rel in ("SECURITY.md", "CODE_OF_CONDUCT.md", ".editorconfig", "CHANGELOG.md"):
+        if (root / rel).is_file() and rel not in found:
+            found.append(rel)
+    if (root / "docs" / "adr").is_dir():
+        found.append("docs/adr")
+    return found[:6]
+
+
+def _workspace_packages(root: Path) -> list[str]:
+    packages: list[str] = []
+    pnpm_ws = root / "pnpm-workspace.yaml"
+    if pnpm_ws.is_file():
+        for line in _read_text(pnpm_ws, limit=2000).splitlines():
+            match = re.match(r'^\s*-\s*["\']?([^"\']+)["\']?', line)
+            if match:
+                name = match.group(1).strip()
+                if name and name not in packages:
+                    packages.append(name[:60])
+    data = _package_json(root)
+    workspaces = data.get("workspaces")
+    if isinstance(workspaces, list):
+        for item in workspaces:
+            if len(packages) >= 8:
+                break
+            name = str(item).strip()
+            if name and name not in packages:
+                packages.append(name[:60])
+    elif isinstance(workspaces, dict):
+        for item in workspaces.get("packages") or []:
+            if len(packages) >= 8:
+                break
+            name = str(item).strip()
+            if name and name not in packages:
+                packages.append(name[:60])
+    return packages[:8]
+
+
 def _catalog_metadata(root: Path) -> dict[str, Optional[str]]:
     catalog = root / "catalog-info.yaml"
     if not catalog.is_file():
@@ -594,6 +635,8 @@ def _build_project_fingerprint(root: Path) -> dict[str, Any]:
     runtime_versions = _runtime_versions(root)
     dependency_automation = _dependency_automation(root)
     compose_services = _compose_services(root)
+    governance_files = _governance_files(root)
+    workspace_packages = _workspace_packages(root)
     has_codeowners = (root / ".github" / "CODEOWNERS").is_file() or (root / "CODEOWNERS").is_file()
     verification_commands = _verification_commands(
         root,
@@ -674,6 +717,8 @@ def _build_project_fingerprint(root: Path) -> dict[str, Any]:
         "dependency_automation": dependency_automation or None,
         "has_codeowners": has_codeowners,
         "compose_services": compose_services or None,
+        "governance_files": governance_files or None,
+        "workspace_packages": workspace_packages or None,
         "has_backstage_catalog": has_backstage,
         "catalog_name": catalog_meta.get("catalog_name"),
         "catalog_description": catalog_meta.get("catalog_description"),

lib/agent/roadmap/steering_context.py

@@ -171,6 +171,8 @@ def build_steering_context(*, workspace: Optional[str] = None) -> dict[str, Any]
     "has_codeowners",
     "dependency_automation",
     "compose_services",
+    "governance_files",
+    "workspace_packages",
     "has_backstage_catalog",
     "catalog_name",
     "catalog_description",

scripts/roadmap_audit.py

@@ -218,6 +218,10 @@ def main() -> int:
             failures.append("fingerprint should detect Makefile targets")
         if "make verify" not in (fp.get("verification_commands") or []):
             failures.append("fingerprint missing make verify from Makefile targets")
+        (root / "SECURITY.md").write_text("# Security\n", encoding="utf-8")
+        fp_sec = build_project_fingerprint(root)
+        if "SECURITY.md" not in (fp_sec.get("governance_files") or []):
+            failures.append("fingerprint should detect SECURITY.md governance file")
         if fp.get("project_archetype") not in {"project", "library", "application", "web-app", "cli-tool", "hermes-plugin", "monorepo"}:
             failures.append(f"unexpected project_archetype: {fp.get('project_archetype')}")
         roadmap_text = (root / "ROADMAP.md").read_text(encoding="utf-8")
@@ -301,6 +305,12 @@ def main() -> int:
             if str(task.get("evidence_source") or "").startswith("manual"):
                 failures.append(f"bootstrap phrase manual-only: {phrase[:60]}")
 
+        hints = build_agent_operator_hints(workspace=str(root))
+        if not hints.get("project_steering_brief"):
+            failures.append("operator hints missing project_steering_brief")
+        if "make verify" not in (hints.get("verification_commands") or []):
+            failures.append("operator hints missing verification_commands")
+
         import json as _json
         from plugins.dietcode.lib.agent.roadmap.native_bridge import merge_roadmap_hint_into_result, roadmap_write_hint