context-file staleness: curated context files lag their subtrees

[github-actions]

One or more curated context files have accumulated churn under their scope since they were last touched. Review each flagged file per docs/playbooks/docs-drift.md and touch it in a commit to reset its clock; this issue auto-updates on the next weekly sweep.

Context-file staleness report

Checked 7 curated context file(s) at 9ae43f6269fd. 5 flagged.

src/bernstein/adapters/AGENTS.md

• Scope: src/bernstein/adapters/
• Last touched: d87020dfd20e (2026-08-12T11:29:35+03:00) — docs: reset staleness clock for curated context files (docs: reset staleness clock for curated context files #3656)
• Since then: 12 commit(s) in scope; net diff 8 file(s), +189/-170 (359 lines, threshold 200)
• Top commits by churn:

Commit	Lines	Subject
7a90db2d12b4	180	fix(mock): thread real task identity to prevent attribution collisions (#3728)
e8af24bbb671	68	fix(adapters): contain the receipt temp path, not just the sealed name (#3857)
0180508d62bb	44	docs: regenerate adapter last-green table from canary receipts (#3853)
effd35ec68e8	42	docs: regenerate adapter last-green table from canary receipts (#3720)
2760256cda22	40	docs: regenerate adapter last-green table from canary receipts (#3667)

src/bernstein/cli/AGENTS.md

• Scope: src/bernstein/cli/
• Last touched: d87020dfd20e (2026-08-12T11:29:35+03:00) — docs: reset staleness clock for curated context files (docs: reset staleness clock for curated context files #3656)
• Since then: 19 commit(s) in scope; net diff 18 file(s), +1059/-109 (1168 lines, threshold 200)
• Modules added: src/bernstein/cli/commands/receipt_cmd.py, src/bernstein/cli/commands/volunteer_cmd.py
• Top commits by churn:

Commit	Lines	Subject
a5da0f7bc3dd	187	fix(replay): emit JSON on every exit path, not only the successful one (#4017)
49ec76025cfe	181	feat(security): result receipt bundle with offline DSSE verify (#3870) (#3903)
b99c27997f3a	156	feat(volunteer): register the CLI group and ship volunteer verify (#3920)
a01242555802	98	fix(cli): declare the replay publish confirmation flag and make --as-json truthful (#3991)
7214c1c4b7c7	94	fix(replay): repair a crash-torn journal tail so a suspended task can resume (#3910) (#3955)

src/bernstein/core/orchestration/AGENTS.md

• Scope: src/bernstein/core/orchestration/
• Last touched: 2f00e32226db (2026-08-09T18:36:57+03:00) — fix: restore the four structural guards main is failing (fix: restore the four structural guards main is failing #3520)
• Since then: 9 commit(s) in scope; net diff 10 file(s), +601/-31 (632 lines, threshold 200)
• Modules added: src/bernstein/core/orchestration/run_closure_owner.py
• Top commits by churn:

Commit	Lines	Subject
1f757b6a6970	359	feat(audit): add universal authenticated run closure (#3660)
895c3896b86d	114	feat: record plan.graph digest in run journal (#3655)
be3b073da9bb	48	orch(demo): wait for finalization entry marker before tearing down (#3713)
b3996a2db4f4	47	Feat/skill injection audit trail (#3658)
0981f9c36d63	25	fix(replay): separate journal consistency from sealed identity (#3908)

src/bernstein/core/security/AGENTS.md

• Scope: src/bernstein/core/security/
• Last touched: 13741951309f (2026-08-14T14:09:40+03:00) — fix(tenanting): validate tenant ids used as path segments (fix(tenanting): validate tenant ids used as path segments #3691)
• Since then: 11 commit(s) in scope; net diff 10 file(s), +963/-169 (1132 lines, threshold 200)
• Modules added: src/bernstein/core/security/luhn.py, src/bernstein/core/security/result_receipt_bundle.py
• Top commits by churn:

Commit	Lines	Subject
49ec76025cfe	425	feat(security): result receipt bundle with offline DSSE verify (#3870) (#3903)
1bb07eb8824a	218	fix(security): check route permissions for every credential kind (#3797)
bc11ed2bc882	138	fix(security): align vuln_disclosure defaults with SECURITY.md (#3793)
d936d0082ff1	124	refactor(security): one Luhn implementation, length policy left with callers (#3862)
d4e9af5cb6e4	67	feat(security): derive manifest_sha256 and make its check visible in the verdict (#4048)

tests/AGENTS.md

• Scope: tests/
• Last touched: d87020dfd20e (2026-08-12T11:29:35+03:00) — docs: reset staleness clock for curated context files (docs: reset staleness clock for curated context files #3656)
• Since then: 129 commit(s) in scope; net diff 225 file(s), +28471/-2335 (30806 lines, threshold 200)
• Modules added: tests/integration/test_first_run_documented_path.py, tests/integration/test_first_run_graduation_surface.py, tests/integration/test_first_run_long_running_surfaces.py, tests/integration/volunteer/__init__.py, tests/integration/volunteer/test_volunteer_sandbox_egress.py, tests/unit/adapters/test_receipt_path_containment.py, tests/unit/cli/test_console_legacy_code_page.py, tests/unit/cli/test_receipt_cmd.py, tests/unit/core/replay/test_journal_event_count_cache.py, tests/unit/core/replay/test_journal_identity.py (+77 more)
• Modules removed: tests/unit/scripts/test_gen_roadmap.py, tests/unit/scripts/test_review_bot_ack_finding_taxonomy.py, tests/unit/scripts/test_review_bot_ack_run_detection.py, tests/unit/test_review_bot_ack_workflow_yaml.py
• Top commits by churn:

Commit	Lines	Subject
b5c7f7743bcc	3366	perf(tests): collect only as RSS approaches the cap, not after every test (#3847)
3b915b095d0c	2017	chore: remove the external review-bot integration and its acknowledgement gate (#3780)
13741951309f	1847	fix(tenanting): validate tenant ids used as path segments (#3691)
54df80f11fb5	1707	fix(security): derive tenant scope from authentication state (#3677)
1bb07eb8824a	818	fix(security): check route permissions for every credential kind (#3797)

To clear a flag, review the context file against its scope and touch it in a commit — update it, or make a reconfirmation-only edit. Either way the "is this still true?" review leaves a commit that resets the clock.

Workflow run: https://github.com/sipyourdrink-ltd/bernstein/actions/runs/32005119365