TASK-DOCS-019: Installer: checker in payload lib, config scaffold, CI template

Summary

Deliver plan item T12 (Phase 4) from docs/plans/PLAN-status-v3-platform-2026-07-27/plan.md: fleet-install-test green; fresh install carries hook+config+(optional) CI template.

Problem

Status v3 is still a session preview and enforcement is not yet the platform standard. Without this task, the mothership and consumer fleet keep the v2 page and cannot enforce THE RULE consistently.

Proposed Solution

Execute Phase 4 for T12 exactly as specified in the plan, preserving non-negotiables: THE RULE, no history rewrite, determinism, offline-first, consumer sovereignty. Every commit cites TASK-DOCS-019.

Alternatives Considered

Keep a second extractor beside render-status-hub — rejected by plan (fold into one generator).
Rewrite git history to fix links — rejected; ledger-only retro fixes.
Auto-set done on green gates — rejected; HITL remains mandatory.

Success Metrics

Primary: acceptance core is true — fleet-install-test green; fresh install carries hook+config+(optional) CI template.
Guardrail: no hand-edited derived payload copies; pair/parity and payload hooks remain the mirror path.

Scope

In: plan §7 T12 and its Phase 4 steps. Out: docs/status-v2-preview; silently choosing traceability.scaffold_ci default (P0 open question); push/merge/tag without operator instruction.

Dependencies

Upstream: TASK-DOCS-009. Downstream: TASK-DOCS-022, TASK-DOCS-023, TASK-DOCS-028. Source plan: docs/plans/PLAN-status-v3-platform-2026-07-27/plan.md.

1. Description

1.1 This task MUST deliver its plan §7 item while preserving THE RULE, no history rewrite, determinism, offline-first, and consumer sovereignty.
1.2 Acceptance core MUST be met as stated in Summary.
1.3 Every commit for this task MUST cite its canonical TASK id.
1.4 Green machine gates are necessary and never sufficient; HITL gates remain mandatory.
1.5 Derived payload copies MUST NOT be hand-edited.

Acceptance Criteria

[ ] AC 1 (traces_to: #1.1, #1.2) — plan item acceptance core is demonstrably met for this task's Phase gate - verify: plan Phase gate checklist + recorded evidence in the ship packet
[ ] AC 2 (traces_to: #1.3) — every commit for this task cites its canonical TASK id in subject or body - test: bash scripts/check_task_link.sh --range <base>..<head>
[ ] AC 3 (traces_to: #1.4) — review and final acceptance HITL gates are not self-crossed; agent halts with evidence - verify: STATUS-REFERENCE §1.4 / ship-tasks halt
[ ] AC 4 (traces_to: #1.5) — no hand-edited derived payload copies land in the PR - test: bash tools/install/check-pair-parity.sh when generator/docs-tools touched

Test plan

bash scripts/tests/run_all.sh when scripts/hooks touched
docs-site / DOM / fleet tests named by the phase plan when those surfaces are touched
bash .cyberos/cuo/gates/run-gates.sh before the review packet

AI Authorship Disclosure

Tools used: Cursor agent (GPT-5.6 Sol) drafting from the approved plan.
Scope: re-derived and CONFIRMED: plan §7 item ids T1–T22 and Phase 0–8 sequencing are taken from docs/plans/PLAN-status-v3-platform-2026-07-27/plan.md as read in this worktree. re-derived and CORRECTED: none — no numeric or citation claim from an earlier draft was corrected in this rewrite. measured and ADDED: task ids TASK-DOCS-008..029 allocated via backlog-mutate next-id docs at mint time; audit figures were treated as claims to verify, not facts to copy.
Human review: Operator approved the plan and reviews at CyberOS HITL gates.

End of TASK-DOCS-019.

Audit

Verdict summary

task@1 profile for plan T12. Acceptance core and dependency cone are explicit. Score 10/10 after the findings below.

Findings (all resolved)

ISS-001 — Template/body mismatch

engineering-spec headings with task@1 marker failed FM-004. Resolved: rewritten to task@1 sections.

ISS-002 — Missing RULE citation

Could ship unlinked commits. Resolved: Proposed Solution requires citing TASK-DOCS-019.

ISS-003 — Vague acceptance

"Do the phase" was untestable. Resolved: Summary/Success Metrics quote the plan acceptance core.

ISS-004 — Silent scaffold_ci default

Would pre-judge P0. Resolved: Scope marks it out-of-scope / open.

ISS-005 — Derived copy edits

Risk of pair drift. Resolved: Success Metrics guardrail forbids hand-editing derived copies.

ISS-006 — Dependency reciprocity

Orphan edges. Resolved: depends_on/blocks from plan graph (TASK-DOCS-009 / TASK-DOCS-022, TASK-DOCS-023, TASK-DOCS-028).

Resolution

All 6 concerns addressed. Score = 10/10.

End of TASK-DOCS-019 audit.