Update AGENTS.md files across multiple modules to standardize task status update instructions and introduce a new document for Secret Leak Detection operations.

- Modified task status update instructions in AGENTS.md files to refer to corresponding sprint files as `/docs/implplan/SPRINT_*.md` instead of `docs/implplan/SPRINTS.md`. - Added a comprehensive document for Secret Leak Detection operations detailing scope, prerequisites, rule bundle lifecycle, enabling the analyzer, policy patterns, observability, troubleshooting, and references.
2025-11-05 11:58:32 +02:00
parent 9253620833
commit 90c244948a
229 changed files with 829 additions and 589 deletions
--- a/src/Concelier/StellaOps.Concelier.WebService/AGENTS.md
+++ b/src/Concelier/StellaOps.Concelier.WebService/AGENTS.md
@@ -38,7 +38,7 @@ Out: business logic of jobs, HTML UI, authn/z (future).
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Acsc/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Acsc/AGENTS.md
@@ -44,7 +44,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cccs/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cccs/AGENTS.md
@@ -44,7 +44,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertBund/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertBund/AGENTS.md
@@ -44,7 +44,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertCc/AGENTS.md
@@ -42,7 +42,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertFr/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertFr/AGENTS.md
@@ -31,7 +31,7 @@ Out: OVAL or package-level authority.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertIn/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.CertIn/AGENTS.md
@@ -32,7 +32,7 @@ Out: package range authority; scraping behind auth walls.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Common/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Common/AGENTS.md
@@ -35,7 +35,7 @@ Out: connector-specific schemas/mapping rules, merge precedence.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cve/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Cve/AGENTS.md
@@ -42,7 +42,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.RedHat/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.RedHat/AGENTS.md
@@ -31,7 +31,7 @@ Out: building RPM artifacts; cross-distro reconciliation beyond Red Hat.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Ubuntu/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Ubuntu/AGENTS.md
@@ -17,7 +17,7 @@ Implement and maintain the Ubuntu security advisory connector that ingests CVE/U
 - Ubuntu advisory format references linked from sprint notes (tasks should include source URLs).

 ## Working Agreement
-1. **Status sync**: switch task state to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and `TASKS.md` before/after work.
+1. **Status sync**: switch task state to `DOING`/`DONE` in both corresponding sprint file `docs/implplan/SPRINT_*.md` and `TASKS.md` before/after work.
 2. **AOC adherence**: never derive severity or merge fields; store raw documents with provenance (`source`, `upstream`, `content`, `linkset`, `supersedes`).
 3. **Deterministic parsing**: normalise timestamps to UTC ISO-8601, sort arrays, stabilise JSON output.
 4. **Offline readiness**: ensure mirroring path works (no live network unless configured), document bundle usage.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ghsa/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ghsa/AGENTS.md
@@ -43,7 +43,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Cisa/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Cisa/AGENTS.md
@@ -43,7 +43,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Kaspersky/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ics.Kaspersky/AGENTS.md
@@ -32,7 +32,7 @@ Out: firmware downloads; reverse-engineering artifacts.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Jvn/AGENTS.md
@@ -33,7 +33,7 @@ Out: overriding distro or PSIRT ranges without concrete evidence; scraping unoff
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kev/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kev/AGENTS.md
@@ -48,7 +48,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kisa/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Kisa/AGENTS.md
@@ -42,7 +42,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Nvd/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Nvd/AGENTS.md
@@ -30,7 +30,7 @@ Out: authoritative distro package ranges; vendor patch states.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Osv/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Osv/AGENTS.md
@@ -30,7 +30,7 @@ Out: vendor PSIRT and distro OVAL specifics.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Bdu/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Bdu/AGENTS.md
@@ -42,7 +42,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Nkcki/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Ru.Nkcki/AGENTS.md
@@ -42,7 +42,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.StellaOpsMirror/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.StellaOpsMirror/AGENTS.md
@@ -17,7 +17,7 @@ Provide the connector that ingests advisory mirror bundles produced by Export Ce
 - `docs/modules/airgap/airgap-mode.md`

 ## Working Agreement
-1. **State updates**: mark tasks `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and `TASKS.md` when work begins/ends.
+1. **State updates**: mark tasks `DOING`/`DONE` in both corresponding sprint file `docs/implplan/SPRINT_*.md` and `TASKS.md` when work begins/ends.
 2. **Provenance first**: record bundle identifiers (`bundle_id`, digests, time anchors) alongside every observation/linkset; never mutate raw documents.
 3. **Deterministic replay**: implement cursor storage and re-run safety (same bundle yields identical outputs).
 4. **Offline integrity**: validate signatures/hashes before ingest; emit actionable errors for stale/invalid bundles.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Adobe/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Adobe/AGENTS.md
@@ -32,7 +32,7 @@ Out: signing, package artifact downloads, non-Adobe product truth.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Apple/AGENTS.md
@@ -43,7 +43,7 @@ Out of scope:
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Chromium/AGENTS.md
@@ -32,7 +32,7 @@ Out: OS distro packaging semantics; bug bounty details beyond references.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Cisco/AGENTS.md
@@ -34,7 +34,7 @@ Out of scope: Non-security Cisco release notes.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Msrc/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Msrc/AGENTS.md
@@ -34,7 +34,7 @@ Out of scope: Non-security Microsoft release notes.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Oracle/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Oracle/AGENTS.md
@@ -31,7 +31,7 @@ Out: signing or patch artifact downloads.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Vmware/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Vndr.Vmware/AGENTS.md
@@ -32,7 +32,7 @@ Out: customer portal authentication flows beyond public advisories; downloading
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Core/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Core/AGENTS.md
@@ -36,7 +36,7 @@ Out: business logic of connectors/exporters, HTTP handlers (owned by WebService)
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Exporter.Json/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Exporter.Json/AGENTS.md
@@ -32,7 +32,7 @@ Out: ORAS push and Trivy DB BoltDB writing (owned by Trivy exporter).
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Exporter.TrivyDb/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Exporter.TrivyDb/AGENTS.md
@@ -33,7 +33,7 @@ Out: signing (external pipeline), scanner behavior.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Merge/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Merge/AGENTS.md
@@ -37,7 +37,7 @@ Out: fetching/parsing, exporter packaging, signing.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Models/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Models/AGENTS.md
@@ -34,7 +34,7 @@ Out: fetching/parsing external schemas, storage, HTTP.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Normalization/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Normalization/AGENTS.md
@@ -17,11 +17,11 @@ Maintain helper utilities that normalise upstream advisory payloads into Conceli
 - `docs/modules/concelier/design/` materials if referenced by tasks.

 ## Working Agreement
-1. **Synchronise status** in both `docs/implplan/SPRINTS.md` and `TASKS.md` when starting/finishing tasks.
+1. **Synchronise status** in both corresponding sprint file `docs/implplan/SPRINT_*.md` and `TASKS.md` when starting/finishing tasks.
 2. **AOC compliance**: avoid adding severity, consensus, fix hints, or other derived fields—output raw upstream data plus provenance.
 3. **Deterministic outputs**: enforce stable ordering (sorted arrays/objects), UTC timestamps, lowercase enum values as documented.
 4. **Shared API stability**: version helpers when breaking changes are needed; communicate with connector guilds.
 5. **Testing**: extend golden fixtures & property tests to catch regressions; ensure CI covers multi-source scenarios.
 6. **Documentation**: update developer notes (add/refresh doc under `docs/modules/concelier`) when normalization contracts change.

- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
--- a/src/Concelier/__Libraries/StellaOps.Concelier.Storage.Mongo/AGENTS.md
+++ b/src/Concelier/__Libraries/StellaOps.Concelier.Storage.Mongo/AGENTS.md
@@ -33,7 +33,7 @@ Out: business mapping logic, HTTP, packaging.
 - `docs/modules/platform/architecture-overview.md`

 ## Working Agreement
- 1. Update task status to `DOING`/`DONE` in both `docs/implplan/SPRINTS.md` and the local `TASKS.md` when you start or finish work.
+- 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work.
 - 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
 - 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
 - 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.