Cut the SKILL.md spine and move Done-when lines to their leaves

Andrew Dunnrequested to merge
spine-cut into main

What changed

SKILL.md's body drops from 1,042 to about 820 words (front matter byte identical, so the description hash and just sims-check are unchanged).

  • Writing in public and reading gitlab.com through Orbit become rules 5 and 6 of "Rules that bind", so every path reads them.
  • The airgap, Geo, OpenShift, backing-services and browser Done-when lines move to the top of gce/airgap.md, gce/geo.md, gce/openshift-local.md, gce/openshift-sno.md, gce/backing-services.md and mcp.md.
  • Sibling sections merge into one branch each (airgap, Geo, OpenShift; the running-rig leaves; dev tooling with base and lane; DAP with AI Gateway).
  • The Operate a rig Done-when line stays in the spine in full.

Why this is safe

No diagram: the cut moves rules between files and changes no path.

sims/fidelity-test.md records the run. Every stored case ran on origin/main and on this tree, plus three probes for the cut's own risks (airgap baseline, the browser and psql channels, and the approve-disclose-Orbit path). The first cut lost the teardown confirmation on paths that never open gce/operations.md; a second attempt widened rule 2 and weakened the partial-overlap catch in the duplicate check; restoring the old Done-when line verbatim in its section cleared both. Case 11 is within a tenth of a catch of origin/main over nine passes each.

just ci passes (word budget 50,733 of 52,000).

Merge request reports