🐛 fix(workflow): v0.6.0 pr-reviewer stack — push gate, skill text, project-local template

Zax Shenrequested to merge
fix/v0-6-0-pr-reviewer-stack into dev

Summary

Closes !2899 (bro skipped pr-reviewer push gate on 9 audit-fix MRs) + bulk of !2900 (pr-reviewer quality, 5 root causes from 12 reviewer dispatches).

Five fixes

  1. scripts/hooks/git-push-guard.sh — first-push fallback when @{u} doesn't exist (universal -u origin <new-branch> case). Closes the bypass that let all 9 of bro's pushes through.
  2. skills/tmb_planning/SKILL.md — new Step 5.5 mandating pr-reviewer spawn between atomic_close and push.
  3. skills/tmb_review/SKILL.md — §A per-SHA worktree mandate (D1 from !2900); §B self-write mandate (no bro delegation, with explicit sqlite3 INSERT template); new §C bro spawn-prompt discipline (no prior verdict, no shortcuts).
  4. templates/project-seed/.claude/agents/pr-reviewer.md (NEW) — project-local template with mcpServers: [trajectory-server] (E1; plugin subagents can't have MCP frontmatter per CC docs).
  5. 2 new regression tests — 6-case first-push gate test + 7-case bro-skip detection test reproducing the !2899 scenario.

Bonus byte-identity fixes

SWE found pre-existing lint failures: agents/pr-reviewer.md, agents/swe.md, templates/agents/pr-reviewer.md were missing tmb_owner: bro. Added.

Verification (all green)

  • ✓ 13/13 new hook tests pass (6 first-push + 7 bro-skip)
  • ✓ L2: 421/421 (no regressions)
  • ✓ L4: 55/55
  • ✓ All 7 spec grep checks pass
  • ✓ pr-reviewer score: PASS (validation_attempts row 14 — written by reviewer themselves via §B path 2 honor-system, validated by reviewer using per-sha worktree per §A)

Deferred (separate MRs)

  • B1 schema-level validation_attempts.subagent_session_id provenance check — needs v2→v3 migration with backfill; separate MR.
  • Bug-capture lints for the 9 merged MRs' bug patterns — next branch (test/v0-6-0-bug-capture-lints).
  • LOAD-BEARING-SAFETY markers on 4 new negative-directives in Step 5.5 (non-blocking; warn-only lint passes).

Closes !2899 Closes !2900 (partial — B1 deferred)

Merge request reports