sync: dev -> master

.agents/skills/inspect-first/SKILL.md

@@ -21,7 +21,7 @@ Build a grounded view of the repository before acting. Do not infer repository s
 - Do not run Symfony commands.
 - Do not run Docker builds.
 - Do not generate local artifacts.
-- Do not stage, commit, push, merge, tag, or release.
+- Do not stage, commit, or push outside a task the maintainer directed (see AGENTS.md, maintainer-directed lane). Never merge, tag, or release.
 - Do not create broad refactors when the user asked for a bounded change.
 - Do not revive old retired namespace language. If encountered, flag it as a cleanup issue.
 

.agents/skills/safe-repo-change/SKILL.md

@@ -33,7 +33,7 @@ Make the smallest correct change that satisfies the user’s request while prese
 For `minspec/skeleton`, preserve the minimal skeleton purpose:
 
 - minimal Symfony application baseline
-- Symfony Docker / FrankenPHP / Caddy runtime baseline
+- the server runtime baseline lives in `minspec/docker`, not here
 - no database requirement by default
 - no default UX/application layer
 - no Workbench implementation

.claude/skills/inspect-first/SKILL.md

@@ -23,7 +23,7 @@ Build a grounded view of the repository before acting. Do not infer repository s
 - Do not run Symfony commands.
 - Do not run Docker builds.
 - Do not generate local artifacts.
-- Do not stage, commit, push, merge, tag, or release.
+- Do not stage, commit, or push outside a task the maintainer directed (see AGENTS.md, maintainer-directed lane). Never merge, tag, or release.
 - Do not create broad refactors when the user asked for a bounded change.
 - Do not revive old retired namespace language. If encountered, flag it as a cleanup issue.
 

.claude/skills/safe-repo-change/SKILL.md

@@ -35,7 +35,7 @@ Make the smallest correct change that satisfies the user’s request while prese
 For `minspec/skeleton`, preserve the minimal skeleton purpose:
 
 - minimal Symfony application baseline
-- Symfony Docker / FrankenPHP / Caddy runtime baseline
+- the server runtime baseline lives in `minspec/docker`, not here
 - no database requirement by default
 - no default UX/application layer
 - no Workbench implementation

.codex/config.toml

@@ -4,11 +4,9 @@
 # Keep secrets, auth, provider routing, profiles, telemetry, and machine-local paths
 # in ~/.codex/config.toml, not in this repository.
 
-model = "gpt-5.5"
-review_model = "gpt-5.5"
-
-# Strong enough for repo edits and doctrine-sensitive review without using
-# experimental maximum reasoning by default.
+# No model pin. The model is supplied at dispatch or session start, never named
+# by a repository config (maintainer rule, 2026-09-01). Reasoning defaults below
+# apply to whatever model the session runs.
 model_reasoning_effort = "high"
 model_reasoning_summary = "concise"
 model_verbosity = "medium"
@@ -89,4 +87,4 @@ terminal_title = ["spinner", "project"]
 # uncomment this table. Leave it commented for WSL/Linux/Chromebook.
 #
 # [windows]
-# sandbox = "elevated"
+# sandbox = "elevated"

.github/workflows/ci.yml

@@ -0,0 +1,24 @@
+name: ci
+on:
+  pull_request:
+  push:
+    branches: [dev, master]
+permissions:
+  contents: read
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2
+        with:
+          php-version: '8.4'
+      - run: composer validate --strict
+      - name: create-project end to end
+        run: |
+          cd "$RUNNER_TEMP"
+          composer create-project minspec/skeleton app --repository="{\"type\":\"path\",\"url\":\"$GITHUB_WORKSPACE\"}" --stability=dev --no-interaction
+          cd app
+          php bin/console about

.github/workflows/e2e.yml

@@ -0,0 +1,16 @@
+name: e2e
+# Caller of the org's canonical road test (minspec/workbench e2e.yml):
+# this repo's PR rides in its own slot, siblings at dev. One test,
+# no copies to drift.
+on:
+  pull_request:
+  push:
+    branches: [dev, master]
+permissions:
+  contents: read
+jobs:
+  e2e:
+    uses: minspec/workbench/.github/workflows/e2e.yml@dev
+    with:
+      skeleton_ref: ${{ github.event.pull_request.head.sha || github.sha }}
+      workbench_ref: dev

.mcp.json

@@ -0,0 +1,17 @@
+{
+  "mcpServers": {
+    "serena": {
+      "command": "uvx",
+      "args": [
+        "--from",
+        "git+https://github.com/oraios/serena@43ae0211d7f3bba4101cd0552707fa21d37f4c84",
+        "serena",
+        "start-mcp-server",
+        "--context",
+        "claude-code",
+        "--project",
+        "."
+      ]
+    }
+  }
+}

.serena/project.yml

@@ -0,0 +1,11 @@
+# Serena project config for minspec/skeleton — tracked, so every worktree and
+# session resolves the same scope. Uniform across the MinSpec org; the
+# PHP backend is Phpactor (PHAR, PHP >= 8.1, no Node).
+project_name: "minspec-skeleton"
+languages: ["php_phpactor"]
+encoding: "utf-8"
+ignore_all_files_in_gitignore: true
+ignored_paths:
+  - "var/**"
+  - "vendor/**"
+read_only: false