repo-boundaries-and-synclisted

# Repo Boundaries and Sync ## Boundary map (verified 2026-07-30) Published (tracked): - `skills/`, `design-pack/` — pack source (the marketplace roots). - `hooks/`, `.github/`, `.claude-plugin/` — enforcement, CI, manifests. - `reviews/` — public review and threat-model records. - `README.md`, `README.zh-Hant.md`, `LICENSE`, `THIRD-PARTY-NOTICES.md` — docs; the two READMEs mirror each other. Gitignored (private — does not publish by default): - `evals/`, `internal/`, `pack-eval-artifacts/`, `guideline*.txt` — fixtures burn on exposure; owner-private notes and drafts. These NEVER publish. - `.claude/` — live install + settings. - `skills-staging/` — retiring-architect scratch (`92314a6`); publishes only on explicit owner instruction. ## The working tree is permanently dirty-adjacent - The repo root can carry UNTRACKED private session transcripts. On 2026-07-30 it holds `chat-history.md` and `security-enhancement.md` (both full session transcripts — private content). Neither has ever entered a commit. - Standing defense: stage by explicit pathspec, always (`git add -- <path>`); never any stage-everything form. The gitignore commit for skills-staging states the exact threat in its own message: it "keeps a stray `git add -A` from publishing" private content (`92314a6`). - The transcripts' disposition (ignore pattern vs relocation) is the owner's pending decision — tracked in issue #100 (`UNCERTAINTY.md` item 1). Do not stage, quote, relocate, or