full-review

# Full Repository Review Confirm this dotfiles repo is healthy end to end: the local gate is green, `dot` works, every pinned tool/dependency is current, and `AGENTS.md`/`README.md`/`skills/` still describe the live repo. Every step below is read-only or idempotent — no `chezmoi apply`, no `mise upgrade`, no `mise run release`, no `mise run prune`. ## 1. Validate the gate ```bash mise run check # check:actions, check:chezmoi, check:dprint, check:docs, check:go, check:leaks, check:lua, check:python, check:scan, check:shell, check:skills mise run test # Go (dot/) + Python (skills/python-stack) suites mise run build # compiles the dot binary ``` `check:docs` and `check:skills` already assert consistency between the documentation and the live CLI (mise tasks, `dot` commands, the `AGENTS.md` layout inventory, every `SKILL.md` under `skills/` and `.agents/skills/`) — a green `check:docs` proves that layer; don't hand-re-audit it. ## 2. Confirm the dot CLI ```bash dot verify # sanity checks: environment, tools, secrets, install freshness dot --help # every subcommand needs an alias, matching skills/dot-cli/SKILL.md dot status # git/docker/k3d smoke test mise run doctor # chezmoi doctor + mise doctor mise run diff # pending chezmoi diff, read-only ``` Only treat a `dot verify` failure as a repo bug when it is not explained by local environment state (an unauthenticated CLI, a missing optional secret) — those are sandbox facts, not defects....