docs(agents): add CWL-ENTRY read-first block

[seonghobae]

Current authority — 2026-09-10

• base owner: #1623@17a7618eda2b212b691f08fa936e042b34258fc9
• exact head: 2bcf5eb8b93b231c05f5f04d6a2a31190cf7df81
• lifecycle: Draft / repository-entry guidance owner / do not merge
• effective delta over current fix(deps): patch frontend audit security floors #1623: exactly 2 files — AGENTS.md and backend/tests/test_release_governance.py.

Current head is an ordinary two-parent successor: old #1528 83b302a... remains first parent and current #1623 is the second parent. The tree adopts #1623's latest Vitest importer-contract repair while preserving the repository-entry guidance delta; dependency/security source remains owned by #1623.

Fresh compare against exact base 17a7618... is ahead-only with the same two-file product/governance scope. No force push, destructive rebase, copied dependency source, or predecessor-evidence transfer was used.

This source-changing restack has no ordinary PR-triggered hosted workflow run at the latest read, so earlier checks/reviews are historical only. Keep Draft until the prerequisite is protected-integrated and this exact head has then-live required evidence plus qualifying independent review.

Governance descendant #1549 has been ordinary-restacked onto this head as 1c343aaaf080bdd009ba9784de721a1c26d4cdc5.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[github-actions]

PR governance metadata gate is not ready for cf472cf77fb93325858f485a22e967449d7c387a:

• Required check strix is CANCELLED on the current head.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

[seonghobae]

@coderabbitai review

Please review the unchanged exact head 57254cb61ecc67dd593ea96ae878bf651682a501 against protected develop@042b0c70531b229af3acbd0421a2f23098d848b3. The effective delta is only AGENTS.md and backend/tests/test_release_governance.py. Treat historical cancelled checks and comment-only review as non-authoritative; verify current source and report any still-valid finding.

[coderabbitai]

Tip

For best results, initiate chat on the files or code changes.

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

base="042b0c70531b229af3acbd0421a2f23098d848b3"
head="57254cb61ecc67dd593ea96ae878bf651682a501"

printf '%s\n' '== Checked-out commit and requested commit objects =='
git rev-parse HEAD
git cat-file -t "$base"
git cat-file -t "$head"
git merge-base --is-ancestor "$base" "$head" && echo "base_is_ancestor=true"

printf '%s\n' '== Name/status and complete exact diff =='
git diff --check "$base" "$head"
git diff --name-status "$base" "$head"
git diff --find-renames --find-copies --unified=80 "$base" "$head" -- AGENTS.md backend/tests/test_release_governance.py

printf '%s\n' '== AGENTS.md CWL entry context =='
rg -n -C 25 '<!-- CWL-ENTRY -->|CWL-ENTRY|ContextualWisdomLab/\.github|Project|Figma|`#1428`|`#1436`' AGENTS.md || true

printf '%s\n' '== Governance test structure and changed-entry references =='
ast-grep outline backend/tests/test_release_governance.py --items all --view expanded
rg -n -C 12 'CWL-ENTRY|AGENTS\.md|1428|1436|canonical|Project|Figma|private agent memory|stale repository' backend/tests/test_release_governance.py || true

printf '%s\n' '== Current pull request metadata, checks, and reviews =='
gh pr view 1528 --repo ContextualWisdomLab/naruon \
  --json number,url,state,isDraft,headRefOid,baseRefOid,mergeStateStatus,reviewDecision,statusCheckRollup,reviews \
  --jq '{number,url,state,isDraft,headRefOid,baseRefOid,mergeStateStatus,reviewDecision,statusCheckRollup,reviews}'

Length of output: 47991

---

🏁 Script executed:

#!/bin/bash
set -euo pipefail

printf '%s\n' '== Referenced local source files =='
for path in \
  docs/architecture/naruon-product-spec.md \
  docs/product-technical-gap-baseline.md \
  backend/tests/test_release_governance.py \
  AGENTS.md
do
  if test -f "$path"; then
    printf 'present: %s\n' "$path"
  else
    printf 'missing: %s\n' "$path"
  fi
done

printf '%s\n' '== CWL entry block containment and duplicate reference locations =='
python3 - <<'PY'
from pathlib import Path

agents = Path("AGENTS.md").read_text(encoding="utf-8")
start = agents.index("<!-- CWL-ENTRY -->")
end = agents.index("<!-- BEGIN cwl-agent-guidance -->", start)
entry = agents[start:end]
needles = (
    "docs/architecture/naruon-product-spec.md",
    "docs/product-technical-gap-baseline.md",
    "ContextualWisdomLab/projects/1",
    "ContextualWisdomLab/naruon/issues/1428",
    "ContextualWisdomLab/naruon/pull/1436",
    "docs/agent-github-project-protocol.md",
    "docs/product-goal-directive.md",
    "not private agent memory",
)
for needle in needles:
    positions = []
    offset = 0
    while True:
        index = agents.find(needle, offset)
        if index < 0:
            break
        positions.append(index)
        offset = index + len(needle)
    print(f"{needle}: total={len(positions)}, in_entry={entry.count(needle)}")
PY

printf '%s\n' '== Test guard shape =='
sed -n '1,70p' backend/tests/test_release_governance.py
sed -n '600,620p' backend/tests/test_release_governance.py

printf '%s\n' '== Live authority records =='
gh issue view 1428 --repo ContextualWisdomLab/naruon \
  --json number,state,title,url,closedAt \
  --jq '{number,state,title,url,closedAt}'
gh pr view 1436 --repo ContextualWisdomLab/naruon \
  --json number,state,isDraft,title,url,headRefOid,baseRefName \
  --jq '{number,state,isDraft,title,url,headRefOid,baseRefName}'

Length of output: 6622

---

@seonghobae: I found one still-valid finding.

P2 — Make the regression test validate the CWL-ENTRY block and link destinations.
backend/tests/test_release_governance.py, Line 607 through Line 615, checks only whether each required string occurs somewhere in the full AGENTS.md text. The test passes if a future edit removes the references from <!-- CWL-ENTRY -->, retains them elsewhere in the document, or changes a Markdown link destination while keeping the current visible label. It also does not reject a stale competing Project, issue, PR, or Figma reference in the entry block.

Extract the text from <!-- CWL-ENTRY --> through <!-- BEGIN cwl-agent-guidance -->. Then assert the required Markdown destinations and authority statement within that block. Add negative assertions for superseded authority references when their values are known.

The exact head and effective two-file delta match the request. git diff --check passed. The local product specification and gap-baseline files exist. Issue #1428 is open. PR #1436 is open and Draft.

The current GitHub state is still not merge-authoritative. The pull request is BLOCKED and REVIEW_REQUIRED. The listed required workflow runs are cancelled or skipped. The listed review is comment-only and targets a different commit.

You are interacting with an AI system.

[seonghobae]

@codex review

Review only exact head 2bcf5eb8b93b231c05f5f04d6a2a31190cf7df81 against base 17a7618eda2b212b691f08fa936e042b34258fc9. Verify the two-file repository-entry guidance delta and its governance regression test; treat all predecessor reviews/checks as historical after the ordinary restack.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.