docs(6204): shipped instruction text describes the product, not this instance's records

MCP tool docstrings and comments, the server's orientation notes, the plugin
skills, every hook script and the plugin README/PACKAGING drop record ids,
milestone numbers, dates and incident stories, and state each non-obvious why
as a present-tense fact. History stays in the task logs.

Corrections found on the way:
- plugin README/PACKAGING said every hook is a GET; moment, rule-opened and
  reply-rules POST, so the plugin's key needs write scope. Both now say so,
  name Settings -> MCP Access, and list every wired hook and endpoint.
- the contract-change hint printed "(lesson #4207)", this instance's record,
  to every install. It no longer cites a record.
- tasks.py claimed there is no delete_task; there is.
- rulebooks.py cited delete_event and a design spec that no longer exist.
- scribe_after_write.sh carried an always-empty etag_q; removed.
- test_write_path_trigger pinned "| tac | scribe_defs | head -1", text that
  existed only in a comment about the old code; it now pins the real tail -1
  pipeline.
- docs/development.md: CI runs on Gitea Actions.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

plugin/hooks/scribe_tool_rules.sh

@@ -1,13 +1,12 @@
 #!/usr/bin/env bash
-# Scribe — PreToolUse rule arm for ACTIONS (#3476).
+# Scribe — PreToolUse rule arm for ACTIONS.
 #
 # The sibling of scribe_prior_art.sh. That hook is registered on Write|Edit and
 # asks "what is recorded about the file being written". This one asks "does a
-# standing rule speak to the command about to be run" — the question nothing
-# could ask before, and the reason every rule about which tool to reach for had
-# to live in the preload instead, back when there was one.
+# standing rule speak to the command about to be run" — which is how a rule
+# about which tool to reach for arrives at all.
 #
-# WHY A HOOK AND NOT AN INSTRUCTION. A reflex generates no query (note #3089):
+# WHY A HOOK AND NOT AN INSTRUCTION. A reflex generates no query:
 # you reach for `curl` confidently, with no moment of doubt, so a surface that
 # waits to be asked never fires. Here nothing is asked — the tool call IS the
 # query, and the reflex has to become a tool call before it can do anything.
@@ -22,7 +21,7 @@
 
 command -v curl >/dev/null 2>&1 || exit 0
 
-# Sourced FIRST, because the JSON reader below lives there (#4107). It defines
+# Sourced FIRST, because the JSON reader below lives there. It defines
 # functions and clears `url`/`token`; nothing here runs before it is needed.
 # shellcheck source=plugin/hooks/scribe_defs.sh
 . "$(dirname "${BASH_SOURCE[0]}")/scribe_defs.sh"
@@ -47,7 +46,7 @@ command_text=$(scribe_json_pick "$event_flat" '.tool_input.command')
 
 # scribe_config, not a hand-rolled pair of parameter expansions: it also treats
 # an UNEXPANDED `${...}` placeholder as unset, which would otherwise be sent as
-# a garbage Bearer token and 401 on every call (#2198's class).
+# a garbage Bearer token and 401 on every call.
 scribe_config || exit 0
 
 # Bounded before encoding: a heredoc or a pasted script can be enormous, and
@@ -56,8 +55,8 @@ scribe_config || exit 0
 # place. `head -c`, never `cut -c`: cut truncates each LINE and caps nothing.
 command_text=$(printf '%s' "$command_text" | head -c 2000)
 
-# Whole, never line by line: the predecessor (`jq -rR`) encoded a multi-line
-# command one line at a time and joined them with raw newlines — an invalid URL.
+# Whole, never line by line: per-line encoding joins a multi-line command with
+# raw newlines — an invalid URL.
 # scribe_urlenc reads bytes and has no notion of a line.
 cmd_enc=$(printf '%s' "$command_text" | scribe_urlenc)
 tool_enc=$(printf '%s' "$tool_name" | scribe_urlenc)
@@ -68,7 +67,7 @@ lookup_dir=${event_cwd:-${CLAUDE_PROJECT_DIR:-$PWD}}
 scope=$(scribe_scope_query "$lookup_dir")
 [ -n "$scope" ] && repo_q="&${scope}"
 
-# Where the command runs, against the repo's root (milestone 444): the paths a
+# Where the command runs, against the repo's root: the paths a
 # command names are relative to its cwd or absolute, and a System's patterns
 # are relative to the root. The server does the arithmetic; this sends both.
 where_q=""
@@ -96,11 +95,11 @@ rulings_q=""
 if [ -n "$session_id" ]; then
   safe_sid=$(printf '%s' "$session_id" | tr -c 'A-Za-z0-9._-' '_')
   rulefile="$state_dir/${safe_sid}.rules.ids"
-  # Ageing, not a flat read (#3751): an id named two hours ago is not one the
+  # Ageing, not a flat read: an id named two hours ago is not one the
   # session is still holding. scribe_rules_live carries the reasoning.
   rule_seen=$(scribe_rules_live "$rulefile")
   [ -n "$rule_seen" ] && rule_exclude_q="&exclude_rule_ids=${rule_seen}"
-  # What the session actually OPENED, as against what it was shown (#4100).
+  # What the session actually OPENED, as against what it was shown.
   rule_exclude_q="${rule_exclude_q}$(scribe_held_query "$state_dir/${safe_sid}.opened.ids")"
   # The Systems whose rulings were shown in full — shared with the write-path
   # hook, for the reason the rule file is.
@@ -130,20 +129,20 @@ if [ -n "$rulingsfile" ]; then
   scribe_json_list "$body_flat" '.ruling_system_ids' >> "$rulingsfile" || true
 fi
 
-# ── The pre-act checkpoint (#4214, milestone 419) ────────────────────────
+# ── The pre-act checkpoint ───────────────────────────────────────────────
 #
 # WHY THIS ARM AND NOT THE WRITE PATH. scribe_prior_art.sh carries an explicit,
 # tested property that it never returns a permissionDecision — a recall aid may
 # not stand in the way of a write, which is the operator's decision and is
 # guarded by test_hook_never_returns_a_permission_decision. No equivalent
-# decision covers this arm, and the misses that motivated the milestone on the
-# command side are the ones a stop actually reaches: a commit message asserting
-# what CI said, a verification script that checks nothing.
+# decision covers this arm, and the command-side misses are the ones a stop
+# actually reaches: a commit message asserting what CI said, a verification
+# script that checks nothing.
 #
 # WHAT THE STOP IS FOR. Everything else this plugin emits is additionalContext,
 # which Claude Code delivers alongside the tool RESULT — so the rule is read
 # after the call is written and reads as commentary on a decision already made.
-# That is milestone 419's central finding. A deny returns the reason to the
+# A deny returns the reason to the
 # model with the call unrun, so the rule's own text can be read before the act
 # exists. It costs the operator nothing: no prompt reaches them, and the model
 # clears it by reading one record and re-submitting.