Record: Adopt the shared rules

Outcome

This project now pins the shared rules at 2026-10-22.12. rules.lock holds the version and a SHA-256 per vendored file, scripts/rules-check.sh verifies the copy, and tests/05-rules-pin.sh runs it in the suite.

The adoption was breaking: the contract gains a non-overridable safety precedence level, modification becomes authorization-based, and nine capability conventions apply. Conformance cleared 57 findings across two features and two tasks.

Decisions

• External inputs left the feature graph. 03-globe-box.md listed GDAL, osgeo, numpy, the ETOPO tiles under /datasets and the model-elevation-earth project under ## Dependencies, which the validator reads as feature dependencies. Those five moved to ## External Inputs, and ## Dependencies now says None. — the same correction as its sibling project.
• Both features needed identifiers only. SITE-BUILD-R001–R008 and GLOBE-BOX-R001–R024, on the existing requirement sentences, wording unchanged. The globe-box feature is the largest single requirement set adopted so far.
• The globe-box task was rewritten, not transformed. Its file bullets carried the verb inside the backticks — - `create scripts/globe-box-build.sh` — and it had no TASK-VERIFY, TASK-FEATURES or TASK-ACCEPTANCE, with TASK-CONTEXT and TASK-FILES ahead of TASK-OUTPUT. All seven files already exist, so every operation is modify.
• PHASES.md is declared in prompts/10-project.md.
• Deleted three stale common/ files and pointed the glossary’s DELTA entry at contract section 6.

Verification

• rules-conform: nothing to conform.
• rules-check: ok (v2026-10-22.12, 39 files, 0 deviations).
• make test: 9 tests, all passed.

Behavioral evidence

Not run. This project carries scripts/site-state-fetch.sh but not scripts/status.sh, so only 06-credential-boundary and 01-malformed-task-refusal could apply. Neither was run. The portability gap is recorded in 00-project-rules/documents/eval-portability.md.

Note on the transform

The task transform was given a guard for verbs inside the backticks before this adoption, after the same form broke 03-model-render-print. It worked here without a hand audit, which is the difference between a lesson recorded and a lesson implemented.

What this adoption cost the library

Nothing — the fourth consecutive adoption to need no shared-rules change.

Commits

• Adoption commit — the vendored rules, conformance, and this record.