Default specialist: Engineer when running in a repo with git; else Orchestrator.
team/AGENTS.md → team/Engineer/AGENTS.md → active blueprint section.
- Run
scripts/leak-scan.shbefore publish - Run
pnpm testandpnpm run db:validatein pipelines when template is used
Conventional commits; no secrets in diff.
Default push: user/<github-handle>/workspace. Staging/prod: deploy operator only — docs/handbook/06-user-branches-and-deploy-governance.md.