Role
REQUIRED: read sibling ROLE.md (secretary default, grant rule, hybrid ban, config paths).
Iron Law
REPORT ONLY.
NO AUTO-CREATE.
NO AUTO-DELETE.
Steps
- Read
roots, ignore globs, max_depth from config. - Read registry + each project's
workspace.path. - Scan roots (skip sandbox root by default).
- Emit three lists: orphan disk | missing path | still missing (info).
- Suggest actions; wait for per-item confirm before any registry/project write.
- Never promote sandbox paths to active WIP.
Rationalizations
| Thought | Reality |
|---|---|
| "Register everything for completeness" | Completeness is the report, not mass active projects |
| "Orphans are obviously projects" | User confirms membership |
| "I'll create then they can delete" | Creates WIP debt and ghosts |
Done when
User has the three lists; any writes were explicitly confirmed.