Harden intake review Series evidence for schema 1.1

.agents/skills/speckit-intake-review-status/SKILL.md

@@ -23,6 +23,7 @@ invoke the installed validator with the repository root, and report:
 - target paths, normalized hashes, optional Git blobs, and drift;
 - findings, questions, accepted-risk ownership, and re-evaluation triggers;
 - series and campaign coverage, including unique intake and worker counts;
+- for Series mode, request hash, root set, target order, edge count, and DAG validity;
 - whether Preset 7 or Preset 8 may consume the result under current policy;
 - the exact next command.
 

.agents/skills/speckit-intake-review/SKILL.md

@@ -27,7 +27,9 @@ exist. Use the installed policy and checklist.
    evidence, delivery authority, risks, references, prompt alignment, and
    secret or unnecessary-personal-data exposure.
 3. For a series, additionally review IDs, DAG, gaps, overlap, terminology,
-   invariants, handoffs, future scope, and authority.
+   invariants, handoffs, future scope, and authority. Use schema 1.1, declare
+   every root, order every target exactly once, and bind the request path and
+   normalized hash in the result.
 4. For a campaign, prove every `featureInput`, one semantic review per unique
    intake, every worker applicability row, repository/language/stack fit,
    manifest DAG/base/handoff agreement, and separately governed operator

.claude/skills/speckit-intake-review-status/SKILL.md

@@ -21,8 +21,9 @@ invoke the installed validator with the repository root, and report:
 - target paths, normalized hashes, optional Git blobs, and drift;
 - findings, questions, accepted-risk ownership, and re-evaluation triggers;
 - series and campaign coverage, including unique intake and worker counts;
+- for Series mode, request hash, root set, target order, edge count, and DAG validity;
 - whether Preset 7 or Preset 8 may consume the result under current policy;
 - the exact next command.
 
 Do not rewrite timestamps, hashes, status, reports, target files, Git state, or
-authority. A successful status check grants no implementation or remote right.
+authority. A successful status check grants no implementation or remote right.

.claude/skills/speckit-intake-review/SKILL.md

@@ -25,7 +25,9 @@ exist. Use the installed policy and checklist.
    evidence, delivery authority, risks, references, prompt alignment, and
    secret or unnecessary-personal-data exposure.
 3. For a series, additionally review IDs, DAG, gaps, overlap, terminology,
-   invariants, handoffs, future scope, and authority.
+   invariants, handoffs, future scope, and authority. Use schema 1.1, declare
+   every root, order every target exactly once, and bind the request path and
+   normalized hash in the result.
 4. For a campaign, prove every `featureInput`, one semantic review per unique
    intake, every worker applicability row, repository/language/stack fit,
    manifest DAG/base/handoff agreement, and separately governed operator
@@ -46,4 +48,4 @@ exist. Use the installed policy and checklist.
 
 Finish with outcome, target and worker counts, findings by severity, accepted
 risks, open questions, result path, and exact next action. Do not start Specify
-or an autonomous run implicitly.
+or an autonomous run implicitly.

.github/agents/speckit.intake-review-status.agent.md

@@ -18,8 +18,9 @@ invoke the installed validator with the repository root, and report:
 - target paths, normalized hashes, optional Git blobs, and drift;
 - findings, questions, accepted-risk ownership, and re-evaluation triggers;
 - series and campaign coverage, including unique intake and worker counts;
+- for Series mode, request hash, root set, target order, edge count, and DAG validity;
 - whether Preset 7 or Preset 8 may consume the result under current policy;
 - the exact next command.
 
 Do not rewrite timestamps, hashes, status, reports, target files, Git state, or
-authority. A successful status check grants no implementation or remote right.
+authority. A successful status check grants no implementation or remote right.

.github/agents/speckit.intake-review.agent.md

@@ -22,7 +22,9 @@ exist. Use the installed policy and checklist.
    evidence, delivery authority, risks, references, prompt alignment, and
    secret or unnecessary-personal-data exposure.
 3. For a series, additionally review IDs, DAG, gaps, overlap, terminology,
-   invariants, handoffs, future scope, and authority.
+   invariants, handoffs, future scope, and authority. Use schema 1.1, declare
+   every root, order every target exactly once, and bind the request path and
+   normalized hash in the result.
 4. For a campaign, prove every `featureInput`, one semantic review per unique
    intake, every worker applicability row, repository/language/stack fit,
    manifest DAG/base/handoff agreement, and separately governed operator
@@ -43,4 +45,4 @@ exist. Use the installed policy and checklist.
 
 Finish with outcome, target and worker counts, findings by severity, accepted
 risks, open questions, result path, and exact next action. Do not start Specify
-or an autonomous run implicitly.
+or an autonomous run implicitly.

.opencode/command/speckit.intake-review-status.md

@@ -18,8 +18,9 @@ invoke the installed validator with the repository root, and report:
 - target paths, normalized hashes, optional Git blobs, and drift;
 - findings, questions, accepted-risk ownership, and re-evaluation triggers;
 - series and campaign coverage, including unique intake and worker counts;
+- for Series mode, request hash, root set, target order, edge count, and DAG validity;
 - whether Preset 7 or Preset 8 may consume the result under current policy;
 - the exact next command.
 
 Do not rewrite timestamps, hashes, status, reports, target files, Git state, or
-authority. A successful status check grants no implementation or remote right.
+authority. A successful status check grants no implementation or remote right.

.opencode/command/speckit.intake-review.md

@@ -22,7 +22,9 @@ exist. Use the installed policy and checklist.
    evidence, delivery authority, risks, references, prompt alignment, and
    secret or unnecessary-personal-data exposure.
 3. For a series, additionally review IDs, DAG, gaps, overlap, terminology,
-   invariants, handoffs, future scope, and authority.
+   invariants, handoffs, future scope, and authority. Use schema 1.1, declare
+   every root, order every target exactly once, and bind the request path and
+   normalized hash in the result.
 4. For a campaign, prove every `featureInput`, one semantic review per unique
    intake, every worker applicability row, repository/language/stack fit,
    manifest DAG/base/handoff agreement, and separately governed operator
@@ -43,4 +45,4 @@ exist. Use the installed policy and checklist.
 
 Finish with outcome, target and worker counts, findings by severity, accepted
 risks, open questions, result path, and exact next action. Do not start Specify
-or an autonomous run implicitly.
+or an autonomous run implicitly.

.specify/presets/.registry

@@ -271,51 +271,6 @@
       ],
       "installed_at": "2026-07-21T19:12:26.842905+00:00"
     },
-    "intake-review-governance": {
-      "version": "0.1.0",
-      "source": "local",
-      "manifest_hash": "sha256:2f3d325882dff24249cf0160c1b7dfa98d1053ac2ad10c7ca6045a107d8138ed",
-      "enabled": true,
-      "priority": 65,
-      "registered_commands": {
-        "agy": [
-          "speckit.intake-review",
-          "speckit.intake-repair",
-          "speckit.intake-review-status"
-        ],
-        "claude": [
-          "speckit.intake-review",
-          "speckit.intake-repair",
-          "speckit.intake-review-status"
-        ],
-        "codex": [
-          "speckit.intake-review",
-          "speckit.intake-repair",
-          "speckit.intake-review-status"
-        ],
-        "copilot": [
-          "speckit.intake-review",
-          "speckit.intake-repair",
-          "speckit.intake-review-status"
-        ],
-        "opencode": [
-          "speckit.intake-review",
-          "speckit.intake-repair",
-          "speckit.intake-review-status"
-        ],
-        "zed": [
-          "speckit.intake-review",
-          "speckit.intake-repair",
-          "speckit.intake-review-status"
-        ]
-      },
-      "registered_skills": [
-        "speckit-intake-review",
-        "speckit-intake-repair",
-        "speckit-intake-review-status"
-      ],
-      "installed_at": "2026-07-21T19:12:28.206913+00:00"
-    },
     "autonomous-run-governance": {
       "version": "0.3.2",
       "source": "local",
@@ -471,6 +426,51 @@
         "speckit-intake-create-status"
       ],
       "installed_at": "2026-07-23T13:16:33.535306+00:00"
+    },
+    "intake-review-governance": {
+      "version": "0.1.1",
+      "source": "local",
+      "manifest_hash": "sha256:b85a75202be58d1f17b0450124beb5a1f941dfab6828e436ed0e382c8fcb7cd2",
+      "enabled": true,
+      "priority": 65,
+      "registered_commands": {
+        "agy": [
+          "speckit.intake-review",
+          "speckit.intake-repair",
+          "speckit.intake-review-status"
+        ],
+        "claude": [
+          "speckit.intake-review",
+          "speckit.intake-repair",
+          "speckit.intake-review-status"
+        ],
+        "codex": [
+          "speckit.intake-review",
+          "speckit.intake-repair",
+          "speckit.intake-review-status"
+        ],
+        "copilot": [
+          "speckit.intake-review",
+          "speckit.intake-repair",
+          "speckit.intake-review-status"
+        ],
+        "opencode": [
+          "speckit.intake-review",
+          "speckit.intake-repair",
+          "speckit.intake-review-status"
+        ],
+        "zed": [
+          "speckit.intake-review",
+          "speckit.intake-repair",
+          "speckit.intake-review-status"
+        ]
+      },
+      "registered_skills": [
+        "speckit-intake-review",
+        "speckit-intake-repair",
+        "speckit-intake-review-status"
+      ],
+      "installed_at": "2026-07-23T17:44:34.310112+00:00"
     }
   }
 }

.specify/presets/intake-review-governance/README.md

@@ -1,8 +1,11 @@
 # Intake Review Governance Preset
 
 Optional, stackable intake-quality governance for GitHub Spec Kit. Version
-`0.1.0` adds three commands, eight templates, and read-only Bash/PowerShell
-validators. Recommended priority: `65`, between Agent Parity (`60`) and
+`0.1.1` provides three commands, eight templates, and read-only
+Bash/PowerShell validators. Series reviews use a schema-1.1 request binding
+with normalized SHA-256, explicit roots, complete target ordering, and
+validated acyclic dependency edges. Single and Campaign schema 1.0 results
+remain compatible. Recommended priority: `65`, between Agent Parity (`60`) and
 Autonomous Run Governance (`70`). Spec Kit `>=0.8.3` is required.
 
 ## Commands
@@ -16,7 +19,7 @@ Autonomous Run Governance (`70`). Spec Kit `>=0.8.3` is required.
 ## Install
 
 ```bash
-specify preset add --from https://github.com/hindermath/spec-kit-preset-intake-review-governance/archive/refs/tags/v0.1.0.zip --priority 65
+specify preset add --from https://github.com/hindermath/spec-kit-preset-intake-review-governance/archive/refs/tags/v0.1.1.zip --priority 65
 specify preset list
 specify preset resolve
 ```
@@ -30,3 +33,8 @@ activate it through their schema-1.2 `intakeReview` object.
 Review and status never modify intake targets. Repair needs explicit mutation
 authority. An agent cannot accept residual risk or invent an operator
 exception. The validators are read-only and grant no delivery authority.
+
+An accepted Series result must use schema 1.1 and bind its repository-relative
+request through `requestEvidence`. The validators reject request drift,
+identity or role mismatch, incomplete ordering, unknown or duplicate edges,
+cycles, and roots that differ from the graph's zero-indegree targets.

.specify/presets/intake-review-governance/commands/speckit.intake-review-status.md

@@ -15,6 +15,7 @@ invoke the installed validator with the repository root, and report:
 - target paths, normalized hashes, optional Git blobs, and drift;
 - findings, questions, accepted-risk ownership, and re-evaluation triggers;
 - series and campaign coverage, including unique intake and worker counts;
+- for Series mode, request hash, root set, target order, edge count, and DAG validity;
 - whether Preset 7 or Preset 8 may consume the result under current policy;
 - the exact next command.
 

.specify/presets/intake-review-governance/commands/speckit.intake-review.md

@@ -20,7 +20,9 @@ exist. Use the installed policy and checklist.
    evidence, delivery authority, risks, references, prompt alignment, and
    secret or unnecessary-personal-data exposure.
 3. For a series, additionally review IDs, DAG, gaps, overlap, terminology,
-   invariants, handoffs, future scope, and authority.
+   invariants, handoffs, future scope, and authority. Use schema 1.1, declare
+   every root, order every target exactly once, and bind the request path and
+   normalized hash in the result.
 4. For a campaign, prove every `featureInput`, one semantic review per unique
    intake, every worker applicability row, repository/language/stack fit,
    manifest DAG/base/handoff agreement, and separately governed operator

.specify/presets/intake-review-governance/docs/README.md

@@ -4,3 +4,7 @@ The preset README provides installation and command examples. The installed
 runbook template defines modes, outcomes, hash normalization, repair limits,
 risk ownership, and Preset 7/8 consumer gates. The checklist is the normative
 review-dimension inventory.
+
+Version 0.1.1 adds the binding Series graph contract: schema-1.1 request
+evidence, explicit roots, exact target ordering, edge integrity, and cycle
+detection with Bash/PowerShell parity.

.specify/presets/intake-review-governance/docs/field-validation-summary.md

@@ -1,6 +1,6 @@
-# Field Validation Summary: v0.1.0
+# Field Validation Summary: v0.1.1
 
-Date: 2026-07-21
+Date: 2026-07-23
 
 ## Synthetic validation
 
@@ -11,6 +11,34 @@ Date: 2026-07-21
 - Missing worker coverage, result drift, expired exceptions, Critical/High
   findings, and unanswered material questions are blocking cases.
 
+## Series request graph
+
+A three-target schema-1.1 fixture binds its repository-relative request with
+the same strict UTF-8 normalization used for intake targets. Bash and
+PowerShell accepted one root and two ordered predecessor edges with identical
+exit behavior. The fixture suite rejects missing request evidence, request
+hash drift, identity or role mismatch, target-set drift, duplicate or missing
+order entries, unknown and self edges, duplicate edges, order contradictions,
+cycles, and root sets that differ from the graph's zero-indegree targets.
+
+The field observation from `SecureServiceHarvester-CSharp` contained 66
+targets and 64 predecessor edges. An independent graph audit found an
+intermediate request error that v0.1.0 could not reject. Version 0.1.1 makes
+that class of accepted Series evidence impossible without a current,
+structurally valid request binding.
+
+## Package composition and agent parity
+
+A temporary Spec Kit 0.12.11 project accepted all ten presets at priorities
+10 through 80. `add`, `list`, `info`, `resolve`, `disable`, `enable`, `remove`,
+and reinstall completed successfully with Intake Review v0.1.1 at priority 65.
+
+Separate temporary Codex, Claude, Copilot Skills, and Antigravity projects each
+contained exactly one generated surface for `speckit.intake-review`,
+`speckit.intake-review-status`, and `speckit.intake-repair`. Codex and
+Antigravity were intentionally validated in separate projects because both
+integrations own the `.agents/skills` layout.
+
 ## TuiVision intake
 
 `Lastenheft_15_Post-Wave6-Example-Portfolio-Conformance-Audit.md` was reviewed
@@ -42,6 +70,7 @@ row failed before worker scheduling.
 ## Disposition
 
 The tested behavior is provider-neutral and supports publication as
-`intake-review-governance` v0.1.0, `autonomous-run-governance` v0.3.2, and
+`intake-review-governance` v0.1.1, `autonomous-run-governance` v0.3.2, and
 `parallel-autonomous-run-governance` v0.2.3. The standard eight-preset profile
-remains unchanged; the nine-preset profile is explicit and optional.
+remains unchanged; the optional authoring-and-review profile contains ten
+presets.

.specify/presets/intake-review-governance/docs/man/validate-intake-review-result.1

@@ -1,4 +1,4 @@
-.TH VALIDATE-INTAKE-REVIEW-RESULT 1 "July 2026" "intake-review-governance 0.1.0"
+.TH VALIDATE-INTAKE-REVIEW-RESULT 1 "July 2026" "intake-review-governance 0.1.1"
 .SH NAME
 validate-intake-review-result \- validate a current intake review result
 .SH SYNOPSIS
@@ -7,5 +7,10 @@ validate-intake-review-result \- validate a current intake review result
 Validates schema, outcome, coverage, risk ownership, and normalized SHA-256
 hashes without modifying the repository. Text normalization removes one UTF-8
 BOM and converts CRLF or CR to LF; it performs no trimming.
+.PP
+Series schema 1.1 results bind their request through requestEvidence. The
+validator checks request identity, target and role parity, exact ordering,
+roots, edge references, duplicate edges, order consistency, and acyclicity.
+Single and Campaign schema 1.0 results remain supported.
 .SH EXIT STATUS
 Returns 0 for a valid current result and 2 for invalid input or drift.

.specify/presets/intake-review-governance/preset.yml

@@ -3,7 +3,7 @@ schema_version: "1.0"
 preset:
   id: "intake-review-governance"
   name: "Intake Review Governance"
-  version: "0.1.0"
+  version: "0.1.1"
   description: "Reviews single, series, and campaign intake files before Spec Kit execution and binds accepted outcomes to normalized content hashes."
   author: "Thorsten Hindermann"
   repository: "https://github.com/hindermath/spec-kit-preset-intake-review-governance"