Read a Handoff Round by Its Whole Shape, Confirm a Default Pick, and Write a Final Round Before close - #4034

…tall on Release, Cleanup and Handoff Fixes (#4039)

## Summary

Promotes burndown round 1 of the attended run of 2026-11-10 from
`develop` to `main`.

- #4035: the prose gate builds its HTML span without slicing
markdown-it-py's pattern, and the gate, `backlog_metrics.py`, and the
test requirements pin `markdown-it-py` exactly. That ends the import
crash 4.3.0 caused on every pull request.
- #4032: the agent-safety installer probes each hook launcher before
choosing one and installs nothing when none runs. The write guard reads
every short-option cluster through one table-driven helper. Merged on
the maintainer's go-ahead after reading the diff.
- #4029: `merge-and-release` installs the updated host-safety kit in its
release step, guarded against rolling a kit back. Where a promotion is
already merged under a release scope, it reads the publisher's runs
before asking.
- #4030: `pr_cleanup.py` names every git-ignored entry a worktree
removal deletes before it removes the tree.
- #4034: a handoff comment that only quotes a round mark is no longer
read as an archived round. `blocked` stays on while a new decision
waits, a default handoff pick is confirmed, and a track's final round is
written before `close`.

## Closes

Fixes #4033
Fixes #3935
Fixes #1172
Fixes #3783
Fixes #3897
Fixes #4019
Fixes #4009
Fixes #4013
Fixes #3679
Fixes #4018
Fixes #3914
Fixes #3841
Fixes #4017
Fixes #4010
Fixes #3791
Fixes #3795

🤖 Generated with [Claude Code](https://claude.com/claude-code)

… and backlog-burndown (#4166)

Closes review gaps in four fleet skills, and gives the carried-table
bound its reason in `GOVERNANCE.md` and the Copilot instructions.

## Changes

- **`repo-worktree` "Preparing Git Hooks" (#3620 item 5).** The
pre-commit check is now one complete command: `test -x` and a `grep` for
the framework's own header, on the shared hook path. A non-framework
executable there no longer counts as the gate. It falls to the unchanged
next bullet: "A missing or wrong shared hook is reported to the
maintainer, not repaired from the worktree."
- **`drive-pr` (#3697).** A feature PR a peer merged mid-drive still
owes an outcome for each open finding. That covers unresolved threads
and every finding step 4 names, whether or not `merge` would refuse on
it, since `merge` never runs there. Step 3's `state=MERGED` path and
step 4's `next=cleanup` route both give those outcomes before `cleanup`
runs. A fix lands as a fresh feature -> develop pass.
- **`GOVERNANCE.md` "PR Review Etiquette", `pr-review-conduct` Merge
Gate item 2, and `.github/copilot-instructions.md` (#3620 item 3).**
Each gets two sentences on why the carried-table bound is the file set
rather than file recency, per the maintainer's answer on #3746.
- **`backlog-burndown` "The Promotion Boundary" step 5 (#3620 item 4).**
The displaced pull request waits until the next round dispatches, and
that round dispatches its fresh worker. That matches step 6 in an
attended run, and the away-mode promotion path, which has no freeze.
- Generated copies under `.github/skills/` and
`.claude-plugin/fleet-skills/` were regenerated with
`scripts/build_dist.py`.

## Item Dispositions

- **#3620 item 1** (`session-handoff` resume filter): already fixed. It
was consolidated into #4013 item 1 and landed in #4034. A comment now
counts as a round only by its whole archived shape.
- **#3620 item 2** (`unattended-handoff` picker): stale. That skill was
retired in #3735 and no longer exists.
- **#3620 item 3**: declined, as the maintainer decided on #3746. The
reason sentences it asked for are added above.
- **#3620 item 4**: it still stood on develop, since step 5's "then
dispatches" read as a dispatch during the freeze. Fixed above.
- **#3620 item 5**: it still stood on develop, since `test -x` accepted
any executable. Fixed above.
- **#3766**: already resolved on develop. `repo-worktree` "The Base
Branch" names "Creating a Worktree"'s return of the base clone to its
own working branch as the second exception. It applies where a
continuation finds the task branch checked out there. That landed in
#1685, so no edit was needed.
- **#3869**: parked behind decision #4167 and left out of this pull
request's closing line. A draft of #3869's own proposal was taken back
out of this branch. In it, the agent installs the hook in the base clone
on the maintainer's yes. Each local review round found a new cost in
that draft: chaining a foreign hook, a Husky.Net setting breaking other
worktrees, a hook failing on branches without the config, and a
dispatched worker either stalling its round or never reaching the
maintainer. The decision issue lays out the options.

## Verification

- `scripts/build_dist.py --check` reports the generated distributions
current. `spec/validate.py` passes.
- The prose gate and `repo_gate.py --check eol` are clean on every
commit.
- The hook check was run against a constructed repository. With no hook
it exits 1, with a foreign executable 1, and with a framework-header
hook 0. The header line was read from the pre-commit framework's own
hook template on this host.

Closes on promotion: #3620, #3697, #3766

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>