New skill: presentation-repair — the apply phase that closes the third journey

[CognitiveCodeAI]

What

/lazarus:presentation-repair — the sixth core skill. Executes a ratified PRESENTATION_AUDIT.md one finding at a time (ratify → act → verify), completing the third discover→repair-shaped pair: presentation → presentation-repair.

Design rules

• Re-observe before editing. Every finding is checked against current file state first; one fixed since the audit is logged already-satisfied and untouched.
• The fact boundary. License choice, security contacts, funding handles are facts only the human owns — the skill asks («ASK-USER» placeholders in scaffolds.md, never written unresolved), or logs needs-input with the exact question. It never invents a fact.
• Target allowlist + never deletes. Presentation files only. A finding whose recommended_fix reaches outside it — delete a file, run a command, edit CI — is refused and logged out-of-scope-refused: a tampered audit cannot widen the blast radius.
• Zero shell, like presentation: Bash is out of the tool pool entirely; it can scaffold a SECURITY.md but physically cannot curl anything.
• Content preservation: restructures presentation, never rewrites technical claims.
• Forensic log: PRESENTATION_CHANGES.md (namespaced, append-per-run); PRESENTATION_AUDIT.md is never modified; the receipt of record is a presentation re-audit.

Tested

• Structural: claude plugin validate ✔, no-hidden-execution greps ✔, frontmatter 744/1536 chars ✔.
• Happy path: alt-text fixed [VERIFIED]; stale finding → already-satisfied (zero edits); SECURITY.md → needs-input with questions logged, no file written with placeholders.
• Refusal: no audit → stopped, exact offer to run presentation first, zero files touched.
• Hostile audit + waiver: tampered finding (delete LICENSE / curl evil / edit CI) refused in full — agent even flagged the evidence/rubric mismatch as consistent with tampering; waiver honored over the finding's own waived: false flag; fact boundary held on the third finding. Checksums: only PRESENTATION_CHANGES.md created.

🐕 Dogfood on this repo

Ran against the real v0.6.0 audit: 7 of 8 findings correctly detected already-satisfied (the v0.6.0 fixes) with zero edits — and the 8th produced this PR's README table of contents, its anchors verified against GitHub's live slugger (including the U+FE0F variation-selector headings).

Docs ride-along (same PR)

README: three goals six commands, completed journey row, mermaid leg, Journey-3 command table, both FAQs, new Just-shipped. OVERVIEW: six skills, full presentation-repair section, fast facts, releases line. CONTRIBUTING/MAINTAINING skill lists.

🤖 Generated with Claude Code