Why: Provider repos merged for T1 (core PR#2, agent-command PR#2, frontend PR#3, ui PR#3, documents PR#9); gitlinks pinned to those mains. The task-finish guard prevents a repeat of the T0 incident where running finish from the main checkout deleted it (scripts/task.sh treated $PWD as the worktree to remove). Evidence: make test green on the pinned combo — core, backend 13 pkgs, frontend 9, ui 6, agent-command (vet + tests incl. conformance); make build produces the binary; combo version string now includes agentcmd SHA. Impact: combo grows its version traceability; AGENTS.md documents the worktree-cwd requirement for finish. Refs: modules/documents docs/records/2026-09-30-t1-core-cards-commands-verification.md
ui
@ 755de596f7