2.0.0-rc.14: Lauren's d457567, a skill that brings formal verification back in line with the code

[chhoumann]

t3-pstack moves to Lauren Tan's pstack at cursor/plugins d457567 for all three components. Only pstack changed upstream, and its version moves to 0.15.28:

• pstack #716: a new skill, maintain-formal-verification-skill. It is the upkeep loop for a verify skill that /create-formal-verification-skill generated, or for any project skill that runs a verifier against named code. It reads every commit that touched the covered code since the commit the skill records as last in sync, updates the model, harness, or properties from the code before it reruns, breaks each updated check on purpose to show it can still fail, and reports each check as in sync, updated, bug, or blocked. It replays each counterexample against the real code to tell drift in the verification from a bug in the code, and it never edits product code or weakens a property to make it pass. /create-formal-verification-skill now records the covered files and functions and the sync commit in the verify skill it generates, and points at the new skill in its hand-off. poteto-help gains its row and a mention when covered code changed after the recorded commit, and its recipes gain a pointer.
• pstack #724: guide pages under docs/guide/ and the version bump, outside every synced component. Upstream's README row sits outside them too.

This is Lauren's text, a new skill file of hers included, plus existing substitutions and mechanical version and count lines. No substitution, fork, hook, or code changed.

Commits

1. Sync. bun tools/sync.mjs moves each component's pin from 6b78e9f to d457567, adds maintain-formal-verification-skill/SKILL.md, and updates create-formal-verification-skill/SKILL.md, poteto-help/SKILL.md, and poteto-help/references/recipes.md cleanly. 22 existing rules in tools/substitutions.json match in poteto-help. None matches the new skill, create-formal-verification-skill, or the recipes, and all three are byte-identical to upstream's. The 15 declared forks were left alone. cursor-team-kit and thermos synced with no file changes.
2. Release. VERSION and the manifests move to 2.0.0-rc.14. CHANGES gets the entry with its behavior-delta table. NOTICE, NOTICE-skills, poteto-mode's copy of the notice, and the README point at d457567, the README's pinned installer command names the new tag, and its skill count moves from 63 to 64, which tests/readme-facts.test.mjs pins to the tree.

On T3

The new skill names no Cursor tool, .cursor/ path, model, /visualize, or subagent. It finds the verify skill by what it does, not by a path, so the agent looks under .claude/skills/ or .agents/skills/ for its harness and no rule is needed. The other changed lines name only /create-formal-verification-skill and /maintain-formal-verification-skill. rc.13's poteto-help fixes survive the merge: setup step 1 still says one npx -y github:chhoumann/t3-pstack install run covers every home, and the skill-name line still reads $t3-pstack:poteto-mode on Codex.

The skill keeps Lauren's disable-model-invocation: true, as do 55 others; deriveT3 drops the flag from poteto-mode alone. On Claude Code the user types /t3-pstack:maintain-formal-verification-skill. On Codex it is $t3-pstack:maintain-formal-verification-skill, and Codex ignores the flag. poteto-mode does not route to it, upstream or here.

Checks

• bun tools/sync.mjs <component> d457567 --dry-run for pstack, cursor-team-kit, and thermos, before and after the sync: exit 0, no undeclared fork, no denylist hit, no unmatched substitution. After the sync, pstack reads 120 unchanged files and the same 15 declared forks with 547 changed lines as before. No forked file differs from origin/main.
• bun tools/generate.mjs --check: 17 generated files current, and the hooks freeze check passes.
• GIT_CONFIG_GLOBAL=/dev/null bun test tests/ --timeout 30000: 550 pass, 46 skip, 0 fail.
• Scripts: bun run typecheck, bun test orch watch-pr check-plan.test.ts (119 pass), and the Prettier check all pass. markdownlint is clean on every changed file.
• t3-sheet.mjs against this machine's sheet and catalog: every role line parses and dispatches.
• Install: T3_PSTACK_E2E=1 bun test tests/install-e2e.test.mjs with the real claude 2.1.303 and codex 0.163.0 CLIs passes 12 of 12. A separate tools/install.mjs install --source <this branch> into a throwaway HOME installs 2.0.0-rc.14 on both. claude plugin details t3-pstack@t3-pstack lists 64 skills, maintain-formal-verification-skill among them. Codex's app-server skills/list returns 64 t3-pstack: skills, t3-pstack:maintain-formal-verification-skill enabled. Both installed copies keep disable-model-invocation: true.

---

Note

Low Risk
Release and upstream skill-documentation sync only; no runtime installer logic, hooks, or security-sensitive code paths change.

Overview
Release 2.0.0-rc.14 bumps version manifests and pins upstream cursor/plugins from 6b78e9f to d457567 (pstack, cursor-team-kit, thermos). Skill count in the README goes 63 → 64.

The substantive upstream change is formal verification upkeep (pstack #716). A new maintain-formal-verification-skill defines a workflow for project verify skills after code drift: scan commits since the recorded sync commit, update models/harnesses/properties from the code, rerun checks, deliberately break updated checks to prove they can still fail, and classify each check as in sync, updated, bug, or blocked (verification drift vs real code bug). It only edits verification artifacts, not product code.

/create-formal-verification-skill now requires generated skills to record covered files/functions and a sync commit, advance that commit only after confirmation, and hand off to the maintain skill. poteto-help and its recipes add routing when covered code changed after the sync commit.

No new T3 substitution rules or fork declarations; hooks and sync tooling behavior are unchanged aside from the pin and synced skill text.

^{Reviewed by Cursor Bugbot for commit a0eecdd. Bugbot is set up for automated code reviews on this repo. Configure here.}