toothpaste-kit 0.5.0

A MINOR release under docs/releasing.md. The licence moves to Apache 2.0, with REUSE
compliance and a Developer Certificate of Origin sign-off; the ACMM L2, L3 and L4 files arrive;
scripts/gates.sh goes from ten gates to fourteen; and branch and tag names get one rule. No
skill is added and no skill revision is BREAKING.

Added

• docs/document-layers.md, exception 5: a filed reflection entry may be
  reformatted where no word changes (line wrapping or whitespace, or markup
  a new gate requires), and a markup change MUST NOT change what a line
  means; a change to any word needs a superseding entry. The maintainer's
  decision of 2026-10-20, made for ACMM compatibility.
• docs/risk-tiers.md, "Per-tool instruction files": every per-tool
  instruction file (CLAUDE.md, .cursor/rules/agents.mdc,
  .github/copilot-instructions.md) points at AGENTS.md and adds no rule.
  The maintainer's decision of 2026-10-20, made for ACMM compatibility.
• ACMM L3 measurement (pull request #44): docs/metrics.md, the pull request
  acceptance metric; docs/review-rubric.md, the review rubric;
  .github/workflows/ci.yml, the test matrix on Linux and macOS;
  docs/quality.md, the quality dashboard; .claude/session-summary.md, the
  session summary artifact. scripts/reorient now parses under bash 3.2.
• docs/acmm.md: an index of the ACMM levels, naming the file that meets
  each criterion and the pull request that added it.
• REUSE compliance: every file declares its copyright and licence, by an
  SPDX header or, for files that cannot hold one, in REUSE.toml; the
  licence text is also in LICENSES/Apache-2.0.txt. scripts/compliance.sh
  runs reuse lint with a planted-file selftest, and
  .github/workflows/compliance.yml runs it in CI with a pinned reuse.
  scripts/gates.sh still needs nothing installed.
• Branch and tag names: scripts/check-branch-name is the one definition of
  an allowed name, <prefix>/<words> from a fixed prefix list, 40 characters
  at most, and v<major>.<minor>.<patch> for tags. .githooks/pre-push runs
  it before a push, gate 13 selftests it and checks the ruleset's prefix list
  against it, the branch-name job in gates.yml checks a pull request's
  branch, and .github/rulesets/ holds the forge rulesets for the
  maintainer to apply. hooks/hookify.branch-name-guard.local.md is the
  example agent rule: push only to an explicit destination, never skip the
  hooks; its cases are in tests/branch-guard-cases.tsv, run by the hooks
  gate. CONTRIBUTING.md, "Branch and tag names".
• orchestration/rounds.md: the rounds protocol, by which work is checked by
  a seat other than its author before it reaches the maintainer, with report
  and finding numbering and the major, minor and nit severity scale (pull
  request #53).
• scripts/check-hooks.py, gate 12: each rule in hooks/ parses, and each
  blocking rule fires on its planted cases (pull request #51).
• scripts/auto-qa-tuner.py, run weekly by .github/workflows/auto-qa.yml:
  proposes a timeout for each job in .github/auto-qa-tuning.json from its
  last 100 runs, in the job summary, and never edits a workflow (pull
  request #52).
• .github/workflows/ai-fix.yml: an issue labelled ai-fix gets one fixed
  comment routing it to the maintainers. No agent runs in CI and no stored
  secret is used (pull request #48).
• ACMM L4 part a (pull request #45): SECURITY-AI.md, the AI security policy;
  docs/risk-tiers.md, change classification; .github/labeler.yml and its
  workflow, labelling pull requests by path; .github/workflows/nightly.yml,
  the gates selftest every night; and docs/reflections/, filed
  cross-session lessons.
• ACMM L2 (pull request #37): CLAUDE.md, .github/copilot-instructions.md
  and .cursor/rules/agents.mdc point at AGENTS.md;
  docs/prompts/README.md catalogs the skills; docs/corrections.md and an
  empty corrections.jsonl give the Correction Protocol's records a format.
• Contributor files (pull request #30): AGENTS.md, a pull request template,
  .editorconfig, and tests/run with tests/README.md as the test entry
  point. scripts/link-skills.sh --selftest, gate 11.
• docs/glossary.md, each term of art with the file that defines it (pull
  request #29), and docs/concepts.md, a concepts index (pull request #43).

Changed

• .githooks/commit-msg also refuses Assisted-by: and Agent-<name>:
  trailers, and the commit-attribution workflow now runs that hook on each
  commit instead of a copy of its pattern, so the two cannot drift. Gate 14
  runs the hook against tests/attribution-cases.tsv.
• scripts/gates.sh stops with one message when python3 is missing,
  instead of failing gate by gate.
• docs/quickstart.md step 1 says where to install Claude Code and that it
  needs an account.
• Licence: Apache License 2.0 from this release. LICENSE is the
  unmodified official text, and CITATION.cff, README.md, GOVERNANCE.md,
  references.md, docs/security-posture.md and docs/project-state.md name
  it. Releases 0.1.0 to 0.4.0 were published under MIT and stay under it: their
  tags and assets are not rewritten, and what MIT granted for them is not
  revoked. The copyright holder is named in CITATION.cff and README.md, and
  no NOTICE file is added.
• Contributions need a Developer Certificate of Origin sign-off.
  CONTRIBUTING.md gains a licence and sign-off section (inbound licence, the
  DCO, git commit -s, how to add a missing sign-off, and the pause when
  someone else may own the work), GOVERNANCE.md states the pause, and
  .github/workflows/dco.yml fails a pull request containing a commit with no
  sign-off for its author. No contributor licence agreement is asked.
• Four skills (working-preferences, document-standards, technical-documents,
  surface-regimes) each gain one line pointing to skill-creation for making a skill and
  skill-discovery for deciding whether a need justifies one, or locating one.
• docs/security-posture.md rows 3.7 and 4.4 state the rule for every
  workflow instead of a count, which had gone stale twice.
• daily-review step 5: the Most Important Task is the person's first task
  in Next, in the order the review proposes, the rule the lane board marks.
• scripts/reorient names what it skips: a path that is not a repository
  gets a line, MAIL says none when nothing is new, and TASK says
  not checked when ps is missing (pull requests #30 and #36).
• session-log's description names what the capture records, the decisions,
  corrections, open questions and findings, where it said it writes the
  reasoning; orient and session-close describe it the same way (pull
  request #22).

Skill revisions

• daily-review v3 to v4.
• document-standards v4 to v5.
• orient v2 to v3.
• session-close v5 to v6.
• session-log v2 to v3.
• surface-regimes v3 to v4.
• technical-documents v2 to v3.
• working-preferences v5 to v6.