Jeffy Loop 1.4.0
The documented-parameter contract, proven by a convergence
The sweep contract gains its third rule, and this release ships the first machine-checked convergence earned under all three.
Every documented parameter must move. A sweep of value-computing surface now exercises every documented parameter at two or more values that must change the output, boundary and negative sides included. A documented parameter whose value changes nothing is a finding, never a pass. The rule closes a class observed four times in one library - an inert flag, a rate applied only when positive, an aggregation token falling through to no-op, a caller-name skip list silently voiding an argument - the same defect wearing four names, every one invisible to a probe that only checks where the parameter works.
The proof is a converged run. ranaroussi/quantstats (7,489 stars), green at 125 tests at upstream HEAD, converged after four budgeted runs and 40 iterations: 29 findings filed and closed, suite at 393 passing, the library smaller than it started, every fix red-green proven, and the convergence countersigned by an adversarial evaluator that reverted the source and counted 65 of the run's tests fail. The first fresh audit under this release's rule immediately found what five previous audits could not: a risk-free rate silently voided for cagr by a caller-name skip list, and an index builder whose .resample existed only in its docstring.
The receipt states the boundary as plainly as the wins. A parallel manual audit of the same commit found six convention defects - internally consistent numbers wrong in context - that the loop did not find and that remain at the converged tree, named in the receipt. A known-answer probe verifies a formula; it cannot adjudicate which formula the context demands. Convergence is a claim about a contract, and the receipt says exactly which one.
The quantstats receipt carries the full four-run record, the two-way comparison, and the independent re-verification from pristine upstream.
Upgrading
git pull
./install.sh # Windows PowerShell: .\install.ps1
The installer copies the skill into ~/.claude/, which is what actually runs; pulling alone does not update it.