v0.13.0 — install fix + verifier independence + gate depth (~43% MET)

v0.13.0 — install fix, verifier independence, gate depth, ADRs (~36% → ~43% strict)

Executed a full independent worklist of the cheapest, cleanest convertible standards items — each a real graded gap, each verified without gaming.

Fixed (correctness)

• Install completeness (critical): the README "Universal" install symlinked only 1 of 5 skills, so a by-the-book install could never reach DONE (the verify-gate needs mnm-verify). Now links all five.
• Verifier independence: mnm-verify's disallowed-tools was missing Task/Skill/NotebookEdit — the certifier could delegate around its own restriction. Fixed (IEEE 1012 technical independence).

Added

• Go/Cargo supply-chain gates (govulncheck / cargo audit) — Node/Python had them, Go/Cargo didn't (ISO 25010 §1.1/8.2).
• Declared task-criticality tier (T/L/M/H/C) on the terminal row, distinct from a gate's oracle_tier, so tier-vs-verification is auditable from the log (IEEE 1012 / spec B.4).
• docs/adr/ — 4 retroactive Architecture Decision Records (signed manifest, author≠verifier, poison scoping, six terminal states) (SWEBOK KA2).
• CHANGELOG.md (Keep-a-Changelog), CODE_OF_CONDUCT.md, PR template, docs/TEST-DESIGN.md, SECURITY threat-model, live README CI/release badges.

Changed (honesty)

• Corrected .claude-plugin/plugin.json version (0.5.0→0.12.0), the gates/INCENTIVES.md "not-yet-wired" staleness, and the gate-stack.md mutation overclaim (doc said differential+60/80% floor; shipped is whole-file flat 0.5). Doc-currency now points to CHANGELOG so it stops drifting.

Deliberately NOT done (with reason)

• Wiring check_manifest into run_gates: declined — it would break the dev loop (every script edit invalidates the signature) and contradicts the design (the signed manifest is the out-of-band root, already hard-enforced by CI). An in-band manifest check is both bypassable and dev-hostile.

Honest measurement

Independently re-measured 23.3% → 31.8% → 35.7% → ~43% strict MET (nearly 2× the baseline). Every cheap+light+achievable-medium item is now done. 80% remains a multi-week campaign (~55 more conversions, mostly genuine features), with a ~90% structural cap (~10-14 items need a second accountable party — IEEE 1012 independence, third-party audit, production telemetry). Reported as measured, never gamed.

Verification

• Unit suite + 18 eval scenarios green; both CI workflows green on HEAD; manifest re-signed each script change.