feat: autoresearch optimisation of all 48 commands

[tractorjuice]

Summary

Rebased onto main (v4.6.12) on 2026-04-19. Ships as v4.7.0 to reflect the scope of the compliance uplift.

Content uplift (48 commands)

Deep autoresearch runs (iterative scoring, 2–16 iterations each):

Command	Score	Key Improvement
risk	8.0 → 9.6	Orange Book 2023 alignment — replaced retired 4Ts with six treatment options (Avoid/Take/Retain/Change Likelihood/Change Consequences/Share), Three Lines Model, tightened score boundaries
glossary	7.6 → 9.2	Project-contextualised definitions, Terminology Consistency Notes
sobc	8.0 → 9.4	Green Book 2026 alignment (Theory of Change, AST, VFM)
secure	8.0 → 9.6	CAF Maturity Summary, Security Remediation Roadmap, Principles-to-CAF Matrix
requirements	8.0 → 9.2	MoSCoW, NFR sub-prefixes (NFR-P/SEC/ACC/REL), Requirements Coverage Matrix
stakeholders	8.4 → 9.0	Impact Assessment, Change Readiness, Engagement Priority
service-assessment	8.0 → 8.8	Readiness Score, Evidence-to-Standard Traceability
tcop	8.0 → 9.0	Compliance Score, Principles-to-TCoP Traceability
dpia	8.0 → 9.0	DPIA Risk Score, Data Processing → Risk Traceability
ai-playbook	8.0 → 9.0	Remediation Roadmap, AI Ethics Score Projection
analyze	7.6 → 9.0	Orange Book fix, Weighted Health Score, Cross-Artifact Consistency
backlog	8.0 → 9.0	INVEST Story Quality Score, Definition of Ready

Standard pattern (36 commands) — Quality score + traceability matrix applied to the remaining 36 artifact-generating commands.

Consistency fixes

• NFR-S-xxx → NFR-SEC-xxx for security contexts in 6 commands
• Added missing score instructions to 4 commands
• Added missing traceability to 2 commands
• Result: 48/48 commands have quality-checklist reference, quantitative score, AND traceability matrix

Rebase resolution (2026-04-19)

Branch was 27 commits behind main. Resolution summary:

• requirements.md, sobc.md — auto-merged: PR body + feat(commands): Phase 3 item 1 — keep-coding-instructions on 5 long-running commands (#215) #301's keep-coding-instructions: true frontmatter both preserved
• VERSION, plugin.json — accept HEAD (4.6.12 → bumped to 4.7.0)
• doc-types.mjs — auto-merged union (GLOS + MMOD codes)
• 4 extension trees (codex/opencode/gemini/copilot/paperclip) — regenerated via python scripts/converter.py (408 files) rather than manually merged

Test plan

• python scripts/converter.py → 408 files across 6 formats
• Orange Book 2023 six-options present in risk command across all 6 output formats
• NFR-SEC-xxx (not NFR-S-xxx) used for security
• keep-coding-instructions preserved on plugin requirements/sobc, stripped from non-Claude formats
• npx markdownlint-cli2 on tracked files: 0 errors
• All 7 version files + plugin.json + gemini-extension.json at 4.7.0
• CI lint green on rebased head
• Spot-check /arckit:requirements, /arckit:risk, /arckit:sobc, /arckit:secure in a test repo before merge
• After merge: tag v4.7.0, run ./scripts/push-extensions.sh, release workflow auto-creates GitHub Release