Bots — the catalog domain

A bot shipped in bots/ is a general-purpose tool. Start from bot-authoring.md (the four rules), then the leaf the touch names:

Leaf	Read it when
rgaa-audit-run.md	Running the RGAA audit demo yourself (one command, real LLM spend) — and what a sandboxed cloud run does not get.
skills.md	Editing a bundle's skills/; a skill several bundles carry is declared in internal/skillshare, not duplicated.
run-link.md	A bot posts anything on a forge — a body, a review, a comment, a reply.
convergence.md	Writing a loop, campaign or reviewer bot.
untrusted-input.md	A prompt carrying untrusted text in an acting node.
shipped-workflow-corpus.md	A guard, a gate or a count over "every workflow this repository ships".
input-reaches-the-model.md	Adding, dropping or re-referencing a field on an LLM node's input.
input-drop-traps.md	A dead input field was dropped; two shapes of text still name it.
universality.md	The repo- and stack-agnostic universality rules (vars, prompts, scanners).
taxonomy.md	The six-verb navigation spine: category: and tags:.
engine-bot-agnostic.md	Engine code about to name a bot.
toolchain-devbox.md	A bot needs a binary the sandbox lacks.

Vetty commit evidence and revision-owned auto-merge: dep-update-guard.