Pinned shape copies: AGENTS-shape.md's CONTRACTS_DIR sentence is false for every scaffolded root, and the chain WARNING offers remedies the scaffold lacks (one shape bump before the v1.1.0 tag) #610

Shape-copy text, in one shape bump: the CONTRACTS_DIR sentence, the chain WARNING's remedies and raw --pin-source, validate-pins' note, and THE LOCKSTEP RULE's bump line.

From the checklist triage of 2026-10-15; Brett Heap approved its recommendations at 2026-10-15T16:49:38Z. One pull request covers the lines below.

Lands after: #570, #575 and #576.

Decision applied: the triage's D6: one shape bump before the v1.1.0 tag, so every project re-pins once for v1.1.0.

Lines

• L2-33: pinned AGENTS-shape.md says the root Makefile exports $(CURDIR)/spec/contracts; untrue for every scaffolded root. Where: templates/assembly-root/AGENTS-shape.md:78-81; scripts/shape_materialize.py:982-994 (ADOPT_MAKEFILE_BLOCK); adopt-project.py:8269. Effort S; all. On main 26c1600: Measured at 26c1600: a scaffolded root's Makefile has no CONTRACTS_DIR, and make contracts-dir says No rule to make target 'contracts-dir', while its AGENTS-shape.md:80 says the root Makefile exports it; only adopt appends the block; bootstrap.py: a leg detached off the pin is left where it is and said, so a commit made there is no longer stranded when its branch is already at the pin, the not moving an existing branch line names where the checkout is, and bump-leg.py and AGENTS-shape.md say "or says why not" (#533) #556 has landed (64fc9a8), so the item's "after bootstrap.py: a leg detached off the pin is left where it is and said, so a commit made there is no longer stranded when its branch is already at the pin, the not moving an existing branch line names where the checkout is, and bump-leg.py and AGENTS-shape.md say "or says why not" (#533) #556" order is met, no open PR touches this file, and the adopt half rides with adopt-project.py: the Makefile block execute appends and the cross-leg follow-up name each leg where the plan mounts it, so --spec-path legs/spec exports a CONTRACTS_DIR that exists and a nested --code-path gets the right ../ path (#522) #572 (adopt-project.py: a non-default --spec-path or --code-path is ignored by the adopted Makefile's CONTRACTS_DIR and by the cross-leg follow-up path #522). (source)
• 576/2: the scaffold's declared-unverified WARNING offers a sibling checkout and --link-source, neither of which the scaffold has. Where: scripts/repo_shape.py _chain_link_findings (:1455-1463); scaffold-project.py :854. Effort S; all. On main 26c1600: Main's test_scaffold_keeps_its_old_warning_for_a_pin_source_with_no_manifest passes, and it pins the scaffold printing "(a sibling checkout, SHAPE_PIN_SOURCE_OPENXDOX, or --link-source openXdox= ...)"; scaffold-project.py --help has no --link-source, :854 passes root=None, and validate-repository-naming.py, repo_shape.py, validate-pins.py: a bare --link-source is the first chain link's tree alone, and a source that names no path is refused (#441, #442) #576's head keeps the text. (source)

Rides along (backlog; tick it here if the same change covers it)

• L2-30: the scaffold's declared-unverified WARNING prints --pin-source raw, so an ESC in the path reaches stderr. Where: scripts/repo_shape.py link_declarations (:2670-2710, for example :2703); scaffold-project.py:877. Effort S; all. On main 26c1600: Measured at 26c1600: --pin-source at x\x1b[31mRED, whose project.yaml holds neutral_product_pins: 5, gave rc 0 and a raw \x1b[31m in the WARNING on stderr; neither scaffold-project.py and adopt-project.py: a pin records digest_source: local-clone and never the --pin-source path, so no committed pin file holds a local directory, and a --pin-source nothing reads is pin-source-unused (#540) #570 nor validate-repository-naming.py, repo_shape.py, validate-pins.py: a bare --link-source is the first chain link's tree alone, and a source that names no path is refused (#441, #442) #576 changes link_declarations, and repo_shape.py is a shape copy (scripts/shape_materialize.py:1896), so the fix moves a digest. (source)
• L2-31: the root's validate-pins.py prints an unused --pin-source as typed; an ESC reaches the terminal. Where: templates/assembly-root/scripts/validate-pins.py:1074 (main), :1224 (validate-pins.py and validate-family.py: THE LOCKSTEP RULE closes the count only where a leg or member is out of step, a lone digest or workflow-reference mismatch names its bump-leg.py line, and holder remedies branch first (#539) #575 0680799), :1090 (validate-repository-naming.py, repo_shape.py, validate-pins.py: a bare --link-source is the first chain link's tree alone, and a source that names no path is refused (#441, #442) #576 c8b1c45). Effort S; all. On main 26c1600: Measured at 26c1600 on a freshly scaffolded root: validate-pins.py --pin-source <dir named x\x1b[31mRED> printed note --pin-source …x\x1b[31mRED: not used raw; validate-pins.py and validate-family.py: THE LOCKSTEP RULE closes the count only where a leg or member is out of step, a lone digest or workflow-reference mismatch names its bump-leg.py line, and holder remedies branch first (#539) #575 and validate-repository-naming.py, repo_shape.py, validate-pins.py: a bare --link-source is the first chain link's tree alone, and a source that names no path is refused (#441, #442) #576 both edit this pinned file and leave the line as it is. (source)
• L2-39: THE LOCKSTEP RULE names family.py bump --member <Project> --to <commit> with no --family-root or branch step. Where: templates/family-root/scripts/validate-family.py:100-105 (main and validate-pins.py and validate-family.py: THE LOCKSTEP RULE closes the count only where a leg or member is out of step, a lone digest or workflow-reference mismatch names its bump-leg.py line, and holder remedies branch first (#539) #575 0680799). Effort S; all. On main 26c1600: The sentence is unchanged at validate-pins.py and validate-family.py: THE LOCKSTEP RULE closes the count only where a leg or member is out of step, a lone digest or workflow-reference mismatch names its bump-leg.py line, and holder remedies branch first (#539) #575's head; bump's --family-root is required=True (scripts/family.py:4949); and validate-pins.py and validate-family.py: THE LOCKSTEP RULE closes the count only where a leg or member is out of step, a lone digest or workflow-reference mismatch names its bump-leg.py line, and holder remedies branch first (#539) #575's _switch_line (:124-140 at 0680799) gives add and remove the branch step but not this sentence. (source)

Each line above is marked → this issue on its tracking issue. Tick it there too when this closes.