Update: adopt SpecSync 5 and Trust 1

[0xLeif]

Summary

• Adopt Trust 1.0.0 and prepare the GitHub plugin for SpecSync extensionless-source coverage without changing product behavior.
• Keep all six existing bin/fledge-github* executables in the active canonical GitHub spec with five stable requirements and no placeholder data.
• Lint and syntax-check every executable and smoke-test every offline --help surface.
• Install Claude, Cursor, Codex, and Gemini integrations and protect the repository's real runtime, spec, workflow, agent, and governance paths.
• Record the rollout files omitted from the earlier lifecycle scope and refresh portable verification and closing approvals.

Local verification

• released SpecSync 5.0.2 (a9422ae): 1/1 spec, 6/6 files, 1,411/1,411 LOC, 100%, zero warnings
• fledge lanes run verify: ShellCheck, Bash syntax, and all-executable offline help
• Claude, Cursor, Codex, and Gemini integrations installed
• fledge trust doctor
• local fledge trust verify: complete gate passed with expected progressive provenance because no remote ledger exists
• all review threads resolved and no merge conflict
• definition, native verification, and closing approvals recorded as user:0xLeif

Hosted verification

• pinned SpecSync contract / Trust
• CodeQL

Blocker

Trust 1.0.0 intentionally bundles immutable SpecSync 5.0.1. That release does not recognize include_extensionless, cannot measure the six extensionless Bash executables, and rejects the refreshed accepted evidence. Released SpecSync 5.0.2 validates this exact committed tree at truthful 100% file and LOC coverage, but Trust has no released patch that can consume it yet. This PR remains draft until a coordinated immutable Trust patch pin is available and exact-head hosted Trust passes.

Authenticated GitHub reads and mutations remain independently authorized and are intentionally excluded from the offline migration lane.

Exact head: 285789391a06a610e22a0cdc4e68da9c70d10004.

[gemini-code-assist]

Code Review

This pull request adopts SpecSync 5.0.1 and Trust 1.0.0 governance for the GitHub Fledge plugin, introducing canonical specs, companion files, migration change records, task definitions, and IDE skill commands. The review feedback suggests removing redundant empty headings in the skill markdown files, correcting split acceptance criteria in the migration change files, and expanding the smoke test and verification commands to cover all fledge-github sub-executables instead of only the main dispatcher.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f5ee59c46f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".