docs(claude-design): state the no-CI substitute, drop the private-file pointer

Two judgement findings from the repo-standard skill that its script cannot
measure, both on the presentation surface:

- Verification named the whole-suite command but not the fact that nothing
  runs it automatically. The skill treats a stated single command plus that
  admission as the honest substitute for a CI badge; this repo has no CI
  config of any kind, so say so.
- The Changelog section sent a public reader to `REMEMBER.md` for the v1.0
  readiness criteria. That file is gitignored, is not present, and is a
  retired local-continuity mechanism — so the pointer resolved to nothing
  for every reader. The criteria were already inline in the same sentence;
  keep them and drop the pointer.

Gate: repo-standard v0.2.0 reports OK, 14/14, no SKIP.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01B4DrFX1ubxrmswAH3rwSeN

.coverage.md

@@ -67,7 +67,7 @@ This manifest refreshes when any of these events occurs:
 - **Anthropic support article URL slugs change while keeping numeric IDs stable** — re-pin URLs in column 4 (Anthropic anchor URL); the numeric IDs in `support.claude.com/en/articles/<numeric-id>-<slug>` are the stable anchor
 - **Labs → GA URL rename for `claude.ai/design`** — re-pin the launch-post URL once the `-anthropic-labs` slug is dropped (note: the launch URL `https://anthropic.com/news/claude-design-anthropic-labs` may or may not 301-redirect after the rename)
 
-When any trigger fires, run `bash plugins/claude-design/verify.sh --strict` after the manifest update to confirm SC2 and SC3 still pass.
+When any trigger fires, run `bash verify.sh --strict` after the manifest update to confirm SC2 and SC3 still pass.
 
 ---
 

.gitignore

@@ -0,0 +1,12 @@
+
+# --- session/local state (gitignored per ~/.claude polyrepo-konvensjon) ---
+STATE.md
+REMEMBER.md
+ROADMAP.md
+TODO.md
+NEXT-SESSION-PROMPT*.local.md
+*.local.md
+*.local.json
+*.local.sh
+.DS_Store
+.claude/

README.md

@@ -1,21 +1,51 @@
-# Claude Design Facilitator
+# claude-design
 
-> End-to-end facilitator for prompting Claude Design (`claude.ai/design`). Walks the operator from raw idea through intent-preset selection, audience and destination clarification, DESIGN.md anchor, five-layer prompt drafting, copy-paste delivery, iteration coaching, and ship-readiness handoff. Cites Anthropic primary sources inline. Recommends Anthropic's official `knowledge-work-plugins/design` as the downstream post-design tool.
+End-to-end facilitator for prompting Claude Design (claude.ai/design) — idea to copy-paste-ready prompt with iteration coaching, citing Anthropic primary sources.
+
+A Claude Code plugin that ships one skill (`claude-design-facilitator`) plus a reference tree for prompting Anthropic's `claude.ai/design` workspace. The skill auto-fires on natural-language triggers, walks the operator through an eight-phase facilitation flow, and produces a prompt grounded in Anthropic's verbatim Goal / Layout / Content / Audience framework and the published per-preset prompt patterns. For anyone who keeps getting the convergent default aesthetic back from Claude Design. Output is the prompt — the artifact gets built in Claude Design.
+
+## Install
+
+Add the marketplace once, then install the plugin:
+
+```bash
+claude plugin marketplace add https://git.fromaitochitta.com/open/ktg-plugin-marketplace.git
+```
+
+In Claude Code:
+
+```
+/plugin install claude-design@ktg-plugin-marketplace
+```
+
+Or enable directly in `~/.claude/settings.json`:
+
+```json
+{
+  "enabledPlugins": {
+    "claude-design@ktg-plugin-marketplace": true
+  }
+}
+```
+
+The skill auto-discovers; no further configuration needed.
+
+## Requirements
+
+Claude Code with plugin support, and access to `claude.ai/design`. No npm packages, no Python, no external tools — see [Compatibility](#compatibility) for the full matrix.
+
+---
 
 > **Solo-maintained, fork-and-own.** This plugin is a starting point, not a vendor product. Issues are welcome as signals; pull requests are not accepted. See [GOVERNANCE.md](GOVERNANCE.md) for the full model and what upstream provides.
 
-*AI-generated: all content produced by Claude Code through dialog-driven development. [Full disclosure →](../../README.md#ai-generated-code-disclosure)*
+*AI-generated: all content produced by Claude Code through dialog-driven development. [Full disclosure →](GOVERNANCE.md)*
 
 ![Version](https://img.shields.io/badge/version-0.1.0-blue)
 ![Platform](https://img.shields.io/badge/platform-Claude_Code_Plugin-purple)
 ![Skill](https://img.shields.io/badge/skills-1-green)
 ![References](https://img.shields.io/badge/references-13-green)
-![Hooks](https://img.shields.io/badge/hooks-0-lightgrey)
-![Commands](https://img.shields.io/badge/commands-0-lightgrey)
 ![License](https://img.shields.io/badge/license-MIT-lightgrey)
 
-A Claude Code plugin that ships one skill (`claude-design-facilitator`) plus a reference tree for prompting Anthropic's `claude.ai/design` workspace. The skill auto-fires on natural-language triggers, walks the operator through an eight-phase facilitation flow, and produces a copy-paste-ready prompt grounded in Anthropic's verbatim Goal / Layout / Content / Audience framework and the four published per-preset prompt patterns. Output is the prompt — the artifact gets built in Claude Design.
-
 ---
 
 ## Why this exists
@@ -44,7 +74,7 @@ Anthropic's plugin operates on existing artifacts (Figma URLs, screenshots, copy
 
 ---
 
-## What this plugin is NOT
+## Non-goals
 
 By design, this plugin does not:
 
@@ -58,34 +88,6 @@ By design, this plugin does not:
 
 ---
 
-## Installation
-
-Add the marketplace once, then install the plugin:
-
-```bash
-claude plugins marketplace add ktg-plugin-marketplace https://git.fromaitochitta.com/open/ktg-plugin-marketplace
-```
-
-In Claude Code:
-
-```
-/plugin install claude-design@ktg-plugin-marketplace
-```
-
-Or enable directly in `~/.claude/settings.json`:
-
-```json
-{
-  "enabledPlugins": {
-    "claude-design@ktg-plugin-marketplace": true
-  }
-}
-```
-
-The skill auto-discovers; no further configuration needed.
-
----
-
 ## What you can do with it
 
 The skill `claude-design-facilitator` walks the operator through eight phases. The phases are scoping + grounding (1–4), drafting + delivery (5–6), and iteration + ship-readiness (7–8).
@@ -236,9 +238,11 @@ When Anthropic publishes per-preset guidance for a Community-only or Experimenta
 ## Verification
 
 ```bash
-bash plugins/claude-design/verify.sh
+bash verify.sh
 ```
 
+Nothing runs this automatically — there is no CI in this repository. The command above is the entire suite, and it runs from a clean clone with no setup step.
+
 Runs five test scripts under `tests/` in dependency order:
 
 | Script | Verifies |
@@ -285,11 +289,13 @@ When a trigger fires, run `bash verify.sh --strict` after the update to confirm
 
 ---
 
-## Recent versions
+## Changelog
+
+Full release history: [CHANGELOG.md](CHANGELOG.md). The plugin follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 **v0.1.0 — 2026-05-17.** Initial public release. Single skill (`claude-design-facilitator`) with eight-phase facilitation flow, 12 natural-language trigger phrases, 13 reference files (5 foundation + 8 per-preset with evidence-grade labels), `.coverage.md` preset manifest plus Authoritative-claims registry, five verification scripts under `tests/` enforcing structural integrity / scope fence / skill description quality / per-preset coverage / Anthropic-domain citation discipline / operator dogfood log format, top-level `verify.sh` roll-up with `--strict` and `--quick` flags, MIT license, GOVERNANCE.md fork-and-own model.
 
-Full release history: [`CHANGELOG.md`](CHANGELOG.md). The plugin follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html). The path from v0.1 to v1.0 is dogfood-driven — see the plugin's `REMEMBER.md` for the v1.0 readiness criteria (multi-preset breadth, auto-fire validation in real natural-language requests, two consecutive dogfood sessions with zero critical patches).
+The path from v0.1 to v1.0 is dogfood-driven. The v1.0 readiness criteria are multi-preset breadth, auto-fire validation in real natural-language requests, and two consecutive dogfood sessions with zero critical patches. The dogfood log itself is operator-local and never published.
 
 ---
 

docs/review-2026-06-20.md

@@ -0,0 +1,29 @@
+# Plugin review — claude-design v0.1.0 (2026-06-20)
+
+> Full-depth review (part of the marketplace-wide sweep; pilot was okr). Tooling: config-audit
+> v5.4.0 scanners (from source) + llm-security posture assessor + structure/version checks.
+> Read-only; this file is the only artifact.
+
+## Verdict
+
+**Clean, grade A — deliberately non-agentic.** Emits a copy-paste design prompt for a human to
+paste into claude.ai/design; never executes the prompt, drives a browser, or touches the
+filesystem. One v0.1.0 maturity nit. No blockers.
+
+## Results by dimension
+
+| Dimension | Result |
+|-----------|--------|
+| config-audit posture | **A** (Feature Coverage F 26, Token-Efficiency B 80 — expected for an early single-skill plugin) |
+| config-audit plugin-health | **0 findings** |
+| llm-security posture | **A** — only F-1 below. Strongest axis is Excessive Agency: `SKILL.md:151-156` explicitly disclaims code-gen, browser automation, and file writes. Unicode sweep clean; ~9 community-blog URLs are inert citations (never fetch targets). Scope-fence against Anthropic's official design plugin is test-enforced. |
+| structure / hygiene | README ✓, CHANGELOG ✓, CLAUDE.md ✓, LICENSE ✓ |
+| version consistency | **OK** (gate) |
+
+## Findings
+
+| ID | Severity | Location | Finding |
+|----|----------|----------|---------|
+| F-1 | Low (maturity) | `plugin.json:1-18` | No explicit `permissions` block. Not exploitable now (ships no hooks/MCP/commands; the skill invokes no tools), but new components added post-v0.1.0 would inherit session permissions with no deny-by-default baseline. **Recommend:** a minimal explicit `permissions` block before GA. |
+
+Citation discipline and the command-name scope-fence are test-gated strengths, not findings.