- Add verify-lint-rule-scope-before-relying-on-it: guidance on confirming lint rule coverage before trusting it for enforcement. Documents the P2-002 incident where ruff BLE only catches bare not . - Update working-tree-hygiene: add dev-tool-in-venv check and ruff dependency example.