docs: add three repository routine prompts

[N4M3Z]

Plan

Capture the routine operating practice in one place: the prompts, the specification, and the environment decision.

Changes

• Adds three routine prompt templates under docs/routines/: Nightly PR Babysitter.md (on hold), Repository Digest.md, and Weekly Ceremony Audit.md, each in the scanner register with picker settings separated from the paste-ready prompt.
• Removes the merge follow-up prompt; the repository digest replaces its per-PR comments with one daily notification.
• Renames the prompt files to spaced title case.
• Adds docs/decisions/DECK-0004 Routine Environment Matrix.md: the environment follows the sensitivity of the readable data, and a private repository never mounts beside general egress.
• Adds the routine-operations spec-driven change: the scanner register, the loud canary, honest degradation, provider adaptation, rendered-value privacy, and manual provider setup.
• Updates CHANGELOG.

Testing

• rune spec validate routine-operations passes.
• Live installs exercised the canary paths: a missing grant reported CONFIGURATION_FAILURE, an allowlist proxy reported INCOMPLETE with counts, and an instruction-shaped nudge was refused.
• The audit's first successful run created the standing issue (Weekly ceremony audit #45) with a dated drift report.

Release Notes

• Three routine prompt templates, the routine-operations specification, and the DECK-0004 environment matrix decision.

Note

Add routine-operations spec, DECK-0004 environment matrix, and three repository routine prompts

• Adds a proposal and detailed spec for routine scanners: scanner register, loud canary, grant diagnosis, environment-by-sensitivity, honest degradation, provider adaptation, rendered-value privacy, and manual provider setup in spec.md
• Introduces ADR DECK-0004 defining a three-environment matrix (AirGap, Default, WebScan) for routine runs based on data sensitivity
• Adds three routine prompt templates: Nightly PR Babysitter, Repository Digest, and Weekly Ceremony Audit, each with authority, scope, permitted/prohibited operations, ordered statuses, and fixed notification formats
• Adds a task checklist in tasks.md with scheduled-run completion and standing-issue comment still pending

^{Macroscope summarized 99a478e.}

[N4M3Z]

@cursor review

[cursor]

Bugbot is paused — on-demand spend limit reached

Bugbot uses usage-based billing for this team and has hit its on-demand spend limit.

A team admin can raise the spend limit in the Cursor dashboard, or wait for the next billing cycle to continue.

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — Although committed as Markdown and installed manually, these files introduce scheduled repository-scanning workflows with private-data access, network-boundary rules, and GitHub comment or issue writes. Their new operational and security-sensitive behavior warrants human review.

Notes:

• Macroscope's correctness review did not run, so approvability was decided on eligibility alone.

No code changes detected at 99a478e. Prior analysis still applies.

^{You can add or adjust custom eligibility rules. Learn more.}

[N4M3Z]

Failing step: Quality, Release notes attestation.

Cause: The pull request body has no Release Notes section with a list entry.

Suggested fix: Add a Release Notes heading and one list entry. Use - N/A for non-user-facing work.

[runeseer]

Not reviewed. This change modifies prose outside the executable specification and workflow scope.

---

Reviewed dc10652c · review run

[runeseer]

Not reviewed. This change modifies prose outside the executable specification and workflow scope.

---

Reviewed dc10652c · review run