Remove obsolete repository coupling and stabilize CI installs

.github/scripts/pitot_e2e_report.py

@@ -506,7 +506,7 @@ def render_comment(
         MARKER,
         "## Pitot coding-agent E2E",
         "",
-        "Intelligence Flow is the verification source; Pitot's public README carries the latest `main` status.",
+        "These results come from this repository's CI at the commit shown below; the README links to the latest `main` status.",
         "",
         "| Agent | Ubuntu | macOS | Windows | Result | Evidence |",
         "|---|---|---|---|---|---|",

.goreleaser.yml

@@ -1,7 +1,7 @@
 # GoReleaser builds the prebuilt Pitot binaries for each release tag. Pitot is
 # pure Go / CGO-free, so cross-compiling the five supported targets is a plain
-# matrix build. The release workflow (works-rendered release.yml installed in
-# the public repo) tags a version, runs `goreleaser release --clean`, attests
+# matrix build. The repository release workflow validates the tag and source
+# versions, runs `goreleaser release --clean`, attests
 # provenance, then uploads the archives + checksums.txt to the GCP Artifact
 # Registry generic `dist` repo fronted by get.operatorstack.systems — which is
 # exactly where the repo shim (.pitot/bin/pitot) and `pitot upgrade` hydrate
@@ -47,8 +47,7 @@ archives:
       - goos: windows
         formats:
           - zip
-    # README.md and LICENSE live at the public repo root (projected from
-    # public-readme-preview).
+    # Include the repository documentation and license in each binary archive.
     files:
       - README.md
       - LICENSE

CONTRIBUTING.md

@@ -208,7 +208,6 @@ available through GitHub.
 ## Repository ownership
 
 This repository owns Pitot source, maintenance tooling, CI, and releases.
-`UPSTREAM.json` records the historical import; it is not an active sync contract.
 Changes are made directly here.
 
 Maintenance commands run from this repository root:

e2e/e2e_coverage_test.go

@@ -10,19 +10,14 @@ import (
 )
 
 func TestAllAdaptersHaveE2EScripts(t *testing.T) {
-	// Monorepo: labs/15-pitot/pitot/e2e -> labs/15-pitot/tests.
-	// Public projection: e2e -> tests.
-	testsDir := filepath.Join("..", "..", "tests")
-	if _, err := os.Stat(testsDir); os.IsNotExist(err) {
-		testsDir = filepath.Join("..", "tests")
-	}
+	testsDir := filepath.Join("..", "tests")
 
 	for _, host := range adapters.Supported() {
 		t.Run(string(host), func(t *testing.T) {
 			scriptName := fmt.Sprintf("e2e_%s_cli_test.sh", host)
 			scriptPath := filepath.Join(testsDir, scriptName)
 
-			if _, err := os.Stat(scriptPath); os.IsNotExist(err) {
+			if info, err := os.Stat(scriptPath); err != nil || !info.Mode().IsRegular() {
 				t.Errorf("Missing E2E test script for adapter %q: expected to find %s", host, scriptPath)
 			}
 		})

scripts/pitot_capture_source.py

@@ -35,6 +35,8 @@
     "tests/real_agent_driver.py",
     "tests/e2e_unified_runner.sh",
     "tests/install_real_agent.py",
+    "tests/agent-locks/deepseek/package.json",
+    "tests/agent-locks/deepseek/package-lock.json",
     "tests/agent_identity.py",
     "tests/installation_identity.py",
     "cmd/pitot/deepseek_acp.go",

sdk/python/README.md

@@ -61,5 +61,5 @@ if __name__ == "__main__":
 pitot dev --host claude -- claude -p "…"    # discovers your fragment, starts the controller
 ```
 
-See the repository [README](../../../public-readme-preview/README.md) for the full
+See the repository [README](../../README.md) for the full
 runtime, host-hook wiring, and the enforcement boundary.

sdk/tests/test_runners.py

@@ -8,7 +8,7 @@
   * deny outcome       - the handler's deny is faithfully serialized
   * consumer stream    - events are delivered and stdout stays protocol-clean
 
-Paths are resolved relative to this file (no hardcoded monorepo depth), and each
+Paths are resolved within this repository, and each
 language is skipped cleanly when its toolchain is unavailable.
 """
 
@@ -25,11 +25,9 @@
 
 
 def go_module_dir() -> Path | None:
-    """Locate the Go module root in either the monorepo or flattened layout."""
-    for candidate in (SDK_DIR.parent, SDK_DIR.parent.parent / "pitot"):
-        if (candidate / "go.mod").exists():
-            return candidate
-    return None
+    """Locate this repository's Go module root."""
+    candidate = SDK_DIR.parent
+    return candidate if (candidate / "go.mod").is_file() else None
 
 
 def control_request(action_id: str) -> str:
@@ -234,8 +232,7 @@ def setUp(self):
 
     @classmethod
     def tearDownClass(cls):
-        # Generated fixtures must never linger under the published sdk/ tree, or
-        # they would show up as projection drift in UPSTREAM.json.
+        # Remove generated fixtures so subsequent runs start with a clean SDK tree.
         shutil.rmtree(FIXTURES_DIR, ignore_errors=True)
 
     def _wire_cases(self, envelope):

sdk/typescript/README.md

@@ -60,5 +60,5 @@ runConsumer(async (event: Event) => {
 pitot dev --host claude -- claude -p "…"    # discovers your fragment, starts the controller
 ```
 
-See the repository [README](../../../public-readme-preview/README.md) for the full
+See the repository [README](../../README.md) for the full
 runtime, host-hook wiring, and the enforcement boundary.