Lock

---
name: lock
description: Use when the prototype is approved at Claude Design (gate 2a) and a slice's portion must be copied down into the repo and locked. Also use when a spine revision touches an already-locked portion and it must be re-locked. Requests gate 2b (the lock). Do not use before gate 2a, and do not derive tests here; that is derive-tests, after the lock.
---

# X2 Lock

Copy the approved design artifact down into the repo, verify it is complete, stamp its provenance,
and request the lock. The lock is the acceptance contract for the slice; everything the builder
ships is held to it. The pilot ran without this step and paid twice: the design system was never
imported so the client's tokens were scraped from what happened to be readable inline (MET-04), and
the prototype was treated as locked for days before anyone asked for the approval (turn 25).

## The import

Pull the complete artifact set from the design project into `design/prototype/` (the canonical
home, INV-01):

- the prototype source (`<name>.dc.html`),
- the **complete** design-system export under `_ds/` (the token css, component css, fonts),
- the supporting scripts.

The sanctioned route is the on-disk export: the owner places the design project's complete export
in the repo (a handoff folder under `design/`), the lock copies out what it needs and deletes the
handoff. A context-carried import (the design MCP) is the fallback for small artifact sets; it
cannot carry binaries, and the third project moved to the on-disk route after channel limits bit.
Either way, verify the copied tree against its source: the file inventory matches and no copy
artifacts exist (a duplicated or nested directory survived the third project's import verification
and was caught only by the owner's eye).

Never derive tokens from values readable inline in the prototype source. The pilot did, and
silently produced a partial, light-only, placeholder token set with the coverage floor skipped.
The client's token source derives from the export on disk, nothing else.

## Done-checks (all must pass before requesting the lock)

- The token file on disk defines the full variable set: the more-than-fifty floor is met, not
  skipped.
- Both themes are present: the dark root and the light override.
- Fonts resolve by a named path: binaries checked in, or a self-hosted font package pinned under
  the dependency ledger (the pilot's answer; the design MCP cannot carry binaries through context).
- `design/prototype/README.md` records provenance: source design-project URL, import date, the
  portion being locked. On approval, it gains the lock stamp.
- `design/ledger/` exists for the per-slice fidelity ledgers that derivation will add.
- Where a design brief exists for the portion: the copied-down screens and their navigation map
  onto the brief's screen inventory and action edges, both directions. An orphan on either side
  (a brief surface the prototype lacks, a prototype surface the brief never named) is surfaced at
  the lock for a ruling, never silently absorbed.
- **The exposure review.** A prototype can carry security-shaped choices, and transcription would
  ship them. Walk the portion for: entry points it exposes (an admin door on a public page),
  identifiers it addresses things by (sequential versus opaque on any public surface), and
  embedded exposure values (domains, addresses, ids). Each finding is surfaced for a ruling at
  the lock, never silently transcribed; the second project shipped and then moved both instances
  it missed (record: NS-3).

## Human-turn contract

- Requests **gate 2b: the lock** (MET-07): the copied-down artifact is approved, explicitly, now.
  This is UI-4's chargeable turn. A portion is not locked because work moved on; it is locked
  because approval is on record. Request it at this moment, not retroactively.
- The request is put in plain language, the owner's own words; method vocabulary rides alongside,
  never instead (P3).
- A re-lock after a spine revision is the same turn again for the affected portions.

## Questions this skill used to carry, now ruled (invariants pass, 2026-07-11)

- **The locked artifact is the DC source alone.** No static render is checked in; a render, if ever
  produced, is viewing convenience and never authoritative. Approval happens where the prototype
  renders (gate 2a, Claude Design); the lock is the copy-down diff (INV-01, ruled).
- **The design system lives under `design/prototype/_ds/`**, provenance-true where the import
  lands. A shared house-system home is deferred with a trigger: the second product reusing the same
  system makes it a pinned, hash-ledgered vendored asset under DEP-1, not a shared directory.
- **The import is the COMPLETE export** (the `.dc.html` plus the full `_ds/`, both themes, more
  than fifty variables), per the manifest; never values scraped from the `.dc.html` (MET-04, ruled).

## What this skill must NOT produce

- No tests, no fidelity ledgers, no code. Derivation starts only after the lock is on record.
- No edits to the prototype; a change goes back through design and re-approval.

## Next

Gate 2b on record, then derive-tests.