What problem does it solve? Code changes in the CG-Agent harness can silently invalidate documented contracts in AGENTS.md, INVARIANTS.md, README.md, and config.default.yaml, leaving stale claims about auth, TLS, web permissions, routes, and invariants that mislead operators and reviewers. ## Core Features & Use Cases - Drift Detection: Finds hardcoded values that should live in config, missing route documentation, undocumented gate names, and stale invariant claims. - Contract Verification: Runs targeted cargo test suites (invariant_guard, registered route coverage, auth guards, security headers) to confirm documented behavior matches code. - Truth-Source Reconciliation: Enforces the ordering code > config > INVARIANTS.md > AGENTS.md > README.md and updates primary docs plus mirrored .claude/.codex guidance in the same change. - Use Case: After adding a new API route or changing a write-policy flag, run this check to confirm the route inventory, CLI examples, and security docs still reflect reality before opening a PR. ## Quick Start Ask the assistant to run the documentation drift check after modifying code that affects documented behavior, configuration contracts, shim actions, API routes, or architectural invariants.