docs: sync beta v3.0.0-beta.11

[mrgoonie]

Summary

• Syncs the Beta channel to AgentKit v3.0.0-beta.11 (source commit c47bad84279eec9ac201d5e7984826b9f0dbbcbb, docs bundle generated 2026-10-09T01:35:32Z) with scripts/sync-release.mjs. The sync uses the release's own docs-bundle.tar.gz, verified against its .sha256 sidecar and the release-page digest. It updates the raw and derived ak kit init and ak kit install reference (--fresh, --accept-risks, exit 3), the Beta release notes, and channels.json.beta. It also adds Desktop Layer A evidence (release-evidence/desktop/v3.0.0-beta.11.json); no Desktop pages changed.
• Rebinds the Beta Kit catalog guard from v3.0.0-beta.10 to v3.0.0-beta.11 for engineer and marketing across all 8 runtimes in the release contract (claude-code, cloud-harness, codex, cursor, dsh, grok, omp, pi): manifests, sidecars, claude-code Skill members, and the runtime contract at the source commit (byte-identical to the beta.10 contract). Unlike beta.10, every Kit archive changed. The only changed file in all 16 archive pairs is ak-ak/SKILL.md (plus its runtime-native copy under .cursor/.dsh/.grok/.omp/.pi). The Skill member sets and identities are unchanged (engineer 103, marketing 83), so the identity snapshots were only re-keyed to the new claude-code archive digests: engineer c5ee11044ac9790b402d0352c1fdd432cfb19ea24ca0fb1331c1ae8e3891eb31, marketing 4a7260980871d806204c703c8cad338e9a5b9300e441c7f6dfa3645c40bf4cf3. Stable is untouched.
• Updates human-owned Beta prose, EN and VI, for the beta.10→beta.11 change:
  • ak:ak Skill --fresh risk-token guidance (#2171): the Skill body now tells the agent to show each listed risk and its files, rerun with --accept-risks <token> only after the user accepts that exact list, and never reuse or save a token. Added to step 5 of the safe operating protocol on kits/{engineer,marketing}/skills/ak (EN + VI), with a link to the ak kit init --fresh section. Source: kits/core/skills/ak-ak/SKILL.md at the tag and the shipped archives.
  • ak kit init --fresh / ak kit install --fresh (#2171): already documented by docs(kits): document ak kit init --fresh selected-target reset #251. Re-verified against v3.0.0-beta.11 (kitcmd/fresh_plan.go, fresh_reset.go, init.go, render/json.go, recovery_output.go): risk kinds, reason values, the kit.init_fresh_plan and data.fresh JSON fields, the Reset this target? [y/N] prompt, the 25-entry text cap, the pi/grok/omp/dsh --force fallback, plugin-mode reset, exit 2/1/3/6 refusals, and the recovery output lines (including UNVERIFIED, may be incomplete) all match. docs(kits): document ak kit init --fresh selected-target reset #251 was written against the same commit, so no drift was found and no reference page was changed.

Evidence (verified hashes)

All 48 expected Kit assets (2 Kits × 8 runtimes × manifest/archive/sidecar) are present, with no extras. Each archive SHA-256 matches all four sources: the downloaded bytes, manifest.artifact.sha256, the sidecar (<sha> kit.tar.gz), and the release-page digest. Manifest and sidecar digests were also checked against the release page. For each manifest, channel, version, runtime, kitId, sourceCommit, requiredCliVersion, artifact.size, and githubAssets were checked. The release-kits workflow run 37870535991 completed successfully before verification.

Runtime	engineer archive SHA-256	marketing archive SHA-256
claude-code	55f1d1cf236cd6001979cb53b6125001f02b2d535f3812c083421adf6d27ce3a	4e089f6ae58fa30ad555af671b9dcb0e349b8bfd62def90d7ccfa7004a0370d9
cloud-harness	2c92803d8bf751627dfbc1adc53495a800a774e6f57e4fcd754463046d941331	e06ce8b9416b9b493f47b7574345e87950c70d301045f9719db2e695ae9bdfcc
codex	0d7aea6652685a7eefa26c82e03d74447608d6bc9cd3b7105a61612d640ee817	1be07759963ad8c498bb72f8c7ddffa847c82afb9ca938301e2524e4349252e2
cursor	56fb97afcd4f990928fbd2b9102293a41b8822a9772a506b7f5a2687595069aa	34308957ddf4633fccbf7b129f921f9fa8f337405926e695d15dd81e76840988
dsh	b2d04b06011e0cfa141252d27b4938f5bb1c43076508a5df67a962c352a2301b	a4799f83eb0d310a45f1e106355ba2d18597d6bee437b4cef5fa8fdcfa54243f
grok	b71def7dabecfc77c95fc810c228f80044318bbe373ae712bd804bfa456bc25a	c1566ea6da979d73e5cc4acdd0675fc117fe9366130c472497de15746c6d9980
omp	3346fdc7916869a1d11433d86097c764cce19f15fb7e7ccc2674669f24df7a2e	4f60fbcc464ebfeb3c58a9b98e6397418a95e9d005d6cb3aaa42c7872941af2b
pi	be446089219930cf44da3165b25fb6806985e26330a1a74deabd062e1770890d	6cdd270b3401823c215f71b07a1bc2628c476c619a892545e02a6f6f00560dd1

• Docs bundle: 125d5263cd74aa0eb18fb9b73210fb3b6a9dabe7f993833d7b3a8e6f488b7c49. The sidecar and the release digest match.
• Desktop: the 4 ak-gui_3.0.0-beta.11_* assets match their .sha256 sidecars and the release digests.
• Archive diff against v3.0.0-beta.10 (all 16 pairs expanded): 0 added, 0 removed; only ak-ak/SKILL.md changed.

Public Skill disposition

Skill	Runtimes with drift	Disposition	Paths
ak:ak (engineer, marketing)	all 8	update	content/docs/beta/kits/{engineer,marketing}/skills/ak.{en,vi}.mdx

No other public Skill identity, SKILL.md body, or support file changed.

Product commits in v3.0.0-beta.10...v3.0.0-beta.11

PR	Change	Disposition
#2171	ak kit init --fresh snapshot-backed selected-target reset, --accept-risks, exit 3, unverified recovery snapshot field, ak:ak Skill guidance	update: reference via sync; ak:ak Skill pages above; --fresh reference prose already shipped in #251 and re-verified

Validation

• pnpm check:catalog: OK (beta/engineer total=103, beta/marketing total=83, artifacts=8)
• pnpm lint, pnpm typecheck, pnpm check:reference, pnpm check:prose: OK
• node scripts/check-kit-docs-ci.mjs origin/dev: OK (history route, no Stable diff)
• node scripts/generate-reference.mjs: no further diff
• pnpm build, pnpm check:links, pnpm check:seo: OK; the new EN and VI anchors resolve in the built pages
• check:quality:shape: route parity OK; route counts unchanged. check:quality:metrics, check:assets, and pnpm test have known Windows path failures that also occur on an untouched dev, so this PR relies on Linux CI for them.

Docs impact

Yes:

• The Beta CLI reference and release notes are synced to v3.0.0-beta.11.
• The Beta Kit catalog guard is rebound.
• The ak:ak Skill pages document the --fresh risk-token handling in EN and VI.

Evidence layer: shipped release assets for v3.0.0-beta.11 (verified hashes) and the product source at the tag. Stable content is not edited.

Website impact

None for agentkit.best.

Follow-ups / mismatch disposition

• The human-owned CLI prose overlay drift since v2.20.0-beta.1 (carried over from docs: sync beta to v3.0.0-beta.8 and add ak:filmmaking guide #244) still needs a separate owner-approved release audit.
• docs(desktop): document Devices page and ak license devices #252 (already on dev) documents the Desktop Devices page and ak license devices. That command is not in v3.0.0-beta.11: the implementing product commit is only on the unmerged feat/desktop-license-devices branch. Beta now describes behavior that no release ships. This PR leaves it alone; the owner should decide whether to hold dev → main or revert until the feature ships.

Refs #243

🤖 Generated with Claude Code