feat(advocate): check commits for licence and legal soundness

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

skills/advocate/SKILL.md

@@ -0,0 +1,122 @@
+---
+name: advocate
+description: >
+  Check a commit for legal soundness before it lands: is the project licence
+  compatible with the code and dependencies the change brings in, are the
+  attribution duties met, is copied code traceable, does the change touch
+  personal data (GDPR) or third-party trademarks. Run AUTOMATICALLY, without
+  being asked, every time the operator requests a commit in any wording,
+  BEFORE executing that request; also on /advocate [ref|range], "rechtlich
+  prüfen", "lizenz prüfen", or when the operator asks whether a change is
+  legally clean. Portable across projects.
+---
+
+The stance is the project's counsel: find what would make the change unlawful
+to distribute before it is distributed. This is not legal advice but a reading
+of the licence texts, with German and EU law where jurisdiction matters; every
+report says so in one line. Leaked secrets belong to `medusa`, engineering
+principles to `sceptic`.
+
+## Target
+
+- Before a commit: the staging index (`git diff --cached`, plus every added or
+  changed file in full where origin or licence is in question).
+- `/advocate <ref>` or `/advocate <a>..<b>`: that commit or range.
+- `/advocate` alone: the index if it is non-empty, else `HEAD`.
+
+## Fast exit
+
+The target is in scope only if it adds or changes at least one of: a
+dependency manifest or lockfile; a vendored, generated, or third-party file; a
+LICENSE, NOTICE, or COPYING file or a licence header; code with a foreign
+origin (a source URL, a foreign copyright line, a block that reads unlike its
+surroundings); an external request (CDN, web font, analytics, embed, API);
+handling of personal data; a logo, icon, or third-party brand name. Nothing in
+scope: report `advocate: nothing licence-relevant in <target>` in one line and
+let the commit proceed.
+
+## Project licence
+
+Read every declaration: LICENSE/COPYING, the manifest's licence field
+(`package.json`, `pyproject.toml`, `Cargo.toml`, `composer.json`, ...), SPDX
+headers, the README's licence section. Declarations that disagree are a
+finding. A project without any licence is a finding (all rights reserved),
+never a blocker of the commit at hand.
+
+## The checks
+
+1. **Inbound code** - every file or block of foreign origin carries a licence
+   that the project licence can absorb in the direction of distribution. GPL
+   code cannot enter a project distributed under MIT without relicensing the
+   whole; Apache-2.0 cannot enter GPL-2.0-only; code without a licence is all
+   rights reserved.
+2. **Dependency licences** - for each added or bumped dependency, read the
+   licence of the resolved version (lockfile, registry metadata, or the
+   package's own LICENSE), including the transitive dependencies the lockfile
+   newly pulls. Watch copyleft reach (GPL, AGPL's network clause, LGPL static
+   versus dynamic linking), source-available terms that are not open source
+   (SSPL, BUSL, Commons Clause, "non-commercial"), and an upstream relicensing
+   between the old and the new version.
+3. **Project licence fit** - the project's declarations still hold against
+   what checks 1 and 2 found: a dependency that forces copyleft forces either
+   the project licence or the dependency's removal.
+4. **Attribution** - retained copyright notices, the licence text shipped
+   where required, an Apache-2.0 NOTICE propagated, modified-file notices
+   (Apache-2.0 §4(b), GPL-3.0 §5(a)), SPDX headers where the project uses them,
+   credit for CC BY material.
+5. **Copied snippets** - Stack Overflow content is CC BY-SA (attribution plus
+   share-alike); gists, blog posts, other repositories, and verbatim
+   reproductions of well-known code need a traceable origin and licence.
+   Trivial code without originality (one-liners, usage dictated by an API) is
+   not a finding.
+6. **Data protection (GDPR, TDDDG)** - new collection, storage, logging, or
+   transfer of personal data; IP addresses sent to third parties through
+   external fonts, CDNs, analytics, or embeds; storage on the user's device
+   without consent (§ 25 TDDDG); transfers outside the EU. Name the data flow
+   and the missing legal basis or consent mechanism.
+7. **Trademarks and branding** - third-party logos, icons, and product names
+   used beyond plain reference: implied endorsement, use in the project's own
+   name, modified logos. Icon sets carry their own licence, and a free licence
+   on an icon does not license the trademark it depicts.
+
+## Severity
+
+- **Blocker** - the commit would distribute what the project may not
+  distribute: an incompatible inbound or dependency licence, or non-trivial
+  code or assets without a licence.
+- **Finding** - fixable while keeping the change: missing attribution, NOTICE,
+  or header; a data-protection gap; trademark use; a block of unclear origin.
+- **Note** - worth knowing, no action required.
+
+## Blockers stop the commit
+
+Harden every blocker with the `dialectic` skill before reporting it. The
+antithesis tries: the code is trivial or the operator's own; the dependency is
+build- or test-only and never distributed; an exception applies (linking or
+Classpath exception, dual licensing, a licence grant in the issue or commit
+history). A blocker that survives stops the commit: present it with the
+options (remove, replace with a compatible alternative, relicense, obtain
+permission) and wait. The operator's explicit acceptance lets this one commit
+proceed and never carries over to the next. Findings and notes never stop a
+commit.
+
+## Output
+
+One line with the target, the project licence, and "Keine Rechtsberatung" (in
+the operator's language). Then one table, blockers first:
+
+| Severity | Check | Location | What is wrong | Licence or law | Fix | Evidence |
+
+`Evidence` is `proven` (licence text, metadata, or file read; cite path:line
+or the registry URL) or `derived` (inferred). Close with the verdict (commit
+stops or proceeds) and the `confidence` skill's numbers.
+
+## Rules
+
+- Never infer a licence from a package's name or reputation; read it. An
+  unreachable registry makes the row `derived`, never clean.
+- Never invent a licence clause, a statute, or a court ruling; cite only what
+  you read.
+- Read-only apart from stopping the commit: never edit licence files, add
+  headers, or remove dependencies on your own. Propose the fix; the operator
+  decides.

skills/commit-next/SKILL.md

@@ -20,7 +20,8 @@ description: >
    operator's decision; do not commit.
 3. Nothing similar found, or the operator picked the staged version: run the
    commit-no-verify skill on the currently staged changes (comments-clean
-   audit first, then `git commit --no-verify`, exact staging index only).
+   audit and advocate check first, then `git commit --no-verify`, exact
+   staging index only).
 4. Group the remaining uncommitted changes into logical bundles (one
    concern per bundle: same failure class, same mechanism, or same role)
    and stage the next one; never mix concerns to save a commit. Staging

skills/commit-no-verify/SKILL.md

@@ -8,7 +8,9 @@ description: >
   to later commits. Portable across projects.
 ---
 
-1. Run the comments-clean audit over the staged and unstaged changes first.
+1. Run the comments-clean audit over the staged and unstaged changes first,
+   then the advocate check over the staging index. An advocate blocker stops
+   here.
 2. Commit exactly the staging index with `git commit --no-verify` and a
    Conventional-Commits message derived from the staged diff; never add
    unstaged files, never push.