---
name: planting
description: "Use while the bound root-local Planter profile authors a verified mesh and seed before Engineer planning."
---

# planting: root-local seed authorship

Root-local singleton, not dispatch/execution. Exactly one Planter serves one bound root session and
explicit run, then returns root.

Native binds project/filesystem/root-session/explicit run identity. Missing/conflict asks operator;
no ambient inference. Keep `planted`; write only `mesh.md`/`seed.md`; native verify/persist pointer.
Never edit `run.json`/dispatch/binding/claim/lease/locks/candidate/Native state; no Git custody,
publish/release/start/wave/delegate/second Planter; reports are not proof.

Entry: read-only `shepherd doctor`; exact initialization on missing namespace; new `shepherd run
init <run>` -> `planted`; existing bound/planted; preserve verified seed; load instructions/request/
context; failed gates create nothing.

Mesh first: sweep request/rules/state/issues/PRs/prior artifacts/carry-forward/services/contracts/
tests/evals/scripts/carriers/lessons/findings; record fact ID/evidence/freshness/conflict/
disposition `include|exclude|defer|ask`; inaccessible sources defer/ask and stop unsafe scope.

Seed: typed `shepherd.seed/2`, measurable goal/outcomes, immutable scope; fields follow
`references/seed-contract.md`. No files/order/phases/models/graph nodes/lane topology unless
explicit.

Verify `shepherd seed verify <path>`; failure remains planted and changes mesh/seed only. Success
uses native `shepherd run set <run> --seed <path>`, never `run.json`; re-query and record exit,
paths/digests, planted status, pointer, result. Scope immutable; amend natively.

Handoff: return identities/state/paths/digests/contract/blockers/parallelism. Root claims exactly one Engineer.
Engineer writes planning Markdown/JSON only: exactly one identity, bounded read-only
Auditor/Discovery, complete plan/graph/lane artifacts, Critic GREEN. Second Engineer duplicates;
resume identity. Stop before `planned`/`executing`/`start` or Conductor/Coder/Worker/review
execution. Identity/run/source/verification/pointer/postcondition failure stops; never guess, force,
broaden, or claim handoff.