full-reviewlisted

# Full Review Confirm the dot repository is healthy end to end: the gate is green, `dot` works, pinned tools are current, and `AGENTS.md`, `README.md`, and the skills describe the live repository. Every step is read-only or idempotent (no `chezmoi apply`, `mise upgrade`, `mise run release`, or `mise run prune`); [project-health](../../../skills/project-health/SKILL.md) is the fixing pass for any repository. ## Workflow 1. **Validate the gate**: `mise run check`, `mise run test`, and `mise run build`. 1. **Confirm the dot CLI**: ```bash dot verify # environment, tools, secrets, install freshness dot --help # every command carries an alias, matching skills/dot-cli/SKILL.md dot status # git, docker, k3d smoke test mise run doctor # chezmoi doctor + mise doctor mise run diff # pending chezmoi diff, read-only ``` A `dot verify` failure is a repository bug only when local state (an unauthenticated CLI, a missing optional secret) does not explain it. 1. **Check tool and dependency currency**, report only: ```bash mise outdated # repository-scoped tools mise -C "$HOME" outdated # global tool list mise --version # warns when mise itself is behind go -C dot list -m -u all # Go module updates ``` `mise outdated` sees only mise pins; also scan action versions in `.github/workflows/*.yml`, plugin versions in `dprint.json`, and exact-version pins in `dot_config/mise/config.toml.tmpl`