build(hermes): unblock RED build + promote inter-session-peer-discipline to auto

Build was RED: 5 skills in skills/ were unmapped (meta-host-routing,
ralph-loop-execution, setup-agents-task-runner, task-format,
using-system-snapshot) — "unmapped entries" abort. Mapped all 5 as `pending`
(conservative placeholder, no auto-commitment; each keeps its own mode decision).
meta-host-routing mapping executes task meta-host-routing-hermes-mapping.

- inter-session-peer-discipline: pending -> auto (category meta). Gate
  ("non-implementer test-trigger + review") satisfied — both VERDICT PASS this
  session; purely behavioral, no tool-side effects, no Windows-PS hook. Human-ratified.
- session-inbox-monitor: reason updated — behavioral gate CLEARED (test-trigger +
  review PASS), STAYS pending on two independent tool-side blockers (Linux port of
  the PS hook + settings.json/process-kill audit), not on behavioral verification.
- dist-hermes regenerated: build now GREEN (auto 14 / manual 2 / skip 9 / pending 13);
  materialized dist-hermes/meta/inter-session-peer-discipline/; synced stale
  using-markitdown / using-tasks copies (source had been bumped without a hermes rebuild).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

hermes/mapping.yaml

@@ -138,7 +138,7 @@ skills:
     mode: skip
     reason: "Claude-Code-only orchestrator — Hermes uses hermes-installer-skill instead."
 
-  # ─── pending (9 — behavioral audit required) ─────────────────────────
+  # ─── pending (8 — behavioral audit required) ─────────────────────────
 
   delegate-task:
     mode: pending
@@ -194,11 +194,50 @@ skills:
     intended:
       mode: auto
       category: productivity
-    reason: "Paired SessionStart hook registers itself in ~/.claude/settings.json and sweeps orphaned monitor OS processes (Get-CimInstance | Stop-Process by sentinel+inbox-path); the skill then raises an in-session Monitor on .claude-inbox/. Machine-level side-effects (user-config mutation + process kills) and a Windows-PowerShell hook that needs a Linux port for Hermes factory machines. Primary activation is the CLAUDE.md trigger-line `inbox monitor: raise on start` + the injector, not a hermes-trigger. Behavioral audit via session-inbox-monitor-test-trigger required before promotion to auto."
+    reason: "Paired SessionStart hook registers itself in ~/.claude/settings.json and sweeps orphaned monitor OS processes (Get-CimInstance | Stop-Process by sentinel+inbox-path); the skill then raises an in-session Monitor on .claude-inbox/. Primary activation is the CLAUDE.md trigger-line `inbox monitor: raise on start` + the injector, not a hermes-trigger. Behavioral gate CLEARED 2026-06-17 — test-trigger + review BOTH VERDICT PASS (activation 3/3 monitor + neg clean; structural hook audit 5 PASS/1 CONCERN, the CONCERN fixed in v0.2.2). STAYS pending on two independent tool-side blockers, NOT on behavioral verification: (1) the SessionStart hook is Windows-PowerShell and needs a Linux port for Hermes factory machines; (2) machine-level side-effects (user-config mutation of ~/.claude/settings.json + Get-CimInstance|Stop-Process kills) need a tool-side audit before auto. Promotion blocked on those two, not on test-trigger/review."
 
   inter-session-peer-discipline:
+    mode: auto
+    category: meta
+    # Promoted pending→auto 2026-06-17. Gate ("non-implementer test-trigger + review")
+    # SATISFIED — both VERDICT PASS this session (test-trigger: pos 4/4→peer, 0 false-positive
+    # on 5 foreign phrases RU+EN; review: body v0.1.1 carries proposal-not-authority /
+    # human-ratification-gate / echo-chamber-guard, no blocking findings). Purely behavioral
+    # governance skill: NO tool-side effects (no settings.json write, no process kill, no Monitor
+    # raise) and no Windows-PowerShell hook → no Linux port needed for the Hermes factory.
+    # Human-ratified promotion (not a peer ruling).
+
+  # ─── pending (5 — newly-mapped 2026-06-17, build-integrity fix) ──────
+  # These lived in skills/ UNMAPPED → the build was RED ("unmapped entries").
+  # Mapped `pending` = conservative placeholder, no auto-commitment; each still
+  # needs its own mode decision. meta-host-routing here executes the open task
+  # `meta-host-routing-hermes-mapping`.
+
+  meta-host-routing:
     mode: pending
     intended:
       mode: auto
       category: meta
-    reason: "Purely behavioral governance skill — NO tool-side effects (no settings.json write, no process kill, no Monitor raise). Governs how an agent treats inter-session/peer messages: peer messages (and the agent's own replies) are proposals/analysis, NOT authority; the human is the only source of scope/direction; a peer-driven design escalation must not be reported as settled without explicit human ratification. Pending (not auto) by the same caution applied to other unverified behavioral skills: a behavioral-authority skill should not auto-fire until it passes a non-implementer test-trigger + review. Behavioral audit via inter-session-peer-discipline-test-trigger required before promotion to auto. (Ledger filed 2026-06-17 per workshop coordination; human-ratified.)"
+    reason: "Resolves WHERE a project's meta lives before tasks_create / knowledge_ingest / brainstorm-promotion (meta-out-of-repo). Touches projects-meta MCP (tasks_create / knowledge_ingest / meta_status) and routes writes across repos. Review PASS (meta-host-routing-review) but the -install baseline is still open and a tool-side audit (cross-repo MCP writes) is required before auto. Mapping executes task meta-host-routing-hermes-mapping."
+
+  using-system-snapshot:
+    mode: pending
+    intended:
+      mode: auto
+      category: mcp
+    reason: "Calls mcp__projects-meta__meta_system_snapshot (read-only whole-machine ops snapshot: poller / docker / cross-project task load). Read-only, same class as using-vds-ops / using-wiki-graph; pending a behavioral test-trigger before auto."
+
+  task-format:
+    mode: pending
+    intended:
+      mode: auto
+      category: productivity
+    reason: "Documentational skill — how to write a .tasks/STATUS.md task block the autonomous poller will claim/route/report (block header, status emoji, Weight/Notify/Requirements fields). No tool-side effects; pending a behavioral test-trigger before auto."
+
+  setup-agents-task-runner:
+    mode: pending
+    reason: "L2 installer — installs the standing-duty stack (agents-task-runner + watchdog + appeals-inbox) as platform-native OS services (systemd/launchd/winsw), fetches a pinned binary, writes poller-scope.json. Heavy infra side-effects (OS services + binary fetch); mode decision (skip vs manual vs auto) deferred — needs an explicit Hermes-factory applicability audit. Placeholder pending to keep the build green."
+
+  ralph-loop-execution:
+    mode: pending
+    reason: "Behavioral oracle-loop skill (Verifier / Attempts / Max-Attempts retry loop). NB: source SKILL.md currently lacks YAML frontmatter (no name/description) — cannot auto-convert cleanly until that is fixed. Mapped pending as a placeholder; needs frontmatter + a behavioral audit before any mode decision."