[tuckcode]

Summary

Adds a proposed ADR and a build plan for an optional Claude Code engine with a harness marker on each session. Rhizome would drive the user's own installed, unmodified Claude Code. It never offers Claude login and never reads or stores Claude tokens.

This PR writes no engine code. The ADR takes effect only if Atticus accepts it.

Decisions Atticus must make

1. Accept, change, or reject ADR-0191. It reverses part of ADR-0186, 0187, and 0189.
2. Say who accepts the Commercial Terms for Rhizome.
3. Say when to ask Anthropic about the competing-product clause in the Commercial Terms.

Main findings

• --bare does not use subscription login, and Anthropic's doc says that it will become the -p default. This is the largest design risk.
• The hidden claude_code path uses acceptEdits in Limited mode and preapproves Bash in Power User. Both differ from the ADR-0187 tool policy. The plan fixes both before the engine becomes visible.
• claude-code.svg is the Claude mark. The plan replaces it with a neutral icon.
• import_jsonl stays blocked until Atticus says 1.

Completion comment

• Implemented: docs only. ADR-0191, build plan, handoff, ADR index row.
• QA: none needed for docs. Sources were read again on 2026-11-01.
• Tests/coverage: pnpm handoff:check passed. The pre-push gates passed on push.
• Codacy: no code changed.
• Localization: none — English only (C18).
• PostHog: no event needed because this PR has no product change. The plan lists events for step 6.
• Refactoring: none needed.
• ADRs: 0191 (proposed).
• Docs: docs/adr/README.md, plan, handoff.
• Demo vault dirt checked: not touched.

🤖 Generated with Claude Code

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}