diff --git a/.agents/skills/dotnet-codestyle/SKILL.md b/.agents/skills/dotnet-codestyle/SKILL.md
index db41583e..a6a32c03 100644
--- a/.agents/skills/dotnet-codestyle/SKILL.md
+++ b/.agents/skills/dotnet-codestyle/SKILL.md
@@ -105,9 +105,10 @@ updates, dependency upgrades, benchmarks) on top:
   version management.
 - CI is the authoritative lint backstop. A repo already keeping a .NET tool manifest declaring
   Husky.Net wires its local pre-commit hook from `catalog/snippets/husky/` in the hub, hub-local
-  and not carried into every fleet repo, covering the shared doc gates alongside the language
-  checks. A repo keeping none, or one preferring that runner, takes `catalog/snippets/pre-commit/`
-  instead.
+  and not carried into every fleet repo. A repo keeping none, or one preferring the `pre-commit`
+  framework, takes `catalog/snippets/pre-commit/` instead. Either shape covers the shared doc
+  gates alongside the language checks. Each snippet's own README names the per-clone steps and
+  the second file to copy alongside it.
 - **Required VS Code extensions**: CSharpier, markdownlint, CSpell. Use the workspace settings
   without overrides.
 
diff --git a/.claude-plugin/fleet-skills/.source-digest b/.claude-plugin/fleet-skills/.source-digest
index c2108a0c..4e1b6d57 100644
--- a/.claude-plugin/fleet-skills/.source-digest
+++ b/.claude-plugin/fleet-skills/.source-digest
@@ -1 +1 @@
-c7efdbdc80111e8f
+a7bfc794d16c14d0
diff --git a/.claude-plugin/fleet-skills/skills/dotnet-codestyle/SKILL.md b/.claude-plugin/fleet-skills/skills/dotnet-codestyle/SKILL.md
index db41583e..a6a32c03 100644
--- a/.claude-plugin/fleet-skills/skills/dotnet-codestyle/SKILL.md
+++ b/.claude-plugin/fleet-skills/skills/dotnet-codestyle/SKILL.md
@@ -105,9 +105,10 @@ updates, dependency upgrades, benchmarks) on top:
   version management.
 - CI is the authoritative lint backstop. A repo already keeping a .NET tool manifest declaring
   Husky.Net wires its local pre-commit hook from `catalog/snippets/husky/` in the hub, hub-local
-  and not carried into every fleet repo, covering the shared doc gates alongside the language
-  checks. A repo keeping none, or one preferring that runner, takes `catalog/snippets/pre-commit/`
-  instead.
+  and not carried into every fleet repo. A repo keeping none, or one preferring the `pre-commit`
+  framework, takes `catalog/snippets/pre-commit/` instead. Either shape covers the shared doc
+  gates alongside the language checks. Each snippet's own README names the per-clone steps and
+  the second file to copy alongside it.
 - **Required VS Code extensions**: CSharpier, markdownlint, CSpell. Use the workspace settings
   without overrides.
 
diff --git a/.github/skills/dotnet-codestyle/SKILL.md b/.github/skills/dotnet-codestyle/SKILL.md
index db41583e..a6a32c03 100644
--- a/.github/skills/dotnet-codestyle/SKILL.md
+++ b/.github/skills/dotnet-codestyle/SKILL.md
@@ -105,9 +105,10 @@ updates, dependency upgrades, benchmarks) on top:
   version management.
 - CI is the authoritative lint backstop. A repo already keeping a .NET tool manifest declaring
   Husky.Net wires its local pre-commit hook from `catalog/snippets/husky/` in the hub, hub-local
-  and not carried into every fleet repo, covering the shared doc gates alongside the language
-  checks. A repo keeping none, or one preferring that runner, takes `catalog/snippets/pre-commit/`
-  instead.
+  and not carried into every fleet repo. A repo keeping none, or one preferring the `pre-commit`
+  framework, takes `catalog/snippets/pre-commit/` instead. Either shape covers the shared doc
+  gates alongside the language checks. Each snippet's own README names the per-clone steps and
+  the second file to copy alongside it.
 - **Required VS Code extensions**: CSharpier, markdownlint, CSpell. Use the workspace settings
   without overrides.
 
diff --git a/reports/canonical-review.json b/reports/canonical-review.json
index 68d04040..204cabd2 100644
--- a/reports/canonical-review.json
+++ b/reports/canonical-review.json
@@ -43,11 +43,11 @@
     },
     {
       "unit": ".agents/skills/dotnet-codestyle/SKILL.md > Tooling and editor",
-      "digest": "sha256:bee41f58a11d3ee23789d5839a26798dba19c89d1e500ec468c918f55a41cf40",
+      "digest": "sha256:adaa0bb212c931d838d35dc9777b8ac5605ff46ccffc4448f227c78793085a57",
       "reviewer": "agent-skill",
       "findings": 1,
-      "hubCommit": "a2c9dab3bfde574d179b0765f9bb50f413ce7a80",
-      "stamp": "2026-09-02T03:33:05Z"
+      "hubCommit": "68be56e977269486eeeca14bdc4982a0adbdb6b3",
+      "stamp": "2026-09-02T13:41:40Z"
     },
     {
       "unit": ".agents/skills/drive-pr/SKILL.md > Disposing of Every Finding",
diff --git a/spec/audit.py b/spec/audit.py
index 448bf748..e715f47b 100755
--- a/spec/audit.py
+++ b/spec/audit.py
@@ -2982,7 +2982,6 @@ def _selftest():
         ),
     ]
     # The deploy-site.yml caller stub once deploy-site-task.yml is hub-hosted: no secrets: inherit, the required crossing secret named instead.
-    # The task also declares an optional SITE_AUTH_TOKEN_ID/SITE_AUTH_TOKEN pair, which a caller maps only where its live check needs one.
     # inherit is documented for same-org or enterprise callers, so the fleet does not use it across repositories.
     # No job-level environment: on the caller, unsupported on a job with uses: (ptr727/ProjectTemplate#942).
     deploy_stub = (