diff --git a/.kilo/KILO_SPEC.md b/.kilo/KILO_SPEC.md
index 1531291..0ebf5ff 100644
--- a/.kilo/KILO_SPEC.md
+++ b/.kilo/KILO_SPEC.md
@@ -441,31 +441,31 @@ Provider availability depends on configuration. Common providers include:
 | `@FrontendDeveloper` | Handles UI implementation with multimodal capabilities. | ollama-cloud/qwen3-coder:480b |
 | `@BackendDeveloper` | Backend specialist for Node. | ollama-cloud/deepseek-v4-pro |
 | `@GoDeveloper` | Go backend specialist for Gin, Echo, APIs, and database integration. | ollama-cloud/qwen3-coder:480b |
-| `@DevopsEngineer` | DevOps specialist for Docker, Kubernetes, CI/CD pipeline automation, and infrastructure management. | ollama-cloud/glm-5.1 |
+| `@DevopsEngineer` | DevOps specialist for Docker, Kubernetes, CI/CD pipeline automation, and infrastructure management. | ollama-cloud/kimi-k2.6 |
 | `@CodeSkeptic` | Adversarial code reviewer. | ollama-cloud/kimi-k2.6 |
-| `@TheFixer` | Iteratively fixes bugs based on specific error reports and test failures. | ollama-cloud/glm-5.1 |
-| `@PerformanceEngineer` | Reviews code for performance issues. | ollama-cloud/glm-5.1 |
+| `@TheFixer` | Iteratively fixes bugs based on specific error reports and test failures. | ollama-cloud/kimi-k2.6 |
+| `@PerformanceEngineer` | Reviews code for performance issues. | ollama-cloud/kimi-k2.6 |
 | `@SecurityAuditor` | Scans for security vulnerabilities, OWASP Top 10, dependency CVEs, and hardcoded secrets. | ollama-cloud/kimi-k2.6 |
-| `@VisualTester` | Visual regression testing agent that compares screenshots and detects UI differences using pixelmatch and image diff. | ollama-cloud/glm-5.1 |
+| `@VisualTester` | Visual regression testing agent that compares screenshots and detects UI differences using pixelmatch and image diff. | ollama-cloud/kimi-k2.6 |
 | `@Orchestrator` | Main dispatcher. | ollama-cloud/kimi-k2.6 |
 | `@ReleaseManager` | Manages git operations, semantic versioning, branching, and deployments. | ollama-cloud/kimi-k2.6 |
-| `@Evaluator` | Scores agent effectiveness after task completion for continuous improvement. | ollama-cloud/glm-5.1 |
-| `@PromptOptimizer` | Improves agent system prompts based on performance failures. | ollama-cloud/glm-5.1 |
+| `@Evaluator` | Scores agent effectiveness after task completion for continuous improvement. | ollama-cloud/kimi-k2.6 |
+| `@PromptOptimizer` | Improves agent system prompts based on performance failures. | ollama-cloud/kimi-k2.6 |
 | `@ProductOwner` | Manages issue checklists, status labels, tracks progress and coordinates with human users. | ollama-cloud/kimi-k2.6 |
 | `@AgentArchitect` | Creates, modifies, and reviews new agents, workflows, and skills based on capability gap analysis. | ollama-cloud/kimi-k2.6 |
 | `@CapabilityAnalyst` | Analyzes task requirements against available agents, workflows, and skills. | ollama-cloud/deepseek-v4-pro |
-| `@WorkflowArchitect` | Creates and maintains workflow definitions with complete architecture, Gitea integration, and quality gates. | ollama-cloud/glm-5.1 |
+| `@WorkflowArchitect` | Creates and maintains workflow definitions with complete architecture, Gitea integration, and quality gates. | ollama-cloud/kimi-k2.6 |
 | `@MarkdownValidator` | Validates and corrects Markdown descriptions for Gitea issues. | ollama-cloud/qwen3-coder:480b |
 | `@BrowserAutomation` | Browser automation agent using Playwright MCP for E2E testing, form filling, navigation, and web interaction. | ollama-cloud/kimi-k2.6 |
 | `@Planner` | Advanced task planner using Chain of Thought, Tree of Thoughts, and Plan-Execute-Reflect. | ollama-cloud/deepseek-v4-pro |
 | `@Reflector` | Self-reflection agent using Reflexion pattern - learns from mistakes. | ollama-cloud/kimi-k2.6 |
-| `@MemoryManager` | Manages agent memory systems - short-term (context), long-term (vector store), and episodic (experiences). | ollama-cloud/glm-5.1 |
+| `@MemoryManager` | Manages agent memory systems - short-term (context), long-term (vector store), and episodic (experiences). | ollama-cloud/kimi-k2.6 |
 | `@ArchitectIndexer` | Indexes and maps project codebase architecture into . | ollama-cloud/qwen3-coder:480b |
-| `@FlutterDeveloper` | Flutter mobile specialist for cross-platform apps, state management, and UI components. | ollama-cloud/glm-5.1 |
+| `@FlutterDeveloper` | Flutter mobile specialist for cross-platform apps, state management, and UI components. | ollama-cloud/kimi-k2.6 |
 | `@PhpDeveloper` | PHP specialist for Laravel, Symfony, WordPress, and modular architecture. | ollama-cloud/deepseek-v4-pro |
 | `@PipelineJudge` | Automated pipeline judge. | ollama-cloud/qwen3-coder:480b |
 | `@PythonDeveloper` | Python specialist for Django, FastAPI, data processing, and ML pipelines. | ollama-cloud/deepseek-v4-pro |
-| `@IncidentResponder` | Server incident response and system hardening specialist. | ollama-cloud/glm-5.1 |
+| `@IncidentResponder` | Server incident response and system hardening specialist. | ollama-cloud/kimi-k2.6 |
 | `@WorkflowCrossChecker` | Workflow cross-checker and process inspector. | ollama-cloud/qwen3-coder:480b |
 | `@EvolutionSkeptic` | Evaluates model responses against role-specific rubrics with detailed scoring and commentary. | ollama-cloud/qwen3-coder:480b |
 | `@EvolutionPrompt` | Generates role-specific stress-test prompts by analyzing agent definitions. | ollama-cloud/kimi-k2.6 |
@@ -484,12 +484,12 @@ Provider availability depends on configuration. Common providers include:
 | `/ask` | Answers codebase questions. | ollama-cloud/qwen3.5-122b |
 | `/debug` | Analyzes and fixes bugs. | ollama-cloud/gpt-oss:20b |
 | `/code` | Quick code generation. | ollama-cloud/deepseek-v4-pro |
-| `/research` | Run research and self-improvement. | ollama-cloud/glm-5 |
+| `/research` | Run research and self-improvement. | ollama-cloud/kimi-k2.6 |
 | `/feature` | Full feature development pipeline. | ollama-cloud/deepseek-v4-pro |
 | `/hotfix` | Hotfix workflow. | ollama-cloud/deepseek-v4-pro |
 | `/review` | Code review workflow. | ollama-cloud/kimi-k2.6 |
-| `/review-watcher` | Auto-validate review results. | ollama-cloud/glm-5 |
-| `/workflow` | Run complete workflow with quality gates. | ollama-cloud/glm-5 |
+| `/review-watcher` | Auto-validate review results. | ollama-cloud/kimi-k2.6 |
+| `/workflow` | Run complete workflow with quality gates. | ollama-cloud/kimi-k2.6 |
 | `/landing-page` | Create landing page CMS from HTML mockups. | ollama-cloud/kimi-k2.5 |
 | `/commerce` | Create e-commerce site with products, cart, payments. | ollama-cloud/deepseek-v4-pro |
 | `/blog` | Create blog/CMS with posts, comments, SEO. | ollama-cloud/deepseek-v4-pro |
diff --git a/.kilo/agents/devops-engineer.md b/.kilo/agents/devops-engineer.md
index 80984f0..bb4fbc4 100755
--- a/.kilo/agents/devops-engineer.md
+++ b/.kilo/agents/devops-engineer.md
@@ -1,7 +1,7 @@
 ---
 description: DevOps specialist for Docker, Kubernetes, CI/CD pipeline automation, and infrastructure management (GNS-2 Tier 1)
 mode: subagent
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 color: "#FF6B35"
 permission:
   read: allow
diff --git a/.kilo/agents/evaluator.md b/.kilo/agents/evaluator.md
index 1c130ba..b113834 100755
--- a/.kilo/agents/evaluator.md
+++ b/.kilo/agents/evaluator.md
@@ -1,7 +1,7 @@
 ---
 description: Scores agent effectiveness after task completion for continuous improvement. Tier 2 meta-agent with self-cascade enabled.
 mode: subagent
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 variant: thinking
 color: "#047857"
 permission:
diff --git a/.kilo/agents/flutter-developer.md b/.kilo/agents/flutter-developer.md
index 1f65c7d..113cd9c 100755
--- a/.kilo/agents/flutter-developer.md
+++ b/.kilo/agents/flutter-developer.md
@@ -1,7 +1,7 @@
 ---
 description: Flutter mobile specialist for cross-platform apps, state management, and UI components (GNS-2 Tier 1)
 mode: subagent
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 color: "#02569B"
 permission:
   read: allow
diff --git a/.kilo/agents/incident-responder.md b/.kilo/agents/incident-responder.md
index 7b54eec..54fe63d 100644
--- a/.kilo/agents/incident-responder.md
+++ b/.kilo/agents/incident-responder.md
@@ -1,7 +1,7 @@
 ---
 description: Server incident response and system hardening specialist. Handles live forensics, malware removal, persistence hunting, SSH-based server cleanup, and post-incident hardening. Works with any OS and panel.
 mode: subagent
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 color: "#B91C1C"
 permission:
   read: allow
diff --git a/.kilo/agents/memory-manager.md b/.kilo/agents/memory-manager.md
index a90a0e7..35afbe1 100755
--- a/.kilo/agents/memory-manager.md
+++ b/.kilo/agents/memory-manager.md
@@ -1,7 +1,7 @@
 ---
 description: Manages agent memory systems - short-term (context), long-term (vector store), and episodic (experiences) (GNS-2 Tier 0)
 mode: subagent
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 color: "#8B5CF6"
 permission:
   read: allow
diff --git a/.kilo/agents/performance-engineer.md b/.kilo/agents/performance-engineer.md
index 2222077..f35d70d 100755
--- a/.kilo/agents/performance-engineer.md
+++ b/.kilo/agents/performance-engineer.md
@@ -1,7 +1,7 @@
 ---
 description: Reviews code for performance issues. Focuses on efficiency, N+1 queries, memory leaks, and algorithmic complexity (GNS-2 Tier 0)
 mode: all
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 color: "#0D9488"
 permission:
   read: allow
diff --git a/.kilo/agents/prompt-optimizer.md b/.kilo/agents/prompt-optimizer.md
index 59f0696..2bb5685 100755
--- a/.kilo/agents/prompt-optimizer.md
+++ b/.kilo/agents/prompt-optimizer.md
@@ -1,7 +1,7 @@
 ---
 description: Improves agent system prompts based on performance failures. Meta-learner for prompt optimization (GNS-2 Tier 1)
 mode: subagent
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 color: "#BE185D"
 permission:
   read: allow
diff --git a/.kilo/agents/the-fixer.md b/.kilo/agents/the-fixer.md
index 0bae335..d3e0700 100755
--- a/.kilo/agents/the-fixer.md
+++ b/.kilo/agents/the-fixer.md
@@ -1,7 +1,7 @@
 ---
 description: Iteratively fixes bugs based on specific error reports and test failures (GNS-2 Tier 1)
 mode: all
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 color: "#F59E0B"
 permission:
   read: allow
diff --git a/.kilo/agents/visual-tester.md b/.kilo/agents/visual-tester.md
index 9ab05ae..94622d1 100755
--- a/.kilo/agents/visual-tester.md
+++ b/.kilo/agents/visual-tester.md
@@ -1,7 +1,7 @@
 ---
 description: Visual regression testing agent that compares screenshots and detects UI differences using pixelmatch and image diff (GNS-2 Tier 0)
 mode: subagent
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 color: "#E91E63"
 permission:
   read: allow
diff --git a/.kilo/agents/workflow-architect.md b/.kilo/agents/workflow-architect.md
index 595a477..d610c53 100755
--- a/.kilo/agents/workflow-architect.md
+++ b/.kilo/agents/workflow-architect.md
@@ -1,7 +1,7 @@
 ---
 description: Creates and maintains workflow definitions with complete architecture, Gitea integration, and quality gates (GNS-2 Tier 1)
 mode: subagent
-model: ollama-cloud/glm-5.1
+model: ollama-cloud/kimi-k2.6
 variant: thinking
 color: "#EC4899"
 permission:
diff --git a/.kilo/capability-index.yaml b/.kilo/capability-index.yaml
index a699c38..040955e 100644
--- a/.kilo/capability-index.yaml
+++ b/.kilo/capability-index.yaml
@@ -223,7 +223,7 @@ agents:
     forbidden:
     - backend_code
     - web_development
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     mode: subagent
     delegates_to:
     - code-skeptic
@@ -252,7 +252,7 @@ agents:
     - ci_cd_config
     forbidden:
     - application_code
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     mode: subagent
     delegates_to:
     - code-skeptic
@@ -261,7 +261,7 @@ agents:
     fallback_models:
     - ollama-cloud/kimi-k2.6
     - ollama-cloud/deepseek-v4-pro
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     failover_strategy: downgraded
     reasoning_effort: low
   sdet-engineer:
@@ -344,7 +344,7 @@ agents:
     fallback_models:
     - ollama-cloud/deepseek-v4-pro
     - ollama-cloud/kimi-k2.6
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     failover_strategy: downgraded
     reasoning_effort: high
   performance-engineer:
@@ -361,7 +361,7 @@ agents:
     - optimization_suggestions
     forbidden:
     - write_code
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     mode: subagent
     delegates_to:
     - the-fixer
@@ -369,7 +369,7 @@ agents:
     - orchestrator
     fallback_models:
     - ollama-cloud/deepseek-v4-pro
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     - ollama-cloud/kimi-k2.6
     failover_strategy: downgraded
     reasoning_effort: medium
@@ -386,7 +386,7 @@ agents:
     - resolution_notes
     forbidden:
     - feature_development
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     mode: subagent
     delegates_to:
     - code-skeptic
@@ -451,7 +451,7 @@ agents:
     - gitea_attachments
     forbidden:
     - code_changes
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     mode: subagent
     delegates_to:
     - the-fixer
@@ -482,7 +482,7 @@ agents:
     mode: subagent
     delegates_to: []
     fallback_models:
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     - ollama-cloud/deepseek-v4-pro
     - ollama-cloud/kimi-k2.6
     failover_strategy: downgraded
@@ -563,7 +563,7 @@ agents:
     - agent-architect
     - architect-indexer
     fallback_models:
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     - ollama-cloud/deepseek-v4-pro
     - groq/llama-3.1-8b-instant
     - openrouter/qwen/qwen3.6-plus:free
@@ -593,7 +593,7 @@ agents:
     - ollama-cloud/deepseek-v4-pro
     - ollama-cloud/kimi-k2.6
     - groq/llama-3.1-8b-instant
-    - ollama-cloud/glm-5
+    - ollama-cloud/kimi-k2.6
     failover_strategy: downgraded
     reasoning_effort: low
   evaluator:
@@ -611,7 +611,7 @@ agents:
     - recommendations
     forbidden:
     - code_changes
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     variant: thinking
     mode: subagent
     delegates_to:
@@ -637,7 +637,7 @@ agents:
     - optimization_report
     forbidden:
     - agent_creation
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     variant: instant
     mode: subagent
     delegates_to: []
@@ -666,7 +666,7 @@ agents:
     mode: subagent
     delegates_to: []
     fallback_models:
-    - ollama-cloud/glm-5
+    - ollama-cloud/kimi-k2.6
     - openrouter/qwen/qwen3.6-plus:free
     - groq/llama-3.1-8b-instant
     - ollama-cloud/deepseek-v4-pro
@@ -712,7 +712,7 @@ agents:
     - command_files
     forbidden:
     - execution
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     variant: thinking
     mode: subagent
     delegates_to: []
@@ -740,7 +740,7 @@ agents:
     - orchestrator
     fallback_models:
     - ollama-cloud/deepseek-v4-pro
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     - groq/llama-3.1-8b-instant
     - ollama/qwen3.5-122b
     failover_strategy: speed-burst
@@ -793,7 +793,7 @@ agents:
     fallback_models:
     - ollama-cloud/deepseek-v4-pro
     - ollama-cloud/kimi-k2.6
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     failover_strategy: downgraded
     reasoning_effort: xhigh
   reflector:
@@ -818,7 +818,7 @@ agents:
     delegates_to: []
     fallback_models:
     - ollama-cloud/deepseek-v4-pro
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     - openrouter/qwen/qwen3.6-plus:free
     failover_strategy: downgraded
     reasoning_effort: medium
@@ -839,13 +839,13 @@ agents:
     forbidden:
     - code_changes
     - implementation
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     mode: subagent
     delegates_to: []
     fallback_models:
     - openrouter/qwen/qwen3.6-plus:free
     - ollama-cloud/deepseek-v4-pro
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     failover_strategy: downgraded
     reasoning_effort: low
   architect-indexer:
@@ -884,7 +884,7 @@ agents:
     - orchestrator
     fallback_models:
     - ollama-cloud/kimi-k2.6
-    - ollama-cloud/glm-5
+    - ollama-cloud/kimi-k2.6
     - openrouter/qwen/qwen3.6-plus:free
     failover_strategy: downgraded
     reasoning_effort: low
@@ -911,7 +911,7 @@ agents:
     forbidden:
     - code_writing
     - implementation
-    model: ollama-cloud/glm-5.1
+    model: ollama-cloud/kimi-k2.6
     mode: subagent
     delegates_to:
     - orchestrator
@@ -919,7 +919,7 @@ agents:
     - planner
     fallback_models:
     - ollama-cloud/deepseek-v4-pro
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     - ollama-cloud/kimi-k2.6
     failover_strategy: downgraded
     reasoning_effort: high
@@ -948,7 +948,7 @@ agents:
     fallback_models:
     - ollama-cloud/deepseek-v4-pro
     - ollama-cloud/kimi-k2.6
-    - ollama-cloud/glm-5.1
+    - ollama-cloud/kimi-k2.6
     - ollama-cloud/qwen3-coder:480b
     failover_strategy: downgraded
     reasoning_effort: high
diff --git a/.kilo/milestone-78.md b/.kilo/milestone-78.md
new file mode 100644
index 0000000..2a0731b
--- /dev/null
+++ b/.kilo/milestone-78.md
@@ -0,0 +1,48 @@
+# Milestone 78: [Контроль качества] Остановить трэшинг, единый источник правды
+
+**Created:** 2026-05-28T14:36:00Z
+**Repository:** https://git.softuniq.eu/UniqueSoft/APAW
+**Milestone ID:** 78
+
+## Цель
+Прекратить хаос миграции моделей (4 дня, ~20 коммитов, противоречивые переназначения) и создать контролируемый, воспроизводимый процесс эволюции агентской системы.
+
+## Проблемы, которые решаем
+- Модельный трэшинг: 3 исследования дали противоречивые результаты за 72 часа
+- 51% коммитов — фиксы самопорожденных проблем
+- 7 файлов требуют ручного редактирования при одном изменении модели
+- Дашборд поглощает ресурсы, не принося пользы ядру
+- Захардкоженный API-ключ в production-скрипте
+
+## Issues
+
+| # | Issue | Priority | Est. | Assignee |
+|---|-------|----------|------|----------|
+| 123 | Удалить USE_MOCK и захардкоженный API-ключ | 🔴 Critical | 15 min | @security-auditor |
+| 124 | Сделать workflow-cross-checker блокирующим | 🟠 High | 30 min | @lead-developer |
+| 125 | Единый источник правды — pre-commit auto-sync | 🔴 Critical | 30 min | @lead-developer |
+| 126 | Перейти на эмпирическое назначение моделей | 🟠 High | 45 min | @system-analyst |
+| 127 | Заморозить дашборд — мораторий | 🟠 High | 5 min | @product-owner |
+| 128 | Удалить bloat | 🟡 Medium | 20 min | @release-manager |
+
+## Execution Order (зависимости)
+
+```
+Issue 127 (dashboard freeze) ─┬─→ Issue 125 (single source of truth)
+                              │     → Issue 124 (blocking cross-checker)
+                              │     → Issue 123 (remove mock + key)
+                              └────→ Issue 126 (empirical assignment)
+                                         → Issue 128 (remove bloat)
+```
+
+## Метрики успеха
+- [ ] 0 противоречивых миграций за спринт
+- [ ] 1 коммит = 1 атомарная миграция (все производные файлы авто-сгенерированы)
+- [ ] 100% агентов назначены по реальным pipeline-данным (fitness-history.jsonl)
+- [ ] Дашборд заморожен (0 feature-коммитов)
+- [ ] workflow-cross-checker блокирует коммит при конфигурационном дрейфе
+
+## Context Budget Impact
+- Эстимейт всего milestone: ~2.5 часа focused work
+- Текущий трэшинг: 40 коммитов × ~30 мин = 20 часов на прошлой неделе
+- ROI: 20 часов трэшинга → 2.5 часа структурных фиксов = **8× экономия**
diff --git a/.kilo/rules/dashboard-moratorium.md b/.kilo/rules/dashboard-moratorium.md
new file mode 100644
index 0000000..d5266ce
--- /dev/null
+++ b/.kilo/rules/dashboard-moratorium.md
@@ -0,0 +1,30 @@
+# Dashboard Moratorium Rule
+
+## Status: FROZEN
+
+Effective: 2026-05-28
+
+## What is Blocked
+
+Any changes to `agent-evolution/` that add or modify dashboard features:
+- New tabs, graphs, modals, or visualizations
+- New API endpoints serving dashboard data
+- Chart.js / styling updates
+- UX "improvements"
+
+## What is Allowed
+
+- Critical security fixes blocking CI
+- Fixes blocking `dev` branch from building/running
+
+## Rationale
+
+The dashboard consumed 37% of all commits with zero external users.
+Re-evaluation planned after resolution of Issue #1 and Issue #4.
+
+## Thaw Condition
+
+Explicit解除 freeze requires:
+- Minimum 2 external active users
+- Passing E2E tests
+- Approval from @orchestrator
diff --git a/.kilo/session-handoff.md b/.kilo/session-handoff.md
new file mode 100644
index 0000000..a520960
--- /dev/null
+++ b/.kilo/session-handoff.md
@@ -0,0 +1,45 @@
+# Session Handoff: Milestone 78 Execution
+
+## Как начать следующую сессию (копируйте этот промпт)
+
+```
+Начни выполнение Milestone 78: "[Контроль качества] Остановить трэшинг, единый источник правды".
+
+Gitea API уже настроен:
+- GITEA_API_URL=https://git.softuniq.eu/api/v1
+- GITEA_TOKEN=04cb0fff6bfa6ce2f0d481fce088c9ac2c65383f
+- GITEA_USER=NW
+- GITEA_PASS=eshkink0t
+- Target repo: UniqueSoft/APAW
+- Milestone ID: 78
+
+Порядок выполнения (строгий):
+1. Issue #127 — заморозить дашборд (мораторий, label dashboard::frozen)
+2. Issue #125 — единый источник правды (pre-commit hook для auto-sync из kilo-meta.json)
+3. Issue #124 — сделать workflow-cross-checker блокирующим (pre-commit/CI gate)
+4. Issue #123 — удалить USE_MOCK и захардкоженный API-ключ (security-auditor + the-fixer)
+5. Issue #126 — перейти на эмпирическое назначение моделей (fitness-history.jsonl)
+6. Issue #128 — удалить bloat (archive landing/, agent-evolution/, PNG baselines)
+
+Каждый issue — атомарная задача. Завершил один — переходи к следующему.
+Не добавляй scope. Не трогай дашборд. Не меняй модели без empirical валидации.
+
+Проверь .kilo/milestone-78.md перед стартом.
+```
+
+## Файлы для следующей сессии
+
+| Файл | Назначение |
+|------|-----------|
+| `.kilo/milestone-78.md` | Полное описание milestone + issues |
+| `.kilo/session-handoff.md` | Этот файл — промпт для старта |
+| `.env` | Gitea API credentials (gitignored) |
+
+## Issues в Gitea
+
+- #123 (security): https://git.softuniq.eu/UniqueSoft/APAW/issues/123
+- #124 (cross-checker): https://git.softuniq.eu/UniqueSoft/APAW/issues/124
+- #125 (single source): https://git.softuniq.eu/UniqueSoft/APAW/issues/125
+- #126 (empirical): https://git.softuniq.eu/UniqueSoft/APAW/issues/126
+- #127 (dashboard freeze): https://git.softuniq.eu/UniqueSoft/APAW/issues/127
+- #128 (bloat removal): https://git.softuniq.eu/UniqueSoft/APAW/issues/128
diff --git a/SINGLE_SOURCE_OF_TRUTH.md b/SINGLE_SOURCE_OF_TRUTH.md
new file mode 100644
index 0000000..8455af6
--- /dev/null
+++ b/SINGLE_SOURCE_OF_TRUTH.md
@@ -0,0 +1,58 @@
+# Single Source of Truth: Agent Definitions
+
+**Source of truth**: `kilo-meta.json`
+
+All other files are **auto-generated derivatives**. Never edit them by hand.
+
+## Derivative Files
+
+| File | Generator | Notes |
+|------|-----------|-------|
+| `.kilo/agents/*.md` | `scripts/sync-agents.cjs --fix` | Frontmatter fields synced |
+| `.kilo/KILO_SPEC.md` | `scripts/sync-agents.cjs --fix` | Pipeline Agents + Workflow Commands tables |
+| `AGENTS.md` | `scripts/sync-agents.cjs --fix` | Category tables |
+| `kilo.jsonc` | `.git/hooks/pre-commit` | Agent `description`, `mode`, `model`, `color` |
+| `.kilo/capability-index.yaml` | `.git/hooks/pre-commit` | `model` field per agent block |
+
+## Workflow
+
+1. Edit **only** `kilo-meta.json`.
+2. Stage your changes: `git add kilo-meta.json`
+3. Commit: `git commit`
+4. The pre-commit hook auto-generates derivatives and blocks the commit if anything changed.
+5. If the hook printed:
+   ```
+   Pre-commit checks passed.
+   ```
+   then the derivatives were already in sync or have been staged automatically by the hook.
+
+   If the hook printed:
+   ```
+   ERROR: Derivative files are out of sync.
+   ```
+   then changes were written to disk by the hook. Simply run:
+   ```bash
+   git add -A
+   git commit
+   ```
+   (Re-running commit is fine; the second run will see no new diffs and succeed.)
+
+## Validation
+
+The hook enforces:
+- YAML frontmatter `color` is double-quoted and starts with `"#`
+- `mode` is `subagent` or `all`
+- `model` exists in `kilo-meta.json`
+- `description` is non-empty
+- `permission` block contains all 7 required keys
+- Fallback model aliases in `capability-index.yaml` are checked (warnings only)
+- No uncommitted diffs remain after generation (commit blocked if so)
+
+## Manual One-Shot
+
+If you need to force-regenerate all derivatives without committing:
+
+```bash
+node scripts/sync-agents.cjs --fix
+python3 .git/hooks/pre-commit      # idempotent
+```
diff --git a/kilo-meta.json b/kilo-meta.json
index 9da01cc..c180ccf 100644
--- a/kilo-meta.json
+++ b/kilo-meta.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://app.kilo.ai/config.json",
   "metaVersion": "1.0.0",
-  "lastSync": "2026-05-28T12:44:21.540Z",
+  "lastSync": "2026-06-01T10:47:18.047Z",
   "agents": {
     "requirement-refiner": {
       "file": ".kilo/agents/requirement-refiner.md",
@@ -68,7 +68,7 @@
     "devops-engineer": {
       "file": ".kilo/agents/devops-engineer.md",
       "description": "DevOps specialist for Docker, Kubernetes, CI/CD pipeline automation, and infrastructure management",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "subagent",
       "color": "#FF6B35",
       "category": "core"
@@ -84,7 +84,7 @@
     "the-fixer": {
       "file": ".kilo/agents/the-fixer.md",
       "description": "Iteratively fixes bugs based on specific error reports and test failures",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "all",
       "color": "#F59E0B",
       "category": "quality"
@@ -92,7 +92,7 @@
     "performance-engineer": {
       "file": ".kilo/agents/performance-engineer.md",
       "description": "Reviews code for performance issues. Focuses on efficiency, N+1 queries, memory leaks, and algorithmic complexity",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "all",
       "color": "#0D9488",
       "category": "quality"
@@ -108,7 +108,7 @@
     "visual-tester": {
       "file": ".kilo/agents/visual-tester.md",
       "description": "Visual regression testing agent that compares screenshots and detects UI differences using pixelmatch and image diff",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "subagent",
       "category": "quality"
     },
@@ -130,7 +130,7 @@
     "evaluator": {
       "file": ".kilo/agents/evaluator.md",
       "description": "Scores agent effectiveness after task completion for continuous improvement",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "subagent",
       "color": "#047857",
       "category": "meta"
@@ -138,7 +138,7 @@
     "prompt-optimizer": {
       "file": ".kilo/agents/prompt-optimizer.md",
       "description": "Improves agent system prompts based on performance failures. Meta-learner for prompt optimization",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "subagent",
       "category": "meta"
     },
@@ -166,7 +166,7 @@
     "workflow-architect": {
       "file": ".kilo/agents/workflow-architect.md",
       "description": "Creates and maintains workflow definitions with complete architecture, Gitea integration, and quality gates",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "subagent",
       "category": "meta"
     },
@@ -203,7 +203,7 @@
     "memory-manager": {
       "file": ".kilo/agents/memory-manager.md",
       "description": "Manages agent memory systems - short-term (context), long-term (vector store), and episodic (experiences)",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "subagent",
       "color": "#8B5CF6",
       "category": "cognitive"
@@ -219,7 +219,7 @@
     "flutter-developer": {
       "file": ".kilo/agents/flutter-developer.md",
       "description": "Flutter mobile specialist for cross-platform apps, state management, and UI components",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "subagent",
       "color": "#02569B",
       "category": "core"
@@ -251,7 +251,7 @@
     "incident-responder": {
       "file": ".kilo/agents/incident-responder.md",
       "description": "Server incident response and system hardening specialist. Handles live forensics, malware removal, persistence hunting, SSH-based server cleanup, and post-incident hardening. Works with any OS and panel.",
-      "model": "ollama-cloud/glm-5.1",
+      "model": "ollama-cloud/kimi-k2.6",
       "mode": "subagent",
       "color": "#B91C1C",
       "category": "core"
@@ -319,7 +319,7 @@
     "research": {
       "file": ".kilo/commands/research.md",
       "description": "Run research and self-improvement",
-      "model": "ollama-cloud/glm-5"
+      "model": "ollama-cloud/kimi-k2.6"
     },
     "feature": {
       "file": ".kilo/commands/feature.md",
@@ -339,7 +339,7 @@
     "review-watcher": {
       "file": ".kilo/commands/review-watcher.md",
       "description": "Auto-validate review results",
-      "model": "ollama-cloud/glm-5"
+      "model": "ollama-cloud/kimi-k2.6"
     },
     "e2e-test": {
       "file": ".kilo/commands/e2e-test.md",
@@ -348,7 +348,7 @@
     "workflow": {
       "file": ".kilo/commands/workflow.md",
       "description": "Run complete workflow with quality gates",
-      "model": "ollama-cloud/glm-5"
+      "model": "ollama-cloud/kimi-k2.6"
     },
     "landing-page": {
       "file": ".kilo/commands/landing-page.md",
diff --git a/kilo.jsonc b/kilo.jsonc
index 003d180..8e44645 100644
--- a/kilo.jsonc
+++ b/kilo.jsonc
@@ -20,523 +20,565 @@
     ]
   },
   "agent": {
-    "requirement-refiner": {
-      "description": "Converts vague ideas and bug reports into strict User Stories with acceptance criteria checklists",
-      "mode": "all",
+      "requirement-refiner": {
+        "description": "Converts vague ideas and bug reports into strict User Stories with acceptance criteria checklists",
+        "mode": "all",
         "model": "ollama-cloud/qwen3-coder:480b",
-      "color": "#4F46E5",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "history-miner": "allow",
-          "system-analyst": "allow",
-          "subagent": "deny"
+        "color": "#4F46E5",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "history-miner": "allow",
+            "system-analyst": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "history-miner": {
-      "description": "Analyzes git history to find duplicates and past solutions, preventing regression and duplicate work",
-      "mode": "subagent",
+      },
+      "history-miner": {
+        "description": "Analyzes git history to find duplicates and past solutions, preventing regression and duplicate work",
+        "mode": "subagent",
         "model": "ollama-cloud/kimi-k2.6",
-      "permission": {
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+        "permission": {
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "system-analyst": {
-      "description": "Designs technical specifications, data schemas, and API contracts before implementation",
-      "mode": "subagent",
-      "model": "ollama-cloud/glm-5.1",
-      "permission": {
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
-        }
-      }
-    },
-    "sdet-engineer": {
-      "description": "Writes tests following TDD methodology. Tests MUST fail initially (Red phase)",
-      "mode": "all",
+      },
+      "system-analyst": {
+        "description": "Designs technical specifications, data schemas, and API contracts before implementation",
+        "mode": "subagent",
         "model": "ollama-cloud/kimi-k2.6",
-      "color": "#8B5CF6",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "lead-developer": "allow",
-          "subagent": "deny"
+        "permission": {
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "lead-developer": {
-      "description": "Primary code writer for backend and core logic. Writes implementation to pass tests",
-      "mode": "subagent",
+      },
+      "sdet-engineer": {
+        "description": "Writes tests following TDD methodology. Tests MUST fail initially (Red phase)",
+        "mode": "all",
         "model": "ollama-cloud/kimi-k2.6",
-      "color": "#DC2626",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "code-skeptic": "allow",
-          "subagent": "deny"
+        "color": "#8B5CF6",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "lead-developer": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "frontend-developer": {
-      "description": "Handles UI implementation with multimodal capabilities. Accepts visual references like screenshots and mockups",
-      "mode": "all",
+      },
+      "lead-developer": {
+        "description": "Primary code writer for backend and core logic. Writes implementation to pass tests",
+        "mode": "subagent",
         "model": "ollama-cloud/kimi-k2.6",
-      "color": "#0EA5E9",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "code-skeptic": "allow",
-          "subagent": "deny"
+        "color": "#DC2626",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "code-skeptic": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "backend-developer": {
-      "description": "Backend specialist for Node.js, Express, APIs, and database integration",
-      "mode": "subagent",
+      },
+      "frontend-developer": {
+        "description": "Handles UI implementation with multimodal capabilities. Accepts visual references like screenshots and mockups",
+        "mode": "all",
+        "model": "ollama-cloud/qwen3-coder:480b",
+        "color": "#0EA5E9",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "code-skeptic": "allow",
+            "subagent": "deny"
+          }
+        }
+      },
+      "backend-developer": {
+        "description": "Backend specialist for Node.js, Express, APIs, and database integration",
+        "mode": "subagent",
         "model": "ollama-cloud/deepseek-v4-pro",
-      "color": "#10B981",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "code-skeptic": "allow",
-          "subagent": "deny"
+        "color": "#10B981",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "code-skeptic": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "go-developer": {
-      "description": "Go backend specialist for Gin, Echo, APIs, and database integration",
-      "mode": "subagent",
+      },
+      "go-developer": {
+        "description": "Go backend specialist for Gin, Echo, APIs, and database integration",
+        "mode": "subagent",
         "model": "ollama-cloud/qwen3-coder:480b",
-      "color": "#00ADD8",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "code-skeptic": "allow",
-          "subagent": "deny"
+        "color": "#00ADD8",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "code-skeptic": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "devops-engineer": {
-      "description": "DevOps specialist for Docker, Kubernetes, CI/CD pipeline automation, and infrastructure management",
-      "mode": "subagent",
-        "model": "ollama-cloud/glm-5.1",
-      "color": "#FF6B35",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "code-skeptic": "allow",
-          "security-auditor": "allow",
-          "subagent": "deny"
-        }
-      }
-    },
-    "code-skeptic": {
-      "description": "Adversarial code reviewer. Finds problems and issues. Does NOT suggest implementations",
-      "mode": "subagent",
+      },
+      "devops-engineer": {
+        "description": "DevOps specialist for Docker, Kubernetes, CI/CD pipeline automation, and infrastructure management",
+        "mode": "subagent",
         "model": "ollama-cloud/kimi-k2.6",
-      "color": "#E11D48",
-      "permission": {
-        "read": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "the-fixer": "allow",
-          "performance-engineer": "allow",
-          "subagent": "deny"
+        "color": "#FF6B35",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "code-skeptic": "allow",
+            "security-auditor": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "the-fixer": {
-      "description": "Iteratively fixes bugs based on specific error reports and test failures",
-      "mode": "all",
-        "model": "ollama-cloud/glm-5.1",
-      "color": "#F59E0B",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "code-skeptic": "allow",
-          "orchestrator": "allow",
-          "subagent": "deny"
-        }
-      }
-    },
-    "performance-engineer": {
-      "description": "Reviews code for performance issues. Focuses on efficiency, N+1 queries, memory leaks, and algorithmic complexity",
-      "mode": "all",
-      "model": "ollama-cloud/kimi-k2.6",
-      "color": "#0D9488",
-      "permission": {
-        "read": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "the-fixer": "allow",
-          "security-auditor": "allow",
-          "subagent": "deny"
-        }
-      }
-    },
-    "security-auditor": {
-      "description": "Scans for security vulnerabilities, OWASP Top 10, dependency CVEs, and hardcoded secrets",
-      "mode": "subagent",
-      "model": "ollama-cloud/kimi-k2.6",
-      "color": "#DC2626",
-      "permission": {
-        "read": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "the-fixer": "allow",
-          "release-manager": "allow",
-          "subagent": "deny"
-        }
-      }
-    },
-    "visual-tester": {
-      "description": "Visual regression testing agent that compares screenshots and detects UI differences using pixelmatch and image diff",
-      "mode": "subagent",
+      },
+      "code-skeptic": {
+        "description": "Adversarial code reviewer. Finds problems and issues. Does NOT suggest implementations",
+        "mode": "subagent",
         "model": "ollama-cloud/kimi-k2.6",
-      "permission": {
-        "read": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+        "color": "#E11D48",
+        "permission": {
+          "read": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "the-fixer": "allow",
+            "performance-engineer": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "orchestrator": {
-      "description": "Main dispatcher. Routes tasks between agents based on Issue status and manages the workflow state machine",
-      "mode": "all",
-      "model": "ollama-cloud/kimi-k2.6",
-      "color": "#7C3AED",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "ask",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "history-miner": "allow",
-          "system-analyst": "allow",
-          "sdet-engineer": "allow",
-          "lead-developer": "allow",
-          "code-skeptic": "allow",
-          "the-fixer": "allow",
-          "performance-engineer": "allow",
-          "security-auditor": "allow",
-          "release-manager": "allow",
-          "evaluator": "allow",
-          "prompt-optimizer": "allow",
-          "product-owner": "allow",
-          "requirement-refiner": "allow",
-          "frontend-developer": "allow",
-          "browser-automation": "allow",
-          "visual-tester": "allow",
-          "planner": "allow",
-          "reflector": "allow",
-          "memory-manager": "allow",
-          "devops-engineer": "allow",
-          "subagent": "deny"
+      },
+      "the-fixer": {
+        "description": "Iteratively fixes bugs based on specific error reports and test failures",
+        "mode": "all",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#F59E0B",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "code-skeptic": "allow",
+            "orchestrator": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "release-manager": {
-      "description": "Manages git operations, semantic versioning, branching, and deployments. Ensures clean history",
-      "mode": "subagent",
-        "model": "ollama-cloud/glm-5.1",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "ask",
-        "glob": "allow",
-        "grep": "allow",
-        "webfetch": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "performance-engineer": {
+        "description": "Reviews code for performance issues. Focuses on efficiency, N+1 queries, memory leaks, and algorithmic complexity",
+        "mode": "all",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#0D9488",
+        "permission": {
+          "read": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "the-fixer": "allow",
+            "security-auditor": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "evaluator": {
-      "description": "Scores agent effectiveness after task completion for continuous improvement",
-      "mode": "subagent",
-      "model": "ollama-cloud/glm-5.1",
-      "color": "#047857",
-      "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "prompt-optimizer": "allow",
-          "product-owner": "allow",
-          "subagent": "deny"
+      },
+      "security-auditor": {
+        "description": "Scans for security vulnerabilities, OWASP Top 10, dependency CVEs, and hardcoded secrets",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#DC2626",
+        "permission": {
+          "read": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "the-fixer": "allow",
+            "release-manager": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "prompt-optimizer": {
-      "description": "Improves agent system prompts based on performance failures. Meta-learner for prompt optimization",
-      "mode": "subagent",
-      "model": "ollama-cloud/glm-5.1",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "visual-tester": {
+        "description": "Visual regression testing agent that compares screenshots and detects UI differences using pixelmatch and image diff",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "permission": {
+          "read": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "product-owner": {
-      "description": "Manages issue checklists, status labels, tracks progress and coordinates with human users",
-      "mode": "subagent",
-      "model": "ollama-cloud/glm-5.1",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "webfetch": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "orchestrator": {
+        "description": "Main dispatcher. Routes tasks between agents based on Issue status and manages the workflow state machine",
+        "mode": "all",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#7C3AED",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "ask",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "history-miner": "allow",
+            "system-analyst": "allow",
+            "sdet-engineer": "allow",
+            "lead-developer": "allow",
+            "code-skeptic": "allow",
+            "the-fixer": "allow",
+            "performance-engineer": "allow",
+            "security-auditor": "allow",
+            "release-manager": "allow",
+            "evaluator": "allow",
+            "prompt-optimizer": "allow",
+            "product-owner": "allow",
+            "requirement-refiner": "allow",
+            "frontend-developer": "allow",
+            "browser-automation": "allow",
+            "visual-tester": "allow",
+            "planner": "allow",
+            "reflector": "allow",
+            "memory-manager": "allow",
+            "devops-engineer": "allow",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "agent-architect": {
-      "description": "Creates, modifies, and reviews new agents, workflows, and skills based on capability gap analysis",
-      "mode": "subagent",
-      "model": "ollama-cloud/kimi-k2.6",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "release-manager": {
+        "description": "Manages git operations, semantic versioning, branching, and deployments. Ensures clean history",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "ask",
+          "glob": "allow",
+          "grep": "allow",
+          "webfetch": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "capability-analyst": {
-      "description": "Analyzes task requirements against available agents, workflows, and skills. Identifies gaps and recommends new components.",
-      "mode": "subagent",
+      },
+      "evaluator": {
+        "description": "Scores agent effectiveness after task completion for continuous improvement",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#047857",
+        "permission": {
+          "read": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "prompt-optimizer": "allow",
+            "product-owner": "allow",
+            "subagent": "deny"
+          }
+        }
+      },
+      "prompt-optimizer": {
+        "description": "Improves agent system prompts based on performance failures. Meta-learner for prompt optimization",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
+        }
+      },
+      "product-owner": {
+        "description": "Manages issue checklists, status labels, tracks progress and coordinates with human users",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "webfetch": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
+        }
+      },
+      "agent-architect": {
+        "description": "Creates, modifies, and reviews new agents, workflows, and skills based on capability gap analysis",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
+        }
+      },
+      "capability-analyst": {
+        "description": "Analyzes task requirements against available agents, workflows, and skills. Identifies gaps and recommends new components.",
+        "mode": "subagent",
         "model": "ollama-cloud/deepseek-v4-pro",
-      "permission": {
-        "read": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+        "permission": {
+          "read": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "workflow-architect": {
-      "description": "Creates and maintains workflow definitions with complete architecture, Gitea integration, and quality gates",
-      "mode": "subagent",
-      "model": "ollama-cloud/glm-5.1",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "workflow-architect": {
+        "description": "Creates and maintains workflow definitions with complete architecture, Gitea integration, and quality gates",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "markdown-validator": {
-      "description": "Validates and corrects Markdown descriptions for Gitea issues",
-      "mode": "subagent",
+      },
+      "markdown-validator": {
+        "description": "Validates and corrects Markdown descriptions for Gitea issues",
+        "mode": "subagent",
         "model": "ollama-cloud/qwen3-coder:480b",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "browser-automation": {
-      "description": "Browser automation agent using Playwright MCP for E2E testing, form filling, navigation, and web interaction",
-      "mode": "subagent",
-      "model": "ollama-cloud/qwen3-coder:480b",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "browser-automation": {
+        "description": "Browser automation agent using Playwright MCP for E2E testing, form filling, navigation, and web interaction",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "planner": {
-      "description": "Advanced task planner using Chain of Thought, Tree of Thoughts, and Plan-Execute-Reflect",
-      "mode": "subagent",
-      "model": "ollama-cloud/deepseek-v4-pro",
-      "color": "#F59E0B",
-      "permission": {
-        "read": "allow",
-        "write": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "planner": {
+        "description": "Advanced task planner using Chain of Thought, Tree of Thoughts, and Plan-Execute-Reflect",
+        "mode": "subagent",
+        "model": "ollama-cloud/deepseek-v4-pro",
+        "color": "#F59E0B",
+        "permission": {
+          "read": "allow",
+          "write": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "reflector": {
-      "description": "Self-reflection agent using Reflexion pattern - learns from mistakes",
-      "mode": "subagent",
-      "model": "ollama-cloud/deepseek-v4-pro",
-      "color": "#10B981",
-      "permission": {
-        "read": "allow",
-        "grep": "allow",
-        "glob": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "reflector": {
+        "description": "Self-reflection agent using Reflexion pattern - learns from mistakes",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#10B981",
+        "permission": {
+          "read": "allow",
+          "grep": "allow",
+          "glob": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "memory-manager": {
-      "description": "Manages agent memory systems - short-term (context), long-term (vector store), and episodic (experiences)",
-      "mode": "subagent",
-      "model": "ollama-cloud/qwen3.6-plus",
-      "color": "#8B5CF6",
-      "permission": {
-        "read": "allow",
-        "write": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+      },
+      "memory-manager": {
+        "description": "Manages agent memory systems - short-term (context), long-term (vector store), and episodic (experiences)",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#8B5CF6",
+        "permission": {
+          "read": "allow",
+          "write": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
         }
-      }
-    },
-    "incident-responder": {
-      "description": "Server incident response and system hardening specialist. Handles live forensics, malware removal, persistence hunting, SSH-based server cleanup, and post-incident hardening. Works with any OS and panel.",
-      "mode": "subagent",
-        "model": "ollama-cloud/glm-5.1",
-      "color": "#B91C1C",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "allow",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "code-skeptic": "allow",
-          "orchestrator": "allow",
-          "subagent": "deny"
-        }
-      }
-    },
-    "workflow-cross-checker": {
-      "description": "Workflow cross-checker and process inspector. Analyzes inter-agent interaction logic, prevents conflicting tasks between agents, validates conformance to project architecture, tracks current state, and asks uncomfortable but important questions before expensive work begins.",
-      "mode": "subagent",
+      },
+      "architect-indexer": {
+        "description": "Indexes and maps project codebase architecture into .architect/ directory",
+        "mode": "subagent",
         "model": "ollama-cloud/qwen3-coder:480b",
-      "color": "#9333EA",
-      "variant": "thinking",
-      "permission": {
-        "read": "allow",
-        "edit": "allow",
-        "write": "allow",
-        "bash": "ask",
-        "glob": "allow",
-        "grep": "allow",
-        "task": {
-          "*": "deny",
-          "subagent": "deny"
+        "color": "#10B981"
+      },
+      "flutter-developer": {
+        "description": "Flutter mobile specialist for cross-platform apps, state management, and UI components",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#02569B"
+      },
+      "php-developer": {
+        "description": "PHP specialist for Laravel, Symfony, WordPress, and modular architecture",
+        "mode": "subagent",
+        "model": "ollama-cloud/deepseek-v4-pro",
+        "color": "#8B5CF6"
+      },
+      "pipeline-judge": {
+        "description": "Automated pipeline judge. Evaluates workflow execution by running tests, measuring token cost and wall-clock time. Produces objective fitness scores. Never writes code - only measures and scores.",
+        "mode": "subagent",
+        "model": "ollama-cloud/qwen3-coder:480b",
+        "color": "#DC2626"
+      },
+      "python-developer": {
+        "description": "Python specialist for Django, FastAPI, data processing, and ML pipelines",
+        "mode": "subagent",
+        "model": "ollama-cloud/deepseek-v4-pro",
+        "color": "#3776AB"
+      },
+      "incident-responder": {
+        "description": "Server incident response and system hardening specialist. Handles live forensics, malware removal, persistence hunting, SSH-based server cleanup, and post-incident hardening. Works with any OS and panel.",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#B91C1C",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "allow",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "code-skeptic": "allow",
+            "orchestrator": "allow",
+            "subagent": "deny"
+          }
         }
+      },
+      "workflow-cross-checker": {
+        "description": "Workflow cross-checker and process inspector. Analyzes inter-agent interaction logic, prevents conflicting tasks between agents, validates conformance to project architecture, tracks current state, and asks uncomfortable but important questions before expensive work begins.",
+        "mode": "subagent",
+        "model": "ollama-cloud/qwen3-coder:480b",
+        "color": "#9333EA",
+        "variant": "thinking",
+        "permission": {
+          "read": "allow",
+          "edit": "allow",
+          "write": "allow",
+          "bash": "ask",
+          "glob": "allow",
+          "grep": "allow",
+          "task": {
+            "*": "deny",
+            "subagent": "deny"
+          }
+        }
+      },
+      "evolution-skeptic": {
+        "description": "Evaluates model responses against role-specific rubrics with detailed scoring and commentary",
+        "mode": "subagent",
+        "model": "ollama-cloud/qwen3-coder:480b",
+        "color": "#C026D3"
+      },
+      "evolution-prompt": {
+        "description": "Generates role-specific stress-test prompts by analyzing agent definitions",
+        "mode": "subagent",
+        "model": "ollama-cloud/kimi-k2.6",
+        "color": "#FF6B00"
       }
-    }
   }
 }
\ No newline at end of file