docs: repair links reported by an online lychee run

.changes/discovery/lychee-online-links-64e94781.md

@@ -0,0 +1,7 @@
+---
+bump: patch
+---
+
+### Fixed
+
+- Correct the 0.4.0 entry's link to the retired topic-docs convention: it now points at the convention's last committed version, since the file was removed from `main`.

.changes/harness-config/lychee-online-links-d2761c88.md

@@ -0,0 +1,8 @@
+---
+bump: patch
+---
+
+### Fixed
+
+- Repoint the `audit-instructions` criteria link for I25 to the current Fable migration guide's section on migrating from Claude Opus 5.
+- Correct two links in released entries whose upstream sections moved: the strict-mode section now lives on the plugin marketplace reference page, and the `blockReadsOutsideWorkingDirectories` anchor on the settings reference was renamed.

.changes/pixel-art/lychee-online-links-44c1ebc0.md

@@ -0,0 +1,7 @@
+---
+bump: patch
+---
+
+### Fixed
+
+- Drop the Pyxel verification record's links into the `kitao/pyxel` GitHub repository, which no longer resolves, and watch for new releases on the PyPI project page instead.

.changes/playbooks/lychee-online-links-4629150d.md

@@ -0,0 +1,7 @@
+---
+bump: patch
+---
+
+### Fixed
+
+- Correct a released entry's link to the Opus 5 note on disabling thinking: the page was retired upstream, so the link now points at an archived copy.

.changes/songwriting/lychee-online-links-ebb7d9c6.md

@@ -0,0 +1,7 @@
+---
+bump: patch
+---
+
+### Fixed
+
+- Correct a released entry's links to two retired help.suno.com articles: they now point at the archived copies the `suno` skill already cites.

.lycheeignore

@@ -10,7 +10,28 @@ CLAUDE_(PLUGIN_ROOT|PLUGIN_DATA|PROJECT_DIR|SKILL_DIR)
 # Fictional release feed in the ai-briefing eval fixtures: test data, not an external dependency.
 github\.com/meridian-labs/agent-cli/releases/tag/
 
-# claude.ai sign-in UI: 200 to a made-up path with a browser User-Agent, 403 without (verified 2026-10-11).
+# Fictional forge URLs in the docs-naming audit-file-names fixture tree: test data, not an external dependency.
+^https://(github\.com|raw\.githubusercontent\.com)/acme/fixture/
+
+# Fictional repository in the playwright saved-login eval prompt: test data, not an external dependency.
+^https://github\.com/acme-example/widgets$
+
+# ISO bot block on GitHub runners: 403 on the runner, 200 to a browser User-Agent from a workstation (verified 2026-10-11).
+^https://www\.iso\.org/standard/77520\.html$
+^https://www\.iso\.org/standard/63500\.html$
+
+# Publisher bot block: 403 to the runner and to a browser User-Agent; each DOI resolves in the Crossref API to the cited title (verified 2026-10-11).
+^https://doi\.org/10\.1145/3133876$
+^https://doi\.org/10\.1016/j\.intcom\.2010\.04\.004$
+^https://journals\.sagepub\.com/doi/10\.1509/jmkg\.71\.3\.039$
+
+# Cloudflare challenge: 403 to the runner and to a browser User-Agent; a rendering fetch returns the cited page (verified 2026-10-11).
+^https://queue\.acm\.org/detail\.cfm\?id=3595878$
+^https://www\.nesdev\.org/wiki/APU_Pulse$
+^https://medium\.com/jobs-to-be-done/know-the-two-very-different-interpretations-of-jobs-to-be-done-5a18b748bd89$
+^https://dba\.stackexchange\.com/questions/tagged/join$
+
+# claude.ai sign-in UI: answers 200 to a made-up path, so a passing check proves nothing about these pages (verified 2026-10-11).
 ^https://claude\.ai/code$
 ^https://claude\.ai/code/routines$
 ^https://claude\.ai/code/artifact/bfdfaef9-bc62-4dfe-ba9e-c58a26c9accf$
@@ -23,7 +44,7 @@ github\.com/meridian-labs/agent-cli/releases/tag/
 # Reddit search API bot block: 403 to lychee and to a browser User-Agent (verified 2026-10-11).
 ^https://www\.reddit\.com/r/ClaudeCode/search\.json\?q=function\+hooks\+OR\+mods$
 
-# Reddit bot block: 403 on 2026-08-21, but 200 to lychee from a residential IP on 2026-10-11; retest on a runner.
+# Reddit bot block: 403 on the GitHub runner, and a workstation gets the same 200 page for a made-up post id; the Arctic Shift archive lists all three posts, none removed (verified 2026-10-11).
 ^https://www\.reddit\.com/r/SunoAI/comments/1h4zc7e/expanded_insight_and_guidance_on_suno_style/$
 ^https://www\.reddit\.com/r/SunoAI/comments/1g5qzes/style_order/$
 ^https://www\.reddit\.com/r/SunoAI/comments/1ujzbqj/another_useful_trick_to_use_your_own_voice_in/$

plugins/discovery/CHANGELOG.md

@@ -2861,7 +2861,7 @@ Applied from the 2026-09 prompt-audit against Claude Fable 5.1 (docs/specs/promp
 ## [0.4.0] - 2026-07-14
 
 Adopt the marketplace topic-docs convention, contract v1.0.0
-(<https://raw.githubusercontent.com/melodic-software/claude-code-plugins/main/docs/conventions/topic-docs/README.md>):
+(<https://github.com/melodic-software/claude-code-plugins/blob/32553cf80ed5210f6822f96f3fa0c01fa833e7b1/docs/conventions/topic-docs/README.md>):
 
 - `EXPLORE.md` / `RESEARCH.md` are memory-tier artifacts written to
   `<memory_dir>/<slug>/` (default `.work/<slug>/`), never committed. The

plugins/harness-config/CHANGELOG.md

@@ -989,7 +989,7 @@ No change: repeats the 0.51.15 entry (released by #5156).
 
 ### Fixed
 
-- **Permission surfaces now match Claude Code 2.1.257–2.1.263** ([#4027](https://github.com/melodic-software/claude-code-plugins/issues/4027)). Read and Edit deny rules cover Bash redirect targets from v2.1.257; the v2.1.259 widening to every Bash argument was reverted in v2.1.260 and is not written in ([permissions](https://code.claude.com/docs/en/permissions)). `allowManagedPermissionRulesOnly` ignores `--allowedTools` and user, project, and local rules; `--disallowedTools` and session deny and ask rules stay across reloads ([settings reference](https://code.claude.com/docs/en/settings-reference#allowmanagedpermissionrulesonly)). The ask-rule contract is quoted from the [auto mode config](https://code.claude.com/docs/en/auto-mode-config) page; #42797 is closed, #83766 is open, and v2.1.257 fixed compound and subshell paths only. `strictPluginOnlyCustomization` is `true` or a per-surface array; `"mcp"` blocks user and project MCP servers and does not switch hooks off ([settings reference](https://code.claude.com/docs/en/settings-reference#strictpluginonlycustomization)). Interactive `!` shell mode runs outside the sandbox even in strict mode from v2.1.260 ([sandboxing](https://code.claude.com/docs/en/sandboxing)). A managed settings file, drop-in, plist, or HKLM value that cannot be parsed refuses startup; a user settings parse failure warns in `/status` ([managed settings](https://code.claude.com/docs/en/managed-settings), [settings](https://code.claude.com/docs/en/settings)). Server-managed settings are cached at `~/.claude/remote-settings.json`; cross-source merge is by key kind, and `sandbox.credentials.awsPairs` and `sandbox.ripgrep` are taken whole since v2.1.257 ([server-managed settings](https://code.claude.com/docs/en/server-managed-settings)). `permissions.blockReadsOutsideWorkingDirectories` fences Read, Grep, Glob, and LSP; Bash subprocess reads stay unbounded ([settings reference](https://code.claude.com/docs/en/settings-reference#permissionsblockreadsoutsideworkingdirectories)). Permission-rule lints keep a `)` inside a specifier, report `Bash(ls) x` as a malformed Tool(content) rule, and treat an uncompilable deny as guarding the literal path.
+- **Permission surfaces now match Claude Code 2.1.257–2.1.263** ([#4027](https://github.com/melodic-software/claude-code-plugins/issues/4027)). Read and Edit deny rules cover Bash redirect targets from v2.1.257; the v2.1.259 widening to every Bash argument was reverted in v2.1.260 and is not written in ([permissions](https://code.claude.com/docs/en/permissions)). `allowManagedPermissionRulesOnly` ignores `--allowedTools` and user, project, and local rules; `--disallowedTools` and session deny and ask rules stay across reloads ([settings reference](https://code.claude.com/docs/en/settings-reference#allowmanagedpermissionrulesonly)). The ask-rule contract is quoted from the [auto mode config](https://code.claude.com/docs/en/auto-mode-config) page; #42797 is closed, #83766 is open, and v2.1.257 fixed compound and subshell paths only. `strictPluginOnlyCustomization` is `true` or a per-surface array; `"mcp"` blocks user and project MCP servers and does not switch hooks off ([settings reference](https://code.claude.com/docs/en/settings-reference#strictpluginonlycustomization)). Interactive `!` shell mode runs outside the sandbox even in strict mode from v2.1.260 ([sandboxing](https://code.claude.com/docs/en/sandboxing)). A managed settings file, drop-in, plist, or HKLM value that cannot be parsed refuses startup; a user settings parse failure warns in `/status` ([managed settings](https://code.claude.com/docs/en/managed-settings), [settings](https://code.claude.com/docs/en/settings)). Server-managed settings are cached at `~/.claude/remote-settings.json`; cross-source merge is by key kind, and `sandbox.credentials.awsPairs` and `sandbox.ripgrep` are taken whole since v2.1.257 ([server-managed settings](https://code.claude.com/docs/en/server-managed-settings)). `permissions.blockReadsOutsideWorkingDirectories` fences Read, Grep, Glob, and LSP; Bash subprocess reads stay unbounded ([settings reference](https://code.claude.com/docs/en/settings-reference#permissions-blockreadsoutsideworkingdirectories)). Permission-rule lints keep a `)` inside a specifier, report `Bash(ls) x` as a malformed Tool(content) rule, and treat an uncompilable deny as guarding the literal path.
 
 ## [0.51.15] - 2026-09-28
 
@@ -3984,7 +3984,7 @@ offered as a mechanical `--fix`.
   row 253). The checklist flagged "plugins from incompatible marketplaces (Agent Skills format)"
   by the rule "Repos with only root `marketplace.json` but no per-plugin `plugin.json` are
   incompatible", a shape the [Strict mode
-  section](https://code.claude.com/docs/en/plugin-marketplaces#strict-mode) documents as SUPPORTED:
+  section](https://code.claude.com/docs/en/plugins/marketplace-reference#strict-mode) documents as SUPPORTED:
   under `strict: false` "the marketplace entry is the entire definition", the plugin repo provides
   raw files, and the entry's `skills`/`agents`/`hooks` fields expose them. Anthropic's own
   `anthropic-agent-skills` marketplace ships three such plugins with zero `plugin.json` files

plugins/harness-config/skills/audit-instructions/reference/criteria.md

@@ -239,8 +239,8 @@ each only on the surfaces its row names.
   <https://platform.claude.com/docs/en/build-with-claude/thinking-troubleshooting>
 - Model migration guides. The migration-guide URL is an index of per-model guides
   (<https://platform.claude.com/docs/en/about-claude/models/migration-guide>); I25 cites the Fable
-  and Mythos guide's section on migrating from Claude Opus 5:
-  <https://platform.claude.com/docs/en/models/fable-5/migration-guide#migrating-to-claude-mythos-5-and-claude-fable-5-from-claude-opus-5>.
+  5.1 guide's section on migrating from Claude Opus 5:
+  <https://platform.claude.com/docs/en/models/fable-5-1/migration-guide#migrating-from-claude-opus-5-to-claude-fable-5-1>.
   The model ranges that reject manual extended thinking (I17-c) and non-default sampling
   parameters (I25) are read from Thinking, above.
 - Claude Sonnet 5 model page, "Good to know" (the sampling-parameter constraint on the Sonnet class):
@@ -1987,18 +1987,20 @@ states.
   of the word**, such as body temperature, disk or thermal temperature, or color temperature, which
   share the token and nothing else. A document *about* the pattern, on the audience test I8-b
   applies.
-- **Source:** thinking, "Sampling parameters" (the set and the gate, under Detect). The Fable and
-  Mythos guide's section on migrating from Claude Opus 5 (under Sources) keeps the Fable/Mythos
-  carry-over. Corroborated at the Claude Sonnet 5 model page and in the Sonnet 5 guide, "Tone and
+- **Source:** thinking, "Sampling parameters" (the set and the gate, under Detect). That set
+  names every Fable and Mythos model in the Detect set; the Fable 5.1 guide's section on migrating
+  from Claude Opus 5 (under Sources) corroborates that the restriction carries over. Corroborated at the Claude Sonnet 5 model page and in the Sonnet 5 guide, "Tone and
   writing style", which supplies the Remediate line. Both are Sources entries.
   Pointer: [Claude Sonnet 5, good to
   know](https://platform.claude.com/docs/en/models/sonnet-5/overview#good-to-know) and
   [Sonnet 5 guide, tone and writing
   style](https://platform.claude.com/docs/en/build-with-claude/prompt-engineering/prompting-claude-sonnet-5#tone-and-writing-style).
-  As of: 2026-10-01 for the set and the corroborating pages; the determinism note under Remediate
+  As of: 2026-10-01 for the set and the Sonnet 5 pages, 2026-10-11 for the migration guide
+  section; the determinism note under Remediate
   rests on our 2026-08-08 reading of a page no current page replaces. Recheck trigger: the
-  rejecting model set moving, sampling parameters being reinstated on any model in it, or a docs
-  page starting to cover the determinism note.
+  rejecting model set moving, sampling parameters being reinstated on any model in it, the
+  migration guide's Opus 5 section dropping the carry-over statement, or a docs page starting to
+  cover the determinism note.
 
 ### I26: Generic negative steering on open-ended design briefs
 

plugins/pixel-art/reference/engine-layouts.md

@@ -162,9 +162,10 @@ recheck trigger: the store page showing a release date or U2U publishing its own
 - Customizable screen, 16-color palette (extensible), 3 image banks of 256x256, 8 tilemaps of
   256x256. Images load from palette-ready PNG/GIF/JPEG or `Image.set` string lists.
 - Spec: any frame size whose sheet fits 256x256 per bank; keep the palette to the target's colors.
-- Verification record: basis = [Pyxel user guide](https://github.com/kitao/pyxel/blob/main/docs/user-guide.md)
-  at v2.9.9; as-of 2026-09-23; recheck trigger: a Pyxel release past 2.9.9 on
-  [releases](https://github.com/kitao/pyxel/releases).
+- Verification record: basis = the Pyxel user guide (`docs/user-guide.md` in `kitao/pyxel`, whose
+  GitHub repository no longer resolves and has no archived copy of the guide) at v2.9.9; as-of
+  2026-09-23; recheck trigger: a Pyxel release past 2.9.9 on its
+  [PyPI project page](https://pypi.org/project/pyxel/).
 
 ## Unity
 

plugins/playbooks/CHANGELOG.md

@@ -2070,7 +2070,7 @@ They record what shipped at the time and are correct as written.
   `max` and `ultracode` "are not accepted here"), matching what §72 of `boris` records above, and
   the API disable literal is written the way upstream writes it, `thinking: {"type": "disabled"}`
   ([what's new in Opus 5: disabling thinking requires effort `high` or
-  below](https://platform.claude.com/docs/en/about-claude/models/whats-new-opus-5#disabling-thinking-requires-effort-high-or-below)),
+  below](https://web.archive.org/web/20260814082927/https://platform.claude.com/docs/en/about-claude/models/whats-new-opus-5#disabling-thinking-requires-effort-high-or-below)),
   since a rule whose whole claim is that the hazard is readable off configuration literals cannot
   ship an invalid one as its example. Both re-verified 2026-08-02.
 

plugins/songwriting/CHANGELOG.md

@@ -1332,9 +1332,9 @@ Every absence below is **scoped to the pages named** and asserts nothing about
 Suno's documentation as a whole.
 
 - **Official, read verbatim by `curl` (not a summarizing fetch), bodies whole:**
-  `help.suno.com` [5782849](https://help.suno.com/en/articles/5782849) (1,177
+  `help.suno.com` [5782849](https://web.archive.org/web/20260902202656/https://help.suno.com/en/articles/5782849) (1,177
   chars of extracted text) and
-  [5782977](https://help.suno.com/en/articles/5782977) (805 chars). Neither
+  [5782977](https://web.archive.org/web/20250513204947/https://help.suno.com/en/articles/5782977) (805 chars). Neither
   addresses genre order or fusion; neither mentions timestamp cues in the Lyrics
   box or any adherence rate. 5782849 points *away* from positional prompting for
   v4.5+: *"In previous models, you would want to prioritize certain genre and