feat: complete the five-course 0.0.3 batch with C3-C5

- C3 'One source of truth for agent rules': new stdlib rules_check.py core
  (source/pointer/copy/drift classification + CLI exit codes, 11 tests)
- C4 'From it runs to it ships': new stdlib ship_check.py core (parsed test
  counts, no-tests verdict, unverified list, atomic SHIP-RECORD.json,
  10 tests) with green/red/no-tests scenario projects
- C5 'Give your agent tools with MCP': assembled from the reviewed
  examples/mcp-server contract plus wire-format request samples
- All five courses EN+ZH with COURSE teaching contracts, scenario skins,
  TASK contracts, REVIEW records, and verify.py both-directions evidence

Author: xxg1413

CHANGELOG.md

@@ -9,10 +9,12 @@ This file records notable catalog-contract and maintenance changes.
 - A `courses/` content type: agent-taught folders with COURSE.md teaching
   contracts, bilingual lesson pairs, scenario skins, task contracts, runnable
   starter/solution pairs, and objective `verify.py` completion evidence.
-- First flagship course "Hands-on Python with Claude Code" (EN+ZH, five
-  lessons, three scenario skins, REVIEW.md run-through record), plus the
-  companion "Hands-on with OpenAI Codex CLI" course reusing the same verified
-  code core and skins.
+- The five-course 0.0.3 batch: "Hands-on Python with Claude Code"
+  (flagship), "Hands-on with OpenAI Codex CLI" (reuses the C1 core), "One
+  source of truth for agent rules" (rule-drift checker core), "From 'it
+  runs' to 'it ships'" (release-evidence builder core), and "Give your
+  agent tools with MCP" (reuses the reviewed mcp-server contract) — each
+  EN+ZH with scenario skins and REVIEW.md run-through records.
 - `tools/verify_courses.py` enforcing the course folder contract, wired into
   the Makefile and the validation workflow.
 - Project Radar per-project YAML records (`catalog/projects/*.yml`) with

content-manifest.json

@@ -0,0 +1,71 @@
+---
+id: course-agent-rules
+type: course
+title: One source of truth for agent rules
+summary: Stop maintaining diverging AGENTS.md, CLAUDE.md, and .cursorrules files — build a checker that proves your repository has exactly one rule source, taught hands-on with your coding agent.
+lang: en-US
+content_version: 1
+status: reviewed
+reviewed_on: 2026-09-12
+---
+
+# One source of truth for agent rules
+
+> TL;DR: download this folder, open it in your coding agent, and say
+> **"start lesson 1"**. You finish with a working rule-consistency checker
+> (`rules_check.py`) that fails CI the moment a rule file drifts from
+> AGENTS.md — plus the single-source setup applied to your own repository.
+> Tool-agnostic by design: Claude Code, Codex CLI, and Cursor all read these
+> files.
+
+## What you build
+
+A standard-library-only checker that enforces the contract used by this very
+repository: `AGENTS.md` must exist and be non-empty, and every other
+recognized rule file (`CLAUDE.md`, `.cursorrules`) must either be a thin
+pointer that defers to it or an exact copy of it. Anything else is drift,
+reported with a reason and a failing exit code. Three scenario repositories
+ship with the course:
+
+| Skin | State | Data |
+| --- | --- | --- |
+| `scenario/thin-pointer/` | healthy: AGENTS.md + two pointer files | pointer-style CLAUDE.md, .cursorrules |
+| `scenario/single-copy/` | healthy: AGENTS.md + exact copy | duplicated rule text |
+| `scenario/drifted/` | broken: .cursorrules restates stale rules | a real drift to catch |
+
+## Teaching contract (read this first, agent)
+
+- **Audience:** anyone maintaining rule files for more than one agent tool —
+  you have felt the pain of three files disagreeing about one behavior.
+- **Prerequisites:** Python 3.11+ on PATH and any coding agent (taught and
+  reviewed with Claude Code 2.x and Codex CLI 0.x; reviewed 2026-09-12 —
+  tool-agnostic by design). Standard library only.
+- **Lesson order:** L01 → L05; never skip the checkpoint.
+- **Teaching style:** work from the files in this folder; quote the contract
+  line you satisfy; smallest change per failing test; no new dependencies;
+  never edit `solution/`; ask before touching unnamed files.
+- **When to stop:** a lesson is done when its checkpoint command runs and the
+  learner can explain what failed and why.
+- **`verify.py`:** `python verify.py starter --expect-failure` reproduces the
+  six listed failures; `python verify.py solution` passes 11/11.
+- **Honesty rules:** say what you did not verify; no guarantees about agent
+  obedience — the checker reports file state, not agent behavior.
+
+## What this course does NOT cover
+
+Which rules to write (see the repository's `templates/AGENT_RULES.example.md`
+and the AGENTS.md guide on flypython.com), multi-repo setups, or
+machine-policy enforcement. The checker is deliberately narrow: one
+directory, three file names, one truth.
+
+## Folder map
+
+`COURSE.md`/`COURSE_cn.md`, bilingual `lessons/`, `scenario/` repositories,
+`TASK.md`/`TASK_cn.md` (the code contract), `starter/`, `solution/`, `tests/`
+(11 tests), `verify.py`, `REVIEW.md`.
+
+## Evidence and licensing
+
+`REVIEW.md` records the run-through state. Code is MIT; prose is CC BY 4.0
+(see repository `LICENSE`). Teaching drift goes to the `course-feedback`
+issue form.

courses/agent-rules-single-source/COURSE.md

@@ -0,0 +1,65 @@
+---
+id: course-agent-rules
+type: course
+title: Agent 规则的单一真源
+summary: 不再同时维护彼此打架的 AGENTS.md、CLAUDE.md 与 .cursorrules——亲手构建一个能证明仓库只有一处规则真源的检查器，由你的编码 Agent 授课。
+lang: zh-CN
+content_version: 1
+status: reviewed
+reviewed_on: 2026-09-12
+---
+
+# Agent 规则的单一真源
+
+> 摘要：下载本文件夹，在你的编码 Agent 中打开，说一句 **“开始第 1 课”**。
+> 课程结束时你拥有一个可运行的规则一致性检查器（`rules_check.py`）——
+> 任何规则文件偏离 AGENTS.md 的那一刻，CI 就会失败——外加应用到你自己
+> 仓库的单一真源配置。天然工具无关：Claude Code、Codex CLI、Cursor
+> 都读这些文件。
+
+## 你将做出什么
+
+一个仅用标准库的检查器，强制执行本仓库自己使用的契约：`AGENTS.md`
+必须存在且非空，其他被识别的规则文件（`CLAUDE.md`、`.cursorrules`）
+要么是指向它的瘦指针，要么是它的精确副本。其余情况都算漂移——带
+原因报告并以非零退出码失败。课程附带三个场景仓库：
+
+| 皮肤 | 状态 | 数据 |
+| --- | --- | --- |
+| `scenario/thin-pointer/` | 健康：AGENTS.md + 两个指针文件 | 指针式 CLAUDE.md、.cursorrules |
+| `scenario/single-copy/` | 健康：AGENTS.md + 精确副本 | 完全重复的规则文本 |
+| `scenario/drifted/` | 故障：.cursorrules 复述过期规则 | 一个待捕获的真实漂移 |
+
+## 教学契约（Agent 请先阅读本节）
+
+- **受众：** 为多个 Agent 工具维护规则文件的任何人——你体会过三个
+  文件对同一行为各执一词的痛苦。
+- **前置条件：** PATH 中有 Python 3.11+，任一编码 Agent（以 Claude
+  Code 2.x 与 Codex CLI 0.x 完成教学与审核，审核日期 2026-09-12——
+  设计上工具无关）。只用标准库。
+- **课程顺序：** L01 → L05；绝不跳过检查点。
+- **教学风格：** 从本文件夹的文件出发；引用你满足的契约原文；每个
+  失败测试做最小变更；不新增依赖；不修改 `solution/`；改动未授权文件
+  前先询问。
+- **何时停止：** 检查点命令通过、且学习者能说清什么失败了、为什么。
+- **`verify.py`：** `python verify.py starter --expect-failure` 复现六个
+  具名失败；`python verify.py solution` 通过 11/11。
+- **诚实规则：** 说明哪些没验证过；不保证 Agent 服从——检查器报告的是
+  文件状态，不是 Agent 行为。
+
+## 本课程不涉及的内容
+
+该写什么规则（见仓库 `templates/AGENT_RULES.example.md` 与
+flypython.com 上的 AGENTS.md 指南）、多仓库配置、机器策略强制。检查器
+刻意收窄：一个目录、三个文件名、一个真源。
+
+## 文件夹结构
+
+`COURSE.md`/`COURSE_cn.md`、双语 `lessons/`、`scenario/` 仓库、
+`TASK.md`/`TASK_cn.md`（代码契约）、`starter/`、`solution/`、`tests/`
+（11 个测试）、`verify.py`、`REVIEW.md`。
+
+## 证据与许可
+
+`REVIEW.md` 记录试跑状态。代码 MIT；文字 CC BY 4.0（见仓库 `LICENSE`）。
+教学偏差请走 `course-feedback` issue 表单。

courses/agent-rules-single-source/COURSE_cn.md

@@ -0,0 +1,23 @@
+# Maintainer run-through record
+
+## 2026-09-12 — contract verification (mechanical)
+
+- Environment: macOS (arm64), Python 3.13; repository clean checkout on
+  branch `feat/0.0.3-courses-and-radar`.
+
+- Commands and results:
+  - `python verify.py starter --expect-failure` — exit 0; all expected
+    failure names reproduced.
+  - `python verify.py solution` — exit 0; full suite passes.
+  - Every scenario skin exercised end to end by the suite.
+- Not verified in this pass: teaching quality with a live agent session.
+
+## Pending before the public course drop
+
+- One full agent-taught run-through ("start lesson 1" through the Lesson 5
+  checkpoint), recording observed deviations from COURSE.md here; the
+  recording doubles as demo-video source material.
+
+## Deviation log
+
+(none recorded yet — first agent-taught run-through pending)

courses/agent-rules-single-source/REVIEW.md

@@ -0,0 +1,25 @@
+# Task contract: agent rule-file consistency checker
+
+Change only `starter/rules_check.py`. Standard library only.
+
+- `load_rule_files(directory) -> dict[str, str]`: read the text of every
+  present rule file among `AGENTS.md`, `CLAUDE.md`, `.cursorrules`.
+- `is_pointer(text) -> bool`: true when the file is a thin pointer — at most
+  10 non-empty lines and at least one line referencing `AGENTS.md`.
+- `check_directory(directory) -> dict` returning
+  `{"source": "AGENTS.md", "ok": bool, "files": [...]}`:
+  - `AGENTS.md` missing or empty produces a `missing-source` entry and
+    `ok=False`.
+  - A present, non-empty `AGENTS.md` produces a `source` entry.
+  - Every other rule file is classified: `pointer` (thin pointer),
+    `copy` (exact match of `AGENTS.md` content), or `diverged` (anything
+    else), each with an `issues` list; `diverged` entries carry a reason
+    naming the difference from `AGENTS.md`.
+  - `ok=True` only when every entry is `source`, `pointer`, or `copy`.
+- `main(argv=None) -> int`:
+  - Exactly one argument (the directory). Otherwise print usage to stderr
+    and return 2.
+  - Print `ok=... files=... diverged=...` to stdout; return 0 when `ok`,
+    otherwise 1.
+
+Done means `python verify.py starter` exits 0 with all eleven tests passing.

courses/agent-rules-single-source/TASK.md

@@ -0,0 +1,22 @@
+# 任务契约：Agent 规则文件一致性检查器
+
+只修改 `starter/rules_check.py`。仅用标准库。
+
+- `load_rule_files(directory) -> dict[str, str]`：读取 `AGENTS.md`、
+  `CLAUDE.md`、`.cursorrules` 中每个存在的规则文件文本。
+- `is_pointer(text) -> bool`：当文件是瘦指针时为真——非空行不超过
+  10 行，且至少一行引用 `AGENTS.md`。
+- `check_directory(directory) -> dict` 返回
+  `{"source": "AGENTS.md", "ok": bool, "files": [...]}`：
+  - `AGENTS.md` 缺失或为空产生 `missing-source` 条目且 `ok=False`。
+  - 存在且非空的 `AGENTS.md` 产生 `source` 条目。
+  - 其余规则文件逐一分类：`pointer`（瘦指针）、`copy`（与 `AGENTS.md`
+    内容完全一致）或 `diverged`（其余情况），各带 `issues` 列表；
+    `diverged` 条目必须写明与 `AGENTS.md` 的差异原因。
+  - 仅当所有条目都是 `source`、`pointer` 或 `copy` 时 `ok=True`。
+- `main(argv=None) -> int`：
+  - 恰好一个参数（目录）。否则向 stderr 打印用法并返回 2。
+  - 向 stdout 打印 `ok=... files=... diverged=...`；`ok` 时返回 0，
+    否则 1。
+
+完成的标准是 `python verify.py starter` 以 0 退出且全部十一个测试通过。

courses/agent-rules-single-source/TASK_cn.md

@@ -0,0 +1,33 @@
+---
+id: course-agent-rules-l01
+type: course
+title: "Measure the drift you already have"
+summary: "Run the checker against the three scenario repositories and read drift as a test failure, not a vibe."
+lang: en-US
+content_version: 1
+status: reviewed
+reviewed_on: 2026-09-12
+---
+
+# Measure the drift you already have
+
+## Objective
+
+Run the checker against the three scenario repositories and read drift as a test failure, not a vibe.
+
+## The lesson
+
+Run `python starter/rules_check.py scenario/drifted` — it says everything is fine. That is the bug: three files disagree about one behavior and nothing notices. Then run the verifier:
+
+## Exercise
+
+- Map each `verify.py --expect-failure` name to a real drift class: no source, no pointer detection, no drift reporting
+- Open `scenario/drifted/.cursorrules` and find the rules that contradict AGENTS.md
+
+## Checkpoint
+
+The lesson's commands run, and you can explain — in your own words — what failed and why.
+
+## Expected evidence
+
+The command transcript and your answers.

courses/agent-rules-single-source/lessons/L01.md

@@ -0,0 +1,33 @@
+---
+id: course-agent-rules-l01
+type: course
+title: "量化你已经存在的漂移"
+summary: "对三个场景仓库运行检查器，把漂移读成测试失败，而不是一种感觉。"
+lang: zh-CN
+content_version: 1
+status: reviewed
+reviewed_on: 2026-09-12
+---
+
+# 量化你已经存在的漂移
+
+## 目标
+
+对三个场景仓库运行检查器，把漂移读成测试失败，而不是一种感觉。
+
+## 课程内容
+
+运行 `python starter/rules_check.py scenario/drifted`——它说一切正常。这正是 bug：三个文件对同一行为各执一词，却没有任何东西察觉。然后运行验证器：
+
+## 练习
+
+- 把 `verify.py --expect-failure` 里的每个具名失败对应到一类真实漂移：无真源、无指针识别、无漂移报告
+- 打开 `scenario/drifted/.cursorrules`，找出与 AGENTS.md 矛盾的规则
+
+## 检查点
+
+本课的命令运行通过，并且你能用自己的话说清什么失败了、为什么。
+
+## 预期证据
+
+命令输出记录与你的回答。

courses/agent-rules-single-source/lessons/L01_cn.md

@@ -0,0 +1,33 @@
+---
+id: course-agent-rules-l02
+type: course
+title: "Decide the source of truth"
+summary: "AGENTS.md becomes the one file agents read; everything else is a pointer or a copy — decide, then write it down."
+lang: en-US
+content_version: 1
+status: reviewed
+reviewed_on: 2026-09-12
+---
+
+# Decide the source of truth
+
+## Objective
+
+AGENTS.md becomes the one file agents read; everything else is a pointer or a copy — decide, then write it down.
+
+## The lesson
+
+Read the repository's own AGENTS.md and `templates/AGENT_RULES.example.md`. The decision this course enforces: AGENTS.md is the source (the AAIF-governed, agent-native standard); CLAUDE.md and .cursorrules may only point at it. Write your repository's decision as one sentence — that sentence is your contract.
+
+## Exercise
+
+- List which of your rule files restate rules instead of pointing
+- Ask the agent to critique your sentence for ambiguity
+
+## Checkpoint
+
+The lesson's commands run, and you can explain — in your own words — what failed and why.
+
+## Expected evidence
+
+The command transcript and your answers.