Give each restated rule one owner

[alanhc]

Eight rules were written out in two skills each, which is the shape
references/prose-register.md warns about: a rule copied to a second place is
a rule that can drift. Each now sits with the skill that owns the mechanism, or
with the tracked file that holds it, and the second site names that owner
rather than restating it.

What moved

Rule	Kept by	Routes from
The GDB stub's refusal of x86_64	elfuse-debug	elfuse-guest-abi
What check-atomics.py cannot see	elfuse-conventions	elfuse-security
A proof binds the arithmetic, not its callers	elfuse-verify	elfuse-security
The lock ordering record	elfuse-syscall	elfuse-conventions, elfuse-refactor, elfuse-security
The change-area-to-command table	docs/testing.md	elfuse-syscall, elfuse-refactor
Recompute a number, take the baseline first, name the lane that could not run	elfuse-verify	elfuse-refactor
Where a new file or shared declaration goes	elfuse-conventions	elfuse-syscall

Two skills also stated a rule twice inside themselves: elfuse-security on the
lock record, once in the shared-pages rule and once in the gate list beneath
it, and elfuse-refactor on make lint never having been clean.

What this does not do

It does not make the skills shorter. 2234 lines to 2229, because a pointer
costs about what the restatement cost. The saving is one home per rule rather
than bytes.

The volume is in elfuse-conventions at 402 lines, elfuse-security at 310
and elfuse-guest-abi at 291, and there it is subject matter rather than
repetition. Cutting it means merging skills or dropping sections, which changes
which skill fires on which task, so it is a different change from this one.

One candidate is left in place deliberately. "This skill is a working summary.
These are tracked and survive a fresh clone, so prefer them when the two
disagree:" appears verbatim in five skills, and looks like the clearest
boilerplate in the set. Skills load independently, so a reader who loaded only
elfuse-debug would lose what its authoritative sources list is for.

Verification

make check-skill-refs resolves every path, target, section and
cross-reference across the 12 files, and scripts/check-commit-log.sh accepts
all five commits. Documentation only: no build or test target reads these
files.

---

Summary by cubic

Consolidates duplicated rules so each has a single owning skill. Rules that were restated in more than one skill now live only with the skill that owns their mechanism; other sites name that skill instead of repeating the rule, so copies can no longer drift.

• elfuse-syscall owns the lock ordering record; elfuse-verify owns the validation table, proof limits, and reporting rules; elfuse-conventions owns file placement and the check-atomics.py blind spot; elfuse-debug owns the GDB stub refusal.
• Two skills also dropped rules they had stated twice inside themselves.
• Skills stay nearly the same length (2234 → 2229 lines) because a pointer costs about what the restatement did; the win is one home per rule, not fewer bytes.
• One boilerplate block ("This skill is a working summary...") deliberately remains in five skills because each skill loads independently and a reader of only one would not know what its sources list is for.
• Documentation only; make check-skill-refs resolves every path, target, section, and cross-reference across the 12 skill files.

^{Written for commit b73b646. Summary will update on new commits.}

[alanhc]

Rebased onto main; the conflicts were in elfuse-refactor/SKILL.md, which Record what this refactor pass taught (3bcd930) rewrote wholesale. Resolved by re-landing this PR's edits against the new structure: the lock bullet in "Preserve the boundaries" now routes to elfuse-syscall instead of restating the ordering-comment rule, and the obsolete "Three cases where I only moved code is wrong" list is dropped since "Route the change first" already covers it.

cubic's two findings, both folded into Give the lock ordering record one owner:

1. elfuse-security:164 — reworded to "which the gate below fails for being missing".
2. elfuse-conventions:237 — dropped the restated "before its second module" condition, which was weaker than elfuse-syscall's actual rule (a lock enters the record as soon as it exists). Now routes to elfuse-syscall for the condition too, not just the record's location.

[jserv]

Rebase latest main branch and resolve conflicts.

[alanhc]

Rebased onto b05f639.

One conflict, in .claude/skills/elfuse-refactor/SKILL.md: main added the "Name the friction before treating it" paragraph ahead of the measuring one and shortened "Measure it first." to "Measure it." Both are kept; only the sentence this commit changes is re-applied, the tail that routes the "never quote a count" rule to elfuse-verify.

The rules this branch routes to are still in the skills it names after the 71 commits: elfuse-syscall has the lock order comment and the three constraints the ordering alone does not give, elfuse-verify has the validation table and the reporting rules, elfuse-debug has the --gdb refusal for x86_64, and elfuse-conventions has the plain-operator access check-atomics.py cannot see.

make check-skill-refs resolves every path, target, section and cross-reference across the 13 files, and scripts/check-commit-log.sh accepts all five commits.

[jserv]

elfuse-verify doesn't pick a baseline itself. Under "Choosing what to run" it sends the reader to the table in docs/testing.md, section "Validation Strategy By Change Type", so this adds a second hop to reach the same table. This file's own authoritative-sources list also still names docs/testing.md for the validation lanes, so the two now disagree about who owns the table.

Suggested change

	Run the baseline `elfuse-verify` selects for the area touched before a
	multi-step cleanup. Keep inherited failures separate from the change. Stop
	when the baseline is red in the area being changed.
	Run the baseline that `docs/testing.md`, section "Validation Strategy By Change
	Type", selects for the area touched (`elfuse-verify` explains the lanes) before
	a multi-step cleanup. Keep inherited failures separate from the change. Stop
	when the baseline is red in the area being changed.

[alanhc]

Checked: elfuse-verify's "Choosing what to run" does send the reader to docs/testing.md, so the routing added a hop and left this file's authoritative sources list disagreeing with its body. Applied, and the commit is now "Name the file that holds the validation table" with the reason in its body.

[jserv]

I defer to @henrybear327 for confirmation.