skill: scope /caveman-compress to memory + scratch only

Eval found no safe high-benefit target in-repo: docs/published prose
intentional, archives ignored by default, auto-loaded context belongs to
/context-audit. Add explicit scope check — refuse docs/**, archives,
context/**, .claude/** ; allow memory/** + untracked scratch + explicit
override. Refresh skills.lock checksum.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.claude/skills/caveman-compress/SKILL.md

@@ -12,9 +12,21 @@ argument-hint: "<file>"
 
 Rewrite a file in compressed form. Read core rules first: `.claude/skills/caveman/SKILL.md`.
 
+## Scope (check first — refuse out of scope)
+
+In-scope targets only:
+- files under `memory/**` (notes, daily logs)
+- untracked scratch files (not committed to git)
+- a file the user passes with explicit "compress this anyway" override
+
+Everything else is **out of scope** — refuse with a one-line reason. In particular:
+- `docs/**`, `blog/**`, `README.md`, `CLAUDE.md`/`AGENTS.md` — published / load-bearing prose; brevity is intentional there.
+- `tasks/archive/**` and other archives — not read by default; compressing is busywork that mutates the record for ~0 live-token gain.
+- `context/**`, `.claude/skills/**`, `.claude/agents/**` — auto-loaded / behavior-steering. Token budget there is `/context-audit`'s job (it has a safe ablation gate); compression here can silently change behavior.
+
 ## Procedure
 
-1. **Read** the target file. Refuse politely if no path given.
+1. **Read** the target file. Refuse politely if no path given, or if the path is out of scope (see above).
 2. **Rewrite** prose at `full` level: drop articles/filler, fragments allowed.
 3. **Preserve verbatim**: code blocks, commands, URLs/links, tables, frontmatter, file/symbol names, numbers, headings (structure intact).
 4. **Show the rewrite** and an estimated token delta. **Confirm before overwriting** — this edits a tracked file; do not write without a yes.

.mifune/skills.lock

@@ -38,7 +38,7 @@
       "registry_version": "vendored",
       "skill_version": "0.1.0",
       "commit": "655b7d9c5431f822264b7732e9901c5578ac84cf",
-      "checksum": "sha256:ff9dfbe2b4c66b9e8aeaa088148731b12a3cbdbbfb4605b29866c7093bd85c67",
+      "checksum": "sha256:ed2c75566301ec8b00756e3d4a16030aba94d1a1a6c56c5de2330456d1464695",
       "installed_paths": [".claude/skills/caveman-compress"],
       "note": "Vendored caveman subcommand; see caveman entry."
     },