fix(wrap-it-up): inbox sanity check exempts lint-followups.org

The inbox sanity check I added in 8424e8f counted lint-followups.org
as unprocessed, which surfaced as a false alarm during this session's
wrap-up. lint-org writes its judgment items into inbox/lint-followups.org
earlier in the same wrap-up workflow by design. The file is a
pipeline artifact for the next morning's daily-prep, not a handoff
that needs the value gate.

The find filter now excludes .gitkeep, lint-followups.org, and
PROCESSED-* prefixes. The Validation Checklist line names the same
expected-artifacts list explicitly.

Smoke test: post-fix count is 0 in the rulesets project (where
lint-org just wrote 5 judgment items into inbox/lint-followups.org).

2 files changed, 22 insertions, 8 deletions

diff --git a/.ai/workflows/wrap-it-up.org b/.ai/workflows/wrap-it-up.org
index 63959c9..a55f475 100644
--- a/.ai/workflows/wrap-it-up.org
+++ b/.ai/workflows/wrap-it-up.org
@@ -176,22 +176,29 @@ For an interactive walk of the judgments mid-day, run =/lint-org todo.org=.
 
 *** Inbox sanity check (surface unprocessed handoffs)
 
-If the project has an =inbox/= directory, verify it holds nothing but =.gitkeep= and any explicitly-deferred =PROCESSED-*= files before the wrap completes. An inbox that arrived at session start with handoffs from other projects, or that received handoffs mid-session, needs the =process-inbox.org= workflow to run and apply its value-gate dispositions. Wrapping with a dirty inbox silently defers the work to next session and accumulates handoff debt that the sender can't see.
+If the project has an =inbox/= directory, verify it holds nothing but =.gitkeep=, =lint-followups.org= (the lint-org pipeline file the next morning's daily-prep consumes), and any explicitly-deferred =PROCESSED-*= files before the wrap completes. An inbox that arrived at session start with handoffs from other projects, or that received handoffs mid-session, needs the =process-inbox.org= workflow to run and apply its value-gate dispositions. Wrapping with a dirty inbox silently defers the work to next session and accumulates handoff debt that the sender can't see.
 
 #+begin_src bash
 unprocessed=$(find inbox -maxdepth 1 -type f \
     ! -name '.gitkeep' \
+    ! -name 'lint-followups.org' \
     ! -name 'PROCESSED-*' \
     2>/dev/null | wc -l)
 if [ "$unprocessed" -gt 0 ]; then
     echo "wrap-up: inbox/ has $unprocessed unprocessed item(s). Run process-inbox.org before wrapping, or explicitly defer each item with a one-line reason in the valediction."
-    find inbox -maxdepth 1 -type f ! -name '.gitkeep' ! -name 'PROCESSED-*' -printf '  %f\n'
+    find inbox -maxdepth 1 -type f \
+        ! -name '.gitkeep' \
+        ! -name 'lint-followups.org' \
+        ! -name 'PROCESSED-*' \
+        -printf '  %f\n'
 fi
 #+end_src
 
 If the count is zero or the project has no =inbox/= directory, the check is a silent no-op. If non-zero, the wrap is incomplete by default. The user resolves each item (process now, defer with reason in the valediction, or delete with rationale) before the validation checklist passes.
 
-This integrates with =process-inbox.org=, which stamps =:LAST_INBOX_PROCESS:= in =notes.org='s *Workflow State* section on completion. Wrap-up doesn't double-stamp; it only ensures the inbox is empty at session end.
+The check exempts =lint-followups.org= explicitly because lint-org runs earlier in the same wrap-up workflow and writes its judgment items to that file in =inbox/= by design. The file is a pipeline artifact for the next morning's =daily-prep=, not a handoff that needs the value gate.
+
+This integrates with =process-inbox.org=, which stamps =:LAST_INBOX_PROCESS:= in =notes.org='s *Workflow State* section on completion. Wrap-up doesn't double-stamp. It only ensures the inbox carries nothing but the expected pipeline artifacts at session end.
 
 *** Review-habit health check (surface a slipped daily task-review)
 
@@ -406,7 +413,7 @@ Before considering wrap-up complete:
 - [ ] =todo-cleanup.el= ran — hygiene pass + =--archive-done= + =--sync-child-priority= (if =todo.org= exists at project root)
 - [ ] =lint-org.el= ran on =todo.org= — mechanical fixes applied, judgments appended to follow-ups file (if =todo.org= exists)
 - [ ] Any orphan-planning-line warnings reviewed (fix or accept)
-- [ ] Inbox is empty (excluding =.gitkeep= and =PROCESSED-*= prefixes), OR each remaining item has an explicit deferral logged in the valediction
+- [ ] Inbox carries nothing but expected pipeline artifacts (=.gitkeep=, =lint-followups.org=, =PROCESSED-*= prefixes), OR each remaining handoff has an explicit deferral logged in the valediction
 - [ ] Linear Dev-Review sweep ran; any merged-PR tickets moved to Done or PM Acceptance (skip if project doesn't use Linear)
 - [ ] After wrap-up commit + push, =git status --short= is empty OR every remaining line has an explicit user-deferred decision logged in the valediction
 - [ ] Each leftover was investigated and the user saw a concrete resolution recommendation
diff --git a/claude-templates/.ai/workflows/wrap-it-up.org b/claude-templates/.ai/workflows/wrap-it-up.org
index 63959c9..a55f475 100644
--- a/claude-templates/.ai/workflows/wrap-it-up.org
+++ b/claude-templates/.ai/workflows/wrap-it-up.org
@@ -176,22 +176,29 @@ For an interactive walk of the judgments mid-day, run =/lint-org todo.org=.
 
 *** Inbox sanity check (surface unprocessed handoffs)
 
-If the project has an =inbox/= directory, verify it holds nothing but =.gitkeep= and any explicitly-deferred =PROCESSED-*= files before the wrap completes. An inbox that arrived at session start with handoffs from other projects, or that received handoffs mid-session, needs the =process-inbox.org= workflow to run and apply its value-gate dispositions. Wrapping with a dirty inbox silently defers the work to next session and accumulates handoff debt that the sender can't see.
+If the project has an =inbox/= directory, verify it holds nothing but =.gitkeep=, =lint-followups.org= (the lint-org pipeline file the next morning's daily-prep consumes), and any explicitly-deferred =PROCESSED-*= files before the wrap completes. An inbox that arrived at session start with handoffs from other projects, or that received handoffs mid-session, needs the =process-inbox.org= workflow to run and apply its value-gate dispositions. Wrapping with a dirty inbox silently defers the work to next session and accumulates handoff debt that the sender can't see.
 
 #+begin_src bash
 unprocessed=$(find inbox -maxdepth 1 -type f \
     ! -name '.gitkeep' \
+    ! -name 'lint-followups.org' \
     ! -name 'PROCESSED-*' \
     2>/dev/null | wc -l)
 if [ "$unprocessed" -gt 0 ]; then
     echo "wrap-up: inbox/ has $unprocessed unprocessed item(s). Run process-inbox.org before wrapping, or explicitly defer each item with a one-line reason in the valediction."
-    find inbox -maxdepth 1 -type f ! -name '.gitkeep' ! -name 'PROCESSED-*' -printf '  %f\n'
+    find inbox -maxdepth 1 -type f \
+        ! -name '.gitkeep' \
+        ! -name 'lint-followups.org' \
+        ! -name 'PROCESSED-*' \
+        -printf '  %f\n'
 fi
 #+end_src
 
 If the count is zero or the project has no =inbox/= directory, the check is a silent no-op. If non-zero, the wrap is incomplete by default. The user resolves each item (process now, defer with reason in the valediction, or delete with rationale) before the validation checklist passes.
 
-This integrates with =process-inbox.org=, which stamps =:LAST_INBOX_PROCESS:= in =notes.org='s *Workflow State* section on completion. Wrap-up doesn't double-stamp; it only ensures the inbox is empty at session end.
+The check exempts =lint-followups.org= explicitly because lint-org runs earlier in the same wrap-up workflow and writes its judgment items to that file in =inbox/= by design. The file is a pipeline artifact for the next morning's =daily-prep=, not a handoff that needs the value gate.
+
+This integrates with =process-inbox.org=, which stamps =:LAST_INBOX_PROCESS:= in =notes.org='s *Workflow State* section on completion. Wrap-up doesn't double-stamp. It only ensures the inbox carries nothing but the expected pipeline artifacts at session end.
 
 *** Review-habit health check (surface a slipped daily task-review)
 
@@ -406,7 +413,7 @@ Before considering wrap-up complete:
 - [ ] =todo-cleanup.el= ran — hygiene pass + =--archive-done= + =--sync-child-priority= (if =todo.org= exists at project root)
 - [ ] =lint-org.el= ran on =todo.org= — mechanical fixes applied, judgments appended to follow-ups file (if =todo.org= exists)
 - [ ] Any orphan-planning-line warnings reviewed (fix or accept)
-- [ ] Inbox is empty (excluding =.gitkeep= and =PROCESSED-*= prefixes), OR each remaining item has an explicit deferral logged in the valediction
+- [ ] Inbox carries nothing but expected pipeline artifacts (=.gitkeep=, =lint-followups.org=, =PROCESSED-*= prefixes), OR each remaining handoff has an explicit deferral logged in the valediction
 - [ ] Linear Dev-Review sweep ran; any merged-PR tickets moved to Done or PM Acceptance (skip if project doesn't use Linear)
 - [ ] After wrap-up commit + push, =git status --short= is empty OR every remaining line has an explicit user-deferred decision logged in the valediction
 - [ ] Each leftover was investigated and the user saw a concrete resolution recommendation