--- claude-templates/.ai/workflows/wrap-it-up.org	2026-07-23 08:39:07.467575608 -0500
+++ /tmp/wu2.org	2026-07-23 20:49:55.500740517 -0500
@@ -189,6 +189,21 @@
 emacs --batch -q -l .ai/scripts/todo-cleanup.el --archive-done --check todo.org
 #+end_src
 
+*** Flag orphaned working/ directories
+
+#+begin_src bash
+for d in working/*/; do
+  [ -d "$d" ] || continue
+  s=$(basename "$d")
+  grep -q "working/$s/" todo.org 2>/dev/null || { echo "ORPHAN: $d (no todo.org reference)"; continue; }
+  awk -v s="$s" '/^\*\* /{h=$0} $0 ~ "working/" s "/" {print (h ~ /^\*\* (DONE|CANCELLED)/ ? "CLOSED-TASK: working/" s "/ — " h : "") ; exit}' todo.org
+done
+#+end_src
+
+Report only — never move or delete anything here. A =working/<slug>/= whose backing task is closed (or which no task references at all) is a filing candidate per =working-files.md=: rename each file individually and move it flat into its permanent home, then remove the empty directory.
+
+Filing is deliberately a judgment step and stays manual. Deciding each artifact's permanent home and giving it a meaningful name is what makes =assets/= searchable later, and it's also the moment you notice which artifacts aren't worth keeping. An automatic sweep would skip exactly that review, and sweeping to =temp/= would destroy the artifacts outright, since =temp/= is cleared just below.
+
 *** Clear temp/
 
 #+begin_src bash