[piyushmakhija28]

Every defect below was found by running something, not by reading.

1. The install instruction does not work

pip install claude-workflow-engine was the first command in Quick Start, marked "(recommended)". The package is not on PyPI:

$ curl -s -o /dev/null -w "%{http_code}" https://pypi.org/pypi/claude-workflow-engine/json
404

The badge above it linked to the same 404. Both removed; source install is now the only route and says so.

2. Every Run command was broken

v2.0.0 made --invoked-by=<command> mandatory. None of the three documented commands carried it. Running the first one exactly as printed:

[REFUSED] pipeline execution did not start: no --invoked-by= declaration was present.
[REFUSED] SRS FR-15 requires that a run begin only from an explicit SRS FR-17 command.
[REFUSED] Declare one with --invoked-by=<command>, where <command> is one of: plan,
          implement, review, document, release, run-pipeline.
[REFUSED] The supported route is the plugin dispatcher, which declares this for you.

Exit 0, nothing done. And the README did not mention the plugin at all — zero occurrences of the word in 845 lines, for the mechanism the refusal message itself calls "the supported route". The plugin commands are now documented first, with the direct-CLI form second for container entry points and manual runs.

3. The Hook System section described a deleted architecture

68 lines: a nine-row registration table, per-policy breakdowns, a Mermaid diagram, four findings. v2.0.0 deleted PreToolUse, PostToolUse and UserPromptSubmit — the section listed all three as Registered: Yes, and listed Notification as No when it is one of the two that survive.

Four of nine rows inverted. Being well-researched made it worse than a vague section: it reads as authoritative.

Replaced rather than patched, with what is true — which hooks remain, what replaced each deleted one (including that the MCP push gate was proved reachable before PreToolUse was deleted), that hooks/ still holds the now-unwired code, that the plugin ships zero hooks by ADR-010 with a CI job enforcing it, and the consequence stated plainly: nothing is enforced in a session where you do not invoke a command.

4. Step numbers predated the rename

References to Steps 10, 11, 12 and 13 — gone since the rename collapsed old 8–14 into 2–8. Mapped 10→4, 11→5, 12→6, 13→7 against CLAUDE.md's canonical list.

"8 active steps" appeared twice while the same file elsewhere said "9 active steps" and "Steps 0-8". Zero through eight is nine. The template fast-path was described as bypassing Step 0; it is Step 0 that detects the template and skips Step 1.

Also: the version badge read 1.20.3. sync-version.py rewrites the **Version:** footer but not the badge, so the badge had been drifting since 1.20.3 while the footer tracked every release. Now 2.1.0.

Verified

• The two documented --invoked-by values pass the real authorize() gate; the flagless form still refuses
• 57 documentation tests, all six CI gates
• CRLF count identical before and after (845 both), so the 81/81 diff is content, not a line-ending flip — the defect test_sync_version.py exists to guard

🤖 Generated with Claude Code