Anti-garbage:
- derive.go: filter shell operators, flags, and version fragments from
  derived trigger keywords.
- DetectCorrection: fire only on explicit correction phrases and require
  the corrected commands to share a lead verb (shareLeadVerb), killing
  the 'corrected-cd' garbage class.
- extractTopic/leadVerb: skip shell plumbing (cd, sudo, operators,
  paths, flags) so topics resolve to real verbs.

Project -> global boundary:
- Split the reusability gate: NonReusableReason (machine-specific:
  absolute home paths) drops suggestions entirely; ProjectScopeReason
  (project-specific: repo-rooted ./scripts/... invocations, hardcoded
  release version tags) redirects them to ./.odek/skills instead of the
  global dir. Redirect is refused when the project dir resolves to the
  same location as the global dir (odek run from $HOME).
- Confine micro-curation (MicroCuration/RunAutoCurate) to skills
  physically stored under the global dir via Skill.Source.Dir, so a
  project skill can never be merged into a global skill or deleted by
  the curator (fail-closed on empty source).
- Wire projectDir through RunAutoSaveLoop and the CLI/serve/telegram
  call sites; reload + notifier events account for ProjectSaved.

Docs: LEARNING.md design decisions, AGENTS.md security architecture.

Skill bodies are session content written to disk permanently; a command
captured with credentials in it (curl -H 'Authorization: ...', export
AWS_..., etc.) would be immortalized in ~/.odek/skills. WriteSkill now
runs internal/redact over body + description: matches are replaced with
[REDACTED] and the skill is pinned to NeedsReview so the operator sees
why before it can auto-load. Covers every write path (auto-save,
interactive prompt, skill_save, curator merges, imports).

AutoSaveSuggestions kept the first MaxPerRun eligible suggestions in
heuristic emission order, so weak patterns could crowd out strong ones.
Eligible suggestions are now sorted by a deterministic substance score
(verification section, command-log evidence, body length, description,
LLM-judged provenance) before the cap is applied.

A single quirky session could previously produce a saved skill. The
auto-save pipeline now records each suggestion's fingerprint
(heuristic+name, stable across sessions) in ~/.odek/skills/.candidates.json
and only saves once the pattern recurs in a later session
(auto_save.min_occurrences, default 2; set 1 to disable). Pending
suggestions are reported in AutoSaveResult.Pending and verbose output.
Candidates unseen for 30 days are pruned.

Dedup was exact BodyHash only (and post-hoc via curation), so light
paraphrases accumulated as separate skills. AutoSaveSuggestions now
compares each quality-gated suggestion against existing skills in the
target dir with stopword-filtered Jaccard word-set similarity (>= 0.85
= duplicate, recorded in AutoSaveResult.DuplicateOf). Same-named saves
bypass the gate: re-saving a name is an update, not a duplicate.

Mechanical merges concatenated bodies with a 'Merged from X' separator,
producing ever-growing, contradictory skill files. When llm_curate is
enabled and an LLM client is available, ExecuteMicroCurationWithLLM now
asks the model to synthesize one deduplicated body (sanity-checked for
structure and size); any failure or invalid output falls back to the
mechanical merge. The worst-of provenance union from MergeSkills is
kept either way, so an LLM merge can never launder taint.

…ctive prompt

The project/global boundary only existed in the unattended pipeline.
skill_save now accepts scope: "project" to save project-specific
procedures to ./.odek/skills (refused when no distinct project dir
exists, e.g. odek run from $HOME), and the interactive learn prompt
gained a 'p' response with the same semantics. Both paths keep the
existing NeedsReview pinning.

The field-wise AutoSave merge in internal/config silently dropped the
new min_occurrences key. Also pins min_occurrences=1 in
TestRunLearn_MultiStepProcedure (it covers the save path; the gate has
its own unit tests) and documents the new gates in LEARNING.md,
CONFIG.md, and AGENTS.md.

… new gates

Interactive prompt examples now show the p=project option, config
snippets include auto_save.min_occurrences, the LEARNING.md limitations
section reflects save-time dedup, and SECURITY.md's skill provenance
section documents the scope gates and save-time hygiene (recurrence,
near-dup rejection, secret redaction).