diff --git a/.ai/manifests/governance.json b/.ai/manifests/governance.json
index c175fa4cd..b3be0261e 100644
--- a/.ai/manifests/governance.json
+++ b/.ai/manifests/governance.json
@@ -1,7 +1,7 @@
 {
   "aiEntrypoints": [
     {
-      "bytes": 23170,
+      "bytes": 24426,
       "file": "CLAUDE.md"
     },
     {
@@ -54,7 +54,7 @@
   "looseDocs": 23,
   "rules": [
     {
-      "bytes": 19573,
+      "bytes": 20001,
       "file": "rules/00-master-rules.md"
     },
     {
@@ -245,6 +245,14 @@
       "bytes": 23088,
       "file": "rules/37-payg-credit-integrity.md"
     },
+    {
+      "bytes": 6068,
+      "file": "rules/38-adsense-eligibility-and-low-value-content.md"
+    },
+    {
+      "bytes": 3435,
+      "file": "rules/39-worktree-branch-completion-pr-and-release-notes.md"
+    },
     {
       "bytes": 5156,
       "file": "rules/README.md"
@@ -252,7 +260,7 @@
   ],
   "skills": [
     {
-      "bytes": 20103,
+      "bytes": 20338,
       "file": "skills/00-index.md"
     },
     {
@@ -431,6 +439,10 @@
       "bytes": 4194,
       "file": "skills/find-canonical-owner.md"
     },
+    {
+      "bytes": 3539,
+      "file": "skills/finish-worktree-branch-with-pr.md"
+    },
     {
       "bytes": 4302,
       "file": "skills/frontend-architecture-review.md"
diff --git a/.ai/manifests/hashes.json b/.ai/manifests/hashes.json
index 97048fc0d..67626ec79 100644
--- a/.ai/manifests/hashes.json
+++ b/.ai/manifests/hashes.json
@@ -8,7 +8,7 @@
     ".ai/manifests/environment-variables.json": "33602cbe",
     ".ai/manifests/event-graph.json": "c1cd05bc",
     ".ai/manifests/frontend-routes.json": "a52b7ece",
-    ".ai/manifests/governance.json": "f71a269b",
+    ".ai/manifests/governance.json": "e4492ebd",
     ".ai/manifests/i18n.json": "3befb756",
     ".ai/manifests/nginx-routes.json": "53c65be1",
     ".ai/manifests/packages.json": "cc928a4a",
@@ -18,7 +18,7 @@
     ".ai/manifests/rabbitmq-events.json": "bcaeb411",
     ".ai/manifests/repository.json": "047d93d0",
     ".ai/manifests/services.json": "9c92d2c4",
-    ".ai/manifests/tests.json": "4b6be224",
+    ".ai/manifests/tests.json": "4044f562",
     ".ai/manifests/workspace-dependency-graph.json": "80e5438b",
     ".ai/manifests/workspaces.json": "b5133e99",
     ".ai/packs/README.md": "2e64753b",
diff --git a/.ai/manifests/tests.json b/.ai/manifests/tests.json
index e99b36a04..4c1217b64 100644
--- a/.ai/manifests/tests.json
+++ b/.ai/manifests/tests.json
@@ -58,7 +58,7 @@
     },
     "claw-frontend": {
       "runner": "vitest",
-      "testFiles": 407
+      "testFiles": 410
     },
     "claw-health-service": {
       "runner": "jest",
@@ -102,5 +102,5 @@
     }
   },
   "generated": true,
-  "total": 1119
+  "total": 1122
 }
diff --git a/CLAUDE.md b/CLAUDE.md
index 6449e4625..638dae06c 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -164,49 +164,51 @@ Full checklist with rationale: [`rules/05-infra-rules.md`](rules/05-infra-rules.
 
 ## Where everything lives
 
-| You need                                                        | Go to                                                                                                                                                                                                 |
-| --------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| The blockers, in one page                                       | [`rules/00-non-negotiable-rules.md`](rules/00-non-negotiable-rules.md)                                                                                                                                |
-| Rule index                                                      | [`rules/00-master-rules.md`](rules/00-master-rules.md) · [`rules/README.md`](rules/README.md)                                                                                                         |
-| The 26 engineering mindsets                                     | [`rules/27-engineering-mindsets.md`](rules/27-engineering-mindsets.md)                                                                                                                                |
-| Knowledge, docs and skills that ship with the code              | [`rules/33-knowledge-compounding-and-context-velocity.md`](rules/33-knowledge-compounding-and-context-velocity.md) · [`skills/grow-the-knowledge-layer.md`](skills/grow-the-knowledge-layer.md)       |
-| Gate economy and machine resources                              | [`rules/34-gate-economy-and-machine-resources.md`](rules/34-gate-economy-and-machine-resources.md) · [`skills/run-gates-once-and-land.md`](skills/run-gates-once-and-land.md)                         |
-| Planning gate (Phase 0 / 0g)                                    | [`rules/01-planning-rules.md`](rules/01-planning-rules.md) · [`rules/01-task-intake-and-planning.md`](rules/01-task-intake-and-planning.md)                                                           |
-| Backend layering: controllers, services, managers, repositories | [`rules/02-backend-rules.md`](rules/02-backend-rules.md), [`rules/07`](rules/07-backend-controllers-and-transport.md)–[`rules/11`](rules/11-dtos-and-validation.md)                                   |
-| Frontend pages, hooks, components, queries                      | [`rules/03-frontend-rules.md`](rules/03-frontend-rules.md), [`rules/04`](rules/04-nextjs-app-router.md)–[`rules/06`](rules/06-frontend-queries-and-cache.md)                                          |
-| Declaration ownership (types/enums/constants)                   | [`rules/12-types-enums-constants-and-declaration-ownership.md`](rules/12-types-enums-constants-and-declaration-ownership.md)                                                                          |
-| Library wrappers and adapters                                   | [`rules/13-external-library-wrappers-and-adapters.md`](rules/13-external-library-wrappers-and-adapters.md)                                                                                            |
-| Shared packages and boundaries                                  | [`rules/14-shared-packages.md`](rules/14-shared-packages.md) · [`context/package-boundaries.md`](context/package-boundaries.md)                                                                       |
-| Config and environment                                          | [`rules/15-configuration-and-environment.md`](rules/15-configuration-and-environment.md) · [`docs/06-data/environment-variables.md`](docs/06-data/environment-variables.md)                           |
-| Auth, permissions, IDOR                                         | [`rules/16-authentication-and-authorization.md`](rules/16-authentication-and-authorization.md) · [`context/permission-map.md`](context/permission-map.md)                                             |
-| Events and jobs                                                 | [`rules/17-rabbitmq-events-and-jobs.md`](rules/17-rabbitmq-events-and-jobs.md) · [`context/event-flow-map.md`](context/event-flow-map.md)                                                             |
-| Billing integrity and API contracts                             | [`rules/28-billing-integrity-and-api-contracts.md`](rules/28-billing-integrity-and-api-contracts.md) · [`docs/03-architecture/billing-threat-model.md`](docs/03-architecture/billing-threat-model.md) |
-| Errors, logging, redaction                                      | [`rules/18-error-handling-and-reliability.md`](rules/18-error-handling-and-reliability.md) · [`rules/19-logging-observability-and-redaction.md`](rules/19-logging-observability-and-redaction.md)     |
-| i18n                                                            | [`rules/20-i18n-and-user-facing-messages.md`](rules/20-i18n-and-user-facing-messages.md)                                                                                                              |
-| Security and secrets                                            | [`rules/08-security-rules.md`](rules/08-security-rules.md) · [`rules/21-security-and-secrets.md`](rules/21-security-and-secrets.md)                                                                   |
-| Testing and coverage                                            | [`rules/04-testing-rules.md`](rules/04-testing-rules.md) · [`rules/22-testing-and-coverage.md`](rules/22-testing-and-coverage.md) · [`context/testing-map.md`](context/testing-map.md)                |
-| Generated files and freshness                                   | [`rules/24-generated-files-and-knowledge-freshness.md`](rules/24-generated-files-and-knowledge-freshness.md) · [`context/generated-file-map.md`](context/generated-file-map.md)                       |
-| Exceptions and waivers                                          | [`rules/25-exceptions-and-waivers.md`](rules/25-exceptions-and-waivers.md) · [`docs/exceptions/README.md`](docs/exceptions/README.md)                                                                 |
-| Refactor discipline                                             | [`rules/09-refactor-rules.md`](rules/09-refactor-rules.md) · [`skills/09-refactor-toolkit.md`](skills/09-refactor-toolkit.md)                                                                         |
-| Exact commands (build, test, prisma, docker, release)           | [`context/stack-and-toolchain.md`](context/stack-and-toolchain.md)                                                                                                                                    |
-| Which task → which rules/skills/reviewers                       | [`context/task-router.md`](context/task-router.md)                                                                                                                                                    |
-| Where a kind of code lives                                      | [`context/codebase-navigation.md`](context/codebase-navigation.md)                                                                                                                                    |
-| Who owns which table                                            | [`context/database-ownership-map.md`](context/database-ownership-map.md)                                                                                                                              |
-| Request and data flow across services                           | [`docs/03-architecture/end-to-end-data-flow.md`](docs/03-architecture/end-to-end-data-flow.md)                                                                                                        |
-| Routing modes and capability classes                            | [`docs/03-architecture/routing-engine.md`](docs/03-architecture/routing-engine.md)                                                                                                                    |
-| Model catalog                                                   | [`docs/03-architecture/model-catalog-architecture.md`](docs/03-architecture/model-catalog-architecture.md)                                                                                            |
-| Runtime progress / SSE                                          | [`docs/03-architecture/runtime-progress.md`](docs/03-architecture/runtime-progress.md)                                                                                                                |
-| Billing, subscriptions, quotas, threat model                    | [`docs/03-architecture/billing-threat-model.md`](docs/03-architecture/billing-threat-model.md)                                                                                                        |
-| The money NUMBERS: plan allowances, margin, credit terms        | [`docs/business/`](docs/business/README.md)                                                                                                                                                           |
-| Nginx reference                                                 | [`docs/08-runtime-devops/nginx-reference.md`](docs/08-runtime-devops/nginx-reference.md)                                                                                                              |
-| Docker, GPU overlays, rebuild procedure                         | [`docs/08-runtime-devops/docker-guide.md`](docs/08-runtime-devops/docker-guide.md) · [`skills/06-docker-toolkit.md`](skills/06-docker-toolkit.md)                                                     |
-| Build system (tsgo, tsc-alias, CI)                              | [`docs/08-runtime-devops/build-system.md`](docs/08-runtime-devops/build-system.md)                                                                                                                    |
-| TLS / mkcert                                                    | [`docs/08-runtime-devops/tls-setup.md`](docs/08-runtime-devops/tls-setup.md)                                                                                                                          |
-| Quality-engineering lifecycle and standards                     | [`docs/16-quality-engineering/`](docs/16-quality-engineering/)                                                                                                                                        |
-| Something is broken — runbooks                                  | [`docs/11-runbooks/README.md`](docs/11-runbooks/README.md)                                                                                                                                            |
-| Architecture decisions                                          | [`docs/13-adr/adr-index.md`](docs/13-adr/adr-index.md)                                                                                                                                                |
-| Per-service deep dive                                           | `docs/04-backend/service-guide-<name>.md` · `apps/claw-<name>/CLAUDE.md`                                                                                                                              |
-| Skill runbooks (scaffold, debug, QA, DB, events)                | [`skills/00-index.md`](skills/00-index.md)                                                                                                                                                            |
+| You need                                                        | Go to                                                                                                                                                                                                                 |
+| --------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| The blockers, in one page                                       | [`rules/00-non-negotiable-rules.md`](rules/00-non-negotiable-rules.md)                                                                                                                                                |
+| Rule index                                                      | [`rules/00-master-rules.md`](rules/00-master-rules.md) · [`rules/README.md`](rules/README.md)                                                                                                                         |
+| The 26 engineering mindsets                                     | [`rules/27-engineering-mindsets.md`](rules/27-engineering-mindsets.md)                                                                                                                                                |
+| Knowledge, docs and skills that ship with the code              | [`rules/33-knowledge-compounding-and-context-velocity.md`](rules/33-knowledge-compounding-and-context-velocity.md) · [`skills/grow-the-knowledge-layer.md`](skills/grow-the-knowledge-layer.md)                       |
+| Gate economy and machine resources                              | [`rules/34-gate-economy-and-machine-resources.md`](rules/34-gate-economy-and-machine-resources.md) · [`skills/run-gates-once-and-land.md`](skills/run-gates-once-and-land.md)                                         |
+| Planning gate (Phase 0 / 0g)                                    | [`rules/01-planning-rules.md`](rules/01-planning-rules.md) · [`rules/01-task-intake-and-planning.md`](rules/01-task-intake-and-planning.md)                                                                           |
+| Backend layering: controllers, services, managers, repositories | [`rules/02-backend-rules.md`](rules/02-backend-rules.md), [`rules/07`](rules/07-backend-controllers-and-transport.md)–[`rules/11`](rules/11-dtos-and-validation.md)                                                   |
+| Frontend pages, hooks, components, queries                      | [`rules/03-frontend-rules.md`](rules/03-frontend-rules.md), [`rules/04`](rules/04-nextjs-app-router.md)–[`rules/06`](rules/06-frontend-queries-and-cache.md)                                                          |
+| Declaration ownership (types/enums/constants)                   | [`rules/12-types-enums-constants-and-declaration-ownership.md`](rules/12-types-enums-constants-and-declaration-ownership.md)                                                                                          |
+| Library wrappers and adapters                                   | [`rules/13-external-library-wrappers-and-adapters.md`](rules/13-external-library-wrappers-and-adapters.md)                                                                                                            |
+| Shared packages and boundaries                                  | [`rules/14-shared-packages.md`](rules/14-shared-packages.md) · [`context/package-boundaries.md`](context/package-boundaries.md)                                                                                       |
+| Config and environment                                          | [`rules/15-configuration-and-environment.md`](rules/15-configuration-and-environment.md) · [`docs/06-data/environment-variables.md`](docs/06-data/environment-variables.md)                                           |
+| Auth, permissions, IDOR                                         | [`rules/16-authentication-and-authorization.md`](rules/16-authentication-and-authorization.md) · [`context/permission-map.md`](context/permission-map.md)                                                             |
+| Events and jobs                                                 | [`rules/17-rabbitmq-events-and-jobs.md`](rules/17-rabbitmq-events-and-jobs.md) · [`context/event-flow-map.md`](context/event-flow-map.md)                                                                             |
+| Billing integrity and API contracts                             | [`rules/28-billing-integrity-and-api-contracts.md`](rules/28-billing-integrity-and-api-contracts.md) · [`docs/03-architecture/billing-threat-model.md`](docs/03-architecture/billing-threat-model.md)                 |
+| Errors, logging, redaction                                      | [`rules/18-error-handling-and-reliability.md`](rules/18-error-handling-and-reliability.md) · [`rules/19-logging-observability-and-redaction.md`](rules/19-logging-observability-and-redaction.md)                     |
+| i18n                                                            | [`rules/20-i18n-and-user-facing-messages.md`](rules/20-i18n-and-user-facing-messages.md)                                                                                                                              |
+| Security and secrets                                            | [`rules/08-security-rules.md`](rules/08-security-rules.md) · [`rules/21-security-and-secrets.md`](rules/21-security-and-secrets.md)                                                                                   |
+| Testing and coverage                                            | [`rules/04-testing-rules.md`](rules/04-testing-rules.md) · [`rules/22-testing-and-coverage.md`](rules/22-testing-and-coverage.md) · [`context/testing-map.md`](context/testing-map.md)                                |
+| Generated files and freshness                                   | [`rules/24-generated-files-and-knowledge-freshness.md`](rules/24-generated-files-and-knowledge-freshness.md) · [`context/generated-file-map.md`](context/generated-file-map.md)                                       |
+| Exceptions and waivers                                          | [`rules/25-exceptions-and-waivers.md`](rules/25-exceptions-and-waivers.md) · [`docs/exceptions/README.md`](docs/exceptions/README.md)                                                                                 |
+| Refactor discipline                                             | [`rules/09-refactor-rules.md`](rules/09-refactor-rules.md) · [`skills/09-refactor-toolkit.md`](skills/09-refactor-toolkit.md)                                                                                         |
+| AdSense eligibility / low-value-content policy                  | [`rules/38-adsense-eligibility-and-low-value-content.md`](rules/38-adsense-eligibility-and-low-value-content.md) · [`docs/03-architecture/adsense-eligibility.md`](docs/03-architecture/adsense-eligibility.md)       |
+| Finishing an agent-created worktree/branch (PR + release notes) | [`rules/39-worktree-branch-completion-pr-and-release-notes.md`](rules/39-worktree-branch-completion-pr-and-release-notes.md) · [`skills/finish-worktree-branch-with-pr.md`](skills/finish-worktree-branch-with-pr.md) |
+| Exact commands (build, test, prisma, docker, release)           | [`context/stack-and-toolchain.md`](context/stack-and-toolchain.md)                                                                                                                                                    |
+| Which task → which rules/skills/reviewers                       | [`context/task-router.md`](context/task-router.md)                                                                                                                                                                    |
+| Where a kind of code lives                                      | [`context/codebase-navigation.md`](context/codebase-navigation.md)                                                                                                                                                    |
+| Who owns which table                                            | [`context/database-ownership-map.md`](context/database-ownership-map.md)                                                                                                                                              |
+| Request and data flow across services                           | [`docs/03-architecture/end-to-end-data-flow.md`](docs/03-architecture/end-to-end-data-flow.md)                                                                                                                        |
+| Routing modes and capability classes                            | [`docs/03-architecture/routing-engine.md`](docs/03-architecture/routing-engine.md)                                                                                                                                    |
+| Model catalog                                                   | [`docs/03-architecture/model-catalog-architecture.md`](docs/03-architecture/model-catalog-architecture.md)                                                                                                            |
+| Runtime progress / SSE                                          | [`docs/03-architecture/runtime-progress.md`](docs/03-architecture/runtime-progress.md)                                                                                                                                |
+| Billing, subscriptions, quotas, threat model                    | [`docs/03-architecture/billing-threat-model.md`](docs/03-architecture/billing-threat-model.md)                                                                                                                        |
+| The money NUMBERS: plan allowances, margin, credit terms        | [`docs/business/`](docs/business/README.md)                                                                                                                                                                           |
+| Nginx reference                                                 | [`docs/08-runtime-devops/nginx-reference.md`](docs/08-runtime-devops/nginx-reference.md)                                                                                                                              |
+| Docker, GPU overlays, rebuild procedure                         | [`docs/08-runtime-devops/docker-guide.md`](docs/08-runtime-devops/docker-guide.md) · [`skills/06-docker-toolkit.md`](skills/06-docker-toolkit.md)                                                                     |
+| Build system (tsgo, tsc-alias, CI)                              | [`docs/08-runtime-devops/build-system.md`](docs/08-runtime-devops/build-system.md)                                                                                                                                    |
+| TLS / mkcert                                                    | [`docs/08-runtime-devops/tls-setup.md`](docs/08-runtime-devops/tls-setup.md)                                                                                                                                          |
+| Quality-engineering lifecycle and standards                     | [`docs/16-quality-engineering/`](docs/16-quality-engineering/)                                                                                                                                                        |
+| Something is broken — runbooks                                  | [`docs/11-runbooks/README.md`](docs/11-runbooks/README.md)                                                                                                                                                            |
+| Architecture decisions                                          | [`docs/13-adr/adr-index.md`](docs/13-adr/adr-index.md)                                                                                                                                                                |
+| Per-service deep dive                                           | `docs/04-backend/service-guide-<name>.md` · `apps/claw-<name>/CLAUDE.md`                                                                                                                                              |
+| Skill runbooks (scaffold, debug, QA, DB, events)                | [`skills/00-index.md`](skills/00-index.md)                                                                                                                                                                            |
 
 ## Per-workspace rules still apply
 
diff --git a/apps/claw-frontend/CLAUDE.md b/apps/claw-frontend/CLAUDE.md
index c535c277d..fb04d8c50 100644
--- a/apps/claw-frontend/CLAUDE.md
+++ b/apps/claw-frontend/CLAUDE.md
@@ -499,3 +499,52 @@ that 403s on every call.
 - Publishing mints a new immutable version and pins the model as an admin
   override; the help text says so, because automated sync will then never
   refresh it.
+
+## AdSense script vs verification vs ad units (2026-09-01)
+
+An AdSense "low value content" rejection traced back to `AdSenseHead` being
+mounted in the ROOT layout (`app/layout.tsx`), with no pathname check —
+`(auth)`, `(portal)`, and `(payment)` all render through the root layout, so
+the ad loader script executed on login, chat, billing and settings. A
+pathname-aware hook (`useAdSenseScript` / `shouldLoadAdSenseScript`) already
+existed but was never wired into anything actually mounted — dead code
+guarding nothing. Comments across the codebase claimed "the script only ever
+lives in the marketing layout," which was aspirational, not true.
+
+Fixed by splitting into three independently-gated pieces (see
+`docs/03-architecture/adsense-eligibility.md` and
+`rules/38-adsense-eligibility-and-low-value-content.md`):
+
+- **Verification** (`<meta name="google-adsense-account">`) stays in
+  `AdSenseHead`, now mounted only in `(marketing)/layout.tsx`.
+- **The loader script** moved to `AdSenseScriptLoader`, a client component
+  that re-derives pathname eligibility via the (previously-dead)
+  `useAdSenseScript` hook. `reviewMode` no longer bypasses eligibility — a
+  page the reviewer should never see monetized on must not carry the loader
+  either, verification or not.
+- **Manual ad units** (`AdUnit`) were already correctly gated; unchanged.
+
+`app/__tests__/adsense-route-boundary.test.ts` asserts the route boundary
+structurally (reads each layout's source, fails if AdSense is referenced
+outside `(marketing)`) — a regression here fails on exactly the bug that
+caused the rejection, not on a behavioral edge case a future refactor might
+miss.
+
+**A raw `<script src>` rendered from a client component is hoisted to the
+real `document.head` by React regardless of where in the tree it renders**,
+and is NOT removed on unmount. This broke a first draft of
+`adsense-script-loader.test.tsx`: `@testing-library/react`'s `render()`
+mounts into real jsdom, so a script asserted-absent in one test could still
+be the leftover DOM node from an earlier test in the same file (jsdom is not
+reset between `it()` blocks). Use `renderToStaticMarkup` for this component's
+tests instead — it never touches the real document.
+
+Public chat shares also got a **temporary, blanket kill switch**
+(`CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED`,
+`constants/chat-share-review-lockdown.constants.ts`) that overrides the
+existing per-snapshot `adsEligible`/`indexEligible` system to `false`/excluded
+everywhere (ads, indexing, sitemap, RSS) for the AdSense review window —
+`/rss.xml` in particular is served by a SEPARATE implementation
+(`global-rss.service.ts`) from the per-locale feeds (`rss.service.ts`); both
+needed the same guard, and missing the second one was caught only by running
+the full test suite, not by reasoning about the call graph.
diff --git a/apps/claw-frontend/src/app/(marketing)/layout.tsx b/apps/claw-frontend/src/app/(marketing)/layout.tsx
index ac61a7d06..fe43f6a8b 100644
--- a/apps/claw-frontend/src/app/(marketing)/layout.tsx
+++ b/apps/claw-frontend/src/app/(marketing)/layout.tsx
@@ -1,3 +1,4 @@
+import { AdSenseHead } from '@/components/adsense/adsense-head';
 import { SkipToContent } from '@/components/layout/skip-to-content';
 import { MarketingFooter } from '@/components/marketing/marketing-footer';
 import { MarketingHeader } from '@/components/marketing/marketing-header';
@@ -9,9 +10,16 @@ export default function MarketingLayout({
 }): React.ReactElement {
   return (
     <div className="flex min-h-dvh flex-col">
-      {/* AdSense script lives ONLY here in the marketing layout — it can
-       * never appear in the (portal) or (auth) trees. It self-gates on
-       * configuration + eligibility + review/serving flags. */}
+      {/* AdSense is mounted ONLY here — it can never appear in the (portal),
+       * (auth) or (payment) trees, because they render through the root
+       * layout without this component at all. Even inside this tree the
+       * verification meta tag is the only thing unconditional: the loader
+       * script additionally self-gates per-pathname (AdSenseScriptLoader),
+       * because this group also contains non-eligible pages such as
+       * /share/chat, /terms and /privacy. Both elements are hoisted to the
+       * real document <head> by React even though this layout renders inside
+       * <body> — see rules/38-adsense-eligibility-and-low-value-content.md. */}
+      <AdSenseHead />
       <SkipToContent />
       <MarketingHeader />
       <main id="main-content" tabIndex={-1} className="flex-1 focus-visible:outline-none">
diff --git a/apps/claw-frontend/src/app/__tests__/adsense-route-boundary.test.ts b/apps/claw-frontend/src/app/__tests__/adsense-route-boundary.test.ts
new file mode 100644
index 000000000..98d67b75f
--- /dev/null
+++ b/apps/claw-frontend/src/app/__tests__/adsense-route-boundary.test.ts
@@ -0,0 +1,43 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { describe, expect, it } from 'vitest';
+
+const APP_DIR = join(__dirname, '..');
+
+function readLayout(relativePath: string): string {
+  return readFileSync(join(APP_DIR, relativePath), 'utf8');
+}
+
+const ADSENSE_REFERENCE_PATTERN = /AdSenseHead|AdSenseScriptLoader|adsbygoogle/u;
+
+/**
+ * Regression guard for the AdSense "low value content" fix: the loader must
+ * be reachable ONLY through the (marketing) layout. Reading source text
+ * rather than rendering the tree avoids fighting next/font mocking for a
+ * check that is purely about which files reference which component — see
+ * rules/38-adsense-eligibility-and-low-value-content.md.
+ */
+describe('AdSense script route boundary', () => {
+  it('is never referenced by the root layout', () => {
+    expect(readLayout('layout.tsx')).not.toMatch(ADSENSE_REFERENCE_PATTERN);
+  });
+
+  it('is never referenced by the (auth) layout', () => {
+    expect(readLayout('(auth)/layout.tsx')).not.toMatch(ADSENSE_REFERENCE_PATTERN);
+  });
+
+  it('is never referenced by the (portal) layout', () => {
+    expect(readLayout('(portal)/layout.tsx')).not.toMatch(ADSENSE_REFERENCE_PATTERN);
+  });
+
+  it('is mounted by the (marketing) layout', () => {
+    expect(readLayout('(marketing)/layout.tsx')).toMatch(/AdSenseHead/u);
+  });
+
+  it('the (payment) route group has no layout of its own to mount it from', () => {
+    // If this ever starts failing because a layout.tsx was added under
+    // (payment), that new file needs the same "no AdSense" assertion above.
+    expect(() => readLayout('(payment)/layout.tsx')).toThrow();
+  });
+});
diff --git a/apps/claw-frontend/src/app/__tests__/rss.test.ts b/apps/claw-frontend/src/app/__tests__/rss.test.ts
index c0ff4e6a7..5ec908547 100644
--- a/apps/claw-frontend/src/app/__tests__/rss.test.ts
+++ b/apps/claw-frontend/src/app/__tests__/rss.test.ts
@@ -75,7 +75,7 @@ describe('global rss feed', () => {
   );
 
   it(
-    'includes public chat shares alongside the registry pages',
+    'excludes public chat shares while the AdSense review lockdown is on, without calling the chat feed at all',
     async () => {
       mockListPublicChatRssEntries.mockImplementation((locale: string) =>
         Promise.resolve(
@@ -96,17 +96,56 @@ describe('global rss feed', () => {
 
       const xml = await (await GET(new Request('https://claw.example/rss.xml'))).text();
 
+      expect(xml).not.toContain('/share/chat/');
+      expect(xml).not.toContain('<category>public-chat</category>');
+      expect(mockListPublicChatRssEntries).not.toHaveBeenCalled();
+    },
+    DYNAMIC_IMPORT_TIMEOUT_MS,
+  );
+
+  it(
+    'resumes including public chat shares once the review lockdown is lifted',
+    async () => {
+      vi.doMock('@/constants/chat-share-review-lockdown.constants', () => ({
+        CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED: false,
+      }));
+      mockListPublicChatRssEntries.mockImplementation((locale: string) =>
+        Promise.resolve(
+          locale === 'de'
+            ? [
+                {
+                  publicShareId: 'share-abc',
+                  contentLocale: 'de',
+                  title: 'Ein geteilter Chat',
+                  description: 'Zusammenfassung',
+                  publishedAt: '2026-08-20T10:00:00.000Z',
+                },
+              ]
+            : [],
+        ),
+      );
+      const { GET } = await import('../rss.xml/route');
+
+      const xml = await (await GET(new Request('https://claw.example/rss.xml'))).text();
+
       expect(xml).toContain('https://claw.example/de/share/chat/share-abc');
       expect(xml).toContain('<category>public-chat</category>');
+
+      vi.doUnmock('@/constants/chat-share-review-lockdown.constants');
     },
     DYNAMIC_IMPORT_TIMEOUT_MS,
   );
 
   // One locale's chat feed failing must not cost the other twelve, and must
-  // never cost the registry pages, which need no upstream at all.
+  // never cost the registry pages, which need no upstream at all. Verified
+  // with the AdSense review lockdown lifted: while it is on, the chat feed is
+  // never called at all, so it cannot degrade — see the lockdown test below.
   it(
     'still serves every page when a locale chat feed is unavailable',
     async () => {
+      vi.doMock('@/constants/chat-share-review-lockdown.constants', () => ({
+        CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED: false,
+      }));
       mockListPublicChatRssEntries.mockImplementation((locale: string) =>
         Promise.resolve(locale === 'ja' ? null : []),
       );
@@ -118,6 +157,23 @@ describe('global rss feed', () => {
       expect(response.status).toBe(200);
       expect(response.headers.get('X-Claw-Discovery-Degraded')).toBe('chat-feed-unavailable');
       expect(xml).toContain('https://claw.example/ja/about');
+
+      vi.doUnmock('@/constants/chat-share-review-lockdown.constants');
+    },
+    DYNAMIC_IMPORT_TIMEOUT_MS,
+  );
+
+  it(
+    'cannot be degraded by the chat feed while the AdSense review lockdown is on, since it is never called',
+    async () => {
+      mockListPublicChatRssEntries.mockImplementation(() => Promise.resolve(null));
+      const { GET } = await import('../rss.xml/route');
+
+      const response = await GET(new Request('https://claw.example/rss.xml'));
+
+      expect(response.status).toBe(200);
+      expect(response.headers.get('X-Claw-Discovery-Degraded')).toBeNull();
+      expect(mockListPublicChatRssEntries).not.toHaveBeenCalled();
     },
     DYNAMIC_IMPORT_TIMEOUT_MS,
   );
@@ -134,6 +190,12 @@ describe('global rss feed', () => {
   it(
     'keeps every registry page ahead of chats in document order, even when chats are dated later',
     async () => {
+      // Ordering is a property of the merge logic, independent of the AdSense
+      // review lockdown — verified here with the lockdown lifted so chat
+      // entries actually reach the merge to be ordered.
+      vi.doMock('@/constants/chat-share-review-lockdown.constants', () => ({
+        CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED: false,
+      }));
       const FAR_FUTURE_PUBLISHED_AT = '2099-01-01T00:00:00.000Z';
       mockListPublicChatRssEntries.mockImplementation((locale: string) =>
         Promise.resolve([
@@ -170,6 +232,8 @@ describe('global rss feed', () => {
         expect(pageIndex).toBeGreaterThan(-1);
         expect(pageIndex).toBeLessThan(firstChatIndex);
       }
+
+      vi.doUnmock('@/constants/chat-share-review-lockdown.constants');
     },
     DYNAMIC_IMPORT_TIMEOUT_MS,
   );
diff --git a/apps/claw-frontend/src/app/__tests__/sitemap-google-readability.test.ts b/apps/claw-frontend/src/app/__tests__/sitemap-google-readability.test.ts
index 37d05653f..19c4f328f 100644
--- a/apps/claw-frontend/src/app/__tests__/sitemap-google-readability.test.ts
+++ b/apps/claw-frontend/src/app/__tests__/sitemap-google-readability.test.ts
@@ -197,8 +197,14 @@ describe('sitemaps are readable by Google', () => {
   // reach Google through the same documents and carry a different lastmod
   // source (`updatedAt`, a full timestamp) and a different URL shape.
   it(
-    'holds the chat half to the same rules as the pages half',
+    'holds the chat half to the same rules as the pages half, once the AdSense review lockdown is lifted',
     async () => {
+      // CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED excludes chats-*.xml entirely today
+      // (asserted in sitemap.test.ts); this test exercises the URL/lastmod
+      // shape the chat half must have once that lockdown is lifted.
+      vi.doMock('@/constants/chat-share-review-lockdown.constants', () => ({
+        CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED: false,
+      }));
       mockChatSharePage.mockResolvedValue({
         items: [
           {
@@ -218,6 +224,8 @@ describe('sitemaps are readable by Google', () => {
       expect(location).toBe(`${SITE}/en/share/chat/share-abc`);
       expect(new URL(location).host).toBe(new URL(SITE).host);
       expect(isW3cDatetime(stamp)).toBe(true);
+
+      vi.doUnmock('@/constants/chat-share-review-lockdown.constants');
     },
     DYNAMIC_IMPORT_TIMEOUT_MS,
   );
diff --git a/apps/claw-frontend/src/app/__tests__/sitemap.test.ts b/apps/claw-frontend/src/app/__tests__/sitemap.test.ts
index d2426fbc1..3e124156a 100644
--- a/apps/claw-frontend/src/app/__tests__/sitemap.test.ts
+++ b/apps/claw-frontend/src/app/__tests__/sitemap.test.ts
@@ -28,7 +28,7 @@ describe('sitemap index route', () => {
   });
 
   it(
-    'publishes localized page and bounded chat child documents',
+    'publishes localized page documents and excludes chat shares while the AdSense review lockdown is on',
     async () => {
       vi.stubEnv('NODE_ENV', 'production');
       process.env['SITE_URL'] = 'https://claw.example';
@@ -43,9 +43,36 @@ describe('sitemap index route', () => {
       expect(xml).toContain('https://claw.example/sitemaps/en/pages-1.xml');
       expect(xml).toContain('https://claw.example/sitemaps/ar/pages-1.xml');
       expect(xml).toContain('https://claw.example/sitemaps/zh/pages-1.xml');
+      // CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED excludes chat shares from the
+      // sitemap entirely for the duration of the AdSense review — no
+      // chats-*.xml child document is referenced, and the chat-service
+      // count lookup is skipped rather than fetched and discarded.
+      expect(xml).not.toContain('/chats-');
+      expect(xml).not.toContain('/share/chat/');
+      expect(mockCountIndexableChatShares).not.toHaveBeenCalled();
+    },
+    DYNAMIC_IMPORT_TIMEOUT_MS,
+  );
+
+  it(
+    'resumes publishing bounded chat child documents once the review lockdown is lifted',
+    async () => {
+      vi.doMock('@/constants/chat-share-review-lockdown.constants', () => ({
+        CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED: false,
+      }));
+      vi.stubEnv('NODE_ENV', 'production');
+      process.env['SITE_URL'] = 'https://claw.example';
+      mockCountIndexableChatShares.mockImplementation((locale: string) =>
+        Promise.resolve({ locale, count: locale === 'ja' ? 40_001 : 0 }),
+      );
+      const { GET } = await import('../sitemap.xml/route');
+
+      const xml = await (await GET()).text();
+
       expect(xml).toContain('https://claw.example/sitemaps/ja/chats-1.xml');
       expect(xml).toContain('https://claw.example/sitemaps/ja/chats-2.xml');
-      expect(xml).not.toContain('/share/chat/');
+
+      vi.doUnmock('@/constants/chat-share-review-lockdown.constants');
     },
     DYNAMIC_IMPORT_TIMEOUT_MS,
   );
diff --git a/apps/claw-frontend/src/app/layout.tsx b/apps/claw-frontend/src/app/layout.tsx
index 9636224b4..c966c90a0 100644
--- a/apps/claw-frontend/src/app/layout.tsx
+++ b/apps/claw-frontend/src/app/layout.tsx
@@ -2,7 +2,6 @@ import type { Metadata, Viewport } from 'next';
 import { Archivo, IBM_Plex_Mono, Inter } from 'next/font/google';
 import { headers } from 'next/headers';
 
-import { AdSenseHead } from '@/components/adsense/adsense-head';
 import { AnalyticsHead } from '@/components/analytics/analytics-head';
 import { AnalyticsNoscript } from '@/components/analytics/analytics-noscript';
 import { LOCALE_REQUEST_HEADER } from '@/constants/locale-routing.constants';
@@ -71,9 +70,11 @@ export default async function RootLayout({
     >
       <head>
         {/* First in the head: GTM measures from the moment its snippet runs, so
-            anything above it is time the container never sees. */}
+            anything above it is time the container never sees. AdSense is NOT
+            mounted here on purpose — it lives only in the (marketing) layout,
+            so the loader can never execute on auth/portal/payment routes. See
+            rules/38-adsense-eligibility-and-low-value-content.md. */}
         <AnalyticsHead />
-        <AdSenseHead />
         <script
           nonce={nonce}
           suppressHydrationWarning
diff --git a/apps/claw-frontend/src/app/sitemap.xml/route.ts b/apps/claw-frontend/src/app/sitemap.xml/route.ts
index af7f94c52..e5edffe20 100644
--- a/apps/claw-frontend/src/app/sitemap.xml/route.ts
+++ b/apps/claw-frontend/src/app/sitemap.xml/route.ts
@@ -1,3 +1,4 @@
+import { CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED } from '@/constants/chat-share-review-lockdown.constants';
 import {
   DISCOVERY_CACHE_CONTROL,
   SITEMAP_URL_CHUNK_SIZE,
@@ -20,9 +21,14 @@ export async function GET(): Promise<Response> {
   }
 
   const siteUrl = getSiteUrl();
-  const counts = await Promise.all(
-    SUPPORTED_LOCALES.map(async ({ locale }) => countIndexableChatShares(locale)),
-  );
+  // During the AdSense review window, chat shares are excluded from the
+  // sitemap outright (CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED) — skip the
+  // chat-service round trip entirely rather than fetch counts nothing will use.
+  const counts = CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED
+    ? []
+    : await Promise.all(
+        SUPPORTED_LOCALES.map(async ({ locale }) => countIndexableChatShares(locale)),
+      );
   const childUrls: string[] = [];
   for (const { locale } of SUPPORTED_LOCALES) {
     // Page chunks are counted rather than assumed. Hardcoding `pages-1.xml`
diff --git a/apps/claw-frontend/src/app/sitemaps/[locale]/[document]/route.ts b/apps/claw-frontend/src/app/sitemaps/[locale]/[document]/route.ts
index 01a761980..b8a30a669 100644
--- a/apps/claw-frontend/src/app/sitemaps/[locale]/[document]/route.ts
+++ b/apps/claw-frontend/src/app/sitemaps/[locale]/[document]/route.ts
@@ -1,4 +1,5 @@
 import { CHAT_SHARE_SITEMAP_PAGE_SIZE } from '@/constants/chat-share-api.constants';
+import { CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED } from '@/constants/chat-share-review-lockdown.constants';
 import {
   DISCOVERY_CACHE_CONTROL,
   SITEMAP_URL_CHUNK_SIZE,
@@ -61,6 +62,12 @@ export async function GET(_request: Request, context: DiscoveryRouteContext): Pr
       };
     });
   } else if (chatMatch?.[1] !== undefined) {
+    // The index (sitemap.xml/route.ts) never references chats-*.xml while the
+    // review lockdown is on, so reaching here means a stale cached index —
+    // answer the same as any other chunk that no longer exists.
+    if (CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED) {
+      return new Response(null, { status: 404 });
+    }
     const chunk = Number(chatMatch[1]);
     if (!Number.isSafeInteger(chunk) || chunk < 1) {
       return new Response(null, { status: 404 });
diff --git a/apps/claw-frontend/src/components/adsense/__tests__/adsense-head.test.tsx b/apps/claw-frontend/src/components/adsense/__tests__/adsense-head.test.tsx
index d28eca566..b3489f15f 100644
--- a/apps/claw-frontend/src/components/adsense/__tests__/adsense-head.test.tsx
+++ b/apps/claw-frontend/src/components/adsense/__tests__/adsense-head.test.tsx
@@ -5,10 +5,19 @@ vi.mock('next/headers', () => ({
   headers: (): Promise<Headers> => Promise.resolve(new Headers({ 'x-nonce': 'test-nonce' })),
 }));
 
+// AdSenseScriptLoader owns the pathname-eligibility decision (see its own
+// test file); AdSenseHead only needs to prove it renders the loader at all
+// alongside the verification meta tag, so the loader is stubbed here.
+vi.mock('@/components/adsense/adsense-script-loader', () => ({
+  AdSenseScriptLoader: ({ nonce }: { nonce: string | undefined }): React.ReactElement => (
+    <script data-testid="stub-loader" nonce={nonce} />
+  ),
+}));
+
 describe('AdSenseHead', () => {
   afterEach(() => vi.unstubAllEnvs());
 
-  it('renders one global account meta and one nonce-authorized loader', async () => {
+  it('renders the verification meta tag and delegates the loader when configured', async () => {
     vi.stubEnv('NEXT_PUBLIC_ADSENSE_CLIENT_ID', 'ca-pub-2415314275784926');
     vi.stubEnv('NEXT_PUBLIC_ADSENSE_REVIEW_MODE', 'true');
     const { AdSenseHead } = await import('../adsense-head');
@@ -16,10 +25,25 @@ describe('AdSenseHead', () => {
     const html = renderToStaticMarkup(await AdSenseHead());
 
     expect(html.match(/google-adsense-account/gu)).toHaveLength(1);
-    expect(
-      html.match(/pagead2\.googlesyndication\.com\/pagead\/js\/adsbygoogle\.js/gu),
-    ).toHaveLength(1);
     expect(html).toContain('content="ca-pub-2415314275784926"');
+    expect(html).toContain('data-testid="stub-loader"');
     expect(html).toContain('nonce="test-nonce"');
   });
+
+  it('renders nothing when no client id is configured', async () => {
+    const { AdSenseHead } = await import('../adsense-head');
+
+    const result = await AdSenseHead();
+
+    expect(result).toBeNull();
+  });
+
+  it('renders nothing when configured but neither review nor serving is enabled', async () => {
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_CLIENT_ID', 'ca-pub-2415314275784926');
+    const { AdSenseHead } = await import('../adsense-head');
+
+    const result = await AdSenseHead();
+
+    expect(result).toBeNull();
+  });
 });
diff --git a/apps/claw-frontend/src/components/adsense/__tests__/adsense-script-loader.test.tsx b/apps/claw-frontend/src/components/adsense/__tests__/adsense-script-loader.test.tsx
new file mode 100644
index 000000000..2c269249f
--- /dev/null
+++ b/apps/claw-frontend/src/components/adsense/__tests__/adsense-script-loader.test.tsx
@@ -0,0 +1,62 @@
+import { renderToStaticMarkup } from 'react-dom/server';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+import { AdSenseScriptLoader } from '../adsense-script-loader';
+
+let mockPathname = '/';
+
+vi.mock('next/navigation', () => ({
+  usePathname: (): string => mockPathname,
+}));
+
+// renderToStaticMarkup (not @testing-library's DOM render) on purpose: a raw
+// <script src> is a React "hoistable" element that gets committed into the
+// real document <head> and is NOT cleaned up on unmount, so it would persist
+// in jsdom across every later test in this file if actually mounted.
+// Rendering to a string sidesteps that entirely.
+describe('AdSenseScriptLoader', () => {
+  afterEach(() => {
+    vi.unstubAllEnvs();
+    mockPathname = '/';
+  });
+
+  it('renders the loader script on the eligible homepage when serving is enabled', () => {
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_CLIENT_ID', 'ca-pub-2415314275784926');
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_SERVING_ENABLED', 'true');
+    mockPathname = '/';
+
+    const html = renderToStaticMarkup(<AdSenseScriptLoader nonce="test-nonce" />);
+
+    expect(html).toContain('adsbygoogle.js');
+    expect(html).toContain('nonce="test-nonce"');
+  });
+
+  it.each([
+    ['portal chat', '/chat'],
+    ['dashboard', '/dashboard'],
+    ['login', '/login'],
+    ['register', '/register'],
+    ['billing', '/billing'],
+    ['settings', '/settings'],
+    ['admin', '/admin'],
+    ['an unregistered/unknown page', '/this-page-does-not-exist'],
+    ['a public shared chat', '/en/share/chat/AbCdEfGhIjKlMnOpQrStUv'],
+  ])('never renders the loader script on %s', (_label, path) => {
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_CLIENT_ID', 'ca-pub-2415314275784926');
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_SERVING_ENABLED', 'true');
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_REVIEW_MODE', 'true');
+    mockPathname = path;
+
+    const html = renderToStaticMarkup(<AdSenseScriptLoader nonce="test-nonce" />);
+
+    expect(html).not.toContain('adsbygoogle.js');
+  });
+
+  it('renders nothing when no client id is configured, regardless of path', () => {
+    mockPathname = '/';
+
+    const html = renderToStaticMarkup(<AdSenseScriptLoader nonce="test-nonce" />);
+
+    expect(html).toBe('');
+  });
+});
diff --git a/apps/claw-frontend/src/components/adsense/adsense-head.tsx b/apps/claw-frontend/src/components/adsense/adsense-head.tsx
index b3d949aa2..7200fdced 100644
--- a/apps/claw-frontend/src/components/adsense/adsense-head.tsx
+++ b/apps/claw-frontend/src/components/adsense/adsense-head.tsx
@@ -1,11 +1,19 @@
 import { headers } from 'next/headers';
 
-import { ADSENSE_LOADER_SRC } from '@/constants/adsense.constants';
+import { AdSenseScriptLoader } from '@/components/adsense/adsense-script-loader';
 import { getAdSenseConfig } from '@/lib/adsense/adsense-config';
 
-// Global AdSense verification metadata and loader. Keeping both in the root
-// document head guarantees one executable loader across every route and avoids
-// Next metadata merging replacing the account meta on localized pages.
+// Mounted once, in the (marketing) layout only — see that layout's comment
+// for why. Two concerns live here and they are gated differently:
+//
+// 1. The verification `<meta>` tag: inert, never executes, safe wherever this
+//    renders. It appears whenever a client id is configured and either the
+//    review or the serving flag is on.
+// 2. The loader `<script>`: delegated entirely to `AdSenseScriptLoader`, which
+//    additionally requires the CURRENT PATHNAME to be AdSense-eligible
+//    (`shouldLoadAdSenseScript` in adsense-eligibility.ts). That pathname
+//    check is what keeps the loader off /share/chat, /terms, /privacy and
+//    every other non-eligible page inside this route group.
 export async function AdSenseHead(): Promise<React.ReactElement | null> {
   const config = getAdSenseConfig();
   if (!config.isConfigured || config.clientId === null) {
@@ -20,12 +28,7 @@ export async function AdSenseHead(): Promise<React.ReactElement | null> {
   return (
     <>
       <meta name="google-adsense-account" content={config.clientId} />
-      <script
-        async
-        nonce={nonce}
-        crossOrigin="anonymous"
-        src={`${ADSENSE_LOADER_SRC}?client=${config.clientId}`}
-      />
+      <AdSenseScriptLoader nonce={nonce} />
     </>
   );
 }
diff --git a/apps/claw-frontend/src/components/adsense/adsense-script-loader.tsx b/apps/claw-frontend/src/components/adsense/adsense-script-loader.tsx
new file mode 100644
index 000000000..f16e6fdaf
--- /dev/null
+++ b/apps/claw-frontend/src/components/adsense/adsense-script-loader.tsx
@@ -0,0 +1,33 @@
+'use client';
+
+import { ADSENSE_LOADER_SRC } from '@/constants/adsense.constants';
+import { useAdSenseScript } from '@/hooks/adsense/use-adsense-script';
+import type { AdSenseScriptLoaderProps } from '@/types/adsense.types';
+
+// The ONLY place the AdSense loader script is emitted. `useAdSenseScript`
+// resolves the current pathname and delegates to `shouldLoadAdSenseScript`
+// (the single authoritative gate in adsense-eligibility.ts), so this renders
+// nothing on /share/chat, /terms, /privacy or any other non-eligible page
+// inside the (marketing) tree — not just outside it.
+//
+// A client component so `usePathname()` sees route changes; a `<script>`
+// rendered anywhere in the tree (not only literally inside <head>) is hoisted
+// there by React, so this does not need to live in the document head itself.
+export function AdSenseScriptLoader({
+  nonce,
+}: AdSenseScriptLoaderProps): React.ReactElement | null {
+  const { shouldLoad, clientId } = useAdSenseScript();
+
+  if (!shouldLoad || clientId === null) {
+    return null;
+  }
+
+  return (
+    <script
+      async
+      nonce={nonce}
+      crossOrigin="anonymous"
+      src={`${ADSENSE_LOADER_SRC}?client=${clientId}`}
+    />
+  );
+}
diff --git a/apps/claw-frontend/src/constants/chat-share-review-lockdown.constants.ts b/apps/claw-frontend/src/constants/chat-share-review-lockdown.constants.ts
new file mode 100644
index 000000000..aa5c33163
--- /dev/null
+++ b/apps/claw-frontend/src/constants/chat-share-review-lockdown.constants.ts
@@ -0,0 +1,19 @@
+/**
+ * Temporary, blanket kill switch for the AdSense "low value content" review
+ * window (see docs/03-architecture/adsense-eligibility.md).
+ *
+ * The per-share `adsEligible`/`indexEligible` fields (chat-service, computed
+ * from a safety scan plus content-depth thresholds) remain the correct
+ * long-term policy, but during the review window even one share that happens
+ * to score eligible is exposure a reviewer can land on. This flag overrides
+ * that nuanced per-share system to `false`/`noindex`/excluded for EVERY
+ * public chat share — ads, indexing, sitemap and RSS — regardless of what the
+ * server computed.
+ *
+ * Every call site reads this one flag, so lifting it later is a one-line
+ * change here, not a hunt across ads/sitemap/RSS/metadata code. Flip to
+ * `false` only after both: (1) AdSense has approved the account, and (2) a
+ * dedicated content-quality review of shared chats has happened — not on a
+ * hunch that the per-share scan is good enough on its own.
+ */
+export const CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED = true;
diff --git a/apps/claw-frontend/src/constants/private-route-prefixes.constants.ts b/apps/claw-frontend/src/constants/private-route-prefixes.constants.ts
index a21d1512e..110eea915 100644
--- a/apps/claw-frontend/src/constants/private-route-prefixes.constants.ts
+++ b/apps/claw-frontend/src/constants/private-route-prefixes.constants.ts
@@ -7,6 +7,10 @@
 export const PRIVATE_ROUTE_PREFIXES: ReadonlyArray<string> = [
   '/login',
   '/register',
+  '/forgot-password',
+  '/reset-password',
+  '/verify-email',
+  '/confirm-email-change',
   '/dashboard',
   '/chat',
   '/connectors',
diff --git a/apps/claw-frontend/src/hooks/adsense/__tests__/use-adsense-script.test.ts b/apps/claw-frontend/src/hooks/adsense/__tests__/use-adsense-script.test.ts
new file mode 100644
index 000000000..e4d272023
--- /dev/null
+++ b/apps/claw-frontend/src/hooks/adsense/__tests__/use-adsense-script.test.ts
@@ -0,0 +1,48 @@
+import { renderHook } from '@testing-library/react';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+import { useAdSenseScript } from '../use-adsense-script';
+
+let mockPathname = '/';
+
+vi.mock('next/navigation', () => ({
+  usePathname: (): string => mockPathname,
+}));
+
+describe('useAdSenseScript', () => {
+  afterEach(() => {
+    vi.unstubAllEnvs();
+    mockPathname = '/';
+  });
+
+  it('resolves shouldLoad from the real pathname on an eligible page', () => {
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_CLIENT_ID', 'ca-pub-2415314275784926');
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_SERVING_ENABLED', 'true');
+    mockPathname = '/';
+
+    const { result } = renderHook(() => useAdSenseScript());
+
+    expect(result.current.shouldLoad).toBe(true);
+    expect(result.current.clientId).toBe('ca-pub-2415314275784926');
+  });
+
+  it('resolves shouldLoad to false on an ineligible page even when serving is enabled', () => {
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_CLIENT_ID', 'ca-pub-2415314275784926');
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_SERVING_ENABLED', 'true');
+    mockPathname = '/chat';
+
+    const { result } = renderHook(() => useAdSenseScript());
+
+    expect(result.current.shouldLoad).toBe(false);
+  });
+
+  it('resolves shouldLoad to false on a shared-chat page even in review mode', () => {
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_CLIENT_ID', 'ca-pub-2415314275784926');
+    vi.stubEnv('NEXT_PUBLIC_ADSENSE_REVIEW_MODE', 'true');
+    mockPathname = '/en/share/chat/AbCdEfGhIjKlMnOpQrStUv';
+
+    const { result } = renderHook(() => useAdSenseScript());
+
+    expect(result.current.shouldLoad).toBe(false);
+  });
+});
diff --git a/apps/claw-frontend/src/lib/adsense/__tests__/adsense-eligibility.test.ts b/apps/claw-frontend/src/lib/adsense/__tests__/adsense-eligibility.test.ts
index bc494012a..96e29a687 100644
--- a/apps/claw-frontend/src/lib/adsense/__tests__/adsense-eligibility.test.ts
+++ b/apps/claw-frontend/src/lib/adsense/__tests__/adsense-eligibility.test.ts
@@ -38,7 +38,7 @@ describe('shouldLoadAdSenseScript', () => {
     ).toBe(false);
   });
 
-  it('loads in review mode regardless of serving/eligibility (verification only)', () => {
+  it('loads on an eligible page in review mode even with serving disabled', () => {
     expect(
       shouldLoadAdSenseScript({
         isConfigured: true,
@@ -49,6 +49,34 @@ describe('shouldLoadAdSenseScript', () => {
     ).toBe(true);
   });
 
+  it('never loads in review mode on an ineligible page — review does not bypass eligibility', () => {
+    // The bug this guards: review mode used to load the script on every route
+    // regardless of path, which is exactly the "low value content" exposure
+    // an AdSense reviewer would land on. Verification never needs the script
+    // to run outside an eligible page — the meta tag alone verifies the account.
+    for (const path of ['/chat', '/dashboard', '/login', '/billing', '/settings', '/admin']) {
+      expect(
+        shouldLoadAdSenseScript({
+          isConfigured: true,
+          reviewMode: true,
+          servingEnabled: false,
+          pathname: path,
+        }),
+      ).toBe(false);
+    }
+  });
+
+  it('never loads on a public shared-chat page, even in review mode, while the review lockdown is on', () => {
+    expect(
+      shouldLoadAdSenseScript({
+        isConfigured: true,
+        reviewMode: true,
+        servingEnabled: true,
+        pathname: '/en/share/chat/AbCdEfGhIjKlMnOpQrStUv',
+      }),
+    ).toBe(false);
+  });
+
   it('loads on an eligible page only when serving is enabled', () => {
     expect(
       shouldLoadAdSenseScript({
diff --git a/apps/claw-frontend/src/lib/adsense/__tests__/adsense-shared-chat.test.ts b/apps/claw-frontend/src/lib/adsense/__tests__/adsense-shared-chat.test.ts
index 3c1dafa5d..3095e4186 100644
--- a/apps/claw-frontend/src/lib/adsense/__tests__/adsense-shared-chat.test.ts
+++ b/apps/claw-frontend/src/lib/adsense/__tests__/adsense-shared-chat.test.ts
@@ -6,10 +6,24 @@ import { resolveAdUnitEligibility } from '../adsense-eligibility';
 const SHARED_CHAT_PATH = '/share/chat/AbCdEfGhIjKlMnOpQrStUv';
 
 describe('resolveAdUnitEligibility', () => {
-  it('honours a server-derived verdict of true on a dynamic page', () => {
-    // The path cannot answer this: /share/chat/<anything> matches the route, so
-    // only the server knows whether THIS snapshot qualifies.
-    expect(resolveAdUnitEligibility(SHARED_CHAT_PATH, true)).toBe(true);
+  it('overrides a true server-derived verdict to false while the AdSense review lockdown is on', () => {
+    // CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED is true today: even a share the
+    // safety scan approved must not carry ads during the review window.
+    expect(resolveAdUnitEligibility(SHARED_CHAT_PATH, true)).toBe(false);
+  });
+
+  it('resumes honouring a server-derived verdict of true once the review lockdown is lifted', async () => {
+    vi.doMock('@/constants/chat-share-review-lockdown.constants', () => ({
+      CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED: false,
+    }));
+    vi.resetModules();
+    const { resolveAdUnitEligibility: resolveWithLockdownLifted } =
+      await import('../adsense-eligibility');
+
+    expect(resolveWithLockdownLifted(SHARED_CHAT_PATH, true)).toBe(true);
+
+    vi.doUnmock('@/constants/chat-share-review-lockdown.constants');
+    vi.resetModules();
   });
 
   it('honours a server-derived verdict of false', () => {
@@ -35,9 +49,12 @@ describe('resolveAdUnitEligibility', () => {
   });
 
   it('cannot be tricked into eligibility by a portal path plus a server verdict', () => {
-    // A caller passing `true` for a portal route would be a bug, but the ad SCRIPT
-    // only exists in the marketing layout, so no portal page can reach this. This
-    // asserts the seam is explicit rather than accidental.
+    // A caller passing `true` for a portal route would be a bug, but this function
+    // trusts the server verdict it was given — the actual guarantee that no portal
+    // page can reach it lives one layer up: AdUnit is only ever rendered from
+    // (marketing) pages, and the AdSense loader itself is pathname-gated
+    // (adsense-head.test.tsx, adsense-script-loader.test.tsx). This asserts the
+    // seam here is explicit rather than accidental.
     expect(resolveAdUnitEligibility('/chat', true)).toBe(true);
   });
 });
diff --git a/apps/claw-frontend/src/lib/adsense/adsense-eligibility.ts b/apps/claw-frontend/src/lib/adsense/adsense-eligibility.ts
index 4c596f92b..0d87ddddb 100644
--- a/apps/claw-frontend/src/lib/adsense/adsense-eligibility.ts
+++ b/apps/claw-frontend/src/lib/adsense/adsense-eligibility.ts
@@ -1,5 +1,11 @@
+import { CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED } from '@/constants/chat-share-review-lockdown.constants';
+import { SHARE_CHAT_PATH_PREFIX } from '@/constants/chat-share.constants';
 import { isAdEligiblePath } from '@/utilities/content-registry.utility';
 
+function isChatSharePath(pathname: string): boolean {
+  return pathname.includes(SHARE_CHAT_PATH_PREFIX);
+}
+
 // Whether a MANUAL ad unit may render on a given path. This is the single
 // authoritative gate: it delegates to the content registry, which only
 // returns true for a PUBLISHED + reviewed + explicitly ad-ELIGIBLE editorial
@@ -28,6 +34,12 @@ export function resolveAdUnitEligibility(
   pathname: string,
   serverEligibility: boolean | undefined,
 ): boolean {
+  // Blanket override for the AdSense review window: a share the safety scan
+  // marked eligible is still exposure during review, so this wins over any
+  // server verdict — see CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED's own comment.
+  if (CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED && isChatSharePath(pathname)) {
+    return false;
+  }
   if (serverEligibility !== undefined) {
     return serverEligibility;
   }
@@ -35,10 +47,13 @@ export function resolveAdUnitEligibility(
 }
 
 // Whether the AdSense verification/serving SCRIPT may be injected at all.
-// The script only ever lives in the marketing layout (so it can never appear
-// in the portal or auth trees), but it is additionally gated on configuration
-// plus either an active review (verification) or an ad-eligible marketing
-// page with serving enabled.
+// The script is mounted only in the (marketing) layout (so it structurally
+// cannot appear in the portal, auth or payment trees), but that layout also
+// contains non-eligible pages — /share/chat, /terms, /privacy and friends —
+// so eligibility is ALSO enforced per-pathname here, the same registry-backed
+// check that gates manual ad units. `reviewMode` no longer bypasses this: a
+// page Google's reviewer should never see monetized on must not carry the
+// loader either, verification or not.
 export function shouldLoadAdSenseScript(params: {
   isConfigured: boolean;
   reviewMode: boolean;
@@ -48,8 +63,11 @@ export function shouldLoadAdSenseScript(params: {
   if (!params.isConfigured) {
     return false;
   }
-  if (params.reviewMode) {
-    return true;
+  if (!isAdUnitEligible(params.pathname)) {
+    return false;
+  }
+  if (CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED && isChatSharePath(params.pathname)) {
+    return false;
   }
-  return params.servingEnabled && isAdUnitEligible(params.pathname);
+  return params.reviewMode || params.servingEnabled;
 }
diff --git a/apps/claw-frontend/src/lib/discovery/__tests__/rss.service.test.ts b/apps/claw-frontend/src/lib/discovery/__tests__/rss.service.test.ts
index 481fe4664..09dd39427 100644
--- a/apps/claw-frontend/src/lib/discovery/__tests__/rss.service.test.ts
+++ b/apps/claw-frontend/src/lib/discovery/__tests__/rss.service.test.ts
@@ -14,6 +14,13 @@ vi.mock('@/lib/site/site-config', () => ({
   getSiteUrl: (): string => 'https://claw.example',
   shouldNoIndexEverything: (): boolean => false,
 }));
+// This file unit-tests the CHATS-kind mechanics themselves (ordering, ETag,
+// degradation) — behavior that only runs once the AdSense review lockdown is
+// lifted. The lockdown-engaged behavior (chat feed never called, always
+// empty) is covered at the route level in app/__tests__/rss.test.ts.
+vi.mock('@/constants/chat-share-review-lockdown.constants', () => ({
+  CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED: false,
+}));
 
 function feedRequest(): Request {
   return new Request('https://claw.example/en/feed.xml', {
diff --git a/apps/claw-frontend/src/lib/discovery/global-rss.service.ts b/apps/claw-frontend/src/lib/discovery/global-rss.service.ts
index a77680130..df72094c6 100644
--- a/apps/claw-frontend/src/lib/discovery/global-rss.service.ts
+++ b/apps/claw-frontend/src/lib/discovery/global-rss.service.ts
@@ -1,5 +1,6 @@
 import { createHash } from 'node:crypto';
 
+import { CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED } from '@/constants/chat-share-review-lockdown.constants';
 import {
   DEGRADED_RSS_CACHE_CONTROL,
   RSS_CACHE_CONTROL,
@@ -37,7 +38,11 @@ async function collectLocaleItems(
     language,
   }));
 
-  const chatEntries = await listPublicChatRssEntries(locale);
+  // Chat shares are excluded from the global feed for the duration of the
+  // AdSense review window — see CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED.
+  const chatEntries = CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED
+    ? []
+    : await listPublicChatRssEntries(locale);
   const chatItems: RssFeedItem[] = (chatEntries ?? []).map((entry) => ({
     title: entry.title,
     description: entry.description ?? '',
diff --git a/apps/claw-frontend/src/lib/discovery/rss.service.ts b/apps/claw-frontend/src/lib/discovery/rss.service.ts
index ef27a49ce..8646f3d7a 100644
--- a/apps/claw-frontend/src/lib/discovery/rss.service.ts
+++ b/apps/claw-frontend/src/lib/discovery/rss.service.ts
@@ -1,5 +1,6 @@
 import { createHash } from 'node:crypto';
 
+import { CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED } from '@/constants/chat-share-review-lockdown.constants';
 import { LOCALE_REQUEST_HEADER } from '@/constants/locale-routing.constants';
 import {
   DEGRADED_RSS_CACHE_CONTROL,
@@ -37,7 +38,13 @@ export async function buildLocalizedRssResponse(
           publishedAt: page.metadata.lastReviewed,
           category: page.category,
         }));
-  const chatEntries = kind === RssFeedKind.TOPICS ? [] : await listPublicChatRssEntries(locale);
+  // Chat shares are excluded from every RSS/Atom feed for the duration of the
+  // AdSense review window (CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED), including the
+  // dedicated chats-only feed — an empty feed, not a degraded/503 one.
+  const chatEntries =
+    kind === RssFeedKind.TOPICS || CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED
+      ? []
+      : await listPublicChatRssEntries(locale);
   if (kind === RssFeedKind.CHATS && chatEntries === null) {
     return new Response(null, {
       status: 503,
diff --git a/apps/claw-frontend/src/types/adsense.types.ts b/apps/claw-frontend/src/types/adsense.types.ts
index 7b5ab7ce4..0ff922cfb 100644
--- a/apps/claw-frontend/src/types/adsense.types.ts
+++ b/apps/claw-frontend/src/types/adsense.types.ts
@@ -10,6 +10,11 @@ export type AdSenseConfig = {
   reviewMode: boolean;
 };
 
+export type AdSenseScriptLoaderProps = {
+  // CSP nonce forwarded from the request; `undefined` outside a nonced response.
+  nonce: string | undefined;
+};
+
 export type AdUnitProps = {
   // The `data-ad-slot` id from the AdSense dashboard for this placement.
   // `null` means the slot is unconfigured and nothing renders.
diff --git a/apps/claw-frontend/src/utilities/__tests__/public-shared-chat.utility.test.ts b/apps/claw-frontend/src/utilities/__tests__/public-shared-chat.utility.test.ts
index 4ad17eecd..a68325663 100644
--- a/apps/claw-frontend/src/utilities/__tests__/public-shared-chat.utility.test.ts
+++ b/apps/claw-frontend/src/utilities/__tests__/public-shared-chat.utility.test.ts
@@ -1,4 +1,4 @@
-import { describe, expect, it } from 'vitest';
+import { afterEach, describe, expect, it, vi } from 'vitest';
 
 import { ChatShareVisibility } from '@/enums/chat-share.enum';
 import { Locale } from '@/enums/locale.enum';
@@ -77,6 +77,10 @@ describe('resolveInlineAdIndex', () => {
 });
 
 describe('buildSharedChatMetadata', () => {
+  afterEach(() => {
+    vi.resetModules();
+  });
+
   it('emits noindex and a generic title for an unavailable share', () => {
     // A 404 page carrying the real title would publish exactly what the owner
     // just unpublished.
@@ -87,13 +91,34 @@ describe('buildSharedChatMetadata', () => {
     expect(metadata.alternates).toBeUndefined();
   });
 
-  it('emits index+follow and a canonical URL for an indexed share', () => {
+  it('emits noindex for an otherwise-indexed share while the AdSense review lockdown is on', () => {
+    // CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED is true today: every share is
+    // treated as unindexable regardless of its own visibility/indexEligible,
+    // for the duration of the AdSense review window.
     const metadata = buildSharedChatMetadata(makeShare(), SITE_URL, t);
 
-    expect(metadata.robots).toMatchObject({ index: true, follow: true });
+    expect(metadata.robots).toMatchObject({ index: false, follow: false, noarchive: true });
+    expect(metadata.other?.['x-robots-tag']).toBe('noindex, nofollow, noarchive');
     expect(metadata.alternates?.canonical).toBe(`${SITE_URL}/en/share/chat/AbCdEfGhIjKlMnOpQrStUv`);
   });
 
+  it('resumes index+follow for an indexed share once the review lockdown is lifted', async () => {
+    vi.doMock('@/constants/chat-share-review-lockdown.constants', () => ({
+      CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED: false,
+    }));
+    vi.resetModules();
+    const { buildSharedChatMetadata: buildWithLockdownLifted } =
+      await import('../public-shared-chat.utility');
+
+    const metadata = buildWithLockdownLifted(makeShare(), SITE_URL, t);
+
+    expect(metadata.robots).toMatchObject({ index: true, follow: true });
+    expect(metadata.other?.['x-robots-tag']).toBeUndefined();
+
+    vi.doUnmock('@/constants/chat-share-review-lockdown.constants');
+    vi.resetModules();
+  });
+
   it('emits noindex for an unlisted share even though the path is crawlable', () => {
     // The page-level directive is the ONLY thing keeping an unlisted share out of
     // an index — robots.txt deliberately allows the path.
@@ -107,12 +132,6 @@ describe('buildSharedChatMetadata', () => {
     expect(metadata.other?.['x-robots-tag']).toBe('noindex, nofollow, noarchive');
   });
 
-  it('omits the x-robots-tag override on an indexed share', () => {
-    const metadata = buildSharedChatMetadata(makeShare(), SITE_URL, t);
-
-    expect(metadata.other?.['x-robots-tag']).toBeUndefined();
-  });
-
   it('builds the canonical from the configured origin, never a request host', () => {
     // A spoofed X-Forwarded-Host that became a canonical URL would let an
     // attacker point our canonical at their own domain.
diff --git a/apps/claw-frontend/src/utilities/public-shared-chat.utility.ts b/apps/claw-frontend/src/utilities/public-shared-chat.utility.ts
index ff58cfbe6..cdd59438c 100644
--- a/apps/claw-frontend/src/utilities/public-shared-chat.utility.ts
+++ b/apps/claw-frontend/src/utilities/public-shared-chat.utility.ts
@@ -1,5 +1,6 @@
 import type { Metadata } from 'next';
 
+import { CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED } from '@/constants/chat-share-review-lockdown.constants';
 import {
   SHARE_CHAT_PATH_PREFIX,
   SHARED_CHAT_INLINE_AD_AFTER_MESSAGES,
@@ -46,7 +47,10 @@ export function resolveInlineAdIndex(messageCount: number): number | null {
  * - **PUBLIC_UNLISTED**: reachable by URL, `noindex, nofollow, noarchive`. The path
  *   is crawlable, so the page-level directive is the only thing keeping it out of
  *   an index.
- * - **PUBLIC_INDEXED**: `index, follow` with a canonical URL.
+ * - **PUBLIC_INDEXED**: `index, follow` with a canonical URL — UNLESS
+ *   `CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED` is on, in which case every share is
+ *   treated as unindexable regardless of its own visibility/eligibility, for
+ *   the duration of the AdSense review window.
  *
  * The canonical always comes from the configured site origin, never from the
  * request host: a spoofed `X-Forwarded-Host` that became a canonical URL would let
@@ -67,7 +71,10 @@ export function buildSharedChatMetadata(
   }
 
   const canonical = `${siteUrl}${buildSharePath(share.publicShareId, share.contentLocale)}`;
-  const isIndexed = share.visibility === ChatShareVisibility.PUBLIC_INDEXED && share.indexEligible;
+  const isIndexed =
+    !CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED &&
+    share.visibility === ChatShareVisibility.PUBLIC_INDEXED &&
+    share.indexEligible;
   const description =
     buildShareMetaDescription(share.description) ?? t('chatShare.public.genericDescription');
 
diff --git a/docs/03-architecture/adsense-eligibility.md b/docs/03-architecture/adsense-eligibility.md
new file mode 100644
index 000000000..e97f1bc59
--- /dev/null
+++ b/docs/03-architecture/adsense-eligibility.md
@@ -0,0 +1,94 @@
+# AdSense eligibility architecture
+
+## Why this exists
+
+ClawAI's AdSense account was rejected for "low value content." The root cause
+was not the content — it was that the ad **loader script** executed on every
+route, including auth, portal, chat, billing and settings, because it was
+mounted in the Next.js root layout with no pathname check. A reviewer (human
+or Google's automated crawler) could land on `/login` or a thin public chat
+share and see live ad infrastructure next to non-editorial content. Full
+remediation: `rules/38-adsense-eligibility-and-low-value-content.md`.
+
+## Three concepts, three gates
+
+| Concept                  | Component                                               | Gate                                                                                                           |
+| ------------------------ | ------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------- |
+| Account verification     | `<meta name="google-adsense-account">` in `AdSenseHead` | Configured client id + (review or serving). Inert — never executes.                                            |
+| Ad-serving loader script | `AdSenseScriptLoader`                                   | Configured + `isAdUnitEligible(pathname)` + (review or serving). Pathname always checked, even in review mode. |
+| Manual ad unit           | `AdUnit` / `useAdUnit`                                  | `resolveAdUnitEligibility(pathname, serverEligibility)` + serving enabled + consent.                           |
+
+These used to be conflated: `AdSenseHead` rendered the meta tag AND an
+unconditional script in the root layout, and a correctly pathname-aware
+hook (`useAdSenseScript`) existed but was never wired into anything mounted
+in the tree. The fix splits them into three independently-gated concerns.
+
+## The route boundary
+
+```
+app/layout.tsx              — root; NEVER references AdSense
+app/(auth)/layout.tsx       — NEVER references AdSense
+app/(portal)/layout.tsx     — NEVER references AdSense
+app/(payment)/...           — no layout.tsx of its own; inherits the root
+app/(marketing)/layout.tsx  — the ONLY place <AdSenseHead /> is mounted
+```
+
+Even inside `(marketing)`, not every page is eligible: `/share/chat/*`,
+`/terms`, `/privacy`, `/cookies`, `/acceptable-use` and `/contact` all live in
+this route group but are not registered as `AdEligibility.ELIGIBLE` in
+`content-registry.constants.ts`, so `isAdUnitEligible` returns `false` for
+them and neither the script nor a manual unit renders there.
+
+`app/__tests__/adsense-route-boundary.test.ts` asserts this structurally by
+reading each layout's source text — a regression here fails on the exact bug
+that caused the rejection, not just on a behavioral edge case.
+
+## The single eligibility function
+
+```
+isAdUnitEligible(pathname)
+  → content-registry lookup: PUBLISHED + REVIEWED + AdEligibility.ELIGIBLE
+  → unregistered/unknown/dynamic path defaults to false
+
+resolveAdUnitEligibility(pathname, serverEligibility)
+  → chat-share review lockdown wins if pathname is a chat share (see below)
+  → otherwise: serverEligibility if defined, else isAdUnitEligible(pathname)
+
+shouldLoadAdSenseScript({ isConfigured, reviewMode, servingEnabled, pathname })
+  → isConfigured AND isAdUnitEligible(pathname) AND NOT locked-down-chat-share
+    AND (reviewMode OR servingEnabled)
+```
+
+There is exactly one registry-backed eligibility source
+(`content-registry.utility.ts`). Do not add a second allowlist anywhere.
+
+## The chat-share review lockdown
+
+Public chat shares are dynamic (`/share/chat/<id>` matches any identifier),
+so eligibility for them cannot come from the path — it comes from a
+per-snapshot, chat-service-computed `adsEligible`/`indexEligible` verdict
+(safety scan + content-depth thresholds). That system is correct long-term
+policy, but during the AdSense review window even one share that happens to
+score eligible is exposure a reviewer can land on.
+
+`CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED` overrides it to `false`/excluded across
+every surface, unconditionally:
+
+| Surface  | Call site                                                               |
+| -------- | ----------------------------------------------------------------------- |
+| Ads      | `resolveAdUnitEligibility` (adsense-eligibility.ts)                     |
+| Script   | `shouldLoadAdSenseScript` (adsense-eligibility.ts, defense in depth)    |
+| Indexing | `buildSharedChatMetadata` (public-shared-chat.utility.ts)               |
+| Sitemap  | `app/sitemap.xml/route.ts`, `app/sitemaps/[locale]/[document]/route.ts` |
+| RSS/Atom | `lib/discovery/rss.service.ts`, `lib/discovery/global-rss.service.ts`   |
+
+It is a single frontend constant, not a database column or backend change —
+lifting it later is a one-line edit with no backfill. See
+`docs/03-architecture/public-chat-shares.md` for the per-snapshot system it
+temporarily overrides.
+
+## Related
+
+- `rules/38-adsense-eligibility-and-low-value-content.md`
+- `docs/03-architecture/public-chat-shares.md`
+- `apps/claw-frontend/CLAUDE.md`
diff --git a/docs/03-architecture/public-chat-shares.md b/docs/03-architecture/public-chat-shares.md
index d3c99a9fd..37960b23d 100644
--- a/docs/03-architecture/public-chat-shares.md
+++ b/docs/03-architecture/public-chat-shares.md
@@ -101,6 +101,23 @@ A URL matching `/share/chat/*` is never enough on its own. That is the
 difference between "this page is allowed to show ads" and "this page has the
 right shape".
 
+### Temporary AdSense review lockdown (2026-09-01)
+
+`CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED`
+(`apps/claw-frontend/src/constants/chat-share-review-lockdown.constants.ts`)
+overrides the per-snapshot `adsEligible`/`indexEligible` decisions above to
+`false`/excluded for **every** share while it is `true`: no ad units, no
+`index` robots directive, absent from `sitemap.xml`'s chat child documents,
+absent from every RSS/Atom feed. It does not touch the chat-service scan or
+the persisted DB columns — it is a frontend-only, one-flag override so lifting
+it later needs no backfill. See
+[`docs/03-architecture/adsense-eligibility.md`](adsense-eligibility.md) and
+[`rules/38-adsense-eligibility-and-low-value-content.md`](../../rules/38-adsense-eligibility-and-low-value-content.md).
+
+Flip it to `false` only after AdSense approves the account AND a dedicated
+content-quality review of shared chats has happened — not on the assumption
+that the per-snapshot safety scan is sufficient on its own.
+
 ## Caching
 
 The public endpoint sends `no-store`, and nginx is configured not to reintroduce
@@ -129,15 +146,15 @@ hand to a search engine — a canonical URL pointing at a domain they control.
 
 ## Endpoints
 
-| Method   | Path                                                  | Auth     |
-| -------- | ----------------------------------------------------- | -------- |
-| `GET`    | `/api/v1/chat-threads/:threadId/share`                | owner    |
-| `POST`   | `/api/v1/chat-threads/:threadId/share`                | owner    |
-| `PATCH`  | `/api/v1/chat-threads/:threadId/share`                | owner    |
-| `POST`   | `/api/v1/chat-threads/:threadId/share/refresh`        | owner    |
-| `POST`   | `/api/v1/chat-threads/:threadId/share/regenerate-url` | owner    |
-| `DELETE` | `/api/v1/chat-threads/:threadId/share`                | owner    |
-| `GET`    | `/api/v1/public/chat-shares/:publicShareId`           | **none** |
+| Method   | Path                                                  | Auth          |
+| -------- | ----------------------------------------------------- | ------------- |
+| `GET`    | `/api/v1/chat-threads/:threadId/share`                | owner         |
+| `POST`   | `/api/v1/chat-threads/:threadId/share`                | owner         |
+| `PATCH`  | `/api/v1/chat-threads/:threadId/share`                | owner         |
+| `POST`   | `/api/v1/chat-threads/:threadId/share/refresh`        | owner         |
+| `POST`   | `/api/v1/chat-threads/:threadId/share/regenerate-url` | owner         |
+| `DELETE` | `/api/v1/chat-threads/:threadId/share`                | owner         |
+| `GET`    | `/api/v1/public/chat-shares/:publicShareId`           | **none**      |
 | `GET`    | `/api/v1/internal/chat-shares/sitemap-feed`           | service token |
 | `GET`    | `/api/v1/internal/chat-shares/sitemap-count`          | service token |
 | `GET`    | `/api/v1/internal/chat-shares/rss-feed`               | service token |
diff --git a/docs/features/ai-native-engineering-os/inventory.snapshot.json b/docs/features/ai-native-engineering-os/inventory.snapshot.json
index d85d66254..23319c4e9 100644
--- a/docs/features/ai-native-engineering-os/inventory.snapshot.json
+++ b/docs/features/ai-native-engineering-os/inventory.snapshot.json
@@ -9,7 +9,7 @@
           "CODEX.md"
         ],
         "kind": "mirrored-instruction-overlap",
-        "message": "CLAUDE.md and CODEX.md share 3 identical headings (23170 vs 6104 bytes) — candidates for compact routing",
+        "message": "CLAUDE.md and CODEX.md share 3 identical headings (24426 vs 6104 bytes) — candidates for compact routing",
         "severity": "medium"
       },
       {
@@ -18,7 +18,7 @@
           "cursor.md"
         ],
         "kind": "mirrored-instruction-overlap",
-        "message": "CLAUDE.md and cursor.md share 1 identical headings (23170 vs 27062 bytes) — candidates for compact routing",
+        "message": "CLAUDE.md and cursor.md share 1 identical headings (24426 vs 27062 bytes) — candidates for compact routing",
         "severity": "medium"
       },
       {
@@ -7206,7 +7206,7 @@
     "governance": {
       "aiEntrypoints": [
         {
-          "bytes": 23170,
+          "bytes": 24426,
           "file": "CLAUDE.md"
         },
         {
@@ -7258,7 +7258,7 @@
       "looseDocs": 23,
       "rules": [
         {
-          "bytes": 19573,
+          "bytes": 20001,
           "file": "rules/00-master-rules.md"
         },
         {
@@ -7449,6 +7449,14 @@
           "bytes": 23088,
           "file": "rules/37-payg-credit-integrity.md"
         },
+        {
+          "bytes": 6068,
+          "file": "rules/38-adsense-eligibility-and-low-value-content.md"
+        },
+        {
+          "bytes": 3435,
+          "file": "rules/39-worktree-branch-completion-pr-and-release-notes.md"
+        },
         {
           "bytes": 5156,
           "file": "rules/README.md"
@@ -7456,7 +7464,7 @@
       ],
       "skills": [
         {
-          "bytes": 20103,
+          "bytes": 20338,
           "file": "skills/00-index.md"
         },
         {
@@ -7635,6 +7643,10 @@
           "bytes": 4194,
           "file": "skills/find-canonical-owner.md"
         },
+        {
+          "bytes": 3539,
+          "file": "skills/finish-worktree-branch-with-pr.md"
+        },
         {
           "bytes": 4302,
           "file": "skills/frontend-architecture-review.md"
@@ -9504,7 +9516,7 @@
       },
       "claw-frontend": {
         "runner": "vitest",
-        "testFiles": 407
+        "testFiles": 410
       },
       "claw-health-service": {
         "runner": "jest",
@@ -10264,7 +10276,7 @@
     "serviceCount": 18,
     "sharedPackageCount": 6,
     "staleClaimCount": 0,
-    "totalTestFiles": 1119,
+    "totalTestFiles": 1122,
     "workspaceCount": 25
   }
 }
diff --git a/rules/00-master-rules.md b/rules/00-master-rules.md
index 32e2ab759..72ebb8c8b 100644
--- a/rules/00-master-rules.md
+++ b/rules/00-master-rules.md
@@ -55,6 +55,8 @@
 | `35-super-administrator-and-privilege-boundaries.md`    | Protecting a row is half a privilege boundary; the other half is asking what the caller is allowed to do.                                               |
 | `36-floating-ui-and-toast-clearance.md`                 | Toasts stack from the same corner everything else floats in; a floating element declares itself and the clearance is measured, never hardcoded.         |
 | `37-payg-credit-integrity.md`                           | PAYG credit spends a customer's money before they see a result: overspend impossible by construction, every dollar attributable, margin inputs private. |
+| `38-adsense-eligibility-and-low-value-content.md`       | One authoritative, deny-by-default AdSense eligibility policy: script vs verification vs ad-unit gating, route boundary, chat-share review lockdown.    |
+| `39-worktree-branch-completion-pr-and-release-notes.md` | A task done in an agent-created worktree/branch ends with a PR and release notes, not just pushed commits.                                              |
 
 ## The 8 Absolute Blockers (updated 2026-04-26)
 
diff --git a/rules/38-adsense-eligibility-and-low-value-content.md b/rules/38-adsense-eligibility-and-low-value-content.md
new file mode 100644
index 000000000..00aca60dd
--- /dev/null
+++ b/rules/38-adsense-eligibility-and-low-value-content.md
@@ -0,0 +1,133 @@
+# 38 — AdSense Eligibility and Low-Value-Content Policy
+
+## Purpose
+
+AdSense rejected ClawAI for "low value content" because the ad loader script
+was mounted in the root layout with no pathname check, so it executed on
+every route — auth, portal, chat, billing, settings, and public shared AI
+chats — instead of only on reviewed editorial pages. This rule makes that
+class of bug structurally impossible to reintroduce: one authoritative,
+deny-by-default eligibility policy governs every AdSense-adjacent decision,
+and the route boundary that used to be "structural" is now also enforced by a
+pathname check plus a regression test.
+
+## Applies to
+
+`apps/claw-frontend`: the `(marketing)` route group, `src/lib/adsense/**`,
+`src/components/adsense/**`, `src/hooks/adsense/**`, the sitemap
+(`app/sitemap.xml`, `app/sitemaps/**`), RSS/Atom (`lib/discovery/**`,
+`app/feeds/**`, `app/rss.xml`, `app/feed.xml`), and
+`src/utilities/public-shared-chat.utility.ts`.
+
+## Mandatory rules
+
+1. **The AdSense loader script is mounted ONLY in `app/(marketing)/layout.tsx`
+   (via `AdSenseHead`), never in the root `app/layout.tsx`.** The root layout
+   wraps `(auth)`, `(portal)` and `(payment)` too; mounting it there is exactly
+   the bug this rule exists to prevent.
+2. **Three concepts stay separate and are gated independently — never treat
+   any two as the same requirement:**
+   - Verification (`<meta name="google-adsense-account">`) — inert, may
+     render whenever a client id is configured.
+   - The loader script (`AdSenseScriptLoader`) — requires configuration AND
+     `isAdUnitEligible(pathname)` AND (`reviewMode` or `servingEnabled`).
+     `reviewMode` does **not** bypass the pathname check.
+   - Manual ad units (`AdUnit`/`useAdUnit`) — requires the same eligibility
+     resolution (`resolveAdUnitEligibility`) plus consent.
+3. **`isAdUnitEligible` (content-registry-backed) is the single source of
+   truth for path eligibility.** An unregistered, unknown, or dynamic path
+   defaults to `false`. Do not add a second allowlist/denylist anywhere else.
+4. **A dynamic page cannot decide its own eligibility from the URL.** Pass a
+   server-derived verdict through `resolveAdUnitEligibility(pathname,
+serverEligibility)`; `undefined` means unresolved and fails closed to
+   `false`.
+5. **`CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED`
+   (`constants/chat-share-review-lockdown.constants.ts`) is the one flag that
+   overrides ads, indexing, sitemap inclusion and RSS inclusion for every
+   public chat share, unconditionally, for the AdSense review window.** Every
+   call site reads this one constant — do not duplicate the check with a
+   locally-computed condition.
+6. **Public chat shares are crawlable but not necessarily indexable.**
+   `robots.ts` allows `/share/chat/` so the per-page `noindex` can be
+   discovered; indexability is decided by `buildSharedChatMetadata`, never by
+   blocking the path in `robots.txt`.
+
+## Prohibited patterns
+
+- Mounting `AdSenseHead`, `AdSenseScriptLoader`, or a raw `adsbygoogle.js`
+  `<script>` tag anywhere under `app/(auth)`, `app/(portal)`, or `app/(payment)`.
+- A pathname-eligibility check that bypasses itself under a flag (e.g. "load
+  everywhere while `reviewMode` is on") — verification never requires the
+  script to execute outside an eligible page.
+- Reading `share.adsEligible` / `share.indexEligible` directly at a sitemap,
+  RSS, or metadata call site without checking
+  `CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED` first.
+- A second eligibility allowlist/denylist that duplicates
+  `isAdUnitEligible`/`isAdEligiblePath`.
+- `Disallow`-ing `/share/chat/` in `robots.txt` as a way to keep it out of the
+  index (hides the noindex directive from crawlers instead of applying it).
+
+## Correct pattern
+
+```ts
+// The single authoritative gate — extend this, never parallelize it.
+export function shouldLoadAdSenseScript(params: {
+  isConfigured: boolean;
+  reviewMode: boolean;
+  servingEnabled: boolean;
+  pathname: string;
+}): boolean {
+  if (!params.isConfigured) return false;
+  if (!isAdUnitEligible(params.pathname)) return false;
+  if (CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED && isChatSharePath(params.pathname)) return false;
+  return params.reviewMode || params.servingEnabled;
+}
+```
+
+```tsx
+// app/(marketing)/layout.tsx — the ONLY place AdSenseHead is mounted.
+export default function MarketingLayout({ children }): React.ReactElement {
+  return (
+    <div className="flex min-h-dvh flex-col">
+      <AdSenseHead />
+      {/* ... */}
+    </div>
+  );
+}
+```
+
+## Enforcement
+
+- **Architecture test** —
+  `app/__tests__/adsense-route-boundary.test.ts` reads the raw source of every
+  layout and fails if `AdSenseHead`/`AdSenseScriptLoader`/`adsbygoogle` is
+  referenced outside `(marketing)`.
+- **Unit test** — `lib/adsense/__tests__/adsense-eligibility.test.ts`,
+  `adsense-shared-chat.test.ts`, `components/adsense/__tests__/*`,
+  `hooks/adsense/__tests__/use-adsense-script.test.ts`.
+- **Unit test** — `utilities/__tests__/public-shared-chat.utility.test.ts`,
+  `app/__tests__/sitemap.test.ts`, `app/__tests__/rss.test.ts`,
+  `lib/discovery/__tests__/rss.service.test.ts` cover the review-lockdown
+  branch on indexing/sitemap/RSS.
+- **Review checklist** — any new public route added to
+  `content-registry.constants.ts` gets an explicit `AdEligibility` value; it
+  is never left to default silently.
+
+## Related skills
+
+- [`skills/publish-a-public-marketing-page.md`](../skills/publish-a-public-marketing-page.md)
+
+## Related context
+
+- [`docs/03-architecture/adsense-eligibility.md`](../docs/03-architecture/adsense-eligibility.md)
+- `apps/claw-frontend/CLAUDE.md` — "AdSense script vs verification vs ad units"
+
+## Definition of done
+
+- [ ] `AdSenseHead` is reachable only through `(marketing)/layout.tsx`.
+- [ ] The loader script re-checks pathname eligibility even when
+      `reviewMode` is on.
+- [ ] Every ads/indexing/sitemap/RSS call site for a chat share reads
+      `CHAT_SHARE_REVIEW_LOCKDOWN_ENABLED`.
+- [ ] `adsense-route-boundary.test.ts` and the eligibility/utility/sitemap/RSS
+      test suites are green.
diff --git a/rules/39-worktree-branch-completion-pr-and-release-notes.md b/rules/39-worktree-branch-completion-pr-and-release-notes.md
new file mode 100644
index 000000000..c8da559d9
--- /dev/null
+++ b/rules/39-worktree-branch-completion-pr-and-release-notes.md
@@ -0,0 +1,88 @@
+# 39 — Worktree/Branch Completion: PR and Release Notes
+
+## Purpose
+
+A task done in a dedicated `git worktree` on a new branch is explicitly scoped
+work the user expects to land as a reviewable unit. Leaving it as pushed
+commits with no PR is an incomplete handoff: nobody is notified there is
+something to review, and the record of _why_ the change was made (beyond the
+commit log) does not exist anywhere durable. This rule closes that gap.
+
+## Applies to
+
+Any task where the agent itself created the worktree and branch (via
+`git worktree add -b <branch>` or equivalent) to carry out the work. Does not
+apply when the user is already working on an existing branch/worktree they
+set up themselves and did not ask for a PR.
+
+## Mandatory rules
+
+1. **Every worktree + branch the agent creates for a task ends with a pull
+   request**, opened with `gh pr create`, once the branch's commits are
+   pushed and its scoped gates are green (rules 07/23/34).
+2. **The PR body includes release notes** — a short, user-facing summary of
+   what changed and why, not just a diff description. Follow the existing
+   `gh pr create --body` heredoc convention from root `CLAUDE.md` → "Creating
+   pull requests."
+3. **Do this at the end of the batch of work**, not per-commit. If the work
+   is split into multiple pushed commits on the branch (rule 07's "one commit,
+   one push"), the PR is opened once, after the last commit in that unit of
+   work is pushed — not once per commit.
+4. **State what remains, if anything.** If the task is intentionally partial
+   (a P0 slice of a larger prompt pack, for example), say so explicitly in the
+   PR body rather than implying full completion.
+
+## Prohibited patterns
+
+- Pushing commits to a dedicated task branch and reporting the task done
+  without opening a PR.
+- A PR body that is empty, or that only restates the branch name.
+- Opening the PR before the final commit for the unit of work is pushed.
+- Silently skipping this rule because the user only asked to "implement X" —
+  creating the worktree/branch is what triggers it, not a separate request.
+
+## Correct pattern
+
+```bash
+git worktree add .worktrees/<slug> -b <type>/<slug>
+# ... implement, gate, commit, push (rule 07) ...
+gh pr create --title "<type>(<scope>): <subject>" --body "$(cat <<'EOF'
+## Summary
+- <bullet 1>
+- <bullet 2>
+
+## Release notes
+<user-facing summary of the change>
+
+## Remaining work
+<anything intentionally deferred, or "None">
+
+## Test plan
+- [ ] <gate 1>
+- [ ] <gate 2>
+EOF
+)"
+```
+
+## Enforcement
+
+- **Review checklist** — no automated check observes "was a PR opened"; this
+  is a self-enforced step at the end of the twelve-station Akinator loop
+  (DOCUMENT/INDEX+SYNC stations) and at `finishing-a-development-branch`.
+
+## Related skills
+
+- [`finish-worktree-branch-with-pr.md`](../skills/finish-worktree-branch-with-pr.md) — the runbook
+- [`commit-and-push-each-change.md`](../skills/commit-and-push-each-change.md)
+
+## Related context
+
+- Root `CLAUDE.md` → "Creating pull requests"
+- [`07-commit-rules.md`](07-commit-rules.md), [`23-git-commits-hooks-and-release-gates.md`](23-git-commits-hooks-and-release-gates.md)
+
+## Definition of done
+
+- [ ] The branch's final commit for the unit of work is pushed.
+- [ ] A PR exists for the branch, opened via `gh pr create`.
+- [ ] The PR body contains a release-notes section a non-engineer could read.
+- [ ] Any intentionally deferred scope is named in the PR body.
diff --git a/rules/README.md b/rules/README.md
index 226b5d221..d62d2d18a 100644
--- a/rules/README.md
+++ b/rules/README.md
@@ -18,14 +18,14 @@ bug to be fixed. Resolve up, never down.
 2. **`rules/00-non-negotiable-rules.md`** — the hard blockers.
 3. **`context/architecture-map.md`** — the canonical service/route/event map.
 4. **`context/stack-and-toolchain.md`** — the canonical toolchain contract.
-5. **Numbered `rules/*.md`** (this catalog, `01`–`32`).
+5. **Numbered `rules/*.md`** (this catalog, `01`–`39`).
 6. **`skills/*.md`** — operational runbooks (how-to; rules are the what/why).
 7. **`context/*` + `memory/*`** — supporting context and durable agent memory.
 8. **`.ai/` manifests** (`.ai/manifests/*.json`, `.ai/BOOTSTRAP.md`, `.ai/packs/*.md`) — machine-readable derived facts.
 9. **Compact AI routers** (`CODEX.md`, `cursor.md` and other per-tool entrypoints) — mirrors, never originals.
 
 > The legacy `rules/00-master-rules.md … 09-refactor-rules.md` set remains valid
-> and is not superseded; this numbered `00-37` catalog is the finer-grained,
+> and is not superseded; this numbered `00-39` catalog is the finer-grained,
 > enforcement-tagged expansion that lives alongside it. The full one-line index
 > of every numbered file lives in [`00-master-rules.md`](00-master-rules.md).
 
diff --git a/skills/00-index.md b/skills/00-index.md
index d5194bc15..ffad854e9 100644
--- a/skills/00-index.md
+++ b/skills/00-index.md
@@ -65,6 +65,7 @@
 | Write Unit Tests                         | `write-unit-tests.md`                | New/changed utility in `src/common/utilities/` or `packages/shared-utilities/`.                                                                      |
 | Grow the Knowledge Layer                 | `grow-the-knowledge-layer.md`        | Every change: work out which rules/skills/docs/.ai files must move with the code (rule 33)                                                           |
 | Run the Gates Once and Land              | `run-gates-once-and-land.md`         | Proving a change green once, landing it, and giving the machine back (rule 34)                                                                       |
+| Finish Worktree/Branch with a PR         | `finish-worktree-branch-with-pr.md`  | The agent created a dedicated worktree + branch for a task; the task ends with a PR and release notes, not just pushed commits (rule 39)             |
 
 ---
 
diff --git a/skills/finish-worktree-branch-with-pr.md b/skills/finish-worktree-branch-with-pr.md
new file mode 100644
index 000000000..2d6067f9f
--- /dev/null
+++ b/skills/finish-worktree-branch-with-pr.md
@@ -0,0 +1,91 @@
+---
+name: finish-worktree-branch-with-pr
+summary: When the agent created a dedicated git worktree and branch for a task, the task is not finished until a PR is opened with release notes — not just pushed commits.
+task_keywords: [worktree, new branch, pull request, PR, release notes, finish branch, hand off]
+applies_to: [all-workspaces, monorepo-root]
+required_rules: [39-worktree-branch-completion-pr-and-release-notes, 07-commit-rules]
+required_context: [workspace-map]
+affected_workspaces: [varies-with-change]
+required_tests: [none]
+required_docs: [none]
+validation_lane: gh pr view
+---
+
+## When to use
+
+Every time you (the agent) ran `git worktree add -b <branch>` (or the
+equivalent EnterWorktree flow) to carry out a task, and the implementation is
+now complete, gated, and pushed.
+
+## When NOT to use
+
+- The user is working on their own existing branch/worktree and didn't ask
+  for isolation — creating a PR unprompted there is a separate, larger
+  decision than this skill covers.
+- The user explicitly said not to push or not to open a PR (a spike, a
+  local-only experiment).
+
+## Read first
+
+- [`../rules/39-worktree-branch-completion-pr-and-release-notes.md`](../rules/39-worktree-branch-completion-pr-and-release-notes.md)
+- [`commit-and-push-each-change.md`](commit-and-push-each-change.md) — get to
+  "every commit pushed" first; this skill starts after that is true
+
+## Steps
+
+1. Confirm nothing is unpushed: `git log --oneline origin/<branch>..HEAD`
+   must print nothing.
+2. Confirm the scoped gates for every touched workspace are green (this
+   should already be true from landing each commit).
+3. Draft the PR body around **release notes**, not just a diff summary —
+   write it for someone who will not read the code:
+   - `## Summary` — 2-4 bullets, what changed
+   - `## Release notes` — user-facing framing: what a user/operator actually
+     gets, in plain language
+   - `## Remaining work` — name anything intentionally deferred; write
+     "None" if there is nothing
+   - `## Test plan` — the gates/checks that were actually run, as a checklist
+4. Open it:
+   ```bash
+   gh pr create --title "<type>(<scope>): <subject>" --body "$(cat <<'EOF'
+   ...
+   EOF
+   )"
+   ```
+5. Report the PR URL back to the user. Do not report the task as fully done
+   without it.
+
+## Why
+
+A pushed branch with no PR is invisible to anyone not already watching the
+branch list. The PR is the durable artifact that carries review, CI status,
+and a human-readable account of the change — the commit log alone assumes the
+reader will reconstruct intent from diffs, which is exactly the kind of
+knowledge loss the rest of this repo's knowledge-compounding rules exist to
+prevent (`33-knowledge-compounding-and-context-velocity.md`).
+
+## Failure modes
+
+- Reporting "done, pushed to `fix/x`" and stopping — the user then has to
+  remember to ask for a PR separately.
+- A PR body that is just the branch name or a copy of the commit subject line
+  — it answers "what files changed" and not "what does this mean."
+- Opening the PR before the last commit for the unit of work is pushed, so
+  the PR understates the change and needs a second look later.
+
+## Validation commands
+
+```bash
+git log --oneline origin/<branch>..HEAD   # must be empty
+gh pr view --json url,title,body
+```
+
+## Documentation updates
+
+None beyond the PR body itself — this is a workflow step, not an architecture
+change.
+
+## Definition of done
+
+A PR exists on the remote for the branch, its body has a release-notes
+section, and the user has been given the PR URL.