🧩 Dynamic Workflow Patterns — milestone #157 bundle

3 issues, one PR · grounded in the 2 workflows actually run this session

#2234 patterns ref · #2233 model tiers · #2232 quarantine · don't-wrap honored

📜 The 6 patterns → ork map (click)

pattern	ork flow	fixes failure mode

🎚️ Per-agent model tiers (#2233)

haiku
structural greps, file reads, classification, fan-out exploration

opus
synthesis, adversarial judgment, design, cross-cutting reasoning

inherit
everything between / when unsure — omit model

Don't over-optimize: a wrong-tier cheap agent that misses a structural dependency costs more than the tokens it saved (the version-matrix verdict needed a careful read, not a cheap grep).

🛡️ Quarantine for untrusted input (#2232)

A new shared rule + pointers wired into the 3 skills that read GitHub/CI content.

skill	untrusted source	reader extracts → actor does
`ci-sentinel`	CI logs, PR titles/bodies	failure class → proposes verdict (never auto-pushes)
`fix-issue`	issue body, comments	repro facts → writes fix from facts, not prose
`review-pr`	PR description, threads	stated intent → reviews the diff (the trusted artifact)

⚖️ The reconciled tension

"don't wrap" (memory) vs "ship as Skills" (the article): reconciled — bounded foreground work USES the Workflow tool directly; only genuinely large-N/adversarial/repeated flows ship as a template (not a verbatim script). Decision test: would a regular session finish it in 5 minutes? Then no workflow at all.

📦 What lands

Reference: chain-patterns/references/dynamic-workflow-patterns.md · rule: shared/rules/untrusted-input-quarantine.md · milestone #157