[ChefControl]

A repeatable check for each new feature, so the privacy notice (#150), the Steam content survey (#151) and the licences and credits (#147, #148, #149) stay right. Part of #142.

The skills

• legals-update: pins one target (a PR, a branch, or the current branch against main), starts three subagents in one message, each following one of the skills below, and puts their reports into one short report. It ends by asking the owner whether to make the edits.
• legals-privacy: what the feature collects, keeps, shares or shows. It checks Firestore and firestore.rules, sign-in, names on boards, reports, localStorage, requests to other sites and Steam IDs. It compares these with public/privacy.html (A privacy notice for the web game and the Steam version, linked from Settings (#150) #211), the short version in Settings → 🛡️ Privacy (#privacyCard, from Scoreboards show "Pat S.", and a switch in Settings takes you off them (#213) #214, still open) and the report dialog's "What's sent" list.
• legals-steam: every survey topic, the store's mature content note, the gambling text and the AI disclosure. It compares them with the texts agreed on Steam: content survey, gambling note and AI disclosure #151 and the prep page. If Steam: content survey, gambling note and AI disclosure #151 is closed, it also drafts the Support ticket.
• legals-licenses: every new package (GPL, LGPL, AGPL and other copyleft can't ship) and every font, emoji, sound, recording and image. It checks each one's credit in Credits & Copyrights. The sources are scripts/licences.ts (Open-source licences in Credits, and the build stops on GPL code (#149) #209, still open), public/fonts and src/icons (Bundle the fonts, and draw every emoji as the game's own icon (#148) #210), and the sound credits. Every new recording of people or a room is flagged for a listen, because of the crowd murmur and slots.mp3 (Casino slot machines: a recording without a song, a spin each time a guest pulls (#147) #212). Each finding is OK, missing credit (with the line to add) or can't use (why, and what to use instead).

Each one also works when run on its own. They report and propose, and edit nothing unless asked. Nothing from inside Steamworks, and no NDA or SDA terms, goes in them. CLAUDE.md's agent skills section now points to them.

Dry run: /legals-update on PR #212 (merged)

The three subagents ran side by side: privacy 39 s, Steam 40 s, licences 65 s.

Legal check: PR #212 (casino slot machines recording)

Privacy: no change. src/roomTone.ts fetches slots.mp3 from the game's own host, as before. The new credit links (freesound.org, CC BY 4.0) are covered by Links to other sites. firestore.rules is untouched.

Steam: no change (#151 open, not submitted). The recording is still a real, credited one, so the AI text holds. The guests' machines now play a spin per pull, but the odds and the player's own $250 machine are unchanged, and the prep page's Slots row is still right.

Licences: 1 update.

• OK: src/sounds/slots.mp3, "WOF_slots6" by fugacious, CC BY 4.0 (freesound.org/s/145539). It's credited in #creditsCard and docs/game.md's Sound credits, and the test checks it.
• Needs a listen: src/sounds/slots.mp3, 0:10–0:14.2. Shazam matched "Feels Like Tonight" (Daughtry) somewhere in the source's 0:10–0:20, which overlaps the end of the cut. Its 10 s windows inside 0–15 s came back clean, but no owner listen of the final cut is posted on Steam: listen-check the casino room recordings for background music #147.

For the owner: listen to the last 4 s of slots.mp3 on headphones and post the result on #147 before closing it. (Steam also noticed the prep page's gambling table still shows 😭 for the corner of tears, which is 😢 since #210.)

The licence finding matches what PR #212's own description says.

🤖 Generated with Claude Code