[onlydole]

Fixes the post-merge documentation check failure on PR #130 (failing run): the doc-update agent hit --max-turns 25 with zero permission denials — it legitimately ran out of turns reading a 61-file merge plus the full docs/ tree (used 26), and the action treats hitting the cap as a hard failure.

Changes

• .github/workflows/doc-update.yml: --max-turns 25 → --max-turns 100. The existing 30-minute job timeout remains the real runaway-cost backstop; the turn cap only needs to be high enough that a legitimately large merge can finish.
• docs/architecture/ci-cd.md: updated the safety-guard table, and added a troubleshooting entry distinguishing this failure mode (error_max_turns with permission_denials_count: 0 — cap too low) from the existing documented one (error_max_turns with denials — allowedTools misconfiguration).
• CHANGELOG.md + docs/changelog/CHANGELOG.md: recorded the fix.

Freshness verified locally: all pages at 100 except CONTRIBUTING.md at a green-tier 97 (ordinary git age, unrelated).

🤖 Generated with Claude Code

https://claude.ai/code/session_01Let62ZbPX5RpB46iwPoboh

---

Generated by Claude Code

[github-actions]

📚 Documentation freshness — 100 → 100 (+0)

⚠️ 1 page dropped

Page	Before → After	Reason
🟢 CONTRIBUTING.md	100 → 97	score decreased

_{15 pages scored • median 100 → 100 (+0)}

[pullfrog]

✅ No new issues found.

Reviewed changes — a one-line CI config bump plus consistent docs/changelog updates, reviewed in full against the surrounding workflow and docs.

• .github/workflows/doc-update.yml: --max-turns 25 → --max-turns 100 to stop error_max_turns failing the doc-update job on legitimately large merges (PR #130's 61-file merge used 26 turns with zero permission denials). The 30-minute job timeout stays the cost backstop.
• docs/architecture/ci-cd.md: safety-guard table row updated; the "Why not individual patterns" paragraph was de-hardcoded away from the literal 25 so it won't re-stale on the next cap change; a new troubleshooting section cleanly distinguishes permission_denials_count: 0 (cap too low) from the existing > 0 (allowedTools misconfiguration) entry.
• CHANGELOG.md + docs/changelog/CHANGELOG.md: identical ### Fixed entries added, matching the repo's dual-changelog convention.

No concerns. freshness.yml's --max-turns 8 is correctly left alone — it's a separate read-only semantic-check workflow, not the merge-driven doc updater. The 4x cap increase is bounded by the 30-minute job timeout, which the author has explicitly retained as the real cost guard.

  ^{｜ ⚠️ this action is pinned to a commit SHA, which freezes the cleanup step — switch to @v0 or keep the SHA fresh with Dependabot ｜ View workflow run ｜ Using openai-compatible/glm-5.2 ｜ 𝕏}