feat(uk-gcloud)!: port the arckit-uk-gcloud overlay to G-Cloud 15

.arckit/templates/_partials/RENDERING.md

@@ -43,7 +43,7 @@ The doc-type codes that carry a regime. A `doc-type:` value absent from this tab
 
 | Regime | Label | Routing | Doc-type codes |
 |---|---|---|---|
-| UK | UK Gov | falls through to step 2 | `TNDR`, `CMPT`, `TCOP`, `AIPB`, `ATRS`, `DPIA`, `SVCASS`, `SUPP`, `SVCD`, `SDD`, `DECL`, `PRIC`, `SECA`, `GCMP`, `GCRV`, `FSSCA`, `FSSAFE`, `FSCD`, `FSCTP`, `NHSDTAC`, `NHSMDR` |
+| UK | UK Gov | falls through to step 2 | `TNDR`, `CMPT`, `TCOP`, `AIPB`, `ATRS`, `DPIA`, `SVCASS`, `SUPP`, `SVCD`, `SDD`, `DECL`, `PRIC`, `SECA`, `GCMP`, `GCRV`, `SOCV`, `LOTQ`, `RATE`, `FSSCA`, `FSSAFE`, `FSCD`, `FSCTP`, `NHSDTAC`, `NHSMDR` |
 | MOD | MOD | falls through to step 2 | `SECD-MOD`, `JSP936` |
 | AT | Austria | hard-routes | `ATBFR`, `ATDSG`, `ATNISG`, `BVERGG` |
 | AU | Australia | hard-routes | `AUE8`, `AUISM`, `AUPIA`, `AUNDB`, `AUOT`, `AUSOCI`, `AUAESCSF`, `AUENERGY`, `AUDSS`, `AUPSPF`, `AUAIA`, `AUDISP` |

.claude-plugin/marketplace.json

@@ -316,7 +316,7 @@
     {
       "name": "arckit-uk-gcloud",
       "source": "./plugins/arckit-uk-gcloud",
-      "description": "UK G-Cloud Supplier Bid-Authoring Overlay — 11 supplier-side commands driving a G-Cloud 14 Digital Marketplace submission end to end: supplier profile, service design, Service Definition Documents (Lots 1/2/3), supplier declaration, pricing, NCSC Cloud Security Principles assertions, competitor benchmark, submission review, and CCS submission packaging. Recipe: uk-gcloud-submission. Requires arckit core. Proprietary, experimental.",
+      "description": "UK G-Cloud Supplier Bid-Authoring Overlay — 15 supplier-side commands driving a G-Cloud 15 (RM1557.15) Digital Marketplace submission end to end: supplier profile, social value, lot questions, Procurement Act 2023 declaration, service design, Service Definition Documents (Lots 1a/1b/2a/2b/3), pricing, security evidence, competitor benchmark, submission review, and GCA submission packaging. Recipe: uk-gcloud-submission. Requires arckit core. Proprietary, experimental.",
       "version": "6.17.5",
       "author": {
         "name": "TractorJuice"
@@ -331,8 +331,12 @@
         "gcloud",
         "g-cloud",
         "digital-marketplace",
+        "g-cloud-15",
+        "gca",
+        "government-commercial-agency",
         "ccs",
-        "crown-commercial-service",
+        "social-value",
+        "procurement-act-2023",
         "procurement",
         "supplier",
         "sdd",

CHANGELOG.md

@@ -7,10 +7,37 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- **`/arckit:social-value`** (`arckit-uk-gcloud`) writes the supplier's G-Cloud 15 social value commitments to `projects/000-global/supplier/ARC-000-SOCV-v1.0.md`: the declaration's social value sections A to C, the missions, policy outcomes and measures committed to (worded as the live listings show them, with the declaration checkbox to tick where GCA's wording is longer), a delivery plan for each, a named Social Value Contact and operational readiness. Social value is 10% of the score on every lot, marked pass/fail.
+- **`/arckit:lot-questions`** (`arckit-uk-gcloud`) writes the G-Cloud 15 lot questions to `projects/000-global/supplier/ARC-000-LOTQ-v1.0.md`, one Part per lot group bid for: the Lot 1a/1b conditions of participation and the five scored quality answers, each drafted within its 250-word limit and word-counted, and the Lot 2 and Lot 3 mandatory award criteria and certifications. It runs after the SDDs, pricing and security, because the Lot 2a/2b and Lot 3 award criteria repeat each service's answers.
+- **Three doc-type codes**, `SOCV` (Social Value Commitments) and `LOTQ` (G-Cloud Lot Questions), both HIGH severity, and `RATE` (G-Cloud Lot 3 Rate Card), the supplier's one Lot 3 rate card that `/arckit:pricing` writes to `projects/000-global/supplier/` and every Lot 3 service shares. All three are registered in `doc-types.mjs` and `/arckit:pages`, with quality-checklist sections. The G-Cloud sections of the checklist (SUPP, DECL, SVCD, SDD, PRIC, SECA, GCMP, GCRV) now check G-Cloud 15 rules.
+
 ### Changed
 
 - **`/arckit:fr-irn` follows the IRN v1.2 grid.** The aDRI replaced the v0.4 questionnaire with `Référentiel_IRN_v1.2.xlsx`, and the way the grid is filled changed with it. The assessment is now built around the digital assets in scope instead of five organisational layers: each pillar lists its criteria by ID, with the criterion's scope (organisation or asset) and a maturity level to report from the official grid, where the old scaffold had R/NR cells per layer. The summary matrix is pillars by asset, and the document no longer promises a 0–100 score the workbook does not compute. RES-7 and RES-8 carry their v1.2 names. The command, template, guide and quality checklist are updated; criterion text is still not reproduced (CC BY-NC-ND).
 
+- **The `arckit-uk-gcloud` overlay now writes G-Cloud 15 bids.** G-Cloud 15 (RM1557.15) went live on 6 August 2026 under the Procurement Act 2023, run by the Government Commercial Agency (GCA, formerly Crown Commercial Service), and the Digital Marketplace now lists only G-Cloud 15 services. The overlay was a port of G-Cloud Kit's G-Cloud 14 commands; it now carries G-Cloud Kit's G-Cloud 15 rewrite as of v0.8.2, adapted to ArcKit's projects and document IDs, including the v0.8.2 fixes from running the workflow on two real supplier projects. G-Cloud 14 is no longer supported. Every question, limit, scoring rule and pricing rule comes from GCA's question export and tender documents, and where the 42,893 live G-Cloud 15 listings (scraped 7 October 2026) show a rule the export doesn't state, the listings are the evidence.
+  - **Five lots instead of three.** `/arckit:service-design` chooses between Lots 1a (IaaS and PaaS), 1b (above OFFICIAL), 2a (iSaaS), 2b (SaaS) and 3 (Cloud Support), records the lot on the service design, and names the matching SDD command.
+  - **One SDD command per lot.** `/arckit:sdd-lot1` is replaced by `/arckit:sdd-lot1a` and `/arckit:sdd-lot1b`, and `/arckit:sdd-lot2` by `/arckit:sdd-lot2a` and `/arckit:sdd-lot2b`; `/arckit:sdd-lot3` is rewritten. Lots that ask the same service questions share a template (1a/1b, 2a/2b), and each template is rebuilt from GCA's question export, section by section.
+  - **Lot 3 is priced on one DDaT rate card per supplier**, in place of the SFIA rate card: a maximum UK and offshore day rate for each job family, role and role level offered. Every Lot 3 listing shows the supplier's whole card (only 2 of the 1,135 suppliers with several live Lot 3 services show different cards), so `/arckit:pricing` keeps it once, as `ARC-000-RATE`. `/arckit:sdd-lot3` lists the role levels that deliver the service and copies no rates, and roles outside DDaT, such as procurement advisers, are priced at the nearest DDaT role and level. The service sections G-Cloud 15 dropped from Lot 3 are gone.
+  - **`/arckit:pricing` follows each lot's rules and scoring**: the 1a/1b price formula with its onboarding table and minimum discount, the 2a/2b discount bands (scored on their total), and Lot 3's average day rate. Price on application, "from £x" and unexplained ranges are flagged; the G-Cloud 14 minimum/maximum price, unit and interval fields are gone.
+  - **`/arckit:declaration` follows the Procurement Act 2023**: Central Digital Platform registration and PPON, exclusion grounds declared on the CDP, connected and associated persons, the debarment list, payments in contracts over £5m a year, modern slavery, and the question about third-party agents or bid writers, which the command shows but never answers for you. It also fixes the G-Cloud 14 declaration's exclusion grounds, which listed tax evasion as mandatory and only 7 of the discretionary grounds.
+  - **Security and certifications by lot** in `/arckit:security`: ISO 9001, 20000-1 and 27001 for Lot 1a/1b bids; Cyber Essentials Plus (1a/1b) and Cyber Essentials (2a, 2b and 3), which are mandatory for call-offs but not for the bid, so a missing one is a call-off warning, not a failed bid; the new post-quantum cryptography, Software Security Code of Practice, AI chatbot and FOCUS questions. NCSC principles 3 and 13 use their current names.
+  - **`/arckit:review`, `/arckit:submission-pack`, `/arckit:supplier-profile` and `/arckit:gcloud-competitors`** check, bundle and compare the new documents and lots, with the G-Cloud 15 limits (service name 100 characters, description 500 characters, features and benefits 10 words each).
+  - **One category group per service.** None of the live listings has categories in more than one `Root > Group`, so the service design and SDDs record one category group, an offer that spans groups is designed as one service per group, and `/arckit:review` blocks on a service whose categories span groups.
+  - **A word limit on every free-text answer.** The export states few, but the Digital Platform keeps the other free-text answers within 50, 100 or 200 words. The framework reference tabulates them by lot with the listing evidence, each SDD answer shows its limit on a `**Words:**` line, and the SDD commands and `/arckit:review` recount the answers.
+  - **Options worded as the live listings show them** ("Not a reseller", "Developed Vetting (DV)", "TLS (version 1.2 or above)" and so on), with the Digital Platform's wording beside any option it words differently.
+  - **Checks that catch unfinished and out-of-date documents.** `/arckit:review` and `/arckit:submission-pack` share one placeholder scan (`[PENDING]` in every form, older markers such as `[TODO]` and `[TBC]`, and template fields never filled in) and one check for documents left over from G-Cloud 14. `/arckit:review` also checks the SDD against the pricing document and the supplier profile's new Listing Contact, and `/arckit:submission-pack` writes the supplier-level answers once per bid. A tender on Lots 2a/2b or 3 is disqualified only when all four award criteria mark under 33. The overlay ships no scripts, so these checks are inline shell, kept identical across commands by tests.
+  - **Recommended order:** supplier profile, social value, service design, the lot's SDD, pricing and security, lot questions, declaration, review, submission pack. Lot questions and declaration flag a service design from G-Cloud 14 rather than skipping it.
+  - **The `sfia-skills` skill is now `ddat-rate-card`**, with GCA's Lot 3 rate card (9 job families, 58 roles, 222 role levels) and what suppliers charge for common role levels. `gcloud-framework` carries the G-Cloud 15 question references by lot, the declaration, the social value model and every lot's category tree, in place of the old G-Cloud 13 question list. `cloud-security` adds the G-Cloud 15 certification requirements.
+  - The `uk-gcloud-submission` recipe builds the two new supplier-wide documents, runs the lot questions after the SDD, pricing and security, and defaults to `/arckit:sdd-lot2b`.
+
+### Removed
+
+- **`/arckit:sdd-lot1` and `/arckit:sdd-lot2`** (`arckit-uk-gcloud`). Use `/arckit:sdd-lot1a` or `/arckit:sdd-lot1b`, and `/arckit:sdd-lot2a` or `/arckit:sdd-lot2b`. Their guides are removed with them.
+- **The `sfia-skills` skill** (`arckit-uk-gcloud`), replaced by `ddat-rate-card`. G-Cloud 15 prices Lot 3 by DDaT role level; the SFIA reference stays inside the new skill for describing a team's skills, not for pricing.
+
 ## [6.17.5] — 2026-10-04
 
 ### Fixed

README.md

@@ -556,25 +556,34 @@ Install: `claude plugin install arckit arckit-uk-finance`. Help wanted: recruiti
 
 ---
 
-## UK G-Cloud Supplier Bid-Authoring Overlay (11 commands) — Proprietary
+## UK G-Cloud Supplier Bid-Authoring Overlay (15 commands) — Proprietary
 
-> **PROPRIETARY, Claude Code only.** The 11 commands below are a supplier-side overlay for authoring UK G-Cloud (Digital Marketplace) framework bids: supplier profile, service design, the three Service Definition Document lots, the supplier declaration, pricing, security assertions, competitor benchmarking, submission review, and a final submission pack. Unlike every other ArcKit plugin, `arckit-uk-gcloud` ships under a **proprietary licence (not MIT)** and is **not distributed to the non-Claude extension formats** (Codex / Gemini / OpenCode / Copilot) — it runs on Claude Code only. It is the 4th sector-specific overlay (after `arckit-uk-finance`, `arckit-uk-nhs`, `arckit-au-energy`) and requires the `arckit` core plugin.
+> **PROPRIETARY, Claude Code only.** The 15 commands below are a supplier-side overlay for authoring UK G-Cloud 15 (RM1557.15) Digital Marketplace bids, run by the Government Commercial Agency (GCA, formerly CCS): supplier profile, social value, lot questions, the Procurement Act 2023 supplier declaration, service design, a Service Definition Document for each of the five lots (1a, 1b, 2a, 2b, 3), pricing, security evidence, competitor benchmarking, submission review, and a final submission pack. Unlike every other ArcKit plugin, `arckit-uk-gcloud` ships under a **proprietary licence (not MIT)** and is **not distributed to the non-Claude extension formats** (Codex / Gemini / OpenCode / Copilot) — it runs on Claude Code only. It is the 4th sector-specific overlay (after `arckit-uk-finance`, `arckit-uk-nhs`, `arckit-au-energy`) and requires the `arckit` core plugin.
 
-**G-Cloud bid authoring**:
+**Supplier-wide (once per bid)**:
 
-- `/arckit:supplier-profile` — Supplier profile and company capability statement (SUPP)
-- `/arckit:service-design` — Service design and value proposition (SVCD)
-- `/arckit:sdd-lot1` — Service Definition Document, Lot 1 Cloud Hosting (SDD)
-- `/arckit:sdd-lot2` — Service Definition Document, Lot 2 Cloud Software (SDD)
-- `/arckit:sdd-lot3` — Service Definition Document, Lot 3 Cloud Support (SDD)
-- `/arckit:declaration` — Supplier declaration and framework attestations (DECL)
-- `/arckit:pricing` — Pricing document and SFIA rate card (PRIC)
-- `/arckit:security` — Security assertions and cloud security assessment (SECA)
+- `/arckit:supplier-profile` — Supplier profile: company, CDP and PPON, contacts, certifications, insurance (SUPP)
+- `/arckit:social-value` — Social value commitments, Social Value Contact and operational readiness, 10% pass/fail on every lot (SOCV)
+- `/arckit:lot-questions` — Lot questions per lot group: conditions of participation, scored Lot 1a/1b quality answers, Lot 2 and Lot 3 mandatory award criteria (LOTQ)
+- `/arckit:declaration` — Procurement Act 2023 supplier declaration (DECL)
+
+**Per service**:
+
+- `/arckit:service-design` — Service design, lot choice and value proposition (SVCD)
+- `/arckit:sdd-lot1a` — Service Definition Document, Lot 1a IaaS and PaaS (SDD)
+- `/arckit:sdd-lot1b` — Service Definition Document, Lot 1b IaaS and PaaS above OFFICIAL (SDD)
+- `/arckit:sdd-lot2a` — Service Definition Document, Lot 2a Infrastructure Software as a Service (SDD)
+- `/arckit:sdd-lot2b` — Service Definition Document, Lot 2b Software as a Service (SDD)
+- `/arckit:sdd-lot3` — Service Definition Document, Lot 3 Cloud Support, with the DDaT role levels that deliver it (SDD)
+- `/arckit:pricing` — Pricing by lot: 1a/1b price formula, 2a/2b discount bands; for Lot 3, the supplier's one DDaT rate card, shared by every Lot 3 service (PRIC, RATE)
+- `/arckit:security` — Security evidence: certifications by lot and the NCSC Cloud Security Principles (SECA)
 - `/arckit:gcloud-competitors` — G-Cloud competitor benchmark (GCMP)
 - `/arckit:review` — G-Cloud submission review and gap analysis (GCRV)
 - `/arckit:submission-pack` — Assemble the final G-Cloud submission pack
 
-Skills: `gcloud-framework`, `cloud-security`, `sfia-skills`. Recipe: `uk-gcloud-submission` (end-to-end bid assembly).
+Recommended order: supplier-profile → social-value → service-design → the lot's SDD command → pricing and security → lot-questions → declaration → review → submission-pack. The lot questions come after the SDDs because their award criteria repeat each service's answers.
+
+Skills: `gcloud-framework` (G-Cloud 15 question set, limits and evaluation), `cloud-security`, `ddat-rate-card` (Lot 3 job families, roles and levels; replaces `sfia-skills`). Recipe: `uk-gcloud-submission` (end-to-end bid assembly). G-Cloud 14 is no longer supported: `/arckit:sdd-lot1` is replaced by `sdd-lot1a` and `sdd-lot1b`, and `/arckit:sdd-lot2` by `sdd-lot2a` and `sdd-lot2b`.
 
 Install: `claude plugin install arckit arckit-uk-gcloud`. Proprietary — see the licence-exception note at the foot of this README. Ported from the standalone gcloud-kit plugin.
 

docs/DEPENDENCY-MATRIX.md

@@ -402,6 +402,30 @@ principles-compliance → conformance → analyze → service-assessment → sto
 
 ## Changelog
 
+### 2026-10-07 - UK G-Cloud Supplier Overlay moves to G-Cloud 15 (Community, Proprietary)
+
+The `arckit-uk-gcloud` overlay now targets G-Cloud 15 (RM1557.15), run by the Government Commercial Agency (GCA, formerly CCS), and drops G-Cloud 14. It goes from 11 commands to 15: `/arckit:sdd-lot1` is replaced by `/arckit:sdd-lot1a` and `/arckit:sdd-lot1b`, `/arckit:sdd-lot2` by `/arckit:sdd-lot2a` and `/arckit:sdd-lot2b`, and `/arckit:social-value` and `/arckit:lot-questions` are new. Total community-overlay command count moves up by 4. As before, overlay commands are documented here rather than as DSM grid rows.
+
+**New commands and output doc-types** (regime UK, category Procurement, HIGH severity):
+
+- `/arckit:social-value` → `SOCV` (Social Value Commitments), supplier-wide in `projects/000-global/supplier/`
+- `/arckit:lot-questions` → `LOTQ` (G-Cloud Lot Questions), supplier-wide, one Part per lot group bid for
+- `/arckit:sdd-lot1a`, `/arckit:sdd-lot1b`, `/arckit:sdd-lot2a`, `/arckit:sdd-lot2b` → `SDD` (one per G-Cloud 15 lot; `sdd-lot3` unchanged in name)
+- `/arckit:pricing` → `PRIC`, and for Lot 3 also `RATE` (G-Cloud Lot 3 Rate Card; regime UK, category Procurement), the supplier's one rate card in `projects/000-global/supplier/`, shared by every Lot 3 service. The Lot 3 SDD lists the role levels that deliver the service and copies no rates
+
+**Dependencies**: supplier-profile (SUPP) → social-value (SOCV, M) → service-design (SVCD) → sdd-lot1a / 1b / 2a / 2b / 3 (SDD, M) → pricing (PRIC, R; reads the SDD so the two agree; for Lot 3 also writes RATE) and security (SECA, R) → lot-questions (LOTQ, M; after the SDDs, because the Lot 2a/2b and Lot 3 award criteria repeat each service's SDD and security answers, R) → declaration (DECL, M; summarises SOCV, records the lots bid for) → review (GCRV; checks SUPP, SOCV, LOTQ, DECL, SVCD, SDD, PRIC, SECA and, for Lot 3, RATE) → submission-pack.
+
+**Skills**: `gcloud-framework` (now with the G-Cloud 15 question references), `cloud-security`, `ddat-rate-card` (replaces `sfia-skills`). **Recipe**: `uk-gcloud-submission` adds the SOCV and LOTQ targets, runs LOTQ after the SDD, pricing and security, and defaults to `sdd-lot2b`.
+
+**Typical G-Cloud 15 supplier path**:
+
+```text
+supplier-profile → social-value →
+service-design → sdd-lot1a | sdd-lot1b | sdd-lot2a | sdd-lot2b | sdd-lot3 →
+pricing / security → lot-questions → declaration →
+gcloud-competitors (optional) → review → submission-pack
+```
+
 ### 2026-09-03 - Interactive Diagram Rendering command (#826)
 
 Added `/arckit:archify` (76th core command), taking the core plugin from 75 to 76 commands. Documented here via this changelog rather than as a DSM grid row, following the convention used for recent additions. Tier 6 detailed design.