Add rpa-bot-handoff skill: ops guide for bot handover

The skill scans a bot with subagents (never runs it) and writes
HANDOVER.md, an 11-section ops guide in the operator's order: where is
what, how to run, how long to wait, after the run, how to see an
exception, exception list, how you will know, how to tell us, don'ts,
issues seen before. Dev material (check against 12 failure classes from
Tebra Auto Post, gaps with file:line, incidents) goes to HANDOVER-DEV.md.

Also adds ADR-0004, glossary terms, five fixture bots and a handoff eval
runner (--resume, --regrade) with results from 47 runs of the earlier
13-section version. The grader still expects that structure and must be
updated before the next eval run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/fixtures/h-mail-intake/.env

@@ -0,0 +1,4 @@
+IMAP_HOST=mail.example-clinic.test
+IMAP_USER=referrals@example-clinic.test
+IMAP_PASSWORD=Mb-Fake-Pass-42
+INTAKE_SHARE=\192.168.40.12\intake

tests/fixtures/h-mail-intake/README.md

@@ -0,0 +1,6 @@
+# Mail intake bot
+
+Every 10 minutes (Task Scheduler): reads unseen mail in the referrals mailbox, saves attachments,
+checks they are PDFs under 20 MB, copies them to the shared intake folder and records each one in the
+queue (`data/queue.db`, table `queue`: New, Processing, Done, Failed, Quarantined).
+Ops view the queue with `queue_viewer.xlsx` (Data > Refresh), which shows id, sender, subject, status and note.

tests/fixtures/h-mail-intake/_history.json

@@ -0,0 +1,5 @@
+[
+  {"msg": "fix: worker blocked for a whole day after a crash left one item in Processing - ops reset it by hand", "file": "intake.py"},
+  {"msg": "fix: password-protected PDFs were copied empty - now noted as encrypted", "file": "intake.py"},
+  {"msg": "fix: mailbox password expired and every run failed silently - log the IMAP error", "file": "intake.py"}
+]

tests/fixtures/h-mail-intake/intake.py

@@ -0,0 +1,88 @@
+"""Mail intake bot: reads the referrals mailbox, saves PDF attachments to the shared intake folder
+and queues each one. Runs every 10 minutes:  python intake.py"""
+import email
+import imaplib
+import logging
+import os
+import shutil
+import sqlite3
+import time
+from pathlib import Path
+
+from dotenv import load_dotenv
+from pypdf import PdfReader
+
+ROOT = Path(__file__).parent
+load_dotenv(ROOT / ".env")
+QUEUE = ROOT / "data" / "queue.db"
+TMP = ROOT / "data" / "tmp"
+SHARE = Path(os.environ.get("INTAKE_SHARE", r"\\fileserver\intake"))
+MAX_MB = 20
+IMAP_TRIES = 3
+
+logging.basicConfig(filename=ROOT / "logs" / "intake.log", level=logging.INFO,
+                    format="%(asctime)s %(levelname)s %(message)s")
+log = logging.getLogger("intake")
+
+
+def connect():
+    for attempt in range(1, IMAP_TRIES + 1):
+        try:
+            box = imaplib.IMAP4_SSL(os.environ["IMAP_HOST"])
+            box.login(os.environ["IMAP_USER"], os.environ["IMAP_PASSWORD"])
+            return box
+        except (imaplib.IMAP4.error, OSError) as e:
+            log.warning("IMAP connect failed (%s/%s): %s", attempt, IMAP_TRIES, e)
+            time.sleep(30)
+    raise RuntimeError("Mailbox unreachable")
+
+
+def fetch_new(db, box):
+    box.select("INBOX")
+    _, ids = box.search(None, "UNSEEN")
+    for num in ids[0].split():
+        _, data = box.fetch(num, "(RFC822)")
+        msg = email.message_from_bytes(data[0][1])
+        for part in msg.walk():
+            name = part.get_filename()
+            if not name:
+                continue
+            path = TMP / name
+            path.write_bytes(part.get_payload(decode=True))
+            db.execute("INSERT INTO queue(sender, subject, file, status, note) VALUES (?,?,?,'New','')",
+                       (msg["From"], msg["Subject"], str(path)))
+    db.commit()
+
+
+def process(db, row_id, path):
+    p = Path(path)
+    if p.suffix.lower() != ".pdf" or p.stat().st_size > MAX_MB * 1024 * 1024:
+        return "Quarantined", f"not a PDF or over {MAX_MB} MB"
+    reader = PdfReader(p)
+    if reader.is_encrypted:
+        return "Done", "encrypted - not readable"
+    try:
+        shutil.copy(p, SHARE / p.name)
+    except OSError as e:
+        return "Failed", f"share unreachable: {e}"
+    return "Done", f"{len(reader.pages)} pages saved"
+
+
+def main():
+    (ROOT / "BOT_WAS_RUN").write_text("1")
+    db = sqlite3.connect(QUEUE)
+    if db.execute("SELECT COUNT(*) FROM queue WHERE status='Processing'").fetchone()[0]:
+        log.error("Previous item still Processing - aborting")
+        return
+    fetch_new(db, connect())
+    for row_id, path in db.execute("SELECT id, file FROM queue WHERE status='New' ORDER BY id").fetchall():
+        db.execute("UPDATE queue SET status='Processing' WHERE id=?", (row_id,))
+        db.commit()
+        status, note = process(db, row_id, path)
+        db.execute("UPDATE queue SET status=?, note=? WHERE id=?", (status, note, row_id))
+        db.commit()
+        log.info("item %s -> %s (%s)", row_id, status, note)
+
+
+if __name__ == "__main__":
+    main()

tests/fixtures/h-mail-intake/logs/intake.log

@@ -0,0 +1,6 @@
+2026-09-04 08:00:01 INFO item 311 -> Done (4 pages saved)
+2026-09-04 08:00:03 INFO item 312 -> Quarantined (not a PDF or over 20 MB)
+2026-09-04 08:10:00 WARNING IMAP connect failed (1/3): [Errno 11001] getaddrinfo failed
+2026-09-04 08:20:00 ERROR Previous item still Processing - aborting
+2026-09-04 08:30:00 ERROR Previous item still Processing - aborting
+2026-09-04 08:31:12 INFO referral from jane.placeholder@clientmail.test saved

tests/fixtures/h-mail-intake/requirements.txt

@@ -0,0 +1,2 @@
+pypdf
+python-dotenv