diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 36011b1..e582fd6 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
       - name: Bash syntax
         run: find scripts shared/hooks -name '*.sh' -print0 | xargs -0 -n1 bash -n
       - name: Capability checks
-        run: ./scripts/check-capabilities.sh --skip-external
+        run: ./scripts/check-capabilities.sh
       - name: Build
         run: ./scripts/build.sh --summary
       - name: Prompt budget
@@ -34,7 +34,7 @@ jobs:
         shell: pwsh
         run: |
           $env:REQUIRE_CODEX_SCHEMA = 'true'
-          ./scripts/check-capabilities.ps1 -SkipExternal
+          ./scripts/check-capabilities.ps1
           ./scripts/build.ps1 -Summary
           ./scripts/doctor.ps1 -Summary
           ./scripts/test-shell-packages.ps1 -Summary
@@ -48,6 +48,7 @@ jobs:
           python ./scripts/test-managed-extensions.py
           python ./scripts/test-session-state.py
           python ./scripts/test-telemetry.py
+          python ./scripts/test-semantic-retrieval.py
           ./scripts/install.ps1 -Summary -DryRun -Client Both -Shell PowerShell
           ./scripts/update.ps1 -Summary -DryRun -Client Both -Shell PowerShell
       - name: Shell package tests
@@ -65,6 +66,7 @@ jobs:
           ./scripts/test-quick-update.sh --summary
           python3 scripts/test-install-options.py
           python3 scripts/test-telemetry.py
+          python3 scripts/test-semantic-retrieval.py
       - name: Managed extension and session-state tests
         run: |
           python3 scripts/test-managed-extensions.py
diff --git a/scripts/check-capabilities.ps1 b/scripts/check-capabilities.ps1
index c984086..8151ef9 100644
--- a/scripts/check-capabilities.ps1
+++ b/scripts/check-capabilities.ps1
@@ -1,7 +1,6 @@
 [CmdletBinding()]
-param([switch]$SkipExternal)
+param()
 $ErrorActionPreference = 'Continue'
-$root = Split-Path $PSScriptRoot -Parent
 $failed = $false
 function Pass([string]$message) { Write-Output "PASS $message" }
 function Fail([string]$message) { $script:failed = $true; Write-Error "FAIL $message" -ErrorAction Continue }
@@ -10,23 +9,11 @@ function Version-AtLeast([string]$version, [version]$minimum) { try { return ([v
 function Check-Version([string]$name, [string]$version, [version]$minimum) { if (Version-AtLeast $version $minimum) { Pass "$name $version (minimum $minimum)" } else { Fail "$name $version is below minimum $minimum" } }
 
 Check-Version 'PowerShell' $PSVersionTable.PSVersion.ToString() ([version]'5.1')
-Require-Command git; Require-Command python
+Require-Command jq; Require-Command python
 if (Get-Command python -ErrorAction SilentlyContinue) {
     $pythonVersion = (& python --version 2>$null | Select-Object -First 1) -replace '^Python\s+', ''
     if ($LASTEXITCODE -eq 0) { Check-Version 'Python' $pythonVersion ([version]'3.11') } else { Fail 'Python 3.11 or newer is required' }
 }
-foreach ($path in @('AI-Instructions.md','shared/rules','shared/skills','shared/agents','adapters','scripts/build.sh','scripts/build.ps1','scripts/install.sh','scripts/install.ps1','scripts/update.sh','scripts/update.ps1','scripts/validate-config.py')) {
-    if (Test-Path -LiteralPath (Join-Path $root $path)) { Pass "repository path $path" } else { Fail "repository path is missing: $path" }
-}
-
-if (-not $SkipExternal) {
-    foreach ($client in @('codex','claude')) {
-        if (Get-Command $client -ErrorAction SilentlyContinue) { & $client --version *> $null; if ($LASTEXITCODE -eq 0) { Pass "$client CLI available" } else { Fail "$client CLI could not report its version" } } else { Fail "$client CLI is required for the default setup" }
-    }
-    $remote = (& git -C $root config --get remote.origin.url 2>$null).Trim()
-    if ([string]::IsNullOrWhiteSpace($remote)) { Fail 'Git origin remote is required for network capability checks' }
-    else { & git -c http.lowSpeedLimit=1 -c http.lowSpeedTime=10 -C $root ls-remote --heads $remote *> $null; if ($LASTEXITCODE -eq 0) { Pass 'network access to the Git origin' } else { Fail 'network access to Git origin failed' } }
-}
 
 if ($failed) { Write-Error 'Capability check: FAIL'; exit 1 }
 Write-Output 'Capability check: PASS'
diff --git a/scripts/check-capabilities.sh b/scripts/check-capabilities.sh
index 616eb36..f95a8ba 100755
--- a/scripts/check-capabilities.sh
+++ b/scripts/check-capabilities.sh
@@ -1,15 +1,6 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-skip_external=false
-while [ $# -gt 0 ]; do
-  case "$1" in
-    --skip-external) skip_external=true; shift ;;
-    *) printf 'Unknown argument: %s\n' "$1" >&2; exit 2 ;;
-  esac
-done
-
-root=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)
 failed=false
 pass() { printf 'PASS %s\n' "$1"; }
 fail() { printf 'FAIL %s\n' "$1" >&2; failed=true; }
@@ -25,7 +16,7 @@ check_version() {
 }
 
 check_version Bash "${BASH_VERSINFO[0]}.${BASH_VERSINFO[1]}" 4.3
-require_command awk; require_command sed; require_command sha256sum; require_command git; require_command jq
+require_command awk; require_command sed; require_command sha256sum; require_command jq
 require_command python3
 if command -v python3 >/dev/null 2>&1 && python3 -c 'import sys; raise SystemExit(sys.version_info < (3, 11))' >/dev/null 2>&1; then
   pass "Python $(python3 --version 2>&1 | awk '{print $2}') (minimum 3.11)"
@@ -33,23 +24,5 @@ else
   fail 'Python 3.11 or newer is required'
 fi
 
-for path in AI-Instructions.md shared/rules shared/skills shared/agents adapters scripts/build.sh scripts/build.ps1 scripts/install.sh scripts/install.ps1 scripts/update.sh scripts/update.ps1 scripts/validate-config.py; do
-  [ -e "$root/$path" ] && pass "repository path $path" || fail "repository path is missing: $path"
-done
-
-if [ "$skip_external" = false ]; then
-  for client in codex claude; do
-    if command -v "$client" >/dev/null 2>&1 && "$client" --version >/dev/null 2>&1; then pass "$client CLI available"; else fail "$client CLI is required for the default setup"; fi
-  done
-  remote=$(git -C "$root" config --get remote.origin.url 2>/dev/null || true)
-  if [ -z "$remote" ]; then
-    fail 'Git origin remote is required for network capability checks'
-  elif git -c http.lowSpeedLimit=1 -c http.lowSpeedTime=10 -C "$root" ls-remote --heads "$remote" >/dev/null 2>&1; then
-    pass 'network access to the Git origin'
-  else
-    fail 'network access to Git origin failed'
-  fi
-fi
-
 if [ "$failed" = true ]; then printf 'Capability check: FAIL\n' >&2; exit 1; fi
 printf 'Capability check: PASS\n'