@bovinphang/craft-common 1.0.1 → 2.0.0

package/methods/engineering-practices.sources.json

@@ -0,0 +1,377 @@
+{
+  "schemaVersion": 1,
+  "sources": [
+    {
+      "id": "google-review",
+      "publisher": "Google",
+      "title": "Code review standard",
+      "url": "https://google.github.io/eng-practices/review/reviewer/standard.html",
+      "section": "Engineering principles and code health",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guidance; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Use evidence and project standards; personal preference alone is not a blocker."
+    },
+    {
+      "id": "ms-playbook",
+      "publisher": "Microsoft ISE",
+      "title": "Test planning",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/test-planning/",
+      "section": "Risk, test scope and responsibilities",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Team practice, not a company-wide mandate; retain existing tools."
+    },
+    {
+      "id": "ms-faults",
+      "publisher": "Microsoft ISE",
+      "title": "Fault injection testing",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/fault-injection-testing/",
+      "section": "Controlled failure and observations",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Run scoped, controlled failures; do not infer production reliability from a small example."
+    },
+    {
+      "id": "google-ts",
+      "publisher": "Google",
+      "title": "TS/JS style guide",
+      "url": "https://google.github.io/styleguide/tsguide.html",
+      "section": "Environment caveat; types and exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Google explicitly notes internal constraints differ; no blanket ban overriding a justified project convention."
+    },
+    {
+      "id": "typescript-publishing",
+      "publisher": "TypeScript",
+      "title": "Publishing declaration files",
+      "url": "https://www.typescriptlang.org/docs/handbook/declaration-files/publishing.html",
+      "section": "Types and declaration dependencies",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living handbook; check installed compiler/module resolution",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Validate the actual packed consumer; do not upgrade compiler or module mode on this basis."
+    },
+    {
+      "id": "rust-api",
+      "publisher": "Rust library team",
+      "title": "Rust API Guidelines",
+      "url": "https://rust-lang.github.io/api-guidelines/",
+      "section": "Type safety, dependability and future proofing",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living recommendations; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Guidance rather than language law; preserve edition and MSRV."
+    },
+    {
+      "id": "tokio-join",
+      "publisher": "Tokio project",
+      "title": "JoinHandle",
+      "url": "https://docs.rs/tokio/latest/tokio/task/struct.JoinHandle.html",
+      "section": "Drop, abort and completion",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 1.54.1; project runtime/version determines applicability",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Tokio-specific mechanics only when Tokio is already used; no new runtime dependency."
+    },
+    {
+      "id": "uber-go",
+      "publisher": "Uber",
+      "title": "Go Style Guide",
+      "url": "https://github.com/uber-go/guide/blob/master/style.md",
+      "section": "Errors, interfaces and goroutine lifetime",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living master; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not import Uber dependencies or turn buffer-size style into a correctness theorem."
+    },
+    {
+      "id": "go-context",
+      "publisher": "Go project",
+      "title": "context package",
+      "url": "https://pkg.go.dev/context",
+      "section": "Cancellation propagation and ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Standard library; check owning go.mod/toolchain",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A cancellation signal alone does not confirm worker exit."
+    },
+    {
+      "id": "google-java",
+      "publisher": "Google",
+      "title": "Java Style Guide",
+      "url": "https://google.github.io/styleguide/javaguide.html",
+      "section": "Source structure and exception handling",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public style; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Naming/layout follows local standard; style is distinct from runtime correctness."
+    },
+    {
+      "id": "oracle-resources",
+      "publisher": "Oracle",
+      "title": "Try-with-resources",
+      "url": "https://docs.oracle.com/javase/tutorial/essential/exceptions/tryResourceClose.html",
+      "section": "Closing resources and suppressed exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "JDK8 tutorial; not a source for newer runtime features",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Preserve primary cause and borrowed-resource ownership; check actual API contract."
+    },
+    {
+      "id": "java-executor",
+      "publisher": "Oracle",
+      "title": "ExecutorService",
+      "url": "https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/concurrent/ExecutorService.html",
+      "section": "Shutdown, termination and awaitTermination",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Java SE17 documentation",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Check target JDK; no automatic virtual-thread or JDK migration."
+    },
+    {
+      "id": "google-python",
+      "publisher": "Google",
+      "title": "Python Style Guide",
+      "url": "https://google.github.io/styleguide/pyguide.html",
+      "section": "Imports, exceptions and mutable state",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Keep current formatter/type checker and library responsibilities."
+    },
+    {
+      "id": "python-asyncio",
+      "publisher": "Python project",
+      "title": "Coroutines and tasks",
+      "url": "https://docs.python.org/3/library/asyncio-task.html",
+      "section": "Cancellation and task ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 3.15.2; feature availability follows project Python",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Newer TaskGroup/timeout features require a supported project version; no upgrade implied."
+    },
+    {
+      "id": "cert-c",
+      "publisher": "CMU SEI",
+      "title": "MEM00-C allocation and release",
+      "url": "https://cmu-sei.github.io/secure-coding-standards/sei-cert-c-coding-standard/recommendations/memory-management-mem/mem00-c/",
+      "section": "MEM00-C memory responsibility",
+      "checkedAt": "2026-11-08",
+      "versionScope": "2016-edition standard family; MEM00-C is a recommendation",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not label recommendations as mandatory CERT rules or apply C++ ownership machinery to pure C."
+    },
+    {
+      "id": "cpp-core",
+      "publisher": "C++ Core Guidelines editors",
+      "title": "C++ Core Guidelines",
+      "url": "https://isocpp.github.io/CppCoreGuidelines/CppCoreGuidelines",
+      "section": "Resource and lifetime interfaces",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page dated 2026-06-14, living release0.8",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Adapt to existing exception policy and compiler; borrowing does not imply ownership."
+    },
+    {
+      "id": "google-cpp",
+      "publisher": "Google",
+      "title": "C++ Style Guide",
+      "url": "https://google.github.io/styleguide/cppguide.html",
+      "section": "Exceptions and project consistency",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Its exception/standard policy is not universal; preserve the owning project policy and C ABI."
+    },
+    {
+      "id": "ms-sal",
+      "publisher": "Microsoft",
+      "title": "Understanding SAL",
+      "url": "https://learn.microsoft.com/en-us/cpp/code-quality/understanding-sal?view=msvc-170",
+      "section": "Parameter preconditions and output guarantees",
+      "checkedAt": "2026-11-08",
+      "versionScope": "MSVC170 documentation view",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "SAL is an optional toolchain-specific expression, not a portable mandatory annotation."
+    },
+    {
+      "id": "aws-retry",
+      "publisher": "AWS",
+      "title": "Timeouts, retries and backoff with jitter",
+      "url": "https://aws.amazon.com/builders-library/timeouts-retries-and-backoff-with-jitter/",
+      "section": "Timeouts, bounded retries and retry amplification",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Article dated 2019-12-05; official Builder Center redirect",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Retry only semantically safe operations within a total budget; failure classes alone do not grant write replay."
+    },
+    {
+      "id": "aws-idempotency",
+      "publisher": "AWS",
+      "title": "Making retries safe with idempotent APIs",
+      "url": "https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/",
+      "section": "Caller intent, duplicate requests and atomic recording",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Builders Library; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A process-local example does not establish database/multi-process exactly-once."
+    },
+    {
+      "id": "react-effects",
+      "publisher": "React project",
+      "title": "useEffect",
+      "url": "https://react.dev/reference/react/useEffect",
+      "section": "Cleanup and fetching race conditions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; use installed project API",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Abort and stale-result checks complement each other; no React upgrade implied."
+    },
+    {
+      "id": "react-act",
+      "publisher": "React project",
+      "title": "act",
+      "url": "https://react.dev/reference/react/act",
+      "section": "Applying updates before assertions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; verify sample versions",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "DOM simulation is not browser E2E or native desktop execution."
+    },
+    {
+      "id": "vue-watchers",
+      "publisher": "Vue project",
+      "title": "Watchers",
+      "url": "https://vuejs.org/guide/essentials/watchers.html",
+      "section": "Side-effect cleanup",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Vue3; onWatcherCleanup requires3.5+ and synchronous registration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use supported callback cleanup on older Vue3; no framework migration."
+    },
+    {
+      "id": "tauri-permissions",
+      "publisher": "Tauri project",
+      "title": "Permissions",
+      "url": "https://v2.tauri.app/security/permissions/",
+      "section": "Command allow/deny and capability scope",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Tauri2 docs; check installed version/configuration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Rust command-unit tests do not activate webview permissions or prove packaged GUI security."
+    },
+    {
+      "id": "electron-security",
+      "publisher": "Electron project",
+      "title": "Security",
+      "url": "https://www.electronjs.org/docs/latest/tutorial/security",
+      "section": "IPC sender checks and renderer trust",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living docs; match installed Electron",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Handler tests do not prove sandbox/context isolation is active in a packaged app."
+    },
+    {
+      "id": "spring-tests",
+      "publisher": "Spring project",
+      "title": "Testing Spring Boot applications",
+      "url": "https://docs.spring.io/spring-boot/3.5/reference/testing/spring-boot-applications.html",
+      "section": "Test slices and application tests",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Boot3.5 docs observed3.5.16; preserve sample/project versions",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Test scope matters; MVC tests do not establish live DB/transaction or deployment behavior."
+    },
+    {
+      "id": "fastapi-lifespan",
+      "publisher": "FastAPI project",
+      "title": "Lifespan events",
+      "url": "https://fastapi.tiangolo.com/advanced/events/",
+      "section": "Acquire and release application resources",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living FastAPI documentation; match pinned dependencies",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use actual lifespan execution in tests; import does not own a live connection."
+    },
+    {
+      "id": "gin-binding",
+      "publisher": "Gin project",
+      "title": "Binding",
+      "url": "https://gin-gonic.com/en/docs/binding/",
+      "section": "Binding errors and validation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living Gin documentation; match pinned module",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Writing/aborting a response does not replace explicit control-flow return in the current handler."
+    },
+    {
+      "id": "axum-extractors",
+      "publisher": "Axum project",
+      "title": "Extractors",
+      "url": "https://docs.rs/axum/latest/axum/extract/",
+      "section": "Extractor order and rejections",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Latest route observed0.8.9; fixed0.8.9 route unavailable via browser tool",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Pinned existing example is authoritative for compilation; do not assume source signatures across releases."
+    },
+    {
+      "id": "drogon-filters",
+      "publisher": "Drogon project",
+      "title": "Middleware and Filter",
+      "url": "https://github.com/drogonframework/drogon/wiki/ENG-05-Middleware-and-Filter",
+      "section": "Filter callbacks and continuation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living wiki; match compiled example version",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Synthetic role headers are not authentication; callback lifetime must follow actual ownership."
+    },
+    {
+      "id": "node-typescript",
+      "publisher": "Node.js project",
+      "title": "Modules: TypeScript",
+      "url": "https://nodejs.org/api/typescript.html",
+      "section": "Type-stripping history, enabling, and separate type checking",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed26.13.0; sample>=22.18, actual24.14.1 tested; product Node>=22 unchanged",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Native stripping is not type checking and ignores tsconfig. Missing sample capability is MISSING, not a product runtime upgrade."
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bovinphang/craft-common",
-  "version": "1.0.1",
+  "version": "2.0.0",
   "description": "Craft AI Coding 的公共技能、研发方法与共享安装协议",
   "type": "module",
   "license": "MIT",
@@ -26,13 +26,17 @@
     "localized",
     "methods",
     "LICENSE",
-    "README.md"
+    "README.md",
+    "CHANGELOG.md",
+    "CHANGELOG.zh-CN.md",
+    "docs/releases/2.0.0.md"
   ],
   "publishConfig": {
     "access": "public"
   },
   "scripts": {
     "sync:methods": "tsx scripts/sync-methods.ts",
+    "verify:engineering": "tsx scripts/verify-engineering.ts",
     "pack:skills": "tsx scripts/pack-skills.ts",
     "lint": "eslint src scripts tests eslint.config.mjs --max-warnings=0",
     "typecheck": "tsc --noEmit -p tsconfig.json",
@@ -40,6 +44,10 @@
     "build": "pnpm typecheck && tsx scripts/build.ts && tsc -p tsconfig.build.json",
     "prepack": "pnpm build"
   },
+  "dependencies": {
+    "smol-toml": "1.9.1",
+    "yaml": "2.9.0"
+  },
   "devDependencies": {
     "@eslint/js": "9.39.5",
     "@types/node": "^22.19.15",

package/skills/cc-c-project-standard/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: cc-c-project-standard
+description: "Use when Pure C module interfaces, ownership contracts, error-code cleanup paths, build conventions or C engineering validation need design or review."
+---
+
+# C project engineering
+
+Apply to libraries, CLI tools, desktop cores and services. Determine the application role from the actual project; a frontend/backend product name does not constrain the language.
+
+Read the existing C standard, compiler flags, build system and exported ABI. Preserve symbol visibility, calling conventions and error codes.
+
+## Apply the workflow
+
+1. Locate the actual project, task boundary and existing contracts; load only the language and domain material needed now.
+2. Apply the [specialist checks](references/practice.md), establishing the input evidence before selecting the smallest change.
+3. Verify affected behavior with existing repository tools. Explicitly report missing tools, environments or execution; a plan is not a passing result.
+4. Deliver scope, specialist decisions, actual verification and remaining risk. A review-only task stays read-only.
+
+## Task boundary
+
+C++ resource abstractions and exceptions are not a replacement for a pure C contract; cross-language memory incidents have a dedicated specialty.
+
+## Engineering practices
+
+Read the [local engineering decisions](references/engineering-practices.md) for this task and follow their links to relevant shared principles. Apply levels and exceptions against actual project contracts; product frontend/backend labels do not constrain language or role.

package/skills/cc-c-project-standard/examples/engineering/README.md

@@ -0,0 +1,7 @@
+# Pure C size and cleanup contract — EP-C-01
+
+In a writable copy compile `cc -std=c11 -Wall -Wextra -Werror boundary.c boundary_test.c -o boundary-test`. Run the executable with CRAFT_ENGINEERING_DEFECTIVE=1 and then =0 (default). POSIX: `CRAFT_ENGINEERING_DEFECTIVE=1 ./boundary-test`; PowerShell sets `$env:CRAFT_ENGINEERING_DEFECTIVE` and invokes the built executable. A missing compiler is MISSING; use the explicitly prepared Docker verifier if needed.
+
+Two named test bodies perform always-active checks, including when NDEBUG is defined. The allocator uses actual malloc/free and records ownership, rejects huge requests, and cleans remaining test allocations. Overflow is checked before allocation; partial second-allocation failure releases the first header; success transfers only the payload. Valid output slots are initialized even on invalid arguments. The defect intentionally omits overflow/partial-cleanup protection. Its unsigned wrap is defined C behavior; no unstable UB crash is needed to observe the error.
+
+C11 is this isolated sample target, not a project upgrade or a demand to use C++. No SAL, external library, parent source or database is required. The case does not prove sanitizer coverage, arbitrary foreign-buffer validity or every ABI/platform; run those checks explicitly when relevant. Keep executable/log output outside the source directory.

package/skills/cc-c-project-standard/examples/engineering/boundary.c

@@ -0,0 +1,26 @@
+#include "boundary.h"
+#include <stdint.h>
+#include <stdlib.h>
+#include <string.h>
+
+int build_payload(size_t count, size_t width, const Allocator *allocator,
+                  unsigned char **output, size_t *output_size) {
+  if (output) *output = NULL;
+  if (output_size) *output_size = 0;
+  if (!output || !output_size || !allocator || !allocator->allocate || !allocator->release) return -1;
+  const char *switch_value = getenv("CRAFT_ENGINEERING_DEFECTIVE");
+  const int defective = switch_value && strcmp(switch_value, "1") == 0;
+  if (!count || !width || (!defective && count > SIZE_MAX / width)) return -1;
+  const size_t bytes = count * width; /* Unsigned wrap is defined, but not a valid allocation contract. */
+  void *header = allocator->allocate(allocator->context, 16);
+  if (!header) return -1;
+  unsigned char *payload = allocator->allocate(allocator->context, bytes);
+  if (!payload) {
+    if (!defective) allocator->release(allocator->context, header);
+    return -1;
+  }
+  allocator->release(allocator->context, header);
+  *output = payload;
+  *output_size = bytes;
+  return 0;
+}

package/skills/cc-c-project-standard/examples/engineering/boundary.h

@@ -0,0 +1,15 @@
+#ifndef ENGINEERING_BOUNDARY_H
+#define ENGINEERING_BOUNDARY_H
+#include <stddef.h>
+
+typedef struct {
+  void *context;
+  void *(*allocate)(void *context, size_t bytes);
+  void (*release)(void *context, void *pointer);
+} Allocator;
+
+/* On failure, valid output slots are NULL/0. Success transfers only *output.
+ * Release success output with this same allocator; caller retains input ownership. */
+int build_payload(size_t count, size_t width, const Allocator *allocator,
+                  unsigned char **output, size_t *output_size);
+#endif

package/skills/cc-c-project-standard/examples/engineering/boundary_test.c

@@ -0,0 +1,73 @@
+#include "boundary.h"
+#include <stdint.h>
+#include <stdio.h>
+#include <stdlib.h>
+
+typedef struct {
+  void *live[8];
+  int calls;
+  int releases;
+  int fail_at;
+} Probe;
+
+static void *allocate(void *context, size_t bytes) {
+  Probe *probe = context;
+  ++probe->calls;
+  if (probe->calls == probe->fail_at || bytes > 1024) return NULL;
+  void *pointer = malloc(bytes ? bytes : 1);
+  for (size_t i = 0; i < 8; ++i) if (!probe->live[i]) { probe->live[i] = pointer; return pointer; }
+  free(pointer);
+  return NULL;
+}
+static void release(void *context, void *pointer) {
+  Probe *probe = context;
+  for (size_t i = 0; i < 8; ++i) if (probe->live[i] == pointer && pointer) {
+    probe->live[i] = NULL; ++probe->releases; free(pointer); return;
+  }
+}
+static int active(const Probe *probe) {
+  int count = 0;
+  for (size_t i = 0; i < 8; ++i) if (probe->live[i]) ++count;
+  return count;
+}
+static void cleanup(Probe *probe) {
+  for (size_t i = 0; i < 8; ++i) if (probe->live[i]) release(probe, probe->live[i]);
+}
+static int check(int condition, const char *message) {
+  if (!condition) fprintf(stderr, "CRAFT_ASSERTION: EP-C-01 %s\n", message);
+  return condition; /* Never compiled away by NDEBUG. */
+}
+static int overflow_and_partial_cleanup(void) {
+  Probe probe = {0};
+  Allocator allocator = { &probe, allocate, release };
+  unsigned char *output = NULL;
+  size_t size = 99;
+  int status = build_payload(SIZE_MAX / 2 + 1, 2, &allocator, &output, &size);
+  int ok = check(status != 0 && output == NULL && size == 0 && probe.calls == 0, "overflow rejected before allocation");
+  cleanup(&probe); /* Keep even the intentionally faulty run free of unobserved survivors. */
+  probe = (Probe){0}; probe.fail_at = 2;
+  status = build_payload(4, 2, &allocator, &output, &size);
+  ok = check(status != 0 && output == NULL && size == 0 && active(&probe) == 0 && probe.releases == 1, "partial failure releases acquired header") && ok;
+  cleanup(&probe);
+  return ok;
+}
+static int valid_input_and_outputs(void) {
+  Probe probe = {0};
+  Allocator allocator = { &probe, allocate, release };
+  unsigned char *output = NULL; size_t size = 0;
+  int status = build_payload(4, 2, &allocator, &output, &size);
+  int ok = check(status == 0 && output != NULL && size == 8 && active(&probe) == 1, "successful transfer exposes one owned payload");
+  if (output) release(&probe, output);
+  ok = check(active(&probe) == 0 && probe.releases == 2, "allocator pair releases all acquired memory") && ok;
+  ok = check(build_payload(4, 2, &allocator, NULL, &size) != 0 && size == 0, "valid output slot initialized on invalid arguments") && ok;
+  cleanup(&probe); return ok;
+}
+int main(void) {
+  int passed = 0, failed = 0;
+  int result = overflow_and_partial_cleanup(); passed += result; failed += !result;
+  printf("CRAFT_TEST {\"name\":\"overflow_and_partial_cleanup\",\"status\":\"%s\"}\n", result ? "pass" : "fail");
+  result = valid_input_and_outputs(); passed += result; failed += !result;
+  printf("CRAFT_TEST {\"name\":\"valid_input_and_outputs\",\"status\":\"%s\"}\n", result ? "pass" : "fail");
+  printf("CRAFT_SUMMARY {\"total\":2,\"passed\":%d,\"failed\":%d,\"skipped\":0}\n", passed, failed);
+  return failed ? 1 : 0;
+}