@bovinphang/craft-common 1.0.1 → 2.0.0

package/localized/zh-CN/skills/cc-c-project-standard/references/common/engineering-practices.sources.json

@@ -0,0 +1,377 @@
+{
+  "schemaVersion": 1,
+  "sources": [
+    {
+      "id": "google-review",
+      "publisher": "Google",
+      "title": "Code review standard",
+      "url": "https://google.github.io/eng-practices/review/reviewer/standard.html",
+      "section": "Engineering principles and code health",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guidance; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Use evidence and project standards; personal preference alone is not a blocker."
+    },
+    {
+      "id": "ms-playbook",
+      "publisher": "Microsoft ISE",
+      "title": "Test planning",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/test-planning/",
+      "section": "Risk, test scope and responsibilities",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Team practice, not a company-wide mandate; retain existing tools."
+    },
+    {
+      "id": "ms-faults",
+      "publisher": "Microsoft ISE",
+      "title": "Fault injection testing",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/fault-injection-testing/",
+      "section": "Controlled failure and observations",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Run scoped, controlled failures; do not infer production reliability from a small example."
+    },
+    {
+      "id": "google-ts",
+      "publisher": "Google",
+      "title": "TS/JS style guide",
+      "url": "https://google.github.io/styleguide/tsguide.html",
+      "section": "Environment caveat; types and exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Google explicitly notes internal constraints differ; no blanket ban overriding a justified project convention."
+    },
+    {
+      "id": "typescript-publishing",
+      "publisher": "TypeScript",
+      "title": "Publishing declaration files",
+      "url": "https://www.typescriptlang.org/docs/handbook/declaration-files/publishing.html",
+      "section": "Types and declaration dependencies",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living handbook; check installed compiler/module resolution",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Validate the actual packed consumer; do not upgrade compiler or module mode on this basis."
+    },
+    {
+      "id": "rust-api",
+      "publisher": "Rust library team",
+      "title": "Rust API Guidelines",
+      "url": "https://rust-lang.github.io/api-guidelines/",
+      "section": "Type safety, dependability and future proofing",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living recommendations; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Guidance rather than language law; preserve edition and MSRV."
+    },
+    {
+      "id": "tokio-join",
+      "publisher": "Tokio project",
+      "title": "JoinHandle",
+      "url": "https://docs.rs/tokio/latest/tokio/task/struct.JoinHandle.html",
+      "section": "Drop, abort and completion",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 1.54.1; project runtime/version determines applicability",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Tokio-specific mechanics only when Tokio is already used; no new runtime dependency."
+    },
+    {
+      "id": "uber-go",
+      "publisher": "Uber",
+      "title": "Go Style Guide",
+      "url": "https://github.com/uber-go/guide/blob/master/style.md",
+      "section": "Errors, interfaces and goroutine lifetime",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living master; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not import Uber dependencies or turn buffer-size style into a correctness theorem."
+    },
+    {
+      "id": "go-context",
+      "publisher": "Go project",
+      "title": "context package",
+      "url": "https://pkg.go.dev/context",
+      "section": "Cancellation propagation and ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Standard library; check owning go.mod/toolchain",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A cancellation signal alone does not confirm worker exit."
+    },
+    {
+      "id": "google-java",
+      "publisher": "Google",
+      "title": "Java Style Guide",
+      "url": "https://google.github.io/styleguide/javaguide.html",
+      "section": "Source structure and exception handling",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public style; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Naming/layout follows local standard; style is distinct from runtime correctness."
+    },
+    {
+      "id": "oracle-resources",
+      "publisher": "Oracle",
+      "title": "Try-with-resources",
+      "url": "https://docs.oracle.com/javase/tutorial/essential/exceptions/tryResourceClose.html",
+      "section": "Closing resources and suppressed exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "JDK8 tutorial; not a source for newer runtime features",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Preserve primary cause and borrowed-resource ownership; check actual API contract."
+    },
+    {
+      "id": "java-executor",
+      "publisher": "Oracle",
+      "title": "ExecutorService",
+      "url": "https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/concurrent/ExecutorService.html",
+      "section": "Shutdown, termination and awaitTermination",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Java SE17 documentation",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Check target JDK; no automatic virtual-thread or JDK migration."
+    },
+    {
+      "id": "google-python",
+      "publisher": "Google",
+      "title": "Python Style Guide",
+      "url": "https://google.github.io/styleguide/pyguide.html",
+      "section": "Imports, exceptions and mutable state",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Keep current formatter/type checker and library responsibilities."
+    },
+    {
+      "id": "python-asyncio",
+      "publisher": "Python project",
+      "title": "Coroutines and tasks",
+      "url": "https://docs.python.org/3/library/asyncio-task.html",
+      "section": "Cancellation and task ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 3.15.2; feature availability follows project Python",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Newer TaskGroup/timeout features require a supported project version; no upgrade implied."
+    },
+    {
+      "id": "cert-c",
+      "publisher": "CMU SEI",
+      "title": "MEM00-C allocation and release",
+      "url": "https://cmu-sei.github.io/secure-coding-standards/sei-cert-c-coding-standard/recommendations/memory-management-mem/mem00-c/",
+      "section": "MEM00-C memory responsibility",
+      "checkedAt": "2026-11-08",
+      "versionScope": "2016-edition standard family; MEM00-C is a recommendation",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not label recommendations as mandatory CERT rules or apply C++ ownership machinery to pure C."
+    },
+    {
+      "id": "cpp-core",
+      "publisher": "C++ Core Guidelines editors",
+      "title": "C++ Core Guidelines",
+      "url": "https://isocpp.github.io/CppCoreGuidelines/CppCoreGuidelines",
+      "section": "Resource and lifetime interfaces",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page dated 2026-06-14, living release0.8",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Adapt to existing exception policy and compiler; borrowing does not imply ownership."
+    },
+    {
+      "id": "google-cpp",
+      "publisher": "Google",
+      "title": "C++ Style Guide",
+      "url": "https://google.github.io/styleguide/cppguide.html",
+      "section": "Exceptions and project consistency",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Its exception/standard policy is not universal; preserve the owning project policy and C ABI."
+    },
+    {
+      "id": "ms-sal",
+      "publisher": "Microsoft",
+      "title": "Understanding SAL",
+      "url": "https://learn.microsoft.com/en-us/cpp/code-quality/understanding-sal?view=msvc-170",
+      "section": "Parameter preconditions and output guarantees",
+      "checkedAt": "2026-11-08",
+      "versionScope": "MSVC170 documentation view",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "SAL is an optional toolchain-specific expression, not a portable mandatory annotation."
+    },
+    {
+      "id": "aws-retry",
+      "publisher": "AWS",
+      "title": "Timeouts, retries and backoff with jitter",
+      "url": "https://aws.amazon.com/builders-library/timeouts-retries-and-backoff-with-jitter/",
+      "section": "Timeouts, bounded retries and retry amplification",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Article dated 2019-12-05; official Builder Center redirect",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Retry only semantically safe operations within a total budget; failure classes alone do not grant write replay."
+    },
+    {
+      "id": "aws-idempotency",
+      "publisher": "AWS",
+      "title": "Making retries safe with idempotent APIs",
+      "url": "https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/",
+      "section": "Caller intent, duplicate requests and atomic recording",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Builders Library; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A process-local example does not establish database/multi-process exactly-once."
+    },
+    {
+      "id": "react-effects",
+      "publisher": "React project",
+      "title": "useEffect",
+      "url": "https://react.dev/reference/react/useEffect",
+      "section": "Cleanup and fetching race conditions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; use installed project API",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Abort and stale-result checks complement each other; no React upgrade implied."
+    },
+    {
+      "id": "react-act",
+      "publisher": "React project",
+      "title": "act",
+      "url": "https://react.dev/reference/react/act",
+      "section": "Applying updates before assertions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; verify sample versions",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "DOM simulation is not browser E2E or native desktop execution."
+    },
+    {
+      "id": "vue-watchers",
+      "publisher": "Vue project",
+      "title": "Watchers",
+      "url": "https://vuejs.org/guide/essentials/watchers.html",
+      "section": "Side-effect cleanup",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Vue3; onWatcherCleanup requires3.5+ and synchronous registration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use supported callback cleanup on older Vue3; no framework migration."
+    },
+    {
+      "id": "tauri-permissions",
+      "publisher": "Tauri project",
+      "title": "Permissions",
+      "url": "https://v2.tauri.app/security/permissions/",
+      "section": "Command allow/deny and capability scope",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Tauri2 docs; check installed version/configuration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Rust command-unit tests do not activate webview permissions or prove packaged GUI security."
+    },
+    {
+      "id": "electron-security",
+      "publisher": "Electron project",
+      "title": "Security",
+      "url": "https://www.electronjs.org/docs/latest/tutorial/security",
+      "section": "IPC sender checks and renderer trust",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living docs; match installed Electron",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Handler tests do not prove sandbox/context isolation is active in a packaged app."
+    },
+    {
+      "id": "spring-tests",
+      "publisher": "Spring project",
+      "title": "Testing Spring Boot applications",
+      "url": "https://docs.spring.io/spring-boot/3.5/reference/testing/spring-boot-applications.html",
+      "section": "Test slices and application tests",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Boot3.5 docs observed3.5.16; preserve sample/project versions",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Test scope matters; MVC tests do not establish live DB/transaction or deployment behavior."
+    },
+    {
+      "id": "fastapi-lifespan",
+      "publisher": "FastAPI project",
+      "title": "Lifespan events",
+      "url": "https://fastapi.tiangolo.com/advanced/events/",
+      "section": "Acquire and release application resources",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living FastAPI documentation; match pinned dependencies",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use actual lifespan execution in tests; import does not own a live connection."
+    },
+    {
+      "id": "gin-binding",
+      "publisher": "Gin project",
+      "title": "Binding",
+      "url": "https://gin-gonic.com/en/docs/binding/",
+      "section": "Binding errors and validation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living Gin documentation; match pinned module",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Writing/aborting a response does not replace explicit control-flow return in the current handler."
+    },
+    {
+      "id": "axum-extractors",
+      "publisher": "Axum project",
+      "title": "Extractors",
+      "url": "https://docs.rs/axum/latest/axum/extract/",
+      "section": "Extractor order and rejections",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Latest route observed0.8.9; fixed0.8.9 route unavailable via browser tool",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Pinned existing example is authoritative for compilation; do not assume source signatures across releases."
+    },
+    {
+      "id": "drogon-filters",
+      "publisher": "Drogon project",
+      "title": "Middleware and Filter",
+      "url": "https://github.com/drogonframework/drogon/wiki/ENG-05-Middleware-and-Filter",
+      "section": "Filter callbacks and continuation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living wiki; match compiled example version",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Synthetic role headers are not authentication; callback lifetime must follow actual ownership."
+    },
+    {
+      "id": "node-typescript",
+      "publisher": "Node.js project",
+      "title": "Modules: TypeScript",
+      "url": "https://nodejs.org/api/typescript.html",
+      "section": "Type-stripping history, enabling, and separate type checking",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed26.13.0; sample>=22.18, actual24.14.1 tested; product Node>=22 unchanged",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Native stripping is not type checking and ignores tsconfig. Missing sample capability is MISSING, not a product runtime upgrade."
+    }
+  ]
+}

package/localized/zh-CN/skills/cc-c-project-standard/references/engineering-practices.md

@@ -0,0 +1,106 @@
+---
+practiceCards:
+  - id: "cc-c-project-standard:allocation-size"
+    level: "required"
+    sourceIds: ["cert-c","ms-sal"]
+    caseIds: ["EP-C-01"]
+    evidence: "case"
+  - id: "cc-c-project-standard:partial-cleanup"
+    level: "required"
+    sourceIds: ["cert-c"]
+    caseIds: ["EP-C-01"]
+    evidence: "case"
+  - id: "cc-c-project-standard:c-abi"
+    level: "required"
+    sourceIds: ["cert-c","ms-sal"]
+    caseIds: ["EP-C-01"]
+    evidence: "review-only"
+---
+
+# 本入口工程决策
+
+先定位项目角色、工具链及已有约定，再按需读取[公共原则](common/engineering-practices.md)。下列条件仅约束当前语言/场景；结构检查不证明全部语义或实际运行。
+
+<a id="cc-c-project-standard:allocation-size"></a>
+## 转换及分配前检查大小
+
+级别: required
+
+### 风险
+无符号回绕即使有定义，仍可能分配比承诺载荷更小的缓冲区。
+
+### 适用
+适用于C分配及外部输入的数量/大小运算；有效指针可访问范围仍是调用/API前提。
+
+### 决策
+明确字节/元素单位及零值行为，先拒绝非法有符号值再转换，分配前检查乘加，失败初始化有效输出槽。
+
+### 例外
+SAL可表达支持的MSVC契约，但不是可移植强制项；纯C保持纯C，不为大小检查引入C++机制。
+
+### 正反示意
+正例：count > SIZE_MAX / width时在分配前拒绝。反例：先乘法再信任回绕值/类型转换。
+
+### 验证
+本地观察溢出零分配、非法输出及成功载荷；ABI需要时补目标位宽和对齐检查。
+
+### 来源
+cert-c, ms-sal — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-C-01; case. [本入口可运行案例](../examples/engineering/README.md)。 执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。
+
+<a id="cc-c-project-standard:partial-cleanup"></a>
+## 按获取顺序明确清理责任
+
+级别: required
+
+### 风险
+第二次分配失败可能泄漏第一次，共用清理还可能释放借用输入。
+
+### 适用
+适用于获取多资源或转移输出的函数，纯标量函数无需自定义资源框架。
+
+### 决策
+初始化本地拥有状态，用可审计的一致清理方式，只以匹配分配器释放已取得资源；完整成功后才转移输出。
+
+### 例外
+外部刻意保留资源需明确拥有方/寿命，返回错误本身不会清理先前获取。
+
+### 正反示意
+正例：第二次分配失败释放第一个header。反例：只有成功路径free，或把调用方缓冲加入清理表。
+
+### 验证
+逐个获取点失败注入，检查存活分配及输出；断言不因NDEBUG失效，稳定计数可补充后续sanitizer。
+
+### 来源
+cert-c — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-C-01; case. [本入口可运行案例](../examples/engineering/README.md)。 执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。
+
+<a id="cc-c-project-standard:c-abi"></a>
+## 记录调用有效性与分配器配对
+
+级别: required
+
+### 风险
+外部指针非空不证明长度和所有权，跨模块释放可能使用不同分配器。
+
+### 适用
+适用于C头文件、插件及原生API，不隐含迁为C++。
+
+### 决策
+保持ABI位宽/布局/调用约定兼容，记录借用期限；拥有输出暴露匹配释放函数/上下文，错误及输出状态保持稳定。
+
+### 例外
+注解或判空无法证明任意内存有效；SAL限支持分析环境，其他环境用可移植文档/检查。
+
+### 正反示意
+正例：调用方保留借用存储，插件经导出配对函数释放自身分配。反例：对所有非空返回指针使用宿主free。
+
+### 验证
+适当使用真实C消费者、平台/布局检查和失败注入；本地分配样例不证明跨DLL ABI。
+
+### 来源
+cert-c, ms-sal — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-C-01; review-only.  执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。

package/localized/zh-CN/skills/cc-c-project-standard/references/practice.md

@@ -0,0 +1,37 @@
+# C 工程规范
+
+## 关键检查
+
+1. 读取现有 C 标准、编译选项、构建系统和导出 ABI，保留符号可见性、调用约定及错误码。
+
+2. 每个资源接口说明分配方、拥有方、借用期限、转移时点和配对释放函数；失败时初始化输出值。
+
+3. 部分初始化采用明确 cleanup 路径，仅释放已获取资源并防止二次释放；不把 C++ 资源机制强加给 C。
+
+4. 内存访问/分配前检查长度、整数溢出、对齐和有无符号转换；外部畸形输入用可恢复错误处理，不使用 assert 代替。
+
+5. 逐阶段注入分配与解析失败，测试成功转移及每个提前返回；审查跨 FFI/运行库的所有权。
+
+6. 使用现有构建和可用编译诊断/sanitizer，说明实际覆盖的平台与失败路径；静态分析不能证明没有所有未定义行为。
+
+<a id="scope"></a>
+## 边界与案例
+
+适用场景：
+- 审查 C 分配和释放契约
+- 保持 C ABI 修复失败清理
+- 组织已有 C 库头文件和实现
+- 测试 C 分配失败与非法输入
+
+应用角色按实际证据区分；本语言模块可用于库、CLI、桌面或服务，框架问题另选专项。
+
+## 交付要求
+
+- 已读取的工程/契约证据及变更作用域。
+- 选用方案、关键不变量、资源/错误或失败边界。
+- 实际运行的命令与结果，未运行项及不能证明的结论。
+- 兼容、恢复/回滚或后续处理限制；评审结论须给可核实位置。
+
+## 权威资料
+
+[相关官方/项目资料](https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html)（核验日期：2026-11-06）。实际使用时再匹配项目声明版本，不把参考页的最新版本当作升级授权。

package/localized/zh-CN/skills/cc-cpp-project-standard/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: cc-cpp-project-standard
+description: "用于C++ 的模块、类型、资源所有权需要设计或审查，适用于库、CLI、桌面核心及服务；仅样式或图片任务不适用。"
+---
+
+# C++ 工程规范
+
+本入口面向库、CLI、桌面核心及服务中的语言工程；应用角色由实际子工程证据决定，不由前端/后端产品名决定。
+
+选择特性前读取实际 C++ 标准、标准库、编译器矩阵、构建 preset 和导出 ABI。
+
+## 执行与证据
+
+1. 定位实际工程、任务边界及已有契约；只加载当前需要的语言和领域资料。
+2. 应用[专业检查](references/practice.md)，先核对输入证据，再决定最小改动。
+3. 使用仓库已有工具验证相关行为；缺少工具、环境或实际执行时明确报告，不能把计划当通过。
+4. 交付改动范围、专业决策、实际验证及剩余风险；仅评审任务保持只读。
+
+## 任务边界
+
+按[参考中的边界与案例](references/practice.md#scope)区分相邻能力，不扩展成未要求的框架迁移或全栈重写。
+
+## 工程实践
+
+按当前任务读取[本入口工程细则](references/engineering-practices.md)，再按链接选择公共原则。规则级别与例外以实际项目契约为准；不因产品前后端标签限制语言或职责。

package/localized/zh-CN/skills/cc-cpp-project-standard/examples/engineering/README.md

@@ -0,0 +1,7 @@
+# 借用与部分构造 — EP-CPP-01
+
+在可写副本用c++ -std=c++17 -Wall -Wextra -Werror boundary.cpp boundary_test.cpp -o boundary-test编译，以CRAFT_ENGINEERING_DEFECTIVE=1/0执行。PowerShell设$env:CRAFT_ENGINEERING_DEFECTIVE，POSIX前缀赋值。默认受保护，缺编译器记MISSING；维护器另以-DNDEBUG检查断言不失效。
+
+调用方把借用对象分配在堆上，缺陷接管可被观察而不会释放栈对象或二次delete；缺陷还在部分构造时泄漏一个lease，计数显示析构未发生。测试发现借用已释放后不重复释放。受保护实现保持非拥有借用，新获取lease用RAII。两个用例的检查不受NDEBUG影响。
+
+此独立样例明确采用C++17及自身C++边界内异常，不授权给用户项目启异常、改标准、把纯C迁为C++或让异常跨C ABI；未建立FFI ABI、sanitizer、GUI、数据库保证。故意泄漏仅存在默认关闭的缺陷测试进程。构建日志放源码外。

package/localized/zh-CN/skills/cc-cpp-project-standard/examples/engineering/boundary.cpp

@@ -0,0 +1,26 @@
+#include "boundary.hpp"
+#include <cstdlib>
+#include <memory>
+#include <stdexcept>
+#include <string>
+namespace {
+struct Lease {
+  Counters& counters;
+  explicit Lease(Counters& state) : counters(state) { ++counters.acquired; }
+  ~Lease() { ++counters.released; }
+};
+}
+int process_borrowed(Borrowed* input, Counters& counters, bool fail) {
+  if (!input) throw std::invalid_argument("null borrowed input");
+  const char* mode = std::getenv("CRAFT_ENGINEERING_DEFECTIVE");
+  if (mode && std::string(mode) == "1") {
+    std::unique_ptr<Borrowed> wrong_owner(input); // Deliberately takes caller ownership.
+    auto* lease = new Lease(counters);
+    if (fail) throw std::runtime_error("payload unavailable"); // Deliberately leaks lease.
+    delete lease;
+    return input->value;
+  }
+  auto lease = std::make_unique<Lease>(counters);
+  if (fail) throw std::runtime_error("payload unavailable");
+  return input->value;
+}

package/localized/zh-CN/skills/cc-cpp-project-standard/examples/engineering/boundary.hpp

@@ -0,0 +1,12 @@
+#ifndef ENGINEERING_CPP_BOUNDARY_HPP
+#define ENGINEERING_CPP_BOUNDARY_HPP
+struct Counters { int acquired = 0; int released = 0; int borrowed_released = 0; };
+struct Borrowed {
+  Counters& counters;
+  int value = 42;
+  explicit Borrowed(Counters& state) : counters(state) {}
+  ~Borrowed() { ++counters.borrowed_released; }
+};
+// Caller owns input. This isolated example uses exceptions; no C ABI is exported.
+int process_borrowed(Borrowed* input, Counters& counters, bool fail);
+#endif

package/localized/zh-CN/skills/cc-cpp-project-standard/examples/engineering/boundary_test.cpp

@@ -0,0 +1,38 @@
+#include "boundary.hpp"
+#include <iostream>
+#include <stdexcept>
+#include <string>
+static bool check(bool condition, const char* message) {
+  if (!condition) std::cerr << "CRAFT_ASSERTION: EP-CPP-01 " << message << '\n';
+  return condition; // Always active with NDEBUG as well.
+}
+static bool borrowing_and_partial_construction() {
+  Counters state;
+  auto* input = new Borrowed(state);
+  bool failed = false;
+  try { process_borrowed(input, state, true); }
+  catch (const std::runtime_error& error) { failed = std::string(error.what()) == "payload unavailable"; }
+  bool ok = check(failed, "original failure visible");
+  ok = check(state.borrowed_released == 0, "borrowed input was not taken over") && ok;
+  ok = check(state.acquired == 1 && state.released == 1, "partial construction releases owned lease") && ok;
+  if (state.borrowed_released == 0) delete input; // Never double-delete even in the faulty test.
+  return ok;
+}
+static bool success_keeps_caller_ownership() {
+  Counters state;
+  auto* input = new Borrowed(state);
+  int value = process_borrowed(input, state, false);
+  bool ok = check(value == 42 && state.borrowed_released == 0, "successful borrow stays with caller");
+  ok = check(state.acquired == 1 && state.released == 1, "successful lease closes") && ok;
+  if (state.borrowed_released == 0) delete input;
+  return ok;
+}
+int main() {
+  int passed = 0, failed = 0;
+  bool result = borrowing_and_partial_construction(); passed += result; failed += !result;
+  std::cout << "CRAFT_TEST {\"name\":\"borrowing_and_partial_construction\",\"status\":\"" << (result ? "pass" : "fail") << "\"}\n";
+  result = success_keeps_caller_ownership(); passed += result; failed += !result;
+  std::cout << "CRAFT_TEST {\"name\":\"success_keeps_caller_ownership\",\"status\":\"" << (result ? "pass" : "fail") << "\"}\n";
+  std::cout << "CRAFT_SUMMARY {\"total\":2,\"passed\":" << passed << ",\"failed\":" << failed << ",\"skipped\":0}\n";
+  return failed ? 1 : 0;
+}