@ccoalm/ccl-skills 0.2.0 → 0.4.0

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_source_refuted.sh

@@ -53,7 +53,7 @@ FIRING_F="firing-path: file:skills/product-rd-workflow/SKILL.md#must record a RE
 
 # ---- A：合规撤回 —— 有类时必须绿，无类时必须红 ----
 new_case case-a; withdraw_fixture
-add_row "| A fixture claim is refuted by its primary source and is withdrawn wholesale | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A fixture claim is refuted by its primary source and is withdrawn wholesale | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case A: compliant source-refuted withdrawal"; run_gate
 # A 的期望值在裁决后由绿改红：该类不再顶起 RED 底线（见 frozen-acceptance.md 的裁决记录）。
 # 合规撤回现在仍然被拦——它要么配一条 RED 行，要么由具名风险 owner 人工放行。
@@ -62,32 +62,32 @@ commit_case "case A: compliant source-refuted withdrawal"; run_gate
 # ---- B：真行为变更披该标签 —— 任何时候都必须红 ----
 new_case case-b
 printf '\n- Every fixture change must obtain approval before it lands.\n' >> "$REPO/$OWNER_REF"
-add_row "| A newly added normative rule wearing the withdrawal label | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A newly added normative rule wearing the withdrawal label | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case B: real behaviour change wearing the label"; run_gate
 [ "$RC" != "0" ] && ok "B 真行为变更披标签 -> 仍红" || fail "B 不得通过（净增却用撤回类）"
 
 # ---- C：缺一手源 URL —— 必须红 ----
 new_case case-c; withdraw_fixture
-add_row "| A withdrawal whose row cites no refuting source | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose row cites no refuting source | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case C: missing refuting source"; run_gate
 [ "$RC" != "0" ] && ok "C 缺一手源 -> 仍红" || fail "C 不得通过（无源即无据）"
 
 # ---- D：缺零损失指针 —— 必须红 ----
 new_case case-d; withdraw_fixture
-add_row "| A withdrawal whose row carries no zero-loss map | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose row carries no zero-loss map | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case D: missing zero-loss pointer"; run_gate
 [ "$RC" != "0" ] && ok "D 缺零损失指针 -> 仍红" || fail "D 不得通过（义务保全无对照）"
 
-# ---- E：observed-failure: yes —— 必须红 ----
+# ---- E：observed-failure: yes; result-class: failure —— 必须红 ----
 new_case case-e; withdraw_fixture
-add_row "| A withdrawal self-declaring an observed failure | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: yes | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal self-declaring an observed failure | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: yes; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case E: observed-failure yes"; run_gate
-[ "$RC" != "0" ] && ok "E observed-failure: yes -> 仍红" || fail "E 不得通过（分类语义不得自选）"
+[ "$RC" != "0" ] && ok "E observed-failure: yes; result-class: failure -> 仍红" || fail "E 不得通过（分类语义不得自选）"
 
 # ---- F：既有类不得回归 ----
 new_case case-f
 printf '\n- Every fixture delivery must record a RED-baseline row before it lands.\n' >> "$REPO/$OWNER_REF"
-add_row "| An ordinary behaviour-changing rule with a RED-baseline row | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; $FIRING_F | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| An ordinary behaviour-changing rule with a RED-baseline row | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; $FIRING_F | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
 commit_case "case F: existing RED-baseline path"; run_gate
 if [ "$RC" = "0" ]; then ok "F 既有 RED-baseline 路径 -> 绿（无回归）"; else echo "--- F 完整输出 ---"; printf '%s\n' "$OUT"; fail "F 回归"; fi
 
@@ -95,8 +95,8 @@ if [ "$RC" = "0" ]; then ok "F 既有 RED-baseline 路径 -> 绿（无回归）"
 #      独立评审 REVIEW-1：any? 顶起底线时，真行为变更会搭便车。
 new_case case-g; withdraw_fixture
 printf '\n- Every unrelated fixture delivery must obtain approval before it lands. zzmixedrule\n' >> "$REPO/$OWNER_REF"
-add_row "| A compliant withdrawal alongside an unrelated change | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
-add_row "| An unrelated behaviour change riding along on a stable-control label | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; firing-path: file:skills/product-rd-workflow/SKILL.md#must obtain approval before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| A compliant withdrawal alongside an unrelated change | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| An unrelated behaviour change riding along on a stable-control label | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#must obtain approval before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
 commit_case "case G: mixed rows"; run_gate
 [ "$RC" != "0" ] && ok "G 混合行 -> 仍红" || fail "G 不得通过（真行为变更搭撤回的便车）"
 
@@ -104,21 +104,21 @@ commit_case "case G: mixed rows"; run_gate
 #      独立挑战 CHALLENGE-1：删无关文字凑净负、加一条新规则、指针写不存在的锚。
 new_case case-h; withdraw_fixture
 printf '\n- Every smuggled fixture rule must be rejected by the withdrawal class. zzsmuggled\n' >> "$REPO/$OWNER_REF"
-add_row "| A smuggled rule hidden behind an offsetting deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`README.md#no-such-anchor-exists-here\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A smuggled rule hidden behind an offsetting deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`README.md#no-such-anchor-exists-here\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case H: offset addition with bogus anchor"; run_gate
 [ "$RC" != "0" ] && ok "H 抵消式新增 + 假锚点 -> 仍红" || fail "H 不得通过（新增规范行 / 锚点不解析）"
 
 # ---- I：脚本改动、零删除 —— 必须红（旧代理谓词看不见脚本）----
 new_case case-i
 printf '\n# fixture: an added shell line that changes behaviour without matching any prose predicate\n' >> "$REPO/skills/product-rd-workflow/scripts/check-agent-contract-coverage.sh"
-add_row "| A script change wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A script change wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case I: script change, no deletion"; run_gate
 [ "$RC" != "0" ] && ok "I 脚本改动零删除 -> 仍红" || fail "I 不得通过（非 .md、且无删除）"
 
 # ---- J：`Always` 规则、零删除 —— 必须红（旧谓词故意排除 always）----
 new_case case-j
 printf '\n- Always authenticate fixture requests before dispatch.\n' >> "$REPO/$OWNER_REF"
-add_row "| An Always-phrased rule wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| An Always-phrased rule wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case J: Always rule, no deletion"; run_gate
 [ "$RC" != "0" ] && ok "J Always 规则零删除 -> 仍红" || fail "J 不得通过（有新增行）"
 
@@ -126,33 +126,33 @@ commit_case "case J: Always rule, no deletion"; run_gate
 #      独立评审：chmod 在 --name-status 里显示为 M、在 --numstat 里记 0/0。
 new_case case-k; withdraw_fixture
 chmod 755 "$REPO/skills/product-rd-workflow/references/adr-convention.md"
-add_row "| A mode change riding along with a genuine deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A mode change riding along with a genuine deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case K: chmod plus deletion"; run_gate
 [ "$RC" != "0" ] && ok "K 改权限 + 删除 -> 仍红" || fail "K 不得通过（mode 变更未被 numstat 反映）"
 
 # ---- L：指针路径穿越出仓 —— 必须红 ----
 new_case case-l; withdraw_fixture
-add_row "| A withdrawal whose zero-loss pointer escapes the repository | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`../../../etc/hosts#localhost\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose zero-loss pointer escapes the repository | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`../../../etc/hosts#localhost\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case L: traversal pointer"; run_gate
 [ "$RC" != "0" ] && ok "L 指针穿越出仓 -> 仍红" || fail "L 不得通过（路径逃出仓库）"
 
 # ---- M：锚点是存在但无意义的单字符子串 —— 必须红 ----
 new_case case-m; withdraw_fixture
-add_row "| A withdrawal whose anchor is a bare existing substring | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#a\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose anchor is a bare existing substring | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#a\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case M: one-character substring anchor"; run_gate
 [ "$RC" != "0" ] && ok "M 单字符子串锚 -> 仍红" || fail "M 不得通过（锚点未落在标题上）"
 
 # ---- N：锚点是存在但不相干的整词 —— 必须红 ----
 new_case case-n; withdraw_fixture
-add_row "| A withdrawal whose anchor is an unrelated existing word | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#survives-verbatim\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose anchor is an unrelated existing word | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#survives-verbatim\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case N: unrelated existing substring anchor"; run_gate
 [ "$RC" != "0" ] && ok "N 不相干整词锚 -> 仍红" || fail "N 不得通过（锚点未落在标题上）"
 
 # ---- O：既有 semantic-control 路径不得回归（配对 RED 行）----
 new_case case-o
 printf '\n- Every fixture control rule must be recorded before it lands. zzsemctl\n' >> "$REPO/$OWNER_REF"
-add_row "| An unchanged control alongside a RED-baseline row | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
-add_row "| The behaviour change the control accompanies | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| An unchanged control alongside a RED-baseline row | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| The behaviour change the control accompanies | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
 commit_case "case O: semantic-control beside RED-baseline"; run_gate
 [ "$RC" = "0" ] && ok "O semantic-control + RED-baseline -> 绿（无回归）" || { echo "--- O ---"; printf '%s\n' "$OUT" | tail -3; fail "O 既有路径回归"; }
 
@@ -163,7 +163,7 @@ import io,sys
 p=sys.argv[1]
 io.open(p,'w',encoding='utf-8').write("# 零损失义务对照\n\n| before 义务 | 去向 |\n| --- | --- |\n| 某条义务 | survives-verbatim: 别处 |\n")
 PYP
-add_row "| A withdrawal whose map does not quote what was removed | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose map does not quote what was removed | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case P: map does not account for deleted text"; run_gate
 [ "$RC" != "0" ] && ok "P 对照表未逐字交代被删内容 -> 仍红" || fail "P 不得通过（删了什么没抄出来）"
 

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_liveness_predicate_gate.sh

@@ -0,0 +1,288 @@
+#!/usr/bin/env bash
+# Behavior suite for check-ccl-skills.sh's `liveness_predicate_scan` gate
+# (recurring-anti-patterns-checklist.md, Anti-pattern 28).
+#
+# The gate exists because an existence-test liveness predicate fails in the direction
+# that looks like a real defect: the probe reds, names the code under test, and the code
+# under test was fine. Its value therefore rests on two properties that must BOTH be
+# pinned — it fires on the shape that actually shipped, and it stays silent on the
+# legitimate spellings. A gate that also flagged a ppid read used to identify a parent,
+# or the fix's own documentation, is one a later maintainer loosens after the first false
+# positive, and a loosened gate catches nothing.
+#
+#   bash skills/skill-extraction-workflow/scripts/test_liveness_predicate_gate.sh
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
+CHECKER="${CHECKER:-$SCRIPT_DIR/check-ccl-skills.sh}"
+[ -f "$CHECKER" ] || { echo "FAIL: checker not found: $CHECKER" >&2; exit 1; }
+
+pass=0; fail=0
+note() { fail=$((fail+1)); printf 'FAIL  %s\n' "$1" >&2; }
+ok()   { pass=$((pass+1)); }
+
+TMP=$(mktemp -d "${TMPDIR:-/tmp}/liveness-gate-test.XXXXXX") || exit 1
+TMP=$(cd "$TMP" && pwd -P)
+trap 'rm -rf "$TMP"' EXIT
+
+# Run the gate section in isolation rather than standing up a whole synthetic skill tree.
+section=$TMP/gate-section.sh
+{
+  echo '#!/usr/bin/env bash'
+  # MUST match the host checker's options, or a section that aborts the real checker
+  # still passes every probe here.
+  echo 'set -euo pipefail'
+  echo 'root="$1"'
+  awk '/^# Anti-pattern 28 —/{p=1} p; /^echo "liveness_predicate_scan_ok"$/{if(p) exit}' "$CHECKER"
+} > "$section"
+grep -q 'liveness_predicate_scan_ok' "$section" \
+  || { echo "FAIL: could not extract the gate section from $CHECKER (anchor moved?)" >&2; exit 1; }
+grep -q 'ppid=' "$section" \
+  || { echo "FAIL: extracted section carries no predicate — extraction is bogus" >&2; exit 1; }
+
+run_gate() { # run_gate <root> -> RC, OUT
+  OUT=$( bash "$section" "$1" 2>&1 ); RC=$?
+}
+mk_root() { local r="$TMP/$1"; mkdir -p "$r/scripts"; printf '%s' "$r"; }
+
+# The banned spelling is assembled at runtime, never written literally in this file:
+# this suite is itself a `test_*.sh` inside the scanned tree, so a literal would make the
+# repo's own gate flag its regression test. (The scanner-matches-itself trap.)
+PPID_READ='ps -o ppid= -p "$pid"'
+VIOLATION='[ "$('"$PPID_READ"' 2>/dev/null | tr -d " ")" = "1" ] && echo orphan'
+
+# --- P1: a clean tree passes ------------------------------------------------
+r=$(mk_root clean)
+printf '#!/usr/bin/env bash\necho hello\n' > "$r/scripts/test_clean.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_ok'; then ok
+else note "p1 clean tree must pass with the ok token (rc=$RC): $OUT"; fi
+
+# --- P2: the violation fires (the gate's whole reason to exist) -------------
+r=$(mk_root violation)
+printf '#!/usr/bin/env bash\n%s\n' "$VIOLATION" > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p2 planted orphan-oracle must FAIL the gate (rc=$RC): $OUT"; fi
+
+# --- P2b: the report names the offending file and line ----------------------
+if printf '%s' "$OUT" | grep -q 'scripts/test_probe.sh:2'; then ok
+else note "p2b failure output must locate the hit (file:line), got: $OUT"; fi
+
+# --- P2c: the hit and the diagnosis must not run together on one line -------
+# The sorted-hit list loses its trailing newline to command substitution; without an
+# explicit one the last hit and the message concatenate and neither greps cleanly.
+if printf '%s' "$OUT" | grep -q '^liveness_predicate_scan_failed'; then ok
+else note "p2c the diagnosis must start its own line, got: $OUT"; fi
+
+# --- P3: consulting process state clears it (this IS the documented fix) ----
+r=$(mk_root fixed)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'st="$(ps -o stat= -p "$pid")"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p3 a state consult within the window must clear the line (rc=$RC): $OUT"; fi
+
+# --- P3b: a *_state helper THIS FILE DEFINES over process state clears it ---
+# The real fix's shape: one helper, defined in the same file, reading `ps -o stat=`.
+r=$(mk_root fixed_helper)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'wrapper_state() {\n  ps -o stat= -p "$1"\n}\n'
+  printf 'case "$(wrapper_state "$pid")" in live) : ;; esac\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p3b a file-defined state helper must clear the line (rc=$RC): $OUT"; fi
+
+# --- P3c: an unrelated *_state call is NOT remediation ----------------------
+# Found by adversarial review: accepting any `*_state` token let a bookkeeping helper
+# that never reads process state clear a real hit, so the blocking gate printed ok.
+r=$(mk_root fake_helper)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'record_state "$other_pid"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p3c an unrelated *_state call must NOT clear the violation (rc=$RC): $OUT"; fi
+
+# --- P3d: a defined helper that does NOT read process state is not remediation
+r=$(mk_root hollow_helper)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'record_state() {\n  echo "$1" >>"$log"\n}\n'
+  printf 'record_state "$other_pid"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ]; then ok
+else note "p3d a defined helper that never reads process state must not clear it (rc=$RC): $OUT"; fi
+
+# --- P4: a whole-line comment carrying the spelling is documentation --------
+# The checklist row and the gate's own comment block name the banned spelling; a gate
+# that flags its own documentation gets loosened.
+r=$(mk_root commented)
+printf '#!/usr/bin/env bash\n# %s\n' "$VIOLATION" > "$r/scripts/test_doc.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p4 a whole-line comment must not be flagged (rc=$RC): $OUT"; fi
+
+# --- P5: scope is test scripts — a signalling guard elsewhere is legitimate --
+# Outside a test, asking whether a pid exists before signalling it is the right
+# question; flagging it would trade a real false-positive cost for nothing.
+r=$(mk_root nontest)
+printf '#!/usr/bin/env bash\n%s\n' "$VIOLATION" > "$r/scripts/helper.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p5 non-test shell is out of scope and must not fire (rc=$RC): $OUT"; fi
+
+# --- P6: a ppid read that IDENTIFIES a parent is not an orphan oracle -------
+# The common, correct use. Flagging it is what would make precision collapse.
+r=$(mk_root identify)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'parent="$(%s 2>/dev/null | tr -d " ")"\n' "$PPID_READ"
+  printf 'cmd="$(ps -o command= -p "$parent")"\n'
+} > "$r/scripts/test_identify.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p6 a ppid read used for parent identity must not fire (rc=$RC): $OUT"; fi
+
+# --- P7: a COMMENT naming the helper must not clear a real violation ---------
+# The waiver has to be code that consults process state, not a note saying someone
+# should. Found by adversarial review of this gate: the window grep read raw text, so a
+# TODO beside the violation made the blocking checker print ok for a line it had found.
+r=$(mk_root comment_waiver)
+{ printf '#!/usr/bin/env bash\n'
+  printf '# TODO: use wrapper_state here instead\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p7 a comment mentioning the helper must NOT clear the violation (rc=$RC): $OUT"; fi
+
+# --- P8: parameter expansion carrying '#' must not be mistaken for a comment --
+# Stripping trailing comments with a naive `#`-to-end rule would truncate `${var#pre}`
+# and could drop the real state consult that follows it, turning the fix into a hit.
+r=$(mk_root hash_expansion)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'rel="${path#"$root"/}"; st="$(ps -o stat= -p "$pid")"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p8 a '#' inside parameter expansion must not void the state consult (rc=$RC): $OUT"; fi
+
+# --- P9: the NEGATED assertion is the opposite check and must not fire ------
+# `!= "1"` asserts a process is NOT reparented. An unrestricted `.*=` in the predicate
+# swallowed the `!`, so the gate flagged the very check that does the right thing —
+# found by adversarial review, and the false-positive direction this gate must avoid.
+r=$(mk_root negated)
+{ printf '#!/usr/bin/env bash\n'
+  printf '[ "$(%s 2>/dev/null | tr -d " ")" != "1" ] && echo still-parented\n' "$PPID_READ"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p9 a negated ppid assertion must NOT fire (rc=$RC): $OUT"; fi
+
+# --- P9b: the positive oracle still fires with the tightened operator match --
+# Guards the tightening itself: narrowing the operator must not blunt the real catch.
+r=$(mk_root still_fires)
+printf '#!/usr/bin/env bash\n%s\n' "$VIOLATION" > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p9b the real orphan oracle must still fire after tightening (rc=$RC): $OUT"; fi
+
+# --- P10: a bare `stat=` assignment is not a process-state read ---------------
+# Found by adversarial review: the waiver grepped bare `stat=`, so an unrelated
+# assignment two lines away cleared a genuine hit and the blocking gate printed ok.
+r=$(mk_root fake_stat)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'stat=unknown\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p10 a bare stat= assignment must NOT clear the violation (rc=$RC): $OUT"; fi
+
+# --- P10b: the genuine `ps -o stat=` read still clears it --------------------
+r=$(mk_root real_stat)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'st="$(ps -o stat= -p "$pid")"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p10b a real ps -o stat= read must still clear the line (rc=$RC): $OUT"; fi
+
+# --- P11: a HOLLOW helper plus an unrelated state read elsewhere is not a fix --
+# Found by adversarial review: "the file defines *_state" and "the file reads process
+# state somewhere" were checked independently, so the two were never tied together and a
+# do-nothing helper borrowed an unrelated read to clear a real hit.
+r=$(mk_root hollow_plus_elsewhere)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'wrapper_state() {\n  echo unknown\n}\n'
+  printf 'other() {\n  ps -o stat= -p "$1"\n}\n'
+  printf 'case "$(wrapper_state "$pid")" in live) : ;; esac\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p11 a hollow helper must NOT borrow an unrelated state read (rc=$RC): $OUT"; fi
+
+# --- P12: a ONE-LINE hollow helper must not borrow a later function's read -----
+# Found by the adversarial challenge: the awk rule set inbody and ran `next`, so a
+# definition that opens and closes on one line never met its `}` and stayed "in body"
+# across the following functions, crediting their state read to the hollow helper.
+r=$(mk_root oneline_hollow)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'wrapper_state() { echo live; }\n'
+  printf 'other() {\n  ps -o stat= -p "$other_pid"\n}\n'
+  printf 'case "$(wrapper_state "$pid")" in live) : ;; esac\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p12 a one-line hollow helper must NOT borrow a later read (rc=$RC): $OUT"; fi
+
+# --- P12b: a genuine ONE-LINE helper that does read state still clears it ------
+r=$(mk_root oneline_real)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'wrapper_state() { ps -o stat= -p "$1"; }\n'
+  printf 'case "$(wrapper_state "$pid")" in live) : ;; esac\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p12b a real one-line state helper must clear the line (rc=$RC): $OUT"; fi
+
+# --- P13/P14: the DOCUMENTED limit, pinned rather than left in prose -----------
+# These two assert the gate does NOT fire, which is a hole, not a feature: a state read
+# of a different pid, or one whose result is discarded, still clears the window. Proving
+# a read GOVERNS the verdict needs dataflow over a parsed shell, so the mechanical gate
+# stops here by design (recurring-anti-patterns-checklist.md, Anti-pattern 28).
+# They are here so the limit is exercised, not merely described: if a future change makes
+# the gate stricter these go red, and whoever tightened it must update the checklist
+# rather than discover the prose had silently gone stale.
+r=$(mk_root limit_other_pid)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'ps -o stat= -p "$other_pid" >/dev/null\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p13 KNOWN LIMIT CHANGED: a different-pid state read now fires — update the checklist (rc=$RC)"; fi
+
+r=$(mk_root limit_discarded)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'ps -o stat= -p "$pid" >/dev/null\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p14 KNOWN LIMIT CHANGED: a discarded same-pid state read now fires — update the checklist (rc=$RC)"; fi
+
+printf 'liveness_predicate_gate: pass=%s fail=%s\n' "$pass" "$fail"
+[ "$fail" -eq 0 ] || exit 1
+echo "liveness_predicate_gate_ok"