@ccoalm/ccl-skills 0.3.0 → 0.4.0

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_source_refuted.sh

@@ -53,7 +53,7 @@ FIRING_F="firing-path: file:skills/product-rd-workflow/SKILL.md#must record a RE
 
 # ---- A：合规撤回 —— 有类时必须绿，无类时必须红 ----
 new_case case-a; withdraw_fixture
-add_row "| A fixture claim is refuted by its primary source and is withdrawn wholesale | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A fixture claim is refuted by its primary source and is withdrawn wholesale | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case A: compliant source-refuted withdrawal"; run_gate
 # A 的期望值在裁决后由绿改红：该类不再顶起 RED 底线（见 frozen-acceptance.md 的裁决记录）。
 # 合规撤回现在仍然被拦——它要么配一条 RED 行，要么由具名风险 owner 人工放行。
@@ -62,32 +62,32 @@ commit_case "case A: compliant source-refuted withdrawal"; run_gate
 # ---- B：真行为变更披该标签 —— 任何时候都必须红 ----
 new_case case-b
 printf '\n- Every fixture change must obtain approval before it lands.\n' >> "$REPO/$OWNER_REF"
-add_row "| A newly added normative rule wearing the withdrawal label | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A newly added normative rule wearing the withdrawal label | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case B: real behaviour change wearing the label"; run_gate
 [ "$RC" != "0" ] && ok "B 真行为变更披标签 -> 仍红" || fail "B 不得通过（净增却用撤回类）"
 
 # ---- C：缺一手源 URL —— 必须红 ----
 new_case case-c; withdraw_fixture
-add_row "| A withdrawal whose row cites no refuting source | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose row cites no refuting source | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case C: missing refuting source"; run_gate
 [ "$RC" != "0" ] && ok "C 缺一手源 -> 仍红" || fail "C 不得通过（无源即无据）"
 
 # ---- D：缺零损失指针 —— 必须红 ----
 new_case case-d; withdraw_fixture
-add_row "| A withdrawal whose row carries no zero-loss map | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose row carries no zero-loss map | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case D: missing zero-loss pointer"; run_gate
 [ "$RC" != "0" ] && ok "D 缺零损失指针 -> 仍红" || fail "D 不得通过（义务保全无对照）"
 
-# ---- E：observed-failure: yes —— 必须红 ----
+# ---- E：observed-failure: yes; result-class: failure —— 必须红 ----
 new_case case-e; withdraw_fixture
-add_row "| A withdrawal self-declaring an observed failure | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: yes | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal self-declaring an observed failure | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: yes; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case E: observed-failure yes"; run_gate
-[ "$RC" != "0" ] && ok "E observed-failure: yes -> 仍红" || fail "E 不得通过（分类语义不得自选）"
+[ "$RC" != "0" ] && ok "E observed-failure: yes; result-class: failure -> 仍红" || fail "E 不得通过（分类语义不得自选）"
 
 # ---- F：既有类不得回归 ----
 new_case case-f
 printf '\n- Every fixture delivery must record a RED-baseline row before it lands.\n' >> "$REPO/$OWNER_REF"
-add_row "| An ordinary behaviour-changing rule with a RED-baseline row | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; $FIRING_F | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| An ordinary behaviour-changing rule with a RED-baseline row | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; $FIRING_F | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
 commit_case "case F: existing RED-baseline path"; run_gate
 if [ "$RC" = "0" ]; then ok "F 既有 RED-baseline 路径 -> 绿（无回归）"; else echo "--- F 完整输出 ---"; printf '%s\n' "$OUT"; fail "F 回归"; fi
 
@@ -95,8 +95,8 @@ if [ "$RC" = "0" ]; then ok "F 既有 RED-baseline 路径 -> 绿（无回归）"
 #      独立评审 REVIEW-1：any? 顶起底线时，真行为变更会搭便车。
 new_case case-g; withdraw_fixture
 printf '\n- Every unrelated fixture delivery must obtain approval before it lands. zzmixedrule\n' >> "$REPO/$OWNER_REF"
-add_row "| A compliant withdrawal alongside an unrelated change | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
-add_row "| An unrelated behaviour change riding along on a stable-control label | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; firing-path: file:skills/product-rd-workflow/SKILL.md#must obtain approval before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| A compliant withdrawal alongside an unrelated change | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| An unrelated behaviour change riding along on a stable-control label | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#must obtain approval before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
 commit_case "case G: mixed rows"; run_gate
 [ "$RC" != "0" ] && ok "G 混合行 -> 仍红" || fail "G 不得通过（真行为变更搭撤回的便车）"
 
@@ -104,21 +104,21 @@ commit_case "case G: mixed rows"; run_gate
 #      独立挑战 CHALLENGE-1：删无关文字凑净负、加一条新规则、指针写不存在的锚。
 new_case case-h; withdraw_fixture
 printf '\n- Every smuggled fixture rule must be rejected by the withdrawal class. zzsmuggled\n' >> "$REPO/$OWNER_REF"
-add_row "| A smuggled rule hidden behind an offsetting deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`README.md#no-such-anchor-exists-here\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A smuggled rule hidden behind an offsetting deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`README.md#no-such-anchor-exists-here\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case H: offset addition with bogus anchor"; run_gate
 [ "$RC" != "0" ] && ok "H 抵消式新增 + 假锚点 -> 仍红" || fail "H 不得通过（新增规范行 / 锚点不解析）"
 
 # ---- I：脚本改动、零删除 —— 必须红（旧代理谓词看不见脚本）----
 new_case case-i
 printf '\n# fixture: an added shell line that changes behaviour without matching any prose predicate\n' >> "$REPO/skills/product-rd-workflow/scripts/check-agent-contract-coverage.sh"
-add_row "| A script change wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A script change wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case I: script change, no deletion"; run_gate
 [ "$RC" != "0" ] && ok "I 脚本改动零删除 -> 仍红" || fail "I 不得通过（非 .md、且无删除）"
 
 # ---- J：`Always` 规则、零删除 —— 必须红（旧谓词故意排除 always）----
 new_case case-j
 printf '\n- Always authenticate fixture requests before dispatch.\n' >> "$REPO/$OWNER_REF"
-add_row "| An Always-phrased rule wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| An Always-phrased rule wearing the withdrawal label with nothing deleted | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case J: Always rule, no deletion"; run_gate
 [ "$RC" != "0" ] && ok "J Always 规则零删除 -> 仍红" || fail "J 不得通过（有新增行）"
 
@@ -126,33 +126,33 @@ commit_case "case J: Always rule, no deletion"; run_gate
 #      独立评审：chmod 在 --name-status 里显示为 M、在 --numstat 里记 0/0。
 new_case case-k; withdraw_fixture
 chmod 755 "$REPO/skills/product-rd-workflow/references/adr-convention.md"
-add_row "| A mode change riding along with a genuine deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A mode change riding along with a genuine deletion | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case K: chmod plus deletion"; run_gate
 [ "$RC" != "0" ] && ok "K 改权限 + 删除 -> 仍红" || fail "K 不得通过（mode 变更未被 numstat 反映）"
 
 # ---- L：指针路径穿越出仓 —— 必须红 ----
 new_case case-l; withdraw_fixture
-add_row "| A withdrawal whose zero-loss pointer escapes the repository | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`../../../etc/hosts#localhost\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose zero-loss pointer escapes the repository | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`../../../etc/hosts#localhost\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case L: traversal pointer"; run_gate
 [ "$RC" != "0" ] && ok "L 指针穿越出仓 -> 仍红" || fail "L 不得通过（路径逃出仓库）"
 
 # ---- M：锚点是存在但无意义的单字符子串 —— 必须红 ----
 new_case case-m; withdraw_fixture
-add_row "| A withdrawal whose anchor is a bare existing substring | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#a\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose anchor is a bare existing substring | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#a\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case M: one-character substring anchor"; run_gate
 [ "$RC" != "0" ] && ok "M 单字符子串锚 -> 仍红" || fail "M 不得通过（锚点未落在标题上）"
 
 # ---- N：锚点是存在但不相干的整词 —— 必须红 ----
 new_case case-n; withdraw_fixture
-add_row "| A withdrawal whose anchor is an unrelated existing word | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#survives-verbatim\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose anchor is an unrelated existing word | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#survives-verbatim\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case N: unrelated existing substring anchor"; run_gate
 [ "$RC" != "0" ] && ok "N 不相干整词锚 -> 仍红" || fail "N 不得通过（锚点未落在标题上）"
 
 # ---- O：既有 semantic-control 路径不得回归（配对 RED 行）----
 new_case case-o
 printf '\n- Every fixture control rule must be recorded before it lands. zzsemctl\n' >> "$REPO/$OWNER_REF"
-add_row "| An unchanged control alongside a RED-baseline row | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
-add_row "| The behaviour change the control accompanies | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| An unchanged control alongside a RED-baseline row | \`downstream-executor\` | behavioral-evidence: semantic-control; observed-failure: no; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
+add_row "| The behaviour change the control accompanies | \`downstream-executor\` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#must be recorded before it lands | \`updated\` | \`product-rd-workflow/SKILL.md\` |"
 commit_case "case O: semantic-control beside RED-baseline"; run_gate
 [ "$RC" = "0" ] && ok "O semantic-control + RED-baseline -> 绿（无回归）" || { echo "--- O ---"; printf '%s\n' "$OUT" | tail -3; fail "O 既有路径回归"; }
 
@@ -163,7 +163,7 @@ import io,sys
 p=sys.argv[1]
 io.open(p,'w',encoding='utf-8').write("# 零损失义务对照\n\n| before 义务 | 去向 |\n| --- | --- |\n| 某条义务 | survives-verbatim: 别处 |\n")
 PYP
-add_row "| A withdrawal whose map does not quote what was removed | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
+add_row "| A withdrawal whose map does not quote what was removed | \`downstream-executor\` | behavioral-evidence: source-refuted; observed-failure: no; result-class: failure | \`updated\` | zero-loss: \`$ZLOSS#零损失义务对照\`; refuting source: $SRC; \`product-rd-workflow/SKILL.md\` |"
 commit_case "case P: map does not account for deleted text"; run_gate
 [ "$RC" != "0" ] && ok "P 对照表未逐字交代被删内容 -> 仍红" || fail "P 不得通过（删了什么没抄出来）"
 

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_liveness_predicate_gate.sh

@@ -0,0 +1,288 @@
+#!/usr/bin/env bash
+# Behavior suite for check-ccl-skills.sh's `liveness_predicate_scan` gate
+# (recurring-anti-patterns-checklist.md, Anti-pattern 28).
+#
+# The gate exists because an existence-test liveness predicate fails in the direction
+# that looks like a real defect: the probe reds, names the code under test, and the code
+# under test was fine. Its value therefore rests on two properties that must BOTH be
+# pinned — it fires on the shape that actually shipped, and it stays silent on the
+# legitimate spellings. A gate that also flagged a ppid read used to identify a parent,
+# or the fix's own documentation, is one a later maintainer loosens after the first false
+# positive, and a loosened gate catches nothing.
+#
+#   bash skills/skill-extraction-workflow/scripts/test_liveness_predicate_gate.sh
+set -u
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
+CHECKER="${CHECKER:-$SCRIPT_DIR/check-ccl-skills.sh}"
+[ -f "$CHECKER" ] || { echo "FAIL: checker not found: $CHECKER" >&2; exit 1; }
+
+pass=0; fail=0
+note() { fail=$((fail+1)); printf 'FAIL  %s\n' "$1" >&2; }
+ok()   { pass=$((pass+1)); }
+
+TMP=$(mktemp -d "${TMPDIR:-/tmp}/liveness-gate-test.XXXXXX") || exit 1
+TMP=$(cd "$TMP" && pwd -P)
+trap 'rm -rf "$TMP"' EXIT
+
+# Run the gate section in isolation rather than standing up a whole synthetic skill tree.
+section=$TMP/gate-section.sh
+{
+  echo '#!/usr/bin/env bash'
+  # MUST match the host checker's options, or a section that aborts the real checker
+  # still passes every probe here.
+  echo 'set -euo pipefail'
+  echo 'root="$1"'
+  awk '/^# Anti-pattern 28 —/{p=1} p; /^echo "liveness_predicate_scan_ok"$/{if(p) exit}' "$CHECKER"
+} > "$section"
+grep -q 'liveness_predicate_scan_ok' "$section" \
+  || { echo "FAIL: could not extract the gate section from $CHECKER (anchor moved?)" >&2; exit 1; }
+grep -q 'ppid=' "$section" \
+  || { echo "FAIL: extracted section carries no predicate — extraction is bogus" >&2; exit 1; }
+
+run_gate() { # run_gate <root> -> RC, OUT
+  OUT=$( bash "$section" "$1" 2>&1 ); RC=$?
+}
+mk_root() { local r="$TMP/$1"; mkdir -p "$r/scripts"; printf '%s' "$r"; }
+
+# The banned spelling is assembled at runtime, never written literally in this file:
+# this suite is itself a `test_*.sh` inside the scanned tree, so a literal would make the
+# repo's own gate flag its regression test. (The scanner-matches-itself trap.)
+PPID_READ='ps -o ppid= -p "$pid"'
+VIOLATION='[ "$('"$PPID_READ"' 2>/dev/null | tr -d " ")" = "1" ] && echo orphan'
+
+# --- P1: a clean tree passes ------------------------------------------------
+r=$(mk_root clean)
+printf '#!/usr/bin/env bash\necho hello\n' > "$r/scripts/test_clean.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_ok'; then ok
+else note "p1 clean tree must pass with the ok token (rc=$RC): $OUT"; fi
+
+# --- P2: the violation fires (the gate's whole reason to exist) -------------
+r=$(mk_root violation)
+printf '#!/usr/bin/env bash\n%s\n' "$VIOLATION" > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p2 planted orphan-oracle must FAIL the gate (rc=$RC): $OUT"; fi
+
+# --- P2b: the report names the offending file and line ----------------------
+if printf '%s' "$OUT" | grep -q 'scripts/test_probe.sh:2'; then ok
+else note "p2b failure output must locate the hit (file:line), got: $OUT"; fi
+
+# --- P2c: the hit and the diagnosis must not run together on one line -------
+# The sorted-hit list loses its trailing newline to command substitution; without an
+# explicit one the last hit and the message concatenate and neither greps cleanly.
+if printf '%s' "$OUT" | grep -q '^liveness_predicate_scan_failed'; then ok
+else note "p2c the diagnosis must start its own line, got: $OUT"; fi
+
+# --- P3: consulting process state clears it (this IS the documented fix) ----
+r=$(mk_root fixed)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'st="$(ps -o stat= -p "$pid")"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p3 a state consult within the window must clear the line (rc=$RC): $OUT"; fi
+
+# --- P3b: a *_state helper THIS FILE DEFINES over process state clears it ---
+# The real fix's shape: one helper, defined in the same file, reading `ps -o stat=`.
+r=$(mk_root fixed_helper)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'wrapper_state() {\n  ps -o stat= -p "$1"\n}\n'
+  printf 'case "$(wrapper_state "$pid")" in live) : ;; esac\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p3b a file-defined state helper must clear the line (rc=$RC): $OUT"; fi
+
+# --- P3c: an unrelated *_state call is NOT remediation ----------------------
+# Found by adversarial review: accepting any `*_state` token let a bookkeeping helper
+# that never reads process state clear a real hit, so the blocking gate printed ok.
+r=$(mk_root fake_helper)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'record_state "$other_pid"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p3c an unrelated *_state call must NOT clear the violation (rc=$RC): $OUT"; fi
+
+# --- P3d: a defined helper that does NOT read process state is not remediation
+r=$(mk_root hollow_helper)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'record_state() {\n  echo "$1" >>"$log"\n}\n'
+  printf 'record_state "$other_pid"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ]; then ok
+else note "p3d a defined helper that never reads process state must not clear it (rc=$RC): $OUT"; fi
+
+# --- P4: a whole-line comment carrying the spelling is documentation --------
+# The checklist row and the gate's own comment block name the banned spelling; a gate
+# that flags its own documentation gets loosened.
+r=$(mk_root commented)
+printf '#!/usr/bin/env bash\n# %s\n' "$VIOLATION" > "$r/scripts/test_doc.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p4 a whole-line comment must not be flagged (rc=$RC): $OUT"; fi
+
+# --- P5: scope is test scripts — a signalling guard elsewhere is legitimate --
+# Outside a test, asking whether a pid exists before signalling it is the right
+# question; flagging it would trade a real false-positive cost for nothing.
+r=$(mk_root nontest)
+printf '#!/usr/bin/env bash\n%s\n' "$VIOLATION" > "$r/scripts/helper.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p5 non-test shell is out of scope and must not fire (rc=$RC): $OUT"; fi
+
+# --- P6: a ppid read that IDENTIFIES a parent is not an orphan oracle -------
+# The common, correct use. Flagging it is what would make precision collapse.
+r=$(mk_root identify)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'parent="$(%s 2>/dev/null | tr -d " ")"\n' "$PPID_READ"
+  printf 'cmd="$(ps -o command= -p "$parent")"\n'
+} > "$r/scripts/test_identify.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p6 a ppid read used for parent identity must not fire (rc=$RC): $OUT"; fi
+
+# --- P7: a COMMENT naming the helper must not clear a real violation ---------
+# The waiver has to be code that consults process state, not a note saying someone
+# should. Found by adversarial review of this gate: the window grep read raw text, so a
+# TODO beside the violation made the blocking checker print ok for a line it had found.
+r=$(mk_root comment_waiver)
+{ printf '#!/usr/bin/env bash\n'
+  printf '# TODO: use wrapper_state here instead\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p7 a comment mentioning the helper must NOT clear the violation (rc=$RC): $OUT"; fi
+
+# --- P8: parameter expansion carrying '#' must not be mistaken for a comment --
+# Stripping trailing comments with a naive `#`-to-end rule would truncate `${var#pre}`
+# and could drop the real state consult that follows it, turning the fix into a hit.
+r=$(mk_root hash_expansion)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'rel="${path#"$root"/}"; st="$(ps -o stat= -p "$pid")"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p8 a '#' inside parameter expansion must not void the state consult (rc=$RC): $OUT"; fi
+
+# --- P9: the NEGATED assertion is the opposite check and must not fire ------
+# `!= "1"` asserts a process is NOT reparented. An unrestricted `.*=` in the predicate
+# swallowed the `!`, so the gate flagged the very check that does the right thing —
+# found by adversarial review, and the false-positive direction this gate must avoid.
+r=$(mk_root negated)
+{ printf '#!/usr/bin/env bash\n'
+  printf '[ "$(%s 2>/dev/null | tr -d " ")" != "1" ] && echo still-parented\n' "$PPID_READ"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p9 a negated ppid assertion must NOT fire (rc=$RC): $OUT"; fi
+
+# --- P9b: the positive oracle still fires with the tightened operator match --
+# Guards the tightening itself: narrowing the operator must not blunt the real catch.
+r=$(mk_root still_fires)
+printf '#!/usr/bin/env bash\n%s\n' "$VIOLATION" > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p9b the real orphan oracle must still fire after tightening (rc=$RC): $OUT"; fi
+
+# --- P10: a bare `stat=` assignment is not a process-state read ---------------
+# Found by adversarial review: the waiver grepped bare `stat=`, so an unrelated
+# assignment two lines away cleared a genuine hit and the blocking gate printed ok.
+r=$(mk_root fake_stat)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'stat=unknown\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p10 a bare stat= assignment must NOT clear the violation (rc=$RC): $OUT"; fi
+
+# --- P10b: the genuine `ps -o stat=` read still clears it --------------------
+r=$(mk_root real_stat)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'st="$(ps -o stat= -p "$pid")"\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p10b a real ps -o stat= read must still clear the line (rc=$RC): $OUT"; fi
+
+# --- P11: a HOLLOW helper plus an unrelated state read elsewhere is not a fix --
+# Found by adversarial review: "the file defines *_state" and "the file reads process
+# state somewhere" were checked independently, so the two were never tied together and a
+# do-nothing helper borrowed an unrelated read to clear a real hit.
+r=$(mk_root hollow_plus_elsewhere)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'wrapper_state() {\n  echo unknown\n}\n'
+  printf 'other() {\n  ps -o stat= -p "$1"\n}\n'
+  printf 'case "$(wrapper_state "$pid")" in live) : ;; esac\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p11 a hollow helper must NOT borrow an unrelated state read (rc=$RC): $OUT"; fi
+
+# --- P12: a ONE-LINE hollow helper must not borrow a later function's read -----
+# Found by the adversarial challenge: the awk rule set inbody and ran `next`, so a
+# definition that opens and closes on one line never met its `}` and stayed "in body"
+# across the following functions, crediting their state read to the hollow helper.
+r=$(mk_root oneline_hollow)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'wrapper_state() { echo live; }\n'
+  printf 'other() {\n  ps -o stat= -p "$other_pid"\n}\n'
+  printf 'case "$(wrapper_state "$pid")" in live) : ;; esac\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -ne 0 ] && printf '%s' "$OUT" | grep -q 'liveness_predicate_scan_failed'; then ok
+else note "p12 a one-line hollow helper must NOT borrow a later read (rc=$RC): $OUT"; fi
+
+# --- P12b: a genuine ONE-LINE helper that does read state still clears it ------
+r=$(mk_root oneline_real)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'wrapper_state() { ps -o stat= -p "$1"; }\n'
+  printf 'case "$(wrapper_state "$pid")" in live) : ;; esac\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p12b a real one-line state helper must clear the line (rc=$RC): $OUT"; fi
+
+# --- P13/P14: the DOCUMENTED limit, pinned rather than left in prose -----------
+# These two assert the gate does NOT fire, which is a hole, not a feature: a state read
+# of a different pid, or one whose result is discarded, still clears the window. Proving
+# a read GOVERNS the verdict needs dataflow over a parsed shell, so the mechanical gate
+# stops here by design (recurring-anti-patterns-checklist.md, Anti-pattern 28).
+# They are here so the limit is exercised, not merely described: if a future change makes
+# the gate stricter these go red, and whoever tightened it must update the checklist
+# rather than discover the prose had silently gone stale.
+r=$(mk_root limit_other_pid)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'ps -o stat= -p "$other_pid" >/dev/null\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p13 KNOWN LIMIT CHANGED: a different-pid state read now fires — update the checklist (rc=$RC)"; fi
+
+r=$(mk_root limit_discarded)
+{ printf '#!/usr/bin/env bash\n'
+  printf 'ps -o stat= -p "$pid" >/dev/null\n'
+  printf '%s\n' "$VIOLATION"
+} > "$r/scripts/test_probe.sh"
+run_gate "$r"
+if [ "$RC" -eq 0 ]; then ok
+else note "p14 KNOWN LIMIT CHANGED: a discarded same-pid state read now fires — update the checklist (rc=$RC)"; fi
+
+printf 'liveness_predicate_gate: pass=%s fail=%s\n' "$pass" "$fail"
+[ "$fail" -eq 0 ] || exit 1
+echo "liveness_predicate_gate_ok"

package/dist/assets/release.json

@@ -1,8 +1,8 @@
 {
   "schema": 1,
   "npmPackage": "@ccoalm/ccl-skills",
-  "version": "0.3.0",
-  "sourceCommit": "0e8a42aee6ffd691679245331af0ad346baf4fdc",
+  "version": "0.4.0",
+  "sourceCommit": "b6a56485f7e4764e36a2c2ac14693db25964f018",
   "sourceState": "clean",
   "files": [
     {
@@ -287,7 +287,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/classify_envelope.py",
-      "sha256": "30401c9fb101a3d5b37de1af939c14ad5590e1bf3f23e71f58bb20d92b23601a",
+      "sha256": "72956ebdfc3c22281b86fb6ada6c2e88a6e21c3a2aa6a80b09767adb62fb18b0",
       "mode": 493
     },
     {
@@ -375,9 +375,14 @@
       "sha256": "b92a8b2ae91608081665eabcee482b7550415d66df8ad654f1d041add6b3de8f",
       "mode": 420
     },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_abort_leak_state_helpers.sh",
+      "sha256": "6696d671f0aa071537e35fe93f9f39453659bafeb17a5ab5441407b557a2bdb1",
+      "mode": 493
+    },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_classify_envelope.sh",
-      "sha256": "dd3167c61b1443cb8661a53efc29fde86ef383a646bc866dde83a3a927dc5f16",
+      "sha256": "6ced09a9338753975d12fe81d45b513c276cd38470ef1b2a16849561d88bf19f",
       "mode": 493
     },
     {
@@ -437,7 +442,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_parse_review_json.sh",
-      "sha256": "2362221e654e0d5f9378cd1be1eca9bc0633b3c6b1ed4a7dc4e77f0df986254b",
+      "sha256": "62be1010b6f01dfef76c3e6e6b96a8ff5d400c4d9c68060b33b0982ff2b8c754",
       "mode": 493
     },
     {
@@ -452,12 +457,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_review_gate_abort_leak.sh",
-      "sha256": "9434aa303e93754ef5a8dfdaf6453bab86f0c253eb787b80fecc00b5f7b3e984",
+      "sha256": "b4bd03c04e822eb8ed212e9624ce9ca8c93bdcd363885cfdcf2fd77e74dd21a8",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/code-review/scripts/test_review_gate.sh",
-      "sha256": "6659beaca736d91c9498157766b3d90ce1cbdff828d12fb91b4fff17b9857166",
+      "sha256": "244a56a2dbc3b02d11024ec7c4a5d45d31f98938a438b0bfd4ba5be3ea3bf60b",
       "mode": 493
     },
     {
@@ -1912,7 +1917,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/eval-routing.md",
-      "sha256": "f42096bd6667a932b92c6cf0cd1c3e363e483145b08c09572089b1da88055a32",
+      "sha256": "73ce45ed4bb5ca29f9e9b5e286c5da8bbad9d39d48fb8405b43050990814554d",
       "mode": 420
     },
     {
@@ -1937,7 +1942,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/extraction-quickstart.md",
-      "sha256": "50c5edb90fbf923aa2851341bb39c69500e829e6e1cd0e403b2d1ffa0fbd7483",
+      "sha256": "4c3660c0bf33bf742e7d690c11661f7edef1eab0d63a100866e8001ad3adfddb",
       "mode": 420
     },
     {
@@ -1947,7 +1952,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/harness-patterns-and-eval.md",
-      "sha256": "280be0406cbbe42a4f8b0470c27eab666a99c4643be6b3165053d334fe088f29",
+      "sha256": "2c106cb1df85e13b4034866fafbd32c0f9dacf89be7f15ffe8cd7089a8c8d7ef",
       "mode": 420
     },
     {
@@ -1977,7 +1982,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/recurring-anti-patterns-checklist.md",
-      "sha256": "a463977152868bae7ca534e95a166ad23d027d9c9ec3f4efdc6886fbc6e60074",
+      "sha256": "38a2abe3391b245fef430d334f6aac91a62f75a6f32d2f2a76ad9f946fabb6ec",
       "mode": 420
     },
     {
@@ -2012,12 +2017,12 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-register.md",
-      "sha256": "b028098c3d5fdcdb49b6e26fde4a162f958fa236085532e8975e4e7ce2e7de14",
+      "sha256": "bfc26af574b990ce5a8e7dcfcd42b17eaf302e1ba0ec61b10f1db774e85c2a30",
       "mode": 420
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/references/source-to-skill-extraction.md",
-      "sha256": "1c4c99821e26a36a3b82a6194dc82997ce509f50f03f963b7db5a5126e2c5e21",
+      "sha256": "63f3e920df63add61965cefbb5673f6ef2b30249473b548af81fb3a89520b8cb",
       "mode": 420
     },
     {
@@ -2047,7 +2052,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/check-ccl-skills.sh",
-      "sha256": "c377934dc7b4f005970bd81a7747e91f0c374aed0f76ee44253a8fbce1a3eb8d",
+      "sha256": "4addb9d800b78b8cc2eb1c8f4429959631bcf092ef00d28306b95b9cd5f209da",
       "mode": 493
     },
     {
@@ -2077,7 +2082,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/eval-health.rb",
-      "sha256": "35a9b8488e9c8fbe56859fb01634fa9faaa4a993cc6fef816af0ec310b8abc0a",
+      "sha256": "c44e09befe49a5dd9491772bd1bdffb2c881df478fe2705e94d6006543aabadc",
       "mode": 493
     },
     {
@@ -2102,7 +2107,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/impact-chain-gate.rb",
-      "sha256": "f15d8b1d1932589e981ad1c104e73bfb9e057f61e5ceae60c3a75004422b7ae9",
+      "sha256": "af64b8f307c75943c81553af22ddb3702cdc1e3ecd77d7a9a3052b680874eaed",
       "mode": 493
     },
     {
@@ -2132,7 +2137,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_impact_chain_refscripts.sh",
-      "sha256": "81be5e3078121140402f88e1e56995dea3d2c70320490eb329e3460eadc1a2b3",
+      "sha256": "04e4b75799c9e6e97402a6515f063dd1c59dc0b4d5f02cc9448142dc99459fea",
       "mode": 493
     },
     {
@@ -2147,7 +2152,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_regressions.sh",
-      "sha256": "c6ff1fe420383ec343281678a96ba9b7b2905c8946ea6cd145a7c38da0ff28f2",
+      "sha256": "afaa9197cd4e0bf0e0b8d6e3189f0e939561b8142ec1e76c9baf9dd968a3af90",
       "mode": 493
     },
     {
@@ -2217,22 +2222,32 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_gate_dateless_host.sh",
-      "sha256": "493443e08b635ac1acd47339fcd0fe966646374e4224baa68a99f46dba932ae1",
+      "sha256": "08e707048810264e6d74d5df4d9415601b14749204eed55f9f160ae5dc782a60",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_gate_verdict_differential.sh",
-      "sha256": "3c6d27086a7c0d97b636f09faef811ed7d1a53806dbcce21de69707cc6f3dc0a",
+      "sha256": "30d94cbf6d2255d1a9eb38eb558ef2d8c638b4d1a65d739b1c713f339b9b22ad",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_round_attribution.sh",
-      "sha256": "a8e9bc8a8d60dae6c037c8fa760d15b5a0633e575a9831b9ab11235f3ca12da3",
+      "sha256": "034179e057ff3dbba0ecf3077fad6836caf45536a68479742ace8bbd016ab283",
+      "mode": 493
+    },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_self_adjudication.sh",
+      "sha256": "85dbe8967dabe779b99d0e9543b7a6cc24d525f26e6f55eadd6995e16679fb76",
       "mode": 493
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_source_refuted.sh",
-      "sha256": "e52069f1ab54e431d62db309c752ded5d7d148e221900a201235ef879e8d3af5",
+      "sha256": "f2f24a5e16d90b11ab0878004612c59a56091bca26f3f4a030490c3dd64a8449",
+      "mode": 493
+    },
+    {
+      "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_liveness_predicate_gate.sh",
+      "sha256": "59a64a65c1998a18506164f93100cb270319ee9c6eddd485d32d78520b064e6a",
       "mode": 493
     },
     {
@@ -2287,7 +2302,7 @@
     },
     {
       "path": "marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/SKILL.md",
-      "sha256": "081a7d21813d00a462f2c77c53923edf60cd6f740138d6c028b84ea4675c1aeb",
+      "sha256": "bff6bbfcc86cf5a2c523331621e113c2032a84130237ce1a89b79b5faf0b97dc",
       "mode": 420
     },
     {
@@ -2843,5 +2858,5 @@
       "mode": 420
     }
   ],
-  "snapshotHash": "f339a0ca319bb93956aebf42d2f63143ae37de54484398b0a3f87af313064436"
+  "snapshotHash": "6bf3d196d1ce59b751b9082bbb62b0c93cda0ceeb7e3c16431576522a5d9158e"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ccoalm/ccl-skills",
-	"version": "0.3.0",
+	"version": "0.4.0",
   "description": "Self-contained CCL Skills installer for Claude Code, Codex, and OpenCode",
 	"keywords": ["agent-skills", "claude-code", "codex", "opencode", "developer-tools"],
   "type": "module",