@ccoalm/ccl-skills 0.3.0 → 0.5.0

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_check_ccl_regressions.sh

@@ -125,7 +125,13 @@ fast_tests=(
   test_validate_skill_root_depth.sh
   test_validate_skill_cross_refs.sh
   test_git_identity_predicate_gate.sh
+  test_liveness_predicate_gate.sh
   test_regression_runner_registration.sh
+  # Harness binding for the gate lanes themselves: the impact-chain gate's
+  # round walk needs the branch's own first-parent chain, which the default
+  # refs/pull/N/merge checkout does not provide. Cheap, no clone, and a
+  # regression here is otherwise invisible until it refuses an unrelated PR.
+  test_ci_checkout_ref_binding.sh
   # Lane-semantics guard for this runner itself (036 challenge P2): proves
   # --heavy-only / --fast / --full each run exactly their lane against a stub
   # fixture via REGRESSION_SCRIPTS_DIR, and that a red heavy stub propagates.
@@ -141,6 +147,7 @@ fast_tests=(
 
 heavy_tests=(
   test_check_ccl_r0_status.sh
+  test_entrypoint_domain_scan_terms.sh
   test_check_ccl_source_register_lifecycle.sh
   # Clones the whole repo once; impact-chain cases call the standalone gate and
   # retain one full-checker wiring case. Still kept out of the pre-commit lane.
@@ -164,6 +171,11 @@ heavy_tests=(
   # 对照表不交代被删内容）必须每轮都跑。clone + 16 分支对 pre-commit 太慢，进 heavy。
   test_impact_chain_source_refuted.sh
   test_impact_chain_gate_verdict_differential.sh
+  # 045：两个触发器（routing 面改动欠 bank 证据、台账行欠 result-class）的十条决策表
+  # 用例。同样是整仓 clone + 一 case 一分支的形态，故与上面两套同进 heavy。它钉的是
+  # 「跳过义务会不会留下可检出的缺席」——044 连续五轮 challenge 都停在这一点上，负向
+  # 用例（缺证据、非枚举值、降范围无留痕）必须每轮都跑，否则触发器会悄悄退化成声称。
+  test_impact_chain_self_adjudication.sh
 )
 
 # Registration self-audit: every sibling test_*.sh must appear in fast_tests or

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_ci_checkout_ref_binding.sh

@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+# The gate lane must be judged on the BRANCH, not on the synthetic merge ref.
+#
+# WHY THIS TEST EXISTS. `impact-chain-gate.rb` partitions history into rounds by
+# walking the branch's own first-parent chain. That flag is load-bearing and
+# pinned by its own fixtures (`test_check_ccl_impact_chain_refscripts.sh`, round
+# scoping 8): it is what collapses a merged worktree round to a single boundary
+# when the ledger append precedes the owner work. Dropping it was tried and
+# turned that fixture red.
+#
+# But the walk assumes the first-parent chain IS the branch's history. On the
+# `refs/pull/N/merge` ref that actions/checkout uses by default for a
+# pull_request event, HEAD is a merge whose first parent is the TARGET, so the
+# walk finds only the merge commit and every round on the branch collapses into
+# one. Rows whose validity depends on their round being narrow then flip red
+# with nothing about them changed — observed on PR #53, where a description-only
+# round lost its locator because a sibling round had edited the same owner's
+# body. The two shapes are topologically identical (both are "merge X into Y
+# where Y is the base"), so the gate cannot tell them apart from git alone; the
+# harness has to hand it the right history instead.
+#
+# Hence: every job that runs a gate lane checks out the branch head. This test
+# fails closed if a job loses that binding, because the symptom otherwise shows
+# up as a confusing gate refusal on an unrelated PR months later.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
+ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd -P)"
+CI="$ROOT/.github/workflows/ci.yml"
+[ -f "$CI" ] || { echo "FAIL: workflow not found: $CI" >&2; exit 1; }
+
+fail() { echo "FAIL: $*" >&2; exit 1; }
+
+# The jobs that run a lane consuming the impact-chain gate. Named explicitly
+# rather than derived: a new gate-running job must be added here deliberately,
+# and a job that stops running gates must be removed deliberately.
+GATE_JOBS="repository-gates regression-fast regression-heavy code-review-regressions-1 code-review-regressions-2"
+
+python3 - "$CI" $GATE_JOBS <<'PY'
+import re, sys
+
+path, jobs = sys.argv[1], sys.argv[2:]
+src = open(path, encoding="utf8").read()
+
+# Split the jobs: mapping stanza at exactly two spaces of indent.
+job_starts = [(m.start(), m.group(1)) for m in re.finditer(r"^  ([A-Za-z0-9_-]+):$", src, re.M)]
+if not job_starts:
+    print("FAIL: no jobs parsed out of the workflow", file=sys.stderr)
+    sys.exit(1)
+bounds = {}
+for i, (pos, name) in enumerate(job_starts):
+    end = job_starts[i + 1][0] if i + 1 < len(job_starts) else len(src)
+    bounds[name] = src[pos:end]
+
+failures = []
+for job in jobs:
+    body = bounds.get(job)
+    if body is None:
+        failures.append(f"{job}: job not present in the workflow (renamed? then update GATE_JOBS)")
+        continue
+    if "actions/checkout" not in body:
+        failures.append(f"{job}: no checkout step")
+        continue
+    if "github.event.pull_request.head.sha" not in body:
+        failures.append(
+            f"{job}: checkout does not pin the branch head — it will run on the "
+            f"refs/pull/N/merge ref, where the impact-chain gate's first-parent "
+            f"round walk runs through the target and collapses every round into one"
+        )
+        continue
+    # A fallback is required too: on `push` there is no pull_request context, and
+    # an empty `ref:` silently checks out the default branch instead of failing.
+    if "github.sha" not in body:
+        failures.append(f"{job}: head-sha pin has no non-PR fallback (`|| github.sha`)")
+        continue
+    if "fetch-depth: 0" not in body:
+        failures.append(f"{job}: no full history, so the gate cannot resolve its base")
+
+if failures:
+    for f in failures:
+        print(f"FAIL: {f}", file=sys.stderr)
+    sys.exit(1)
+PY
+
+echo "test_ci_checkout_ref_binding: ok (gate lanes judge the branch head, not the merge ref)"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_entrypoint_domain_scan_terms.sh

@@ -0,0 +1,123 @@
+#!/usr/bin/env bash
+# Regression test for the entrypoint/reference DOMAIN leak scan inside
+# check-ccl-skills.sh (distinct from generic-r0-leak-scan.sh, which is
+# credential-shaped and has its own suite).
+#
+# Why this exists: that scan's predicate is a list of ANOTHER domain's ordinary
+# vocabulary, so it decays — a term goes stale when the project it proxied for
+# does, and until then it blocks legitimate prose. A term was retired for exactly
+# that reason, and nothing in the repo would have turned red if the retirement
+# had also deleted a live term or the whole scan. This pins both directions.
+#
+# Design: read-only over the real repo (the sibling checker tests' convention).
+#   Leg 1 (wiring)   : the real checker runs the scan and reports it clean here.
+#   Leg 2 (predicate): the retained terms still MATCH — the scan can still fail.
+#   Leg 3 (predicate): the retired term does NOT match — the retirement holds.
+# Legs 2-3 read the pattern out of the real script, so they cannot drift away
+# from what ships; extraction failure is a hard error, never a silent pass.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
+CHECK_SCRIPT="$SCRIPT_DIR/check-ccl-skills.sh"
+# scripts -> skill-extraction-workflow -> skills -> repo root
+ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd -P)"
+[ -f "$CHECK_SCRIPT" ] || { echo "FAIL: check script not found: $CHECK_SCRIPT" >&2; exit 1; }
+[ -d "$ROOT/skills" ] || { echo "FAIL: repo root has no skills/ dir: $ROOT" >&2; exit 1; }
+
+fail() { echo "FAIL: $*" >&2; exit 1; }
+command -v rg >/dev/null 2>&1 || fail "rg not available; the scan under test needs it"
+
+# --- Leg 1: wiring. The scan runs in the real checker and is clean on this tree.
+set +e
+out="$(bash "$CHECK_SCRIPT" "$ROOT" 2>&1)"
+set -e
+case "$out" in
+  *entrypoint_and_reference_domain_scan_ok*) : ;;
+  *) fail "domain scan did not report clean on the real tree; is it still wired?\n$out" ;;
+esac
+
+# --- Extract the shipped pattern (single source of truth: the script itself).
+# lane on an rg built without it, on machines where the checker itself runs fine.
+pattern="$(
+  awk 'index($0, "rg -n \047") > 0 {
+    rest = substr($0, index($0, "rg -n \047") + 7)
+    j = index(rest, "\047 \"$root\""); if (j == 0) next
+    print substr(rest, 1, j - 1); exit
+  }' "$CHECK_SCRIPT"
+)"
+[ -n "$pattern" ] || fail "could not extract the domain-scan pattern from $CHECK_SCRIPT (line shape changed?)"
+
+matches() { # <text> -> rc 0 when the shipped pattern matches
+  printf '%s\n' "$1" | rg -q "$pattern"
+}
+
+# --- Leg 2: the scan can still fail. Every retained term must match.
+#     Written as escapes so this file never carries the literal vocabulary.
+retained=(
+  $'教师' $'学生' $'考试' $'学校'
+  $'阅卷' $'出卷' $'学情'
+)
+for term in "${retained[@]}"; do
+  matches "x ${term} y" || fail "retained domain term no longer matches — the scan was widened/broken, not narrowed"
+done
+# Non-vocabulary alternatives in the same pattern must also still bite.
+matches 'see code.example-host.internal for details' \
+  || fail "host-style leak alternative no longer matches"
+matches 'ref 123456789' || fail "long-digit alternative no longer matches"
+
+# --- Leg 3: the retired term must NOT match, in ordinary prose.
+retired=$'扫描'
+! matches "先跑一遍${retired}再判" \
+  || fail "retired term still blocks ordinary prose; the retirement did not land"
+
+# --- Leg 4: the checker must still FAIL end-to-end on a planted leak.
+#     Legs 1-3 alone cannot see a broken conditional: leg 1 only proves the clean
+#     sentinel prints, legs 2-3 exercise the regex in isolation. Without this leg
+#     an inverted or bypassed failure branch would keep the whole suite green.
+#     Runs against a throwaway --shared clone so the real tree is never written.
+TMP="$(mktemp -d "${TMPDIR:-/tmp}/domscan.XXXXXX")"
+trap 'rm -rf "$TMP"' EXIT
+trap 'exit 130' INT
+trap 'exit 143' TERM
+git clone --shared --quiet "$ROOT" "$TMP/repo" \
+  || fail "could not build the throwaway clone for the end-to-end leg"
+# Control leg on the SAME clone before planting: without it, a removed exit 1
+# plus any unrelated later failure on this clone would still yield non-zero
+# plus the scan's token, and leg 4 would pass on a broken gate.
+set +e
+ctl="$(bash "$CHECK_SCRIPT" "$TMP/repo" 2>&1)"
+ctl_rc=$?
+set -e
+[ "$ctl_rc" -eq 0 ] || fail "clean clone did not pass; leg 4 cannot attribute a failure to the probe\n$ctl"
+case "$ctl" in
+  *entrypoint_and_reference_domain_scan_ok*) : ;;
+  *) fail "clean clone did not report the domain scan clean; attribution unsafe\n$ctl" ;;
+esac
+probe_dir="$TMP/repo/skills/tighten-doc/references"
+[ -d "$probe_dir" ] || fail "clone has no reference dir to plant the probe in: $probe_dir"
+printf '# probe\n\nx %s y\n' "${retained[0]}" > "$probe_dir/_domain_scan_probe.md"
+set +e
+e2e="$(bash "$CHECK_SCRIPT" "$TMP/repo" 2>&1)"
+e2e_rc=$?
+set -e
+[ "$e2e_rc" -ne 0 ] || fail "checker exited 0 with a planted domain leak — the failure branch does not fire"
+case "$e2e" in
+  *entrypoint_or_reference_domain_scan_failed*) : ;;
+  *) fail "planted leak did not raise the domain-scan failure token (something else failed first?)\n$e2e" ;;
+esac
+case "$e2e" in
+  *_domain_scan_probe.md*) : ;;
+  *) fail "failure did not name the planted probe file — attribution is not this leg's scan" ;;
+esac
+# The property worth pinning is NOT "execution stopped at that line" — a black-box
+# test cannot see control flow, and every token-order proxy for it has a hole.
+# It is: a leak in the scanned surface must PREVENT CERTIFICATION. So require the
+# terminal success tokens to be absent; combined with the scan token and the probe
+# filename above, that attributes the withheld certification to this scan.
+case "$e2e" in
+  *ccl_skill_check_ok*|*ccl_skill_check_clean_ok*|*ccl_skill_check_interim_ok*)
+    fail "checker still certified a tree carrying a planted domain leak" ;;
+  *) : ;;
+esac
+
+echo "test_entrypoint_domain_scan_terms: ok"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_gate_dateless_host.sh

@@ -76,8 +76,13 @@ git -C "$REPO" branch fixture-base HEAD
 git -C "$REPO" switch -q -C case-dateless fixture-base
 git -C "$REPO" branch --set-upstream-to=fixture-base case-dateless >/dev/null 2>&1
 perl -0pi -e 's/^(description: .+)$/$1 Fixture dateless trigger clause./m' "$REPO/skills/product-rd-workflow/SKILL.md"
-printf '| Fixture dateless row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#description | `updated` | `product-rd-workflow/SKILL.md` description-only fixture change |\n' \
+printf '| Fixture dateless row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; bank-evidence: downscoped:DATELESS-FIXTURE-NO-BANK; firing-path: file:skills/product-rd-workflow/SKILL.md#description | `updated` | `product-rd-workflow/SKILL.md` description-only fixture change |\n' \
   >> "$REPO/skills/skill-extraction-workflow/references/source-register.md"
+mkdir -p "$REPO/specs/fixture-dateless"
+# 045: a description change owes bank evidence. This fixture exercises host date
+# handling, not routing measurement, so it downscopes the run ON THE RECORD — the
+# token has to exist somewhere a reader reaches, which is the point of the rule.
+printf -- '- Downscope downscoped:DATELESS-FIXTURE-NO-BANK is recorded here; this round must not be read as having measured routing.\n' > "$REPO/specs/fixture-dateless/plan.md"
 git -C "$REPO" add -A
 git -C "$REPO" commit -qm "description-only change with #description row"
 

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_gate_verdict_differential.sh

@@ -335,7 +335,7 @@ run_case() { # <name> <expected-baseline-rc> <expected-token-or-empty> <declare:
   local repo="$TMP/case-$name"
   seed_case "$repo"
   if [ "$declare_row" = yes ]; then
-    printf '| Fixture differential row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#DIFFERENTIAL-CASE | `updated` | `product-rd-workflow/SKILL.md` fixture change |\n' \
+    printf '| Fixture differential row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#DIFFERENTIAL-CASE | `updated` | `product-rd-workflow/SKILL.md` fixture change |\n' \
       >> "$repo/$LEDGER_REL"
   fi
   git -C "$repo" add -A

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_round_attribution.sh

@@ -120,7 +120,7 @@ mutate_owner_rule() { # <repo-dir> <owner-slug> <marker>
 # matching mutate_owner_rule added, and the owner key in the evidence cell.
 append_valid_row() { # <repo-dir> <owner-slug> <marker> <lesson>
   local repo="$1" owner="$2" marker="$3" lesson="$4"
-  printf '| %s | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/%s/SKILL.md#%s | `updated` | `%s/SKILL.md` fixture change |\n' \
+  printf '| %s | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/%s/SKILL.md#%s | `updated` | `%s/SKILL.md` fixture change |\n' \
     "$lesson" "$owner" "$(rule_anchor "$marker")" "$owner" >> "$repo/$LEDGER_REL"
 }
 
@@ -276,7 +276,7 @@ mutate_owner_rule "$L" testing-strategy L2
 # that still merely warns — which is exactly what it must detect.
 append_valid_row "$L" product-rd-workflow L "Fixture first owner row"
 append_valid_row "$L" testing-strategy L2 "Fixture second owner row"
-printf '| Fixture ambiguous row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | `product-rd-workflow/SKILL.md` and `testing-strategy/SKILL.md` both changed and are cited in one row |\n' \
+printf '| Fixture ambiguous row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | `product-rd-workflow/SKILL.md` and `testing-strategy/SKILL.md` both changed and are cited in one row |\n' \
   "$(rule_anchor L)" >> "$L/$LEDGER_REL"
 git -C "$L" add -A
 git -C "$L" commit -qm "round 1: one row citing two changed selected owners"
@@ -310,7 +310,7 @@ git -C "$M" branch fixture-base HEAD
 git -C "$M" switch -q -c case-noncurated
 printf -- '- Rule %s must be recorded before the round lands.\n' "$(rule_anchor M)" \
   >> "$M/skills/worktree-isolation/SKILL.md"
-printf '| Fixture non-curated row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/worktree-isolation/SKILL.md#%s | `updated` | `worktree-isolation/SKILL.md` changed; this skill is not a curated upstream owner |\n' \
+printf '| Fixture non-curated row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/worktree-isolation/SKILL.md#%s | `updated` | `worktree-isolation/SKILL.md` changed; this skill is not a curated upstream owner |\n' \
   "$(rule_anchor M)" >> "$M/$LEDGER_REL"
 git -C "$M" add -A
 git -C "$M" commit -qm "round 1: change a non-curated owner and record it"
@@ -357,7 +357,7 @@ seed_repo "$O"
 git -C "$O" branch fixture-base HEAD
 git -C "$O" switch -q -c case-dotslash
 mutate_owner_rule "$O" product-rd-workflow O
-printf '| Fixture dot-slash row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | see ./skills/product-rd-workflow/references/design-note.md for the rationale |\n' \
+printf '| Fixture dot-slash row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | see ./skills/product-rd-workflow/references/design-note.md for the rationale |\n' \
   "$(rule_anchor O)" >> "$O/$LEDGER_REL"
 git -C "$O" add -A
 git -C "$O" commit -qm "round 1: change the owner, cite it with a ./ prefixed path"
@@ -377,7 +377,7 @@ seed_repo "$O2"
 git -C "$O2" branch fixture-base HEAD
 git -C "$O2" switch -q -c case-rooted
 mutate_owner_rule "$O2" product-rd-workflow O2
-printf '| Fixture rooted-path row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | see /skills/product-rd-workflow/references/design-note.md for the rationale |\n' \
+printf '| Fixture rooted-path row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | see /skills/product-rd-workflow/references/design-note.md for the rationale |\n' \
   "$(rule_anchor O2)" >> "$O2/$LEDGER_REL"
 git -C "$O2" add -A
 git -C "$O2" commit -qm "round 1: change the owner, cite it with a rooted path"
@@ -399,7 +399,7 @@ seed_repo "$O3"
 git -C "$O3" branch fixture-base HEAD
 git -C "$O3" switch -q -c case-remainder
 mutate_owner_rule "$O3" product-rd-workflow O3
-printf '| Fixture remainder row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | rationale in skills/product-rd-workflow/@design.md and skills/product-rd-workflow/设计说明.md |\n' \
+printf '| Fixture remainder row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | rationale in skills/product-rd-workflow/@design.md and skills/product-rd-workflow/设计说明.md |\n' \
   "$(rule_anchor O3)" >> "$O3/$LEDGER_REL"
 git -C "$O3" add -A
 git -C "$O3" commit -qm "round 1: cite the owner with unusual but valid path remainders"
@@ -421,7 +421,7 @@ seed_repo "$O4"
 git -C "$O4" branch fixture-base HEAD
 git -C "$O4" switch -q -c case-relative
 mutate_owner_rule "$O4" product-rd-workflow O4
-printf '| Fixture relative-link row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | rationale in [the design note](../../product-rd-workflow/references/design-note.md) |\n' \
+printf '| Fixture relative-link row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | rationale in [the design note](../../product-rd-workflow/references/design-note.md) |\n' \
   "$(rule_anchor O4)" >> "$O4/$LEDGER_REL"
 git -C "$O4" add -A
 git -C "$O4" commit -qm "round 1: cite the owner through a Markdown-relative link"
@@ -471,7 +471,7 @@ S1="$TMP/leg-s"
 seed_repo "$S1"
 git -C "$S1" branch fixture-base HEAD
 git -C "$S1" switch -q -c case-malformed
-printf '| Fixture smuggled row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#nope | `updated` | rationale in skills/product-rd-workflow/references/note.md, see a|b for the table |\n' \
+printf '| Fixture smuggled row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#nope | `updated` | rationale in skills/product-rd-workflow/references/note.md, see a|b for the table |\n' \
   >> "$S1/$LEDGER_REL"
 git -C "$S1" add -A
 git -C "$S1" commit -qm "round 1: a declaring row for a selected owner with an unescaped pipe"
@@ -504,7 +504,7 @@ S3="$TMP/leg-s3"
 seed_repo "$S3"
 git -C "$S3" branch fixture-base HEAD
 git -C "$S3" switch -q -c case-emptycell
-printf '| Fixture empty-cell row |  | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#nope | `updated` | rationale in skills/product-rd-workflow/references/note.md |\n' \
+printf '| Fixture empty-cell row |  | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#nope | `updated` | rationale in skills/product-rd-workflow/references/note.md |\n' \
   >> "$S3/$LEDGER_REL"
 git -C "$S3" add -A
 git -C "$S3" commit -qm "round 1: a declaring row for a selected owner with an empty cell"
@@ -527,7 +527,7 @@ git -C "$S4" branch fixture-base HEAD
 git -C "$S4" switch -q -c case-corrected
 mutate_owner_rule "$S4" product-rd-workflow S4
 append_valid_row "$S4" product-rd-workflow S4 "Fixture sound row"
-printf '| Fixture to-be-corrected row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | rationale in skills/product-rd-workflow/references/note.md, see a|b |\n' \
+printf '| Fixture to-be-corrected row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#%s | `updated` | rationale in skills/product-rd-workflow/references/note.md, see a|b |\n' \
   "$(rule_anchor S4b)" >> "$S4/$LEDGER_REL"
 git -C "$S4" add -A
 git -C "$S4" commit -qm "round 1: a sound row plus a malformed declaring row"
@@ -550,7 +550,7 @@ S5="$TMP/leg-s5"
 seed_repo "$S5"
 git -C "$S5" branch fixture-base HEAD
 git -C "$S5" switch -q -c case-noleading
-printf 'Fixture no-leading-pipe row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#nope | `updated` | rationale in skills/product-rd-workflow/references/note.md |\n' \
+printf 'Fixture no-leading-pipe row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#nope | `updated` | rationale in skills/product-rd-workflow/references/note.md |\n' \
   >> "$S5/$LEDGER_REL"
 git -C "$S5" add -A
 git -C "$S5" commit -qm "round 1: a declaring row without its leading pipe"
@@ -561,7 +561,7 @@ S6="$TMP/leg-s6"
 seed_repo "$S6"
 git -C "$S6" branch fixture-base HEAD
 git -C "$S6" switch -q -c case-notrailing
-printf '| Fixture no-trailing-pipe row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; firing-path: file:skills/product-rd-workflow/SKILL.md#nope | `updated` | rationale in skills/product-rd-workflow/references/note.md\n' \
+printf '| Fixture no-trailing-pipe row | `downstream-executor` | behavioral-evidence: RED-baseline; observed-failure: yes; result-class: failure; firing-path: file:skills/product-rd-workflow/SKILL.md#nope | `updated` | rationale in skills/product-rd-workflow/references/note.md\n' \
   >> "$S6/$LEDGER_REL"
 git -C "$S6" add -A
 git -C "$S6" commit -qm "round 1: a declaring row without its trailing pipe"