@ccoalm/ccl-skills 0.7.0 → 0.9.0

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_extraction_review_gate.sh

@@ -0,0 +1,336 @@
+#!/usr/bin/env bash
+# Regression for the extraction-specific autonomous review budget wrapper.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd -P)"
+WRAPPER="$SCRIPT_DIR/extraction_review_gate.sh"
+REAL_CONTROLLER="$SCRIPT_DIR/../../code-review/scripts/review_gate.sh"
+REAL_VALIDATOR="$SCRIPT_DIR/validate_extraction_review_state.py"
+ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd -P)"
+[ -x "$WRAPPER" ] || { echo "FAIL: wrapper missing or not executable: $WRAPPER" >&2; exit 1; }
+[ -x "$REAL_CONTROLLER" ] || { echo "FAIL: real controller missing or not executable: $REAL_CONTROLLER" >&2; exit 1; }
+[ -f "$REAL_VALIDATOR" ] || { echo "FAIL: real validator missing: $REAL_VALIDATOR" >&2; exit 1; }
+
+TMP="$(mktemp -d "${TMPDIR:-/tmp}/extraction-review-gate.XXXXXX")"
+trap 'rm -rf "$TMP"' EXIT
+
+fail() { echo "FAIL: $*" >&2; exit 1; }
+assert_rc() { [ "$1" = "$2" ] || fail "expected rc=$2 got rc=$1 ($3)"; }
+assert_contains() { case "$2" in *"$1"*) : ;; *) fail "expected '$1' ($3): $2";; esac; }
+
+mkdir -p "$TMP/skills/skill-extraction-workflow/scripts" "$TMP/skills/code-review/scripts"
+cp "$WRAPPER" "$TMP/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh"
+printf '%s\n' \
+  '#!/usr/bin/env bash' \
+  'printf '\''%s\0'\'' "$@" >"$CAPTURE_PATH"' \
+  'exit "${FAKE_RC:-0}"' >"$TMP/skills/code-review/scripts/review_gate.sh"
+chmod +x "$TMP/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh" "$TMP/skills/code-review/scripts/review_gate.sh"
+
+CAPTURE_PATH="$TMP/args" "$TMP/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh" \
+  --mode review --cwd /synthetic --base base --implementer-family openai
+python3 - "$TMP/args" <<'PY'
+import sys
+from pathlib import Path
+
+args = [item.decode() for item in Path(sys.argv[1]).read_bytes().split(b"\0") if item]
+assert args[:2] == ["--challenge-budget", "2"], args
+assert args.count("--challenge-budget") == 1, args
+PY
+
+# A caller option with a missing operand must not consume the wrapper-owned
+# budget flag. The real controller will reject the missing operand, but only
+# after seeing the fixed extraction budget as its own option/value pair.
+CAPTURE_PATH="$TMP/args" "$TMP/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh" \
+  --mode review --cwd /synthetic --implementer-family openai --base
+python3 - "$TMP/args" <<'PY'
+import sys
+from pathlib import Path
+
+args = [item.decode() for item in Path(sys.argv[1]).read_bytes().split(b"\0") if item]
+assert args[:2] == ["--challenge-budget", "2"], args
+assert args[-1] == "--base", args
+assert args.count("--challenge-budget") == 1, args
+PY
+
+# Exercise the installed wrapper/controller pair without invoking a model. The
+# same real controller defaults to budget 0 when called directly, while the
+# extraction wrapper must make the emitted receipt report budget 2.
+python3 - "$TMP/real-controller.diff" "$TMP/real-controller-plan.json" <<'PY'
+import json
+import sys
+from pathlib import Path
+
+diff_path, plan_path = map(Path, sys.argv[1:])
+diff_path.write_text(
+    "diff --git a/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh "
+    "b/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh\n"
+    "--- a/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh\n"
+    "+++ b/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh\n"
+    "@@ -1 +1 @@\n-old wrapper\n+new wrapper\n",
+    encoding="utf-8",
+)
+conclusions = {
+    "correctness": "The real controller receipt exposes the effective extraction budget.",
+    "safety": "The probe selects only the implementer family and invokes no external reviewer.",
+    "failure_paths": "The no-independent-reviewer boundary remains structured and fail closed.",
+    "tests_evidence": "Direct and wrapped calls provide a differential budget assertion.",
+    "compatibility": "The generic controller default remains zero while extraction fixes two.",
+}
+skills = {
+    "correctness": "skill-extraction-workflow",
+    "safety": "code-review",
+    "failure_paths": "python-service-dev",
+    "tests_evidence": "testing-strategy",
+    "compatibility": "terminal-cli-dev",
+}
+plan = {
+    "intent": "Prove the extraction wrapper and real review controller agree on budget two.",
+    "acceptance": ["The wrapped real-controller receipt reports challenge_budget two."],
+    "self_review": [
+        {
+            "concern": concern,
+            "skill": skills[concern],
+            "conclusion": conclusion,
+            "evidence_refs": ["real-controller-differential"],
+        }
+        for concern, conclusion in conclusions.items()
+    ],
+    "evidence": [
+        {
+            "id": "real-controller-differential",
+            "result": "The same real controller is invoked directly and through the extraction wrapper.",
+        }
+    ],
+}
+plan_path.write_text(json.dumps(plan, indent=2) + "\n", encoding="utf-8")
+PY
+
+real_args=(
+  --mode review --cwd "$ROOT" --diff-file "$TMP/real-controller.diff"
+  --implementer-family openai --review-plan-file "$TMP/real-controller-plan.json"
+  --stage build --review-harness --timeout 5 --total-timeout 5
+)
+# Make a Codex executable visibly available, independent of whichever CLI
+# version the host carries. Because the implementer is OpenAI-family, the real
+# controller must reject Codex as same-family before probing or invoking it.
+mkdir -p "$TMP/fake-bin"
+printf '%s\n' \
+  '#!/usr/bin/env bash' \
+  'printf invoked >"$CODEX_MARKER"' \
+  'exit 99' >"$TMP/fake-bin/codex"
+chmod +x "$TMP/fake-bin/codex"
+set +e
+direct_out="$(CODEX_MARKER="$TMP/codex-invoked" PATH="$TMP/fake-bin:$PATH" \
+  CODE_REVIEW_CLIENT_ORDER=codex bash "$REAL_CONTROLLER" "${real_args[@]}" 2>&1)"
+direct_rc=$?
+wrapped_out="$(CODEX_MARKER="$TMP/codex-invoked" PATH="$TMP/fake-bin:$PATH" \
+  CODE_REVIEW_CLIENT_ORDER=codex "$WRAPPER" "${real_args[@]}" \
+  --review-chain-id extraction-wrapper-real-controller \
+  --autonomous-review-index 1 2>&1)"
+wrapped_rc=$?
+set -e
+assert_rc "$direct_rc" 2 "direct real controller must stop before model inference"
+assert_rc "$wrapped_rc" 2 "wrapped real controller must stop before model inference"
+assert_contains '"reason_code":"no_independent_reviewer_available"' "$direct_out" "direct real-controller boundary"
+assert_contains '"reason_code":"no_independent_reviewer_available"' "$wrapped_out" "wrapped real-controller boundary"
+assert_contains '"challenge_budget":0' "$direct_out" "generic controller default budget"
+assert_contains '"challenge_budget":2' "$wrapped_out" "wrapper-enforced real-controller budget"
+[ ! -e "$TMP/codex-invoked" ] || fail "same-family Codex executable was invoked"
+
+# Join the producer and consumer contracts. First feed the exact real receipt
+# to the validator and reach its semantic status boundary. Then normalize only
+# the terminal disposition fields so validation must walk the producer's real
+# chain/scope shape before stopping at the intentionally omitted base evidence.
+printf '%s\n' "$wrapped_out" >"$TMP/wrapped-real-controller.out"
+python3 - "$TMP/wrapped-real-controller.out" "$TMP" <<'PY'
+import copy
+import hashlib
+import json
+import sys
+from pathlib import Path
+
+output_path = Path(sys.argv[1])
+root = Path(sys.argv[2])
+receipt = None
+for line in reversed(output_path.read_text(encoding="utf-8").splitlines()):
+    try:
+        value = json.loads(line)
+    except json.JSONDecodeError:
+        continue
+    if isinstance(value, dict) and value.get("schema_version") == 3:
+        receipt = value
+        break
+assert receipt is not None
+
+
+def write_receipt_and_ledger(stem, value, controller_state):
+    encoded = (json.dumps(value, ensure_ascii=False, indent=2) + "\n").encode()
+    receipt_name = f"{stem}-receipt.json"
+    (root / receipt_name).write_bytes(encoded)
+    digest = hashlib.sha256(encoded).hexdigest()
+    ledger = {
+        "schema_version": 3,
+        "candidate_sha256": value["candidate_sha256"],
+        "controller_receipts": [
+            {"sequence": 1, "file": receipt_name, "sha256": digest}
+        ],
+        "completion_receipt": None,
+        "base_attestations": [],
+        "autonomous_round": 1,
+        "controller_review_state": controller_state,
+        "finding_classes": [],
+        "unreviewed_delta": [],
+        "closeout_state": "ready_for_human_decision",
+    }
+    (root / f"{stem}-ledger.json").write_text(
+        json.dumps(ledger, ensure_ascii=False, indent=2) + "\n",
+        encoding="utf-8",
+    )
+
+
+write_receipt_and_ledger("real-emitted", receipt, receipt.get("review_state", "inconclusive"))
+normalized = copy.deepcopy(receipt)
+scope_before = json.dumps(normalized["review_scope"], sort_keys=True)
+normalized.update(
+    status="passed",
+    findings=[],
+    review_state="reviewed",
+    human_decision_required=False,
+)
+assert json.dumps(normalized["review_scope"], sort_keys=True) == scope_before
+write_receipt_and_ledger("real-scope", normalized, "reviewed")
+PY
+
+set +e
+emitted_state_out="$(python3 "$REAL_VALIDATOR" "$TMP/real-emitted-ledger.json" 2>&1)"
+emitted_state_rc=$?
+scope_state_out="$(python3 "$REAL_VALIDATOR" "$TMP/real-scope-ledger.json" 2>&1)"
+scope_state_rc=$?
+set -e
+assert_rc "$emitted_state_rc" 1 "exact real receipt reaches semantic status validation"
+assert_contains "must have status passed or findings" "$emitted_state_out" "exact real receipt semantic boundary"
+assert_rc "$scope_state_rc" 1 "producer-derived receipt reaches post-scope validation"
+assert_contains "base_attestations must be a non-empty array" "$scope_state_out" "real producer scope shape"
+
+# Shorter spellings that do not start with --challenge-b are ambiguous among
+# the controller's budget/index/classes options, so they fail closed instead of
+# becoming a hidden budget override.
+for abbreviated in --challeng --challenge=4; do
+  set +e
+  out="$(CODE_REVIEW_CLIENT_ORDER=codex "$WRAPPER" "${real_args[@]}" "$abbreviated" 4 2>&1)"
+  rc=$?
+  set -e
+  assert_rc "$rc" 2 "ambiguous budget abbreviation must fail closed"
+  assert_contains "ambiguous option" "$out" "ambiguous abbreviation reason"
+done
+
+for spelling in --challenge-budget --challenge-budget=4 --challenge-b=4; do
+  : >"$TMP/args"
+  set +e
+  out="$(CAPTURE_PATH="$TMP/args" "$TMP/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh" "$spelling" 4 2>&1)"
+  rc=$?
+  set -e
+  assert_rc "$rc" 2 "caller budget override must be rejected"
+  assert_contains "challenge budget is fixed at 2" "$out" "override reason"
+  [ ! -s "$TMP/args" ] || fail "controller ran after budget override"
+done
+
+set +e
+CAPTURE_PATH="$TMP/args" FAKE_RC=7 "$TMP/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh" \
+  --mode review --cwd /synthetic --base base --implementer-family openai >/dev/null 2>&1
+rc=$?
+set -e
+assert_rc "$rc" 7 "wrapper must preserve controller exit status"
+
+mv "$TMP/skills/code-review/scripts/review_gate.sh" "$TMP/controller-away"
+set +e
+out="$(CAPTURE_PATH="$TMP/args" "$TMP/skills/skill-extraction-workflow/scripts/extraction_review_gate.sh" \
+  --mode review --cwd /synthetic --base base --implementer-family openai 2>&1)"
+rc=$?
+set -e
+assert_rc "$rc" 2 "missing controller must fail closed"
+assert_contains "controller is unavailable" "$out" "missing-controller reason"
+
+# The owner-facing start-here documents must route non-wording extraction work
+# through the fixed-budget wrapper and its terminal validator.  Strict
+# wording-only changes retain the documented single-review exception; they must
+# not be accidentally pulled into the multi-round ledger contract.
+python3 - "$ROOT" <<'PY'
+import re
+import sys
+from pathlib import Path
+
+root = Path(sys.argv[1])
+skill = (root / "skills/skill-extraction-workflow/SKILL.md").read_text(encoding="utf-8")
+quickstart = (
+    root / "skills/skill-extraction-workflow/references/extraction-quickstart.md"
+).read_text(encoding="utf-8")
+dual = (
+    root / "skills/skill-extraction-workflow/references/dual-track-review-gate.md"
+).read_text(encoding="utf-8")
+landing = (
+    root / "skills/skill-extraction-workflow/references/validation-and-landing.md"
+).read_text(encoding="utf-8")
+staged = (
+    root / "skills/code-review/references/staged-review-contract.md"
+).read_text(encoding="utf-8")
+code_review = (root / "skills/code-review/SKILL.md").read_text(encoding="utf-8")
+
+for label, text in {
+    "SKILL": skill,
+    "quickstart": quickstart,
+    "dual-track": dual,
+    "validation-and-landing": landing,
+}.items():
+    assert "scripts/extraction_review_gate.sh" in text, (
+        f"{label} does not route the non-wording lane through the owner wrapper"
+    )
+
+for label, text in {"quickstart": quickstart, "dual-track": dual}.items():
+    assert "scripts/validate_extraction_review_state.py <closeout.json>" in text, (
+        f"{label} omits the terminal closeout validator"
+    )
+
+assert re.search(
+    r"[Nn]on-wording.{0,240}scripts/extraction_review_gate\.sh",
+    skill,
+    re.DOTALL,
+), "SKILL does not scope the fixed-budget wrapper to non-wording changes"
+assert re.search(
+    r"[Ww]ording-only.{0,500}(?:single|one)[- ](?:round|review)",
+    quickstart,
+    re.DOTALL,
+), "quickstart lost the strict wording-only single-review exception"
+for label, text in {
+    "quickstart": quickstart,
+    "dual-track": dual,
+    "validation-and-landing": landing,
+    "code-review": code_review,
+}.items():
+    assert "wording_only_boundary" in text, (
+        f"{label} does not require independent wording-only semantic confirmation"
+    )
+assert "--wording-only-proof-file" in staged
+assert "--challenge-budget 0" in staged
+assert "markdown-punctuation-only" in staged
+assert "markdown-token-replacement" in staged
+assert "opens no challenge chain or `complete` checkpoint" in dual
+assert "codex review --base" not in quickstart
+assert "codex exec adversarial" not in quickstart
+assert "--challenge-budget" not in quickstart, (
+    "quickstart must not let callers override the extraction review budget"
+)
+assert re.search(
+    r"[Rr]ound 2.{0,500}ready_for_human_decision",
+    quickstart,
+    re.DOTALL,
+), "quickstart does not validate an early-clean round-2 terminal checkpoint"
+assert re.search(
+    r"[Rr]ound 3.{0,500}continuation_authorization_required",
+    quickstart,
+    re.DOTALL,
+), "quickstart does not validate the exhausted-budget terminal checkpoint"
+assert "baseline_race" in quickstart
+PY
+
+echo "test_extraction_review_gate: ok"

package/dist/assets/marketplace/plugins/ccl-skills/skills/skill-extraction-workflow/scripts/test_impact_chain_self_adjudication.sh

@@ -60,6 +60,8 @@ git -C "$REPO" commit -qm "seed grammar declaration for the 045 triggers"
 git -C "$REPO" branch -f fixture-base HEAD >/dev/null
 
 OWNER="product-rd-workflow"
+NON_CURATED_OWNER="terminal-cli-dev"
+NON_CURATED_OWNER2="web-react-dev"
 
 new_case() { git -C "$REPO" switch -q -C "$1" fixture-base; }
 commit_case() { git -C "$REPO" add -A >/dev/null; git -C "$REPO" commit -qm "$1"; }
@@ -81,8 +83,8 @@ add_owner_rule() { # <marker>
 # behaviour under test — a rc=1 that looked like the gate working. A SUFFIX is not
 # enough either: the locator counts substring hits, so `…-A1-DESC` still contains
 # `…-A1`. The distinguishing part has to come before the shared stem.
-edit_owner_description() { # <marker>
-  python3 - "$REPO/skills/$OWNER/SKILL.md" "$(anchor "DESC-$1")" <<'PY'
+edit_description_for_owner() { # <owner> <marker>
+  python3 - "$REPO/skills/$1/SKILL.md" "$(anchor "DESC-$2")" <<'PY'
 import io, re, sys
 path, marker = sys.argv[1], sys.argv[2]
 s = io.open(path, encoding="utf-8").read()
@@ -93,6 +95,8 @@ io.open(path, "w", encoding="utf-8").write(s[:m.start(1)] + new_front + s[m.end(
 PY
 }
 
+edit_owner_description() { edit_description_for_owner "$OWNER" "$1"; }
+
 touch_bank() { printf '{"utterance":"fixture %s","expected_owner":"%s"}\n' "$1" "$OWNER" >> "$REPO/$BANK_REL"; }
 
 write_plan() { # <downscope-token or empty>
@@ -126,20 +130,28 @@ run_gate() {
 }
 
 legs_failed=0
-report_leg() { # <leg-name> <expected-rc> <form-summary> [expected-token]
-  local name="$1" want="$2" summary="$3" token="${4:-}"
-  if [ "$rc" != "$want" ]; then
-    echo "  $name: RED (rc=$rc, want $want) — $summary"
-    printf '%s\n' "$out" | sed 's/^/    | /'
+report_leg() { # <leg-name> <expected-rc> <form-summary> [expected-token ...]
+  local name="$1" want="$2" summary="$3" token
+  shift 3
+  if [ "$name" = "A13" ] && ! printf '%s' "$summary" | grep -qF '`-`'; then
+    echo '  A13: RED (summary lost literal `-`)'
     legs_failed=$((legs_failed + 1))
     return
   fi
-  if [ -n "$token" ] && ! printf '%s' "$out" | grep -qF "$token"; then
-    echo "  $name: RED (rc matched but refusal is not '$token') — $summary"
+  if [ "$rc" != "$want" ]; then
+    echo "  $name: RED (rc=$rc, want $want) — $summary"
     printf '%s\n' "$out" | sed 's/^/    | /'
     legs_failed=$((legs_failed + 1))
     return
   fi
+  for token in "$@"; do
+    if [ -n "$token" ] && ! printf '%s' "$out" | grep -qF "$token"; then
+      echo "  $name: RED (rc matched but output is missing '$token') — $summary"
+      printf '%s\n' "$out" | sed 's/^/    | /'
+      legs_failed=$((legs_failed + 1))
+      return
+    fi
+  done
   echo "  ok   $name — $summary"
 }
 
@@ -321,7 +333,7 @@ new_case case-a13; add_owner_rule A13; edit_owner_description A13; write_plan
 append_row A13 'A fixture lesson downscoping with a degenerate token' \
   '; result-class: failure; bank-evidence: downscoped:-'
 commit_case "A13"; run_gate
-report_leg A13 1 "退化 token 不算留痕（`-` 会命中任意 bullet 的连字符）" "$RC_MISSING"
+report_leg A13 1 '退化 token 不算留痕（`-` 会命中任意 bullet 的连字符）' "$RC_MISSING"
 
 # B5 只动 bank 的轮里，声明行同样欠 result-class -> 必须红
 # B 曾按变更 owner 收敛，而 bank-only 的轮没有变更 owner：那行声明行压根不被检查，
@@ -447,6 +459,66 @@ append_row A19 'A fixture lesson deleting the description entry in place' '; res
 commit_case "A19"; run_gate
 report_leg A19 1 "就地删掉 description 也是路由面变更（文件还在，不是删除）" "$RC_MISSING"
 
+# A20 非 curated owner 的 description 改动 + 唯一有效证据 -> 必须通过
+# routing bank 约束所有技能的 description，但这不等于把该技能提升为 impact-chain owner。
+# 行不声明 behavioral-evidence，专门证明 bank owner 解析与 impact-chain owner 解析彼此独立。
+new_case case-a20; edit_description_for_owner "$NON_CURATED_OWNER" A20; write_plan
+printf '| A fixture non-curated routing surface with bank evidence | `downstream-executor` | bank-evidence: file:%s#%s | `updated` | `%s/SKILL.md` fixture change |\n' "$PLAN_REL" "$(anchor BANKEV)" "$NON_CURATED_OWNER" >> "$REPO/$LEDGER_REL"
+commit_case "A20"; run_gate
+report_leg A20 0 "非 curated owner 的唯一 bank 证据可被解析，但不进入 impact-chain"
+
+# A21 非 curated owner 的 description 改动 + 零台账行 -> 必须红
+# 外层入口若只看 curated owner / ledger / bank，这一轮会完全不执行而静默通过。
+new_case case-a21; edit_description_for_owner "$NON_CURATED_OWNER" A21
+commit_case "A21"; run_gate
+report_leg A21 1 "非 curated owner 改 description 且零台账行仍欠 bank 证据" \
+  "$RC_MISSING" "owes bank evidence: $NON_CURATED_OWNER/SKILL.md"
+
+# A22 一行同时绑定两个非 curated owner -> 不能替任一 owner 清偿
+# owner 解析必须保持一行一 owner；否则一个 locator 会把同轮另一个 description 改动也标绿。
+new_case case-a22
+edit_description_for_owner "$NON_CURATED_OWNER" A22A
+edit_description_for_owner "$NON_CURATED_OWNER2" A22B
+write_plan
+printf '| A fixture ambiguous non-curated routing row | `downstream-executor` | bank-evidence: file:%s#%s | `updated` | `%s/SKILL.md` and `%s/SKILL.md` fixture changes |\n' "$PLAN_REL" "$(anchor BANKEV)" "$NON_CURATED_OWNER" "$NON_CURATED_OWNER2" >> "$REPO/$LEDGER_REL"
+commit_case "A22"; run_gate
+report_leg A22 1 "一行不能替两个非 curated owner 清偿 bank 证据" \
+  "$RC_MISSING" \
+  "owes bank evidence: $NON_CURATED_OWNER/SKILL.md" \
+  "owes bank evidence: $NON_CURATED_OWNER2/SKILL.md"
+
+# A23 未知或已删除的 owner 路径在 bank resolver 前就必须被 missing-file 闸拒绝
+# 独立 review 怀疑过滤会把双路径压成唯一 owner；实际调用路径先检查每个精确
+# `<owner>/SKILL.md` 在该轮 head 是否存在，因此拼错/过期路径不能抵达 bank 清偿。
+new_case case-a23; edit_description_for_owner "$NON_CURATED_OWNER" A23; write_plan
+printf '| A fixture routing row with a stale owner alias | `downstream-executor` | bank-evidence: file:%s#%s | `updated` | `%s/SKILL.md` and `fixture-stale-owner/SKILL.md` fixture claims |\n' "$PLAN_REL" "$(anchor BANKEV)" "$NON_CURATED_OWNER" >> "$REPO/$LEDGER_REL"
+commit_case "A23"; run_gate
+report_leg A23 1 "未知 owner 路径在 bank 解析前被 evidence missing-file 闸拒绝" \
+  "impact_chain_evidence_missing_file" "missing: fixture-stale-owner/SKILL.md"
+
+# A24 Node implementation owner 的 description + 外部 bank 证据 -> 必须绿
+SAVED_OWNER="$OWNER"
+OWNER="nodejs-service-dev"
+new_case case-a20; add_owner_rule A24; edit_owner_description A24; write_plan
+append_row A24 'The Node implementation owner carries external bank evidence' \
+  "; result-class: failure; bank-evidence: file:$PLAN_REL#$(anchor BANKEV)"
+commit_case "A24"; run_gate
+report_leg A24 0 "Node implementation owner 的 bank 证据可被 owner-scoped gate 消费"
+OWNER="$SAVED_OWNER"
+
+# A25 存量非 curated 技能改 description：义务存在，且经 bank-only 解析可清偿 -> 必须绿
+# 前一轮曾把 created-surface pickup 限定在 base 不存在的技能，理由是「非 curated 的
+# 义务行无法绑定、红无法清偿」；bank-only resolver 合入后该前提不再成立——本腿钉的
+# 就是「可清偿」这一半：欠债的那一半由 A21 钉（零行必须红）。
+new_case case-a21; add_owner_rule A25; write_plan
+append_row A25 'A curated owner row rides along while an existing non-curated sibling edits its description' \
+  '; result-class: failure'
+SAVED_OWNER="$OWNER"
+OWNER="web-react-dev"; edit_owner_description A25; OWNER="$SAVED_OWNER"
+printf '| A fixture existing non-curated routing surface with bank evidence | `downstream-executor` | bank-evidence: file:%s#%s | `updated` | `web-react-dev/SKILL.md` fixture change |\n' "$PLAN_REL" "$(anchor BANKEV)" >> "$REPO/$LEDGER_REL"
+commit_case "A25"; run_gate
+report_leg A25 0 '存量非 curated owner 的 description 编辑欠 bank 证据且可被 bank-only 行清偿'
+
 echo "impact_chain_self_adjudication: legs_failed=$legs_failed"
 if [ "$legs_failed" -ne 0 ]; then
   echo "impact_chain_self_adjudication_failed=$legs_failed" >&2