@chrono-meta/fh-gate 1.4.89 → 1.4.91

package/templates/.git-hooks/pre-commit

@@ -188,6 +188,40 @@ LIGHT=$(echo "$LIGHT" | grep -vE '^\s*$' || true)
 # boundary, so they run on EVERY commit regardless of what is staged.
 # Body is intentionally NOT indented: it contains heredocs whose terminators must sit at column 0.
 run_universal_guards() {
+# ── Branch-claim guard — «내가 믿는 브랜치 ≠ HEAD» (2026-08-09) ───────────────
+# WHY HERE, WITH THE OTHER UNIVERSAL GUARDS: surface-scoped, not 4-axis-scoped — a commit
+# lands on a branch whether or not an FH asset is staged, so it must run before the
+# "no FH assets → exit 0" path.
+#
+# WHAT IT CATCHES (measured 2026-08-09, two parallel sessions, one checkout):
+#   `.git/HEAD` is one per working tree; session A's `git switch` moves B's ground too.
+#   B had already "cut a branch at the start of work" — that did not prevent it.
+#   Key insight: the judgment key is the SESSION, not the tree. A tree-level claim is
+#   defeated when BOTH sessions follow the protocol (A switches + re-claims → claim==HEAD →
+#   B passes) — i.e. it gets weaker as adoption rises. Per-session records
+#   (.git/fh-claims/<session_id>, keyed on CLAUDE_CODE_SESSION_ID which git hooks inherit)
+#   compare only MY record against HEAD, so peers can never over-block me.
+#
+# NOT A ROOT FIX: it does not block `git switch` (git has no switch hook) and does not
+# protect the uncommitted worktree. Root fix = one worktree per session.
+#
+# DEGRADE: no record · unparseable · detached/rebase/bisect/merge · no LIVE peer session
+#   → PASS. Sole rationale: over-blocking trains the override and kills the gate.
+#   (Deliberately NOT "a commit is reversible" — this incident's recovery went through a
+#   shared-branch history rewrite, which that invariant classes fail-closed.)
+# Anchor: scripts/test_branch_claim_lanes.sh — includes the S-1 regression lane (both
+# sessions protocol-compliant) and controls proving the pass-lanes are not unconditional.
+BCLAIM="$REPO_ROOT/scripts/branch_claim.sh"
+if [ -f "$BCLAIM" ]; then
+  if ! bash "$BCLAIM" check; then
+    FAILED=1
+  fi
+else
+  # 부재를 통과로 렌더하지 않는다 — 이웃 가드(PSA_LIB)는 부재 시 FAIL 인데 여기만 무음이면
+  # «가드가 안 돌았다»와 «가드가 통과했다»가 구분 불가해진다. 차단은 안 한다(과차단 회피).
+  echo "  ⚠️  branch-claim guard NOT INSTALLED (scripts/branch_claim.sh) — skipped, not passed"
+fi
+
 # ── Privacy guard — tracks/ staged-path allowlist (structural, name-free) ─────
 # tracks/** is local-by-default (frozen-seed policy); the only public lanes are
 # tracks/_contrib/** (consent lane) and ALREADY-TRACKED .gitkeep skeleton files.
@@ -338,6 +372,16 @@ else
   GATE_MODE="lightweight"
 fi
 
+# TOCTOU 완화: 앞선 branch-claim check 이후 게이트들이 도는 동안 peer 가 브랜치를 옮길 수
+# 있다. 최종 판정 직전에 한 번 더 돌려 창을 좁힌다. (원자적 close 는 reference-transaction
+# 훅의 몫 — 이건 완화이지 해결이 아니다.)
+if [ -f "$REPO_ROOT/scripts/branch_claim.sh" ]; then
+  if ! bash "$REPO_ROOT/scripts/branch_claim.sh" check; then
+    echo "  ↑ 게이트 실행 중에 브랜치가 옮겨졌다 (TOCTOU 창에서 포착)"
+    FAILED=1
+  fi
+fi
+
 echo ""
 echo "══════════════════════════════════════════════"
 echo " FH 4-Axis Gate — ${GATE_MODE} mode"
@@ -469,6 +513,144 @@ marker_recreate_hint() {
   echo "     printf 'axis2-engine: quench-challenger\\naxis2-model: opus\\nfloor-status: at-floor\\naxis2-evidence: PASS no-S\\n' > \"$1\""
 }
 
+# ── Cross-family leg — typed verdict (see the load-bearing block below for WHY) ──
+# Grammar:  crossfamily: <VALUE>[ — <reason>]
+# VALUE is a closed enum; the three degrade values additionally require a non-vacuous reason
+# on the SAME line (keeping the established one-line marker convention rather than adding a
+# second field). Returns 0 = accepted, 1 = block.
+validate_crossfamily_leg() { # $1 = marker path
+  local m="$1" line val reason fams
+  if [ ! -f "$m" ] || ! grep -qE '^[[:space:]]*crossfamily:[[:space:]]*[^[:space:]]' "$m"; then
+    echo "  ❌ FAIL — load-bearing file staged with no 'crossfamily:' line in the Axes 2-3 marker."
+    echo "     Verdict/gate/irreversible-surface code shares the author's blind spot with a"
+    echo "     same-family reviewer. State the answer, whatever it is — the gate blocks silence:"
+    echo "       crossfamily: panel(codex, gemini) — R1..R4, 16 findings, 15 fixed 1 refuted"
+    echo "       crossfamily: DEGRADED_SINGLE_FAMILY — probed codex/agy/gemini, 0 capable reachable"
+    echo "       crossfamily: DEGRADED_PANEL_UNUSED — codex+agy reachable, not recruited (<why>)"
+    echo "       crossfamily: UNKNOWN — panel not probed this round (<why>)"
+    echo "       crossfamily: declined — operator declined sidecars (UAP), chosen floor"
+    echo "     Append one line to: $m"
+    return 1
+  fi
+  # Duplicate guard (cross-family finding, codex 2026-08-08): a marker is an APPEND-ONLY
+  # file in practice, and `grep -m1` takes the FIRST match — so a later corrected/degraded
+  # value is shadowed by a stale permissive one and the lane reads the wrong verdict. Two
+  # crossfamily lines is an ambiguous marker, not a resolvable one; fail closed rather than
+  # pick a winner, because either choice silently discards a stated verdict.
+  if [ "$(grep -cE '^[[:space:]]*crossfamily:' "$m")" -gt 1 ]; then
+    echo "  ❌ FAIL — marker carries MORE THAN ONE 'crossfamily:' line."
+    grep -nE '^[[:space:]]*crossfamily:' "$m" | sed 's/^/       /'
+    echo "     A later line does not supersede an earlier one here — the reader takes the"
+    echo "     first, so an appended correction would be silently shadowed. Delete the stale"
+    echo "     line and leave exactly one."
+    return 1
+  fi
+  line=$(grep -m1 -E '^[[:space:]]*crossfamily:' "$m" \
+         | sed -E 's/^[[:space:]]*crossfamily:[[:space:]]*//')
+  # Split on the em-dash separator, NOT on first whitespace: a family list legitimately
+  # contains ", " (`panel(codex, gemini)`), and splitting on whitespace truncated it to
+  # `panel(codex,` — a well-formed panel rejected as malformed. An over-block on the
+  # correct shape is the failure that teaches --no-verify, so it is a defect, not strictness.
+  val=$(printf '%s' "$line" | sed -E 's/[[:space:]]*(—|--).*$//' | sed -E 's/[[:space:]]+$//')
+  reason=$(printf '%s' "$line" | sed -E 's/^[^—-]*(—|--)[[:space:]]*//')
+  [ "$reason" = "$line" ] && reason=""
+
+  case "$val" in
+    declined)
+      echo "  ✅ cross-family leg: declined (operator-chosen floor, first-class — not a degrade)" ;;
+    panel*)
+      if ! printf '%s' "$val" | grep -qE '^panel\([^)]+\)$'; then
+        echo "  ❌ FAIL — panel claim without a family list: '$val'"
+        echo "     Write panel(<families>), e.g. panel(codex, gemini). Source the list from"
+        echo "     scripts/sidecar_calibrate.sh's PANEL line rather than recall — that line"
+        echo "     records a pin verified for THIS run."
+        return 1
+      fi
+      fams=$(printf '%s' "$val" | sed -E 's/^panel\(//; s/\)$//')
+      # (a) AUTHOR-FAMILY EXCLUSION. The point of this field is decorrelation; a panel of
+      # the author's own family is a same-family pass wearing a panel label — the exact
+      # substitution the load-bearing block exists to forbid. FH's governor is Claude.
+      if printf '%s' "$fams" | grep -qiE '(^|[,[:space:]])(claude|opus|sonnet|haiku|fable)'; then
+        echo "  ❌ FAIL — panel names the AUTHOR'S OWN family: '$fams'"
+        echo "     A Claude-family auditor shares the governor's blind spots, so it is not"
+        echo "     decorrelation. If that is genuinely all that was reachable, the honest value"
+        echo "     is DEGRADED_SINGLE_FAMILY with a reason — not a panel claim."
+        return 1
+      fi
+      # (b) INELIGIBLE-FIRST. Tokens overlap: GLM-OCR matches both `ocr` and `glm`,
+      # Qwen3-Embedding matches both `embed` and `qwen`. Test capability-eligibility first
+      # and both pass silently (pmh-dev #41 design decision 3, anchored there and here).
+      if printf '%s' "$fams" | grep -qiE 'embed|rerank|[^a-z]rank|ocr|safeguard|moderat|classif|whisper|dall-e|-rm([^a-z]|$)|bge-|voyage|gte-|minilm'; then
+        echo "  ❌ FAIL — panel names a review-INCAPABLE member: '$fams'"
+        echo "     Embedding / reranker / reward-model / moderation / OCR / speech classes emit"
+        echo "     vectors, scores or labels — they cannot return an adversarial finding, so"
+        echo "     counting them inflates BOTH panel size and family-diversity. If nothing capable"
+        echo "     remains, the honest value is DEGRADED_SINGLE_FAMILY with a reason."
+        return 1
+      fi
+      # (c) DEFAULT DENY on unknown families (pmh-dev #41 design decision 1: unmeasured is
+      # not eligible). A denylist alone cannot know `voyage-3` or `armorm` are not reviewers,
+      # so an unrecognised token is UNDECIDABLE, never assumed capable. Matching is by FAMILY
+      # PATTERN, not id enumeration (#41 decision 2), so a new build of a known family passes
+      # without rewiring — which is the reason the CLI route was chosen at all.
+      local unknown="" tok
+      for tok in $(printf '%s' "$fams" | tr ',' ' '); do
+        printf '%s' "$tok" | grep -qiE 'codex|gpt|openai|o[0-9]|gemini|agy|antigravity|glm|qwen|deepseek|mistral|llama|grok|command-|cohere|kimi|copilot|ollama|phi-|yi-' \
+          || unknown="${unknown:+$unknown }$tok"
+      done
+      if [ -n "$unknown" ]; then
+        echo "  ❌ FAIL — panel names unrecognised family/families: '$unknown'"
+        echo "     Default-deny: an unrecognised token is UNDECIDABLE, not capable — that is how"
+        echo "     'panel(none)' and 'panel(unprobed)' would otherwise launder a non-run into a"
+        echo "     pass. Either use the family pattern this runtime belongs to, or add the"
+        echo "     pattern here in the same commit that first uses it."
+        return 1
+      fi
+      echo "  ✅ cross-family leg: $val${reason:+ — $(printf '%s' "$reason" | cut -c1-60)}" ;;
+    DEGRADED_SINGLE_FAMILY|DEGRADED_PANEL_UNUSED|UNKNOWN)
+      # A degrade is allowed; being silent about WHICH degrade, or about its grounds, is not.
+      # Two conditions, because either alone is porous: enough substance to be a statement
+      # (length) AND a token naming what was actually looked at.
+      if [ "${#reason}" -lt 20 ] \
+         || ! printf '%s' "$reason" | grep -qiE 'prob(e|ed|ing)|reachab|unreach|not reachable|0 |none reachable|empty|absent|declin|consent|codex|gemini|agy|copilot|gateway|cli|panel|scope|budget|offline'; then
+        echo "  ❌ FAIL — $val without substantive grounds on the same line."
+        case "$val" in
+          UNKNOWN) echo "     UNKNOWN = the panel was never probed. Undecidable, not zero." ;;
+          DEGRADED_SINGLE_FAMILY) echo "     = probed, nothing CAPABLE reachable (a constraint)." ;;
+          DEGRADED_PANEL_UNUSED) echo "     = a capable panel WAS reachable and was not recruited (a choice)." ;;
+        esac
+        echo "     Name what you probed and what came back — the defect this field exists for"
+        echo "     was a line that announced a state without naming its grounds:"
+        echo "       crossfamily: $val — probed codex/agy/gemini, <what came back>"
+        return 1
+      fi
+      echo "  ⚠️  cross-family leg: $val — recorded, not silent (weekly audit re-queues these)"
+      echo "     $(printf '%s' "$reason" | cut -c1-80)" ;;
+    single-family|none|none-this-round|N/A|n/a)
+      # `single-family` is deliberately NOT accepted HERE. This block runs only on
+      # load-bearing changes, where "decorrelation not required" is a contradiction — and
+      # as a no-ack, no-warning pass it was a free bypass of the whole lane (any degrade
+      # could take this exit instead of DEGRADED_*). `none` is worse: it merges three states.
+      echo "  ❌ FAIL — '$val' is not an accepted value on a LOAD-BEARING change."
+      echo "     This block only runs when gate/verdict/irreversible-surface code is staged, so"
+      echo "     'decorrelation not required' does not apply — and a no-ack pass here would let"
+      echo "     any degrade take this exit instead of naming itself. Say which state holds:"
+      echo "       DEGRADED_SINGLE_FAMILY  probed, nothing capable reachable   (could not)"
+      echo "       DEGRADED_PANEL_UNUSED   panel reachable, not recruited      (did not)"
+      echo "       UNKNOWN                 never probed                        (did not look)"
+      echo "       declined                operator declined sidecars          (chosen floor)"
+      return 1 ;;
+    *)
+      echo "  ❌ FAIL — invalid crossfamily value: '$val'"
+      echo "     Allowed: panel(<families>) | declined |"
+      echo "              DEGRADED_SINGLE_FAMILY | DEGRADED_PANEL_UNUSED | UNKNOWN"
+      echo "     Free prose is rejected on purpose: a prose verdict cannot be consumed by a gate,"
+      echo "     and a later session cites it as though it were measured. That has happened."
+      return 1 ;;
+  esac
+  return 0
+}
+
 validate_marker_floor() {
   local m="$1" fs model
   # Leading whitespace tolerated on field lines (defense-in-depth vs indented writes).
@@ -801,9 +983,28 @@ fi
 #   the Surface-Class Degrade Invariant the fail-closed leg of this gate belongs at the MERGE boundary,
 #   not here; forcing a sidecar dispatch per commit would over-block and train the escape into reflex.
 #   It DOES forbid being SILENT about it. The marker must carry a `crossfamily:` line — either naming
-#   the engine and its verdict, or explicitly recording `none` with a reason. Same shape as the existing
-#   below-floor-ack: the gate blocks on an unstated answer, never on the answer itself. Non-vacuity is
-#   the marker's job; provenance is not (a fabricated line is the weekly-audit residual, as elsewhere).
+#   the engine and its verdict, or explicitly recording the degrade with a reason. Same shape as the
+#   existing below-floor-ack: the gate blocks on an unstated answer, never on the answer itself.
+#   Non-vacuity is the marker's job; provenance is not (a fabricated line is the weekly-audit residual).
+#
+# ── TYPED (2026-08-08) — why presence-only was not enough ─────────────────────────────────────
+# The original check accepted any non-empty value, so the answer was FREE PROSE. That is how a
+# false one got in: a sibling harness's marker recorded `crossfamily: none this round — 도달 불가`
+# (unreachable), the claim was later found FALSE, and a subsequent session CITED it as grounds.
+# A prose verdict laundered itself into evidence — the failure `[[feedback_typed_verdict_channel]]`
+# names. Presence-checking catches silence; it cannot catch a confident wrong answer.
+#
+# The load-bearing split is that `none` is THREE different states, and merging them hides a
+# different thing each time:
+#   DEGRADED_SINGLE_FAMILY   probed, nothing CAPABLE reachable   — could not
+#   DEGRADED_PANEL_UNUSED    panel reachable, not recruited      — did not   (a choice, not a limit)
+#   UNKNOWN                  never probed                        — did not look
+# `UNKNOWN` collapsed into `none` renders an unrun probe as a zero finding (not-found-is-not-zero).
+# `DEGRADED_PANEL_UNUSED` collapsed into it renders an unused panel as an unavailable one — the
+# distinction a sibling harness stated about itself in its own words: "못 한 것이 아니라 안 한 것이다".
+#
+# Scope is unchanged: still load-bearing-only, still reversible-surface (blocks the unstated answer,
+# never demands a dispatch). Only the ANSWER is now typed. Fixtures: scripts/test_marker_crossfamily_lanes.sh
 # The degrade lint runs as an ADVISORY pre-screen, per its own doctrine (FP-tolerant, never a solo block).
 LOADBEARING=$(printf '%s\n%s\n' "$GATE_IMPL" "$UGUARD_IMPL" | grep -v '^[[:space:]]*$' | sort -u || true)
 if [ -n "$LOADBEARING" ]; then
@@ -823,18 +1024,101 @@ if [ -n "$LOADBEARING" ]; then
     echo "  ⚠️  degrade lint unavailable (scripts/degrade_direction_scan.sh missing) — advisory leg skipped"
   fi
   MARKER_LB="$REPO_ROOT/tracks/_meta/.axes_23_passed_${BRANCH_SLUG}_${TODAY}.marker"
-  if [ -f "$MARKER_LB" ] && grep -qE '^[[:space:]]*crossfamily:[[:space:]]*[^[:space:]]' "$MARKER_LB"; then
-    echo "  ✅ cross-family leg recorded: $(grep -m1 -E '^[[:space:]]*crossfamily:' "$MARKER_LB" | cut -c1-90)"
-  else
-    echo "  ❌ FAIL — load-bearing file staged with no 'crossfamily:' line in the Axes 2-3 marker."
-    echo "     Verdict/gate/irreversible-surface code shares the author's blind spot with a same-family"
-    echo "     reviewer. State the answer, whatever it is — the gate blocks silence, not a 'none':"
-    echo "       crossfamily: codex/gpt-5.5 — R1..R4, 16 findings, 15 fixed 1 refuted, CONVERGED"
-    echo "       crossfamily: none — <why no different-family auditor was reachable/needed>"
-    echo "     Append one line to: $MARKER_LB"
-    FAILED=1
+  if validate_crossfamily_leg "$MARKER_LB"; then :; else FAILED=1; fi
+fi
+
+# ── staged-blob materializer (advisory linters) ───────────────────────────────
+# 두 advisory 린터는 파일을 직접 grep/sed 한다. 워킹트리 경로를 넘기면 **커밋되는 내용이 아니라
+# 지금 디스크에 있는 내용**을 재게 된다 — 스테이징 후 워킹트리에서 고치면 훅은 깨끗하다 보고하고
+# 문제 있는 blob 이 커밋된다(high 리뷰 #6, 낙관 방향 fail-open). 이 훅의 다른 슬라이스는 전부
+# `git diff --cached` / `git show :file` 로 추론한다. 여기만 예외였다.
+_stage_blob() {   # $1=repo-relative path → echoes temp file holding the STAGED content
+  local _p="$1" _t
+  _t="$(mktemp "${TMPDIR:-/tmp}/fh_staged.XXXXXX")" || return 1
+  if git -C "$REPO_ROOT" show ":$_p" > "$_t" 2>/dev/null; then printf '%s' "$_t"
+  else rm -f "$_t"; return 1; fi
+}
+_STAGE_TMPS=()
+_STAGE_MAP=()      # "tmpfile=repopath" — 보고를 사람이 읽을 수 있게 되돌리는 데 쓴다
+# 히트를 익명 mktemp 경로로 인쇄하면, 그 파일은 _stage_cleanup 이 곧 지워서 **읽는 순간 이미 없다**.
+# 대상이 둘 이상이면 어느 파일 얘긴지 귀속조차 안 된다. advisory 의 목적은 사람을 그 줄로 보내는 것이다.
+_unmap() { local _o="$1" _m; for _m in "${_STAGE_MAP[@]:-}"; do
+    [ -n "$_m" ] && _o="${_o//${_m%%=*}/${_m#*=}}"; done; printf '%s' "$_o"; }
+_stage_cleanup() { [ "${#_STAGE_TMPS[@]}" -gt 0 ] && rm -f "${_STAGE_TMPS[@]}" 2>/dev/null; }
+
+# ── Judgment-circuit lint (advisory — the PROMPT-layer sibling of the degrade lint above) ─────
+# Same proposition, different corpus: degrade_direction_scan reads .py/.sh verdict code and skips
+# .md by construction, so identity/circuit DOCUMENTS had no instrument at all. Measured basis
+# (105 runs, 2026-08-07~08): role-assignment ("너는 ~이다") is a net loss on the weak tier and
+# intensity orders ("꼼꼼히") multiply phantoms 3.1x — both are prose granting discretion with an
+# unconstrained degrade direction, the doctrine's prompt-layer form.
+#
+# Trigger is an EXPLICIT REGISTRY, not a guess: `.claude/judgment_circuits.txt` (one path per line).
+# Which documents are judgment circuits is a decision someone makes, not something a glob infers —
+# an inferred trigger here would fire on every .md and get itself disabled.
+# ADVISORY by construction: grep-heuristic, false positives expected, never blocks a commit.
+JC_REG="$REPO_ROOT/.claude/judgment_circuits.txt"
+JC_LINT="$REPO_ROOT/scripts/judgment_circuit_lint.sh"
+if [ -f "$JC_REG" ] && [ -f "$JC_LINT" ]; then
+  # Array, not a space-joined string: a tracked path CAN contain a space, and the string form
+  # silently splits `docs/first known.md` into two nonexistent args (cross-family, 2026-08-08).
+  _jc_targets=()
+  while IFS= read -r _jc_line; do
+    case "$_jc_line" in ''|'#'*) continue ;; esac
+    if printf '%s\n' "$STAGED" | grep -qxF "$_jc_line" 2>/dev/null; then
+      _b="$(_stage_blob "$_jc_line")" && { _jc_targets+=("$_b"); _STAGE_TMPS+=("$_b"); _STAGE_MAP+=("$_b=$_jc_line"); }
+    fi
+  done < "$JC_REG"
+  if [ "${#_jc_targets[@]}" -gt 0 ]; then
+    echo "[Gate] registered judgment-circuit doc staged — circuit lint (advisory)..."
+    _jc_out="$(bash "$JC_LINT" "${_jc_targets[@]}" 2>&1)"; _jc_rc=$?
+    printf '%s\n' "$(_unmap "$_jc_out")" | sed 's/^/  /'
+    echo "  (경로는 스테이징 blob 을 레포 경로로 되돌려 표기했다 — 줄번호는 staged 내용 기준)"
+    # exit 10 = the scanner's own HARNESS-ERROR (bad input / unreadable target). Neither PASS nor
+    # FAIL — surfacing it is the whole point of having a typed exit; swallowing it would render a
+    # dead instrument as a clean run.
+    [ "$_jc_rc" = "10" ] && echo "  🟥 circuit lint HARNESS-ERROR (rc=10) — instrument did not measure"
+    echo "  (advisory — does not block. A hit means 'prove this is a circuit, not a persona'.)"
+  fi
+fi
+
+# ── Novelty-claim ledger (advisory) ───────────────────────────────────────────
+# "Ask the world before asserting novelty" is an INTENT trigger — un-hookable, like the
+# repo-go-public surface. So this does not force the asking; it makes NOT having asked visible
+# at commit time (shift-left ledger, not one more rule: the rule already existed and still failed).
+# Direction matters: defect claims (FAIL) have long required source-grounding while novelty/strength
+# claims (PASS) passed unchecked — the optimistic direction is the one that leaks. And an absence
+# claim is structurally worse: with nothing cited, phantom-detection cannot engage at all.
+# Scope = the same substantive doc surface the 4-axis carve-out already treats as claim-bearing.
+NC_CHECK="$REPO_ROOT/scripts/novelty_claim_check.sh"
+if [ -f "$NC_CHECK" ]; then
+  _nc_targets=()
+  while IFS= read -r _nc_line; do
+    _b="$(_stage_blob "$_nc_line")" && { _nc_targets+=("$_b"); _STAGE_TMPS+=("$_b"); _STAGE_MAP+=("$_b=$_nc_line"); }
+  done < <(printf '%s\n' "$STAGED" | grep -E '^(knowledge/|docs/).*\.md$' || true)
+  if [ "${#_nc_targets[@]}" -gt 0 ]; then
+    _nc_raw=$(bash "$NC_CHECK" "${_nc_targets[@]}" 2>&1); _nc_rc=$?
+    # Same typed-exit rule as above: rc=10 is a dead instrument, not a clean corpus.
+    [ "$_nc_rc" = "10" ] && echo "  🟥 novelty check HARNESS-ERROR (rc=10) — instrument did not measure"
+    _nc_raw="$(_unmap "$_nc_raw")"
+    # 부분 미스캔 경고를 **같이** 건진다. 호출부가 `🟥 무앵커` 만 grep 해서, 스크립트가 옳게 낸
+    # "전수 스캔이 아니다" 를 통째로 버렸다 — 수리가 스크립트 안으로 옮겨졌을 뿐 이 표면에선
+    # 미스캔 문서가 여전히 깨끗한 문서와 구분 불가였다(high 재리뷰 #5).
+    _nc_warn=$(printf '%s\n' "$_nc_raw" | grep -F '전수 스캔이 아니다' | head -3 || true)
+    if [ -n "$_nc_warn" ]; then
+      echo "[Gate] novelty check: 부분 미스캔 (advisory):"
+      printf '%s\n' "$_nc_warn" | sed 's/^/  /'
+      echo "  → 이 문서는 전수 스캔이 아니다. 제외된 줄에 실제 주장이 있을 수 있다."
+    fi
+    _nc_out=$(printf '%s\n' "$_nc_raw" | grep -E '🟥 무앵커' | head -5 || true)
+    if [ -n "$_nc_out" ]; then
+      echo "[Gate] novelty/absence claim without an external anchor (advisory):"
+      printf '%s\n' "$_nc_out" | sed 's/^/  /'
+      echo "  Each = 'you asserted this about the world without asking it'. Does not block."
+    fi
   fi
 fi
+_stage_cleanup
 
 # SKILL.md ONLY here, deliberately (2026-07-26): the 07-26 sweep widened `SKILL\.md` →
 # `SKILL(_detail)?\.md` in the HEAVY and doc-coupling terms above, but NOT here. This slice asks

package/templates/settings.Compaction.snippet.json

@@ -0,0 +1,56 @@
+{
+  "_README": [
+    "Compaction hook snippet — TRACKED, so it arrives with a clone. Every .claude/settings*.json path",
+    "in this repo is gitignored (confirm with `git check-ignore -v .claude/settings.json`), so the hook",
+    "registration itself cannot be tracked. This is the tracked SOURCE that install-wizard merges into",
+    "the user's local settings. Without the merge step the hooks do not run — shipping the script is not",
+    "the same proposition as wiring it.",
+    "",
+    "What it does: seals a POINTER ledger of what the session holds just BEFORE compaction, then",
+    "re-injects it once on the next prompt. FH's structural advantage over generic compaction memory is",
+    "that the originals are already on disk — what compaction destroys is not the context but the",
+    "pointers to it, and a pointer is cheap to restore.",
+    "",
+    "Why the second hook is UserPromptSubmit and not PostCompact — this is a MEASURED constraint, not a",
+    "style choice: PostCompact does NOT support `additionalContext` (official hooks reference, verified",
+    "2026-08-08), so a PostCompact hook physically cannot put anything back into the session. It can only",
+    "write files. UserPromptSubmit is one of the three events whose exit-0 stdout becomes context Claude",
+    "can read. Wiring the re-injection to PostCompact would install a hook that runs and changes nothing.",
+    "",
+    "Both entries carry NO private path, so both belong in .claude/settings.json (project-local).",
+    "Merge, do not overwrite: preserve any PreCompact / UserPromptSubmit entries the user already has;",
+    "replace only the FH ones, keyed by script name.",
+    "",
+    "Never blocks: PreCompact CAN block compaction (exit 2) and this deliberately does not — compaction",
+    "is a reversible surface, and a gate that fires in the user's way is a gate that gets switched off.",
+    "The script always exits 0 for the same reason a non-zero hook exit discards its own stdout."
+  ],
+  "project_settings_json": {
+    "hooks": {
+      "PreCompact": [
+        {
+          "matcher": "",
+          "hooks": [
+            {
+              "type": "command",
+              "command": "bash -c 'HUB=\"${CLAUDE_PROJECT_DIR:-$HOME/projects/forge-harness}\"; bash \"$HUB/scripts/compaction_probe.sh\" seal; exit 0'",
+              "timeout": 15
+            }
+          ]
+        }
+      ],
+      "UserPromptSubmit": [
+        {
+          "matcher": "",
+          "hooks": [
+            {
+              "type": "command",
+              "command": "bash -c 'HUB=\"${CLAUDE_PROJECT_DIR:-$HOME/projects/forge-harness}\"; bash \"$HUB/scripts/compaction_probe.sh\" digest; exit 0'",
+              "timeout": 10
+            }
+          ]
+        }
+      ]
+    }
+  }
+}

package/templates/settings.FieldCanon.snippet.json

@@ -0,0 +1,51 @@
+{
+  "_README": [
+    "field-canon 선적재 훅 스니펫 — TRACKED 라 clone 과 함께 도착한다. 이 레포의 모든",
+    ".claude/settings*.json 경로는 gitignored 이므로(`git check-ignore -v .claude/settings.json` 으로",
+    "확인) **훅 등록 자체를 tracked 로 둘 수 없다.** 이것이 install-wizard 가 사용자 로컬 설정에",
+    "머지하는 tracked SOURCE 다. 머지 단계가 없으면 훅은 돌지 않는다 —",
+    "**스크립트를 출하하는 것과 배선하는 것은 같은 명제가 아니다.**",
+    "",
+    "이 파일이 왜 뒤늦게 생겼나 (2026-08-09 실측, 컨트롤 동반):",
+    "  PR #299 가 scripts/field_canon_preload.sh 를 심으면서 스니펫도 files[] 등재도 안 했다.",
+    "    npm pack --dry-run | grep field_canon   →  0건",
+    "    CONTROL  같은 명령 | grep compaction_probe →  1건   (계기 생존)",
+    "  즉 npm 사용자에게는 **스크립트도 배선도 아무것도 가지 않았다.** git clone 사용자는",
+    "  스크립트는 받지만 배선이 없어 훅이 안 돈다. 위 Compaction 스니펫의 _README 가 이미",
+    "  같은 문장을 적어놨는데 #299 가 그걸 안 따랐다 — 산문 규율의 한계이자, 이 스니펫이",
+    "  그 규율을 파일로 바꾸는 이유다.",
+    "",
+    "무엇을 하나: 프롬프트에 **매핑된 필드 하네스 이름**이 나오면 그 레포의 정본 경로",
+    "(README · CLAUDE.md · docs/governance/)를 **세션당 1회** 띄운다. 코드 역추론 전에 정본을",
+    "읽게 하는 것이 목적이다. 2026-08-09 실측: 한 세션이 종일 qasp 를 파면서 정본을 하나도",
+    "안 읽고 코드에서 역추론해 **네 번 정정당했고 자력 적발 0** 이었다 — 네 번 다 답이",
+    "정본에 있었고 그중 하나는 README 가 그 오해를 경고까지 하고 있었다.",
+    "",
+    "🟥 부재를 침묵으로 렌더하지 않는다. 초판 배선은 `[ -f \"$S\" ] && bash \"$S\"` 였는데,",
+    "그러면 **「이 install 에 파일이 없는 게 정상」과 「체크아웃이 옛날 컷 브랜치라 파일이",
+    "사라진 상태」가 구분되지 않는다.** 공유 체크아웃에서 후자가 실제로 반복 발생했고",
+    "(하루 6회 브랜치 이동), 그동안 훅은 exit 0 · 출력 0줄로 조용히 꺼져 있었다.",
+    "그래서 else 가지에서 **한 줄 경보**를 낸다 — 차단은 하지 않는다(UserPromptSubmit 은",
+    "차단 표면이 아니고, 사용자 앞을 막는 게이트는 꺼지는 게이트다).",
+    "",
+    "PRIVATE PATH 없음 → .claude/settings.json(프로젝트 로컬)에 속한다.",
+    "머지하되 덮어쓰지 마라: 사용자의 기존 UserPromptSubmit 엔트리를 보존하고 **스크립트",
+    "이름을 키로** FH 것만 교체해라."
+  ],
+  "project_settings_json": {
+    "hooks": {
+      "UserPromptSubmit": [
+        {
+          "matcher": "",
+          "hooks": [
+            {
+              "type": "command",
+              "command": "bash -c 'HUB=\"${CLAUDE_PROJECT_DIR:-$HOME/projects/forge-harness}\"; S=\"$HUB/scripts/field_canon_preload.sh\"; if [ -f \"$S\" ]; then bash \"$S\"; else echo \"\"; echo \"⚠️ [field-canon] 선적재 훅 스크립트가 없다 — 이 체크아웃이 옛날 컷 브랜치이거나 설치가 불완전할 수 있다.\"; echo \"   필드 하네스 정본 안내가 **꺼져 있다**. git log --oneline -1 로 브랜치를 확인해라.\"; fi; exit 0'",
+              "timeout": 10
+            }
+          ]
+        }
+      ]
+    }
+  }
+}