@chrono-meta/fh-gate 2.15.0 → 3.0.0

package/scripts/test_revert_probe_lanes.sh

@@ -0,0 +1,146 @@
+#!/usr/bin/env bash
+# test_revert_probe_lanes.sh — known-pair calibration for scripts/revert_probe.sh
+#
+# WHY THESE LANES. revert_probe.sh exists to replace 15+ hand-written revert-and-observe scripts
+# with one generic tool. The two failure modes that would make it worse than the hand-rolled
+# scripts it replaces are exactly the two known-pair lanes below:
+#   L1  DECORATIVE anchor — a suite whose lanes never actually depend on the target file's content
+#       must be reported as decorative (exit 1), not silently scored as "passed".
+#   L2  REAL anchor        — the mirror-image known-positive: a suite that DOES catch the revert
+#       must report the exact flipped lane and exit 0. Without this half, L1 proves nothing
+#       ([[feedback_control_presence_is_not_discrimination]]).
+#   L3  RESTORE GUARANTEED — the target file must come back byte-identical after the probe, in
+#       BOTH the normal-completion path and the harness-error path (suite crashes / produces no
+#       parseable output). A revert tool that leaves the baseline content sitting in the working
+#       tree on the failure path is strictly worse than not having the tool.
+#   L4+ usage guards, harness-error detection, and the git-show (not git-checkout) restore path.
+#
+# Fixtures are throwaway git repos + throwaway suite scripts, never this repo's own assets — a
+# lane suite that references a repo-specific path fails on a fresh clone (portability_lint P9).
+#
+# Usage: bash scripts/test_revert_probe_lanes.sh
+
+set -uo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+SUT="${FH_REVERT_PROBE_BIN:-$ROOT/scripts/revert_probe.sh}"
+pass=0; fail=0
+ok()  { printf '  ✅ %s\n' "$1"; pass=$((pass+1)); }
+no()  { printf '  ❌ %s\n' "$1"; fail=$((fail+1)); }
+
+if [ ! -f "$SUT" ]; then
+  echo "FAIL  test_revert_probe_lanes.sh: subject absent ($SUT) — skipped is not passed"
+  exit 1
+fi
+
+WORKROOT="$(mktemp -d "${TMPDIR:-/tmp}/revertlane-XXXXXX")"
+trap 'rm -rf "$WORKROOT"' EXIT
+
+# ── throwaway repo: commit 1 = baseline (missing the fix) · commit 2/HEAD = current (has the fix)
+SRC="$WORKROOT/src"; mkdir -p "$SRC"
+(
+  cd "$SRC" && git init -q . && git config user.email l@l && git config user.name l
+  printf 'value = old_and_broken\n' > guard.txt
+  git add guard.txt && git commit -qm "baseline (no fix)"
+  printf 'value = MARKER_OK\n' > guard.txt
+  git add guard.txt && git commit -qm "current (has the fix)"
+) >/dev/null 2>&1
+TARGET="$SRC/guard.txt"
+TARGET_SHA_BEFORE() { shasum -a 256 "$TARGET" 2>/dev/null | awk '{print $1}'; }
+
+# ── fixture suites ──────────────────────────────────────────────────────────────────────────
+# REAL anchor: the lane's pass/fail genuinely depends on the target file's content.
+REAL_SUITE="$WORKROOT/real_suite.sh"
+cat > "$REAL_SUITE" <<'EOF'
+#!/usr/bin/env bash
+if grep -q MARKER_OK "$FIXTURE_TARGET" 2>/dev/null; then
+  printf '  %s %s\n' "✅" "marker present in guard.txt"
+else
+  printf '  %s %s\n' "❌" "marker present in guard.txt"
+fi
+exit 0
+EOF
+chmod +x "$REAL_SUITE"
+
+# DECORATIVE anchor: always ✅, never actually reads the target file.
+DECO_SUITE="$WORKROOT/deco_suite.sh"
+cat > "$DECO_SUITE" <<'EOF'
+#!/usr/bin/env bash
+printf '  %s %s\n' "✅" "unrelated check that never reads guard.txt"
+exit 0
+EOF
+chmod +x "$DECO_SUITE"
+
+# HARNESS-ERROR suite: crashes before printing any ✅/❌ line at all.
+CRASH_SUITE="$WORKROOT/crash_suite.sh"
+cat > "$CRASH_SUITE" <<'EOF'
+#!/usr/bin/env bash
+echo "no verdict lines here, just noise" >&2
+exit 1
+EOF
+chmod +x "$CRASH_SUITE"
+
+echo "── revert_probe known-pair lanes ──────────────────────────────────"
+
+# L1 — DECORATIVE anchor → exit 1, 0 flipped lanes
+BEFORE1="$(TARGET_SHA_BEFORE)"
+OUT1=$(FIXTURE_TARGET="$TARGET" bash "$SUT" "$TARGET" "$DECO_SUITE" --baseline HEAD~1 2>&1); RC1=$?
+[ "$RC1" -eq 1 ] && ok "L1 decorative anchor → exit 1" || no "L1 decorative anchor: rc=$RC1 (want 1)"
+printf '%s' "$OUT1" | grep -q "되돌린 레인 (✅→❌, 앵커가 실제로 잡은 것): 0개" \
+  && ok "L1b report states 0 flipped lanes" || no "L1b report did not state 0 flipped lanes"
+AFTER1="$(TARGET_SHA_BEFORE)"
+[ "$BEFORE1" = "$AFTER1" ] && ok "L1c target file restored after decorative run" \
+  || no "L1c target file NOT restored (before=$BEFORE1 after=$AFTER1)"
+
+# L2 — REAL anchor → exit 0, exactly 1 flipped lane, names it
+BEFORE2="$(TARGET_SHA_BEFORE)"
+OUT2=$(FIXTURE_TARGET="$TARGET" bash "$SUT" "$TARGET" "$REAL_SUITE" --baseline HEAD~1 2>&1); RC2=$?
+[ "$RC2" -eq 0 ] && ok "L2 real anchor → exit 0" || no "L2 real anchor: rc=$RC2 (want 0)"
+printf '%s' "$OUT2" | grep -q "되돌린 레인 (✅→❌, 앵커가 실제로 잡은 것): 1개" \
+  && ok "L2b report states exactly 1 flipped lane" || no "L2b report did not state 1 flipped lane"
+printf '%s' "$OUT2" | grep -q "marker present in guard.txt" \
+  && ok "L2c report names the exact flipped label" || no "L2c flipped label not named in report"
+AFTER2="$(TARGET_SHA_BEFORE)"
+[ "$BEFORE2" = "$AFTER2" ] && ok "L2d target file restored after real-anchor run" \
+  || no "L2d target file NOT restored (before=$BEFORE2 after=$AFTER2)"
+
+# L3 — frontier warning header always present (both suites above already exercised it; assert once)
+printf '%s' "$OUT2" | grep -q "2607.22880" && ok "L3 frontier-warning citation present in output" \
+  || no "L3 frontier-warning citation missing"
+printf '%s' "$OUT2" | grep -q "되돌린 파일(뮤턴트) 수: 1" \
+  && ok "L3b mutant-count line present (n=1 caveat)" || no "L3b mutant-count line missing"
+
+# L4 — HARNESS ERROR: suite produces zero ✅/❌ lines → exit 10, and restore STILL happens.
+# This is the lane that matters most: a crash on the baseline run is exactly the moment a naive
+# implementation would leave the baseline content sitting in the working tree.
+BEFORE4="$(TARGET_SHA_BEFORE)"
+OUT4=$(FIXTURE_TARGET="$TARGET" bash "$SUT" "$TARGET" "$CRASH_SUITE" --baseline HEAD~1 2>&1); RC4=$?
+[ "$RC4" -eq 10 ] && ok "L4 zero-label suite → exit 10 (harness error, not a silent pass)" \
+  || no "L4 zero-label suite: rc=$RC4 (want 10)"
+AFTER4="$(TARGET_SHA_BEFORE)"
+[ "$BEFORE4" = "$AFTER4" ] && ok "L4b target file restored even on the harness-error path" \
+  || no "L4b RESTORE FAILED ON HARNESS-ERROR PATH (before=$BEFORE4 after=$AFTER4) — this is the defect class this suite exists to catch"
+
+# L5 — usage guards
+OUT5=$(bash "$SUT" 2>&1); RC5=$?
+[ "$RC5" -eq 2 ] && ok "L5 no args → exit 2" || no "L5 no args: rc=$RC5"
+OUT5b=$(bash "$SUT" "$TARGET" 2>&1); RC5b=$?
+[ "$RC5b" -eq 2 ] && ok "L5b missing suite arg → exit 2" || no "L5b missing suite arg: rc=$RC5b"
+OUT5c=$(bash "$SUT" "$WORKROOT/does_not_exist.txt" "$REAL_SUITE" 2>&1); RC5c=$?
+[ "$RC5c" -eq 2 ] && ok "L5c missing target file → exit 2" || no "L5c missing target file: rc=$RC5c"
+OUT5d=$(bash "$SUT" "$TARGET" "$WORKROOT/does_not_exist.sh" 2>&1); RC5d=$?
+[ "$RC5d" -eq 2 ] && ok "L5d missing suite file → exit 2" || no "L5d missing suite file: rc=$RC5d"
+OUT5e=$(bash "$SUT" "$TARGET" "$REAL_SUITE" --baseline totally-bogus-ref 2>&1); RC5e=$?
+[ "$RC5e" -eq 2 ] && ok "L5e bad --baseline ref → exit 2" || no "L5e bad baseline ref: rc=$RC5e"
+
+# L6 — the restore path uses `git show`, never `git checkout <ref> -- <path>` (the latter STAGES
+# the revert into the index — [[feedback_git_checkout_path_stages_the_revert]]). Assert the repo's
+# index carries no staged change after a probe run, both directions.
+( cd "$SRC" && git diff --cached --quiet ) \
+  && ok "L6 no staged changes left in the index after any probe run" \
+  || no "L6 the index has staged changes — a checkout-based restore would do this"
+( cd "$SRC" && git status --porcelain ) | grep -q . \
+  && no "L6b working tree not clean after probes (git status is non-empty)" \
+  || ok "L6b working tree clean after all probes (file content == committed HEAD)"
+
+echo "revert_probe lanes: $pass passed, $fail failed"
+[ "$fail" -eq 0 ] || exit 1

package/scripts/test_session_close_lanes.sh

@@ -138,9 +138,7 @@ PREMISE_FAILED=0
 # Human-readable on both platforms: GNU prints a date for %y, BSD's %Fm prints a raw epoch, so the
 # BSD branch asks for a formatted date instead — the whole point of this line is eyeballing.
 _mtime_h() {
-  stat -c %y "$1" 2>/dev/null \
-    || stat -f "%Sm" -t "%Y-%m-%d %H:%M:%S" "$1" 2>/dev/null \
-    || echo "?"
+  stat -c %y "$1" 2>/dev/null || stat -f "%Sm" -t "%Y-%m-%d %H:%M:%S" "$1" 2>/dev/null || echo "?"
 }
 
 _assert_newer() {  # $1=expected-newer  $2=reference  $3=lane label — returns 1 if premise fails
@@ -298,7 +296,7 @@ _carry_fixture() {  # $1=오늘카드 본문  $2=fh_completed 본문(빈 문자
   printf '%s\n' "$card_body" > "$T/tracks/_meta/reference_next_session_starter.md"
   [ -n "$done_body" ] && printf '%s\n' "$done_body" > "$T/tracks/_meta/fh_completed_${TODAY}.md"
   # companion store: 어제 날짜로 커밋된 «이전 카드» 미러 하나
-  FUT=$(date -v+2d '+%m-%d' 2>/dev/null || date -d '+2 days' '+%m-%d')
+  FUT=$(date -d '+2 days' '+%m-%d' 2>/dev/null || date -v+2d '+%m-%d')
   ( cd "$S" && git init -q . && git config user.email a@l && git config user.name a \
     && mkdir -p tracks-meta \
     && printf '기한 %s 미팅 안건 [B]\n' "$FUT" > tracks-meta/reference_next_session_starter.md \
@@ -307,7 +305,7 @@ _carry_fixture() {  # $1=오늘카드 본문  $2=fh_completed 본문(빈 문자
        git commit -qm prior ) >/dev/null 2>&1
   printf '%s|%s' "$T" "$S"
 }
-_carry_future() { date -v+2d '+%m-%d' 2>/dev/null || date -d '+2 days' '+%m-%d'; }
+_carry_future() { date -d '+2 days' '+%m-%d' 2>/dev/null || date -v+2d '+%m-%d'; }
 
 _carry_lane() {  # $1=name $2=pattern $3=expect $4="REPO|STORE" $5=extra-env(옵션)
   local name="$1" pat="$2" expect="$3" pair="$4" env5="${5:-}" T S out hit

package/scripts/test_sim_isolated_run_lanes.sh

@@ -261,5 +261,22 @@ if [ -x "$ROOT/scripts/round/arm_blind_probe.sh" ]; then
     || no "L24 눈가림 실패 — 팔이 정답지를 읽을 수 있다"
 else no "L24 프로브 없음 — 검사 못 함(스킵 아님)"; fi
 
+# ── L25 ⓒ 날짜 오염 통제 필드 (six_axis_review_2026-09-04 강화 #3) — 존재만 본다, 값은 안 본다.
+#    이 러너가 판정을 안 낸다는 것이 헤더의 약속이라, 레인도 «필드가 있나»만 잰다.
+OUTDIR="$WORKROOT/o25"
+( cd "$SRC" && PATH="$STUBBIN:$PATH" HOME="$FAKEHOME" FH_STUB_MODE=say \
+   bash "$SUT" --arm a --reps 1 --prompt p --out "$OUTDIR" ) >/dev/null 2>&1
+META="$OUTDIR/a_r1.meta.tsv"
+if [ -f "$META" ]; then
+  grep -q '^corpus_head_date	' "$META" && ok "L25a corpus_head_date field recorded" \
+    || no "L25a corpus_head_date field missing"
+  grep -q '^sim_model	' "$META" && ok "L25b sim_model field recorded" \
+    || no "L25b sim_model field missing"
+  grep -q '^sim_model_cutoff	' "$META" && ok "L25c sim_model_cutoff field recorded" \
+    || no "L25c sim_model_cutoff field missing"
+else
+  no "L25 meta.tsv not written at all ($META)"
+fi
+
 echo "sim_isolated_run lanes: $pass passed, $fail failed"
 [ "$fail" -eq 0 ] || exit 1

package/scripts/test_verdict_watermark_lanes.sh

@@ -11,7 +11,7 @@
 # ⇒ 쓰는 쪽에서 나르게 한다. 이 레인은 «한 줄만 복사해도 딸려오나»를 축자로 검정한다.
 set -uo pipefail
 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-S="$ROOT/scripts/context_continuity_score.sh"
+S="${CCS_UNDER_TEST:-$ROOT/scripts/context_continuity_score.sh}"   # 되돌림 프로브용 오버라이드(원본 사본을 가리켜 L29 가 빨개지는지 본다)
 T=$(mktemp -d); trap 'rm -rf "$T"' EXIT
 pass=0; fail=0
 ok(){ printf '  ✅ %s\n' "$1"; pass=$((pass+1)); }
@@ -423,5 +423,31 @@ if grep -q 'DELIVER" = 1 \] && \[ "$arm" = ARM' "$S"; then
   else no "L28b 사본을 못 만들었다 — 되돌림 미검증(스킵 아님)"; fi
 else no "L28 deliver 분기를 못 찾았다 — 검사 못 함(스킵 아님)"; fi
 
+
+# ── L29 (2026-09-02, 전파 — eligcheck 와 같은 `_tsv_pipe` 프로세스 치환 구멍) ──
+SEAL29="$T/seal_deadbeef-abc_20260901-101010.md"; : > "$SEAL29"
+run29(){ ( cd "$ROOT" && bash "$S" --seal "$SEAL29" --qset "$1" --reps 1 --out "$2" --rescore 2>&1 </dev/null ); }
+# ── L29 🟥 파서 실패/0 행이 «🟢 계기 생존»으로 접히지 않는다 ─────────────────────────
+#    실측(2026-09-02, 원본, bash 5.3): 값에 `|` 하나 · 빈 qset → 두 루프가 0 행 → ROWS 비어 →
+#    판정선 분모 전부 0 → 「🟢 계기 생존」 rc 0. bash 3.2 는 unbound 로 rc 1 — 우연이지 게이트가 아니다.
+PT="ZZL29POS$(printf '%s' 4419)"
+printf 'q1\tpositive\t질문P\t%s\t\t\n' "$PT" > "$T/q6.tsv"           # 6 열 컨트롤 (round2 실물 폭)
+printf 'q1\tpositive\t질문|P\t%s\t\t\n' "$PT" > "$T/q_pipe.tsv"
+: > "$T/q_empty.tsv"
+mkdir -p "$T/o"; printf '답은 %s 입니다.\n' "$PT" > "$T/o/q1_ARM_r1.txt"; printf '모르겠습니다. 기록이 없습니다.\n' > "$T/o/q1_CTRL_r1.txt"
+O=$(run29 "$T/q6.tsv" "$T/o"); rc=$?
+[ "$rc" = 0 ] && printf '%s' "$O" | grep -q '🟢' && ok "L29a CONTROL 6열 정상 qset → 🟢 rc 0" || no "L29a 컨트롤이 죽었다 (rc=$rc) — 아래는 무의미"
+O=$(run29 "$T/q_pipe.tsv" "$T/o"); rc=$?
+# 🟥 «크래시»는 게이트가 아니다 — bash 3.2 는 set -u 의 `"${ROWS[@]}"` unbound 로 rc 1 에 죽어 rc≠0 이
+#    «우연히» 나온다(bash 5.3 = CI 에선 🟢 rc 0). 그래서 unbound 를 명시적으로 배제한다.
+if [ "$rc" -ne 0 ] && ! printf '%s' "$O" | grep -q '🟢 계기 생존' && ! printf '%s' "$O" | grep -q 'unbound variable'; then ok "L29b 값에 '|' → 타입된 차단(rc≠0 ∧ 🟢 없음 ∧ 크래시 아님) [rc=$rc]"; else no "L29b 파서 실패가 «🟢 계기 생존»으로 접히거나 크래시로만 막힌다 [rc=$rc]"; fi
+O=$(run29 "$T/q_empty.tsv" "$T/o"); rc=$?
+if [ "$rc" -ne 0 ] && ! printf '%s' "$O" | grep -q '🟢 계기 생존' && ! printf '%s' "$O" | grep -q 'unbound variable'; then ok "L29c 빈 qset → 타입된 차단(rc≠0 ∧ 🟢 없음 ∧ 크래시 아님) [rc=$rc]"; else no "L29c 빈 qset 이 «🟢 계기 생존»으로 접히거나 크래시로만 막힌다 [rc=$rc]"; fi
+# ── L29d 🟥 오염 게이트가 6 열 qset 에서 눈을 감지 않는다 (read 가 뒤 열을 tok 에 삼키는 결함) ──
+#    실측(원본): 4 열 + tracked 토큰 → exit 5 · 6 열 같은 토큰 → 통과. 토큰은 «이 파일 자신»에 확실히 있는 낱말.
+printf 'q1\tpositive\t질문P\tcontext_continuity\t\t\n' > "$T/q6c.tsv"
+O=$(run29 "$T/q6c.tsv" "$T/o"); rc=$?
+[ "$rc" = 5 ] && ok "L29d 6열 qset 의 tracked 토큰 → 오염 차단(5)" || no "L29d 6열 qset 에서 오염 게이트가 눈을 감는다 [rc=$rc]"
+
 echo "verdict watermark lanes: $pass passed, $fail failed"
 [ "$fail" -eq 0 ] || exit 1

package/scripts/utterance_landing_check.sh

@@ -132,7 +132,7 @@ done
 _probe_hits() {
   local pat="$1"; shift
   grep -lE -- "$pat" "$@" 2>/dev/null
-  return "${PIPESTATUS[0]:-$?}"
+  return "${PIPESTATUS[0]:-$?}"  # portability-noqa: shebang (line 1) pins bash — PIPESTATUS is a real array there, unlike zsh
 }
 
 # ── 1단계: 컨트롤. 살아있음을 증명하기 전에는 타깃을 인쇄하지 않는다 ──
@@ -179,7 +179,7 @@ MISS=0; N=0
 while IFS=$'\t' read -r kind pat label; do
   [ "${kind:-}" = "TARGET" ] || continue
   N=$((N+1))
-  hits=$(_probe_hits "$pat" "${FILES[@]}" | wc -l | tr -d ' '); _rc=${PIPESTATUS[0]}
+  hits=$(_probe_hits "$pat" "${FILES[@]}" | wc -l | tr -d ' '); _rc=${PIPESTATUS[0]}  # portability-noqa: shebang (line 1) pins bash — PIPESTATUS is a real array there, unlike zsh
   if [ "$_rc" -ge 2 ]; then
     printf "  🟥 %-46s 프로브 오류\n" "${label:-$pat}"
     BAD_PAT="${BAD_PAT:+$BAD_PAT, }TARGET/${label:-$pat}"

package/templates/.git-hooks/pre-commit

@@ -1470,6 +1470,18 @@ validate_soul_present_leg() { # $1 = marker path
     echo "     «이 기록이 템플릿 자신인가»만 본다 — 채널 검사다."
     return 1
   fi
+  # ── ①영혼 2칸 존재 검사 (advisory only, 2026-09-04 — six_axis_review 판정안 4) ─────
+  # «성공 정의»와 «절대 안 함» 두 낱말(변형 포함)이 둘 다 있는지만 본다. Mechanization
+  # Boundary: 존재만 — 두 칸이 다 있어도 내용이 옳다는 보장은 없고, 하나가 없어도 커밋을
+  # 막지 않는다(위 non-vacuity 검사가 이미 최소 6낱말을 요구·차단한다 — 이건 그 위에 얹는
+  # 별도 관측이지 새 차단이 아니다). 「없음」 선언 분기는 위에서 이미 return 했으므로 여기
+  # 도달하지 않는다.
+  _soul_missing=""
+  printf '%s' "$body" | grep -qE '성공 ?정의' || _soul_missing="성공 정의"
+  printf '%s' "$body" | grep -qE '절대 ?안 ?함' || _soul_missing="${_soul_missing:+$_soul_missing · }절대 안 함"
+  if [ -n "$_soul_missing" ]; then
+    echo "  ⚠️  ①영혼 2칸 미달 — 빠진 낱말: $_soul_missing (advisory, 커밋은 안 막는다)"
+  fi
   echo "  ✅ ①영혼 present: $words word(s)"
   return 0
 }
@@ -2658,14 +2670,25 @@ if [ -n "$MD_STAGED" ]; then
   echo "[Pointers] Detail-pointer resolution (staged markdown)..."
   PTR_FAIL=0; PTR_CHECKED=0
   for f in $MD_STAGED; do
-    [ -f "$REPO_ROOT/$f" ] || continue
-    fdir="$(cd "$REPO_ROOT/$(dirname "$f")" && pwd)"
-    blocks="$(awk '
+    # Read the STAGED blob, not the working-tree file. diff-filter=ACMR already guarantees $f
+    # exists in the index, but a file can be staged and then deleted or further-edited on disk
+    # before commit — `git commit` commits the INDEX, so `[ -f "$REPO_ROOT/$f" ] || continue`
+    # here silently dropped the check on a committed broken pointer (deleted-on-disk case) and,
+    # for a further-edited case, would have checked the wrong bytes entirely. Reproduced 2026-09-03:
+    # stage a .md with a broken `**Detail**: See §X` pointer, `rm` it from disk (index untouched),
+    # commit — PTR_CHECKED stayed 0 and the broken pointer landed silently.
+    _md_blob="$(git -C "$REPO_ROOT" show ":$f" 2>/dev/null)" || {
+      echo "  ❌ $f: staged (diff-filter=ACMR) but unreadable from the index — cannot verify its Detail pointers"
+      PTR_FAIL=1; continue
+    }
+    fdir="$(cd "$REPO_ROOT/$(dirname "$f")" 2>/dev/null && pwd)"
+    [ -n "$fdir" ] || fdir="$REPO_ROOT/$(dirname "$f")"
+    blocks="$(printf '%s\n' "$_md_blob" | awk '
       inblk && /^>/ { blk=blk" "$0; next }
       inblk { print blk; inblk=0; blk="" }
       /\*\*Detail\*\*: See/ { blk=$0; inblk=1; next }
       END { if(inblk) print blk }
-    ' "$REPO_ROOT/$f")"
+    ')"
     [ -z "$blocks" ] && continue
     while IFS= read -r block; do
       [ -z "$block" ] && continue

package/templates/settings.PreToolUse.snippet.json

@@ -50,7 +50,28 @@
     "built on a 46-PR-behind clone and manufactured a duplicate of an upstream lane. found→extend",
     "applies at repo level; this is its mechanical layer. Same advisory contract; fail-open on",
     "every uncertainty (non-repo, no upstream, fetch failure).",
-    "  bash scripts/test_stale_clone_guard_lanes.sh           # expect: all known pairs hold (count self-reported)"
+    "  bash scripts/test_stale_clone_guard_lanes.sh           # expect: all known pairs hold (count self-reported)",
+    "",
+    "FOURTH GUARD, Bash matcher — backtick_guard.sh (added 2026-09-03, weekly_audit_2026-09-02 HIGH #1):",
+    "advisory when a Bash call carries a backtick inside a shell DOUBLE-QUOTING context — an unquoted",
+    "heredoc body (<<EOF) or a \"double-quoted string\". There a backtick is command substitution: the text",
+    "between the backticks is REPLACED by the command's output — empty when it names no command, so the",
+    "text is silently DELETED and the record commits with a hole (every record hook checks presence, not",
+    "completeness). Measured 7x 2026-08-10..09-02 with a resident memory rule that failed each time because",
+    "the actor's task had a different name than the rule's title. Quote-aware state machine, not a regex:",
+    "single-quoted text, quoted heredocs (<<'EOF'), and escaped backticks are CLEAN. Same advisory contract;",
+    "escalate with FH_BACKTICK_BLOCK=1; opt out with `# noqa: backtick` (whole payload).",
+    "  bash scripts/test_backtick_guard_lanes.sh              # expect: all known pairs hold (count self-reported)",
+    "",
+    "FIFTH GUARD, Edit|Write|Bash matcher — proposal_hook.sh (added 2026-09-03, identity ⑤ r4):",
+    "advisory when a verdict/guard line in scripts/**/*.sh or templates/*.sh is about to change: puts ONE",
+    "instruction into the model context — offer the user a known-pair control + degrade_direction_scan.sh in",
+    "one line. Measured: the same rule as a CLAUDE.md table row fired 1/15 at floor tier (r3); as this hook",
+    "9/9 relay on editing reps and 0/5 on a usage-string edit (r4). Quote-aware: an edit confined to quoted",
+    "strings does not fire. Bash path (sed -i / > / tee into a .sh) covered with a weaker rule (named",
+    "residual in the script header). Evidence row in .claude/.proposal_hook_events.tsv. Relaying an",
+    "injected instruction is not initiative — see the r4 RESULT for what this does and does not claim.",
+    "  bash scripts/test_proposal_hook_lanes.sh                # expect: all known pairs hold (count self-reported)"
   ],
   "project_settings_json": {
     "hooks": {
@@ -67,6 +88,11 @@
               "type": "command",
               "command": "bash \"$CLAUDE_PROJECT_DIR/scripts/destructive_pre_gate.sh\"",
               "timeout": 5
+            },
+            {
+              "type": "command",
+              "command": "bash \"$CLAUDE_PROJECT_DIR/scripts/backtick_guard.sh\"",
+              "timeout": 5
             }
           ]
         },
@@ -79,6 +105,16 @@
               "timeout": 20
             }
           ]
+        },
+        {
+          "matcher": "Edit|Write|Bash",
+          "hooks": [
+            {
+              "type": "command",
+              "command": "bash \"$CLAUDE_PROJECT_DIR/scripts/proposal_hook.sh\"",
+              "timeout": 5
+            }
+          ]
         }
       ]
     }

package/plugins/fh-commons/README.md

@@ -1,38 +0,0 @@
-# fh-commons — Contention-Born Skill Habitat
-
-**A different layer of plugin from fh-meta.**
-
-fh-meta = meta-engineering skills for operating, diagnosing, and improving the harness itself  
-fh-commons = general-purpose utility skills born from the contention layer, transplantable to any project
-
-## Placement Criteria
-
-When the `contention-layer` skill harvests contentions and generates new skill candidates:
-
-| Determination | Destination |
-|---|---|
-| Harness engineering in nature | `fh-meta` |
-| Project-general · domain-agnostic | **`fh-commons`** (this plugin) |
-| Domain/team specific | field harvest (decided by the field team) |
-
-## Skill List
-
-| Skill | Description | Contention Parent |
-|---|---|---|
-| `convergence-loop` | General-purpose gate reinforcement that replaces single-pass structures with a convergence loop of up to N rounds | harvest-loop (recurring single-pass-distrust pattern across hub gates) |
-| `deliberation` | Innovator → Devil-Advocate → Mediator 3-layer multi-perspective synthesis. Generates conditional verdicts without binary win/loss | Migrated from fh-meta (2026-05-23 — domain-agnostic general decision structure) |
-| `ko-tech-writer` | Korean technical-writing pipeline — register detection, venue calibration, translationese scan, honesty layering, number/claim gate, perceptual QA | Field-session harvest (2026-08-10 — conference tech-doc revision session, operator-driven shipping) |
-
-## The `origin` Field
-
-Commons skills include the following fields in their SKILL.md frontmatter:
-
-```yaml
-# Contention-born (extracted by contention-layer)
-origin: contention-layer
-contention-parents: [skill-A, skill-B]
-
-# Migrated from fh-meta (reclassified as general-purpose)
-origin: fh-meta
-migration: "YYYY-MM-DD — reason for migration"
-```