@chrono-meta/fh-gate 2.6.0 → 2.7.0

package/scripts/test_marker_defense_lanes.sh

@@ -0,0 +1,152 @@
+#!/usr/bin/env bash
+# test_marker_defense_lanes.sh — regression fixtures for pre-commit's validate_defense_leg
+# (Wave 1-D defense line, 2026-08-20).
+#
+# WHY THIS FILE EXISTS AT ALL: the procedure was absorbed from a sibling harness whose own document
+# asserted "the commit hook reads that line" and "pinned by scripts/test_marker_floor_lanes.sh".
+# 🟥 Measured twice, with a control (`crossfamily` → 21 hits in the same file): BOTH claims were
+# **0 hits** there. The prose was portable; the machine was not. This lane is the machine, built
+# here, so that FH's own claim is true when FH makes it.
+#
+# Fixtures assert BOTH directions (known-pair): every intended shape is admitted, and every hole the
+# leg closes still blocks. A suite that only asserts BLOCK cannot tell "blocked" from "blocked for
+# the wrong reason"; one that only asserts PASS cannot see a leg that admits everything.
+#
+# Usage: bash scripts/test_marker_defense_lanes.sh   Exit: 0 = all behave; 1 = regression.
+
+set -uo pipefail
+# Script-relative, NOT `git rev-parse --show-toplevel` — same reason as the sibling lanes: in a
+# vendored tree rev-parse answers with the OUTER repo and the suite measures somebody else's files.
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+HOOK="$REPO_ROOT/templates/.git-hooks/pre-commit"
+T=$(mktemp -d); trap 'rm -rf "$T"' EXIT
+
+sed -n '/^validate_defense_leg()/,/^}/p' "$HOOK" > "$T/fn.sh"
+
+# Instrument calibration BEFORE any fixture runs. An empty extraction would let every BLOCK
+# fixture "pass" against nothing and every PASS fixture fail — and the suite would still print a
+# verdict. Assert the body actually arrived.
+if ! grep -q 'estimation-layer' "$T/fn.sh"; then
+  echo "❌ HARNESS-ERROR — validate_defense_leg did not extract from $HOOK."
+  echo "   Fixtures below would measure an empty function. Aborting rather than reporting green."
+  exit 1
+fi
+
+pass=0; fail=0
+mk() { printf '%s\n' "$2" > "$T/$1"; }
+run() { bash -c "source '$T/fn.sh'; validate_defense_leg '$T/$1'" >/dev/null 2>&1; }
+want() { # $1=fixture $2=expect(pass|block) $3=label
+  local rc; run "$1"; rc=$?
+  local got; [ "$rc" -eq 0 ] && got=pass || got=block
+  if [ "$got" = "$2" ]; then printf '  ✅ %-6s %s\n' "$2" "$3"; pass=$((pass+1))
+  else printf '  ❌ %-6s %s — got %s\n' "$2" "$3" "$got"; fail=$((fail+1)); fi
+}
+
+GOOD='axis2-defense: reproducibility=bash scripts/test_marker_defense_lanes.sh at 4c1f2ab fairness=both arms reps=3, same fixture dir, same shell estimation-layer=all measured; known-pair separated arm from control'
+
+echo "[marker-defense] known-pair fixtures"
+echo "  ── admitted (must not over-block; over-blocking teaches --no-verify) ──"
+mk ok.md          "floor-status: sonnet-floor
+$GOOD"
+want ok.md          pass  "all three substantive"
+mk multiline.md   "floor-status: sonnet-floor
+axis2-defense: reproducibility=git show 9cd7350 -- scripts/selfcheck.sh
+               fairness=arm and control both on 2.6.0 tarball, reps=1 each, named
+               estimation-layer=counts measured; the 2,367 b/day figure is a quotation"
+want multiline.md   pass  "continuation lines are one value"
+mk order.md       "floor-status: below-floor
+axis2-defense: estimation-layer=measured via npm pack --dry-run --json fairness=same tarball both arms reproducibility=npm pack @chrono-meta/fh-gate@2.6.0"
+want order.md       pass  "sub-answers in any order"
+
+echo "  ── blocked ──"
+mk none.md        "floor-status: sonnet-floor"
+want none.md        block "no axis2-defense line at all"
+mk empty.md       "floor-status: sonnet-floor
+axis2-defense:"
+want empty.md       block "key present, value empty (silence is not an answer)"
+mk partial.md     "floor-status: sonnet-floor
+axis2-defense: reproducibility=bash scripts/selfcheck.sh completes rc=0 fairness=both arms on same tree"
+want partial.md     block "estimation-layer missing — a partial form is not a defense"
+# 🟥 rc IS NOT ENOUGH HERE — measured by a revert probe on 2026-08-20, the day this was written.
+# Deleting the completeness guard leaves `partial.md` STILL blocked, because an absent sub-answer
+# also reads as an empty (vacuous) one and the next guard catches it. Gating on the exit code alone
+# therefore certifies a guard that is doing nothing: the classic decorative anchor. What the
+# completeness guard actually buys is the PRESCRIPTION — "missing sub-answer(s): estimation-layer"
+# tells the author which question they skipped, where "too short" sends them to rewrite the wrong
+# field. A gate's output is half its product, so the lane measures the output.
+want_msg() { # $1=fixture $2=substring $3=label
+  local out; out=$(bash -c "source '$T/fn.sh'; validate_defense_leg '$T/$1'" 2>&1)
+  if printf '%s' "$out" | grep -qF "$2"; then printf '  ✅ %-6s %s\n' "msg" "$3"; pass=$((pass+1))
+  else printf '  ❌ %-6s %s — output did not contain %s\n' "msg" "$3" "$2"; fail=$((fail+1)); fi
+}
+want_msg partial.md "missing sub-answer(s): estimation-layer" \
+  "prescription NAMES the skipped question (guard is load-bearing for the message)"
+# (the short.md prescription control lives below, AFTER that fixture is created —
+#  🟥 it was first written here, before `mk short.md`, so it measured a NON-EXISTENT file and
+#  read the "no line at all" message. The lane was wrong, not the subject. Fixture order is
+#  part of the instrument.)
+mk vacuous.md     "floor-status: sonnet-floor
+axis2-defense: reproducibility=ok fairness=yes estimation-layer=n/a"
+want vacuous.md     block "filled form, not an answer"
+mk short.md       "floor-status: sonnet-floor
+axis2-defense: reproducibility=ran it fairness=same estimation-layer=nums"
+want short.md       block "too short to name a command, reps or layer"
+want_msg short.md   "vacuous answer(s)" \
+  "control — the short case takes the OTHER prescription (the two are distinguishable)"
+mk dup.md         "floor-status: sonnet-floor
+$GOOD
+$GOOD"
+want dup.md         block "two lines — the reader takes the first, so a correction is shadowed"
+
+echo "  ── call-site pin (a function nobody calls is prose) ──"
+# 🟥 Found by cross-family review 2026-08-20 (codex/gpt-5.5), self-detection 0: this suite extracts
+# the FUNCTION and calls it directly, so deleting the hook's call site left every lane green while
+# the leg stopped running — and the skill doc claimed "pre-commit runs this". That is the exact
+# defect class this whole file was built to stop importing, reproduced one layer up.
+# The pin is a grep, and its limit is stated rather than hidden: it proves the call EXISTS and sits
+# in the full-gate marker block, not that the block is reached. Reachability is pinned by the hook's
+# own end-to-end lanes, not here.
+cs=$(grep -c 'validate_defense_leg "\$MARKER"' "$HOOK")
+if [ "$cs" -eq 1 ]; then
+  printf '  ✅ %-6s %s\n' "call" "hook calls validate_defense_leg exactly once"; pass=$((pass+1))
+else
+  printf '  ❌ %-6s %s — found %s call site(s)\n' "call" "hook calls validate_defense_leg exactly once" "$cs"; fail=$((fail+1))
+fi
+# and that the call is gated on the floor tiers the doc claims — not on load-bearing, which is
+# where it was first (wrongly) wired.
+if grep -B4 'validate_defense_leg "\$MARKER"' "$HOOK" | grep -qE 'floor-status:.*sonnet-floor\|below-floor'; then
+  printf '  ✅ %-6s %s\n' "call" "call is gated on floor-status (sonnet-floor|below-floor)"; pass=$((pass+1))
+else
+  printf '  ❌ %-6s %s\n' "call" "call is NOT gated on floor-status — scope drifted from the doc"; fail=$((fail+1))
+fi
+
+echo "  ── prescriptions (rc alone certifies guards that do nothing) ──"
+# 🟥 Same shadowing as the completeness guard: removing the presence guard leaves none.md/empty.md
+# still blocked by the missing-subanswer guard, so rc cannot see it. What presence buys is the
+# prescription that shows the author the whole field shape.
+want_msg none.md  "no 'axis2-defense:' line" \
+  "presence guard is load-bearing for its own message"
+want_msg empty.md "no 'axis2-defense:' line" \
+  "empty value takes the same prescription as absent (silence is silence)"
+
+echo "  ── controls (the leg discriminates; it does not just fire) ──"
+# 🟥 known-NEGATIVE for over-blocking: a legitimate answer that merely LOOKS terse per-field but
+# clears the bar. Without this, a leg that blocked everything would pass every BLOCK row above.
+mk borderline.md  "floor-status: sonnet-floor
+axis2-defense: reproducibility=see PR #471 CI log job 96296828886 fairness=arms differ: control is v2.5.1 tarball — stated estimation-layer=one measured, one quoted from CHANGELOG"
+want borderline.md  pass  "control — admits an honest answer that NAMES an asymmetry"
+# 🟥 known-negative on the em-dash: `fairness` here contains a dash, which must NOT truncate parsing
+mk dashes.md      "floor-status: sonnet-floor
+axis2-defense: reproducibility=git log main..HEAD --oneline fairness=both arms — same reps, same env estimation-layer=measured; instrument calibrated on a known pair"
+want dashes.md      pass  "control — dashes inside a value do not truncate it"
+
+echo
+if [ "$fail" -eq 0 ]; then
+  echo "✅ marker-defense: $pass lanes hold (0 failed)"
+  echo "   🟥 SCOPE: this suite pins PRESENCE, COMPLETENESS and NON-VACUITY. It cannot pin whether"
+  echo "   the answers are TRUE — that is the operator's and the weekly audit's, like every other"
+  echo "   marker field. A green line here is not a claim that the defense was actually mounted."
+  exit 0
+fi
+echo "❌ marker-defense: $fail failed / $pass passed"
+exit 1

package/scripts/test_marker_soul_check_lanes.sh

@@ -0,0 +1,211 @@
+#!/usr/bin/env bash
+# test_marker_soul_check_lanes.sh — regression fixtures for pre-commit's
+# validate_soul_check_leg
+# (ⓒ 격리 그라운딩 — 사전 선언으로 확장, 2026-08-21).
+#
+# 🟥 NOT a seventh axis. `fh_three_layer_canon.md §1-a-2` splits axes by «무엇을 받았는가», and
+# ⓒ already receives «저자가 쓴 문장 + 지금의 트리» — identical to this leg's input. Tense
+# (사전 선언 vs 사후 주장) is a posture, not an axis.
+#
+# WHY: `①영혼` has been required on every marker since 2026-08-09 and is written 4/4 on the real
+# corpus, with ZERO consuming code (measured with a control: `crossfamily` = 21 hits in the hook,
+# `①영혼`/`soul` = 0 lines that read it; `fh_4axis_gate.md` does not name the field). Slot with no
+# consumer → presence does the judging → always "done".
+#
+# SCOPE — channel, not judgment. These lanes assert the RECORD's properties: single · closed enum ·
+# non-vacuous · not wearing another axis's tokens · consistent with the ①영혼 line in the SAME file.
+# They never assert the read-back reached the right conclusion.
+#
+# 🟥 NAMED RESIDUAL — a fabricated `reflected(<fluent reason>)` on a marker that DOES carry an
+# ①영혼 line PASSES. Provenance is not checkable from a file (the hook says so at the ①영혼
+# comment, and that part is correct). The hole is §4-b's — cross-family reads the marker.
+#
+# Fixtures assert BOTH directions (known-pair): every intended shape is admitted, and every hole
+# the lane closes still blocks.
+#
+# Usage: bash scripts/test_marker_soul_check_lanes.sh   Exit: 0 = all behave; 1 = regression.
+
+set -uo pipefail
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+HOOK="$REPO_ROOT/templates/.git-hooks/pre-commit"
+T=$(mktemp -d); trap 'rm -rf "$T"' EXIT
+
+sed -n '/^validate_soul_check_leg()/,/^}/p' "$HOOK" > "$T/fn.sh"
+
+# Instrument calibration — an empty extraction would let every fixture "pass" against nothing.
+if ! grep -q 'DEGRADED_NO_SOUL' "$T/fn.sh"; then
+  echo "❌ HARNESS-ERROR — validate_soul_check_leg did not extract from $HOOK."
+  echo "   Fixtures below would measure an empty function. Aborting rather than reporting green."
+  exit 1
+fi
+
+SOUL='①영혼: 성공 정의 = «소비자 경로에서 완주해 rc=0 을 내고 컨트롤로 가른다». 절대 안 함 = «FAIL 을 SKIP 으로 바꾸는 것»'
+
+FAIL=0
+lane() { # $1 = id  $2 = expect(BLOCK|PASS)  $3 = marker body
+  local id="$1" expect="$2" body="$3" rc out
+  printf '%s\n' "$body" > "$T/m.marker"
+  out=$( bash -c 'set -uo pipefail; . "$1"; validate_soul_check_leg "$2"' _ "$T/fn.sh" "$T/m.marker" 2>&1 ); rc=$?
+  local got=PASS; [ $rc -ne 0 ] && got=BLOCK
+  if [ "$got" = "$expect" ]; then
+    printf '  ✅ %-40s %s\n' "$id" "$got"
+  else
+    printf '  ❌ %-40s expected %s, got %s\n     %s\n' "$id" "$expect" "$got" "$(printf '%s' "$out" | head -3)"
+    FAIL=1
+  fi
+}
+
+echo "== soul-check lanes — BLOCK side (holes that must stay closed) =="
+lane G1-not-in-enum          BLOCK "$SOUL
+soul-check: done"
+lane G2-bare-reflected       BLOCK "$SOUL
+soul-check: reflected"
+lane G3-vacuous-grounds      BLOCK "$SOUL
+soul-check: reflected(ok)"
+lane G4-duplicate-line       BLOCK "$SOUL
+soul-check: UNKNOWN
+soul-check: reflected(cross-family agy 가 델타를 성공정의에 비춰 2건 지적)"
+lane G5-crossaxis-tier2      BLOCK "$SOUL
+soul-check: tier2(qasp)"
+lane G6-crossaxis-checked    BLOCK "$SOUL
+soul-check: checked(prior art 없음)"
+lane G7-crossaxis-panel      BLOCK "$SOUL
+soul-check: panel(codex,agy)"
+echo "  -- the consistency check (two fields, one record) --"
+lane G8-reflected-no-soul    BLOCK "axis2-model: opus
+soul-check: reflected(델타를 성공정의에 비춰 봤고 어긋남 없음)"
+lane G9-reflected-empty-soul BLOCK "①영혼: 없음
+soul-check: reflected(델타를 성공정의에 비춰 봤고 어긋남 없음)"
+lane G10-violated-no-soul    BLOCK "axis2-model: opus
+soul-check: violated(절대안함 을 어겼다 — SKIP 으로 바꿨다)"
+lane G11-nosoul-but-soul-is  BLOCK "$SOUL
+soul-check: DEGRADED_NO_SOUL(영혼 줄이 없어서 되비출 대상 자체가 없다)"
+lane G11b-nosoul-but-soul-key BLOCK "soul: 성공 정의 = 소비자 경로에서 완주한다. 절대 안 함 = FAIL 을 SKIP 으로 바꾸지 않는다
+soul-check: DEGRADED_NO_SOUL(영혼 줄이 없어서 되비출 대상 자체가 없다)"
+
+echo "== soul-check lanes — PASS side (intended shapes must be admitted) =="
+lane G12-absent-is-grace     PASS  "$SOUL
+axis2-model: opus"
+lane G13-reflected-ok        PASS  "$SOUL
+soul-check: reflected(agy/gemini 가 델타를 성공정의에 비춰 재검 — 절대안함 위반 0, 성공정의 미달 0)"
+lane G13b-reflected-soul-key PASS  "soul: 성공 정의 = 소비자 경로에서 완주한다. 절대 안 함 = FAIL 을 SKIP 으로 바꾸지 않는다
+soul-check: reflected(codex 가 soul 필드를 성공정의에 비춰 재검 — 위반 0)"
+lane G14-violated-is-legal   PASS  "$SOUL
+soul-check: violated(절대안함 «FAIL 을 SKIP 으로» 를 어겼다 — 되돌리고 주체를 이름으로 찍게 고쳤다)"
+lane G15-unknown-bare-ok     PASS  "$SOUL
+soul-check: UNKNOWN"
+lane G16-degraded-not-run    PASS  "$SOUL
+soul-check: DEGRADED_NOT_RUN(되비출 사이드카가 없어 이번 커밋에선 안 돌렸다)"
+lane G17-nosoul-when-truly   PASS  "axis2-model: opus
+soul-check: DEGRADED_NO_SOUL(경량 예외 커밋이라 영혼 줄을 안 썼다)"
+lane G18-not-applicable      PASS  "$SOUL
+soul-check: not-applicable(문서 오타 수정이라 성공정의에 걸리는 델타가 없다)"
+lane G19-em-dash-reason      PASS  "$SOUL
+soul-check: reflected(codex 가 성공정의 대조 — 어긋남 없음) — 2026-08-21"
+
+
+# ── ①영혼 presence lane (validate_soul_present_leg) ───────────────────────────
+sed -n '/^validate_soul_present_leg()/,/^}/p' "$HOOK" > "$T/fnp.sh"
+if ! grep -q 'SOUL_PRESENT_GRACE' "$T/fnp.sh" && ! grep -q '①영혼 line' "$T/fnp.sh"; then
+  echo "❌ HARNESS-ERROR — validate_soul_present_leg did not extract. Aborting."
+  exit 1
+fi
+GRACE=$(grep -m1 '^SOUL_PRESENT_GRACE_DATE=' "$HOOK" | sed -E 's/.*"(.*)"/\1/')
+
+planep() { # $1=id $2=expect $3=filename-date $4=body
+  local id="$1" expect="$2" d="$3" body="$4" rc out f
+  f="$T/.axes_23_passed_fix_x_${d}.marker"
+  printf '%s\n' "$body" > "$f"
+  out=$( bash -c 'set -uo pipefail; SOUL_PRESENT_GRACE_DATE="$3"; . "$1"; validate_soul_present_leg "$2"' \
+         _ "$T/fnp.sh" "$f" "$GRACE" 2>&1 ); rc=$?
+  local got=PASS; [ $rc -ne 0 ] && got=BLOCK
+  if [ "$got" = "$expect" ]; then printf '  ✅ %-40s %s\n' "$id" "$got"
+  else printf '  ❌ %-40s expected %s, got %s\n     %s\n' "$id" "$expect" "$got" "$(printf '%s' "$out"|head -2)"; FAIL=1; fi
+}
+
+echo
+echo "== ①영혼 presence lanes (grace = $GRACE) =="
+planep P1-missing-post-grace   BLOCK "$GRACE" 'axes-run: ⓐ=codex ⓑ=→standpoint
+crossfamily: panel(codex,agy) — 겹친 지적 0'
+# 🟥 P2 flipped BLOCK→PASS on 2026-08-21: a bare `없음` is the value CLAUDE.md §자기 대조
+# explicitly permits, and blocking it punished the honest form while a padded «I didn't write
+# one» paragraph passed. Found by a peer session's first real use, not by this suite.
+planep P2-declared-absent-ok   PASS  "$GRACE" '①영혼: 없음
+axes-run: ⓐ=codex'
+planep P2b-empty-field-blocks  BLOCK "$GRACE" 'soul:
+axes-run: ⓐ=codex'
+planep P2c-absent-heading-form PASS  "$GRACE" '## ①영혼 — 없음
+axes-run: ⓐ=codex'
+# fixture updated 2026-08-21: `없음` became a legal declared-absence value, so a truly vacuous
+# field is now the discriminating input (the point of codex's lane was masking-by-next-field,
+# not the token `없음`).
+planep P2b-vacuous-before-fields BLOCK "$GRACE" '①영혼: ok
+axis2-engine: steel-quench
+axis2-model: opus
+floor-status: ok
+axes-run: ⓐ=codex ⓑ=→standpoint ⓒ=x ⓓ=x ⓔ=x ⓕ=x
+controls: alive — known-positive x 1 hit · known-negative 0'
+planep P3-present-korean       PASS  "$GRACE" "$SOUL
+axes-run: ⓐ=codex"
+planep P4-present-soul-key     PASS  "$GRACE" 'soul: 성공 정의 = 소비자 경로에서 완주한다. 절대 안 함 = FAIL 을 SKIP 으로 바꾸지 않는다
+axes-run: ⓐ=codex'
+planep P5-grace-old-exempt     PASS  "2026-08-01" 'axes-run: ⓐ=codex
+crossfamily: panel(codex,agy) — 겹친 지적 0'
+planep P6-real-corpus-negative BLOCK "$GRACE" "$(cat "$REPO_ROOT/tracks/_meta/.axes_23_passed_feat_target-freeze-gate_2026-08-18.marker" 2>/dev/null || echo 'axes-run: x')"
+planep P7-real-corpus-positive PASS  "$GRACE" "$(cat "$REPO_ROOT/tracks/_meta/.axes_23_passed_fix_witness-two-commit-discipline_2026-08-17.marker" 2>/dev/null || echo '①영혼: 성공 정의 = 하나 둘 셋 넷 다섯 여섯')"
+
+echo
+echo "== cross-family findings — regression lanes (codex/gpt-5.5, diff 축, 2026-08-21) =="
+# F1 self-referential FP: codex's own alignment fix flipped G8 to PASS because the
+# `soul-check:` line contains 「성공정의」 and matched as its own evidence.
+lane F1-selfref-soulcheck-only BLOCK 'axis2-model: opus
+soul-check: reflected(델타를 성공정의에 비춰 봤고 절대 안 함 도 안 어겼다)'
+# F4 grounds outside the parens
+lane F4-grounds-outside-parens BLOCK "$SOUL
+soul-check: reflected() — 아주 길고 그럴듯한 꼬리말이 여기 붙어 있어서 길이를 채운다"
+# F3 near-miss key reads as absent
+lane F3-nearmiss-key           BLOCK "$SOUL
+soul_check: reflected(델타를 성공정의에 비춰 재검했다)"
+lane F3b-nearmiss-space        BLOCK "$SOUL
+soul-check : reflected(델타를 성공정의에 비춰 재검했다)"
+planep F1b-presence-selfref    BLOCK "$GRACE" 'axes-run: ⓐ=codex
+soul-check: reflected(성공 정의 대조 · 절대 안 함 확인)'
+planep F1c-comment-not-soul    BLOCK "$GRACE" '# 성공 정의 를 나중에 쓸 예정이다 절대 안 함 도
+axes-run: ⓐ=codex'
+# F2: unparseable date must NOT take the grace exit (was fail-open)
+printf 'axes-run: a=codex\n' > "$T/.axes_23_passed_nodate.marker"
+_o=$( bash -c 'set -uo pipefail; SOUL_PRESENT_GRACE_DATE="$3"; . "$1"; validate_soul_present_leg "$2"' \
+      _ "$T/fnp.sh" "$T/.axes_23_passed_nodate.marker" "$GRACE" 2>&1 ); _r=$?
+if [ $_r -ne 0 ]; then printf '  ✅ %-40s %s\n' "F2-unparseable-date-not-exempt" "BLOCK"
+else printf '  ❌ %-40s expected BLOCK, got PASS\n' "F2-unparseable-date-not-exempt"; FAIL=1; fi
+
+echo
+echo "== cross-family findings — regression lanes (agy/gemini-3.1-pro, 주장·기록 축) =="
+# A6 [S]: grounds counted with ${#} passed on a single long Korean token. Word count now.
+lane A6-korean-onetoken-grounds BLOCK "$SOUL
+soul-check: reflected(어긋남없음확인완료했음)"
+# A6b [S]: the two legs disagreed on the SAME soul block (6 vs 4 words). Aligned to 6.
+# 5 words under `wc -w` — passed the old 4-word floor in the check leg while the present leg
+# demanded 6 on the SAME block. Empirically calibrated, not guessed: `wc -w` does not equal a
+# human word count on Korean («①영혼: 완주» reports 3), so the fixture was measured, not reasoned.
+lane A6b-threshold-aligned      BLOCK '①영혼: 성공 정의
+soul-check: reflected(델타를 성공정의에 비춰 재검했고 어긋남 없음)'
+# A6-control: a genuinely grounded, multi-word reason still passes (this lane must NOT block).
+lane A6c-control-passes         PASS "$SOUL
+soul-check: reflected(codex 가 성공정의 대조 — 어긋남 없음)"
+
+echo
+echo "== 첫 실사용 findings — peer session (forge-harness-59, 2026-08-21) =="
+# A marker that declares NO success definition cannot claim to have reflected against one.
+lane N1-absent-soul-vs-reflected BLOCK 'soul: 없음
+soul-check: reflected(델타를 성공정의에 비춰 재검했고 어긋남 없음)'
+lane N2-absent-soul-degraded-ok  PASS  'soul: 없음
+soul-check: DEGRADED_NO_SOUL(설계 전에 성공 정의를 쓰지 않았다 — 되비출 대상이 없다)'
+# The padded confession that passed in the field: it IS a real declaration of absence, and once
+# `없음` is a first-class value the padded form is no longer the only way through.
+lane N3-padded-confession        PASS  'soul: 없음 — 설계 전에 안 썼다. 사후 재구성이 아니라 그 사실을 적는다. 붙잡고 있던 것은 범위 결정 하나였다
+axes-run: ⓐ=codex'
+
+echo
+if [ $FAIL -eq 0 ]; then echo "SOUL LANES: PASS"; else echo "SOUL LANES: FAIL"; fi
+exit $FAIL

package/scripts/test_prior_art_prompt_lanes.sh

@@ -0,0 +1,128 @@
+#!/usr/bin/env bash
+# test_prior_art_prompt_lanes.sh — T2 훅의 known-pair 앵커.
+# 🟥 이 훅의 사활은 «막나» 가 아니라 **«소음이 아닌가»** 다. 냉독자가 지목한 자기무력화 경로:
+# 트리거가 부정확하면 하루 수십 번 뜨고, 3회 거절 억제가 오전 중에 켜져서 기능이 조용히 죽는다.
+# 그래서 음성 레인이 양성보다 많다.
+set -uo pipefail
+FH="$(cd "$(dirname "$0")/.." && pwd)"
+H="$FH/scripts/prior_art_prompt.sh"
+PASS=0; FAIL=0
+T="$(mktemp -d -t pap.XXXXXX)" || exit 3
+trap 'rm -rf "$T"' EXIT INT TERM
+chk(){ if [ "$2" = "$3" ]; then echo "  ✅ $1"; PASS=$((PASS+1)); else echo "  ❌ $1 (got=$2 want=$3)"; FAIL=$((FAIL+1)); fi; }
+# 각 호출은 세션-스탬프를 격리해야 «한 번만» 규칙에 서로 안 걸린다
+fires(){ local d; d="$(mktemp -d -t papd.XXXXXX)"; mkdir -p "$d/.claude"
+  local o; o=$(printf '{"tool_input":{"file_path":"%s"}}' "$1" | CLAUDE_PROJECT_DIR="$d" bash "$H" 2>/dev/null)
+  rm -rf "$d"; [ -n "$o" ] && echo yes || echo no; }
+
+echo "── 양성: 새 «메커니즘» 을 쓰기 직전 ──"
+chk "P1 새 .sh"            "$(fires "$T/new_gate.sh")" yes
+chk "P2 새 SKILL.md"       "$(fires "$T/plugins/x/skills/y/SKILL.md")" yes
+chk "P3 새 agents/*.md"    "$(fires "$T/plugins/x/agents/z.md")" yes
+chk "P4 새 .py"            "$(fires "$T/tool.py")" yes
+
+echo "── 음성: 소음이 되면 이 능력이 죽는다 ──"
+printf 'x\n' > "$T/exists.sh"
+chk "N1 🟥 «이미 있는 파일 편집» 은 새로 짓기가 아니다" "$(fires "$T/exists.sh")" no
+chk "N2 기록/산출물(.md 일반)"      "$(fires "$T/notes.md")" no
+chk "N3 tracks/ 아래 기록"          "$(fires "$T/tracks/_meta/x.sh")" no
+chk "N4 로그"                       "$(fires "$T/logs/a.sh")" no
+chk "N5 json/lock"                  "$(fires "$T/a.json")" no
+
+echo "── 🟥 스코프가 «세션» 이지 «날짜» 가 아니다 (초판 결함의 앵커) ──"
+# 초판은 스탬프를 날짜로 잡아, 하루에 세션을 여럿 도는 환경에서 **첫 세션만 뜨고 나머지는 전부
+# 침묵**했다. 주석은 «세션당» 이었고 구현은 «하루당» 이었다 — 그 둘이 갈리는 것이 이 레인이다.
+S="$(mktemp -d -t papsid.XXXXXX)"; mkdir -p "$S/.claude"
+sid_fire(){ local o; o=$(printf '{"session_id":"%s","tool_input":{"file_path":"%s/%s.sh"}}' "$1" "$T" "$2" \
+  | CLAUDE_PROJECT_DIR="$S" bash "$H" 2>/dev/null); [ -n "$o" ] && echo yes || echo no; }
+chk "S1 세션 A 1회차 → 뜬다"        "$(sid_fire sess-A f1)" yes
+chk "S2 세션 A 2회차 → 무음"        "$(sid_fire sess-A f2)" no
+chk "S3 🟥 세션 B 1회차 → 뜬다 (같은 날 다른 세션)" "$(sid_fire sess-B f3)" yes
+chk "S4 CONTROL — session_id 없으면 날짜로 degrade(무음 아님)" \
+    "$(printf '{"tool_input":{"file_path":"%s/f4.sh"}}' "$T" | CLAUDE_PROJECT_DIR="$(mktemp -d -t papnos.XXXXXX)" bash "$H" 2>/dev/null | grep -c additionalContext)" 1
+rm -rf "$S"
+
+echo "── 세션당 한 번 (3회 거절 억제로 조용히 죽는 경로 차단) ──"
+D="$(mktemp -d -t paponce.XXXXXX)"; mkdir -p "$D/.claude"
+o1=$(printf '{"tool_input":{"file_path":"%s/a.sh"}}' "$T" | CLAUDE_PROJECT_DIR="$D" bash "$H" 2>/dev/null)
+o2=$(printf '{"tool_input":{"file_path":"%s/b.sh"}}' "$T" | CLAUDE_PROJECT_DIR="$D" bash "$H" 2>/dev/null)
+chk "O1 첫 번째는 뜬다"   "$([ -n "$o1" ] && echo yes || echo no)" yes
+chk "O2 두 번째는 안 뜬다" "$([ -n "$o2" ] && echo yes || echo no)" no
+rm -rf "$D"
+
+echo "── 🟥 절대 안 막는다 (가역 표면) ──"
+D2="$(mktemp -d -t papnb.XXXXXX)"; mkdir -p "$D2/.claude"
+out=$(printf '{"tool_input":{"file_path":"%s/c.sh"}}' "$T" | CLAUDE_PROJECT_DIR="$D2" bash "$H" 2>/dev/null); rc=$?
+chk "B1 exit 0" "$rc" 0
+chk "B2 permissionDecision 을 안 낸다 (자동승인 역전 금지)" \
+    "$(printf '%s' "$out" | grep -c permissionDecision)" 0
+chk "B3 모델 채널(additionalContext)로 간다" \
+    "$(printf '%s' "$out" | grep -c additionalContext)" 1
+rm -rf "$D2"
+
+echo "── D: Bash 경로 — 🟥 첫 실사용이 «비발화» 로 났던 자리 (2026-08-21) ──"
+# matcher 가 `Write` 뿐이었는데 auto-mode 는 파일을 **Bash 리다이렉트/heredoc** 으로 만든다.
+# 즉 이 훅이 겨냥한 순간이 구조적으로 Write 를 안 탔다. 아래가 그 재현이다.
+D3=$(mktemp -d); export CLAUDE_PROJECT_DIR="$D3"; mkdir -p "$D3/.claude"
+chk "D1 Bash heredoc 로 새 .sh → 발화" \
+    "$(printf '%s' '{"session_id":"d1","tool_input":{"command":"cat > scripts/new_thing.sh <<EOF\necho hi\nEOF"}}' | bash "$H" 2>/dev/null | grep -c additionalContext)" 1
+rm -f "$D3/.claude/.prior_art_prompted_"*
+chk "D2 printf 리다이렉트로 새 SKILL.md → 발화" \
+    "$(printf '%s' '{"session_id":"d2","tool_input":{"command":"printf x > plugins/z/skills/q/SKILL.md"}}' | bash "$H" 2>/dev/null | grep -c additionalContext)" 1
+rm -f "$D3/.claude/.prior_art_prompted_"*
+# ★컨트롤 — D1/D2 가 «Bash 면 무조건 발화» 가 아님을 보인다. 소음이 이 훅을 죽인다.
+chk "D3 ★컨트롤 로그 리다이렉트 + 2>/dev/null → 침묵" \
+    "$(printf '%s' '{"session_id":"d3","tool_input":{"command":"echo x > /tmp/a.log 2>/dev/null"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+chk "D4 ★컨트롤 tracks/ 산출물 리다이렉트 → 침묵" \
+    "$(printf '%s' '{"session_id":"d4","tool_input":{"command":"cat > tracks/_meta/note.sh <<EOF\nx\nEOF"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+chk "D5 ★컨트롤 리다이렉트 없는 명령 → 침묵" \
+    "$(printf '%s' '{"session_id":"d5","tool_input":{"command":"git status --short"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+chk "D6 ★컨트롤 같은 세션 두 번째 Bash → 침묵 (세션당 1회가 Bash 에서도 산다)" \
+    "$( { printf '%s' '{"session_id":"d6","tool_input":{"command":"cat > scripts/a.sh <<EOF\nx\nEOF"}}' | bash "$H" >/dev/null 2>&1
+         printf '%s' '{"session_id":"d6","tool_input":{"command":"cat > scripts/b.sh <<EOF\nx\nEOF"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' '; } )" 0
+# 🟥 E: cross-family 4 HIGH — **전부 오발화**다 (2026-08-21). 이 훅에서 오발화는 미발화보다
+#    훨씬 비싸다: 소음이 되면 운영자가 무시하고 능력이 죽는다(원 저자가 «자기무력화 경로» 라 명명).
+rm -f "$D3/.claude/.prior_art_prompted_"*
+chk "E1 ★컨트롤 tee_probe.py 언급 (tee 에 뒤 경계 없던 자리) → 침묵" \
+    "$(printf '%s' '{"session_id":"e1","tool_input":{"command":"rg tee_probe.py scripts"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+chk "E2 ★컨트롤 stderr 리다이렉트 2> …/errors.sh → 침묵 (>>? 가 2> 안의 > 를 잡던 자리)" \
+    "$(printf '%s' '{"session_id":"e2","tool_input":{"command":"pytest 2> /tmp/pytest_errors.sh"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+chk "E2b ★컨트롤 stdout 버리고 stderr 만 .sh 로 → 침묵" \
+    "$(printf '%s' '{"session_id":"e2b","tool_input":{"command":"make test > /dev/null 2> /tmp/failures.sh"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+chk "E3 ★컨트롤 프로젝트 밖 리포트 git diff > /tmp/review_delta.sh → 침묵" \
+    "$(printf '%s' '{"session_id":"e3","tool_input":{"command":"git diff > /tmp/review_delta.sh"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+chk "E4 ★컨트롤 미확장 변수 \$LOG_DIR/x.sh → 침묵 (리터럴로 존재검사하면 거짓이다)" \
+    "$(printf '%s' '{"session_id":"e4","tool_input":{"command":"echo more >> \"$LOG_DIR/x.sh\""}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+# 🟥 E1b/E2c — **프로젝트 «안»** 경로로 같은 두 결함을 친다. E1/E2 는 /tmp 라서
+#    프로젝트-범위 규칙(ⓒ)만으로도 침묵했다 — 되돌림 실측에서 정규식 수리를 되돌려도
+#    적색이 0 이었고(=장식), 그게 이 두 레인을 만든 이유다. 아래는 ⓒ 가 못 잡는 자리다.
+rm -f "$D3/.claude/.prior_art_prompted_"*
+chk "E1b ★컨트롤 프로젝트 안 tee_probe.sh 언급 → 침묵 (tee 뒤 경계를 격리해서 친다)" \
+    "$(printf '%s' '{"session_id":"e1b","tool_input":{"command":"rg tee_probe.sh scripts"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+chk "E2c ★컨트롤 프로젝트 안 stderr 2> scripts/errors.sh → 침묵 (리다이렉트 앞 경계를 격리해서 친다)" \
+    "$(printf '%s' '{"session_id":"e2c","tool_input":{"command":"pytest 2> scripts/errors.sh"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+# E5/E6 — session_id 는 신뢰할 수 없는 입력이다
+_ESC=$(dirname "$D3")/pap_lane_escape_$$
+rm -f "$_ESC"
+printf '%s' "{\"session_id\":\"x/../../../$(basename "$_ESC")\",\"tool_input\":{\"file_path\":\"scripts/zz_new.sh\"}}" | bash "$H" >/dev/null 2>&1
+chk "E5 session_id 경로 탈출 → 프로젝트 밖에 파일이 안 생긴다" \
+    "$([ -e "$_ESC" ] && echo escaped || echo none)" none
+rm -f "$_ESC"
+rm -f "$D3/.claude/.prior_art_prompted_"*
+chk "E6 session_id 끝에 «/» → 두 번째 호출은 침묵 (스탬프가 실제로 써진다)" \
+    "$( { printf '%s' '{"session_id":"x/","tool_input":{"file_path":"scripts/zz_a.sh"}}' | bash "$H" >/dev/null 2>&1
+         printf '%s' '{"session_id":"x/","tool_input":{"file_path":"scripts/zz_b.sh"}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' '; } )" 0
+# E7 — 🟥 «additionalContext 가 떴다» 는 파서가 **옳은 토큰**을 뽑았다는 증거가 아니다(cross-family 레인 지적).
+rm -f "$D3/.claude/.prior_art_prompted_"*
+chk "E7 추출된 대상이 실제 리다이렉트 대상이다 (파서가 엉뚱한 토큰을 뽑아도 통과하던 자리)" \
+    "$(printf '%s' '{"session_id":"e7","tool_input":{"command":"cat > scripts/uniq_target_name.sh <<EOF\nx\nEOF"}}' | bash "$H" 2>/dev/null | grep -c 'uniq_target_name.sh')" 1
+unset CLAUDE_PROJECT_DIR; rm -rf "$D3"
+
+echo "── CONTROL: 계기가 죽으면 조용히 통과 (advisory 는 세션을 못 죽인다) ──"
+chk "C1 입력이 JSON 이 아니면 무음 exit 0" \
+    "$(printf 'not json' | bash "$H" >/dev/null 2>&1; echo $?)" 0
+chk "C2 file_path 없으면 무음" "$(printf '{"tool_input":{}}' | bash "$H" 2>/dev/null | wc -c | tr -d ' ')" 0
+
+echo
+if [ "$FAIL" -eq 0 ]; then echo "════ prior-art-prompt lanes: $PASS passed · 0 failed ════"; exit 0
+else echo "🟥 prior-art-prompt lanes: $FAIL 실패 / $((PASS+FAIL))"; exit 1; fi