@chrono-meta/fh-gate 3.0.0 → 3.1.1

package/scripts/test_gate_two_verdicts_lanes.sh

@@ -0,0 +1,139 @@
+#!/usr/bin/env bash
+# test_gate_two_verdicts_lanes.sh — pre-commit 의 `_acceptance_evidence_line` 계약을 고정한다.
+#
+# WHY (2026-09-06, frontier-digest 답습 · arXiv:2609.04167 «SWE-Gate»): 그 논문의 실측은
+# 기능 테스트를 통과한 수리 644 건 중 **221 건(34%)** 이 실제 PR 리뷰 코멘트에서 뽑은 제약을
+# 어겼다는 것이고, 처방은 «기능 정확성과 리뷰 제약 충족을 따로 채점하라» 다. 이 훅도 같은
+# 형태였다 — 축이 다 통과하면 «ALL AXES PASSED» 라는 **합성 판정 하나**만 찍혔고, 마커의
+# `crossfamily: DEGRADED_PANEL_UNUSED` 같은 값은 출력 어디에도 안 나왔다.
+#
+# SCOPE — 채널이지 판정이 아니다(§Mechanization Boundary): 이 함수는 «어떤 값이 적혔나」만
+# 찍는다. 값의 진위를 판정하지 않고, 어떤 경우에도 종료코드를 바꾸지 않는다. 그래서 레인도
+# «막나」가 아니라 «가려지나」를 잰다 — 특히 DEGRADED/UNKNOWN 이 조용히 사라지지 않는지.
+#
+# 종료코드: 0 = 계약대로 · 1 = 회귀
+set -uo pipefail
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+HOOK="$REPO_ROOT/templates/.git-hooks/pre-commit"
+T=$(mktemp -d); trap 'rm -rf "$T"' EXIT
+[ -f "$HOOK" ] || { echo "ⓘ $HOOK absent — subject missing when we looked (NOT a pass)"; exit 2; }
+
+sed -n '/^_acceptance_evidence_line()/,/^}/p' "$HOOK" > "$T/fn.sh"
+# 계기 보정: 추출이 비면 아래 픽스처가 «아무것도 아닌 것」을 재고 전부 통과한다.
+if ! grep -q '_acceptance_evidence_line' "$T/fn.sh"; then
+  echo "❌ HARNESS-ERROR — _acceptance_evidence_line 이 $HOOK 에서 추출되지 않았다."
+  echo "   픽스처가 빈 함수를 잴 참이었다. 초록을 보고하지 않고 중단한다."
+  exit 1
+fi
+
+FAIL=0
+run() { bash -c 'set -uo pipefail; . "$1"; _acceptance_evidence_line "$2"' _ "$T/fn.sh" "${1:-}" 2>&1; }
+lane() { # $1=id  $2=marker body ('' = 마커 없음)  $3..=출력에 반드시 있어야 하는 조각들
+  local id="$1" body="$2"; shift 2
+  local path="" out n rc
+  if [ -n "$body" ]; then path="$T/m.marker"; printf '%s\n' "$body" > "$path"; fi
+  out=$(run "$path"); rc=$?
+  if [ $rc -ne 0 ]; then
+    printf '  ❌ %-34s 함수가 rc=%s — 보고 전용인데 실패했다\n     %s\n' "$id" "$rc" "$out"; FAIL=1; return
+  fi
+  for n in "$@"; do
+    if ! printf '%s' "$out" | grep -qF -- "$n"; then
+      printf '  ❌ %-34s «%s» 가 출력에 없다\n     %s\n' "$id" "$n" "$out"; FAIL=1; return
+    fi
+  done
+  printf '  ✅ %-34s %s\n' "$id" "$(printf '%s' "$out" | head -1)"
+}
+
+echo "== 수용-근거 줄: 값이 그대로 드러나는가 =="
+
+# L1 known-positive — 네 필드가 다 있으면 네 값이 다 나온다
+lane L1-all-four "crossfamily: panel(codex,gemini) — 2라운드
+standpoint: tier2(qasp) — 명령과 출력을 댔다
+thirdparty: checked — 상류 소스 독해
+oracle: known-pair — 양성/음성 픽스처" \
+  "crossfamily=panel(codex,gemini)" "standpoint=tier2(qasp)" "thirdparty=checked" "oracle=known-pair"
+
+# L2 🟥 하중 레인 — DEGRADED 가 «통과» 뒤에 숨지 않는다 (이 레인 스위트의 존재 이유)
+lane L2-degraded-visible "crossfamily: DEGRADED_PANEL_UNUSED — 패널 미사용
+standpoint: not-applicable — Q0 ⓒ
+oracle: none — 잴 값이 없다" \
+  "crossfamily=DEGRADED_PANEL_UNUSED" "standpoint=not-applicable"
+
+# L3 UNKNOWN 도 마찬가지 — «안 봤다»가 «봤는데 괜찮다»로 안 접힌다
+lane L3-unknown-visible "crossfamily: UNKNOWN — 안 봤다
+standpoint: UNKNOWN — 안 봤다" \
+  "crossfamily=UNKNOWN" "standpoint=UNKNOWN"
+
+# L4 부재는 «(없음)» 으로 — 빈 문자열이면 필드가 있었는지조차 안 보인다 (미측정≠0)
+lane L4-absent-is-typed "axis2-model: opus" \
+  "crossfamily=(없음)" "standpoint=(없음)" "thirdparty=(없음)" "oracle=(없음)"
+
+# L5 마커 자체가 없는 경로(경량 게이트) — 근거가 «있다»고 주장하지 않는다
+lane L5-no-marker "" "n/a" "경량 게이트"
+
+# L6 들여쓴 필드도 읽는다(마커는 손으로 쓰는 파일이다)
+lane L6-indented "  crossfamily: declined — 근거 있음" "crossfamily=declined"
+
+# L7 첫 줄만 — 같은 키가 둘이면 앞의 것을 찍고 조용히 합치지 않는다
+lane L7-first-wins "crossfamily: UNKNOWN — 안 봤다
+crossfamily: panel(codex) — 나중 줄" "crossfamily=UNKNOWN"
+
+# L8 🟥 첫 실사용이 잡은 결함 — 괄호 «안»에 공백이 있으면 값이 잘려 문법도 깨진 문자열이 찍혔다
+#    (`thirdparty: checked(확인한 것 = …)` → `checked(확인한`). 판별자는 «괄호가 닫혔는가» 하나.
+lane L8-open-paren-trimmed "thirdparty: checked(확인한 것 = 초록 원문 대조)" "thirdparty=checked"
+# L9 반대편 — 닫힌 괄호는 값의 일부라 그대로 살아야 한다(L8 의 수리가 이걸 깨면 안 된다)
+lane L9-closed-paren-kept "crossfamily: panel(codex,gemini) — 2라운드" "crossfamily=panel(codex,gemini)"
+lane L9b-tier-paren-kept  "standpoint: tier2(qasp) — 명령과 출력" "standpoint=tier2(qasp)"
+
+# L8b 잘린 값이 «그대로» 새어나오지 않는지 직접 확인 (needle 부재를 단언)
+printf 'thirdparty: checked(확인한 것 = x)\n' > "$T/p.marker"
+if run "$T/p.marker" | grep -qF 'checked(확인한'; then
+  echo "  ❌ L8b 잘린 괄호 문자열이 아직 출력에 있다"; FAIL=1
+else
+  echo "  ✅ L8b 잘린 괄호 문자열은 출력에 없다"
+fi
+
+# ── 컨트롤 A (판별력): 값이 다르면 출력도 달라야 한다 ─────────────────────
+printf 'crossfamily: panel(codex) — x\n' > "$T/a.marker"
+printf 'crossfamily: DEGRADED_SINGLE_FAMILY — y\n' > "$T/b.marker"
+OA=$(run "$T/a.marker"); OB=$(run "$T/b.marker")
+if [ "$OA" != "$OB" ] && printf '%s' "$OB" | grep -qF 'DEGRADED_SINGLE_FAMILY'; then
+  echo "  ✅ CTRL-A 판별력: 서로 다른 값이 서로 다른 줄을 낸다"
+else
+  echo "  ❌ CTRL-A 판별력 없음 — 두 마커가 같은 줄을 냈다(계기가 값을 안 읽는다)"; FAIL=1
+fi
+
+# ── 컨트롤 B (되돌림): 값 추출을 죽인 뮤턴트에서 L2 가 빨개지는가 ──────────
+#    이게 없으면 «필드를 안 읽는 함수»도 이 스위트를 통과한다.
+sed 's/^  for f in crossfamily.*/  for f in ; do :; done; out="";/' "$T/fn.sh" > "$T/mut.sh"
+if ! grep -q 'out=""' "$T/mut.sh"; then
+  echo "  ❌ CTRL-B 뮤턴트가 적용되지 않았다 — 되돌림 프로브가 장식이다"; FAIL=1
+else
+  MOUT=$(bash -c 'set -uo pipefail; . "$1"; _acceptance_evidence_line "$2"' _ "$T/mut.sh" "$T/b.marker" 2>&1 || true)
+  if printf '%s' "$MOUT" | grep -qF 'DEGRADED_SINGLE_FAMILY'; then
+    echo "  ❌ CTRL-B 뮤턴트인데도 값이 나온다 — 레인이 실물을 안 재고 있다"; FAIL=1
+  else
+    echo "  ✅ CTRL-B 되돌림: 추출을 죽이면 값이 사라진다(레인이 실패할 수 있음을 증명)"
+  fi
+fi
+
+# ── 컨트롤 C (배선): 훅의 PASS 배너가 이 함수를 실제로 부르는가 ───────────
+#    함수만 있고 호출부가 없으면 산문이다([[feedback_built_but_not_wired]]).
+if grep -q '_acceptance_evidence_line "\${MARKER:-}"' "$HOOK" \
+   && grep -q 'ALL AXES PASSED' "$HOOK"; then
+  echo "  ✅ CTRL-C 배선: PASS 배너가 이 함수를 부른다"
+else
+  echo "  ❌ CTRL-C 배선 없음 — 정의만 있고 PASS 배너가 안 부른다"; FAIL=1
+fi
+
+# ── 컨트롤 D (무해): 이 함수는 종료코드를 바꾸지 않는다 (채널이지 게이트가 아니다) ──
+run "" >/dev/null 2>&1; RC_NONE=$?
+run "$T/b.marker" >/dev/null 2>&1; RC_DEG=$?
+if [ "$RC_NONE" -eq 0 ] && [ "$RC_DEG" -eq 0 ]; then
+  echo "  ✅ CTRL-D 채널: 마커 부재도 DEGRADED 도 rc=0 (막지 않는다)"
+else
+  echo "  ❌ CTRL-D 이 함수가 종료코드를 바꾼다 (none=$RC_NONE degraded=$RC_DEG) — 채널이 아니라 게이트가 됐다"; FAIL=1
+fi
+
+echo "── gate-two-verdicts lanes: $([ $FAIL -eq 0 ] && echo 'all green' || echo 'FAILED')"
+exit "$FAIL"

package/scripts/test_map_postprocess_lanes.sh

@@ -0,0 +1,143 @@
+#!/usr/bin/env bash
+# test_map_postprocess_lanes.sh — scripts/map_postprocess.py 의 두 계약을 고정한다.
+#
+# WHY: 이 후처리는 발행되는 지도 HTML 의 «폭 하한»을 바꾸고 SVG 를 다시 만든다. 둘 다 조용히
+# 실패하면 사람이 못 본다 — 패치가 안 붙어도 페이지는 뜨고(옛 폭), SVG 가 어긋나도 열리기는 한다.
+# 그래서 ⓐ 리터럴 부재 = 드리프트 = 하드 정지(3), ⓑ SVG 는 «커밋된 두 장 바이트 동일 재현»을
+# known-pair 로 잡는다. 컨트롤: 패치 문자열이 실제로 상수와 다르고 뷰포트를 참조하는가.
+#
+# 종료코드: 0 pass · 1 레인 실패 · 2 대상 부재 · 10 setup 실패
+set -uo pipefail
+cd "$(dirname "$0")/.." || exit 10
+S=scripts/map_postprocess.py
+PASS=0; FAIL=0
+ok() { echo "✅ $1"; PASS=$((PASS+1)); }
+ng() { echo "❌ $1"; FAIL=$((FAIL+1)); }
+
+[ -f "$S" ] || { echo "ⓘ $S absent — subject missing when we looked (NOT a pass)"; exit 2; }
+command -v python3 >/dev/null 2>&1 || { echo "ⓘ python3 absent — setup broke (NOT a pass)"; exit 10; }
+
+TMP=$(mktemp -d) || exit 10
+trap 'rm -rf "$TMP"' EXIT
+
+mkfix() {  # $1=out path, $2=reader-width literal line (may be empty), $3=extra style blocks
+  {
+    printf '<html><head><style>.a{color:red}</style>'
+    [ -n "${3:-}" ] && printf '<style>.b{color:blue}</style>'
+    printf '</head><body>'
+    printf '<svg viewBox="0 0 10 10"><rect/></svg>'
+    printf '<script>%s</script></body></html>' "$2"
+  } > "$1"
+}
+
+# ── L1 known-positive: 상수가 있으면 패치되고 SVG 가 나온다
+mkfix "$TMP/pos.html" 'var MIN_READER_WIDTH = 960;' ''
+python3 "$S" "$TMP/pos.html" >"$TMP/o1" 2>&1; RC=$?
+if [ $RC -eq 0 ] && /usr/bin/grep -q 'window.innerWidth' "$TMP/pos.html" && [ -f "$TMP/pos.svg" ]; then
+  ok "L1 known-positive: patched + svg written (rc=0)"
+else
+  ng "L1 known-positive failed (rc=$RC): $(head -2 "$TMP/o1" | tr '\n' ' ')"
+fi
+
+# ── L2 멱등: 두 번째 실행은 SKIP 이고 여전히 rc=0
+python3 "$S" "$TMP/pos.html" >"$TMP/o2" 2>&1; RC=$?
+if [ $RC -eq 0 ] && /usr/bin/grep -q 'SKIP' "$TMP/o2"; then
+  ok "L2 idempotent re-run reports SKIP (rc=0)"
+else
+  ng "L2 idempotency broken (rc=$RC): $(head -2 "$TMP/o2" | tr '\n' ' ')"
+fi
+
+# ── L3 known-negative(드리프트): 리터럴이 아예 없으면 rc=3 이고 파일을 안 건드린다
+mkfix "$TMP/drift.html" 'var SOMETHING_ELSE = 1;' ''
+BEFORE=$(shasum "$TMP/drift.html" | awk '{print $1}')
+python3 "$S" "$TMP/drift.html" >"$TMP/o3" 2>&1; RC=$?
+AFTER=$(shasum "$TMP/drift.html" | awk '{print $1}')
+if [ $RC -eq 3 ] && [ "$BEFORE" = "$AFTER" ] && [ ! -f "$TMP/drift.svg" ]; then
+  ok "L3 drift → rc=3, file untouched, no svg (fail-closed)"
+else
+  ng "L3 drift not fail-closed (rc=$RC, sha changed=$([ "$BEFORE" = "$AFTER" ] && echo no || echo yes))"
+fi
+
+# ── L4 컨트롤: 패치 문자열이 상수와 실제로 다르고 뷰포트를 참조하는가
+#    (같은 값으로 «치환»하면 L1 도 통과한다 — 그 자멸을 막는 자리)
+OLDLIT=$(python3 -c "import re;s=open('$S',encoding='utf-8').read();print(re.search(r\"^OLD = '(.*)'\",s,re.M).group(1))")
+NEWLIT=$(python3 -c "
+import re
+s=open('$S',encoding='utf-8').read()
+m=re.search(r\"NEW = \((.*?)\)\n\", s, re.S)
+print(''.join(re.findall(r\"'([^']*)'\", m.group(1))))")
+if [ -n "$OLDLIT" ] && [ -n "$NEWLIT" ] && [ "$OLDLIT" != "$NEWLIT" ] && \
+   printf '%s' "$NEWLIT" | /usr/bin/grep -q 'innerWidth'; then
+  ok "L4 control: replacement differs from the constant and reads the viewport"
+else
+  ng "L4 control: replacement is vacuous (old='$OLDLIT' new='$NEWLIT')"
+fi
+
+# ── L5 known-pair: 커밋된 지도 두 장을 HTML 에서 바이트 동일하게 재현하는가
+#    (SVG 는 <style>+<svg> 만 담아 뷰어 JS 를 안 싣는다 — 그래서 폭 패치와 무관하게 안정적인 짝이다)
+PAIR_OK=1; PAIR_RAN=0
+for base in docs/map/fh_trust.dataflow docs/map/fh_assets.architecture; do
+  [ -f "$base.html" ] && [ -f "$base.svg" ] || continue
+  PAIR_RAN=$((PAIR_RAN+1))
+  python3 - "$S" "$base.html" "$base.svg" <<'PY' || PAIR_OK=0
+import importlib.util, sys
+spec = importlib.util.spec_from_file_location('mp', sys.argv[1])
+mp = importlib.util.module_from_spec(spec); spec.loader.exec_module(mp)
+built = mp.build_svg(open(sys.argv[2], encoding='utf-8').read())
+cur = open(sys.argv[3], encoding='utf-8').read()
+if built != cur:
+    print(f'   ✗ {sys.argv[3]}: rebuilt {len(built)}B != committed {len(cur)}B')
+    sys.exit(1)
+PY
+done
+if [ "$PAIR_RAN" -eq 0 ]; then
+  ng "L5 known-pair: 0 pairs found — instrument had nothing to measure (NOT a pass)"
+elif [ "$PAIR_OK" -eq 1 ]; then
+  ok "L5 known-pair: $PAIR_RAN committed svg(s) reproduced byte-for-byte from html"
+else
+  ng "L5 known-pair: rebuilt svg differs from the committed one"
+fi
+
+# ── L6 <style> 블록이 둘이면 추출기는 멈춘다(조용히 첫 장만 싣지 않는다)
+mkfix "$TMP/two.html" 'var MIN_READER_WIDTH = 960;' 'extra'
+python3 "$S" "$TMP/two.html" >"$TMP/o6" 2>&1; RC=$?
+if [ $RC -eq 3 ] && [ ! -f "$TMP/two.svg" ]; then
+  ok "L6 two <style> blocks → rc=3, no svg written"
+else
+  ng "L6 two <style> blocks not rejected (rc=$RC)"
+fi
+
+# ── L7 없는 파일 → rc=4 (인자 오류와 드리프트를 섞지 않는다)
+python3 "$S" "$TMP/nope.html" >"$TMP/o7" 2>&1; RC=$?
+[ $RC -eq 4 ] && ok "L7 missing file → rc=4 (distinct from drift rc=3)" || ng "L7 missing file rc=$RC (expected 4)"
+
+# ── L8 --check 는 쓰지 않는다
+mkfix "$TMP/chk.html" 'var MIN_READER_WIDTH = 960;' ''
+B=$(shasum "$TMP/chk.html" | awk '{print $1}')
+python3 "$S" --check "$TMP/chk.html" >"$TMP/o8" 2>&1; RC=$?
+A=$(shasum "$TMP/chk.html" | awk '{print $1}')
+if [ $RC -eq 0 ] && [ "$B" = "$A" ] && /usr/bin/grep -q 'UNPATCHED' "$TMP/o8" && [ ! -f "$TMP/chk.svg" ]; then
+  ok "L8 --check reports without writing"
+else
+  ng "L8 --check wrote or misreported (rc=$RC)"
+fi
+
+# ── L9 발행본이 실제로 패치된 상태인가 (배선 확인 — 스크립트가 있는데 안 돌린 경우를 잡는다)
+SHIPPED_OK=1; SHIPPED_N=0
+for f in docs/map/*.html; do
+  [ -f "$f" ] || continue
+  case "$f" in *.visual-check.html) continue;; esac
+  SHIPPED_N=$((SHIPPED_N+1))
+  python3 "$S" --check "$f" 2>/dev/null | /usr/bin/grep -q '^PATCHED' || { SHIPPED_OK=0; echo "   ✗ $f not patched"; }
+done
+if [ "$SHIPPED_N" -eq 0 ]; then
+  ng "L9 no docs/map/*.html found — nothing measured (NOT a pass)"
+elif [ "$SHIPPED_OK" -eq 1 ]; then
+  ok "L9 all $SHIPPED_N shipped map html carry the patched reader-width floor"
+else
+  ng "L9 a shipped map html is unpatched — re-run: python3 $S docs/map/*.html"
+fi
+
+echo "── map_postprocess lanes: PASS=$PASS FAIL=$FAIL"
+[ "$FAIL" -eq 0 ] || exit 1
+exit 0

package/scripts/test_marker_affected_lanes.sh

@@ -0,0 +1,93 @@
+#!/usr/bin/env bash
+# test_marker_affected_lanes.sh — regression fixtures for pre-commit's
+# validate_affected_leg (2026-09-04, frontier absorption of Anthropic AI-Native SDLC
+# playbook intent.md's "Affected users and systems" / "Open questions" columns).
+#
+# WHY: FH does not split the two source columns into two marker fields — a second field is
+# a second empty slot, the exact shape soul-check:/tenets:/thirdparty: already avoid. One
+# free-prose line carries both, by convention ("건드리는 것 · 열린 질문 = …").
+#
+# SCOPE — channel, not judgment: single line · no duplicate · non-vacuous · not a bare
+# placeholder. Unlike defeater:, "없음" is NOT a legal declared-absence here — every change
+# touches something, so a placeholder-only value is an unfilled field, not an honest record
+# of nothing. Absent (no `affected:` line at all) is legal — adoption is incremental, same
+# shape as soul-check:/tenets:.
+#
+# Fixtures assert BOTH directions (known-pair): every intended shape is admitted, and every
+# hole this lane closes still blocks.
+#
+# Usage: bash scripts/test_marker_affected_lanes.sh   Exit: 0 = all behave; 1 = regression.
+
+set -uo pipefail
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+HOOK="$REPO_ROOT/templates/.git-hooks/pre-commit"
+T=$(mktemp -d); trap 'rm -rf "$T"' EXIT
+
+# 헬퍼도 같이 추출한다 — 안 하면 다리가 fail-open 이 되고 레인이 거짓 PASS 를 낸다
+# (defeater/soul-check 가 이미 겪은 형태: [[feedback_broken_parser_reports_a_verdict]]).
+sed -n '/^marker_recreate_hint()/,/^}/p'     "$HOOK" >  "$T/_helpers.sh"
+sed -n '/^_marker_template_residue()/,/^}/p' "$HOOK" >> "$T/_helpers.sh"
+sed -n '/^validate_affected_leg()/,/^}/p'    "$HOOK" >  "$T/fn0.sh"
+cat "$T/_helpers.sh" "$T/fn0.sh" > "$T/fn.sh"
+
+# Instrument calibration — an empty extraction would let every fixture "pass" against nothing.
+if ! grep -q 'validate_affected_leg' "$T/fn.sh"; then
+  echo "❌ HARNESS-ERROR — validate_affected_leg did not extract from $HOOK."
+  echo "   Fixtures below would measure an empty function. Aborting rather than reporting green."
+  exit 1
+fi
+grep -q '^_marker_template_residue()' "$T/fn.sh" || { echo "❌ HARNESS-ERROR — 헬퍼 미결합"; exit 1; }
+
+FAIL=0
+lane() { # $1 = id  $2 = expect(BLOCK|PASS)  $3 = marker body
+  local id="$1" expect="$2" body="$3" rc out
+  printf '%s\n' "$body" > "$T/m.marker"
+  out=$( bash -c 'set -uo pipefail; . "$1"; validate_affected_leg "$2"' _ "$T/fn.sh" "$T/m.marker" 2>&1 ); rc=$?
+  local got=PASS; [ $rc -ne 0 ] && got=BLOCK
+  if [ "$got" = "$expect" ]; then
+    printf '  ✅ %-40s %s\n' "$id" "$got"
+  else
+    printf '  ❌ %-40s expected %s, got %s\n     %s\n' "$id" "$expect" "$got" "$(printf '%s' "$out" | head -3)"
+    FAIL=1
+  fi
+}
+
+echo "== affected: lanes — PASS side (absent / genuinely filled) =="
+lane P1-absent-is-legal        PASS  "axis2-model: opus
+axes-run: ⓐ=codex"
+lane P2-real-content           PASS  "affected: 소비자 install 의 pre-commit 사용자(마커 형식) · 열린 질문 = 필드 강제 시점"
+lane P3-real-content-no-openq  PASS  "affected: the private companion store 미러 사용자 · 인덱스 재생성 스크립트가 이 필드를 안 읽는다"
+lane P4-korean-multiword       PASS  "affected: 마커를 grep 으로 감사하는 하류 세션 전부 · 열린 질문 = 강제 시점을 정할 것인가"
+
+echo "== affected: lanes — BLOCK side (holes that must stay closed) =="
+lane G1-placeholder-none-ko    BLOCK "affected: 없음"
+lane G2-placeholder-tbd        BLOCK "affected: TBD"
+lane G3-placeholder-tbd-lower  BLOCK "affected: tbd"
+lane G4-placeholder-dash       BLOCK "affected: -"
+lane G5-placeholder-na         BLOCK "affected: n/a"
+lane G6-empty-field            BLOCK "affected:"
+lane G7-duplicate-line         BLOCK "affected: 소비자 install 사용자
+affected: 정정 — 사실은 필드 하네스 사용자다"
+lane G8-nearmiss-plural        BLOCK "affects: 소비자 install 사용자"
+lane G9-nearmiss-space         BLOCK "affected : 소비자 install 사용자"
+lane G10-nearmiss-typo         BLOCK "affeted: 소비자 install 사용자"
+lane G11-too-short             BLOCK "affected: TBD 확인"
+# 🟥 _marker_template_residue 는 힌트에서 파생한 자리표시자만 본다(v3, defeater 의 R1~R4 가
+# 이미 겪은 형태). `affected:` 는 힌트에 아직 실려 있지 않아서 필드-고유 자리표시자는 못
+# 잡는다 — 명명된 잔여(defeater 절 참고). 잡히는 것은 다른 필드와 **공유하는** `<...>` 뿐이다.
+lane G13-shared-hint-placeholder BLOCK "affected: <...>"
+
+echo
+echo "== 실물 코퍼스 대조 (있으면) =="
+# 실물 마커에 affected: 가 아직 없는 것이 정상이다 — 이 필드는 오늘 신설이다. 부재 마커도
+# 여전히 PASS 여야 한다는 것을 실물로도 한 번 더 확인한다(계기가 실물 코퍼스에서도 안 죽는가).
+_real="$REPO_ROOT/tracks/_meta/.axes_23_passed_fix_chamber-run-doctrine-vocabulary_2026-09-04.marker"
+if [ -f "$_real" ]; then
+  lane R1-real-corpus-marker-still-passes PASS "$(cat "$_real")"
+else
+  echo "  ⚠️  실물 마커 부재 — SKIPPED (아직 오늘자 the private companion store 미러가 없을 수 있다, 통과 아님)"
+fi
+
+echo
+if [ $FAIL -eq 0 ]; then echo "AFFECTED LANES: PASS"; else echo "AFFECTED LANES: FAIL"; fi
+exit $FAIL

package/scripts/test_marker_crossfamily_lanes.sh

@@ -34,19 +34,41 @@ sed -n '/^validate_crossfamily_leg()/,/^}/p' "$HOOK" > "$T/fn.sh"
 
 # Instrument calibration: an empty extraction would let every fixture "pass" against
 # nothing. Assert the function body actually arrived before measuring anything.
-if ! grep -q 'DEGRADED_PANEL_UNUSED' "$T/fn.sh"; then
-  echo "❌ HARNESS-ERROR — validate_crossfamily_leg did not extract from $HOOK."
-  echo "   Fixtures below would measure an empty function. Aborting rather than reporting green."
+# '_res_active' is inside the residency= token block (2026-09-05) — RESIDENCY_TOKEN_GRACE_DATE
+# itself lives OUTSIDE the function (same placement as DEFEATER_GRACE_DATE next to
+# validate_defeater_leg), so it is not part of this extraction and is supplied by the harness
+# below, exactly like GRACE_RES is.
+if ! grep -q 'DEGRADED_PANEL_UNUSED' "$T/fn.sh" || ! grep -q '_res_active' "$T/fn.sh"; then
+  echo "❌ HARNESS-ERROR — validate_crossfamily_leg did not extract from $HOOK (or the residency"
+  echo "   token block is missing from it). Fixtures below would measure an empty/stale function."
   exit 1
 fi
 
-mk() { printf "$1" > "$T/$2"; }   # $1 = marker body, $2 = fixture name
-run() { bash -c "source '$T/fn.sh'; validate_crossfamily_leg '$1'" >/dev/null 2>&1; }
+GRACE_RES=$(grep -m1 '^RESIDENCY_TOKEN_GRACE_DATE=' "$HOOK" | sed -E 's/.*"(.*)"/\1/')
+[ -n "$GRACE_RES" ] || { echo "❌ HARNESS-ERROR — RESIDENCY_TOKEN_GRACE_DATE 를 못 읽었다"; exit 1; }
+# Every fixture below this point (k*/b*/x*/c*) tests crossfamily's PRE-EXISTING shape rules —
+# panel format, embedding/reranker filters, declined, degrade grounds — none of them are testing
+# the residency-token addition. So mk()/run() stamp a date BEFORE RESIDENCY_TOKEN_GRACE_DATE into
+# the marker filename (the same field validate_crossfamily_leg itself reads via `mdate`), earning
+# exemption the same way a real old marker would — not special-cased in the check function for
+# this suite's convenience. The dedicated residency-token section near the end of this file uses
+# its OWN helper with an explicit, varying date to test the grace boundary on purpose.
+PRE_RES="2026-08-01"   # < RESIDENCY_TOKEN_GRACE_DATE (2026-09-05) by construction
+# 🟥 the DATE must be the LAST underscore-segment before `.marker` — validate_crossfamily_leg's
+# own `mdate` extraction is `.*_(YYYY-MM-DD)\.marker$`, which does not match if a fixture-name
+# suffix follows the date (caught by this suite's own fail-before run: k1/k1b/k7 false-BLOCKed
+# because ".._${PRE_RES}_$2.marker" put the name AFTER the date, so mdate came back empty and
+# every pre-existing fixture was silently treated as un-exempt).
+mk() { printf "$1" > "$T/.axes_23_passed_fix_x_$2_${PRE_RES}.marker"; }   # $1=body $2=fixture name
+run() {
+  bash -c "RESIDENCY_TOKEN_GRACE_DATE='$GRACE_RES'; source '$T/fn.sh'; validate_crossfamily_leg '$T/.axes_23_passed_fix_x_$1_${PRE_RES}.marker'" \
+    >/dev/null 2>&1
+}
 
 FAIL=0; N=0
 check() { # $1=fixture $2=expected(PASS|BLOCK) $3=label
   N=$((N+1))
-  if run "$T/$1"; then got=PASS; else got=BLOCK; fi
+  if run "$1"; then got=PASS; else got=BLOCK; fi
   if [ "$got" = "$2" ]; then echo "✅ $3 → $got"; else echo "❌ $3 → $got (expected $2)"; FAIL=1; fi
 }
 
@@ -166,6 +188,68 @@ check c4 BLOCK "glm-ocr — matches a valid family AND an incapable class"
 mk 'crossfamily: panel(qwen-embedding-8b) — qwen family\n' c5
 check c5 BLOCK "qwen-embedding — same overlap, other direction"
 
+# ── residency= token inside crossfamily grounds (2026-09-05) ──────────────────────────────────
+# Wires scripts/residency_closure_scan.py's own verdict into the SAME typed field this whole
+# suite already calibrates, rather than opening a second marker line. All fixtures above this
+# point are PRE-GRACE (via mk()'s PRE_RES stamp) and therefore exempt by construction — this
+# section is the only place that varies the marker-filename date on purpose, mirroring
+# test_marker_soul_tenet_lanes.sh's `dlane` / test_marker_soul_check_lanes.sh's `planep` pattern.
+# Same ordering requirement as mk()/run() above — date LAST, immediately before `.marker`.
+resfix() { printf "%s\n" "$1" > "$T/.axes_23_passed_fix_x_$3_$2.marker"; }   # $1=body $2=date $3=fname
+resrun() {   # $1=date $2=fname → rc
+  bash -c "RESIDENCY_TOKEN_GRACE_DATE='$GRACE_RES'; source '$T/fn.sh'; validate_crossfamily_leg '$T/.axes_23_passed_fix_x_$2_$1.marker'" \
+    >/dev/null 2>&1
+}
+rescheck() {   # $1=fname $2=date $3=body $4=expect(PASS|BLOCK) $5=label
+  N=$((N+1))
+  resfix "$3" "$2" "$1"
+  if resrun "$2" "$1"; then got=PASS; else got=BLOCK; fi
+  if [ "$got" = "$4" ]; then echo "✅ $5 → $got"; else echo "❌ $5 → $got (expected $4)"; FAIL=1; fi
+}
+
+echo
+echo "── residency= token in crossfamily grounds (grace = $GRACE_RES) ──"
+echo "· panel(...) REQUIRES a well-formed residency=CLEAN( token —"
+rescheck r1 "$GRACE_RES" 'crossfamily: panel(codex) — residency=CLEAN(files=7) · R1..R2, 4 findings' \
+  PASS  "r1 panel + residency=CLEAN( present — required token satisfied"
+rescheck r2 "$GRACE_RES" 'crossfamily: panel(codex) — R1..R2, 4 findings, no residency token at all' \
+  BLOCK "r2 panel POST-GRACE with NO residency token → BLOCK (the hole this closes)"
+rescheck r3 "2026-08-20" 'crossfamily: panel(codex) — R1..R2, 4 findings, no residency token at all' \
+  PASS  "r3 SAME body as r2, PRE-GRACE filename date → exempt (no retroactivity)"
+rescheck r4 "$GRACE_RES" 'crossfamily: panel(codex) — residency=TAINTED(2 files, stripped=no) · sent anyway' \
+  BLOCK "r4 panel + residency=TAINTED( co-present — contradiction (sent AND tainted)"
+rescheck r5 "$GRACE_RES" 'crossfamily: panel(codex) — residency=NOT_SCANNED(scanner absent) · sent anyway' \
+  BLOCK "r5 panel + residency=NOT_SCANNED( co-present — contradiction (sent AND unscanned)"
+rescheck r6 "$GRACE_RES" 'crossfamily: panel(codex) — residency=WEIRD(oops) · R1, 1 finding' \
+  BLOCK "r6 panel + malformed residency token (not one of CLEAN|TAINTED|NOT_SCANNED)"
+rescheck r7 "$GRACE_RES" 'crossfamily: panel(codex) — residency=CLEAN(files=3) · residency=CLEAN(files=9) · dup' \
+  BLOCK "r7 panel + TWO residency tokens on one line (first-wins trap, same as dup crossfamily:)"
+
+echo "· DEGRADED_*/UNKNOWN/declined — residency= is OPTIONAL, format-only when present —"
+rescheck r8 "$GRACE_RES" 'crossfamily: DEGRADED_SINGLE_FAMILY — residency=TAINTED(2 files, stripped=no) not sent, probed codex/agy, 0 reachable' \
+  PASS  "r8 DEGRADED + well-formed TAINTED token — optional token, present and valid"
+rescheck r9 "$GRACE_RES" 'crossfamily: DEGRADED_SINGLE_FAMILY — probed codex/agy, 0 reachable' \
+  PASS  "r9 DEGRADED with NO residency token at all — optional, absence is fine"
+rescheck r10 "$GRACE_RES" 'crossfamily: DEGRADED_SINGLE_FAMILY — residency=BOGUS(oops) probed codex, 0 reachable' \
+  BLOCK "r10 DEGRADED + malformed residency token → BLOCK even though the token itself is optional"
+rescheck r11 "$GRACE_RES" 'crossfamily: UNKNOWN — residency=NOT_SCANNED(scanner absent), panel not probed this round' \
+  PASS  "r11 UNKNOWN + well-formed NOT_SCANNED token"
+rescheck r12 "$GRACE_RES" 'crossfamily: declined — operator declined sidecars, chosen floor, per knowledge/shared/rules/operational_adaptation.md residency=CLEAN(files=2)' \
+  PASS  "r12 declined + a well-formed CLEAN token appended after the resolvable-record citation"
+rescheck r13 "$GRACE_RES" 'crossfamily: DEGRADED_PANEL_UNUSED — residency=CLEAN(files=1) · residency=TAINTED(files=1) codex+agy reachable, not recruited' \
+  BLOCK "r13 DEGRADED + TWO residency tokens — the duplicate guard applies here too, not just panel"
+# r14–r17 (cross-family codex gpt-5.5, 2026-09-05): the first draft grepped the token PREFIX
+# `residency=<KIND>(`, so a token that failed the prefix grep was treated as ABSENT — on the optional
+# path that is a fail-open (malformed reads as "no token, fine"). Presence is now counted first.
+rescheck r14 "$GRACE_RES" 'crossfamily: DEGRADED_SINGLE_FAMILY — residency=CLEAN (files=2) probed codex, 0 reachable' \
+  BLOCK "r14 DEGRADED + spaced token 'residency=CLEAN (files=2)' — malformed, must not read as absent"
+rescheck r15 "$GRACE_RES" 'crossfamily: DEGRADED_SINGLE_FAMILY — residency=CLEAN(files=1 probed codex, 0 reachable' \
+  BLOCK "r15 DEGRADED + unterminated token 'residency=CLEAN(files=1' (no close paren) → malformed"
+rescheck r16 "$GRACE_RES" 'crossfamily: panel(codex) — residency=CLEAN(files=3, stripped=2) · R1..R3, 8 findings' \
+  PASS  "r16 panel + CLEAN token whose payload contains a space and a comma (legal inside the parens)"
+rescheck r17 "$GRACE_RES" 'crossfamily: panel(codex) — residency=CLEAN(files=3, stripped=2) — stripped files were named to the reviewer' \
+  PASS  "r17 control — a second em-dash in the grounds does not break the token parse"
+
 echo
 if [ "$FAIL" -eq 0 ]; then echo "✅ all $N fixtures behave"; else echo "❌ regression ($N fixtures run)"; fi
 exit "$FAIL"

package/scripts/test_marker_oracle_lanes.sh

@@ -0,0 +1,136 @@
+#!/usr/bin/env bash
+# test_marker_oracle_lanes.sh — regression fixtures for pre-commit's validate_oracle_leg
+# (2026-09-05, ISO/IEC TR 29119-11 alignment — iso_ai_standards_crosswalk.md §4 M1, operator-approved).
+#
+# WHY: the test-oracle problem is the core of TR 29119-11 — «when no expected result exists, what
+# did you decide against?». FH already carries the mechanism (known-pair controls, scorer fixed before
+# results, «not found ≠ 0») but the marker recorded only «controls alive», never WHICH KIND of oracle.
+# `oracle: <kind> — <grounds>` is that record. Closed enum of six:
+#   known-pair · metamorphic · back-to-back · a-b (A/B accepted) · human · none (reason REQUIRED).
+#
+# SCOPE — channel, not judgment: enum membership · the kind must be followed by a delimiter or end
+# of line (an enum member as a mere PREFIX — `known-pair2`, `human_review` — is not a member) ·
+# non-vacuous grounds (≥2 words, no placeholder) · `none` must carry its reason · single line ·
+# near-miss keys block by ONE rule: any line whose key starts with `oracle` but is not exactly
+# `oracle:` (`Oracle:` `oracles:` `oracle :` `oracle　:` `oracle_type:` `oracle-type:` bare `oracle`)
+# plus the typos `orcale:` `oralce:` `오라클:` — and they block EVEN WHEN a correct `oracle:` line is
+# also present (a shadowed correction is the quietest failure). The hook never judges whether the
+# named oracle was actually used. Absent = pass — adoption is incremental, same shape as
+# affected:/soul-check:/tenets:.
+#
+# Fixtures assert BOTH directions (known-pair): every intended shape is admitted, and every hole
+# this lane closes still blocks. Indentation is exercised on BOTH sides (o6 pass / o19 block) so a
+# leading-space line can neither be skipped nor bypass validation. Where two holes would produce the
+# same BLOCK, the lane also asserts the specific diagnostic (4th arg) so each branch is covered
+# uniquely (cross-family codex #7). o31 runs the leg WITHOUT its helper and expects HARNESS-ERROR,
+# so a fail-open on helper absence cannot hide behind a green suite.
+#
+# Usage: bash scripts/test_marker_oracle_lanes.sh   Exit: 0 = all behave; 1 = regression.
+
+set -uo pipefail
+REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+HOOK="$REPO_ROOT/templates/.git-hooks/pre-commit"
+T=$(mktemp -d); trap 'rm -rf "$T"' EXIT
+
+# 헬퍼도 같이 추출한다 — 안 하면 다리가 fail-open 이 되고 레인이 거짓 PASS 를 낸다
+# ([[feedback_broken_parser_reports_a_verdict]] — defeater/soul-check/affected 가 이미 겪은 형태).
+sed -n '/^marker_recreate_hint()/,/^}/p'     "$HOOK" >  "$T/_helpers.sh"
+sed -n '/^_marker_template_residue()/,/^}/p' "$HOOK" >> "$T/_helpers.sh"
+sed -n '/^validate_oracle_leg()/,/^}/p'      "$HOOK" >  "$T/fn0.sh"
+cat "$T/_helpers.sh" "$T/fn0.sh" > "$T/fn.sh"
+
+# Instrument calibration — an empty extraction would let every fixture "pass" against nothing.
+if ! grep -q 'validate_oracle_leg' "$T/fn.sh"; then
+  echo "❌ HARNESS-ERROR — validate_oracle_leg did not extract from $HOOK."
+  echo "   Fixtures below would measure an empty function. Aborting rather than reporting green."
+  exit 1
+fi
+grep -q '^_marker_template_residue()' "$T/fn.sh" || { echo "❌ HARNESS-ERROR — 헬퍼 미결합"; exit 1; }
+
+FAIL=0
+lane() { # $1 = id  $2 = expect(BLOCK|PASS)  $3 = marker body  [$4 = diagnostic substring that must appear]
+  local id="$1" expect="$2" body="$3" needle="${4:-}" rc out
+  printf '%s\n' "$body" > "$T/m.marker"
+  out=$( bash -c 'set -uo pipefail; . "$1"; validate_oracle_leg "$2"' _ "$T/fn.sh" "$T/m.marker" 2>&1 ); rc=$?
+  local got=PASS; [ $rc -ne 0 ] && got=BLOCK
+  if [ "$got" != "$expect" ]; then
+    printf '  ❌ %-40s expected %s, got %s\n     %s\n' "$id" "$expect" "$got" "$(printf '%s' "$out" | head -3)"
+    FAIL=1; return
+  fi
+  if [ -n "$needle" ] && ! printf '%s' "$out" | grep -qF -- "$needle"; then
+    printf '  ❌ %-40s %s but the diagnostic «%s» is missing — a different branch fired\n     %s\n' "$id" "$got" "$needle" "$(printf '%s' "$out" | head -2)"
+    FAIL=1; return
+  fi
+  printf '  ✅ %-40s %s\n' "$id" "$got"
+}
+
+echo "== oracle: lanes — PASS side (absent / every enum member / delimiter variants) =="
+lane o1-absent-is-legal            PASS  "axis2-model: opus
+axes-run: ⓐ=codex"
+lane o2-known-pair-emdash          PASS  "oracle: known-pair — 레인 PASS/BLOCK 픽스처 양쪽 + W6 되돌림"
+lane o3-ab-slash-alias             PASS  "oracle: A/B — ARM/CTRL 한 변수 reps=3"
+lane o3b-ab-hyphen                 PASS  "oracle: a-b — ARM/CTRL 한 변수 reps=3"
+lane o4-none-with-reason           PASS  "oracle: none — 문서만 변경, 측정 없음"
+lane o5-human-paren-form           PASS  "oracle: human(운영자 눈검증 2건)"
+lane o6-indented-valid-still-pass  PASS  "   oracle: metamorphic — 입력 변환 관계 (ARM 어형 → CTRL 어형)"
+lane o7-mixed-case-kind            PASS  "oracle: Known-Pair — 양성 음성 컨트롤 동반"
+lane o7b-back-to-back-no-space     PASS  "oracle: back-to-back—codex 가 같은 diff 를 읽음"
+lane o32-colon-delimiter           PASS  "oracle: known-pair: 컨트롤 동반 실행"
+lane o33-middle-dot-delimiter      PASS  "oracle: a-b · ARM/CTRL reps=3"
+lane o34-value-mention-not-a-key   PASS  "affected: oracle 채널 사용자 · 열린 질문 = 없음
+oracle: human — 운영자 눈검증 2건"
+lane o35-period-delimiter          PASS  "oracle: known-pair. 컨트롤 동반 실행 양쪽"
+
+echo "== oracle: lanes — BLOCK side (holes that must stay closed; 4th arg = the branch that must fire) =="
+lane o8-enum-outside               BLOCK "oracle: pseudo — 3-way 대조" 'enum 밖'
+lane o9-none-without-reason        BLOCK "oracle: none" '사유가 필수'
+lane o10-none-placeholder-reason   BLOCK "oracle: none — TBD" '사유가 필수'
+lane o11-empty-value               BLOCK "oracle:" '비어 있다'
+lane o12-duplicate-line            BLOCK "oracle: known-pair — 컨트롤 동반 실행
+oracle: human — 정정, 사실은 눈검증" '둘 이상'
+lane o13-nearmiss-qasp-field-name  BLOCK "oracle_type: known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o14-nearmiss-capital-key      BLOCK "Oracle: known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o15-nearmiss-space-colon      BLOCK "oracle : known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o16-kind-only-no-grounds      BLOCK "oracle: known-pair" '자리표시자뿐'
+lane o17-one-word-grounds          BLOCK "oracle: human — 운영자" '공허하다'
+lane o18-shared-hint-placeholder   BLOCK "oracle: known-pair — <...>" '힌트의 자리표시자'
+lane o19-indented-invalid-blocks   BLOCK "   oracle: pseudo — 3-way 대조 두 낱말" 'enum 밖'
+lane o20-placeholder-grounds       BLOCK "oracle: metamorphic — n/a" '자리표시자뿐'
+# ── cross-family (codex, 2026-09-05) 가 연 구멍들 — 각각 fail-before 를 실측한 뒤 닫았다 ──
+lane o21-enum-prefix-junk          BLOCK "oracle: known-pair2 positive negative controls" '구분자 없이'
+lane o22-underscore-after-kind     BLOCK "oracle: human_review by Alice" '구분자 없이'
+lane o23-case-variant-beside-exact BLOCK "oracle: known-pair — positive negative controls
+Oracle: human — later correction" "정확히 'oracle:'"
+lane o24-fullwidth-space-colon     BLOCK "oracle　: known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o25-nearmiss-plural           BLOCK "oracles: known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o26-nearmiss-typo-orcale      BLOCK "orcale: known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o27-nearmiss-typo-oralce      BLOCK "oralce: known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o28-nearmiss-korean-key       BLOCK "오라클: known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o29-nearmiss-hyphen-type      BLOCK "oracle-type: known-pair — 컨트롤 동반 실행" "정확히 'oracle:'"
+lane o30-bare-key-no-colon         BLOCK "oracle" "정확히 'oracle:'"
+lane o36-unlisted-oracle-star-key  BLOCK "oracle.evidence: positive negative controls" "정확히 'oracle:'"
+
+# o31 — 헬퍼 없이 함수만 격리 실행하면 «통과»가 아니라 HARNESS-ERROR 여야 한다(fail-open 방지 가지).
+printf '%s\n' "oracle: known-pair — 컨트롤 동반 실행 양쪽" > "$T/m31.marker"
+_o31=$( bash -c 'set -uo pipefail; . "$1"; validate_oracle_leg "$2"' _ "$T/fn0.sh" "$T/m31.marker" 2>&1 ); _rc31=$?
+if [ $_rc31 -ne 0 ] && printf '%s' "$_o31" | grep -qF 'HARNESS-ERROR'; then
+  printf '  ✅ %-40s BLOCK (HARNESS-ERROR, not a silent pass)\n' o31-helper-absent-is-not-pass
+else
+  printf '  ❌ %-40s expected HARNESS-ERROR without the helper, got rc=%s: %s\n' o31-helper-absent-is-not-pass "$_rc31" "$(printf '%s' "$_o31" | head -1)"
+  FAIL=1
+fi
+
+echo
+echo "== 실물 코퍼스 대조 (있으면) =="
+# 실물 마커에 oracle: 가 아직 없는 것이 정상이다 — 이 필드는 오늘 신설이다. 부재 마커도 여전히
+# PASS 여야 한다는 것을 실물로도 한 번 더 확인한다(계기가 실물 코퍼스에서도 안 죽는가).
+_real=$(ls -t "$REPO_ROOT"/tracks/_meta/.axes_23_passed_*.marker 2>/dev/null | head -1)
+if [ -n "$_real" ] && [ -f "$_real" ]; then
+  lane "R1-real-corpus-$(basename "$_real" | cut -c1-24)" PASS "$(cat "$_real")"
+else
+  echo "  ⚠️  실물 마커 부재 — SKIPPED (gitignored tracks/ 가 없는 체크아웃일 수 있다, 통과 아님)"
+fi
+
+echo
+if [ $FAIL -eq 0 ]; then echo "ORACLE LANES: PASS"; else echo "ORACLE LANES: FAIL"; fi
+exit $FAIL