@dzhechkov/keysarium 1.7.9 → 1.7.11

package/.dz-manifest.json

@@ -9,7 +9,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "13e7e27322403ce45af5be7df1fa565178b5df73ffeea1b0bbe6b3faddce9f45"
+        "sha256": "a81456ef7ae79788d7859aab9a2238c541bb61a41b9d289a27ae6992119538db"
       },
       {
         "path": "README.ru.md",
@@ -21,7 +21,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "96bcc52bfe2180fd9976589895f1f328f6c8ac62e24d22042d1105a5c16f4148"
+        "sha256": "844c32f67fc8ed8099a388aa53f597a100371c6a693d4b99730a5808593a4843"
       },
       {
         "path": "src/cli.js",
@@ -389,7 +389,7 @@
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/07-code.md",
-        "sha256": "db79f8d026cc47edd1e5d2f30d0e1455c55c570dd022d549d440985a3e5940a5"
+        "sha256": "d5c03890b2b3a34277c73a14d3d7c97741dec1d6c382e87ee4cc6a5a52d938d7"
       },
       {
         "path": "templates/.claude/skills/feature-adr/modules/08-qe.md",
@@ -487,13 +487,17 @@
         "path": "templates/.claude/skills/feature-adr/scripts/build-coder-context.mjs",
         "sha256": "19c3991bfb5e88205c9ff6d4d44037c136a190581bab199d3928196e4616fe15"
       },
+      {
+        "path": "templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs",
+        "sha256": "bfbad12b54508d5d4c71de640c5e19b3d19317f660e2986d02338ef502f8007e"
+      },
       {
         "path": "templates/.claude/skills/feature-adr/scripts/check-plan-completeness.mjs",
         "sha256": "8b93949ce4f671d932c5389050db3a3e2750efcbed69681d69f392ccf4d2a168"
       },
       {
         "path": "templates/.claude/skills/feature-adr/scripts/check-review-convergence.mjs",
-        "sha256": "80f9691b8e94bf310461aeaaaa23af6e336d41d0962fdf137737639655cbdeb8"
+        "sha256": "09c74f1441d9c42603fbb84402e6826cf96535d209be9802e0e4b2fea01dac7d"
       },
       {
         "path": "templates/.claude/skills/feature-adr/scripts/markdown-masker.mjs",
@@ -1001,5 +1005,5 @@
       }
     ]
   },
-  "signature": "n1PCRDF3YW7Tcdp+QdGzlK+p7PQGfraCKUO8yQxu6zrvXx6WUALgVsvmfAwh+QXmPZzINT6kYnKmzijtcEkrCw=="
+  "signature": "p0J0fnCC54JAc14pg5UuIgUGtG8u7YLxPlBS6YEXl4qUf5yCqWGZ4g6Bs2Tz8XSfIg1uHkBkAAczkeGaKeBeBw=="
 }

package/README.md

@@ -1,6 +1,6 @@
 # @dzhechkov/keysarium
 
-Current package version: `1.7.9`. <!-- dz:version -->
+Current package version: `1.7.11`. <!-- dz:version -->
 
 Site: https://aicoding.space · Source: https://github.com/djd1m/dz-harness/tree/main/packages/@dzhechkov/keysarium
 
@@ -70,6 +70,11 @@ After installation, open Claude Code in your project directory and start using s
 
 ## What You Get
 
+MEASURED package inventory from `npm pack --dry-run --json` in this package directory.
+Skills are `templates/.claude/skills/*/SKILL.md`; commands are Markdown files in
+`templates/.claude/commands/`. Rules, shards and agent templates are beneath `templates/.claude/`; the library is
+`templates/lib/` and optional documentation is `templates/docs/`. Counts describe bundled files,
+not execution results.
 | Component | Count | Description |
 |-----------|-------|-------------|
 | **Skills** | 12 | `explore`, `frontend-design`, `goap-research-ed25519`, `presentation-storyteller`, `problem-solver-enhanced`, `reverse-engineering-unicorn`, `knowledge-extractor`, `ai-factory-mapper`, `analyst-manual-full`, `edu-site-generator`, `transcript-site-generator`, `feature-adr` |
@@ -84,9 +89,10 @@ After installation, open Claude Code in your project directory and start using s
 Everything is installed into your project's `.claude/` directory and works natively with Claude Code.
 
 > Counts above are MEASURED from the shipped `templates/` tree — reproducer:
-> `npx @dzhechkov/keysarium init --dry-run` (the install plan prints the same numbers, computed at
-> runtime) or, on a real install, `npx @dzhechkov/keysarium list`. If a count here disagrees with the
-> CLI, trust the CLI — it counts files, this table is hand-written.
+> `npx @dzhechkov/keysarium init --dry-run --with-docs` prints these component counts, including
+> optional documentation. On an installed project, `npx @dzhechkov/keysarium list` reports recursive
+> file totals; its skills row counts skill assets, not skill directories, so its units differ from
+> this table. Compare matching units when checking an installed project.
 
 ---
 
@@ -245,7 +251,9 @@ The toolkit automatically detects the domain from the case description and appli
 - Visual palette: Blue / Navy / Silver
 
 ### Retail / E-commerce
-- Latency budget: < 200ms for real-time recommendations
+- ESTIMATED example design target: response latency below 200 ms for real-time recommendations.
+  This is a planning constraint for a retail case, not measured Keysarium performance; validate it
+  against the proposed system and its workload.
 - A/B testing as primary validation method
 - Personalization vs. privacy balance (GDPR / FZ-152)
 - Seasonality and cold-start handling
@@ -526,3 +534,19 @@ Confirmation, scope, family and budget gates still apply. No automatic repair lo
 Repeated prepare retains all pending paths until verified closure. Actual fallback families bind before dispatch while prior owners remain required. Same-slug QE repair uses current own-reviewer evidence bound to the complete historical checkpoint; original findings/grades remain visible, and failed Confirmation still blocks delivery.
 
 Before fallback, host prepare retains independently written pending receipt findings under the original owner even if that reviewer returned null. Unreconciled pending evidence pauses dispatch for originating-reviewer repair; it cannot be replaced by a clean fallback to obtain closure.
+
+After a reviewed artifact is renamed or removed, convergence keeps its previously host-bound condition scope in the measured manifest; an absent old path has a null digest. Current discovered paths remain measured. Both prepare and evaluate validate the retained snapshot and reject unbound or unsafe scope paths. The original condition and originating reviewer verification remain required; a rename alone does not close a finding.
+
+QE also measures the exact `.dz/guard.json` policy configuration when it is in the current Git index or selected review base. This includes newly staged and intent-to-add files; base-tracked deletions retain a null digest. Both declared targets and discovered changes use this rule. Untracked files absent from that base do not qualify through older history. Other `.dz/` runtime files remain excluded, and existing path, symlink, freshness and reviewer-ownership checks still apply.
+
+### Pre-code target admission
+
+Step 7 now runs the installed read-only `scripts/check-code-targets.mjs` before literal context,
+code-cache lookup or any coder route, on every entry including auto/force resume. It reuses the
+colocated review manifest authority: strict targets, circular exclusions, discovered source changes,
+path/Git safety and the exact `.dz/guard.json` index-or-selected-base exception are unchanged.
+Missing planned files remain admissible. Workflow requires admitted JSON plus the actual producer's
+terminal `RC_EXIT:0` witness; failure refuses coding/cache access. Admission preserves review state
+and existing `.fa-state/base-ref` (HEAD only when absent); actual coder initialization never resets
+an existing base. Plain uses the same executable helper and mandatory instructions, without an
+automatic dispatcher. Admission observes current bytes; final QE remains the freshness check.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/keysarium",
-  "version": "1.7.9",
+  "version": "1.7.11",
   "scripts": {},
   "description": "AI Case Research Toolkit for Claude Code — full 7-phase pipeline with feature-adr, dream cycles, background workers, multi-platform support, reward learning, and Cloud.ru AI Factory mapping (--ai-factory flag)",
   "main": "src/cli.js",

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "13e7e27322403ce45af5be7df1fa565178b5df73ffeea1b0bbe6b3faddce9f45"
+          "content": "a81456ef7ae79788d7859aab9a2238c541bb61a41b9d289a27ae6992119538db"
         }
       ]
     },
@@ -59,7 +59,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "96bcc52bfe2180fd9976589895f1f328f6c8ac62e24d22042d1105a5c16f4148"
+          "value": "844c32f67fc8ed8099a388aa53f597a100371c6a693d4b99730a5808593a4843"
         }
       ]
     },
@@ -979,7 +979,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "db79f8d026cc47edd1e5d2f30d0e1455c55c570dd022d549d440985a3e5940a5"
+          "content": "d5c03890b2b3a34277c73a14d3d7c97741dec1d6c382e87ee4cc6a5a52d938d7"
         }
       ]
     },
@@ -1223,6 +1223,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "bfbad12b54508d5d4c71de640c5e19b3d19317f660e2986d02338ef502f8007e"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "templates/.claude/skills/feature-adr/scripts/check-plan-completeness.mjs",
@@ -1239,7 +1249,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "80f9691b8e94bf310461aeaaaa23af6e336d41d0962fdf137737639655cbdeb8"
+          "content": "09c74f1441d9c42603fbb84402e6826cf96535d209be9802e0e4b2fea01dac7d"
         }
       ]
     },

package/templates/.claude/skills/feature-adr/modules/07-code.md

@@ -26,6 +26,40 @@ opus (complex code generation)
 
 ### 1. Pre-Implementation Checklist
 
+### Current target admission (before any coding)
+
+After prerequisite gates complete, and on **every** Step-7 entry (including auto/force resume),
+run the installed `scripts/check-code-targets.mjs` beside this module **before** context assembly,
+code-cache lookup, delegation or in-session edits. Set `TARGET_HELPER` to that installation's
+absolute helper path, `EXECUTION_PROJECT` to the absolute execution repository root, and
+`FEATURE_DIR` to its absolute `features/<slug>` directory:
+
+```bash
+node "$TARGET_HELPER" --repo "$EXECUTION_PROJECT" --feature "$FEATURE_DIR"
+```
+
+Require the actual command exit 0 and exactly one `fa-code-targets-1` JSON document with
+`status: "admitted"`, a SHA-256 `manifestDigest` and empty `reasons`. Any missing/broken helper,
+command failure, refused/unavailable status or malformed/contradictory output stops coding and
+cache access; repair the named cause first. Do not substitute a narrated success or saved admission.
+For a host relay, the shell must capture the producer's exit immediately and append one terminal
+`RC_EXIT:<integer>` line; Workflow requires both admitted JSON and observed `RC_EXIT:0` and refuses
+missing/duplicate/conflicting witnesses. Keep stderr separate from the bounded relay.
+
+The helper only calls the colocated review checker's `measureManifest(repo, feature, 'qe')`.
+Its strict `- ` target grammar, circular-root exclusions, discovered changed/untracked paths,
+filesystem/Git safety and exact `.dz/guard.json` index-or-selected-base authority remain unchanged.
+K2 remains an additional legacy Markdown-friendly check; admission does not normalize its bullets
+or backticks. Planned missing files/deletions can have null digests. The admission digest records
+this observation, not QE approval or a replacement cache key. Admission never prepares/evaluates
+review lineage or writes source, receipts or `.fa-state`.
+
+The selected baseline is existing `.fa-state/base-ref`, otherwise HEAD. Before actual coding,
+initialize HEAD only if that base file is absent; preserve an existing original selection through
+retries/re-entry. Refuse a failed initialization before edits. Admission does not initialize it.
+This is executable Plain guidance with mandatory orchestration, not an automatic Plain dispatcher.
+An unrelated process can change source after admission; ordinary final QE still checks freshness.
+
 ### Current literal context (plain and delegated coding)
 
 Before coding or delegating, run the installed helper beside this module. Set `CONTEXT_HELPER` to

package/templates/.claude/skills/feature-adr/scripts/check-code-targets.mjs

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+// Read-only current source admission. This is neither a QE receipt nor a cache key.
+import { createHash } from 'node:crypto'
+import { realpathSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { measureManifest } from './check-review-convergence.mjs'
+
+const schema = 'fa-code-targets-1'
+let result
+try {
+  const args = process.argv.slice(2)
+  if (args.length !== 4 || args[0] !== '--repo' || !args[1] || args[2] !== '--feature' || !args[3]) throw Error('invalid-arguments: expected --repo <project> --feature <feature>')
+  // Match the checker: real execution root, feature resolved from that root, then
+  // its own inside-repo/path/Git checks. Do not reinterpret feature from cwd.
+  const repo = realpathSync(args[1])
+  const feature = resolve(repo, args[3])
+  const manifest = measureManifest(repo, feature, 'qe')
+  result = { schema, status: 'admitted', manifestDigest: createHash('sha256').update(JSON.stringify(manifest)).digest('hex'), reasons: [] }
+} catch (error) {
+  // execFileSync errors include raw subprocess output in message. Keep that out
+  // of the wire; ordinary checker diagnostics are bounded and carry no contents.
+  const reason = error && (error.stdout !== undefined || error.stderr !== undefined)
+    ? 'git-evidence-unavailable: exit=' + String(error.status ?? error.code ?? 'unknown')
+    : String(error?.message || 'measurement-unavailable').slice(0, 4096)
+  result = { schema, status: 'refused', manifestDigest: null, reasons: [reason] }
+}
+process.stdout.write(JSON.stringify(result) + '\n')
+process.exitCode = result.status === 'admitted' ? 0 : 1

package/templates/.claude/skills/feature-adr/scripts/check-review-convergence.mjs

@@ -34,13 +34,25 @@ function reviewerEntry(r, roster) {
 }
 function result(phase, verdict, revision, reasons, unresolved = []) { return { schema: SCHEMA, phase, verdict, revision, unresolved, reasons } }
 
+function artifactPath(rel) {
+  return text(rel) && !rel.startsWith('/') && !rel.includes('\\') && !rel.split('/').some(p => !p || p === '.' || p === '..') && !/[\x00-\x1f]/.test(rel)
+}
+function hostProblem(host) {
+  if (!dictionary(host, ['schema', 'phase', 'reviewers', 'snapshot', 'conditions', 'reviewSeen', 'rework', 'changedPaths']) || host.schema !== SCHEMA || !phases.includes(host.phase) || !array(host.reviewers, 16) || host.reviewers.length === 0) return 'host-lineage-invalid'
+  const owners = host.reviewers.map(r => r?.id)
+  if (new Set(owners).size !== owners.length || !host.reviewers.every(r => dictionary(r, ['id', 'family']) && text(r.id) && ['codex', 'claude', 'owner-exception'].includes(r.family))) return 'host-reviewers-invalid'
+  if (!dictionary(host.snapshot, ['nonce', 'revision', 'manifest']) || !text(host.snapshot.nonce) || !hash(host.snapshot.revision) || !array(host.conditions) || !host.conditions.every(c => condition(c, owners)) || new Set(host.conditions.map(c => c.id)).size !== host.conditions.length || typeof host.reviewSeen !== 'boolean' || typeof host.rework !== 'boolean' || !strings(host.changedPaths) || !host.changedPaths.every(artifactPath)) return 'host-snapshot-invalid'
+  const manifest = host.snapshot.manifest
+  if (!Array.isArray(manifest) || !manifest.every(p => dictionary(p, ['path', 'digest']) && artifactPath(p.path) && (p.digest === null || hash(p.digest))) || new Set(manifest.map(p => p.path)).size !== manifest.length || digest(JSON.stringify(manifest)) !== host.snapshot.revision) return 'host-manifest-invalid'
+  if (host.conditions.some(c => c.scope.some(path => !manifest.some(p => p.path === path)))) return 'host-condition-scope-unbound'
+  return null
+}
 export function evaluateReviewConvergence(host, receipt, currentManifest) {
   const phase = host?.phase
-  const refuse = reason => result(phase || 'qe', 'not-established', host?.snapshot?.revision || null, [reason], (host?.conditions || []).map(c => c.id))
-  if (!dictionary(host, ['schema', 'phase', 'reviewers', 'snapshot', 'conditions', 'reviewSeen', 'rework', 'changedPaths']) || host.schema !== SCHEMA || !phases.includes(phase) || !array(host.reviewers, 16) || host.reviewers.length === 0) return refuse('host-lineage-invalid')
+  const refuse = reason => result(phase || 'qe', 'not-established', host?.snapshot?.revision || null, [reason], (array(host?.conditions) ? host.conditions : []).map(c => c?.id))
+  const problem = hostProblem(host)
+  if (problem) return refuse(problem)
   const owners = host.reviewers.map(r => r.id)
-  if (new Set(owners).size !== owners.length || !host.reviewers.every(r => dictionary(r, ['id', 'family']) && text(r.id) && ['codex', 'claude', 'owner-exception'].includes(r.family))) return refuse('host-reviewers-invalid')
-  if (!dictionary(host.snapshot, ['nonce', 'revision', 'manifest']) || !text(host.snapshot.nonce) || !hash(host.snapshot.revision) || !array(host.conditions) || !host.conditions.every(c => condition(c, owners)) || typeof host.reviewSeen !== 'boolean' || typeof host.rework !== 'boolean' || !strings(host.changedPaths)) return refuse('host-snapshot-invalid')
   if (!same(host.snapshot.manifest, currentManifest) || digest(JSON.stringify(currentManifest)) !== host.snapshot.revision) return refuse('artifact-manifest-changed')
   if (!dictionary(receipt, ['schema', 'phase', 'nonce', 'revision', 'reviews', 'author']) || receipt.schema !== SCHEMA || receipt.phase !== phase || receipt.nonce !== host.snapshot.nonce || receipt.revision !== host.snapshot.revision) return refuse('receipt-phase-or-revision-invalid')
   if (!array(receipt.reviews, 16) || receipt.reviews.length !== owners.length || new Set(receipt.reviews.map(r => r?.reviewer)).size !== owners.length) return refuse('reviewer-set-invalid')
@@ -96,12 +108,17 @@ export function evaluateReviewConvergence(host, receipt, currentManifest) {
 }
 
 function safePath(root, rel, allowMissing = true) {
-  if (!text(rel) || rel.startsWith('/') || rel.includes('\\') || rel.split('/').some(p => !p || p === '.' || p === '..') || /[\x00-\x1f]/.test(rel)) throw Error('unsafe-artifact-path')
+  if (!artifactPath(rel)) throw Error('unsafe-artifact-path')
   let path = root
   for (const part of rel.split('/')) {
     path = resolve(path, part)
-    if (!existsSync(path)) { if (allowMissing) return resolve(root, rel); throw Error('artifact-missing:' + rel) }
-    if (lstatSync(path).isSymbolicLink()) throw Error('symlink-artifact:' + rel)
+    let entry
+    try { entry = lstatSync(path) } catch (error) {
+      if (error.code !== 'ENOENT') throw error
+      if (allowMissing) return resolve(root, rel)
+      throw Error('artifact-missing:' + rel)
+    }
+    if (entry.isSymbolicLink()) throw Error('symlink-artifact:' + rel)
   }
   return path
 }
@@ -134,21 +151,30 @@ function pathsFor(repo, feature, phase) {
       return match[1]
     })
     if (!planned.length) throw Error('target-block-empty')
-    if (planned.some(p => /^(features|\.dz|\.agentic-qe|roam)\//.test(p))) throw Error('circular-review-target')
-    paths.push(...planned)
-    // Additions/deletions are discovered by the host, not the author delta request.
     const baseFile = resolve(feature, '.fa-state/base-ref')
     const base = existsSync(baseFile) ? readFileSync(baseFile, 'utf8').trim() : 'HEAD'
     if (!/^[A-Za-z0-9_./:-]+$/.test(base) || base.startsWith('-')) throw Error('base-ref-invalid')
-    for (const command of [['diff', '--name-only', '-z', base, '--'], ['ls-files', '--others', '--exclude-standard', '-z']]) {
+    const guard = '.dz/guard.json'
+    // Exact index membership includes staged additions/intent-to-add. The selected
+    // base proves deletions; descendants and unrelated history confer no authority.
+    const proof = [['ls-files', '--cached', '-z', '--', guard], ['ls-tree', '-r', '--name-only', '-z', base, '--', guard]].map(command =>
+      execFileSync('git', command, { cwd: repo, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024 }).split('\0').includes(guard))
+    const allowedGuard = p => p === guard && proof.some(Boolean)
+    if (planned.some(p => /^(features|\.dz|\.agentic-qe|roam)\//.test(p) && !allowedGuard(p))) throw Error('circular-review-target')
+    paths.push(...planned)
+    // Additions/deletions are discovered by the host, not the author delta request.
+    for (const command of [['diff', '--no-renames', '--name-only', '-z', base, '--'], ['ls-files', '--others', '--exclude-standard', '-z']]) {
       const names = execFileSync('git', command, { cwd: repo, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024 }).split('\0').filter(Boolean)
-      paths.push(...names.filter(p => !p.startsWith('features/') && !p.startsWith('.dz/') && !p.startsWith('.agentic-qe/') && !p.startsWith('roam/') && p !== 'architecture/map.json'))
+      paths.push(...names.filter(p => allowedGuard(p) || !p.startsWith('features/') && !p.startsWith('.dz/') && !p.startsWith('.agentic-qe/') && !p.startsWith('roam/') && p !== 'architecture/map.json'))
     }
   }
   return [...new Set(paths)].sort()
 }
 export function measureManifest(repo, feature, phase) {
-  return pathsFor(repo, feature, phase).map(path => {
+  return measurePaths(repo, pathsFor(repo, feature, phase))
+}
+function measurePaths(repo, paths) {
+  return [...new Set(paths)].sort().map(path => {
     const absolute = safePath(repo, path)
     if (!existsSync(absolute)) return { path, digest: null }
     if (!lstatSync(absolute).isFile()) throw Error('non-file-artifact:' + path)
@@ -243,17 +269,27 @@ function bindReviewers(host, requested, measured) {
 export function runGate({ action, repo, feature, phase, reviewers }) {
   if (!phases.includes(phase) || !['prepare', 'evaluate'].includes(action)) throw Error('invalid-command')
   repo = realpathSync(repo); feature = resolve(repo, feature)
-  const current = measureManifest(repo, feature, phase)
   const paths = checkpointPaths(repo, feature, phase)
-  let host = existsSync(paths.host) ? readJson(paths.host) : null
+  const hostExists = existsSync(paths.host)
+  let host = hostExists ? readJson(paths.host) : null
+  if (hostExists) {
+    const problem = hostProblem(host)
+    if (problem) throw Error(problem)
+    if (host.phase !== phase) throw Error('host-lineage-conflict')
+  }
+  let pending = null
+  if (host && existsSync(paths.review)) {
+    try { pending = retainPendingReceipt(host, paths.review) } catch (error) { if (action === 'prepare') throw error }
+  }
+  const retained = pending?.next || host
+  // Only scopes bound by the validated prior snapshot can extend current discovery.
+  const current = measurePaths(repo, pathsFor(repo, feature, phase).concat((retained?.conditions || []).flatMap(c => c.scope)))
   const measuredCheckpoint = phase === 'qe' ? qeCheckpoint(repo, feature) : null
   if (action === 'prepare') {
     if (!array(reviewers, 16) || !reviewers.length || !reviewers.every(r => dictionary(r, ['id', 'family']) && text(r.id) && ['codex', 'claude', 'owner-exception'].includes(r.family)) || new Set(reviewers.map(r => r.id)).size !== reviewers.length) throw Error('reviewers-invalid')
-    if (host && (host.phase !== phase || host.schema !== SCHEMA || !array(host.conditions) || typeof host.reviewSeen !== 'boolean')) throw Error('host-lineage-conflict')
-    if (host && existsSync(paths.review)) {
-      const pending = retainPendingReceipt(host, paths.review)
-      host = pending.next; writeJson(paths.host, host)
-      if (pending.problem) throw Error('pending-reviewer-receipt-needs-origin-review')
+    if (pending) {
+      host = pending.next
+      if (pending.problem) { writeJson(paths.host, host); throw Error('pending-reviewer-receipt-needs-origin-review') }
     }
     reviewers = bindReviewers(host, reviewers, measuredCheckpoint)
     const revision = digest(JSON.stringify(current))
@@ -274,21 +310,14 @@ export function runGate({ action, repo, feature, phase, reviewers }) {
     closure = reconcileCheckpoint(host, receipt, measuredCheckpoint, repo, feature)
     if (!closure) verdict = result(phase, 'not-established', host.snapshot.revision, ['historical-checkpoint-own-verification-missing'])
   }
-  // Preserve independently owned findings even on refusal. Never import author/scribe claims.
-  // Invalid ownership/meaning refuses without overwriting the prior host authority.
+  // Preserve only fresh, independently owned findings bound by the prior snapshot.
+  // Stale or malformed receipts cannot originate measurement authority on refusal.
+  const preserved = new Map((pending?.next.conditions || host.conditions).map(c => [c.id, c]))
   const owners = host.reviewers.map(r => r.id)
-  const preserved = new Map(host.conditions.map(c => [c.id, c]))
-  if (receipt?.schema === SCHEMA && receipt.phase === phase && array(receipt.reviews)) {
-    for (const r of receipt.reviews) if (owners.includes(r?.reviewer) && host.reviewers.find(p => p.id === r.reviewer)?.family === r.family && r.independent === true) {
-      for (const c of [...(array(r.conditions) ? r.conditions : []), ...(array(r.newRisks?.conditions) ? r.newRisks.conditions : [])]) {
-        if (condition(c, owners) && c.owner === r.reviewer && !preserved.has(c.id)) preserved.set(c.id, c)
-      }
-    }
-  }
   if (receipt?.phase === phase && receipt.nonce === host.snapshot.nonce && receipt.revision === host.snapshot.revision && risks(receipt.author?.newRisks, owners)) {
-    for (const c of receipt.author.newRisks.conditions) if (!preserved.has(c.id)) preserved.set(c.id, c)
+    for (const c of receipt.author.newRisks.conditions) if (!preserved.has(c.id) && c.scope.every(path => host.snapshot.manifest.some(p => p.path === path))) preserved.set(c.id, c)
   }
-  writeJson(paths.host, { ...host, conditions: [...preserved.values()], reviewSeen: true, changedPaths: verdict.verdict === 'closed' ? [] : host.changedPaths })
+  writeJson(paths.host, { ...host, conditions: [...preserved.values()], reviewSeen: pending?.next.reviewSeen || host.reviewSeen, changedPaths: verdict.verdict === 'closed' ? [] : host.changedPaths })
   if (closure && verdict.verdict === 'closed') return { ...verdict, checkpointClosure: closure }
   return verdict
 }