@dzhechkov/p-replicator 1.13.1 → 1.13.2

package/tests/fixtures/feature-contour/docs/features/demo-gate/01_specification.md

@@ -0,0 +1,15 @@
+# Specification — Demo gate
+
+## Requirements
+
+### FR-demo-gate-1 — Validate a submitted value
+
+The demo validator must distinguish accepted values from rejected values.
+
+### AC-demo-gate-1 — Accept a valid value
+
+Given a valid value, when the validator runs, then it reports acceptance.
+
+### AC-demo-gate-2 — Reject an invalid value
+
+Given an invalid value, when the validator runs, then it reports rejection.

package/tests/fixtures/feature-contour/docs/features/demo-gate/02_pseudocode.md

@@ -0,0 +1,19 @@
+# Pseudocode — Demo gate
+
+## Validation algorithm
+
+### Algorithm: Validate submitted value
+
+REQUIREMENT: `FR-demo-gate-1`
+REQUIREMENT: `AC-demo-gate-1`
+REQUIREMENT: `AC-demo-gate-2`
+
+INPUT: submitted value
+
+OUTPUT: acceptance decision
+
+STEPS:
+
+1. Compare the submitted value with the accepted fixture value.
+2. Return acceptance for a match.
+3. Return rejection otherwise.

package/tests/fixtures/feature-contour/docs/features/demo-gate/03_architecture.md

@@ -0,0 +1,3 @@
+# Architecture — Demo gate
+
+The fixture keeps its executable evidence in `tests/demo.test.js`; the completion artifact binds each acceptance criterion to one named test in that file.

package/tests/fixtures/feature-contour/docs/features/demo-gate/04_refinement.md

@@ -0,0 +1,3 @@
+# Refinement — Demo gate
+
+The negative path uses a deliberately invalid value so the rejection criterion is independently observable.

package/tests/fixtures/feature-contour/docs/features/demo-gate/05_completion.md

@@ -0,0 +1,7 @@
+# Completion — Demo gate
+
+## Criterion coverage
+| Criterion | Test file | Test title |
+|-----------|-----------|------------|
+| AC-demo-gate-1 | tests/demo.test.js | accepts a valid value |
+| AC-demo-gate-2 | tests/demo.test.js | rejects an invalid value |

package/tests/fixtures/feature-contour/docs/features/demo-gate/review-report.md

@@ -0,0 +1,11 @@
+# Review report — Demo gate
+Reviewer family: claude
+Spec revision: sha256:264708a769ad0d07d715420d82278461c5f1b831dd365eaaf6be051db18d47e8
+
+The fixture implementation and its executable tests conform to both declared criteria.
+
+## Spec conformance
+| Criterion | Verdict | Evidence |
+|-----------|---------|----------|
+| AC-demo-gate-1 | met | tests/demo.test.js — accepts a valid value |
+| AC-demo-gate-2 | met | tests/demo.test.js — rejects an invalid value |

package/tests/fixtures/feature-contour/docs/features/demo-gate/validation-report.md

@@ -0,0 +1,10 @@
+# Validation report — Demo gate
+Spec revision: sha256:264708a769ad0d07d715420d82278461c5f1b831dd365eaaf6be051db18d47e8
+
+The specification is ready for implementation: both acceptance criteria have concrete scenarios.
+
+## Criterion scenarios
+| Criterion | Scenario |
+|-----------|----------|
+| AC-demo-gate-1 | Valid input is accepted |
+| AC-demo-gate-2 | Invalid input is rejected |

package/tests/fixtures/feature-contour/tests/demo.test.js

@@ -0,0 +1,16 @@
+'use strict';
+
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+
+function accepts(value) {
+  return value === 'valid';
+}
+
+test('accepts a valid value', () => {
+  assert.equal(accepts('valid'), true);
+});
+
+test('rejects an invalid value', () => {
+  assert.equal(accepts('invalid'), false);
+});

package/tests/snapshot/baseline.json

@@ -1,6 +1,6 @@
 {
-  "generatedAt": "2026-09-02T06:02:58.142Z",
-  "totalFiles": 164,
+  "generatedAt": "2026-09-02T07:49:08.074Z",
+  "totalFiles": 166,
   "files": {
     ".claude/agents/doc-validator.md": "e57950758cd4764b2cb54b3f1905567e9dbc1ed20ac6ecd30998614894689f4f",
     ".claude/agents/harvest-coordinator.md": "71e524e8379df46bbf457dbc1d4480634e05c99b7d3a4f59a356b8d71a0a4166",
@@ -8,7 +8,7 @@
     ".claude/agents/replicate-coordinator.md": "bbfe18a7642954f357db08e849349fee02681e2f0ffa036539c45d98dbaba960",
     ".claude/commands/deploy.md": "27f5424ee217163c55e5e6b9322a1f0858159407bd24ebd6d6588d6c22a5f890",
     ".claude/commands/docs.md": "be03592cb3f1d61b60dc96d3e26d71281ad4eb2d4626012c080ce609a32c96e4",
-    ".claude/commands/feature.md": "b2bb83fce09f823a36c943f397d63ff9d9406da1dadc055c4f187f8ff964d1ce",
+    ".claude/commands/feature.md": "6908fa6c8ba770f829378a021d5f7e9a9bc79a15bdd67b278d8c6a765968b291",
     ".claude/commands/go.md": "e7337012dccaab09e0cf27a696ebff14bea4626fb5167538af7da2f5cc7b597a",
     ".claude/commands/harvest.md": "ed6355c102af0f2c62bf6714fce63157e0cb1c1ee85bc32c96f137b8b0c0e1ba",
     ".claude/commands/myinsights.md": "f31c5e133b5027197359e4179cbba1ab535f990634a69ea7c5c73bd2bc329d68",
@@ -34,12 +34,13 @@
     ".claude/hooks/check-metric-source.cjs": "315deda6354f91737165786bdb22b799517bd80530e5b4584593c4f4df84c56e",
     ".claude/hooks/check-model-cost.cjs": "425bda547661e0b31f313d6bb371db4d303cc83a43189fb4dc981e1fb43fac06",
     ".claude/hooks/check-ports.cjs": "2b458cf78367ec7752174f08aa40109b3b6217e405f99a46e18e75e4b69bc87e",
+    ".claude/hooks/check-review-contract.cjs": "44e32ea31a4a71ceb6eccb0956006519de270eab787a79ab4884978bc04385ab",
     ".claude/hooks/check-source-version.cjs": "b9dc2eee7403119481ea2c49a94581613f2c134685448736c2734948a638a010",
     ".claude/hooks/check-swarm-receipts.cjs": "9fa83d78b085d8eea28958b4722999ba44a7bd47c98fe5a96127fc5b5230b40c",
     ".claude/hooks/check-webhook-contract.cjs": "dfa27bd24cee8868fd60be5d24749c206f303fe4afcc1e72024d526324562a39",
     ".claude/hooks/session-insights.cjs": "31fbe90d81b01dfb56557ed5d68dbde2211a14d5469c5d3761f45fb63c07c3a7",
     ".claude/hooks/state-update.cjs": "47146a76b768ac2273abe8f2f017856a0e28b45afaf90048148da417dd19604e",
-    ".claude/hooks/statusline.cjs": "6e30ccdcdbe3c36896b85821f8986077a0e4065fdff3b103d669fac7ad44670e",
+    ".claude/hooks/statusline.cjs": "50c08decec3e80ed325f50d7b062fbe0add47e8594002fcc165248492242ab56",
     ".claude/hooks/write-insight.cjs": "743f2d85b037cf522dfaf4775947b0cd331e52f2f304e88360c160e0e8e9a589",
     ".claude/rules/cost-of-detection-ladder.md": "f15309ee8f1494478ff7678380dbe8fc8eecd154be36d57c9090cd17126a07da",
     ".claude/rules/docker-ports.md": "59eb430f29dd762e8b76ad6d1177fe8b5b250de007856c743387cb88ee157942",
@@ -51,7 +52,7 @@
     ".claude/rules/insights-capture.md": "d529e6be79178636ca362d83366b1dd7a843371e8ba4f2b09d65c009fab52dc4",
     ".claude/rules/long-running-job.md": "e6bd0efff89338998d34440a94dc9288cf7bcf790b27bcaa51b83d43f57942ed",
     ".claude/rules/model-call-cost.md": "26c3b20ac3ed7f9cf6deb5e94302ade87f9e3e51fffca7ac2377ff31bc144f34",
-    ".claude/rules/replicate-pipeline.md": "879ca7b6ca9039c7b94f6b9df2eadca9ec5fd0f97da5f468d5ee723f3d47f438",
+    ".claude/rules/replicate-pipeline.md": "13bf073273820addeb87167402495b2f683cefac70a9f6cb07b6e054b1851e0f",
     ".claude/rules/skill-interface-protocol.md": "c3f624d0a8a4c7e0f5744e529eb4486cc0589fdb732b9799bccc75091a6d63ca",
     ".claude/rules/swarm-file-evidence.md": "c71a216dbc3fd633c30949823ceac354f8439b96279a1a8dd606afb1b3ef5c45",
     ".claude/settings.json": "18db09827dce410667b93e2b1a41ef8e46d4431114733e4304a5fc2192b2fc66",
@@ -145,10 +146,11 @@
     ".claude/skills/problem-solver-enhanced/SKILL.md": "031378aa2e10c98928e35de07d454135e73550cd0c49f0cd886d53e4208d6b9f",
     ".claude/skills/requirements-validator/assets/templates/bdd-feature-template.feature": "5b1e47f10447ce574d0eb3917b69e2613b6e3f9c48b30ff5f4cfb57758c99a1d",
     ".claude/skills/requirements-validator/references/bdd-patterns.md": "04611a8c52c81f3a6d4fc2f9661ebc56159a125b6fb44a4d18b432e2b82de6e3",
+    ".claude/skills/requirements-validator/references/feature-report-contracts.md": "df263cbce17fb5d9dec6514561c66f6283b3f19e2fc85056f0531bac615be0f1",
     ".claude/skills/requirements-validator/references/invest-criteria.md": "ac6976adf776b9b60c784e1a0f6a0d96dd3332b16f4c12b72d3e59f9325bb626",
-    ".claude/skills/requirements-validator/references/scoring-system.md": "49afe072f31f5b4f9a33f6b59487244f494b0f5587b6cc10c797c4de59510114",
+    ".claude/skills/requirements-validator/references/scoring-system.md": "72104b74f07e0610f67f00b246b5225a530203bff225bacf7bf384bc6fd21cdf",
     ".claude/skills/requirements-validator/references/smart-criteria.md": "619a33fdb6bc336872fdf9f1fc91924f8ccd3c2ebef023912124756692b45aef",
-    ".claude/skills/requirements-validator/SKILL.md": "d2b8e71f4053c642f455a0f245ae18471ab25b7a21e0658f0fe410912a47bf8b",
+    ".claude/skills/requirements-validator/SKILL.md": "b4b394adf08feee552f39c83331398f119e0d4abf21e683fe4706da438b4a426",
     ".claude/skills/reverse-engineering-unicorn/examples/noom-cjm-example.md": "01d33586e26bf093a57a7a1082bf3bdba3af801bb8348a685c0418f76987a0b0",
     ".claude/skills/reverse-engineering-unicorn/examples/noom-module1-example.md": "7009cf2e2624a1254913ad2e1ff554e7ff675358b0b99bc0632f2e12132663a3",
     ".claude/skills/reverse-engineering-unicorn/modules/01-intelligence.md": "0770bd63a6a1eeb34e873cb101e2ba0cf88d507e9bc03242046eaa837b9f587c",

package/tests/unit/check-review-contract.test.js

@@ -0,0 +1,181 @@
+'use strict';
+
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const { spawnSync } = require('node:child_process');
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const PKG = path.resolve(__dirname, '..', '..');
+const CHECK = path.join(PKG, 'templates', '.claude', 'hooks', 'check-review-contract.cjs');
+const SLUG = 'traceability-floor';
+const SPEC = [
+  '# Specification',
+  '',
+  '### AC-trace-1 First criterion',
+  '',
+  'The first contour is observable.',
+  '',
+  '```markdown',
+  '### AC-ignored-9 Example only',
+  '```',
+  '',
+  '### AC-trace-2 Second criterion',
+  '',
+  'The second contour is observable.',
+  '',
+].join('\n');
+
+function digest(body) {
+  return crypto.createHash('sha256').update(body).digest('hex');
+}
+
+function report(options) {
+  const o = options || {};
+  const rows = o.rows || [
+    '| AC-trace-1 | met | tests/trace.test.js — proves the first contour |',
+    '| AC-trace-2 | unverifiable | |',
+  ];
+  return [
+    '# Review report',
+    ...(o.family === null ? [] : ['Reviewer family: ' + (o.family || 'claude')]),
+    'Spec revision: sha256:' + (o.revision || digest(SPEC)),
+    '',
+    ...(o.section === false ? [] : [
+      '## Spec conformance',
+      ...(o.table === false ? [] : [
+        '| Criterion | Verdict | Evidence |',
+        '|-----------|---------|----------|',
+        ...rows,
+      ]),
+    ]),
+    '',
+  ].join('\n');
+}
+
+function check(options) {
+  const o = options || {};
+  const root = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'p-rep-review-')));
+  const feature = path.join(root, 'docs', 'features', SLUG);
+  fs.mkdirSync(feature, { recursive: true });
+  try {
+    const specPath = path.join(feature, '01_specification.md');
+    if (o.symlinkSpec) {
+      const target = path.join(root, 'spec-target.md');
+      fs.writeFileSync(target, SPEC);
+      fs.symlinkSync(target, specPath);
+    } else {
+      fs.writeFileSync(specPath, SPEC);
+    }
+    if (!o.missingReport) {
+      const reportPath = path.join(feature, 'review-report.md');
+      fs.writeFileSync(reportPath, o.body === undefined ? report() : o.body);
+      if (o.unreadableReport) fs.chmodSync(reportPath, 0o000);
+    }
+    const result = spawnSync(process.execPath, [CHECK, root, SLUG], { encoding: 'utf8' });
+    return { code: result.status, out: (result.stdout || '') + (result.stderr || '') };
+  } finally {
+    fs.rmSync(root, { recursive: true, force: true });
+  }
+}
+
+function namedGap(options, pattern) {
+  const result = check(options);
+  assert.equal(result.code, 1, result.out);
+  assert.match(result.out, pattern, result.out);
+}
+
+test('honest input exits 0 and prints the measured counts', () => {
+  const result = check();
+  assert.equal(result.code, 0, result.out);
+  assert.match(result.out,
+    /PASS review-contract feature=traceability-floor AC-ids=2 rows=2/,
+    result.out);
+});
+
+test('missing reviewer family is a named gap', () => {
+  namedGap({ body: report({ family: null }) }, /GAP Reviewer family line missing/);
+});
+
+test('reviewer family outside the vocabulary is a named gap', () => {
+  namedGap({ body: report({ family: 'gpt' }) }, /GAP Reviewer family invalid value=gpt/);
+});
+
+test('revision mismatch names both 12-character prefixes', () => {
+  const wrong = '0'.repeat(64);
+  const actual = digest(SPEC).slice(0, 12);
+  namedGap(
+    { body: report({ revision: wrong }) },
+    new RegExp('GAP Spec revision mismatch report=000000000000 specification=' + actual),
+  );
+});
+
+test('missing Spec conformance section is a named gap', () => {
+  namedGap({ body: report({ section: false }) }, /GAP Spec conformance section missing/);
+});
+
+test('missing Spec conformance table is a named gap', () => {
+  namedGap({ body: report({ table: false }) }, /GAP Spec conformance table missing or malformed/);
+});
+
+test('an AC id with no row is named', () => {
+  namedGap({ body: report({ rows: [
+    '| AC-trace-1 | met | tests/trace.test.js — proves the first contour |',
+  ] }) }, /GAP AC-trace-2 has no Spec conformance row/);
+});
+
+test('a row id absent from the specification is named', () => {
+  namedGap({ body: report({ rows: [
+    '| AC-trace-1 | met | tests/trace.test.js — proves the first contour |',
+    '| AC-trace-2 | unverifiable | |',
+    '| AC-invented-3 | met | tests/trace.test.js — invented contour |',
+  ] }) }, /GAP AC-invented-3 row id is not in the specification/);
+});
+
+test('a duplicate row is named', () => {
+  namedGap({ body: report({ rows: [
+    '| AC-trace-1 | met | tests/trace.test.js — first proof |',
+    '| AC-trace-1 | met | tests/trace.test.js — duplicate proof |',
+    '| AC-trace-2 | unverifiable | |',
+  ] }) }, /GAP AC-trace-1 duplicate Spec conformance row/);
+});
+
+test('a verdict outside the vocabulary is named', () => {
+  namedGap({ body: report({ rows: [
+    '| AC-trace-1 | passed | tests/trace.test.js — first proof |',
+    '| AC-trace-2 | unverifiable | |',
+  ] }) }, /GAP AC-trace-1 verdict invalid value=passed/);
+});
+
+test('empty evidence on met and not met rows is named', () => {
+  for (const verdict of ['met', 'not met']) {
+    namedGap({ body: report({ rows: [
+      '| AC-trace-1 | ' + verdict + ' | |',
+      '| AC-trace-2 | unverifiable | |',
+    ] }) }, new RegExp('GAP AC-trace-1 evidence empty for verdict=' + verdict));
+  }
+});
+
+test('unreadable or missing report → exit 2', () => {
+  for (const options of [{ missingReport: true }, { unreadableReport: true }]) {
+    const result = check(options);
+    assert.equal(result.code, 2, result.out);
+    assert.match(result.out, /NOT-ESTABLISHED review contract: review report/, result.out);
+  }
+});
+
+test('symlinked spec → exit 2', () => {
+  const result = check({ symlinkSpec: true });
+  assert.equal(result.code, 2, result.out);
+  assert.match(result.out, /NOT-ESTABLISHED review contract: specification is a symlink/, result.out);
+});
+
+test('the family line is disclosure only: every vocabulary value passes, gpt fails', () => {
+  for (const family of ['claude', 'codex', 'human', 'unknown']) {
+    const result = check({ body: report({ family }) });
+    assert.equal(result.code, 0, family + ': ' + result.out);
+  }
+  namedGap({ body: report({ family: 'gpt' }) }, /GAP Reviewer family invalid value=gpt/);
+});

package/tests/unit/honest-failure-rules.test.js

@@ -41,13 +41,28 @@ const RULES = ['honest-configuration', 'swarm-file-evidence'];
  * {files:34, bytes:356321, estimatedTokens:95940.35}, a measured delta of 3988.50 below the
  * unchanged 4037.75 trigger.
  * Reproducer: measureCorpus() over templates/.claude/{rules,commands}/*.md plus every SKILL.md.
- * `ESTIMATED_TRIGGER` was not touched.
+ * `ESTIMATED_TRIGGER` was not touched. *
+ * Re-pinned 2026-09-02 for feature `traceability-floor-and-contract` (three /feature gates + the
+ * Traceability floor). Preimage = the tree at its parent commit d126adec^ (HEAD~1 of the feature),
+ * measured {files:34, bytes:372385, estimatedTokens:99956.35}. Against the PREVIOUS pin that state
+ * already sat at a delta of 4016.00 — the four night features between the two pins (check-ports
+ * receipts, design-analysis-hypothesis, quote-provenance, heal-bhr-drift) each fitted the trigger
+ * and none re-pinned, so 21.75 tokens of headroom remained and any new gate line would have tripped
+ * P5: the "ceiling nobody chose" this comment warns about, observed live. The feature's OWN delta
+ * against its true preimage is 715.75 tokens (feature.md gate mandates + validator report contract +
+ * the hook's inventory line), after its byte-level formats were moved to
+ * requirements-validator/references/feature-report-contracts.md. `ESTIMATED_TRIGGER` unchanged.
  */
-const FRESH_BEFORE = { files: 34, bytes: 356321, estimatedTokens: 95940.35 };
+const FRESH_BEFORE = { files: 34, bytes: 372385, estimatedTokens: 99956.35 };
 const ESTIMATED_TRIGGER = 4037.75;
 // Measured 2026-09-01 before corpus-budget-compression. Modules and references are outside
 // measureCorpus(); a 0-byte allowance makes any relocation growth visible instead of budget-free.
-const UNMEASURED_SKILL_SURFACES_BEFORE = { files: 59, bytes: 638309 };
+// Re-measured 2026-09-02 (features/traceability-floor-and-contract): +1 file, +4265 bytes —
+// requirements-validator/references/feature-report-contracts.md (the byte-level formats of the
+// three /feature report gates; invocation-time material, the gates are the machine half) and the
+// Traceability floor row + FR-009 worked case in references/scoring-system.md. Not a relocation:
+// the always-loaded corpus measured by P5 GREW in the same change (feature.md gates), it did not shrink.
+const UNMEASURED_SKILL_SURFACES_BEFORE = { files: 60, bytes: 642574 };
 const UNMEASURED_SKILL_SURFACES_GROWTH_ALLOWANCE = 0;
 const SEAMS = [
   ['commands/feature.md', 'both'],

package/tests/unit/sync-templates-guard.test.js

@@ -2,8 +2,9 @@
 
 // scripts/sync-templates.js copies <found root>/.claude/{skills,commands,agents,rules,hooks} over
 // templates/.claude/ — the directory that becomes the npm tarball. It finds its source by walking up
-// to five parents and taking the FIRST one containing .claude/skills, which inside a monorepo is the
-// MONOREPO, whose .claude/skills holds a whole different toolkit.
+// to five parents, stopping at the package repository boundary, and taking the FIRST one containing
+// .claude/skills, which inside a monorepo is the MONOREPO, whose .claude/skills holds a whole
+// different toolkit.
 //
 // Nothing had fired only because package.json's prepublishOnly points at the publish gate, not here.
 // "Safe because dead" is not a safety property: a dead script can be revived by anyone who does not
@@ -61,7 +62,11 @@ const DECLARATION = 'p-replicator-sync-source: v1';
  *  with its own templates/.claude tree. `marker` decides whether the root claims to be the source. */
 function fixture(opts) {
   const o = opts || {};
-  const root = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'p-rep-sync-')));
+  const parent = o.parent || os.tmpdir();
+  const root = fs.realpathSync(fs.mkdtempSync(path.join(parent, 'p-rep-sync-')));
+  const boundary = o.boundary === undefined ? 'dir' : o.boundary;
+  if (boundary === 'dir') fs.mkdirSync(path.join(root, '.git'));
+  if (boundary === 'file') fs.writeFileSync(path.join(root, '.git'), 'gitdir: /nonexistent\n');
   if (o.rootHasClaude !== false) {
     fs.mkdirSync(path.join(root, '.claude', 'skills', 'intruder'), { recursive: true });
     fs.writeFileSync(path.join(root, '.claude', 'skills', 'intruder', 'SKILL.md'),
@@ -208,6 +213,44 @@ describe.skip = describe.skip || (() => {});
     } finally { cleanup(f.root); }
   });
 
+  test('P10 — a .claude/skills ABOVE the repository boundary is not a candidate root', () => {
+    const grandparent = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'p-rep-intruder-')));
+    fs.mkdirSync(path.join(grandparent, '.claude', 'skills', 'intruder'), { recursive: true });
+    fs.writeFileSync(path.join(grandparent, '.claude', 'skills', 'intruder', 'SKILL.md'),
+      '# outside the fixture repository\n');
+    try {
+      const bounded = fixture({ parent: grandparent, rootHasClaude: false, boundary: 'dir' });
+      try {
+        const r = runScript(bounded.pkg);
+        assert.equal(r.code, 0, 'the repository boundary must stop the walk: ' + r.out);
+        assert.match(r.out, /Not in repo context — skipping sync/);
+      } finally { cleanup(bounded.root); }
+
+      const unbounded = fixture({ parent: grandparent, rootHasClaude: false, boundary: false });
+      try {
+        const r = runScript(unbounded.pkg);
+        assert.equal(r.code, 1, 'without a boundary the outside candidate must still be found');
+        assert.match(r.out, /REFUSING to sync/,
+          'the contrast proves the boundary, rather than the host /tmp state, caused the skip');
+      } finally { cleanup(unbounded.root); }
+    } finally { cleanup(grandparent); }
+  });
+
+  test('P11 — a .git FILE (worktree) is a boundary too', () => {
+    const grandparent = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'p-rep-intruder-')));
+    fs.mkdirSync(path.join(grandparent, '.claude', 'skills', 'intruder'), { recursive: true });
+    fs.writeFileSync(path.join(grandparent, '.claude', 'skills', 'intruder', 'SKILL.md'),
+      '# outside the fixture worktree\n');
+    try {
+      const f = fixture({ parent: grandparent, rootHasClaude: false, boundary: 'file' });
+      try {
+        const r = runScript(f.pkg);
+        assert.equal(r.code, 0, 'a worktree .git file must stop the walk: ' + r.out);
+        assert.match(r.out, /Not in repo context — skipping sync/);
+      } finally { cleanup(f.root); }
+    } finally { cleanup(grandparent); }
+  });
+
   test('P5 — no helper tells a reader to run it', () => {
     // The helper printed "Run prepublishOnly first: node scripts/sync-templates.js" when templates/
     // was missing: a live invitation to the hazardous command, in the one situation where a reader