@echopath-labs/forgerail 0.1.0-alpha.1

package/.codex-plugin/plugin.json

@@ -0,0 +1,37 @@
+{
+  "name": "forgerail",
+  "version": "0.1.0-alpha.1",
+  "description": "Engineering guidance and governance for coding agents, with workspace diagnosis and composable capability packs.",
+  "author": {
+    "name": "EchoPath Labs",
+    "url": "https://github.com/echopath-labs"
+  },
+  "homepage": "https://github.com/echopath-labs/forgerail",
+  "repository": "https://github.com/echopath-labs/forgerail",
+  "license": "Apache-2.0",
+  "keywords": [
+    "agent-governance",
+    "coding-agent",
+    "workspace-diagnosis",
+    "engineering-workflow"
+  ],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "ForgeRail",
+    "shortDescription": "Engineering guidance and guardrails for coding agents.",
+    "longDescription": "ForgeRail diagnoses workspace habits, composes applicable governance, launches coding agents with explicit boundaries, and verifies observable results without replacing the agent or the workspace's own record system.",
+    "developerName": "EchoPath Labs",
+    "category": "Productivity",
+    "capabilities": [
+      "Agent engineering governance",
+      "Read-only workspace diagnosis",
+      "Workspace health review"
+    ],
+    "defaultPrompt": [
+      "Use ForgeRail to govern this engineering task.",
+      "Diagnose this workspace before recommending governance changes.",
+      "Review this workspace for governance and recovery risks."
+    ],
+    "brandColor": "#B45309"
+  }
+}

package/CHANGELOG.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## Unreleased
+
+No shipping changes yet.
+
+## 0.1.0-alpha.1 - 2026-08-13
+
+- Establish the first ForgeRail Agent Plugin with Core, Workspace Diagnosis, and Workspace Health Review entrypoints.
+- Add deterministic contracts for Capability Packs, effective Profiles, Task Envelopes, Launch Contracts, Return Receipts, and Profile evolution candidates.
+- Add progressive project adoption with deterministic Adoption Plan, Host Adapter, and Host Binding Receipt contracts; a supported Codex binding; profile-only Claude Code and Cursor boundaries; and read-only single-host or multi-host planning without an apply command or `.forgerail/` state.
+- Add offline validation, read-only diagnosis fixtures, deterministic public projection, and a disposable npm consumer lifecycle covering install, diagnosis, Launch/Receipt, upgrade, rollback, reinstall, and uninstall.
+- Publish the EchoPath Labs Marketplace catalog with the main Plugin plus separately installed GitHub Rulesets, Release Safety, and Thread Closure Capability Pack Plugins.
+- Add Cross-Workspace Orchestration as a separately installed, explicit-use Capability Pack for genuine independent owner boundaries; keep it out of the main Plugin's default Skill set.
+- Add Node.js 22 and 24 Plugin contract CI, frozen AGW behavior coverage, installation guidance, and a project-owned prerelease runbook.
+- Publish the optional CLI under the official `@echopath-labs/forgerail` organization scope while preserving the `forgerail` binary shim and leaving the unscoped reservation package unchanged.
+- Adopt Apache-2.0 for ForgeRail and every Capability Pack included in this release candidate.

package/CONTRIBUTING.md

@@ -0,0 +1,7 @@
+# Contributing
+
+Contributions should preserve ForgeRail's non-executor boundary, existing-habits-first diagnosis, progressive loading, explicit approvals, and deterministic receipts.
+
+Start domain-specific behavior as a Capability Pack. Keep project facts and private release procedures in the owning workspace. Add positive and fail-closed fixtures for contract changes, run the Plugin and Skill validators, and document migration impact.
+
+Contributions are accepted under Apache-2.0.

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,4 @@
+ForgeRail
+Copyright 2026 EchoPath Labs
+
+This product includes workflow patterns derived from the Agent Workflow Governance and EverCraft workflow-governance projects maintained by EchoPath Labs and their contributors.

package/PLUGIN.md

@@ -0,0 +1,11 @@
+# ForgeRail Agent Plugin
+
+The Plugin exposes three separately addressable Skills:
+
+- `forgerail` is the small task-governance Core.
+- `forgerail-workspace-diagnosis` is a read-only, existing-habits-first diagnosis entry.
+- `workspace-health-review` is the first built-in Capability Pack and keeps its established identity.
+
+Availability is not activation. Installing this Plugin does not make every Skill or pack mandatory in every workspace.
+
+Project adoption is also separate from installation. ForgeRail defaults to Plugin Only, can propose a confirmed lightweight Host Binding, and defers persisted `.forgerail/` governance. See `docs/adoption.md` or `docs/adoption.zh-CN.md`.

package/README.md

@@ -0,0 +1,65 @@
+# ForgeRail
+
+ForgeRail is an engineering guidance and governance framework for Coding Agents.
+
+It observes a workspace, recommends improvements only when evidence warrants them, composes applicable rules, launches the host Agent with explicit scope and approval boundaries, and verifies observable results. It does not replace the Agent or force a new specification system onto the project.
+
+## First Alpha Shape
+
+- `$forgerail`: task-level guidance and guardrails.
+- `$forgerail-workspace-diagnosis`: bounded read-only diagnosis that follows existing workspace habits first.
+- `$workspace-health-review`: independently invokable workspace governance health pack.
+
+GitHub Rulesets, Release Safety, and Thread Closure are separately distributed Capability Packs because they have independent authentication, risk, lifecycle, and release boundaries.
+
+Cross-Workspace Orchestration is also separately distributed and explicit-use. It applies only when a master task coordinates multiple genuine owner/repository/release boundaries with safe parallel dependency stages; it is not a general multi-agent mode for one repository.
+
+The EchoPath Labs Marketplace candidate includes `forgerail-github-rulesets`, `forgerail-release-safety`, `forgerail-thread-closure`, and `forgerail-cross-workspace-orchestration` as separate, explicitly installed Plugins with `ON_USE` policy. They are not installed or activated merely because the main ForgeRail Plugin is selected.
+
+## Architecture
+
+ForgeRail composes four layers:
+
+1. Core governance;
+2. optional Capability Packs;
+3. an effective Workspace Profile resolved from existing sources;
+4. a temporary Task Envelope.
+
+The Profile is computed by default. ForgeRail does not create `.forgerail/profile.yaml`, edit `AGENTS.md`, or install OpenSpec merely because it was invoked.
+
+Workspace adoption is progressive: Plugin Only by default; user-confirmed lightweight bindings when durable guidance is valuable; persisted `.forgerail/` governance only for future evidence-backed machine configuration or repeated conflicts. Host-specific instruction files are adapters, not ForgeRail Core. Codex is supported for alpha.1; Claude Code and Cursor profiles are explicit but unverified.
+
+## Local Validation
+
+```bash
+node scripts/forgerail.mjs validate
+node scripts/forgerail.mjs validate-fixtures
+node scripts/forgerail.mjs validate-adoption
+node scripts/validate-release.mjs
+node scripts/forgerail.mjs diagnose --workspace scripts/fixtures/workspaces/markdown-existing
+node scripts/forgerail.mjs adoption-plan --workspace scripts/fixtures/workspaces/markdown-existing --host codex
+```
+
+The optional official npm package is `@echopath-labs/forgerail`; it exposes the same deterministic CLI through the short `forgerail` binary shim. The unscoped `forgerail` package remains a reservation and is not the product install path.
+
+```bash
+npm install --global @echopath-labs/forgerail@0.1.0-alpha.1
+forgerail validate
+forgerail diagnose --workspace .
+forgerail adoption-plan --workspace . --host codex
+```
+
+## Install The Prerelease
+
+After `v0.1.0-alpha.1` is published, register the exact ForgeRail Marketplace snapshot and install the main Plugin:
+
+```bash
+codex plugin marketplace add echopath-labs/forgerail --ref v0.1.0-alpha.1
+codex plugin add forgerail@echopath-labs
+```
+
+Start a new Codex task after installation. Install high-risk Capability Packs separately and only when the project needs them. See [Installation And Adoption](docs/installation.md) and [Progressive Adoption](docs/adoption.md) for exact commands, adoption levels, Host Adapter status, upgrade, rollback, and uninstall boundaries.
+
+## Status
+
+The public bootstrap and Node.js 22/24 contract CI are complete. `0.1.0-alpha.1` remains a signed release candidate until its ordinary branch/PR CI and independent release approval complete; the commands above become a supported install path only after the tag exists.

package/README.zh-CN.md

@@ -0,0 +1,39 @@
+# ForgeRail
+
+ForgeRail 是面向 Coding Agent 的工程引航与治理框架。
+
+它观察工作区，在证据表明存在缺口时提出建议，组装适用规约，以明确的范围和审批边界发起宿主 Agent 工作，并核验可观察结果。它不替代 Agent，也不强迫项目采用新的规格系统。
+
+## 首个 Alpha 形态
+
+- `$forgerail`：任务级引航与围栏；
+- `$forgerail-workspace-diagnosis`：优先沿用现有习惯的有界只读诊断；
+- `$workspace-health-review`：可独立触发的工作区治理健康能力包。
+
+GitHub Rulesets、Release Safety 与 Thread Closure 由于具有独立身份、权限、风险与生命周期边界，作为单独分发、按需安装和显式触发的 Capability Packs。主插件被安装不代表这些能力包已安装、启用、认证或获批执行。
+
+Cross-Workspace Orchestration 同样单独分发并显式使用。它只适用于主控任务协调多个真实独立 owner/repository/release 边界，且依赖关系允许安全并行的场景；它不是单仓通用的多 Agent 开关。
+
+ForgeRail 默认动态计算有效 Workspace Profile，不会因为被调用就创建 `.forgerail/profile.yaml`、修改 `AGENTS.md` 或安装 OpenSpec。
+
+工作区采用遵循渐进式三级模型：默认 Plugin Only；只有用户确认后才使用轻量绑定；未来只有机器配置或反复冲突等证据充分时，才考虑持久化 `.forgerail/` 治理。宿主 instruction 文件只是 Adapter，不是 ForgeRail Core。alpha.1 支持 Codex；Claude Code 与 Cursor profile 会明确发布，但仍标记为未验证。
+
+可选官方 npm 包为 `@echopath-labs/forgerail`，安装后仍提供简短的 `forgerail` 命令入口，用于离线校验、只读诊断和合同闭环；Agent Plugin 本身不依赖该 CLI 才能使用。未作用域 `forgerail` 只保留名称占位，不是正式安装入口。
+
+```bash
+npm install --global @echopath-labs/forgerail@0.1.0-alpha.1
+forgerail validate
+```
+
+## 安装预发布版
+
+在 `v0.1.0-alpha.1` 正式发布后，先注册精确版本的 ForgeRail Marketplace 快照，再安装主插件：
+
+```bash
+codex plugin marketplace add echopath-labs/forgerail --ref v0.1.0-alpha.1
+codex plugin add forgerail@echopath-labs
+```
+
+安装后请启动一个新的 Codex 任务。GitHub Rulesets、Release Safety 与 Thread Closure 必须按项目实际需要单独安装；精确命令、三级采用模型、Host Adapter 状态、升级、回滚和卸载边界见[安装与采用](docs/installation.zh-CN.md)及[渐进式采用](docs/adoption.zh-CN.md)。
+
+公开仓库 bootstrap 与 Node.js 22/24 合同 CI 已完成。`0.1.0-alpha.1` 在普通分支/PR CI 与独立发布审批完成前仍是签名候选；只有对应 tag 存在后，上述命令才成为受支持的安装路径。

package/SECURITY.md

@@ -0,0 +1,7 @@
+# Security
+
+Report suspected ForgeRail vulnerabilities privately to the EchoPath Labs maintainers before public disclosure.
+
+ForgeRail workspace diagnosis is read-only by default and must not inspect secrets, credentials, broad private archives, or unrelated child repositories. Capability Packs that access remote systems must declare identity, permissions, approval, validation, and rollback boundaries.
+
+Do not include credentials, private project memory, production configuration, or customer data in issues, fixtures, receipts, or public bundles.

package/adapters/claude-code.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "1.0",
+  "id": "claude-code",
+  "displayName": "Claude Code",
+  "status": "profile-only",
+  "instructionDiscovery": "task-start",
+  "skillDiscovery": "agent-skills",
+  "bindingTarget": "CLAUDE.md",
+  "bindingModes": ["managed-block", "thin-reference"],
+  "managedMarker": "forgerail:binding:claude-code:v1",
+  "activationBoundary": "host-specific-verification-required",
+  "verification": {
+    "mode": "profile-only",
+    "expectedSkills": []
+  },
+  "limitations": [
+    "The instruction target is modeled, but ForgeRail alpha.1 does not claim end-to-end plugin discovery or a verified new-session activation receipt for Claude Code.",
+    "Treat generated content as a proposal until verified in the target host."
+  ]
+}

package/adapters/codex.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "1.0",
+  "id": "codex",
+  "displayName": "Codex",
+  "status": "supported",
+  "instructionDiscovery": "task-start",
+  "skillDiscovery": "agent-plugin-skills",
+  "bindingTarget": "AGENTS.md",
+  "bindingModes": ["managed-block", "thin-reference"],
+  "managedMarker": "forgerail:binding:codex:v1",
+  "activationBoundary": "new-task-required",
+  "verification": {
+    "mode": "new-task-discovery",
+    "expectedSkills": ["forgerail", "forgerail-workspace-diagnosis", "workspace-health-review"]
+  },
+  "limitations": [
+    "A binding is discovered only by a new Codex task started inside the applicable instruction scope.",
+    "Plugin installation and workspace adoption remain separate actions."
+  ]
+}

package/adapters/cursor.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "1.0",
+  "id": "cursor",
+  "displayName": "Cursor",
+  "status": "profile-only",
+  "instructionDiscovery": "rules",
+  "skillDiscovery": "unknown",
+  "bindingTarget": ".cursor/rules/forgerail.mdc",
+  "bindingModes": ["thin-reference"],
+  "managedMarker": "forgerail:binding:cursor:v1",
+  "activationBoundary": "host-specific-verification-required",
+  "verification": {
+    "mode": "profile-only",
+    "expectedSkills": []
+  },
+  "limitations": [
+    "The project Rules target is modeled, but ForgeRail alpha.1 does not claim verified Skill discovery or end-to-end activation in Cursor.",
+    "Treat generated content as a proposal until verified in the target host."
+  ]
+}

package/contracts/adoption-plan.schema.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/adoption-plan-v1.json",
+  "title": "ForgeRail Adoption Plan",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "planId", "workspace", "currentLevel", "proposedLevel", "strategy", "evidence", "hosts", "proposedWrites", "requiredConfirmation", "verification", "confirmedNonMutations", "mutations", "status"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "planId": { "type": "string", "pattern": "^[a-zA-Z0-9._:-]+$" },
+    "workspace": { "type": "string", "minLength": 1 },
+    "currentLevel": { "enum": ["plugin-only", "lightweight-adoption", "persisted-governance"] },
+    "proposedLevel": { "enum": ["plugin-only", "lightweight-adoption", "persisted-governance"] },
+    "strategy": { "enum": ["no-change", "single-host-managed-block", "shared-contract-with-thin-bindings"] },
+    "evidence": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+    "hosts": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["adapterId", "status", "bindingTarget", "verificationMode"],
+        "properties": {
+          "adapterId": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" },
+          "status": { "enum": ["supported", "profile-only"] },
+          "bindingTarget": { "type": "string", "minLength": 1 },
+          "verificationMode": { "enum": ["new-task-discovery", "profile-only"] }
+        }
+      }
+    },
+    "proposedWrites": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path", "operation", "baseSha256", "contentSha256", "content", "managedMarker"],
+        "properties": {
+          "path": { "type": "string", "minLength": 1 },
+          "operation": { "enum": ["create", "append-managed-block", "replace-managed-block"] },
+          "baseSha256": { "type": ["string", "null"], "pattern": "^[0-9a-f]{64}$" },
+          "contentSha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+          "content": { "type": "string", "minLength": 1 },
+          "managedMarker": { "type": "string", "pattern": "^forgerail:(binding:[a-z][a-z0-9-]+|adoption-contract):v1$" }
+        }
+      }
+    },
+    "requiredConfirmation": { "const": true },
+    "verification": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+    "confirmedNonMutations": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+    "mutations": { "type": "array", "maxItems": 0 },
+    "status": { "const": "candidate" }
+  }
+}

package/contracts/capability-pack.schema.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/capability-pack-v1.json",
+  "title": "ForgeRail Capability Pack",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "purpose", "entry", "risk", "states", "triggers", "inputs", "dependencies", "conflicts", "approvals", "validation", "receiptExtensions"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" },
+    "purpose": { "type": "string", "minLength": 12 },
+    "entry": { "type": "string", "pattern": "^skills/[a-z][a-z0-9-]+/SKILL\\.md$" },
+    "risk": { "enum": ["low", "medium", "high"] },
+    "states": { "type": "array", "const": ["available", "recommended", "enabled", "required", "blocked", "disabled"] },
+    "triggers": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+    "inputs": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+    "dependencies": { "type": "array", "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" }, "uniqueItems": true },
+    "conflicts": { "type": "array", "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" }, "uniqueItems": true },
+    "approvals": { "type": "array", "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" }, "uniqueItems": true },
+    "validation": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+    "receiptExtensions": { "type": "array", "items": { "type": "string", "pattern": "^[a-z][A-Za-z0-9]*$" }, "uniqueItems": true }
+  }
+}

package/contracts/effective-profile.schema.json

@@ -0,0 +1,42 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/effective-profile-v1.json",
+  "title": "ForgeRail Effective Profile",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "workspace", "computed", "rules", "packs", "conflicts"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "workspace": { "type": "string", "minLength": 1 },
+    "computed": { "const": true },
+    "rules": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "value", "source", "precedence", "status"],
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z][a-z0-9.-]+$" },
+          "value": {},
+          "source": { "type": "string", "minLength": 1 },
+          "precedence": { "type": "integer", "minimum": 1, "maximum": 6 },
+          "status": { "enum": ["observed", "inferred", "confirmed", "default"] }
+        }
+      }
+    },
+    "packs": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "state", "reason"],
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" },
+          "state": { "enum": ["available", "recommended", "enabled", "required", "blocked", "disabled"] },
+          "reason": { "type": "string", "minLength": 1 }
+        }
+      }
+    },
+    "conflicts": { "type": "array", "items": { "type": "string", "minLength": 1 } }
+  }
+}

package/contracts/host-adapter.schema.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/host-adapter-v1.json",
+  "title": "ForgeRail Host Adapter",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "id", "displayName", "status", "instructionDiscovery", "skillDiscovery", "bindingTarget", "bindingModes", "managedMarker", "activationBoundary", "verification", "limitations"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" },
+    "displayName": { "type": "string", "minLength": 1 },
+    "status": { "enum": ["supported", "profile-only"] },
+    "instructionDiscovery": { "enum": ["task-start", "rules", "explicit-only", "unknown"] },
+    "skillDiscovery": { "enum": ["agent-plugin-skills", "agent-skills", "explicit-only", "unknown"] },
+    "bindingTarget": { "type": "string", "minLength": 1 },
+    "bindingModes": {
+      "type": "array",
+      "items": { "enum": ["managed-block", "thin-reference"] },
+      "minItems": 1,
+      "uniqueItems": true
+    },
+    "managedMarker": { "type": "string", "pattern": "^forgerail:binding:[a-z][a-z0-9-]+:v1$" },
+    "activationBoundary": { "enum": ["new-task-required", "host-specific-verification-required"] },
+    "verification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "expectedSkills"],
+      "properties": {
+        "mode": { "enum": ["new-task-discovery", "profile-only"] },
+        "expectedSkills": {
+          "type": "array",
+          "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" },
+          "uniqueItems": true
+        }
+      }
+    },
+    "limitations": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1 },
+      "uniqueItems": true
+    }
+  }
+}