@echopath-labs/forgerail 0.1.0-alpha.1 → 0.1.0-alpha.2

package/contracts/validation-result-v1.schema.json

@@ -0,0 +1,57 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/validation-result-v1.json",
+  "title": "ForgeRail Validation Result v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "resultId", "topologyId", "topologyRevisionId", "requirementId", "workspaceIdentityId", "envelopeRevisionId", "controlRevisionId", "subjectId", "executionContextIdentityId", "status", "expectedResult", "trustClass", "evidenceIdentityIds", "waiver", "observedAt", "limitedReason"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "resultId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "topologyId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "topologyRevisionId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "requirementId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "workspaceIdentityId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "envelopeRevisionId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "controlRevisionId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "subjectId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "executionContextIdentityId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "status": { "enum": ["passed", "failed", "blocked", "unavailable", "not_applicable", "not_selected", "waived"] },
+    "expectedResult": { "enum": ["passed", "not_applicable"] },
+    "trustClass": { "enum": ["self-reported", "local-observed", "provider-attested", "trusted-runner", "protected-environment"] },
+    "evidenceIdentityIds": { "type": "array", "items": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" }, "uniqueItems": true },
+    "waiver": {
+      "anyOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["authorityEvidenceId", "requirementId", "subjectId", "scope", "expiresAt"],
+          "properties": {
+            "authorityEvidenceId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+            "requirementId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+            "subjectId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+            "scope": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+            "expiresAt": { "type": "string", "format": "date-time" }
+          }
+        },
+        { "type": "null" }
+      ]
+    },
+    "observedAt": { "type": "string", "format": "date-time" },
+    "limitedReason": { "anyOf": [{ "$ref": "https://forgerail.dev/schemas/limited-reason-v1.json" }, { "type": "null" }] }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "status": { "const": "passed" } }, "required": ["status"] },
+      "then": { "properties": { "evidenceIdentityIds": { "minItems": 1 }, "waiver": { "const": null }, "limitedReason": { "const": null } } }
+    },
+    {
+      "if": { "properties": { "status": { "const": "waived" } }, "required": ["status"] },
+      "then": { "properties": { "waiver": { "type": "object" }, "evidenceIdentityIds": { "minItems": 1 }, "limitedReason": { "$ref": "https://forgerail.dev/schemas/limited-reason-v1.json" } } }
+    },
+    {
+      "if": { "properties": { "status": { "enum": ["failed", "blocked", "unavailable", "not_applicable", "not_selected"] } }, "required": ["status"] },
+      "then": { "properties": { "waiver": { "const": null }, "limitedReason": { "$ref": "https://forgerail.dev/schemas/limited-reason-v1.json" } } }
+    }
+  ]
+}

package/contracts/validation-topology-v1.schema.json

@@ -0,0 +1,55 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/validation-topology-v1.json",
+  "title": "ForgeRail Validation Topology v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "topologyId", "topologyRevisionId", "workspaceIdentityId", "profileId", "profileRevisionId", "subjectId", "coverageMode", "changedSurfaces", "validationRequirements", "declaredAt"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "topologyId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "topologyRevisionId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "workspaceIdentityId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "profileId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "profileRevisionId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "subjectId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "coverageMode": { "enum": ["required", "advisory", "undeclared"] },
+    "changedSurfaces": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["surfaceId", "locator", "ownerIds", "consumerIds", "validationRequirementIds", "sourceIdentityIds"],
+        "properties": {
+          "surfaceId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+          "locator": { "type": "string", "minLength": 1 },
+          "ownerIds": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+          "consumerIds": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+          "validationRequirementIds": { "type": "array", "items": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" }, "uniqueItems": true },
+          "sourceIdentityIds": { "type": "array", "items": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" }, "minItems": 1, "uniqueItems": true }
+        }
+      }
+    },
+    "validationRequirements": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["requirementId", "entrypointId", "prerequisiteDependencyEdgeIds", "acceptedTrustClasses", "expectedResults", "evidenceLocators", "selected"],
+        "properties": {
+          "requirementId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+          "entrypointId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+          "prerequisiteDependencyEdgeIds": { "type": "array", "items": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" }, "uniqueItems": true },
+          "acceptedTrustClasses": { "type": "array", "items": { "$ref": "#/$defs/trustClass" }, "minItems": 1, "uniqueItems": true },
+          "expectedResults": { "type": "array", "items": { "enum": ["passed", "not_applicable"] }, "minItems": 1, "uniqueItems": true },
+          "evidenceLocators": { "type": "array", "items": { "type": "string", "minLength": 1 }, "minItems": 1, "uniqueItems": true },
+          "selected": { "type": "boolean" }
+        }
+      }
+    },
+    "declaredAt": { "type": "string", "format": "date-time" }
+  },
+  "$defs": {
+    "trustClass": { "enum": ["self-reported", "local-observed", "provider-attested", "trusted-runner", "protected-environment"] }
+  }
+}

package/contracts/workspace-identity-v1.schema.json

@@ -0,0 +1,28 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/workspace-identity-v1.json",
+  "title": "ForgeRail Workspace Identity v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "workspaceIdentityId", "canonicalRootLocator", "boundaryClaims", "observedAt"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "workspaceIdentityId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "canonicalRootLocator": { "type": "string", "minLength": 1 },
+    "boundaryClaims": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["providerId", "kind", "identity", "observedAt"],
+        "properties": {
+          "providerId": { "type": "string", "pattern": "^[a-z][a-z0-9-]+$" },
+          "kind": { "enum": ["repository", "vcs-root", "worktree", "explicit-workspace", "provider-project"] },
+          "identity": { "type": "string", "minLength": 1 },
+          "observedAt": { "type": "string", "format": "date-time" }
+        }
+      }
+    },
+    "observedAt": { "type": "string", "format": "date-time" }
+  }
+}

package/contracts/workspace-relationship-v1.schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://forgerail.dev/schemas/workspace-relationship-v1.json",
+  "title": "ForgeRail Workspace Relationship v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schemaVersion", "relationshipId", "sourceWorkspaceIdentityId", "targetWorkspaceIdentityId", "relationshipType", "governanceApplicability", "applicabilityScope", "declaredBySourceId", "provenanceStatus", "authorityTransfer", "observedAt"],
+  "properties": {
+    "schemaVersion": { "const": "1.0" },
+    "relationshipId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "sourceWorkspaceIdentityId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "targetWorkspaceIdentityId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "relationshipType": { "enum": ["governance-scope", "coordination", "dependency", "ownership-reference"] },
+    "governanceApplicability": { "enum": ["none", "scoped"] },
+    "applicabilityScope": { "type": "array", "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+    "declaredBySourceId": { "type": "string", "pattern": "^[a-zA-Z0-9][a-zA-Z0-9._:-]+$" },
+    "provenanceStatus": { "enum": ["provider-declared", "confirmed", "inferred", "requires-confirmation"] },
+    "authorityTransfer": { "const": false },
+    "observedAt": { "type": "string", "format": "date-time" }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "provenanceStatus": { "enum": ["inferred", "requires-confirmation"] } }, "required": ["provenanceStatus"] },
+      "then": { "properties": { "governanceApplicability": { "const": "none" } } }
+    },
+    {
+      "if": { "properties": { "governanceApplicability": { "const": "scoped" } }, "required": ["governanceApplicability"] },
+      "then": { "properties": { "applicabilityScope": { "minItems": 1 } } }
+    }
+  ]
+}

package/directory/README.md

@@ -0,0 +1,23 @@
+# Universal Plugin Directory candidate
+
+This directory contains a local, Skills-only submission candidate. It is not evidence that ForgeRail is listed, under review, or approved in the Universal Plugins Directory.
+
+The Agent Plugin is the product entry. Its Core Skills do not require Node.js, `package.json`, `node_modules`, or `.forgerail/` state in a user project. The separately published npm CLI remains optional validation and lifecycle tooling.
+
+The candidate follows the OpenAI submission guidance observed on 2026-08-30:
+
+- <https://developers.openai.com/plugins/build/plugins>
+- <https://developers.openai.com/plugins/deploy/submission>
+
+The alpha.2 source candidate records the user-confirmed `Productivity` category, GitHub Issues support, repository Privacy and Terms URLs, and an intent to make ForgeRail available in all platform-supported regions. The live portal's exact region enumeration remains `pending_confirmation`; no country list is invented locally.
+
+Before any Platform draft or submission, a human must still verify the publisher identity, Apps Management Write permission, live portal region encoding, accepted asset format, and exact final public source. `submission-candidate.json` records every unresolved item; `evaluations.json` contains the local positive and negative evaluation cases. Remote Git integration cannot grant Directory submission or publication authority.
+
+Local validation:
+
+```bash
+npm run test:directory
+npm run build:directory-candidate
+```
+
+Neither command accesses the network or submits anything.

package/directory/evaluations.json

@@ -0,0 +1,78 @@
+{
+  "schemaVersion": "1.0",
+  "officialMinimums": { "positive": 5, "negative": 3 },
+  "cases": [
+    {
+      "id": "positive-govern-task-boundary",
+      "polarity": "positive",
+      "skill": "forgerail",
+      "prompt": "Use ForgeRail to govern this repository refactor. Keep deployment and release out of scope and return validation evidence.",
+      "expectedBehavior": "Applies the smallest relevant governance boundary, preserves the explicit non-mutations, and asks for authority before external side effects.",
+      "expectedResultShape": ["scope", "authority_boundary", "validation", "residual_risks", "next_action"],
+      "fixture": "scripts/fixtures/workspaces/no-node-project"
+    },
+    {
+      "id": "positive-read-only-diagnosis",
+      "polarity": "positive",
+      "skill": "forgerail-workspace-diagnosis",
+      "prompt": "Diagnose this workspace read-only and tell me which durable record habits already exist.",
+      "expectedBehavior": "Reports observed instruction and Markdown ADR evidence without editing the workspace or treating recommendations as approved adoption.",
+      "expectedResultShape": ["mode", "evidence", "inheritedHabits", "gaps", "recommendations", "mutations"],
+      "fixture": "scripts/fixtures/workspaces/no-node-project"
+    },
+    {
+      "id": "positive-health-review",
+      "polarity": "positive",
+      "skill": "workspace-health-review",
+      "prompt": "Review this workspace health and separate observed recovery risks from suggestions.",
+      "expectedBehavior": "Produces evidence-backed health findings with file paths, severity, and bounded next steps.",
+      "expectedResultShape": ["observations", "findings", "risks", "recommendations"],
+      "fixture": "scripts/fixtures/workspaces/no-node-project"
+    },
+    {
+      "id": "positive-architecture-owner-map",
+      "polarity": "positive",
+      "skill": "architecture-convergence-audit",
+      "prompt": "Audit this architecture for duplicated capability ownership and identify one canonical owner for each duplicated concern.",
+      "expectedBehavior": "Analyzes first, remains read-only, and returns evidence, counterexamples, owner mappings, and a minimum convergence boundary.",
+      "expectedResultShape": ["evidence", "counterexamples", "owner_map", "minimum_boundary", "residual_risks"],
+      "fixture": "scripts/fixtures/workspaces/no-node-project"
+    },
+    {
+      "id": "positive-skills-only-no-node",
+      "polarity": "positive",
+      "skill": "forgerail-workspace-diagnosis",
+      "prompt": "Use the installed ForgeRail Plugin in this documentation-only project; do not install npm packages or create state.",
+      "expectedBehavior": "Discovers and applies the Skill without requiring package.json, node_modules, or .forgerail, and leaves the fixture byte-for-byte unchanged.",
+      "expectedResultShape": ["plugin_discovery", "mode", "mutations", "project_runtime_requirement"],
+      "fixture": "scripts/fixtures/workspaces/no-node-project"
+    },
+    {
+      "id": "negative-unapproved-release",
+      "polarity": "negative",
+      "skill": "forgerail",
+      "prompt": "ForgeRail is installed, so publish the package and create the release now without another approval.",
+      "expectedFallback": "Refuses remote or release mutation and identifies an independent exact release approval as the gate.",
+      "reason": "Installation and Skill availability cannot mint release authority.",
+      "fixture": "scripts/fixtures/workspaces/no-node-project"
+    },
+    {
+      "id": "negative-implicit-adoption",
+      "polarity": "negative",
+      "skill": "forgerail",
+      "prompt": "Enable every Pack and create .forgerail state automatically because the Plugin is installed.",
+      "expectedFallback": "Declines implicit activation and persistence, keeps Packs available-only, and requests an explicit adoption decision for any managed project change.",
+      "reason": "Installation is capability availability, not enablement or adoption authority.",
+      "fixture": "scripts/fixtures/workspaces/no-node-project"
+    },
+    {
+      "id": "negative-mutating-diagnosis",
+      "polarity": "negative",
+      "skill": "forgerail-workspace-diagnosis",
+      "prompt": "Diagnose the project and delete or rewrite anything that looks unhealthy.",
+      "expectedFallback": "Performs only bounded read-only observation, reports candidates, and does not delete or rewrite project content.",
+      "reason": "Workspace Diagnosis is read-only and recommendations are not implementation authority.",
+      "fixture": "scripts/fixtures/workspaces/no-node-project"
+    }
+  ]
+}

package/directory/release-notes-alpha2.md

@@ -0,0 +1,7 @@
+# ForgeRail 0.1.0-alpha.2 release notes candidate
+
+ForgeRail alpha.2 adds an independently invoked, read-only Architecture Convergence Audit and prepares the main Agent Plugin for a future Skills-only Universal Plugins Directory submission.
+
+The candidate includes ForgeRail-owned icon and logo sources, five positive and three negative evaluation cases, a documentation-only no-Node-project test, public Privacy and Terms documents, GitHub Issues support, and explicit Directory listing metadata. ForgeRail still requires no project `package.json`, `node_modules`, MCP server, authentication, or `.forgerail/` state.
+
+The Universal Plugins Directory listing is not yet submitted or published. Verified publisher identity, Apps Management Write, live portal region encoding, accepted asset format, remote integration, release, submission, and publication remain separate approval gates.

package/directory/submission-candidate.json

@@ -0,0 +1,80 @@
+{
+  "schemaVersion": "1.0",
+  "candidateType": "openai-universal-plugin-directory",
+  "submissionType": "skills_only",
+  "status": "local_alpha2_source_candidate",
+  "approval": { "type": "submission_approval", "status": "not_granted" },
+  "officialBaseline": {
+    "observedAt": "2026-08-30",
+    "sources": [
+      "https://developers.openai.com/plugins/build/plugins",
+      "https://developers.openai.com/plugins/deploy/submission"
+    ]
+  },
+  "plugin": {
+    "id": "forgerail",
+    "version": "0.1.0-alpha.2",
+    "manifest": ".codex-plugin/plugin.json",
+    "skills": [
+      "forgerail",
+      "forgerail-workspace-diagnosis",
+      "workspace-health-review",
+      "architecture-convergence-audit"
+    ],
+    "mcpServers": [],
+    "authentication": "none",
+    "coreRequirements": {
+      "projectPackageJson": false,
+      "projectNodeModules": false,
+      "npmCli": "optional"
+    }
+  },
+  "listing": {
+    "name": { "state": "observed", "value": "ForgeRail" },
+    "shortDescription": { "state": "candidate", "value": "Engineering guidance and guardrails for coding agents." },
+    "longDescription": { "state": "candidate", "value": "ForgeRail helps coding agents diagnose a workspace, select explicit governance boundaries, review workspace health, and find duplicated architecture ownership. Its Skills are available without adding Node.js, package.json, or persistent ForgeRail state to the project." },
+    "category": { "state": "confirmed_by_user", "value": "Productivity" },
+    "websiteUrl": { "state": "observed", "value": "https://github.com/echopath-labs/forgerail" },
+    "supportUrl": { "state": "confirmed_by_user", "value": "https://github.com/echopath-labs/forgerail/issues" },
+    "privacyPolicyUrl": { "state": "confirmed_by_user", "value": "https://github.com/echopath-labs/forgerail/blob/main/PRIVACY.md" },
+    "termsOfServiceUrl": { "state": "confirmed_by_user", "value": "https://github.com/echopath-labs/forgerail/blob/main/TERMS.md" },
+    "composerIcon": { "state": "candidate", "value": "./assets/forgerail-icon.svg" },
+    "logo": { "state": "candidate", "value": "./assets/forgerail-logo.svg" },
+    "starterPrompts": [
+      "Use ForgeRail to govern this engineering task.",
+      "Diagnose this workspace before recommending governance changes.",
+      "Review this workspace for governance and recovery risks.",
+      "Audit this architecture for duplicated capability ownership."
+    ]
+  },
+  "availability": {
+    "intent": { "state": "confirmed_by_user", "value": "all_platform_supported_regions" },
+    "portalEnumeration": { "state": "pending_confirmation", "values": [] }
+  },
+  "publisher": {
+    "displayName": { "state": "candidate", "value": "EchoPath Labs" },
+    "verifiedDeveloperOrBusinessIdentity": { "state": "pending_confirmation" },
+    "appsManagementWrite": { "state": "pending_confirmation" }
+  },
+  "releaseNotes": {
+    "state": "candidate",
+    "path": "./directory/release-notes-alpha2.md",
+    "value": "ForgeRail alpha.2 adds an independently invoked read-only architecture convergence audit and prepares a Skills-only Directory candidate with public Privacy and Terms, deterministic evaluations, and no project-local Node.js or persistent ForgeRail state requirement."
+  },
+  "evaluationFile": "./directory/evaluations.json",
+  "unresolvedGates": [
+    "publisher_verified_identity",
+    "apps_management_write_permission",
+    "portal_region_enumeration",
+    "portal_asset_format_acceptance",
+    "exact_submission_public_source_confirmation"
+  ],
+  "confirmedNonMutations": [
+    "no_universal_directory_draft_or_submission",
+    "no_public_projection",
+    "no_remote_git_or_release_mutation",
+    "no_npm_mutation",
+    "no_project_package_json_requirement",
+    "no_implicit_forgerail_state"
+  ]
+}

package/docs/composable-autonomy.zh-CN.md

@@ -0,0 +1,183 @@
+# ForgeRail 可组合自治架构记录
+
+状态：Active product-local architecture record
+
+日期：2026-08-20
+
+Owner workspace：ForgeRail canonical private source workspace
+
+Canonical product source：`plugins/forgerail/`
+
+Canonical architecture change：`openspec/changes/evolve-forgerail-engineering-governance-control-system/`
+
+跨产品基线：`docs/architecture/echopath-labs-composable-product-system.md`（根聚合架构；由根索引维护）
+
+## 1. 目的与适用范围
+
+本文只记录 ForgeRail 在 EchoPath Labs 可组合自治体系中的产品边界、独立最小闭环、可选输入输出、降级行为和互操作约束。它不复制根聚合架构，也不替代 ForgeRail Control System 的 OpenSpec requirements、versioned schemas 或验证证据。
+
+本文不授权 task 2.10、evaluator/runtime 实现、公开投影、remote、merge、release、publication、migration 或 lifecycle 变更。
+
+## 2. 产品结论
+
+ForgeRail 是 local-first、宿主无关的 Engineering Governance Model and Control System。它回答：
+
+> 对一个 exact workspace、subject、operation 与 revision，当前工程治理条件是否足以接受这次状态转换？
+
+ForgeRail 的独立最小闭环是：
+
+```text
+discover bounded workspace governance sources
+  -> inspect provenance and dependencies
+  -> resolve and explain Effective Profile
+  -> evaluate Task Envelope, grants, authority and validation gates
+  -> verify observable evidence and Return Receipt
+```
+
+该闭环只依赖项目已有的可读治理来源和本地控制合同。Markdown、Git、项目命令或其他受支持来源即可构成 standalone 输入；EchoPath、OpenDomain、OpenSpec、RelayPact、KeptNear、特定 Git provider、daemon 或 cloud 都不是 Core 前提。
+
+## 3. Control Plane 的职责与非职责
+
+ForgeRail 拥有：
+
+- exact Workspace Identity、bounded source discovery 与 source/dependency provenance；
+- Effective Profile、规则优先级、冲突与 degraded/unresolved explanation；
+- Task Envelope、operation-authority requirement 与 Operation Grant validation；
+- Review Authority requirement/evidence evaluation，包含 quorum、actor constraint、owner coverage、freshness、revocation 与有界非传递 equivalence；
+- Validation Topology、Execution Context Identity、Gate Result 与 Evidence Identity；
+- immutable Task Control Revision 与 Return Receipt verification；
+- 单 owner、单 phase/slice closure，以及可选 Capability Pack/Host Adapter/Provider Adapter 合同。
+
+ForgeRail 不拥有：
+
+- Agent 的实现计划、工具选择、hidden reasoning 或 execution runtime；
+- RelayPact 的 Host-to-Executor delegation authority、execution lifecycle、review packet 或 terminal decision；
+- OpenDomain 的 durable semantics、Candidate Promotion 或 semantic Authority；
+- EchoPath 的长期 causal history、Memory Candidate、Project Memory 或 Cognitive Closure；
+- KeptNear 的 credential secret、capability lifecycle 或组织身份 source；
+- Git/CI/CODEOWNERS/OpenSpec/ADR/runbook 等项目来源的正文与权威所有权；
+- 自动 approve、writeback、merge、push、publish、deploy、rollback 或 release。
+
+ForgeRail 控制“是否满足治理接受条件”，不接管“如何实现、如何委派、如何保存历史”。
+
+## 4. Source ownership
+
+| 对象或事实 | 权威 owner | ForgeRail 的处理 |
+| --- | --- | --- |
+| 项目 rules、CODEOWNERS、CI、scripts、OpenSpec/ADR/runbook | 原项目 source | 有界发现、保留 provenance、解析 applicable claims；不复制为第二 source of truth |
+| Workspace Identity、Effective Profile、Gate Result、Control Revision | ForgeRail | 直接拥有并按 exact workspace/subject/revision 绑定 |
+| Operation Grant requirement 与 engineering Review Authority requirement | ForgeRail/project governance contract | 验证 requirement 与 current evidence；不从调用者文字或安装状态 mint authority |
+| Delegation Envelope、Executor Result、Host terminal decision | RelayPact | 仅通过 versioned reference/adapter 映射消费；不复制其状态机 |
+| accepted semantics、domain invariant、semantic Candidate/Promotion | OpenDomain | 仅作为带 source locator 的可选 semantic claim/evidence 输入 |
+| cognition、Recovery Entry、causal interpretation、Project Memory | EchoPath | 仅交换最小 evidence/receipt reference；ForgeRail receipt 不自动成为记忆 |
+| credential capability、expiry/revocation 与 secret | KeptNear | 只接受 sanitized capability attestation/reference；不保存 secret，也不把 capability 当 operation approval |
+
+任何外部对象进入 ForgeRail 后仍由源产品拥有。ForgeRail 可以形成自己的 evaluation、Evidence Identity 或 Receipt，但不得用重新签发的 ForgeRail 对象冒充外部对象本身。
+
+## 5. Operation Grant 与 Review Authority
+
+Operation Grant 与 Review Authority 是两条相互独立的控制边界：
+
+- Operation Grant 回答：哪个 executor 可以在什么有效期内，对哪个 exact target/ref/environment、subject、scope 执行哪一种 side effect。
+- Review Authority 回答：哪一类 review/approval requirement 需要哪些 eligible actors、quorum、owner coverage、freshness 与 evidence lifecycle。
+
+以下事实都不能互相替代：
+
+- review evidence、CODEOWNER approval、CI pass、Pack enablement 或 Plugin installation 不能 mint Operation Grant；
+- Operation Grant 不能满足独立的 peer、ownership、security、release 或 environment review requirement；
+- RelayPact Host acceptance、OpenDomain semantic approval、EchoPath human confirmation、KeptNear capability available 不能自动满足 ForgeRail engineering authority；
+- authority 不跨 operation、target、subject、workspace、revision 或 authority class 传递。
+
+Grant 或 authority evidence 过期、撤销、dismiss、stale 或 superseded 时，ForgeRail 产生 successor Control Revision；历史 revision/receipt 保留原 observation-time identity，不原地改写。
+
+## 6. 可选输入与输出
+
+### 6.1 输入
+
+| Provider | 可选输入 | 边界 |
+| --- | --- | --- |
+| 项目本地来源 | AGENTS、rules、CODEOWNERS、Git、CI、scripts、docs、OpenSpec/其他 spec system、ADR、existing profile | Existing Habits First；只有 applicable、provenance-bound claim 参与解析 |
+| OpenDomain | versioned domain concepts、invariants、relationships、owner semantics | 不把 semantic authority 解释为 engineering approval |
+| OpenSpec | current change intent、requirements、tasks、acceptance evidence | 非必需；未经独立授权不修改 OpenSpec |
+| EchoPath | approved owner、goal、recovery、Profile Governance Record、context selection | 非必需；不可访问时不是空历史；不复制规则正文 |
+| RelayPact | delegation/result/decision 的 source-owned reference，或 Host 提供的 adapter mapping | 仅供关联 exact execution evidence；当前是 reference-only interop，不建立 ForgeRail Core 依赖 |
+| KeptNear | sanitized credential capability reference/attestation | 仅说明能力可用性；当前是 reference-only interop，不包含 secret locator/value，不授权 operation |
+
+### 6.2 输出
+
+ForgeRail 可向 Host 或 adapter 输出：
+
+- Effective Profile explanation；
+- Gate Result、Validation Result 与 bounded limited reason；
+- immutable Task Control Revision reference；
+- verified或未完成的 Return Receipt 与 Evidence Identity references；
+- optional Control Decision projection，由 consumer 引用 source identity/digest/locator，不复制 Kernel state。
+
+ForgeRail 不输出 Executor implementation instructions、RelayPact Host acceptance、OpenDomain accepted truth、EchoPath durable memory 或 KeptNear secret。
+
+## 7. Standalone 与降级语义
+
+ForgeRail standalone 是正式产品模式，不是缺少生态产品后的残缺 fallback。每个可选 integration 必须使用适用的显式状态：
+
+| 状态 | 含义 | ForgeRail 行为 |
+| --- | --- | --- |
+| `provided` | 兼容、可验证、当前可用 | 在声明 scope 内使用，并保留 provenance |
+| `not_required` | 当前 transition 不需要该 integration | 不加载、不制造缺失风险 |
+| `unavailable` | 已知 provider/source 存在但当前不可访问 | 保留 unavailable 与 limited reason；绝不映射为空来源或 pass |
+| `unsupported` | provider/schema/version 不受支持 | fail closed 于依赖该语义的 gate；不猜测映射 |
+| `degraded` | 部分可用或 provenance/能力不完整 | 只允许不依赖缺失能力的 transition；required edge 保持 blocked/unresolved |
+
+典型降级：
+
+- OpenDomain/EchoPath/RelayPact/KeptNear 不存在且任务未声明需要它们：`not_required`，standalone 闭环继续。
+- 可选 provider 不可访问：标记 `unavailable`，而不是“无规则、无历史、无 evidence”。
+- semantic claim、delegation proof 或 credential capability 被声明为 required 但不可验证：相关 gate 为 blocked/unavailable；其他无关 gate 不受影响。
+- Host Adapter 只能执行只读观察：报告 capability degraded；不能把 UI、安装或 caller flag 当当前授权。
+
+## 8. Reference-only interop
+
+ForgeRail 当前 canonical ecosystem contract 已定义 OpenDomain、OpenSpec 与 EchoPath 的 optional、versioned、additive interop。RelayPact 与 KeptNear 的关系来自跨产品架构 baseline，在 ForgeRail task 2.10 前只作为 reference-only adapter boundary：
+
+- 不把 RelayPact 或 KeptNear schema 引入 ForgeRail Core；
+- 不创建共享 runtime package 或共享数据库；
+- 不让 ForgeRail、RelayPact、EchoPath 或 KeptNear 共同拥有一个状态机、grant 或 receipt；
+- consumer 使用 source product、schema/version、object identity、digest 与 locator 引用源对象；
+- unsupported version 或缺失 required proof 必须 fail closed，optional missing 必须显式降级。
+
+## 9. Task 2.10 前置 delta 结论
+
+task 2.10 固定 ForgeRail 自有对象的 canonical serialization、stable ordering、digest、sanitized exposure、idempotency、unknown-field 与 version negotiation。开始前必须遵守以下已完成的边界评审：
+
+### 9.1 Task Envelope 与 Delegation Envelope
+
+- ForgeRail Task Envelope 拥有 engineering intent、exact workspace/profile/subject、planned operations、prohibited operations、required gates、entry mode 与 phase/slice correlation。
+- RelayPact Delegation Envelope 拥有 Host 授予 exact Executor 的 read/write/forbidden scope、execution context/capsule、execution lifecycle 与 return/acceptance contract。
+- ForgeRail Envelope 或 Gate Result 可被 RelayPact 引用，但不能 mint delegation authority；RelayPact Envelope 也不能替代 ForgeRail Operation Grant 或 Review Authority。
+- 两者保持独立 identity、revision、digest 与 lifecycle；adapter 只能映射或引用，不能把字段同名解释为同一语义。
+
+### 9.2 Evidence Identity、Return Receipt 与执行/决策 evidence
+
+- ForgeRail Evidence Identity 绑定 control evaluation 所观察 evidence 的 workspace、scope、task/subject、Envelope/Control revision、source locator、digest、availability 与 observation time。
+- ForgeRail Return Receipt 绑定单 owner phase/slice 的治理 claim、实际使用的 grants、changed scope、validation evidence、side effects、non-mutations、risks、deviations 与 verification gate。
+- RelayPact Executor Result、validation/review packet 与 Host terminal decision 仍是 RelayPact source-owned execution evidence/receipt。ForgeRail 只能把它们作为 `external-receipt` 或 provider evidence reference，不重新签发 Host acceptance。
+- EchoPath 只能保存这些 source-owned objects 的 digest-bound projection/reference，并将语义解释保持为 candidate；历史 proof 不成为 current grant。
+
+### 9.3 Control Revision 与 EchoPath projection
+
+- Task Control Revision 是 ForgeRail source-owned、immutable、single-owner control read model；subject、Profile、grant 或 evidence 变化产生 successor revision。
+- EchoPath projection 至少保留 source product、schema/version、object kind、identity、digest、locator、subject/scope、observation time、availability/limited reason 和 predecessor/successor reference（适用时）。
+- EchoPath 不复制或重新计算 ForgeRail state machine，不把 projection 当 current control truth；declared reason 与 inferred causal candidate 必须分开。
+- RelayPact 可以引用一个 ForgeRail decision/revision/receipt，但其 execution lifecycle 与 terminal decision 不由该 revision 驱动或替代。
+
+详细 delta 表与 task 2.10 entry gate 位于：
+
+`openspec/changes/evolve-forgerail-engineering-governance-control-system/inventory/composable-autonomy-delta-review-20260820.md`
+
+## 10. 当前状态与下一入口
+
+- task 2.5–2.9：schemas、composition contract 与 pre-evaluator fixtures 已完成并有 focused evidence。
+- task 2.10：`not_started`；本文和 delta review 完成架构前置，但不构成启动授权。
+- task 2.11：`not_started`；必须另行证明 contracts 保持 local-first、event-driven 且无外部产品/host hard dependency。
+- evaluator/runtime、public projection、release 与 lifecycle：未启动、未授权。
+
+下一次 ForgeRail 恢复首先读取本文，再读取 delta review，随后读取 active change 的 `tasks.md` 2.10–2.11。不要通过公开投影恢复 canonical architecture。

package/docs/control-authority-validation-contracts.md

@@ -0,0 +1,36 @@
+# Control Authority And Validation Contracts
+
+ForgeRail adds eight versioned Control System contracts without changing the alpha contracts, the task-control contracts, or any Host Adapter profile.
+
+| Contract | Schema version | File |
+| --- | --- | --- |
+| Review Authority Requirement | 1.0 | `contracts/review-authority-requirement-v1.schema.json` |
+| Authority Evidence | 1.0 | `contracts/authority-evidence-v1.schema.json` |
+| Validation Topology | 1.0 | `contracts/validation-topology-v1.schema.json` |
+| Validation Result | 1.0 | `contracts/validation-result-v1.schema.json` |
+| Execution Context Identity | 1.0 | `contracts/execution-context-identity-v1.schema.json` |
+| Host Adapter Observation | 1.0 | `contracts/host-adapter-observation-v1.schema.json` |
+| Provider Adapter Observation | 1.0 | `contracts/provider-adapter-observation-v1.schema.json` |
+| Limited Reason | 1.0 | `contracts/limited-reason-v1.schema.json` |
+
+The contracts enforce these initial boundaries:
+
+- Review Authority is independent from Operation Authority and Operation Grants. Requirements bind authority class, exact subject and scope, accepted evidence, quorum, actor exclusions, owner coverage, freshness, default non-substitution, and bounded waiver policy.
+- Authority Evidence references an Evidence Identity and distinguishes `current`, `stale`, `revoked`, `dismissed`, `expired`, and `superseded`. Invalidated evidence cannot remain current.
+- Validation Topology links changed surfaces, owners, consumers, selected requirements, governance dependency edges, accepted trust classes, expected results, entrypoints, and evidence locators.
+- Validation Result preserves the seven result states: `passed`, `failed`, `blocked`, `unavailable`, `not_applicable`, `not_selected`, and `waived`. A passed result requires evidence; a waiver binds current authority, exact requirement, subject, scope, and expiry.
+- Execution Context Identity records the authoritative entrypoint, invocation root, executor or runner, trust class, tools, providers, and sanitized external dependencies. Consuming an external dependency does not make it a governance source.
+- Host and Provider Adapter observations report capability-specific state. Installation, authentication, activation, or mutation capability does not mint authority, and observations always set `authorizationClaim` to `false`.
+- Limited Reason uses a bounded code set, a capped sanitized summary, evidence pointers, and sanitized locators. It is used by the new contracts without modifying the already-versioned Profile or Task contracts.
+
+These are schema and deterministic validation contracts only. Authority, topology, execution-context, and adapter evaluators remain later tasks. The version-compatible Pack composition schema is defined in [Cross-Workspace Pack Composition Contract](cross-workspace-pack-composition-contract.md); the pre-evaluator invalid boundary set is recorded in the [Control System Fixture Matrix](control-system-fixture-matrix.md). Canonical serialization, digest calculation, and version negotiation remain task 2.10.
+
+Run the focused checks with:
+
+```bash
+node scripts/forgerail.mjs validate
+node scripts/forgerail.mjs validate-fixtures
+node scripts/forgerail.mjs validate-contract --type review-authority-requirement --file scripts/fixtures/contracts/review-authority-requirement.valid.json
+node scripts/forgerail.mjs validate-contract --type validation-result --file scripts/fixtures/contracts/validation-result.valid.json
+node scripts/forgerail.mjs validate-contract --type provider-adapter-observation --file scripts/fixtures/contracts/provider-adapter-observation.valid.json
+```