@entrorove/skill 0.1.70 → 0.1.71

package/local-scope-uni-expressions.mjs

@@ -12,14 +12,19 @@ export function uniConditionalError(filename, offset, reason, source = '') {
   return Object.assign(new Error(`${filename}:${line}:${column}: ${reason}`), {
     code: 'ENTROROVE_IMPORT_UNSUPPORTED', path: filename, line, column, loc: { start: { offset } } });
 }
+export function uniConditionalLimitError(filename, offset, reason, source = '') {
+  return Object.assign(uniConditionalError(filename, offset, reason, source), { code: 'ENTROROVE_SCOPE_LIMIT' });
+}
+const limit = (fail, reason) => Object.assign(fail(reason), { code: 'ENTROROVE_SCOPE_LIMIT' });
 export function uniCondition(expression, fail) {
-  if (expression.length > 512) throw fail('Conditional expression exceeds its 512-character bound');
+  if (expression.length > 512) throw limit(fail, 'Conditional expression exceeds its 512-character bound');
   const tokens = expression.match(/uniVersion|[A-Za-z_][A-Za-z0-9_-]*|\d+(?:\.\d+)?|\|\||&&|>=|<=|===|!==|==|!=|[!()<>]|\S/g) ?? [];
-  if (!tokens.length || tokens.length > 128) throw fail('Conditional expression requires a bounded supported expression');
+  if (!tokens.length) throw fail('Conditional expression requires a supported expression');
+  if (tokens.length > 128) throw limit(fail, 'Conditional expression exceeds its 128-token bound');
   let cursor = 0, depth = 0;
   const versions = [], macros = new Set();
   const atom = () => {
-    if (++depth > 24) throw fail('Conditional expression exceeds its nesting bound');
+    if (++depth > 24) throw limit(fail, 'Conditional expression exceeds its nesting bound');
     let result; const token = tokens[cursor++];
     if (token === '!') result = { kind: 'not', value: atom() };
     else if (token === '(') { result = disjunction(); if (tokens[cursor++] !== ')') throw fail('Conditional parentheses are not balanced'); }
@@ -62,7 +67,7 @@ export function evaluateUniCondition(node, context) {
 }
 function versionSamples(conditions, fail) {
   const values = [...new Set(conditions.flatMap(condition => condition.versions))].sort((a, b) => a - b);
-  if (values.length > 8) throw fail('Conditional versions exceed their eight-boundary inspection limit');
+  if (values.length > 8) throw limit(fail, 'Conditional versions exceed their eight-boundary inspection limit');
   const samples = new Set([0, ...values]);
   for (let index = 0; index < values.length; index++) {
     const previous = values[index - 1] ?? 0;
@@ -94,7 +99,7 @@ export function uniConditionContexts(conditions, fail) {
     const key = conditions.map(condition => evaluateUniCondition(condition.tree, context) ? '1' : '0').join('');
     if (!seen.has(key)) {
       seen.add(key); output.push({ ...context, key });
-      if (output.length > 64) throw fail('Conditional compilation exceeds its 64-variant inspection bound');
+      if (output.length > 64) throw limit(fail, 'Conditional compilation exceeds its 64-variant inspection bound');
     }
   }
   return output;

package/local-scope-workspaces.mjs

@@ -1,11 +1,11 @@
 import path from 'node:path';
 import { promises as fs } from 'node:fs';
-import { scopeFail, scopePath, scopeRead, scopeTarget } from './local-scope-files.mjs';
+import { scopeFail, scopePath, scopeBuildSourceRead, scopeTarget } from './local-scope-files.mjs';
 import { observeScopeDirectory } from './local-scope-read-set.mjs';
 
 async function manifest(root, relative, input) {
   try {
-    const read = await scopeRead(root, relative, input);
+    const read = await scopeBuildSourceRead(root, relative, input);
     return { value: JSON.parse(read.content.toString('utf8')), path: relative, sha256: read.sha256 };
   } catch (error) {
     if (error.code === 'ENOENT') return null;
@@ -20,7 +20,7 @@ async function patterns(root, input) {
   if (!Array.isArray(result)) result = result.packages;
   if (!Array.isArray(result) || result.some(pattern => typeof pattern !== 'string')) scopeFail('ENTROROVE_PACKAGE_INVALID', 'workspace patterns must be a literal string array');
   try {
-    const read = await scopeRead(root, 'pnpm-workspace.yaml', input); const yaml = read.content.toString('utf8'); let active = false;
+    const read = await scopeBuildSourceRead(root, 'pnpm-workspace.yaml', input); const yaml = read.content.toString('utf8'); let active = false;
     metadata.push({ path: 'pnpm-workspace.yaml', sha256: read.sha256 });
     for (const line of yaml.split('\n')) {
       if (/^packages:\s*$/.test(line)) { active = true; continue; }

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "entrorove.skill-manifest/1.0",
   "name": "entrorove",
-  "version": "0.1.70",
+  "version": "0.1.71",
   "endpoint": "https://entrorove.com",
   "requestSchemaVersion": "entrorove.skill.request/2.0",
   "supportedRequestSchemaVersions": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@entrorove/skill",
-  "version": "0.1.70",
+  "version": "0.1.71",
   "type": "module",
   "bin": {
     "entrorove": "cli.mjs"
@@ -319,7 +319,13 @@
     "local-scope-uni-directives.mjs",
     "local-scope-uni-conditional.mjs",
     "local-scope-uni-build.mjs",
-    "local-scope-read-set.mjs"
+    "local-scope-read-set.mjs",
+    "release-source-groups.mjs",
+    "local-scope-build-read.mjs",
+    "local-scope-build-io.mjs",
+    "local-scope-build-facts.mjs",
+    "local-scope-build-data.mjs",
+    "local-scope-build-readset.mjs"
   ],
   "scripts": {
     "test": "node test/run.mjs",

package/release-source-groups.mjs

@@ -0,0 +1,39 @@
+export const swarmSourceFiles = Object.freeze([
+  'local-swarm-authority.mjs',
+  'local-swarm-baseline.mjs',
+  'local-swarm-completion.mjs',
+  'local-swarm-contracts.mjs',
+  'local-swarm-mutation.mjs',
+  'local-swarm-priority.mjs',
+  'local-swarm-state.mjs',
+  'local-swarm-storage.mjs',
+  'local-swarm.mjs',
+])
+export const coordination17SourceFiles = Object.freeze([
+  'local-autocoord17-authority.mjs',
+  'local-autocoord17-controller.mjs',
+  'local-autocoord17-peers.mjs',
+  'local-autocoord17-store.mjs',
+  'local-autocoord17-tasks.mjs',
+  'local-autocoord17-waits.mjs',
+  'local-validator-isolation17.mjs',
+  'local-calctool-composition17.mjs',
+])
+export const preservedMutationSourceFiles = Object.freeze([
+  'local-preserved-mutation-protection.mjs', 'local-preserved-mutation-signer.mjs',
+  'local-preserved-mutation-state.mjs', 'local-preserved-mutation-wire.mjs',
+  'local-delegated-modify-analysis.mjs', 'mutation-client.mjs', 'cloud-mutation-authority.mjs',
+])
+export const memberContinuationSourceFiles = Object.freeze([
+  'connected-cli.mjs',
+  'local-approved-process.mjs',
+  'local-approved-supervisor.mjs',
+  'local-mutation-consumption.mjs',
+  'workflow-local-acceptance.mjs',
+  'workflow-observation-client.mjs',
+  'workflow-observation-connection.mjs',
+  'workflow-observation-remote.mjs',
+  'workflow-observation-runner.mjs',
+  'workflow-observation-state.mjs',
+  'workflow-observation-wire.mjs',
+])

package/release-state.json

@@ -1,10 +1,16 @@
 {
   "schemaVersion": "entrorove.release-state/1.0",
-  "version": "0.1.70",
-  "digest": "888f8c2a60595e87e39b9423f811a0e231ec5309094f3de0d88cb3f729371ba8",
+  "version": "0.1.71",
+  "digest": "365984167bef91bf1b780eb3c479b0d0fddd6ba79b2df59bc6ae9c8dc4f48e15",
   "files": {
+    "release-source-groups.mjs": "6dc0915b79aa495759e7fd1e8dfebde36ab2b6e50f22a2d716eca14b5f9957f9",
+    "local-scope-build-read.mjs": "361d4b461cfa2c77b4ec22bc59a0a1c78fed2cfb0ea2e05a8da5c2551ecd88ac",
+    "local-scope-build-io.mjs": "8af69722738fa094780f9a2dfcddaf12993fc3b936a75c56c4b0d4f90cb20fd1",
+    "local-scope-build-facts.mjs": "8b0bd19347d06d1cb66d8cd2d6784103af9d00ea691d7f4acea523d994b874fb",
+    "local-scope-build-data.mjs": "b6e272ca4385629326b4517a53408c561272f5f1a01e5b701f17eaa4c5e64b2e",
+    "local-scope-build-readset.mjs": "fd1cb1470c54b3902a4612056281746e947cf96d1f5c03a09ea0becbcd79cc45",
     "scope-context-client.mjs": "dbfec7db0e118f3025a0e45475f3328a171e4cd1dd86e6c8d326d779ce61b459",
-    "scope-context-observer.mjs": "9d041db8de6e45113ee04b189c9d52097ec902a104721829dd382cf6daf5d1ce",
+    "scope-context-observer.mjs": "25a84339512c1e80711aca53baed20da556fa2ae5d84e83fa95d58dcdca7cf7d",
     "scope-context-observation.mjs": "d92f2fca3c923caa6f0c5c9cc60b4f12bdae212071da64da6692e3e99b251969",
     "scope-context-remote.mjs": "b52cdee03e845edc15eae6bb3ccfaea9c4482c03f2fae7001439e4abcb2acd33",
     "scope-context-state.mjs": "7bc434620bfc505ee290f1977e64ef22e50f72665d75e7dfd6805deab4e81826",
@@ -152,13 +158,13 @@
     "install-cleanup.mjs": "8a8e1a7dfe37427f86cd4d6e317890d0829894a9949d4216674a716b36edbc54",
     "review-client.mjs": "3491eef68ed533174b31db3c53febb6519b8f088f71a9964644714a9a4c03c77",
     "version.mjs": "85284d4cd5e3314b449e6ae124243f96397bcc274817b5983a79cfdd903d46fd",
-    "SKILL.md": "db0ff568f83086226044726c37a0f8de517042aece8fb1676f1830c9e32f8d79",
+    "SKILL.md": "910bc4b97159582d6faa6e34785d94b8b7cd484b9a39ef4106edcffc767be9d2",
     "CAPABILITY-MAP.md": "517809bb20750e5de89b2dab5705c902a27fa68cf4f3f392a5d8cf2f19818888",
     "AGREEMENT.md": "f93a68e92c457200dd024610e65f74e478b8f60860f951da818b70561f1b9bf8",
     "DELIVERY-BOUNDARIES.md": "cb23ce71b2197085c8441ba7c5b6c05fb21f2a954bf66b4d60cfef8b15895b8b",
-    "package.json": "71c16c55000a8d0d7cca2b935ceba15799b3e8d15be2081a7e077ce803d7b319",
+    "package.json": "6aeead2f5dd48f4715cf45c0695f8462c362cdc3c2929439565f201b2576bd2f",
     "manifest.json": "ab06e307795bc9da5add926752b6c4dbdaf18625090261a035aa356a679c504f",
-    "release.mjs": "2250561b382b61aa1f760705c872d7248266a69a96cc30e8957f42e9e48649e5",
+    "release.mjs": "a1c8f8a6945687658e43f75892bfcca58dee6c4947dc9ea002f31bee0ab67538",
     "local-cli.mjs": "058ac9a4653bc12e0d031b72034ebfe6a72b91b9b23353b9fee04881c7d2e098",
     "local-state-lock.mjs": "1dbf64264642a0851faf043e07ee9f66d2ad0508e9f799b0626246e42fae893e",
     "local-execution.mjs": "721ed7d29bbe4ce6d088909cd84ffc440978c3c9eb0946c49a4281ee685fe3aa",
@@ -187,22 +193,22 @@
     "local-budget-handoff-contracts.mjs": "bb53ebf135ec7ecfbecee858cfb354f03fee9cfb3940fa5d967d45008bf9aac5",
     "local-budget-lock.mjs": "ab0722630e1792843a94a6d01e79422cd578fe9e4d423b59d63e636770381236",
     "local-budget-handoff-completion.mjs": "f8bc45df7c18a064d0b5aac7338131deb709da5193bfe9a1d20300585ea9acb6",
-    "local-budget-reads.mjs": "9baa12cbebe84a8abf1e55cbf02eb5414540973bde804d96609e914169bef5b1",
+    "local-budget-reads.mjs": "91eab0bf12a057709a6d5685c5602debe5299a58fbd6624f6e0d0f3876dc918b",
     "local-budget-source-bindings.mjs": "cfe97b257fd2da0dd45f95f5e45be20baa6445d11ac6d03538a0105b4985b8ff",
     "local-budget-store.mjs": "2ae36c977ecd32d81f88e2eaa697ce8c228cb4405ecc5c4169cdda104c8ce138",
     "local-budget-transition.mjs": "3894f05d4b5d4d6e16e3f201ff8902e6311cf6434010262934e0d1251aa8b9f0",
-    "local-budget.mjs": "857bf879addbfbc13bd95d0957b223e05e73a69b8092f1d1933f09ff7968659a",
+    "local-budget.mjs": "378348e583d6889a731679e1427e645f56f6cb7c547d48d300e00b9e10050516",
     "local-flow-lifecycle.mjs": "47534e16599002e5e7cf7d3e95195f4d7a364d2b651ec339d8c6c017d71c1b05",
     "local-stage-boundary.mjs": "84c3bb5beab29306274c5ca8a78f19a83ed664ae1b93a8372bb493158b304fe3",
     "local-scope-candidate.mjs": "8f0bd9606e70d4a0ebacdd3cd600ec3afed85e2bb3e1760aa1144cf55d4e028a",
     "local-scope-context.mjs": "79753abfc6c76089d17f003a1be537dfaea10d6731c542f7fc53f2a9996ed164",
-    "local-scope-files.mjs": "4793c2a1b458346bd9099e74bbfa0623024c423e754f65ae9e01ca388b49fd36",
-    "local-scope-repository.mjs": "1e0c1aef43929237226145d3ba776facaa7e3fc89eb8f88af0a2e5ab38bcdde9",
+    "local-scope-files.mjs": "b8c98b8ca8bb4953f3d2d9ae1fa71b2a54286032c9dd660d3061b584e77778cb",
+    "local-scope-repository.mjs": "fe5187824744233b9fce59d7b964a3f24349a3fe31415181654a1b3a70e8de9c",
     "local-scope-read-set.mjs": "a5137d2e7ecffe669143fb51f0f3fba7526a881b512269858ea1e3504d9a50b2",
-    "local-scope-uni-expressions.mjs": "200f3f5284125c2674d9e797a7550e7bb7700932db237e1df2d21c3a209ac924",
-    "local-scope-uni-directives.mjs": "9951af9f98de5299bad636a09cd7f4e129c96d20939650375f7f677f7919e0c6",
-    "local-scope-uni-conditional.mjs": "8a4d03939e1daf8d257b10b44b3808b84404433113c39eff32c8643d7f9f7b18",
-    "local-scope-uni-build.mjs": "9cc45336ad6807a73c6e65d2b23f0c6606e22a423f8105710e532b50f76896c5",
+    "local-scope-uni-expressions.mjs": "626247c87a4fd5f6162e548aa907d3f983d5a77d341e640b6f42a539f0c84405",
+    "local-scope-uni-directives.mjs": "e546be317962e30a3547aea376db9a7b8d7641055daf9e3dce4a9ef55cd872af",
+    "local-scope-uni-conditional.mjs": "f143a142af069279fcac0a01206744ce323c8dfc4496c2f6cc1f0b229c4e5f5e",
+    "local-scope-uni-build.mjs": "1dafd4802859b4c53504395f6186b003ee2657fc16f373ca2637e438e4d1b9e5",
     "local-scope-create-require.mjs": "6b6a209bfcad8fe1398e99c5c8cc3af189c120b9c38e244a73dd1a99c3d91295",
     "local-scope-require-resolution.mjs": "b24596462c8776cbefa6f0a74749d665aa928d1643c68d44798eb93e2dd5ad42",
     "local-scope-git.mjs": "53bbbb6c4795db711b5bc164591a6ad79a561427da046d6bbe997dae6eb82829",
@@ -228,12 +234,12 @@
     "local-budget-git-system-attributes.mjs": "367a4e5a88490c4d4c3717bc893a271970fe70d7705f0c1c72d6f76a442d5d21",
     "runtime/git-native-linux-v1.mjs": "cf5cb91426a105e62c0f07a8a230dec592dba46f85a3f708b4c4e8cfcd1126c6",
     "runtime/git-native-darwin-v1.mjs": "f88aab72dc86f94eb1115784872957cb8ed0f74205ae70e1ecd1939e7790e310",
-    "local-scope-signature.mjs": "5aba6422031873946874307175b5a6f1fa609faa8160e1a1bb8db44c02c58d18",
+    "local-scope-signature.mjs": "3804b84d5ddca5c1ac991b31151d84cddc508517eff7500351ba1bcffdf3c672",
     "local-scope-config-imports.mjs": "a399407227bbdd14468633bb6d25586df7c6a30a1ef0d1a80ab7c7b499d3fadf",
     "local-scope-config-extends.mjs": "3ab4150b846b247e9e0851221123f220c5574699af651830e751f026ab33659e",
     "local-scope-snapshot.mjs": "c0f851470b98863a1d187825ed61ee6072d1c057b178fdc85ae29af02a3b250f",
-    "local-scope-state.mjs": "8b600a91fc0068d7a8c0bb752ddba7ed30ada93daafb118d6cba2368fd94cb27",
-    "local-scope-workspaces.mjs": "7484905ab0434e1a98f95038c65003ae48e395e9cfae07a4322f481537a08392",
+    "local-scope-state.mjs": "7a6d275d6267a4d0bb55582e1bcc7654c502ecba9221b84b2149a98f0ee7518f",
+    "local-scope-workspaces.mjs": "8a75ce7b6639b5682370b5738c5c2a90408e3130729608e008f03053cd50351f",
     "local-task-routing.mjs": "6e2e506b2fb0e2e8d8c5147d7df32849b57a4e94a23634f01a355d45735858e4",
     "remote-client.mjs": "d30fd61fab3171a9e41546706a57ae372786d20ea9e9c01cad39d9863c156b40",
     "cloud-task-client.mjs": "f9085c5e6af6f179282670d2e872b85bfabac2657d3d232b1246dc23f5a6ccdd",

package/release.mjs

@@ -9,46 +9,9 @@ import { fileURLToPath } from 'node:url'
 import { chainReleaseLabels } from './local-chain-release-labels.mjs'
 
 const directory = path.dirname(fileURLToPath(import.meta.url))
-const swarmSourceFiles = Object.freeze([
-  'local-swarm-authority.mjs',
-  'local-swarm-baseline.mjs',
-  'local-swarm-completion.mjs',
-  'local-swarm-contracts.mjs',
-  'local-swarm-mutation.mjs',
-  'local-swarm-priority.mjs',
-  'local-swarm-state.mjs',
-  'local-swarm-storage.mjs',
-  'local-swarm.mjs',
-])
-const coordination17SourceFiles = Object.freeze([
-  'local-autocoord17-authority.mjs',
-  'local-autocoord17-controller.mjs',
-  'local-autocoord17-peers.mjs',
-  'local-autocoord17-store.mjs',
-  'local-autocoord17-tasks.mjs',
-  'local-autocoord17-waits.mjs',
-  'local-validator-isolation17.mjs',
-  'local-calctool-composition17.mjs',
-])
-const preservedMutationSourceFiles = Object.freeze([
-  'local-preserved-mutation-protection.mjs', 'local-preserved-mutation-signer.mjs',
-  'local-preserved-mutation-state.mjs', 'local-preserved-mutation-wire.mjs',
-  'local-delegated-modify-analysis.mjs', 'mutation-client.mjs', 'cloud-mutation-authority.mjs',
-])
-const memberContinuationSourceFiles = Object.freeze([
-  'connected-cli.mjs',
-  'local-approved-process.mjs',
-  'local-approved-supervisor.mjs',
-  'local-mutation-consumption.mjs',
-  'workflow-local-acceptance.mjs',
-  'workflow-observation-client.mjs',
-  'workflow-observation-connection.mjs',
-  'workflow-observation-remote.mjs',
-  'workflow-observation-runner.mjs',
-  'workflow-observation-state.mjs',
-  'workflow-observation-wire.mjs',
-])
+import { swarmSourceFiles, coordination17SourceFiles, preservedMutationSourceFiles, memberContinuationSourceFiles } from './release-source-groups.mjs'
 const sourceFiles = [
+  'release-source-groups.mjs', 'local-scope-build-read.mjs', 'local-scope-build-io.mjs', 'local-scope-build-facts.mjs', 'local-scope-build-data.mjs', 'local-scope-build-readset.mjs',
   ...SCOPE_CONTEXT_SOURCE_FILES, 'cloud-locale.mjs', 'cloud-locale.d.mts', 'cloud-task-images.mjs', 'model-images.mjs', 'model-images.d.mts', 'cli-input.mjs',
   'scope-amendment-retirement.mjs', 'scope-amendment-consumption.mjs', 'mutation-connection-state.mjs', 'mutation-challenge-refresh.mjs',
   'local-scope-font.mjs', 'local-scope-zip.mjs', 'member-producer-repair-authority.mjs',
@@ -342,6 +305,8 @@ const archguardReleaseLabels = {
 }
 function releaseLabels() {
   return withFinalGate16ReleaseLabels({ ...designGateReleaseLabels, ...reuseDisciplineReleaseLabels, ...calctoolReleaseLabels, ...mutationReleaseLabels, ...swarmReleaseLabels, ...coordination17ReleaseLabels, ...nativeReadReleaseLabels, ...feedbackReleaseLabels, ...invocationReleaseLabels, ...chainReleaseLabels, ...taskEntryReleaseLabels, ...archguardReleaseLabels,
+    ...Object.fromEntries(['local-scope-build-read.mjs', 'local-scope-build-io.mjs', 'local-scope-build-facts.mjs', 'local-scope-build-data.mjs', 'local-scope-build-readset.mjs', 'local-scope-uni-build.mjs', 'local-scope-uni-expressions.mjs', 'local-scope-uni-directives.mjs', 'local-scope-uni-conditional.mjs'].map(name => [name, { zh: '源码事实与未知构建行为分离', en: 'raw source facts and opaque build observation' }])),
+    'release-source-groups.mjs': { zh: '自动版本源文件清单', en: 'automatic version source inventory' },
     ...Object.fromEntries(['cloud-task-images.mjs', 'model-images.mjs', 'model-images.d.mts', 'cli-input.mjs'].map(name => [name, { zh: '受限图片输入通道', en: 'bounded image input channel' }])),
     ...Object.fromEntries(['scope-amendment-retirement.mjs', 'scope-amendment-consumption.mjs', 'mutation-connection-state.mjs', 'mutation-challenge-refresh.mjs', 'member-producer-repair-authority.mjs'].map(name => [name, { zh: '原授权恢复与请求生命周期', en: 'original-authority recovery and request lifecycle' }])),
     ...Object.fromEntries(['local-scope-font.mjs', 'local-scope-zip.mjs'].map(name => [name, { zh: '字体与 ZIP 完整结构核验', en: 'font and ZIP structural verification' }])),

package/releases.json

@@ -1,4 +1,10 @@
 [
+  {
+    "version": "0.1.71",
+    "date": "2026-10-20",
+    "zh": "通用分离源码依赖事实与未知构建行为：动态配置、宏及加载器保留真实哈希与只读来源，不执行项目代码，不把构建未知标为完整。原审批与独立 S/M 签名仅允许已知源码的非结构修改；隐私文件、路径、资源预算、未知目标及配置漂移继续明确拒绝，实际构建与测试仍需原流程验收。",
+    "en": "Separate raw source dependency facts from opaque build behavior across projects. Preserve actual hashes and read-only origins for dynamic configuration, macros and loaders without executing project code or claiming compiled completeness. Original approvals and separate S/M signatures permit only known-source nonstructural modifications; private files, unsafe paths, resource budgets, unknown targets and configuration drift remain explicit refusals. Actual builds and tests still require original-flow acceptance."
+  },
   {
     "version": "0.1.70",
     "date": "2026-10-20",

package/scope-context-observer.mjs

@@ -1,6 +1,6 @@
 import { randomUUID, sign } from 'node:crypto';
 import { canonical } from './local-integrity.mjs';
-import { scopeRead, scopeTarget } from './local-scope-files.mjs';
+import { scopeBuildSourceRead, scopeTarget } from './local-scope-files.mjs';
 import { snapshotPlan, snapshotVerify } from './local-execution.mjs';
 import { collectScopeFacts } from './local-scope-repository.mjs';
 import { readScopeSnapshot, verifyFreshScopeSnapshot } from './local-scope-snapshot.mjs';
@@ -20,7 +20,8 @@ export async function inspectContextEvidence(location, contexts, evidencePaths)
   for (const relative of [...paths].sort()) {
     const target = await scopeTarget(location.root, relative);
     if (!target.stat.isFile() || target.stat.size > 1_048_576) contextFail('Build evidence must be an actual ordinary bounded repository file');
-    const read = await scopeRead(location.root, relative, { repositoryRoot: location.root });
+    const read = await scopeBuildSourceRead(location.root, relative, { repositoryRoot: location.root });
+    if (read.bytes > 1_048_576) contextFail('Build evidence exceeds its actual 1 MiB inspection bound');
     evidence.push({ path: relative, sha256: read.sha256 });
   }
   return evidence;