@gobing-ai/knowledge-kit 0.0.30 → 0.0.32

package/plugins/ingestions/last30days-ingest/dist/index.js

@@ -14642,7 +14642,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/errors.js
 var ErrorCode;
 var init_errors3 = __esm(() => {
   ErrorCode = {
@@ -14653,7 +14653,7 @@ var init_errors3 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/api-response.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/api-response.js
 var API_ERROR_CODES, ERROR_CODE_TO_HTTP, CLIENT_SAFE_CODES;
 var init_api_response = __esm(() => {
   init_errors3();
@@ -14676,13 +14676,13 @@ var init_api_response = __esm(() => {
   CLIENT_SAFE_CODES = new Set([ErrorCode.NotFound, ErrorCode.Validation, ErrorCode.Conflict]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/cursor.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/cursor.js
 var init_cursor = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
 var init_event_severity = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/output.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/output.js
 function processStream(name) {
   const proc = globalThis.process;
   const stream = proc?.[name];
@@ -14700,7 +14700,7 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 }
 var defaultStderrTarget;
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/index.js
 var init_dist = __esm(() => {
   init_api_response();
   init_cursor();
@@ -21698,7 +21698,7 @@ var init_dist2 = __esm(() => {
   $visitAsync = visit.visitAsync;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/config.js
 var configSchema;
 var init_config = __esm(() => {
   init_dist2();
@@ -21722,7 +21722,7 @@ var init_config = __esm(() => {
   });
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
 import { appendFileSync, cpSync, createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 import { dirname, resolve as resolvePath } from "path";
 function createNodeFileSystem(root, paths) {
@@ -21902,14 +21902,14 @@ var PluginManifestSchema = exports_external.looseObject({
   description: exports_external.string().optional(),
   operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
 });
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/fs.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/fs.js
 init_file_system_node();
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/path.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/path.js
 function normalizeSeparators(path) {
   return path.replaceAll("\\", "/");
 }
@@ -21943,7 +21943,7 @@ function dirnamePath(path) {
   return normalized.slice(0, index);
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/fs.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/fs.js
 async function ensureDirForFile(path, fs = createNodeFileSystem()) {
   await fs.ensureDir(dirnamePath(path));
 }

package/plugins/ingestions/web-search/dist/index.js

@@ -14642,7 +14642,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/errors.js
 var ErrorCode;
 var init_errors3 = __esm(() => {
   ErrorCode = {
@@ -14653,7 +14653,7 @@ var init_errors3 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/api-response.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/api-response.js
 var API_ERROR_CODES, ERROR_CODE_TO_HTTP, CLIENT_SAFE_CODES;
 var init_api_response = __esm(() => {
   init_errors3();
@@ -14676,13 +14676,13 @@ var init_api_response = __esm(() => {
   CLIENT_SAFE_CODES = new Set([ErrorCode.NotFound, ErrorCode.Validation, ErrorCode.Conflict]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/cursor.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/cursor.js
 var init_cursor = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
 var init_event_severity = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/output.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/output.js
 function processStream(name) {
   const proc = globalThis.process;
   const stream = proc?.[name];
@@ -14700,7 +14700,7 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 }
 var defaultStderrTarget;
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.15/node_modules/@gobing-ai/ts-utils/dist/index.js
 var init_dist = __esm(() => {
   init_api_response();
   init_cursor();
@@ -21698,7 +21698,7 @@ var init_dist2 = __esm(() => {
   $visitAsync = visit.visitAsync;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/config.js
 var configSchema;
 var init_config = __esm(() => {
   init_dist2();
@@ -21722,7 +21722,7 @@ var init_config = __esm(() => {
   });
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
 import { appendFileSync, cpSync, createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 import { dirname, resolve as resolvePath } from "path";
 function createNodeFileSystem(root, paths) {
@@ -21901,7 +21901,7 @@ var PluginManifestSchema = exports_external.looseObject({
   description: exports_external.string().optional(),
   operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
 });
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.15/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
 
@@ -24036,7 +24036,7 @@ var ConfigError = class extends Error {
   }
 };
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.5.11+b4fe47d5f279554c/node_modules/@gobing-ai/ts-infra/dist/logger.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.5.15+c7cc99588d9d7f09/node_modules/@gobing-ai/ts-infra/dist/logger.js
 var ROOT_CATEGORY = "app";
 function toLogTapeLevel(level) {
   return level === "warn" ? "warning" : level;

package/plugins/kk/plugin.json

@@ -1,5 +1,5 @@
 {
     "name": "kk",
-    "version": "0.0.30",
+    "version": "0.0.32",
     "description": "knowledge-kit Claude Code plugin: skills, commands, subagents, hooks, and rules"
 }

package/plugins/kk/scripts/kk-workflow-stages.ts

@@ -66,6 +66,17 @@ const RENDER_SIDECAR = 'render-md.ts';
 // $KK_WORKFLOWS_DIR -> package copy -> $HOME.
 const STYLE_SIDECAR = 'daily-voice-style.zh.md';
 const REVISE_COUNT = '.revise-count';
+/** Bounded draft-remediation counter for the daily safety loop (20261005). */
+const SAFETY_REVISE_COUNT = '.safety-revise-count';
+/**
+ * Verdict criteria that describe *platform admission* (the daily's CN 资质口径 / 播报形态 rules) rather
+ * than a defect in the draft itself. Only these can be answered by dropping a publish target; every
+ * other `fail` is draft integrity, which would ship to the remaining targets too (20261005).
+ */
+const ADMISSION_CRITERIA = new Set(['jurisdictional-rules']);
+/** content-safety category 3 (可识别个人信息): a draft property, so no target choice answers it. */
+const PII_FINDING_CATEGORY = 3;
+const SAFETY_PLATFORM_DECISIONS = new Set(['OK', 'RISK', 'BLOCK']);
 // Post-translation title-dedup threshold (task 0138 R3). ponytail: the 2026-09-16 Gemini 3.8 Live
 // pair measures 0.417 zh title-only Jaccard, the nearest distinct pair 0.1 (4x margin). Character
 // bigrams need same-language input — pre-translate dedup over the mixed-language blend cannot work.
@@ -221,6 +232,14 @@ function bumpReviseCount(workDir: string): void {
     sted('write', path, () => writeFileSync(path, `${(Number.isNaN(previous) ? 0 : previous) + 1}\n`));
 }
 
+/** `0` when `.safety-revise-count` is absent or unparsable: a fresh run revises, it never blocks on state. */
+function readSafetyReviseCount(workDir: string): number {
+    const path = join(workDir, SAFETY_REVISE_COUNT);
+    if (!isFile(path)) return 0;
+    const value = Number.parseInt(readFileSync(path, 'utf-8'), 10);
+    return Number.isNaN(value) ? 0 : value;
+}
+
 interface PrepareOptions {
     readonly workDirArg: string;
     readonly topic: string;
@@ -612,6 +631,11 @@ function dailyPrepare(args: string[]): void {
         sted('write', join(workDir, 'run-date.txt'), () =>
             writeFileSync(join(workDir, 'run-date.txt'), `${dirDate}\n`),
         );
+        // The safety remediation budget belongs to the attempt, not to the day: a fresh run (or a
+        // same-day retry) starts with the full revise allowance instead of inheriting a spent one.
+        sted('write', join(workDir, SAFETY_REVISE_COUNT), () =>
+            writeFileSync(join(workDir, SAFETY_REVISE_COUNT), '0\n'),
+        );
         // Anchor for the workflow: shell actions cannot set vars, so the YAML reads the
         // effective work_dir back into vars.work_dir from this cwd-relative file.
         const anchorDir = join('.spur', 'runs', 'kk-daily-ai-voice');
@@ -1005,7 +1029,11 @@ function dailyArticle(args: string[]): void {
                 console.error(`article: dropped ${dropped.length} near-duplicate plan item(s): ${dropped.join(', ')}`);
             }
         }
-        if (isFile(articleMd)) {
+        // The cache pair must be COMPLETE: markdown without its content.json means the generator
+        // half-ran (or the json was pruned), and returning here starves every downstream stage
+        // that reads content.json — publish-prep refuses to merge a draft it cannot read. Requiring
+        // both artifacts makes the pair self-healing instead of permanently stuck.
+        if (isFile(articleMd) && isFile(articleContent)) {
             console.log(`article cached: ${articleMd}`);
             return;
         }
@@ -1401,6 +1429,14 @@ function dailyPublishWechat(args: string[]): void {
             console.log(`publish-wechat cached: ${want} already recorded in ${result}`);
             return;
         }
+        // 20261005: a platform the content-safety gate excluded never gets a draft. Skipping here
+        // keeps the run alive for the targets that did pass, which is the point of the gate.
+        const safety = readJson(safetyPath(workDir, runDate, 'safety-judge_stamp.json'));
+        const excluded = Array.isArray(safety?.excludedPlatforms) ? (safety.excludedPlatforms as string[]) : [];
+        if (excluded.includes('wechatmp')) {
+            console.log(`publish-wechat: SKIPPED — content-safety excluded wechatmp for this run`);
+            return;
+        }
         if (!isFile(article)) {
             console.log(`publish-wechat: no article at ${article} — skip`);
             return;
@@ -1570,13 +1606,26 @@ function dailySafetyPrep(args: string[]): void {
 }
 
 /**
- * Consume the content-safety report and the content-judge verdict into pass|escalate|block (exit 0
- * in all three — routing is transition-owned). Fail-closed: only an explicit PASS verdict on the
- * unchanged drafts, with a well-formed report carrying no BLOCK, unblocks; a RISK decision or
- * `escalate: true` forces the human review regardless of the verdict score.
+ * Consume the content-safety report and the content-judge verdict into a publish decision (exit 0 in
+ * every case — routing is transition-owned). The gate's job is to *adjust*, not to kill the run
+ * (20261005 operator decision): a non-PASS verdict first routes back through one bounded
+ * draft-remediation loop (`revise`), and what survives the loop is classified by what it is:
+ *
+ * - `revise`  — non-PASS and the remediation budget is not spent: re-review after the drafts change.
+ * - `exclude` — admission-only residue (the CN 资质口径 / 播报形态 findings): the platforms that
+ *               BLOCKed are dropped from this run and every other target publishes normally.
+ * - `escalate` — a RISK decision or `escalate: true` with an otherwise clean pass: human review.
+ * - `pass`    — explicit PASS verdict, unchanged drafts, no BLOCK/RISK.
+ * - `block`   — draft integrity: PII reported on a blocked platform, or a judge must-pass `fail`
+ *               outside `jurisdictional-rules` (prohibited claims / disclosure / data-handling);
+ *               also an unreadable or out-of-contract report/verdict, a non-PASS that documents
+ *               nothing, or drafts edited after the review. Never published.
+ *
+ * Fail-closed where it matters: a missing report, verdict or confidence still blocks.
  */
 function dailySafetyGate(args: string[]): void {
-    const [workDir = '', runDate = ''] = args;
+    const [workDir = '', runDate = '', maxReviseArg = '0'] = args;
+    const maxRevise = Number.parseInt(maxReviseArg, 10);
     const statusFile = safetyPath(workDir, runDate, 'safety-judge_status.txt');
     const stampFile = safetyPath(workDir, runDate, 'safety-judge_stamp.json');
     timed(workDir, 'safety-judge', () => {
@@ -1586,6 +1635,45 @@ function dailySafetyGate(args: string[]): void {
         const platforms = Array.isArray(report?.platforms) ? (report.platforms as Record<string, unknown>[]) : [];
         const decisions = platforms.map((platform) => platform?.decision);
         const digest = safetyDigest(workDir, runDate);
+        const revisions = readSafetyReviseCount(workDir);
+        // A RISK decision or an explicit escalation is a human decision even on a clean verdict.
+        const risky = decisions.includes('RISK') || report?.escalate === true;
+        const verdictFindings = Array.isArray(verdict?.findings) ? (verdict.findings as Record<string, unknown>[]) : [];
+        const verdictFails = verdictFindings.filter((finding) => finding?.status === 'fail');
+        // What a BLOCK *is* decides who can answer it. Dropping a blocked platform answers the
+        // platform's own admission rules (资质口径/播报形态 …) — but the drafts' bytes ship to every
+        // other target too, so a *draft* defect reported on that platform survives the drop. The
+        // one finding class that is unambiguously a draft property is category 3 (可识别个人信息):
+        // PII cannot be answered by choosing targets. The rest of the draft-integrity class is owned
+        // by the judge's must-pass criteria below (no-prohibited-claims / disclosure-presence /
+        // data-handling), which is where an independent reviewer can grade it.
+        const platformFindings = (platform: Record<string, unknown>): Record<string, unknown>[] =>
+            Array.isArray(platform?.findings) ? (platform.findings as Record<string, unknown>[]) : [];
+        const blockedPlatforms = platforms.filter((platform) => platform?.decision === 'BLOCK');
+        const excludedPlatforms = blockedPlatforms.map((platform) => String(platform?.platform ?? '')).filter(Boolean);
+        const piiBlock = blockedPlatforms.some((platform) =>
+            platformFindings(platform).some((finding) => Number(finding?.category) === PII_FINDING_CATEGORY),
+        );
+        // A BLOCK that names no finding is a contract violation, not a signal: there is nothing to
+        // remediate and nothing to exclude, so it blocks (fail-closed).
+        const unnamedBlock =
+            blockedPlatforms.length > 0 && blockedPlatforms.every((p) => platformFindings(p).length === 0);
+        const malformed =
+            decisions.length === 0 || decisions.some((decision) => !SAFETY_PLATFORM_DECISIONS.has(String(decision)));
+        const confidence = verdict?.confidence;
+        const confidenceOk = confidence === 'HIGH' || confidence === 'MEDIUM' || confidence === 'LOW';
+        const verdictValue = String(verdict?.verdict ?? '');
+        const outOfContract =
+            (verdictValue !== 'PASS' && verdictValue !== 'FAIL' && verdictValue !== 'NEEDS_REVISION') || !confidenceOk;
+        const nonPass = verdictValue !== 'PASS' || !confidenceOk;
+        // Integrity = the finding survives any target choice: PII reported on a blocked platform, an
+        // out-of-contract verdict, a non-PASS that documents nothing, or a `fail` outside the
+        // admission criteria.
+        const integrity =
+            piiBlock ||
+            unnamedBlock ||
+            (nonPass && verdictFindings.length === 0) ||
+            verdictFails.some((finding) => !ADMISSION_CRITERIA.has(String(finding?.criterion ?? '')));
         let status = 'block';
         let reason = 'verdict PASS on unchanged drafts, no BLOCK/RISK';
         // A digest-mismatch block means the drafts were deliberately edited (HITL): keep them so
@@ -1595,18 +1683,44 @@ function dailySafetyGate(args: string[]): void {
         if (request?.digest !== digest) {
             reason = 'drafts changed after the review was requested';
             edited = true;
-        } else if (decisions.length === 0 || decisions.some((d) => d !== 'OK' && d !== 'RISK' && d !== 'BLOCK'))
+        } else if (malformed) {
             reason = 'content-safety report missing or malformed';
-        else if (decisions.includes('BLOCK')) reason = 'content-safety report carries a BLOCK decision';
-        else if (verdict?.verdict !== 'PASS')
-            reason = `content-judge verdict is ${typeof verdict?.verdict === 'string' ? verdict.verdict : 'missing or unreadable'}`;
-        else if (verdict?.confidence !== 'HIGH' && verdict?.confidence !== 'MEDIUM' && verdict?.confidence !== 'LOW')
-            reason = 'content-judge verdict is missing a HIGH/MEDIUM/LOW confidence level';
-        else if (decisions.includes('RISK') || report?.escalate === true) {
+        } else if (outOfContract) {
+            // 20261003 hardening, unchanged: a verdict outside PASS|FAIL|NEEDS_REVISION, or any
+            // verdict without a HIGH/MEDIUM/LOW confidence, is not a verdict — block, never revise
+            // against it (there is no contract to read findings from).
+            reason = `content-judge verdict out of contract (${verdictValue || 'missing'}/${confidenceOk ? 'ok' : 'no confidence'})`;
+        } else if (nonPass || blockedPlatforms.length > 0) {
+            const trigger =
+                blockedPlatforms.length > 0
+                    ? `content-safety BLOCK on ${blockedPlatforms.map((p) => String(p?.platform ?? '')).join(', ')}`
+                    : `content-judge verdict ${verdictValue}`;
+            if (revisions < maxRevise) {
+                status = 'revise';
+                reason = `${trigger} — remediation pass ${revisions + 1}/${maxRevise} (drafts re-reviewed after the edit)`;
+            } else if (integrity) {
+                status = 'block';
+                const named = blockedPlatforms
+                    .flatMap((platform) => platformFindings(platform))
+                    .filter((finding) => Number(finding?.category) === PII_FINDING_CATEGORY)
+                    .map((finding) => `${String(finding?.item ?? '?')}(category ${String(finding?.category)})`)
+                    .join(', ');
+                const criteria = verdictFails.map((finding) => String(finding?.criterion)).join(', ');
+                reason = `${trigger} — draft-integrity findings survive ${revisions} remediation passes (${named || criteria || 'the verdict names no criterion'}); exclusion cannot fix these`;
+            } else {
+                status = 'exclude';
+                reason =
+                    excludedPlatforms.length > 0
+                        ? `${trigger} — admission-only, ${revisions} remediation passes spent: ${excludedPlatforms.join(', ')} dropped from this run, other targets publish${risky ? ' (RISK/escalation recorded)' : ''}`
+                        : `${trigger} — admission-only, no platform BLOCK: submitting to the remaining targets at recorded risk`;
+            }
+        } else if (risky) {
             status = 'escalate';
             reason = 'RISK decision or escalation — human review required';
         } else status = 'pass';
-        if (status !== 'block') sted('write', stampFile, () => writeJsonText(stampFile, { digest, status }));
+        if (status === 'pass' || status === 'escalate' || status === 'exclude') {
+            sted('write', stampFile, () => writeJsonText(stampFile, { digest, status, excludedPlatforms }));
+        }
         if (status === 'block' && !edited) {
             // A quality block poisons the isFile() draft cache: every same-day retry would
             // re-fail on unchanged bytes (20261002 dogfood — two judge-fail runs replayed until
@@ -1626,6 +1740,32 @@ function dailySafetyGate(args: string[]): void {
     });
 }
 
+/**
+ * Post-remediation bookkeeping for the `safety-revise` state: the agent edited the drafts, this
+ * stage checks they are still the artifacts the rest of the pipeline consumes and spends one unit
+ * of the remediation budget (`daily-safety-gate` reads it to choose revise-vs-exclude). Validating
+ * here fails inside the loop instead of at `wrap-docs`, after the run has moved on. A broken
+ * revision spends the budget too: an unparsable draft must not be retried forever.
+ */
+function dailySafetyRevise(args: string[]): void {
+    const [workDir = '', runDate = ''] = args;
+    timed(workDir, 'safety-revise', () => {
+        const [articlePath, scriptPath] = safetyDraftPaths(workDir, runDate);
+        const article = requireJson(articlePath, 'safety-revise');
+        for (const field of ['title', 'body'] as const) {
+            const value = article[field];
+            if (typeof value !== 'string' || value.trim() === '') {
+                failWith(1, `safety-revise: article ${field} must be a non-empty string in ${articlePath}`);
+            }
+        }
+        assertScriptContent(scriptPath);
+        const path = join(workDir, SAFETY_REVISE_COUNT);
+        const next = readSafetyReviseCount(workDir) + 1;
+        sted('write', path, () => writeFileSync(path, `${next}\n`));
+        console.log(`safety-revise: remediation pass ${next} applied; drafts re-validated`);
+    });
+}
+
 function dailyWrapDocs(args: string[]): void {
     const [workDir = '', runDate = '', voiceProfile = ''] = args;
     const scriptPath = join(workDir, '24-script', `${runDate}_08_script_voicescript.yaml`);
@@ -1953,10 +2093,25 @@ function dailyPublishPrep(args: string[]): void {
         // stamp issued on different bytes (edited after PASS, or an older draft), never publishes.
         const stamp = readJson(safetyPath(workDir, runDate, 'safety-judge_stamp.json'));
         if (stamp === null) failWith(1, 'publish-prep: no content-safety verdict stamp for this run — not publishing');
+        // 20261005: pass/escalate/exclude all stamp the drafts as publishable; only `block` (draft
+        // integrity) has no stamp. An `exclude` stamp carries the admission-blocked platforms so
+        // the per-target stages can skip those targets instead of failing the run.
+        if (stamp.status !== 'pass' && stamp.status !== 'escalate' && stamp.status !== 'exclude') {
+            failWith(1, `publish-prep: content-safety status ${String(stamp.status)} does not publish`);
+        }
         if (stamp.digest !== safetyDigest(workDir, runDate)) {
             failWith(1, 'publish-prep: drafts changed after the content-safety verdict — re-run the review');
         }
-        sted('write', prepPath, () => writeJsonText(prepPath, merged));
+        const excludedPlatforms = Array.isArray(stamp.excludedPlatforms) ? (stamp.excludedPlatforms as string[]) : [];
+        if (excludedPlatforms.length > 0) {
+            console.log(`publish-prep: content-safety excluded platforms: ${excludedPlatforms.join(', ')}`);
+        }
+        sted('write', prepPath, () =>
+            writeJsonText(prepPath, {
+                ...merged,
+                metadata: { ...metadataOf(merged), safetyExcludedPlatforms: excludedPlatforms },
+            }),
+        );
     });
 }
 
@@ -2640,6 +2795,9 @@ if (import.meta.main)
         case 'daily-safety-gate':
             dailySafetyGate(rest);
             break;
+        case 'daily-safety-revise':
+            dailySafetyRevise(rest);
+            break;
         case 'daily-wrap-docs':
             dailyWrapDocs(rest);
             break;

package/plugins/kk/skills/content-judge/SKILL.md

@@ -55,8 +55,12 @@ Every evaluation writes a JSON verdict file. The default path is
 | `FAIL` | Content violates a must-pass criterion (safety, accuracy, compliance) | Block; surface findings; do not publish |
 | `NEEDS_REVISION` | Content is salvageable but below bar on quality criteria | Block; feedback drives a bounded regenerate-retry loop |
 
-`PASS` is the only verdict that unblocks publish. The shell guard treats `FAIL` and
-`NEEDS_REVISION` identically (exit 1); the distinction is for the feedback loop, not the gate.
+`PASS` is the only verdict that unblocks publish outright. The shell guard treats `FAIL` and
+`NEEDS_REVISION` identically (exit 1); the distinction is for the feedback loop, not the gate — a
+workflow may spend a bounded revision budget on either and then classify the residue (20261005:
+`kk-daily-ai-voice` routes non-PASS through `safety-revise` and publishes only the targets whose
+platform did not BLOCK). A `fail` means a rule was *violated*, not merely suspected: see
+"Evidence discipline".
 
 ### Confidence level
 
@@ -81,8 +85,10 @@ outside `HIGH|MEDIUM|LOW` is not a usable verdict anywhere:
   a valid confidence; an absent verdict file keeps the dry-run convention.
 
 Add that filter to any new judge gate; `references/workflow-integration.md` carries the pattern and
-`plugins/kk/tests/verdict-confidence.test.ts` fails when a workflow accepts a judge `PASS` without
-checking the enum.
+`plugins/kk/tests/verdict-confidence.test.ts` fails on either half of the contract: a workflow that
+accepts a judge `PASS` without checking the enum, and this skill drifting out of the producer side
+(enum line, per-level definition, or a reference snippet whose filter no longer matches the guards
+the consumer scan collects).
 
 The level itself does not change routing — escalation stays owned by the review's `RISK` decisions
 and `escalate` flag; treat `LOW` as a signal to demand human review before publishing.
@@ -111,6 +117,12 @@ and `escalate` flag; treat `LOW` as a signal to demand human review before publi
   contradicted by source Y" is.
 - Never fabricate sources. If a claim cannot be verified against the provided docs/brief, mark it
   `warn` (unverified), not `fail`, unless the rubric classifies unverified claims as must-pass.
+- **A rule you cannot verify is not a rule you may `fail` on.** When a finding rests on rule text
+  that is unverified, out of date, or an editorial stance rather than platform/governing text — the
+  upstream report marks these `evidenceGap` — grade the criterion `warn` and escalate. `fail` is
+  reserved for a violation of rule text you actually verified. Downgrading here is what keeps a
+  gate a gate: an unverifiable must-pass `fail` is unanswerable, so it can neither be remediated nor
+  honestly cleared.
 
 ## Rubrics
 

package/plugins/kk/skills/content-judge/references/rubrics.md

@@ -89,8 +89,14 @@ Thresholds: `pass_threshold = 0.85`
 - `no-prohibited-claims` is strict: a single prohibited claim is an immediate `FAIL`, regardless
   of overall score. Examples: unverified health/financial advice, guarantees of outcome,
 - `jurisdictional-rules`: the wrapper supplies the jurisdiction (e.g., `US-SEC`, `EU-GDPR`,
-  `CN-CAC`). If none is supplied, mark `warn` and note "no jurisdiction specified" — do not
-  guess a jurisdiction and fail against a guessed rule.
+  `CN-CAC`, or the platform reference files a distribution gate names). If none is supplied, mark
+  `warn` and note "no jurisdiction specified" — do not guess a jurisdiction and fail against a
+  guessed rule.
+  Grade `fail` only against rule text verified for that jurisdiction. A rule the wrapper or its
+  process marks `evidenceGap` (unverified text, a stale `Last verified` date, or an editorial
+  stance rather than platform/governing text) is `warn` + escalate: unverifiable rule text cannot
+  be a must-pass failure, because no revision can clear it (20261005 — the daily gate blocked
+  every run on the evidence-gapped CN 资质口径 stance until this was fixed).
 - `data-handling`: scan for PII that may have been carried through from input Docs (emails,
   phone numbers, national IDs). Leakage is a `fail`.
 

package/plugins/kk/skills/content-judge/references/workflow-integration.md

@@ -35,7 +35,8 @@ if [ ! -f "$verdict_path" ]; then
 fi
 # Confidence-aware read: a PASS without a HIGH|MEDIUM|LOW confidence becomes `PASS!`, which no
 # accept guard matches and the catch-all below rejects. Keep this filter byte-identical wherever a
-# guard reads a judge verdict (`plugins/kk/tests/verdict-confidence.test.ts` enforces that).
+# guard reads a judge verdict — and to this snippet: `plugins/kk/tests/verdict-confidence.test.ts`
+# collects every guard's filter plus this one and fails unless they are byte-identical.
 verdict=$(jq -r 'if (.verdict // "") == "PASS" then (.verdict + (if ((.confidence // "") | test("^(HIGH|MEDIUM|LOW)$")) then "" else "!" end)) else (.verdict // "") end' "$verdict_path")
 case "$verdict" in
   PASS)

package/plugins/kk/skills/content-safety/SKILL.md

@@ -45,7 +45,9 @@ prefer exclusion or abort over any rewording.
 - **detect-only** (default): emit the report; touch nothing.
 - **detect+revise**: additionally emit a proposed revision for findings in categories 3–5 where
   the fix is deletion/desensitization/disclosure. Category-2 findings get exclusion (drop the
-  item) or abort — prefer exclusion over any rewrite.
+  item) or abort — prefer exclusion over any rewrite. The `kk-daily-ai-voice` `safety-revise`
+  state calls this mode: the revision proposals are what the agent applies to the drafts before the
+  re-review (the platform level is what gets excluded when a category-2 finding survives).
 
 A revision proposal is a **proposal**. The operator/agent that owns the artifact applies it —
 keep originals intact and write the revision to a new artifact — and the revised artifact must
@@ -130,8 +132,9 @@ rule. Never emit `OK` with `evidenceGap` findings; that combination is a contrac
 - After a detect+revise revision is applied, the revised Content is re-evaluated by content-judge
   (rubric `compliance`) — a revision **never auto-PASSes**; the previous verdict is stale and the
   gate re-runs.
-- A content-judge `FAIL` on safety is terminal for that artifact in the pipeline: FAIL /
-  NEEDS_REVISION / missing-verdict states must not auto-publish.
+- A content-judge verdict never publishes on its own: the workflow's gate decides. `kk-daily-ai-voice`
+  spends a bounded revision budget on `FAIL`/`NEEDS_REVISION`, blocks only findings that travel with
+  the draft, and excludes the admission-blocked platforms instead of halting the run (20261005).
 
 ## Inputs
 
@@ -149,15 +152,23 @@ credentials, and no platform word lists are embedded in any caller or in TypeScr
 
 ## Workflow integration
 
-The `kk-daily-ai-voice` workflow runs this skill in `detect-only` mode on every publishing run
-(`safety-review` state, task 0189 R10): it reads the review request for the target `platforms`
-and writes the report JSON; `kk:content-judge` (`compliance` rubric) then re-checks the same
-drafts independently, and the `daily-safety-gate` stage consumes both. The program reads only
-`platforms[].decision`, `escalate`, and the judge's `verdict` — a `BLOCK`, a non-`PASS` verdict,
-or a missing/unreadable file stops the run; a `RISK` or `escalate: true` forces the human review
-even when the run is otherwise unattended. The report is bound to the exact draft bytes: editing a
-draft after the verdict invalidates it. The earlier deterministic gate is the topic-boundary QC
-stage (`plugins/kk/scripts/topic-boundary.json` via `daily-qc-content`); this skill covers the
-judgment-shaped residue that gate cannot express. Step shape:
+The `kk-daily-ai-voice` workflow runs this skill on every publishing run (task 0189 R10; revise
+loop 20261005): `safety-review` reads the request for the target `platforms` and writes the report
+(`detect-only`); `kk:content-judge` (`compliance` rubric) re-checks the same drafts independently;
+then `daily-safety-gate` consumes both. The gate **alerts and adjusts rather than stopping the run**:
+a non-PASS verdict spends a bounded budget in the `safety-revise` state, where this skill runs in
+`detect+revise` mode and the agent applies the proposals to the article and the VoiceScript before
+`safety-review` re-opens on the edited bytes. What survives the budget is classified — findings that
+travel with the draft still block (a PII finding on a blocked platform, or a judge must-pass `fail`
+outside the admission criteria: prohibited claims / disclosure / data-handling), while
+**admission-only findings** (the CN 资质口径 / 播报形态 rules) drop the platform
+they name from that run and let every other target publish; the drop is recorded in the verdict
+stamp's `excludedPlatforms` and honoured by the per-target publish stages. A `RISK` decision or
+`escalate: true` still forces the human review even when the run is otherwise unattended.
+
+The report is bound to the exact draft bytes: editing a draft after the verdict invalidates it, and
+the remediation loop re-requests a fresh review for that reason. The earlier deterministic gate is
+the topic-boundary QC stage (`plugins/kk/scripts/topic-boundary.json` via `daily-qc-content`); this
+skill covers the judgment-shaped residue that gate cannot express. Step shape:
 `plugins/kk/skills/content-judge/references/workflow-integration.md`. Outside the workflow the
 skill stays usable ad hoc on any draft.