@josfox/jos 4.0.8 → 5.0.0

package/promises.json

@@ -0,0 +1,894 @@
+{
+  "$comment": "Every promise of @josfox/jos, what 4.1.0 did, what 5.0 does, what is planned, and the gate that proves today's behaviour. test/promises.test.js runs every gate (npm test); PROMISES.md is generated from this file (npm run promises:md). Sources: specs/jos-format/2.0/releases/review/PROMESAS-2026-10-20.md (T1 = the 4.1.0 npm page, T3 = what 1.0.0 defines, T4 = what IANA was told) and README.md (What it can do, Not yet).",
+  "host": "5.0.0",
+  "kernel": "2.0.0",
+  "statuses": ["delivered", "delivered-differently", "planned", "dropped"],
+  "gate_rules": [
+    "cmd[0] is jos (this bin/jos), jos-core (the kernel jos finds) or node; the rest is argv, never a shell.",
+    "Every gate runs in a new temporary folder: work/ holds a copy of examples/ and the documents of docs below (a name may include a folder, created first); HOME is a new empty folder beside it.",
+    "The environment is only PATH, HOME, TMPDIR and NO_COLOR=1: no provider key, no JOS_* switch. PATH starts with fake curl and ollama programs that print fake-curl-called and exit 7, so no gate reaches the network.",
+    "{work}, {home} and {last_run} (the last run_ id printed by an earlier step) are replaced in cmd. stdout_includes and stderr_includes are substrings; not_includes applies to both streams; files_present and files_absent are paths under work/.",
+    "A promise with known_gap: true asserts today's behaviour, which is not the promised one; the day the gap is fixed its gate fails and the entry must be updated."
+  ],
+  "docs": {
+    "minimal-13.jos": {
+      "id_jos": "example-v1",
+      "jos": { "open": "jos run artifact", "supports": ["@josfox/jos"] },
+      "orchestration_contract": { "version": "0.0.7", "mode": "sync" },
+      "meta": { "name": "example", "version": "1.0.0", "type": "atom" },
+      "intention": { "objective": "Demonstrate JOS", "success_criteria": "Output greeting" },
+      "guardrails": { "avoid": [], "max_retries": 0 },
+      "capabilities": ["demo"],
+      "artifacts": { "description": "Minimal example" },
+      "orchestration": {
+        "definitions": { "greet": { "type": "shell", "command": "echo 'Hello!'" } },
+        "flows": { "main": { "steps": ["greet"] } }
+      },
+      "security": { "type": "open", "permissions": [], "integrity_ref": null },
+      "files": [],
+      "x_run_params": { "timeout": 5000, "retry_on_failure": false },
+      "adaptive_ai": { "learning_enabled": false, "feedback_collection": false }
+    },
+    "only-7-keys.jos": {
+      "jos": { "open": "jos run artifact", "supports": ["@josfox/jos"] },
+      "orchestration_contract": { "version": "0.0.7", "mode": "sync" },
+      "meta": { "name": "example", "version": "1.0.0", "type": "atom" },
+      "intention": { "objective": "Demonstrate JOS", "success_criteria": "Output greeting" },
+      "guardrails": { "avoid": [], "max_retries": 0 },
+      "orchestration": {
+        "definitions": { "greet": { "type": "shell", "command": "echo 'Hello!'" } },
+        "flows": { "main": { "steps": ["greet"] } }
+      },
+      "security": { "type": "open", "permissions": [], "integrity_ref": null }
+    },
+    "object-step.jos": {
+      "jos": { "open": "jos run artifact", "supports": ["@josfox/jos"] },
+      "orchestration_contract": { "version": "0.0.7", "mode": "sync" },
+      "meta": { "name": "example", "version": "1.0.0", "type": "atom" },
+      "intention": { "objective": "Demonstrate JOS", "success_criteria": "Output greeting" },
+      "orchestration": {
+        "definitions": { "greet": { "type": "shell", "command": "echo 'Hello!'" } },
+        "flows": { "main": { "steps": [{ "run": "greet" }] } }
+      }
+    },
+    "sealed-0.0.7/ref.jos": {
+      "$schema": "https://josfox.ai/schemas/jos-0.0.7.json",
+      "jos": { "open": "jos run atom", "supports": ["@josfox/jos", "josctl"] },
+      "orchestration_contract": { "version": "0.0.7", "mode": "sync" },
+      "id_jos": "atom-ref-1792539837287",
+      "adaptive_ai": { "learning_mode": "frozen", "llm_friendly_sentence": "This atom artifact performs the ref task." },
+      "security": { "type": "open", "permissions": [], "health_check": null, "integrity": null, "integrity_ref": "./ref.jos.sig.json" },
+      "files": [],
+      "orchestration": {
+        "definitions": { "main_task": { "type": "shell", "description": "Main task - replace with your command", "command": "echo 'Hello from ref'" } },
+        "flows": { "main": { "description": "Main execution flow", "steps": ["main_task"] } }
+      },
+      "x_run_params": { "timeout": 300, "retry_on_failure": false },
+      "meta": { "version": "1.0.0", "type": "atom", "name": "ref", "provider": "local", "author": "JOS Developer" },
+      "artifacts": { "description": "Auto-generated atom artifact. Update this description.", "outputs": [] },
+      "guardrails": { "avoid": [], "max_retries": 1 },
+      "intention": { "objective": "Define your objective here", "success_criteria": "Define success criteria here" },
+      "capabilities": []
+    },
+    "sealed-0.0.7/ref.jos.sig.json": { "manifest_version": "1.0.0", "artifact_ref": "ref.jos", "artifact_sha256": "6f68a650d093e80bcf37a6f7a7c640613cc78e6fbe7c0520e6d970640252d6f5" },
+    "tampered-0.0.7/ref.jos": {
+      "$schema": "https://josfox.ai/schemas/jos-0.0.7.json",
+      "jos": { "open": "jos run atom", "supports": ["@josfox/jos", "josctl"] },
+      "orchestration_contract": { "version": "0.0.7", "mode": "sync" },
+      "id_jos": "atom-ref-1792539837287",
+      "adaptive_ai": { "learning_mode": "frozen", "llm_friendly_sentence": "This atom artifact performs the ref task." },
+      "security": { "type": "open", "permissions": [], "health_check": null, "integrity": null, "integrity_ref": "./ref.jos.sig.json" },
+      "files": [],
+      "orchestration": {
+        "definitions": { "main_task": { "type": "shell", "description": "Main task - replace with your command", "command": "echo 'PWNED'" } },
+        "flows": { "main": { "description": "Main execution flow", "steps": ["main_task"] } }
+      },
+      "x_run_params": { "timeout": 300, "retry_on_failure": false },
+      "meta": { "version": "1.0.0", "type": "atom", "name": "ref", "provider": "local", "author": "JOS Developer" },
+      "artifacts": { "description": "Auto-generated atom artifact. Update this description.", "outputs": [] },
+      "guardrails": { "avoid": [], "max_retries": 1 },
+      "intention": { "objective": "Define your objective here", "success_criteria": "Define success criteria here" },
+      "capabilities": []
+    },
+    "tampered-0.0.7/ref.jos.sig.json": { "manifest_version": "1.0.0", "artifact_ref": "ref.jos", "artifact_sha256": "6f68a650d093e80bcf37a6f7a7c640613cc78e6fbe7c0520e6d970640252d6f5" },
+    "init-4.1.0/ref.jos": {
+      "$schema": "https://josfox.ai/schemas/jos-0.0.7.json",
+      "jos": { "open": "jos run atom", "supports": ["@josfox/jos", "josctl"] },
+      "orchestration_contract": { "version": "0.0.7", "mode": "sync" },
+      "id_jos": "atom-ref-1792539837287",
+      "adaptive_ai": { "learning_mode": "frozen", "llm_friendly_sentence": "This atom artifact performs the ref task." },
+      "security": { "type": "open", "permissions": [], "health_check": null, "integrity": null, "integrity_ref": "./ref.jos.sig.json" },
+      "files": [],
+      "orchestration": {
+        "state": { "current_status": "idle" },
+        "definitions": { "main_task": { "type": "shell", "description": "Main task - replace with your command", "command": "echo 'Hello from ref'" } },
+        "flows": { "main": { "description": "Main execution flow", "steps": ["main_task"] } }
+      },
+      "x_run_params": { "timeout": 300, "retry_on_failure": false },
+      "meta": { "version": "1.0.0", "type": "atom", "name": "ref", "provider": "local", "author": "JOS Developer" },
+      "artifacts": { "description": "Auto-generated atom artifact. Update this description.", "outputs": [] },
+      "guardrails": { "avoid": [], "max_retries": 1 },
+      "intention": { "objective": "Define your objective here", "success_criteria": "Define success criteria here" },
+      "capabilities": []
+    },
+    "init-4.1.0/ref.jos.sig.json": { "manifest_version": "1.0.0", "artifact_ref": "ref.jos", "artifact_sha256": "66981f8f93428cad94fa1097ec1c54b25d0b54d2c689398b234aa7867610e660" },
+    "prompt-step-0.0.7.jos": {
+      "jos": { "open": "jos run artifact", "supports": ["@josfox/jos"] },
+      "orchestration_contract": { "version": "0.0.7", "mode": "sync" },
+      "meta": { "name": "example", "version": "1.0.0", "type": "atom" },
+      "intention": { "objective": "Greet with a prompt step", "success_criteria": "Output greeting" },
+      "orchestration": {
+        "definitions": { "greet": { "type": "prompt", "template": "Say hello" } },
+        "flows": { "main": { "steps": ["greet"] } }
+      }
+    },
+    "big-integer.jos": "{ \"jos\": { \"version\": \"2.0.0\", \"kind\": \"atom\" }, \"meta\": { \"name\": \"big\" }, \"x-count\": 9007199254740993, \"execution\": { \"run\": [\"echo\", \"hello\"] } }\n",
+    "fail-criterion.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "fail-criterion" },
+      "intention": { "objective": "Print hello", "success_criteria": [{ "exit": 0 }, { "stdout_contains": "hello" }] },
+      "execution": { "run": ["echo", "bye"] }
+    },
+    "avoid-substring.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "avoid.substring" },
+      "intention": { "objective": "A step whose command line matches avoid never starts", "success_criteria": [{ "exit": 0 }] },
+      "guardrails": { "avoid": ["curl", "rm -rf"] },
+      "execution": { "run": ["echo", "rm -rf /tmp/x"] }
+    },
+    "time-limit.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "time.limit" },
+      "intention": { "objective": "A step past limit.seconds is killed" },
+      "guardrails": { "limit": { "seconds": 1 } },
+      "execution": { "run": ["sleep", "5"] }
+    },
+    "output-limit.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "output.limit" },
+      "intention": { "objective": "A step past limit.output_bytes is killed" },
+      "guardrails": { "limit": { "output_bytes": 1024, "seconds": 10 } },
+      "execution": { "run": ["yes"] }
+    },
+    "budget-zero.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "budget.zero" },
+      "intention": { "objective": "A non-positive limit is a budget exceeded before start" },
+      "guardrails": { "limit": { "seconds": 0 } },
+      "execution": { "run": ["true"] }
+    },
+    "noexec.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "noexec" },
+      "intention": { "objective": "touch a marker", "success_criteria": [{ "exit": 0 }] },
+      "execution": { "engine": "shell", "run": ["touch", "MARKER"] }
+    },
+    "noexec.txt": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "noexec" },
+      "intention": { "objective": "touch a marker", "success_criteria": [{ "exit": 0 }] },
+      "execution": { "engine": "shell", "run": ["touch", "MARKER"] }
+    },
+    "dup-keys.jos": "{ \"jos\": { \"version\": \"2.0.0\", \"kind\": \"atom\" }, \"meta\": { \"name\": \"first\" }, \"execution\": { \"run\": [\"echo\", \"hello\"] }, \"meta\": { \"name\": \"second\" } }\n",
+    "bom.jos": "{ \"jos\": { \"version\": \"2.0.0\", \"kind\": \"atom\" }, \"meta\": { \"name\": \"bom\" }, \"execution\": { \"run\": [\"echo\", \"hello\"] } }\n",
+    "sealed.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "sealed" },
+      "intention": { "objective": "print sealed" },
+      "execution": { "run": ["echo", "sealed"] },
+      "integrity": { "hash": "sha256:18b0adcdeec45c4507defada7983ad1c1c03ea2541ea93e88dd3bd0975293657" }
+    },
+    "integrity-mismatch.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "integrity" },
+      "intention": { "objective": "integrity" },
+      "execution": { "run": ["true"] },
+      "integrity": { "hash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }
+    },
+    "tier-privileged-unsigned.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "tier-privileged-unsigned" },
+      "intention": { "objective": "A privileged document needs a signature this runtime cannot verify", "success_criteria": [{ "exit": 0 }] },
+      "execution": { "engine": "shell", "run": ["echo", "ok"] },
+      "security": { "tier": "privileged" }
+    },
+    "engine-llm.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "engine.llm" },
+      "intention": { "objective": "Answer with a model" },
+      "execution": { "engine": "llm", "inputs": { "text": "hello" } }
+    },
+    "judge.jos": {
+      "jos": { "version": "2.0.0", "kind": "atom" },
+      "meta": { "name": "judge" },
+      "intention": { "objective": "A judged criterion", "success_criteria": [{ "judge": { "rubric": "Is it polite?", "threshold": 0.8 } }] },
+      "execution": { "run": ["echo", "hello"] }
+    },
+    "crystal.jos": {
+      "jos": { "version": "2.0.0", "kind": "crystal" },
+      "meta": { "name": "c" },
+      "crystal": {
+        "key": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
+        "artifact": "art_0000000000000000000000000000000000000000000000000000000000000000",
+        "output_hash": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+      }
+    },
+    "short-1.1.0.jos": {
+      "id": "greet.v11",
+      "intent": "Greet in the 1.1.0 vocabulary",
+      "done": { "stdout_contains": "hi" },
+      "avoid": "rm -rf",
+      "limit": { "time": "2s" },
+      "retries": 0,
+      "on_error": "fail",
+      "run": ["echo", "hi"]
+    },
+    "shell-1.0.0.jos": {
+      "jos": { "version": "1.0.0", "kind": "flow" },
+      "id": "ai.example.flow.shell",
+      "meta": { "name": "shell-1.0.0" },
+      "intention": { "objective": "Print hi", "success_criteria": ["hi is printed"] },
+      "guardrails": { "avoid": ["rm -rf"] },
+      "orchestration": {
+        "definitions": { "hi": { "type": "shell", "command": "echo hi" } },
+        "flows": { "main": { "steps": ["hi"] } }
+      }
+    },
+    "requires-1.0.0.jos": {
+      "jos": { "version": "1.0.0", "kind": "atom" },
+      "meta": { "name": "req" },
+      "requires": [{ "kind": "mcp-server", "name": "mcp-server-filesystem" }],
+      "orchestration": {
+        "definitions": { "s": { "type": "shell", "command": "echo req" } },
+        "flows": { "main": { "steps": ["s"] } }
+      }
+    },
+    "invoke-1.0.0.jos": {
+      "jos": { "version": "1.0.0", "kind": "flow" },
+      "meta": { "name": "invoke-1.0.0" },
+      "execution": { "flow": [{ "invoke": "child" }] }
+    },
+    "lib-1.0.0/child.jos": {
+      "jos": { "version": "1.0.0", "kind": "flow" },
+      "id": "child",
+      "meta": { "name": "child" },
+      "orchestration": {
+        "definitions": { "c": { "type": "shell", "command": "echo child" } },
+        "flows": { "main": { "steps": ["c"] } }
+      }
+    },
+    "budget-1.0.0.jos": {
+      "jos": { "version": "1.0.0", "kind": "flow" },
+      "meta": { "name": "budget-1.0.0" },
+      "execution": { "budget": { "max_duration": "1s" } },
+      "orchestration": {
+        "definitions": { "s": { "type": "shell", "command": "sleep 2; echo slept" } },
+        "flows": { "main": { "steps": ["s"] } }
+      }
+    },
+    "gate3-1.0.0.jos": {
+      "jos": { "version": "1.0.0", "kind": "flow" },
+      "meta": { "name": "gate3" },
+      "orchestration": {
+        "definitions": { "a": { "type": "shell", "command": "echo a" }, "b": { "type": "shell", "command": "echo b" } },
+        "flows": { "main": { "steps": ["a", "b"], "gates": { "after-a": "false" } } }
+      }
+    },
+    "sealed-ok-1.0.0.jos": {
+      "jos": { "version": "1.0.0", "kind": "flow" },
+      "id": "ai.example.flow.shell",
+      "meta": { "name": "shell-1.0.0" },
+      "intention": { "objective": "Print hi", "success_criteria": ["hi is printed"] },
+      "guardrails": { "avoid": ["rm -rf"] },
+      "orchestration": {
+        "definitions": { "hi": { "type": "shell", "command": "echo hi" } },
+        "flows": { "main": { "steps": ["hi"] } }
+      },
+      "integrity": { "hash": "sha256:eb9eefb0751d5cc7ec90cf2da61cb6fb0eeaee459f727ff9b03eb764b5d85029" }
+    },
+    "sealed-tampered-1.0.0.jos": {
+      "jos": { "version": "1.0.0", "kind": "flow" },
+      "id": "ai.example.flow.shell",
+      "meta": { "name": "shell-1.0.0" },
+      "intention": { "objective": "Print hi", "success_criteria": ["hi is printed"] },
+      "guardrails": { "avoid": ["rm -rf"] },
+      "orchestration": {
+        "definitions": { "hi": { "type": "shell", "command": "echo tampered" } },
+        "flows": { "main": { "steps": ["hi"] } }
+      },
+      "integrity": { "hash": "sha256:eb9eefb0751d5cc7ec90cf2da61cb6fb0eeaee459f727ff9b03eb764b5d85029" }
+    },
+    "lang-underscore.jos": {
+      "jos": { "version": "2.0.0", "kind": "persona" },
+      "meta": { "name": "p" },
+      "persona": { "language": "en_US" }
+    }
+  },
+  "promises": [
+    {
+      "id": "discovery",
+      "feature": "jos alone: discovery",
+      "source": "README Start",
+      "intent": "Typing jos says what it does and which documents are here, without running or writing anything.",
+      "v4": "`jos` alone printed the help.",
+      "v5": "The essence in six lines, then the .jos documents of this folder and one down, each with its validate and run command.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos"], "expect": {"code": 0, "stdout_includes": ["read only", "$ jos validate avoid-substring.jos", "$ jos run avoid-substring.jos"], "files_absent": ["jos-start"]}}
+      ]
+    },
+    {
+      "id": "start",
+      "feature": "jos start",
+      "source": "README Start",
+      "intent": "Four working examples that need no key and no network, in one command, never overwriting anything.",
+      "v4": "Quick start cloned an external starter repository (jos-repo-starter, no longer maintained) and ran `jos llm` with Ollama.",
+      "v5": "`jos start [dir]` writes hello, flow, sealed and limits with a README; refuses (1) if any exists.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "start"], "expect": {"code": 0, "files_present": ["jos-start/hello.jos", "jos-start/flow.jos", "jos-start/limits.jos", "jos-start/sealed", "jos-start/README.md"]}},
+        {"cmd": ["jos", "run", "jos-start/hello.jos"], "expect": {"code": 0, "stderr_includes": ["✓ Intention met"]}},
+        {"cmd": ["jos", "run", "jos-start/sealed"], "expect": {"code": 0}},
+        {"cmd": ["jos", "start"], "expect": {"code": 1}}
+      ]
+    },
+    {
+      "id": "self-check",
+      "feature": "Self-check and version",
+      "source": "T1 #9, #16",
+      "intent": "One command says the installation works and which host and kernel it uses.",
+      "v4": "`jos verify` ran verification.jos; `jos --version` printed 4.1.0.",
+      "v5": "`jos verify` runs examples/hello.jos in a temporary folder; `--version` names the host and the jos-core it found.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "verify"], "expect": {"code": 0, "stdout_includes": ["jos-core 2.0.0", "SYSTEM HEALTHY"]}},
+        {"cmd": ["jos", "--version"], "expect": {"code": 0, "stdout_includes": ["5.0.0", "jos-core 2.0.0"]}}
+      ]
+    },
+    {
+      "id": "intention",
+      "feature": "Declare an intention",
+      "readme": "Declare an intention: objective, success criteria, `avoid`, `limit`",
+      "source": "T1 #1, #2",
+      "intent": "A .jos says what to do, when it is done and what to avoid, and jos shows it before it runs.",
+      "v4": "0.0.7 intention, success_criteria and guardrails; `jos init` wrote a 0.0.7 file and a .sig.json sidecar.",
+      "v5": "`jos init` writes a 2.0 atom validated by jos-core; `run` and `validate` print Intention, Done when, Avoid, Limit; `validate` also prints what jos-core infers and flags what is not declared, and `--strict` refuses (2) a document that does not write its objective, criteria and guardrails.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "init", "demo"], "expect": {"code": 0, "files_present": ["demo.jos"]}},
+        {"cmd": ["jos", "run", "demo.jos"], "expect": {"code": 0, "stdout_includes": ["Hello from demo"], "stderr_includes": ["Intention:", "Done when:", "Avoid:", "Limit:", "✓ Intention met"]}},
+        {"cmd": ["jos", "run", "examples/01-hello.jos"], "expect": {"code": 0, "stdout_includes": ["hello, .jos"], "stderr_includes": ["✓ Intention met"]}},
+        {"cmd": ["jos", "validate", "examples/01-hello.jos", "--strict"], "expect": {"code": 0, "stdout_includes": ["Inferred:", "/execution/shell = false (SPEC §6.8)", "VALIDATION PASSED"], "not_includes": ["not declared"]}},
+        {"cmd": ["jos", "validate", "fail-criterion.jos", "--strict"], "expect": {"code": 2, "stdout_includes": ["⚠ /guardrails: not declared", "VALIDATION FAILED (--strict)"], "stderr_includes": ["--strict: fail-criterion.jos does not declare guardrails"]}}
+      ]
+    },
+    {
+      "id": "validate-never-runs",
+      "feature": "Validate without running",
+      "readme": "Check it without running anything: JSON, schema, normalization, `art_`",
+      "source": "T4 #5, #6, #16, #17, #26",
+      "intent": "Checking a document never executes it; a document is one strict UTF-8 JSON object, read by content, not by file name.",
+      "v4": "`jos validate` checked 13 keys and ran nothing; JSON.parse let the last duplicate key win.",
+      "v5": "`validate` and `run --dry-run` start no step; any file name is read by content; duplicate keys, a BOM and (since jos-core 2.0.0-rc.8) an integer outside ±2^53 are invalid (2).",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "validate", "noexec.jos"], "expect": {"code": 0, "stdout_includes": ["art_"], "files_absent": ["MARKER"]}},
+        {"cmd": ["jos", "validate", "noexec.txt"], "expect": {"code": 0, "files_absent": ["MARKER"]}},
+        {"cmd": ["jos", "run", "noexec.jos", "--dry-run"], "expect": {"code": 0, "files_absent": ["MARKER"]}},
+        {"cmd": ["jos", "validate", "dup-keys.jos"], "expect": {"code": 2}},
+        {"cmd": ["jos", "validate", "bom.jos"], "expect": {"code": 2}},
+        {"cmd": ["jos", "validate", "big-integer.jos"], "expect": {"code": 2, "stdout_includes": ["/x-count: integer value 9007199254740993 is outside ±2^53 and below 10^21 (not representable in canonical form)"]}},
+        {"cmd": ["jos", "examples/01-hello.jos"], "expect": {"code": 1, "stderr_includes": ["jos run", "jos validate"]}}
+      ]
+    },
+    {
+      "id": "criteria",
+      "feature": "Every criterion evaluated",
+      "readme": "Every criterion evaluated and reported (`exit`, `stdout_contains`, `stdout_matches`, `stderr_empty`, files, hashes, `all` / `any` / `not`; text criteria are recorded, not evaluated)",
+      "source": "T1 #2",
+      "intent": "Done means every success criterion was checked, and the verdict of each one is shown.",
+      "v4": "success_criteria was text; nothing evaluated it.",
+      "v5": "Structured criteria are evaluated, each with a verdict line; a failed one is code 1; text criteria are recorded as descriptive.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "examples/02-criteria.jos"], "expect": {"code": 0, "stdout_includes": ["hello, .jos"], "stderr_includes": ["Verdict:", "✓ stdout_contains", "✓ stdout_matches", "✓ stderr_empty", "• descriptive", "✓ Intention met"]}},
+        {"cmd": ["jos", "run", "fail-criterion.jos"], "expect": {"code": 1, "stdout_includes": ["bye"], "stderr_includes": ["✖ stdout_contains", "✖ Intention NOT met (code 1"]}}
+      ]
+    },
+    {
+      "id": "guardrails",
+      "feature": "Guardrails enforced",
+      "readme": "Guardrails before and during the run: an `avoid` match never starts (3), time (124) and output (137) limits stop the process",
+      "source": "T1 #5, #15; T3 #6",
+      "intent": "Guardrails are enforced, not suggested: a forbidden command never starts and a limit stops the process.",
+      "v4": "guardrails.avoid was not enforced; x_run_params.timeout only bounded execSync.",
+      "v5": "avoid blocks before launch (3); limit.seconds kills the process group (124); limit.output_bytes kills it (137); a non-positive limit is 4.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "avoid-substring.jos"], "expect": {"code": 3, "stderr_includes": ["avoid"]}},
+        {"cmd": ["jos", "run", "time-limit.jos"], "expect": {"code": 124}},
+        {"cmd": ["jos", "run", "output-limit.jos"], "expect": {"code": 137}},
+        {"cmd": ["jos", "run", "budget-zero.jos"], "expect": {"code": 4}}
+      ]
+    },
+    {
+      "id": "flows",
+      "feature": "Flows and gates",
+      "readme": "Flows: sequences and DAGs (`needs`), automatic and human gates, data between steps",
+      "source": "T1 #21; T3 #19",
+      "intent": "Steps run in sequence or as a DAG; a human gate stops the flow until a person approves it.",
+      "v4": "0.0.7 orchestration flows run with execSync, one after another; no gates; `--flow` picked a flow.",
+      "v5": "jos-core flows with needs, gates and data between steps; `--approve <step>`, `--flow <name>`, `--input <json>`.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "examples/03-flow-gate.jos"], "expect": {"code": 1, "stdout_includes": ["built"], "stderr_includes": ["To approve it: jos run", "--approve build"]}},
+        {"cmd": ["jos", "run", "examples/03-flow-gate.jos", "--approve", "build"], "expect": {"code": 0, "stdout_includes": ["published"], "stderr_includes": ["✓ Intention met"]}},
+        {"cmd": ["jos", "run", "examples/03-flow-gate.jos", "--flow", "build-only"], "expect": {"code": 0, "stdout_includes": ["built"], "not_includes": ["published"]}}
+      ]
+    },
+    {
+      "id": "reuse",
+      "feature": "Reuse: use, templates, digests",
+      "readme": "Reuse: `use` by id and version range, templates with typed slots, a dependency pinned by digest",
+      "source": "T1 #18, #19",
+      "intent": "A document reuses another by id, instantiates templates with slots, and pins what it depends on by digest.",
+      "v4": "None: `jos get` downloaded files without verifying them.",
+      "v5": "`use` by id and range, templates with typed slots, digest pins; `--library <dir>`, `--with <json>`.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "examples/04-use-template/use.jos", "--library", "examples/04-use-template/lib"], "expect": {"code": 0, "stdout_includes": ["hello, Leo"]}},
+        {"cmd": ["jos", "run", "examples/04-use-template/lib/greeting.jos", "--with", "{\"name\":\"Ana\"}"], "expect": {"code": 0, "stdout_includes": ["hello, Ana"]}}
+      ]
+    },
+    {
+      "id": "sealed-folder",
+      "feature": "Fractal: a folder is a document",
+      "readme": "A folder is a document; sealed by its directory hash, refused when anything in `.jos/` changes (3)",
+      "source": "T1 #18, #19",
+      "intent": "An atom, a flow and a folder with .jos/ have the same shape; a sealed folder runs only while its hash matches.",
+      "v4": "One file per artifact; no folder documents.",
+      "v5": "`jos run <folder>` runs its .jos/manifest.jos; a sealed folder is verified by its directory hash first (3 on change).",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "examples/05-sealed"], "expect": {"code": 0, "stderr_includes": ["✓ Intention met"]}},
+        {"cmd": ["node", "-e", "require('fs').writeFileSync('examples/05-sealed/.jos/added.txt', 'x')"], "expect": {"code": 0}},
+        {"cmd": ["jos", "run", "examples/05-sealed"], "expect": {"code": 3}}
+      ]
+    },
+    {
+      "id": "refuse-unhonorable",
+      "feature": "Refuse what it cannot honor",
+      "readme": "Refuse what it cannot honor, before the first step (5): unmet `requires[]`, `security.tier: sandbox`",
+      "source": "T3 #10, #23; T4 #8, #9",
+      "intent": "A document that needs something this runtime lacks is refused before anything starts, never half-run.",
+      "v4": "0.0.7 had no requires[] and no security.tier: nothing was refused before running.",
+      "v5": "Unmet requires[] and security.tier sandbox exit 5 before the first step; receipts say isolation none.",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "examples/06-requires.jos"], "expect": {"code": 5, "stderr_includes": ["not satisfied"]}},
+        {"cmd": ["jos", "run", "examples/07-sandbox.jos"], "expect": {"code": 5, "stderr_includes": ["sandbox"]}},
+        {"cmd": ["jos", "run", "requires-1.0.0.jos"], "expect": {"code": 5, "not_includes": ["req\n"]}}
+      ]
+    },
+    {
+      "id": "identity",
+      "feature": "Content identity",
+      "readme": "Identity: `art_` of the content, `ent_` of the name, the hash of a folder",
+      "source": "T1 #4, #7",
+      "intent": "Every document has an id computed from its content; jos shows what jos-core decided, the same id on every machine.",
+      "v4": "A sha256 of the file bytes in a .sig.json sidecar.",
+      "v5": "`jos ids`: art_ (SHA-256 of the RFC 8785 canonical JSON), ent_ of the name, a folder's directory hash; jos and jos-core agree.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos-core", "validate", "examples/01-hello.jos"], "expect": {"code": 0, "stdout_includes": ["art_40762df5"]}},
+        {"cmd": ["jos", "ids", "examples/01-hello.jos"], "expect": {"code": 0, "stdout_includes": ["art_40762df5"]}},
+        {"cmd": ["jos", "ids", "examples/01-hello.jos", "examples/05-sealed"], "expect": {"code": 0, "stdout_includes": ["art_", "ent_"]}},
+        {"cmd": ["jos", "ids", "dup-keys.jos"], "expect": {"code": 2}}
+      ]
+    },
+    {
+      "id": "integrity-hash",
+      "feature": "Integrity hash",
+      "source": "T1 #7; T3 #26; T4 #11",
+      "intent": "A sealed document runs only while its content matches its hash.",
+      "v4": "A sha256 of the file bytes in a sidecar, checked by `run`.",
+      "v5": "integrity.hash (SHA-256 over RFC 8785 canonical JSON) is recomputed before anything starts; a mismatch is 3.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "sealed.jos"], "expect": {"code": 0, "stdout_includes": ["sealed"]}},
+        {"cmd": ["jos", "run", "integrity-mismatch.jos"], "expect": {"code": 3, "stderr_includes": ["integrity"]}}
+      ]
+    },
+    {
+      "id": "ledger",
+      "feature": "Receipts, ledger and meter",
+      "readme": "Receipts and a hash-chained ledger of every run; verify it; meter it (tokens and cost when an engine reports them)",
+      "source": "T1 #24",
+      "intent": "Every run leaves a hash-chained ledger that can be listed, verified and metered.",
+      "v4": "~/.jos/runs/*/events.jsonl: a witness log without hashes.",
+      "v5": "A ledger per run; `jos runs`, `jos ledger verify` (0 or 1), `jos meter` (unreported meters say not reported, never 0).",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "examples/01-hello.jos"], "expect": {"code": 0, "stderr_includes": ["Ledger:"]}},
+        {"cmd": ["jos", "runs"], "expect": {"code": 0, "stdout_includes": ["{last_run}", "tour.hello"]}},
+        {"cmd": ["jos", "ledger", "verify", "{last_run}"], "expect": {"code": 0, "stdout_includes": ["LEDGER VERIFIED"]}},
+        {"cmd": ["jos", "meter", "{last_run}"], "expect": {"code": 0, "stdout_includes": ["not reported"]}},
+        {"cmd": ["jos", "ledger", "verify", "run_00000000000000000000000000"], "expect": {"code": 2}}
+      ]
+    },
+    {
+      "id": "secrets",
+      "feature": "Credentials without exposure",
+      "readme": "Credentials for a step without putting them in the document, the command line or the output",
+      "source": "T1 #13",
+      "intent": "A step gets a credential without it being in the document, on a command line or in any output.",
+      "v4": "`jos secrets set NAME VALUE` (value on the command line), `get` printed it; AES-256-CBC.",
+      "v5": "`set --stdin`, `get` shows a keyed fingerprint, `exec --only NAME --` gives it to one child; AES-256-GCM per entry.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "secrets", "set", "DEMO_KEY", "VALUE"], "expect": {"code": 64}},
+        {"cmd": ["jos", "secrets", "set", "DEMO_KEY", "--stdin"], "stdin": "s3cr3t-promise-value\n", "expect": {"code": 0, "not_includes": ["s3cr3t-promise-value"]}},
+        {"cmd": ["jos", "secrets", "get", "DEMO_KEY"], "expect": {"code": 0, "stdout_includes": ["DEMO_KEY exists", "hmac:"], "not_includes": ["s3cr3t-promise-value"]}},
+        {"cmd": ["jos", "secrets", "exec", "--only", "DEMO_KEY", "--", "node", "-e", "process.stdout.write(process.env.DEMO_KEY === 's3cr3t-promise-value' ? 'key-present' : 'key-missing')"], "expect": {"code": 0, "stdout_includes": ["key-present"], "not_includes": ["s3cr3t-promise-value"]}},
+        {"cmd": ["jos", "run", "examples/11-openai.jos"], "expect": {"code": 1, "stderr_includes": ["OPENAI_API_KEY is not set: no request was sent."], "not_includes": ["fake-curl-called"]}}
+      ]
+    },
+    {
+      "id": "local-model",
+      "feature": "A local model as a step",
+      "readme": "A local model as a shell step",
+      "source": "T1 #13, #15",
+      "intent": "Use a local model (Ollama) from a document, offline.",
+      "v4": "`jos llm --adapter ollama` sent the artifact to Ollama and overwrote the .jos with the answer.",
+      "v5": "A shell step: 10-ollama.jos checks localhost:11434 and calls `ollama run`; without Ollama it sends nothing (1).",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "examples/10-ollama.jos"], "expect": {"code": 1, "stderr_includes": ["Ollama is not answering"]}}
+      ]
+    },
+    {
+      "id": "runs-page",
+      "feature": "A read-only page of runs",
+      "readme": "A read-only page of your runs, on 127.0.0.1 only",
+      "source": "T1 #26",
+      "intent": "See past runs in a browser without exposing files or secrets.",
+      "v4": "`jos serve` was an HTTP file explorer on every interface; it served ~/.jos/secrets/.master.",
+      "v5": "14-serve.jos writes an HTML index of ~/.jos/runs to a temporary folder and serves only it on 127.0.0.1.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "examples/14-serve.jos", "--dry-run"], "expect": {"code": 0, "stderr_includes": ["127.0.0.1", "DRY RUN"]}}
+      ]
+    },
+    {
+      "id": "mcp",
+      "feature": "MCP, read-only",
+      "readme": "Give an MCP client (Claude Code, Claude Desktop, Cursor) read-only access to a project folder",
+      "source": "T1 #26",
+      "intent": "An MCP client can read a project folder and nothing else: no secrets, no writes, no programs unless allowed.",
+      "v4": "No MCP server.",
+      "v5": "`jos serve --mcp` over stdio, read-only by default; ~/.jos/secrets denied; --allow-write and --allow-shell are opt-ins.",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "serve", "--mcp", "--root", "{work}"], "stdin": "{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/list\"}\n{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/call\",\"params\":{\"name\":\"read_file\",\"arguments\":{\"path\":\"examples/01-hello.jos\"}}}\n{\"jsonrpc\":\"2.0\",\"id\":3,\"method\":\"tools/call\",\"params\":{\"name\":\"write_file\",\"arguments\":{\"path\":\"pwned.txt\",\"content\":\"x\"}}}\n{\"jsonrpc\":\"2.0\",\"id\":4,\"method\":\"tools/call\",\"params\":{\"name\":\"read_file\",\"arguments\":{\"path\":\"{home}/.jos/secrets/.master\"}}}\n", "expect": {"code": 0, "stdout_includes": ["read_file", "tour.hello", "Access denied"], "not_includes": ["\"name\":\"write_file\"", "\"name\":\"run_command\""], "files_absent": ["pwned.txt"]}}
+      ]
+    },
+    {
+      "id": "exit-codes",
+      "feature": "Exit codes",
+      "source": "T1 #24",
+      "intent": "A script can tell done, not done, invalid, blocked, over budget, unexecutable and usage errors apart.",
+      "v4": "0 and 1 only; --insecure and --verbose existed.",
+      "v5": "0 done, 1 not done, 2 invalid, 3 blocked, 4 budget, 5 unexecutable, 124 time, 137 output, 64 usage, 70 host error; --insecure and --verbose are 64.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run"], "expect": {"code": 64}},
+        {"cmd": ["jos", "run", "minimal-13.jos", "--insecure"], "expect": {"code": 64}},
+        {"cmd": ["jos", "run", "minimal-13.jos", "--verbose"], "expect": {"code": 64}},
+        {"cmd": ["jos", "run", "object-step.jos"], "expect": {"code": 2}},
+        {"cmd": ["jos", "run", "examples/01-hello.jos", "--input", "{not json"], "expect": {"code": 64}}
+      ]
+    },
+    {
+      "id": "minimal-valid-artifact",
+      "feature": "4.1.0 Minimal Valid Artifact",
+      "source": "T1 #28",
+      "intent": "The 13-key Minimal Valid Artifact of the 4.1.0 page, copied unchanged, validates and runs.",
+      "v4": "validate checked the 13 keys; run printed Hello!.",
+      "v5": "Read as 0.0.7 and normalized in memory to a 2.0 flow: validate 0, run prints Hello! (0).",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "validate", "minimal-13.jos"], "expect": {"code": 0, "stdout_includes": ["0.0.7"]}},
+        {"cmd": ["jos", "run", "minimal-13.jos"], "expect": {"code": 0, "stdout_includes": ["Hello!"], "stderr_includes": ["✓ Intention met"]}}
+      ]
+    },
+    {
+      "id": "read-0.0.7",
+      "feature": "Read 0.0.7",
+      "source": "T1 #11, #25; T4 #19",
+      "intent": "Documents written for 4.1.0 keep working, and validation checks the format, not a fixed list of keys.",
+      "v4": "0.0.7 was the only format; validate required 13 keys (a document with 7 of them failed, exit 1).",
+      "v5": "Only jos and meta are required; 0.0.7 with text steps is normalized to a 2.0 flow and runs; object steps and, since jos-core 2.0.0-rc.8, type: prompt steps are invalid (2).",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "validate", "only-7-keys.jos"], "expect": {"code": 0}},
+        {"cmd": ["jos", "run", "only-7-keys.jos"], "expect": {"code": 0, "stdout_includes": ["Hello!"]}},
+        {"cmd": ["jos", "validate", "object-step.jos"], "expect": {"code": 2, "stdout_includes": ["/orchestration/flows/main/steps/0: type"]}},
+        {"cmd": ["jos", "validate", "prompt-step-0.0.7.jos"], "expect": {"code": 2, "stdout_includes": ["/orchestration/definitions/greet/type: enum"]}}
+      ]
+    },
+    {
+      "id": "integrity-ref",
+      "feature": "0.0.7 integrity_ref",
+      "source": "T1 #8; PROMESAS point 2; PLAN-INTEGRITY-REF-0.0.7",
+      "intent": "A 0.0.7 document sealed by a separate manifest (security.integrity_ref) is refused when the manifest does not match.",
+      "v4": "Checked the file's sha256 against the manifest: Hash mismatch, exit 1.",
+      "v5": "Verified again by jos-core 2.0.0-rc.8 before anything starts, --dry-run too (jos run hands it the octets it read): a match runs (0), a changed document is blocked (3, integrity_ref: ...); stricter on paths than 4.1.0 (relative, inside the document's folder, no links); jos migrate reseals it as integrity.hash.",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "sealed-0.0.7/ref.jos"], "expect": {"code": 0, "stdout_includes": ["Hello from ref"], "stderr_includes": ["Integrity: ✓ verified by ./ref.jos.sig.json", "Intention met"]}},
+        {"cmd": ["jos", "run", "tampered-0.0.7/ref.jos"], "expect": {"code": 3, "stderr_includes": ["integrity_ref: declared hash does not match the document octets"], "not_includes": ["PWNED\n"]}},
+        {"cmd": ["jos", "run", "tampered-0.0.7/ref.jos", "--dry-run"], "expect": {"code": 3, "stderr_includes": ["Dry run refused (code 3: blocked)"]}},
+        {"cmd": ["jos", "validate", "sealed-0.0.7/ref.jos"], "expect": {"code": 0, "stdout_includes": ["integrity_ref present: verified on run"]}},
+        {"cmd": ["jos", "migrate", "sealed-0.0.7/ref.jos"], "expect": {"code": 0, "files_present": ["sealed-0.0.7/ref.v2.jos"]}},
+        {"cmd": ["jos", "run", "sealed-0.0.7/ref.v2.jos"], "expect": {"code": 0, "stdout_includes": ["Hello from ref"], "not_includes": ["Integrity:"]}}
+      ]
+    },
+    {
+      "id": "migrate",
+      "feature": "jos migrate",
+      "readme": "Reseal a 4.1.0 document (0.0.7 with `security.integrity_ref`) as 2.0, only if it verifies",
+      "source": "PLAN-INTEGRITY-REF-0.0.7 §5 (D7)",
+      "intent": "A document sealed for 4.1.0 can move to the 2.0 seal without a window where it is unprotected, and a changed one cannot be laundered.",
+      "v4": "Not applicable (0.0.7 was the only format).",
+      "v5": "jos migrate verifies the manifest as run does; a mismatch is 3 and nothing is written; otherwise it writes <name>.v2.jos: the 2.0 normalization, integrity_ref removed, security.permissions moved to x-legacy-permissions, integrity.hash of the result; the result validates, runs, and a second migrate says already 2.0. 1.x documents: 64.",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "migrate", "tampered-0.0.7/ref.jos"], "expect": {"code": 3, "stderr_includes": ["integrity_ref: declared hash does not match the document octets", "nothing written"], "files_absent": ["tampered-0.0.7/ref.v2.jos"]}},
+        {"cmd": ["jos", "migrate", "sealed-0.0.7/ref.jos"], "expect": {"code": 0, "stderr_includes": ["integrity_ref verified", "security.permissions moved to security.x-legacy-permissions", "Self-check"], "files_present": ["sealed-0.0.7/ref.v2.jos"]}},
+        {"cmd": ["jos", "validate", "sealed-0.0.7/ref.v2.jos"], "expect": {"code": 0, "stdout_includes": ["(input 2.0 2.0.0)"]}},
+        {"cmd": ["jos", "run", "sealed-0.0.7/ref.v2.jos"], "expect": {"code": 0, "stdout_includes": ["Hello from ref"]}},
+        {"cmd": ["jos", "migrate", "sealed-0.0.7/ref.v2.jos"], "expect": {"code": 0, "stderr_includes": ["is already 2.0"], "files_absent": ["sealed-0.0.7/ref.v2.v2.jos"]}},
+        {"cmd": ["jos", "migrate", "examples/01-hello.jos"], "expect": {"code": 0, "stderr_includes": ["is already 2.0"]}},
+        {"cmd": ["jos", "migrate", "shell-1.0.0.jos"], "expect": {"code": 64, "stderr_includes": ["is a 1.0.0 document: nothing to reseal"]}}
+      ]
+    },
+    {
+      "id": "read-0.0.7-init",
+      "feature": "0.0.7 written by jos init of 4.1.0",
+      "source": "kernel CHANGELOG 2.0.0-rc.8 (members the schema does not accept inside 0.0.7 objects move to x-legacy-<member>)",
+      "intent": "The document jos init of 4.1.0 wrote (with orchestration.state and its .sig.json) validates and runs.",
+      "v4": "jos init wrote it with orchestration.state { current_status: idle }; run verified the manifest and printed Hello from <name>.",
+      "v5": "Valid and runs under jos-core 2.0.0-rc.8: orchestration.state is kept as orchestration.x-legacy-state (never dropped), the manifest named by security.integrity_ref is verified before any step, and jos migrate writes the 2.0 document with integrity.hash.",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "validate", "init-4.1.0/ref.jos"], "expect": {"code": 0, "stdout_includes": ["normalized from the 0.0.7 legacy form", "VALIDATION PASSED"]}},
+        {"cmd": ["jos", "run", "init-4.1.0/ref.jos"], "expect": {"code": 0, "stdout_includes": ["Hello from ref"], "stderr_includes": ["Intention met"]}},
+        {"cmd": ["jos", "migrate", "init-4.1.0/ref.jos"], "expect": {"code": 0, "files_present": ["init-4.1.0/ref.v2.jos"]}}
+      ]
+    },
+    {
+      "id": "read-1.x",
+      "feature": "Read 1.0.0 and 1.1.0",
+      "source": "T3 #1-#13, #16; T4 #18, #19",
+      "intent": "Every valid 1.0.0 document and the 1.1.0 short form are read unchanged.",
+      "v4": "4.1.0 read 0.0.7 only.",
+      "v5": "Normalized in memory to 2.0 (the file is not rewritten) and run by jos-core; four 1.0.0 holes below.",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "shell-1.0.0.jos"], "expect": {"code": 0, "stdout_includes": ["hi"]}},
+        {"cmd": ["jos", "run", "short-1.1.0.jos"], "expect": {"code": 0, "stdout_includes": ["hi"]}}
+      ]
+    },
+    {
+      "id": "compat-1.0.0-execution-flow",
+      "feature": "1.0.0 execution.flow",
+      "source": "T3 #14; T4 #18",
+      "intent": "A 1.0.0 flow written as execution.flow: [{invoke}] (SPEC §6.8 alias of orchestration.flows.main) runs.",
+      "v4": "Not applicable (0.0.7 only).",
+      "v5": "Runs since jos-core 2.0.0-rc.8: each invoke is a definition of the document or a use reference (here resolved from --library); rc.7 refused it (2).",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "validate", "invoke-1.0.0.jos"], "expect": {"code": 0, "stdout_includes": ["VALIDATION PASSED"]}},
+        {"cmd": ["jos", "run", "invoke-1.0.0.jos", "--library", "lib-1.0.0"], "expect": {"code": 0, "stdout_includes": ["child"], "stderr_includes": ["child/c ✓ code 0", "Intention met"]}}
+      ]
+    },
+    {
+      "id": "compat-1.0.0-budget-in-flow",
+      "feature": "1.0.0 execution.budget in a flow",
+      "source": "T3 #15; T4 #7",
+      "intent": "execution.budget (alias of guardrails.limit) stops a flow past max_duration.",
+      "v4": "Not applicable (0.0.7 only).",
+      "v5": "Applied in flows too since jos-core 2.0.0-rc.8 (the minimum with guardrails.limit): a 1 s budget stops a 2 s step (124); rc.7 let it finish (0).",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "budget-1.0.0.jos"], "expect": {"code": 124, "stderr_includes": ["s ✖ code 124", "Intention NOT met (code 124: timeout)"], "not_includes": ["slept"]}}
+      ]
+    },
+    {
+      "id": "compat-1.0.0-after-gates",
+      "feature": "1.0.0 gates keyed after-<step>",
+      "source": "T3 #19",
+      "intent": "A gate keyed after-<step>, the form of the 1.0.0 text, is evaluated after that step.",
+      "v4": "Not applicable (0.0.7 only).",
+      "v5": "Since jos-core 2.0.0-rc.8 after-<step> is the gate of <step> when no step has that name: a gate after-a that fails stops the flow after a (1); rc.7 refused the run (2).",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "validate", "gate3-1.0.0.jos"], "expect": {"code": 0}},
+        {"cmd": ["jos", "run", "gate3-1.0.0.jos"], "expect": {"code": 1, "stderr_includes": ["a ✓ code 0", "gate failed on \"a\""], "not_includes": ["b ✓ code 0"]}}
+      ]
+    },
+    {
+      "id": "compat-1.0.0-seal",
+      "feature": "1.0.0 seal computed with the hash field empty",
+      "source": "T3 #26; T4 #30",
+      "intent": "A 1.0.0 seal computed as its text says (hash field empty) verifies.",
+      "v4": "Not applicable (0.0.7 only).",
+      "v5": "Since jos-core 2.0.0-rc.8 a 1.0.x document without integrity.signature may carry the 1.0.0 seal (only hash empty) or the 2.0 one; it runs (0) and a changed document is still blocked (3). rc.7 blocked the 1.0.0 seal (3).",
+      "status": "delivered",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "sealed-ok-1.0.0.jos"], "expect": {"code": 0, "stdout_includes": ["hi"], "stderr_includes": ["Intention met"]}},
+        {"cmd": ["jos", "run", "sealed-tampered-1.0.0.jos"], "expect": {"code": 3, "stderr_includes": ["integrity"], "not_includes": ["tampered\n"]}}
+      ]
+    },
+    {
+      "id": "language-tags",
+      "feature": "BCP 47 language tags",
+      "source": "T4 #21",
+      "intent": "Language tags are BCP 47 with a hyphen (en-US, not en_US), as the IANA text says.",
+      "v4": "Not checked (the 1.0.0 schema even shows en_US).",
+      "v5": "Not enforced by design (decision 2026-10-21): IANA.md says language tags SHOULD be BCP 47 tags with a hyphen; en_US validates.",
+      "status": "delivered-differently",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "validate", "lang-underscore.jos"], "expect": {"code": 0}}
+      ]
+    },
+    {
+      "id": "engine-llm",
+      "feature": "LLM engine and judged criteria",
+      "readme": "`engine: llm` and `judge` / `json_schema` criteria",
+      "source": "T1 #12, #13, #14",
+      "intent": "A step or a criterion answered by a model, declared in the document.",
+      "v4": "`jos llm` with the native (josfox.cloud) and ollama adapters; no Gemini, OpenAI or Anthropic code.",
+      "v5": "Valid documents, refused at run with code 5, never faked; providers today only as shell steps (10–13).",
+      "status": "planned",
+      "planned": "2.1",
+      "gate": [
+        {"cmd": ["jos", "validate", "engine-llm.jos"], "expect": {"code": 0}},
+        {"cmd": ["jos", "run", "engine-llm.jos"], "expect": {"code": 5, "stderr_includes": ["llm"]}},
+        {"cmd": ["jos", "run", "judge.jos"], "expect": {"code": 5, "stderr_includes": ["judge"]}}
+      ]
+    },
+    {
+      "id": "signatures",
+      "feature": "Signatures",
+      "readme": "Signatures (`integrity.signature`, `security.tier: privileged`)",
+      "source": "T1 #7; T4 #11",
+      "intent": "A document is signed and the signature is verified before it runs.",
+      "v4": "No signatures; \"cryptographically verifiable\" meant a sha256 sidecar.",
+      "v5": "Not verified yet: security.tier privileged is refused (5).",
+      "status": "planned",
+      "planned": "2.1",
+      "gate": [
+        {"cmd": ["jos", "run", "tier-privileged-unsigned.jos"], "expect": {"code": 5, "stderr_includes": ["signature"], "not_includes": ["ok\n"]}}
+      ]
+    },
+    {
+      "id": "crystals",
+      "feature": "Cache, crystals, store",
+      "readme": "Cache, crystals (`kind: crystal`), store",
+      "source": "T1 #27",
+      "intent": "Serve a sealed record of a past run instead of running again, and share pieces through a store.",
+      "v4": "None.",
+      "v5": "A crystal validates; running one is code 5; no cache and no store.",
+      "status": "planned",
+      "planned": "2.1",
+      "gate": [
+        {"cmd": ["jos", "validate", "crystal.jos"], "expect": {"code": 0}},
+        {"cmd": ["jos", "run", "crystal.jos"], "expect": {"code": 5}}
+      ]
+    },
+    {
+      "id": "get",
+      "feature": "jos get",
+      "readme": "`jos get` (fetch a document from a registry)",
+      "source": "T1 #27",
+      "intent": "Fetch a document from a registry, verified before it is written.",
+      "v4": "`jos get` wrote to a path built from meta.name (path traversal) and did not verify the download.",
+      "v5": "Frozen: exit 1 with the reason; nothing is downloaded.",
+      "status": "planned",
+      "planned": "2.1",
+      "gate": [
+        {"cmd": ["jos", "get", "foo"], "expect": {"code": 1, "stderr_includes": ["frozen"]}}
+      ]
+    },
+    {
+      "id": "learning",
+      "feature": "Learning",
+      "readme": "Learning (`adaptive_ai` of 0.0.7 is kept as `x-legacy-adaptive_ai` and not read)",
+      "source": "T1 #6, #15",
+      "intent": "Adapt from feedback (\"adaptive\", the orchestrator).",
+      "v4": "Promised on the page; there was no learning code.",
+      "v5": "None: 0.0.7 adaptive_ai is kept as x-legacy-adaptive_ai and not read.",
+      "status": "planned",
+      "planned": "2.1",
+      "gate": [
+        {"cmd": ["jos", "validate", "minimal-13.jos", "--json"], "expect": {"code": 0, "stdout_includes": ["x-legacy-adaptive_ai"]}}
+      ]
+    },
+    {
+      "id": "serve-http",
+      "feature": "jos serve as an HTTP explorer",
+      "readme": "`jos serve` as an HTTP explorer",
+      "source": "T1 #26",
+      "intent": "A local dashboard of documents and runs.",
+      "v4": "`jos serve` explored files on every interface and exposed ~/.jos/secrets from the home folder.",
+      "v5": "Off: exit 2; `jos serve --mcp` works; a runs page is 14-serve.jos.",
+      "status": "planned",
+      "planned": "F3",
+      "gate": [
+        {"cmd": ["jos", "serve"], "expect": {"code": 2, "stderr_includes": ["--mcp"]}}
+      ]
+    },
+    {
+      "id": "frozen-commands",
+      "feature": "jos llm, prompts, repo, add",
+      "readme": "`jos llm`, `jos prompts`, `jos repo`, `jos add`",
+      "source": "T1 #12, #14, #17",
+      "intent": "Turn intentions into prompts, improve prompts, manage repositories, edit flows from the command line.",
+      "v4": "llm and prompts overwrote the .jos with unvalidated model output; repo served get; add edited 0.0.7 flows.",
+      "v5": "Frozen: each exits 1 and names its README; flows are written in the document.",
+      "status": "dropped",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "llm", "hello.jos"], "expect": {"code": 1, "stderr_includes": ["frozen"]}},
+        {"cmd": ["jos", "prompts"], "expect": {"code": 1, "stderr_includes": ["frozen"]}},
+        {"cmd": ["jos", "repo"], "expect": {"code": 1, "stderr_includes": ["frozen"]}},
+        {"cmd": ["jos", "add"], "expect": {"code": 1, "stderr_includes": ["frozen"]}}
+      ]
+    },
+    {
+      "id": "older-clis",
+      "feature": "josctl and @josfox/jos-cli",
+      "readme": "`josctl`, `@josfox/jos-cli`",
+      "source": "T1 #22, #23",
+      "intent": "Companion command lines installed next to jos.",
+      "v4": "The page told users to install josctl and @josfox/jos-cli.",
+      "v5": "Separate older packages, not part of 5.0 and not tested here; `jos run --flow <name>`, which josctl always passes, is accepted again.",
+      "status": "dropped",
+      "planned": null,
+      "gate": [
+        {"cmd": ["jos", "run", "minimal-13.jos", "--flow", "main"], "expect": {"code": 0, "stdout_includes": ["Hello!"]}}
+      ]
+    }
+  ]
+}