@jtf19/vibecoding-kit 0.1.0

package/docs/runtime-maintainer-validation.md

@@ -0,0 +1,212 @@
+# Runtime Maintainer Validation
+
+本文定义下一轮优化边界：优先降低维护者验证成本和输出噪音，不新增 runtime capability，不改变 release suite 范围。
+
+## 当前判断
+
+项目当前主要风险不是缺少能力，而是治理链路较重：维护者需要知道何时跑哪些检查、如何读 diagnostics、哪些输出只是排障信息。
+
+因此下一轮优化应先做 adoption / validation UX，而不是继续增加 contract。
+
+## 建议优先方向
+
+建议先做 A，再评估 B。
+
+### A. `runtime-check --diagnostics` summary-first
+
+目标：把 diagnostics 输出分成更容易阅读的小段，让维护者先看到健康摘要，再进入 owner contract 细节。
+
+边界：
+
+- 默认 `npm run check` 输出不变。
+- `runtime-check` 默认 gate 语义不变。
+- 不改 JSON envelope 顶层形状。
+- 不新增写入、confirm 或自动执行行为。
+- 不把 diagnostics 变成 required release gate。
+
+验收方式：
+
+```bash
+node tools/vibe-runtime-check/index.mjs --root . --diagnostics
+npm run check:arch
+npm run release:fast
+npm run check
+```
+
+如果改动触及 install placement contract，再补：
+
+```bash
+npm run release:install
+```
+
+### B. `release-check --timing` 维护者诊断入口
+
+目标：在 `--timing` 模式下帮助维护者识别慢项，但不改变 suite 内容和失败严格度。该能力已作为 advisory-only 输出存在，适合在验证耗时异常、发布收口前或选择 targeted suite 前使用。
+
+边界：
+
+- 不减少发布检查覆盖。
+- 不跳过慢项。
+- 不改变 `--quiet` 或默认输出语义。
+- 不改变 command manifest 的 suite predicate。
+
+验收方式：
+
+```bash
+node tools/vibe-release-check/index.mjs --suite fast --timing
+npm run release:fast
+npm run check:arch
+npm run check
+```
+
+## Technical Debt Register
+
+产品化阶段的技术债务不作为“顺手优化”处理。维护者在新增文档、命令、marker、smoke 或 runtime surface 前，先判断它属于哪类债务，并明确 owner 与偿还方式。
+
+| 债务类型 | 典型表现 | Owner | Paydown 方式 | 阻塞验证 |
+| --- | --- | --- | --- | --- |
+| 文档债务 | 入口重复、用户层暴露维护者长路线、同一概念多处定义不一致 | README / docs owner | 按 L1 用户入口层、L2 团队采用层、L3 维护者治理层重排；用链接代替复制长段落 | runtime-check docs marker、install smoke marker |
+| 架构债务 | 大文件继续膨胀、command wrapper 承担 domain core、owner module 不清 | architecture owner / 对应 runtime owner | 新增能力优先放 owner-local 模块；command wrapper 保持薄路由 | `npm run check:arch` active/new 0，baseline total 不高于 235 |
+| 验证债务 | 新增 claim 没有 runtime-check、release-check、install smoke 或 negative fixture 覆盖 | runtime-check / release-check owner | claim 与 marker、positive smoke、negative smoke 同步提交 | `npm run check`、targeted release suite |
+| 产品体验债务 | dry-run 不解释影响、`ok=false` 被误解为系统失败、profile/readiness 输出难读 | presentation / docs owner | summary-first 输出，明确 next manual action 和 writes boundary | profile/readiness 手动输出、runtime:experience suite |
+
+债务处理底线：
+
+- 不通过提高 architecture baseline 解决问题。
+- 不通过删除 runtime-check marker、降低 release smoke 严格度或移除 negative fixture 解决问题。
+- 不把债务偿还包装成 execution surface 扩展。
+- 涉及 `execute`、`scheduler`、`daemon`、`queue`、`retry`、`lease`、`source`、`merge` 的改动必须单独做边界评审。
+
+## 维护者验证矩阵
+
+| 改动类型 | 推荐最小验证 | 可选耗时诊断 | 收口验证 |
+| --- | --- | --- | --- |
+| 文档和入口链接 | `npm run release:fast` + `npm run check:arch` | 验证耗时异常时加 `node tools/vibe-release-check/index.mjs --suite fast --timing --quiet` | `npm run check` |
+| 安装模板、adapter、installed marker | `npm run release:install` + `npm run release:fast` | install suite 变慢时加 `node tools/vibe-release-check/index.mjs --suite install --timing --quiet` | `npm run check` |
+| runtime-check contract owner | `node tools/vibe-runtime-check/index.mjs --root . --diagnostics` + `npm run check:arch` | 只在收口耗时异常时加 fast timing，不把 diagnostics 变成 timing gate | `npm run release:fast` + `npm run check` |
+| release-check suite 或 manifest | `npm run release:fast` + targeted suite | 优先加对应 targeted suite 的 `--timing --quiet` | `npm run check` |
+| runtime state / handoff / evidence | 对应 `release:runtime:*` 分层 suite | 分层 suite 仍不足以定位时再跑 full runtime timing | `npm run release:runtime` + `npm run check` |
+| P44-P53 产品化收口证据包 | `node tools/vibe-runtime-check/index.mjs --root .` + `npm run check:arch` + `npm run release:fast` | 涉及安装/行为/打包时分别补 `npm run release:install`、`npm run release:behavior`、`npm run pack:dry-run` | `.tmp` absent + source/target `.vibecoding-state` absent |
+| 架构债务燃尽 / baseline narrowing | `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` | 需要定位 owner 时加 `node tools/vibe-architecture-check/index.mjs --root . --json` | active/new 0 + baseline total 不高于 235 + `.tmp` / source state / target state absent |
+
+## Productization closeout evidence matrix
+
+P52 evidence pack 是维护者收口矩阵，不是新的 runtime capability。它把 P44-P51/P53 的产品化结果映射到可复验命令。
+
+兼容合同 marker：P52 原始发布证据仍保留 `baseline total 402` / `architecture_baseline_total=402` 字面 marker，用于证明历史 ceiling 没被静默改写；P161 当前回归锁以 baseline total 不高于 345 为准。
+
+| 批次 | 证据主题 | 必跑验证 | 边界 |
+| --- | --- | --- | --- |
+| P44 | `three_layer_docs` | `node tools/vibe-runtime-check/index.mjs --root .` | L1 不泄漏维护者 stage 长表 |
+| P45-P47 | `install_lifecycle_ux` / `installed_adapter_ux` | `npm run release:install` | installed project 默认不创建 `.vibecoding-state/` |
+| P46 | `team_evidence_starter_kit` | `npm run demo:golden-path` 或 `npm run release:fast` | CI 示例只生成本地 evidence |
+| P48/P51 | `workflow_cockpit_readonly` / `feedback_learning_token_entry` | `node tools/vibe-runtime-check/index.mjs --root .` | 不执行 skill、subagent、scheduler、git、model 或平台 API |
+| P49 | `behavior_release_gate` | `npm run release:behavior` | negative fixture 不得删除或降级 |
+| P50 | `packaging_dry_run` | `npm run pack:dry-run` | 不 publish、不 tag、不 release、不 marketplace upload |
+| P53 | `technical_debt_register` | `npm run check:arch` | active/new 0，baseline total 394 |
+| P62-P63 | `adapter_plugin_maturity` / `parity_expression` | `node tools/vibe-runtime-check/index.mjs --root .` + plugin pack dry-run | 不 publish、不 tag、不 marketplace upload；parity 不等于 execution-enabled |
+| P64 | `contributor_closeout_guardrails` | `node tools/vibe-runtime-check/index.mjs --root .` + `npm run check:arch` | completion/commit/PR/subagent 只输出当前合同不授权和人工下一步 |
+| P67-P72 | `architecture_paydown_evidence_lock` | `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + scoped release smoke | active/new 0，baseline total 不高于 394；只接受 owner 收敛和 unused baseline rule 清理后的下降 |
+| P73-P76 | `state_contract_fixture_paydown_lock` | `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 377；`unused_baseline_rules=[]`；`execution-enabled` 与 `legacy-workflow-discipline` 分离；不扩大执行、subagent、platform、git 或状态写入边界 |
+| P78-P79 | `scheduler_state_artifact_paydown_lock` | `npm run check:arch` + `node tools/vibe-release-check/index.mjs --suite runtime:state-ledger --quiet --timing` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 373；`unused_baseline_rules=[]`；scheduler fixture 仍限 release-check 临时根；workflow state artifact 文件名、字段和写入 gate 不变 |
+| P82-P86 | `marker_summary_envelope_route_paydown_lock` | touched module `node --check` + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` + planner route smoke | active/new 0，baseline total 不高于 373；`unused_baseline_rules=[]`；roadmap marker strictness、run summary shape、workflow entry envelope、planner artifact write gate 不变；没有真实 unused baseline rule 时不改 baseline 配置 |
+| P87-P91 | `smoke_eval_platform_paydown_lock` | touched module `node --check` + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` + eval/platform catalog smoke | active/new 0，baseline total 不高于 372；`unused_baseline_rules=[]`；Stage 112 smoke marker、eval catalog envelope、platform capability catalog 和 read-only boundary 不变；没有真实 unused baseline rule 时不改 baseline 配置 |
+| P92-P96 | `governance_route_paydown_lock` | touched module `node --check` + governance surface/advice/compatibility smoke + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 371；`unused_baseline_rules=[]`；governance route 只抽纯 mode/flag/route 判定，sidecar 写入、state/artifact IO、打印和 JSON 顶层 envelope 不变；P94/P95 无安全收益时跳过，不改 baseline 配置 |
+| P97-P101 | `learning_audit_readside_paydown_lock` | touched module `node --check` + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `node tools/vibe-runtime/index.mjs learning --list --json --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 371；`unused_baseline_rules=[]`；learning audit split 只移动 read-side summary/show/verify assembly，wrapper 保留 IO 注入、presentation、JSON emit 和 sidecar write gate；没有真实 unused baseline rule 时不改 baseline 配置 |
+| P102-P106 | `init_cli_args_paydown_lock` | touched module `node --check` + `npm run check:arch` + `node tools/vibe-init/index.mjs --target <project-root> --platform auto --check` + `node tools/vibe-init/index.mjs --target <project-root> --platform claude --dry-run --merge=manual` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 370；`unused_baseline_rules=[]`；init split 只移动 CLI argument parsing 与 validity model，entry 保留 usage、install plan、template/file writes、summary、check/dry-run behavior 和 try/catch；没有真实 unused baseline rule 时不改 baseline 配置 |
+| P107-P111 | `lifecycle_cli_args_paydown_lock` | touched module `node --check` + `npm run check:arch` + lifecycle update/repair/uninstall dry-run smokes + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 369；`unused_baseline_rules=[]`；lifecycle split 只移动 CLI argument parsing 与 validity model，entry 保留 usage、managed asset plan、managed block update/remove、config manifest、summary、dry-run/confirm behavior 和 try/catch；没有真实 unused baseline rule 时不改 baseline 配置 |
+| P112-P116 | `lifecycle_summary_model_paydown_lock` | touched module `node --check` + `npm run check:arch` + lifecycle update/repair/uninstall dry-run smokes + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 368；`unused_baseline_rules=[]`；lifecycle summary split 只移动 pure presentation line assembly，entry 保留 lifecycle planning、filesystem write/remove gate、console emission、exit code 和 try/catch；没有真实 unused baseline rule 时不改 baseline 配置 |
+| P117-P121 | `lifecycle_uninstall_action_paydown_lock` | touched module `node --check` + `npm run check:arch` + lifecycle update/repair/uninstall dry-run smokes + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 366；`unused_baseline_rules=[]`；lifecycle uninstall split 只移动 pure action decision model，entry 保留 config/platform resolution、filesystem read/write/remove gate、dry-run/confirm behavior、summary emission 和 try/catch；只在真实 stale baseline exemptions 出现后做 cleanup |
+| P122-P126 | `methodology_gate_output_envelope_paydown_lock` | touched module `node --check` + product/implementation/delivery methodology gate JSON smokes + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 363；`unused_baseline_rules=[]`；methodology split 只移动 read-only gate JSON/text output emission，command wrappers 保留 argument rejection、artifact input validation and domain envelope construction；不改变 top-level envelope shape or state directory behavior |
+| P127-P131 | `init_entry_merge_model_paydown_lock` | touched module `node --check` + `npm run check:arch` + `node tools/vibe-init/index.mjs --target <project-root> --platform auto --check` + `node tools/vibe-init/index.mjs --target <project-root> --platform auto --dry-run` + `node tools/vibe-init/index.mjs --target <project-root> --platform auto --merge=preview` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 362；`unused_baseline_rules=[]`；init entry merge split 只移动 pure managed-block merge decision，entry 保留 template/target filesystem read/write、install plan、config/runtime manifest、summary emission 和 try/catch；不改变 dry-run/check/preview behavior |
+| P132-P136 | `runtime_state_presence_paydown_lock` | touched module `node --check` + product/implementation/architecture methodology gate JSON smokes + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 360；`unused_baseline_rules=[]`；state presence split 只移动 read-only `.vibecoding-state` existence boolean，methodology gates 保留 artifact validation、digest、boundary assertions、JSON top-level envelope and no-write behavior |
+| P137-P141 | `runtime_state_directory_path_regression_lock` | touched module `node --check` + state directory path semantic assertion + import-source census + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 360；`unused_baseline_rules=[]`；state directory split 只移动 pure path model，local JSON input 保留 root/file validation and digest，command wrappers 保留 output envelope and no-write behavior；baseline 持平时只记录防回归，不改 baseline 配置 |
+| P142-P146 | `readonly_local_json_output_envelope_paydown_lock` | touched module `node --check` + JSON config parse + residual symbol assertion + 4-command readonly JSON branch smoke + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 356；`unused_baseline_rules=[]`；readonly output split 只移动 `state_present` 注入与 JSON/text dispatch，4 个 command wrappers 保留 local JSON input validation、domain envelope construction、print behavior and no-write boundary；不改变 top-level envelope shape |
+| P147-P151 | `readonly_local_json_output_envelope_second_wave_paydown_lock` | touched module `node --check` + residual symbol assertion + 4-command readonly JSON branch smoke + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 350；`unused_baseline_rules=[]`；second wave reuses existing readonly output owner and only moves `state_present` injection plus JSON/text dispatch for 4 more command wrappers; wrappers keep local JSON/root validation, domain envelope construction, print behavior and no-write boundary; no new owner, no role override, no top-level envelope shape change |
+| P152-P156 | `readonly_local_json_output_envelope_governance_wave_paydown_lock` | touched module `node --check` + residual symbol assertion + 2-command readonly JSON branch smoke + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 348；`unused_baseline_rules=[]`；governance wave reuses existing readonly output owner and only moves `state_present` injection plus JSON/text dispatch for 2 governance command wrappers; wrappers keep local JSON/root validation, domain envelope construction, print behavior and no-write boundary; no new owner, no role override, no top-level envelope shape change |
+| P157-P161 | `readonly_local_json_output_envelope_permission_platform_wave_paydown_lock` | hook marker JSON assertion + touched module `node --check` + residual symbol assertion + 3-command readonly JSON branch smoke + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 345；`unused_baseline_rules=[]`；permission/platform wave reuses existing readonly output owner and only moves `state_present` injection plus JSON/text dispatch for subagent permission and platform acceptance envelopes; wrappers keep local file/root validation, digest, domain model construction, print behavior and no-write/non-authorizing boundary; adapter hook example marker fix only restores `lightweight routing` closeout contract and does not change hook execution behavior |
+| Round 1 | `release_check_dispatcher_map_paydown_lock` | `node --check tools/vibe-release-check/release-check-dispatch.mjs` + handler map args assertion + `node tools/vibe-release-check/index.mjs --suite fast --quiet` + `npm run check:arch` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run release:fast` | active/new 0，baseline total 不高于 343；release-check dispatcher split only moves command-to-runner mapping into descriptor-driven wiring; `dispatchReleaseCheckCommand`, `commandEntryHandler`, `run` fallback, args/options/settings semantics, suite strictness and output envelope remain unchanged |
+| Round 2 | `release_check_runtime_dispatch_fixture_paydown_lock` | `node --check tools/vibe-release-check/release-check-runtime-dispatch-fixtures.mjs` + `node --check tools/vibe-runtime/runtime-governance-route-model.mjs` + `node tools/vibe-release-check/index.mjs --suite runtime --quiet` + `npm run check:arch` | active/new 0，baseline total 不高于 341；runtime dispatch fixture split only moves handoff payloads into descriptor data while preserving file keys, filenames, payload fields, and cleanupFiles; governance route fixes only restore read-only validation specificity for advice/surface/comparison and do not add write/execution/platform/git/subagent behavior |
+| Round 3 | `release_check_workflow_governance_smoke_suite_paydown_lock` | `node --check tools/vibe-release-check/index.mjs` + `node --check tools/vibe-release-check/release-check-workflow-governance-smoke-suite.mjs` + `node tools/vibe-release-check/index.mjs --suite fast --quiet` + `npm run check:arch` | active/new 0，baseline total 不高于 338；release-check index only keeps CLI/suite/timing/handler wiring; workflow/governance smoke suite preserves command order, assertions, tmp-root cleanup, output envelopes, and failure strictness; stale baseline cleanup removes only the verified unused `tools/vibe-release-check/** :: entry-like-domain-logic` rule |
+| Round 4 | `runtime_doc_marker_specs_paydown_lock` | `node --check tools/vibe-runtime-check/runtime-doc-marker-contracts.mjs` + `node --check tools/vibe-runtime-check/runtime-doc-contract-marker-specs.mjs` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run check:arch` | active/new 0，baseline total 不高于 335；doc marker split only moves marker/fail/fix specs into a named data owner; runner keeps document read/cache and ok/fail loop; stale baseline cleanup removes only the verified unused `tools/vibe-runtime-check/runtime-doc-marker-contracts.mjs` rules |
+| Round 5 | `runtime_tool_readme_marker_specs_paydown_lock` | `node --check tools/vibe-runtime-check/runtime-tool-readme-contracts.mjs` + `node --check tools/vibe-runtime-check/runtime-tool-readme-marker-specs.mjs` + `node tools/vibe-runtime-check/index.mjs --root .` + `npm run check:arch` | active/new 0，baseline total 不高于 332；README/CLI surface marker split only moves marker/fail/fix specs into a named data owner; runner keeps README/source bundle reads and ok/fail loop; stale baseline cleanup removes only the verified unused `tools/vibe-runtime-check/runtime-tool-readme-contracts.mjs` rules |
+| Round 6 | `runtime_cli_evidence_option_specs_paydown_lock` | `node --check tools/vibe-runtime/runtime-cli-evidence-options.mjs` + `node --check tools/vibe-runtime/runtime-cli-evidence-option-specs.mjs` + `node --check tools/vibe-runtime-check/runtime-cli-surface-contracts.mjs` + `node tools/vibe-runtime/index.mjs --help` + `npm run check:arch` | active/new 0，baseline total 不高于 330；CLI evidence option split only moves pure option specs into a named data owner; parser keeps route validation, path resolution, error messages, help behavior, and execution boundary unchanged |
+| Round 7 | `runtime_cli_usage_sections_paydown_lock` | `node --check tools/vibe-runtime/runtime-cli-usage.mjs` + byte-for-byte usage output equivalence check + `npm run check:arch` | active/new 0，baseline total 不高于 328；CLI usage split only moves help text into named section constants; command text, option text, output string, parser behavior, and write/execution surface remain unchanged |
+| Round 8 | `runtime_automation_readonly_envelope_paydown_lock` | `node --check tools/vibe-runtime/runtime-automation-command.mjs` + `node --check tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs` + `node tools/vibe-runtime/index.mjs automation --readiness --json` + `npm run check:arch` | active/new 0，baseline total 不高于 327；automation command reuses the existing read-only local JSON envelope owner for `state_present` and JSON/text dispatch; automation plan, readiness, stage runbook, scriptlet, and one-shot plan keep their top-level envelope shapes and no-write/non-execution boundary |
+| Round 9 | `vibe_compact_cli_contract_paydown_lock` | `node --check tools/vibe-compact/index.mjs` + `node --check tools/vibe-compact/compact-contract.mjs` + `node tools/vibe-compact/index.mjs --help` + pipe-input smoke + help output equivalence check + `npm run check:arch` | active/new 0，baseline total 不高于 326；compact split only moves section config, usage text, and argument parsing into a named contract owner; entry keeps input read, compact scoring/rendering, output, and exit behavior; stale baseline cleanup removes only the verified unused `tools/vibe-compact/index.mjs :: contract-sync` rule |
+| Round 10 | `session_start_boundary_contract_paydown_lock` | `node --check hooks/session-start/session-start.mjs` + `node --check hooks/session-start/session-start-state-boundary-contract.mjs` + `node --check tools/vibe-doctor/index.mjs` + `node hooks/session-start/session-start.mjs --help` + `node hooks/session-start/session-start.mjs --format text --root .` + `node tools/vibe-doctor/index.mjs` + `npm run check:arch` | active/new 0，baseline total 不高于 325；session-start split only moves argument parsing, root/path handling, lightweight routing text, and state boundary text into a named contract owner; hook entry keeps output envelope selection/rendering; doctor only syncs marker source bundle to the new owner and does not change runtime behavior |
+
+收口底线：`runtime-check`、`check:arch`、`release:fast` 通过；按影响范围补 install/behavior/pack/learning/tokens；最后确认 `.tmp`、source `.vibecoding-state`、target `.vibecoding-state` 均 absent。
+
+## Long-term productization task ledger
+
+P54 之后的长期产品化任务按产品问题分组，不按 runtime stage 顺序盲目实现。stage 是证据来源，任务是交付边界。
+
+| 分组 | 任务 | Stage 来源 | 先做什么 | 暂缓什么 |
+| --- | --- | --- | --- | --- |
+| 采用 | P55 / P56 | Stage 126/127/131/134/142/143 | 首次路径、首次会话、installed transcript 验收 | 平台 API、hook 执行、完整 skill 注入 |
+| 证据链 | P57 / P58 | Stage 124/151-156 | 本地 artifact、traceability、task/test/diff/completion digest | 自动跑测试、读取真实 git diff、写业务源码 |
+| 行为体验 | P59 / P60 / P61 | Stage 121/128/132/138/139/144/145 | deterministic behavior contract、体验 dashboard、token context defaults | live eval、模型 judge、embeddings、remote config |
+| 分发和 parity | P62 / P63 | Stage 122/133/137/140/148/P25-P31 | adapter packaging consistency、safe governance vs opt-in parity 表达 | marketplace upload、默认 `execution-enabled`、隐藏 subagent |
+| 收口和治理 | P64 / P65 / P66 | Stage 120/124/146/147 + Technical Debt Register | contributor guardrails、architecture paydown、release evidence matrix | git/PR/push/merge、提高 architecture baseline |
+
+P54 固定保护 `runtime_command_added=false`、`execution_surface_added=false`、`state_directory_created=false`、`platform_api=false`、`model_invocation=false`、`subagent=false`、`git_write=false`、`business_source_write=false`。任何后续任务若需要越过这些边界，必须单独计划、单独评审、单独验收。
+
+## P65 Architecture Paydown Sprint
+
+P65 `p65_architecture_paydown_sprint` 只制定 owner-local extraction 计划，不在本批执行重构。
+
+目标是降低高风险文件继续膨胀的概率，而不是通过提高 baseline 掩盖问题。当前固定验收：`architecture_active_new_warnings=0`、`architecture_baseline_total<=373`、`baseline_raise=false`、`runtime_command_added=false`、`execution_surface_added=false`。
+
+Owner-local extraction map：
+
+| Owner | 当前风险 | Paydown 方向 | 暂缓事项 |
+| --- | --- | --- | --- |
+| `tools/vibe-runtime/runtime-interaction-command.mjs` | interaction wrapper 仍承接多域 command wiring，容易继续吸收 domain detail | 只把 entry/workflow/methodology/completion/learning/tokens 的 presentation 或 pure model glue 移到已有 owner-local module；wrapper 保持薄路由 | 不迁移 execution/source/merge/scheduler/daemon/queue/retry/lease；不改 JSON envelope |
+| `tools/vibe-runtime-check/runtime-doc-marker-contracts.mjs` | stage marker 长表集中，新增产品 marker 容易继续拉长函数 | 后续只允许按 stage family 或 productization registry 拆成具名 marker data module，entry check 只遍历数据 | 不降低 marker 严格度，不删除 negative marker，不把缺 marker 改成 warning |
+| `tools/vibe-release-check/` | suite 多、历史 smoke 多，`index.mjs` 和大 suite 容易重新变成 domain owner | 新增检查优先放对应 suite owner 或 command-manifest metadata；README/reference 只保留索引 | 不新增默认 suite，不改变失败严格度，不让 `index.mjs` 承担 domain logic |
+
+P65 paydown 顺序固定为：`owner_map -> extraction_candidate -> marker_contract -> targeted_validation -> architecture_check`。任何实现前必须先说明 owner、layer、dependency direction、data flow、state lifecycle、contract sync、blast radius 和 risk class。
+
+P65 禁止：`baseline_raise=true`、`active_warning_added=true`、`execution_boundary_expanded=true`、`state_directory_created=true`、`platform_api=true`、`subagent=true`、`git_write=true`、`business_source_write=true`。
+
+## P66 Release Evidence Governance
+
+P66 `p66_release_evidence_governance` 是长期发布证据矩阵，不新增 runtime capability。维护者根据影响范围选择 gate，并记录未跑 gate 的原因，不能把未执行命令写成已通过。
+
+发布前 evidence receipt 至少包含：`runtime_check_passed=true`、`check_arch_passed=true`、`release_fast_selected_or_explained=true`、`architecture_active_new_warnings=0`、`architecture_baseline_total<=371`、`tmp_absent=true`、`source_state_absent=true`、`target_state_absent=true`。
+
+按影响范围选择：docs/marker 跑 `runtime-check`、`check:arch`、`git diff --check`；install/adapter 跑 `release:install` 和 plugin pack dry-run；behavior/closeout 跑 `release:behavior`；learning/token 跑 `release:learning` 或 `release:tokens`；architecture paydown 跑 `check:arch` 和 touched module `node --check`。
+
+P66 禁止：`release_suite_added=true`、`top_level_envelope_changed=true`、`auto_cleanup=true`、`git_write=true`、`commit=true`、`push=true`、`pr=true`、`platform_api=true`、`subagent=true`、`model_invocation=true`。
+
+## 极简 owner map
+
+| 维护问题 | owner 文件 | 边界 |
+| --- | --- | --- |
+| `--timing` 输出、耗时摘要、维护者决策辅助 | `tools/vibe-release-check/release-check-timing.mjs` | 只消费本次 recorded timing，不改变 suite 选择或失败严格度 |
+| release-check CLI wiring 和 suite dispatch | `tools/vibe-release-check/index.mjs` | 保持入口编排，不继续扩张为 domain owner |
+| install suite 命令集合和 installed marker smoke | `tools/vibe-release-check/release-check-install-suite.mjs` | 安装验证 owner，不承载 runtime-check diagnostics 格式化 |
+| install placement diagnostics 和 contract 自保护 | `tools/vibe-runtime-check/release-check-install-placement-contracts.mjs` | diagnostics summary/detail 输出 owner，不改变默认 gate 语义 |
+
+## 明确不做
+
+- 不新增 required gate。
+- 不新增 runtime capability。
+- 不改变 release suite 范围。
+- 不降低失败严格度。
+- 不自动运行测试、workflow skill 或业务命令。
+- 不创建 `.vibecoding-state/`。
+- 不提交、push、创建 PR 或 merge。
+- 不调用 subagent、MCP 或平台 API。
+
+## 下一轮开始条件
+
+只有满足以下条件才进入实现：
+
+1. 用户明确选择 A 或 B。
+2. 明确受影响 owner 文件。
+3. 明确默认输出、diagnostics 输出和 release gate 的不变项。
+4. 明确验证命令和可接受的输出差异。
+
+若任一条件不满足，只更新规划，不改 runtime 或 release-check 行为。