@jtf19/vibecoding-kit 0.1.0

package/docs/architecture-debt-burndown.md

@@ -0,0 +1,537 @@
+# Architecture Debt Burndown
+
+本文件把 `architecture.boundaries.json` 中的 `baselinedWarnings` 作为架构债账本，而不是永久豁免列表。
+
+## 当前基线
+
+来源：`npm run check:arch` / `node tools/vibe-architecture-check/index.mjs --root . --json` 当前输出。
+
+- active warning：0
+- baselined warning：0（current ceiling，不是 target floor；后续不允许无说明增长）
+- by-rule ceiling：以当前非零 tracked rule family 计数为上限；总数不增长但 family 迁移同样视为回归
+- source of truth：`architecture.boundaries.json` + `tools/vibe-runtime-check/architecture-tool-contracts.mjs`
+- 验证命令：`npm run check:arch`、`node tools/vibe-runtime-check/index.mjs --root .`
+
+## 规则族分布
+
+| rule | count | 当前处理策略 |
+| --- | ---: | --- |
+| `risk-zone-touch` | 0 | 已燃尽；后续涉及 P0 边界时必须通过明确 owner 和强验证处理，不回涨。 |
+| `contract-sync` | 0 | 已燃尽；CLI / README / runtime-check / release-check 合同同步不得回涨。 |
+| `state-boundary` | 0 | 已燃尽；后续状态路径、读、写、验证、展示不要混在 command wrapper；只迁移具名 state owner，不移动确认 gate。 |
+| `long-function` | 0 | 已燃尽；后续只抽 named domain module，不新增 generic helper。 |
+| `entry-like-domain-logic` | 0 | 已燃尽；entry / dispatcher / check runner 只保留 wiring/reporting。 |
+| `file-role-budget` | 0 | 已燃尽；大 command wrapper 继续通过具名 owner 拆分控制行数。 |
+| `function-density` | 0 | 已燃尽；按领域拆小，而不是继续加参数。 |
+| `factory-pressure` | 0 | 已燃尽；不允许通过大 deps factory 回涨。 |
+| `io-purity` | 0 | 已燃尽；core 与 IO / presentation 分离。 |
+| `owner-drift` | 0 | 已燃尽；不允许混合领域 owner 回涨。 |
+| `evolution-pressure` | 0 | 已燃尽；不允许未归属演进债回涨。 |
+| `dependency-direction` | 0 | 已燃尽；release-check 内部 command manifest metadata 依赖只允许同 owner 的窄化形态，不能回涨。 |
+
+### 当前小批次：runtime command owner baseline 燃尽
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| retry gate owner split | 24 | 23 | `runtime-retry-command.mjs`、`runtime-bounded-attempt-policy-model.mjs`、`runtime-retry-run-gate-model.mjs` | retry gate policy/run gate 移动到具名 owner；active warning 保持 0 | 不改变 retry CLI gate、执行许可、JSON envelope 或 write boundary |
+| observability owner split | 23 | 22 | `runtime-observability-command.mjs`、`runtime-observability-readiness-model.mjs`、`runtime-observability-presentation.mjs` | readiness/health 计算和展示输出分别移动到具名 owner；runtime-check marker source 同步 | 不改变 observability/readiness CLI 输出、snapshot write gate 或 marker strictness |
+| recovery state lifecycle split | 22 | 21 | `runtime-recovery-command.mjs`、`runtime-recovery-state-lifecycle-model.mjs` | recovery package/apply/audit lifecycle 移动到 state owner；旧 command `risk-zone-touch` baseline 真实 unused 后删除 | 不改变 recovery preview/classify/apply/audit envelope、confirm write gate、retry package artifact 或 scheduler/lock safety gate |
+| release state lifecycle split | 21 | 20 | `runtime-release-command.mjs`、`runtime-release-state-lifecycle-model.mjs` | task-commit readiness/gate sidecar 与 release `state_present` 判断移动到 state owner；旧 command `state-boundary` baseline 真实 unused 后删除 | 不改变 release gate/notes/commit guard/closeout/task-commit JSON shape、confirm write gate 或 git/platform/subagent 禁止边界 |
+| workflow ledger state lifecycle split | 20 | 18 | `runtime-workflow-ledger-command.mjs`、`runtime-workflow-ledger-state-lifecycle-model.mjs` | task/root artifact 写入和 reset 删除移动到 state owner；旧 command `risk-zone-touch` 与 `state-boundary` baseline 真实 unused 后删除 | 不改变 workflow ledger task/artifact/next/reset CLI shape、状态目录路径、artifact 文件名、dry-run/write 语义或 dispatch confirm gate |
+| reply artifact lifecycle split | 18 | 17 | `runtime-reply-command.mjs`、`runtime-reply-artifact-lifecycle-model.mjs` | reply source manifest、latest artifact descriptor 与 reply sidecar artifact 写入移动到 state owner；旧 command `risk-zone-touch` baseline 真实 unused 后删除 | 不改变 reply draft/review/approval/outbox/send/list/show/verify JSON shape、confirm write gate、external delivery disabled 或 model/platform/subagent/git 禁止边界 |
+| dispatch state lifecycle split | 17 | 15 | `runtime-dispatch-command.mjs`、`runtime-dispatch-state-lifecycle-model.mjs` | dispatch event 写入、claim/ack 状态写入与 claim envelope state_present 判断移动到 state owner；旧 command `risk-zone-touch` 与 `state-boundary` baseline 真实 unused 后删除 | 不改变 dispatch intent/confirm/pickup/audit/claim/ack JSON shape、确认 gate、手动 pickup 语义、自动执行禁用或 git/worktree/platform/subagent/MCP 禁止边界 |
+| lease state lifecycle split | 15 | 13 | `runtime-lease-command.mjs`、`runtime-lease-state-lifecycle-model.mjs` | lease audit summary、running execution/lock 读取、scheduler lease write/complete 生命周期移动到 state owner；旧 command `risk-zone-touch` 与 `state-boundary` baseline 真实 unused 后删除 | 不改变 leases list/show/verify JSON shape、read-only audit gate、scheduler lease active/complete JSON shape、一次性 write gate 或 runtime/platform/subagent/git/worktree 禁止边界 |
+| daemon state lifecycle split | 13 | 11 | `runtime-daemon-command.mjs`、`runtime-daemon-state-lifecycle-model.mjs` | daemon run/loop/stop/audit artifact lifecycle 移动到 state owner；旧 command `risk-zone-touch` 与 `state-boundary` baseline 真实 unused 后删除 | 不改变 daemon dry-run/once/loop/stop/audit JSON shape、确认 gate、foreground-only loop、scheduler scan delegation 或 runtime/platform/subagent/git/worktree 禁止边界 |
+| queue state lifecycle split | 11 | 9 | `runtime-queue-command.mjs`、`runtime-queue-state-lifecycle-model.mjs` | queue scan/snapshot/audit artifact lifecycle 移动到 state owner；旧 command `risk-zone-touch` 与 `state-boundary` baseline 真实 unused 后删除 | 不改变 queue scan/list/show/verify JSON shape、确认写入 gate、promotion preview、candidate/approval/profile/policy/lock 判定或 runtime/platform/subagent/git/worktree 禁止边界 |
+| scheduler artifact lifecycle split | 9 | 8 | `runtime-scheduler-command.mjs`、`runtime-scheduler-state-lifecycle-model.mjs` | scheduler plan/run artifact 路径与直接 JSON 写入移动到 state owner；旧 command `state-boundary` baseline 真实 unused 后删除 | 不改变 scheduler plan/hook-plan/once/recovery JSON shape、确认 gate、lease/execution/recovery 调用顺序或 runtime/platform/subagent/git/worktree 禁止边界 |
+| workflow alias boundary text split | 8 | 7 | `runtime-interaction-command.mjs`、`runtime-workflow-alias-boundary-text.mjs` | workflow close-loop / next-evidence alias action boundary text 移动到只读 text owner；旧 interaction command `risk-zone-touch` baseline 真实 unused 后删除 | 不改变 interaction workflow alias JSON shape、read-only/no-execution/no-write action 文案内容、state lifecycle、completion/learning/methodology write gate 或 scheduler/daemon/retry 行为边界 |
+| execution state write lifecycle split | 7 | 6 | `runtime-execution-command.mjs`、`runtime-execution-state-write-lifecycle-model.mjs` | approval lifecycle sidecar、controlled auto-run lock、execution envelope/payload direct write lifecycle 与 execution event path 移动到 state owner；旧 execution command `state-boundary` baseline 真实 unused 后删除 | 不改变 execute preflight/confirm/run/auto-run JSON shape、approval lifecycle transition语义、atomic temp write/rename、confirm gate、runtime action policy、git/worktree/platform/subagent 禁止边界 |
+| subagents artifact owner split | 6 | 5 | `runtime-subagents-command.mjs`、`runtime-subagents-stage-artifact-model.mjs`、`runtime-subagents-tail-routing-model.mjs` | Stage37/38 run/result/review artifact envelope 与 tail routing 移动到具名 owner；wrapper 行数收敛到 commandWrapper budget 内，旧 subagents command `file-role-budget` baseline 真实 unused 后删除 | 不改变 subagents eligibility/dispatch/run/result/review JSON shape、confirm write gate、platform session proxy、scheduler/lease artifact lifecycle、external subagent/platform/API/git/worktree 禁止边界 |
+| source merge apply boundary split | 5 | 4 | `runtime-source-merge-artifacts.mjs`、`runtime-source-merge-apply-boundary-model.mjs` | Stage45-48 no-background safety 字段与 Stage48 controlled marker apply 写入移动到 source-merge command owner；旧 source merge artifacts `risk-zone-touch` baseline 真实 unused 后删除 | 不改变 source candidate/sandbox/verification/readiness/approval/apply JSON shape、confirm apply gate、base sha drift guard、allowlisted marker target、artifact writes、git/commit/push/PR/force 禁止边界 |
+| execution command owner split | 4 | 3 | `runtime-execution-command.mjs`、`runtime-execution-readonly-artifacts.mjs`、`runtime-execution-safety-artifacts.mjs`、`runtime-execution-plan-artifacts.mjs`、`runtime-execution-run-preflight-artifacts.mjs`、`runtime-execution-candidate-approval-artifacts.mjs`、`runtime-execution-presentation.mjs` | execution audit/read-only validation、safety snapshots、plan/history/preflight envelope、candidate/approval envelope 和 presentation 输出移动到具名只读 owner；wrapper 行数收敛到 commandWrapper budget 内，旧 execution command `file-role-budget` baseline 真实 unused 后删除 | 不改变 execute preflight/candidate/approval/confirm/run/auto-run JSON shape、approval lifecycle transition、controlled auto-run lock、execution payload write、confirm gate、runtime action policy、git/worktree/platform/subagent 禁止边界 |
+| execution risk owner split | 3 | 2 | `runtime-execution-command.mjs`、`runtime-execution-candidate-approval-artifacts.mjs` | candidate/approval write helpers 与 controlled auto-run approval envelope 移动到既有 execution candidate/approval owner；wrapper 只保留 execute mode orchestration，旧 execution command `risk-zone-touch` baseline 真实 unused 后删除 | 不改变 execute candidate/approval/auto-run JSON shape、approval lifecycle write、controlled auto-run lock、execution run completion、runtime action policy、git/worktree/platform/subagent 禁止边界 |
+| scheduler risk owner split | 2 | 1 | `runtime-scheduler-command.mjs`、`runtime-scheduler-risk-artifacts.mjs`、`runtime-scheduler-state-lifecycle-model.mjs` | scheduler policy/budget/safety/plan/hook-plan/audit/once/recovery envelope 与 orchestration implementation 移动到具名 scheduler risk owner；wrapper 只保留 contract marker 和 factory delegation，旧 scheduler command `risk-zone-touch` baseline 真实 unused 后删除 | 不改变 scheduler plan/hook-plan/once/recovery JSON shape、确认 gate、lease/execution/recovery 调用顺序、runtime/platform/subagent/git/worktree 禁止边界 |
+| subagents risk owner split | 1 | 0 | `runtime-subagents-command.mjs`、`runtime-subagents-risk-artifacts.mjs`、`runtime-subagents-stage-artifact-model.mjs`、`runtime-subagents-tail-routing-model.mjs` | subagents eligibility/dispatch/audit/platform-session/run/result/review orchestration implementation 移动到具名 subagents risk owner；wrapper 只保留 contract marker 和 factory delegation，旧 subagents command `risk-zone-touch` baseline 真实 unused 后删除 | 不改变 subagents eligibility/dispatch/run/result/review/platform-session JSON shape、confirm write gate、scheduler/lease artifact lifecycle、external subagent/platform/API/git/worktree 禁止边界 |
+
+### Batch P67-P71：历史债务下降证据
+
+P67-P71 只接受真实 owner 收敛后的下降；没有通过提高 ceiling、删除仍有效规则、弱化 runtime-check 或 release-check 来降低数字。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P67 | 402 | 401 | `tools/vibe-runtime/runtime-subagents-command.mjs` | 抽出 `runtime-subagents-platform-session-proxies.mjs`，wrapper 只保留平台 session proxy 组合边界 | 不扩 subagent dispatch、session、platform API、scheduler、git 或 business write 行为面 |
+| P68 | 401 | 400 | `tools/vibe-runtime/runtime-adapter-packaging-consistency-command.mjs` | 收敛 adapter packaging consistency 的合同同步 marker 与 JSON envelope 绑定 | `execution-enabled` 仍是独立 config-gated profile，不与 `legacy-workflow-discipline` 混合 |
+| P69 | 400 | 397 | `tools/vibe-release-check/release-check-runtime-flow-smoke.mjs` | runtime dispatch smoke 拆为 flow owner，fixture config 写入仅限 release-check 临时根 | 不改变 suite 选择、失败严格度、命令顺序、quiet/timing 语义或顶层输出 envelope |
+| P70 | 397 | 394 | `tools/vibe-init/index.mjs`、`tools/vibe-plugin-pack/*` | init presentation 小幅收敛；plugin pack CLI parse 与 manifest assembly 拆为具名 owner | 不改变 install write 默认、plugin pack `--dry-run` / `--check` / write 边界 |
+| P71 | 394 | 394 | `architecture.boundaries.json` | 只删除 P70 后已无匹配项的 unused baseline rules；当前 JSON 显示 `unused_baseline_rules=[]` | 仍有真实 warning 的 baseline rule 不删除；active/new warning 必须保持 0 |
+
+P71 当前 JSON 证据：`warning_count=0`、`baselined_warning_count=394`、`unused_baseline_rules=[]`。
+
+### Batch P73-P76：state / contract / fixture owner 收敛证据
+
+P73-P76 延续同一原则：先做真实 owner 收敛，再用 `check:arch` 观察 warning 源消失；只有 `unused_baseline_rules` 出现后才删除对应 baseline rule。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P73 | 394 | 391 | `tools/vibe-runtime/runtime-state-paths.mjs`、`state-*-paths.mjs` | state path / artifact filename 低风险映射拆到 `state-core-paths.mjs`、`state-extension-paths.mjs`、`state-safe-paths.mjs`，`runtime-state-paths.mjs` 保持兼容 owner | 不新增 `.vibecoding-state` 创建点，不改变 `writeWorkflow` / `writeJsonEnvelope` / `writeStateArtifact` 语义 |
+| P75 | 391 | 384 | `tools/vibe-release-check/release-check-runtime-*-fixtures.mjs` | handoff/task fixture 文本数据化到 `*-fixture-specs.mjs`，fixture builder 保留原字段和路径列表；doctor marker aggregation 同步新 spec owner | 不改变 smoke suite 顺序、失败严格度、quiet/timing 行为或顶层输出 envelope |
+| P74 | 384 | 377 | `tools/vibe-runtime/runtime-contract-marker-registry.mjs`、`runtime-subagent-boundary-contracts.mjs` | 高风险 command owner 绑定共享 contract marker registry；Stage 35/36 subagent 边界合同抽到窄 owner，runtime surface 聚合同步该 owner | `legacy-workflow-discipline` 与 `execution-enabled` 继续分离；不扩大 execution/scheduler/daemon/queue/retry/lease/source/merge/subagent/platform/git 行为面 |
+| P76 | 377 | 377 | `architecture.boundaries.json`、docs | `npm run check:arch` 出现真实 `unused_baseline_rules=[tools/vibe-runtime/runtime-state-paths.mjs :: owner-drift]` 后，删除该已无匹配项 baseline rule，并更新维护证据；实际 warning count 不变 | 不删除仍有真实 warning 的 baseline rule；active/new warning 必须保持 0 |
+
+P76 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=377`、`unused_baseline_rules=[]`。
+
+### Batch P77-P79：scheduler fixture / workflow state artifact owner 收敛证据
+
+P77 的 subagent command eligibility/bridge 抽取尝试已取消：该路径导致 baseline 回涨，不纳入本批收口。P78-P79 只记录已通过验证的真实 owner 收敛；没有改动顶层输出 envelope、执行许可、状态目录创建语义或 release-check 失败严格度。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P78 | 377 | 375 | `tools/vibe-release-check/release-check-runtime-scheduler-fixtures.mjs`、`release-check-runtime-scheduler-fixture-specs.mjs` | scheduler fixture spec/text 数据化到具名 spec owner；fixture owner 保留命令顺序、临时根写入边界、JSON 读取和断言执行 | 不改变 scheduler fixture 命令顺序、profile 行为、临时根范围、输出 envelope 或 release-check strictness |
+| P79 | 375 | 373 | `tools/vibe-runtime/runtime-workflow-state-helpers.mjs`、`runtime-workflow-state-artifacts.mjs` | workflow state artifact 文本生成移动到窄 artifact owner；state helper 保留读写生命周期、validation、summary 组合和原 artifact 文件名/字段 | 不新增 `.vibecoding-state` 创建点，不改变 workflow state JSON shape、artifact 文案、确认 gate 或 write helper 语义 |
+
+P79 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=373`、`unused_baseline_rules=[]`。
+
+### Batch P82-P86：marker / summary / envelope / route model 收敛证据
+
+P82-P85 处理的是 owner 边界和防回归证据：本批没有通过修改 baseline 数字、删除 marker、弱化 release-check 或移动写入 gate 获取下降。P86 只在 `unused_baseline_rules` 真实出现时才评审 baseline narrowing；本批当前输出仍为 `unused_baseline_rules=[]`，因此不改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P82 | 373 | 373 | `tools/vibe-runtime-check/runtime-doc-marker-contracts.mjs`、`runtime-roadmap-marker-specs.mjs` | roadmap marker spec 数据移动到具名 spec owner；check runner 保留文档读取、marker strictness 和 ok/fail 语义 | 不删除 roadmap marker，不降低缺 marker 失败严格度，不改变 runtime-check 输出合同 |
+| P83 | 373 | 373 | `tools/vibe-release-check/release-check-runtime.mjs`、`release-check-run-summary.mjs` | release-check run summary / diagnostics payload 组合移动到具名 owner；runtime owner 保留 `.tmp` 生命周期、spawn、quiet/timing 和 summary 写入边界 | 不改变 command order、failure strictness、`.tmp` 收口语义、summary JSON 字段或 timing 输出 shape |
+| P84 | 373 | 373 | `tools/vibe-runtime/runtime-interaction-command.mjs`、`runtime-workflow-entry-envelopes.mjs` | workflow entry / receipt / start / advice read-only envelope 组合移动到窄 owner；interaction wrapper 保留 root/state 检查和 command binding | 不改变 Stage 78/91/92/93 顶层 envelope、digest、action 文案或 no-write/no-execution markers |
+| P85 | 373 | 373 | `tools/vibe-runtime/runtime-control-plane-planning-command.mjs`、`runtime-planner-route-model.mjs` | planner route 纯判定模型移动到具名 owner；planning command 继续负责 input 读取、artifact/state path、confirm/write gate 和 CLI binding | 不移动 planner artifact 写入、state directory 生成、Stage 49 schema、digest 或 followup gate |
+| P86 | 373 | 373 | docs / evidence | `npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=373`、`unused_baseline_rules=[]`；只更新维护证据，不修改 baseline 配置 | active/new warning 必须保持 0；没有真实 unused baseline rule 时不做 baseline narrowing |
+
+P86 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=373`、`unused_baseline_rules=[]`。
+
+### Batch P87-P91：release smoke / eval catalog / platform metadata owner 收敛证据
+
+P87-P90 先做只读 census，再选择能让真实 warning 消失且不扩大 runtime 行为面的窄 owner split。P91 当前输出为 `unused_baseline_rules=[]`，因此不修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P87 | 373 | 373 | read-only census | `npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=373`；候选热点确认 `release-check-stage103-118-smoke.mjs`、`runtime-control-plane-evals-command.mjs`、`runtime-platform-command.mjs` | 不编辑源码；active/new warning 必须保持 0 |
+| P88 | 373 | 373 | `tools/vibe-release-check/release-check-stage103-118-smoke.mjs`、`release-check-stage103-118-smoke-specs.mjs` | Stage 112 review smoke 的 JSON marker 与 text expectation 移动到具名 spec owner；原 smoke wrapper 保留 `.tmp` 生命周期、run 顺序和失败严格度 | 不改变 review intake/resolution 输出 marker、`.tmp` cleanup、release smoke 命令顺序或顶层 envelope |
+| P89 | 373 | 373 | `tools/vibe-runtime/runtime-control-plane-evals-command.mjs`、`runtime-eval-catalog-model.mjs` | eval catalog suites、Stage 89 behavior pack case ids/coverage、transcript fixtures 移动到纯 model owner；`evals --catalog --json --root .` 输出 `state_present=false` | 不移动 eval artifact 读写、state path、digest、validate/write gate、JSON/text 输出或 command option gate |
+| P90 | 373 | 372 | `tools/vibe-runtime/runtime-platform-command.mjs`、`runtime-platform-capability-model.mjs` | platform capability catalog、capability projection、session approval policy 移动到纯 model owner；`platforms --catalog --json --root .` 保持 read-only catalog 输出 | 不触碰 session approval artifact read/write、confirm gate、adapter acceptance delegated command、platform API、subagent dispatch 或 git boundary |
+| P91 | 372 | 372 | docs / evidence | `npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=372`、`unused_baseline_rules=[]`；只更新证据，不修改 baseline 配置 | 没有真实 unused baseline rule 时不做 baseline narrowing；active/new warning 必须保持 0 |
+
+P91 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=372`、`unused_baseline_rules=[]`。
+
+### Batch P92-P96：governance route owner 收敛与 baseline review
+
+P92-P96 在 P87-P91 脏工作区基础上继续，不回退上一轮文件。P93 只抽取 governance command 的纯路由和 flag 判定；wrapper 继续保留 root 解析、envelope 生成、打印、sidecar 写入和 artifact/state IO。P94/P95 已评估但跳过：窄拆无法真实消除当前 warning，扩大拆分会触碰高风险 IO/write 边界或扩散误触发词。P96 当前 `unused_baseline_rules=[]`，因此不修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P92 | 372 | 372 | read-only census | `npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=372`、`unused_baseline_rules=[]`；确认 P87-P91 dirty 文件作为当前基线继续 | 不编辑源码；不把上一轮未提交文件回退或误判为无关变更 |
+| P93 | 372 | 371 | `tools/vibe-runtime/runtime-governance-command.mjs`、`runtime-governance-route-model.mjs` | governance mode/flag validation 与 route decision 移动到具名 route model；补本地 contract marker 后 `npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=371`、`unused_baseline_rules=[]` | 不移动 governance sidecar 写入、state/artifact IO、`writeJsonEnvelope`、打印行为或 JSON 顶层 envelope |
+| P94 | 371 | 371 | evaluated / skipped | governance advice 与 runtime surface 候选拆分无法消除当前 function-density/file-role-budget，且可能扩散 risk-zone 误触发；本批不实施 | 不为了数字拆分而增加新风险词或新 owner 面 |
+| P95 | 371 | 371 | evaluated / skipped | control-plane release/feedback 窄拆无法让大文件或函数密度 warning 消失；完整拆分会扩大 release gate / feedback ledger artifact IO 边界；本批不实施 | 不移动 eval/planner artifact 读取、digest、validate/write gate 或 feedback ledger 写入 |
+| P96 | 371 | 371 | docs / evidence | `node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=371`、`unused_baseline_rules=[]`；只更新维护证据，不修改 baseline 配置 | 没有真实 unused baseline rule 时不做 baseline narrowing；active/new warning 必须保持 0 |
+
+P96 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=371`、`unused_baseline_rules=[]`。
+
+### Batch P97-P101：learning audit read-side owner split 与防回归证据
+
+P97-P101 先做只读 census，再选择 `runtime-interaction-command.mjs` 的 learning audit 读侧逻辑作为低风险 owner split。P99 新增 owner 只承接 read-side audit summary / show / verify envelope assembly；wrapper 继续保留 CLI wiring、reader/resolver/validator 注入、presentation、`writeJsonEnvelope` 和所有 learning sidecar 写入 gate。P100 发现 runtime-check domain map 需要同步新 owner，最终通过 owner registry + domain scanner 最小修复完成合同同步；本批 `unused_baseline_rules=[]`，不修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P97 | 371 | 371 | read-only census | `npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=371`、`unused_baseline_rules=[]`；工作区起点为 `master...origin/master [ahead 2]` | 不编辑源码；不修改 baseline 配置 |
+| P98 | 371 | 371 | evaluated owner selection | 只读评估后选择 interaction learning audit read-side split；暂缓 platform session、subagent、runtime entry、init 等更高风险 owner | 不触碰 platform session、subagent dispatch、execution、scheduler、daemon、queue、retry、lease、source apply、merge、git 或 API 边界 |
+| P99 | 371 | 371 | `tools/vibe-runtime/runtime-interaction-command.mjs`、`runtime-learning-audit-model.mjs` | learning artifact summary / audit envelope 移动到具名 read-side owner；`learning --list --json --root .` 保持 `mode=learning-list`、`ok=true`，无 learning artifact 时不创建持久 state | 不改变 learning JSON 顶层字段、artifact 后缀、错误文案、action no-write/no-execution 边界或 learning sidecar 写入 gate |
+| P100 | 371 | 371 | `runtime-command-surface-registry.mjs`、`runtime-entry-size-contracts.mjs` | domain map 同步新 owner；domain scanner 支持 owner-local factory 内函数声明；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=371`，`node tools/vibe-runtime-check/index.mjs --root .` 输出 `718 ok, 0 warn, 0 fail` | 不接受 baseline 回升；曾出现 372 的 registry 同步形态已撤回并改为等行数同步 |
+| P101 | 371 | 371 | docs / evidence | `npm run release:fast` 通过；`.tmp` 为验证临时产物并已清理；source/target `.vibecoding-state` 均 absent；`git diff --check` 仅 CRLF warning | 没有真实 unused baseline rule 时不做 baseline narrowing；本批只记录防回归证据，不伪造数值燃尽 |
+
+P101 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=371`、`unused_baseline_rules=[]`。
+
+### Batch P102-P106：init CLI args owner split 与真实 long-function 燃尽
+
+P102-P106 从 P101 clean/ahead 3 起点继续，先只读 census，再选择 `tools/vibe-init/index.mjs` 的 `parseArgs` 作为低风险 owner split。P105 新增 `tools/vibe-init/init-cli-args.mjs` 只承接 CLI 参数解析、默认选项、校验和 target path normalize；`index.mjs` 继续保留 usage、install plan、模板/文件写入、check/dry-run 输出、summary 和 entry try/catch。首次拆分出现 active `contract-sync` 后，通过新 owner 本地 contract marker 最小补齐合同同步证据；本批 `unused_baseline_rules=[]`，不修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P102 | 371 | 371 | read-only census | `npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=371`、`unused_baseline_rules=[]`；工作区起点为 `master...origin/master [ahead 3]` | 不编辑源码；不修改 baseline 配置 |
+| P103 | 371 | 371 | candidate sizing | 只读评估后确认 `vibe-init` 的 CLI parse 是低风险纯参数模型，且比 interaction/platform/subagent 候选更可能真实跨 long-function 阈值 | 不触碰 install write plan、runtime opt-in manifest、模板 merge、platform/session/subagent/execution/git/API 边界 |
+| P104 | 371 | 371 | owner freeze | 冻结新增 owner `tools/vibe-init/init-cli-args.mjs`；scope 限定为 argument parsing 与 validity model；`usage` 暂留 entry wrapper 以降低新 owner 表面积 | 不改变 `vibe-init` 顶层输出、默认 merge/dry-run/check 行为或 target normalization 语义 |
+| P105 | 371 | 370 | `tools/vibe-init/index.mjs`、`init-cli-args.mjs` | `parseArgs` 移到具名 owner，entry 通过注入 `path.resolve` 保持 target normalize；补本地 contract marker 后 `npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=370`、`unused_baseline_rules=[]` | 不新增 `.vibecoding-state` 创建点；`execution-enabled` 仍不等于 `legacy-workflow-discipline`；启用 runtime manifest 仍只是 opt-in metadata，不启动动作 |
+| P106 | 370 | 370 | docs / evidence | `node --check`、`vibe-init --check`、`vibe-init --dry-run`、`node tools/vibe-runtime-check/index.mjs --root .`、`npm run release:fast` 均通过；只记录真实 baseline 下降 | active/new warning 必须保持 0；没有真实 unused baseline rule 时不做 baseline narrowing |
+
+P106 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=370`、`unused_baseline_rules=[]`。
+
+### Batch P107-P111：lifecycle CLI args owner split 与真实 long-function 燃尽
+
+P107-P111 从 clean `master...origin/master` 起点继续，选择 `tools/vibe-lifecycle/index.mjs` 的 `parseArgs` 作为低风险 owner split。P109 新增 `tools/vibe-lifecycle/lifecycle-cli-args.mjs` 只承接 lifecycle CLI 参数解析、默认选项、命令/platform/profile 校验和 root normalize；`index.mjs` 继续保留 usage、managed asset plan、managed block update/remove、config manifest、summary、dry-run/confirm write gate 和 entry try/catch。本批 `unused_baseline_rules=[]`，不修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P107 | 370 | 370 | read-only census | `git status -sb --untracked-files=all` 显示 clean；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=370`、`unused_baseline_rules=[]` | 不编辑源码；不修改 baseline 配置 |
+| P108 | 370 | 370 | owner freeze | 冻结新增 owner `tools/vibe-lifecycle/lifecycle-cli-args.mjs`；scope 限定为 argument parsing、validity model 和 root normalize | 不改变 lifecycle update/repair/uninstall 顶层输出、默认 dry-run、confirm gate 或 managed asset/block 写入边界 |
+| P109 | 370 | 369 | `tools/vibe-lifecycle/index.mjs`、`lifecycle-cli-args.mjs` | `parseArgs` 移到具名 owner，entry 通过注入 `process.cwd` 和 `path.resolve` 保持默认 root 与 normalize；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=369`、`unused_baseline_rules=[]` | 不新增 `.vibecoding-state` 创建点；uninstall 仍只 preserve `.vibecoding-state/`；不触碰 runtime execution/subagent/platform/git/API 边界 |
+| P110 | 369 | 369 | validation / evidence | `node --check`、lifecycle update/repair/uninstall dry-run smokes、`node tools/vibe-runtime-check/index.mjs --root .`、`npm run release:fast` 均通过 | dry-run 仍不写目标；confirm/yes 仍是显式写入 gate；managed block/user content 保护不变 |
+| P111 | 369 | 369 | docs / evidence | 只记录真实 baseline 下降；`architecture.boundaries.json` 不变，因为 `unused_baseline_rules=[]` | active/new warning 必须保持 0；没有真实 unused baseline rule 时不做 baseline narrowing |
+
+P111 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=369`、`unused_baseline_rules=[]`。
+
+### Batch P112-P116：lifecycle summary model owner split 与真实 long-function 燃尽
+
+P112-P116 从 clean `master...origin/master [ahead 1]` 起点继续，选择 `tools/vibe-lifecycle/index.mjs` 的 `printSummary` 作为低风险 presentation model split。P114 新增 `tools/vibe-lifecycle/lifecycle-summary-model.mjs` 只承接 lifecycle summary 行生成、action counts、impact summary、severity/action line 和 next manual action；`index.mjs` 继续保留 lifecycle planning、filesystem write/remove gate、CLI output emission、exit code 和 try/catch。本批 `unused_baseline_rules=[]`，不修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P112 | 369 | 369 | read-only census | `git status -sb --untracked-files=all` 显示 clean/ahead 1；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=369`、`unused_baseline_rules=[]` | 不编辑源码；不修改 baseline 配置 |
+| P113 | 369 | 369 | owner freeze | 冻结新增 owner `tools/vibe-lifecycle/lifecycle-summary-model.mjs`；scope 限定为 lifecycle summary 的纯展示行模型 | 不改变 lifecycle update/repair/uninstall planning、dry-run/confirm gate、managed asset/block 写入边界 |
+| P114 | 369 | 368 | `tools/vibe-lifecycle/index.mjs`、`lifecycle-summary-model.mjs` | `printSummary` 缩为 thin wrapper，summary model 生成原 summary 文案、空行、action severity、counts 和 next manual action；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=368`、`unused_baseline_rules=[]` | 不新增 `.vibecoding-state` 创建点；summary owner 不依赖 filesystem、doctor、runtime-check、release-check 或 CLI parser |
+| P115 | 368 | 368 | validation / evidence | `node --check`、lifecycle update/repair/uninstall dry-run smokes、`node tools/vibe-runtime-check/index.mjs --root .`、`npm run release:fast` 均通过；`.tmp`、source state、target state 均 absent；`git diff --check` 仅 CRLF warning | dry-run 仍不写目标；confirm/yes 仍是显式写入 gate；managed block/user content 保护不变 |
+| P116 | 368 | 368 | docs / evidence | 只记录真实 baseline 下降；`architecture.boundaries.json` 不变，因为 `unused_baseline_rules=[]` | active/new warning 必须保持 0；没有真实 unused baseline rule 时不做 baseline narrowing |
+
+P116 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=368`、`unused_baseline_rules=[]`。
+
+### Batch P117-P121：lifecycle uninstall action model owner split 与 stale baseline narrowing
+
+P117-P121 从 clean `master...origin/master` 起点继续，选择 `tools/vibe-lifecycle/index.mjs` 的 uninstall action 判定作为低风险纯模型 split。P120 新增 `tools/vibe-lifecycle/lifecycle-uninstall-plan-model.mjs` 只承接 entry block 与 kit directory 的 action decision；`index.mjs` 继续保留 config 读取、platform 展开、filesystem read/write/remove gate、dry-run/confirm gate、summary 输出和 try/catch。拆分后真实出现 stale lifecycle historical exemptions，已仅删除 `tools/vibe-lifecycle/index.mjs` 上不再匹配的 `entry-like-domain-logic` 与 `long-function` baseline rule；active/new warning 保持 0。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P117 | 368 | 368 | read-only census | `git status -sb --untracked-files=all` 显示 clean；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=368`、`unused_baseline_rules=[]` | 不编辑源码；不修改 baseline 配置 |
+| P118 | 368 | 368 | candidate review | 只读复核 lifecycle、init、plugin-pack 后选择 lifecycle uninstall action 判定；暂缓触碰 install manifest、plugin packaging 和 runtime 执行/状态链路 | 不触碰 execution、scheduler、daemon、queue、retry、lease、source apply、merge、git、platform API 或 subagent 边界 |
+| P119 | 368 | 368 | owner freeze | 冻结新增 owner `tools/vibe-lifecycle/lifecycle-uninstall-plan-model.mjs`；scope 限定为纯 action model，不读取或写入文件系统 | 不改变 uninstall 顶层输出、默认 dry-run、confirm gate、managed block/user content 保护或 `.vibecoding-state/` preserve 语义 |
+| P120 | 368 | 366 | `tools/vibe-lifecycle/index.mjs`、`lifecycle-uninstall-plan-model.mjs`、`architecture.boundaries.json` | `planUninstall` 改为调用纯 action model；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=366`，cleanup 后 `unused_baseline_rules=[]` | 只删除真实 stale lifecycle historical exemptions；不通过数字编辑降低 baseline；filesystem remove/write gate 仍在 entry wrapper |
+| P121 | 366 | 366 | validation / evidence | `node --check`、lifecycle update/repair/uninstall dry-run smokes、`node tools/vibe-architecture-check/index.mjs --root . --json` 均通过；后续收口验证继续要求 runtime-check、release:fast、洁净度和 diff whitespace evidence | active/new warning 必须保持 0；`execution-enabled` 与 `legacy-workflow-discipline` 继续分离；不新增状态目录或隐藏执行 |
+
+P121 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=366`、`unused_baseline_rules=[]`。
+
+### Batch P122-P126：methodology gate output envelope owner split 与 state-boundary 收敛
+
+P122-P126 从 clean `master...origin/master` 起点继续，进入阶段 1 的 state lifecycle 收敛。只读扫描后选择三个 read-only methodology gate command 的 JSON/text 输出分流作为低风险第一刀：新增 `tools/vibe-runtime/runtime-methodology-gate-output-envelope.mjs` 只承接 `options.json` 下的 envelope emission 与文本打印分派；`runtime-product-methodology-command.mjs`、`runtime-implementation-methodology-command.mjs`、`runtime-delivery-methodology-command.mjs` 继续保留参数拒绝、artifact 输入校验和各自 gate envelope 生成。新增 owner 被精确标记为 state layer，不改变顶层 JSON envelope shape，也不创建 `.vibecoding-state/`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P122 | 366 | 366 | read-only census | `git status -sb --untracked-files=all` 显示 clean；`node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=366`、`unused_baseline_rules=[]` | 不编辑源码；不修改 baseline 配置 |
+| P123 | 366 | 366 | state lifecycle candidate review | 只读扫描 `tools/vibe-runtime/**` 中真实 state-boundary 命中文件；暂缓 execution/scheduler/daemon/queue/retry/lease/source/merge 等高风险 command | 不触碰执行链路、持久队列、lease、retry、source apply、merge 或 subagent 边界 |
+| P124 | 366 | 366 | owner freeze | 冻结新增 owner `tools/vibe-runtime/runtime-methodology-gate-output-envelope.mjs`；scope 限定为 read-only methodology gate output envelope emission | command wrapper 仍保留参数 gate、artifact input、domain envelope 生成；不改变 CLI 参数或 JSON 顶层字段 |
+| P125 | 366 | 363 | `runtime-*-methodology-command.mjs`、`runtime-methodology-gate-output-envelope.mjs`、`architecture.boundaries.json` | 三个 methodology gate command 改为调用输出 owner；新增 owner 通过精确 role override 归属 state layer；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=363`、`unused_baseline_rules=[]` | 不通过 baseline 数字编辑降低；不新增状态目录；不改变 product/implementation/delivery gate envelope shape |
+| P126 | 363 | 363 | validation / evidence | touched module `node --check`、product/implementation/delivery methodology gate JSON smokes 和 `npm run check:arch` 均通过；后续收口继续要求 runtime-check、release:fast、洁净度和 diff whitespace evidence | active/new warning 必须保持 0；`execution-enabled` 与 `legacy-workflow-discipline` 继续分离；不新增执行、subagent、platform、git 或业务源码写入 |
+
+P126 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=363`、`unused_baseline_rules=[]`。
+
+### Batch P127-P131：init entry merge model owner split 与真实 long-function 燃尽
+
+P127-P131 从 clean `master...origin/master [ahead 1]` 起点继续，选择 `tools/vibe-init/index.mjs` 的 entry managed-block merge decision 作为低风险 owner split。P130 新增 `tools/vibe-init/init-entry-merge-model.mjs` 只承接 managed block 识别、template normalization、append/replace/skip/conflict merge decision；`index.mjs` 继续保留 CLI、template file 读取、target file 读取、install planning、write gate、summary 输出和 try/catch。本批 `unused_baseline_rules=[]`，不修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P127 | 363 | 363 | read-only census | `git status -sb --untracked-files=all` 显示 clean/ahead 1；`node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=363`、`unused_baseline_rules=[]` | 不编辑源码；不修改 baseline 配置 |
+| P128 | 363 | 363 | candidate review | 只读比较 `vibe-init`、`vibe-plugin-pack`、`vibe-doctor`、`runtime-interaction` 后选择 init entry merge decision；暂缓 doctor 大文件面和 runtime high-risk state/sidecar 链路 | 不触碰 execution、scheduler、daemon、queue、retry、lease、source apply、merge、git、platform API 或 subagent 边界 |
+| P129 | 363 | 363 | owner freeze | 冻结新增 owner `tools/vibe-init/init-entry-merge-model.mjs`；scope 限定为 pure entry managed-block merge model | `index.mjs` 保留 filesystem read/write、template path、install plan、config/runtime manifest、CLI output 和 try/catch |
+| P130 | 363 | 362 | `tools/vibe-init/index.mjs`、`init-entry-merge-model.mjs` | `installEntryFile` 改为调用纯 merge plan；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=362`、`unused_baseline_rules=[]` | 不新增 `.vibecoding-state` 创建点；不改变 merge mode、managed block replacement、dry-run/check/preview 行为或 runtime opt-in manifest |
+| P131 | 362 | 362 | validation / evidence | `node --check`、`vibe-init --check`、`vibe-init --dry-run`、`vibe-init --merge=preview` 均通过；后续收口继续要求 runtime-check、release:fast、洁净度和 diff whitespace evidence | active/new warning 必须保持 0；`execution-enabled` 与 `legacy-workflow-discipline` 继续分离；不新增执行、subagent、platform、git 或业务源码写入 |
+
+P131 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=362`、`unused_baseline_rules=[]`。
+
+### Batch P132-P136：runtime state presence owner split 与真实 state-boundary 燃尽
+
+P132-P136 从 clean `master...origin/master [ahead 2]` 起点继续，按 Runtime state lifecycle 计划选择最低风险的 read-only state presence 作为首刀。P135 新增 `tools/vibe-runtime/runtime-state-presence-model.mjs`，只承接 `.vibecoding-state` 是否存在的布尔判断；三个 methodology gate 继续保留 artifact 读取、contract validation、gate envelope 构造和原顶层 `state_present` 字段。本批没有新增状态目录创建点，没有移动写入 gate，也没有修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P132 | 362 | 362 | read-only census | `git status -sb --untracked-files=all` 显示 clean/ahead 2；`node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=362`、`state-boundary=74`、`tools/vibe-runtime/** :: state-boundary=65`、`unused_baseline_rules=[]` | 不编辑源码；不修改 baseline 配置 |
+| P133 | 362 | 362 | state lifecycle classification | 枚举 `tools/vibe-runtime/**` 的 state-boundary hints，按 state presence、state path、state read、state write、state presentation 分类；冻结首批只处理三个 methodology gate 的 read-only `state_present` | 暂缓 execution、scheduler、daemon、queue、retry、lease、source、merge、subagent、platform session 链路 |
+| P134 | 362 | 362 | owner freeze | 冻结新增 owner `tools/vibe-runtime/runtime-state-presence-model.mjs`；scope 限定为 read-only state presence boolean | 不创建 `.vibecoding-state/`；不改变 methodology gate 顶层 envelope shape |
+| P135 | 362 | 360 | `runtime-state-presence-model.mjs`、`runtime-*-methodology-gates.mjs` | 三个 methodology gate 改为调用 read-only state presence owner；`npm run check:arch` 输出 `warning_count=0`、`baselined_warning_count=360`、`state-boundary=72`、`tools/vibe-runtime/** :: state-boundary=63`、`unused_baseline_rules=[]` | 只移动存在性判断；artifact validation、digest、boundary assertions、JSON 输出和 command behavior 不变 |
+| P136 | 360 | 360 | validation / evidence | touched module `node --check` 通过；product/implementation/architecture methodology gate smoke 断言 `ok=true`、`state_present=false`、`writes=false`、`state_directory_created=false`；后续收口继续要求 runtime-check、release:fast、洁净度和 diff whitespace evidence | active/new warning 必须保持 0；`execution-enabled` 与 `legacy-workflow-discipline` 继续分离；不新增执行、subagent、platform、git 或业务源码写入 |
+
+P136 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=360`、`unused_baseline_rules=[]`。
+
+### Batch P137-P141：runtime state directory path owner split 与防回归证据
+
+P137-P141 从 clean `master...origin/master [ahead 3]` 起点继续，按 Runtime state lifecycle 计划处理低风险 state directory path model。P139 新增 `tools/vibe-runtime/runtime-state-directory-model.mjs`，只承接 `stateDirectoryName` 和 `stateDirectory(root)`；`runtime-local-json-input.mjs` 只保留 local JSON input 读取、root 内路径校验和 digest 计算。直接需要 state directory path 的 command wrapper 与 state path owner 改为依赖新 owner；本批没有新增状态目录创建点，没有移动写入 gate，也没有修改 `architecture.boundaries.json`。架构 baseline 真实结果持平，因此本批记录为防回归 owner split，不伪造燃尽。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P137 | 360 | 360 | read-only census | `git status -sb --untracked-files=all` 显示 clean/ahead 3；`node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=360`、`state-boundary=72`、`tools/vibe-runtime/** :: state-boundary=63`、`unused_baseline_rules=[]` | 不编辑 baseline 配置；先枚举旧 owner 的 direct import surface |
+| P138 | 360 | 360 | owner freeze | 冻结新增 owner `tools/vibe-runtime/runtime-state-directory-model.mjs`；scope 限定为纯 state directory path model | 不引入 `fs`；不创建、读取、写入、迁移或删除 `.vibecoding-state/` |
+| P139 | 360 | 360 | `runtime-state-directory-model.mjs`、`runtime-local-json-input.mjs`、state path importers | `runtime-local-json-input.mjs` 移除 state directory path owner 职责；精确导入检查输出 `NO_OLD_STATE_DIRECTORY_IMPORTS`；`stateDirectory(root)` 保持 `path.join(path.resolve(root), '.vibecoding-state')` 语义 | local JSON input 校验、digest、顶层 output envelope、command behavior 和 state write gate 不变 |
+| P140 | 360 | 360 | validation / evidence | touched module `node --check`、path 语义断言、`npm run check:arch`、`node tools/vibe-runtime-check/index.mjs --root .`、`npm run release:fast` 均通过；`git diff --check` 仅报告既有 CRLF warning；`.tmp`、source state、target state 均 absent | active/new warning 必须保持 0；baseline 不高于 360；没有真实下降时不改 baseline 数字 |
+| P141 | 360 | 360 | docs / evidence | 只记录 owner split 和防回归证据；`unused_baseline_rules=[]`，因此不修改 `architecture.boundaries.json` | 不把持平结果写成燃尽；不扩大执行、平台、subagent、git 或业务源码写入边界 |
+
+P141 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=360`、`unused_baseline_rules=[]`。
+
+### Batch P142-P146：readonly local JSON output envelope owner split 与真实 state-boundary 燃尽
+
+P142-P146 从 clean `master...origin/master [ahead 4]` 起点继续，按 Runtime state lifecycle 计划处理 4 个同构 read-only local JSON command wrapper。新增 `tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs`，只承接 `state_present` 注入与 JSON/text 输出分派；4 个 wrapper 继续保留 local JSON input/root validation、domain envelope 计算、打印函数和参数拒绝 gate。本批没有新增状态目录创建点，没有移动写入 gate；`architecture.boundaries.json` 只新增精确 role ownership override，未编辑 baseline 数字。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P142 | 360 | 360 | read-only census | `git status -sb --untracked-files=all` 显示 clean/ahead 4；`node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=360`、`state-boundary=72`、`tools/vibe-runtime/** :: state-boundary=63`、`unused_baseline_rules=[]` | 不编辑 baseline 数字；候选必须是 read-only local JSON wrapper，不触碰实际 state write gate |
+| P143 | 360 | 360 | owner freeze | 冻结新增 owner `tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs`；scope 限定为 read-only local JSON output envelope 的 `state_present` 注入和 JSON/text 分派 | 不接管输入校验、业务计算、打印文案、execution/subagent/platform/git 或 runtime lifecycle mutation |
+| P144 | 360 | 360 | `runtime-readonly-local-json-output-envelope.mjs`、4 个 read-only wrapper | 4 个 wrapper 移除 direct `fs.existsSync(stateDirectory(root))` 和 direct `writeJsonEnvelope` 分支，改为调用输出 owner；payload key、mode、ok、safety、quality、action 和 print 函数保持原形 | 不改变 top-level envelope shape；不创建 `.vibecoding-state/`；不扩大执行、平台、subagent、git 或业务源码写入边界 |
+| P145 | 360 | 356 | validation / architecture | `node --check`、JSON 配置解析、残留符号断言、4 个内存 JSON branch smoke 和 `npm run check:arch` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=356`、`state-boundary=68`、`contract-sync=85`、`unused_baseline_rules=[]` | 只接受真实 state-boundary 下降；family migration 已通过精确 role override 消除；不提高 baseline |
+| P146 | 356 | 356 | docs / evidence | 记录 readonly output envelope owner split 和验证证据；后续收口继续要求 `node tools/vibe-runtime-check/index.mjs --root .`、`npm run release:fast`、`git diff --check`、`.tmp` / source state / target state absent | active/new warning 必须保持 0；`execution-enabled` 与 `legacy-workflow-discipline` 继续分离；没有真实 unused baseline rule 时不做 baseline narrowing |
+
+P146 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=356`、`unused_baseline_rules=[]`。
+
+### Batch P147-P151：readonly local JSON output envelope 第二波复用与真实 state-boundary 燃尽
+
+P147-P151 从 clean `master...origin/master` 起点继续，用户明确允许 subagent 后只用于 read-only candidate census；实现阶段不新增 owner、不新增 role override，复用 `tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs`。本批迁移第二组 4 个 read-only local JSON command wrapper，只把 `state_present` 注入与 JSON/text 输出分派交给既有 owner；wrapper 继续保留 local JSON input/root validation、domain envelope 计算、打印函数和参数拒绝 gate。本批没有新增状态目录创建点，没有移动写入 gate，也没有修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P147 | 356 | 356 | read-only subagent census | `git status -sb --untracked-files=all` 显示 clean；`node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=356`、`state-boundary=68`、`unused_baseline_rules=[]`；subagent 仅做只读候选扫描 | subagent 不执行实现、不写源码、不扩大平台/API/git/执行面；候选必须复用既有 owner 或有明确 role 归属证据 |
+| P148 | 356 | 356 | owner reuse freeze | 冻结复用 `runtime-readonly-local-json-output-envelope.mjs`；scope 仍限定为 read-only local JSON output envelope 的 `state_present` 注入和 JSON/text 分派 | 不新增 owner，不新增 role override，不接管输入校验、业务计算、打印文案或 runtime lifecycle mutation |
+| P149 | 356 | 356 | 4 个第二波 read-only wrapper | `runtime-session-start-example-command.mjs`、`runtime-install-experience-command.mjs`、`runtime-experience-upgrade-command.mjs`、`runtime-entry-trigger-tightening-command.mjs` 移除 direct `fs.existsSync(stateDirectory(root))` 与 direct `writeJsonEnvelope` 分支，改为调用既有输出 owner | payload key、mode、ok、safety、quality、action、print 函数和 no-write 参数 gate 保持原形；不改变 top-level envelope shape |
+| P150 | 356 | 350 | validation / architecture | touched module `node --check`、残留符号断言、4-command in-memory JSON branch smoke 和 `npm run check:arch` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=350`、`state-boundary=64`、`risk-zone-touch=90`、`contract-sync` 未增长 | 只接受真实 state-boundary 下降；不提高 baseline；不把 `execution-enabled` 与 `legacy-workflow-discipline` 混合；不新增状态写入、执行、平台、subagent 或 git 行为 |
+| P151 | 350 | 350 | docs / closeout evidence | 记录第二波 readonly output envelope owner reuse 和验证证据；收口继续要求 `node tools/vibe-runtime-check/index.mjs --root .`、`npm run release:fast`、`git diff --check`、`.tmp` / source state / target state absent | active/new warning 必须保持 0；没有真实 unused baseline rule 时不做 baseline narrowing；不修改 `architecture.boundaries.json` 数字 |
+
+P151 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=350`、`unused_baseline_rules=[]`。
+
+### Batch P152-P156：readonly local JSON output envelope 第三波 governance 复用与真实 state-boundary 燃尽
+
+P152-P156 从 clean `master...origin/master [ahead 1]` 起点继续，用户明确允许 subagent 后只用于 read-only candidate census。实现阶段不新增 owner、不新增 role override，继续复用 `tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs`。本批只迁移 2 个 governance read-only local JSON command wrapper，把 `state_present` 注入与 JSON/text 输出分派交给既有 owner；wrapper 继续保留 local JSON input/root validation、domain envelope 计算、打印函数和参数拒绝 gate。本批没有新增状态目录创建点，没有移动写入 gate，也没有修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P152 | 350 | 350 | read-only subagent census | `git status -sb --untracked-files=all` 显示 clean/ahead 1；`node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=350`、`state-boundary=64`、`risk-zone-touch=90`、`unused_baseline_rules=[]`；subagent 仅做只读候选扫描 | subagent 不执行实现、不写源码、不扩大平台/API/git/执行面；避开 execution、scheduler、daemon、queue、retry、lease、source、merge、subagent dispatch 和 platform API 链路 |
+| P153 | 350 | 350 | owner reuse freeze | 冻结复用 `runtime-readonly-local-json-output-envelope.mjs`；scope 仍限定为 read-only local JSON output envelope 的 `state_present` 注入和 JSON/text 分派 | 不新增 owner，不新增 role override，不接管输入校验、业务计算、打印文案或 runtime lifecycle mutation |
+| P154 | 350 | 350 | 2 个 governance read-only wrapper | `runtime-legacy-workflow-discipline-command.mjs`、`runtime-contributor-guardrail-command.mjs` 移除 direct `fs.existsSync(stateDirectory(root))` 与 direct `writeJsonEnvelope` 分支，改为调用既有输出 owner | payload key、mode、ok、safety、quality、action、print 函数和 no-write 参数 gate 保持原形；不改变 top-level envelope shape |
+| P155 | 350 | 348 | validation / architecture | touched module `node --check`、残留符号断言、2-command in-memory JSON branch smoke 和 `npm run check:arch` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=348`、`state-boundary=62`、`risk-zone-touch=90`、`contract-sync=85` | 只接受真实 state-boundary 下降；不提高 baseline；不把 `execution-enabled` 与 `legacy-workflow-discipline` 混合；不新增状态写入、执行、平台、subagent 或 git 行为 |
+| P156 | 348 | 348 | docs / closeout evidence | 记录第三波 governance readonly output envelope owner reuse 和验证证据；收口继续要求 `node tools/vibe-runtime-check/index.mjs --root .`、`npm run release:fast`、`git diff --check`、`.tmp` / source state / target state absent | active/new warning 必须保持 0；没有真实 unused baseline rule 时不做 baseline narrowing；不修改 `architecture.boundaries.json` 数字 |
+
+P156 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=348`、`unused_baseline_rules=[]`。
+
+### Batch P157-P161：readonly local JSON output envelope 第四波 permission/platform 复用与真实 state-boundary/risk-zone 燃尽
+
+P157-P161 从 clean `master...origin/master` 起点继续，先解除 `doctor` / `release:fast` 已知 hook marker closeout blocker，再复用 `tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs`。本批迁移 `runtime-subagent-permission-command.mjs` 与 `runtime-platform-acceptance-command.mjs` 的 3 个 read-only envelope 输出点，只把 `state_present` 注入与 JSON/text 输出分派交给既有 owner；wrappers 继续保留 local file/root validation、domain model 计算、digest、打印函数和参数拒绝 gate。本批没有新增状态目录创建点，没有移动写入 gate，也没有修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| P157 | 348 | 348 | adapter hook marker closeout blocker | `git status -sb --untracked-files=all` 显示 clean；`node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=348`、`state-boundary=62`、`risk-zone-touch=90`；`adapters/codex/hooks.example.json` 与 `adapters/cursor/hooks.example.json` 补回 `lightweight routing` marker 并通过 JSON/marker assertion | 只修复 release/doctor 所需 marker；不改变 hook command、adapter execution、template、install docs 或平台能力 |
+| P158 | 348 | 348 | owner reuse freeze | 只读确认 3 个迁移点都是 `fs.existsSync(stateDirectory(root))` 形式的 read-only `state_present` 输出注入；冻结复用 `runtime-readonly-local-json-output-envelope.mjs` | `runtime-platform-acceptance-command.mjs` 继续保留 `fs` 用于本地文件读取和 digest；不移动 acceptance model、permission model 或 adapter contract |
+| P159 | 348 | 348 | 2 个 permission/platform read-only wrapper | `runtime-subagent-permission-command.mjs` 移除 direct `fs` / `stateDirectory` / direct `writeJsonEnvelope` 分支；`runtime-platform-acceptance-command.mjs` 移除 `stateDirectory` 与 direct JSON/text 分支，保留本地文件 IO | payload key、mode、ok、safety、quality、action、digest、print 函数和 no-write 参数 gate 保持原形；不改变 top-level envelope shape |
+| P160 | 348 | 345 | validation / architecture | touched module `node --check`、残留符号断言、3-command system-temp JSON branch smoke 和 `npm run check:arch` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=345`、`state-boundary=60`、`risk-zone-touch=89`、`contract-sync=85` | 只接受真实 state-boundary/risk-zone 下降；不提高 baseline；不新增状态写入、执行、平台 API、真实 subagent dispatch 或 git 行为 |
+| P161 | 345 | 345 | docs / closeout evidence | 记录第四波 readonly output envelope owner reuse 和验证证据；收口继续要求 `node tools/vibe-runtime-check/index.mjs --root .`、`npm run release:fast`、`git diff --check`、`.tmp` / source state / target state absent | active/new warning 必须保持 0；没有真实 unused baseline rule 时不做 baseline narrowing；不修改 `architecture.boundaries.json` 数字 |
+
+P161 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=345`、`unused_baseline_rules=[]`。
+
+### Round 1：release-check dispatcher 表驱动拆分与真实 entry/long-function 燃尽
+
+Round 1 从 clean `master...origin/master` 起点开始，选择 `tools/vibe-release-check/release-check-dispatch.mjs` 的 command handler map 作为低风险 dispatcher owner split。实现只把重复的 option-only handler 映射改为 module-level descriptor list 和短生成器；`dispatchReleaseCheckCommand(...)`、`commandEntryHandler(...)`、`run` fallback、`check-not-ignored` 的 args 传递和 `single-platform-smoke` 的 platform arg 传递保持不变。本轮没有触碰 runtime execution、state write、platform API、subagent 或 git 行为面。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Round 1 | 345 | 343 | `tools/vibe-release-check/release-check-dispatch.mjs` | `node --check`、handler map 参数断言、`node tools/vibe-release-check/index.mjs --suite fast --quiet` 和 `npm run check:arch` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=343`、`entry-like-domain-logic=12`、`long-function=58` | dispatcher 只做 command-to-runner wiring；不改变 release-check command key、fallback、args/options/settings 语义、suite strictness 或 output envelope |
+
+Round 1 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=343`、`unused_baseline_rules=[]`。
+
+### Round 2：release-check runtime dispatch fixtures 数据化与 route validation blocker 收敛
+
+Round 2 从 `baselined_warning_count=343` 起点继续，选择 `tools/vibe-release-check/release-check-runtime-dispatch-fixtures.mjs` 的 runtime dispatch handoff fixtures 作为低风险 fixture owner split。实现将 4 组 handoff JSON payload 移到 module-level descriptor list，builder 只负责 `tmpRoot` 路径绑定、JSON 写入和原返回 key/cleanupFiles 结构。本轮同时修复 `tools/vibe-runtime/runtime-governance-route-model.mjs` 中 read-only governance route 的共享校验顺序：`--advice` / `--surface` 仍拒绝 execution-like flags，但先进入专属只读错误；`--external-reference-comparison --from-external-reference-root` 不再被自身 exclusive list 误拦截。没有触碰 runtime execution、state write、platform API、subagent、git 或 release-check suite strictness。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Round 2 | 343 | 341 | `tools/vibe-release-check/release-check-runtime-dispatch-fixtures.mjs`、`tools/vibe-runtime/runtime-governance-route-model.mjs` | `node --check`、ReadLints、`node tools/vibe-release-check/index.mjs --suite runtime --quiet`（心跳 wrapper 收口）和 `npm run check:arch` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=341`、`entry-like-domain-logic=11`、`long-function=57` | fixture key、文件名、payload 字段、cleanupFiles 语义不变；governance advice/surface/comparison 仍是本地只读校验，不新增 write、execution、network、platform、git 或 subagent 行为面 |
+
+Round 2 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=341`、`unused_baseline_rules=[]`。
+
+### Round 3：release-check 入口 smoke suite 下沉与 stale baseline 清理
+
+Round 3 从 `baselined_warning_count=341` 起点继续，选择 `tools/vibe-release-check/index.mjs` 内的 planner / governance / workflow / release smoke 实现作为入口瘦身目标。实现新增 `tools/vibe-release-check/release-check-workflow-governance-smoke-suite.mjs`，承接原 smoke 函数与 workflow-entry smoke 代理；`index.mjs` 只保留 CLI 参数、suite filtering、timing、handler dependency injection 和 dispatch loop。本轮只在 `npm run check:arch` 证明 `tools/vibe-release-check/** :: entry-like-domain-logic` 已无匹配项后，删除该 stale baseline rule；没有修改 baseline 数字，也没有改变 release suite 命令顺序、失败严格度、`.tmp` 生命周期或 runtime output envelope。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Round 3 | 341 | 338 | `tools/vibe-release-check/index.mjs`、`tools/vibe-release-check/release-check-workflow-governance-smoke-suite.mjs`、`architecture.boundaries.json` | `node --check`、ReadLints、`node tools/vibe-release-check/index.mjs --suite fast --quiet` 和 `npm run check:arch` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=338`、`entry-like-domain-logic=10`、`long-function=56`、`risk-zone-touch=88`、`unused_baseline_rules=[]` | 入口只做 release-check wiring；smoke suite 保留原命令、assertion、临时根和 cleanup 语义；stale baseline cleanup 只删除已无真实匹配的 rule，不提高 ceiling、不弱化 runtime-check/release-check |
+
+Round 3 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=338`、`unused_baseline_rules=[]`。
+
+### Current Round 2：trace / workflow alias read-only state owner 收敛
+
+Current Round 2 从当前 235 基线起点继续，选择 trace build 和 workflow alias 的 read-only `state_present` 作为低风险 owner split。实现复用 `runtime-readonly-local-json-output-envelope.mjs` 中的状态存在性 owner；`runtime-trace-command.mjs` 保留 trace 构建、校验、confirm 写入和 audit 读取，`runtime-workflow-alias-interaction-command.mjs` 保留 alias 组合，`runtime-interaction-command.mjs` 只移除 alias 状态函数注入。本轮没有新增状态目录创建点，没有移动写入 gate，也没有修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 2 | 235 | 234 | `tools/vibe-runtime/runtime-trace-command.mjs`、`tools/vibe-runtime/runtime-workflow-alias-interaction-command.mjs`、`tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs` | `node --check` 和 `node tools/vibe-architecture-check/index.mjs --root . --json` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=234`、`contract-sync=76`、`state-boundary=50`、`risk-zone-touch=79`、`unused_baseline_rules=[]` | 只移动 read-only state presence 与补 trace contract marker；不改变 trace confirm 写入、trace audit、workflow alias digest、JSON envelope shape 或 runtime P0 边界 |
+
+Current Round 2 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=234`、`unused_baseline_rules=[]`。
+
+### Current Round 3：tokens read-only state owner 与 contract marker 收敛
+
+Current Round 3 从 234 基线继续，选择 tokens command 的 read-only 合同同步和 token interaction 的状态存在性注入作为低风险切口。`runtime-tokens-command.mjs` 只补本地 contract marker；`runtime-token-interaction-command.mjs` 保留 token output 文件读取、compaction/metrics sidecar 写入 gate 和 artifact validation，只把 `state_present` / advice state presence 改为复用既有 read-only state owner。本轮没有新增状态目录创建点，没有移动 token confirm 写入 gate，也没有修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 3 | 234 | 233 | `tools/vibe-runtime/runtime-tokens-command.mjs`、`tools/vibe-runtime/runtime-token-interaction-command.mjs`、`tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs` | `node --check` 和 `node tools/vibe-architecture-check/index.mjs --root . --json` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=233`、`contract-sync=75`、`state-boundary=50`、`risk-zone-touch=79`、`unused_baseline_rules=[]` | 只补 tokens contract marker 并移动 read-only state presence；不改变 token compaction/metrics confirm 写入、artifact digest、JSON envelope shape 或 token P0 边界 |
+
+Current Round 3 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=233`、`unused_baseline_rules=[]`。
+
+### Current Round 4：source / merge audit read-only 输出分派收敛
+
+Current Round 4 从 233 基线继续，选择 `runtime-source-merge-command.mjs` 的 source / merge read-only JSON/text 输出分派作为低风险切口。实现复用 `runtime-readonly-local-json-output-envelope.mjs` 的输出 owner；source/merge command wrapper 继续保留 artifact 列表、读取、校验、readiness/candidate envelope 生成和 confirm 拒绝。本轮没有触碰 `source --apply`、`merge --apply`、candidate/verification artifact 写入语义，也没有修改 `architecture.boundaries.json`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 4 | 233 | 231 | `tools/vibe-runtime/runtime-source-merge-command.mjs`、`tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs` | `node --check`、`source --list --json`、`merge --list --json`、`node tools/vibe-runtime-check/index.mjs --root .` 和 `node tools/vibe-architecture-check/index.mjs --root . --json` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=231`、`contract-sync=75`、`state-boundary=49`、`risk-zone-touch=78`、`unused_baseline_rules=[]` | 只收敛 read-only JSON/text 输出分派和移除 wrapper 未用依赖；不改变 source/merge artifact shape、校验失败语义、confirm 拒绝、apply 写入 gate 或 runtime P0 边界 |
+
+Current Round 4 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=231`、`unused_baseline_rules=[]`。
+
+### Current Round 5：workspace isolation 只读状态展示收敛
+
+Current Round 5 从 231 基线继续，选择 `runtime-workspace-isolation-command.mjs` 的 read-only `state_present` 和 JSON/text 输出分派作为低风险切口。实现复用 `runtime-readonly-local-json-output-envelope.mjs` 的状态存在性与输出 owner；workspace command wrapper 继续保留 mode gate、profile gate、plan source 读取、workspace contract 写入和 create confirm gate。本轮未触碰真实 workspace create 写入路径、cleanup 删除行为或 git worktree 生命周期。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 5 | 231 | 231 | `tools/vibe-runtime/runtime-workspace-isolation-command.mjs`、`tools/vibe-runtime/runtime-readonly-local-json-output-envelope.mjs` | `node --check`、`workspace --status --json`、`workspace --cleanup-plan --json`、`node tools/vibe-runtime-check/index.mjs --root .` 和 `node tools/vibe-architecture-check/index.mjs --root . --json` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=231`、`contract-sync=75`、`state-boundary=49`、`risk-zone-touch=78`、`unused_baseline_rules=[]` | 只收敛 read-only state presence 与 JSON/text 输出分派；不改变 workspace create confirm gate、contract file 写入、plan file 读取、cleanup guidance 或 runtime P0 边界 |
+
+Current Round 5 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=231`、`unused_baseline_rules=[]`。
+
+### Current Round 6：subagent / SDD 只读 state presence 收敛
+
+Current Round 6 从 231 基线继续，选择 subagent adapter dispatch preview、SDD adapter consumption envelope、SDD review package envelope 的 `state_present` 作为最小安全切口。实现复用 `runtime-readonly-local-json-output-envelope.mjs` 的状态存在性 owner；原模块继续保留 artifact 读取、校验、permission gate、progress ledger 写入、review package sidecar 写入和 git read-only range capture。本轮未调用 subagent、未移动真实 adapter dispatch 写入、未触碰 platform API、scheduler hook 或 source/git 写入链路。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 6 | 231 | 231 | `runtime-subagent-adapter-dispatch-command.mjs`、`runtime-sdd-consumption-command.mjs`、`runtime-sdd-review-package-command.mjs`、`runtime-readonly-local-json-output-envelope.mjs` | touched module `node --check`、ReadLints、`node tools/vibe-runtime-check/index.mjs --root .` 和 `node tools/vibe-architecture-check/index.mjs --root . --json` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=231`、`contract-sync=75`、`state-boundary=49`、`risk-zone-touch=78`、`unused_baseline_rules=[]` | 只移动 state presence 判断；不改变 subagent permission gate、adapter dispatch artifact 写入、SDD progress ledger、review package git read commands、platform/subagent/API/git/source 边界 |
+
+Current Round 6 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=231`、`unused_baseline_rules=[]`。
+
+### Current Round 7：methodology coverage marker 数据 owner 拆分
+
+Current Round 7 从 231 基线继续，选择 `runtime-interaction-command.mjs` 中的 methodology coverage marker/file 列表作为低风险 contract data split。新增 `runtime-methodology-coverage-marker-specs.mjs` 承接纯 marker 数据；interaction wrapper 继续保留 source bundle 绑定、coverage envelope、runtime capability registry 组合和输出路径。本轮发现初始拆分会让 interaction wrapper 丢失本地 contract-sync marker 并造成基线回涨到 232，已通过补回 wrapper contract marker 与 config role override 修正，未扩大 baseline。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 7 | 231 | 231 | `runtime-interaction-command.mjs`、`runtime-methodology-coverage-marker-specs.mjs`、`runtime-contract-marker-registry.mjs`、`architecture.boundaries.json` | `node --check`、`methodology --coverage-map --from-external-reference-root . --json`、`node tools/vibe-runtime-check/index.mjs --root .` 和 `node tools/vibe-architecture-check/index.mjs --root . --json` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=231`、`contract-sync=75`、`state-boundary=49`、`risk-zone-touch=78`、`unused_baseline_rules=[]` | 只移动 methodology coverage marker/file 数据和补本地 contract marker；不改变 coverage source binding、registry binding、JSON envelope shape、runtime-check/release-check strictness 或任何执行/write 边界 |
+
+Current Round 7 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=231`、`unused_baseline_rules=[]`。
+
+### Current Round 8：release-check Stage 119/120 fixture 数据 owner 拆分
+
+Current Round 8 从 231 基线继续，选择 `release-check-stage119-120-smoke.mjs` 中的 Stage 119/120 fixture payload 与 forbidden flags 作为低风险 smoke/config 数据拆分。新增 `release-check-stage119-120-fixture-specs.mjs` 承接纯 fixture/expectation 数据；smoke runner 继续保留 `.tmp` 生命周期、命令顺序、断言执行和失败严格度。初始拆分曾让新增 specs owner 被默认归为 core 并产生 `contract-sync` 回归，已通过 role override 将其归为 smoke 层修正；未修改 `baselinedWarnings`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 8 | 231 | 231 | `release-check-stage119-120-smoke.mjs`、`release-check-stage119-120-fixture-specs.mjs`、`architecture.boundaries.json` | touched module `node --check`、ReadLints、直接 Stage 119/120 smoke、`node tools/vibe-runtime-check/index.mjs --root .`、`node tools/vibe-architecture-check/index.mjs --root . --json`、`git diff --check` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=231`、`contract-sync=75`、`state-boundary=49`、`risk-zone-touch=78`、`unused_baseline_rules=[]` | 只移动 release smoke fixture/expectation 数据和补 owner 归属；不改变 suite 选择、命令顺序、quiet/timing、失败严格度、`.tmp` 生命周期、runtime output envelope 或任何执行/write 边界 |
+
+Current Round 8 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=231`、`unused_baseline_rules=[]`。`node tools/vibe-release-check/index.mjs --suite all --quiet` 仍被既有 doctor Stage 3/4 marker 阻塞；`node tools/vibe-release-check/index.mjs --suite runtime --quiet` 仍被既有 methodology completion confirm marker 阻塞，二者不属于本轮改动引入。
+
+### Current Round 9：runtime CLI option handler 低风险规格数据化
+
+Current Round 9 从 231 基线继续，选择 `runtime-cli-option-handlers.mjs` 中的静态 flag-to-command/field wiring 作为低风险 dispatcher/config 数据拆分。新增 `runtime-cli-low-risk-option-specs.mjs` 承接 option specs 与本地 contract marker；handler 继续保留 option mutation 入口和 `--hub` 专用分支。runtime-check 与 command surface registry 同步纳入新 specs owner，避免 CLI args/source bundle marker 漂移。初始 runtime-check 曾暴露 marker 聚合、surface group 和 owner manifest 缺口，已逐项修正；未修改 `baselinedWarnings`。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 9 | 231 | 230 | `runtime-cli-option-handlers.mjs`、`runtime-cli-low-risk-option-specs.mjs`、`runtime-cli-surface-contracts.mjs`、`runtime-command-surface-registry.mjs`、`architecture.boundaries.json` | touched module `node --check`、`workflow --start --prompt smoke --json --root .`、`tokens --catalog --json --root .`、`advice --hub --json --root .`、ReadLints、`node tools/vibe-runtime-check/index.mjs --root .`、`node tools/vibe-architecture-check/index.mjs --root . --json`、`git diff --check` 均通过；架构输出 `warning_count=0`、`baselined_warning_count=230`、`unused_baseline_rules=[]` | 只移动低风险 CLI option wiring 数据并同步 contract surface；不改变 CLI 参数语义、命令名、默认 profile、JSON/text envelope、write gate 或任何执行链路 |
+
+Current Round 9 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=230`、`unused_baseline_rules=[]`。
+
+### Current Round 10：stale baseline narrowing 与燃尽证据收口
+
+Current Round 10 从 230 基线继续，检查 `architecture.boundaries.json` 中的 baseline 账本是否存在真实 stale rule。当前架构检查输出明确为 `unused_baseline_rules=[]`，因此本轮不删除任何仍有效的 baseline rule，不修改 checker 规则，也不扩大 baseline。收口只同步当前 ceiling、rule family 分布和 10 轮证据口径。
+
+| 批次 | before | after | owner | 证据 | 不可回归项 |
+| --- | ---: | ---: | --- | --- | --- |
+| Current Round 10 | 230 | 230 | `docs/architecture-debt-burndown.md`、`architecture.boundaries.json` | `node tools/vibe-architecture-check/index.mjs --root . --json` 输出 `warning_count=0`、`baselined_warning_count=230`、`contract-sync=76`、`state-boundary=49`、`risk-zone-touch=78`、`long-function=17`、`unused_baseline_rules=[]`；未发现可安全删除的 stale baseline rule | 没有真实 unused baseline rule 时不改 `baselinedWarnings`；不弱化 architecture-check、runtime-check 或 release-check；不通过账本操作制造下降 |
+
+Current Round 10 收口目标 JSON 证据：`warning_count=0`、`baselined_warning_count=230`、`unused_baseline_rules=[]`。10 轮从 235 降至 230，实际净下降 5；未达到约 30 的期望区间，原因是后续轮次未出现可安全删除的 stale baseline rule，且低风险 owner 迁移只能接受真实检查输出下降。
+
+## 燃尽顺序
+
+### Batch 0：不可无感新增
+
+目标：保持 active warning 为 0，baseline 不从当前 0 增长，且任一 rule family 不超过当前分布上限。
+
+当前 0 基线来自当前架构检查输出；旧批次中的 1/2/3/4/5/22/230/235/338/345 等数字仅作为历史燃尽记录，不再作为当前 ceiling。
+
+当前 rule family ceiling：
+
+| rule | ceiling |
+| --- | ---: |
+| `risk-zone-touch` | 0 |
+| `state-boundary` | 0 |
+| `file-role-budget` | 0 |
+| `contract-sync` | 0 |
+| `dependency-direction` | 0 |
+| `entry-like-domain-logic` | 0 |
+| `evolution-pressure` | 0 |
+| `factory-pressure` | 0 |
+| `function-density` | 0 |
+| `io-purity` | 0 |
+| `long-function` | 0 |
+| `owner-drift` | 0 |
+
+规则：
+
+- 新增或修改代码后必须看 `npm run check:arch` 的 `baselined_warning_count`。
+- 如果 `baselined_warning_count > 0`，不能直接接受为“通过”；必须定位新增规则和文件。
+- 如果某个 rule family 超过表格中的 count，即使总数仍不高于 0，也必须按回归处理。
+- 若新增是误报，优先调整命名、owner、合同标记或模块职责，避免扩大 `baselinedWarnings`。
+- 若确实需要新增 baseline，必须记录 owner、风险、退出条件和预计燃尽批次。
+
+停止条件：
+
+- active warning 大于 0。
+- baseline count 大于 0 且没有显式燃尽说明。
+- 新增 `risk-zone-touch` / `state-boundary` 涉及 execution、scheduler、daemon、git、subagent、MCP、platform API、自动执行链路。
+
+### Batch 1：runtime command wrapper 收敛
+
+目标：优先处理 `tools/vibe-runtime/**` 中的高占比债务。
+
+优先级：
+
+1. `state-boundary`：把 path / read / write / verify / presentation 拆到具名 owner。
+2. `contract-sync`：补 runtime-check / release-check / docs 的同步证据。
+3. `risk-zone-touch`：对误触发词做结构化边界表达，避免 action 文案或局部变量制造假信号。
+4. `long-function`：只抽 domain module，不抽 `utils` / `helpers` 大杂烩。
+
+验收：
+
+- `npm run check:arch` active warning 仍为 0。
+- `baselined_warning_count` 下降，或至少不增长。
+- runtime P0 边界不变：不新增自动执行、git、subagent、MCP、platform API、隐藏写入。
+
+### Batch 2：release-check smoke 收敛
+
+目标：降低 `tools/vibe-release-check/**` 中的 `long-function`、`io-purity`、`risk-zone-touch`。
+
+策略：
+
+- 继续把重复 assertion 移到 data specs / assertion helpers。
+- smoke 文件保留执行顺序和结果判定，不承载大段 marker 数据。
+- 不改变 release smoke 命令顺序和 envelope shape。
+
+### Batch 3：入口和 dispatcher 收敛
+
+目标：减少 `entry-like-domain-logic` 和 `function-density`。
+
+策略：
+
+- entry 只负责参数接收、组合和报告。
+- dispatcher 只负责路由，不承载 domain envelope 生成。
+- check runner 只负责读取、聚合、输出，不反向依赖 runtime command owner。
+
+## 单次燃尽协议
+
+每次处理 baseline warning 时按这个顺序：
+
+1. 定位规则、文件、触发关键词或函数。
+2. 判断是职责问题、命名误报、合同缺口还是真实风险。
+3. 先拆 owner / 收窄依赖 / 补合同证据；不要先扩 baseline。
+4. 运行 `npm run check:arch`，确认 active warning 为 0。
+5. 记录 count 变化；下降才算燃尽，持平只算防回归。
+
+## 验证命令
+
+```bash
+npm run check:arch
+node tools/vibe-runtime-check/index.mjs --root . --diagnostics
+npm run check
+```
+
+## 非目标
+
+- 不一次性删除剩余 current baseline。
+- 不为了降低数字而弱化规则。
+- 不把高风险执行链路加入自动通过列表。
+- 不通过文案隐藏真实 state / execution / contract 问题。