@mc-and-his-agents/loom-installer 0.1.113 → 0.1.115

package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/loom-init/SKILL.md

@@ -66,7 +66,7 @@ description: Loom 的 root entry。负责初始化新项目或既有仓库，并
 
 `--intent` 用来表达采用意图，而不是仓库静态分类。未显式给出 intent 时，dry-run 仍会输出推荐路径、风险摘要和计划写入载体；如果实际写入会创建重执行控制面，必须先显式选择 `execution-control` 或 `strong-governance`。
 
-每个 intent 会收敛到一个 `scaffold_profile`。`observe-only` 与 `skill-install-only` 不写 adoption carriers；`attach-only` 只写 companion/read surfaces，并显式禁止 `.loom/work-items/**`、`.loom/progress/**`、`.loom/status/current.md`、`.loom/reviews/**`、`.loom/specs/**` 等 Loom-authored truth carriers；`light-governance` 写 companion、review/spec 与 PR 最小闭环但不写 Loom-owned work/progress/status；`execution-control` 与 `strong-governance` 才写 Loom-owned execution carriers。
+每个 intent 会收敛到一个 `scaffold_profile`。`observe-only` 与 `skill-install-only` 不写 adoption carriers；`attach-only` 只写 companion/read surfaces，并显式禁止 `.loom/work-items/**`、`.loom/progress/**`、`.loom/status/current.md`、`.loom/reviews/**`、`.loom/specs/**` 等 Loom-authored truth carriers；`light-governance` 写 companion、review guidance 与 PR 最小闭环但不写 Loom-owned work/progress/status/spec carriers；`execution-control` 与 `strong-governance` 才写 Loom-owned execution carriers。
 
 ## 1. 读取顺序
 
@@ -164,13 +164,15 @@ description: Loom 的 root entry。负责初始化新项目或既有仓库，并
   - `code_review`
   - `spec_review`
   - 最小 PR 模板
-  - 条件化 `spec.md` / `plan.md`
+  - repo companion 与 bootstrap metadata
+  - review guidance / spec-review guidance
 - 默认不装配：
   - 完整 recovery 模型
   - work item 合同
   - 状态面
   - profile 分层
   - 重 harness
+  - formal spec suite
 - 若需要轻量跨轮承接，默认使用 `checkpoint-lite`
 - 即使本轮不装配标准恢复或状态面，也必须写清：
   - issue / PR 中谁是恢复主入口
@@ -199,7 +201,7 @@ description: Loom 的 root entry。负责初始化新项目或既有仓库，并
 - 保留 root rules
 - 保留 retained host actions
 - 保留 repo-native carriers
-- 第一轮不生成 Loom-owned `work-item` / `progress` / `status-surface` placeholder
+- 第一轮不生成 Loom-owned `work-item` / `progress` / `status-surface` / `spec` placeholder
 
 ## 4. 输出初始化结果
 

package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/loom-init/references/intake-signals.md

@@ -26,7 +26,7 @@
 - 是否已有 CI / 基础测试
 - 是否已有统一的仓库级验证入口
 - 当前主要缺口属于哪一类：
-  - 治理入口 / review 合同 / 条件化 spec 路径
+  - 治理入口 / review 合同 / 条件化 spec-review 路径
   - 恢复 / 状态 / 执行支撑
 - 是否有明显长任务恢复痛点
 - 是否存在共享契约 / 共享数据模型 / 核心抽象 / 高风险链路
@@ -77,7 +77,7 @@
 - 已有清晰根级边界文档
 - 已有 CI / 基础测试
 - 已有统一的仓库级验证入口
-- 当前缺口主要在治理入口、review 合同、条件化 spec 路径
+- 当前缺口主要在治理入口、review 合同、条件化 spec-review 路径
 - 尚无明显长任务恢复痛点
 - 当前没有需要立即进入更重路径的共享边界或高风险核心抽象信号
 - 当前主产物本身不是共享 contract、shared skill 或 governance module
@@ -86,8 +86,8 @@
 
 - 直接采用 [../../shared/references/adoption/lightweight-retrofit-default.md](../../shared/references/adoption/lightweight-retrofit-default.md)
 - 默认 `companion docs` 接入
-- 默认装配最小治理包
-- 默认不装配完整 recovery、`Work Item`、`status control plane` 与重 harness
+- 默认装配最小治理包、repo companion、bootstrap metadata、review guidance 与 PR 模板
+- 默认不装配完整 recovery、`Work Item`、`status control plane`、formal spec suite 与重 harness
 - 若需要轻量跨轮承接，默认 `checkpoint-lite`
 
 ### 4.3 `复杂既有仓库`
@@ -129,7 +129,7 @@
 - 若缺少统一验证入口，或仓库主产物本身是共享 contract、shared skill 或 governance module，优先判为 `复杂既有仓库`
 - 任何共享契约、运行模型或高风险核心抽象变化，优先提升到更重路径
 - 任何多轮恢复成本明显升高或出现多个入口并行记录，优先从 `checkpoint-lite` 升级到标准恢复形态
-- 只有在缺口主要集中于治理入口、review 合同、条件化 spec 路径，且恢复痛点不明显时，才保持轻量路径
+- 只有在缺口主要集中于治理入口、review 合同、条件化 spec-review 路径，且恢复痛点不明显时，才保持轻量路径
 
 ## 6. 场景到默认装配映射
 

package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/shared/references/adoption/lightweight-retrofit-default.md

@@ -11,19 +11,20 @@
 - 已有清晰的工程边界文档，例如 `AGENTS.md`
 - 已有 CI 与基础测试
 - 已有统一的仓库级验证入口，而不是只有零散子模块脚本
-- 当前缺的是治理入口、review 合同或条件化 spec 路径
+- 当前缺的是治理入口、review 合同或条件化 spec-review 路径
 - 当前还没有明显的长任务恢复痛点
 - 当前主产物本身不是共享 contract、shared skill 或 governance module
 
 ## 2. 默认目标
 
-第一轮 retrofit 的目标不是装完整 Loom，而是先建立最小治理闭环。
+第一轮 retrofit 的目标不是装完整 Loom，也不是创建 Loom-owned execution truth，而是先建立最小治理闭环。
 
 默认先解决：
 
 - 改动如何进入实现
 - reviewer 如何判断改动
 - 哪些边界改动必须先说明再实现
+- 后续何时需要显式升级到 `execution-control`
 
 ## 3. 默认装配
 
@@ -33,7 +34,10 @@
 - `code_review`
 - `spec_review`
 - 最小 PR 模板
-- 条件化 `spec.md` / `plan.md`
+- repo companion 与 bootstrap metadata
+- review guidance / spec-review guidance
+
+本策略对应 `light-governance` scaffold profile。该 profile 可以暴露 review/spec-review 指引和轻量 review placeholder，但不生成 Loom-owned formal spec suite。
 
 ## 4. 默认接入方式
 
@@ -44,6 +48,7 @@
 - 在 `repo-interface.json` 中显式声明 `review_instruction_locators`；已有规则用 repo-owned locator，确无规则时才声明 `loom_default`
 - 不在第一轮重写整个根级规则体系
 - 不把轻量 retrofit 升级成 unattended strong adoption
+- 不在默认 `light-governance` 中生成 `.loom/work-items/**`、`.loom/progress/**`、`.loom/status/current.md` 或 `.loom/specs/**`
 
 轻量仓库可以从 Loom default review instruction 起步，但这个选择必须是显式 locator 合同，而不是自动猜测 `spec_review.md`、`code_review.md` 或任何单仓历史路径。
 
@@ -56,6 +61,9 @@
 - 状态面
 - profile 分层
 - 重 harness
+- formal spec suite
+
+如果目标仓库需要 Loom-owned `work item`、`progress`、`status` 或 `spec` carriers，必须把接入意图显式升级到 `execution-control`；此时才允许脚手架生成 `.loom/work-items/**`、`.loom/progress/**`、`.loom/status/current.md` 和 `.loom/specs/**`。
 
 ## 6. checkpoint-lite
 

package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/shared/references/adoption/repo-companion-contract.md

@@ -143,13 +143,7 @@
   },
   "dynamic_tool_locators": [],
   "policy_locators": [],
-  "hook_locators": [],
-  "release_targets": {
-    "catalog_locator": ".loom/companion/releases/catalog.json",
-    "current_target_locator": ".loom/companion/releases/current.json",
-    "enforcement": "blocking",
-    "status_locator": ".loom/companion/releases/status.json"
-  }
+  "hook_locators": []
 }
 ```
 
@@ -372,6 +366,8 @@
 
 `release_targets` 用于声明目标仓库自己的 release / version 真相入口。
 
+默认 adoption 不生成或声明 `release_targets`。只有目标仓库已有明确的 release target truth，并且接入决策显式要求暴露这组 repo-owned / host-owned locator 时，才写入本 section。
+
 它回答的是：
 
 - 目标仓库 release target catalog 去哪里读
@@ -403,6 +399,7 @@
 稳定约束：
 
 - `catalog_locator` 与 `current_target_locator` 只允许使用仓内相对路径；绝对路径、越界或不可读路径必须 fail closed
+- 缺省状态必须视为 `availability: absent` / `target_release.result: not_applicable`，不得生成 `bootstrap-v0.1.0`、空 release 或示例 release truth
 - target release object 必须与 Loom distribution version authority 分离；不得把 installer version、plugin version、runtime version、schema version 或 `VERSION` 回写成 target release truth
 - target release object 可以消费 `Phase` / `FR` / `Work Item` / `PR` / `merge commit` locator，但不得让 target release 直接成为执行入口
 - `status_locator` 若缺失，Loom 仍应从 authored target release object 与 delivery chain 派生自己的 target release status summary

package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/shared/references/adoption/target-repo-version-contract.md

@@ -63,7 +63,7 @@ Loom 读取 target release truth 后，应派生 `loom-target-release-status/v1`
 
 ## 4. `repo companion` 挂接方式
 
-目标仓库通过 `.loom/companion/repo-interface.json` `v2.release_targets` 挂接这一能力。
+目标仓库通过 `.loom/companion/repo-interface.json` `v2.release_targets` 挂接这一能力。默认 adoption 必须省略该 section；没有 release target intent 的仓库应被读取为 `release_targets.availability = absent` 与 `target_release.result = not_applicable`，而不是由 Loom 生成占位 release truth。
 
 最小字段：
 
@@ -79,6 +79,8 @@ Loom 读取 target release truth 后，应派生 `loom-target-release-status/v1`
 - `status_locator` 若存在，只能是 repo-owned derived status，不替代 Loom 自己的状态面
 - `enforcement` 只允许 `blocking | advisory`
 
+Loom 不得为了满足 schema 而生成 `bootstrap-v0.1.0`、空 catalog、示例 current release 或示例 status。声明 `release_targets` 时，locator 指向的对象必须来自目标仓库明确选择的 repo-owned 或 host-owned release/version truth。
+
 ## 5. closeout 语义
 
 若仓库声明了 target release truth，closeout 至少要能区分：

package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py

@@ -2228,9 +2228,6 @@ def detect_repo_interface(root: Path) -> tuple[dict[str, Any], list[str]]:
     repo_interface_surface["specialized_gates"] = manifest_repo_interface.copy()
     repo_interface_surface["dynamic_tool_locators"] = manifest_repo_interface.copy()
     repo_interface_surface["policy_locators"] = manifest_repo_interface.copy()
-    repo_interface_surface["release_targets"]["catalog"] = manifest_repo_interface.copy()
-    repo_interface_surface["release_targets"]["current_target"] = manifest_repo_interface.copy()
-    repo_interface_surface["release_targets"]["status"] = manifest_repo_interface.copy()
     if manifest_repo_interface_error:
         missing_inputs.append(manifest_repo_interface_error)
 

package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py

@@ -4336,6 +4336,17 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
             if pr_template:
                 (target / ".github" / "PULL_REQUEST_TEMPLATE.md").write_text("## Summary\n", encoding="utf-8")
 
+        def write_small_existing_repo(target: Path, *, pr_template: bool = False) -> None:
+            (target / ".github" / "workflows").mkdir(parents=True, exist_ok=True)
+            (target / "src").mkdir(parents=True, exist_ok=True)
+            (target / "README.md").write_text("# Small Existing Repo\n", encoding="utf-8")
+            (target / "AGENTS.md").write_text("# Root Rules\n", encoding="utf-8")
+            (target / "src" / "main.py").write_text("print('ok')\n", encoding="utf-8")
+            (target / ".github" / "workflows" / "ci.yml").write_text("name: ci\n", encoding="utf-8")
+            (target / "Makefile").write_text("check:\n\t@echo ok\n", encoding="utf-8")
+            if pr_template:
+                (target / ".github" / "PULL_REQUEST_TEMPLATE.md").write_text("## Summary\n", encoding="utf-8")
+
         attach_only_forbidden_patterns = (
             ".loom/work-items/**",
             ".loom/progress/**",
@@ -4343,6 +4354,15 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
             ".loom/reviews/**",
             ".loom/specs/**",
         )
+        default_release_paths = (
+            ".loom/companion/releases/changelog.md",
+            ".loom/companion/releases/release-notes.md",
+            ".loom/companion/releases/migration-notes.md",
+            ".loom/companion/releases/rollback.md",
+            ".loom/companion/releases/catalog.json",
+            ".loom/companion/releases/current.json",
+            ".loom/companion/releases/status.json",
+        )
 
         def matches_forbidden(path: str, pattern: str) -> bool:
             if pattern.endswith("/**"):
@@ -4358,6 +4378,50 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
                     return pattern
             return None
 
+        def assert_no_default_release_target(target: Path, payload: dict[str, object], context: str) -> None:
+            planned = payload.get("planned_writes")
+            planned_paths = {item.get("path") for item in planned if isinstance(item, dict)} if isinstance(planned, list) else set()
+            initial = payload.get("initial_artifacts")
+            initial_paths = {item.get("path") for item in initial if isinstance(item, dict)} if isinstance(initial, list) else set()
+            absent = payload.get("intentionally_absent")
+            absent_paths = {item.get("path") for item in absent if isinstance(item, dict)} if isinstance(absent, list) else set()
+            serialized = json.dumps(payload, ensure_ascii=False)
+            for release_path in default_release_paths:
+                if release_path in planned_paths:
+                    failures.append(Failure("deep-existing-bootstrap", f"`{context}` must not plan default release target `{release_path}`"))
+                if release_path in initial_paths:
+                    failures.append(Failure("deep-existing-bootstrap", f"`{context}` must not declare default release target `{release_path}`"))
+                if (target / release_path).exists():
+                    failures.append(Failure("deep-existing-bootstrap", f"`{context}` must not generate default release target `{release_path}`"))
+            if ".loom/companion/releases/**" not in absent_paths:
+                failures.append(Failure("deep-existing-bootstrap", f"`{context}` must mark release targets intentionally absent by default"))
+            if "bootstrap-v0.1.0" in serialized:
+                failures.append(Failure("deep-existing-bootstrap", f"`{context}` must not mention placeholder release id `bootstrap-v0.1.0`"))
+            repo_interface_path = target / ".loom/companion/repo-interface.json"
+            if repo_interface_path.exists():
+                repo_interface = json.loads(repo_interface_path.read_text(encoding="utf-8"))
+                if "release_targets" in repo_interface:
+                    failures.append(Failure("deep-existing-bootstrap", f"`{context}` repo-interface must not declare release_targets without release target intent"))
+            surface = build_governance_surface(target)
+            repo_interface_surface = surface.get("repo_interface") if isinstance(surface, dict) else None
+            release_targets = repo_interface_surface.get("release_targets") if isinstance(repo_interface_surface, dict) else None
+            require_release_targets_surface_payload(
+                failures,
+                category="deep-existing-bootstrap",
+                context=f"`{context}` absent release targets",
+                payload=release_targets,
+            )
+            target_release = release_targets.get("target_release") if isinstance(release_targets, dict) else None
+            if not isinstance(release_targets, dict) or release_targets.get("availability") != "absent":
+                failures.append(Failure("deep-existing-bootstrap", f"`{context}` must report release_targets availability absent by default"))
+            if not isinstance(target_release, dict) or target_release.get("result") != "not_applicable":
+                failures.append(Failure("deep-existing-bootstrap", f"`{context}` must report target_release not_applicable when release targets are absent"))
+            if isinstance(release_targets, dict):
+                for surface_key in ("catalog", "current_target", "status"):
+                    surface_entry = release_targets.get(surface_key)
+                    if isinstance(surface_entry, dict) and surface_entry.get("status") == "present":
+                        failures.append(Failure("deep-existing-bootstrap", f"`{context}` must not report absent release target `{surface_key}` as present"))
+
         deep_target = tmp_root / "deep-existing"
         write_repo(deep_target, validation_entry=True, pr_template=True, workflow_doc=True)
         deep_dry_payload, deep_dry_error = load_command_json(
@@ -4404,6 +4468,7 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
                 failures.append(Failure("deep-existing-bootstrap", "`deep-existing dry-run` must report detected repository mode"))
             if not isinstance(write, dict) or write.get("enabled") is not False:
                 failures.append(Failure("deep-existing-bootstrap", "`deep-existing dry-run` must keep write.enabled = false"))
+            assert_no_default_release_target(deep_target, deep_dry_payload, "deep-existing dry-run")
 
         deep_payload, deep_error = load_command_json(
             root,
@@ -4463,6 +4528,7 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
                 host_truth = repo_interface.get("host_truth_locators")
                 if not isinstance(host_truth, dict) or set(host_truth.keys()) != {"work_item", "project_status", "review", "closeout"}:
                     failures.append(Failure("deep-existing-bootstrap", "`deep-existing bootstrap` repo-interface must declare attach-only host truth locators"))
+            assert_no_default_release_target(deep_target, deep_payload, "deep-existing bootstrap")
 
         poisoned_files_target = tmp_root / "deep-existing-poison-files"
         if deep_target.exists() and (deep_target / ".loom/bin/loom_init.py").exists():
@@ -4583,6 +4649,10 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
             intent = explicit_payload.get("adoption_intent")
             recommended = explicit_payload.get("recommended_adoption")
             profile = explicit_payload.get("scaffold_profile")
+            planned = explicit_payload.get("planned_writes")
+            planned_paths = {item.get("path") for item in planned if isinstance(item, dict)} if isinstance(planned, list) else set()
+            initial = explicit_payload.get("initial_artifacts")
+            initial_paths = {item.get("path") for item in initial if isinstance(item, dict)} if isinstance(initial, list) else set()
             if not isinstance(intent, dict) or intent.get("effective") != "execution-control":
                 failures.append(Failure("deep-existing-bootstrap", "explicit full-bootstrap sample must report `adoption_intent.effective = execution-control`"))
             if not isinstance(recommended, dict) or recommended.get("path") != "full-bootstrap":
@@ -4595,12 +4665,17 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
                 ".loom/status/current.md",
                 ".loom/reviews/INIT-0001.json",
                 ".loom/specs/INIT-0001/spec.md",
+                ".loom/specs/INIT-0001/plan.md",
+                ".loom/specs/INIT-0001/implementation-contract.md",
             ):
                 if not (explicit_full_target / required).exists():
                     failures.append(Failure("deep-existing-bootstrap", f"`explicit execution-control bootstrap sample` must generate `{required}`"))
+                if required not in planned_paths or required not in initial_paths:
+                    failures.append(Failure("deep-existing-bootstrap", f"`explicit execution-control bootstrap sample` must declare `{required}` in planned_writes and initial_artifacts"))
+            assert_no_default_release_target(explicit_full_target, explicit_payload, "explicit execution-control bootstrap sample")
 
         light_target = tmp_root / "light-governance"
-        write_repo(light_target, validation_entry=True, pr_template=False, workflow_doc=False)
+        write_small_existing_repo(light_target)
         light_payload, light_error = load_command_json(
             root,
             [
@@ -4620,23 +4695,76 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
         if light_error:
             failures.append(Failure("deep-existing-bootstrap", f"`light-governance bootstrap sample` failed: {light_error}"))
         else:
+            run = light_payload.get("run")
+            recommended = light_payload.get("recommended_adoption")
             profile = light_payload.get("scaffold_profile")
+            intentionally_absent = light_payload.get("intentionally_absent")
+            absent_paths = (
+                {item.get("path") for item in intentionally_absent if isinstance(item, dict)}
+                if isinstance(intentionally_absent, list)
+                else set()
+            )
+            if not isinstance(run, dict) or run.get("scenario_key") != "small-existing" or run.get("recovery_mode") != "checkpoint-lite":
+                failures.append(Failure("deep-existing-bootstrap", "light-governance sample must model small-existing checkpoint-lite adoption"))
+            if not isinstance(recommended, dict) or recommended.get("path") != "lightweight-retrofit":
+                failures.append(Failure("deep-existing-bootstrap", "light-governance sample must select `recommended_adoption.path = lightweight-retrofit`"))
             if not isinstance(profile, dict) or profile.get("name") != "light-governance":
                 failures.append(Failure("deep-existing-bootstrap", "light-governance sample must report `scaffold_profile.name = light-governance`"))
+            if not isinstance(profile, dict) or profile.get("writes_work_item_carriers") is not False:
+                failures.append(Failure("deep-existing-bootstrap", "light-governance sample must report `writes_work_item_carriers = false`"))
             if not isinstance(light_payload.get("upgrade_triggers"), list) or not light_payload["upgrade_triggers"]:
                 failures.append(Failure("deep-existing-bootstrap", "light-governance sample must report top-level upgrade_triggers"))
+            deferred_text = json.dumps(light_payload.get("deferred_capabilities", []), ensure_ascii=False)
+            if "spec" not in deferred_text or "execution-control" not in deferred_text:
+                failures.append(Failure("deep-existing-bootstrap", "light-governance sample must defer Loom-owned spec carriers to execution-control"))
             planned = light_payload.get("planned_writes")
             planned_paths = {item.get("path") for item in planned if isinstance(item, dict)} if isinstance(planned, list) else set()
-            for required in (".loom/reviews/INIT-0001.json", ".loom/specs/INIT-0001/spec.md", ".github/PULL_REQUEST_TEMPLATE.md"):
+            for required in (".loom/reviews/INIT-0001.json", ".loom/reviews/INIT-0001.spec.json", ".github/PULL_REQUEST_TEMPLATE.md"):
                 if required not in planned_paths or not (light_target / required).exists():
                     failures.append(Failure("deep-existing-bootstrap", f"`light-governance bootstrap sample` must generate `{required}`"))
+            for absent in (".loom/work-items/**", ".loom/progress/**", ".loom/status/current.md", ".loom/specs/**"):
+                if absent not in absent_paths:
+                    failures.append(Failure("deep-existing-bootstrap", f"`light-governance bootstrap sample` must mark `{absent}` intentionally absent"))
             for forbidden in (
                 ".loom/work-items/INIT-0001.md",
                 ".loom/progress/INIT-0001.md",
                 ".loom/status/current.md",
+                ".loom/specs/INIT-0001/spec.md",
+                ".loom/specs/INIT-0001/plan.md",
+                ".loom/specs/INIT-0001/implementation-contract.md",
             ):
                 if forbidden in planned_paths or (light_target / forbidden).exists():
                     failures.append(Failure("deep-existing-bootstrap", f"`light-governance bootstrap sample` must not generate `{forbidden}`"))
+            assert_no_default_release_target(light_target, light_payload, "light-governance bootstrap sample")
+            readme_text = (light_target / ".loom/README.md").read_text(encoding="utf-8") if (light_target / ".loom/README.md").exists() else ""
+            if ".loom/specs" in readme_text or "Spec suite" in readme_text:
+                failures.append(Failure("deep-existing-bootstrap", "`light-governance bootstrap sample` must not declare a spec suite in `.loom/README.md`"))
+            spec_review_text = (light_target / ".loom/reviews/INIT-0001.spec.json").read_text(encoding="utf-8") if (light_target / ".loom/reviews/INIT-0001.spec.json").exists() else ""
+            if "formal spec path" in spec_review_text:
+                failures.append(Failure("deep-existing-bootstrap", "`light-governance spec review placeholder` must not tell operators to consume a formal spec path"))
+            if (light_target / ".loom/bin/loom_init.py").exists():
+                poisoned_light_target = tmp_root / "light-governance-poison-specs"
+                shutil.copytree(light_target, poisoned_light_target)
+                (poisoned_light_target / ".loom/specs/INIT-0001").mkdir(parents=True, exist_ok=True)
+                (poisoned_light_target / ".loom/specs/INIT-0001/spec.md").write_text("# Unexpected Spec\n", encoding="utf-8")
+                poisoned_payload, poisoned_error = load_command_json(
+                    root,
+                    [
+                        "python3",
+                        str(poisoned_light_target / ".loom/bin/loom_init.py"),
+                        "verify",
+                        "--target",
+                        str(poisoned_light_target),
+                    ],
+                )
+                if poisoned_error:
+                    failures.append(Failure("deep-existing-bootstrap", f"`light-governance forbidden spec verify` failed: {poisoned_error}"))
+                else:
+                    errors_text = json.dumps(poisoned_payload.get("errors", []), ensure_ascii=False) if poisoned_payload else ""
+                    if poisoned_payload.get("ok") is not False:
+                        failures.append(Failure("deep-existing-bootstrap", "`light-governance forbidden spec verify` must fail closed"))
+                    if ".loom/specs/INIT-0001/spec.md" not in errors_text:
+                        failures.append(Failure("deep-existing-bootstrap", "`light-governance forbidden spec verify` must name the unexpected spec carrier"))
     return failures
 
 

package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py

@@ -3172,12 +3172,6 @@ def default_repo_interface() -> dict[str, Any]:
         "dynamic_tool_locators": [],
         "policy_locators": [],
         "hook_locators": [],
-        "release_targets": {
-            "catalog_locator": ".loom/companion/releases/catalog.json",
-            "current_target_locator": ".loom/companion/releases/current.json",
-            "enforcement": "blocking",
-            "status_locator": ".loom/companion/releases/status.json",
-        },
     }
 
 
@@ -3237,10 +3231,6 @@ def companion_text_payloads() -> dict[str, str]:
         ".loom/companion/merge-ready.md": "# Companion Merge-Ready Surface\n",
         ".loom/companion/closeout.md": "# Companion Closeout Surface\n",
         ".loom/companion/checkpoints.md": "# Companion Checkpoints\n",
-        ".loom/companion/releases/changelog.md": "# Changelog\n\n- Bootstrap release intake example.\n",
-        ".loom/companion/releases/release-notes.md": "# Release Notes\n\n- Bootstrap release target is ready for Loom-derived status consumption.\n",
-        ".loom/companion/releases/migration-notes.md": "# Migration Notes\n\n- not_applicable\n",
-        ".loom/companion/releases/rollback.md": "# Rollback Basis\n\n- Revert the companion-owned release target declaration and rerun Loom checks.\n",
     }
 
 
@@ -3249,48 +3239,6 @@ def companion_json_payloads() -> dict[str, dict[str, Any]]:
         ".loom/companion/manifest.json": default_companion_manifest(),
         ".loom/companion/repo-interface.json": default_repo_interface(),
         ".loom/companion/interop.json": default_repo_interop(),
-        ".loom/companion/releases/catalog.json": {
-            "schema_version": "loom-target-release-catalog/v1",
-            "current_release_id": "bootstrap-v0.1.0",
-            "releases": [
-                {
-                    "release_id": "bootstrap-v0.1.0",
-                    "locator": ".loom/companion/releases/current.json",
-                }
-            ],
-        },
-        ".loom/companion/releases/current.json": {
-            "schema_version": "loom-target-release/v1",
-            "release_id": "bootstrap-v0.1.0",
-            "display_name": "Bootstrap v0.1.0",
-            "target_branch": "main",
-            "release_goal": "Bootstrap the first executable Loom path for this repository.",
-            "status": "unreleased",
-            "included_scope": {
-                "phase": [{"id": "bootstrap-phase", "locator": ".loom/companion/checkpoints.md", "delivery_status": "planned"}],
-                "fr": [],
-                "work_item": [{"id": "INIT-0001", "locator": ".loom/work-items/INIT-0001.md", "delivery_status": "unmerged"}],
-                "implementation_pr": [],
-                "merge_commit": [],
-            },
-            "evidence": {
-                "changelog_locator": ".loom/companion/releases/changelog.md",
-                "release_notes_locator": ".loom/companion/releases/release-notes.md",
-                "migration_notes_locator": ".loom/companion/releases/migration-notes.md",
-                "tag_or_artifact_locator": ".loom/companion/README.md",
-                "rollback_basis_locator": ".loom/companion/releases/rollback.md",
-            },
-            "authority": {
-                "owner": "repo-companion",
-                "source_kind": "repo_owned_locator",
-                "source_locator": ".loom/companion/releases/current.json",
-            },
-        },
-        ".loom/companion/releases/status.json": {
-            "schema_version": "loom-target-release-status/v1",
-            "result": "pass",
-            "summary": "repo-owned release status example is readable.",
-        },
     }