@mc-and-his-agents/loom-installer 0.1.23 → 0.1.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "9ba44dcc76daf7e100edafd5943b99c4a69ba710",
+  "source_commit": "b3b72c7a74674319f0a7432487fc0e3cbf012b4f",
   "source_ref": "main",
-  "built_at": "2026-04-26T23:19:03+08:00",
+  "built_at": "2026-04-26T23:56:30+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -618,8 +618,8 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
@@ -628,13 +628,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1203,8 +1203,8 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
@@ -1213,13 +1213,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1818,8 +1818,8 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
@@ -1828,13 +1828,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2433,8 +2433,8 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
@@ -2443,13 +2443,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3053,8 +3053,8 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
@@ -3063,13 +3063,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3668,8 +3668,8 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
@@ -3678,13 +3678,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4283,8 +4283,8 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
@@ -4293,13 +4293,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4898,8 +4898,8 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
@@ -4908,13 +4908,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5513,8 +5513,8 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
@@ -5523,13 +5523,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6128,8 +6128,8 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19586,
-      "sha256": "9ba73a76710189a2306f3ced374ea99c7ef43d4df10f25fef929e874b006fa22"
+      "bytes": 19933,
+      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
@@ -6138,13 +6138,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 278763,
-      "sha256": "3b2257fddc37fdb514953500a38e94ca241a5889a5c6343b975db5a1109bbff4"
+      "bytes": 287428,
+      "sha256": "48bf635cb9fb4f28b38309a81ecb67a48b489d72f83c4907d972230481848ddb"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 290661,
-      "sha256": "18c5dc39a4cd2982a40c729807b12c2b15efd41a2962719b5491b06dad83c028"
+      "bytes": 296151,
+      "sha256": "f74afa96460de82ef279ec78a0468906ca1db26b867a4fc810025164ae8f7146"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/fact_chain_support.py

@@ -131,6 +131,7 @@ def parse_key_value_section(
         return {}, [f"{relative_path}: missing section `{section_name}`"]
 
     values: dict[str, str] = {}
+    seen: dict[str, str] = {}
     for raw_line in lines:
         stripped = raw_line.strip()
         if not stripped:
@@ -143,7 +144,15 @@ def parse_key_value_section(
         if label not in field_map:
             errors.append(f"{relative_path}: unexpected field `{label}` in `{section_name}`")
             continue
-        values[field_map[label]] = _clean_value(match.group(2))
+        canonical = field_map[label]
+        if canonical in seen:
+            errors.append(
+                f"{relative_path}: duplicate field `{label}` in `{section_name}` "
+                f"(canonical `{canonical}` already set by `{seen[canonical]}`)"
+            )
+            continue
+        seen[canonical] = label
+        values[canonical] = _clean_value(match.group(2))
 
     for label, canonical in field_map.items():
         if canonical not in values:

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -4,6 +4,7 @@
 from __future__ import annotations
 
 import re
+import hashlib
 import shutil
 import subprocess
 import sys
@@ -1071,6 +1072,14 @@ def require_shadow_parity_payload(
             locator = surface_payload.get("locator")
             if not isinstance(locator, str) or not locator:
                 failures.append(Failure(category, f"{context} reports[{index}] `{surface_key}.locator` must be non-empty"))
+            if surface_payload.get("status") == "readable":
+                source_files = surface_payload.get("source_files")
+                source_sha256 = surface_payload.get("source_sha256")
+                if not isinstance(source_files, list) or not source_files:
+                    failures.append(Failure(category, f"{context} reports[{index}] `{surface_key}.source_files` must be non-empty for readable evidence"))
+                    source_files = []
+                if not isinstance(source_sha256, dict) or set(source_sha256) != set(source_files):
+                    failures.append(Failure(category, f"{context} reports[{index}] `{surface_key}.source_sha256` must match source_files exactly"))
 
 
 def require_host_lifecycle_payload(
@@ -2202,6 +2211,43 @@ def check_demo_fact_chain(root: Path) -> list[Failure]:
         failures.append(Failure("demo-fact-chain", detail))
     if report and report.get("fact_chain", {}).get("entry_points", {}).get("status_surface") != ".loom/status/current.md":
         failures.append(Failure("demo-fact-chain", "demo fact chain must point status_surface to `.loom/status/current.md`"))
+    with tempfile.TemporaryDirectory(prefix="loom-check-metadata-spoof-") as tmp:
+        spoof_target = Path(tmp) / "new-project"
+        shutil.copytree(target, spoof_target)
+        work_item_path = spoof_target / ".loom/work-items/INIT-0001.md"
+        work_item_text = work_item_path.read_text(encoding="utf-8")
+        work_item_path.write_text(
+            work_item_text.replace(
+                "- Goal: Bootstrap the first executable Loom path for this repository\n",
+                "- Goal: wrong spoofed goal\n- Goal: Bootstrap the first executable Loom path for this repository\n",
+                1,
+            ),
+            encoding="utf-8",
+        )
+        _, spoof_errors = inspect_fact_chain(spoof_target)
+        if not any("duplicate field `Goal`" in error for error in spoof_errors):
+            failures.append(Failure("demo-fact-chain", "fact-chain parser must reject duplicate canonical metadata fields"))
+
+        runtime_spoof_target = Path(tmp) / "runtime-spoof"
+        shutil.copytree(target, runtime_spoof_target)
+        status_path = runtime_spoof_target / ".loom/status/current.md"
+        status_text = status_path.read_text(encoding="utf-8")
+        status_path.write_text(
+            status_text.replace(
+                "- Run Entry: not_applicable\n",
+                "- Run Entry: wrong-spoofed-run\n- Run Entry: not_applicable\n",
+                1,
+            ),
+            encoding="utf-8",
+        )
+        payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "fact-chain", "--target", str(runtime_spoof_target)],
+        )
+        if error:
+            failures.append(Failure("demo-fact-chain", f"`flow fact-chain` metadata spoof sample failed unexpectedly: {error}"))
+        elif payload.get("result") != "block":
+            failures.append(Failure("demo-fact-chain", "`flow fact-chain` must not legacy-fallback past duplicate Runtime Evidence fields"))
     return failures
 
 
@@ -5472,6 +5518,29 @@ def check_repo_interop_contracts(root: Path) -> list[Failure]:
         path.parent.mkdir(parents=True, exist_ok=True)
         path.write_text(json.dumps(payload, ensure_ascii=False, indent=2) + "\n", encoding="utf-8")
 
+    def sha256_file(path: Path) -> str:
+        digest = hashlib.sha256()
+        with path.open("rb") as handle:
+            for chunk in iter(lambda: handle.read(1024 * 1024), b""):
+                digest.update(chunk)
+        return digest.hexdigest()
+
+    def write_shadow_evidence(target: Path, evidence: str, value_key: str, value: str, source: str) -> None:
+        source_path = target / source
+        source_path.parent.mkdir(parents=True, exist_ok=True)
+        if not source_path.exists():
+            write_json(source_path, {"value": value})
+        write_json(
+            target / evidence,
+            {
+                value_key: value,
+                "source_files": [source],
+                "source_sha256": {
+                    source: sha256_file(source_path),
+                },
+            },
+        )
+
     def install_interop(
         target: Path,
         *,
@@ -5484,17 +5553,21 @@ def check_repo_interop_contracts(root: Path) -> list[Failure]:
         (target / ".loom" / "shadow").mkdir(parents=True, exist_ok=True)
         (target / "native" / "status").mkdir(parents=True, exist_ok=True)
         for relative, payload in {
-            ".loom/shadow/admission-loom.json": {"result": "pass"},
-            ".loom/shadow/admission-repo.json": {"result": "pass"},
-            ".loom/shadow/review-loom.json": {"decision": "allow"},
-            ".loom/shadow/review-repo.json": {"decision": "allow"},
-            ".loom/shadow/merge-ready-loom.json": {"status": "pass"},
-            ".loom/shadow/merge-ready-repo.json": {"status": "pass"},
-            ".loom/shadow/closeout-loom.json": {"status": "done"},
-            ".loom/shadow/closeout-repo.json": {"status": "done"},
             "host/guardian-review.json": {"verdict": "allow"},
+            "native/status/admission.json": {"result": "pass"},
+            "native/status/review.json": {"decision": "allow"},
+            "native/status/merge-ready.json": {"status": "pass"},
+            "native/status/closeout.json": {"status": "done"},
         }.items():
             write_json(target / relative, payload)
+        write_shadow_evidence(target, ".loom/shadow/admission-loom.json", "result", "pass", ".loom/status/current.md")
+        write_shadow_evidence(target, ".loom/shadow/admission-repo.json", "result", "pass", "native/status/admission.json")
+        write_shadow_evidence(target, ".loom/shadow/review-loom.json", "decision", "allow", "host/guardian-review.json")
+        write_shadow_evidence(target, ".loom/shadow/review-repo.json", "decision", "allow", "native/status/review.json")
+        write_shadow_evidence(target, ".loom/shadow/merge-ready-loom.json", "status", "pass", "host/guardian-review.json")
+        write_shadow_evidence(target, ".loom/shadow/merge-ready-repo.json", "status", "pass", "native/status/merge-ready.json")
+        write_shadow_evidence(target, ".loom/shadow/closeout-loom.json", "status", "done", ".loom/status/current.md")
+        write_shadow_evidence(target, ".loom/shadow/closeout-repo.json", "status", "done", "native/status/closeout.json")
         if interop is not None:
             write_json(companion_dir / "interop.json", interop)
 
@@ -5641,7 +5714,8 @@ def check_repo_interop_contracts(root: Path) -> list[Failure]:
 
         mismatch_target = base / "mismatch"
         shutil.copytree(present_target, mismatch_target)
-        write_json(mismatch_target / ".loom/shadow/review-repo.json", {"decision": "block"})
+        write_json(mismatch_target / "native/status/review.json", {"decision": "block"})
+        write_shadow_evidence(mismatch_target, ".loom/shadow/review-repo.json", "decision", "block", "native/status/review.json")
         mismatch_payload, error = load_command_json(
             root,
             ["python3", "tools/loom_flow.py", "shadow-parity", "--target", str(mismatch_target), "--surface", "review"],
@@ -5716,6 +5790,93 @@ def check_repo_interop_contracts(root: Path) -> list[Failure]:
             if blocking_unreadable_payload.get("result") != "block":
                 failures.append(Failure("repo-interop", "`shadow-parity --blocking` must block unreadable surfaces"))
 
+        missing_hash_target = base / "missing-hash"
+        shutil.copytree(present_target, missing_hash_target)
+        write_json(
+            missing_hash_target / ".loom/shadow/review-repo.json",
+            {
+                "decision": "allow",
+                "source_files": ["native/status/review.json"],
+            },
+        )
+        missing_hash_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "shadow-parity", "--target", str(missing_hash_target), "--surface", "review"],
+        )
+        if error:
+            failures.append(Failure("repo-interop", f"`shadow-parity` missing hash sample failed: {error}"))
+        else:
+            require_shadow_parity_payload(
+                failures,
+                category="repo-interop",
+                context="`shadow-parity` missing hash sample",
+                payload=missing_hash_payload,
+                expected_reports=1,
+            )
+            reports = missing_hash_payload.get("reports")
+            if not isinstance(reports, list) or not reports or reports[0].get("result") != "unreadable":
+                failures.append(Failure("repo-interop", "`shadow-parity` missing hash sample must report `unreadable`"))
+
+        partial_hash_target = base / "partial-hash"
+        shutil.copytree(present_target, partial_hash_target)
+        write_json(
+            partial_hash_target / ".loom/shadow/review-repo.json",
+            {
+                "decision": "allow",
+                "source_files": ["native/status/review.json", "host/guardian-review.json"],
+                "source_sha256": {
+                    "native/status/review.json": sha256_file(partial_hash_target / "native/status/review.json"),
+                },
+            },
+        )
+        partial_hash_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "shadow-parity", "--target", str(partial_hash_target), "--surface", "review"],
+        )
+        if error:
+            failures.append(Failure("repo-interop", f"`shadow-parity` partial hash sample failed: {error}"))
+        else:
+            reports = partial_hash_payload.get("reports")
+            if not isinstance(reports, list) or not reports or reports[0].get("result") != "unreadable":
+                failures.append(Failure("repo-interop", "`shadow-parity` partial hash sample must report `unreadable`"))
+
+        hash_drift_target = base / "hash-drift"
+        shutil.copytree(present_target, hash_drift_target)
+        write_json(hash_drift_target / "native/status/review.json", {"decision": "changed-after-evidence"})
+        hash_drift_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "shadow-parity", "--target", str(hash_drift_target), "--surface", "review"],
+        )
+        if error:
+            failures.append(Failure("repo-interop", f"`shadow-parity` hash drift sample failed: {error}"))
+        else:
+            reports = hash_drift_payload.get("reports")
+            if not isinstance(reports, list) or not reports or reports[0].get("result") != "unreadable":
+                failures.append(Failure("repo-interop", "`shadow-parity` hash drift sample must report `unreadable`"))
+
+        rogue_target = base / "rogue"
+        shutil.copytree(present_target, rogue_target)
+        write_json(
+            rogue_target / ".loom/shadow/rogue.json",
+            {
+                "result": "pass",
+                "source_files": ["native/status/review.json"],
+                "source_sha256": {
+                    "native/status/review.json": sha256_file(rogue_target / "native/status/review.json"),
+                },
+            },
+        )
+        rogue_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "shadow-parity", "--target", str(rogue_target), "--surface", "review"],
+        )
+        if error:
+            failures.append(Failure("repo-interop", f"`shadow-parity` rogue evidence sample failed: {error}"))
+        else:
+            reports = rogue_payload.get("reports")
+            if not isinstance(reports, list) or not reports or reports[0].get("result") != "unreadable":
+                failures.append(Failure("repo-interop", "`shadow-parity` rogue evidence sample must report `unreadable`"))
+
     return failures