@mc-and-his-agents/loom-installer 0.1.29 → 0.1.30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.29",
+  "version": "0.1.30",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "b67209a41ceebaa29825a45453945523ec85a320",
+  "source_commit": "5c3a0a7339be746f305853154aef71de6eb2dc79",
   "source_ref": "main",
-  "built_at": "2026-04-27T01:23:49+08:00",
+  "built_at": "2026-04-27T13:52:07+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -623,28 +623,28 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_status.py",
@@ -1213,28 +1213,28 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_status.py",
@@ -1833,28 +1833,28 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_status.py",
@@ -2453,28 +2453,28 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_status.py",
@@ -3078,28 +3078,28 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_status.py",
@@ -3698,28 +3698,28 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_status.py",
@@ -4318,28 +4318,28 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_status.py",
@@ -4938,28 +4938,28 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_status.py",
@@ -5558,28 +5558,28 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_status.py",
@@ -6178,28 +6178,28 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 19933,
-      "sha256": "0e215e1c83443c8688c984241a8008e5b419f68b8838eecbcfb695857e212923"
+      "bytes": 21694,
+      "sha256": "406352215e9ff1c582d750761b911bd227c99b3cc29d3710143554ced7f9e080"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 56137,
-      "sha256": "2f873ee4ddd170af4a835da24bafa59f6e5561ee74360faf71e98e8480100a72"
+      "bytes": 56201,
+      "sha256": "82109bad507ea760c7df3a401b648b34c35da03f8f85eb40481834e44b29ed0f"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 318256,
-      "sha256": "17fae648df2977fddfed4c7d1dc2ec1fef648799fbfd73ba8fa36cfd73b8e925"
+      "bytes": 321273,
+      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 296657,
-      "sha256": "7d4f476d8117a6b9d264a71f8300f229bf511dd9e1fb2b29636990c16c6d197d"
+      "bytes": 302884,
+      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",
-      "bytes": 85311,
-      "sha256": "8fc0f350f55fa068b4b69854fb81f3b45fbace5bf384f900a63aeb9adfd87c1b"
+      "bytes": 85625,
+      "sha256": "059440a394dd4e92356addeab830f536497e0180d85e0be053e56442594410af"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_status.py",

package/payload/plugin/loom/skills/shared/scripts/fact_chain_support.py

@@ -183,7 +183,25 @@ def parse_list_section(sections: dict[str, list[str]], section_name: str, relati
 
 
 def _relative(path: Path, root: Path) -> str:
-    return str(path.relative_to(root))
+    return str(path.resolve().relative_to(root.resolve()))
+
+
+def resolve_repo_relative_path(target_root: Path, relative: str, *, label: str) -> tuple[Path | None, list[str]]:
+    """Resolve a repository locator while rejecting absolute paths and path escapes."""
+    if not isinstance(relative, str) or not relative.strip():
+        return None, [f"{label} must be a non-empty repo-relative path"]
+    locator = relative.strip()
+    candidate_raw = Path(locator)
+    if candidate_raw.is_absolute():
+        return None, [f"{label} must be repo-relative, got absolute path: {locator}"]
+    if ".." in candidate_raw.parts:
+        return None, [f"{label} must stay inside the target repository: {locator}"]
+    candidate = (target_root / candidate_raw).resolve()
+    try:
+        candidate.relative_to(target_root.resolve())
+    except ValueError:
+        return None, [f"{label} must stay inside the target repository: {locator}"]
+    return candidate, []
 
 
 def parse_work_item(path: Path, root: Path) -> tuple[dict[str, object], list[str]]:
@@ -301,7 +319,10 @@ def inspect_fact_chain(
     output_relative: str = ".loom/bootstrap/init-result.json",
 ) -> tuple[dict[str, object], list[str]]:
     errors: list[str] = []
-    output_path = target_root / output_relative
+    output_path, output_errors = resolve_repo_relative_path(target_root, output_relative, label="init-result locator")
+    if output_errors:
+        return {}, output_errors
+    assert output_path is not None
     if not output_path.exists():
         return {}, [f"missing init-result: {output_relative}"]
 
@@ -346,9 +367,29 @@ def inspect_fact_chain(
     if errors:
         return {}, errors
 
-    work_item_path = target_root / str(work_item_ref)
-    recovery_path = target_root / str(recovery_ref)
-    status_path = target_root / str(status_ref)
+    work_item_path, work_item_path_errors = resolve_repo_relative_path(
+        target_root,
+        str(work_item_ref),
+        label="init-result.fact_chain.entry_points.work_item",
+    )
+    recovery_path, recovery_path_errors = resolve_repo_relative_path(
+        target_root,
+        str(recovery_ref),
+        label="init-result.fact_chain.entry_points.recovery_entry",
+    )
+    status_path, status_path_errors = resolve_repo_relative_path(
+        target_root,
+        str(status_ref),
+        label="init-result.fact_chain.entry_points.status_surface",
+    )
+    errors.extend(work_item_path_errors)
+    errors.extend(recovery_path_errors)
+    errors.extend(status_path_errors)
+    if errors:
+        return {}, errors
+    assert work_item_path is not None
+    assert recovery_path is not None
+    assert status_path is not None
     for label, path in (
         ("work_item", work_item_path),
         ("recovery_entry", recovery_path),

package/payload/plugin/loom/skills/shared/scripts/governance_surface.py

@@ -468,10 +468,9 @@ def relative_locator_from_value(root: Path, raw_locator: object) -> str | None:
         return None
     locator_path = Path(locator)
     if locator_path.is_absolute():
-        try:
-            return str(locator_path.relative_to(root))
-        except ValueError:
-            return str(locator_path)
+        return None
+    if ".." in locator_path.parts:
+        return None
     return str(locator_path)
 
 
@@ -479,7 +478,12 @@ def resolve_locator(root: Path, raw_locator: object) -> tuple[str | None, Path |
     locator = relative_locator_from_value(root, raw_locator)
     if locator is None:
         return None, None
-    return locator, (root / locator).resolve()
+    target = (root / locator).resolve()
+    try:
+        target.relative_to(root.resolve())
+    except ValueError:
+        return None, None
+    return locator, target
 
 
 def locator_status_entry(

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -272,6 +272,7 @@ def check_required_paths(root: Path, category: str, paths: tuple[str, ...]) -> l
 def iter_markdown_files(root: Path) -> list[Path]:
     skipped_parts = {
         ".git",
+        ".worktrees",
         "node_modules",
         "dist",
         "payload",
@@ -6337,6 +6338,66 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
             elif payload.get("result") != expected:
                 failures.append(Failure("adversarial-adoption", f"`{label}` baseline must return `{expected}`"))
 
+        path_escape_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "fact-chain", "--target", str(baseline), "--output", "../outside-init-result.json"],
+        )
+        if error:
+            failures.append(Failure("adversarial-adoption", f"path escape fact-chain sample failed: {error}"))
+        elif path_escape_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "fact-chain must block init-result locators that escape the target root"))
+
+        escape_work_item_payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "work-item",
+                "create",
+                "--target",
+                str(baseline),
+                "--item",
+                "ESCAPE-0001",
+                "--goal",
+                "Reject path escape",
+                "--scope",
+                "Exercise repo-relative locator hardening",
+                "--execution-path",
+                "execution/support",
+                "--workspace-entry",
+                ".",
+                "--validation-entry",
+                "python3 .loom/bin/loom_init.py verify --target .",
+                "--closing-condition",
+                "Unsafe locators are blocked.",
+                "--recovery-entry",
+                "../escape.md",
+                "--init-recovery",
+            ],
+        )
+        if error:
+            failures.append(Failure("adversarial-adoption", f"path escape work-item sample failed: {error}"))
+        elif escape_work_item_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "work-item create must block recovery locators that escape the target root"))
+
+        shadow_escape_target = base / "shadow-locator-escape"
+        shutil.copytree(baseline, shadow_escape_target)
+        interop_path = shadow_escape_target / ".loom/companion/interop.json"
+        interop_payload = load_json_file(interop_path)
+        shadow_surfaces = interop_payload.get("shadow_surfaces") if isinstance(interop_payload, dict) else None
+        review_surface = shadow_surfaces.get("review") if isinstance(shadow_surfaces, dict) else None
+        if isinstance(review_surface, dict):
+            review_surface["loom_locator"] = "/tmp/outside-shadow-evidence.json"
+            write_json(interop_path, interop_payload)
+        shadow_escape_payload, error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "shadow-parity", "--target", str(shadow_escape_target), "--surface", "review", "--blocking"],
+        )
+        if error:
+            failures.append(Failure("adversarial-adoption", f"path escape shadow-parity sample failed: {error}"))
+        elif shadow_escape_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "shadow-parity blocking mode must reject absolute shadow locators"))
+
         poisoned_payload, error = load_command_json(
             root,
             ["python3", str(baseline / ".loom/bin/loom_init.py"), "runtime-state", "--target", str(baseline)],