@mc-and-his-agents/loom-installer 0.1.39 → 0.1.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.39",
+  "version": "0.1.41",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "a0094e42a22f72429dccc3f437df2d86b084544d",
+  "source_commit": "348e5ac4d5c30e78a985865f38f792d40fd278fa",
   "source_ref": "main",
-  "built_at": "2026-04-27T16:28:18+08:00",
+  "built_at": "2026-04-27T17:41:47+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -623,8 +623,8 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
@@ -633,13 +633,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1213,8 +1213,8 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
@@ -1223,13 +1223,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1833,8 +1833,8 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
@@ -1843,13 +1843,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2453,8 +2453,8 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
@@ -2463,13 +2463,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3078,8 +3078,8 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
@@ -3088,13 +3088,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3698,8 +3698,8 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
@@ -3708,13 +3708,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4318,8 +4318,8 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
@@ -4328,13 +4328,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4938,8 +4938,8 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
@@ -4948,13 +4948,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5558,8 +5558,8 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
@@ -5568,13 +5568,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6178,8 +6178,8 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/fact_chain_support.py",
-      "bytes": 21748,
-      "sha256": "e5c52cda01f1107cafcd00bf2d37feaa167f1acd5152fc8f41f28ee3255a7d52"
+      "bytes": 22966,
+      "sha256": "78cf0d0022a4c03933a5e46cba676e80cafa5d0802fb95191a761ec9f9417e65"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
@@ -6188,13 +6188,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 340603,
-      "sha256": "8affea751d682b3bcb0fd975652b7c09c9af2cebe5a7dd069d0e64a3e9ce6858"
+      "bytes": 347978,
+      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 334363,
-      "sha256": "e9b376551600383e95e4f707557bb957edf51cd9ee2263587b8b6109088b737c"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/fact_chain_support.py

@@ -204,6 +204,40 @@ def resolve_repo_relative_path(target_root: Path, relative: str, *, label: str)
     return candidate, []
 
 
+def path_boundary_missing_details(*, label: str, locator: object, errors: list[str]) -> list[dict[str, object]]:
+    """Return stable machine-readable details for repo locator boundary failures."""
+    locator_text = "" if locator is None else str(locator)
+    details: list[dict[str, object]] = []
+    for message in errors:
+        if "non-empty" in message:
+            kind = "empty_locator"
+        elif "absolute path" in message or "repo-relative" in message:
+            kind = "absolute_locator"
+        else:
+            kind = "repo_locator_escape"
+
+        scopes: list[str] = []
+        if "target root" in message:
+            scopes.append("target_root")
+        if "repository" in message or "repo-relative" in message:
+            scopes.append("repository_root")
+        if not scopes:
+            scopes.append("repository_root")
+
+        for scope in scopes:
+            details.append(
+                {
+                    "category": "path_boundary",
+                    "kind": kind,
+                    "scope": scope,
+                    "label": label,
+                    "locator": locator_text,
+                    "message": message,
+                }
+            )
+    return details
+
+
 def parse_work_item(path: Path, root: Path) -> tuple[dict[str, object], list[str]]:
     relative_path = _relative(path, root)
     sections = markdown_sections(path)

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -1062,6 +1062,26 @@ def require_repo_specific_requirements_payload(
             failures.append(Failure(category, f"{context} declared requirements must split cleanly into blocking and advisory"))
 
 
+def require_missing_details(
+    failures: list[Failure],
+    *,
+    category: str,
+    context: str,
+    details: object,
+) -> None:
+    if not isinstance(details, list):
+        failures.append(Failure(category, f"{context} must be a list"))
+        return
+    for index, detail in enumerate(details):
+        if not isinstance(detail, dict):
+            failures.append(Failure(category, f"{context}[{index}] must be an object"))
+            continue
+        for field in ("category", "kind", "scope", "label", "locator", "message"):
+            value = detail.get(field)
+            if not isinstance(value, str) or not value:
+                failures.append(Failure(category, f"{context}[{index}] missing `{field}`"))
+
+
 def require_shadow_parity_payload(
     failures: list[Failure],
     *,
@@ -1090,6 +1110,14 @@ def require_shadow_parity_payload(
         failures.append(Failure(category, f"{context} must include non-empty `summary`"))
     if not isinstance(payload.get("missing_inputs"), list):
         failures.append(Failure(category, f"{context} must include `missing_inputs`"))
+    top_level_details = payload.get("missing_details")
+    if top_level_details is not None:
+        require_missing_details(
+            failures,
+            category=category,
+            context=f"{context}.missing_details",
+            details=top_level_details,
+        )
     require_runtime_state_payload(
         failures,
         category=category,
@@ -1133,6 +1161,14 @@ def require_shadow_parity_payload(
             failures.append(Failure(category, f"{context} reports[{index}] must include non-empty `summary`"))
         if not isinstance(report.get("missing_inputs"), list):
             failures.append(Failure(category, f"{context} reports[{index}] must include `missing_inputs`"))
+        report_details = report.get("missing_details")
+        if report_details is not None:
+            require_missing_details(
+                failures,
+                category=category,
+                context=f"{context} reports[{index}].missing_details",
+                details=report_details,
+            )
         for key in ("host_adapters", "repo_native_carriers"):
             if not isinstance(report.get(key), list):
                 failures.append(Failure(category, f"{context} reports[{index}] must include `{key}` as a list"))
@@ -3654,6 +3690,42 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
         elif payload.get("result") != "pass":
             failures.append(Failure("daily-execution-cli", "`work-item update` must pass on a clean temp copy"))
 
+        poisoned_authoring_target = temp_root / "authoring-poisoned-workspace"
+        shutil.copytree(authoring_target, poisoned_authoring_target)
+        poisoned_work_item = poisoned_authoring_target / ".loom/work-items/NEXT-0001.md"
+        poisoned_before = poisoned_work_item.read_text(encoding="utf-8").replace(
+            "- Workspace Entry: .",
+            "- Workspace Entry: ../outside.md",
+        )
+        poisoned_work_item.write_text(poisoned_before, encoding="utf-8")
+        poisoned_init = poisoned_authoring_target / ".loom/bootstrap/init-result.json"
+        poisoned_init_before = load_json_file(poisoned_init)
+        payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "work-item",
+                "update",
+                "--target",
+                str(poisoned_authoring_target),
+                "--item",
+                "NEXT-0001",
+                "--scope",
+                "This update must not persist because the workspace locator is unsafe",
+                "--activate",
+            ],
+        )
+        poisoned_init_after = load_json_file(poisoned_init)
+        if error:
+            failures.append(Failure("daily-execution-cli", f"`work-item update --activate` poisoned workspace sample failed: {error}"))
+        elif payload.get("result") != "block":
+            failures.append(Failure("daily-execution-cli", "`work-item update --activate` must block poisoned workspace locators"))
+        elif poisoned_work_item.read_text(encoding="utf-8") != poisoned_before:
+            failures.append(Failure("daily-execution-cli", "`work-item update --activate` must not rewrite a poisoned Work Item before locator validation passes"))
+        elif poisoned_init_after.get("fact_chain", {}).get("entry_points") != poisoned_init_before.get("fact_chain", {}).get("entry_points"):
+            failures.append(Failure("daily-execution-cli", "`work-item update --activate` must not mutate active fact-chain locators when locator validation blocks"))
+
         payload, error = load_command_json(
             root,
             [
@@ -6460,6 +6532,43 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         ):
             failures.append(Failure("adversarial-adoption", "shadow surface path-boundary errors must expose a stable repository anchor"))
 
+        shadow_boundary_target = base / "shadow-structured-boundary"
+        (shadow_boundary_target / ".loom/companion").mkdir(parents=True)
+        write_json(
+            shadow_boundary_target / ".loom/companion/interop.json",
+            {
+                "schema_version": "loom-repo-interop/v1",
+                "host_adapters": [],
+                "repo_native_carriers": [],
+                "shadow_surfaces": {
+                    "review": {
+                        "summary": "review parity",
+                        "loom_locator": "../outside-loom.json",
+                        "repo_locator": "../outside-repo.json",
+                    }
+                },
+            },
+        )
+        shadow_boundary_report = loom_flow_module.shadow_parity_report(
+            {
+                "availability": "present",
+                "contract": {"locator": ".loom/companion/interop.json"},
+            },
+            target_root=shadow_boundary_target,
+            surface="review",
+        )
+        shadow_boundary_details = shadow_boundary_report.get("missing_details")
+        if not isinstance(shadow_boundary_details, list) or not any(
+            isinstance(detail, dict)
+            and detail.get("category") == "path_boundary"
+            and detail.get("kind") == "repo_locator_escape"
+            and detail.get("scope") == "repository_root"
+            and detail.get("label") == "shadow surface `review` repo_locator"
+            and detail.get("locator") == "../outside-repo.json"
+            for detail in shadow_boundary_details
+        ):
+            failures.append(Failure("adversarial-adoption", "shadow parity path-boundary failures must expose structured missing_details"))
+
         spec_contract_target = base / "spec-contract"
         (spec_contract_target / ".loom/specs/INIT-0001").mkdir(parents=True)
         (spec_contract_target / ".loom/specs/INIT-0001/spec.md").write_text("bootstrap spec\n", encoding="utf-8")
@@ -6605,6 +6714,38 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         elif escape_work_item_payload.get("result") != "block":
             failures.append(Failure("adversarial-adoption", "work-item create must block recovery locators that escape the target root"))
 
+        poisoned_work_item_target = base / "work-item-update-poisoned-locator"
+        shutil.copytree(baseline, poisoned_work_item_target)
+        poisoned_work_item_path = poisoned_work_item_target / ".loom/work-items/INIT-0001.md"
+        poisoned_work_item_text = poisoned_work_item_path.read_text(encoding="utf-8").replace(
+            "- Recovery Entry: .loom/progress/INIT-0001.md",
+            "- Recovery Entry: ../outside.md",
+        )
+        poisoned_work_item_path.write_text(poisoned_work_item_text, encoding="utf-8")
+        poisoned_init_path = poisoned_work_item_target / ".loom/bootstrap/init-result.json"
+        poisoned_init_before = poisoned_init_path.read_text(encoding="utf-8")
+        poisoned_update_payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "work-item",
+                "update",
+                "--target",
+                str(poisoned_work_item_target),
+                "--item",
+                "INIT-0001",
+                "--activate",
+            ],
+        )
+        poisoned_init_after = poisoned_init_path.read_text(encoding="utf-8")
+        if error:
+            failures.append(Failure("adversarial-adoption", f"poisoned work-item update sample failed: {error}"))
+        elif poisoned_update_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "work-item update --activate must block poisoned recovery locators"))
+        elif poisoned_init_before != poisoned_init_after:
+            failures.append(Failure("adversarial-adoption", "work-item update --activate must not mutate init-result before locator validation passes"))
+
         shadow_escape_target = base / "shadow-locator-escape"
         shutil.copytree(baseline, shadow_escape_target)
         interop_path = shadow_escape_target / ".loom/companion/interop.json"
@@ -6622,6 +6763,15 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
             failures.append(Failure("adversarial-adoption", f"path escape shadow-parity sample failed: {error}"))
         elif shadow_escape_payload.get("result") != "block":
             failures.append(Failure("adversarial-adoption", "shadow-parity blocking mode must reject absolute shadow locators"))
+        else:
+            shadow_escape_details = shadow_escape_payload.get("missing_details")
+            if not isinstance(shadow_escape_details, list) or not any(
+                isinstance(detail, dict)
+                and detail.get("category") == "path_boundary"
+                and "loom_locator" in str(detail.get("label", ""))
+                for detail in shadow_escape_details
+            ):
+                failures.append(Failure("adversarial-adoption", "shadow-parity CLI payload must aggregate structured path-boundary missing_details"))
 
         poisoned_payload, error = load_command_json(
             root,