@mc-and-his-agents/loom-installer 0.1.40 → 0.1.42

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.40",
+  "version": "0.1.42",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "59a29b0ae0fb79827af5bb3de6def984b132c398",
+  "source_commit": "988279c09caf5bb788d70f3c9b1632b82a93c371",
   "source_ref": "main",
-  "built_at": "2026-04-27T17:07:01+08:00",
+  "built_at": "2026-04-27T18:24:47+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -628,18 +628,18 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -658,8 +658,8 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "plugin/loom/skills/upgrade-contract.json",
@@ -1218,18 +1218,18 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1248,8 +1248,8 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/upgrade-contract.json",
@@ -1838,18 +1838,18 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -1868,8 +1868,8 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/upgrade-contract.json",
@@ -2458,18 +2458,18 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -2488,8 +2488,8 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-init/.loom-runtime/upgrade-contract.json",
@@ -3083,18 +3083,18 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3113,8 +3113,8 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/upgrade-contract.json",
@@ -3703,18 +3703,18 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -3733,8 +3733,8 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/upgrade-contract.json",
@@ -4323,18 +4323,18 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4353,8 +4353,8 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/upgrade-contract.json",
@@ -4943,18 +4943,18 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -4973,8 +4973,8 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/upgrade-contract.json",
@@ -5563,18 +5563,18 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -5593,8 +5593,8 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-review/.loom-runtime/upgrade-contract.json",
@@ -6183,18 +6183,18 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 344185,
-      "sha256": "5fbb3018d4ac1764d711bca30f5d4ce1a0466015856a99c59fa4a1d25f732a7b"
+      "bytes": 351345,
+      "sha256": "43d96461db5e300ee40f44d0ed0cf29cf610aa8bf7343a98ff93cb7a54e36ffe"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 335994,
-      "sha256": "2a0e0c49c268e6d00cffbabc11f985a00b7a700adbe7bb6efa4f2da7c08c10fd"
+      "bytes": 338788,
+      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6213,8 +6213,8 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/upgrade-contract.json",

package/payload/plugin/loom/skills/shared/scripts/governance_surface.py

@@ -320,9 +320,9 @@ def file_exists(root: Path, relative: str) -> bool:
 
 def relative_locator(path: Path, root: Path) -> str:
     try:
-        return str(path.relative_to(root))
-    except ValueError:
-        return str(path)
+        return path.resolve().relative_to(root.resolve()).as_posix()
+    except (OSError, ValueError):
+        return ""
 
 
 def safe_read_json(path: Path) -> dict[str, Any] | None:
@@ -961,19 +961,24 @@ def first_match(directory: Path, suffix: str, root: Path) -> str:
 
 
 def existing_locator(root: Path, relative: str | None) -> str:
-    if not relative:
+    locator, target = resolve_locator(root, relative)
+    if locator is None or target is None:
         return ""
-    return relative if (root / relative).exists() else ""
+    return locator if target.exists() else ""
 
 
 def active_or_first(root: Path, relative: str | None, directory: Path, suffix: str) -> str:
-    return existing_locator(root, relative) or (first_match(directory, suffix, root) if directory.exists() else "")
+    if relative is not None and str(relative).strip():
+        return existing_locator(root, relative)
+    return first_match(directory, suffix, root) if directory.exists() else ""
 
 
 def current_review_locator(root: Path, review_dir: Path, item_id: str) -> str:
     review_path = review_dir / f"{item_id}.json"
     if review_path.exists():
         return relative_locator(review_path, root)
+    if item_id:
+        return ""
     return first_match(review_dir, ".json", root) if review_dir.exists() else ""
 
 
@@ -1006,7 +1011,6 @@ def detect_carrier_summary(root: Path, *, repository_mode: str, planning_mode: b
     recovery_dir = root / ".loom/progress"
     review_dir = root / ".loom/reviews"
     status_locator = active.get("status_surface") or ".loom/status/current.md"
-    status_path = root / status_locator
     spec_path = root / f".loom/specs/{active_item_id}/spec.md"
     plan_path = root / f".loom/specs/{active_item_id}/plan.md"
 
@@ -1014,7 +1018,7 @@ def detect_carrier_summary(root: Path, *, repository_mode: str, planning_mode: b
         "work_item": active_or_first(root, active.get("work_item"), item_dir, ".md"),
         "recovery": active_or_first(root, active.get("recovery_entry"), recovery_dir, ".md"),
         "review": current_review_locator(root, review_dir, active_item_id),
-        "status_surface": relative_locator(status_path, root) if status_path.exists() else "",
+        "status_surface": existing_locator(root, status_locator),
         "spec_path": relative_locator(spec_path, root) if spec_path.exists() else "",
         "plan_path": relative_locator(plan_path, root) if plan_path.exists() else "",
     }

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -3690,6 +3690,42 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
         elif payload.get("result") != "pass":
             failures.append(Failure("daily-execution-cli", "`work-item update` must pass on a clean temp copy"))
 
+        poisoned_authoring_target = temp_root / "authoring-poisoned-workspace"
+        shutil.copytree(authoring_target, poisoned_authoring_target)
+        poisoned_work_item = poisoned_authoring_target / ".loom/work-items/NEXT-0001.md"
+        poisoned_before = poisoned_work_item.read_text(encoding="utf-8").replace(
+            "- Workspace Entry: .",
+            "- Workspace Entry: ../outside.md",
+        )
+        poisoned_work_item.write_text(poisoned_before, encoding="utf-8")
+        poisoned_init = poisoned_authoring_target / ".loom/bootstrap/init-result.json"
+        poisoned_init_before = load_json_file(poisoned_init)
+        payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "work-item",
+                "update",
+                "--target",
+                str(poisoned_authoring_target),
+                "--item",
+                "NEXT-0001",
+                "--scope",
+                "This update must not persist because the workspace locator is unsafe",
+                "--activate",
+            ],
+        )
+        poisoned_init_after = load_json_file(poisoned_init)
+        if error:
+            failures.append(Failure("daily-execution-cli", f"`work-item update --activate` poisoned workspace sample failed: {error}"))
+        elif payload.get("result") != "block":
+            failures.append(Failure("daily-execution-cli", "`work-item update --activate` must block poisoned workspace locators"))
+        elif poisoned_work_item.read_text(encoding="utf-8") != poisoned_before:
+            failures.append(Failure("daily-execution-cli", "`work-item update --activate` must not rewrite a poisoned Work Item before locator validation passes"))
+        elif poisoned_init_after.get("fact_chain", {}).get("entry_points") != poisoned_init_before.get("fact_chain", {}).get("entry_points"):
+            failures.append(Failure("daily-execution-cli", "`work-item update --activate` must not mutate active fact-chain locators when locator validation blocks"))
+
         payload, error = load_command_json(
             root,
             [
@@ -3959,6 +3995,31 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
         elif payload.get("result") != "block":
             failures.append(Failure("daily-execution-cli", "`installed runtime-state` must block on scene/carrier conflict"))
 
+        source_repo = tmp_root / "source"
+        sibling_prefix_install = tmp_root / "source-evil" / "skills"
+        source_repo.mkdir(parents=True, exist_ok=True)
+        shutil.copytree(root / "skills", sibling_prefix_install)
+        payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                str(sibling_prefix_install / "shared" / "scripts" / "loom_flow.py"),
+                "runtime-state",
+                "--target",
+                str(target_root),
+            ],
+            env={"LOOM_SOURCE_REPO_ROOT": str(source_repo)},
+        )
+        if error:
+            failures.append(Failure("daily-execution-cli", f"`repo-local runtime-state` sibling-prefix escape failed unexpectedly: {error}"))
+        elif payload.get("result") != "block":
+            failures.append(Failure("daily-execution-cli", "`repo-local runtime-state` must block sibling-prefix install roots outside the source repo"))
+        else:
+            runtime_state = payload.get("runtime_state")
+            missing_inputs = runtime_state.get("missing_inputs") if isinstance(runtime_state, dict) else []
+            if not any("install root must stay inside the source repository" in str(item) for item in missing_inputs):
+                failures.append(Failure("daily-execution-cli", "`repo-local runtime-state` sibling-prefix escape must expose the source-repo containment error"))
+
         payload, error = load_command_json(
             root,
             ["python3", ".loom/bin/loom_init.py", "runtime-state", "--target", "."],
@@ -4020,6 +4081,35 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
         elif payload.get("result") != "block":
             failures.append(Failure("daily-execution-cli", "`bootstrapped runtime-state` must block when runtime provenance hashes drift"))
 
+    with tempfile.TemporaryDirectory(prefix="loom-check-governance-surface-boundary-") as tmp:
+        tmp_root = Path(tmp)
+        outside = tmp_root / "outside.md"
+        outside.write_text("# outside\n", encoding="utf-8")
+        for label, unsafe_locator in (
+            ("parent escape", "../outside.md"),
+            ("absolute locator", str(outside)),
+        ):
+            poisoned_target = tmp_root / f"governance-{label.replace(' ', '-')}"
+            shutil.copytree(example_target, poisoned_target)
+            init_result_path = poisoned_target / ".loom/bootstrap/init-result.json"
+            init_result = load_json_file(init_result_path)
+            if isinstance(init_result, dict):
+                entry_points = init_result.get("fact_chain", {}).get("entry_points")
+                if isinstance(entry_points, dict):
+                    entry_points["work_item"] = unsafe_locator
+                    entry_points["recovery_entry"] = unsafe_locator
+                    entry_points["status_surface"] = unsafe_locator
+                init_result_path.write_text(json.dumps(init_result, ensure_ascii=False, indent=2) + "\n", encoding="utf-8")
+            governance_surface = build_governance_surface(poisoned_target)
+            carrier_summary = governance_surface.get("carrier_summary") if isinstance(governance_surface, dict) else None
+            if not isinstance(carrier_summary, dict):
+                failures.append(Failure("daily-execution-cli", f"`governance surface` {label} fixture must expose carrier summary"))
+                continue
+            for carrier in ("work_item", "recovery", "status_surface"):
+                entry = carrier_summary.get(carrier)
+                if isinstance(entry, dict) and entry.get("status") == "present":
+                    failures.append(Failure("daily-execution-cli", f"`governance surface` must not report unsafe {label} `{carrier}` fact-chain locators as present"))
+
     if shutil.which("git") is not None:
         with tempfile.TemporaryDirectory(prefix="loom-check-installed-pre-merge-") as tmp:
             tmp_root = Path(tmp)
@@ -6678,6 +6768,38 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         elif escape_work_item_payload.get("result") != "block":
             failures.append(Failure("adversarial-adoption", "work-item create must block recovery locators that escape the target root"))
 
+        poisoned_work_item_target = base / "work-item-update-poisoned-locator"
+        shutil.copytree(baseline, poisoned_work_item_target)
+        poisoned_work_item_path = poisoned_work_item_target / ".loom/work-items/INIT-0001.md"
+        poisoned_work_item_text = poisoned_work_item_path.read_text(encoding="utf-8").replace(
+            "- Recovery Entry: .loom/progress/INIT-0001.md",
+            "- Recovery Entry: ../outside.md",
+        )
+        poisoned_work_item_path.write_text(poisoned_work_item_text, encoding="utf-8")
+        poisoned_init_path = poisoned_work_item_target / ".loom/bootstrap/init-result.json"
+        poisoned_init_before = poisoned_init_path.read_text(encoding="utf-8")
+        poisoned_update_payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "work-item",
+                "update",
+                "--target",
+                str(poisoned_work_item_target),
+                "--item",
+                "INIT-0001",
+                "--activate",
+            ],
+        )
+        poisoned_init_after = poisoned_init_path.read_text(encoding="utf-8")
+        if error:
+            failures.append(Failure("adversarial-adoption", f"poisoned work-item update sample failed: {error}"))
+        elif poisoned_update_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "work-item update --activate must block poisoned recovery locators"))
+        elif poisoned_init_before != poisoned_init_after:
+            failures.append(Failure("adversarial-adoption", "work-item update --activate must not mutate init-result before locator validation passes"))
+
         shadow_escape_target = base / "shadow-locator-escape"
         shutil.copytree(baseline, shadow_escape_target)
         interop_path = shadow_escape_target / ".loom/companion/interop.json"