@mc-and-his-agents/loom-installer 0.1.41 → 0.1.43

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.41",
+  "version": "0.1.43",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "348e5ac4d5c30e78a985865f38f792d40fd278fa",
+  "source_commit": "8c3ba44e07d467f15fee186221344f2bef12ed42",
   "source_ref": "main",
-  "built_at": "2026-04-27T17:41:47+08:00",
+  "built_at": "2026-04-27T22:10:31+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -628,18 +628,18 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -658,8 +658,8 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "plugin/loom/skills/upgrade-contract.json",
@@ -1218,18 +1218,18 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1248,8 +1248,8 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/upgrade-contract.json",
@@ -1838,18 +1838,18 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -1868,8 +1868,8 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/upgrade-contract.json",
@@ -2458,18 +2458,18 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -2488,8 +2488,8 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-init/.loom-runtime/upgrade-contract.json",
@@ -3083,18 +3083,18 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3113,8 +3113,8 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/upgrade-contract.json",
@@ -3703,18 +3703,18 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -3733,8 +3733,8 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/upgrade-contract.json",
@@ -4323,18 +4323,18 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4353,8 +4353,8 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/upgrade-contract.json",
@@ -4943,18 +4943,18 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -4973,8 +4973,8 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/upgrade-contract.json",
@@ -5563,18 +5563,18 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -5593,8 +5593,8 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-review/.loom-runtime/upgrade-contract.json",
@@ -6183,18 +6183,18 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57013,
-      "sha256": "902bba15e9da421b9a48a051940a67a2b019cd14b938d8acd2679c760734b2f5"
+      "bytes": 57136,
+      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 347978,
-      "sha256": "f5119cf04e195c79dfeb58c33c5d4c8e524c2eb2b162b5906cc04a655465543e"
+      "bytes": 356924,
+      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 338788,
-      "sha256": "e5f386988863d970ebf5415bfdb3a91159b120a84d3acd82ca3435be6f9af19c"
+      "bytes": 340366,
+      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6213,8 +6213,8 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/runtime_state.py",
-      "bytes": 21030,
-      "sha256": "3375830ede9bec65083d9ee6cfac5f5a7e3bd781ef90c78a087c39d37f2cfab2"
+      "bytes": 21212,
+      "sha256": "e4de653a5206269faa731808a0f44667a7db811053b8488e8b61a6393917815b"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/upgrade-contract.json",

package/payload/plugin/loom/skills/shared/scripts/governance_surface.py

@@ -320,9 +320,9 @@ def file_exists(root: Path, relative: str) -> bool:
 
 def relative_locator(path: Path, root: Path) -> str:
     try:
-        return str(path.relative_to(root))
-    except ValueError:
-        return str(path)
+        return path.resolve().relative_to(root.resolve()).as_posix()
+    except (OSError, ValueError):
+        return ""
 
 
 def safe_read_json(path: Path) -> dict[str, Any] | None:
@@ -961,19 +961,24 @@ def first_match(directory: Path, suffix: str, root: Path) -> str:
 
 
 def existing_locator(root: Path, relative: str | None) -> str:
-    if not relative:
+    locator, target = resolve_locator(root, relative)
+    if locator is None or target is None:
         return ""
-    return relative if (root / relative).exists() else ""
+    return locator if target.exists() else ""
 
 
 def active_or_first(root: Path, relative: str | None, directory: Path, suffix: str) -> str:
-    return existing_locator(root, relative) or (first_match(directory, suffix, root) if directory.exists() else "")
+    if relative is not None and str(relative).strip():
+        return existing_locator(root, relative)
+    return first_match(directory, suffix, root) if directory.exists() else ""
 
 
 def current_review_locator(root: Path, review_dir: Path, item_id: str) -> str:
     review_path = review_dir / f"{item_id}.json"
     if review_path.exists():
         return relative_locator(review_path, root)
+    if item_id:
+        return ""
     return first_match(review_dir, ".json", root) if review_dir.exists() else ""
 
 
@@ -1006,7 +1011,6 @@ def detect_carrier_summary(root: Path, *, repository_mode: str, planning_mode: b
     recovery_dir = root / ".loom/progress"
     review_dir = root / ".loom/reviews"
     status_locator = active.get("status_surface") or ".loom/status/current.md"
-    status_path = root / status_locator
     spec_path = root / f".loom/specs/{active_item_id}/spec.md"
     plan_path = root / f".loom/specs/{active_item_id}/plan.md"
 
@@ -1014,7 +1018,7 @@ def detect_carrier_summary(root: Path, *, repository_mode: str, planning_mode: b
         "work_item": active_or_first(root, active.get("work_item"), item_dir, ".md"),
         "recovery": active_or_first(root, active.get("recovery_entry"), recovery_dir, ".md"),
         "review": current_review_locator(root, review_dir, active_item_id),
-        "status_surface": relative_locator(status_path, root) if status_path.exists() else "",
+        "status_surface": existing_locator(root, status_locator),
         "spec_path": relative_locator(spec_path, root) if spec_path.exists() else "",
         "plan_path": relative_locator(plan_path, root) if plan_path.exists() else "",
     }

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -3995,6 +3995,31 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
         elif payload.get("result") != "block":
             failures.append(Failure("daily-execution-cli", "`installed runtime-state` must block on scene/carrier conflict"))
 
+        source_repo = tmp_root / "source"
+        sibling_prefix_install = tmp_root / "source-evil" / "skills"
+        source_repo.mkdir(parents=True, exist_ok=True)
+        shutil.copytree(root / "skills", sibling_prefix_install)
+        payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                str(sibling_prefix_install / "shared" / "scripts" / "loom_flow.py"),
+                "runtime-state",
+                "--target",
+                str(target_root),
+            ],
+            env={"LOOM_SOURCE_REPO_ROOT": str(source_repo)},
+        )
+        if error:
+            failures.append(Failure("daily-execution-cli", f"`repo-local runtime-state` sibling-prefix escape failed unexpectedly: {error}"))
+        elif payload.get("result") != "block":
+            failures.append(Failure("daily-execution-cli", "`repo-local runtime-state` must block sibling-prefix install roots outside the source repo"))
+        else:
+            runtime_state = payload.get("runtime_state")
+            missing_inputs = runtime_state.get("missing_inputs") if isinstance(runtime_state, dict) else []
+            if not any("install root must stay inside the source repository" in str(item) for item in missing_inputs):
+                failures.append(Failure("daily-execution-cli", "`repo-local runtime-state` sibling-prefix escape must expose the source-repo containment error"))
+
         payload, error = load_command_json(
             root,
             ["python3", ".loom/bin/loom_init.py", "runtime-state", "--target", "."],
@@ -4056,6 +4081,35 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
         elif payload.get("result") != "block":
             failures.append(Failure("daily-execution-cli", "`bootstrapped runtime-state` must block when runtime provenance hashes drift"))
 
+    with tempfile.TemporaryDirectory(prefix="loom-check-governance-surface-boundary-") as tmp:
+        tmp_root = Path(tmp)
+        outside = tmp_root / "outside.md"
+        outside.write_text("# outside\n", encoding="utf-8")
+        for label, unsafe_locator in (
+            ("parent escape", "../outside.md"),
+            ("absolute locator", str(outside)),
+        ):
+            poisoned_target = tmp_root / f"governance-{label.replace(' ', '-')}"
+            shutil.copytree(example_target, poisoned_target)
+            init_result_path = poisoned_target / ".loom/bootstrap/init-result.json"
+            init_result = load_json_file(init_result_path)
+            if isinstance(init_result, dict):
+                entry_points = init_result.get("fact_chain", {}).get("entry_points")
+                if isinstance(entry_points, dict):
+                    entry_points["work_item"] = unsafe_locator
+                    entry_points["recovery_entry"] = unsafe_locator
+                    entry_points["status_surface"] = unsafe_locator
+                init_result_path.write_text(json.dumps(init_result, ensure_ascii=False, indent=2) + "\n", encoding="utf-8")
+            governance_surface = build_governance_surface(poisoned_target)
+            carrier_summary = governance_surface.get("carrier_summary") if isinstance(governance_surface, dict) else None
+            if not isinstance(carrier_summary, dict):
+                failures.append(Failure("daily-execution-cli", f"`governance surface` {label} fixture must expose carrier summary"))
+                continue
+            for carrier in ("work_item", "recovery", "status_surface"):
+                entry = carrier_summary.get(carrier)
+                if isinstance(entry, dict) and entry.get("status") == "present":
+                    failures.append(Failure("daily-execution-cli", f"`governance surface` must not report unsafe {label} `{carrier}` fact-chain locators as present"))
+
     if shutil.which("git") is not None:
         with tempfile.TemporaryDirectory(prefix="loom-check-installed-pre-merge-") as tmp:
             tmp_root = Path(tmp)
@@ -6861,6 +6915,120 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
             elif after_payload.get("refresh_needed"):
                 failures.append(Failure("adversarial-adoption", "carrier refresh --write must clear runtime provenance drift"))
 
+        outside_comment = base / "outside-comment.md"
+        outside_comment.write_text("sensitive local text\n", encoding="utf-8")
+        comment_escape_payload, error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_flow.py",
+                "reconciliation",
+                "sync",
+                "--target",
+                str(baseline),
+                "--comment-file",
+                str(outside_comment),
+                "--dry-run",
+            ],
+        )
+        if error:
+            failures.append(Failure("adversarial-adoption", f"reconciliation comment-file boundary sample failed: {error}"))
+        elif comment_escape_payload.get("result") != "block":
+            failures.append(Failure("adversarial-adoption", "reconciliation --comment-file must block absolute paths outside the target root"))
+        else:
+            missing_inputs = comment_escape_payload.get("missing_inputs")
+            if not isinstance(missing_inputs, list) or not any(
+                "reconciliation comment file" in str(item) and "must be repo-relative" in str(item)
+                for item in missing_inputs
+            ):
+                failures.append(Failure("adversarial-adoption", "reconciliation --comment-file boundary block must report the comment file locator boundary error"))
+
+        original_pr_payload = loom_flow_module.github_pr_payload
+        original_issue_payload = loom_flow_module.github_issue_payload
+        original_reconciliation_audit = loom_flow_module.reconciliation_audit_payload
+        original_contains = loom_flow_module.contains_merged_commit
+        seen_target_branches: list[str] = []
+        try:
+            loom_flow_module.github_pr_payload = lambda *_args, **_kwargs: (
+                {
+                    "state": "MERGED",
+                    "baseRefName": "release/main",
+                    "mergeCommit": {"oid": "abc123"},
+                },
+                [],
+            )
+            loom_flow_module.github_issue_payload = lambda *_args, **_kwargs: (
+                {"state": "CLOSED", "id": "issue-id"},
+                [],
+            )
+            loom_flow_module.reconciliation_audit_payload = lambda **_kwargs: (
+                {
+                    "result": "pass",
+                    "findings": [],
+                    "missing_inputs": [],
+                    "fallback_to": None,
+                },
+                [],
+            )
+
+            def fake_contains(_root: Path, _merge_commit_sha: str, target_branch: str = "main") -> bool:
+                seen_target_branches.append(target_branch)
+                return target_branch == "release/main"
+
+            loom_flow_module.contains_merged_commit = fake_contains
+            closeout_target_branch_payload, closeout_errors = loom_flow_module.closeout_payload(
+                target_root=baseline,
+                phase_number=None,
+                fr_number=None,
+                issue_number=1,
+                pr_number=2,
+                project_number=None,
+                branch_name=None,
+                owner="owner",
+                repo_name="repo",
+                skip_gate=True,
+            )
+            if closeout_errors:
+                failures.append(Failure("adversarial-adoption", f"closeout target branch fixture failed: {closeout_errors}"))
+            elif closeout_target_branch_payload.get("result") != "pass":
+                failures.append(Failure("adversarial-adoption", "closeout must pass when the merge commit is contained in the PR base branch"))
+            if seen_target_branches != ["release/main"]:
+                failures.append(Failure("adversarial-adoption", "closeout must check merge commit containment against the PR base branch, including slash branches"))
+
+            seen_target_branches.clear()
+            loom_flow_module.github_pr_payload = lambda *_args, **_kwargs: (
+                {
+                    "state": "MERGED",
+                    "mergeCommit": {"oid": "abc123"},
+                },
+                [],
+            )
+            closeout_missing_base_payload, closeout_errors = loom_flow_module.closeout_payload(
+                target_root=baseline,
+                phase_number=None,
+                fr_number=None,
+                issue_number=1,
+                pr_number=2,
+                project_number=None,
+                branch_name=None,
+                owner="owner",
+                repo_name="repo",
+                skip_gate=True,
+            )
+            if closeout_errors:
+                failures.append(Failure("adversarial-adoption", f"closeout missing baseRefName fixture failed: {closeout_errors}"))
+            else:
+                missing_inputs = closeout_missing_base_payload.get("missing_inputs")
+                if closeout_missing_base_payload.get("result") != "block" or "pr baseRefName is missing" not in missing_inputs:
+                    failures.append(Failure("adversarial-adoption", "closeout must block when PR baseRefName is missing instead of falling back to main"))
+            if seen_target_branches:
+                failures.append(Failure("adversarial-adoption", "closeout must not check origin/main when PR baseRefName is missing"))
+        finally:
+            loom_flow_module.github_pr_payload = original_pr_payload
+            loom_flow_module.github_issue_payload = original_issue_payload
+            loom_flow_module.reconciliation_audit_payload = original_reconciliation_audit
+            loom_flow_module.contains_merged_commit = original_contains
+
         rollover_target = base / "active-rollover"
         shutil.copytree(baseline, rollover_target)
         payload, error = load_command_json(