@mc-and-his-agents/loom-installer 0.1.43 → 0.1.45

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.43",
+  "version": "0.1.45",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "8c3ba44e07d467f15fee186221344f2bef12ed42",
+  "source_commit": "1818818f46f7e9791128276f699ef63e64ea8866",
   "source_ref": "main",
-  "built_at": "2026-04-27T22:10:31+08:00",
+  "built_at": "2026-04-28T01:15:12+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -628,18 +628,18 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1218,18 +1218,18 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1838,18 +1838,18 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2458,18 +2458,18 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3083,18 +3083,18 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3703,18 +3703,18 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4323,18 +4323,18 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4943,18 +4943,18 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5563,18 +5563,18 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6183,18 +6183,18 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 57136,
-      "sha256": "02e6f66afcfad5b117ea9a801c7153466f24c6d5721da1546f286aa046c548f1"
+      "bytes": 58392,
+      "sha256": "543e10c205be62f5be78704fe9bf27e808fc07ffe035382e3d4dd78ffa8c80cc"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 359221,
+      "sha256": "257e6bb1c2d2c6b6e31741d2183624ae1900d03dc1d2977d5bfd9837a97530ed"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341321,
+      "sha256": "de815cf27623c6529d21ce47966f428d84d5c5f456792f2334e2391ea03831a8"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/governance_surface.py

@@ -1004,6 +1004,35 @@ def active_entry_points(root: Path) -> dict[str, str]:
     return active
 
 
+def bootstrap_host_binding_branch(root: Path) -> str:
+    init_result = root / ".loom/bootstrap/init-result.json"
+    try:
+        payload = json.loads(init_result.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
+        return ""
+    if not isinstance(payload, dict):
+        return ""
+    governance_surface = payload.get("governance_surface")
+    if not isinstance(governance_surface, dict):
+        return ""
+    control_plane = governance_surface.get("governance_control_plane")
+    if not isinstance(control_plane, dict):
+        return ""
+    host_binding = control_plane.get("host_binding")
+    if not isinstance(host_binding, dict):
+        return ""
+    required_objects = host_binding.get("required_objects")
+    if not isinstance(required_objects, dict):
+        return ""
+    branch = required_objects.get("branch")
+    if not isinstance(branch, dict):
+        return ""
+    locator = branch.get("locator")
+    if isinstance(locator, str) and locator.strip() and locator != "unknown":
+        return locator.strip()
+    return ""
+
+
 def detect_carrier_summary(root: Path, *, repository_mode: str, planning_mode: bool) -> dict[str, dict[str, str]]:
     active = active_entry_points(root)
     active_item_id = active.get("current_item_id") or "INIT-0001"
@@ -1140,6 +1169,11 @@ def detect_host_binding_surface(
 ) -> dict[str, Any]:
     branch_result = run_process(["git", "branch", "--show-current"], root)
     branch = branch_result.stdout.strip() if branch_result.returncode == 0 else ""
+    branch_authority = "git"
+    if not branch:
+        branch = bootstrap_host_binding_branch(root)
+        if branch:
+            branch_authority = "bootstrap host binding"
     worktree_result = run_process(["git", "rev-parse", "--show-toplevel"], root)
     worktree = worktree_result.stdout.strip() if worktree_result.returncode == 0 else ""
     default_branch = github_control_plane.get("default_branch")
@@ -1152,7 +1186,7 @@ def detect_host_binding_surface(
         "branch": {
             "status": "present" if branch else "missing",
             "locator": branch or "unknown",
-            "authority": "git",
+            "authority": branch_authority,
         },
         "worktree": {
             "status": "present" if worktree else "missing",

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -21,7 +21,7 @@ import governance_surface as governance_surface_module
 import loom_flow as loom_flow_module
 import runtime_state as runtime_state_module
 from governance_surface import build_governance_surface
-from loom_flow import repo_specific_requirements_payload, review_head_binding
+from loom_flow import allowed_post_review_carrier_paths, repo_specific_requirements_payload, review_head_binding
 from runtime_paths import repo_local_root
 
 TOP_LEVEL_DIRS = (
@@ -7149,6 +7149,45 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         assert_broken_shadow_evidence("hash-drift", drift_source_hash)
         assert_broken_shadow_evidence("undeclared", undeclared_shadow_evidence, expect_validation_warn=False)
 
+        review_shadow_target = base / "review-shadow-carrier"
+        shutil.copytree(baseline, review_shadow_target)
+        reviewed_head = run_command(root, ["git", "rev-parse", "HEAD"], cwd=review_shadow_target, timeout_seconds=30).stdout.strip()
+        review_path = ".loom/reviews/INIT-0001.json"
+        review_payload = load_json_file(review_shadow_target / review_path)
+        if isinstance(review_payload, dict):
+            review_payload["summary"] = "Carrier-only review artifact refresh."
+            write_json(review_shadow_target / review_path, review_payload)
+            write_json(
+                review_shadow_target / ".loom/shadow/review-loom.json",
+                {
+                    "decision": "allow",
+                    "source_files": [review_path],
+                    "source_sha256": {review_path: sha256_file(review_shadow_target / review_path)},
+                },
+            )
+            run_command(root, ["git", "add", "-f", review_path, ".loom/shadow/review-loom.json"], cwd=review_shadow_target, timeout_seconds=30)
+            run_command(root, ["git", "commit", "-m", "refresh review carrier evidence"], cwd=review_shadow_target, timeout_seconds=30)
+            carrier_context = {
+                "target_root": review_shadow_target,
+                "report": {
+                    "fact_chain": {
+                        "entry_points": {
+                            "recovery_entry": ".loom/progress/INIT-0001.md",
+                            "status_surface": ".loom/status/current.md",
+                        }
+                    }
+                },
+            }
+            binding_payload, binding_errors = review_head_binding(
+                review_shadow_target,
+                reviewed_head=reviewed_head,
+                allowed_paths=allowed_post_review_carrier_paths(carrier_context, review_path),
+            )
+            if binding_errors or binding_payload.get("status") != "carrier-only":
+                failures.append(Failure("adversarial-adoption", "review shadow evidence tied to a review artifact must be carrier-only after review refresh"))
+        else:
+            failures.append(Failure("adversarial-adoption", "review shadow carrier fixture could not load review artifact"))
+
         head_before_drift = run_command(root, ["git", "rev-parse", "HEAD"], cwd=baseline, timeout_seconds=30).stdout.strip()
         (baseline / "implementation-drift.txt").write_text("changed after review\n", encoding="utf-8")
         run_command(root, ["git", "add", "implementation-drift.txt"], cwd=baseline, timeout_seconds=30)

package/payload/plugin/loom/skills/shared/scripts/loom_flow.py

@@ -1479,12 +1479,35 @@ def default_spec_review_path(item_id: str) -> str:
     return f".loom/reviews/{item_id}.spec.json"
 
 
+def shadow_evidence_paths_for_sources(target_root: Path, source_paths: set[str]) -> set[str]:
+    shadow_root = target_root / ".loom/shadow"
+    if not shadow_root.exists():
+        return set()
+
+    evidence_paths: set[str] = set()
+    for evidence_path in sorted(shadow_root.glob("*.json")):
+        relative = evidence_path.relative_to(target_root).as_posix()
+        if relative == ".loom/shadow/shadow-parity.json":
+            continue
+        payload = load_json_file(evidence_path)
+        if not isinstance(payload, dict):
+            continue
+        source_files = payload.get("source_files")
+        if not isinstance(source_files, list):
+            continue
+        if any(isinstance(source, str) and source in source_paths for source in source_files):
+            evidence_paths.add(relative)
+    return evidence_paths
+
+
 def allowed_post_review_carrier_paths(context: dict[str, Any], *review_paths: str) -> set[str]:
-    return {
+    allowed = {
         *review_paths,
         str(context["report"]["fact_chain"]["entry_points"]["recovery_entry"]),
         str(context["report"]["fact_chain"]["entry_points"]["status_surface"]),
     }
+    allowed.update(shadow_evidence_paths_for_sources(context["target_root"], set(review_paths)))
+    return allowed
 
 
 def formal_spec_path(context: dict[str, Any]) -> str | None:

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py

@@ -1004,6 +1004,35 @@ def active_entry_points(root: Path) -> dict[str, str]:
     return active
 
 
+def bootstrap_host_binding_branch(root: Path) -> str:
+    init_result = root / ".loom/bootstrap/init-result.json"
+    try:
+        payload = json.loads(init_result.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
+        return ""
+    if not isinstance(payload, dict):
+        return ""
+    governance_surface = payload.get("governance_surface")
+    if not isinstance(governance_surface, dict):
+        return ""
+    control_plane = governance_surface.get("governance_control_plane")
+    if not isinstance(control_plane, dict):
+        return ""
+    host_binding = control_plane.get("host_binding")
+    if not isinstance(host_binding, dict):
+        return ""
+    required_objects = host_binding.get("required_objects")
+    if not isinstance(required_objects, dict):
+        return ""
+    branch = required_objects.get("branch")
+    if not isinstance(branch, dict):
+        return ""
+    locator = branch.get("locator")
+    if isinstance(locator, str) and locator.strip() and locator != "unknown":
+        return locator.strip()
+    return ""
+
+
 def detect_carrier_summary(root: Path, *, repository_mode: str, planning_mode: bool) -> dict[str, dict[str, str]]:
     active = active_entry_points(root)
     active_item_id = active.get("current_item_id") or "INIT-0001"
@@ -1140,6 +1169,11 @@ def detect_host_binding_surface(
 ) -> dict[str, Any]:
     branch_result = run_process(["git", "branch", "--show-current"], root)
     branch = branch_result.stdout.strip() if branch_result.returncode == 0 else ""
+    branch_authority = "git"
+    if not branch:
+        branch = bootstrap_host_binding_branch(root)
+        if branch:
+            branch_authority = "bootstrap host binding"
     worktree_result = run_process(["git", "rev-parse", "--show-toplevel"], root)
     worktree = worktree_result.stdout.strip() if worktree_result.returncode == 0 else ""
     default_branch = github_control_plane.get("default_branch")
@@ -1152,7 +1186,7 @@ def detect_host_binding_surface(
         "branch": {
             "status": "present" if branch else "missing",
             "locator": branch or "unknown",
-            "authority": "git",
+            "authority": branch_authority,
         },
         "worktree": {
             "status": "present" if worktree else "missing",

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py

@@ -21,7 +21,7 @@ import governance_surface as governance_surface_module
 import loom_flow as loom_flow_module
 import runtime_state as runtime_state_module
 from governance_surface import build_governance_surface
-from loom_flow import repo_specific_requirements_payload, review_head_binding
+from loom_flow import allowed_post_review_carrier_paths, repo_specific_requirements_payload, review_head_binding
 from runtime_paths import repo_local_root
 
 TOP_LEVEL_DIRS = (
@@ -7149,6 +7149,45 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         assert_broken_shadow_evidence("hash-drift", drift_source_hash)
         assert_broken_shadow_evidence("undeclared", undeclared_shadow_evidence, expect_validation_warn=False)
 
+        review_shadow_target = base / "review-shadow-carrier"
+        shutil.copytree(baseline, review_shadow_target)
+        reviewed_head = run_command(root, ["git", "rev-parse", "HEAD"], cwd=review_shadow_target, timeout_seconds=30).stdout.strip()
+        review_path = ".loom/reviews/INIT-0001.json"
+        review_payload = load_json_file(review_shadow_target / review_path)
+        if isinstance(review_payload, dict):
+            review_payload["summary"] = "Carrier-only review artifact refresh."
+            write_json(review_shadow_target / review_path, review_payload)
+            write_json(
+                review_shadow_target / ".loom/shadow/review-loom.json",
+                {
+                    "decision": "allow",
+                    "source_files": [review_path],
+                    "source_sha256": {review_path: sha256_file(review_shadow_target / review_path)},
+                },
+            )
+            run_command(root, ["git", "add", "-f", review_path, ".loom/shadow/review-loom.json"], cwd=review_shadow_target, timeout_seconds=30)
+            run_command(root, ["git", "commit", "-m", "refresh review carrier evidence"], cwd=review_shadow_target, timeout_seconds=30)
+            carrier_context = {
+                "target_root": review_shadow_target,
+                "report": {
+                    "fact_chain": {
+                        "entry_points": {
+                            "recovery_entry": ".loom/progress/INIT-0001.md",
+                            "status_surface": ".loom/status/current.md",
+                        }
+                    }
+                },
+            }
+            binding_payload, binding_errors = review_head_binding(
+                review_shadow_target,
+                reviewed_head=reviewed_head,
+                allowed_paths=allowed_post_review_carrier_paths(carrier_context, review_path),
+            )
+            if binding_errors or binding_payload.get("status") != "carrier-only":
+                failures.append(Failure("adversarial-adoption", "review shadow evidence tied to a review artifact must be carrier-only after review refresh"))
+        else:
+            failures.append(Failure("adversarial-adoption", "review shadow carrier fixture could not load review artifact"))
+
         head_before_drift = run_command(root, ["git", "rev-parse", "HEAD"], cwd=baseline, timeout_seconds=30).stdout.strip()
         (baseline / "implementation-drift.txt").write_text("changed after review\n", encoding="utf-8")
         run_command(root, ["git", "add", "implementation-drift.txt"], cwd=baseline, timeout_seconds=30)

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py

@@ -1479,12 +1479,35 @@ def default_spec_review_path(item_id: str) -> str:
     return f".loom/reviews/{item_id}.spec.json"
 
 
+def shadow_evidence_paths_for_sources(target_root: Path, source_paths: set[str]) -> set[str]:
+    shadow_root = target_root / ".loom/shadow"
+    if not shadow_root.exists():
+        return set()
+
+    evidence_paths: set[str] = set()
+    for evidence_path in sorted(shadow_root.glob("*.json")):
+        relative = evidence_path.relative_to(target_root).as_posix()
+        if relative == ".loom/shadow/shadow-parity.json":
+            continue
+        payload = load_json_file(evidence_path)
+        if not isinstance(payload, dict):
+            continue
+        source_files = payload.get("source_files")
+        if not isinstance(source_files, list):
+            continue
+        if any(isinstance(source, str) and source in source_paths for source in source_files):
+            evidence_paths.add(relative)
+    return evidence_paths
+
+
 def allowed_post_review_carrier_paths(context: dict[str, Any], *review_paths: str) -> set[str]:
-    return {
+    allowed = {
         *review_paths,
         str(context["report"]["fact_chain"]["entry_points"]["recovery_entry"]),
         str(context["report"]["fact_chain"]["entry_points"]["status_surface"]),
     }
+    allowed.update(shadow_evidence_paths_for_sources(context["target_root"], set(review_paths)))
+    return allowed
 
 
 def formal_spec_path(context: dict[str, Any]) -> str | None:

package/payload/skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py

@@ -1004,6 +1004,35 @@ def active_entry_points(root: Path) -> dict[str, str]:
     return active
 
 
+def bootstrap_host_binding_branch(root: Path) -> str:
+    init_result = root / ".loom/bootstrap/init-result.json"
+    try:
+        payload = json.loads(init_result.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
+        return ""
+    if not isinstance(payload, dict):
+        return ""
+    governance_surface = payload.get("governance_surface")
+    if not isinstance(governance_surface, dict):
+        return ""
+    control_plane = governance_surface.get("governance_control_plane")
+    if not isinstance(control_plane, dict):
+        return ""
+    host_binding = control_plane.get("host_binding")
+    if not isinstance(host_binding, dict):
+        return ""
+    required_objects = host_binding.get("required_objects")
+    if not isinstance(required_objects, dict):
+        return ""
+    branch = required_objects.get("branch")
+    if not isinstance(branch, dict):
+        return ""
+    locator = branch.get("locator")
+    if isinstance(locator, str) and locator.strip() and locator != "unknown":
+        return locator.strip()
+    return ""
+
+
 def detect_carrier_summary(root: Path, *, repository_mode: str, planning_mode: bool) -> dict[str, dict[str, str]]:
     active = active_entry_points(root)
     active_item_id = active.get("current_item_id") or "INIT-0001"
@@ -1140,6 +1169,11 @@ def detect_host_binding_surface(
 ) -> dict[str, Any]:
     branch_result = run_process(["git", "branch", "--show-current"], root)
     branch = branch_result.stdout.strip() if branch_result.returncode == 0 else ""
+    branch_authority = "git"
+    if not branch:
+        branch = bootstrap_host_binding_branch(root)
+        if branch:
+            branch_authority = "bootstrap host binding"
     worktree_result = run_process(["git", "rev-parse", "--show-toplevel"], root)
     worktree = worktree_result.stdout.strip() if worktree_result.returncode == 0 else ""
     default_branch = github_control_plane.get("default_branch")
@@ -1152,7 +1186,7 @@ def detect_host_binding_surface(
         "branch": {
             "status": "present" if branch else "missing",
             "locator": branch or "unknown",
-            "authority": "git",
+            "authority": branch_authority,
         },
         "worktree": {
             "status": "present" if worktree else "missing",