@mc-and-his-agents/loom-installer 0.1.44 → 0.1.46

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.44",
+  "version": "0.1.46",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "62fc9353f0821c3354965e01eb8fb77576247888",
+  "source_commit": "fb26e7a18fda521240b6b0441085ffc9be579dee",
   "source_ref": "main",
-  "built_at": "2026-04-27T23:17:55+08:00",
+  "built_at": "2026-04-28T08:17:16+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -633,13 +633,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1223,13 +1223,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1843,13 +1843,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2463,13 +2463,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3088,13 +3088,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3708,13 +3708,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4328,13 +4328,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4948,13 +4948,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5568,13 +5568,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6188,13 +6188,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 356924,
-      "sha256": "71f0b9a7d55526b119af75b06c9787d875c27e19bbea70853ebc3df11f43eee7"
+      "bytes": 360254,
+      "sha256": "52f7999482666670935b42e8477f5ceff2ba3da75470ed9c22260bee29c097e9"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 340366,
-      "sha256": "334a8df4ef8400125b6e7c311d386ac98c15f34c5be91befb9499215ee4ba0c4"
+      "bytes": 341474,
+      "sha256": "92e83310b827ce99e3ab1c60216d07e65c2dc1b74511c1dd06297b226a00f94c"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -21,7 +21,7 @@ import governance_surface as governance_surface_module
 import loom_flow as loom_flow_module
 import runtime_state as runtime_state_module
 from governance_surface import build_governance_surface
-from loom_flow import repo_specific_requirements_payload, review_head_binding
+from loom_flow import allowed_post_review_carrier_paths, repo_specific_requirements_payload, review_head_binding
 from runtime_paths import repo_local_root
 
 TOP_LEVEL_DIRS = (
@@ -7149,6 +7149,61 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         assert_broken_shadow_evidence("hash-drift", drift_source_hash)
         assert_broken_shadow_evidence("undeclared", undeclared_shadow_evidence, expect_validation_warn=False)
 
+        review_shadow_target = base / "review-shadow-carrier"
+        shutil.copytree(baseline, review_shadow_target)
+        reviewed_head = run_command(root, ["git", "rev-parse", "HEAD"], cwd=review_shadow_target, timeout_seconds=30).stdout.strip()
+        review_path = ".loom/reviews/INIT-0001.json"
+        review_payload = load_json_file(review_shadow_target / review_path)
+        if isinstance(review_payload, dict):
+            review_payload["summary"] = "Carrier-only review artifact refresh."
+            write_json(review_shadow_target / review_path, review_payload)
+            write_json(
+                review_shadow_target / ".loom/shadow/review-loom.json",
+                {
+                    "decision": "allow",
+                    "source_files": [review_path],
+                    "source_sha256": {review_path: sha256_file(review_shadow_target / review_path)},
+                },
+            )
+            run_command(root, ["git", "add", "-f", review_path, ".loom/shadow/review-loom.json"], cwd=review_shadow_target, timeout_seconds=30)
+            run_command(root, ["git", "commit", "-m", "refresh review carrier evidence"], cwd=review_shadow_target, timeout_seconds=30)
+            carrier_context = {
+                "target_root": review_shadow_target,
+                "report": {
+                    "fact_chain": {
+                        "entry_points": {
+                            "recovery_entry": ".loom/progress/INIT-0001.md",
+                            "status_surface": ".loom/status/current.md",
+                        }
+                    }
+                },
+            }
+            binding_payload, binding_errors = review_head_binding(
+                review_shadow_target,
+                reviewed_head=reviewed_head,
+                allowed_paths=allowed_post_review_carrier_paths(carrier_context, review_path),
+            )
+            if binding_errors or binding_payload.get("status") != "carrier-only":
+                failures.append(Failure("adversarial-adoption", "review shadow evidence tied to a review artifact must be carrier-only after review refresh"))
+        else:
+            failures.append(Failure("adversarial-adoption", "review shadow carrier fixture could not load review artifact"))
+
+        invalid_review_schema_target = base / "invalid-review-schema"
+        shutil.copytree(baseline, invalid_review_schema_target)
+        invalid_review_payload = load_json_file(invalid_review_schema_target / review_path)
+        if isinstance(invalid_review_payload, dict):
+            invalid_review_payload["schema_version"] = "loom-review/v0"
+            write_json(invalid_review_schema_target / review_path, invalid_review_payload)
+            _, _, invalid_review_errors = loom_flow_module.load_review_record(
+                invalid_review_schema_target,
+                "INIT-0001",
+                review_path,
+            )
+            if not any("schema_version must be `loom-review/v1`" in error for error in invalid_review_errors):
+                failures.append(Failure("adversarial-adoption", "review artifact schema_version must be enforced before runtime consumption"))
+        else:
+            failures.append(Failure("adversarial-adoption", "invalid review schema fixture could not load review artifact"))
+
         head_before_drift = run_command(root, ["git", "rev-parse", "HEAD"], cwd=baseline, timeout_seconds=30).stdout.strip()
         (baseline / "implementation-drift.txt").write_text("changed after review\n", encoding="utf-8")
         run_command(root, ["git", "add", "implementation-drift.txt"], cwd=baseline, timeout_seconds=30)

package/payload/plugin/loom/skills/shared/scripts/loom_flow.py

@@ -1479,12 +1479,35 @@ def default_spec_review_path(item_id: str) -> str:
     return f".loom/reviews/{item_id}.spec.json"
 
 
+def shadow_evidence_paths_for_sources(target_root: Path, source_paths: set[str]) -> set[str]:
+    shadow_root = target_root / ".loom/shadow"
+    if not shadow_root.exists():
+        return set()
+
+    evidence_paths: set[str] = set()
+    for evidence_path in sorted(shadow_root.glob("*.json")):
+        relative = evidence_path.relative_to(target_root).as_posix()
+        if relative == ".loom/shadow/shadow-parity.json":
+            continue
+        payload = load_json_file(evidence_path)
+        if not isinstance(payload, dict):
+            continue
+        source_files = payload.get("source_files")
+        if not isinstance(source_files, list):
+            continue
+        if any(isinstance(source, str) and source in source_paths for source in source_files):
+            evidence_paths.add(relative)
+    return evidence_paths
+
+
 def allowed_post_review_carrier_paths(context: dict[str, Any], *review_paths: str) -> set[str]:
-    return {
+    allowed = {
         *review_paths,
         str(context["report"]["fact_chain"]["entry_points"]["recovery_entry"]),
         str(context["report"]["fact_chain"]["entry_points"]["status_surface"]),
     }
+    allowed.update(shadow_evidence_paths_for_sources(context["target_root"], set(review_paths)))
+    return allowed
 
 
 def formal_spec_path(context: dict[str, Any]) -> str | None:
@@ -1948,6 +1971,8 @@ def load_review_record(
     if not isinstance(payload, dict):
         return None, relative, [f"review artifact `{relative}` must be a JSON object"]
     errors: list[str] = []
+    if payload.get("schema_version") != "loom-review/v1":
+        errors.append(f"review artifact `{relative}` schema_version must be `loom-review/v1`")
     for field in ("item_id", "decision", "kind", "summary", "reviewer", "reviewed_head", "reviewed_validation_summary"):
         value = payload.get(field)
         if not isinstance(value, str) or not value.strip():

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py

@@ -21,7 +21,7 @@ import governance_surface as governance_surface_module
 import loom_flow as loom_flow_module
 import runtime_state as runtime_state_module
 from governance_surface import build_governance_surface
-from loom_flow import repo_specific_requirements_payload, review_head_binding
+from loom_flow import allowed_post_review_carrier_paths, repo_specific_requirements_payload, review_head_binding
 from runtime_paths import repo_local_root
 
 TOP_LEVEL_DIRS = (
@@ -7149,6 +7149,61 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         assert_broken_shadow_evidence("hash-drift", drift_source_hash)
         assert_broken_shadow_evidence("undeclared", undeclared_shadow_evidence, expect_validation_warn=False)
 
+        review_shadow_target = base / "review-shadow-carrier"
+        shutil.copytree(baseline, review_shadow_target)
+        reviewed_head = run_command(root, ["git", "rev-parse", "HEAD"], cwd=review_shadow_target, timeout_seconds=30).stdout.strip()
+        review_path = ".loom/reviews/INIT-0001.json"
+        review_payload = load_json_file(review_shadow_target / review_path)
+        if isinstance(review_payload, dict):
+            review_payload["summary"] = "Carrier-only review artifact refresh."
+            write_json(review_shadow_target / review_path, review_payload)
+            write_json(
+                review_shadow_target / ".loom/shadow/review-loom.json",
+                {
+                    "decision": "allow",
+                    "source_files": [review_path],
+                    "source_sha256": {review_path: sha256_file(review_shadow_target / review_path)},
+                },
+            )
+            run_command(root, ["git", "add", "-f", review_path, ".loom/shadow/review-loom.json"], cwd=review_shadow_target, timeout_seconds=30)
+            run_command(root, ["git", "commit", "-m", "refresh review carrier evidence"], cwd=review_shadow_target, timeout_seconds=30)
+            carrier_context = {
+                "target_root": review_shadow_target,
+                "report": {
+                    "fact_chain": {
+                        "entry_points": {
+                            "recovery_entry": ".loom/progress/INIT-0001.md",
+                            "status_surface": ".loom/status/current.md",
+                        }
+                    }
+                },
+            }
+            binding_payload, binding_errors = review_head_binding(
+                review_shadow_target,
+                reviewed_head=reviewed_head,
+                allowed_paths=allowed_post_review_carrier_paths(carrier_context, review_path),
+            )
+            if binding_errors or binding_payload.get("status") != "carrier-only":
+                failures.append(Failure("adversarial-adoption", "review shadow evidence tied to a review artifact must be carrier-only after review refresh"))
+        else:
+            failures.append(Failure("adversarial-adoption", "review shadow carrier fixture could not load review artifact"))
+
+        invalid_review_schema_target = base / "invalid-review-schema"
+        shutil.copytree(baseline, invalid_review_schema_target)
+        invalid_review_payload = load_json_file(invalid_review_schema_target / review_path)
+        if isinstance(invalid_review_payload, dict):
+            invalid_review_payload["schema_version"] = "loom-review/v0"
+            write_json(invalid_review_schema_target / review_path, invalid_review_payload)
+            _, _, invalid_review_errors = loom_flow_module.load_review_record(
+                invalid_review_schema_target,
+                "INIT-0001",
+                review_path,
+            )
+            if not any("schema_version must be `loom-review/v1`" in error for error in invalid_review_errors):
+                failures.append(Failure("adversarial-adoption", "review artifact schema_version must be enforced before runtime consumption"))
+        else:
+            failures.append(Failure("adversarial-adoption", "invalid review schema fixture could not load review artifact"))
+
         head_before_drift = run_command(root, ["git", "rev-parse", "HEAD"], cwd=baseline, timeout_seconds=30).stdout.strip()
         (baseline / "implementation-drift.txt").write_text("changed after review\n", encoding="utf-8")
         run_command(root, ["git", "add", "implementation-drift.txt"], cwd=baseline, timeout_seconds=30)

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py

@@ -1479,12 +1479,35 @@ def default_spec_review_path(item_id: str) -> str:
     return f".loom/reviews/{item_id}.spec.json"
 
 
+def shadow_evidence_paths_for_sources(target_root: Path, source_paths: set[str]) -> set[str]:
+    shadow_root = target_root / ".loom/shadow"
+    if not shadow_root.exists():
+        return set()
+
+    evidence_paths: set[str] = set()
+    for evidence_path in sorted(shadow_root.glob("*.json")):
+        relative = evidence_path.relative_to(target_root).as_posix()
+        if relative == ".loom/shadow/shadow-parity.json":
+            continue
+        payload = load_json_file(evidence_path)
+        if not isinstance(payload, dict):
+            continue
+        source_files = payload.get("source_files")
+        if not isinstance(source_files, list):
+            continue
+        if any(isinstance(source, str) and source in source_paths for source in source_files):
+            evidence_paths.add(relative)
+    return evidence_paths
+
+
 def allowed_post_review_carrier_paths(context: dict[str, Any], *review_paths: str) -> set[str]:
-    return {
+    allowed = {
         *review_paths,
         str(context["report"]["fact_chain"]["entry_points"]["recovery_entry"]),
         str(context["report"]["fact_chain"]["entry_points"]["status_surface"]),
     }
+    allowed.update(shadow_evidence_paths_for_sources(context["target_root"], set(review_paths)))
+    return allowed
 
 
 def formal_spec_path(context: dict[str, Any]) -> str | None:
@@ -1948,6 +1971,8 @@ def load_review_record(
     if not isinstance(payload, dict):
         return None, relative, [f"review artifact `{relative}` must be a JSON object"]
     errors: list[str] = []
+    if payload.get("schema_version") != "loom-review/v1":
+        errors.append(f"review artifact `{relative}` schema_version must be `loom-review/v1`")
     for field in ("item_id", "decision", "kind", "summary", "reviewer", "reviewed_head", "reviewed_validation_summary"):
         value = payload.get(field)
         if not isinstance(value, str) or not value.strip():

package/payload/skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py

@@ -21,7 +21,7 @@ import governance_surface as governance_surface_module
 import loom_flow as loom_flow_module
 import runtime_state as runtime_state_module
 from governance_surface import build_governance_surface
-from loom_flow import repo_specific_requirements_payload, review_head_binding
+from loom_flow import allowed_post_review_carrier_paths, repo_specific_requirements_payload, review_head_binding
 from runtime_paths import repo_local_root
 
 TOP_LEVEL_DIRS = (
@@ -7149,6 +7149,61 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         assert_broken_shadow_evidence("hash-drift", drift_source_hash)
         assert_broken_shadow_evidence("undeclared", undeclared_shadow_evidence, expect_validation_warn=False)
 
+        review_shadow_target = base / "review-shadow-carrier"
+        shutil.copytree(baseline, review_shadow_target)
+        reviewed_head = run_command(root, ["git", "rev-parse", "HEAD"], cwd=review_shadow_target, timeout_seconds=30).stdout.strip()
+        review_path = ".loom/reviews/INIT-0001.json"
+        review_payload = load_json_file(review_shadow_target / review_path)
+        if isinstance(review_payload, dict):
+            review_payload["summary"] = "Carrier-only review artifact refresh."
+            write_json(review_shadow_target / review_path, review_payload)
+            write_json(
+                review_shadow_target / ".loom/shadow/review-loom.json",
+                {
+                    "decision": "allow",
+                    "source_files": [review_path],
+                    "source_sha256": {review_path: sha256_file(review_shadow_target / review_path)},
+                },
+            )
+            run_command(root, ["git", "add", "-f", review_path, ".loom/shadow/review-loom.json"], cwd=review_shadow_target, timeout_seconds=30)
+            run_command(root, ["git", "commit", "-m", "refresh review carrier evidence"], cwd=review_shadow_target, timeout_seconds=30)
+            carrier_context = {
+                "target_root": review_shadow_target,
+                "report": {
+                    "fact_chain": {
+                        "entry_points": {
+                            "recovery_entry": ".loom/progress/INIT-0001.md",
+                            "status_surface": ".loom/status/current.md",
+                        }
+                    }
+                },
+            }
+            binding_payload, binding_errors = review_head_binding(
+                review_shadow_target,
+                reviewed_head=reviewed_head,
+                allowed_paths=allowed_post_review_carrier_paths(carrier_context, review_path),
+            )
+            if binding_errors or binding_payload.get("status") != "carrier-only":
+                failures.append(Failure("adversarial-adoption", "review shadow evidence tied to a review artifact must be carrier-only after review refresh"))
+        else:
+            failures.append(Failure("adversarial-adoption", "review shadow carrier fixture could not load review artifact"))
+
+        invalid_review_schema_target = base / "invalid-review-schema"
+        shutil.copytree(baseline, invalid_review_schema_target)
+        invalid_review_payload = load_json_file(invalid_review_schema_target / review_path)
+        if isinstance(invalid_review_payload, dict):
+            invalid_review_payload["schema_version"] = "loom-review/v0"
+            write_json(invalid_review_schema_target / review_path, invalid_review_payload)
+            _, _, invalid_review_errors = loom_flow_module.load_review_record(
+                invalid_review_schema_target,
+                "INIT-0001",
+                review_path,
+            )
+            if not any("schema_version must be `loom-review/v1`" in error for error in invalid_review_errors):
+                failures.append(Failure("adversarial-adoption", "review artifact schema_version must be enforced before runtime consumption"))
+        else:
+            failures.append(Failure("adversarial-adoption", "invalid review schema fixture could not load review artifact"))
+
         head_before_drift = run_command(root, ["git", "rev-parse", "HEAD"], cwd=baseline, timeout_seconds=30).stdout.strip()
         (baseline / "implementation-drift.txt").write_text("changed after review\n", encoding="utf-8")
         run_command(root, ["git", "add", "implementation-drift.txt"], cwd=baseline, timeout_seconds=30)

package/payload/skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py

@@ -1479,12 +1479,35 @@ def default_spec_review_path(item_id: str) -> str:
     return f".loom/reviews/{item_id}.spec.json"
 
 
+def shadow_evidence_paths_for_sources(target_root: Path, source_paths: set[str]) -> set[str]:
+    shadow_root = target_root / ".loom/shadow"
+    if not shadow_root.exists():
+        return set()
+
+    evidence_paths: set[str] = set()
+    for evidence_path in sorted(shadow_root.glob("*.json")):
+        relative = evidence_path.relative_to(target_root).as_posix()
+        if relative == ".loom/shadow/shadow-parity.json":
+            continue
+        payload = load_json_file(evidence_path)
+        if not isinstance(payload, dict):
+            continue
+        source_files = payload.get("source_files")
+        if not isinstance(source_files, list):
+            continue
+        if any(isinstance(source, str) and source in source_paths for source in source_files):
+            evidence_paths.add(relative)
+    return evidence_paths
+
+
 def allowed_post_review_carrier_paths(context: dict[str, Any], *review_paths: str) -> set[str]:
-    return {
+    allowed = {
         *review_paths,
         str(context["report"]["fact_chain"]["entry_points"]["recovery_entry"]),
         str(context["report"]["fact_chain"]["entry_points"]["status_surface"]),
     }
+    allowed.update(shadow_evidence_paths_for_sources(context["target_root"], set(review_paths)))
+    return allowed
 
 
 def formal_spec_path(context: dict[str, Any]) -> str | None:
@@ -1948,6 +1971,8 @@ def load_review_record(
     if not isinstance(payload, dict):
         return None, relative, [f"review artifact `{relative}` must be a JSON object"]
     errors: list[str] = []
+    if payload.get("schema_version") != "loom-review/v1":
+        errors.append(f"review artifact `{relative}` schema_version must be `loom-review/v1`")
     for field in ("item_id", "decision", "kind", "summary", "reviewer", "reviewed_head", "reviewed_validation_summary"):
         value = payload.get(field)
         if not isinstance(value, str) or not value.strip():

package/payload/skills/loom-init/.loom-runtime/shared/scripts/loom_check.py

@@ -21,7 +21,7 @@ import governance_surface as governance_surface_module
 import loom_flow as loom_flow_module
 import runtime_state as runtime_state_module
 from governance_surface import build_governance_surface
-from loom_flow import repo_specific_requirements_payload, review_head_binding
+from loom_flow import allowed_post_review_carrier_paths, repo_specific_requirements_payload, review_head_binding
 from runtime_paths import repo_local_root
 
 TOP_LEVEL_DIRS = (
@@ -7149,6 +7149,61 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         assert_broken_shadow_evidence("hash-drift", drift_source_hash)
         assert_broken_shadow_evidence("undeclared", undeclared_shadow_evidence, expect_validation_warn=False)
 
+        review_shadow_target = base / "review-shadow-carrier"
+        shutil.copytree(baseline, review_shadow_target)
+        reviewed_head = run_command(root, ["git", "rev-parse", "HEAD"], cwd=review_shadow_target, timeout_seconds=30).stdout.strip()
+        review_path = ".loom/reviews/INIT-0001.json"
+        review_payload = load_json_file(review_shadow_target / review_path)
+        if isinstance(review_payload, dict):
+            review_payload["summary"] = "Carrier-only review artifact refresh."
+            write_json(review_shadow_target / review_path, review_payload)
+            write_json(
+                review_shadow_target / ".loom/shadow/review-loom.json",
+                {
+                    "decision": "allow",
+                    "source_files": [review_path],
+                    "source_sha256": {review_path: sha256_file(review_shadow_target / review_path)},
+                },
+            )
+            run_command(root, ["git", "add", "-f", review_path, ".loom/shadow/review-loom.json"], cwd=review_shadow_target, timeout_seconds=30)
+            run_command(root, ["git", "commit", "-m", "refresh review carrier evidence"], cwd=review_shadow_target, timeout_seconds=30)
+            carrier_context = {
+                "target_root": review_shadow_target,
+                "report": {
+                    "fact_chain": {
+                        "entry_points": {
+                            "recovery_entry": ".loom/progress/INIT-0001.md",
+                            "status_surface": ".loom/status/current.md",
+                        }
+                    }
+                },
+            }
+            binding_payload, binding_errors = review_head_binding(
+                review_shadow_target,
+                reviewed_head=reviewed_head,
+                allowed_paths=allowed_post_review_carrier_paths(carrier_context, review_path),
+            )
+            if binding_errors or binding_payload.get("status") != "carrier-only":
+                failures.append(Failure("adversarial-adoption", "review shadow evidence tied to a review artifact must be carrier-only after review refresh"))
+        else:
+            failures.append(Failure("adversarial-adoption", "review shadow carrier fixture could not load review artifact"))
+
+        invalid_review_schema_target = base / "invalid-review-schema"
+        shutil.copytree(baseline, invalid_review_schema_target)
+        invalid_review_payload = load_json_file(invalid_review_schema_target / review_path)
+        if isinstance(invalid_review_payload, dict):
+            invalid_review_payload["schema_version"] = "loom-review/v0"
+            write_json(invalid_review_schema_target / review_path, invalid_review_payload)
+            _, _, invalid_review_errors = loom_flow_module.load_review_record(
+                invalid_review_schema_target,
+                "INIT-0001",
+                review_path,
+            )
+            if not any("schema_version must be `loom-review/v1`" in error for error in invalid_review_errors):
+                failures.append(Failure("adversarial-adoption", "review artifact schema_version must be enforced before runtime consumption"))
+        else:
+            failures.append(Failure("adversarial-adoption", "invalid review schema fixture could not load review artifact"))
+
         head_before_drift = run_command(root, ["git", "rev-parse", "HEAD"], cwd=baseline, timeout_seconds=30).stdout.strip()
         (baseline / "implementation-drift.txt").write_text("changed after review\n", encoding="utf-8")
         run_command(root, ["git", "add", "implementation-drift.txt"], cwd=baseline, timeout_seconds=30)