@mc-and-his-agents/loom-installer 0.1.48 → 0.1.50

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.48",
+  "version": "0.1.50",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "e584966cb8ab5b856e9b3588173d436302fa4904",
+  "source_commit": "e0d9542d7f67ae153e1b884c11bbc848943941cb",
   "source_ref": "main",
-  "built_at": "2026-04-28T10:12:57+08:00",
+  "built_at": "2026-04-28T11:55:17+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -633,13 +633,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1223,13 +1223,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1843,13 +1843,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2463,13 +2463,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3088,13 +3088,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3708,13 +3708,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4328,13 +4328,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4948,13 +4948,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5568,13 +5568,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6188,13 +6188,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 362269,
-      "sha256": "451270ab050bc0b1522ae08d2c151dd704d711a41c5de5ba237d626b6d60ec1d"
+      "bytes": 365681,
+      "sha256": "e48281477bbb35b887e21034570ed519a40dae718ea97e99886a66b04dbd1d50"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 341764,
-      "sha256": "1d48bec787cdb4a056cd98c0f40b54fadc70711299691c343dcf4db60672246b"
+      "bytes": 343536,
+      "sha256": "f8fe63875c5abce92281c4fce0fa329c3584a25a85c131ba2d0364ac39b78997"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -4466,6 +4466,42 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
                 elif payload.get("result") != "pass":
                     failures.append(Failure("daily-execution-cli", "`installed spec review record allow` must pass"))
 
+                spec_plan_path = positive_target / ".loom/specs/INIT-0001/plan.md"
+                spec_plan_text = spec_plan_path.read_text(encoding="utf-8")
+                spec_plan_path.unlink()
+                try:
+                    payload, error = load_command_json(
+                        root,
+                        [
+                            "python3",
+                            str(install_root / "loom-spec-review" / "scripts" / "loom-spec-review.py"),
+                            "review",
+                            "record",
+                            "--target",
+                            str(positive_target),
+                            "--item",
+                            "INIT-0001",
+                            "--review-file",
+                            ".loom/reviews/INIT-0001.spec.json",
+                            "--decision",
+                            "allow",
+                            "--kind",
+                            "spec_review",
+                            "--summary",
+                            "Incomplete formal spec suite should not be approved.",
+                            "--reviewer",
+                            "loom-check",
+                        ],
+                    )
+                    if error:
+                        failures.append(Failure("daily-execution-cli", f"`installed incomplete spec review record` failed: {error}"))
+                    elif payload.get("result") != "block":
+                        failures.append(Failure("daily-execution-cli", "`installed incomplete spec review record` must block"))
+                    elif not any("plan.md" in str(item) for item in payload.get("missing_inputs", [])):
+                        failures.append(Failure("daily-execution-cli", "`installed incomplete spec review record` must name the missing plan.md"))
+                finally:
+                    spec_plan_path.write_text(spec_plan_text, encoding="utf-8")
+
                 payload, error = load_command_json(
                     root,
                     [
@@ -7229,6 +7265,39 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         else:
             failures.append(Failure("adversarial-adoption", "review shadow carrier fixture could not load review artifact"))
 
+        unreadable_review_shadow_target = base / "unreadable-review-shadow"
+        shutil.copytree(baseline, unreadable_review_shadow_target)
+        (unreadable_review_shadow_target / ".loom/shadow/review-repo.json").write_text("{not-json", encoding="utf-8")
+        run_command(
+            root,
+            ["git", "add", "-f", ".loom/shadow/review-repo.json"],
+            cwd=unreadable_review_shadow_target,
+            timeout_seconds=30,
+        )
+        run_command(
+            root,
+            ["git", "commit", "-m", "corrupt review shadow evidence"],
+            cwd=unreadable_review_shadow_target,
+            timeout_seconds=30,
+        )
+        unreadable_payload, unreadable_error = load_command_json(
+            root,
+            [
+                "python3",
+                str(unreadable_review_shadow_target / ".loom/bin/loom_flow.py"),
+                "checkpoint",
+                "merge",
+                "--target",
+                str(unreadable_review_shadow_target),
+                "--item",
+                "INIT-0001",
+            ],
+        )
+        if unreadable_error:
+            failures.append(Failure("adversarial-adoption", f"unreadable review shadow evidence must fail closed without crashing: {unreadable_error}"))
+        elif unreadable_payload.get("result") == "pass":
+            failures.append(Failure("adversarial-adoption", "unreadable review shadow evidence must fail closed instead of passing"))
+
         invalid_review_schema_target = base / "invalid-review-schema"
         shutil.copytree(baseline, invalid_review_schema_target)
         invalid_review_payload = load_json_file(invalid_review_schema_target / review_path)

package/payload/plugin/loom/skills/shared/scripts/loom_flow.py

@@ -1489,7 +1489,10 @@ def shadow_evidence_paths_for_sources(target_root: Path, source_paths: set[str])
         relative = evidence_path.relative_to(target_root).as_posix()
         if relative == ".loom/shadow/shadow-parity.json":
             continue
-        payload = load_json_file(evidence_path)
+        try:
+            payload = load_json_file(evidence_path)
+        except (OSError, ValueError, json.JSONDecodeError):
+            continue
         if not isinstance(payload, dict):
             continue
         source_files = payload.get("source_files")
@@ -1509,10 +1512,13 @@ def allowed_post_review_carrier_paths(context: dict[str, Any], *review_paths: st
     allowed.update(shadow_evidence_paths_for_sources(context["target_root"], set(review_paths)))
     review_shadow_root = context["target_root"] / ".loom/shadow"
     if review_shadow_root.exists():
-        allowed.update(
-            evidence_path.relative_to(context["target_root"]).as_posix()
-            for evidence_path in sorted(review_shadow_root.glob("review-*.json"))
-        )
+        for evidence_path in sorted(review_shadow_root.glob("review-*.json")):
+            try:
+                payload = load_json_file(evidence_path)
+            except (OSError, ValueError, json.JSONDecodeError):
+                continue
+            if isinstance(payload, dict):
+                allowed.add(evidence_path.relative_to(context["target_root"]).as_posix())
     return allowed
 
 
@@ -1535,6 +1541,16 @@ def formal_spec_path(context: dict[str, Any]) -> str | None:
     return None
 
 
+def formal_spec_suite_status(context: dict[str, Any]) -> tuple[dict[str, str], list[str]]:
+    suite = spec_suite_paths(context)
+    missing = [
+        path
+        for path in (suite["spec"], suite["plan"], suite["implementation_contract"])
+        if not (context["target_root"] / path).is_file()
+    ]
+    return suite, missing
+
+
 def spec_suite_paths(context: dict[str, Any]) -> dict[str, str]:
     item_id = context["item_id"]
     candidates = [
@@ -1751,15 +1767,25 @@ def review_gate_payload(
 
 
 def spec_review_gate_payload(context: dict[str, Any]) -> dict[str, Any]:
-    spec_path = formal_spec_path(context)
-    return review_gate_payload(
+    suite, missing_suite_paths = formal_spec_suite_status(context)
+    spec_path = suite["spec"] if not missing_suite_paths else formal_spec_path(context)
+    payload = review_gate_payload(
         context,
         review_path=default_spec_review_path(context["item_id"]),
         expected_kind="spec_review",
         gate_name="spec_review",
-        required=spec_path is not None,
+        required=not missing_suite_paths,
         path_label=spec_path,
     )
+    payload["formal_spec_suite"] = suite
+    if missing_suite_paths:
+        payload["result"] = "block"
+        payload["summary"] = "spec review is blocked until the complete formal spec suite is present."
+        payload["missing_inputs"] = [
+            f"missing formal spec suite file: {path}" for path in missing_suite_paths
+        ] + list(payload.get("missing_inputs", []))
+        payload["fallback_to"] = "build"
+    return payload
 
 
 def implementation_review_status_payload(context: dict[str, Any]) -> dict[str, Any]:
@@ -2107,7 +2133,7 @@ def build_review_flow_payload(
 
     build_payload = checkpoint_payload("build", context)
     governance_surface = build_governance_surface(target_root)
-    surface_name = "review" if operation == "review" else "spec_review"
+    surface_name = "review"
     repo_specific_requirements = repo_specific_requirements_payload(
         governance_surface.get("repo_interface"),
         target_root=target_root,
@@ -4237,6 +4263,15 @@ def carrier_refresh_payload(target_root: Path, output_relative: str, expected_it
     for action in actions:
         if action.get("status") == "block":
             missing_inputs.extend(str(message) for message in action.get("missing_inputs", []))
+    if runtime_state.get("result") != "pass":
+        refreshable_runtime_drift = {
+            f"bootstrap runtime artifact `{action.get('path')}` sha256 drifted"
+            for action in actions
+            if action.get("kind") is None and action.get("status") == "refresh-needed" and action.get("path")
+        }
+        for message in runtime_state.get("missing_inputs", []):
+            if str(message) not in refreshable_runtime_drift:
+                missing_inputs.append(f"runtime-state: {message}")
 
     review_status: dict[str, Any] = {"status": "not_checked"}
     if not context_errors:
@@ -6798,15 +6833,17 @@ def handle_review(args: argparse.Namespace) -> int:
             }
         )
     if args.decision == "allow" and args.kind == "spec_review":
-        spec_path = formal_spec_path(context)
-        if spec_path is None:
+        _, missing_suite_paths = formal_spec_suite_status(context)
+        if missing_suite_paths:
             return emit(
                 {
                     "command": "review",
                     "operation": "record",
                     "result": "block",
-                    "summary": "spec review cannot be recorded as `allow` without a readable formal spec path.",
-                    "missing_inputs": ["formal spec path"],
+                    "summary": "spec review cannot be recorded as `allow` without the complete formal spec suite.",
+                    "missing_inputs": [
+                        f"missing formal spec suite file: {path}" for path in missing_suite_paths
+                    ],
                     "fallback_to": "build",
                     "build_checkpoint": build_payload,
                 }

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py

@@ -4466,6 +4466,42 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
                 elif payload.get("result") != "pass":
                     failures.append(Failure("daily-execution-cli", "`installed spec review record allow` must pass"))
 
+                spec_plan_path = positive_target / ".loom/specs/INIT-0001/plan.md"
+                spec_plan_text = spec_plan_path.read_text(encoding="utf-8")
+                spec_plan_path.unlink()
+                try:
+                    payload, error = load_command_json(
+                        root,
+                        [
+                            "python3",
+                            str(install_root / "loom-spec-review" / "scripts" / "loom-spec-review.py"),
+                            "review",
+                            "record",
+                            "--target",
+                            str(positive_target),
+                            "--item",
+                            "INIT-0001",
+                            "--review-file",
+                            ".loom/reviews/INIT-0001.spec.json",
+                            "--decision",
+                            "allow",
+                            "--kind",
+                            "spec_review",
+                            "--summary",
+                            "Incomplete formal spec suite should not be approved.",
+                            "--reviewer",
+                            "loom-check",
+                        ],
+                    )
+                    if error:
+                        failures.append(Failure("daily-execution-cli", f"`installed incomplete spec review record` failed: {error}"))
+                    elif payload.get("result") != "block":
+                        failures.append(Failure("daily-execution-cli", "`installed incomplete spec review record` must block"))
+                    elif not any("plan.md" in str(item) for item in payload.get("missing_inputs", [])):
+                        failures.append(Failure("daily-execution-cli", "`installed incomplete spec review record` must name the missing plan.md"))
+                finally:
+                    spec_plan_path.write_text(spec_plan_text, encoding="utf-8")
+
                 payload, error = load_command_json(
                     root,
                     [
@@ -7229,6 +7265,39 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         else:
             failures.append(Failure("adversarial-adoption", "review shadow carrier fixture could not load review artifact"))
 
+        unreadable_review_shadow_target = base / "unreadable-review-shadow"
+        shutil.copytree(baseline, unreadable_review_shadow_target)
+        (unreadable_review_shadow_target / ".loom/shadow/review-repo.json").write_text("{not-json", encoding="utf-8")
+        run_command(
+            root,
+            ["git", "add", "-f", ".loom/shadow/review-repo.json"],
+            cwd=unreadable_review_shadow_target,
+            timeout_seconds=30,
+        )
+        run_command(
+            root,
+            ["git", "commit", "-m", "corrupt review shadow evidence"],
+            cwd=unreadable_review_shadow_target,
+            timeout_seconds=30,
+        )
+        unreadable_payload, unreadable_error = load_command_json(
+            root,
+            [
+                "python3",
+                str(unreadable_review_shadow_target / ".loom/bin/loom_flow.py"),
+                "checkpoint",
+                "merge",
+                "--target",
+                str(unreadable_review_shadow_target),
+                "--item",
+                "INIT-0001",
+            ],
+        )
+        if unreadable_error:
+            failures.append(Failure("adversarial-adoption", f"unreadable review shadow evidence must fail closed without crashing: {unreadable_error}"))
+        elif unreadable_payload.get("result") == "pass":
+            failures.append(Failure("adversarial-adoption", "unreadable review shadow evidence must fail closed instead of passing"))
+
         invalid_review_schema_target = base / "invalid-review-schema"
         shutil.copytree(baseline, invalid_review_schema_target)
         invalid_review_payload = load_json_file(invalid_review_schema_target / review_path)

package/payload/skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py

@@ -1489,7 +1489,10 @@ def shadow_evidence_paths_for_sources(target_root: Path, source_paths: set[str])
         relative = evidence_path.relative_to(target_root).as_posix()
         if relative == ".loom/shadow/shadow-parity.json":
             continue
-        payload = load_json_file(evidence_path)
+        try:
+            payload = load_json_file(evidence_path)
+        except (OSError, ValueError, json.JSONDecodeError):
+            continue
         if not isinstance(payload, dict):
             continue
         source_files = payload.get("source_files")
@@ -1509,10 +1512,13 @@ def allowed_post_review_carrier_paths(context: dict[str, Any], *review_paths: st
     allowed.update(shadow_evidence_paths_for_sources(context["target_root"], set(review_paths)))
     review_shadow_root = context["target_root"] / ".loom/shadow"
     if review_shadow_root.exists():
-        allowed.update(
-            evidence_path.relative_to(context["target_root"]).as_posix()
-            for evidence_path in sorted(review_shadow_root.glob("review-*.json"))
-        )
+        for evidence_path in sorted(review_shadow_root.glob("review-*.json")):
+            try:
+                payload = load_json_file(evidence_path)
+            except (OSError, ValueError, json.JSONDecodeError):
+                continue
+            if isinstance(payload, dict):
+                allowed.add(evidence_path.relative_to(context["target_root"]).as_posix())
     return allowed
 
 
@@ -1535,6 +1541,16 @@ def formal_spec_path(context: dict[str, Any]) -> str | None:
     return None
 
 
+def formal_spec_suite_status(context: dict[str, Any]) -> tuple[dict[str, str], list[str]]:
+    suite = spec_suite_paths(context)
+    missing = [
+        path
+        for path in (suite["spec"], suite["plan"], suite["implementation_contract"])
+        if not (context["target_root"] / path).is_file()
+    ]
+    return suite, missing
+
+
 def spec_suite_paths(context: dict[str, Any]) -> dict[str, str]:
     item_id = context["item_id"]
     candidates = [
@@ -1751,15 +1767,25 @@ def review_gate_payload(
 
 
 def spec_review_gate_payload(context: dict[str, Any]) -> dict[str, Any]:
-    spec_path = formal_spec_path(context)
-    return review_gate_payload(
+    suite, missing_suite_paths = formal_spec_suite_status(context)
+    spec_path = suite["spec"] if not missing_suite_paths else formal_spec_path(context)
+    payload = review_gate_payload(
         context,
         review_path=default_spec_review_path(context["item_id"]),
         expected_kind="spec_review",
         gate_name="spec_review",
-        required=spec_path is not None,
+        required=not missing_suite_paths,
         path_label=spec_path,
     )
+    payload["formal_spec_suite"] = suite
+    if missing_suite_paths:
+        payload["result"] = "block"
+        payload["summary"] = "spec review is blocked until the complete formal spec suite is present."
+        payload["missing_inputs"] = [
+            f"missing formal spec suite file: {path}" for path in missing_suite_paths
+        ] + list(payload.get("missing_inputs", []))
+        payload["fallback_to"] = "build"
+    return payload
 
 
 def implementation_review_status_payload(context: dict[str, Any]) -> dict[str, Any]:
@@ -2107,7 +2133,7 @@ def build_review_flow_payload(
 
     build_payload = checkpoint_payload("build", context)
     governance_surface = build_governance_surface(target_root)
-    surface_name = "review" if operation == "review" else "spec_review"
+    surface_name = "review"
     repo_specific_requirements = repo_specific_requirements_payload(
         governance_surface.get("repo_interface"),
         target_root=target_root,
@@ -4237,6 +4263,15 @@ def carrier_refresh_payload(target_root: Path, output_relative: str, expected_it
     for action in actions:
         if action.get("status") == "block":
             missing_inputs.extend(str(message) for message in action.get("missing_inputs", []))
+    if runtime_state.get("result") != "pass":
+        refreshable_runtime_drift = {
+            f"bootstrap runtime artifact `{action.get('path')}` sha256 drifted"
+            for action in actions
+            if action.get("kind") is None and action.get("status") == "refresh-needed" and action.get("path")
+        }
+        for message in runtime_state.get("missing_inputs", []):
+            if str(message) not in refreshable_runtime_drift:
+                missing_inputs.append(f"runtime-state: {message}")
 
     review_status: dict[str, Any] = {"status": "not_checked"}
     if not context_errors:
@@ -6798,15 +6833,17 @@ def handle_review(args: argparse.Namespace) -> int:
             }
         )
     if args.decision == "allow" and args.kind == "spec_review":
-        spec_path = formal_spec_path(context)
-        if spec_path is None:
+        _, missing_suite_paths = formal_spec_suite_status(context)
+        if missing_suite_paths:
             return emit(
                 {
                     "command": "review",
                     "operation": "record",
                     "result": "block",
-                    "summary": "spec review cannot be recorded as `allow` without a readable formal spec path.",
-                    "missing_inputs": ["formal spec path"],
+                    "summary": "spec review cannot be recorded as `allow` without the complete formal spec suite.",
+                    "missing_inputs": [
+                        f"missing formal spec suite file: {path}" for path in missing_suite_paths
+                    ],
                     "fallback_to": "build",
                     "build_checkpoint": build_payload,
                 }