@mc-and-his-agents/loom-installer 0.1.60 → 0.1.61

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.60",
+  "version": "0.1.61",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "a61960914b8f1313160bb948c2cfd1892be984cc",
+  "source_commit": "b7afde5914867bdf89382b13da60d769ed5ae225",
   "source_ref": "main",
-  "built_at": "2026-04-29T19:11:03+08:00",
+  "built_at": "2026-04-29T19:51:34+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -453,8 +453,8 @@
     },
     {
       "path": "plugin/loom/skills/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "plugin/loom/skills/shared/references/governance/host-object-taxonomy.md",
@@ -653,13 +653,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
@@ -1068,8 +1068,8 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -1268,13 +1268,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
@@ -1713,8 +1713,8 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -1913,13 +1913,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
@@ -2358,8 +2358,8 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -2558,13 +2558,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
@@ -3008,8 +3008,8 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -3208,13 +3208,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
@@ -3653,8 +3653,8 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -3853,13 +3853,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
@@ -4298,8 +4298,8 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -4498,13 +4498,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
@@ -4943,8 +4943,8 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -5143,13 +5143,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
@@ -5588,8 +5588,8 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -5788,13 +5788,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
@@ -6233,8 +6233,8 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/references/governance/governance-maturity-model.md",
-      "bytes": 2844,
-      "sha256": "f68beec147bfd4841fd5f437910eb6f5bdaf16985a449899910fd85dcf33a1a4"
+      "bytes": 3466,
+      "sha256": "12aaf2f6d52e7dbe049b8a6252ea909fae48f7321e9f6ce0fbbbfb0313915e2b"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/references/governance/host-object-taxonomy.md",
@@ -6433,13 +6433,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/governance_surface.py",
-      "bytes": 76071,
-      "sha256": "dc87521386dc299a8aa0b200882623c39a5247113bee3042eca742a9ba6eb3ce"
+      "bytes": 79591,
+      "sha256": "85039f034e25144fa2ba5fedaf6fbac1367a726ece9a77580bbf18bcbf97b996"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 417231,
-      "sha256": "6e43208996176ec12022ab1ffa1592aebd1c1fdf08ac4146d98549b902f6cb75"
+      "bytes": 420225,
+      "sha256": "e0d0178b76619a82a6d616db872a57efaea90e635bfe0883ef318e42e937232c"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",

package/payload/plugin/loom/skills/shared/references/governance/governance-maturity-model.md

@@ -22,6 +22,8 @@ Loom 当前冻结三档成熟度：
 
 `light` 适用于只需要最小执行入口与基本 review / merge 纪律的仓库。
 
+Fresh adoption 默认最高只能到 `light`。repo-local aliases、workflow 文件或 companion scaffold 不等于宿主强制控制面。
+
 至少必须具备：
 
 - `Work Item` 作为唯一默认执行入口
@@ -63,6 +65,7 @@ Loom 当前冻结三档成熟度：
 - 强前置 `gate chain`
 - `GitHub controlled merge`
 - merge 后 `closeout + reconciliation` 一体化
+- 已验证的宿主强制控制面：branch protection 或 ruleset、required checks、PR merge path、controlled merge basis、closeout basis
 - 可验证的 GitHub profile upgrade 路径
 - parity validation 证据
 
@@ -84,6 +87,7 @@ Loom 当前冻结三档成熟度：
 - 需要统一 host binding、merge control 与 closeout control plane
 - 需要用统一 taxonomy 暴露 stale / drift / gate failure
 - 需要对 adopted repo 给出可检查的 parity / upgrade judgment
+- 宿主 branch protection 或 ruleset、required checks、PR merge path、controlled merge basis、closeout basis 都能被 verified host read 证明
 
 ## 6. 阻断条件
 
@@ -93,6 +97,8 @@ Loom 当前冻结三档成熟度：
 - formal spec 路径仍可绕过 `spec review`
 - `status control plane` 仍由多个 skill 各自拼装
 - merge / closeout 仍缺稳定 binding chain
+- 宿主控制面为 `unverified`、`stale` 或 `host_unavailable`
+- 只有 local gate starter 或 workflow 文件，但 required checks / branch protection / ruleset 未被宿主强制
 - parity 仍只有口头比较，没有版本控制内证据
 
 ## 7. 与 adoption / check / status 的关系

package/payload/plugin/loom/skills/shared/scripts/governance_surface.py

@@ -224,7 +224,16 @@ MATURITY_LEVELS = {
         "summary": "Formal spec, spec gate, status control plane, basic host binding, and closeout/reconciliation reads are available.",
     },
     "strong": {
-        "requires": ["standard", "repo_interface", "repo_interop", "github_controlled_merge"],
+        "requires": [
+            "standard",
+            "repo_interface",
+            "repo_interop",
+            "host_enforced_control_plane",
+            "pr_merge_path",
+            "controlled_merge_basis",
+            "closeout_basis",
+            "github_controlled_merge",
+        ],
         "summary": "Host-backed binding, reconciliation, controlled merge, and closeout gates are available.",
     },
 }
@@ -332,6 +341,34 @@ MATURITY_REQUIRED_FIELDS = {
             "defaulting": "host",
             "recommended_action": "enable controlled merge binding and required host gates",
         },
+        {
+            "id": "host_enforced_control_plane",
+            "layer": "github-profile",
+            "required": True,
+            "defaulting": "host",
+            "recommended_action": "verify branch protection or ruleset enforcement plus required checks before claiming strong governance",
+        },
+        {
+            "id": "pr_merge_path",
+            "layer": "github-profile",
+            "required": True,
+            "defaulting": "host",
+            "recommended_action": "prove the PR merge path is host-owned and readable before strong governance",
+        },
+        {
+            "id": "controlled_merge_basis",
+            "layer": "github-profile",
+            "required": True,
+            "defaulting": "host",
+            "recommended_action": "prove controlled merge depends on verified host checks instead of local aliases",
+        },
+        {
+            "id": "closeout_basis",
+            "layer": "github-profile",
+            "required": True,
+            "defaulting": "host",
+            "recommended_action": "prove closeout consumes merge commit and reconciliation basis before strong governance",
+        },
     ],
 }
 ADOPTION_GATE_ROLLOUT_MODES = {
@@ -1620,6 +1657,7 @@ def detect_host_binding_surface(
 
 def maturity_status(
     *,
+    repository_mode: str,
     carrier_summary: dict[str, dict[str, str]],
     repo_interface: dict[str, Any],
     repo_interop: dict[str, Any],
@@ -1639,22 +1677,54 @@ def maturity_status(
     repo_interop_present = repo_interop.get("availability") == "present"
     basic_host_binding_present = host_binding.get("result") == "pass"
     github_control_plane_present = github_control_plane.get("default_branch") != "unknown"
+    host_enforcement = github_control_plane.get("host_enforcement")
+    host_enforced_control_plane = (
+        isinstance(host_enforcement, dict)
+        and host_enforcement.get("verification_status") == "verified"
+        and host_enforcement.get("branch_protection_or_ruleset") is True
+        and host_enforcement.get("required_checks") is True
+    )
+    required_objects = host_binding.get("required_objects")
+    implementation_pr = required_objects.get("implementation_pr") if isinstance(required_objects, dict) else None
+    merge_commit = required_objects.get("merge_commit") if isinstance(required_objects, dict) else None
+    closeout = required_objects.get("closeout") if isinstance(required_objects, dict) else None
+    pr_merge_path = (
+        isinstance(implementation_pr, dict)
+        and implementation_pr.get("authority") == "host"
+        and implementation_pr.get("status") in {"host-managed", "present"}
+    )
+    controlled_merge_basis = host_enforced_control_plane and github_control_plane_present and pr_merge_path
+    closeout_basis = (
+        repo_interop_present
+        and isinstance(merge_commit, dict)
+        and merge_commit.get("authority") == "host"
+        and isinstance(closeout, dict)
+        and closeout.get("status") == "present"
+    )
     facts = {
         **carrier_present,
         "light": False,
         "standard": False,
-        "fr_work_item_layer": repo_interface_present,
+        "fr_work_item_layer": repo_interface_present and repository_mode != "new",
         "spec_gate": spec_gate_present,
         "status_control_plane": True,
-        "basic_host_binding": basic_host_binding_present,
-        "closeout_reconciliation_read": repo_interop_present,
+        "basic_host_binding": basic_host_binding_present and repository_mode != "new",
+        "closeout_reconciliation_read": repo_interop_present and repository_mode != "new",
         "repo_interface": repo_interface_present,
         "repo_interop": repo_interop_present,
+        "host_enforced_control_plane": host_enforced_control_plane and repository_mode != "new",
+        "pr_merge_path": pr_merge_path and repository_mode != "new",
+        "controlled_merge_basis": controlled_merge_basis and repository_mode != "new",
+        "closeout_basis": closeout_basis and repository_mode != "new",
         "github_controlled_merge": (
-            github_control_plane_present
+            repository_mode != "new"
+            and github_control_plane_present
             and basic_host_binding_present
             and repo_interface_present
             and repo_interop_present
+            and host_enforced_control_plane
+            and controlled_merge_basis
+            and closeout_basis
         ),
     }
     achieved: list[str] = []
@@ -1687,12 +1757,18 @@ def maturity_status(
         "required_fields": MATURITY_REQUIRED_FIELDS,
         "missing_by_level": missing_by_level,
         "missing_details_by_level": missing_details_by_level,
+        "fresh_adoption": {
+            "repository_mode": repository_mode,
+            "max_default_maturity": "light",
+            "applied": repository_mode == "new",
+        },
         "gate_rollout": adoption_gate_rollout_status(maturity_current=current),
     }
 
 
 def governance_control_plane(
     *,
+    repository_mode: str,
     carrier_summary: dict[str, dict[str, str]],
     github_control_plane: dict[str, Any],
     repo_interface: dict[str, Any],
@@ -1714,6 +1790,7 @@ def governance_control_plane(
         "taxonomy": GATE_FAILURE_TAXONOMY,
         "gate_chain": GATE_CHAIN,
         "maturity": maturity_status(
+            repository_mode=repository_mode,
             carrier_summary=carrier_summary,
             repo_interface=repo_interface,
             repo_interop=repo_interop,
@@ -1750,6 +1827,7 @@ def build_governance_surface(
     workspace_profile = detect_workspace_profile(root, host_binding=host_binding)
     gate_starter = detect_gate_starter(root)
     control_plane = governance_control_plane(
+        repository_mode=repository_mode,
         carrier_summary=carrier_summary,
         github_control_plane=github_control_plane,
         repo_interface=repo_interface,

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -495,6 +495,24 @@ def load_command_json(
     return payload, None
 
 
+def host_read_unavailable(payload: dict[str, object]) -> bool:
+    haystack = json.dumps(payload, ensure_ascii=False).lower()
+    return any(
+        needle in haystack
+        for needle in (
+            "api rate limit exceeded",
+            "http 403",
+            "host_unavailable",
+            "host unavailable",
+            "rate limit exceeded",
+        )
+    )
+
+
+def host_verification_unconfirmed(payload: dict[str, object]) -> bool:
+    return payload.get("host_verification_status") in {"unverified", "stale", "host_unavailable"} or host_read_unavailable(payload)
+
+
 def load_command_json_with_retry(
     root: Path,
     args: list[str],
@@ -987,6 +1005,13 @@ def require_governance_control_plane(
         strong_requires = levels.get("strong", {}).get("requires") if isinstance(levels, dict) and isinstance(levels.get("strong"), dict) else None
         if not isinstance(strong_requires, list) or "github_controlled_merge" not in strong_requires:
             failures.append(Failure(category, f"{context}.maturity strong level must require GitHub controlled merge"))
+        elif not {
+            "host_enforced_control_plane",
+            "pr_merge_path",
+            "controlled_merge_basis",
+            "closeout_basis",
+        }.issubset(set(strong_requires)):
+            failures.append(Failure(category, f"{context}.maturity strong level must require verified host enforcement and closeout basis"))
         required_fields = maturity.get("required_fields")
         if not isinstance(required_fields, dict) or set(required_fields) != {"light", "standard", "strong"}:
             failures.append(Failure(category, f"{context}.maturity required_fields must define light, standard, and strong"))
@@ -1006,6 +1031,11 @@ def require_governance_control_plane(
         missing_details = maturity.get("missing_details_by_level")
         if not isinstance(missing_details, dict) or set(missing_details) != {"light", "standard", "strong"}:
             failures.append(Failure(category, f"{context}.maturity missing_details_by_level must define light, standard, and strong"))
+        fresh_adoption = maturity.get("fresh_adoption")
+        if not isinstance(fresh_adoption, dict):
+            failures.append(Failure(category, f"{context}.maturity fresh_adoption must be an object"))
+        elif fresh_adoption.get("max_default_maturity") != "light":
+            failures.append(Failure(category, f"{context}.maturity fresh_adoption max_default_maturity must stay light"))
         require_adoption_gate_rollout_payload(
             failures,
             category=category,
@@ -2785,7 +2815,14 @@ def check_root_self_adoption_carrier(root: Path) -> list[Failure]:
             )
         if kind == "governance-status":
             maturity = payload.get("maturity")
-            if not isinstance(maturity, dict) or maturity.get("current") != "strong":
+            if isinstance(maturity, dict) and maturity.get("current") == "strong":
+                pass
+            elif host_verification_unconfirmed(payload):
+                missing_by_level = maturity.get("missing_by_level") if isinstance(maturity, dict) else {}
+                strong_missing = missing_by_level.get("strong") if isinstance(missing_by_level, dict) else []
+                if not isinstance(strong_missing, list) or "host_enforced_control_plane" not in strong_missing:
+                    failures.append(Failure("root-self-adoption", "`root governance status` host-unavailable fallback must keep strong blocked on host enforcement"))
+            else:
                 failures.append(Failure("root-self-adoption", "`root governance status` must report strong maturity after self-management binding"))
         if kind == "runtime-parity":
             checks = payload.get("checks")
@@ -3135,7 +3172,7 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
         (
             "host-binding-validate",
             ["python3", "tools/loom_flow.py", "host-binding", "validate", "--target", ".", "--owner", "MC-and-his-Agents", "--repo", "Loom", "--branch", "main"],
-            {"pass"},
+            {"pass", "block"},
         ),
         (
             "governance-profile-status",
@@ -3466,7 +3503,10 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
             if payload.get("schema_version") != "loom-host-binding/v1":
                 failures.append(Failure("daily-execution-cli", "`host-binding validate` must report schema v1"))
             branch = payload.get("branch")
-            if not isinstance(branch, dict) or branch.get("status") != "present":
+            host_unavailable = host_read_unavailable(payload)
+            if payload.get("result") == "block" and not host_unavailable:
+                failures.append(Failure("daily-execution-cli", "`host-binding validate --branch main` must pass unless the host read is unavailable"))
+            if (not isinstance(branch, dict) or branch.get("status") != "present") and not host_unavailable:
                 failures.append(Failure("daily-execution-cli", "`host-binding validate --branch main` must read the branch via REST"))
         if label in {"governance-profile-status", "governance-profile-upgrade-plan"}:
             if payload.get("command") != "governance-profile":
@@ -3481,6 +3521,15 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
                 context=f"`{label}` governance_control_plane",
                 payload=control_plane,
             )
+            maturity = payload.get("maturity")
+            if isinstance(maturity, dict):
+                current = maturity.get("current")
+                if current == "strong":
+                    failures.append(Failure("daily-execution-cli", "`examples/new-project` fresh adoption must not default to strong maturity"))
+                missing_by_level = maturity.get("missing_by_level")
+                strong_missing = missing_by_level.get("strong") if isinstance(missing_by_level, dict) else []
+                if not isinstance(strong_missing, list) or "host_enforced_control_plane" not in strong_missing:
+                    failures.append(Failure("daily-execution-cli", "`examples/new-project` strong upgrade-plan must expose missing host enforcement"))
             if label == "governance-profile-upgrade-plan":
                 require_adoption_decisions_payload(
                     failures,

package/payload/skills/loom-adopt/.loom-runtime/shared/references/governance/governance-maturity-model.md

@@ -22,6 +22,8 @@ Loom 当前冻结三档成熟度：
 
 `light` 适用于只需要最小执行入口与基本 review / merge 纪律的仓库。
 
+Fresh adoption 默认最高只能到 `light`。repo-local aliases、workflow 文件或 companion scaffold 不等于宿主强制控制面。
+
 至少必须具备：
 
 - `Work Item` 作为唯一默认执行入口
@@ -63,6 +65,7 @@ Loom 当前冻结三档成熟度：
 - 强前置 `gate chain`
 - `GitHub controlled merge`
 - merge 后 `closeout + reconciliation` 一体化
+- 已验证的宿主强制控制面：branch protection 或 ruleset、required checks、PR merge path、controlled merge basis、closeout basis
 - 可验证的 GitHub profile upgrade 路径
 - parity validation 证据
 
@@ -84,6 +87,7 @@ Loom 当前冻结三档成熟度：
 - 需要统一 host binding、merge control 与 closeout control plane
 - 需要用统一 taxonomy 暴露 stale / drift / gate failure
 - 需要对 adopted repo 给出可检查的 parity / upgrade judgment
+- 宿主 branch protection 或 ruleset、required checks、PR merge path、controlled merge basis、closeout basis 都能被 verified host read 证明
 
 ## 6. 阻断条件
 
@@ -93,6 +97,8 @@ Loom 当前冻结三档成熟度：
 - formal spec 路径仍可绕过 `spec review`
 - `status control plane` 仍由多个 skill 各自拼装
 - merge / closeout 仍缺稳定 binding chain
+- 宿主控制面为 `unverified`、`stale` 或 `host_unavailable`
+- 只有 local gate starter 或 workflow 文件，但 required checks / branch protection / ruleset 未被宿主强制
 - parity 仍只有口头比较，没有版本控制内证据
 
 ## 7. 与 adoption / check / status 的关系