@nextcommerce/campaigns-os 1.33.0

package/contracts/fixtures/orientation/envelope/refused.json

@@ -0,0 +1,100 @@
+{
+  "schema_version": "campaigns-os-tooling-orientation/v1",
+  "request": {
+    "run_id": "run-example-0001",
+    "checkout_mode": "managed",
+    "mutation_policy": "observe_only",
+    "baseline": {
+      "kind": "supported_surface",
+      "commit": "1111111111111111111111111111111111111111",
+      "surface_version": "1.13.0"
+    },
+    "accepted_orientation_schemas": [
+      "campaigns-os-tooling-orientation/v1"
+    ],
+    "accepted_surface_range": ">=1.13.0 <2.0.0",
+    "manifest_sha256": "3333333333333333333333333333333333333333333333333333333333333333"
+  },
+  "repository": {
+    "owner": "NextCommerceCo",
+    "repository": "campaigns-os",
+    "branch": "main",
+    "upstream": "origin/main",
+    "clean": true,
+    "shallow": false,
+    "graph_relation": "identical",
+    "common_git_identity": "managed-store-0001",
+    "worktree_identity": "generation-0001",
+    "commit_before": "1111111111111111111111111111111111111111",
+    "commit_fetched": "1111111111111111111111111111111111111111",
+    "commit_after": "1111111111111111111111111111111111111111"
+  },
+  "freshness": {
+    "state": "refused",
+    "observed_at": "2026-08-28T00:00:00Z",
+    "fetch_result": {
+      "attempted": true,
+      "succeeded": true,
+      "duration_ms": 610
+    }
+  },
+  "surface": {
+    "reviewed_version": "1.13.0",
+    "target_version": "1.13.0",
+    "current_version": "1.13.0",
+    "compatibility_result": "compatible",
+    "compatibility_rule": "target surface_version is inside the consumer's accepted_surface_range",
+    "transitions": []
+  },
+  "release_ledger": {
+    "ledger_schema_version": "campaigns-os-release-ledger/v1",
+    "entries": []
+  },
+  "changelog": {
+    "sections": []
+  },
+  "runtime": {
+    "recipe_id": null,
+    "source_fingerprint": "3333333333333333333333333333333333333333333333333333333333333333",
+    "generated_state": "fresh",
+    "emitter_commit": "1111111111111111111111111111111111111111",
+    "refresh_action": "none",
+    "ready": true
+  },
+  "transaction": {
+    "state": "none",
+    "commit_before": "1111111111111111111111111111111111111111",
+    "commit_target": "1111111111111111111111111111111111111111",
+    "commit_observed": "1111111111111111111111111111111111111111",
+    "recovered_interrupted_update": false
+  },
+  "outcome": {
+    "disposition": "refused",
+    "reason_code": "orientation_too_large",
+    "active_generation_changed": false,
+    "fresh_exec_required": false,
+    "next_actions": [
+      "adopt a newer reviewed baseline",
+      "raise the limit as a reviewed policy change"
+    ],
+    "refusal_remedy": "Adopt a newer reviewed baseline so the window is smaller, or raise the limit as a reviewed policy change that advances limits_version and carries its own ledger entry. Orientation refuses; it never truncates."
+  },
+  "limits": {
+    "limits_version": "1.0.0",
+    "max_source_bytes": 1048576,
+    "max_section_count": 1024,
+    "max_section_bytes": 65536,
+    "max_envelope_bytes": 262144,
+    "max_ledger_entries": 1024,
+    "applied": {
+      "source_bytes": 1048577,
+      "section_count": 8,
+      "max_observed_section_bytes": 3903,
+      "envelope_bytes": 4096,
+      "ledger_entries": 1
+    },
+    "exceeded": [
+      "max_source_bytes"
+    ]
+  }
+}

package/contracts/fixtures/orientation/envelope/restart_required.json

@@ -0,0 +1,137 @@
+{
+  "schema_version": "campaigns-os-tooling-orientation/v1",
+  "request": {
+    "run_id": "run-example-0001",
+    "checkout_mode": "managed",
+    "mutation_policy": "observe_only",
+    "baseline": {
+      "kind": "supported_surface",
+      "commit": "1111111111111111111111111111111111111111",
+      "surface_version": "1.13.0"
+    },
+    "accepted_orientation_schemas": [
+      "campaigns-os-tooling-orientation/v1"
+    ],
+    "accepted_surface_range": ">=1.13.0 <2.0.0",
+    "manifest_sha256": "3333333333333333333333333333333333333333333333333333333333333333"
+  },
+  "repository": {
+    "owner": "NextCommerceCo",
+    "repository": "campaigns-os",
+    "branch": "main",
+    "upstream": "origin/main",
+    "clean": true,
+    "shallow": false,
+    "graph_relation": "identical",
+    "common_git_identity": "managed-store-0001",
+    "worktree_identity": "generation-0001",
+    "commit_before": "1111111111111111111111111111111111111111",
+    "commit_fetched": "1111111111111111111111111111111111111111",
+    "commit_after": "1111111111111111111111111111111111111111"
+  },
+  "freshness": {
+    "state": "available",
+    "observed_at": "2026-08-28T00:00:00Z",
+    "fetch_result": {
+      "attempted": true,
+      "succeeded": true,
+      "duration_ms": 610
+    }
+  },
+  "surface": {
+    "reviewed_version": "1.13.0",
+    "target_version": "1.14.0",
+    "current_version": "1.13.0",
+    "compatibility_result": "compatible",
+    "compatibility_rule": "target surface_version is inside the consumer's accepted_surface_range",
+    "transitions": [
+      {
+        "from": "1.13.0",
+        "to": "1.14.0"
+      }
+    ]
+  },
+  "release_ledger": {
+    "ledger_schema_version": "campaigns-os-release-ledger/v1",
+    "entries": [
+      {
+        "id": "RL-0001",
+        "sequence": 1,
+        "date": "2026-08-28",
+        "kind": "release",
+        "surface_version": "1.14.0",
+        "changelog_section": "1.14.0",
+        "changelog_sha256": "3333333333333333333333333333333333333333333333333333333333333333",
+        "agent_impact": "A consumer may now read the orientation contract and release ledger from Git objects.",
+        "compatibility": "additive",
+        "migration": "none",
+        "affected_surface_entries": [
+          "contracts/release-ledger.json"
+        ],
+        "changes": [
+          {
+            "class": "named_surface",
+            "path": "contracts/release-ledger.json",
+            "surface_entry": "contracts/release-ledger.json",
+            "summary": "The append-only agent-relevant release ledger was introduced."
+          }
+        ],
+        "entry_sha256": "3333333333333333333333333333333333333333333333333333333333333333",
+        "introducing_commit": "2222222222222222222222222222222222222222"
+      }
+    ]
+  },
+  "changelog": {
+    "sections": [
+      {
+        "section_id": "1.14.0",
+        "date": "2026-08-28",
+        "agent_impact": "A consumer may now read the orientation contract and release ledger from Git objects.",
+        "migration_action": "none",
+        "body_markdown": "## [1.14.0] - 2026-08-28\n\n### Added\n\n- The orientation contract and the agent-relevant release ledger.",
+        "body_sha256": "3333333333333333333333333333333333333333333333333333333333333333"
+      }
+    ]
+  },
+  "runtime": {
+    "recipe_id": null,
+    "source_fingerprint": "3333333333333333333333333333333333333333333333333333333333333333",
+    "generated_state": "stale",
+    "emitter_commit": "1111111111111111111111111111111111111111",
+    "refresh_action": "prepare_new_generation",
+    "ready": false,
+    "reason_code": "runtime_refresh_required"
+  },
+  "transaction": {
+    "state": "none",
+    "commit_before": "1111111111111111111111111111111111111111",
+    "commit_target": "1111111111111111111111111111111111111111",
+    "commit_observed": "1111111111111111111111111111111111111111",
+    "recovered_interrupted_update": false
+  },
+  "outcome": {
+    "disposition": "restart_required",
+    "reason_code": "runtime_refresh_required",
+    "active_generation_changed": false,
+    "fresh_exec_required": true,
+    "next_actions": [
+      "prepare a new generation",
+      "start a fresh session"
+    ]
+  },
+  "limits": {
+    "limits_version": "1.0.0",
+    "max_source_bytes": 1048576,
+    "max_section_count": 1024,
+    "max_section_bytes": 65536,
+    "max_envelope_bytes": 262144,
+    "max_ledger_entries": 1024,
+    "applied": {
+      "source_bytes": 22024,
+      "section_count": 8,
+      "max_observed_section_bytes": 3903,
+      "envelope_bytes": 4096,
+      "ledger_entries": 1
+    }
+  }
+}

package/contracts/fixtures/orientation/envelope/updated.json

@@ -0,0 +1,135 @@
+{
+  "schema_version": "campaigns-os-tooling-orientation/v1",
+  "request": {
+    "run_id": "run-example-0001",
+    "checkout_mode": "managed",
+    "mutation_policy": "managed_update",
+    "baseline": {
+      "kind": "supported_surface",
+      "commit": "1111111111111111111111111111111111111111",
+      "surface_version": "1.13.0"
+    },
+    "accepted_orientation_schemas": [
+      "campaigns-os-tooling-orientation/v1"
+    ],
+    "accepted_surface_range": ">=1.13.0 <2.0.0",
+    "manifest_sha256": "3333333333333333333333333333333333333333333333333333333333333333"
+  },
+  "repository": {
+    "owner": "NextCommerceCo",
+    "repository": "campaigns-os",
+    "branch": "main",
+    "upstream": "origin/main",
+    "clean": true,
+    "shallow": false,
+    "graph_relation": "identical",
+    "common_git_identity": "managed-store-0001",
+    "worktree_identity": "generation-0001",
+    "commit_before": "1111111111111111111111111111111111111111",
+    "commit_fetched": "2222222222222222222222222222222222222222",
+    "commit_after": "2222222222222222222222222222222222222222"
+  },
+  "freshness": {
+    "state": "updated",
+    "observed_at": "2026-08-28T00:00:00Z",
+    "fetch_result": {
+      "attempted": true,
+      "succeeded": true,
+      "duration_ms": 610
+    }
+  },
+  "surface": {
+    "reviewed_version": "1.13.0",
+    "target_version": "1.14.0",
+    "current_version": "1.13.0",
+    "compatibility_result": "compatible",
+    "compatibility_rule": "target surface_version is inside the consumer's accepted_surface_range",
+    "transitions": [
+      {
+        "from": "1.13.0",
+        "to": "1.14.0"
+      }
+    ]
+  },
+  "release_ledger": {
+    "ledger_schema_version": "campaigns-os-release-ledger/v1",
+    "entries": [
+      {
+        "id": "RL-0001",
+        "sequence": 1,
+        "date": "2026-08-28",
+        "kind": "release",
+        "surface_version": "1.14.0",
+        "changelog_section": "1.14.0",
+        "changelog_sha256": "3333333333333333333333333333333333333333333333333333333333333333",
+        "agent_impact": "A consumer may now read the orientation contract and release ledger from Git objects.",
+        "compatibility": "additive",
+        "migration": "none",
+        "affected_surface_entries": [
+          "contracts/release-ledger.json"
+        ],
+        "changes": [
+          {
+            "class": "named_surface",
+            "path": "contracts/release-ledger.json",
+            "surface_entry": "contracts/release-ledger.json",
+            "summary": "The append-only agent-relevant release ledger was introduced."
+          }
+        ],
+        "entry_sha256": "3333333333333333333333333333333333333333333333333333333333333333",
+        "introducing_commit": "2222222222222222222222222222222222222222"
+      }
+    ]
+  },
+  "changelog": {
+    "sections": [
+      {
+        "section_id": "1.14.0",
+        "date": "2026-08-28",
+        "agent_impact": "A consumer may now read the orientation contract and release ledger from Git objects.",
+        "migration_action": "none",
+        "body_markdown": "## [1.14.0] - 2026-08-28\n\n### Added\n\n- The orientation contract and the agent-relevant release ledger.",
+        "body_sha256": "3333333333333333333333333333333333333333333333333333333333333333"
+      }
+    ]
+  },
+  "runtime": {
+    "recipe_id": null,
+    "source_fingerprint": "3333333333333333333333333333333333333333333333333333333333333333",
+    "generated_state": "fresh",
+    "emitter_commit": "1111111111111111111111111111111111111111",
+    "refresh_action": "none",
+    "ready": true
+  },
+  "transaction": {
+    "state": "finalized",
+    "commit_before": "1111111111111111111111111111111111111111",
+    "commit_target": "2222222222222222222222222222222222222222",
+    "commit_observed": "2222222222222222222222222222222222222222",
+    "recovered_interrupted_update": false
+  },
+  "outcome": {
+    "disposition": "updated",
+    "reason_code": "orientation_rendered",
+    "active_generation_changed": true,
+    "fresh_exec_required": true,
+    "next_actions": [
+      "start a fresh session against the promoted generation"
+    ]
+  },
+  "limits": {
+    "limits_version": "1.0.0",
+    "max_source_bytes": 1048576,
+    "max_section_count": 1024,
+    "max_section_bytes": 65536,
+    "max_envelope_bytes": 262144,
+    "max_ledger_entries": 1024,
+    "applied": {
+      "source_bytes": 22024,
+      "section_count": 8,
+      "max_observed_section_bytes": 3903,
+      "envelope_bytes": 4096,
+      "ledger_entries": 1
+    }
+  }
+}

package/contracts/fixtures/orientation/hostile-target/README.md

@@ -0,0 +1,61 @@
+# Hostile-target orientation fixture
+
+A miniature Campaigns OS target that carries every locally executable thing a
+real checkout can carry: Git hooks, executable scripts, and npm package
+lifecycle scripts. Its orientation data under `repo/` is valid, so a correct
+consumer can read it end to end and produce a normal envelope.
+
+"Valid" includes the fixture's own supported-surface manifest: every path
+`repo/contracts/supported-surface.json` declares exists in the tree, and the
+digest it records for its hashed entry is that file's real sha256. A consumer
+that verifies integrity therefore succeeds here rather than refusing — which is
+the point, because a read that refuses early never reaches the tripwires and so
+proves nothing about whether the parser would have executed them.
+`scripts/check-release-ledger.test.mjs` asserts that correspondence, so the
+fixture cannot quietly rot back into a refusal.
+
+The fixture carries two invariants over one tree, because the tripwires are the
+same tripwires: a target that can ambush a reader can ambush an installer.
+
+1. **Orientation executes nothing.** The tripwire count for a full orientation
+   read is exactly zero. This is the original invariant and `tripwires[]` plus
+   `expected_hit_count` in `manifest.json` describe it.
+2. **Runtime-recipe preparation executes only the recipe's own steps.** The
+   accepted recipe installs with dependency lifecycle scripts suppressed and
+   builds one named script without its pre/post siblings. `recipe_execution` in
+   `manifest.json` describes it: the tripwire log stays empty and the separate
+   intended-script log holds exactly one line. `repo/hostile-dependency-tripwire/`
+   exists for this second invariant — it is packed into a tarball and installed
+   as a real dependency, so dependency-side lifecycle scripts are exercised for
+   real rather than assumed.
+
+   That invariant needs a control, and `recipe_execution.control` names it:
+   running the same two commands *without* the suppressing flag must fire
+   tripwires. A suppression test with no control passes just as happily against
+   a dependency whose scripts would never have fired anyway.
+
+**Nothing in this directory is ever executed by this repository.** The files
+exist so that a consumer's parser can be pointed at a target that *would* run
+code if the parser ever shelled out, checked anything out, or installed
+anything. Every tripwire appends one line to the file named by
+`CAMPAIGNS_OS_TRIPWIRE_LOG` (falling back to `tripwire.log` beside itself) and
+then exits 0, so a hit is recorded rather than crashing the run being tested.
+The one exception is `repo/bin/intended.mjs`, which is not a tripwire: it is the
+script the recipe's build step is *supposed* to run, and it logs to
+`CAMPAIGNS_OS_INTENDED_LOG` instead.
+
+The assertion that the hit count stays zero belongs to the consumer's parser
+suite, not here: this repository ships the fixture, the consumer ships the
+counter. `manifest.json` enumerates the tripwires so that counter can assert an
+exact expected set rather than a hand-copied list.
+
+Consuming it:
+
+1. Materialize `repo/` as the target tree (copy it, or commit it into a
+   temporary repository and install `repo/hooks/*` as that repository's hooks).
+2. Point `CAMPAIGNS_OS_TRIPWIRE_LOG` at a fresh path.
+3. Run the full orientation read against the target.
+4. Assert the log does not exist, or is empty.
+
+Any non-zero count means the parser executed target-controlled code, which the
+contract forbids regardless of how harmless the executed code looks.

package/contracts/fixtures/orientation/hostile-target/manifest.json

@@ -0,0 +1,82 @@
+{
+  "_note": "Enumerates every tripwire in this fixture so a consumer's no-execution test can assert an exact expected set instead of hand-copying a list that silently rots when a tripwire is added.",
+  "schema": "campaigns-os-hostile-target-fixture/v1",
+  "fixture_version": "1.0.0",
+  "target_root": "repo",
+  "invariant": "A conforming orientation read of target_root executes none of the tripwires below. The expected hit count is exactly 0.",
+  "tripwire_log_env": "CAMPAIGNS_OS_TRIPWIRE_LOG",
+  "expected_hit_count": 0,
+  "tripwires": [
+    {
+      "path": "repo/hooks/post-checkout",
+      "kind": "git_hook",
+      "mode": "755",
+      "fires_on": "git checkout / git worktree add against a repository with these hooks installed"
+    },
+    {
+      "path": "repo/hooks/post-merge",
+      "kind": "git_hook",
+      "mode": "755",
+      "fires_on": "git merge or git pull"
+    },
+    {
+      "path": "repo/hooks/pre-commit",
+      "kind": "git_hook",
+      "mode": "755",
+      "fires_on": "git commit"
+    },
+    {
+      "path": "repo/bin/tripwire.mjs",
+      "kind": "executable_file",
+      "mode": "755",
+      "fires_on": "direct execution of a target-supplied binary"
+    },
+    {
+      "path": "repo/package.json",
+      "kind": "package_lifecycle_script",
+      "mode": "644",
+      "fires_on": "npm install / npm ci / npm pack without --ignore-scripts (preinstall, install, postinstall, prepare, prepack), or npm run build:spec without --ignore-scripts (prebuild:spec, postbuild:spec)"
+    },
+    {
+      "path": "repo/hostile-dependency-tripwire/package.json",
+      "kind": "dependency_lifecycle_script",
+      "mode": "644",
+      "fires_on": "installation of this package as a DEPENDENCY of repo/ without --ignore-scripts (preinstall, install, postinstall), or packing it without --ignore-scripts (prepare, prepack)"
+    },
+    {
+      "path": "repo/hostile-dependency-tripwire/tripwire.mjs",
+      "kind": "executable_file",
+      "mode": "755",
+      "fires_on": "direct execution of a dependency-supplied file, or any of that package's lifecycle scripts"
+    }
+  ],
+  "orientation_data": {
+    "changelog": "repo/CHANGELOG.md",
+    "release_ledger": "repo/contracts/release-ledger.json",
+    "supported_surface": "repo/contracts/supported-surface.json"
+  },
+  "intended_script_log_env": "CAMPAIGNS_OS_INTENDED_LOG",
+  "intended_scripts": [
+    {
+      "path": "repo/bin/intended.mjs",
+      "invoked_by": "repo/package.json scripts.build:spec",
+      "_note": "NOT a tripwire. The one script an accepted runtime-recipe build step is meant to run. It logs to intended_script_log_env so 'the intended script ran' and 'nothing else ran' stay separable assertions — a fixture that only proved the tripwire log was empty would also pass if the build never ran at all."
+    }
+  ],
+  "recipe_execution": {
+    "_note": "The second invariant this fixture carries, added for the runtime-readiness contract. Orientation must execute NOTHING here; runtime-recipe preparation must execute exactly the recipe's two steps and no lifecycle script reachable from them. The tree is shared because the tripwires are the same tripwires — a target that can ambush a reader can ambush an installer.",
+    "invariant": "Running the accepted recipe's install step and then its build step against target_root leaves the tripwire log empty and the intended-script log holding exactly one line. The same two commands WITHOUT their script-suppressing flag must fire tripwires, or the fixture proves nothing.",
+    "recipe": "contracts/runtime-recipe.campaigns-os-node-v1.json",
+    "expected_lifecycle_hit_count": 0,
+    "expected_intended_hit_count": 1,
+    "dependency_package": "repo/hostile-dependency-tripwire",
+    "packed_dependency": "hostile-dependency-tripwire-0.0.0.tgz",
+    "setup": [
+      "Copy repo/ to a scratch directory; never install inside this repository's tree.",
+      "Pack dependency_package into packed_dependency with lifecycle scripts suppressed, so the packing step is outside the measured window.",
+      "Materialize a lockfile for the copied tree with lifecycle scripts suppressed. The single dependency resolves from the local tarball, so no network is involved.",
+      "Truncate both logs, then run the recipe steps with the argv the recipe declares."
+    ],
+    "control": "Repeat both steps with the script-suppressing flag removed and assert the tripwire log is NOT empty. Without this control the fixture cannot distinguish a working suppression from a dependency whose scripts never fire in the first place."
+  }
+}

package/contracts/fixtures/orientation/hostile-target/repo/CHANGELOG.md

@@ -0,0 +1,18 @@
+# Changelog
+
+Notable supported-surface changes are recorded here.
+
+## [9.0.0] - 2026-01-02
+
+### Added
+
+- A hostile-target fixture release section. Present so a consumer can complete a
+  full orientation read against this target and produce a normal envelope, which
+  is what makes a zero hit count meaningful: the parser did the whole job
+  without executing anything.
+
+## [8.0.0] - 2026-01-01
+
+### Added
+
+- The initial fixture surface.

package/contracts/fixtures/orientation/hostile-target/repo/bin/intended.mjs

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+// NOT a tripwire. This is the one script an accepted runtime recipe's build step
+// is supposed to run, and it writes to its own log so the two assertions stay
+// separable: the lifecycle log must stay empty, and this log must have exactly
+// one line. A fixture that only proved "nothing ran" would also pass if the
+// build itself never ran.
+import { appendFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const fallback = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "intended.log");
+appendFileSync(process.env.CAMPAIGNS_OS_INTENDED_LOG ?? fallback, `intended_script ${process.argv[2] ?? "unlabelled"}\n`);

package/contracts/fixtures/orientation/hostile-target/repo/bin/tripwire.mjs

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+// Tripwire. See ../../README.md: nothing here should ever run during an
+// orientation read, and no lifecycle script here should ever run during an
+// accepted runtime-recipe preparation. Records the hit and exits 0.
+//
+// The optional argument labels which tripwire fired. Called with no argument it
+// emits the original line verbatim, so an existing counter that matches on that
+// exact text keeps working.
+import { appendFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const fallback = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "tripwire.log");
+const label = process.argv[2];
+appendFileSync(process.env.CAMPAIGNS_OS_TRIPWIRE_LOG ?? fallback, label ? `lifecycle_script ${label}\n` : "executable_file bin/tripwire.mjs\n");

package/contracts/fixtures/orientation/hostile-target/repo/contracts/release-ledger.json

@@ -0,0 +1,48 @@
+{
+  "_note": "Fixture copy. Two entries so a consumer exercises a multi-entry orientation window. Values are invented and describe nothing real.",
+  "schema_version": "campaigns-os-release-ledger/v1",
+  "entries": [
+    {
+      "id": "RL-0001",
+      "sequence": 1,
+      "date": "2026-01-01",
+      "kind": "release",
+      "surface_version": "8.0.0",
+      "changelog_section": "8.0.0",
+      "changelog_sha256": "1649c529470b313079ced834b043748de37805683fe9e61f6473d729639b4bd3",
+      "agent_impact": "None. The fixture surface came into existence.",
+      "compatibility": "additive",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "schema",
+          "path": "schemas/example.v0.schema.json",
+          "surface_entry": "schemas/example.v0.schema.json",
+          "summary": "The fixture schema was introduced."
+        }
+      ],
+      "entry_sha256": "541525e9550ed6a3c6892b03316f8141b59d7bc1bc8cb1e3077ccf1cee648208"
+    },
+    {
+      "id": "RL-0002",
+      "sequence": 2,
+      "date": "2026-01-02",
+      "kind": "release",
+      "surface_version": "9.0.0",
+      "changelog_section": "9.0.0",
+      "changelog_sha256": "92a3adaca47437b957530dd984780f707c9766fe53aa0b03c8da489f8b8bacd0",
+      "agent_impact": "None. A second entry exists so a consumer reads a multi-entry window.",
+      "compatibility": "compatible",
+      "migration": "none",
+      "changes": [
+        {
+          "class": "named_surface",
+          "path": "docs/example-contract.md",
+          "surface_entry": "docs/example-contract.md",
+          "summary": "The fixture contract doc gained a section."
+        }
+      ],
+      "entry_sha256": "cd08981736013e6192e9998e9e1e64032d2cb09378feb9ee1e49043cef17d2f3"
+    }
+  ]
+}

package/contracts/fixtures/orientation/hostile-target/repo/contracts/supported-surface.json

@@ -0,0 +1,17 @@
+{
+  "_note": "Fixture copy. Shape-compatible with the real manifest so a consumer's parser exercises the same code path; the values are invented and describe nothing real. Every path declared below EXISTS in this fixture tree and the hashed digest is the file's real sha256, so a consumer that verifies integrity succeeds here. That matters: this fixture's invariant is that a COMPLETE orientation read executes nothing, and a read that refuses on a missing or mismatched file never gets far enough to prove it.",
+  "surface_version": "9.0.0",
+  "package_exports": [],
+  "bin": [],
+  "cli_commands": [],
+  "hashed": {
+    "schemas/example.v0.schema.json": {
+      "sha256": "508d2e02d76d196cbd94f0eb76d982417d18509923bd12a5d31557f362256005"
+    }
+  },
+  "named": [
+    "CHANGELOG.md",
+    "contracts/release-ledger.json",
+    "docs/example-contract.md"
+  ]
+}

package/contracts/fixtures/orientation/hostile-target/repo/docs/example-contract.md

@@ -0,0 +1,13 @@
+# Example contract (hostile-target fixture)
+
+Invented. This document describes nothing real.
+
+It exists because the fixture's `contracts/supported-surface.json` declares
+`docs/example-contract.md` as a named entry. A named entry's promise is that the
+path keeps existing, so a consumer that checks its manifest against the tree
+must find a file here. When it was missing, a conforming consumer had to refuse
+on integrity — which is the opposite of what this fixture is for: the fixture
+proves that a full, successful orientation read executes none of the tripwires
+under `repo/`.
+
+Nothing in this directory is ever executed by this repository.

package/contracts/fixtures/orientation/hostile-target/repo/hooks/post-checkout

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Tripwire. Records that a consumer executed target-controlled code, then exits
+# 0 so the run under test continues and the counter, not a crash, reports it.
+printf 'git_hook %s\n' "post-checkout" >> "${CAMPAIGNS_OS_TRIPWIRE_LOG:-$(dirname "$0")/../../tripwire.log}"
+exit 0

package/contracts/fixtures/orientation/hostile-target/repo/hooks/post-merge

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Tripwire. Records that a consumer executed target-controlled code, then exits
+# 0 so the run under test continues and the counter, not a crash, reports it.
+printf 'git_hook %s\n' "post-merge" >> "${CAMPAIGNS_OS_TRIPWIRE_LOG:-$(dirname "$0")/../../tripwire.log}"
+exit 0