@ngocsangairvds/vsaf 4.1.7 → 4.1.9

package/skills/vds-skill/vds-scripts/scripts/tests/test_verify_infra_topology.py

@@ -1,254 +0,0 @@
-"""Tests for ``verify-infra-topology.py``.
-
-The verify-infra-topology script's filename uses a hyphen
-(``verify-infra-topology.py``), which is not a valid Python module name.
-Python cannot resolve ``import scripts.verify_infra_topology`` against a
-hyphenated file, so we load the script via
-``importlib.util.spec_from_file_location`` — mirroring the canonical pattern
-established by ``test_verify_alembic.py`` (added in P4 commit 212b49a9).
-
-Hyphenated filename is the public CLI contract per ADR-INF-8 in
-``docker/ADR.md`` and is referenced from the Makefile, operator runbooks,
-and the sibling ``infrastructure-evolution-skill``. Renaming would have
-cross-repo blast radius; loading via importlib keeps the test suite
-self-contained.
-"""
-
-from __future__ import annotations
-
-import importlib.util
-import sys
-from pathlib import Path
-from typing import Any
-from unittest.mock import MagicMock, patch
-
-import pytest
-
-# ---------------------------------------------------------------------------
-# Module loader — verify-infra-topology.py has a hyphen, so we cannot use
-# ``import scripts.verify_infra_topology``. Load by file path once per session.
-# ---------------------------------------------------------------------------
-
-SCRIPT_PATH = Path(__file__).resolve().parent.parent / "verify-infra-topology.py"
-
-
-def _load_verify_module() -> Any:
-    """Load verify-infra-topology.py as a module (cached via sys.modules)."""
-    mod_name = "_verify_infra_topology_under_test"
-    if mod_name in sys.modules:
-        return sys.modules[mod_name]
-    spec = importlib.util.spec_from_file_location(mod_name, SCRIPT_PATH)
-    assert spec is not None and spec.loader is not None
-    module = importlib.util.module_from_spec(spec)
-    sys.modules[mod_name] = module
-    spec.loader.exec_module(module)
-    return module
-
-
-@pytest.fixture(scope="module")
-def verify() -> Any:
-    """Return the loaded verify-infra-topology module."""
-    return _load_verify_module()
-
-
-class TestVerifyInfraTopology:
-    """Test suite for infrastructure topology verification."""
-
-    def test_check_docker_available_success(self, verify: Any) -> None:
-        """Test Docker availability check when Docker is running."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=0,
-                stdout="Docker version 24.0.0",
-                stderr="",
-            )
-
-            result = verify.check_docker_available()
-
-            assert result.passed is True
-            assert "Docker is available" in result.checks[0].message
-
-    def test_check_docker_available_failure(self, verify: Any) -> None:
-        """Test Docker availability check when Docker is not running."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=1,
-                stdout="",
-                stderr="Cannot connect to Docker daemon",
-            )
-
-            result = verify.check_docker_available()
-
-            assert result.passed is False
-            assert "not available" in result.checks[0].message
-
-    def test_check_containers_running_all_present(self, verify: Any) -> None:
-        """Test container check when all expected containers are running."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=0,
-                stdout="vds-postgres\nvds-redis\nvds-qdrant\n",
-                stderr="",
-            )
-
-            result = verify.check_containers_running(["vds-postgres", "vds-redis", "vds-qdrant"])
-
-            assert result.passed is True
-            assert len(result.checks) == 3
-            for check in result.checks:
-                assert check.passed is True
-
-    def test_check_containers_running_some_missing(self, verify: Any) -> None:
-        """Test container check when some containers are missing."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=0,
-                stdout="vds-postgres\n",  # Only postgres is running
-                stderr="",
-            )
-
-            result = verify.check_containers_running(["vds-postgres", "vds-redis", "vds-qdrant"])
-
-            assert result.passed is False
-            assert any(not c.passed for c in result.checks if "redis" in c.name)
-
-    def test_check_postgres_schemas_all_exist(self, verify: Any) -> None:
-        """Test Postgres schema check when all schemas exist."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=0,
-                stdout="audit_state\nmemory\nsched\nprogress\ndbos\n",
-                stderr="",
-            )
-
-            result = verify.check_postgres_schemas("postgresql://postgres@localhost:5432/vds_platform")
-
-            assert result.passed is True
-            assert len(result.checks) == 5
-
-    def test_check_postgres_schemas_missing(self, verify: Any) -> None:
-        """Test Postgres schema check when schemas are missing."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=0,
-                stdout="audit_state\nmemory\n",  # Missing sched, progress, dbos
-                stderr="",
-            )
-
-            result = verify.check_postgres_schemas("postgresql://postgres@localhost:5432/vds_platform")
-
-            assert result.passed is False
-            assert any(not c.passed for c in result.checks if "sched" in c.name)
-
-    def test_check_redis_db_success(self, verify: Any) -> None:
-        """Test Redis DB check when DB is reachable."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=0,
-                stdout="PONG\n",
-                stderr="",
-            )
-
-            result = verify.check_redis_db(0)
-
-            assert result.passed is True
-            assert "reachable" in result.checks[0].message
-
-    def test_check_redis_db_failure(self, verify: Any) -> None:
-        """Test Redis DB check when DB is not reachable."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=1,
-                stdout="",
-                stderr="Connection refused",
-            )
-
-            result = verify.check_redis_db(99)
-
-            assert result.passed is False
-            assert "NOT reachable" in result.checks[0].message
-
-    def test_check_volumes_all_exist(self, verify: Any) -> None:
-        """Test volume check when all expected volumes exist."""
-        with patch("subprocess.run") as mock_run:
-            mock_run.return_value = MagicMock(
-                returncode=0,
-                stdout="vds_postgres_data\nvds_redis_data\nvds_qdrant_data\n",
-                stderr="",
-            )
-
-            result = verify.check_volumes()
-
-            assert result.passed is True
-            assert len(result.checks) == 3
-
-    def test_verify_infra_topology_infra_profile(self, verify: Any) -> None:
-        """Test full topology verification with infra profile.
-
-        Uses a callable ``side_effect`` to dispatch on command shape — mirrors
-        the pattern in ``test_verify_alembic.py::_stub_subprocess``. A bare
-        list-based ``side_effect`` is brittle here because the function makes
-        a variable number of subprocess calls (10 Redis DBs, 4 ports, etc.)
-        depending on profile.
-        """
-
-        def fake_run(cmd: list[str], **_kwargs: Any) -> MagicMock:
-            if cmd[:2] == ["docker", "info"]:
-                return MagicMock(returncode=0, stdout="Docker running", stderr="")
-            if cmd[:2] == ["docker", "ps"]:
-                return MagicMock(
-                    returncode=0,
-                    stdout="vds-postgres\nvds-redis\nvds-qdrant\n",
-                    stderr="",
-                )
-            if cmd[:3] == ["docker", "volume", "ls"]:
-                return MagicMock(
-                    returncode=0,
-                    stdout="vds_postgres_data\nvds_redis_data\nvds_qdrant_data\n",
-                    stderr="",
-                )
-            if "psql" in cmd and "\\dn" in cmd:
-                return MagicMock(
-                    returncode=0,
-                    stdout="audit_state\nmemory\nsched\nprogress\ndbos\n",
-                    stderr="",
-                )
-            if "redis-cli" in cmd:
-                return MagicMock(returncode=0, stdout="PONG\n", stderr="")
-            return MagicMock(returncode=0, stdout="", stderr="")
-
-        with patch("subprocess.run", side_effect=fake_run):
-            result = verify.verify_infra_topology("infra")
-
-            # Should have multiple checks
-            assert len(result.checks) > 0
-
-    def test_verification_result_passing(self, verify: Any) -> None:
-        """Test VerificationResult with all passing checks."""
-        result = verify.VerificationResult()
-        result.add("check1", True, "passed")
-        result.add("check2", True, "passed")
-
-        assert result.passed is True
-
-    def test_verification_result_failing(self, verify: Any) -> None:
-        """Test VerificationResult with a failing check."""
-        result = verify.VerificationResult()
-        result.add("check1", True, "passed")
-        result.add("check2", False, "failed")
-
-        assert result.passed is False
-
-    def test_check_result_dataclass(self, verify: Any) -> None:
-        """Test CheckResult dataclass."""
-        check = verify.CheckResult(
-            name="test_check",
-            passed=True,
-            message="Test passed",
-            details={"key": "value"},
-        )
-
-        assert check.name == "test_check"
-        assert check.passed is True
-        assert check.message == "Test passed"
-        assert check.details == {"key": "value"}

package/skills/vds-skill/vds-scripts/scripts/update_modules_xml.py

@@ -1,194 +0,0 @@
-#!/usr/bin/env python3
-"""
-Script to update the IntelliJ IDEA modules.xml file with all VDS projects.
-This makes it easier to work with the monorepo as a multi-project workspace.
-"""
-
-import os
-import xml.etree.ElementTree as ET
-
-# Define the project structure
-PROJECT_GROUPS = {
-    "LEP-Project": [
-        "document-management",
-        "document-mgmt",
-        "file-management",
-        "lending-application-service",
-        "lending-basecode",
-        "lending-channel-mgmt",
-        "lending-cms-be",
-        "lending-cms-fe",
-        "lending-customer-screening-service",
-        "lending-customer-service",
-        "lending-decision-service",
-        "lending-ekyc-business",
-        "lending-ekyc-service",
-        "lending-event-backbone",
-        "lending-lender-process",
-        "lending-lender-service",
-        "lending-limit-mgmt",
-        "lending-miniapp-fe",
-        "lending-notification-service",
-        "lending-payment-service",
-        "lending-product-mgmt",
-        "lending-reconcile-service",
-        "lending-refund-service",
-        "lending-reminder-process",
-    ],
-    "INSURANCE-Project": [
-        "insurance-authentication-sync-process",
-        "insurance-auto-underwriting-process",
-        "insurance-centralized-sync-service",
-        "insurance-claim-business",
-        "insurance-cms-be",
-        "insurance-common",
-        "insurance-customer-business",
-        "insurance-customer-webview",
-        "insurance-insurer-service",
-        "insurance-job-scheduler",
-        "insurance-notification-spi",
-        "insurance-ocr-service",
-        "insurance-payment-service",
-        "insurance-payment-service-v2",
-        "insurance-policy-business",
-        "insurance-promotion-business",
-        "insurance-proposal-business",
-        "insurance-reconcile-process",
-        "insurance-renewal-process",
-        "insurance-socialized-insurance-service",
-        "insurance-timeout-process",
-    ],
-    "SAVING-Project": [
-        "saving-account",
-        "saving-business",
-        "saving-features-management",
-        "saving-job-management",
-        "saving-order",
-        "saving-promotion",
-        "saving-refund-process",
-        "saving-spi",
-        "saving-timeout-process",
-        "saving-transaction",
-    ],
-    "EKYC-Project": ["ekyc-business", "ekyc-service"],
-    "Infrastructure": ["VDS-AI-Memory", "vds-scripts"],
-    "Documentation": ["docs-nttc"],
-}
-
-
-def update_modules_xml(vds_root):
-    """
-    Update the IntelliJ IDEA modules.xml file with all projects.
-    """
-    # Path to modules.xml
-    modules_xml_path = os.path.join(vds_root, ".idea", "modules.xml")
-
-    # Parse existing modules.xml
-    try:
-        tree = ET.parse(modules_xml_path)
-        root = tree.getroot()
-    except FileNotFoundError:
-        # Create new modules.xml if it doesn't exist
-        root = ET.Element("project", {"version": "4"})
-        component = ET.SubElement(root, "component", {"name": "ProjectModuleManager"})
-        ET.SubElement(component, "modules")
-        tree = ET.ElementTree(root)
-
-    # Find the modules element
-    modules_element = root.find(".//modules")
-    if modules_element is None:
-        component = root.find(".//component[@name='ProjectModuleManager']")
-        if component is None:
-            component = ET.SubElement(root, "component", {"name": "ProjectModuleManager"})
-        modules_element = ET.SubElement(component, "modules")
-
-    # Clear existing VDS module entries (but keep the main vds.iml)
-    existing_modules = modules_element.findall("module")
-    for module in existing_modules:
-        file_path = module.get("filepath", "")
-        # Remove any existing VDS project module entries to avoid duplicates
-        if any(
-            project_dir in file_path
-            for project_dir in [
-                "LEP-project",
-                "INSURANCE-project",
-                "SAVING-project",
-                "EKYC-project",
-                "VDS-AI-Memory",
-                "vds-scripts",
-                "docs-nttc",
-            ]
-        ):
-            modules_element.remove(module)
-
-    # Add modules for each project
-    for group_name, projects in PROJECT_GROUPS.items():
-        for project in projects:
-            # Construct the module file path
-            if project in ["VDS-AI-Memory", "vds-scripts", "docs-nttc"]:
-                # These are top-level directories
-                module_file_path = f"$PROJECT_DIR$/{project}/.idea/{project}.iml"
-                module_file_url = f"file://$PROJECT_DIR$/{project}/.idea/{project}.iml"
-            else:
-                # These are in project directories
-                module_file_path = f"$PROJECT_DIR$/{group_name.split('-')[0]}-project/{project}/{project}.iml"
-                module_file_url = f"file://$PROJECT_DIR$/{group_name.split('-')[0]}-project/{project}/{project}.iml"
-
-            # Check if module entry already exists
-            existing = False
-            for module in modules_element.findall("module"):
-                if module.get("filepath") == module_file_path:
-                    existing = True
-                    break
-
-            # Add module entry if it doesn't exist
-            if not existing:
-                ET.SubElement(
-                    modules_element,
-                    "module",
-                    {"fileurl": module_file_url, "filepath": module_file_path, "group": group_name},
-                )
-
-    # Write updated modules.xml with proper formatting
-    # Create a temporary file with proper formatting
-    temp_file = modules_xml_path + ".tmp"
-    tree.write(temp_file, encoding="UTF-8", xml_declaration=True)
-
-    # Read and format the XML properly
-    with open(temp_file) as f:
-        content = f.read()
-
-    # Parse and reformat with proper indentation
-    import xml.dom.minidom
-
-    dom = xml.dom.minidom.parseString(content)
-    pretty_xml = dom.toprettyxml(indent="  ")
-
-    # Remove extra blank lines
-    lines = [line for line in pretty_xml.split("\n") if line.strip()]
-    pretty_xml = "\n".join(lines)
-
-    with open(modules_xml_path, "w") as f:
-        f.write(pretty_xml)
-
-    # Remove temporary file
-    os.remove(temp_file)
-
-    print(f"Updated modules.xml: {modules_xml_path}")
-
-
-def main():
-    """
-    Main function to update modules.xml.
-    """
-    vds_root = os.path.abspath(os.path.join(os.path.dirname(__file__), "..", ".."))
-
-    print(f"Updating IntelliJ IDEA modules.xml in: {vds_root}")
-
-    update_modules_xml(vds_root)
-
-    print("modules.xml update complete!")
-
-
-if __name__ == "__main__":
-    main()

package/skills/vds-skill/vds-scripts/scripts/uv-workspace-alignment-verification-2026-03-25.md

@@ -1,128 +0,0 @@
-# Scripts UV Workspace Alignment Verification Note
-
-Date: 2026-03-25
-Branch: `feat/scripts-uv-workspace-alignment`
-Scope: helper/bootstrap/script-shell alignment for `WHO-project/vds-scripts/scripts/`
-
-## Summary
-
-This note records the bounded verification run for the current implementation lane.
-The purpose is to prove that the updated shell contract works across the main
-contexts called out by the spec:
-
-- clean shell execution
-- polluted parent environment execution
-- non-standard nested caller path execution
-
-It also records one helper portability fix discovered during verification.
-
-## Verified contract
-
-The current intended contract is:
-
-- maintained scripts use `scripts/worktree_uv.sh` through `scripts/vds_sh_helpers.sh`
-- helper-driven invocations bind the workspace explicitly with `--directory <vds-scripts-root>`
-- helper-driven package targeting resolves workspace member directories to uv project names for `--package`
-- canonical integrated bootstrap assumes Python 3.14+
-
-## Three-context regression matrix
-
-### Context 1 — clean shell
-
-Command class verified:
-- helper-driven spec package help surface
-
-Observed result:
-- passed
-
-Notes:
-- `vds_uv_run_package spec_orchestrator vds-spec --help` succeeded from the implementation worktree with no inherited environment state.
-
-### Context 2 — polluted parent environment
-
-Command class verified:
-- helper-driven routed CLI command with fake parent environment values
-
-Injected environment:
-- `VIRTUAL_ENV=/tmp/fake-venv`
-- `UV_PROJECT_ENVIRONMENT=/tmp/fake-project-env`
-- `CONDA_PREFIX=/tmp/fake-conda`
-
-Observed result:
-- passed
-
-Notes:
-- `vds_uv_run_package vds_cli vds-cli doctor` succeeded.
-- The wrapper/helper path remained functional despite the polluted parent environment.
-
-### Context 3 — non-standard nested caller path
-
-Command class verified:
-- targeted sync helper script launched from `scripts/target-state-automation/`
-
-Observed result:
-- passed
-
-Notes:
-- `UV_SYNC_FLAGS=--dry-run ./update_dependencies.sh` succeeded when launched from the nested target-state-automation directory.
-- This confirms root resolution and wrapper binding do not depend on the older hardcoded 4-level traversal pattern.
-
-## Additional bounded verification already passed in this lane
-
-Previously verified in this worktree:
-
-- helper-driven `vds-spec --help`
-- helper-driven `vds-cli status`
-- helper-driven `vds-cli doctor`
-- helper-driven `vds-markdown --help`
-- targeted bootstrap dry-run
-- full bootstrap dry-run
-- updated shell scripts syntax-check cleanly
-
-## Helper portability fix discovered during verification
-
-### Issue
-
-The initial helper implementation used host `python3` plus `tomllib` to resolve
-workspace member directory names to uv package names.
-
-That failed in a shell path where `python3` did not provide `tomllib`.
-
-### Fix
-
-The helper was updated to parse `[project].name` from member `pyproject.toml`
-using shell/awk logic instead of host Python.
-
-### Outcome
-
-Package-name resolution no longer depends on a host Python 3.11+ runtime just to
-run the shell helper layer.
-
-## Known follow-up outside helper-layer closure
-
-### `scripts/target-state-automation/validate_schemas.sh`
-
-The script now routes through the helper correctly, but the underlying schema
-command shape appears stale relative to the current `vds-cli schema` /
-`vds-schema-convert` compatibility surface.
-
-The script has therefore been updated to fail explicitly and truthfully with a
-clear follow-up message instead of forwarding operators into a stale command and
-producing a confusing CLI option error.
-
-This remains classified as:
-- schema-command drift follow-up
-- not a helper-layer regression
-
-## Closure assessment for this lane
-
-For the shell/uv alignment scope covered by this branch:
-- helper consolidation: complete
-- bootstrap alignment: complete
-- maintained script migration in scope: complete
-- docs alignment in scope: complete
-- three-context regression matrix: complete
-
-This branch is ready for review/merge for the intended helper/bootstrap/docs
-alignment scope, with `validate_schemas.sh` command-surface drift explicitly
-left as separate follow-up work.

package/skills/vds-skill/vds-scripts/scripts/uv-workspace-alignment-verification-2026-04-18.md

@@ -1,100 +0,0 @@
-# UV Workspace Alignment Verification — 2026-04-18
-
-Spec: `.gpt-5.4/specs/scripts-uv-workspace-alignment/` v0.5.0
-Branch: `phase/frs-9-11-vds-cli-consistency`
-Tasks: T-9, T-10, T-11, T-12, T-13
-
-## AC-9.5 — Editable Install Evidence (5 rows)
-
-### Row 1: `.pth` file contents
-
-```
-File: /Users/vds-ai/.local/share/uv/tools/vds-cli/lib/python3.14/site-packages/_editable_impl_vds_google_sheets_orchestrator.pth
-/Users/vds-ai/Library/Mobile Documents/com~apple~CloudDocs/project/vds/WHO-project/vds-scripts/google_sheets_orchestrator/src
-
-File: /Users/vds-ai/.local/share/uv/tools/vds-cli/lib/python3.14/site-packages/_vds_cli.pth
-/Users/vds-ai/Library/Mobile Documents/com~apple~CloudDocs/project/vds/WHO-project/vds-scripts/vds_cli/src
-
-File: /Users/vds-ai/.local/share/uv/tools/vds-cli/lib/python3.14/site-packages/_virtualenv.pth
-import _virtualenv
-
-File: /Users/vds-ai/.local/share/uv/tools/vds-cli/lib/python3.14/site-packages/_vds_cli_common.pth
-/Users/vds-ai/Library/Mobile Documents/com~apple~CloudDocs/project/vds/WHO-project/vds-scripts/vds_cli_common/src
-
-File: /Users/vds-ai/.local/share/uv/tools/vds-cli/lib/python3.14/site-packages/_editable_impl_vds_bitbucket_orchestrator.pth
-/Users/vds-ai/Library/Mobile Documents/com~apple~CloudDocs/project/vds/WHO-project/vds-scripts/bitbucket_orchestrator/src
-```
-
-Interpretation: `.pth` files point at live source trees under `WHO-project/vds-scripts/` — editable install confirmed across all workspace members (vds_cli, vds_cli_common, google_sheets_orchestrator, bitbucket_orchestrator).
-
-### Row 2: `which vds-cli`
-
-```
-/Users/vds-ai/.local/bin/vds-cli
-```
-
-Interpretation: Shim installed at `~/.local/bin/vds-cli` per uv tool convention. Executable is on PATH without any workspace-root coupling.
-
-### Row 3: `vds_cli.cli.__file__`
-
-```
-/Users/vds-ai/Library/Mobile Documents/com~apple~CloudDocs/project/vds/WHO-project/vds-scripts/vds_cli/src/vds_cli/cli.py
-```
-
-Interpretation: Python imports live source under monorepo `WHO-project/vds-scripts/vds_cli/src/` (not sdist cache). Editable install resolves to the development source tree.
-
-### Row 4: SCRIPT_DIR walk resolves to monorepo root
-
-```
-/Users/vds-ai/Library/Mobile Documents/com~apple~CloudDocs/project/vds/WHO-project/vds-scripts
-```
-
-Interpretation: The 4-parent walk at `cli.py:31` (`Path(__file__).resolve().parent.parent.parent.parent`) lands in `WHO-project/vds-scripts` — the workspace root. SCRIPT_DIR dispatch is functional for routing sub-orchestrators.
-
-### Row 5: subcommand count
-
-```
-31
-```
-
-Command: `vds-cli --help 2>&1 | grep "^│ [a-z]" | wc -l`
-
-Interpretation: 31 registered subcommands, well above the `>= 25` spec acceptance threshold. All registered subcommands match expected router shape.
-
-## AT-2 — shutil.which dispatch from outside workspace root
-
-### From umbrella monorepo root
-
-```
-umbrella_root: /Users/vds-ai/.local/bin/vds-cli
-```
-
-Command: `cd "/Users/vds-ai/Library/Mobile Documents/com~apple~CloudDocs/project/vds" && python3 -c "import shutil; print('umbrella_root:', shutil.which('vds-cli'))"`
-
-### From `$HOME`
-
-```
-home_dir: /Users/vds-ai/.local/bin/vds-cli
-```
-
-Command: `cd "$HOME" && python3 -c "import shutil; print('home_dir:', shutil.which('vds-cli'))"`
-
-### From filesystem root
-
-```
-fs_root: /Users/vds-ai/.local/bin/vds-cli
-```
-
-Command: `cd / && python3 -c "import shutil; print('fs_root:', shutil.which('vds-cli'))"`
-
-Interpretation: `shutil.which("vds-cli")` resolves identically (`/Users/vds-ai/.local/bin/vds-cli`) from any CWD — umbrella root, `$HOME`, and filesystem root. PATH-based dispatch is CWD-independent. This confirms FR-11 modern-only posture (no `uv run` fallback, no path-coupling). The executor pattern using `shutil.which` is safe for all agent invocation contexts.
-
-## Closure
-
-- T-9 canonical block: committed in 55f35c9 (scripts/README.md)
-- T-10 PATH contract: committed in e5066df (scripts/README.md)
-- T-11 shutil.which executor: committed in 4bb8dc6 (vds_agent_core/skills/executor.py + tests)
-- T-12 this verification note: committed in this change
-- T-13 byte-mirror: committed in c9aba41 (vds-skills/.../platform-bootstrap.md)
-
-All AC-9.5 and AT-2 requirements fulfilled. Spec v0.5.0 closure criteria met.