@nimiplatform/nimi-coding 0.2.8 → 0.3.0

package/cli/lib/shared.mjs

@@ -3,17 +3,11 @@ export {
   formatBlueprintAuditPayload,
   writeBlueprintAuditArtifact,
 } from "./blueprint-audit.mjs";
-export {
-  loadAdmittedAdapterProfiles,
-  loadAdapterProfile,
-  selectAdapterProfile,
-} from "./adapter-profiles.mjs";
 export {
   appendGitignoreEntries,
   pathExists,
   readTextIfFile,
 } from "./fs-helpers.mjs";
-export { loadExternalExecutionArtifactsConfig, validateHighRiskExecutionArtifactRefs } from "./external-execution.mjs";
 export {
   mergeOrderedPaths,
   parsePathRequirements,
@@ -37,47 +31,12 @@ export {
   writeMissingBootstrapFiles,
 } from "./bootstrap.mjs";
 export {
-  findCommandGatingRule,
   loadBlueprintReference,
-  loadCommandGatingMatrix,
-  loadDocSpecAuditContract,
-  loadExternalHostCompatibilityContract,
-  loadHighRiskAdmissionContract,
-  loadHighRiskExecutionContract,
-  loadHighRiskSchemaContracts,
+  loadSpecGenerationAuditContract,
   loadSpecGenerationInputsConfig,
   loadSpecGenerationInputsContract,
-  loadSpecTreeModelContract,
-  loadSpecReconstructionContract,
-  validateDocSpecAuditSummary,
-  validateHighRiskAdmissionsSpec,
-  validateHighRiskAdmissionRecord,
-  validateHighRiskExecutionSummary,
-  validateSpecReconstructionSummary,
 } from "./contracts.mjs";
 export {
   formatDoctorResult,
   inspectDoctorState,
 } from "./doctor.mjs";
-export {
-  buildHighRiskAdmissionPayload,
-  formatHighRiskAdmissionPayload,
-  writeHighRiskAdmission,
-} from "./high-risk-admission.mjs";
-export {
-  buildHandoffPayload,
-  formatHandoffPayload,
-  formatHandoffPrompt,
-  formatStartPastePrompt,
-  getStartHostOption,
-  resolveStartHostChoice,
-  START_HOST_OPTIONS,
-  writeHandoffJsonArtifact,
-  writeHandoffPromptArtifacts,
-} from "./handoff.mjs";
-export {
-  buildCloseoutPayload,
-  formatCloseoutPayload,
-  loadImportedCloseoutOptions,
-  validateImportedCloseoutShape,
-} from "./closeout.mjs";

package/cli/lib/validators.mjs

@@ -1,14 +1,4 @@
-import path from "node:path";
-
-import {
-  validateAcceptance as validateAcceptanceInternal,
-  validateExecutionPacket as validateExecutionPacketInternal,
-  validateOrchestrationState as validateOrchestrationStateInternal,
-  validatePrompt as validatePromptInternal,
-  validateWorkerOutput as validateWorkerOutputInternal,
-} from "./internal/validators-artifacts.mjs";
 import {
-  normalizeArgv,
   VALIDATOR_CLI_RESULT_CONTRACT,
   VALIDATOR_NATIVE_REFUSAL_CODES,
 } from "./internal/validators-shared.mjs";
@@ -19,30 +9,9 @@ import {
 
 export { VALIDATOR_NATIVE_REFUSAL_CODES };
 
-export function validateExecutionPacket(filePath) {
-  return validateExecutionPacketInternal(filePath);
-}
-
-export function validateOrchestrationState(filePath) {
-  return validateOrchestrationStateInternal(filePath);
-}
-
-export function validatePrompt(filePath) {
-  return validatePromptInternal(filePath);
-}
-
-export function validateWorkerOutput(filePath) {
-  return validateWorkerOutputInternal(filePath);
-}
-
-export function validateAcceptance(filePath) {
-  return validateAcceptanceInternal(filePath);
-}
-
 export function validateSpecTree(rootPath, options = {}) {
   return validateSpecTreeInternal(rootPath, options);
 }
-
 export function validateSpecAudit(auditPath, options = {}) {
   return validateSpecAuditInternal(auditPath, options);
 }
@@ -57,22 +26,5 @@ export function buildValidatorCliReport(validator, filePath, report) {
     errors: report.errors || [],
     warnings: report.warnings || [],
     ...(report.summary ? { summary: report.summary } : {}),
-    ...(report.signal ? { signal: report.signal } : {}),
   };
 }
-
-export async function runValidatorCommand(args, validator, validate) {
-  const normalizedArgv = normalizeArgv(args);
-  const [filePath, ...rest] = normalizedArgv;
-
-  if (!filePath || rest.length > 0) {
-    process.stderr.write(`nimicoding ${validator} refused: expected exactly one path argument.\n`);
-    return 2;
-  }
-
-  const targetPath = path.resolve(process.cwd(), filePath);
-  const report = await validate(targetPath);
-  const cliReport = buildValidatorCliReport(validator, targetPath, report);
-  process.stdout.write(`${JSON.stringify(cliReport, null, 2)}\n`);
-  return report.ok ? 0 : 1;
-}

package/cli/seeds/seed-policy.yaml

@@ -42,9 +42,6 @@ ownership_semantics:
       the canonical content after bootstrap. nimicoding sync --apply only
       writes when the host file is missing. Drift never fails sync or doctor.
 
-excluded_projection:
-  - methodology/spec-target-truth-profile.yaml
-
 ownership_overrides:
   - path: .nimi/config/spec-generation-inputs.yaml
     ownership: host_state_seed

package/config/bootstrap.yaml

@@ -1,6 +1,6 @@
-version: 1
+version: 2
 initialized_by: "@nimiplatform/nimi-coding"
-cli_version: "0.2.8"
+cli_version: "0.3.0"
 bootstrap_contract: "nimicoding.bootstrap"
-bootstrap_contract_version: 1
-profile: default
+bootstrap_contract_version: 2
+profile: governance

package/config/spec-generation-inputs.yaml

@@ -1,4 +1,4 @@
-version: 2
+version: 3
 contract_ref: .nimi/contracts/spec-generation-inputs.schema.yaml
 spec_generation_inputs:
   mode: class_filtered
@@ -8,29 +8,23 @@ spec_generation_inputs:
     - root: .nimi/spec
       class_filter: product_authority_only
       allowed_surface_classes: [product_authority, product_authority_table, thin_guidance, host_projection_anchor, support_registry]
-      forbidden_surface_classes: [derived_view, spec_generation_state, audit_evidence_state, operational_local_artifact, nimicoding_managed_projection, candidate_roadmap, lifecycle_progress_state, methodology_authority]
+      forbidden_surface_classes: [derived_view, tracked_derived_projection, spec_generation_state, audit_evidence_state, operational_local_artifact, nimicoding_managed_projection, methodology_authority]
       owner: nimi_host
       use_as_authority: true
       projection_edge_ref: null
   structure_inputs: []
-  topic_inputs:
-    - root: .nimi/topics
-      owner: topic_lifecycle
-      allowed_surface_classes: [lifecycle_progress_state, candidate_roadmap]
-      use_as_authority: false
   local_inputs:
     - root: .nimi/local
-      owner: local_execution
-      allowed_surface_classes: [spec_generation_state, audit_evidence_state, operational_local_artifact, lifecycle_progress_state]
+      owner: external_tooling
+      allowed_surface_classes: [spec_generation_state, audit_evidence_state, operational_local_artifact]
       use_as_authority: false
   forbidden_source_classes:
     - derived_view
+    - tracked_derived_projection
     - spec_generation_state
     - audit_evidence_state
     - operational_local_artifact
     - nimicoding_managed_projection
-    - candidate_roadmap
-    - lifecycle_progress_state
   generation_order:
     - classify_inputs
     - validate_placement
@@ -43,5 +37,5 @@ spec_generation_inputs:
     - no_blanket_docs_roots
     - no_generated_as_authority
     - no_derived_views_written_to_local
-    - no_audit_or_lifecycle_state_as_authority
+    - no_audit_or_operational_state_as_authority
   acceptance_mode: placement_validity_before_generation

package/contracts/domain-admission.schema.yaml

@@ -1,6 +1,6 @@
-version: 1
+version: 2
 contract:
-  id: nimicoding.domain-admission.v1
+  id: nimicoding.domain-admission.v2
   owner: nimi-coding
   purpose: Require explicit admission for every host spec domain before it is product authority.
 required_top_level_fields:
@@ -26,7 +26,7 @@ domain_admissions:
     owner: project
     admitted_by: nimicoding_init_default_project_domain
     allowed_surface_classes: [product_authority, product_authority_table, thin_guidance, support_registry]
-    forbidden_surface_classes: [derived_view, spec_generation_state, audit_evidence_state, lifecycle_progress_state, candidate_roadmap, methodology_authority]
+    forbidden_surface_classes: [derived_view, spec_generation_state, audit_evidence_state, operational_local_artifact, methodology_authority]
     validation_commands: [pnpm exec nimicoding validate-spec-tree -- .nimi/spec]
     migration_disposition_when_unadmitted: block
 domain_authority_class_enum:

package/contracts/migration-inventory.schema.yaml

@@ -1,78 +1,15 @@
-version: 1
+version: 2
 contract:
-  id: nimicoding.spec-migration-inventory.v1
+  id: nimicoding.spec-migration-inventory.v2
   owner: nimi-coding
-  purpose: Define machine-readable classification and migration output for current host spec surfaces.
-required_top_level_fields:
-  - version
-  - inventory
-  - disposition_enum
-  - target_class_enum
-  - semantic_constraints
-inventory_entry_required_fields:
-  - source_path
-  - current_inferred_class
-  - target_class
-  - disposition
-  - target_root
-  - owner
-  - required_confirmation
-  - ambiguity
-  - evidence
-  - validation_commands
-shared_enum_ref: shared-enums.yaml
-disposition_enum:
-  - keep
-  - move_package
-  - move_local
-  - split
-  - rewrite
-  - delete
-  - block
-target_class_enum:
-  - product_authority
-  - product_authority_table
-  - thin_guidance
-  - derived_view
-  - spec_generation_state
-  - audit_evidence_state
-  - operational_local_artifact
-  - methodology_authority
-  - host_projection_anchor
-  - nimicoding_managed_projection
-  - candidate_roadmap
-  - support_registry
-  - lifecycle_progress_state
-required_confirmation_enum:
-  - none
-  - product_semantic_fork
-  - owner_ambiguity
-  - package_boundary_ambiguity
-  - destructive_deletion
-ambiguity_required_fields:
-  - posture
-  - reason
-  - candidate_owners
-ambiguity_posture_enum:
-  - none
-  - blocks_migration
-inventory: []
-inventory_generation_rules:
-  - classify_every_file_under_.nimi/spec
-  - classify_nimicoding_managed_projections_under_.nimi/methodology_.nimi/contracts_and_.nimi/config
-  - generate_split_children_for_mixed_authority_and_state_files
-  - use_block_only_for_user_confirmation_cases
-  - use_keep_for_nimicoding_init_or_sync_managed_projections
-  - use_move_package_for_package_methodology_when_copied_under_.nimi/spec
-  - use_move_local_for_audit_lifecycle_and_operational_state
-  - use_delete_for_derived_views_with_stdout_view_replacement
-  - use_delete_for_obsolete_generated_or_one_time_state_without_durable_target
+  purpose: Describe a non-mutating migration plan for spec surface cleanup.
+required_entry_fields: [source_path, current_inferred_class, target_class, disposition, target_root, owner, required_confirmation, ambiguity, evidence, validation_commands]
+target_class_enum: [product_authority, product_authority_table, thin_guidance, host_instruction, tracked_derived_projection, derived_view, spec_generation_state, audit_evidence_state, operational_local_artifact, methodology_authority, nimicoding_managed_projection, host_projection_anchor, support_registry]
+disposition_enum: [keep, move_package, move_local, split, rewrite, delete, block]
+required_confirmation_enum: [none, product_semantic_fork, owner_ambiguity, package_boundary_ambiguity, destructive_deletion]
+plan_fields: [contract, ok, version, root, inventory, disposition_enum, target_class_enum, semantic_constraints, summary, enum_validation, required_confirmations, groups, migration_groups, mutation_policy]
 semantic_constraints:
-  - inventory_must_not_modify_files
-  - every_candidate_source_gets_one_inventory_entry_or_split_children
-  - split_entries_must_name_child_targets
-  - block_entries_require_user_confirmation_before_migration
-  - future_under_spec_must_not_have_keep_disposition
-  - nimicoding_managed_projection_must_have_keep_disposition_and_must_not_be_promoted_to_product_authority
-  - generated_views_default_to_delete_with_stdout_view
-  - audit_state_defaults_to_move_local
+  - inventory_and_plan_commands_must_not_modify_source_files
+  - unresolved_semantic_forks_remain_blocking
+  - migration_groups_are_descriptive_and_do_not_schedule_work
+  - emitted_plans_are_local_non_authority_state

package/contracts/negative-fixtures.yaml

@@ -1,106 +1,26 @@
-version: 1
+version: 2
 contract:
-  id: nimicoding.spec-surface-negative-fixtures.v1
+  id: nimicoding.spec-surface-negative-fixtures.v2
   owner: nimi-coding
-fixture_required_fields:
-  - fixture_id
-  - contract_ref
-  - setup
-  - expected_failure
-  - validator_scope
 fixtures:
-  - fixture_id: generated_view_under_product_authority
-    contract_ref: placement-contract.schema.yaml
-    setup: .nimi/spec/runtime/kernel/generated/example.md
+  - id: generated-view-under-authority
+    setup: .nimi/spec/project/kernel/generated/overview.md
     expected_failure: derived_view_under_product_authority_root
-    validator_scope: placement
-  - fixture_id: spec_generation_state_under_meta
-    contract_ref: placement-contract.schema.yaml
+  - id: generation-state-under-authority
     setup: .nimi/spec/_meta/spec-generation-audit.yaml
     expected_failure: spec_generation_state_under_spec
-    validator_scope: placement
-  - fixture_id: rule_evidence_with_coverage_status_under_kernel_tables
-    contract_ref: table-family.schema.yaml
-    setup: .nimi/spec/runtime/kernel/tables/rule-evidence.yaml with coverage_status
-    expected_failure: table_contains_forbidden_state_or_audit_field
-    validator_scope: table_family
-  - fixture_id: future_backlog_under_spec
-    contract_ref: domain-admission.schema.yaml
-    setup: .nimi/spec/future/kernel/tables/backlog-items.yaml
-    expected_failure: excluded_domain_retained_under_spec
-    validator_scope: domain_admission
-  - fixture_id: thin_guidance_with_normative_body
-    contract_ref: surface-taxonomy.schema.yaml
-    setup: .nimi/spec/desktop/local-ai.md containing MUST or 必须
-    expected_failure: guidance_defines_rule_body
-    validator_scope: guidance
-  - fixture_id: package_methodology_copied_to_spec
-    contract_ref: projection-edge.schema.yaml
-    setup: .nimi/spec/product-scope.yaml containing package methodology body
-    expected_failure: package_body_promoted_to_product_authority
-    validator_scope: projection
-  - fixture_id: nimicoding_managed_projection_passes
-    contract_ref: placement-contract.schema.yaml
-    setup: .nimi/contracts/topic.schema.yaml as init-managed projection
-    expected_failure: none
-    validator_scope: placement
-  - fixture_id: nimicoding_config_projection_passes
-    contract_ref: placement-contract.schema.yaml
-    setup: .nimi/config/spec-generation-inputs.yaml as init-managed projection
-    expected_failure: none
-    validator_scope: placement
-  - fixture_id: nimicoding_methodology_projection_passes
-    contract_ref: placement-contract.schema.yaml
-    setup: .nimi/methodology/spec-reconstruction.yaml as init-managed projection
-    expected_failure: none
-    validator_scope: placement
-  - fixture_id: blanket_v2_docs_input_root
-    contract_ref: spec-generation-inputs.schema.yaml
-    setup: .nimi/config/spec-generation-inputs.yaml docs_inputs root "."
-    expected_failure: invalid_spec_generation_inputs_config
-    validator_scope: doctor
-  - fixture_id: lifecycle_cutover_status_under_spec
-    contract_ref: placement-contract.schema.yaml
-    setup: .nimi/spec/_meta/spec-authority-cutover-readiness.yaml with current phase/status
-    expected_failure: lifecycle_progress_state_under_spec
-    validator_scope: placement
-  - fixture_id: generated_file_referenced_as_authority
-    contract_ref: projection-edge.schema.yaml
-    setup: product authority markdown links to .nimi/spec/runtime/kernel/generated/rule-evidence.md as authority
-    expected_failure: derived_view_referenced_as_authority
-    validator_scope: projection
-  - fixture_id: kernel_table_without_family
-    contract_ref: table-family.schema.yaml
-    setup: .nimi/spec/runtime/kernel/tables/example.yaml without table_family
+  - id: package-contract-promoted-to-spec
+    setup: .nimi/contracts/surface-taxonomy.schema.yaml copied under .nimi/spec/project/kernel
+    expected_failure: package_methodology_under_host_spec
+  - id: unknown-domain
+    setup: .nimi/spec/unadmitted/kernel/index.md
+    expected_failure: missing_domain_admission
+  - id: table-without-family
+    setup: .nimi/spec/project/kernel/tables/rules.yaml without table_family
     expected_failure: missing_table_family
-    validator_scope: table_family
-  - fixture_id: kernel_table_with_unknown_family
-    contract_ref: table-family.schema.yaml
-    setup: .nimi/spec/platform/kernel/tables/unknown-family.yaml with unadmitted table_family
-    expected_failure: unknown_table_family
-    validator_scope: table_family
-  - fixture_id: tracked_non_product_without_admission
-    contract_ref: tracked-output-admission.schema.yaml
-    setup: .nimi/audit/example.yaml
-    expected_failure: tracked_non_product_without_admission
-    validator_scope: tracked_output
-  - fixture_id: valid_state_machine_table_passes
-    contract_ref: table-family.schema.yaml
-    setup: .nimi/spec/runtime/kernel/tables/job-states.yaml with table_family state_machine
-    expected_failure: none
-    validator_scope: table_family
-  - fixture_id: valid_product_state_machine_table_passes
-    contract_ref: table-family.schema.yaml
-    setup: .nimi/spec/platform/kernel/tables/first-run-state-machine.yaml with table_family product_state_machine and state entry/exit conditions
-    expected_failure: none
-    validator_scope: table_family
-  - fixture_id: valid_product_record_schema_table_passes
-    contract_ref: table-family.schema.yaml
-    setup: .nimi/spec/platform/kernel/tables/product-control-record-schema.yaml with table_family product_record_schema
-    expected_failure: none
-    validator_scope: table_family
-  - fixture_id: valid_minimal_package_anchor_passes
-    contract_ref: projection-edge.schema.yaml
-    setup: .nimi/spec/_meta/nimi-coding-admission-anchor.yaml with package id/version/root/edge refs only
-    expected_failure: none
-    validator_scope: projection
+  - id: guidance-with-rule-body
+    setup: .nimi/spec/project.md containing normative rule body
+    expected_failure: guidance_defines_rule_body
+semantic_constraints:
+  - every_fail_closed_rule_requires_a_negative_fixture
+  - fixtures_must_name_the_exact_refusal_code

package/contracts/placement-contract.schema.yaml

@@ -1,21 +1,10 @@
-version: 1
+version: 2
 contract:
-  id: nimicoding.placement-contract.v1
+  id: nimicoding.placement-contract.v2
   owner: nimi-coding
-  purpose: Bind roots to surface classes and fail closed on mismatches.
-required_top_level_fields:
-  - version
-  - placement_rules
-  - root_policy
-  - forbidden_roots
-  - fail_closed_cases
-placement_rule_required_fields:
-  - root_pattern
-  - allowed_classes
-  - owner
-  - tracking_policy
-  - requires_admission
-  - validator_scope
+  purpose: Bind each governed root to its allowed authority class.
+required_top_level_fields: [version, placement_rules, root_policy, forbidden_roots, fail_closed_cases]
+placement_rule_required_fields: [root_pattern, allowed_classes, owner, tracking_policy, requires_admission, validator_scope]
 shared_enum_ref: shared-enums.yaml
 placement_rules:
   - root_pattern: .nimi/spec/<domain>/kernel/*.md
@@ -42,6 +31,18 @@ placement_rules:
     tracking_policy: tracked_required
     requires_admission: none
     validator_scope: thin_guidance
+  - root_pattern: host-spec-layout://host_instruction_paths
+    allowed_classes: [host_instruction]
+    owner: product_host
+    tracking_policy: tracked_only_with_explicit_admission
+    requires_admission: host_spec_layout
+    validator_scope: host_instruction
+  - root_pattern: host-spec-layout://tracked_derived_projections
+    allowed_classes: [tracked_derived_projection]
+    owner: generator
+    tracking_policy: tracked_only_with_explicit_admission
+    requires_admission: host_spec_layout
+    validator_scope: tracked_derived_projection
   - root_pattern: .nimi/spec/_meta/<package>-admission-anchor.yaml
     allowed_classes: [host_projection_anchor]
     owner: host_projection
@@ -58,7 +59,7 @@ placement_rules:
     allowed_classes: [nimicoding_managed_projection]
     owner: nimi_coding_package_projection
     tracking_policy: tracked_required
-    requires_admission: nimicoding_init_or_sync_projection
+    requires_admission: nimicoding_start_or_sync_projection
     validator_scope: nimicoding_managed_projection
   - root_pattern: package://@nimiplatform/nimi-coding/{spec,methodology,contracts,config}/**
     allowed_classes: [methodology_authority, support_registry]
@@ -66,26 +67,26 @@ placement_rules:
     tracking_policy: tracked_required
     requires_admission: package_authority
     validator_scope: package_authority
-  - root_pattern: .nimi/topics/**
-    allowed_classes: [lifecycle_progress_state, candidate_roadmap]
-    owner: topic_lifecycle
+  - root_pattern: .nimi/local/state/spec-generation/**
+    allowed_classes: [spec_generation_state]
+    owner: spec_generator
     tracking_policy: local_only
     requires_admission: none
-    validator_scope: topic_lifecycle
-  - root_pattern: .nimi/local/state/**
-    allowed_classes: [spec_generation_state, lifecycle_progress_state, operational_local_artifact]
-    owner: execution_workflow
-    tracking_policy: local_only
-    requires_admission: none
-    validator_scope: local_state
+    validator_scope: spec_generation_state
   - root_pattern: .nimi/local/audit/**
     allowed_classes: [audit_evidence_state, operational_local_artifact]
-    owner: audit_workflow
+    owner: verification_process
+    tracking_policy: local_only
+    requires_admission: none
+    validator_scope: audit_evidence
+  - root_pattern: .nimi/local/**
+    allowed_classes: [operational_local_artifact]
+    owner: external_tooling
     tracking_policy: local_only
     requires_admission: none
-    validator_scope: audit_state
-  - root_pattern: .nimi/{derived,state,audit,roadmap}/**
-    allowed_classes: [derived_view, spec_generation_state, audit_evidence_state, candidate_roadmap]
+    validator_scope: operational_local
+  - root_pattern: .nimi/{derived,state,audit}/**
+    allowed_classes: [derived_view, spec_generation_state, audit_evidence_state]
     owner: tracked_output_admission
     tracking_policy: tracked_only_with_explicit_admission
     requires_admission: tracked_output_admission
@@ -97,60 +98,30 @@ allowed_spec_meta_rules:
   - root_pattern: .nimi/spec/_meta/**
     allowed_classes: []
     allowed_dispositions: [move_package, move_local, delete]
-  - root_pattern: .nimi/config/host-overlay.yaml
-    allowed_classes: [host_projection_anchor]
-    required_fields: [package_id, package_version, package_truth_root, overlay_fields, drift_check_command]
 root_policy:
   product_authority_root: .nimi/spec
   package_authority_root: package://@nimiplatform/nimi-coding
-  topic_lifecycle_root: .nimi/topics
   local_artifact_root: .nimi/local
   tracked_non_product_roots:
     default: disabled
-    roots:
-      - .nimi/derived
-      - .nimi/state
-      - .nimi/audit
-      - .nimi/roadmap
+    roots: [.nimi/derived, .nimi/state, .nimi/audit]
 forbidden_roots:
-  candidate_roadmap:
-    - .nimi/spec/**
-  derived_view:
-    - .nimi/spec/**/kernel/generated/**
-    - .nimi/spec/generated/**
-    - .nimi/local/derived/**
-  spec_generation_state:
-    - .nimi/spec/_meta/spec-generation-audit/**
-    - .nimi/spec/_meta/spec-generation-audit.yaml
-  audit_evidence_state:
-    - .nimi/spec/**/kernel/**
-    - .nimi/spec/_meta/**
-  lifecycle_progress_state:
-    - .nimi/spec/**
-  methodology_authority:
-    - .nimi/spec/**
+  derived_view: [".nimi/spec/**/kernel/generated/**", ".nimi/spec/generated/**", ".nimi/local/derived/**"]
+  spec_generation_state: [".nimi/spec/**"]
+  audit_evidence_state: [".nimi/spec/**"]
+  operational_local_artifact: [".nimi/spec/**"]
+  methodology_authority: [".nimi/spec/**"]
+  tracked_derived_projection: ["unadmitted:.nimi/spec/**/kernel/generated/**", "unadmitted:.nimi/spec/generated/**"]
 forbidden_root_exceptions:
-  nimicoding_managed_projection:
-    - .nimi/methodology/**
-    - .nimi/contracts/**
-    - .nimi/config/**
-tracking_policy_notes:
-  .nimi/topics/**:
-    tracking_policy: local_only
-    meaning: local_human_authored_lifecycle_workspace_not_product_authority
-  .nimi/{config,contracts,methodology}/**:
-    tracking_policy: tracked_required
-    meaning: project_local_nimicoding_managed_projection_created_by_init_or_sync_not_product_authority
+  nimicoding_managed_projection: [".nimi/methodology/**", ".nimi/contracts/**", ".nimi/config/**"]
 fail_closed_cases:
-  - class_root_mismatch
-  - file_under_.nimi/spec_without_product_or_minimal_anchor_class
-  - file_under_kernel_tables_without_table_family
-  - _meta_file_without_minimal_anchor_or_package_migration_disposition
-  - tracked_non_product_file_without_admission
-  - nimicoding_managed_projection_promoted_to_product_authority
-  - future_or_backlog_under_.nimi/spec
+  - root_has_no_matching_placement_rule
+  - surface_class_not_allowed_for_root
+  - required_admission_missing
+  - non_product_state_stored_under_product_authority
+  - generated_projection_under_spec_without_host_layout_admission
+  - package_methodology_copied_under_product_authority
+  - tracked_non_product_output_missing_admission
 semantic_constraints:
-  - path_shape_is_never_sufficient_authority_proof
-  - keep_move_package_move_local_split_rewrite_delete_block_must_be_explicit
-  - product_semantic_forks_block_for_user_confirmation
-  - high_risk_admission_records_stay_local_evidence_while_domain_spec_holds_product_authority
+  - placement_is_validated_independently_of_host_execution
+  - local_evidence_must_not_become_product_authority