@pm_zhousl/xinyun-ai-init 1.10.0 → 1.10.1

package/README.md

@@ -24,7 +24,7 @@ npx --yes @pm_zhousl/xinyun-ai-init@latest --force
 npm run verify:init
 npm run verify:rules
 npm run verify:rules -- --json
-npm run verify:rules -- --tarball ./pm_zhousl-xinyun-ai-init-1.10.0.tgz
+npm run verify:rules -- --tarball ./pm_zhousl-xinyun-ai-init-1.10.1.tgz
 ```
 
 `verify:rules` 为只读规则包一致性检查，不自动修复、不安装依赖、不修改 Git 或业务代码。

package/init/xinyun-ai-init/README.md

@@ -2,7 +2,7 @@
 
 本目录是“欣芸技术开发 Agent 流”的初始化包，负责把完整 AI 执行要求下发到目标项目。
 
-当前规则版本：`1.10.0`。
+当前规则版本：`1.10.1`。
 
 ## Codex 一句话入口
 
@@ -19,7 +19,7 @@ npx --yes @pm_zhousl/xinyun-ai-init@latest --force
 ```
 
 v1.7.2 fixed task contract keys: `taskKind=initialization-main`, `taskKind=initialization-record`, `taskKind=role-execution`.
-v1.7.3 fixed Codex role session creation compatibility fields: `provider=codex`, `sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed`, and legacy creation index `{taskId,roleId,provider,targetVersion}`. v1.10.0 takeover gates are authoritative for project readiness.
+v1.7.3 fixed Codex role session creation compatibility fields: `provider=codex`, `sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed`, and legacy creation index `{taskId,roleId,provider,targetVersion}`. v1.10.x takeover gates are authoritative for project readiness.
 v1.7.3 Codex role session orchestration is host-level only; CLI still only creates `xinyun-ai-init/`.
 
 执行上面的命令后，会生成 `xinyun-ai-init/`。随后让 AI 读取 `xinyun-ai-init/README.md` 即可。

package/init/xinyun-ai-init/templates/init-result.template.json

@@ -7,7 +7,7 @@
   "mode": "initialization",
   "status": "pending",
   "currentVersion": null,
-  "targetVersion": "1.10.0",
+  "targetVersion": "1.10.1",
   "idempotencyKey": null,
   "createdFiles": [],
   "updatedFiles": [],

package/init/xinyun-ai-init/templates/managed-baseline.template.json

@@ -3,13 +3,13 @@
   "hashAlgorithm": "sha256",
   "contentEncoding": "utf8-normalized",
   "managedBy": "@pm_zhousl/xinyun-ai-init",
-  "lastAppliedVersion": "1.10.0",
+  "lastAppliedVersion": "1.10.1",
   "files": [
     {
       "path": "xinyun-ai/rules/core-rules.md",
       "baselineHash": null,
       "templateHash": null,
-      "lastAppliedVersion": "1.10.0",
+      "lastAppliedVersion": "1.10.1",
       "managedBy": "@pm_zhousl/xinyun-ai-init",
       "status": "unknown"
     }

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,6 +1,6 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.10.0",
+  "xinyunAiVersion": "1.10.1",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "initializationMode": "fast",
@@ -94,7 +94,7 @@
     "bindings": "xinyun-ai/sessions/role-session-bindings.json",
     "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
     "parentSessionId": null,
-    "targetVersion": "1.10.0",
+    "targetVersion": "1.10.1",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",

package/init/xinyun-ai-init/templates/requirement-packet.template.json

@@ -4,7 +4,7 @@
   "requirementId": null,
   "taskId": null,
   "projectRootHash": null,
-  "version": "1.10.0",
+  "version": "1.10.1",
   "status": "captured",
   "content": {
     "userQuote": null,

package/init/xinyun-ai-init/templates/role-session-binding.template.json

@@ -6,7 +6,7 @@
   "sessionId": null,
   "parentSessionId": null,
   "provider": "codex",
-  "targetVersion": "1.10.0",
+  "targetVersion": "1.10.1",
   "projectRootHash": null,
   "workspaceScope": {"scopeType": "project-root", "scopePathHashes": [], "scopeRevision": null},
   "repositoryScopeHash": null,
@@ -55,5 +55,5 @@
   "roleDisplayName": null,
   "responsibilityLabel": null,
   "titleSource": "role-contract",
-  "titleVersion": "1.10.0"
+  "titleVersion": "1.10.1"
 }

package/init/xinyun-ai-init/templates/technical-impact-packet.template.json

@@ -4,7 +4,7 @@
   "requirementId": null,
   "taskId": null,
   "projectRootHash": null,
-  "version": "1.10.0",
+  "version": "1.10.1",
   "status": "not-started",
   "content": {
     "summary": null,

package/init/xinyun-ai-init/templates/technical-landscape.template.json

@@ -30,7 +30,7 @@
     "coverageEvidence": []
   },
   "status": "not-started",
-  "landscapeVersion": "1.10.0",
+  "landscapeVersion": "1.10.1",
   "contentHash": null,
   "sourceRevisions": [],
   "invalidatedBy": [],

package/init/xinyun-ai-init/version.json

@@ -1,7 +1,7 @@
 {
   "packageName": "xinyun-ai-init",
   "displayName": "欣芸技术开发 Agent 流初始化包",
-  "version": "1.10.0",
+  "version": "1.10.1",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "defaultMode": "fast-init",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pm_zhousl/xinyun-ai-init",
-  "version": "1.10.0",
+  "version": "1.10.1",
   "description": "欣芸技术开发 Agent 流初始化包",
   "bin": {
     "xinyun-ai-init": "bin/xinyun-ai-init.js"
@@ -16,6 +16,7 @@
     "verify:init": "node ./scripts/verify-init-package.js",
     "verify:rules": "node ./scripts/verify-rules-package.js",
     "verify:rules:security": "node ./scripts/verify-rules-tarball-security.js",
+    "evidence:v1.10": "node ./scripts/collect-v1.10-evidence.js",
     "publish:token": "powershell -ExecutionPolicy Bypass -File ./scripts/publish-with-token.ps1",
     "publish:token:dry": "powershell -ExecutionPolicy Bypass -File ./scripts/publish-with-token.ps1 -DryRun"
   },

package/scripts/collect-v1.10-evidence.js

@@ -0,0 +1,159 @@
+#!/usr/bin/env node
+
+const fs = require("fs");
+const path = require("path");
+const crypto = require("crypto");
+
+const root = path.resolve(__dirname, "..");
+const packageVersion = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8")).version;
+const expectedScenarioIds = Array.from({ length: 14 }, (_, index) => 120 + index);
+const roles = ["project-owner", "project-product", "chief-engineer", "programmer", "test-reviewer"];
+
+function parseArgs(argv) {
+  const options = { sessionManifest: null, output: null, fixture: path.join(root, "test-scenarios", "fixtures", "v1.10.0-takeover-gate-fixture") };
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === "--session-manifest") options.sessionManifest = argv[++index];
+    else if (arg === "--output") options.output = argv[++index];
+    else if (arg === "--fixture") options.fixture = argv[++index];
+    else if (arg === "--help" || arg === "-h") {
+      console.log("Usage: node scripts/collect-v1.10-evidence.js [--session-manifest path] [--output path] [--fixture path]");
+      process.exit(0);
+    } else {
+      throw new Error(`Unknown argument: ${arg}`);
+    }
+  }
+  return options;
+}
+
+function sha256File(filePath) {
+  return crypto.createHash("sha256").update(fs.readFileSync(filePath)).digest("hex");
+}
+
+function readJson(filePath) {
+  return JSON.parse(fs.readFileSync(filePath, "utf8"));
+}
+
+function writeJson(filePath, value) {
+  fs.mkdirSync(path.dirname(filePath), { recursive: true });
+  fs.writeFileSync(filePath, `${JSON.stringify(value, null, 2)}\n`, "utf8");
+}
+
+function scanSensitive(value) {
+  const text = JSON.stringify(value);
+  const markers = [
+    /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/i,
+    /(?:^|[^a-z])(?:password|passwd|secret|token|authorization|api[_-]?key)\s*[:=]\s*[^\s,}"']+/i,
+    /(?:mysql|postgres(?:ql)?|mongodb(?:\+srv)?):\/\/[^\s"']+/i,
+  ];
+  return markers.filter((marker) => marker.test(text)).map((marker) => marker.toString());
+}
+
+function validHostSessionId(value) {
+  return typeof value === "string" && value.trim() !== "" && !/^(null|unknown|fake|fixture|placeholder|session-fixture)/i.test(value);
+}
+
+function loadSessionManifest(filePath) {
+  if (!filePath || !fs.existsSync(filePath)) return null;
+  const manifest = readJson(filePath);
+  if (manifest.source !== "codex-host-returned") return null;
+  if (!Array.isArray(manifest.sessions)) return null;
+  const byRole = new Map(manifest.sessions.map((entry) => [entry.roleId, entry]));
+  const manifestDirectory = path.dirname(path.resolve(filePath));
+  const entries = roles.map((roleId) => byRole.get(roleId) || null);
+  if (entries.some((entry) => !entry || !validHostSessionId(entry.sessionId))) return null;
+  if (entries.some((entry) => !Array.isArray(entry.scenarios) || entry.scenarios.length !== expectedScenarioIds.length)) return null;
+  for (const entry of entries) {
+    const scenarioIds = entry.scenarios.map((scenario) => scenario.scenarioId).sort((left, right) => left - right);
+    if (JSON.stringify(scenarioIds) !== JSON.stringify(expectedScenarioIds)) return null;
+    for (const scenario of entry.scenarios) {
+      if (!expectedScenarioIds.includes(scenario.scenarioId) || typeof scenario.input !== "string" || typeof scenario.actualOutput !== "string") return null;
+      for (const field of ["interactionLogPath", "beforeSnapshotPath", "afterSnapshotPath"]) {
+        const filePathValue = scenario[field];
+        if (typeof filePathValue !== "string") return null;
+        const resolved = path.resolve(manifestDirectory, filePathValue);
+        if (!fs.existsSync(resolved) || !fs.statSync(resolved).isFile()) return null;
+      }
+      const interactionPath = path.resolve(manifestDirectory, scenario.interactionLogPath);
+      if (scanSensitive(fs.readFileSync(interactionPath, "utf8")).length > 0) return null;
+      const beforeHash = sha256File(path.resolve(manifestDirectory, scenario.beforeSnapshotPath));
+      const afterHash = sha256File(path.resolve(manifestDirectory, scenario.afterSnapshotPath));
+      if (scenario.beforeSnapshotHash !== beforeHash || scenario.afterSnapshotHash !== afterHash) return null;
+    }
+  }
+  return { entries, manifestDirectory };
+}
+
+function buildScenario(scenarioId, sessionId, source, fixtureBeforeHash, fixtureAfterHash, failureReason) {
+  const hasSession = validHostSessionId(sessionId);
+  const scenario = {
+    scenarioId,
+    sessionId: hasSession ? sessionId : null,
+    input: hasSession ? source.input || `Host export input for scenario ${scenarioId}` : "not executed: no verified Codex host session export",
+    expectedOutput: `v1.10 takeover gate scenario ${scenarioId}`,
+    actualOutput: hasSession ? source.actualOutput || "host output supplied without a synthetic result" : "not-verified",
+    beforeSnapshotHash: hasSession ? source.beforeSnapshotHash || fixtureBeforeHash : null,
+    afterSnapshotHash: hasSession ? source.afterSnapshotHash || fixtureAfterHash : null,
+    changedFiles: Array.isArray(source.changedFiles) ? source.changedFiles : [],
+    forbiddenOperations: {
+      databaseConnection: false,
+      sqlExecution: false,
+      gitWrite: false,
+      businessCodeWrite: false,
+      dependencyInstall: false,
+      npmPublish: false,
+    },
+    evidence: hasSession ? [{ type: "real-session-export", sessionId }] : [],
+    sensitiveScan: { status: "pass", matches: scanSensitive({ source, sessionId }) },
+    result: hasSession ? "pending-review" : "not-verified",
+    failureReason: hasSession ? null : failureReason,
+    recordedAt: new Date().toISOString(),
+  };
+  const payload = JSON.stringify(scenario);
+  scenario.recordHash = crypto.createHash("sha256").update(payload, "utf8").digest("hex");
+  return scenario;
+}
+
+function main() {
+  const options = parseArgs(process.argv.slice(2));
+  const outputPath = path.resolve(options.output || path.join(root, "test-scenarios", "v1.10.0-behavior-evidence.generated.json"));
+  const fixtureBefore = path.join(options.fixture, "before", "project-status.json");
+  const fixtureAfter = path.join(options.fixture, "after", "project-status.json");
+  if (!fs.existsSync(fixtureBefore) || !fs.existsSync(fixtureAfter)) throw new Error("Fixture must contain before/project-status.json and after/project-status.json");
+
+  const fixtureBeforeHash = sha256File(fixtureBefore);
+  const fixtureAfterHash = sha256File(fixtureAfter);
+  const sessions = loadSessionManifest(options.sessionManifest);
+  const missingHostExport = !sessions;
+  const scenarios = expectedScenarioIds.map((scenarioId) => {
+    const role = roles[scenarioId % roles.length];
+    const entry = sessions ? sessions.entries.find((candidate) => candidate.roleId === role) : null;
+    const source = entry ? entry.scenarios.find((candidate) => candidate.scenarioId === scenarioId) || {} : {};
+    return buildScenario(scenarioId, entry && entry.sessionId, source, fixtureBeforeHash, fixtureAfterHash, missingHostExport ? "real-role-session-host-export-missing" : "real-role-session-not-verified");
+  });
+  const allReal = scenarios.every((scenario) => validHostSessionId(scenario.sessionId) && scenario.evidence.length > 0 && scenario.sensitiveScan.matches.length === 0);
+  const report = {
+    schemaVersion: 2,
+    artifactVersion: packageVersion,
+    evidenceType: allReal ? "real-session" : "not-verified",
+    executionMode: allReal ? "codex-host-export" : "host-capability-unavailable",
+    realAiSessionVerified: allReal,
+    publishBlocked: true,
+    blockedReason: allReal ? "awaiting-independent-test-review" : "real-role-session-host-unavailable",
+    fixturePath: path.relative(root, options.fixture).replace(/\\/g, "/"),
+    fixtureHashes: { before: fixtureBeforeHash, after: fixtureAfterHash },
+    sessionManifestPath: options.sessionManifest ? path.relative(root, path.resolve(options.sessionManifest)).replace(/\\/g, "/") : null,
+    forbiddenOperations: ["database-connection", "sql-execution", "git-write", "business-code-write", "dependency-install", "npm-publish"],
+    scenarios,
+  };
+  writeJson(outputPath, report);
+  console.log(JSON.stringify({ output: path.relative(root, outputPath).replace(/\\/g, "/"), realAiSessionVerified: allReal, scenarioCount: scenarios.length, publishBlocked: report.publishBlocked }, null, 2));
+  process.exitCode = allReal ? 0 : 3;
+}
+
+try {
+  main();
+} catch (error) {
+  console.error(`[v1.10 evidence] ${error.message}`);
+  process.exitCode = 2;
+}

package/scripts/verify-init-package.js

@@ -6,7 +6,7 @@ const crypto = require("crypto");
 
 const root = path.resolve(__dirname, "..");
 const initRoot = path.join(root, "init", "xinyun-ai-init");
-const CURRENT_VERSION = "1.10.0";
+const CURRENT_VERSION = "1.10.1";
 
 const checks = [];
 
@@ -172,6 +172,11 @@ function verifyPackageFiles() {
     packageJson.scripts && packageJson.scripts["verify:init"] === "node ./scripts/verify-init-package.js",
     "缺少发布前校验命令"
   );
+  addCheck(
+    "package.json scripts 包含 evidence:v1.10",
+    packageJson.scripts && packageJson.scripts["evidence:v1.10"] === "node ./scripts/collect-v1.10-evidence.js",
+    "缺少 v1.10 真实会话证据采集入口"
+  );
 
   addCheck(
     "package.json 版本为当前版本",
@@ -556,7 +561,7 @@ function verifyTestScenarios() {
   ]);
 
   requireIncludes("test-scenarios/README.md", [
-    "pm_zhousl-xinyun-ai-init-1.10.0.tgz",
+    "pm_zhousl-xinyun-ai-init-1.10.1.tgz",
     "1-133",
     "119",
     "npm run verify:rules",
@@ -1036,7 +1041,7 @@ function verifyV16Contracts() {
   }
 
   addCheck("init-result mode 为 initialization", initResult.mode === "initialization");
-  addCheck("init-result targetVersion=1.10.0", initResult.targetVersion === CURRENT_VERSION);
+  addCheck("init-result targetVersion=current", initResult.targetVersion === CURRENT_VERSION);
   addCheck("init-result businessCodeChanged 初始为 unknown", initResult.businessCodeChanged && initResult.businessCodeChanged.value === "unknown");
   addCheck("task-lock scope=xinyun-ai-control", taskLock.scope === "xinyun-ai-control");
   addCheck("task-lock audit 包含 released", Array.isArray(taskLock.audit) && taskLock.audit.some((item) => item.action === "released"));
@@ -1169,7 +1174,7 @@ function verifyV17Contracts() {
   ]);
 
   requireIncludes("test-scenarios/README.md", [
-    "pm_zhousl-xinyun-ai-init-1.10.0.tgz",
+    "pm_zhousl-xinyun-ai-init-1.10.1.tgz",
     "当前 v1.8 既有必测场景为 `scenarios.md` 的 1-105；v1.9 新增 107-118",
     "当前观察场景为 `scenarios.md` 的 106 和 119",
     "npm run verify:rules",
@@ -1433,9 +1438,9 @@ function verifyV173Contracts() {
     "manifest roleSessions.provider 必须为 codex"
   );
   addCheck(
-    "manifest roleSessions targetVersion=1.10.0",
+    "manifest roleSessions targetVersion=current",
     manifestTemplate.roleSessions && manifestTemplate.roleSessions.targetVersion === CURRENT_VERSION,
-    "manifest roleSessions.targetVersion 必须为 1.10.0"
+    "manifest roleSessions.targetVersion 必须为当前版本"
   );
   addCheck(
     "manifest roleSessions bindings path",
@@ -1525,7 +1530,7 @@ function verifyV173Contracts() {
   addCheck("assignments session binding rule mentions real host value", assignments.recordContract && assignments.recordContract.sessionBindingRule.includes("real host-returned value"), "assignments sessionBindingRule 必须说明真实宿主返回值");
 
   addCheck("binding template provider codex", bindingTemplate.provider === "codex", "binding template provider 必须为 codex");
-  addCheck("binding template targetVersion=1.10.0", bindingTemplate.targetVersion === CURRENT_VERSION, "binding template targetVersion 必须为 1.10.0");
+  addCheck("binding template targetVersion=current", bindingTemplate.targetVersion === CURRENT_VERSION, "binding template targetVersion 必须为当前版本");
   addCheck("binding template fakeSessionId prohibited", bindingTemplate.degradation && bindingTemplate.degradation.fakeSessionIdProhibited === true, "binding template 必须禁止伪造 sessionId");
   addCheck("binding template onboarding readOnly", bindingTemplate.onboarding && bindingTemplate.onboarding.readOnly === true, "binding template onboarding.readOnly 必须为 true");
 
@@ -1762,6 +1767,10 @@ function verifyV110Contracts() {
     "init/xinyun-ai-init/templates/current-task.template.md",
     "test-scenarios/v1.10.0-scenarios.md",
     "test-scenarios/v1.10.0-behavior-evidence.json",
+    "scripts/collect-v1.10-evidence.js",
+    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/README.md",
+    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/before/project-status.json",
+    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/after/project-status.json",
   ];
   for (const file of requiredFiles) requireFile(file);
 
@@ -1858,8 +1867,9 @@ function verifyV110BehaviorEvidence() {
   }
   const scenarios = Array.isArray(report.scenarios) ? report.scenarios : [];
   const expectedIds = Array.from({ length: 14 }, (_, index) => 120 + index);
-  const requiredFields = ["scenarioId", "input", "expectedOutput", "actualOutput", "beforeSnapshotHash", "afterSnapshotHash", "changedFiles", "forbiddenOperations", "evidence", "sensitiveScan", "result", "recordedAt"];
+  const requiredFields = ["scenarioId", "sessionId", "input", "expectedOutput", "actualOutput", "beforeSnapshotHash", "afterSnapshotHash", "changedFiles", "forbiddenOperations", "evidence", "sensitiveScan", "result", "recordedAt"];
   addCheck("v1.10 behavior evidence source", report.evidenceType === "not-verified" && report.executionMode === "host-capability-unavailable" && report.realAiSessionVerified === false && report.publishBlocked === true, "not-verified evidence is required when role sessions are unavailable");
+  addCheck("v1.10 behavior evidence fixture", report.fixturePath === "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture" && fs.existsSync(path.join(root, report.fixturePath, "before", "project-status.json")) && fs.existsSync(path.join(root, report.fixturePath, "after", "project-status.json")), "persistent fixture boundary exists");
   addCheck("v1.10 behavior evidence IDs", JSON.stringify(scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(expectedIds), "scenarios 120-133");
   for (const scenario of scenarios) {
     const prefix = `v1.10 behavior evidence ${scenario.scenarioId}`;

package/scripts/verify-rules-package.js

@@ -5,7 +5,7 @@ const os = require("os");
 const path = require("path");
 const { spawnSync } = require("child_process");
 
-const VERSION = "1.10.0";
+const VERSION = "1.10.1";
 const checks = [];
 
 function parseArgs(argv) {
@@ -191,6 +191,7 @@ function validateVersion(root, target) {
 
   addCheck(target, "script.entry", "script", scripts["verify:init"] === "node ./scripts/verify-init-package.js" ? "pass" : "fail", "package.json", "scripts.verify:init", "node ./scripts/verify-init-package.js", scripts["verify:init"], "verify:init script entry checked.", "Restore verify:init script.");
   addCheck(target, "script.entry", "script", scripts["verify:rules"] === "node ./scripts/verify-rules-package.js" ? "pass" : "fail", "package.json", "scripts.verify:rules", "node ./scripts/verify-rules-package.js", scripts["verify:rules"], "verify:rules script entry checked.", "Add verify:rules script.");
+  addCheck(target, "script.entry", "script", scripts["evidence:v1.10"] === "node ./scripts/collect-v1.10-evidence.js" ? "pass" : "fail", "package.json", "scripts.evidence:v1.10", "node ./scripts/collect-v1.10-evidence.js", scripts["evidence:v1.10"], "v1.10 evidence collector entry checked.", "Add the bounded real-session evidence collector.");
 }
 
 function validatePackageFiles(root, target, isTarball) {
@@ -404,7 +405,7 @@ function validateV17Content(root, target) {
   requireIncludes(root, target, "init/xinyun-ai-init/rules/frameworks/backend/php/thinkphp.md", ["v1.7 ThinkPHP 深化模块", "frameworkStatus=confirmed", "moduleStatus=loaded", "Controller", "Request/Validate", "Service", "Model/ORM", "Middleware", "队列"]);
   requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-133", "当前观察场景为 106 和 119", "## 55. verify:rules 正常通过", "## 69. verify:rules JSON schema 和重复执行"]);
   requireIncludes(root, target, "test-scenarios/review-template.md", ["55. verify:rules 正常通过", "69. verify:rules JSON schema 和重复执行", "97. Skill 触发测试"]);
-  requireIncludes(root, target, "test-scenarios/README.md", ["npm run verify:rules", "pm_zhousl-xinyun-ai-init-1.10.0.tgz", "v1.7.2-scenarios.md", "v1.7.3-scenarios.md", "当前版本必测场景为 `scenarios.md` 的 1-133", "106 和 119 为观察项"]);
+  requireIncludes(root, target, "test-scenarios/README.md", ["npm run verify:rules", "pm_zhousl-xinyun-ai-init-1.10.1.tgz", "v1.7.2-scenarios.md", "v1.7.3-scenarios.md", "当前版本必测场景为 `scenarios.md` 的 1-133", "106 和 119 为观察项"]);
 }
 
 function validateV18Content(root, target) {
@@ -621,6 +622,10 @@ function validateV110Content(root, target) {
     "init/xinyun-ai-init/templates/current-task.template.md",
     "test-scenarios/v1.10.0-scenarios.md",
     "test-scenarios/v1.10.0-behavior-evidence.json",
+    "scripts/collect-v1.10-evidence.js",
+    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/README.md",
+    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/before/project-status.json",
+    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/after/project-status.json",
   ];
   for (const file of requiredFiles) requireFile(root, target, file);
 
@@ -661,11 +666,12 @@ function validateV110Content(root, target) {
   requireIncludes(root, target, "init/xinyun-ai-init/templates/current-task.template.md", ["statusSource：xinyun-ai/manifest.json", "sourceRevision：", "indexScope：", "unindexedScope：", "available / available-with-dependency / unavailable / permission-denied / unknown / not-checked / not-verified / failed"]);
   requireIncludes(root, target, "init/xinyun-ai-init/templates/project-guide.template.md", ["available / available-with-dependency / unavailable / permission-denied / unknown / not-checked / not-verified / failed"]);
   requireIncludes(root, target, "test-scenarios/v1.10.0-scenarios.md", ["## 120.", "## 123.", "## 123-A.", "## 121-A.", "## 121-B.", "## 128.", "## 128-A.", "## 130.", "## 133.", "projectStatus", "not-verified", "available-with-dependency", "状态源缺失"]);
+  requireIncludes(root, target, "scripts/collect-v1.10-evidence.js", ["codex-host-returned", "real-role-session-host-export-missing", "realAiSessionVerified", "recordHash"]);
 
   const report = readJson(root, "test-scenarios/v1.10.0-behavior-evidence.json");
   const scenarios = Array.isArray(report.scenarios) ? report.scenarios : [];
   const expectedIds = Array.from({ length: 14 }, (_, index) => 120 + index);
-  addCheck(target, "v1.10.behavior-evidence", "behavior", report.evidenceType === "not-verified" && report.executionMode === "host-capability-unavailable" && report.realAiSessionVerified === false && report.publishBlocked === true && JSON.stringify(scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(expectedIds) && scenarios.every((scenario) => scenario.result === "not-verified" && scenario.sessionId === null && scenario.sensitiveScan && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "test-scenarios/v1.10.0-behavior-evidence.json", "scenarios", "120-133 not-verified without fake session IDs", report, "v1.10 evidence source and no-fabrication policy checked.", "Provide truthful real-session evidence or keep the release blocked.");
+  addCheck(target, "v1.10.behavior-evidence", "behavior", report.evidenceType === "not-verified" && report.executionMode === "host-capability-unavailable" && report.realAiSessionVerified === false && report.publishBlocked === true && report.fixturePath === "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture" && existsFile(root, "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/before/project-status.json") && existsFile(root, "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/after/project-status.json") && JSON.stringify(scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(expectedIds) && scenarios.every((scenario) => scenario.result === "not-verified" && scenario.sessionId === null && scenario.sensitiveScan && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "test-scenarios/v1.10.0-behavior-evidence.json", "scenarios", "120-133 not-verified with persistent fixture boundary", report, "v1.10 evidence source and no-fabrication policy checked.", "Provide truthful real-session evidence or keep the release blocked.");
 }
 
 function validateV110CodeGraphContract(root, target, manifest, projectIndex, preflight, onboarding, initResult, currentTask) {

package/test-scenarios/README.md

@@ -39,7 +39,7 @@ npm pack
 随后在临时项目中使用 tarball 测试。注意不要直接执行 `npx <tarball> --force`，该形式可能不会正确调用 bin。推荐：
 
 ```powershell
-npx --yes --package E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm\pm_zhousl-xinyun-ai-init-1.10.0.tgz xinyun-ai-init --force --no-version-check
+npx --yes --package E:\ai-fabu-xiangmu\AI开发初始化脚本\xinyun-ai-init-npm\pm_zhousl-xinyun-ai-init-1.10.1.tgz xinyun-ai-init --force --no-version-check
 ```
 
 ### 3. 线上回归测试
@@ -74,7 +74,7 @@ v1.9.0 的 107-118 行为证据必须保存在 `v1.9.0-behavior-evidence.json`
 ```powershell
 npm run verify:rules
 npm run verify:rules -- --json
-npm run verify:rules -- --tarball .\pm_zhousl-xinyun-ai-init-1.10.0.tgz
+npm run verify:rules -- --tarball .\pm_zhousl-xinyun-ai-init-1.10.1.tgz
 npm run verify:rules:security
 ```
 

package/test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/README.md

@@ -0,0 +1,23 @@
+# v1.10.0 Takeover Gate Fixture
+
+This fixture is synthetic and isolated from any business project. It exists so
+the v1.10 behavior material has a real, packageable fixture boundary.
+
+It must only be used for rule replay and evidence-shape checks. It does not
+contain a real Codex role session, a database, SQL, Git metadata, credentials,
+or business source files. A replay result is never evidence of real AI
+acceptance.
+
+For real-session evidence, provide an external host export to
+`scripts/collect-v1.10-evidence.js`. The export must contain host-returned
+session IDs, interaction logs, and before/after control-plane snapshots. The
+collector rejects missing or synthetic session IDs and otherwise records
+`not-verified`.
+
+Expected synthetic control-plane states:
+
+- `before/project-status.json`: `blocked` with
+  `required-role-session-not-created`.
+- `after/project-status.json`: remains `blocked` when any required role
+  session is absent.
+- `before/after` contain no business files and no sensitive values.

package/test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/after/project-status.json

@@ -0,0 +1,7 @@
+{
+  "projectStatus": "blocked",
+  "executionEligible": false,
+  "blockedReason": "required-role-session-not-created",
+  "roleSessionCount": 0,
+  "businessCodeChanged": "unknown"
+}

package/test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/before/project-status.json

@@ -0,0 +1,7 @@
+{
+  "projectStatus": "blocked",
+  "executionEligible": false,
+  "blockedReason": "required-role-session-not-created",
+  "roleSessionCount": 0,
+  "businessCodeChanged": "unknown"
+}