@pm_zhousl/xinyun-ai-init 1.12.0 → 1.12.1

package/init/xinyun-ai-init/README.md

@@ -2,7 +2,7 @@
 
 本目录是“欣芸技术开发 Agent 流”的初始化包，负责把完整 AI 执行要求下发到目标项目。
 
-当前规则版本：`1.12.0`。
+当前规则版本：`1.12.1`。
 
 ## Codex 一句话入口
 

package/init/xinyun-ai-init/rules/directory-self-completion.md

@@ -61,6 +61,7 @@ When takeover initialization is authorized, create `host-preflight.json`, `index
 - `manifest.json`、`project-index.json` 和 `task-index.json` 必须登记 `roleSessions`、`roleSessionBindingIds`、`roleSessionBindings`、`provider=codex` 和 `sessionStatus` 枚举。
 - 绑定目录只保存 Codex 宿主返回的真实 `sessionId` 摘要、onboarding 状态、失败原因和 audit，不保存伪造 sessionId。
 - 宿主不支持创建子会话时，仍可补齐本地目录和降级记录，状态使用 `local-degraded-no-fake-session-id`。
+- v1.12.1 provider 绑定记录固定写入 `xinyun-ai/sessions/provider-session-bindings.json`，模板来源为 `xinyun-ai-init/templates/provider-session-binding.template.json`。只有宿主 canonical `providerSessionId`、身份/交互证据和独占占用均通过时才可绑定；未知或普通线程 ID 保持 blocked/pending。
 
 ## v1.8 按需目录
 

package/init/xinyun-ai-init/rules/init-rules.md

@@ -1,5 +1,9 @@
 # 初始化规则
 
+## v1.12.1 provider session binding
+
+Use the provider-specific binding contract before role-session work. `providerSessionId` must be a provider canonical session value, not a normal thread ID. Identity and interaction evidence are required for binding; missing evidence remains pending or blocked.
+
 - 首次只创建最小 `xinyun-ai/` 骨架和极简 `AGENTS.md`。
 - 首次不创建大量规则、模板、脚本和业务沉淀目录。
 - 首次不执行语言级语法检查、lint、typecheck、测试或构建命令。

package/init/xinyun-ai-init/rules/session-workbench.md

@@ -1,5 +1,11 @@
 # 会话工作台规则
 
+## v1.12.1 provider-specific session binding
+
+Read `v1.12.1-provider-session-binding.md` before role-session work. `providerSessionId` must come from the provider's canonical session API; a normal thread ID, task ID, title, history summary, or user statement is not a binding. Verify project identity, roleId, taskId, title, cwd, occupancy, and real send/receive evidence before binding. Missing evidence stays `bindingStatus=pending/blocked` and `executionEligible=false`.
+
+Recovery reuses taskId and roleTaskId, increments attempt, and enters `recovery-required` after a writeback failure without creating duplicates. Unsupported hosts use `local-degraded` with `providerSessionId=null`; never fabricate a session ID.
+
 首次初始化不创建会话工作台。复杂任务中可按需创建：
 
 ```md

package/init/xinyun-ai-init/rules/upgrade-rules.md

@@ -1,5 +1,9 @@
 # 升级规则
 
+## v1.12.1 provider session binding
+
+Validate provider canonical session identity, project identity, role/task, title/cwd, interaction evidence, and exclusive occupancy before reuse. Unknown or missing evidence is blocked; ordinary thread IDs cannot be reused. Writeback recovery reuses the original task IDs, increments attempt, and cannot create duplicate sessions.
+
 如果项目已存在 `xinyun-ai/`，不要重复初始化，应进入升级检查模式。
 
 升级流程：

package/init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md

@@ -0,0 +1,25 @@
+# v1.12.1 provider-specific session binding
+
+## Canonical provider identity
+
+`providerSessionId` is valid only when it is returned by the declared provider's supported session API as a canonical session identifier. A normal Codex thread ID, task ID, local filename, random value, title, history summary, or user statement is not sufficient evidence and must never be copied into `providerSessionId`.
+
+Every binding records `provider`, `providerSessionId`, `roleId`, `taskId`, `projectRootHash`, `workspaceScope`, `repositoryScopeHash`, `workstream`, `title`, `cwd`, `createdAt`, `identityEvidence`, `interactionEvidence`, `bindingMode`, `bindingStatus`, `boundBy`, and `boundAt`.
+
+`identityEvidence` must verify the provider session ID, project identity, role, task, title, cwd, evidence source, verification time, and evidence hash. `interactionEvidence` must contain a real send receipt, receive receipt, transcript hash, message count, recorded time, and evidence hash. Sensitive prompt or response content is redacted before persistence.
+
+## Binding gate and states
+
+`bindingMode` is one of `auto-created`, `auto-reused`, `manual`, `recovery`, or `local-degraded`. `bindingStatus` is one of `pending`, `validating`, `bound`, `blocked`, `rejected`, `released`, `conflict`, or `recovery-required`.
+
+Only `bindingStatus=bound` with both evidence groups verified and exclusive occupancy may produce a project `sessionId` or `executionEligible=true`. Manual binding without evidence remains `pending` or `blocked`. Host unsupported, identity mismatch, role/task mismatch, invalid title/cwd, missing interaction evidence, occupied session, or writeback failure must not become ready.
+
+## Reuse and recovery
+
+Candidate reuse first validates the provider session and all project identity fields. The v1.9 eight-field JCS-SHA-256 key remains the candidate reuse key. v1.7.3 four-field data is compatibility lookup only and never selects or binds a candidate. Recovery reuses the original task and role-task IDs, increments `attempt`, preserves audit, and never creates duplicate tasks or sessions.
+
+If the host cannot provide a canonical provider session ID, keep `providerSessionId=null`, record `bindingStatus=blocked`, `blockedReason=host-session-capability-unavailable`, and a concrete `nextAction`. Do not fabricate an ID.
+
+## Boundaries
+
+Do not install or log in to a provider, change business files, connect to a database, execute SQL, write Git, install dependencies, or publish npm packages as part of binding.

package/init/xinyun-ai-init/templates/AGENTS.template.md

@@ -195,6 +195,7 @@ CodeGraph 为必需能力时，只有 `initialized` 或 `healthy` 才能将结
 - 真实 `sessionId` 必须来自 Codex 宿主返回值；不得伪造 sessionId。宿主不支持时记录 `local-degraded-no-fake-session-id`，保持 `sessionId=null`。
 - 创建后的角色会话先进入只读 `onboarding`；只有职责理解、职责确认、成员 / 会话绑定、确认门禁和执行资格都满足后才允许 `sessionStatus=ready`。
 - 创建成功不等于业务代码修改授权；普通咨询不创建角色会话，不写绑定文件，不创建外部账号或第三个会话。
+- v1.12.1 起，角色会话必须另外记录 provider canonical `providerSessionId`；普通线程 ID、taskId、标题或历史摘要不得直接绑定。绑定前必须验证项目身份、roleId、taskId、title、cwd、独占占用、`identityEvidence` 和 `interactionEvidence`；证据不全时保持 pending/blocked。
 
 AI 接手本项目时，请先读取：
 

package/init/xinyun-ai-init/templates/README.template.md

@@ -2,6 +2,10 @@
 
 本目录是当前项目的 AI 协作工作区，采用“欣芸技术开发 Agent 流”。
 
+## v1.12.1 provider session binding
+
+The canonical external identity of a role session is the provider-returned `providerSessionId`. A normal thread ID, taskId, title, or history summary cannot bind a role. Binding requires project identity, roleId, taskId, title, cwd, exclusive occupancy, and real send/receive evidence; incomplete evidence cannot become ready or executionEligible.
+
 ## v1.10 接管门禁
 
 当前项目必须先完成 `preflight-report.json` 和 `onboarding-report.json`，再进入业务代码开发。`project-status.json` 只有在项目身份、CodeGraph、基线、团队职责、五个真实角色会话、本地控制面、旧沉淀、宿主能力和敏感扫描全部通过时才可为 `ready`；缺失真实角色会话必须为 `blocked + required-role-session-not-created`。CLI 只创建 `xinyun-ai-init/`，AI 获得授权后才创建项目控制面。

package/init/xinyun-ai-init/templates/core-rules.template.md

@@ -606,6 +606,10 @@ Skill 分配使用 `assignmentStatus`，使用记录使用 `usageStatus`。固
 
 总工维护 `xinyun-ai/technical-landscape.json`。只有 coverageStatus=full、unverifiedScope=[]、核心对象均有有效证据且无未登记冲突时才可 ready；partial/unknown 只能保持 partial/blocked。主会话维护 requirementPacket，总工输出 technicalImpactPacket；两个 packet 最小字段固定为 schemaVersion、packetId、requirementId、taskId、projectRootHash、version、status、content、evidence、sourceRevision、contentHash、createdAt、updatedAt，使用 RFC8785 JCS-SHA-256。需求、影响范围、身份、版本或 sourceRevision 变化时写 blockedReason=packet-stale。
 
+## v1.12.1 provider-specific session binding
+
+角色会话的外部身份只能是 provider 返回的 canonical `providerSessionId`。普通线程 ID、taskId、标题、历史摘要或用户口述不能直接绑定。绑定前必须验证项目身份、roleId、taskId、title、cwd、独占占用和真实发送/接收交互证据；证据不全保持 `bindingStatus=pending/blocked`，不得 ready 或 executionEligible。创建回写失败复用原 taskId/roleTaskId、递增 attempt，不创建重复会话；宿主不可用时 `providerSessionId=null`，不得伪造。
+
 数据库默认 databaseAccessMode=sql-only。连接、只读查询、结构变更、数据修改分别授权，四类授权状态固定为 not-requested/requested/authorized/denied/expired/failed/unknown，redactionStatus 固定为 verified/unverified/failed；SQL 执行前校验规范化 SQL、参数、方言、targetEnvironment、授权范围生成的 statementHash。授权或输入变化时回到 needs-confirmation，并追加包含 auditId、action、actorType、actorId、authorizationType、statementHash、targetEnvironment、resultStatus、redactionStatus、evidence、at 的 audit。
 
 ## 自我学习

package/init/xinyun-ai-init/templates/current-task.template.md

@@ -148,6 +148,8 @@
   - blockedCount：
   - localDegradedCount：
   - bindingsPath：xinyun-ai/sessions/role-session-bindings.json
+  - providerBindingsPath：xinyun-ai/sessions/provider-session-bindings.json
+  - providerSessionId：null；无宿主 canonical ID 时不得伪造
   - sessionStatusEnum：pending / creating / created / onboarding / ready / blocked / failed / closed
   - 角色会话入口：
     - roleId：

package/init/xinyun-ai-init/templates/init-result.template.json

@@ -9,7 +9,7 @@
   "statusEnum": ["pending", "initializing", "completed", "partial", "blocked", "unknown", "failed", "cancelled"],
   "statusSource": "xinyun-ai/current-task.md",
   "currentVersion": null,
-  "targetVersion": "1.12.0",
+  "targetVersion": "1.12.1",
   "idempotencyKey": null,
   "createdFiles": [],
   "updatedFiles": [],
@@ -76,6 +76,15 @@
     "projectSnapshotReuse": "not-checked",
     "stageTimingRecorded": false
   },
+  "v1121": {
+    "providerSessionBindingsPath": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "bindingGateStatus": "blocked",
+    "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+    "realProviderSessionRequired": true,
+    "fakeProviderSessionIdProhibited": true,
+    "unverifiedScope": ["provider-specific host session evidence"]
+  },
   "v19": {
     "projectIdentityPath": "xinyun-ai/project-identity.json",
     "technicalLandscapePath": "xinyun-ai/technical-landscape.json",

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,6 +1,6 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.12.0",
+  "xinyunAiVersion": "1.12.1",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "initializationMode": "fast",
@@ -64,6 +64,7 @@
     ,"hostCapabilityPreflight": true
     ,"projectStatusGate": true
     ,"takeoverBaseline": true
+    ,"providerSpecificSessionBinding": true
   },
   "tasking": {
     "currentTask": "xinyun-ai/current-task.md",
@@ -85,6 +86,8 @@
     "roleExecutionTemplate": "xinyun-ai-init/templates/role-execution.template.md",
     "roleSessionBindings": "xinyun-ai/sessions/role-session-bindings.json",
     "roleSessionBindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "projectStatus": "xinyun-ai/project-status.json",
     "preflightReport": "xinyun-ai/preflight-report.json",
     "onboardingReport": "xinyun-ai/onboarding-report.json",
@@ -98,8 +101,10 @@
     "directory": "xinyun-ai/sessions/roles/",
     "bindings": "xinyun-ai/sessions/role-session-bindings.json",
     "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "parentSessionId": null,
-    "targetVersion": "1.12.0",
+    "targetVersion": "1.12.1",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -270,6 +275,19 @@
     "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
     "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
   },
+  "v1121": {
+    "status": "implemented-in-package",
+    "capability": "providerSpecificSessionBinding",
+    "providerBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerBindings": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerEnum": ["codex"],
+    "bindingModeEnum": ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"],
+    "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+    "identityEvidenceRequired": ["providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "source", "verifiedAt", "evidenceHash"],
+    "interactionEvidenceRequired": ["sendReceipt", "receiveReceipt", "transcriptHash", "messageCount", "recordedAt", "evidenceHash"],
+    "bindingGate": "provider canonical ID + identity evidence + interaction evidence + exclusive occupancy",
+    "unsupportedHostPolicy": "blocked-without-fake-provider-session-id"
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/manual-session-binding.template.json

@@ -5,12 +5,18 @@
   "roleTaskId": null,
   "roleId": null,
   "sessionId": null,
+  "providerSessionId": null,
+  "projectRootHash": null,
+  "workspaceScope": null,
+  "title": null,
+  "cwd": null,
   "sessionIdType": "host-returned-real-session",
   "provider": "codex",
+  "bindingMode": "manual",
   "boundBy": null,
   "boundAt": null,
   "evidence": [],
-  "evidenceRequiredFields": ["evidenceType", "source", "sessionId", "interactionHash", "beforeSnapshotHash", "afterSnapshotHash", "recordedAt"],
+  "evidenceRequiredFields": ["evidenceType", "source", "sessionId", "providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "interactionHash", "beforeSnapshotHash", "afterSnapshotHash", "recordedAt"],
   "bindingStatus": "pending",
   "bindingStatusEnum": ["pending", "bound", "rejected", "blocked", "released"],
   "executionEligible": false,

package/init/xinyun-ai-init/templates/project-check.template.md

@@ -168,6 +168,15 @@
 - 敏感扫描、业务文件 changedFiles 和禁止操作证明是否通过：待填写
 - `projectStatus=ready` 和 `executionEligible=true` 是否仅在全部门禁通过后出现：待填写
 
+## v1.12.1 provider session checks
+
+- provider binding uses a host canonical `providerSessionId`: pending
+- ordinary thread IDs, task IDs, titles, and summaries are rejected as provider identity: pending
+- project, role, task, title, cwd, and exclusive occupancy evidence: pending
+- redacted send/receive interaction evidence and transcript hash: pending
+- manual binding without evidence remains pending/blocked: pending
+- writeback recovery reuses task IDs, increments attempt, and creates no duplicate session: pending
+
 ## v1.9 检查
 
 - 项目身份是否使用 realpath / lexical-fallback、Unicode NFC、projectRootHash 和 repositoryScopeHash：待填写

package/init/xinyun-ai-init/templates/project-guide.template.md

@@ -218,6 +218,8 @@
 - roleSessionIdempotency：RFC8785-JCS-SHA-256(projectRootHash, workspaceScope, repositoryScopeHash, workstream, taskId, roleId, provider, targetVersion)；v1.7.3 四字段仅作创建兼容索引，不参与候选选择、复用或跨项目身份判定
 - parentSessionId：待填写
 - real sessionId：待填写；不得伪造 sessionId
+- providerSessionId：待填写；只能来自宿主 canonical session API，普通线程 ID 不得直接绑定
+- provider binding：xinyun-ai/sessions/provider-session-bindings.json；必须有 identityEvidence、interactionEvidence 和 exclusive occupancy
 - onboarding：created 后先只读 onboarding，不能直接 ready
 - host unsupported：local-degraded-no-fake-session-id
 - created-but-writeback-failed：待填写恢复线索

package/init/xinyun-ai-init/templates/project-index.template.json

@@ -147,6 +147,10 @@
     "directory": "xinyun-ai/sessions/roles/",
     "bindings": "xinyun-ai/sessions/role-session-bindings.json",
     "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -288,6 +292,15 @@
     "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
     "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
   },
+  "v1121": {
+    "status": "implemented-in-package",
+    "providerBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerBindings": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerEnum": ["codex"],
+    "bindingModeEnum": ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"],
+    "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+    "bindingGate": "provider canonical ID + identity evidence + interaction evidence + exclusive occupancy"
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/provider-session-binding.template.json

@@ -0,0 +1,60 @@
+{
+  "schemaVersion": 1,
+  "bindingId": "provider-session-binding-template",
+  "provider": "codex",
+  "providerSessionId": null,
+  "providerSessionIdType": "provider-canonical-session",
+  "roleId": null,
+  "taskId": null,
+  "projectRootHash": null,
+  "workspaceScope": null,
+  "repositoryScopeHash": null,
+  "workstream": null,
+  "title": null,
+  "cwd": null,
+  "createdAt": null,
+  "identityEvidence": {
+    "providerSessionId": null,
+    "projectRootHash": null,
+    "workspaceScope": null,
+    "roleId": null,
+    "taskId": null,
+    "title": null,
+    "cwd": null,
+    "source": null,
+    "verifiedAt": null,
+    "evidenceHash": null
+  },
+  "interactionEvidence": {
+    "sendReceipt": null,
+    "receiveReceipt": null,
+    "transcriptHash": null,
+    "messageCount": 0,
+    "recordedAt": null,
+    "evidenceHash": null
+  },
+  "bindingMode": "auto-created",
+  "bindingStatus": "pending",
+  "executionEligible": false,
+  "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+  "boundBy": null,
+  "boundAt": null,
+  "attempt": 1,
+  "recovery": {
+    "reuseTaskId": true,
+    "reuseRoleTaskId": true,
+    "incrementAttempt": true,
+    "createdDuplicateSession": false,
+    "recoveryReason": null,
+    "nextAction": null
+  },
+  "occupancy": {
+    "occupancyStatus": "unknown",
+    "occupiedByProjectRootHash": null,
+    "occupiedByRoleId": null,
+    "checkedAt": null
+  },
+  "blockedReason": null,
+  "audit": [],
+  "fakeProviderSessionIdProhibited": true
+}

package/init/xinyun-ai-init/templates/role-execution.template.md

@@ -44,6 +44,7 @@
 - 会话创建成功后先进入 `sessionStatus=onboarding`，只读职责范围内资料并生成角色理解记录；不得因会话创建成功直接把任务标为 `ready` 或获得业务代码修改授权。
 - 只有角色理解完成、职责确认完成、成员/会话绑定满足、确认人关系无冲突且执行门禁满足时，才允许 `sessionStatus=ready` 与 `executionEligible=true`。
 - Codex 宿主不支持创建子会话、权限不足或创建失败时，必须保留 `sessionId=null`，记录 `sessionStatus=blocked/failed`、失败原因和本地降级说明，不得伪造会话。
+- v1.12.1 起，`providerSessionId` 必须是 Codex 宿主 canonical session API 返回值；普通线程 ID、taskId、标题或历史摘要不得直接绑定。绑定前需验证项目身份、roleId、taskId、title、cwd、独占占用、`identityEvidence` 和 `interactionEvidence`。
 
 ## 幂等
 

package/init/xinyun-ai-init/templates/role-session-binding.template.json

@@ -5,8 +5,25 @@
   "taskId": "role-execution-task-template",
   "roleId": "project-owner",
   "sessionId": null,
+  "providerSessionId": null,
+  "providerSessionIdType": "provider-canonical-session",
   "parentSessionId": null,
   "provider": "codex",
+  "bindingMode": "auto-created",
+  "bindingStatus": "pending",
+  "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+  "boundBy": null,
+  "boundAt": null,
+  "title": null,
+  "cwd": null,
+  "interactionEvidence": {
+    "sendReceipt": null,
+    "receiveReceipt": null,
+    "transcriptHash": null,
+    "messageCount": 0,
+    "recordedAt": null,
+    "evidenceHash": null
+  },
   "identityMapping": {
     "hostThreadId": null,
     "hostSessionId": null,
@@ -16,7 +33,7 @@
     "identityEvidence": [],
     "creationEvidence": []
   },
-  "targetVersion": "1.12.0",
+  "targetVersion": "1.12.1",
   "projectRootHash": null,
   "workspaceScope": {"scopeType": "project-root", "scopePathHashes": [], "scopeRevision": null},
   "repositoryScopeHash": null,
@@ -66,5 +83,5 @@
   "roleDisplayName": null,
   "responsibilityLabel": null,
   "titleSource": "role-contract",
-  "titleVersion": "1.12.0"
+  "titleVersion": "1.12.1"
 }

package/init/xinyun-ai-init/templates/task-index.template.json

@@ -7,6 +7,7 @@
   "roleExecutionDirectory": "xinyun-ai/tasks/role-execution/",
   "roleExecutionTaskIds": [],
   "roleSessionBindingIds": [],
+  "providerSessionBindingsPath": "xinyun-ai/sessions/provider-session-bindings.json",
   "roleExecutionStatusEnum": ["pending", "assigned", "accepted", "executing", "paused", "blocked", "completed", "cancelled"],
   "roleSessionStatusEnum": ["pending", "creating", "created", "onboarding", "ready", "blocked", "failed", "closed"],
   "roleExecutionPriority": {
@@ -36,6 +37,7 @@
   },
   "tasks": [],
   "roleSessionBindings": [],
+  "providerSessionBindings": [],
   "orchestratorSessionId": null,
   "statusSource": "xinyun-ai/current-task.md",
   "statusConsistency": {

package/init/xinyun-ai-init/templates/team/README.md

@@ -18,6 +18,7 @@
 - 会话状态固定为 `pending/creating/created/onboarding/ready/blocked/failed/closed`。
 - 创建成功后先进入 `onboarding`，只允许只读理解职责范围和项目资料；职责理解、确认关系和执行门禁满足后才允许 `ready`。
 - Codex 宿主不支持创建子会话、权限不足或创建失败时，必须进入本地降级：保留 `sessionId=null`，记录 `sessionStatus=blocked/failed`、失败原因和下一步动作，不得伪造会话。
+- v1.12.1 起，canonical 外部会话身份单独记录为 `providerSessionId`；必须有项目/角色/任务身份和真实发送/接收交互证据。普通线程 ID、标题或历史摘要不能直接绑定。
 
 ## 默认角色
 

package/init/xinyun-ai-init/templates/team/assignments.json

@@ -11,6 +11,7 @@
       "taskId",
       "roleId",
       "sessionId",
+      "providerSessionId",
       "parentSessionId",
       "provider",
       "sessionStatus",
@@ -32,7 +33,7 @@
     "pausedRule": "status=paused requires pauseReason; other statuses require pauseReason=null.",
     "blockedRule": "status=blocked requires blockedReason=approver-unavailable or member-conflict.",
     "executionEligibility": "member bound, role ready, sessionStatus=ready, responsibility confirmed, understanding ready, and executor memberId not equal to final approver member IDs.",
-    "sessionBindingRule": "sessionId must be a real host-returned value when provider=codex; if the host cannot create sessions, sessionId remains null and sessionStatus=blocked or failed with a local degradation reason."
+    "sessionBindingRule": "sessionId remains the project compatibility field; providerSessionId must be a real host-returned value from the provider canonical session API with identityEvidence and interactionEvidence. If unavailable, both remain null and status is blocked/pending with a degradation reason."
   },
   "updatedAt": ""
 }

package/init/xinyun-ai-init/version.json

@@ -1,7 +1,7 @@
 {
   "packageName": "xinyun-ai-init",
   "displayName": "欣芸技术开发 Agent 流初始化包",
-  "version": "1.12.0",
+  "version": "1.12.1",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "defaultMode": "fast-init",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pm_zhousl/xinyun-ai-init",
-  "version": "1.12.0",
+  "version": "1.12.1",
   "description": "欣芸技术开发 Agent 流初始化包",
   "bin": {
     "xinyun-ai-init": "bin/xinyun-ai-init.js"

package/scripts/verify-init-package.js

@@ -6,7 +6,7 @@ const crypto = require("crypto");
 
 const root = path.resolve(__dirname, "..");
 const initRoot = path.join(root, "init", "xinyun-ai-init");
-const CURRENT_VERSION = "1.12.0";
+const CURRENT_VERSION = "1.12.1";
 
 const checks = [];
 
@@ -1973,6 +1973,55 @@ function verifyV112Contracts() {
   addCheck("v1.12 rule contract", readText("init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("available-with-dependency") && readText("init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("shared-project-snapshot.json"), "v1.12 recovery rule is present");
 }
 
+function verifyV1121Contracts() {
+  const requiredFiles = [
+    "init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md",
+    "init/xinyun-ai-init/templates/provider-session-binding.template.json",
+    "test-scenarios/v1.12.1-scenarios.md",
+    "test-scenarios/v1.12.1-behavior-evidence.json",
+  ];
+  for (const file of requiredFiles) requireFile(file);
+
+  let manifest;
+  let projectIndex;
+  let initResult;
+  let binding;
+  let manual;
+  let evidence;
+  try {
+    manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
+    projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
+    initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
+    binding = JSON.parse(readText("init/xinyun-ai-init/templates/provider-session-binding.template.json"));
+    manual = JSON.parse(readText("init/xinyun-ai-init/templates/manual-session-binding.template.json"));
+    evidence = JSON.parse(readText("test-scenarios/v1.12.1-behavior-evidence.json"));
+  } catch (error) {
+    addCheck("v1.12.1 template JSON parse", false, error.message);
+    return;
+  }
+
+  const bindingStatuses = ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"];
+  const bindingModes = ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"];
+  const identityFields = ["providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "source", "verifiedAt", "evidenceHash"];
+  const interactionFields = ["sendReceipt", "receiveReceipt", "transcriptHash", "messageCount", "recordedAt", "evidenceHash"];
+  const bindingFields = ["provider", "providerSessionId", "roleId", "taskId", "projectRootHash", "workspaceScope", "title", "cwd", "createdAt", "identityEvidence", "interactionEvidence", "bindingMode", "bindingStatus", "boundBy", "boundAt"];
+  addCheck("v1.12.1 version metadata", manifest.xinyunAiVersion === CURRENT_VERSION && initResult.targetVersion === CURRENT_VERSION && binding.targetVersion === undefined, CURRENT_VERSION);
+  addCheck("v1.12.1 registry paths", manifest.v1121 && projectIndex.v1121 && manifest.v1121.providerBindings === projectIndex.v1121.providerBindings && manifest.v1121.providerBindingTemplate === projectIndex.v1121.providerBindingTemplate && manifest.roleSessions.providerSessionBindings === projectIndex.roleSessions.providerSessionBindings, "manifest/project-index provider binding paths");
+  addCheck("v1.12.1 binding fields", bindingFields.every((field) => Object.prototype.hasOwnProperty.call(binding, field)), "canonical provider binding fields");
+  addCheck("v1.12.1 binding enums", JSON.stringify(binding.bindingStatusEnum) === JSON.stringify(bindingStatuses) && bindingModes.includes(binding.bindingMode), "binding modes and statuses");
+  addCheck("v1.12.1 evidence fields", identityFields.every((field) => Object.prototype.hasOwnProperty.call(binding.identityEvidence, field)) && interactionFields.every((field) => Object.prototype.hasOwnProperty.call(binding.interactionEvidence, field)), "identity and interaction evidence fields");
+  addCheck("v1.12.1 conservative template", binding.providerSessionId === null && binding.bindingStatus === "pending" && binding.executionEligible === false && binding.fakeProviderSessionIdProhibited === true, "provider ID and execution defaults");
+  addCheck("v1.12.1 manual compatibility", manual.providerSessionId === null && manual.bindingMode === "manual" && manual.executionEligible === false && manual.fakeSessionIdProhibited === true && manual.evidenceRequiredFields.includes("providerSessionId"), "manual binding remains gated");
+  addCheck("v1.12.1 init-result link", initResult.v1121 && initResult.v1121.providerSessionBindingsPath === manifest.v1121.providerBindings && initResult.v1121.providerSessionBindingTemplate === manifest.v1121.providerBindingTemplate && initResult.v1121.fakeProviderSessionIdProhibited === true, "init-result provider binding link");
+  const scenarioText = readText("test-scenarios/v1.12.1-scenarios.md");
+  const scenarioIds = Array.from({ length: 13 }, (_, index) => 146 + index);
+  addCheck("v1.12.1 scenarios", scenarioIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("providerSessionId=null"), "scenarios 146-158");
+  addCheck("v1.12.1 honest behavior evidence", evidence.version === CURRENT_VERSION && evidence.evidenceType === "not-verified" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && JSON.stringify(evidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(scenarioIds), "real host evidence status");
+  addCheck("v1.12.1 no fabricated IDs", evidence.scenarios.every((scenario) => scenario.providerSessionId === null && scenario.sessionId === null && scenario.result === "not-verified" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0), "provider session IDs remain null without host evidence");
+  const ruleText = readText("init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md");
+  addCheck("v1.12.1 rule contract", ["providerSessionId", "canonical", "identityEvidence", "interactionEvidence", "exclusive occupancy", "Do not fabricate"].every((term) => ruleText.includes(term)), "provider session rule contract");
+}
+
 function main() {
   requireFile("bin/xinyun-ai-init.js");
   requireFile("init/xinyun-ai-init/README.md");
@@ -1993,6 +2042,7 @@ function main() {
   verifyV19SessionReuseText();
   verifyV110Contracts();
   verifyV112Contracts();
+  verifyV1121Contracts();
   verifyTestScenarios();
   verifyJsonAndMarkdown();
 

package/scripts/verify-rules-package.js

@@ -5,7 +5,7 @@ const os = require("os");
 const path = require("path");
 const { spawnSync } = require("child_process");
 
-const VERSION = "1.12.0";
+const VERSION = "1.12.1";
 const checks = [];
 
 function parseArgs(argv) {
@@ -239,6 +239,7 @@ function validatePackageFiles(root, target, isTarball) {
     "init/xinyun-ai-init/templates/archive-transaction.template.json",
     "init/xinyun-ai-init/templates/role-execution.template.md",
     "init/xinyun-ai-init/templates/role-session-binding.template.json",
+    "init/xinyun-ai-init/templates/provider-session-binding.template.json",
     "init/xinyun-ai-init/templates/coordination-project-facts.template.json",
     "init/xinyun-ai-init/templates/coordination-change-ledger.template.json",
     "init/xinyun-ai-init/templates/coordination-contract-snapshot.template.json",
@@ -778,6 +779,36 @@ function validateV112Content(root, target) {
   addCheck(target, "v1.12.rule", "content", readText(root, "init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("available-with-dependency") && readText(root, "init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("sessionId=null") ? "pass" : "fail", "v1.12.0-recovery.md", "contract", "preflight and no fake IDs", "scanned", "v1.12 rule contract checked.", "Restore the v1.12 rule contract.");
 }
 
+function validateV1121Content(root, target) {
+  const requiredFiles = [
+    "init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md",
+    "init/xinyun-ai-init/templates/provider-session-binding.template.json",
+    "test-scenarios/v1.12.1-scenarios.md",
+    "test-scenarios/v1.12.1-behavior-evidence.json",
+  ];
+  for (const file of requiredFiles) requireFile(root, target, file);
+  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
+  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
+  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
+  const binding = readJson(root, "init/xinyun-ai-init/templates/provider-session-binding.template.json");
+  const manual = readJson(root, "init/xinyun-ai-init/templates/manual-session-binding.template.json");
+  const evidence = readJson(root, "test-scenarios/v1.12.1-behavior-evidence.json");
+  const statuses = ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"];
+  const modes = ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"];
+  const identityFields = ["providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "source", "verifiedAt", "evidenceHash"];
+  const interactionFields = ["sendReceipt", "receiveReceipt", "transcriptHash", "messageCount", "recordedAt", "evidenceHash"];
+  const scenarioIds = Array.from({ length: 13 }, (_, index) => 146 + index);
+  addCheck(target, "v1.12.1.registry", "registry", manifest.v1121 && projectIndex.v1121 && manifest.v1121.providerBindings === projectIndex.v1121.providerBindings && manifest.v1121.providerBindingTemplate === projectIndex.v1121.providerBindingTemplate ? "pass" : "fail", "manifest/project-index.v1121", "provider binding paths", "same", {manifest: manifest.v1121, projectIndex: projectIndex.v1121}, "Provider binding paths are consistent.", "Synchronize provider binding paths.");
+  addCheck(target, "v1.12.1.schema", "schema", statuses.every((status) => binding.bindingStatusEnum.includes(status)) && modes.includes(binding.bindingMode) && identityFields.every((field) => Object.prototype.hasOwnProperty.call(binding.identityEvidence, field)) && interactionFields.every((field) => Object.prototype.hasOwnProperty.call(binding.interactionEvidence, field)) ? "pass" : "fail", "provider-session-binding.template.json", "binding schema", "complete", binding, "Provider binding schema is complete.", "Complete provider binding evidence fields and enums.");
+  addCheck(target, "v1.12.1.gated-default", "schema", binding.providerSessionId === null && binding.bindingStatus === "pending" && binding.fakeProviderSessionIdProhibited === true && manual.providerSessionId === null && manual.executionEligible === false ? "pass" : "fail", "provider/manual binding templates", "default gate", "null/pending/false", {binding: binding, manual: manual}, "Bindings default to a conservative state.", "Do not fabricate provider session IDs.");
+  addCheck(target, "v1.12.1.init-result", "registry", initResult.v1121 && initResult.v1121.providerSessionBindingsPath === manifest.v1121.providerBindings && initResult.v1121.providerSessionBindingTemplate === manifest.v1121.providerBindingTemplate ? "pass" : "fail", "init-result.template.json", "v1121", "registered provider binding links", initResult.v1121, "Init result links provider binding.", "Synchronize init-result provider links.");
+  const scenarioText = readText(root, "test-scenarios/v1.12.1-scenarios.md");
+  addCheck(target, "v1.12.1.scenarios", "scenario", scenarioIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("providerSessionId=null") ? "pass" : "fail", "v1.12.1-scenarios.md", "scenarioIds", "146-158", "scanned", "Provider binding scenarios are registered.", "Add all provider binding scenarios.");
+  addCheck(target, "v1.12.1.behavior-evidence", "evidence", evidence.version === VERSION && evidence.evidenceType === "not-verified" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && JSON.stringify(evidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(scenarioIds) && evidence.scenarios.every((scenario) => scenario.providerSessionId === null && scenario.sessionId === null && scenario.result === "not-verified" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "v1.12.1-behavior-evidence.json", "realAiSessionVerified/result", "not-verified with null IDs", evidence, "Unavailable host evidence is honest.", "Do not fabricate real provider session evidence.");
+  const ruleText = readText(root, "init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md");
+  addCheck(target, "v1.12.1.rule", "content", ["providerSessionId", "canonical", "identityEvidence", "interactionEvidence", "exclusive occupancy", "Do not fabricate"].every((term) => ruleText.includes(term)) ? "pass" : "fail", "v1.12.1-provider-session-binding.md", "contract", "canonical identity and evidence gate", "scanned", "Provider binding rule is present.", "Restore provider binding rules.");
+}
+
 function validateJsonFiles(root, target) {
   const jsonFiles = [
     "package.json",
@@ -833,6 +864,7 @@ function validateRoot(root, target, isTarball = false) {
   validateV110Content(root, target);
   validateV111Content(root, target);
   validateV112Content(root, target);
+  validateV1121Content(root, target);
   validateJsonFiles(root, target);
 }
 

package/test-scenarios/v1.12.1-behavior-evidence.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "version": "1.12.1",
+  "evidenceType": "not-verified",
+  "executionMode": "host-capability-unavailable",
+  "realAiSessionVerified": false,
+  "publishBlocked": true,
+  "provider": "codex",
+  "providerSessionIdPolicy": "providerSessionId remains null until a provider canonical session ID and both evidence groups are verified",
+  "fixture": "isolated package fixture only; no real business project mutation",
+  "forbiddenOperations": ["database-connection", "sql", "business-file-write", "git-write", "dependency-install", "npm-publish"],
+  "scenarios": [
+    {"scenarioId":146,"sessionId":null,"providerSessionId":null,"input":"Verify canonical provider session identity.","expectedOutput":"not-verified","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":147,"sessionId":null,"providerSessionId":null,"input":"Reject ordinary thread ID as provider session.","expectedOutput":"blocked","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":148,"sessionId":null,"providerSessionId":null,"input":"Reject another project identity.","expectedOutput":"blocked","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":149,"sessionId":null,"providerSessionId":null,"input":"Reject role or task mismatch.","expectedOutput":"blocked","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":150,"sessionId":null,"providerSessionId":null,"input":"Validate title and cwd.","expectedOutput":"blocked","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":151,"sessionId":null,"providerSessionId":null,"input":"Reject missing interaction evidence.","expectedOutput":"pending-or-blocked","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":152,"sessionId":null,"providerSessionId":null,"input":"Verify candidate identity before reuse.","expectedOutput":"blocked","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":153,"sessionId":null,"providerSessionId":null,"input":"Reject occupied session.","expectedOutput":"conflict-or-blocked","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":154,"sessionId":null,"providerSessionId":null,"input":"Record manual binding without evidence.","expectedOutput":"pending-or-unknown","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":155,"sessionId":null,"providerSessionId":null,"input":"Recover without duplicate tasks or sessions.","expectedOutput":"reuses-task-and-increments-attempt","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":156,"sessionId":null,"providerSessionId":null,"input":"Recover provider session after writeback failure.","expectedOutput":"recovery-required","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":157,"sessionId":null,"providerSessionId":null,"input":"Handle unsupported host.","expectedOutput":"local-degraded-with-null-ID","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null},
+    {"scenarioId":158,"sessionId":null,"providerSessionId":null,"input":"Check cross-file binding consistency.","expectedOutput":"not-verified","actualOutput":"not-verified","beforeSnapshotHash":"not-recorded","afterSnapshotHash":"not-recorded","changedFiles":[],"forbiddenOperations":[],"evidence":[],"sensitiveScan":{"status":"pass","matches":[]},"result":"not-verified","recordedAt":null}
+  ]
+}

package/test-scenarios/v1.12.1-scenarios.md

@@ -0,0 +1,42 @@
+# v1.12.1 Provider Session Binding Scenarios
+
+Scenarios 146-158 are required. A real host session must not be simulated. When the host cannot return a canonical provider session ID, the expected result is blocked/not-verified with providerSessionId=null.
+
+## 146. Canonical provider session ID
+Verify that only a provider API returned canonical ID can enter providerSessionId.
+
+## 147. Ordinary thread ID rejection
+Use an ordinary Codex thread ID and verify it is rejected as provider identity.
+
+## 148. Project identity mismatch
+Use a session from another project root and verify bindingStatus=conflict or blocked.
+
+## 149. Role/task mismatch
+Use a session whose roleId or taskId differs and verify no binding is written.
+
+## 150. Title and cwd validation
+Verify required role title and project cwd before binding.
+
+## 151. Missing interaction evidence
+Verify that missing send or receive receipt keeps the record pending or blocked.
+
+## 152. Candidate reuse verification
+Verify old candidates are read and identity-checked before reuse; title alone is insufficient.
+
+## 153. Exclusive occupancy conflict
+Verify a session occupied by another project or role is blocked and audited.
+
+## 154. Manual binding without evidence
+Verify a user-confirmed manual entry without evidence remains pending/unknown and not executable.
+
+## 155. Recovery idempotency
+Verify recovery reuses taskId and roleTaskId, increments attempt, and creates no duplicate task or session.
+
+## 156. Writeback failure recovery
+Verify a created provider session with failed local writeback enters recovery-required and is queryable.
+
+## 157. Unsupported host degradation
+Verify unsupported host records local-degraded, providerSessionId=null, nextAction, and no fake ID.
+
+## 158. Cross-file binding consistency
+Verify provider binding, role task, assignments, task-index, and init-result agree on identity, status, attempt, and audit.