@pm_zhousl/xinyun-ai-init 2.0.0 → 3.0.0

package/scripts/verify-rules-package.js

@@ -1,1287 +0,0 @@
-#!/usr/bin/env node
-
-const fs = require("fs");
-const os = require("os");
-const path = require("path");
-const { spawnSync } = require("child_process");
-
-const v2Root = path.resolve(__dirname, "..");
-if (require(path.join(v2Root, "package.json")).version.startsWith("2.")) {
-  const targetScript = process.argv.includes("--tarball") ? "verify-v2-tarball.js" : "verify-v2-package.js";
-  const result = spawnSync(process.execPath, [path.join(__dirname, targetScript), ...process.argv.slice(2)], { stdio: "inherit" });
-  process.exit(typeof result.status === "number" ? result.status : 1);
-}
-
-const VERSION = "1.16.0";
-const checks = [];
-
-function parseArgs(argv) {
-  const options = { sourceRoot: process.cwd(), tarball: null, json: false, help: false };
-
-  for (let index = 0; index < argv.length; index += 1) {
-    const arg = argv[index];
-    if (arg === "--source-root") {
-      const value = argv[index + 1];
-      if (!value) throw Object.assign(new Error("--source-root requires a path"), { exitCode: 2 });
-      options.sourceRoot = value;
-      index += 1;
-    } else if (arg === "--tarball") {
-      const value = argv[index + 1];
-      if (!value) throw Object.assign(new Error("--tarball requires a path"), { exitCode: 2 });
-      options.tarball = value;
-      index += 1;
-    } else if (arg === "--json") {
-      options.json = true;
-    } else if (arg === "--help" || arg === "-h") {
-      options.help = true;
-    } else {
-      throw Object.assign(new Error(`Unknown argument: ${arg}`), { exitCode: 2 });
-    }
-  }
-
-  options.sourceRoot = path.resolve(options.sourceRoot);
-  if (options.tarball) options.tarball = path.resolve(options.tarball);
-  return options;
-}
-
-function addCheck(target, checkId, category, status, pathValue, field, expected, actual, message, suggestion, severity = "required") {
-  checks.push({
-    checkId,
-    target,
-    category,
-    status,
-    severity,
-    path: pathValue || null,
-    field: field || null,
-    expected: expected === undefined ? null : expected,
-    actual: actual === undefined ? null : actual,
-    message,
-    suggestion: suggestion || null,
-  });
-}
-
-function readText(root, relativePath) {
-  return fs.readFileSync(path.join(root, relativePath), "utf8").replace(/^\uFEFF/, "");
-}
-
-function readJson(root, relativePath) {
-  return JSON.parse(readText(root, relativePath));
-}
-
-function existsPath(root, relativePath) {
-  return fs.existsSync(path.join(root, relativePath));
-}
-
-function existsFile(root, relativePath) {
-  return existsPath(root, relativePath) && fs.statSync(path.join(root, relativePath)).isFile();
-}
-
-function requireFile(root, target, relativePath) {
-  const ok = existsFile(root, relativePath);
-  addCheck(
-    target,
-    "path.reference",
-    "path",
-    ok ? "pass" : "fail",
-    relativePath,
-    null,
-    "file exists",
-    ok ? "file exists" : "missing",
-    ok ? "Required file exists." : "Required file is missing.",
-    ok ? null : "Add the file or update the rule/package reference."
-  );
-}
-
-function requireIncludes(root, target, relativePath, snippets, checkId = "content.required") {
-  let content;
-  try {
-    content = readText(root, relativePath);
-  } catch (error) {
-    addCheck(target, checkId, "content", "fail", relativePath, null, "readable text", error.message, "File could not be read.", "Restore the file or fix permissions.");
-    return;
-  }
-
-  for (const snippet of snippets) {
-    const expectedSnippet = snippet === "当前规则版本：`1.9.0`" ? `当前规则版本：\`${VERSION}\`` : snippet;
-    const ok = content.includes(expectedSnippet);
-    addCheck(
-      target,
-      checkId,
-      "content",
-      ok ? "pass" : "fail",
-      relativePath,
-      null,
-      expectedSnippet,
-      ok ? expectedSnippet : "not found",
-      ok ? `Found required content: ${snippet}` : `Missing required content: ${snippet}`,
-      ok ? null : "Synchronize README, templates, and rule files."
-    );
-  }
-}
-
-const v19SessionReuseFiles = [
-  "init/xinyun-ai-init/README.md",
-  "init/xinyun-ai-init/templates/AGENTS.template.md",
-  "init/xinyun-ai-init/templates/core-rules.template.md",
-  "init/xinyun-ai-init/templates/project-guide.template.md",
-  "init/xinyun-ai-init/templates/project-check.template.md",
-  "init/xinyun-ai-init/templates/role-execution.template.md",
-  "init/xinyun-ai-init/rules/init-rules.md",
-  "init/xinyun-ai-init/rules/upgrade-rules.md",
-  "init/xinyun-ai-init/rules/session-workbench.md",
-];
-
-const v19SessionKeyFields = [
-  "projectRootHash",
-  "workspaceScope",
-  "repositoryScopeHash",
-  "workstream",
-  "taskId",
-  "roleId",
-  "provider",
-  "targetVersion",
-];
-
-function validateV19SessionReuseText(root, target) {
-  const legacyPatterns = [
-    /\btaskId\s*\+\s*roleId\s*\+\s*provider\s*\+\s*targetVersion\b/,
-    /JCS-SHA-256\s*\(\s*taskId\s*,\s*roleId\s*,\s*provider\s*,\s*targetVersion\s*\)/,
-    /(?:roleSessionIdempotency|sessionIdempotencyKey|legacyCreationIndexFields)[^\n]{0,300}\{\s*taskId\s*,\s*roleId\s*,\s*provider\s*,\s*targetVersion\s*\}/,
-  ];
-  const allowedLegacyMarkers = [
-    /legacy/i,
-    /compatib/i,
-    /兼容/,
-    /不得参与候选选择/,
-    /不参与候选选择/,
-    /绝不参与/,
-    /never used for candidate selection/i,
-    /only.*creation/i,
-    /只作/,
-    /仅作/,
-  ];
-
-  for (const relativePath of v19SessionReuseFiles) {
-    let content;
-    try {
-      content = readText(root, relativePath);
-    } catch (error) {
-      addCheck(target, "v1.9.session-reuse-text", "content", "error", relativePath, null, "readable text", error.message, "Could not scan session reuse text.", "Restore the file or fix permissions.");
-      continue;
-    }
-    const hits = [];
-    for (const [index, line] of content.split(/\r?\n/).entries()) {
-      if (!legacyPatterns.some((pattern) => pattern.test(line))) continue;
-      hits.push({ line: index + 1, allowed: allowedLegacyMarkers.some((marker) => marker.test(line)) });
-    }
-    const unauthorized = hits.filter((hit) => !hit.allowed);
-    addCheck(target, "v1.9.session-reuse-text", "content", unauthorized.length === 0 ? "pass" : "fail", relativePath, null, "legacy tuple only in compatibility context", unauthorized.length === 0 ? "pass" : unauthorized.map((hit) => `L${hit.line}`).join(", "), unauthorized.length === 0 ? "Old tuple is compatibility-only." : "Old tuple is used as an executable reuse contract.", "Use the full v1.9 project-isolated key and keep legacy fields compatibility-only.");
-    addCheck(target, "v1.9.session-reuse-full-key", "content", v19SessionKeyFields.every((field) => content.includes(field)) && content.includes("RFC8785-JCS-SHA-256") ? "pass" : "fail", relativePath, null, "eight fields and RFC8785-JCS-SHA-256", "scanned", "Full v1.9 session reuse key is present.", "Add the full v1.9 reuse contract.");
-  }
-}
-
-function validateVersion(root, target) {
-  const packageJson = readJson(root, "package.json");
-  const versionJson = readJson(root, "init/xinyun-ai-init/version.json");
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const scripts = packageJson.scripts || {};
-
-  const pairs = [
-    ["package.json", "version", packageJson.version],
-    ["init/xinyun-ai-init/version.json", "version", versionJson.version],
-    ["init/xinyun-ai-init/templates/manifest.template.json", "xinyunAiVersion", manifest.xinyunAiVersion],
-  ];
-
-  for (const [file, field, actual] of pairs) {
-    addCheck(target, "version.package", "version", actual === VERSION ? "pass" : "fail", file, field, VERSION, actual, "Version consistency checked.", "Update all version metadata to the release version.");
-  }
-
-  addCheck(target, "script.entry", "script", scripts["verify:init"] === "node ./scripts/verify-init-package.js" ? "pass" : "fail", "package.json", "scripts.verify:init", "node ./scripts/verify-init-package.js", scripts["verify:init"], "verify:init script entry checked.", "Restore verify:init script.");
-  addCheck(target, "script.entry", "script", scripts["verify:rules"] === "node ./scripts/verify-rules-package.js" ? "pass" : "fail", "package.json", "scripts.verify:rules", "node ./scripts/verify-rules-package.js", scripts["verify:rules"], "verify:rules script entry checked.", "Add verify:rules script.");
-  addCheck(target, "script.entry", "script", scripts["evidence:v1.10"] === "node ./scripts/collect-v1.10-evidence.js" ? "pass" : "fail", "package.json", "scripts.evidence:v1.10", "node ./scripts/collect-v1.10-evidence.js", scripts["evidence:v1.10"], "v1.10 evidence collector entry checked.", "Add the bounded real-session evidence collector.");
-}
-
-function validatePackageFiles(root, target, isTarball) {
-  const packageJson = readJson(root, "package.json");
-  const requiredEntries = ["bin/", "init/", "scripts/", "test-scenarios/", "README.md"];
-  for (const entry of requiredEntries) {
-    const ok = Array.isArray(packageJson.files) && packageJson.files.includes(entry);
-    addCheck(target, "package.files", "package", ok ? "pass" : "fail", "package.json", "files", entry, packageJson.files, "Package files whitelist checked.", "Add the missing package files entry.");
-  }
-
-  const requiredFiles = [
-    "README.md",
-    "bin/xinyun-ai-init.js",
-    "scripts/verify-init-package.js",
-    "scripts/verify-rules-package.js",
-    "scripts/verify-rules-tarball-security.js",
-    "test-scenarios/README.md",
-    "test-scenarios/review-template.md",
-    "test-scenarios/scenarios.md",
-    "test-scenarios/v1.7.1-scenarios.md",
-    "test-scenarios/v1.7.2-scenarios.md",
-    "test-scenarios/v1.7.3-scenarios.md",
-    "init/xinyun-ai-init/README.md",
-    "init/xinyun-ai-init/rules/frameworks/README.md",
-    "init/xinyun-ai-init/rules/frameworks/backend/php/thinkphp.md",
-    "init/xinyun-ai-init/templates/AGENTS.template.md",
-    "init/xinyun-ai-init/templates/core-rules.template.md",
-    "init/xinyun-ai-init/templates/current-task.template.md",
-    "init/xinyun-ai-init/templates/project-check.template.md",
-    "init/xinyun-ai-init/templates/project-guide.template.md",
-    "init/xinyun-ai-init/templates/project-index.template.json",
-    "init/xinyun-ai-init/templates/manifest.template.json",
-    "init/xinyun-ai-init/templates/framework-profile.template.md",
-    "init/xinyun-ai-init/templates/framework-profile.template.json",
-    "init/xinyun-ai-init/templates/html-migration-scope.template.md",
-    "init/xinyun-ai-init/templates/html-migration-compatibility-matrix.template.md",
-    "init/xinyun-ai-init/templates/html-migration-route-map.template.md",
-    "init/xinyun-ai-init/templates/html-migration-asset-map.template.md",
-    "init/xinyun-ai-init/templates/html-migration-pilot-plan.template.md",
-    "init/xinyun-ai-init/templates/html-migration-open-issues.template.md",
-    "init/xinyun-ai-init/templates/html-migration-record.template.json",
-    "init/xinyun-ai-init/templates/task-index.template.json",
-    "init/xinyun-ai-init/templates/task-main.template.md",
-    "init/xinyun-ai-init/templates/role-subtask.template.md",
-    "init/xinyun-ai-init/templates/archive-transaction.template.json",
-    "init/xinyun-ai-init/templates/role-execution.template.md",
-    "init/xinyun-ai-init/templates/role-session-binding.template.json",
-    "init/xinyun-ai-init/templates/provider-session-binding.template.json",
-    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
-    "init/xinyun-ai-init/templates/coordination-project-facts.template.json",
-    "init/xinyun-ai-init/templates/coordination-change-ledger.template.json",
-    "init/xinyun-ai-init/templates/coordination-contract-snapshot.template.json",
-    "init/xinyun-ai-init/templates/coordination-conflict-record.template.json",
-    "init/xinyun-ai-init/templates/coordination-transaction.template.json",
-    "init/xinyun-ai-init/templates/skills-registry.template.json",
-    "init/xinyun-ai-init/templates/skills-assignments.template.json",
-    "init/xinyun-ai-init/templates/frontend-audit.template.json",
-    "init/xinyun-ai-init/templates/temporary-session.template.json",
-    "init/xinyun-ai-init/rules/coordination.md",
-    "init/xinyun-ai-init/rules/skills.md",
-    "init/xinyun-ai-init/rules/frontend-audit.md",
-    "init/xinyun-ai-init/rules/temporary-sessions.md",
-    "test-scenarios/v1.8.0-scenarios.md",
-    "test-scenarios/v1.9.0-scenarios.md",
-    "test-scenarios/v1.9.0-behavior-evidence.json",
-    "test-scenarios/v1.10.0-scenarios.md",
-    "test-scenarios/v1.10.0-behavior-evidence.json",
-    "test-scenarios/v1.12.0-scenarios.md",
-    "test-scenarios/v1.12.0-behavior-evidence.json",
-    "init/xinyun-ai-init/templates/project-identity.template.json",
-    "init/xinyun-ai-init/templates/session-candidates.template.json",
-    "init/xinyun-ai-init/templates/technical-landscape.template.json",
-    "init/xinyun-ai-init/templates/requirement-packet.template.json",
-    "init/xinyun-ai-init/templates/technical-impact-packet.template.json",
-    "init/xinyun-ai-init/templates/database-authorization.template.json",
-    "init/xinyun-ai-init/templates/agent-profile.template.json",
-    "init/xinyun-ai-init/templates/agent-capabilities.template.json",
-    "init/xinyun-ai-init/templates/takeover-gate.template.json",
-    "init/xinyun-ai-init/templates/orchestrator.template.json",
-    "init/xinyun-ai-init/templates/task-graph.template.json",
-    "init/xinyun-ai-init/templates/handoff.template.json",
-    "init/xinyun-ai-init/templates/final-delivery.template.json",
-    "init/xinyun-ai-init/templates/host-preflight.template.json",
-    "init/xinyun-ai-init/templates/initialization-recovery.template.json",
-    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
-    "init/xinyun-ai-init/templates/shared-project-snapshot.template.json",
-    "init/xinyun-ai-init/templates/initialization-timing.template.json",
-    "init/xinyun-ai-init/rules/v1.12.0-recovery.md",
-    "init/xinyun-ai-init/rules/v1.13.0-host-adapter.md",
-    "init/xinyun-ai-init/templates/provider-adapter.template.json",
-    "init/xinyun-ai-init/templates/manual-session-recovery.template.json",
-    "init/xinyun-ai-init/templates/initialization-change-report.template.json",
-    "init/xinyun-ai-init/templates/role-session-binding.template.json",
-    "init/xinyun-ai-init/templates/provider-session-binding.template.json",
-    "init/xinyun-ai-init/templates/task-index.template.json",
-    "init/xinyun-ai-init/templates/team/assignments.json",
-    "test-scenarios/v1.13.0-scenarios.md",
-    "test-scenarios/v1.13.0-behavior-evidence.json",
-    "test-scenarios/v1.14.0-scenarios.md",
-    "test-scenarios/v1.14.0-behavior-evidence.json",
-    "init/xinyun-ai-init/rules/v1.14.0-agent-core.md",
-    "init/xinyun-ai-init/templates/agent-profile.template.json",
-    "init/xinyun-ai-init/templates/agent-capabilities.template.json",
-    "init/xinyun-ai-init/templates/takeover-gate.template.json",
-    "init/xinyun-ai-init/templates/orchestrator.template.json",
-    "init/xinyun-ai-init/templates/task-graph.template.json",
-    "init/xinyun-ai-init/templates/handoff.template.json",
-    "init/xinyun-ai-init/templates/final-delivery.template.json",
-  ];
-
-  for (const file of requiredFiles) requireFile(root, target, file);
-
-  if (isTarball) {
-    const sourceOnly = "version-plans/releases/v1.10.0.md";
-    addCheck(target, "package.source-only", "package", !existsPath(root, sourceOnly) ? "pass" : "warn", sourceOnly, null, "not required in tarball", existsPath(root, sourceOnly) ? "present" : "not present", "source-only version-plans is not required in tarball.", "No action required unless package policy changes.", "optional");
-  }
-}
-
-function validateTarballSecurityContract(root, target) {
-  requireIncludes(root, target, "scripts/verify-rules-package.js", [
-    "validateTarEntryName",
-    "validateTarEntryTypes",
-    "verifyExtractedTree",
-    "path traversal",
-    "symbolic link",
-    "hard link",
-  ], "tarball.security");
-  requireIncludes(root, target, "scripts/verify-rules-tarball-security.js", [
-    "traversal",
-    "absolute",
-    "backslash-traversal",
-    "symlink",
-    "hardlink",
-  ], "tarball.security");
-}
-
-function validateRegistries(root, target) {
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const capabilities = manifest.capabilities || {};
-
-  for (const flag of [
-    "rulePackageConsistencyCheck",
-    "technologyStackProfile",
-    "thinkphpDeepProfile",
-    "htmlToClientMigrationPreparation",
-    "namedInitializationTaskTree",
-    "taskArchiveTransactions",
-    "codeGraphRequiredInitialization",
-    "roleExecutionVisibility",
-    "codexRoleSessionOrchestration",
-  ]) {
-    addCheck(target, "registry.manifest", "manifest", capabilities[flag] === true ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", `capabilities.${flag}`, true, capabilities[flag], "Manifest capability registered.", "Register the missing capability.");
-  }
-
-  const manifestPaths = {
-    "frameworkProfile.directory": manifest.frameworkProfile && manifest.frameworkProfile.directory,
-    "frameworkProfile.markdown": manifest.frameworkProfile && manifest.frameworkProfile.markdown,
-    "frameworkProfile.json": manifest.frameworkProfile && manifest.frameworkProfile.json,
-    "htmlMigration.directory": manifest.htmlMigration && manifest.htmlMigration.directory,
-    "htmlMigration.scope": manifest.htmlMigration && manifest.htmlMigration.scope,
-    "htmlMigration.compatibilityMatrix": manifest.htmlMigration && manifest.htmlMigration.compatibilityMatrix,
-    "htmlMigration.routeMap": manifest.htmlMigration && manifest.htmlMigration.routeMap,
-    "htmlMigration.assetMap": manifest.htmlMigration && manifest.htmlMigration.assetMap,
-    "htmlMigration.pilotPlan": manifest.htmlMigration && manifest.htmlMigration.pilotPlan,
-    "htmlMigration.openIssues": manifest.htmlMigration && manifest.htmlMigration.openIssues,
-    "htmlMigration.recordJson": manifest.htmlMigration && manifest.htmlMigration.recordJson,
-  };
-  const expectedPaths = {
-    "frameworkProfile.directory": "xinyun-ai/frameworks/",
-    "frameworkProfile.markdown": "xinyun-ai/frameworks/framework-profile.md",
-    "frameworkProfile.json": "xinyun-ai/frameworks/framework-profile.json",
-    "htmlMigration.directory": "xinyun-ai/migrations/html-to-client/",
-    "htmlMigration.scope": "xinyun-ai/migrations/html-to-client/migration-scope.md",
-    "htmlMigration.compatibilityMatrix": "xinyun-ai/migrations/html-to-client/compatibility-matrix.md",
-    "htmlMigration.routeMap": "xinyun-ai/migrations/html-to-client/route-map.md",
-    "htmlMigration.assetMap": "xinyun-ai/migrations/html-to-client/asset-map.md",
-    "htmlMigration.pilotPlan": "xinyun-ai/migrations/html-to-client/pilot-plan.md",
-    "htmlMigration.openIssues": "xinyun-ai/migrations/html-to-client/open-issues.md",
-    "htmlMigration.recordJson": "xinyun-ai/migrations/html-to-client/migration-record.json",
-  };
-
-  for (const [field, expected] of Object.entries(expectedPaths)) {
-    addCheck(target, "registry.manifest", "manifest", manifestPaths[field] === expected ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", field, expected, manifestPaths[field], "Manifest path registration checked.", "Register the expected path.");
-  }
-
-  addCheck(target, "registry.project-index", "project-index", projectIndex.frameworkProfile && projectIndex.frameworkProfile.enabled === true ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "frameworkProfile.enabled", true, projectIndex.frameworkProfile && projectIndex.frameworkProfile.enabled, "Project-index framework profile registered.", "Register frameworkProfile.");
-  addCheck(target, "registry.project-index", "project-index", projectIndex.htmlMigration && projectIndex.htmlMigration.enabled === true ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "htmlMigration.enabled", true, projectIndex.htmlMigration && projectIndex.htmlMigration.enabled, "Project-index HTML migration registered.", "Register htmlMigration.");
-  addCheck(target, "registry.manifest", "manifest", manifest.taskTree && manifest.taskTree.enabled === true ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "taskTree.enabled", true, manifest.taskTree && manifest.taskTree.enabled, "Manifest task tree registered.", "Register taskTree.");
-  addCheck(target, "registry.project-index", "project-index", projectIndex.taskTree && projectIndex.taskTree.enabled === true ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "taskTree.enabled", true, projectIndex.taskTree && projectIndex.taskTree.enabled, "Project-index task tree registered.", "Register taskTree.");
-  addCheck(target, "registry.manifest", "manifest", manifest.codeGraphRequired && manifest.codeGraphRequired.required === true ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "codeGraphRequired.required", true, manifest.codeGraphRequired && manifest.codeGraphRequired.required, "Manifest CodeGraph required record registered.", "Register codeGraphRequired.");
-  addCheck(target, "registry.project-index", "project-index", projectIndex.codeGraphRequired && projectIndex.codeGraphRequired.required === true ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "codeGraphRequired.required", true, projectIndex.codeGraphRequired && projectIndex.codeGraphRequired.required, "Project-index CodeGraph required record registered.", "Register codeGraphRequired.");
-
-  const v171TaskingPaths = {
-    "tasking.taskIndex": manifest.tasking && manifest.tasking.taskIndex,
-    "tasking.archiveDirectory": manifest.tasking && manifest.tasking.archiveDirectory,
-    "tasking.archiveTransactionsDirectory": manifest.tasking && manifest.tasking.archiveTransactionsDirectory,
-    "tasking.archiveTempDirectory": manifest.tasking && manifest.tasking.archiveTempDirectory,
-    "tasking.roleExecutionDirectory": manifest.tasking && manifest.tasking.roleExecutionDirectory,
-  };
-  const v171ExpectedPaths = {
-    "tasking.taskIndex": "xinyun-ai/tasks/task-index.json",
-    "tasking.archiveDirectory": "xinyun-ai/tasks/archive/",
-    "tasking.archiveTransactionsDirectory": "xinyun-ai/tasks/.archive-transactions/",
-    "tasking.archiveTempDirectory": "xinyun-ai/tasks/.archive-tmp/",
-    "tasking.roleExecutionDirectory": "xinyun-ai/tasks/role-execution/",
-  };
-  for (const [field, expected] of Object.entries(v171ExpectedPaths)) {
-    addCheck(target, "registry.manifest", "manifest", v171TaskingPaths[field] === expected ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", field, expected, v171TaskingPaths[field], "Manifest v1.7.1 tasking path checked.", "Register v1.7.1 tasking path.");
-  }
-  addCheck(target, "registry.manifest", "manifest", manifest.taskTree && manifest.taskTree.roleExecutionPathPattern === "xinyun-ai/tasks/role-execution/<roleTaskId>.md" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "taskTree.roleExecutionPathPattern", "xinyun-ai/tasks/role-execution/<roleTaskId>.md", manifest.taskTree && manifest.taskTree.roleExecutionPathPattern, "Manifest role execution path checked.", "Register the role execution path.");
-  addCheck(target, "registry.project-index", "project-index", projectIndex.taskTree && projectIndex.taskTree.roleExecutionPathPattern === "xinyun-ai/tasks/role-execution/<roleTaskId>.md" ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "taskTree.roleExecutionPathPattern", "xinyun-ai/tasks/role-execution/<roleTaskId>.md", projectIndex.taskTree && projectIndex.taskTree.roleExecutionPathPattern, "Project-index role execution path checked.", "Register the role execution path.");
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.bindings", "xinyun-ai/sessions/role-session-bindings.json", manifest.roleSessions && manifest.roleSessions.bindings, "Manifest role session bindings checked.", "Register roleSessions.bindings.");
-  addCheck(target, "registry.project-index", "project-index", projectIndex.roleSessions && projectIndex.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json" ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "roleSessions.bindings", "xinyun-ai/sessions/role-session-bindings.json", projectIndex.roleSessions && projectIndex.roleSessions.bindings, "Project-index role session bindings checked.", "Register roleSessions.bindings.");
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.provider === "codex" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.provider", "codex", manifest.roleSessions && manifest.roleSessions.provider, "Manifest role session provider checked.", "Register roleSessions.provider.");
-}
-
-function validateV17Content(root, target) {
-  const common = [
-    "verify:rules",
-    "--source-root",
-    "--tarball",
-    "--json",
-    "source-only version-plans",
-    "frameworkStatus=confirmed/inferred/not-found/unknown/detected-unsupported",
-    "moduleStatus=loaded/not-loaded",
-    "activation=loaded/not-loaded",
-    "v1.7 深化预算：5 层目录、80 个关键文件、100 条证据",
-    "framework-profile.md",
-    "framework-profile.json",
-    "decision=direct-map/rewrite-required/backend-required/unsupported/pending/unknown",
-    "status=planned/assessing/partial/blocked/paused/completed",
-    "coverage=full/partial/unknown",
-    "scope/unverifiedScope",
-    "pauseReason=out-of-scope",
-  ];
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["当前规则版本：`1.9.0`", ...common]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/core-rules.template.md", common);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/AGENTS.template.md", ["v1.7 规则包一致性、技术栈 profile 与 HTML 迁移准备", "`verify:rules` 只读", "ThinkPHP 不得误套其他项目", ...common.slice(5)]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/current-task.template.md", ["verify:rules.status", "language", "runtime", "platform", "framework", ...common.slice(5)]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/project-guide.template.md", ["verify:rules", "language / runtime / platform / framework", "migration-record.json", ...common.slice(5)]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/project-check.template.md", ["`npm run verify:rules`", "source-only version-plans", "migration-record.json", ...common.slice(5)]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.7 初始化补齐", "xinyun-ai/frameworks/", "xinyun-ai/migrations/html-to-client/", "`verify:rules` 为只读校验"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7 规则包升级检查", "test-scenarios/v1.7.1-scenarios.md", "source-only version-plans", "frameworkProfile", "htmlMigration"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7 按需目录补齐", "framework-profile.json", "migration-record.json", "首次极速初始化不强制创建上述目录"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/session-workbench.md", ["v1.7 任务单补充字段", "verifyRulesStatus", "migrationStatus", "HTML 迁移只允许评估和单页面 / 区块试点计划"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/frameworks/README.md", ["v1.7 技术栈 profile", "coverage=partial", ...common.slice(5, 10)]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/frameworks/backend/php/thinkphp.md", ["v1.7 ThinkPHP 深化模块", "frameworkStatus=confirmed", "moduleStatus=loaded", "Controller", "Request/Validate", "Service", "Model/ORM", "Middleware", "队列"]);
-  requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-133", "当前观察场景为 106 和 119", "## 55. verify:rules 正常通过", "## 69. verify:rules JSON schema 和重复执行"]);
-  requireIncludes(root, target, "test-scenarios/review-template.md", ["55. verify:rules 正常通过", "69. verify:rules JSON schema 和重复执行", "97. Skill 触发测试"]);
-  requireIncludes(root, target, "test-scenarios/README.md", ["npm run verify:rules", "v1.7.2-scenarios.md", "v1.7.3-scenarios.md", "v1.10.2-scenarios.md", "当前版本必测场景为 `scenarios.md` 的 1-133", "106 和 119 为观察项"]);
-}
-
-function validateV18Content(root, target) {
-  const required = [
-    ["init/xinyun-ai-init/rules/coordination.md", ["factStatus", "changeStatus", "conflictStatus", "coordinationTransactionId", "status-inconsistent"]],
-    ["init/xinyun-ai-init/rules/skills.md", ["assignmentStatus", "usageStatus", "failureReason", "nextAction", "availabilityStatus", "trustStatus"]],
-    ["init/xinyun-ai-init/rules/frontend-audit.md", ["audit-only", "refactor-now", "unverifiedScope", "coverage"]],
-    ["init/xinyun-ai-init/rules/temporary-sessions.md", ["occupancyStatus=unknown", "releaseAudit", "最多同时占用 3 个运行额度"]],
-    ["test-scenarios/v1.8.0-scenarios.md", ["v1.8-01", "v1.8-08", "forbiddenOperations", "sensitiveScan"]],
-    ["init/xinyun-ai-init/README.md", ["v1.8", "assignmentStatus", "occupancyStatus=unknown", "coordinationTransactionId"]],
-    ["init/xinyun-ai-init/templates/core-rules.template.md", ["factStatus", "changeStatus", "conflictStatus", "assignmentStatus", "usageStatus"]],
-    ["init/xinyun-ai-init/templates/AGENTS.template.md", ["assignments.json.status", "assignmentStatus", "occupancyStatus"]],
-  ];
-  for (const [file, snippets] of required) requireIncludes(root, target, file, snippets, "v1.8.content");
-
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const capabilities = manifest.capabilities || {};
-  for (const flag of ["sharedProjectFactsCoordination", "skillRouting", "frontendCouplingAudit", "temporaryProgrammerSessions"]) {
-    addCheck(target, "v1.8.capability", "manifest", capabilities[flag] === true ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", `capabilities.${flag}`, true, capabilities[flag], "v1.8 capability checked.", "Register the v1.8 capability.");
-  }
-  const pathPairs = [
-    [manifest.coordination, "directory", "xinyun-ai/coordination/"],
-    [manifest.skills, "directory", "xinyun-ai/skills/"],
-    [manifest.frontendAudit, "directory", "xinyun-ai/frontend-audits/"],
-    [manifest.temporarySessions, "directory", "xinyun-ai/sessions/temporary/"],
-    [projectIndex.coordination, "directory", "xinyun-ai/coordination/"],
-    [projectIndex.skills, "directory", "xinyun-ai/skills/"],
-    [projectIndex.frontendAudit, "directory", "xinyun-ai/frontend-audits/"],
-    [projectIndex.temporarySessions, "directory", "xinyun-ai/sessions/temporary/"],
-  ];
-  for (const [object, field, expected] of pathPairs) addCheck(target, "v1.8.path", "registry", object && object[field] === expected ? "pass" : "fail", "manifest/project-index templates", field, expected, object && object[field], "v1.8 path registration checked.", "Register the v1.8 control path.");
-
-  const assignments = readJson(root, "init/xinyun-ai-init/templates/skills-assignments.template.json");
-  const transaction = readJson(root, "init/xinyun-ai-init/templates/coordination-transaction.template.json");
-  const frontend = readJson(root, "init/xinyun-ai-init/templates/frontend-audit.template.json");
-  const temporary = readJson(root, "init/xinyun-ai-init/templates/temporary-session.template.json");
-  addCheck(target, "v1.8.assignment.field", "schema", assignments.recordContract.requiredFields.includes("assignmentStatus") ? "pass" : "fail", "skills-assignments.template.json", "assignmentStatus", true, assignments.recordContract.requiredFields.includes("assignmentStatus"), "assignmentStatus field checked.", "Use assignmentStatus.");
-  addCheck(target, "v1.8.assignment.no-status-alias", "schema", !JSON.stringify(assignments).includes("assignments.json.status") ? "pass" : "fail", "skills-assignments.template.json", null, "no stale status alias", JSON.stringify(assignments), "No stale assignment status alias checked.", "Remove assignments.json.status.");
-  addCheck(target, "v1.8.transaction.phase", "schema", transaction.phaseEnum.includes("recovery-required") && transaction.phaseEnum.includes("blocked") ? "pass" : "fail", "coordination-transaction.template.json", "phaseEnum", "recovery-required,blocked", transaction.phaseEnum, "Transaction phases checked.", "Restore transaction phase enum.");
-  addCheck(target, "v1.8.frontend.audit-only", "schema", frontend.decision === "audit-only" && frontend.coverage === "unknown" ? "pass" : "fail", "frontend-audit.template.json", "decision/coverage", "audit-only/unknown", `${frontend.decision}/${frontend.coverage}`, "Frontend audit default checked.", "Use read-only audit defaults.");
-  addCheck(target, "v1.8.temporary.capacity", "schema", temporary.maxConcurrent === 3 && temporary.occupancyStatusEnum.includes("unknown") ? "pass" : "fail", "temporary-session.template.json", "maxConcurrent/occupancyStatusEnum", "3/unknown", `${temporary.maxConcurrent}/${temporary.occupancyStatusEnum}`, "Temporary session capacity checked.", "Restore capacity and unknown occupancy.");
-}
-
-function validateV171Content(root, target) {
-  const snippets = [
-    "项目初始化：<项目显示名>",
-    "xinyun-ai/tasks/task-index.json",
-    "xinyun-ai/tasks/.archive-transactions/<archiveTransactionId>.json",
-    "taskKind=initialization-record",
-    "taskKind=role-execution",
-    "executionEligible",
-    "status=idle",
-    "taskId=null",
-    "title=暂无待执行任务",
-    "codeGraphRecordId",
-    "codegraph init -i",
-    "permission-denied",
-    "degradationAuthorized",
-  ];
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["v1.7.1 初始化主任务、角色子任务与归档", "v1.7.1 CodeGraph 必备初始化与状态闭环", ...snippets]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/core-rules.template.md", ["v1.7.1 初始化主任务、角色子任务与归档", "v1.7.1 CodeGraph 必备初始化与状态闭环", ...snippets]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/AGENTS.template.md", ["v1.7.1 初始化任务树与 CodeGraph", ...snippets.slice(0, 11)]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/current-task.template.md", ["初始化任务树", "任务归档", "CodeGraph 必备初始化", "currentTaskIdleStatus：status=idle, taskId=null, title=暂无待执行任务"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/project-guide.template.md", ["v1.7.1 初始化任务树、归档与 CodeGraph"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/project-check.template.md", ["v1.7.1 检查", "CodeGraph 失败矩阵"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.7.1 初始化任务树与 CodeGraph"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.1 升级补齐"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.1 任务树、归档与 CodeGraph 目录"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.1 任务单补充字段"]);
-  requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-133", "当前观察场景为 106 和 119", "## 71. v1.7.1 主任务命名", "## 87. v1.7.1 普通咨询和版本回归"]);
-  requireIncludes(root, target, "test-scenarios/v1.7.1-scenarios.md", ["主任务命名", "CodeGraph记录与失败矩阵", "普通咨询边界"]);
-}
-
-function validateV172Content(root, target) {
-  const snippets = [
-    "v1.7.2 初始化后角色任务可见性与执行任务分离",
-    "xinyun-ai/tasks/role-execution/<roleTaskId>.md",
-    "taskKind=initialization-main",
-    "taskKind=initialization-record",
-    "taskKind=role-execution",
-    "activeTaskIds",
-    "executableTaskIds",
-    "priority ASC",
-    "JCS-SHA-256",
-    "blockedReason=write-failed",
-  ];
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["当前规则版本：`1.9.0`", ...snippets]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/core-rules.template.md", snippets);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.7.2 角色后续任务可见性", "role-execution"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.2 升级补建角色后续任务", "write-failed"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.2 任务可见性目录", "role-execution"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.2 角色执行任务补充字段", "roleExecutionResult"]);
-  requireIncludes(root, target, "test-scenarios/v1.7.2-scenarios.md", ["固定优先级", "幂等补建", "补建失败和索引恢复"]);
-}
-
-function validateV173Content(root, target) {
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const taskIndex = readJson(root, "init/xinyun-ai-init/templates/task-index.template.json");
-  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
-  const assignments = readJson(root, "init/xinyun-ai-init/templates/team/assignments.json");
-  const binding = readJson(root, "init/xinyun-ai-init/templates/role-session-binding.template.json");
-  const statusEnum = ["pending", "creating", "created", "onboarding", "ready", "blocked", "failed", "closed"];
-
-  addCheck(target, "registry.manifest", "manifest", manifest.capabilities && manifest.capabilities.codexRoleSessionOrchestration === true ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "capabilities.codexRoleSessionOrchestration", true, manifest.capabilities && manifest.capabilities.codexRoleSessionOrchestration, "Codex role session capability checked.", "Register codexRoleSessionOrchestration.");
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.provider === "codex" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.provider", "codex", manifest.roleSessions && manifest.roleSessions.provider, "Role session provider checked.", "Set provider=codex.");
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.targetVersion === VERSION ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.targetVersion", VERSION, manifest.roleSessions && manifest.roleSessions.targetVersion, "Role session target version checked.", "Set targetVersion.");
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.bindings === "xinyun-ai/sessions/role-session-bindings.json" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.bindings", "xinyun-ai/sessions/role-session-bindings.json", manifest.roleSessions && manifest.roleSessions.bindings, "Role session binding path checked.", "Register binding path.");
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.directory === "xinyun-ai/sessions/roles/" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.directory", "xinyun-ai/sessions/roles/", manifest.roleSessions && manifest.roleSessions.directory, "Role session directory checked.", "Register role session directory.");
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && JSON.stringify(manifest.roleSessions.statusEnum) === JSON.stringify(statusEnum) ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.statusEnum", statusEnum, manifest.roleSessions && manifest.roleSessions.statusEnum, "Role session status enum checked.", "Use the fixed v1.7.3 enum.");
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.idempotency && JSON.stringify(manifest.roleSessions.idempotency.legacyCreationIndexFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]) ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.idempotency.legacyCreationIndexFields", ["taskId", "roleId", "provider", "targetVersion"], manifest.roleSessions && manifest.roleSessions.idempotency && manifest.roleSessions.idempotency.legacyCreationIndexFields, "Legacy role session creation index checked.", "Keep legacy fields compatibility-only.");
-  const v19SessionKeyFields = ["projectRootHash", "workspaceScope", "repositoryScopeHash", "workstream", "taskId", "roleId", "provider", "targetVersion"];
-  addCheck(target, "registry.manifest", "manifest", manifest.roleSessions && manifest.roleSessions.idempotency && JSON.stringify(manifest.roleSessions.idempotency.keyFields) === JSON.stringify(v19SessionKeyFields) && manifest.roleSessions.idempotency.algorithm === "RFC8785-JCS-SHA-256" ? "pass" : "fail", "init/xinyun-ai-init/templates/manifest.template.json", "roleSessions.idempotency.keyFields", v19SessionKeyFields, manifest.roleSessions && manifest.roleSessions.idempotency && manifest.roleSessions.idempotency.keyFields, "v1.9 project-isolated role session reuse key checked.", "Use the full v1.9 identity key.");
-  addCheck(target, "registry.project-index", "project-index", projectIndex.roleSessions && projectIndex.roleSessions.provider === "codex" ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "roleSessions.provider", "codex", projectIndex.roleSessions && projectIndex.roleSessions.provider, "Project-index role session provider checked.", "Set provider=codex.");
-  addCheck(target, "registry.project-index", "project-index", projectIndex.roleSessions && Array.isArray(projectIndex.roleSessions.records) ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "roleSessions.records", "array", projectIndex.roleSessions && projectIndex.roleSessions.records, "Project-index role session records checked.", "Add records array.");
-  addCheck(target, "registry.project-index", "project-index", projectIndex.roleSessions && projectIndex.roleSessions.idempotency && JSON.stringify(projectIndex.roleSessions.idempotency.keyFields) === JSON.stringify(v19SessionKeyFields) && projectIndex.roleSessions.idempotency.algorithm === "RFC8785-JCS-SHA-256" ? "pass" : "fail", "init/xinyun-ai-init/templates/project-index.template.json", "roleSessions.idempotency.keyFields", v19SessionKeyFields, projectIndex.roleSessions && projectIndex.roleSessions.idempotency && projectIndex.roleSessions.idempotency.keyFields, "Project-index v1.9 reuse key checked.", "Register the full v1.9 identity key.");
-  addCheck(target, "registry.task-index", "task-index", Array.isArray(taskIndex.roleSessionBindingIds) ? "pass" : "fail", "init/xinyun-ai-init/templates/task-index.template.json", "roleSessionBindingIds", "array", taskIndex.roleSessionBindingIds, "Task-index binding IDs checked.", "Add roleSessionBindingIds.");
-  addCheck(target, "registry.task-index", "task-index", Array.isArray(taskIndex.roleSessionBindings) ? "pass" : "fail", "init/xinyun-ai-init/templates/task-index.template.json", "roleSessionBindings", "array", taskIndex.roleSessionBindings, "Task-index bindings checked.", "Add roleSessionBindings.");
-  addCheck(target, "registry.task-index", "task-index", taskIndex.roleSessionIdempotency && JSON.stringify(taskIndex.roleSessionIdempotency.legacyCreationIndexFields) === JSON.stringify(["taskId", "roleId", "provider", "targetVersion"]) ? "pass" : "fail", "init/xinyun-ai-init/templates/task-index.template.json", "roleSessionIdempotency.legacyCreationIndexFields", ["taskId", "roleId", "provider", "targetVersion"], taskIndex.roleSessionIdempotency && taskIndex.roleSessionIdempotency.legacyCreationIndexFields, "Legacy task-index creation index checked.", "Keep legacy fields compatibility-only.");
-  addCheck(target, "registry.task-index", "task-index", taskIndex.roleSessionIdempotency && JSON.stringify(taskIndex.roleSessionIdempotency.keyFields) === JSON.stringify(v19SessionKeyFields) && taskIndex.roleSessionIdempotency.algorithm === "RFC8785-JCS-SHA-256" ? "pass" : "fail", "init/xinyun-ai-init/templates/task-index.template.json", "roleSessionIdempotency.keyFields", v19SessionKeyFields, taskIndex.roleSessionIdempotency && taskIndex.roleSessionIdempotency.keyFields, "Task-index v1.9 reuse key checked.", "Use the full v1.9 identity key.");
-  addCheck(target, "registry.init-result", "init-result", initResult.roleSessions && initResult.roleSessions.provider === "codex" ? "pass" : "fail", "init/xinyun-ai-init/templates/init-result.template.json", "roleSessions.provider", "codex", initResult.roleSessions && initResult.roleSessions.provider, "Init-result role session provider checked.", "Set provider=codex.");
-  addCheck(target, "registry.assignments", "assignments", assignments.recordContract && assignments.recordContract.requiredFields.includes("sessionStatus") ? "pass" : "fail", "init/xinyun-ai-init/templates/team/assignments.json", "recordContract.requiredFields", "sessionStatus", assignments.recordContract && assignments.recordContract.requiredFields, "Assignments sessionStatus checked.", "Add sessionStatus to assignments contract.");
-  addCheck(target, "registry.binding-template", "template", binding.provider === "codex" && binding.targetVersion === VERSION && binding.degradation && binding.degradation.fakeSessionIdProhibited === true ? "pass" : "fail", "init/xinyun-ai-init/templates/role-session-binding.template.json", "provider/targetVersion/degradation", "codex / version / fakeSessionIdProhibited", binding, "Role session binding template checked.", "Fix binding template.");
-
-  const snippets = [
-    "v1.7.3 Codex 角色会话自动创建与绑定",
-    "provider=codex",
-    "sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed",
-    "projectRootHash, workspaceScope, repositoryScopeHash, workstream, taskId, roleId, provider, targetVersion",
-    "RFC8785-JCS-SHA-256",
-    "不得伪造 sessionId",
-    "local-degraded-no-fake-session-id",
-    "created-but-writeback-failed",
-    "创建成功不等于业务代码修改授权",
-  ];
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["当前规则版本：`1.9.0`", ...snippets]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/core-rules.template.md", snippets);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/AGENTS.template.md", ["v1.7.3 Codex 角色会话自动创建与绑定", "provider=codex", "local-degraded-no-fake-session-id"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.7.3 Codex 角色会话初始化", "provider=codex", "local-degraded-no-fake-session-id"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.7.3 升级创建和绑定真实角色会话", "created-but-writeback-failed", "不得伪造 sessionId"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/session-workbench.md", ["v1.7.3 角色会话交接字段", "roleSessionIdempotency", "不得伪造 sessionId"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/directory-self-completion.md", ["v1.7.3 角色会话绑定目录", "xinyun-ai/sessions/role-session-bindings.json", "local-degraded-no-fake-session-id"]);
-  requireIncludes(root, target, "test-scenarios/v1.7.3-scenarios.md", ["五个真实角色子会话创建", "会话绑定回写一致性", "onboarding 只读边界", "宿主不支持时本地降级"]);
-  requireIncludes(root, target, "test-scenarios/scenarios.md", ["当前必测场景为 1-133", "当前观察场景为 106 和 119", "## 89. v1.7.3 Codex 真实角色会话创建", "## 96. v1.7.3 普通咨询边界"]);
-}
-
-function validateV19Content(root, target) {
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const identity = readJson(root, "init/xinyun-ai-init/templates/project-identity.template.json");
-  const candidates = readJson(root, "init/xinyun-ai-init/templates/session-candidates.template.json");
-  const landscape = readJson(root, "init/xinyun-ai-init/templates/technical-landscape.template.json");
-  const requirement = readJson(root, "init/xinyun-ai-init/templates/requirement-packet.template.json");
-  const impact = readJson(root, "init/xinyun-ai-init/templates/technical-impact-packet.template.json");
-  const database = readJson(root, "init/xinyun-ai-init/templates/database-authorization.template.json");
-  const behaviorEvidence = readJson(root, "test-scenarios/v1.9.0-behavior-evidence.json");
-  const v19Paths = {
-    projectIdentity: "xinyun-ai/project-identity.json",
-    sessionCandidates: "xinyun-ai/sessions/session-candidates.json",
-    technicalLandscape: "xinyun-ai/technical-landscape.json",
-    requirementPacket: "xinyun-ai/packets/requirement-packet.json",
-    technicalImpactPacket: "xinyun-ai/packets/technical-impact-packet.json",
-    databaseAuthorization: "xinyun-ai/database/authorization.json",
-  };
-
-  for (const [key, expected] of Object.entries(v19Paths)) {
-    const actual = manifest.v19 && manifest.v19[key];
-    const indexActual = projectIndex.v19 && projectIndex.v19[key];
-    addCheck(target, "v1.9.path", "registry", actual === expected && indexActual === expected ? "pass" : "fail", "manifest/project-index.v19", key, expected, { manifest: actual, projectIndex: indexActual }, "v1.9 path registration checked.", "Register the v1.9 control path.");
-  }
-  addCheck(target, "v1.9.capability", "manifest", manifest.capabilities && manifest.capabilities.projectSessionIsolation === true ? "pass" : "fail", "manifest.template.json", "capabilities.projectSessionIsolation", true, manifest.capabilities && manifest.capabilities.projectSessionIsolation, "Project session isolation checked.", "Register v1.9 capability.");
-  addCheck(target, "v1.9.identity", "schema", identity.normalization && identity.normalization.unicodeNormalization === "NFC" && identity.normalization.resolutionMode === "unknown" ? "pass" : "fail", "project-identity.template.json", "normalization", "NFC/unknown", identity.normalization, "Project identity normalization checked.", "Restore identity normalization.");
-  addCheck(target, "v1.9.session-status", "schema", candidates.sessionMatchStatusEnum && !candidates.sessionMatchStatusEnum.includes("current-match") && candidates.sessionMatchStatusEnum.includes("reusable") ? "pass" : "fail", "session-candidates.template.json", "sessionMatchStatusEnum", "no current-match/reusable", candidates.sessionMatchStatusEnum, "Session candidate status checked.", "Restore session candidate states.");
-  addCheck(target, "v1.9.session-evidence", "schema", candidates.candidateRequiredFields && ["hostRecoveryAvailable", "hostRecoveryEvidence"].every((field) => candidates.candidateRequiredFields.includes(field)) ? "pass" : "fail", "session-candidates.template.json", "candidateRequiredFields", "recovery evidence", candidates.candidateRequiredFields, "Session recovery evidence checked.", "Add recovery evidence fields.");
-  addCheck(target, "v1.9.landscape-ready", "schema", landscape.status === "not-started" && landscape.coverage.coverageStatus === "unknown" && Array.isArray(landscape.unverifiedScope) ? "pass" : "fail", "technical-landscape.template.json", "status/coverage", "not-started/unknown", landscape, "Technical landscape gate checked.", "Restore conservative landscape defaults.");
-  const packetFields = ["schemaVersion", "packetId", "requirementId", "taskId", "projectRootHash", "version", "status", "content", "evidence", "sourceRevision", "contentHash", "createdAt", "updatedAt"];
-  addCheck(target, "v1.9.packet-schema", "schema", [requirement, impact].every((packet) => packetFields.every((field) => Object.prototype.hasOwnProperty.call(packet, field))) ? "pass" : "fail", "packet templates", "minimum fields", packetFields, "requirement/impact packet fields", "Packet schema checked.", "Restore packet fields.");
-  addCheck(target, "v1.9.database-local-files-read-only", "schema", database.databaseAccessMode === "local-files-read-only" && database.legacyDatabaseAccessMode === "sql-only" && database.sqlExecutionMode === "generate-only" && database.executionStatus === "needs-confirmation" && database.connectionStatus === "not-requested" && database.connected === false && database.sqlExecuted === false ? "pass" : "fail", "database-authorization.template.json", "databaseAccessMode/executionStatus/connectionStatus", "local-files-read-only/needs-confirmation/not-requested", `${database.databaseAccessMode}/${database.executionStatus}/${database.connectionStatus}`, "Database local-file read-only default checked.", "Restore local-file read-only defaults.");
-  const localDatabaseScope = ["*.sql", "*.ddl", "*.schema", "*.migration", "database/", "migrations/", "schema/", "models/"];
-  addCheck(target, "v1.9.database-local-file-policy", "schema", JSON.stringify(database.localDatabaseFileScope) === JSON.stringify(localDatabaseScope) && database.localFileReadPolicy === "database-related-task-only" && database.forbiddenOperations.includes("database-connection") && database.forbiddenOperations.includes("sql-execution") ? "pass" : "fail", "database-authorization.template.json", "localDatabaseFileScope/localFileReadPolicy/forbiddenOperations", "database-related local text files only", database, "Database local-file scope and forbidden operations checked.", "Restrict database access to local files and prohibit connections/execution.");
-  addCheck(target, "v1.9.database-policy-across-control-plane", "schema", manifest.v19 && projectIndex.v19 && manifest.v19.databaseAccessModeDefault === "local-files-read-only" && projectIndex.v19.databaseAccessModeDefault === manifest.v19.databaseAccessModeDefault && manifest.v19.legacyDatabaseAccessMode === "sql-only" && projectIndex.v19.legacyDatabaseAccessMode === "sql-only" && manifest.v19.sqlExecutionMode === "generate-only" && projectIndex.v19.sqlExecutionMode === "generate-only" ? "pass" : "fail", "manifest/project-index.v19", "database policy", "local-files-read-only/generate-only/sql-only legacy", {manifest: manifest.v19, projectIndex: projectIndex.v19}, "Database policy is consistent across v1.9 registries.", "Synchronize the v1.9 database policy.");
-  addCheck(target, "v1.9.database-permissions", "schema", ["connectionStatus", "queryAuthorization", "schemaChangeAuthorization", "dataMutationAuthorization"].every((field) => Object.prototype.hasOwnProperty.call(database, field)) ? "pass" : "fail", "database-authorization.template.json", "authorization fields", "four independent fields", database, "Database authorization separation checked.", "Separate database permissions.");
-  const authorizationStates = ["not-requested", "requested", "authorized", "denied", "expired", "failed", "unknown"];
-  addCheck(target, "v1.9.database-authorization-state-enum", "schema", database.authorizationStatusEnum && JSON.stringify(database.authorizationStatusEnum) === JSON.stringify(authorizationStates) && ["connectionStatusEnum", "queryAuthorizationEnum", "schemaChangeAuthorizationEnum", "dataMutationAuthorizationEnum"].every((field) => JSON.stringify(database[field]) === JSON.stringify(authorizationStates)) ? "pass" : "fail", "database-authorization.template.json", "authorizationStatusEnum", authorizationStates, database.authorizationStatusEnum, "Database authorization status enum checked.", "Fix authorization status enums.");
-  addCheck(target, "v1.9.database-authorization-transitions", "schema", database.authorizationTransitionRules && database.authorizationTransitionRules.authorized.includes("expired") && database.invalidatingChanges.includes("statement-hash-changed") && database.invalidatingAction.includes("needs-confirmation") ? "pass" : "fail", "database-authorization.template.json", "authorizationTransitionRules", "authorized->expired and needs-confirmation", database.authorizationTransitionRules, "Authorization invalidation transitions checked.", "Add expiration and re-confirmation rules.");
-  addCheck(target, "v1.9.database-redaction-enum", "schema", JSON.stringify(database.redactionStatusEnum) === JSON.stringify(["verified", "unverified", "failed"]) && database.redactionStatus === "verified" ? "pass" : "fail", "database-authorization.template.json", "redactionStatusEnum", ["verified", "unverified", "failed"], database.redactionStatusEnum, "Redaction status checked.", "Fix redaction status enum.");
-  addCheck(target, "v1.9.database-execution-state-enum", "schema", JSON.stringify(database.executionStatusEnum) === JSON.stringify(["not-run", "needs-confirmation", "authorized", "executed", "failed", "unknown"]) ? "pass" : "fail", "database-authorization.template.json", "executionStatusEnum", "needs-confirmation", database.executionStatusEnum, "Execution state checked.", "Fix execution status enum.");
-  addCheck(target, "v1.9.behavior-evidence", "behavior", behaviorEvidence.evidenceType === "behavioral-replay" && behaviorEvidence.realAiSessionVerified === false && Array.isArray(behaviorEvidence.scenarios) && JSON.stringify(behaviorEvidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(Array.from({ length: 12 }, (_, index) => 107 + index)) && behaviorEvidence.scenarios.every((scenario) => scenario.result === "replay-passed" && scenario.sensitiveScan && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "test-scenarios/v1.9.0-behavior-evidence.json", "scenarios", "107-118 replay-passed without sensitive matches", behaviorEvidence.scenarios, "v1.9 controlled behavior replay evidence checked.", "Provide complete auditable v1.9 evidence.");
-  const crossProjectScenario = Array.isArray(behaviorEvidence.scenarios) ? behaviorEvidence.scenarios.find((scenario) => scenario.scenarioId === 109) : null;
-  addCheck(target, "v1.9.cross-project-negative", "behavior", crossProjectScenario && crossProjectScenario.input.includes("projectRootHash") && crossProjectScenario.actualOutput.includes("other-project") && crossProjectScenario.afterSnapshot.includes("createdCount=0") ? "pass" : "fail", "test-scenarios/v1.9.0-behavior-evidence.json", "scenario 109", "different project rejected without duplicate", crossProjectScenario, "Cross-project reuse negative evidence checked.", "Add the v1.9 cross-project negative evidence.");
-  validateV19SessionReuseText(root, target);
-  addCheck(target, "v1.9.statement-hash", "schema", database.statementHashAlgorithm === "RFC8785-JCS-SHA-256" && database.statementHashCanonicalInput.includes("parameters") && database.statementHashCanonicalInput.includes("targetEnvironment") ? "pass" : "fail", "database-authorization.template.json", "statementHash", "RFC8785-JCS-SHA-256", database.statementHashAlgorithm, "Statement hash checked.", "Restore statement hash canonical input.");
-  requireIncludes(root, target, "test-scenarios/v1.9.0-scenarios.md", ["## 107.", "## 113.", "## 115.", "## 118.", "sql-only", "packet-stale", "行为证据"], "v1.9.content");
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["v1.9", "lexical-fallback", "sessionMatchStatus", "technical-landscape", "packet-stale", "databaseAccessMode=local-files-read-only", "legacyDatabaseAccessMode=sql-only", "statementHash"], "v1.9.content");
-}
-
-function validateV110Content(root, target) {
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const host = readJson(root, "init/xinyun-ai-init/templates/host-capabilities.template.json");
-  const projectStatus = readJson(root, "init/xinyun-ai-init/templates/project-status.template.json");
-  const preflight = readJson(root, "init/xinyun-ai-init/templates/preflight-report.template.json");
-  const onboarding = readJson(root, "init/xinyun-ai-init/templates/onboarding-report.template.json");
-  const baseline = readJson(root, "init/xinyun-ai-init/templates/takeover-baseline.template.json");
-  const controlPlane = readJson(root, "init/xinyun-ai-init/templates/control-plane-index.template.json");
-  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
-  const currentTask = readText(root, "init/xinyun-ai-init/templates/current-task.template.md");
-  const requiredFiles = [
-    "init/xinyun-ai-init/templates/host-capabilities.template.json",
-    "init/xinyun-ai-init/templates/project-status.template.json",
-    "init/xinyun-ai-init/templates/preflight-report.template.json",
-    "init/xinyun-ai-init/templates/onboarding-report.template.json",
-    "init/xinyun-ai-init/templates/takeover-baseline.template.json",
-    "init/xinyun-ai-init/templates/control-plane-index.template.json",
-    "init/xinyun-ai-init/templates/init-result.template.json",
-    "init/xinyun-ai-init/templates/current-task.template.md",
-    "test-scenarios/v1.10.0-scenarios.md",
-    "test-scenarios/v1.10.0-behavior-evidence.json",
-    "scripts/collect-v1.10-evidence.js",
-    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/README.md",
-    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/before/project-status.json",
-    "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/after/project-status.json",
-  ];
-  for (const file of requiredFiles) requireFile(root, target, file);
-
-  const paths = {
-    projectStatus: "xinyun-ai/project-status.json",
-    preflightReport: "xinyun-ai/preflight-report.json",
-    onboardingReport: "xinyun-ai/onboarding-report.json",
-    hostCapabilities: "xinyun-ai/host-capabilities.json",
-    takeoverBaseline: "xinyun-ai/index/takeover-baseline.json",
-    controlPlaneIndex: "xinyun-ai/index/control-plane-index.json",
-  };
-  for (const [key, expected] of Object.entries(paths)) {
-    addCheck(target, "v1.10.path", "registry", manifest.v110 && manifest.v110[key] === expected ? "pass" : "fail", "manifest.template.json", `v110.${key}`, expected, manifest.v110 && manifest.v110[key], "v1.10 manifest path checked.", "Register the v1.10 control path.");
-    addCheck(target, "v1.10.path", "registry", projectIndex.v110 && projectIndex.v110[key] === expected ? "pass" : "fail", "project-index.template.json", `v110.${key}`, expected, projectIndex.v110 && projectIndex.v110[key], "v1.10 project-index path checked.", "Register the v1.10 control path.");
-  }
-  const statuses = ["not-started", "initializing", "partial", "blocked", "ready"];
-  addCheck(target, "v1.10.status-gate", "schema", manifest.v110 && JSON.stringify(manifest.v110.projectStatusEnum) === JSON.stringify(statuses) && manifest.v110.requiredRoleSessionBlockedReason === "required-role-session-not-created" ? "pass" : "fail", "manifest.template.json", "v110", "project status gate", manifest.v110, "v1.10 status gate checked.", "Restore the v1.10 status gate.");
-  addCheck(target, "v1.10.host-capabilities", "schema", host.status === "unknown" && host.readyPolicy && host.readyPolicy.fakeSessionIdProhibited === true && host.readyPolicy.requiredCapabilities.length === 6 ? "pass" : "fail", "host-capabilities.template.json", "readyPolicy", "unknown and six required capabilities", host, "Host capability gate checked.", "Restore conservative host capability defaults.");
-  addCheck(target, "v1.10.preflight", "schema", preflight.result === "not-run" && preflight.codeGraph.command === "codegraph init -i" && Array.isArray(preflight.unverifiedScope) ? "pass" : "fail", "preflight-report.template.json", "result/codeGraph/unverifiedScope", "not-run/codegraph init -i", preflight, "Preflight contract checked.", "Restore preflight fields.");
-  addCheck(target, "v1.10.onboarding", "schema", onboarding.executionEligible === false && onboarding.roleSessionContract.realSessionIdRequired === true && onboarding.requiredRoleIds.length === 5 ? "pass" : "fail", "onboarding-report.template.json", "roleSessionContract", "real sessions required", onboarding.roleSessionContract, "Onboarding role gate checked.", "Restore onboarding role gate.");
-  addCheck(target, "v1.10.baseline", "schema", baseline.hashAlgorithm === "SHA-256" && baseline.git.writePerformed === false && baseline.businessFiles && baseline.controlFiles ? "pass" : "fail", "takeover-baseline.template.json", "hashAlgorithm/git/businessFiles/controlFiles", "SHA-256/read-only", baseline, "Takeover baseline checked.", "Restore takeover baseline fields.");
-  addCheck(target, "v1.10.control-plane", "schema", controlPlane.atomicWriteContract && controlPlane.atomicWriteContract.tempFileRequired === true && controlPlane.atomicWriteContract.fsyncBeforeRename === true && controlPlane.idempotency.duplicatePolicy === "reuse-and-audit" ? "pass" : "fail", "control-plane-index.template.json", "atomicWriteContract/idempotency", "atomic and idempotent", controlPlane, "Control plane contract checked.", "Restore atomic and idempotent write rules.");
-  addCheck(target, "v1.10.database-default", "schema", preflight.database && preflight.database.authorization === "not-requested" && preflight.database.executionStatus === "needs-confirmation" && preflight.database.redactionStatus === "verified" && preflight.database.connected === false ? "pass" : "fail", "preflight-report.template.json", "database", "not-requested/needs-confirmation/verified/not connected", preflight.database, "Database default authorization checked.", "Restore SQL-only database defaults.");
-  addCheck(target, "v1.10.init-result-database-default", "schema", initResult.databaseAuthorization && initResult.databaseAuthorization.authorization === "not-requested" && initResult.databaseAuthorization.executionStatus === "needs-confirmation" && initResult.databaseAuthorization.redactionStatus === "verified" && initResult.databaseAuthorization.connected === false ? "pass" : "fail", "init-result.template.json", "databaseAuthorization", "not-requested/needs-confirmation/verified/not connected", initResult.databaseAuthorization, "Init-result database default checked.", "Restore init-result database defaults.");
-  addCheck(target, "v1.10.database-defaults-across-control-plane", "schema", manifest.v110 && projectIndex.v110 && JSON.stringify(manifest.v110.databaseDefault) === JSON.stringify(projectIndex.v110.databaseDefault) && JSON.stringify(manifest.v110.databaseDefault) === JSON.stringify({ authorization: "not-requested", executionStatus: "needs-confirmation", redactionStatus: "verified" }) && preflight.database && preflight.database.authorization === manifest.v110.databaseDefault.authorization && preflight.database.executionStatus === manifest.v110.databaseDefault.executionStatus && preflight.database.redactionStatus === manifest.v110.databaseDefault.redactionStatus && initResult.databaseAuthorization && initResult.databaseAuthorization.authorization === manifest.v110.databaseDefault.authorization && initResult.databaseAuthorization.executionStatus === manifest.v110.databaseDefault.executionStatus && initResult.databaseAuthorization.redactionStatus === manifest.v110.databaseDefault.redactionStatus ? "pass" : "fail", "manifest/project-index/preflight/init-result", "database defaults", "not-requested/needs-confirmation/verified", { manifest: manifest.v110 && manifest.v110.databaseDefault, projectIndex: projectIndex.v110 && projectIndex.v110.databaseDefault, preflight: preflight.database, initResult: initResult.databaseAuthorization }, "Database defaults are consistent across the control plane.", "Synchronize database defaults across control files.");
-  const localDatabaseScope = ["*.sql", "*.ddl", "*.schema", "*.migration", "database/", "migrations/", "schema/", "models/"];
-  addCheck(target, "v1.10.database-local-file-policy-across-control-plane", "schema", preflight.database && initResult.databaseAuthorization && preflight.database.databaseAccessMode === "local-files-read-only" && initResult.databaseAuthorization.databaseAccessMode === "local-files-read-only" && preflight.database.legacyDatabaseAccessMode === "sql-only" && initResult.databaseAuthorization.legacyDatabaseAccessMode === "sql-only" && preflight.database.sqlExecutionMode === "generate-only" && initResult.databaseAuthorization.sqlExecutionMode === "generate-only" && preflight.database.connected === false && initResult.databaseAuthorization.connected === false && preflight.database.sqlExecuted === false && initResult.databaseAuthorization.sqlExecuted === false && JSON.stringify(preflight.database.localDatabaseFileScope) === JSON.stringify(localDatabaseScope) && JSON.stringify(initResult.databaseAuthorization.localDatabaseFileScope) === JSON.stringify(localDatabaseScope) ? "pass" : "fail", "preflight/init-result", "database policy", "local-files-read-only/generate-only/not connected", {preflight: preflight.database, initResult: initResult.databaseAuthorization}, "Database policy is consistent across preflight and init-result.", "Synchronize local-file database policy across control files.");
-  validateV110CodeGraphContract(root, target, manifest, projectIndex, preflight, onboarding, initResult, currentTask);
-  validateV110HostCapabilityContract(target, host, projectStatus);
-  const capabilityStatuses = ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"];
-  const capabilityStatusText = capabilityStatuses.join(" / ");
-  const projectGuide = readText(root, "init/xinyun-ai-init/templates/project-guide.template.md");
-  addCheck(target, "v1.10.capability-enum-across-templates", "schema", projectIndex.tasking && projectIndex.tasking.stateMachine && JSON.stringify(projectIndex.tasking.stateMachine.capabilityStatus) === JSON.stringify(capabilityStatuses) && currentTask.includes(capabilityStatusText) && projectGuide.includes(capabilityStatusText) ? "pass" : "fail", "project-index/current-task/project-guide", "capabilityStatus", capabilityStatuses, { projectIndex: projectIndex.tasking && projectIndex.tasking.stateMachine && projectIndex.tasking.stateMachine.capabilityStatus, currentTask: capabilityStatusText, projectGuide: capabilityStatusText }, "Capability status enum is consistent across templates.", "Synchronize the complete capability status enum.");
-
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["v1.10", "projectStatus=not-started/initializing/partial/blocked/ready", "required-role-session-not-created", "codegraph init -i", "authorization=not-requested", "executionStatus=needs-confirmation", "redactionStatus=verified"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/core-rules.template.md", ["v1.10", "projectStatus", "executionEligible", "required-role-session-not-created", "不得伪造 sessionId"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.10", "preflight", "projectStatus", "codegraph init -i", "required-role-session-not-created"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/upgrade-rules.md", ["v1.10", "projectStatus", "required-role-session-not-created"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/session-workbench.md", ["v1.10", "真实 sessionId", "不得伪造 sessionId", "executionEligible"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/current-task.template.md", ["statusSource：xinyun-ai/manifest.json", "sourceRevision：", "indexScope：", "unindexedScope：", "available / available-with-dependency / unavailable / permission-denied / unknown / not-checked / not-verified / failed"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/templates/project-guide.template.md", ["available / available-with-dependency / unavailable / permission-denied / unknown / not-checked / not-verified / failed"]);
-  requireIncludes(root, target, "test-scenarios/v1.10.0-scenarios.md", ["## 120.", "## 123.", "## 123-A.", "## 121-A.", "## 121-B.", "## 128.", "## 128-A.", "## 130.", "## 133.", "projectStatus", "not-verified", "available-with-dependency", "状态源缺失"]);
-  requireIncludes(root, target, "scripts/collect-v1.10-evidence.js", ["codex-host-returned", "real-role-session-host-export-missing", "realAiSessionVerified", "recordHash"]);
-
-  const report = readJson(root, "test-scenarios/v1.10.0-behavior-evidence.json");
-  const scenarios = Array.isArray(report.scenarios) ? report.scenarios : [];
-  const expectedIds = Array.from({ length: 14 }, (_, index) => 120 + index);
-  addCheck(target, "v1.10.behavior-evidence", "behavior", report.evidenceType === "not-verified" && report.executionMode === "host-capability-unavailable" && report.realAiSessionVerified === false && report.publishBlocked === true && report.fixturePath === "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture" && existsFile(root, "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/before/project-status.json") && existsFile(root, "test-scenarios/fixtures/v1.10.0-takeover-gate-fixture/after/project-status.json") && JSON.stringify(scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(expectedIds) && scenarios.every((scenario) => scenario.result === "not-verified" && scenario.sessionId === null && scenario.sensitiveScan && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "test-scenarios/v1.10.0-behavior-evidence.json", "scenarios", "120-133 not-verified with persistent fixture boundary", report, "v1.10 evidence source and no-fabrication policy checked.", "Provide truthful real-session evidence or keep the release blocked.");
-}
-
-function validateV110CodeGraphContract(root, target, manifest, projectIndex, preflight, onboarding, initResult, currentTask) {
-  const source = manifest.codeGraphRequired;
-  const summaryFields = ["codeGraphRecordId", "statusSource", "status", "sourceRevision", "indexScope", "unindexedScope", "failureReason", "evidence"];
-  const sameSummary = (record) => record && summaryFields.every((field) => JSON.stringify(record[field]) === JSON.stringify(source[field]));
-  addCheck(target, "v1.10.codegraph-source", "schema", source && source.statusSource === "xinyun-ai/manifest.json" && source.required === true ? "pass" : "fail", "manifest.template.json", "codeGraphRequired.statusSource", "xinyun-ai/manifest.json", source, "Manifest is the CodeGraph status source.", "Use manifest.codeGraphRequired as the only status source.");
-  addCheck(target, "v1.10.codegraph-project-index", "schema", sameSummary(projectIndex.codeGraphRequired) ? "pass" : "fail", "project-index.template.json", "codeGraphRequired", "manifest summary", projectIndex.codeGraphRequired, "Project-index mirrors the manifest CodeGraph summary.", "Synchronize project-index CodeGraph fields.");
-  addCheck(target, "v1.10.codegraph-preflight", "schema", sameSummary(preflight.codeGraph) ? "pass" : "fail", "preflight-report.template.json", "codeGraph", "manifest summary", preflight.codeGraph, "Preflight mirrors the manifest CodeGraph summary.", "Synchronize preflight CodeGraph fields.");
-  addCheck(target, "v1.10.codegraph-onboarding", "schema", onboarding.codeGraphRecordId === source.codeGraphRecordId && sameSummary({ ...onboarding.codeGraph, codeGraphRecordId: onboarding.codeGraphRecordId }) ? "pass" : "fail", "onboarding-report.template.json", "codeGraph", "manifest summary", onboarding.codeGraph, "Onboarding mirrors the manifest CodeGraph summary.", "Synchronize onboarding CodeGraph fields.");
-  addCheck(target, "v1.10.codegraph-init-result", "schema", sameSummary(initResult.codeGraph) ? "pass" : "fail", "init-result.template.json", "codeGraph", "manifest summary", initResult.codeGraph, "Init-result mirrors the manifest CodeGraph summary.", "Synchronize init-result CodeGraph fields.");
-  addCheck(target, "v1.10.codegraph-fields", "schema", ["sourceRevision", "indexScope", "unindexedScope", "failureReason", "evidence"].every((field) => Object.prototype.hasOwnProperty.call(source, field)) ? "pass" : "fail", "manifest.template.json", "codeGraphRequired", "range and failure evidence fields", source, "CodeGraph range and failure fields checked.", "Add CodeGraph range and failure evidence fields.");
-  addCheck(target, "v1.10.codegraph-current-task", "schema", ["statusSource：xinyun-ai/manifest.json", "sourceRevision：", "indexScope：", "unindexedScope：", "failureReason："].every((field) => currentTask.includes(field)) ? "pass" : "fail", "current-task.template.md", "CodeGraph summary", "status source and range fields", currentTask, "Current-task CodeGraph summary checked.", "Add CodeGraph summary fields to current-task.");
-}
-
-function validateV110HostCapabilityContract(target, host, projectStatus) {
-  const requiredFields = ["capabilityId", "detectionMethod", "status", "evidence", "dependencyStatus", "fallbackPlan", "usedTools", "unusedTools", "unverifiedScope", "failureReason", "checkedAt"];
-  const statuses = ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"];
-  const dependencyStatuses = ["not-required", "required", "authorized", "not-authorized", "unknown"];
-  const capabilities = host && host.capabilities ? Object.values(host.capabilities) : [];
-  addCheck(target, "v1.10.host-status-enum", "schema", JSON.stringify(host.statusEnum) === JSON.stringify(statuses) ? "pass" : "fail", "host-capabilities.template.json", "statusEnum", statuses, host.statusEnum, "Host capability statuses checked.", "Restore the complete host capability status enum.");
-  addCheck(target, "v1.10.host-dependency-enum", "schema", JSON.stringify(host.dependencyStatusEnum) === JSON.stringify(dependencyStatuses) ? "pass" : "fail", "host-capabilities.template.json", "dependencyStatusEnum", dependencyStatuses, host.dependencyStatusEnum, "Dependency statuses checked.", "Restore the dependency status enum.");
-  addCheck(target, "v1.10.host-minimum-fields", "schema", capabilities.length === 6 && capabilities.every((capability) => requiredFields.every((field) => Object.prototype.hasOwnProperty.call(capability, field))) ? "pass" : "fail", "host-capabilities.template.json", "capabilities", requiredFields, capabilities, "Host capability minimum fields checked.", "Add the host capability evidence fields.");
-  addCheck(target, "v1.10.host-dependency-gate", "schema", host.readyPolicy && host.readyPolicy.availableWithDependencyBlocksReady === true && host.readyPolicy.notVerifiedBlocksReady === true && host.readyPolicy.blockedStatuses.includes("not-verified") && host.readyPolicy.dependencyRequiredStatus === "authorized" && host.readyPolicy.fakeSessionIdProhibited === true ? "pass" : "fail", "host-capabilities.template.json", "readyPolicy", "dependency authorization and not-verified required", host.readyPolicy, "Dependency authorization gate checked.", "Block ready until dependencies are authorized and verified.");
-  const blockedStatuses = ["unknown", "unavailable", "permission-denied", "failed", "available-with-dependency", "not-checked", "not-verified"];
-  addCheck(target, "v1.10.project-ready-capability-gate", "schema", projectStatus.readyPolicy && blockedStatuses.every((status) => projectStatus.readyPolicy.requiredCapabilityBlockedStatuses.includes(status)) && projectStatus.readyPolicy.availableWithDependencyRequires.includes("dependencyStatus=authorized") ? "pass" : "fail", "project-status.template.json", "readyPolicy", "dependency and unknown statuses block ready", projectStatus.readyPolicy, "Project ready capability gate checked.", "Block ready for unavailable or unverified capabilities.");
-}
-
-function validateV111Content(root, target) {
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const fixedMaterialization = readJson(root, "init/xinyun-ai-init/templates/fixed-materialization.template.json");
-  const bootstrapSnapshot = readJson(root, "init/xinyun-ai-init/templates/bootstrap-snapshot.template.json");
-  const stages = readJson(root, "init/xinyun-ai-init/templates/initialization-stages.template.json");
-  const cache = readJson(root, "init/xinyun-ai-init/templates/initialization-cache.template.json");
-  const parallelism = readJson(root, "init/xinyun-ai-init/templates/parallelism.template.json");
-  const stageIds = ["preflight", "fixed-materialization", "control-plane", "codegraph", "bootstrap-snapshot", "role-sessions", "onboarding", "final-gate"];
-  const stageStatuses = ["pending", "running", "completed", "skipped", "partial", "blocked", "recovery-required"];
-  const paths = {
-    fixedMaterialization: "xinyun-ai/fixed-materialization.json",
-    initializationStages: "xinyun-ai/initialization-stages.json",
-    bootstrapSnapshot: "xinyun-ai/bootstrap-snapshot.json",
-    initializationCache: "xinyun-ai/index/initialization-cache.json",
-    parallelism: "xinyun-ai/sessions/parallelism.json",
-  };
-  for (const [key, expected] of Object.entries(paths)) {
-    addCheck(target, "v1.11.registry." + key, "registry", manifest.v111 && projectIndex.v111 && manifest.v111[key] === expected && projectIndex.v111[key] === expected ? "pass" : "fail", "manifest/project-index.v111", key, expected, {manifest: manifest.v111 && manifest.v111[key], projectIndex: projectIndex.v111 && projectIndex.v111[key]}, "v1.11 path registration checked.", "Register the v1.11 control path.");
-  }
-  addCheck(target, "v1.11.stage-schema", "schema", JSON.stringify(stages.stages.map((stage) => stage.stageId)) === JSON.stringify(stageIds) && JSON.stringify(stages.stageStatusEnum) === JSON.stringify(stageStatuses) ? "pass" : "fail", "initialization-stages.template.json", "stages/status", stageIds, stages, "Initialization stage order and states checked.", "Restore the fixed v1.11 stage contract.");
-  addCheck(target, "v1.11.fixed-materialization", "schema", fixedMaterialization.targetVersion === "1.11.0" && fixedMaterialization.statusEnum.includes("conflict-pending") && fixedMaterialization.atomicWrite && fixedMaterialization.atomicWrite.rename === true ? "pass" : "fail", "fixed-materialization.template.json", "conflict/atomic write", "conflict-pending and atomic rename", fixedMaterialization, "Fixed materialization contract checked.", "Block overwrite and use atomic writes.");
-  addCheck(target, "v1.11.snapshot-cache", "schema", bootstrapSnapshot.scanBudget.maxDepth === 3 && Array.isArray(bootstrapSnapshot.unverifiedScope) && cache.ttlHours === 24 && cache.keyAlgorithm === "RFC8785-JCS-SHA-256" ? "pass" : "fail", "bootstrap-snapshot/initialization-cache", "budget/cache", "depth=3/ttl=24/JCS", {snapshot: bootstrapSnapshot, cache}, "Bounded snapshot and cache contract checked.", "Restore bounded cache behavior.");
-  addCheck(target, "v1.11.parallelism", "schema", parallelism.maxConcurrency === 3 && parallelism.requestedConcurrency === 3 && manifest.v111.defaultRoleConcurrency === 3 ? "pass" : "fail", "parallelism.template.json", "maxConcurrency", 3, parallelism, "Parallel role-session limit checked.", "Keep the default concurrency at three.");
-  requireFile(root, target, "init/xinyun-ai-init/rules/v1.10.2-contract.md");
-  requireFile(root, target, "init/xinyun-ai-init/rules/v1.11.0-acceleration.md");
-  requireIncludes(root, target, "init/xinyun-ai-init/README.md", ["v1.10.2", "v1.11.0", "最多 3 个角色并发"]);
-  requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.10.2 and v1.11.0 gate", "fixed-materialization", "bootstrap-snapshot"]);
-}
-
-function validateV112Content(root, target) {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.12.0-recovery.md",
-    "init/xinyun-ai-init/templates/host-preflight.template.json",
-    "init/xinyun-ai-init/templates/initialization-recovery.template.json",
-    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
-    "init/xinyun-ai-init/templates/shared-project-snapshot.template.json",
-    "init/xinyun-ai-init/templates/initialization-timing.template.json",
-    "test-scenarios/v1.12.0-scenarios.md",
-    "test-scenarios/v1.12.0-behavior-evidence.json",
-  ];
-  for (const file of requiredFiles) requireFile(root, target, file);
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const host = readJson(root, "init/xinyun-ai-init/templates/host-preflight.template.json");
-  const recovery = readJson(root, "init/xinyun-ai-init/templates/initialization-recovery.template.json");
-  const binding = readJson(root, "init/xinyun-ai-init/templates/manual-session-binding.template.json");
-  const snapshot = readJson(root, "init/xinyun-ai-init/templates/shared-project-snapshot.template.json");
-  const timing = readJson(root, "init/xinyun-ai-init/templates/initialization-timing.template.json");
-  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
-  const behaviorEvidence = readJson(root, "test-scenarios/v1.12.0-behavior-evidence.json");
-  const paths = ["hostPreflight", "initializationRecovery", "manualSessionBindings", "sharedProjectSnapshot", "initializationTiming"];
-  const statuses = ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"];
-  addCheck(target, "v1.12.registration", "registry", manifest.v112 && projectIndex.v112 && paths.every((key) => manifest.v112[key] === projectIndex.v112[key]) ? "pass" : "fail", "manifest/project-index.v112", "paths", "same", {manifest: manifest.v112, projectIndex: projectIndex.v112}, "v1.12 paths are registered consistently.", "Synchronize v1.12 paths.");
-  addCheck(target, "v1.12.capabilities", "manifest", manifest.capabilities && ["hostPreflightRecovery", "manualRoleSessionBinding", "codeGraphIncrementalReuse", "sharedProjectSnapshot", "initializationTiming"].every((key) => manifest.capabilities[key] === true) ? "pass" : "fail", "manifest.template.json", "capabilities", "v1.12 flags", manifest.capabilities, "v1.12 capabilities are registered.", "Register all v1.12 capabilities.");
-  addCheck(target, "v1.12.host-enum", "schema", JSON.stringify(host.capabilityStatusEnum) === JSON.stringify(statuses) && JSON.stringify(manifest.v112.hostCapabilityStatusEnum) === JSON.stringify(statuses) && JSON.stringify(projectIndex.v112.hostCapabilityStatusEnum) === JSON.stringify(statuses) ? "pass" : "fail", "host-preflight/manifest/project-index", "capabilityStatusEnum", statuses, {host: host.capabilityStatusEnum, manifest: manifest.v112 && manifest.v112.hostCapabilityStatusEnum, projectIndex: projectIndex.v112 && projectIndex.v112.hostCapabilityStatusEnum}, "Host capability enum is shared.", "Use one complete host capability enum.");
-  addCheck(target, "v1.12.host-fields", "schema", host.requiredCapabilities.length === 8 && Object.values(host.capabilities).length === 8 && Object.values(host.capabilities).every((capability) => ["capabilityId", "detectionMethod", "status", "evidence", "dependencyStatus", "fallbackPlan", "usedTools", "unusedTools", "unverifiedScope", "failureReason", "checkedAt"].every((field) => Object.prototype.hasOwnProperty.call(capability, field))) ? "pass" : "fail", "host-preflight.template.json", "capabilities", "eight records with minimum fields", host.capabilities, "Host preflight evidence fields are complete.", "Complete host preflight evidence fields.");
-  addCheck(target, "v1.12.ready-gate", "schema", host.readyGate && host.readyGate.allRequiredCapabilitiesPassed === false && host.readyGate.unknownBlocksReady === true && host.readyGate.fakeSessionIdProhibited === true ? "pass" : "fail", "host-preflight.template.json", "readyGate", "conservative default", host.readyGate, "Preflight cannot default to ready.", "Block ready until host evidence is verified.");
-  addCheck(target, "v1.12.recovery", "schema", recovery.reuseContract && recovery.reuseContract.reuseTaskId === true && recovery.reuseContract.reuseRoleTaskIds === true && recovery.reuseContract.incrementAttempt === true && recovery.reuseContract.createDuplicateTasks === false && recovery.atomicWrite && recovery.atomicWrite.rename === true ? "pass" : "fail", "initialization-recovery.template.json", "reuse/atomicWrite", "reuse IDs, no duplicate, atomic", recovery, "Recovery contract checked.", "Restore task reuse and atomic recovery.");
-  addCheck(target, "v1.12.manual-binding", "schema", binding.sessionId === null && binding.executionEligible === false && binding.fakeSessionIdProhibited === true && binding.evidenceRequiredFields.includes("interactionHash") ? "pass" : "fail", "manual-session-binding.template.json", "binding", "real evidence required", binding, "Manual binding gate checked.", "Require real session evidence.");
-  addCheck(target, "v1.12.snapshot", "schema", snapshot.generatedOnce === false && snapshot.snapshotStatus === "not-checked" && snapshot.refreshTriggers.length >= 4 ? "pass" : "fail", "shared-project-snapshot.template.json", "reuse", "conservative snapshot default", snapshot, "Shared snapshot reuse contract checked.", "Record snapshot refresh triggers.");
-  addCheck(target, "v1.12.timing", "schema", timing.stageRequiredFields.length === 10 && timing.attempt === 1 && timing.stages.length === 0 ? "pass" : "fail", "initialization-timing.template.json", "stageRequiredFields", "10 fields", timing.stageRequiredFields, "Stage timing contract checked.", "Record all timing fields.");
-  addCheck(target, "v1.12.init-result", "schema", initResult.targetVersion === VERSION && initResult.v112 && paths.every((key) => initResult.v112[`${key}Path`] === manifest.v112[key]) && initResult.v112.duplicateTasksCreated === 0 ? "pass" : "fail", "init-result.template.json", "v112", "registered links and zero duplicates", initResult.v112, "Init-result v1.12 links checked.", "Synchronize init-result links.");
-  const scenarioText = readText(root, "test-scenarios/v1.12.0-scenarios.md");
-  addCheck(target, "v1.12.scenarios", "scenario", Array.from({ length: 12 }, (_, index) => 134 + index).every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("sessionId=null") ? "pass" : "fail", "test-scenarios/v1.12.0-scenarios.md", "scenarioIds", "134-145", "scanned", "v1.12 scenarios are registered.", "Add all v1.12 scenarios.");
-  const behaviorIds = Array.from({ length: 12 }, (_, index) => 134 + index);
-  addCheck(target, "v1.12.behavior-evidence", "evidence", behaviorEvidence.evidenceType === "not-verified" && behaviorEvidence.realAiSessionVerified === false && behaviorEvidence.publishBlocked === true && JSON.stringify(behaviorEvidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(behaviorIds) && behaviorEvidence.scenarios.every((scenario) => scenario.sessionId === null && scenario.result === "not-verified" && scenario.actualOutput === "not-verified" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "v1.12.0-behavior-evidence.json", "realAiSessionVerified/result", "not-verified with null session IDs", behaviorEvidence, "Unavailable host evidence is honest and complete.", "Do not fabricate real session evidence.");
-  addCheck(target, "v1.12.rule", "content", readText(root, "init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("available-with-dependency") && readText(root, "init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("sessionId=null") ? "pass" : "fail", "v1.12.0-recovery.md", "contract", "preflight and no fake IDs", "scanned", "v1.12 rule contract checked.", "Restore the v1.12 rule contract.");
-}
-
-function validateV1121Content(root, target) {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md",
-    "init/xinyun-ai-init/templates/provider-session-binding.template.json",
-    "test-scenarios/v1.12.1-scenarios.md",
-    "test-scenarios/v1.12.1-behavior-evidence.json",
-  ];
-  for (const file of requiredFiles) requireFile(root, target, file);
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
-  const binding = readJson(root, "init/xinyun-ai-init/templates/provider-session-binding.template.json");
-  const manual = readJson(root, "init/xinyun-ai-init/templates/manual-session-binding.template.json");
-  const evidence = readJson(root, "test-scenarios/v1.12.1-behavior-evidence.json");
-  const statuses = ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"];
-  const modes = ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"];
-  const identityFields = ["providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "source", "verifiedAt", "evidenceHash"];
-  const interactionFields = ["sendReceipt", "receiveReceipt", "transcriptHash", "messageCount", "recordedAt", "evidenceHash"];
-  const scenarioIds = Array.from({ length: 13 }, (_, index) => 146 + index);
-  addCheck(target, "v1.12.1.registry", "registry", manifest.v1121 && projectIndex.v1121 && manifest.v1121.providerBindings === projectIndex.v1121.providerBindings && manifest.v1121.providerBindingTemplate === projectIndex.v1121.providerBindingTemplate ? "pass" : "fail", "manifest/project-index.v1121", "provider binding paths", "same", {manifest: manifest.v1121, projectIndex: projectIndex.v1121}, "Provider binding paths are consistent.", "Synchronize provider binding paths.");
-  addCheck(target, "v1.12.1.schema", "schema", statuses.every((status) => binding.bindingStatusEnum.includes(status)) && modes.includes(binding.bindingMode) && identityFields.every((field) => Object.prototype.hasOwnProperty.call(binding.identityEvidence, field)) && interactionFields.every((field) => Object.prototype.hasOwnProperty.call(binding.interactionEvidence, field)) ? "pass" : "fail", "provider-session-binding.template.json", "binding schema", "complete", binding, "Provider binding schema is complete.", "Complete provider binding evidence fields and enums.");
-  addCheck(target, "v1.12.1.gated-default", "schema", binding.providerSessionId === null && binding.bindingStatus === "pending" && binding.fakeProviderSessionIdProhibited === true && manual.providerSessionId === null && manual.executionEligible === false ? "pass" : "fail", "provider/manual binding templates", "default gate", "null/pending/false", {binding: binding, manual: manual}, "Bindings default to a conservative state.", "Do not fabricate provider session IDs.");
-  addCheck(target, "v1.12.1.init-result", "registry", initResult.v1121 && initResult.v1121.providerSessionBindingsPath === manifest.v1121.providerBindings && initResult.v1121.providerSessionBindingTemplate === manifest.v1121.providerBindingTemplate ? "pass" : "fail", "init-result.template.json", "v1121", "registered provider binding links", initResult.v1121, "Init result links provider binding.", "Synchronize init-result provider links.");
-  const scenarioText = readText(root, "test-scenarios/v1.12.1-scenarios.md");
-  addCheck(target, "v1.12.1.scenarios", "scenario", scenarioIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("providerSessionId=null") ? "pass" : "fail", "v1.12.1-scenarios.md", "scenarioIds", "146-158", "scanned", "Provider binding scenarios are registered.", "Add all provider binding scenarios.");
-  addCheck(target, "v1.12.1.behavior-evidence", "evidence", evidence.version === "1.12.1" && evidence.evidenceType === "not-verified" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && JSON.stringify(evidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(scenarioIds) && evidence.scenarios.every((scenario) => scenario.providerSessionId === null && scenario.sessionId === null && scenario.result === "not-verified" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "v1.12.1-behavior-evidence.json", "realAiSessionVerified/result", "not-verified with null IDs", evidence, "Unavailable host evidence is honest.", "Do not fabricate real provider session evidence.");
-  const ruleText = readText(root, "init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md");
-  addCheck(target, "v1.12.1.rule", "content", ["providerSessionId", "canonical", "identityEvidence", "interactionEvidence", "exclusive occupancy", "Do not fabricate"].every((term) => ruleText.includes(term)) ? "pass" : "fail", "v1.12.1-provider-session-binding.md", "contract", "canonical identity and evidence gate", "scanned", "Provider binding rule is present.", "Restore provider binding rules.");
-}
-
-function validateV113Content(root, target) {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.13.0-host-adapter.md",
-    "init/xinyun-ai-init/templates/provider-adapter.template.json",
-    "init/xinyun-ai-init/templates/manual-session-recovery.template.json",
-    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
-    "init/xinyun-ai-init/templates/initialization-change-report.template.json",
-    "test-scenarios/v1.13.0-scenarios.md",
-    "test-scenarios/v1.13.0-behavior-evidence.json",
-  ];
-  for (const file of requiredFiles) requireFile(root, target, file);
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
-  const adapter = readJson(root, "init/xinyun-ai-init/templates/provider-adapter.template.json");
-  const recovery = readJson(root, "init/xinyun-ai-init/templates/manual-session-recovery.template.json");
-  const changeReport = readJson(root, "init/xinyun-ai-init/templates/initialization-change-report.template.json");
-  const roleBinding = readJson(root, "init/xinyun-ai-init/templates/role-session-binding.template.json");
-  const providerBinding = readJson(root, "init/xinyun-ai-init/templates/provider-session-binding.template.json");
-  const manualBinding = readJson(root, "init/xinyun-ai-init/templates/manual-session-binding.template.json");
-  const taskIndex = readJson(root, "init/xinyun-ai-init/templates/task-index.template.json");
-  const assignments = readJson(root, "init/xinyun-ai-init/templates/team/assignments.json");
-  const evidence = readJson(root, "test-scenarios/v1.13.0-behavior-evidence.json");
-  const paths = ["providerAdapter", "manualSessionRecovery", "initializationChangeReport"];
-  addCheck(target, "v1.13.registry", "registry", manifest.v113 && projectIndex.v113 && paths.every((key) => manifest.v113[key] === projectIndex.v113[key]) && initResult.v113 && paths.every((key) => initResult.v113[`${key}Path`] === manifest.v113[key]) ? "pass" : "fail", "manifest/project-index/init-result.v113", "paths", "same", {manifest: manifest.v113, projectIndex: projectIndex.v113, initResult: initResult.v113}, "v1.13 paths are registered consistently.", "Synchronize v1.13 control paths.");
-  const userDecisions = ["manual-create", "defer", "redetect"];
-  const decisionStatuses = ["not-asked", "awaiting-user", "selected", "processing", "completed", "blocked"];
-  const decisionFields = ["decisionId", "userDecision", "actor", "source", "requiredRoleCount", "createdRoleCount", "remainingRoleIds", "decisionStatus", "decidedAt", "nextAction", "decisionEvidence"];
-  const decisionEvidenceFields = ["decisionId", "userDecision", "actor", "source", "decidedAt", "inputHash", "evidenceHash"];
-  const recoveryText = readText(root, "init/xinyun-ai-init/templates/manual-session-recovery.template.json");
-  addCheck(target, "v1.13.decision-contract", "schema", manifest.v113 && projectIndex.v113 && JSON.stringify(manifest.v113.userDecisionEnum) === JSON.stringify(userDecisions) && JSON.stringify(projectIndex.v113.userDecisionEnum) === JSON.stringify(userDecisions) && JSON.stringify(manifest.v113.decisionStatusEnum) === JSON.stringify(decisionStatuses) && JSON.stringify(projectIndex.v113.decisionStatusEnum) === JSON.stringify(decisionStatuses) && decisionFields.every((field) => Object.prototype.hasOwnProperty.call(recovery, field) || Object.prototype.hasOwnProperty.call(initResult.v113, field)) && decisionEvidenceFields.every((field) => recovery.decisionEvidenceSchema.includes(field) && initResult.v113.decisionEvidenceSchema.includes(field)) && (recoveryText.match(/^  \"nextAction\"/gm) || []).length === 1 && recovery.requiredRoleCount === 5 && recovery.createdRoleCount === 0 && recovery.decisionStatus === "not-asked" ? "pass" : "fail", "manual recovery/registries", "one-time user decision gate", "scanned", "User decision identity and recovery defaults checked.", "Keep decision fields synchronized and conservative.");
-  const sessionCreationStatuses = ["not-asked", "awaiting-confirmation", "approved", "deferred", "processing", "completed", "blocked"];
-  addCheck(target, "v1.13.task-first-session-gate", "schema", recovery.taskFirstSessionGate && initResult.v113.sessionCreationDecision && recovery.taskFirstSessionGate.mainTaskCreatedBeforeSession === true && recovery.taskFirstSessionGate.roleTasksCreatedBeforeSession === true && recovery.taskFirstSessionGate.sessionIdsRemainNullUntilDecision === true && JSON.stringify(recovery.taskFirstSessionGate.sessionCreationDecisionEnum) === JSON.stringify(["create-and-onboard", "defer"]) && JSON.stringify(recovery.taskFirstSessionGate.sessionCreationStatusEnum) === JSON.stringify(sessionCreationStatuses) && JSON.stringify(initResult.v113.sessionCreationDecision.statusEnum) === JSON.stringify(sessionCreationStatuses) && initResult.v113.sessionCreationDecision.status === "awaiting-confirmation" ? "pass" : "fail", "manual recovery/init-result", "tasks first, user approval before sessions", "scanned", "Task-first session confirmation gate checked.", "Preserve tasks before session creation and require explicit confirmation.");
-  const capabilities = ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "querySessionStatus", "recoverSession", "closeSession", "controlFileReadWrite"];
-  addCheck(target, "v1.13.preflight", "schema", JSON.stringify(manifest.v113.preflightRequiredCapabilities) === JSON.stringify(capabilities) && JSON.stringify(projectIndex.v113.preflightRequiredCapabilities) === JSON.stringify(capabilities) && JSON.stringify(Object.values(adapter.operations).map((operation) => operation.operationId)) === JSON.stringify(capabilities) ? "pass" : "fail", "v1.13 adapter/registry", "requiredCapabilities", capabilities, "scanned", "All eight host operations are required before CodeGraph.", "Synchronize the host preflight capability list.");
-  const hostCapabilities = readJson(root, "init/xinyun-ai-init/templates/host-capabilities.template.json");
-  addCheck(target, "v1.13.host-capability-compatibility", "schema", hostCapabilities.historicalCapabilityContract && hostCapabilities.historicalCapabilityContract.requiredCount === 6 && hostCapabilities.currentProviderCapabilityContract && hostCapabilities.currentProviderCapabilityContract.requiredCount === 8 && JSON.stringify(hostCapabilities.currentProviderCapabilityContract.requiredCapabilities) === JSON.stringify(capabilities) ? "pass" : "fail", "host-capabilities.template.json", "historical/current contracts", "v1.10 six + v1.13.1 eight", hostCapabilities, "Legacy host capability records remain compatible while current provider preflight is explicit.", "Declare both the legacy six-capability contract and the current eight-capability provider contract.");
-  const adapterStatuses = ["not-checked", "checking", "available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "failed", "not-verified"];
-  addCheck(target, "v1.13.adapter-status", "schema", JSON.stringify(adapter.statusEnum) === JSON.stringify(adapterStatuses) && adapter.fakeSessionIdProhibited === true && adapter.ordinaryThreadIdProhibited === true ? "pass" : "fail", "provider-adapter.template.json", "statusEnum/canonical ID", adapterStatuses, "scanned", "Adapter status and canonical ID restrictions checked.", "Keep provider canonical IDs and conservative statuses.");
-  const sessionIdentityFields = ["hostThreadId", "hostSessionId", "providerSessionId", "projectSessionId", "sessionId", "orchestratorSessionId"];
-  const requiredHostEvidence = ["create-or-reuse", "send", "receive", "query-status", "recover", "close"];
-  const identityOk = JSON.stringify(manifest.v113.sessionIdentityFields) === JSON.stringify(sessionIdentityFields) && JSON.stringify(projectIndex.v113.sessionIdentityFields) === JSON.stringify(sessionIdentityFields) && JSON.stringify(taskIndex.sessionIdentityContract.fields) === JSON.stringify(sessionIdentityFields) && JSON.stringify(manifest.v113.requiredHostEvidence) === JSON.stringify(requiredHostEvidence) && JSON.stringify(projectIndex.v113.requiredHostEvidence) === JSON.stringify(requiredHostEvidence) && JSON.stringify(taskIndex.sessionIdentityContract.requiredHostEvidence) === JSON.stringify(requiredHostEvidence);
-  addCheck(target, "v1.13.session-identity-contract", "schema", identityOk && manifest.v113.canonicalSessionIdentity === "providerSessionId" && projectIndex.v113.canonicalSessionIdentity === "providerSessionId" && taskIndex.sessionIdentityContract.canonicalField === "providerSessionId" && roleBinding.identityMapping.equivalenceRule.includes("sessionId equals providerSessionId") && providerBinding.identityMapping.equivalenceRule.includes("sessionId equals providerSessionId") && manualBinding.canonicalSessionIdField === "providerSessionId" && manualBinding.identityMappingRule.includes("all requiredHostEvidence") ? "pass" : "fail", "binding/task/registry templates", "canonical identity and six evidence operations", "scanned", {manifest: manifest.v113, projectIndex: projectIndex.v113, taskIndex: taskIndex.sessionIdentityContract}, "Session identity mapping is consistent.", "Synchronize canonical provider identity and evidence requirements.");
-  addCheck(target, "v1.13.assignment-session-contract", "schema", assignments.recordContract.requiredFields.includes("projectSessionId") && assignments.recordContract.requiredFields.includes("hostThreadId") && assignments.recordContract.requiredFields.includes("hostSessionId") && assignments.recordContract.requiredFields.includes("identityMapping") && assignments.recordContract.sessionBindingRule.includes("create-or-reuse") && assignments.recordContract.sessionBindingRule.includes("close") ? "pass" : "fail", "team/assignments.json", "session binding rule", "canonical provider evidence", assignments.recordContract, "Assignments enforce one canonical mapping.", "Add cross-file session identity fields and evidence rules.");
-  const roles = ["project-owner", "project-product", "chief-engineer", "programmer", "test-reviewer"];
-  addCheck(target, "v1.13.manual-recovery", "schema", JSON.stringify(recovery.roles.map((role) => role.roleId)) === JSON.stringify(roles) && recovery.roles.every((role) => role.providerSessionId === null && role.bindingStatus === "pending") && recovery.reuseContract.createDuplicateTasks === false && recovery.reuseContract.replaceUnverifiedSession === false ? "pass" : "fail", "manual-session-recovery.template.json", "roles/recovery", roles, "scanned", "Manual recovery is explicit and non-fabricating.", "Keep five roles pending until real evidence is supplied.");
-  const originEnum = ["initialization-created", "initialization-updated", "pre-existing-user-change", "control-plane-only"];
-  addCheck(target, "v1.13.change-origin", "schema", JSON.stringify(changeReport.changeOriginEnum) === JSON.stringify(originEnum) && changeReport.businessCodeChanged.value === "unknown" && changeReport.requiredChangeFields.includes("evidence") ? "pass" : "fail", "initialization-change-report.template.json", "changeOriginEnum", originEnum, "scanned", "Change origin and baseline evidence checked.", "Separate initialization and pre-existing changes.");
-  const expectedIds = Array.from({ length: 27 }, (_, index) => 159 + index);
-  const scenarioText = readText(root, "test-scenarios/v1.13.0-scenarios.md");
-  addCheck(target, "v1.13.scenarios", "scenario", expectedIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("manual-create") && scenarioText.includes("create-and-onboard") && scenarioText.includes("decisionStatus") ? "pass" : "fail", "v1.13.0-scenarios.md", "scenarioIds", "159-185 with task-first session decisions", "scanned", "v1.13 scenarios are registered.", "Add all v1.13 decision scenarios.");
-  const evidenceFields = ["scenarioId", "input", "expectedOutput", "actualOutput", "beforeSnapshotHash", "afterSnapshotHash", "changedFiles", "controlFilesChanged", "forbiddenOperations", "evidence", "sensitiveScan", "result", "recordHash", "recordedAt"];
-  addCheck(target, "v1.13.behavior-evidence", "behavior", evidence.evidenceType === "not-verified" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && evidence.sessionId === null && evidence.providerSessionId === null && JSON.stringify(evidence.scenarioRequiredFields) === JSON.stringify(evidenceFields) && JSON.stringify(evidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(expectedIds) && evidence.scenarios.every((scenario) => evidenceFields.every((field) => Object.prototype.hasOwnProperty.call(scenario, field)) && scenario.evidenceType === "not-verified" && scenario.recordHash === "not-recorded" && scenario.result === "not-verified" && scenario.sessionId === null && scenario.providerSessionId === null && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "test-scenarios/v1.13.0-behavior-evidence.json", "scenarios", "159-181 auditable honest not-verified", "scanned", "Real host behavior is not fabricated.", "Provide real host evidence or keep the release blocked.");
-  const ruleText = readText(root, "init/xinyun-ai-init/rules/v1.13.0-host-adapter.md");
-  addCheck(target, "v1.13.rule", "content", ["providerSessionId", "hostThreadId", "hostSessionId", "projectSessionId", "orchestratorSessionId", "create-or-reuse", "query-status", "Manual recovery", "manual-create", "defer", "redetect", "decisionStatus=awaiting-user", "decisionId", "pre-existing-user-change", "No provider login/install"].every((term) => ruleText.includes(term)) ? "pass" : "fail", "v1.13.0-host-adapter.md", "contract", "adapter/mapping/recovery/decision/scope", "scanned", "v1.13 rule contract checked.", "Restore v1.13 host adapter identity and decision rules.");
-}
-
-function validateV114Content(root, target) {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.14.0-agent-core.md",
-    "init/xinyun-ai-init/templates/agent-profile.template.json",
-    "init/xinyun-ai-init/templates/agent-capabilities.template.json",
-    "init/xinyun-ai-init/templates/takeover-gate.template.json",
-    "init/xinyun-ai-init/templates/orchestrator.template.json",
-    "init/xinyun-ai-init/templates/task-graph.template.json",
-    "init/xinyun-ai-init/templates/handoff.template.json",
-    "init/xinyun-ai-init/templates/final-delivery.template.json",
-    "test-scenarios/v1.14.0-scenarios.md",
-    "test-scenarios/v1.14.0-behavior-evidence.json",
-  ];
-  for (const file of requiredFiles) requireFile(root, target, file);
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
-  const profile = readJson(root, "init/xinyun-ai-init/templates/agent-profile.template.json");
-  const capabilities = readJson(root, "init/xinyun-ai-init/templates/agent-capabilities.template.json");
-  const takeover = readJson(root, "init/xinyun-ai-init/templates/takeover-gate.template.json");
-  const orchestrator = readJson(root, "init/xinyun-ai-init/templates/orchestrator.template.json");
-  const graph = readJson(root, "init/xinyun-ai-init/templates/task-graph.template.json");
-  const evidence = readJson(root, "test-scenarios/v1.14.0-behavior-evidence.json");
-  const paths = ["profile", "capabilities", "takeoverGate", "orchestrator", "taskGraph", "handoffsDirectory", "finalDelivery"];
-  addCheck(target, "v1.14.registration", "registry", manifest.agentCore && projectIndex.agentCore && paths.every((key) => manifest.agentCore[key] === projectIndex.agentCore[key]) && manifest.v114 && projectIndex.v114 && initResult.v114 && initResult.agentCore && initResult.agentCore.profilePath === manifest.agentCore.profile ? "pass" : "fail", "manifest/project-index/init-result.v114", "paths", "same", {manifest: manifest.agentCore, projectIndex: projectIndex.agentCore, initResult: initResult.agentCore}, "v1.14 paths are registered consistently.", "Synchronize v1.14 control-plane paths.");
-  const profileFields = ["agentId", "name", "version", "projectIdentity", "serviceGoal", "configuredRoles", "supportedStacks", "supportedTools", "allowedOperations", "forbiddenOperations", "readyPrerequisites", "capabilityStatus"];
-  addCheck(target, "v1.14.agent-profile", "schema", profileFields.every((field) => Object.prototype.hasOwnProperty.call(profile, field)) && profile.configuredRoles.length === 5 && profile.capabilityStatus === "manual-required" ? "pass" : "fail", "agent-profile.template.json", "profile fields", "complete and conservative", profile, "Agent identity and service scope are declared.", "Complete the agent profile and keep status conservative.");
-  addCheck(target, "v1.14.capabilities", "schema", capabilities.aggregateStatus === "manual-required" && capabilities.capabilities.every((capability) => capability.required === true && capability.evidence && capability.fallbackPlan && capability.unverifiedScope) ? "pass" : "fail", "agent-capabilities.template.json", "aggregateStatus/evidence", "manual-required with evidence", capabilities, "Capability status and fallback evidence are declared.", "Do not mark unknown capabilities ready.");
-  addCheck(target, "v1.14.takeover-gate", "schema", takeover.status === "blocked" && takeover.executionEligible === false && takeover.requiredGates.length >= 12 && takeover.blockedReasons.includes("required-role-session-not-created") ? "pass" : "fail", "takeover-gate.template.json", "status/gates", "blocked until evidence", takeover, "Takeover gate is conservative.", "Keep missing evidence blocked.");
-  addCheck(target, "v1.14.orchestrator-task-graph", "schema", orchestrator.orchestratorSessionId === null && orchestrator.responsibilities.length >= 8 && graph.acyclic === true && graph.taskStatusLabelMap["waiting-review"] === "待审查" ? "pass" : "fail", "orchestrator/task-graph", "identity/status map", "independent and acyclic", {orchestrator, graph}, "Orchestrator and task graph are registered.", "Preserve the independent orchestrator and dependency graph.");
-  addCheck(target, "v1.14.evidence", "behavior", evidence.version === "1.14.0" && evidence.evidenceType === "local-session" && evidence.executionMode === "local-degraded" && evidence.sessionIdentityMode === "local-degraded" && evidence.realAiSessionVerified === false && evidence.readyEligible === false && evidence.publishBlocked === false && typeof evidence.localSessionId === "string" && evidence.providerSessionId === null && JSON.stringify(evidence.scenarioRange) === JSON.stringify([186, 205]) && evidence.scenarios.length === 20 ? "pass" : "fail", "v1.14.0-behavior-evidence.json", "scenarioRange/evidenceType", "186-205 local-degraded", evidence, "Local-degraded evidence is explicitly non-ready and provider-safe.", "Keep localSessionId separate from providerSessionId.");
-  const scenarioText = readText(root, "test-scenarios/v1.14.0-scenarios.md");
-  addCheck(target, "v1.14.scenarios", "scenario", Array.from({length: 20}, (_, index) => 186 + index).every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("conflict") && scenarioText.includes("beforeSnapshotHash") ? "pass" : "fail", "v1.14.0-scenarios.md", "scenarioIds", "186-205", "scanned", "v1.14 scenarios are registered.", "Add all v1.14 agent-core scenarios.");
-  const v114EvidenceFields = ["scenarioId", "input", "expectedOutput", "actualOutput", "beforeSnapshotHash", "afterSnapshotHash", "changedFiles", "controlFilesChanged", "forbiddenOperations", "evidence", "sensitiveScan", "result", "recordHash", "recordedAt"];
-  addCheck(target, "v1.14.evidence-fields", "behavior", JSON.stringify(evidence.scenarioRequiredFields) === JSON.stringify([...v114EvidenceFields, "localSessionId"]) && evidence.scenarios.every((scenario, index) => [...v114EvidenceFields, "localSessionId"].every((field) => Object.prototype.hasOwnProperty.call(scenario, field)) && scenario.scenarioId === 186 + index && scenario.actualOutput === "local-degraded-verified" && scenario.sessionId === null && scenario.providerSessionId === null && scenario.localSessionId === evidence.localSessionId && scenario.result === "local-passed" && scenario.recordHash !== "not-recorded" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "v1.14.0-behavior-evidence.json", "scenario fields", "complete auditable local-degraded records", evidence.scenarios, "Every v1.14 scenario has an auditable local record without a provider ID.", "Complete local evidence and keep providerSessionId null.");
-  const ruleText = readText(root, "init/xinyun-ai-init/rules/v1.14.0-agent-core.md");
-  addCheck(target, "v1.14.rule", "content", ["Agent identity", "Takeover gate", "Orchestrator", "Shared facts", "Final delivery", "providerSessionId", "localSessionId", "local-degraded"].every((term) => ruleText.includes(term)) ? "pass" : "fail", "v1.14.0-agent-core.md", "contract", "agent/takeover/task/handoff/delivery/local fallback", "scanned", "v1.14 rule contract checked.", "Restore v1.14 agent-core rules and local fallback contract.");
-}
-
-function validateV115Content(root, target) {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.15.0-session-binding.md",
-    "init/xinyun-ai-init/templates/session-binding.template.json",
-    "test-scenarios/v1.15.0-scenarios.md",
-    "test-scenarios/v1.15.0-behavior-evidence.json",
-  ];
-  for (const file of requiredFiles) requireFile(root, target, file);
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
-  const binding = readJson(root, "init/xinyun-ai-init/templates/session-binding.template.json");
-  const evidence = readJson(root, "test-scenarios/v1.15.0-behavior-evidence.json");
-  const fields = ["sessionId", "sessionRefType", "sessionRef", "hostId", "provider", "projectRootHash", "workspaceScope", "repositoryScope", "workstream", "roleId", "taskId", "title", "cwd", "identityEvidence", "interactionEvidence", "bindingStatus", "bindingMode", "createdAt", "updatedAt"];
-  const evidenceCategories = ["create-or-reuse", "send", "receive", "query-status", "recover", "close", "control-file-read-write"];
-  const registry = manifest.v115 && projectIndex.v115 && initResult.v115 && manifest.v115.sessionBindingTemplate === projectIndex.v115.sessionBindingTemplate && manifest.v115.sessionBindingTemplate === initResult.v115.sessionBindingTemplate && manifest.v115.canonicalControlPlaneId === "sessionId" && projectIndex.v115.canonicalControlPlaneId === "sessionId" && initResult.v115.canonicalControlPlaneId === "sessionId";
-  addCheck(target, "v1.15.registry", "registry", registry ? "pass" : "fail", "manifest/project-index/init-result.v115", "session binding paths", "same adapter-neutral contract", {manifest: manifest.v115, projectIndex: projectIndex.v115, initResult: initResult.v115}, "v1.15 adapter-neutral paths are registered consistently.", "Synchronize v1.15 session binding registry paths.");
-  addCheck(target, "v1.15.binding-schema", "schema", fields.every((field) => Object.prototype.hasOwnProperty.call(binding, field)) && JSON.stringify(binding.requiredEvidenceCategories) === JSON.stringify(evidenceCategories) && binding.bindingStatus === "pending" && binding.executionEligible === false ? "pass" : "fail", "session-binding.template.json", "fields/evidence/default", "complete pending contract", binding, "Adapter-neutral session binding schema is conservative and complete.", "Keep the seven evidence categories and non-ready default.");
-  const ruleText = readText(root, "init/xinyun-ai-init/rules/v1.15.0-session-binding.md");
-  addCheck(target, "v1.15.rule", "content", ["adapter-neutral", "sessionRefType", "host-thread", "provider-session", "manual-reference", "local-session", "seven evidence", "providerSessionId", "Cross-project"].every((term) => ruleText.includes(term)) ? "pass" : "fail", "v1.15.0-session-binding.md", "contract", "adapter-neutral identity and evidence gate", "scanned", "v1.15 session binding rule is present.", "Restore the adapter-neutral session binding rule.");
-  const scenarioText = readText(root, "test-scenarios/v1.15.0-scenarios.md");
-  const ids = Array.from({length: 18}, (_, index) => 206 + index);
-  addCheck(target, "v1.15.scenarios", "scenario", ids.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("host-thread") && scenarioText.includes("跨项目") ? "pass" : "fail", "v1.15.0-scenarios.md", "scenarioIds", "206-223", "scanned", "v1.15 scenarios cover positive and negative binding plus collaboration gates.", "Add all v1.15 scenarios.");
-  const realEvidenceCategories = new Set((evidence.interactionEvidence || []).map((record) => record.operation));
-  const v115PlannedEvidence = evidence.evidenceType === "not-verified" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && evidence.scenarios.every((scenario) => scenario.actualOutput === "not-verified" && scenario.result === "not-verified");
-  const v115RealSessionEvidence = evidence.evidenceType === "real-session" && evidence.realAiSessionVerified === true && evidence.sessionRefType === "host-thread" && typeof evidence.sessionRef === "string" && evidence.hostId === "local" && evidence.readyEligible === true && evidence.scenarios.some((scenario) => scenario.scenarioId === 206 && scenario.result === "real-passed" && scenario.sessionRef === evidence.sessionRef) && evidence.requiredHostEvidence.every((operation) => realEvidenceCategories.has(operation)) && evidence.scenarios.every((scenario) => scenario.result === "real-passed" || scenario.result === "real-negative-passed" || scenario.result === "contract-passed");
-  addCheck(target, "v1.15.evidence", "behavior", evidence.version === "1.15.0" && JSON.stringify(evidence.scenarioRange) === JSON.stringify([206, 223]) && evidence.scenarios.length === 18 && evidence.scenarios.every((scenario, index) => scenario.scenarioId === 206 + index && Array.isArray(scenario.evidence)) && (v115PlannedEvidence || v115RealSessionEvidence) ? "pass" : "fail", "v1.15.0-behavior-evidence.json", "evidence", "planned or real host-thread evidence", evidence, "v1.15 evidence records either an honest planned gate or auditable real host-thread interaction evidence.", "Keep real session references and all seven operation records auditable; do not fabricate untested scenarios.");
-}
-
-function validateV116Content(root, target) {
-  const requiredFiles = [
-    "init/xinyun-ai-init/rules/v1.16.0-capability-efficiency.md",
-    "init/xinyun-ai-init/templates/skill-runtime-route.template.json",
-    "init/xinyun-ai-init/templates/skill-run-record.template.json",
-    "init/xinyun-ai-init/templates/codegraph-incremental-record.template.json",
-    "init/xinyun-ai-init/templates/local-query-index.template.json",
-    "init/xinyun-ai-init/templates/performance-metrics.template.json",
-    "test-scenarios/v1.16.0-scenarios.md",
-    "test-scenarios/v1.16.0-behavior-evidence.json",
-    "scripts/collect-v1.16-evidence.js",
-  ];
-  for (const file of requiredFiles) requireFile(root, target, file);
-
-  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
-  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
-  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
-  const route = readJson(root, "init/xinyun-ai-init/templates/skill-runtime-route.template.json");
-  const run = readJson(root, "init/xinyun-ai-init/templates/skill-run-record.template.json");
-  const graph = readJson(root, "init/xinyun-ai-init/templates/codegraph-incremental-record.template.json");
-  const index = readJson(root, "init/xinyun-ai-init/templates/local-query-index.template.json");
-  const metrics = readJson(root, "init/xinyun-ai-init/templates/performance-metrics.template.json");
-  const evidence = readJson(root, "test-scenarios/v1.16.0-behavior-evidence.json");
-  const ruleText = readText(root, "init/xinyun-ai-init/rules/v1.16.0-capability-efficiency.md");
-  const scenarioText = readText(root, "test-scenarios/v1.16.0-scenarios.md");
-  const expectedIds = Array.from({ length: 15 }, (_, index) => index + 301);
-  const routeFields = ["selected", "rejected", "fallback", "blocked", "selectionOrder", "registryDigest"];
-  const runFields = ["skillRunId", "skillId", "roleId", "taskId", "routeReason", "usedTools", "unusedTools", "fallbackReason", "evidence", "unverifiedScope"];
-  const graphFields = ["recordId", "projectRootHash", "indexIdentity", "sourceHash", "changedFiles", "unchangedFiles", "failedFiles", "unverifiedScope", "oldHealthyIndexPreserved"];
-  const indexFields = ["sourceHash", "builtAt", "indexVersion", "coverage", "stale", "factSourcePolicy", "queryBudget"];
-  const registry = manifest.v116 && projectIndex.v116 && initResult.v116 && manifest.v116.skillRoute === "xinyun-ai/skills/runtime-routes.json" && projectIndex.v116.skillRoute === manifest.v116.skillRoute && initResult.v116.skillRoutePath === manifest.v116.skillRoute;
-  addCheck(target, "v1.16.registry", "registry", registry ? "pass" : "fail", "manifest/project-index/init-result.v116", "runtime paths", "same v1.16 paths", {manifest: manifest.v116, projectIndex: projectIndex.v116, initResult: initResult.v116}, "v1.16 runtime paths are registered consistently.", "Synchronize v1.16 control-plane paths.");
-  addCheck(target, "v1.16.skill-route-schema", "schema", routeFields.every((field) => Object.prototype.hasOwnProperty.call(route, field)) && route.selectionOrder.length === 4 ? "pass" : "fail", "skill-runtime-route.template.json", "route fields", "selection and decision fields", route, "Runtime Skill route schema is complete.", "Keep deterministic route decisions and provenance.");
-  addCheck(target, "v1.16.skill-run-schema", "schema", runFields.every((field) => Object.prototype.hasOwnProperty.call(run, field)) && run.status === "pending" ? "pass" : "fail", "skill-run-record.template.json", "run fields", "minimum run record", run, "Skill execution record is conservative by default.", "Keep unverified scope and fallback evidence.");
-  addCheck(target, "v1.16.codegraph-schema", "schema", graphFields.every((field) => Object.prototype.hasOwnProperty.call(graph, field)) && graph.oldHealthyIndexPreserved === true && graph.status === "unknown" ? "pass" : "fail", "codegraph-incremental-record.template.json", "incremental fields", "failure-safe record", graph, "Incremental CodeGraph record preserves a healthy prior index.", "Do not claim an update after a failed increment.");
-  addCheck(target, "v1.16.query-index-schema", "schema", indexFields.every((field) => Object.prototype.hasOwnProperty.call(index, field)) && index.factSourcePolicy.includes("authoritative") && index.sqlitePolicy.includes("optional") ? "pass" : "fail", "local-query-index.template.json", "index fields", "derived index contract", index, "Local query index is derived and rebuildable.", "Keep JSON/Markdown as the fact source.");
-  addCheck(target, "v1.16.performance-schema", "schema", metrics.fixedMaterializationTargetMs === 5000 && metrics.stageRequiredFields.includes("cacheHit") && Object.prototype.hasOwnProperty.call(metrics.metrics, "controlPlaneReads") ? "pass" : "fail", "performance-metrics.template.json", "metrics", "repeatable stage metrics", metrics, "Efficiency metrics include cache, reads and baseline fields.", "Record relative stage evidence.");
-  addCheck(target, "v1.16.rule", "content", ["Runtime Skill routing", "Incremental CodeGraph", "local query index", "SQLite is optional", "providerSessionId", "5 seconds", "partial", "blocked"].every((term) => ruleText.includes(term)) ? "pass" : "fail", "v1.16.0-capability-efficiency.md", "contract", "routing/index/efficiency safety rules", "scanned", "v1.16 rules cover the required scope and exclusions.", "Restore v1.16 capability and efficiency rules.");
-  addCheck(target, "v1.16.scenarios", "scenario", expectedIds.every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("three batches") ? "pass" : "fail", "v1.16.0-scenarios.md", "scenarioIds", "301-315", "scanned", "v1.16 scenarios cover A/B/C independently.", "Add all v1.16 scenarios.");
-  const scenarioShape = evidence.scenarios.every((scenario, index) => scenario.scenarioId === expectedIds[index] && (scenario.result === "contract-passed" || scenario.result === "real-passed") && Array.isArray(scenario.evidence) && Array.isArray(scenario.unverifiedScope) && (scenario.result !== "real-passed" || scenario.sessionRef === evidence.sessionRef));
-  const expectedRealBehavior = ["skill-route", "codegraph-cache", "incremental-update", "query-index", "efficiency-metrics"];
-  const plannedEvidence = evidence.evidenceType === "contract-regression" && evidence.realAiSessionVerified === false && evidence.publishBlocked === true && evidence.readyEligible === false;
-  const realHostEvidence = evidence.evidenceType === "real-session" && evidence.executionMode === "real-host" && evidence.realAiSessionVerified === true && evidence.sessionRefType === "host-thread" && typeof evidence.sessionRef === "string" && evidence.readyEligible === true && evidence.publishBlocked === false && Array.isArray(evidence.verifiedRealBehavior) && expectedRealBehavior.every((item) => evidence.verifiedRealBehavior.includes(item)) && evidence.sensitiveScan && evidence.sensitiveScan.status === "pass" && evidence.sensitiveScan.matches.length === 0;
-  addCheck(target, "v1.16.evidence", "behavior", evidence.version === "1.16.0" && JSON.stringify(evidence.scenarioRange) === JSON.stringify([301, 315]) && evidence.scenarios.length === 15 && scenarioShape && (plannedEvidence || realHostEvidence) ? "pass" : "fail", "v1.16.0-behavior-evidence.json", "evidence", "contract evidence or recorded real host probe", evidence, "v1.16 evidence separates contract tests from the recorded real host scope.", "Keep the release blocked unless the real host probe is complete and auditable.");
-}
-
-function validateJsonFiles(root, target) {
-  const jsonFiles = [
-    "package.json",
-    "init/xinyun-ai-init/version.json",
-    "init/xinyun-ai-init/templates/manifest.template.json",
-    "init/xinyun-ai-init/templates/project-index.template.json",
-    "init/xinyun-ai-init/templates/framework-profile.template.json",
-    "init/xinyun-ai-init/templates/html-migration-record.template.json",
-    "init/xinyun-ai-init/templates/task-index.template.json",
-    "init/xinyun-ai-init/templates/archive-transaction.template.json",
-    "init/xinyun-ai-init/templates/role-session-binding.template.json",
-    "init/xinyun-ai-init/templates/session-binding.template.json",
-    "init/xinyun-ai-init/templates/project-identity.template.json",
-    "init/xinyun-ai-init/templates/session-candidates.template.json",
-    "init/xinyun-ai-init/templates/technical-landscape.template.json",
-    "init/xinyun-ai-init/templates/requirement-packet.template.json",
-    "init/xinyun-ai-init/templates/technical-impact-packet.template.json",
-    "init/xinyun-ai-init/templates/database-authorization.template.json",
-    "init/xinyun-ai-init/templates/host-preflight.template.json",
-    "init/xinyun-ai-init/templates/initialization-recovery.template.json",
-    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
-    "init/xinyun-ai-init/templates/shared-project-snapshot.template.json",
-    "init/xinyun-ai-init/templates/initialization-timing.template.json",
-    "init/xinyun-ai-init/templates/provider-adapter.template.json",
-    "init/xinyun-ai-init/templates/manual-session-recovery.template.json",
-    "init/xinyun-ai-init/templates/initialization-change-report.template.json",
-    "init/xinyun-ai-init/templates/agent-profile.template.json",
-    "init/xinyun-ai-init/templates/agent-capabilities.template.json",
-    "init/xinyun-ai-init/templates/takeover-gate.template.json",
-    "init/xinyun-ai-init/templates/orchestrator.template.json",
-    "init/xinyun-ai-init/templates/task-graph.template.json",
-    "init/xinyun-ai-init/templates/handoff.template.json",
-    "init/xinyun-ai-init/templates/final-delivery.template.json",
-    "test-scenarios/v1.14.0-behavior-evidence.json",
-    "test-scenarios/v1.15.0-behavior-evidence.json",
-    "init/xinyun-ai-init/templates/skill-runtime-route.template.json",
-    "init/xinyun-ai-init/templates/skill-run-record.template.json",
-    "init/xinyun-ai-init/templates/codegraph-incremental-record.template.json",
-    "init/xinyun-ai-init/templates/local-query-index.template.json",
-    "init/xinyun-ai-init/templates/performance-metrics.template.json",
-    "test-scenarios/v1.16.0-behavior-evidence.json",
-  ];
-
-  for (const file of jsonFiles) {
-    try {
-      readJson(root, file);
-      addCheck(target, "json.parse", "json", "pass", file, null, "parseable JSON", "parseable JSON", "JSON file is parseable.", null);
-    } catch (error) {
-      addCheck(target, "json.parse", "json", "fail", file, null, "parseable JSON", error.message, "JSON file is not parseable.", "Fix JSON syntax.");
-    }
-  }
-}
-
-function validateRoot(root, target, isTarball = false) {
-  requireFile(root, target, "package.json");
-  requireFile(root, target, "README.md");
-  requireFile(root, target, "init/xinyun-ai-init/README.md");
-  requireFile(root, target, "init/xinyun-ai-init/templates/AGENTS.template.md");
-  requireFile(root, target, "init/xinyun-ai-init/templates/core-rules.template.md");
-  requireFile(root, target, "scripts/verify-init-package.js");
-  requireFile(root, target, "scripts/verify-rules-package.js");
-  validateVersion(root, target);
-  validatePackageFiles(root, target, isTarball);
-  validateTarballSecurityContract(root, target);
-  validateRegistries(root, target);
-  validateV17Content(root, target);
-  validateV171Content(root, target);
-  validateV172Content(root, target);
-  validateV173Content(root, target);
-  validateV18Content(root, target);
-  validateV19Content(root, target);
-  validateV110Content(root, target);
-  validateV111Content(root, target);
-  validateV112Content(root, target);
-  validateV1121Content(root, target);
-  validateV113Content(root, target);
-  validateV114Content(root, target);
-  validateV115Content(root, target);
-  validateV116Content(root, target);
-  validateJsonFiles(root, target);
-}
-
-function runTar(args, tarballPath) {
-  const result = spawnSync("tar", [...args, tarballPath], { encoding: "utf8" });
-  if (result.status !== 0) {
-    throw Object.assign(new Error(result.stderr || result.stdout || "tar command failed"), { exitCode: 2 });
-  }
-  return result.stdout || "";
-}
-
-function validateTarEntryName(rawName) {
-  const name = String(rawName || "");
-  if (!name) return "empty entry name";
-  if (name.includes("\\")) return "backslash path separator is not allowed";
-  if (name.startsWith("/") || name.startsWith("\\")) return "absolute path is not allowed";
-  if (/^[A-Za-z]:/.test(name)) return "Windows drive absolute path is not allowed";
-  if (name.startsWith("//")) return "UNC absolute path is not allowed";
-
-  const parts = name.split("/");
-  if (parts.some((part) => part === "..")) return "path traversal is not allowed";
-  if (parts.some((part) => part === ".")) return "dot path segment is not allowed";
-  if (parts.some((part, index) => part === "" && index !== parts.length - 1)) return "empty path segment is not allowed";
-  if (!(name === "package" || name === "package/" || name.startsWith("package/"))) return "entry must stay under package/";
-  return null;
-}
-
-function validateTarEntryTypes(tarballPath) {
-  const verbose = runTar(["-tvf"], tarballPath);
-  for (const line of verbose.split(/\r?\n/).filter(Boolean)) {
-    const type = line[0];
-    if (type === "l") return "symbolic link entries are not allowed";
-    if (type === "h") return "hard link entries are not allowed";
-    if (!"-d".includes(type)) return `unsupported tar entry type '${type}' is not allowed`;
-  }
-  return null;
-}
-
-function assertExtractPathInsideRoot(root, candidatePath) {
-  const relative = path.relative(root, candidatePath);
-  return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
-}
-
-function verifyExtractedTree(root) {
-  const pending = [root];
-  while (pending.length > 0) {
-    const current = pending.pop();
-    const stat = fs.lstatSync(current);
-    if (stat.isSymbolicLink()) return `symbolic link extracted: ${path.relative(root, current)}`;
-    if (stat.nlink > 1 && stat.isFile()) return `hard link extracted: ${path.relative(root, current)}`;
-    if (stat.isDirectory()) {
-      for (const child of fs.readdirSync(current)) {
-        const childPath = path.join(current, child);
-        if (!assertExtractPathInsideRoot(root, childPath)) return `path escaped extraction root: ${child}`;
-        pending.push(childPath);
-      }
-    }
-  }
-  return null;
-}
-
-function extractTarball(tarballPath) {
-  if (!fs.existsSync(tarballPath)) throw Object.assign(new Error(`Tarball does not exist: ${tarballPath}`), { exitCode: 2 });
-  if (!fs.statSync(tarballPath).isFile()) throw Object.assign(new Error(`Tarball is not a file: ${tarballPath}`), { exitCode: 2 });
-
-  const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), "xinyun-ai-verify-rules-"));
-  try {
-    const typeError = validateTarEntryTypes(tarballPath);
-    if (typeError) throw Object.assign(new Error(`Unsafe tarball entry: ${typeError}`), { exitCode: 2 });
-
-    const listedNames = runTar(["-tf"], tarballPath).split(/\r?\n/).filter(Boolean);
-    if (listedNames.length === 0) throw Object.assign(new Error("Tarball has no entries"), { exitCode: 2 });
-
-    for (const entry of listedNames) {
-      const nameError = validateTarEntryName(entry);
-      if (nameError) throw Object.assign(new Error(`Unsafe tarball entry '${entry}': ${nameError}`), { exitCode: 2 });
-    }
-
-    for (const entry of listedNames) {
-      const targetPath = path.join(tempDir, ...entry.split("/"));
-      if (!assertExtractPathInsideRoot(tempDir, targetPath)) {
-        throw Object.assign(new Error(`Unsafe tarball entry '${entry}': path traversal after resolution`), { exitCode: 2 });
-      }
-      const dir = entry.endsWith("/") ? targetPath : path.dirname(targetPath);
-      fs.mkdirSync(dir, { recursive: true });
-    }
-
-    const tar = spawnSync("tar", ["-xf", tarballPath, "-C", tempDir], { encoding: "utf8" });
-    if (tar.status !== 0) {
-      throw Object.assign(new Error(`Failed to extract tarball: ${tar.stderr || tar.stdout || "unknown error"}`), { exitCode: 2 });
-    }
-
-    const treeError = verifyExtractedTree(tempDir);
-    if (treeError) throw Object.assign(new Error(`Unsafe tarball extraction: ${treeError}`), { exitCode: 2 });
-
-    const packageRoot = path.join(tempDir, "package");
-    if (!fs.existsSync(packageRoot)) {
-      throw Object.assign(new Error("Tarball extraction did not produce package/ root"), { exitCode: 2 });
-    }
-    return { tempDir, packageRoot };
-  } catch (error) {
-    fs.rmSync(tempDir, { recursive: true, force: true });
-    throw error;
-  }
-}
-
-function overallStatus() {
-  if (checks.some((check) => check.status === "error")) return "error";
-  if (checks.some((check) => check.status === "fail")) return "fail";
-  if (checks.some((check) => check.status === "warn")) return "warn";
-  return "pass";
-}
-
-function printHuman(result) {
-  for (const check of result.checks) {
-    const location = check.path ? ` ${check.path}` : "";
-    console.log(`[${check.status.toUpperCase()}] ${check.checkId}${location} - ${check.message}`);
-    if (check.status !== "pass" && check.suggestion) console.log(`       suggestion: ${check.suggestion}`);
-  }
-  console.log("");
-  console.log(`[xinyun-ai-init verify:rules] status=${result.status}; pass=${result.summary.pass}; warn=${result.summary.warn}; fail=${result.summary.fail}; error=${result.summary.error}`);
-}
-
-function printHelp() {
-  console.log("Usage: npm run verify:rules -- [--source-root <path>] [--tarball <path>] [--json]");
-  console.log("Read-only rule package consistency verification. It never repairs files, installs dependencies, writes Git state, or changes business code.");
-}
-
-function buildResult(options, status, tarballStatus) {
-  return {
-    schemaVersion: 1,
-    status,
-    sourceRoot: options ? options.sourceRoot : null,
-    tarball: { path: options ? options.tarball : null, status: tarballStatus },
-    checks,
-    summary: {
-      pass: checks.filter((check) => check.status === "pass").length,
-      warn: checks.filter((check) => check.status === "warn").length,
-      fail: checks.filter((check) => check.status === "fail").length,
-      error: checks.filter((check) => check.status === "error").length,
-    },
-    checkedAt: new Date().toISOString(),
-  };
-}
-
-function main() {
-  let options;
-  let extracted = null;
-  try {
-    options = parseArgs(process.argv.slice(2));
-    if (options.help) {
-      printHelp();
-      process.exit(0);
-    }
-    if (!fs.existsSync(options.sourceRoot) || !fs.statSync(options.sourceRoot).isDirectory()) {
-      throw Object.assign(new Error(`Source root is not a directory: ${options.sourceRoot}`), { exitCode: 2 });
-    }
-
-    validateRoot(options.sourceRoot, "source", false);
-    let tarballStatus = "not-run";
-    if (options.tarball) {
-      extracted = extractTarball(options.tarball);
-      tarballStatus = "checked";
-      validateRoot(extracted.packageRoot, "tarball", true);
-    }
-
-    const result = buildResult(options, overallStatus(), tarballStatus);
-    if (options.json) console.log(JSON.stringify(result, null, 2));
-    else printHuman(result);
-    if (result.status === "fail") process.exit(1);
-    if (result.status === "error") process.exit(2);
-    process.exit(0);
-  } catch (error) {
-    checks.length = 0;
-    addCheck("command", "runtime.error", "runtime", "error", null, null, "successful verify:rules execution", error.message, error.message, "Check command arguments, file permissions, and tarball readability.");
-    const result = buildResult(options, "error", options && options.tarball ? "error" : "not-run");
-    if (options && options.json) console.log(JSON.stringify(result, null, 2));
-    else printHuman(result);
-    process.exit(error.exitCode || 2);
-  } finally {
-    if (extracted && extracted.tempDir) fs.rmSync(extracted.tempDir, { recursive: true, force: true });
-  }
-}
-
-main();
-