@t275005746/gse 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (228) hide show
  1. package/.github/ISSUE_TEMPLATE/bug_report.yml +42 -42
  2. package/.github/ISSUE_TEMPLATE/change_request.yml +50 -50
  3. package/.github/ISSUE_TEMPLATE/config.yml +5 -5
  4. package/.github/PULL_REQUEST_TEMPLATE.md +38 -38
  5. package/.github/workflows/validate-gse.yml +33 -33
  6. package/.gse/README.md +18 -18
  7. package/.gse/gse-development-protocol.md +50 -50
  8. package/.gse/project-profile.md +29 -29
  9. package/.gse/quality-gates.md +25 -25
  10. package/.gse/releases/public-registry-publication-npm.md +49 -0
  11. package/.gse/releases/public-release-owner-required.md +65 -65
  12. package/.gse/releases/public-security-contact-owner-required.md +45 -45
  13. package/.gse/state.json +147 -27
  14. package/CHANGELOG.md +31 -15
  15. package/CONTRIBUTING.md +64 -64
  16. package/LICENSE +21 -21
  17. package/README.md +14 -7
  18. package/README.zh-CN.md +14 -7
  19. package/SECURITY.md +41 -41
  20. package/SKILL.md +32 -12
  21. package/SUPPORT.md +38 -38
  22. package/assets/marketplace/README.md +7 -7
  23. package/assets/marketplace/gse-listing.json +75 -75
  24. package/assets/templates/acceptance-execution-packet.md +73 -73
  25. package/assets/templates/adr.md +14 -14
  26. package/assets/templates/change-brief.md +16 -16
  27. package/assets/templates/design.md +18 -18
  28. package/assets/templates/dispatch-packet.md +100 -92
  29. package/assets/templates/evidence.md +15 -9
  30. package/assets/templates/execution-quality-pack.md +65 -65
  31. package/assets/templates/goal-map.md +21 -21
  32. package/assets/templates/host-adapter.md +48 -48
  33. package/assets/templates/host-ui-invocation-record.md +42 -42
  34. package/assets/templates/incident-review.md +60 -60
  35. package/assets/templates/public-channel-publication-record.md +49 -49
  36. package/assets/templates/public-ci-run-record.md +53 -53
  37. package/assets/templates/public-release-record.md +65 -65
  38. package/assets/templates/public-repository-settings-record.md +59 -59
  39. package/assets/templates/public-security-contact-record.md +45 -45
  40. package/assets/templates/release-trust-record.md +32 -32
  41. package/assets/templates/review.md +18 -18
  42. package/assets/templates/role-fallback-packet.md +49 -0
  43. package/assets/templates/spec.md +16 -16
  44. package/assets/templates/target-adoption-evidence.md +29 -29
  45. package/assets/templates/tasks.md +17 -17
  46. package/assets/templates/update-release-acceptance-record.md +58 -58
  47. package/examples/README.md +22 -22
  48. package/examples/agent-runtime-host/.claude/gse-adapter.md +6 -6
  49. package/examples/agent-runtime-host/.codex/gse-adapter.md +7 -7
  50. package/examples/agent-runtime-host/.gse/goal-map.md +7 -7
  51. package/examples/agent-runtime-host/.gse/project-profile.md +27 -27
  52. package/examples/agent-runtime-host/.gse/tooling.md +5 -5
  53. package/examples/agent-runtime-host/.mcp.json +9 -9
  54. package/examples/agent-runtime-host/AGENTS.md +5 -5
  55. package/examples/agent-runtime-host/README.md +10 -10
  56. package/examples/agent-runtime-host/docs/model-routing.md +5 -5
  57. package/examples/cli-tool/.gse/project-profile.md +21 -21
  58. package/examples/cli-tool/AGENTS.md +5 -5
  59. package/examples/cli-tool/README.md +12 -12
  60. package/examples/cli-tool/package.json +21 -21
  61. package/examples/small-app/.env.example +2 -2
  62. package/examples/small-app/.github/workflows/ci.yml +8 -8
  63. package/examples/small-app/AGENTS.md +5 -5
  64. package/examples/small-app/README.md +12 -12
  65. package/examples/small-app/package.json +26 -26
  66. package/examples/small-app/playwright.config.ts +4 -4
  67. package/package.json +52 -44
  68. package/references/adoption-recipes.md +171 -171
  69. package/references/agent-roles.md +42 -21
  70. package/references/architecture-health.md +101 -101
  71. package/references/benchmark-audit.md +73 -73
  72. package/references/commands.md +74 -45
  73. package/references/community-channels.md +46 -46
  74. package/references/compatibility.md +70 -70
  75. package/references/design-basis.md +38 -38
  76. package/references/domain-model.md +129 -129
  77. package/references/domain-quality-gates.md +75 -75
  78. package/references/drift-audit.md +81 -80
  79. package/references/evidence-taxonomy.md +145 -108
  80. package/references/file-ownership.md +97 -93
  81. package/references/final-form-roadmap.md +201 -0
  82. package/references/final-readiness.md +84 -84
  83. package/references/forward-test.md +133 -133
  84. package/references/goal-map.md +36 -36
  85. package/references/host-adapters.md +129 -101
  86. package/references/learning-system.md +42 -26
  87. package/references/maintenance-cadence.md +51 -0
  88. package/references/marketplace-discovery.md +46 -46
  89. package/references/model-routing.md +103 -103
  90. package/references/open-source-defaults.md +39 -39
  91. package/references/operating-model.md +52 -52
  92. package/references/packaging.md +277 -277
  93. package/references/project-agent-workspace.md +89 -89
  94. package/references/project-bootstrap.md +122 -122
  95. package/references/project-guards.md +52 -0
  96. package/references/project-profile.md +57 -57
  97. package/references/public-release.md +174 -174
  98. package/references/quality-gates.md +96 -89
  99. package/references/recovery.md +176 -176
  100. package/references/release-trust.md +43 -43
  101. package/references/release.md +126 -126
  102. package/references/review.md +141 -141
  103. package/references/role-dispatch-fallback.md +54 -0
  104. package/references/router.md +90 -90
  105. package/references/spec-workflow.md +66 -66
  106. package/references/task-levels.md +81 -81
  107. package/references/tool-adapters.md +80 -70
  108. package/scripts/audit-acceptance-execution-packet.mjs +133 -133
  109. package/scripts/audit-adoption-recipes.mjs +99 -99
  110. package/scripts/audit-change-lifecycle.mjs +77 -77
  111. package/scripts/audit-change-system.mjs +134 -134
  112. package/scripts/audit-ci-readiness.mjs +107 -107
  113. package/scripts/audit-close-gate-hardening.mjs +188 -0
  114. package/scripts/audit-close-gate.mjs +448 -262
  115. package/scripts/audit-command-adapters.mjs +91 -91
  116. package/scripts/audit-command-execution.mjs +212 -199
  117. package/scripts/audit-commands.mjs +7 -5
  118. package/scripts/audit-compatibility.mjs +149 -149
  119. package/scripts/audit-completion-plan-drill.mjs +230 -0
  120. package/scripts/audit-completion-readiness.mjs +290 -287
  121. package/scripts/audit-continue-preflight.mjs +234 -0
  122. package/scripts/audit-distribution.mjs +251 -251
  123. package/scripts/audit-domain-quality-gates.mjs +108 -108
  124. package/scripts/audit-evidence-levels.mjs +217 -0
  125. package/scripts/audit-evidence-placeholders.mjs +126 -126
  126. package/scripts/audit-evidence-review-queue.mjs +206 -0
  127. package/scripts/audit-final-acceptance-packet.mjs +9 -9
  128. package/scripts/audit-final-form-progress-report.mjs +19 -18
  129. package/scripts/audit-final-form-roadmap.mjs +157 -0
  130. package/scripts/audit-final-form-stale-copy.mjs +2 -2
  131. package/scripts/audit-final-readiness-promotion.mjs +255 -255
  132. package/scripts/audit-final-readiness.mjs +226 -226
  133. package/scripts/audit-fixtures.mjs +154 -154
  134. package/scripts/audit-fresh-session-readiness.mjs +177 -177
  135. package/scripts/audit-host-capabilities.mjs +237 -0
  136. package/scripts/audit-host-runtime-evidence-handoff.mjs +159 -159
  137. package/scripts/audit-host-runtime-invocation-drill.mjs +240 -240
  138. package/scripts/audit-host-runtime-invocations.mjs +254 -254
  139. package/scripts/audit-host-ui-invocation.mjs +132 -132
  140. package/scripts/audit-installed-sync.mjs +203 -0
  141. package/scripts/audit-learning-drift.mjs +292 -0
  142. package/scripts/audit-learning-promotion.mjs +351 -0
  143. package/scripts/audit-learning-system.mjs +24 -14
  144. package/scripts/audit-local-final-form-completion.mjs +11 -10
  145. package/scripts/audit-maintenance-cadence.mjs +139 -0
  146. package/scripts/audit-maintenance-snapshot.mjs +181 -0
  147. package/scripts/audit-marketplace-discovery.mjs +122 -122
  148. package/scripts/audit-npm-package-metadata.mjs +160 -154
  149. package/scripts/audit-npm-publish-dry-run.mjs +194 -166
  150. package/scripts/audit-npm-tarball-install.mjs +195 -189
  151. package/scripts/audit-open-source-defaults.mjs +92 -92
  152. package/scripts/audit-open-source-readiness.mjs +97 -97
  153. package/scripts/audit-owner-external-gate-kit.mjs +12 -11
  154. package/scripts/audit-project-guards.mjs +189 -0
  155. package/scripts/audit-project.mjs +144 -141
  156. package/scripts/audit-public-acceptance-command-dry-run-drill.mjs +203 -203
  157. package/scripts/audit-public-acceptance-handoff.mjs +10 -10
  158. package/scripts/audit-public-acceptance-readiness.mjs +222 -222
  159. package/scripts/audit-public-channel-publication.mjs +248 -248
  160. package/scripts/audit-public-ci-run.mjs +184 -184
  161. package/scripts/audit-public-collaboration-templates.mjs +98 -98
  162. package/scripts/audit-public-external-gate-probe.mjs +206 -206
  163. package/scripts/audit-public-release-checklist.mjs +17 -15
  164. package/scripts/audit-public-release-decision.mjs +201 -201
  165. package/scripts/audit-public-release-metadata.mjs +176 -176
  166. package/scripts/audit-public-repository-settings.mjs +237 -237
  167. package/scripts/audit-public-security-contact.mjs +171 -171
  168. package/scripts/audit-readme-docs.mjs +6 -4
  169. package/scripts/audit-recovery-readiness.mjs +98 -98
  170. package/scripts/audit-release-bundle.mjs +13 -11
  171. package/scripts/audit-release-owner-action-plan-drill.mjs +5 -4
  172. package/scripts/audit-release-owner-action-plan.mjs +10 -10
  173. package/scripts/audit-release-readiness.mjs +106 -106
  174. package/scripts/audit-release-status-manifest.mjs +4 -4
  175. package/scripts/audit-release-trust.mjs +62 -62
  176. package/scripts/audit-remote-distribution.mjs +266 -266
  177. package/scripts/audit-roadmap-consistency.mjs +234 -230
  178. package/scripts/audit-role-dispatch-fallback.mjs +212 -0
  179. package/scripts/audit-session-sync.mjs +127 -0
  180. package/scripts/audit-signing.mjs +147 -147
  181. package/scripts/audit-state-freshness.mjs +20 -14
  182. package/scripts/audit-state-repair.mjs +360 -0
  183. package/scripts/audit-target-adoption-evidence.mjs +117 -117
  184. package/scripts/audit-target-hardening-drills.mjs +267 -0
  185. package/scripts/audit-target-project.mjs +507 -507
  186. package/scripts/audit-tool-fallback-policy.mjs +180 -0
  187. package/scripts/audit-ui-browser-evidence-policy.mjs +191 -0
  188. package/scripts/audit-update-release-acceptance.mjs +136 -136
  189. package/scripts/audit-v1-target-validation.mjs +269 -269
  190. package/scripts/audit-validation-profiles.mjs +125 -123
  191. package/scripts/backfill-evidence-levels.mjs +98 -0
  192. package/scripts/check-encoding.mjs +72 -0
  193. package/scripts/close-change.mjs +116 -116
  194. package/scripts/discover-project-profile.mjs +307 -307
  195. package/scripts/generate-command-adapter.mjs +231 -231
  196. package/scripts/generate-continue-packet.mjs +1214 -0
  197. package/scripts/generate-final-acceptance-packet.mjs +188 -173
  198. package/scripts/generate-final-form-progress-report.mjs +191 -189
  199. package/scripts/generate-host-runtime-evidence-handoff.mjs +198 -191
  200. package/scripts/generate-maintenance-snapshot.mjs +216 -0
  201. package/scripts/generate-owner-external-gate-kit.mjs +295 -295
  202. package/scripts/generate-public-acceptance-handoff.mjs +168 -156
  203. package/scripts/generate-public-release-checklist.mjs +207 -207
  204. package/scripts/generate-release-bundle.mjs +505 -505
  205. package/scripts/generate-release-owner-action-plan.mjs +172 -171
  206. package/scripts/generate-release-status-manifest.mjs +199 -198
  207. package/scripts/generate-session-prompt.mjs +188 -188
  208. package/scripts/gse.mjs +67 -67
  209. package/scripts/init-change.mjs +265 -265
  210. package/scripts/init-project.mjs +793 -712
  211. package/scripts/install-gse.mjs +234 -234
  212. package/scripts/lib/evidence-placeholders.mjs +28 -28
  213. package/scripts/package-gse.mjs +174 -174
  214. package/scripts/probe-public-external-gates.mjs +167 -167
  215. package/scripts/record-host-invocation.mjs +151 -151
  216. package/scripts/record-learning.mjs +37 -8
  217. package/scripts/record-public-channel-publication.mjs +178 -178
  218. package/scripts/record-public-ci-run.mjs +180 -180
  219. package/scripts/record-public-release.mjs +175 -175
  220. package/scripts/record-public-repository-settings.mjs +209 -209
  221. package/scripts/record-public-security-contact.mjs +157 -157
  222. package/scripts/record-session-sync.mjs +87 -0
  223. package/scripts/run-gse-command.mjs +79 -47
  224. package/scripts/run-validation-profile.mjs +24 -5
  225. package/scripts/sign-gse-package.mjs +83 -83
  226. package/scripts/update-project-state.mjs +223 -223
  227. package/scripts/validate-gse.mjs +216 -0
  228. package/scripts/verify-gse-package.mjs +85 -85
@@ -0,0 +1,157 @@
1
+ #!/usr/bin/env node
2
+ import fs from 'node:fs'
3
+ import path from 'node:path'
4
+
5
+ const args = process.argv.slice(2)
6
+
7
+ function readArg(name, fallback = null) {
8
+ const index = args.indexOf(name)
9
+ if (index === -1) return fallback
10
+ return args[index + 1] ?? fallback
11
+ }
12
+
13
+ const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
14
+ const jsonOnly = args.includes('--json')
15
+
16
+ function read(relativePath) {
17
+ const fullPath = path.join(root, relativePath)
18
+ return fs.existsSync(fullPath) ? fs.readFileSync(fullPath, 'utf8').replace(/^\uFEFF/, '') : ''
19
+ }
20
+
21
+ function exists(relativePath) {
22
+ return fs.existsSync(path.join(root, relativePath))
23
+ }
24
+
25
+ function check(id, label, ok, evidence, risk = '') {
26
+ return { id, label, status: ok ? 'passed' : 'failed', evidence, risk }
27
+ }
28
+
29
+ const roadmap = read('references/final-form-roadmap.md')
30
+ const masterPlan = read('.gse/gse-design-master-plan.md')
31
+ const goalMap = read('.gse/goal-map.md')
32
+ const currentSlice = read('.gse/current-slice.md')
33
+ const stateRaw = read('.gse/state.json')
34
+ const evidenceIndexRaw = read('.gse/evidence/index.jsonl')
35
+ const skill = read('SKILL.md')
36
+
37
+ let state = null
38
+ try {
39
+ state = JSON.parse(stateRaw)
40
+ } catch {
41
+ state = null
42
+ }
43
+
44
+ let evidenceRecords = []
45
+ try {
46
+ evidenceRecords = evidenceIndexRaw
47
+ .split(/\r?\n/)
48
+ .map((line) => line.trim())
49
+ .filter(Boolean)
50
+ .map((line) => JSON.parse(line))
51
+ } catch {
52
+ evidenceRecords = []
53
+ }
54
+
55
+ const latestEvidence = evidenceRecords.at(-1)
56
+ const stateHasCurrentEvidence =
57
+ state?.phase === 'final-form' &&
58
+ typeof state?.currentSlice?.id === 'string' &&
59
+ state.currentSlice.id.startsWith('GSE-') &&
60
+ typeof state?.currentSlice?.nextAction === 'string' &&
61
+ typeof state?.lastEvidence === 'string' &&
62
+ state.lastEvidence.startsWith('.gse/evidence/') &&
63
+ exists(state.lastEvidence) &&
64
+ latestEvidence?.evidenceFile === state.lastEvidence &&
65
+ latestEvidence?.nextAction === state.currentSlice.nextAction
66
+
67
+ const priorities = Array.from({ length: 11 }, (_, index) => `P${index}`)
68
+ const roadmapHasPriorities = priorities.every((item) => roadmap.includes(`| ${item} |`))
69
+ const requiredTerms = [
70
+ '/gse continue',
71
+ 'Completion Definition',
72
+ 'Short entry takeover',
73
+ 'State system',
74
+ 'Evidence gate',
75
+ 'Spec and change lifecycle',
76
+ 'Roles and subagents',
77
+ 'Learning automation',
78
+ 'Final Form Execution Plan',
79
+ 'Current Final-Form Gap List',
80
+ 'Goal Mode Operating Contract',
81
+ 'Claim Boundary',
82
+ ]
83
+
84
+ const executionWaveTerms = [
85
+ 'Wave 1 - Short Entry And State Control',
86
+ 'Wave 2 - Spec, Role, And Execution Discipline',
87
+ 'Wave 3 - Learning To Guard Promotion',
88
+ 'Wave 4 - Tool And Host Runtime Adapters',
89
+ 'Wave 5 - Distribution, Public Trust, And Maintenance',
90
+ ]
91
+
92
+ const checks = [
93
+ check('FFR01', 'final form roadmap exists', exists('references/final-form-roadmap.md'), 'references/final-form-roadmap.md'),
94
+ check('FFR02', 'roadmap covers P0 through P10', roadmapHasPriorities, priorities.join(', ')),
95
+ check('FFR03', 'roadmap contains required final-form concepts', requiredTerms.every((term) => roadmap.includes(term)), requiredTerms.join(', ')),
96
+ check('FFR04', 'master plan points to the final-form roadmap', masterPlan.includes('references/final-form-roadmap.md') && masterPlan.includes('Final Form Roadmap'), '.gse/gse-design-master-plan.md'),
97
+ check('FFR05', 'goal map has an active final-form roadmap contract node', goalMap.includes('GSE-109') && goalMap.includes('final-form roadmap contract') && goalMap.includes('references/final-form-roadmap.md'), '.gse/goal-map.md'),
98
+ check('FFR06', 'current slice continues from the final-form roadmap', currentSlice.includes('references/final-form-roadmap.md') && currentSlice.includes('final-form') && currentSlice.includes('Next Action'), '.gse/current-slice.md'),
99
+ check('FFR07', 'state points to a current final-form execution slice and current evidence', stateHasCurrentEvidence, '.gse/state.json + .gse/evidence/index.jsonl'),
100
+ check('FFR08', 'skill reference routing includes final-form roadmap', skill.includes('references/final-form-roadmap.md'), 'SKILL.md'),
101
+ check('FFR09', 'roadmap contains ordered final-form execution waves', executionWaveTerms.every((term) => roadmap.includes(term)), executionWaveTerms.join(', ')),
102
+ check('FFR10', 'roadmap separates current gaps from optional adapter claims', roadmap.includes('Current Final-Form Gap List') && roadmap.includes('host-native slash-command evidence is optional per host adapter') && roadmap.includes('no AION/MuseFlow-specific behavior is hardcoded'), 'references/final-form-roadmap.md'),
103
+ check(
104
+ 'FFR11',
105
+ 'roadmap preserves process-skill versus host-capability boundary',
106
+ roadmap.includes('OpenSpec-style and Superpowers-style workflows define requirements') &&
107
+ roadmap.includes('They do not provide native slash commands') &&
108
+ roadmap.includes('Process skills such as OpenSpec, Superpowers, Comet, and GSE provide workflow discipline') &&
109
+ roadmap.includes('they do not satisfy host-native slash-command, subagent, browser, MCP, LSP, CI, or host UI evidence rows'),
110
+ 'references/final-form-roadmap.md',
111
+ ),
112
+ ]
113
+
114
+ const passed = checks.filter((item) => item.status === 'passed').length
115
+ const failed = checks.length - passed
116
+ const report = {
117
+ root,
118
+ generatedAt: new Date().toISOString(),
119
+ summary: { status: failed === 0 ? 'passed' : 'failed', passed, failed, total: checks.length },
120
+ workflows: { finalFormRoadmap: failed === 0 ? 'verified' : 'failed' },
121
+ limits: [
122
+ 'This audit verifies the final-form roadmap contract and routing.',
123
+ 'It does not prove every final-form capability is complete.',
124
+ ],
125
+ checks,
126
+ }
127
+
128
+ function renderMarkdown(data) {
129
+ const lines = []
130
+ lines.push('# GSE Final Form Roadmap Audit')
131
+ lines.push('')
132
+ lines.push('Generated: ' + data.generatedAt)
133
+ lines.push('Root: ' + data.root)
134
+ lines.push('')
135
+ lines.push('## Summary')
136
+ lines.push('')
137
+ lines.push('- Status: ' + data.summary.status)
138
+ lines.push('- Checks: ' + data.summary.passed + '/' + data.summary.total)
139
+ lines.push('- Final form roadmap: ' + data.workflows.finalFormRoadmap)
140
+ lines.push('')
141
+ lines.push('## Checks')
142
+ lines.push('')
143
+ for (const item of data.checks) {
144
+ const marker = item.status === 'passed' ? '[x]' : '[ ]'
145
+ lines.push('- ' + marker + ' ' + item.id + ' ' + item.label + ': ' + item.evidence)
146
+ }
147
+ lines.push('')
148
+ lines.push('## Limits')
149
+ lines.push('')
150
+ for (const item of data.limits) lines.push('- ' + item)
151
+ return lines.join('\n') + '\n'
152
+ }
153
+
154
+ if (jsonOnly) console.log(JSON.stringify(report, null, 2))
155
+ else console.log(renderMarkdown(report))
156
+
157
+ if (failed > 0) process.exit(1)
@@ -145,7 +145,7 @@ const bundleReleaseStatus = jsonFile('.gse/release-bundles/gse-release-bundle-au
145
145
  const bundleOwnerKit = jsonFile('.gse/release-bundles/gse-release-bundle-audit/owner-external-gate-kit/kit-manifest.json')
146
146
 
147
147
  const artifactPendingSets = [
148
- ['final progress', (finalProgress?.blockers ?? []).map((gate) => gate.area).sort()],
148
+ ['final progress', (finalProgress?.pendingReleaseEvidence ?? []).map((gate) => gate.area).sort()],
149
149
  ['release status', (releaseStatus?.publicAcceptance?.pendingGates ?? []).map((gate) => gate.area).sort()],
150
150
  ['owner kit', (ownerKit?.gates ?? []).map((gate) => gate.area).sort()],
151
151
  ['bundle release status', (bundleReleaseStatus?.publicAcceptance?.pendingGates ?? []).map((gate) => gate.area).sort()],
@@ -159,7 +159,7 @@ const pathMatches = localPathMatches()
159
159
 
160
160
  const checks = [
161
161
  check('FFSC01', 'live final readiness resolves the MIT license decision', finalReadiness.status === 0 && licenseVerified && publicReleaseRecord.includes('License status: selected') && publicReleaseRecord.includes('SPDX identifier: MIT') && publicReleaseRecord.includes('Evidence status: accepted'), 'audit-final-readiness.mjs, .gse/releases/public-release-owner-required.md'),
162
- check('FFSC02', 'live public acceptance pending gates are current non-license gates', publicAcceptance.status === 0 && pendingAreas.length > 0 && sameList(pendingAreas, expectedPendingAreas) && !pendingAreas.includes('License decision'), pendingAreas.join(', ')),
162
+ check('FFSC02', 'live public acceptance pending gates are current non-license gates', publicAcceptance.status === 0 && sameList(pendingAreas, expectedPendingAreas) && !pendingAreas.includes('License decision') && (pendingAreas.length > 0 || publicAcceptanceData?.summary?.publicAccepted === 'verified'), pendingAreas.join(', ')),
163
163
  check('FFSC03', 'current control and handoff docs do not describe resolved license decision as pending', matches.length === 0, matches.length ? matches.join('; ') : currentFiles.join(', ')),
164
164
  check('FFSC04', 'canonical and bundled artifacts expose the same current pending gates', artifactPendingSets.every(([, areas]) => sameList(areas, expectedPendingAreas)), artifactPendingSets.map(([name, areas]) => `${name}: ${areas.join(', ')}`).join(' | ')),
165
165
  check('FFSC05', 'public release record accepted license wording is not contradictory', publicReleaseRecord.includes('Owner license decision accepted') && !publicReleaseRecord.includes('Owner license decision and validation evidence required'), '.gse/releases/public-release-owner-required.md'),