@twinsearth/agent-universe 2.5.8 → 2.6.0

package/README.md

@@ -273,7 +273,7 @@ npm config set @twinsearth:registry https://npm.pkg.github.com
 npm install @twinsearth/agent-universe
 ```
 
-已发布版本：1.0.0 / 2.0.0 / 2.2.0 / 2.3.0 / 2.3.1 / 2.3.4 / 2.3.5 / 2.3.6 / 2.4.0 ~ 2.5.8，详见 [Releases](https://github.com/TwinsEarth/agent-universe/releases)。
+已发布版本：1.0.0 / 2.0.0 / 2.2.0 / 2.3.0 / 2.3.1 / 2.3.4 / 2.3.5 / 2.3.6 / 2.4.0 ~ 2.6.0，详见 [Releases](https://github.com/TwinsEarth/agent-universe/releases)。
 
 ## 版本谱系
 
@@ -309,6 +309,8 @@ npm install @twinsearth/agent-universe
 | v2.5.6 | **Regression** | **历史 Bug 回归套件：test/ 14 条 + Rust 网络回归，CI 强制全量回归，修新 bug 先加用例** |
 | v2.5.7 | **Identity** | **跨实现身份一致性：统一 DID 派生口径 + conformance 签名向量逐字节命中上游 + 客户端构建链路根治（file: 依赖）** |
 | v2.5.8 | **Ledger** | **精确整数账本 Money(i64)：守恒精确相等无容差 + 发布即托管 __escrow__ 防铸币 + 三端共享金额向量逐值一致** |
+| v2.5.9 | **Auth QA** | **认证式 BFT（固定委员集 Ed25519 签名票，替代调用方合成）+ 可失败独立审计（只信任流水独立重放）+ nonce/时间窗重放保护 + 只追加结算流水** |
+| v2.6.0 | **State Machine** | **状态机恢复边（no_quorum→open、rework→running，消除 NoQuorum 吸收态）+ 证据分级作为结算强制闸门（is_trustworthy 此前零调用点）+ policy=None 提交即验收** |
 
 详见 [RELEASES.md](RELEASES.md) 和 [releases/](releases/) 目录。
 

package/js/index.js

@@ -9,7 +9,7 @@ const { AgentMarket, Bid, Reputation, MIN_STAKE } = require('./lib/market');
 const { McpHttpClient, McpError, MCP_PROTOCOL_VERSION } = require('./lib/mcp');
 const aca = require('./lib/aca');
 
-const version = '2.5.8';
+const version = '2.6.0';
 
 /**
  * AgentUniverse 门面：聚合身份、网络、市场能力

package/js/lib/aca.js

@@ -129,7 +129,7 @@ function buildManifest(identity, name, capabilities, opts = {}) {
   const manifest = {
     did: identity.did,
     name,
-    version: opts.version || '2.5.8',
+    version: opts.version || '2.6.0',
     capabilities: [...capabilities],
     endpoints: opts.endpoints || [],
     hardware: {

package/js/lib/market.js

@@ -38,7 +38,15 @@ class AgentMarket {
     this.bids = new Map();        // taskId → Bid[]
     this.balances = new Map();    // 账户 → 余额
     this.totalSlashed = 0;
+    this.totalDeposits = 0;
     this.paidTasks = new Set();   // 已结算任务（防重复支付）
+    this.records = [];            // 只追加结算流水（独立审计的唯一信任源）
+    this._seenNonces = new Set(); // 已用投票 nonce（防重放）
+  }
+
+  /** 追加一条结算流水（与 Rust SettlementRecord 对齐） */
+  _record(from, to, amount, reason) {
+    this.records.push({ from, to, amount, reason });
   }
 
   /** 金额必须是安全整数（与 Rust Money(i64) 对齐，杜绝浮点导致的跨语言守恒失效） */
@@ -55,6 +63,8 @@ class AgentMarket {
     if (amount < 0) throw new Error('金额不能为负');
     const cur = this.balances.get(account) || 0;
     this.balances.set(account, cur + amount);
+    this.totalDeposits += amount;
+    this._record('', account, amount, 'Deposited');
   }
 
   balance(account) {
@@ -88,6 +98,7 @@ class AgentMarket {
     const stakeAcc = this._stakeAccount(owner);
     this.balances.set(owner, this.balance(owner) - stake);
     this.balances.set(stakeAcc, this.balance(stakeAcc) + stake);
+    this._record(owner, stakeAcc, stake, 'Staked');
 
     this.agents.set(card.did, {
       card,
@@ -110,6 +121,7 @@ class AgentMarket {
     this.balances.set(requester, this.balance(requester) - budget);
     const escrowAcc = this._escrowAccount(taskId);
     this.balances.set(escrowAcc, this.balance(escrowAcc) + budget);
+    this._record(requester, escrowAcc, budget, 'Escrowed');
 
     const task = new Task(taskId, goal);
     task.transition(TaskStatus.OPEN);
@@ -163,11 +175,33 @@ class AgentMarket {
   }
 
   /** 执行 → 完成 → 验证 */
-  completeTask(taskId, passed = true) {
+  completeTask(taskId, passed = true, evidenceGrade = 'CpuProto') {
     const task = this.tasks.get(taskId);
     task.start();
     task.complete();
-    task.verify(passed);
+    task.evidenceGrade = evidenceGrade;
+    if (task.verificationPolicy === 'None') {
+      // 无需 QA：提交结果即验收（证据门禁亦豁免）
+      task.transition(TaskStatus.VERIFIED);
+    } else {
+      task.verify(passed);
+    }
+    return task;
+  }
+
+  /** 恢复边：返工任务回到执行中（v2.6.0） */
+  resumeAfterRework(taskId) {
+    const task = this.tasks.get(taskId);
+    if (!task) throw new Error('任务不存在');
+    task.resumeAfterRework();
+    return task;
+  }
+
+  /** 恢复边：无共识任务重新开放（v2.6.0，消除吸收态） */
+  reopenTask(taskId) {
+    const task = this.tasks.get(taskId);
+    if (!task) throw new Error('任务不存在');
+    task.reopenAfterNoQuorum();
     return task;
   }
 
@@ -183,6 +217,14 @@ class AgentMarket {
       return { paid: 0, reason: 'rejected' };
     }
 
+    // 证据分级强制闸门（v2.6.0）：需要验证的任务，结果证据必须可信；
+    // policy='None' 时豁免。
+    if (task.verificationPolicy !== 'None') {
+      if (task.evidenceGrade !== 'Verified' && task.evidenceGrade !== 'CpuProto') {
+        return { paid: 0, reason: 'untrusted_evidence' };
+      }
+    }
+
     const price = task.winnerPrice || task.budget;
     const pay = Math.min(price, task.budget);
 
@@ -191,11 +233,13 @@ class AgentMarket {
     const assignee = task.assignee;
     this.balances.set(escrowAcc, this.balance(escrowAcc) - pay);
     this.balances.set(assignee, this.balance(assignee) + pay);
+    this._record(escrowAcc, assignee, pay, 'Completed');
     // 未用完的预算退还需求方
     const refund = task.budget - pay;
     if (refund > 0) {
       this.balances.set(escrowAcc, this.balance(escrowAcc) - refund);
       this.balances.set(task.requester, this.balance(task.requester) + refund);
+      this._record(escrowAcc, task.requester, refund, 'Refunded');
     }
 
     task.settle();
@@ -215,6 +259,7 @@ class AgentMarket {
     const stakeAcc = this._stakeAccount(agentId);
     this.balances.set(stakeAcc, this.balance(stakeAcc) - actual);
     this.totalSlashed += actual;
+    this._record(stakeAcc, '', actual, 'Slashed');
     entry.status = entry.stake < MIN_STAKE ? 'suspended' : entry.status;
     return { slashed: actual, reason, remainingStake: entry.stake };
   }
@@ -260,6 +305,164 @@ class AgentMarket {
       expected,
     };
   }
+
+  /**
+   * 认证式 QA 验证（v2.5.9，与 Rust verify_result_authenticated 对齐）
+   * members: [{did, public_key(hex32)}] 固定委员集
+   * signedVotes: [SignedQaVote]，vote 为 Stop/Continue
+   */
+  verifyResultAuthenticated(
+    taskId,
+    members,
+    signedVotes,
+    round = 0,
+    now = Math.floor(Date.now() / 1000),
+  ) {
+    if (!Array.isArray(members) || members.length === 0) {
+      throw new Error('members 必须为非空固定委员集');
+    }
+    const n = members.length;
+    const f = Math.floor((n - 1) / 3);
+    const pubkeys = new Map();
+    for (const m of members) {
+      const pk = m.public_key || m.publicKey;
+      if (!m.did || !pk) throw new Error('委员需含 did 与 public_key');
+      if (!/^[0-9a-fA-F]{64}$/.test(pk)) throw new Error('委员公钥须为 32 字节 hex');
+      pubkeys.set(m.did, pk.toLowerCase());
+    }
+
+    // 逐票校验；voterVotes 记录每个委员最终立场（equivocated 票作废）
+    const voterVotes = new Map();
+    for (const sv of signedVotes || []) {
+      const pk = pubkeys.get(sv.voter);
+      if (!pk) throw new Error(`投票者 ${sv.voter} 不在固定委员集`);
+      if (sv.task_id !== taskId) throw new Error('投票任务不匹配');
+      if (Number(sv.round) !== round) throw new Error('投票轮次不匹配');
+      const issued = Number(sv.issued_at);
+      const expires = Number(sv.expires_at);
+      if (!(expires > issued) || now < issued || now > expires) {
+        throw new Error(`投票 ${sv.nonce} 不在有效时间窗`);
+      }
+      const voteTag = String(sv.vote).toLowerCase();
+      if (voteTag === 'silent') throw new Error('Silent 票不计入');
+      // 先验签，避免无效票污染 nonce
+      if (!AgentMarket._verifyEd25519(pk, AgentMarket._voteSigningBytes(sv), sv.signature)) {
+        throw new Error(`投票 ${sv.nonce} 签名无效`);
+      }
+      if (!sv.nonce) throw new Error('nonce 不能为空');
+      if (this._seenNonces.has(sv.nonce)) throw new Error(`投票 ${sv.nonce} 重放`);
+      this._seenNonces.add(sv.nonce);
+      const prev = voterVotes.get(sv.voter);
+      if (prev && prev !== voteTag) voterVotes.set(sv.voter, 'equivocated');
+      else if (!prev) voterVotes.set(sv.voter, voteTag);
+    }
+
+    let stops = 0;
+    let continues = 0;
+    for (const v of voterVotes.values()) {
+      if (v === 'stop') stops += 1;
+      else if (v === 'continue') continues += 1;
+    }
+    const quorum = 2 * f + 1;
+    let decision;
+    if (stops >= quorum) decision = 'stop';
+    else if (continues >= quorum) decision = 'continue';
+    else decision = 'no_quorum';
+    const accepted = decision === 'stop';
+    const task = this.tasks.get(taskId);
+    if (task && decision === 'stop') task.verify(true);
+    return { decision, accepted, stops, continues, quorum, n, f };
+  }
+
+  /**
+   * 独立审计（v2.5.9，与 Rust independent_audit 对齐）
+   * 只信任 records，逐笔重放出期望余额，再与当前 balances 逐户比对；
+   * 能发现守恒检查无法察觉的账实不符（如拆账、幽灵账户）。
+   */
+  independentAudit() {
+    const expected = new Map();
+    const add = (acct, delta) => {
+      const cur = expected.get(acct) || 0;
+      const v = cur + delta;
+      if (!Number.isSafeInteger(v)) throw new Error('重放溢出');
+      expected.set(acct, v);
+    };
+    let replayedDeposits = 0;
+    let replayedSlashed = 0;
+    for (const r of this.records) {
+      switch (r.reason) {
+        case 'Deposited':
+          add(r.to, r.amount);
+          replayedDeposits += r.amount;
+          break;
+        case 'Slashed':
+          add(r.from, -r.amount);
+          replayedSlashed += r.amount;
+          break;
+        default:
+          if (r.amount > 0) {
+            add(r.from, -r.amount);
+            add(r.to, r.amount);
+          }
+      }
+    }
+
+    const accounts = new Set([...expected.keys(), ...this.balances.keys()]);
+    const mismatches = [];
+    for (const a of accounts) {
+      const exp = expected.get(a) || 0;
+      const act = this.balances.get(a) || 0;
+      if (exp !== act) mismatches.push({ account: a, expected: exp, actual: act });
+    }
+    let balanceSum = 0;
+    for (const v of this.balances.values()) balanceSum += v;
+    const aggregateMatches =
+      replayedDeposits === this.totalDeposits &&
+      replayedSlashed === this.totalSlashed;
+    const expectedTotal = replayedDeposits - replayedSlashed;
+    return {
+      passed:
+        mismatches.length === 0 &&
+        aggregateMatches &&
+        expectedTotal === balanceSum,
+      replayedRecords: this.records.length,
+      replayedDeposits,
+      replayedSlashed,
+      expectedTotal,
+      actualTotal: balanceSum,
+      aggregateMatches,
+      mismatches,
+    };
+  }
+
+  /** 投票待签名规范字节（与 Rust SignedQaVote::signing_bytes 逐字一致） */
+  static _voteSigningBytes(sv) {
+    const tag = String(sv.vote).toUpperCase();
+    return (
+      `AU-QA-VOTE\ntask_id=${sv.task_id}\nround=${sv.round}\nvoter=${sv.voter}` +
+      `\nvote=${tag}\nnonce=${sv.nonce}\nissued_at=${sv.issued_at}` +
+      `\nexpires_at=${sv.expires_at}`
+    );
+  }
+
+  /** Ed25519 验签；无 crypto 的环境（WKWebView）抛明确错误而非静默通过 */
+  static _verifyEd25519(pubkeyHex, message, signatureHex) {
+    let crypto;
+    try {
+      crypto = require('crypto');
+    } catch (e) {
+      throw new Error('当前环境无 Ed25519 验签能力；签名验证须在 Node/Rust 侧进行');
+    }
+    const SPKI = '302a300506032b6570032100';
+    const der = Buffer.from(SPKI + pubkeyHex, 'hex');
+    const key = crypto.createPublicKey({ key: der, format: 'der', type: 'spki' });
+    return crypto.verify(
+      null,
+      Buffer.from(message, 'utf8'),
+      key,
+      Buffer.from(signatureHex, 'hex'),
+    );
+  }
 }
 
 module.exports = { AgentMarket, Bid, Reputation, MIN_STAKE };

package/js/lib/mcp.js

@@ -60,7 +60,7 @@ class McpHttpClient {
       method: 'initialize',
       params: {
         protocolVersion: MCP_PROTOCOL_VERSION,
-        clientInfo: { name: 'agent-universe-js', version: '2.5.8' },
+        clientInfo: { name: 'agent-universe-js', version: '2.6.0' },
         capabilities: {},
       },
     });

package/js/lib/models.js

@@ -13,6 +13,7 @@ const TaskStatus = {
   VERIFIED: 'verified',
   SETTLED: 'settled',
   REWORK: 'rework',
+  NO_QUORUM: 'no_quorum',
   DISPUTED: 'disputed',
   REJECTED: 'rejected',
 };
@@ -24,9 +25,10 @@ const TRANSITIONS = {
   [TaskStatus.MATCHED]: [TaskStatus.ASSIGNED],
   [TaskStatus.ASSIGNED]: [TaskStatus.RUNNING],
   [TaskStatus.RUNNING]: [TaskStatus.COMPLETED, TaskStatus.REWORK],
-  [TaskStatus.COMPLETED]: [TaskStatus.VERIFIED, TaskStatus.DISPUTED, TaskStatus.REWORK],
+  [TaskStatus.COMPLETED]: [TaskStatus.VERIFIED, TaskStatus.DISPUTED, TaskStatus.REWORK, TaskStatus.NO_QUORUM],
   [TaskStatus.VERIFIED]: [TaskStatus.SETTLED],
-  [TaskStatus.REWORK]: [TaskStatus.RUNNING],
+  [TaskStatus.REWORK]: [TaskStatus.RUNNING], // 恢复边：返工 → 继续执行
+  [TaskStatus.NO_QUORUM]: [TaskStatus.OPEN], // 恢复边：无共识 → 重新开放
   [TaskStatus.DISPUTED]: [TaskStatus.SETTLED, TaskStatus.REJECTED],
   [TaskStatus.SETTLED]: [],
   [TaskStatus.REJECTED]: [],
@@ -78,6 +80,8 @@ class Task {
     this.goal = goal;
     this.status = TaskStatus.PENDING;
     this.assignee = null;
+    this.verificationPolicy = 'BftLite'; // 验证策略；'None' 时提交即验收、豁免证据门禁
+    this.evidenceGrade = null;           // 结果信封证据等级
     this.history = [TaskStatus.PENDING];
   }
 
@@ -116,6 +120,27 @@ class Task {
     throw new Error('只有验证通过的任务才能结算');
   }
 
+  /** 本轮验收无共识（v2.6.0） */
+  markNoQuorum() {
+    return this.transition(TaskStatus.NO_QUORUM);
+  }
+
+  /** 恢复边：无共识任务重新开放（v2.6.0，消除吸收态） */
+  reopenAfterNoQuorum() {
+    if (this.status !== TaskStatus.NO_QUORUM) {
+      throw new Error(`只有 NO_QUORUM 状态才能重新开放，当前 ${this.status}`);
+    }
+    return this.transition(TaskStatus.OPEN);
+  }
+
+  /** 恢复边：返工任务回到执行中（v2.6.0） */
+  resumeAfterRework() {
+    if (this.status !== TaskStatus.REWORK) {
+      throw new Error(`只有 REWORK 状态才能恢复执行，当前 ${this.status}`);
+    }
+    return this.transition(TaskStatus.RUNNING);
+  }
+
   get isTerminal() {
     return this.status === TaskStatus.SETTLED || this.status === TaskStatus.REJECTED;
   }

package/js/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@twinsearth/agent-universe",
-  "version": "2.5.8",
+  "version": "2.6.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@twinsearth/agent-universe",
-      "version": "2.5.8",
+      "version": "2.6.0",
       "license": "MIT",
       "engines": {
         "node": ">=18"

package/js/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/agent-universe",
-  "version": "2.5.8",
+  "version": "2.6.0",
   "description": "Agent Universe - 群众化的 AGI 路线，去中心化的智能体共享 & 开源网络。使命：让科技造福全人类！",
   "main": "index.js",
   "types": "index.d.ts",

package/js/test/test.js

@@ -43,8 +43,8 @@ function test(name, fn) {
 console.log('Agent Universe JS SDK 测试\n');
 
 // 1. 版本号
-test('版本号为 2.5.8', () => {
-  assert.strictEqual(version, '2.5.8');
+test('版本号为 2.6.0', () => {
+  assert.strictEqual(version, '2.6.0');
 });
 
 // 2. 密钥对 + DID + 签名验证
@@ -195,6 +195,101 @@ test('跨语言金额向量：逐账户余额命中 conformance 向量', () => {
   assert.strictEqual(report.conserved, vector.expected_report.conserved);
 });
 
+// 8d. 认证式 QA：固定委员集 + 签名票（v2.5.9，与 Rust 认证式 BFT 对齐）
+test('认证式 QA：固定委员签名票通过、伪造与重放拒绝', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:qa-owner';
+  const requester = 'did:au:qa-req';
+  market.deposit(owner, 100);
+  market.deposit(requester, 50);
+  const card = AgentCard.new({ did: owner, name: 'worker' }).withSkill('writing');
+  market.registerAgent(card, MIN_STAKE);
+  market.publishTask('task-qa', 'goal', 50, requester);
+  market.submitBid('task-qa', owner, 40);
+  market.matchTask('task-qa');
+  // 执行完成，停在 COMPLETED 等待认证式验收（不走本地 verify）
+  const t = market.tasks.get('task-qa');
+  t.start();
+  t.complete();
+
+  // 固定 4 委员（n=4, f=1, quorum=3）
+  const now = Math.floor(Date.now() / 1000);
+  const kps = [];
+  const members = [];
+  for (let i = 0; i < 4; i++) {
+    const kp = Keypair.generate();
+    kps.push(kp);
+    members.push({ did: kp.did, public_key: kp.rawPublicKey().toString('hex') });
+  }
+  const makeVote = (kp, vote, nonce, round = 0) => {
+    const sv = {
+      task_id: 'task-qa', round, voter: kp.did, vote, nonce,
+      issued_at: now - 60, expires_at: now + 3600, signature: '',
+    };
+    sv.signature = kp.sign(AgentMarket._voteSigningBytes(sv));
+    return sv;
+  };
+  // 前 3 委员签 Stop
+  const votes = [
+    makeVote(kps[0], 'Stop', 'n1'),
+    makeVote(kps[1], 'Stop', 'n2'),
+    makeVote(kps[2], 'Stop', 'n3'),
+  ];
+  const r = market.verifyResultAuthenticated('task-qa', members, votes, 0, now);
+  assert.strictEqual(r.decision, 'stop');
+  assert.strictEqual(r.accepted, true);
+
+  // 伪造签名：委员3 签的票冒充委员0（round 1）→ 验签失败
+  const forged = makeVote(kps[3], 'Stop', 'nX', 1);
+  forged.voter = kps[0].did;
+  assert.throws(
+    () => market.verifyResultAuthenticated('task-qa', members, [forged], 1, now),
+    /签名无效/,
+  );
+
+  // 重放：委员3 在 round1 复用已用 nonce n1 → 拒绝
+  const replay = makeVote(kps[3], 'Stop', 'n1', 1);
+  assert.throws(
+    () => market.verifyResultAuthenticated('task-qa', members, [replay], 1, now),
+    /重放/,
+  );
+});
+
+// 8e. 独立审计：完整生命周期通过、守恒无法发现的拆账篡改被捕获（v2.5.9）
+test('独立审计：完整生命周期通过并捕获账实篡改', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:au-owner';
+  const requester = 'did:au:au-req';
+  market.deposit(owner, 100);
+  market.deposit(requester, 50);
+  const card = AgentCard.new({ did: owner, name: 'w' }).withSkill('writing');
+  market.registerAgent(card, MIN_STAKE);
+  market.publishTask('task-au', 'goal', 50, requester);
+  market.submitBid('task-au', owner, 40);
+  market.matchTask('task-au');
+  market.completeTask('task-au', true);
+  market.settle('task-au');
+
+  const good = market.independentAudit();
+  assert.ok(good.passed, `审计应通过: ${JSON.stringify(good.mismatches)}`);
+
+  // 拆账篡改：质押账户 100 → 50，另开幽灵账户 50（总额不变）
+  const stakeAcc = `__stake__:${owner}`;
+  const before = market.balance(stakeAcc);
+  market.balances.set(stakeAcc, before - 50);
+  market.balances.set('__ghost__:split', 50);
+  // 守恒检查被蒙蔽（余额总和不变）
+  const cons = market.conservationCheck(150);
+  assert.ok(cons.conserved, '拆账不改总额，守恒被蒙蔽');
+  // 独立审计捕获
+  const bad = market.independentAudit();
+  assert.ok(!bad.passed, '独立审计应发现账实不符');
+  assert.ok(
+    bad.mismatches.some((m) => m.account === '__ghost__:split'),
+    '应列出幽灵拆账账户',
+  );
+});
+
 // 9. AipIdentity DID 与签名往返
 test('AipIdentity 生成 did:aip 且签名可验证', () => {
   const id = AipIdentity.generate();
@@ -257,6 +352,71 @@ test('ACA receipt 签名、结果哈希正反例', () => {
   assert.ok(!verifyReceiptResult(receipt, Buffer.from('other')));
 });
 
+// 13. v2.6.0 状态机恢复边：rework→running、no_quorum→open
+test('v2.6.0 状态机恢复边', () => {
+  const market = new AgentMarket();
+  market.deposit('did:au:req', 50);
+  market.publishTask('task-1', 'goal', 50, 'did:au:req');
+  const t = market.tasks.get('task-1');
+  t.assign('did:au:worker'); // OPEN→MATCHED→ASSIGNED
+  t.start();                 // ASSIGNED→RUNNING
+  t.complete();              // RUNNING→COMPLETED
+
+  // 返工 → 恢复执行
+  t.transition(TaskStatus.REWORK);
+  assert.strictEqual(t.status, TaskStatus.REWORK);
+  market.resumeAfterRework('task-1');
+  assert.strictEqual(t.status, TaskStatus.RUNNING);
+  // 非 REWORK 不能恢复
+  assert.throws(() => market.resumeAfterRework('task-1'), /REWORK/);
+
+  // 无共识 → 重新开放
+  t.complete();              // RUNNING→COMPLETED
+  t.markNoQuorum();          // COMPLETED→NO_QUORUM
+  assert.strictEqual(t.status, TaskStatus.NO_QUORUM);
+  market.reopenTask('task-1'); // NO_QUORUM→OPEN
+  assert.strictEqual(t.status, TaskStatus.OPEN);
+  // 非 NO_QUORUM 不能 reopen
+  assert.throws(() => market.reopenTask('task-1'), /NO_QUORUM/);
+});
+
+// 14. v2.6.0 Unverified 证据拒绝结算
+test('v2.6.0 Unverified 证据拒绝结算', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:owner';
+  market.deposit(owner, 100);
+  market.deposit('did:au:req', 50);
+  market.registerAgent(AgentCard.new({ did: owner, name: 'w' }), MIN_STAKE);
+  market.publishTask('task-1', 'goal', 50, 'did:au:req');
+  market.submitBid('task-1', owner, 40);
+  market.matchTask('task-1');
+  // 验收通过但证据 Unverified
+  market.completeTask('task-1', true, 'Unverified');
+  assert.strictEqual(market.tasks.get('task-1').status, TaskStatus.VERIFIED);
+  const r = market.settle('task-1');
+  assert.strictEqual(r.reason, 'untrusted_evidence');
+  assert.strictEqual(r.paid, 0);
+});
+
+// 15. v2.6.0 policy=None 提交即验收、豁免证据门禁
+test('v2.6.0 policy=None 提交即验收并豁免证据', () => {
+  const market = new AgentMarket();
+  const owner = 'did:au:owner';
+  market.deposit(owner, 100);
+  market.deposit('did:au:req', 50);
+  market.registerAgent(AgentCard.new({ did: owner, name: 'w' }), MIN_STAKE);
+  const t = market.publishTask('task-1', 'goal', 50, 'did:au:req');
+  t.verificationPolicy = 'None';
+  market.submitBid('task-1', owner, 40);
+  market.matchTask('task-1');
+  // 无 QA 投票，提交（证据 Unverified）即验收
+  market.completeTask('task-1', true, 'Unverified');
+  assert.strictEqual(t.status, TaskStatus.VERIFIED);
+  const r = market.settle('task-1');
+  assert.strictEqual(r.reason, 'settled');
+  assert.strictEqual(r.paid, 40);
+});
+
 console.log(`\n${passed} 项测试通过`);
 if (process.exitCode === 1) {
   console.error('存在失败测试');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/agent-universe",
-  "version": "2.5.8",
+  "version": "2.6.0",
   "description": "Agent Universe - 群众化的 AGI 路线，去中心化的智能体共享 & 开源网络。使命：让科技造福全人类！",
   "main": "index.js",
   "types": "index.d.ts",