aero-agent-roles 1.2.0 → 1.2.2

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -2,7 +2,7 @@
 
 **The role layer for aerospace engineering agents** — professional roles that bind verified [Aero Agent Skills](https://github.com/ashfordeOU/aero-agent-skills) into end-to-end deliverables, with evidence gates and a human sign-off stop, shipped as an npm CLI and an MCP server. Built and maintained by [Ashforde OÜ](https://ashforde.org).
 
-> **Not yet published.** This package is wired and tested (`make package-test`) but `private: true` in `package.json` — npm refuses to publish it until that is deliberately removed. Ready to release, not released.
+> Published on npm as [`aero-agent-roles`](https://www.npmjs.com/package/aero-agent-roles). Install with `npm i -g aero-agent-roles`, then run `aero-roles --help`.
 
 Full role bank, figures, and provenance: [github.com/ashfordeOU/aero-agent-roles](https://github.com/ashfordeOU/aero-agent-roles) · [ashforde.org/aeroagentroles](https://ashforde.org/aeroagentroles)
 

package/lib/catalog.js

@@ -4,7 +4,7 @@
 // Roles are adopted deliberately, not routed by a trigger description the
 // way Aero Agent Skills' SKILL.md files are (ROLE.md has no `description`
 // field) — search() here is a plain token-overlap match over title,
-// deliverable_type, and domain, useful for "what role fits this job"
+// deliverable_type, domain and the standards a role is gated on, useful for "what role fits this job"
 // browsing, not a claimed parity port of any evaluated router.
 'use strict';
 
@@ -70,7 +70,7 @@ class Catalog {
     let t = this._tok.get(role.slug);
     if (!t) {
       t = {
-        haystack: new Set(tokens(`${role.title} ${role.deliverable_type} ${role.domain} ${role.slug}`)),
+        haystack: new Set(tokens(`${role.title} ${role.deliverable_type} ${role.domain} ${role.slug} ${(role.standards || []).join(' ')}`)),
       };
       this._tok.set(role.slug, t);
     }

package/lib/install.js

@@ -29,6 +29,7 @@ function install(catalog, slugs, opts) {
       }
       return r;
     });
+  const evidencePy = path.join(catalog.root, '..', 'scripts', 'evidence.py');
   fs.mkdirSync(dest, { recursive: true });
   const installed = [];
   for (const r of selection) {
@@ -39,6 +40,10 @@ function install(catalog, slugs, opts) {
       fs.symlinkSync(src, dst, 'dir');
     } else {
       fs.cpSync(src, dst, { recursive: true, force: true });
+      // cli.py imports evidence from ../../scripts, which does not exist
+      // beside a copied role. Its core/ directory is also on the import
+      // path, so the copy carries its own evidence.py there.
+      fs.copyFileSync(evidencePy, path.join(dst, 'core', 'evidence.py'));
     }
     installed.push({ slug: r.slug, folder: r.slug });
   }

package/manifest.json

@@ -195,7 +195,7 @@
    ],
    "skills_bound": 4,
    "tests": 38,
-   "stage_preview": "do254/hardware-planning -> do254/requirements-capture -> do254/verification -> do254/configuration-management -> core engine"
+   "stage_preview": "do254/hardware-planning -> do254/requirements-capture -> do254/hardware-verification -> do254/hardware-configuration-manag -> core engine"
   },
   {
    "slug": "engineering-analysis-engineer",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aero-agent-roles",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "The role layer for aerospace engineering agents: professional roles that bind verified Aero Agent Skills into end-to-end deliverables, with evidence gates and a human sign-off. A CLI and an MCP server. By Ashforde OU.",
   "license": "Apache-2.0",
   "author": "Ashforde OU <contact@ashforde.org> (https://ashforde.org)",
@@ -16,9 +16,11 @@
   "files": [
     "bin/",
     "lib/",
+    "scripts/",
     "manifest.json",
     "roles/",
-    "NOTICE"
+    "NOTICE",
+    "LICENSE"
   ],
   "scripts": {
     "prepack": "node scripts/prepack.js",
@@ -43,4 +45,4 @@
     "systems-engineering",
     "skills-library"
   ]
-}
+}

package/roles/adcs-engineer/cli.py

@@ -27,7 +27,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import adcs_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/aerodynamics-engineer/cli.py

@@ -22,7 +22,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import aerodynamics_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/aircraft-design-engineer/cli.py

@@ -19,7 +19,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import aircraft_design_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/aircraft-performance-engineer/cli.py

@@ -21,7 +21,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import aircraft_performance_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/aircraft-systems-sizing-engineer/cli.py

@@ -30,7 +30,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import aircraft_systems_sizing_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/airworthiness-compliance-engineer/cli.py

@@ -16,7 +16,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import airworthiness_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/as9100-quality-auditor/cli.py

@@ -17,7 +17,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import as9100_core as core
 import evidence  # noqa: E402

package/roles/autopilot-control-engineer/cli.py

@@ -20,7 +20,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import autopilot_control_engineer_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/boundary-layer-engineer/cli.py

@@ -29,7 +29,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import boundary_layer_engineer_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/composites-structures-engineer/cli.py

@@ -28,7 +28,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import composites_structures_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/data-bus-avionics-engineer/cli.py

@@ -27,7 +27,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import data_bus_avionics_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/do160-environmental-engineer/cli.py

@@ -16,7 +16,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import do160_environmental_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/do178c-cert-engineer/cli.py

@@ -13,7 +13,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import do178c_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/do254-hardware-engineer/ROLE.md

@@ -14,8 +14,8 @@ standards_bound:
 skills_bound:
   - avionics/do254/hardware-planning
   - avionics/do254/requirements-capture
-  - avionics/do254/verification
-  - avionics/do254/configuration-management
+  - avionics/do254/hardware-verification
+  - avionics/do254/hardware-configuration-management
 tools_allowed: [stdlib, offline-file-processing]
 forbidden:
   - "issue certification approval"
@@ -65,8 +65,8 @@ The role produces:
 |---|---|---|
 | 1. Hardware planning | do254/hardware-planning | AEH class (simple/complex), PHAC scope, artifact set |
 | 2. Requirements capture | do254/requirements-capture | requirement issue list, derived-vs-allocated classification, readiness verdict |
-| 3. Verification strategy | do254/verification | verification methods, coverage ratio (0.98 A/B, 0.95 C/D), independence |
-| 4. Configuration management | do254/configuration-management | change class, ECR/ECO path, HCI entries, baseline control |
+| 3. Verification strategy | do254/hardware-verification | verification methods, coverage ratio (0.98 A/B, 0.95 C/D), independence |
+| 4. Configuration management | do254/hardware-configuration-management | change class, ECR/ECO path, HCI entries, baseline control |
 | 5. Process assurance | core engine | process assurance records plan |
 | 6. Certification liaison | core engine | PHAC input, open items for the cert authority |
 

package/roles/do254-hardware-engineer/cli.py

@@ -19,7 +19,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import do254_hardware_core as core  # noqa: E402
 import evidence  # noqa: E402
@@ -31,8 +31,8 @@ HAS_SKILLS = os.path.isdir(os.path.join(AEROSKILLS, "skills"))
 # Bound avionics/do254 leaves and their logic files.
 DO254_LEAVES = {
     "hardware-planning": "avionics/do254/hardware-planning",
-    "verification": "avionics/do254/verification",
-    "configuration-management": "avionics/do254/configuration-management",
+    "verification": "avionics/do254/hardware-verification",
+    "configuration-management": "avionics/do254/hardware-configuration-management",
     "requirements-capture": "avionics/do254/requirements-capture",
 }
 

package/roles/do254-hardware-engineer/core/do254_hardware_core.py

@@ -47,13 +47,13 @@ DALS = ("A", "B", "C", "D", "E")
 
 # DO-254 verification logic: requirements-based test coverage ratio by
 # level: 0.98 at levels A/B, 0.95 at levels C/D (as encoded in the bound
-# avionics/do254/verification leaf). Level E (no safety effect) is
+# avionics/do254/hardware-verification leaf). Level E (no safety effect) is
 # typically outside DO-254 scope: no coverage target.
 COVERAGE_RATIO = {"A": 0.98, "B": 0.98, "C": 0.95, "D": 0.95, "E": None}
 
 # Verification independence by DAL: independent verification expected at
 # the higher hardware design assurance levels (A/B) per the bound
-# avionics/do254/verification leaf.
+# avionics/do254/hardware-verification leaf.
 INDEPENDENT = {"A": True, "B": True, "C": False, "D": False, "E": False}
 
 # Life cycle data set by DAL: the hardware life cycle data items a PHAC
@@ -218,7 +218,7 @@ def planning_artifacts(classification: str) -> list:
 
 
 # ---------------------------------------------------------------------------
-# Verification rules (grounded in avionics/do254/verification leaf)
+# Verification rules (grounded in avionics/do254/hardware-verification leaf)
 # ---------------------------------------------------------------------------
 
 def _check_dal(dal: str) -> None:
@@ -284,7 +284,7 @@ def structural_methods_text(dal: str) -> str:
 
 
 # ---------------------------------------------------------------------------
-# Configuration management (grounded in avionics/do254/configuration-management)
+# Configuration management (grounded in avionics/do254/hardware-configuration-management)
 # ---------------------------------------------------------------------------
 
 VALID_HARDWARE_CLASSES = ("simple", "complex")

package/roles/do254-hardware-engineer/tests/test_do254_bundle_profile.py

@@ -91,8 +91,8 @@ class TestDo254BundleProfile(unittest.TestCase):
         # all four bound leaves dispatch at least one logic cross-check
         leaves = {row["leaf"] for row in p["skills"]}
         for leaf in ("avionics/do254/hardware-planning",
-                     "avionics/do254/verification",
-                     "avionics/do254/configuration-management",
+                     "avionics/do254/hardware-verification",
+                     "avionics/do254/hardware-configuration-management",
                      "avionics/do254/requirements-capture"):
             self.assertIn(leaf, leaves, f"no dispatch row for {leaf}")
         for row in p["skills"]:

package/roles/do254-hardware-engineer/tests/test_role_do254_hardware.py

@@ -26,8 +26,8 @@ PHAC_TEMPLATE = os.path.join(ROLE_DIR, "templates", "phac-template.md")
 EXPECTED_BOUND = [
     "avionics/do254/hardware-planning",
     "avionics/do254/requirements-capture",
-    "avionics/do254/verification",
-    "avionics/do254/configuration-management",
+    "avionics/do254/hardware-verification",
+    "avionics/do254/hardware-configuration-management",
 ]
 
 EXPECTED_STAGES = [

package/roles/engineering-analysis-engineer/cli.py

@@ -21,7 +21,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import engineering_analysis_engineer_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/fem-analysis-engineer/cli.py

@@ -29,7 +29,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import fem_analysis_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/flight-management-engineer/cli.py

@@ -26,7 +26,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import flight_management_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/flight-mechanics-engineer/cli.py

@@ -20,7 +20,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import flight_mechanics_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/flight-software-engineer/cli.py

@@ -31,7 +31,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import flight_software_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/flight-test-engineer/cli.py

@@ -16,7 +16,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import flight_test_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/flight-test-performance-engineer/cli.py

@@ -22,7 +22,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import flight_test_performance_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/flight-test-planning-engineer/cli.py

@@ -26,7 +26,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import flight_test_planning_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/gnc-engineer/cli.py

@@ -17,7 +17,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import gnc_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/guidance-engineer/cli.py

@@ -23,7 +23,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import guidance_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/high-speed-aerodynamics-engineer/cli.py

@@ -29,7 +29,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import high_speed_aero_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/mbse-modeling-engineer/cli.py

@@ -27,7 +27,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import mbse_modeling_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/navigation-engineer/cli.py

@@ -18,7 +18,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import navigation_engineer_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/ndt-engineer/cli.py

@@ -26,7 +26,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import ndt_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/numerical-analysis-engineer/cli.py

@@ -31,7 +31,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import numerical_analysis_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/propulsion-engineer/cli.py

@@ -22,7 +22,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import propulsion_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/quality-management-engineer/cli.py

@@ -27,7 +27,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import quality_management_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/rocket-propulsion-engineer/cli.py

@@ -29,7 +29,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import rocket_propulsion_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/safety-assessment-engineer/cli.py

@@ -19,7 +19,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import safety_assessment_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/space-systems-engineer/ROLE.md

@@ -52,7 +52,7 @@ skills_bound:
   - space-systems/subsystems/thermal-design
   - space-systems/subsystems/propellant-tank-sizing
   - space-systems/subsystems/command-data-handling
-  - space-systems/ecss/systems-engineering
+  - space-systems/ecss/e10-systems-engineering
   - space-systems/ecss/software-engineering
   - space-systems/ecss/software-verification
 tools_allowed: [stdlib, offline-file-processing]
@@ -104,7 +104,7 @@ budgets. Do NOT use for aircraft certification or airframe roles.
 | 9. Power/thermal | power-thermal-budget + solar-array-sizing + spacecraft-battery-sizing + thermal-design | power/thermal budgets |
 | 10. Comms | communication-link-budget + antenna-aperture-sizing | link budget |
 | 11. Propulsion/C&DH | propellant-tank-sizing + command-data-handling | propulsion sizing, C&DH |
-| 12. ECSS context | ecss/systems-engineering + ecss/software-engineering + ecss/software-verification | process + software context |
+| 12. ECSS context | ecss/e10-systems-engineering + ecss/software-engineering + ecss/software-verification | process + software context |
 | 13. Report | (all above) | mission + subsystem reports |
 
 ## Evidence gates

package/roles/space-systems-engineer/cli.py

@@ -25,7 +25,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import space_systems_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/space-systems-engineer/tests/test_role_space_systems_engineer.py

@@ -54,7 +54,7 @@ EXPECTED_BOUND = [
     "space-systems/subsystems/thermal-design",
     "space-systems/subsystems/propellant-tank-sizing",
     "space-systems/subsystems/command-data-handling",
-    "space-systems/ecss/systems-engineering",
+    "space-systems/ecss/e10-systems-engineering",
     "space-systems/ecss/software-engineering",
     "space-systems/ecss/software-verification"
 ]

package/roles/stability-control-flight-test-engineer/cli.py

@@ -24,7 +24,7 @@ import os
 import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import stability_control_flight_test_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/state-estimation-engineer/cli.py

@@ -20,6 +20,8 @@ estimation-filtering leaf logic files and cross-checks identical
 computations (alpha-beta gains, Kalman recursion, EKF Jacobian, NEES,
 effective sample size); agreement is recorded in provenance.json.
 """
+from __future__ import annotations  # PEP 604 unions (dict | None) on Python 3.9
+
 import argparse
 import importlib.util
 import json
@@ -28,7 +30,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import state_estimation_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/structures-loads-engineer/cli.py

@@ -26,7 +26,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import structures_loads_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/systems-integration-engineer/ROLE.md

@@ -20,7 +20,7 @@ skills_bound:
   - systems-engineering-safety/arp4754a/derived-requirements
   - systems-engineering-safety/arp4754a/validation
   - systems-engineering-safety/arp4754a/verification-planning
-  - systems-engineering-safety/arp4754a/configuration-management
+  - systems-engineering-safety/arp4754a/systems-configuration-management
 tools_allowed: [stdlib, offline-file-processing]
 forbidden:
   - "issue certification approval"
@@ -85,7 +85,7 @@ The role produces:
 | 5. Derived requirements | arp4754a/derived-requirements | derived requirement register with source/rationale obligation |
 | 6. Validation | arp4754a/validation | validation closure score, independence need at A/B |
 | 7. Integration verification | arp4754a/verification-planning | acceptable methods per level, method-to-requirement coverage |
-| 8. Configuration management | arp4754a/configuration-management | CI baseline, change classification (major/minor), change log |
+| 8. Configuration management | arp4754a/systems-configuration-management | CI baseline, change classification (major/minor), change log |
 | 9. Plan + gates | (all above) | the System Development Assurance and Integration Plan + bundle |
 
 ## Evidence gates

package/roles/systems-integration-engineer/cli.py

@@ -28,7 +28,7 @@ import sys
 
 sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
                                 "core"))
-sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.realpath(__file__)),
                                 "..", "..", "scripts"))
 import systems_integration_core as core  # noqa: E402
 import evidence  # noqa: E402

package/roles/systems-integration-engineer/tests/test_role_systems_integration_engineer.py

@@ -40,7 +40,7 @@ EXPECTED_BOUND = [
     "systems-engineering-safety/arp4754a/derived-requirements",
     "systems-engineering-safety/arp4754a/validation",
     "systems-engineering-safety/arp4754a/verification-planning",
-    "systems-engineering-safety/arp4754a/configuration-management",
+    "systems-engineering-safety/arp4754a/systems-configuration-management",
 ]
 
 EXPECTED_STAGES = [

package/scripts/evidence.py

@@ -0,0 +1,198 @@
+#!/usr/bin/env python3
+"""evidence.py - shared evidence-bundle writer for role CLIs.
+
+Implements docs/PROTOCOL.md v1: every role emits
+  deliverable.md + evidence/{model.json, gates.json, provenance.json}
+so any harness can consume results programmatically.
+
+Usage (from a role cli.py):
+    import sys, os
+    sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+                                    "..", "..", "scripts"))
+    import evidence
+    evidence.write_bundle(out_dir, role_slug, model, gates, provenance)
+"""
+from __future__ import annotations
+
+import json
+import os
+from datetime import datetime, timezone
+
+
+def _utcnow() -> str:
+    return datetime.now(timezone.utc).isoformat(timespec="seconds")
+
+
+def load_profile(path: str) -> dict | None:
+    """Load and validate a program profile JSON (docs/PROFILE-SCHEMA.md)."""
+    if not path or not os.path.exists(path):
+        return None
+    with open(path) as f:
+        p = json.load(f)
+    if not isinstance(p, dict) or not p.get("customer"):
+        raise ValueError("profile must be a JSON object with 'customer'")
+    return p
+
+
+def profile_header_block(profile: dict) -> str:
+    """Render a markdown header block for a program profile.
+
+    Returns "" when profile is None. NEVER an approval — always a DRAFT
+    context header for human review.
+    """
+    if not profile:
+        return ""
+    lines = [
+        "## Program context (profile)",
+        "",
+        f"- Customer: {profile.get('customer', '')}",
+        f"- Program: {profile.get('program', '')}",
+        f"- Basis: {profile.get('basis', '')}  ·  "
+        f"Authority: {profile.get('authority', '')}",
+    ]
+    if profile.get("der"):
+        lines.append(f"- DER/CVE: {profile['der']}")
+    if profile.get("document_prefix"):
+        rev = profile.get("revision", "")
+        lines.append(f"- Document: {profile['document_prefix']}"
+                     + (f" {rev}" if rev else ""))
+    if profile.get("standards"):
+        lines.append("- Standards: " + ", ".join(profile["standards"]))
+    if profile.get("notes"):
+        lines.append(f"- Notes: {profile['notes']}")
+    lines += [
+        "",
+        "> This document is a DRAFT for human review within the program "
+        "sign-off chain. It is not an approval and carries no regulatory "
+        "authority.",
+        "",
+    ]
+    return "\n".join(lines)
+
+
+def dispatch_crosscheck(leaf: str, skill_fn: str, core_fn,
+                        tolerance: float = 1e-6,
+                        skills_root: str = "") -> dict | None:
+    """Run a bound AeroSkills leaf's logic fn and compare to the core fn.
+
+    Both functions are called with the same kwargs. Returns a provenance
+    row: {leaf, logic_file, function, dispatched, core_value,
+    skill_value, delta, agrees}. Returns None if the skill logic file or
+    function is unavailable.
+
+    leaf         e.g. 'structures/loads/gust-maneuver-loads'
+    skill_fn     the function name inside the leaf's *logic.py
+    core_fn      a zero-arg callable returning the core's computed value
+    skills_root  AeroSkills root (default: AEROSKILLS_DEV or ~/company-ops/aero-agent-skills)
+    """
+    import importlib.util  # local import (stdlib)
+    root = skills_root or os.environ.get(
+        "AEROSKILLS_DEV", os.path.expanduser("~/company-ops/aero-agent-skills"))
+    logic_dir = os.path.join(root, "skills", leaf, "scripts")
+    if not os.path.isdir(logic_dir):
+        return None
+    logic_files = sorted(f for f in os.listdir(logic_dir)
+                         if f.endswith("_logic.py"))
+    if not logic_files:
+        return None
+    # try each logic file until one exposes the requested fn
+    for lf in logic_files:
+        path = os.path.join(logic_dir, lf)
+        spec = importlib.util.spec_from_file_location("role_dispatch", path)
+        mod = importlib.util.module_from_spec(spec)
+        try:
+            spec.loader.exec_module(mod)
+        except Exception:
+            continue
+        if not hasattr(mod, skill_fn):
+            continue
+        try:
+            skill_value = getattr(mod, skill_fn)()
+            core_value = core_fn()
+            if not isinstance(skill_value, (int, float)) or \
+               not isinstance(core_value, (int, float)):
+                continue
+            delta = abs(float(core_value) - float(skill_value))
+            return {
+                "leaf": leaf,
+                "logic_file": lf,
+                "function": skill_fn,
+                "dispatched": True,
+                "core_value": round(float(core_value), 6),
+                "skill_value": round(float(skill_value), 6),
+                "delta": round(delta, 9),
+                "agrees": delta <= tolerance,
+                "tolerance": tolerance,
+            }
+        except Exception:
+            continue
+    return None
+
+
+def write_json(path: str, obj: dict) -> None:
+    os.makedirs(os.path.dirname(path), exist_ok=True)
+    with open(path, "w") as f:
+        json.dump(obj, f, indent=2, sort_keys=True)
+
+
+def write_bundle(out_md: str, role: str, deliverable_type: str,
+                 model: dict, gates: dict, provenance: dict) -> dict:
+    """Write the evidence bundle next to the markdown deliverable.
+
+    out_md       path of the deliverable .md (evidence/ goes beside it)
+    role         role slug, e.g. "structures-loads-engineer"
+    model        the computed content model (build_<deliverable>() result)
+    gates        gates dict from check_<deliverable>() (has 'all_pass')
+    provenance   provenance dict (core + skills + disclaimer)
+
+    Returns the paths written: {"model": ..., "gates": ..., "provenance": ...}
+    """
+    ev_dir = os.path.join(os.path.dirname(os.path.abspath(out_md)), "evidence")
+    os.makedirs(ev_dir, exist_ok=True)
+
+    # Normalize gates into the protocol shape
+    gate_rows = []
+    for k, v in gates.items():
+        if k in ("all_pass", "exit_code", "checker"):
+            continue
+        if isinstance(v, dict):
+            gate_rows.append({"gate": k, "pass": bool(v.get("pass", v.get("ok", False))),
+                              "detail": str(v.get("detail", ""))})
+        else:
+            gate_rows.append({"gate": k, "pass": bool(v)})
+    gates_payload = {
+        "schema_version": 1,
+        "role": role,
+        "checker": gates.get("checker", "check_<deliverable>"),
+        "gates": gate_rows,
+        "all_pass": bool(gates.get("all_pass", all(r["pass"] for r in gate_rows))),
+        "exit_code": 0 if gates.get("all_pass", all(r["pass"] for r in gate_rows)) else 1,
+        "checked_at": _utcnow(),
+    }
+
+    model_payload = dict(model or {})
+    model_payload.setdefault("schema_version", 1)
+    model_payload.setdefault("role", role)
+    model_payload.setdefault("deliverable_type", deliverable_type)
+    model_payload.setdefault("generated", _utcnow())
+    model_payload.setdefault("status", "draft-for-review")
+    # generator = the producing agent/role. The VERIFIER (gates.checker) must be
+    # independent of it (founder 2026-09-10): no bot grades its own output.
+    # The roles gates are deterministic Python checks, so they qualify; this
+    # field makes the relationship checkable by scripts/verify-independence.py.
+    model_payload.setdefault("generator", role)
+
+    prov_payload = dict(provenance or {})
+    prov_payload.setdefault("schema_version", 1)
+    prov_payload.setdefault("role", role)
+    prov_payload.setdefault("disclaimer",
+                            "DRAFT for human review. Not an approval document.")
+
+    model_path = os.path.join(ev_dir, "model.json")
+    gates_path = os.path.join(ev_dir, "gates.json")
+    prov_path = os.path.join(ev_dir, "provenance.json")
+    write_json(model_path, model_payload)
+    write_json(gates_path, gates_payload)
+    write_json(prov_path, prov_payload)
+
+    return {"model": model_path, "gates": gates_path, "provenance": prov_path}

package/scripts/prepack.js

@@ -0,0 +1,49 @@
+// Runs on `npm pack` / `npm publish` from the repo checkout: copies the
+// payload (roles tree, NOTICE) from the repo root into the package so the
+// tarball is self-contained. The copy is gitignored — the repo tree stays
+// the single source of truth.
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const pkg = path.join(__dirname, '..');
+const repo = path.join(pkg, '..', '..');
+
+if (!fs.existsSync(path.join(repo, 'roles')) || !fs.existsSync(path.join(repo, 'manifest.json'))) {
+  console.error('prepack: must run from the aero-agent-roles repo checkout (roles/ not found two levels up)');
+  process.exit(1);
+}
+
+fs.rmSync(path.join(pkg, 'roles'), { recursive: true, force: true });
+fs.cpSync(path.join(repo, 'roles'), path.join(pkg, 'roles'), { recursive: true });
+fs.copyFileSync(path.join(repo, 'NOTICE'), path.join(pkg, 'NOTICE'));
+// Apache-2.0 section 4(a): a copy of the licence goes with every copy of the
+// work, and npm only picks LICENSE up from the package directory itself.
+fs.copyFileSync(path.join(repo, 'LICENSE'), path.join(pkg, 'LICENSE'));
+
+// scripts/evidence.py travels with the tarball. Every role's cli.py does
+// `sys.path.insert(.., '../../scripts'); import evidence`, so without this the
+// installed package has 38 CLIs that all die on import. Shipped 1.2.0 did.
+fs.mkdirSync(path.join(pkg, 'scripts'), { recursive: true });
+fs.copyFileSync(path.join(repo, 'scripts', 'evidence.py'),
+                path.join(pkg, 'scripts', 'evidence.py'));
+
+// Strip Python bytecode caches: local test runs leave __pycache__/*.pyc
+// behind, and a plain cpSync copies them straight into the tarball. Never
+// ship compiled bytecode in a public package regardless of dev-tree state.
+function stripPycache(dir) {
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (entry.name === '__pycache__') {
+        fs.rmSync(full, { recursive: true, force: true });
+      } else {
+        stripPycache(full);
+      }
+    }
+  }
+}
+stripPycache(path.join(pkg, 'roles'));
+
+console.log('prepack: bundled roles/, scripts/evidence.py, NOTICE, LICENSE from repo root (pycache stripped)');