agentic-flow-kit 0.8.0 → 0.9.1

package/templates/_agents/scripts/check-loop.test.mjs

@@ -11,6 +11,8 @@ import path from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { computeFingerprint } from './confirm-doc.mjs';
+import { POLICIES, loadKitPolicy } from './policy.mjs';
+import { entryConfirmed, MARK_RE } from './stage-gates.mjs';
 
 const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
 const CHECK_LOOP = path.join(SCRIPT_DIR, 'check-loop.mjs');
@@ -62,8 +64,9 @@ ${refs ? '     - 是 → ../intents/2026-09-12-ghost.md\n' : ' - 否 → 理由:
  - AGENTS.md 某节
 `;
 
-// run：默认 CHECK_LOOP_ROOT 注入（fixture 模式）；{git:true} 时 cwd 注入（真 git 模式，测 tracked 过滤）
-const run = (root, opts = {}) => spawnSync(process.execPath, [CHECK_LOOP], {
+// run：默认 CHECK_LOOP_ROOT 注入（fixture 模式）；{git:true} 时 cwd 注入（真 git 模式，测 tracked 过滤）；
+// opts.args 追加 CLI 参数（--hardening 等加固门场景用，2026-09-30 hybrid-governance-explore-hardening）
+const run = (root, opts = {}) => spawnSync(process.execPath, [CHECK_LOOP, ...(opts.args || [])], {
   ...(opts.git ? { cwd: root } : { cwd: ROOT_CWD, env: { ...process.env, CHECK_LOOP_ROOT: root } }),
   encoding: 'utf8',
 });
@@ -547,8 +550,8 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
     r.status === 0 && !outOf(r).includes('验收缺证据'), `exit=${r.status}\n${outOf(r)}`);
   rmfix(T);
 }
-// ---- 场景 41:检查 8——[x] 无证据且续行也无 → 报验收缺证据（回归：不可把豁免放大成漏检）----
-// 换锚后须真 git 仓：否则不可判定 → 走存量口径，「验收缺证据」这条 warning 也不再产出。
+// ---- 场景 41:检查 8——[x] 无证据且续行也无 → 报验收缺证据（hard 拦；回归：不可把豁免放大成漏检）----
+// 换锚后须真 git 仓：否则不可判定 → 走存量口径，「验收缺证据」这条 blocker 也不再产出。
 {
   const T = mkfix();
   gitInit(T);
@@ -557,8 +560,8 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
   w(T, 'workflow/plans/2026-09-12-ev2.md', PLAN('ev2', '状态: done\n级别: L1'));
   gitCommitAll(T, 'add');
   const r = run(T);
-  check('[x] 续行仍无证据 → 报验收缺证据',
-    r.status === 0 && outOf(r).includes('验收缺证据'), `exit=${r.status}\n${outOf(r)}`);
+  check('[x] 续行仍无证据 → 报验收缺证据（hard 拦 exit 1）',
+    r.status === 1 && outOf(r).includes('验收缺证据'), `exit=${r.status}\n${outOf(r)}`);
   rmfix(T);
 }
 // ---- 场景 42:检查 4——fill-{intent,spec,plan}.mjs 花括号展开，三路皆存在 → 不报引用断档 ----
@@ -1107,12 +1110,19 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
 {
   const MC = 'ledger.lines = ledger.lines\ndocs.count.plans = docs.count.plans\n';
   const seedLedger = (T, lines) => w(T, '.agents/confirmations.jsonl', lines.join('\n') + '\n');
+  // T2 口径适配（2026-09-28 check16-inline-debt）：scanFiles16 统一走 docFiles（.md ∧ 数字前缀 ∧ tracked），
+  // 非数字前缀件不再进检查 16 扫描面——原 p1/p2/… 无前缀文件名曾靠「旧扫描面收非前缀件」成立。改为
+  // 数字前缀 + 同名 intent（沿场景 80-90 activePlan 先例：缺 intent 会被「配对断裂」hard-block 干扰断言）。
+  const activePlan16 = (T, name, body) => {
+    w(T, `workflow/intents/2026-09-01-${name}.md`, INTENT(name, '状态: draft\n级别: L1'));
+    w(T, `workflow/plans/2026-09-01-${name}.md`, PLAN(name, '状态: draft\n级别: L1', body));
+  };
   {
     // 【核心回归】活跃文档留签名未回填 → warning 且提示实时值
     const T = mkfix();
     w(T, '.agents/metric-claims.txt', MC);
     seedLedger(T, ['{"doc":"a","stage":"done"}', '{"doc":"b","stage":"done"}', '{"doc":"c","stage":"done"}']);
-    w(T, 'workflow/plans/p1.md', PLAN('p1', '状态: draft\n级别: L1', '\n台账共 {{ledger.lines}} 行\n'));
+    activePlan16(T, 'p1', '\n台账共 {{ledger.lines}} 行\n');
     const r = run(T);
     const o = outOf(r);
     check('检查16:活跃文档留签名未回填 → WARN 且给出实时值 3（advisory 不阻断）',
@@ -1124,7 +1134,7 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
     const T = mkfix();
     w(T, '.agents/metric-claims.txt', MC);
     seedLedger(T, ['{"doc":"a","stage":"done"}']);
-    w(T, 'workflow/plans/p2.md', PLAN('p2', '状态: draft\n级别: L1', '\n台账共 47 行，其中 13 条并录（历史叙述，非签名）\n'));
+    activePlan16(T, 'p2', '\n台账共 47 行，其中 13 条并录（历史叙述，非签名）\n');
     const r = run(T);
     check('检查16:无签名 → 零告警（裸数字是历史叙述，不得产生假阳性）',
       r.status === 0 && !outOf(r).includes('指标'), `exit=${r.status}\n${outOf(r)}`);
@@ -1140,8 +1150,8 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
     const T = mkfix();
     w(T, '.agents/metric-claims.txt', MC);
     seedLedger(T, ['{"doc":"a","stage":"done"}']);
-    w(T, 'workflow/plans/p3.md', PLAN('p3', '状态: draft\n级别: L1',
-      '\n构建 = ' + SCREAMING('BUILD_CMD') + '；端口 ' + SCREAMING('BOARD_PORT') + '；项目 ' + SCREAMING('PROJECT_NAME') + '\n'));
+    activePlan16(T, 'p3',
+      '\n构建 = ' + SCREAMING('BUILD_CMD') + '；端口 ' + SCREAMING('BOARD_PORT') + '；项目 ' + SCREAMING('PROJECT_NAME') + '\n');
     const r = run(T);
     check('检查16:装户模板占位符（全大写 SCREAMING_CASE）→ 不误报（形态收窄）',
       r.status === 0 && !outOf(r).includes('指标'), `exit=${r.status}\n${outOf(r)}`);
@@ -1152,7 +1162,7 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
     const T = mkfix();
     w(T, '.agents/metric-claims.txt', MC);
     seedLedger(T, ['{"doc":"a","stage":"done"}']);
-    w(T, 'workflow/plans/p4.md', PLAN('p4', '状态: draft\n级别: L1', '\n引用 {{nope.metric}}\n'));
+    activePlan16(T, 'p4', '\n引用 {{nope.metric}}\n');
     const r = run(T);
     check('检查16:引用未登记指标 → fail-loud 出账（不静默跳过）',
       outOf(r).includes('指标未登记'), `exit=${r.status}\n${outOf(r)}`);
@@ -1164,8 +1174,7 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
     const T = mkfix();
     w(T, '.agents/metric-claims.txt', MC);
     seedLedger(T, ['{"doc":"a","stage":"done"}']);
-    w(T, 'workflow/plans/p8.md', PLAN('p8', '状态: draft\n级别: L1',
-      '\n写法示例如 `\\{{ledger.lines}}`（本行是讲语法，非断言）\n'));
+    activePlan16(T, 'p8', '\n写法示例如 `\\{{ledger.lines}}`（本行是讲语法，非断言）\n');
     const r = run(T);
     check('检查16:转义 \\{{...}} 的行为示意 → 不报（区分「讲语法」与「真断言」）',
       r.status === 0 && !outOf(r).includes('指标'), `exit=${r.status}\n${outOf(r)}`);
@@ -1205,7 +1214,9 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
     const T = mkfix();
     w(T, '.agents/metric-claims.txt', MC);
     seedLedger(T, ['{"doc":"a","stage":"done"}']);
-    w(T, 'workflow/plans/p7.md', PLAN('p7', '状态: done\n级别: L1', '\n台账共 {{ledger.lines}} 行\n'));
+    // 终态件（plan done + 同名 intent，数字前缀使其确在 docFiles 扫描面内——断言才针对「终态豁免」而非「无前缀豁免」）
+    w(T, 'workflow/intents/2026-09-01-p7.md', INTENT('p7', '状态: draft\n级别: L1'));
+    w(T, 'workflow/plans/2026-09-01-p7.md', PLAN('p7', '状态: done\n级别: L1', '\n台账共 {{ledger.lines}} 行\n'));
     const r = run(T);
     check('检查16:终态文档不扫（历史叙述豁免，沿检查 4 尺度）',
       r.status === 0 && !outOf(r).includes('指标待回填'), `exit=${r.status}\n${outOf(r)}`);
@@ -1234,8 +1245,7 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
     const T = mkfix();
     w(T, '.agents/metric-claims.txt', MC);
     seedLedger(T, ['{"doc":"a","stage":"done"}']);
-    w(T, 'workflow/plans/p9.md', PLAN('p9', '状态: draft\n级别: L1',
-      '\n讲语法 \\{{a.b}} 示意，但本行也有真断言 {{ledger.lines}} 未回填\n'));
+    activePlan16(T, 'p9', '\n讲语法 \\{{a.b}} 示意，但本行也有真断言 {{ledger.lines}} 未回填\n');
     const r = run(T);
     check('检查16:同行「转义示意 + 真未回填」→ 真签名仍报（转义按逐个出现，不按整行）',
       outOf(r).includes('指标待回填'), `exit=${r.status}\n${outOf(r)}`);
@@ -1246,7 +1256,7 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
     const T = mkfix();
     w(T, '.agents/metric-claims.txt', MC);
     seedLedger(T, ['{"doc":"a","stage":"done"}']);
-    w(T, 'workflow/plans/p10.md', PLAN('p10', '状态: draft\n级别: L1', '\n引用 {{Ledger.Lines}} 笔误\n'));
+    activePlan16(T, 'p10', '\n引用 {{Ledger.Lines}} 笔误\n');
     const r = run(T);
     check('检查16:形态不符（大写点分笔误）→ 出账「指标形态」（不静默漏过）',
       outOf(r).includes('指标形态'), `exit=${r.status}\n${outOf(r)}`);
@@ -1593,5 +1603,655 @@ const mkConfirmedDoc = (root, rel, fmBody) => {
   }
 }
 
+// ---- 场景 91:检查 16 tracked-only 口径双向（2026-09-28 check16-inline-debt T2）----
+// scanFiles16 与取数器统一走 docFiles（.md ∧ 数字前缀 ∧ tracked）：并行会话的未跟踪半成品即便含
+// 未回填签名也不进扫描面（别人的草稿不拦我的 push，沿检查 1-15 仓库模式「只扫已提交(HEAD)」口径）；
+// 提交进 HEAD 后照常出账。跑法沿场景 23/24 先例（{git:true} + cwd 注入真 git 模式）。
+{
+  const T = mkfix();
+  gitInit(T);
+  w(T, '.agents/metric-claims.txt', 'ledger.lines = ledger.lines\n');
+  w(T, '.agents/confirmations.jsonl', '{"doc":"a","stage":"done"}\n');
+  w(T, 'workflow/intents/2026-09-12-base16.md', INTENT('base16', '状态: done\n级别: L1\n日期: 2026-09-12', '\n## 验收标准（可测试）\n- [x] 用例通过（证据:fixture）\n'));
+  w(T, 'workflow/plans/2026-09-12-base16.md', PLAN('base16', '状态: done\n级别: L1'));
+  gitCommitAll(T, 'base');
+  // 未跟踪半成品：留签名未回填 → 不出账（tracked-only：不进扫描面）
+  w(T, 'workflow/intents/2026-09-28-wip16.md', INTENT('wip16', '状态: draft\n级别: L1\n日期: 2026-09-28'));
+  w(T, 'workflow/plans/2026-09-28-wip16.md', PLAN('wip16', '状态: draft\n级别: L1', '\n台账共 {{ledger.lines}} 行\n'));
+  // 根级 workflow/*.md 同口径钉住（2026-09-29 复核 P2-1：根级 tracked 过滤曾无测试承重——变异去除后全绿）
+  w(T, 'workflow/root-wip16.md', '---\n状态: draft\n级别: L1\n日期: 2026-09-28\n---\n# ROOT-WIP16\n\n根级草稿台账 {{ledger.lines}} 行\n');
+  let r = run(T, { git: true });
+  check('检查16 tracked-only:未跟踪档含未回填签名 → 不出账（并行半成品不进扫描面；含根级）',
+    r.status === 0 && !outOf(r).includes('指标待回填') && !outOf(r).includes('wip16') && !outOf(r).includes('root-wip16'),
+    `exit=${r.status}\n${outOf(r)}`);
+  gitCommitAll(T, 'wip');
+  r = run(T, { git: true });
+  check('检查16 tracked-only:提交进 HEAD 后 → 照常出账（WARN 指标待回填；含根级）',
+    r.status === 0 && outOf(r).includes('指标待回填') && outOf(r).includes('wip16') && outOf(r).includes('root-wip16'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+
+// ---- audit 档：false 只留阻断；缺省仍出卫生警告 ----
+{
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"audit":false,"policyVersion":1}\n');
+  w(T, 'workflow/intents/2026-09-12-ph.md', INTENT('ph', '状态: draft\n级别: L1\n日期: YYYY-MM-DD'));
+  w(T, 'workflow/plans/2026-09-12-ph.md', PLAN('ph', '状态: draft\n级别: L1'));
+  const r = run(T);
+  check('audit false：占位符不出账且 exit 0', r.status === 0 && !outOf(r).includes('模板未填'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"audit":false,"policyVersion":1}\n');
+  w(T, 'workflow/intents/2026-09-12-np.md', INTENT('np', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  expectHard('audit false：缺 plan 仍阻断', T, '配对断裂');
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  w(T, 'workflow/intents/2026-09-12-ph2.md', INTENT('ph2', '状态: draft\n级别: L1\n日期: YYYY-MM-DD'));
+  w(T, 'workflow/plans/2026-09-12-ph2.md', PLAN('ph2', '状态: draft\n级别: L1'));
+  const r = run(T);
+  check('audit 缺省：占位符仍警告', r.status === 0 && outOf(r).includes('模板未填'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+
+// ---- 检查 17：发版提交树上的 draft 仍 draft 才阻断；发版之后新建的不拦 ----
+{
+  const T = mkfix();
+  gitInit(T);
+  w(T, 'package.json', '{"name":"t","version":"0.1.0"}\n');
+  w(T, 'workflow/intents/2026-09-12-old.md', INTENT('old', '状态: draft\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-old.md', PLAN('old', '状态: draft\n级别: L1'));
+  gitCommitAll(T, 'v0.1.0');
+  let r = run(T, { git: true });
+  check('检查17 发版树上的 draft 仍为 draft → hard', r.status === 1 && outOf(r).includes('发版草稿'), `exit=${r.status}\n${outOf(r)}`);
+  w(T, 'workflow/intents/2026-09-12-old.md', INTENT('old', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-old.md', PLAN('old', '状态: approved\n级别: L1'));
+  w(T, 'package.json', '{"name":"t","version":"0.2.0"}\n');
+  gitCommitAll(T, 'v0.2.0');
+  w(T, 'workflow/intents/2026-09-29-after.md', INTENT('after', '状态: draft\n级别: L1\n日期: 2026-09-29'));
+  w(T, 'workflow/plans/2026-09-29-after.md', PLAN('after', '状态: draft\n级别: L1'));
+  gitCommitAll(T, 'draft after release');
+  r = run(T, { git: true });
+  check('检查17 发版之后新建的 draft 不拦', r.status === 0 && !outOf(r).includes('发版草稿'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  gitInit(T);
+  w(T, 'package.json', '{"name":"t","version":"0.1.0"}\n');
+  w(T, 'workflow/intents/2026-09-12-deep.md', INTENT('deep', '状态: draft\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-deep.md', PLAN('deep', '状态: draft\n级别: L1'));
+  gitCommitAll(T, 'v0.1.0');
+  for (let i = 1; i <= 41; i++) {
+    w(T, 'package.json', `{"name":"t","version":"0.1.0","n":${i}}\n`);
+    gitCommitAll(T, `touch ${i}`);
+  }
+  const r = run(T, { git: true });
+  check('检查17 版本变更早于 40 次 package.json 触碰仍阻断', r.status === 1 && outOf(r).includes('发版草稿'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+
+// ---- 检查 17：approved 锚在 policy 版本 2；draft 改为 approved 不看锚 ----
+{
+  const sameKeys = ['moduleSince', 'confirmDocsEffective', 'confirmIncidentsEffective', 'bindingTs'];
+  check('policy 版本 2 的四个共享日期与版本 1 相同',
+    sameKeys.every((k) => POLICIES[1][k] === POLICIES[2][k]));
+  check('policy 版本 2 check14Since 后移至 2026-09-26（确认门实际上线日）',
+    POLICIES[2].check14Since === '2026-09-26' && POLICIES[1].check14Since === '2026-09-23');
+  check('policy 版本 2 新增 check17UnclosedAfter，版本 1 无此键',
+    POLICIES[2].check17UnclosedAfter === '0.8.0' && POLICIES[1].check17UnclosedAfter === undefined);
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":99}\n');
+  const p = loadKitPolicy(T);
+  check('未知 policyVersion 回退版本 1', p.policyVersion === 1 && p.check17UnclosedAfter === undefined);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  gitInit(T);
+  w(T, 'package.json', '{"name":"t","version":"0.1.0"}\n');
+  w(T, 'workflow/intents/2026-09-12-move.md', INTENT('move', '状态: draft\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-move.md', PLAN('move', '状态: draft\n级别: L1'));
+  gitCommitAll(T, 'v0.1.0');
+  w(T, 'workflow/intents/2026-09-12-move.md', INTENT('move', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-move.md', PLAN('move', '状态: approved\n级别: L1'));
+  gitCommitAll(T, 'leave draft');
+  const r = run(T, { git: true });
+  check('检查17 发版树上是 draft、现在是 approved → hard',
+    r.status === 1 && outOf(r).includes('发版草稿') && outOf(r).includes('已是 draft') && outOf(r).includes('仍是 approved'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const doneBody = '\n## 验收标准（可测试）\n- [x] 用例通过（证据:fixture）\n';
+  const T = mkfix();
+  gitInit(T);
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'package.json', '{"name":"t","version":"0.8.0"}\n');
+  gitCommitAll(T, 'v0.8.0');
+  w(T, 'package.json', '{"name":"t","version":"0.9.0"}\n');
+  w(T, 'workflow/intents/2026-09-12-stay.md', INTENT('stay', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-stay.md', PLAN('stay', '状态: approved\n级别: L1'));
+  gitCommitAll(T, 'v0.9.0');
+  let r = run(T, { git: true });
+  check('检查17 锚之后 approved 仍是 approved → hard',
+    r.status === 1 && outOf(r).includes('发版草稿') && outOf(r).includes('version=0.9.0'),
+    `exit=${r.status}\n${outOf(r)}`);
+  w(T, 'workflow/intents/2026-09-12-stay.md', INTENT('stay', '状态: done\n级别: L1\n日期: 2026-09-12', doneBody));
+  w(T, 'workflow/plans/2026-09-12-stay.md', PLAN('stay', '状态: done\n级别: L1'));
+  gitCommitAll(T, 'close');
+  r = run(T, { git: true });
+  check('检查17 同一文件已是 done → 不拦', r.status === 0 && !outOf(r).includes('发版草稿'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  gitInit(T);
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'package.json', '{"name":"t","version":"0.8.0"}\n');
+  w(T, 'workflow/intents/2026-09-12-oldrel.md', INTENT('oldrel', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-oldrel.md', PLAN('oldrel', '状态: approved\n级别: L1'));
+  gitCommitAll(T, 'v0.8.0');
+  const r = run(T, { git: true });
+  check('检查17 锚之前 approved 仍是 approved → 不拦', r.status === 0 && !outOf(r).includes('发版草稿'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  gitInit(T);
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'package.json', '{"name":"t","version":"0.10.0"}\n');
+  w(T, 'workflow/intents/2026-09-12-ten.md', INTENT('ten', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-ten.md', PLAN('ten', '状态: approved\n级别: L1'));
+  gitCommitAll(T, 'v0.10.0');
+  const r = run(T, { git: true });
+  check('检查17 0.10.0 按整数比较大于 0.8.0 → hard',
+    r.status === 1 && outOf(r).includes('发版草稿'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  gitInit(T);
+  w(T, '.agents/kit.json', '{"policyVersion":1}\n');
+  w(T, 'package.json', '{"name":"t","version":"0.9.0"}\n');
+  w(T, 'workflow/intents/2026-09-12-v1.md', INTENT('v1', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-v1.md', PLAN('v1', '状态: approved\n级别: L1'));
+  gitCommitAll(T, 'v0.9.0');
+  const r = run(T, { git: true });
+  check('检查17 版本 1 不启用 approved 锚', r.status === 0 && !outOf(r).includes('发版草稿'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  gitInit(T);
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'package.json', '{"name":"t","version":"0.9"}\n');
+  w(T, 'workflow/intents/2026-09-12-badver.md', INTENT('badver', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-badver.md', PLAN('badver', '状态: approved\n级别: L1'));
+  gitCommitAll(T, 'badver');
+  const r = run(T, { git: true });
+  check('检查17 发版版本拆不成三段整数时不触发 approved 规则',
+    r.status === 0 && !outOf(r).includes('发版草稿'), `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+
+// ---- 检查 18：委派台账对账 [warning]，退出码仍为 0 ----
+{
+  const T = mkfix();
+  const gap = '2026-09-12-gap.md';
+  w(T, `workflow/intents/${gap}`, INTENT('gap', '状态: done\n级别: L2\n日期: 2026-09-12', '\n## 验收标准（可测试）\n- [x] 用例通过（证据:fixture）\n'));
+  w(T, `workflow/specs/${gap}`, SPEC('gap', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  w(T, `workflow/plans/${gap}`, PLAN('gap', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  w(T, 'workflow/intents/2026-09-12-low.md', INTENT('low', '状态: done\n级别: L1\n日期: 2026-09-12', '\n## 验收标准（可测试）\n- [x] 用例通过（证据:fixture）\n'));
+  w(T, 'workflow/plans/2026-09-12-low.md', PLAN('low', '状态: done\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/intents/2026-09-12-stay.md', INTENT('stay', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  w(T, 'workflow/specs/2026-09-12-stay.md', SPEC('stay', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-stay.md', PLAN('stay', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  const ledgerOf = (r) => outOf(r).split('\n').filter((l) => l.includes('委派台账'));
+  let r = run(T);
+  let lines = ledgerOf(r);
+  check('检查18 委派表不存在：L2 done 警告且 exit 0；L1 done 与 L2 approved 不警告',
+    r.status === 0
+      && lines.some((l) => l.includes(`intents/${gap}`) && l.includes('2026-09-12'))
+      && lines.every((l) => !l.includes('low.md') && !l.includes('stay.md')),
+    `exit=${r.status}\n${outOf(r)}`);
+
+  const head = '## 委派结果\n\n| 日期 | 被委派方 | 任务一句话 | 结果 | 备注 |\n|------|----------|------------|------|------|\n';
+  w(T, 'workflow/delegations.md', `${head}| 2026-09-11 | x | y | 一次通过 | ${gap} |\n`);
+  r = run(T);
+  check('检查18 行日期早于文档日期：警告仍在',
+    r.status === 0 && ledgerOf(r).some((l) => l.includes(`intents/${gap}`)),
+    `exit=${r.status}\n${outOf(r)}`);
+
+  w(T, 'workflow/delegations.md', `${head}| 2026-09-12 | x | y | 一次通过 | 2026-09-12-gap |\n`);
+  r = run(T);
+  check('检查18 去掉扩展名的主题名也命中：警告消失',
+    r.status === 0 && !ledgerOf(r).some((l) => l.includes(`intents/${gap}`)),
+    `exit=${r.status}\n${outOf(r)}`);
+
+  w(T, 'workflow/delegations.md', `${head}\n## 自做任务结果\n\n| 日期 | 任务一句话 | 结果 | 备注 |\n|------|------------|------|------|\n| 2026-09-12 | x | 一次通过 | ${gap} |\n`);
+  r = run(T);
+  check('检查18 文件名在自做任务结果表：警告消失',
+    r.status === 0 && !ledgerOf(r).some((l) => l.includes(`intents/${gap}`)),
+    `exit=${r.status}\n${outOf(r)}`);
+
+  // 补缺（2026-09-30 F2）：自做表行**不带 .md**（台账自做表实际通写形态）——此前矩阵只覆盖三格：
+  // 委派表带/不带 .md、自做表带 .md 均有例，唯独「自做表 + 不带 .md」从未穿越（夹具 gap 恒带 .md，
+  // 走的是 includes(base) 分支）。本用例专走 includes(stripped) 分支，矩阵补成 4/4。
+  w(T, 'workflow/delegations.md', `${head}\n## 自做任务结果\n\n| 日期 | 任务一句话 | 结果 | 备注 |\n|------|------------|------|------|\n| 2026-09-12 | x | 一次通过 | 2026-09-12-gap |\n`);
+  r = run(T);
+  check('检查18 自做表行不带 .md（台账实际通写形态）：警告消失',
+    r.status === 0 && !ledgerOf(r).some((l) => l.includes(`intents/${gap}`)),
+    `exit=${r.status}\n${outOf(r)}`);
+
+  w(T, 'workflow/delegations.md', `${head}| 2026-09-12 | x | y | 一次通过 | ${gap} |\n`);
+  r = run(T);
+  lines = ledgerOf(r);
+  check('检查18 补上不早于文档日期且含文件名的一行：该警告消失',
+    r.status === 0 && !lines.some((l) => l.includes(gap)),
+    `exit=${r.status}\n${outOf(r)}`);
+
+  // 文件名仅出现在非台账节（既非委派结果也非自做任务结果）：不命中
+  w(T, 'workflow/delegations.md', `${head}| 2026-09-12 | x | y | 一次通过 | 其他任务 |\n\n## 历史记录\n| ${gap} 已关单 |\n`);
+  r = run(T);
+  check('检查18 文件名仅出现在非台账节：警告仍在',
+    r.status === 0 && ledgerOf(r).some((l) => l.includes(`intents/${gap}`)),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  const body = 三件套(false);
+  w(T, 'workflow/incidents/2026-09-12-closed.md', `---\n状态: closed\n级别: L2\n发现: 2026-09-12\n---\n# INCIDENT — closed\n\n${body}`);
+  w(T, 'workflow/specs/2026-09-12-closed.md', SPEC('closed', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-closed.md', PLAN('closed', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  w(T, 'workflow/incidents/2026-09-12-l1c.md', `---\n状态: closed\n级别: L1\n发现: 2026-09-12\n---\n# INCIDENT — l1c\n\n${body}`);
+  w(T, 'workflow/plans/2026-09-12-l1c.md', PLAN('l1c', '状态: approved\n级别: L1\n日期: 2026-09-12'));
+  w(T, 'workflow/incidents/2026-09-12-open.md', `---\n状态: open\n级别: L2\n发现: 2026-09-12\n---\n# INCIDENT — open\n\n${body}`);
+  w(T, 'workflow/specs/2026-09-12-open.md', SPEC('open', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-open.md', PLAN('open', '状态: approved\n级别: L2\n日期: 2026-09-12'));
+  const r = run(T);
+  const lines = outOf(r).split('\n').filter((l) => l.includes('委派台账'));
+  check('检查18 L2 closed 出警告且 exit 0；L1 closed 与 L2 open 不出',
+    r.status === 0
+      && lines.some((l) => l.includes('incidents/2026-09-12-closed.md'))
+      && lines.every((l) => !l.includes('l1c.md') && !l.includes('open.md')),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  w(T, 'workflow/intents/2026-09-12-nodate.md', INTENT('nodate', '状态: done\n级别: L2'));
+  w(T, 'workflow/specs/2026-09-12-nodate.md', SPEC('nodate', '状态: approved\n级别: L2'));
+  w(T, 'workflow/plans/2026-09-12-nodate.md', PLAN('nodate', '状态: approved\n级别: L2'));
+  const r = run(T);
+  check('检查18 范围内但缺日期：不警告',
+    r.status === 0 && !outOf(r).includes('委派台账'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"audit":false,"policyVersion":1}\n');
+  w(T, 'workflow/intents/2026-09-12-quiet.md', INTENT('quiet', '状态: done\n级别: L2\n日期: 2026-09-12', '\n## 验收标准（可测试）\n- [x] 用例通过（证据:fixture）\n'));
+  w(T, 'workflow/specs/2026-09-12-quiet.md', SPEC('quiet', '状态: done\n级别: L2\n日期: 2026-09-12'));
+  w(T, 'workflow/plans/2026-09-12-quiet.md', PLAN('quiet', '状态: done\n级别: L2\n日期: 2026-09-12'));
+  const r = run(T);
+  check('检查18 audit false：委派台账不输出且 exit 0',
+    r.status === 0 && !outOf(r).includes('委派台账'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+
+// ---- 检查 19：逐阶段审计 [warning]（2026-09-30 stage-gate-machine）----
+{
+  // 判据 A：spec/plan 为 draft 且日期 ≥ stageGateSince，入口未确认 → 告警（spec 与 plan 各一条）
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'workflow/intents/2026-09-30-pair.md', INTENT('pair', '状态: draft\n级别: L2\n日期: 2026-09-30\n模块: pipeline'));
+  w(T, 'workflow/specs/2026-09-30-pair.md', SPEC('pair', '状态: draft\n级别: L2\n日期: 2026-09-30\n模块: pipeline'));
+  w(T, 'workflow/plans/2026-09-30-pair.md', PLAN('pair', '状态: draft\n级别: L2\n模块: pipeline'));
+  const r = run(T);
+  const lines = outOf(r).split('\n').filter((l) => l.includes('逐阶段'));
+  check('检查19-A 入口未确认：spec 出「起草先于入口确认」、plan 同步告警，exit 0',
+    r.status === 0
+      && lines.some((l) => l.includes('specs/2026-09-30-pair.md') && l.includes('起草先于入口确认'))
+      && lines.some((l) => l.includes('plans/2026-09-30-pair.md')),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  // 判据 A 日期门：draft 日期早于 stageGateSince → 静默（历史豁免）
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'workflow/intents/2026-09-20-old.md', INTENT('old', '状态: draft\n级别: L1\n日期: 2026-09-20'));
+  w(T, 'workflow/plans/2026-09-20-old.md', PLAN('old', '状态: draft\n级别: L1'));
+  const r = run(T);
+  check('检查19-A 日期门：早于 stageGateSince 的 draft → 零逐阶段告警',
+    r.status === 0 && !outOf(r).includes('逐阶段'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  // 判据 A 放行侧：入口已确认（台账行 + 指纹配对）→ plan draft 静默（L1 免 spec 档）
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  const fp = 'a'.repeat(64);
+  w(T, 'workflow/intents/2026-09-30-ok.md', INTENT('ok', `状态: approved\n级别: L1\n日期: 2026-09-30\n确认指纹: ${fp.slice(0, 16)}`));
+  w(T, 'workflow/plans/2026-09-30-ok.md', PLAN('ok', '状态: draft\n级别: L1'));
+  w(T, '.agents/confirmations.jsonl', JSON.stringify({ ts: '2026-09-30T01:00:00.000Z', doc: 'workflow/intents/2026-09-30-ok.md', stage: 'approved', fingerprint: fp, prev: 'draft', source: 'chat-delegated', batch: 't1', seq: 1, of: 1 }) + '\n');
+  const r = run(T);
+  check('检查19-A 放行侧：入口 approved + 台账行 → plan draft 静默（L1）',
+    r.status === 0 && !outOf(r).includes('逐阶段'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  // 判据 B：台账顺序倒置（spec 早于 intent）→ 告警；行无对应文件也可判（读台账事实）
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  const row = (doc, ts) => JSON.stringify({ ts, doc, stage: 'approved', fingerprint: 'b'.repeat(64), prev: 'draft' }) + '\n';
+  w(T, '.agents/confirmations.jsonl',
+    row('workflow/intents/2026-09-29-ord.md', '2026-09-29T10:00:00.000Z')
+    + row('workflow/specs/2026-09-29-ord.md', '2026-09-29T09:00:00.000Z')
+    + row('workflow/plans/2026-09-29-ord.md', '2026-09-29T11:00:00.000Z'));
+  const r = run(T);
+  check('检查19-B 顺序倒置 → 告警且 exit 0',
+    r.status === 0 && outOf(r).includes('逐阶段') && outOf(r).includes('倒置') && outOf(r).includes('2026-09-29-ord'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  // 判据 B：顺序合规 → 静默；组内最早 ts 早于 stageGateSince → 整组跳过
+  const T1 = mkfix();
+  w(T1, '.agents/kit.json', '{"policyVersion":2}\n');
+  const row1 = (doc, ts) => JSON.stringify({ ts, doc, stage: 'approved', fingerprint: 'c'.repeat(64), prev: 'draft' }) + '\n';
+  w(T1, '.agents/confirmations.jsonl',
+    row1('workflow/intents/2026-09-29-ok2.md', '2026-09-29T09:00:00.000Z')
+    + row1('workflow/specs/2026-09-29-ok2.md', '2026-09-29T10:00:00.000Z')
+    + row1('workflow/plans/2026-09-29-ok2.md', '2026-09-29T11:00:00.000Z'));
+  const r1 = run(T1);
+  check('检查19-B 顺序合规 → 静默',
+    r1.status === 0 && !outOf(r1).includes('逐阶段'),
+    `exit=${r1.status}\n${outOf(r1)}`);
+  rmfix(T1);
+
+  const T2 = mkfix();
+  w(T2, '.agents/kit.json', '{"policyVersion":2}\n');
+  const row2 = (doc, ts) => JSON.stringify({ ts, doc, stage: 'approved', fingerprint: 'd'.repeat(64), prev: 'draft' }) + '\n';
+  w(T2, '.agents/confirmations.jsonl',
+    row2('workflow/intents/2026-09-01-h.md', '2026-09-01T10:00:00.000Z')
+    + row2('workflow/specs/2026-09-01-h.md', '2026-09-01T09:00:00.000Z'));
+  const r2 = run(T2);
+  check('检查19-B 日期门：组内最早 ts 早于 stageGateSince → 整组静默（历史豁免）',
+    r2.status === 0 && !outOf(r2).includes('逐阶段'),
+    `exit=${r2.status}\n${outOf(r2)}`);
+  rmfix(T2);
+}
+{
+  // policy v1（无 stageGateSince 键）→ 检查 19 整体跳过
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":1}\n');
+  const fp = 'e'.repeat(64);
+  w(T, 'workflow/intents/2026-09-30-v1.md', INTENT('v1', '状态: draft\n级别: L1\n日期: 2026-09-30'));
+  w(T, 'workflow/plans/2026-09-30-v1.md', PLAN('v1', '状态: draft\n级别: L1'));
+  w(T, '.agents/confirmations.jsonl', JSON.stringify({ ts: '2026-09-29T10:00:00.000Z', doc: 'workflow/specs/2026-09-30-v1.md', stage: 'approved', fingerprint: fp, prev: 'draft' }) + '\n');
+  const r = run(T);
+  check('检查19 policy v1（无键）→ 整体跳过（零逐阶段告警）',
+    r.status === 0 && !outOf(r).includes('逐阶段'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+
+{
+  // 判据 A 的 plan→spec 分支（复核 P2-4②）：入口 L2 已确认 + spec 为 draft → plan 出「起草先于 spec 确认」
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  const fp3 = '9'.repeat(64);
+  w(T, 'workflow/intents/2026-09-30-ps.md', INTENT('ps', `状态: approved\n级别: L2\n日期: 2026-09-30\n确认指纹: ${fp3.slice(0, 16)}`));
+  w(T, 'workflow/specs/2026-09-30-ps.md', SPEC('ps', '状态: draft\n级别: L2\n日期: 2026-09-30'));
+  w(T, 'workflow/plans/2026-09-30-ps.md', PLAN('ps', '状态: draft\n级别: L2\n日期: 2026-09-30'));
+  w(T, '.agents/confirmations.jsonl', JSON.stringify({ ts: '2026-09-30T03:00:00.000Z', doc: 'workflow/intents/2026-09-30-ps.md', stage: 'approved', fingerprint: fp3, prev: 'draft', source: 'chat-delegated', batch: 'ps', seq: 1, of: 1 }) + '\n');
+  const r = run(T);
+  check('检查19-A plan→spec 分支：入口确认但 spec 未确认 → 「起草先于 spec 确认」',
+    r.status === 0 && outOf(r).includes('起草先于 spec 确认'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  // 交叉一致性（复核 P2-8）：stage-gates.entryConfirmed 与检查 19 内联判据同口径——反例：
+  // approved 但无台账行且日期 ≥ 生效日 → 两处皆判「未确认」（check15 亦会 hard-block，断言只取逐阶段警示）
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'workflow/intents/2026-09-30-x1.md', INTENT('x1', '状态: approved\n级别: L1\n日期: 2026-09-30'));
+  w(T, 'workflow/plans/2026-09-30-x1.md', PLAN('x1', '状态: draft\n级别: L1\n日期: 2026-09-30'));
+  const e1 = entryConfirmed(T, '2026-09-30-x1');
+  const r1 = run(T);
+  check('交叉一致性①：入口 approved 无台账行 → stage-gates 判未确认 ∧ 检查 19 出「起草先于入口确认」',
+    e1.ok === false && outOf(r1).includes('起草先于入口确认'),
+    `sg.ok=${e1.ok}\n${outOf(r1)}`);
+  rmfix(T);
+
+  // 正例：approved + 台账行 → 两处皆判「已确认」（检查 19 零「逐阶段」）
+  const T2 = mkfix();
+  w(T2, '.agents/kit.json', '{"policyVersion":2}\n');
+  const fp2 = 'f'.repeat(64);
+  w(T2, 'workflow/intents/2026-09-30-x2.md', INTENT('x2', `状态: approved\n级别: L1\n日期: 2026-09-30\n确认指纹: ${fp2.slice(0, 16)}`));
+  w(T2, 'workflow/plans/2026-09-30-x2.md', PLAN('x2', '状态: draft\n级别: L1\n日期: 2026-09-30'));
+  w(T2, '.agents/confirmations.jsonl', JSON.stringify({ ts: '2026-09-30T02:30:00.000Z', doc: 'workflow/intents/2026-09-30-x2.md', stage: 'approved', fingerprint: fp2, prev: 'draft', source: 'chat-delegated', batch: 'x2', seq: 1, of: 1 }) + '\n');
+  const e2 = entryConfirmed(T2, '2026-09-30-x2');
+  const r2 = run(T2);
+  check('交叉一致性②：入口 approved + 台账行 → stage-gates 判已确认 ∧ 检查 19 零「逐阶段」',
+    e2.ok === true && !outOf(r2).includes('逐阶段'),
+    `sg.ok=${e2.ok}\n${outOf(r2)}`);
+  rmfix(T2);
+}
+
+{
+  // N1 存量短路（检查 19 同口径）：legacy 入口（无级别）+ plan draft → 零「逐阶段」告警
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'workflow/intents/2026-09-30-leg19.md', INTENT('leg19', '状态: approved\n日期: 2026-01-01\n流程: legacy'));
+  w(T, 'workflow/plans/2026-09-30-leg19.md', PLAN('leg19', '状态: draft\n流程: legacy'));
+  const r = run(T);
+  check('检查19 存量短路：legacy 入口无级别 → plan draft 零「逐阶段」告警',
+    r.status === 0 && !outOf(r).includes('逐阶段'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+
+{
+  // 检查 19 判据 A 的 **incident 入口**分支（第五轮复核 P2：该分支此前零形态覆盖——
+  // 注入验证证明：把 MARK_RE19 改为恒 false，套件仍全绿 → 正则改动不会被拦下）
+  {
+    const T = mkfix();
+    w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+    // 正例：incident（open + 时间线「用户确认」条目）+ spec draft → 零「逐阶段」告警
+    // 注：incident 亦受配对门约束（须有同名 plan），故夹具须补 plan，否则 exit 1 遮住本判据
+    w(T, 'workflow/incidents/2026-09-30-ic.md', '---\n状态: open\n级别: L2\n发现: 2026-09-30\n---\n# INCIDENT\n\n## 时间线\n- 用户确认：草稿过目通过（2026-09-30）\n');
+    w(T, 'workflow/specs/2026-09-30-ic.md', SPEC('ic', '状态: draft\n级别: L2\n日期: 2026-09-30'));
+    w(T, 'workflow/plans/2026-09-30-ic.md', PLAN('ic', '状态: draft\n级别: L2\n日期: 2026-09-30'));
+    const r1 = run(T);
+    check('检查19-A incident 入口（时间线留痕）→ 不告警「起草先于入口确认」',
+      r1.status === 0 && !outOf(r1).includes('起草先于入口确认'),
+      `exit=${r1.status}\n${outOf(r1)}`);
+    rmfix(T);
+
+    // 负例：叙述句不算留痕 → 出「起草先于入口确认」
+    const T2 = mkfix();
+    w(T2, '.agents/kit.json', '{"policyVersion":2}\n');
+    w(T2, 'workflow/incidents/2026-09-30-ic2.md', '---\n状态: open\n级别: L2\n发现: 2026-09-30\n---\n# INCIDENT\n\n## 时间线\n- 2026-09-30 用户确认了方案（叙述）\n');
+    w(T2, 'workflow/specs/2026-09-30-ic2.md', SPEC('ic2', '状态: draft\n级别: L2\n日期: 2026-09-30'));
+    w(T2, 'workflow/plans/2026-09-30-ic2.md', PLAN('ic2', '状态: draft\n级别: L2\n日期: 2026-09-30'));
+    const r2 = run(T2);
+    check('检查19-A incident 入口（叙述句不算）→ 出「起草先于入口确认」',
+      r2.status === 0 && outOf(r2).includes('起草先于入口确认'),
+      `exit=${r2.status}\n${outOf(r2)}`);
+    rmfix(T2);
+  }
+}
+
+// ---- 风险泳道（2026-09-30 hybrid-governance-risk-lanes）：L0 配对豁免 + 红线判低 ----
+{
+  // L0 intent 无 plan 无 spec → 协作道配对豁免（异步审计兜底）
+  const T = mkfix();
+  w(T, 'workflow/intents/2026-09-12-l0.md', INTENT('l0', '状态: approved\n级别: L0\nrisk_level: L0\n日期: 2026-09-12'));
+  const r = run(T);
+  check('风险泳道：L0 intent 缺 plan/spec → 配对豁免 exit 0',
+    r.status === 0 && !outOf(r).includes('配对断裂'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  // L1 intent 仍须 plan（协作道不豁免 L1——防倒退回归）
+  const T1 = mkfix();
+  w(T1, 'workflow/intents/2026-09-12-l1.md', INTENT('l1', '状态: approved\n级别: L1\nrisk_level: L1\n日期: 2026-09-12'));
+  expectHard('风险泳道：L1 intent 缺 plan 仍 hard 配对断裂', T1, '配对断裂');
+  rmfix(T1);
+
+  // L0/L1 勾触达红线 → hard「红线判低」（级别与 risk_level 任一判定皆拦）
+  const T2 = mkfix();
+  w(T2, 'workflow/intents/2026-09-12-rl.md', INTENT('rl', '状态: approved\n级别: L1\nrisk_level: L1\n日期: 2026-09-12',
+    '\n## 触达红线（对照 AGENTS.md）\n- [x] 规则 / 契约变更（接口签名）→ 级别至少 L2\n'));
+  const r2 = run(T2);
+  check('风险泳道：L1 勾触达红线 → hard 红线判低',
+    r2.status === 1 && outOf(r2).includes('红线判低'),
+    `exit=${r2.status}\n${outOf(r2)}`);
+  rmfix(T2);
+
+  const T3 = mkfix();
+  w(T3, 'workflow/intents/2026-09-12-rl2.md', INTENT('rl2', '状态: approved\n级别: L2\nrisk_level: L2\n日期: 2026-09-12',
+    '\n## 触达红线（对照 AGENTS.md）\n- [x] 规则 / 契约变更（接口签名）→ 级别至少 L2\n'));
+  w(T3, 'workflow/specs/2026-09-12-rl2.md', SPEC('rl2', '状态: approved\n级别: L2'));
+  w(T3, 'workflow/plans/2026-09-12-rl2.md', PLAN('rl2', '状态: approved\n级别: L2'));
+  const r3 = run(T3);
+  check('风险泳道：L2 勾红线不判低（防御道受理）',
+    r3.status === 0 && !outOf(r3).includes('红线判低'),
+    `exit=${r3.status}\n${outOf(r3)}`);
+  rmfix(T3);
+}
+
+// ---- 检查 15 并录豁免：--batch sanctioned 批次（delegated of>1 + 全行 brief:true）→ 零「确认并录」----
+{
+  const T = mkfix();
+  const fpI = 'a'.repeat(64);
+  const fpP = 'b'.repeat(64);
+  w(T, 'workflow/intents/2026-09-12-b1.md', INTENT('b1', `状态: approved\n级别: L1\n日期: 2026-09-12\n确认指纹: ${fpI.slice(0, 16)}`));
+  w(T, 'workflow/plans/2026-09-12-b1.md', PLAN('b1', `状态: approved\n级别: L1\n日期: 2026-09-12\n确认指纹: ${fpP.slice(0, 16)}`));
+  const row = (doc, fp, seq) => JSON.stringify({ ts: '2026-09-29T02:00:00.000Z', doc, stage: 'approved', fingerprint: fp, prev: 'draft', source: 'chat-delegated', quote: '批量放行', batch: 'bt1', seq, of: 2, brief: true }) + '\n';
+  w(T, '.agents/confirmations.jsonl',
+    row('workflow/intents/2026-09-12-b1.md', fpI, 1)
+    + row('workflow/plans/2026-09-12-b1.md', fpP, 2));
+  const r = run(T);
+  check('检查15 --batch sanctioned：全 brief 批次 → 零「确认并录」告警',
+    r.status === 0 && !outOf(r).includes('确认并录'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+
+// ---- 检查 19 协作道豁免（2026-09-30 hybrid-governance-risk-lanes）----
+{
+  // L1 intent draft + plan draft（日期 ≥ stageGateSince）→ 「先动手后确认」是泳道语义，零告警
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'workflow/intents/2026-09-30-lane.md', INTENT('lane', '状态: draft\n级别: L1\n日期: 2026-09-30'));
+  w(T, 'workflow/plans/2026-09-30-lane.md', PLAN('lane', '状态: draft\n级别: L1'));
+  const r = run(T);
+  check('检查19 协作道豁免：L1 intent draft + plan draft → 零「起草先于入口确认」',
+    r.status === 0 && !outOf(r).includes('起草先于入口确认'),
+    `exit=${r.status}\n${outOf(r)}`);
+  rmfix(T);
+}
+{
+  // 防倒退：L1 intent approved 却无台账行（非 draft）→ 仍告警（豁免仅限 draft 态，防手改状态冒充确认）
+  const T = mkfix();
+  w(T, '.agents/kit.json', '{"policyVersion":2}\n');
+  w(T, 'workflow/intents/2026-09-30-lane2.md', INTENT('lane2', '状态: approved\n级别: L1\n日期: 2026-09-30'));
+  w(T, 'workflow/plans/2026-09-30-lane2.md', PLAN('lane2', '状态: draft\n级别: L1'));
+  const r = run(T);
+  check('检查19 L1 approved 无台账行 → 仍出「起草先于入口确认」（豁免仅限 draft）',
+    outOf(r).includes('起草先于入口确认'),
+    outOf(r));
+  rmfix(T);
+}
+
+// ---- 加固门（2026-09-30 hybrid-governance-explore-hardening；仅 --hardening 启用，不占 1-19 编号）----
+{
+  // H1：未标记 exploring 的 draft 件 → 带/不带 --hardening 均不拦（本门只管「已标记未收口」，
+  //  常规流程的 draft 中间态不受影响——intent approved 后 plan 起草属正常在途）
+  const T = mkfix();
+  w(T, 'workflow/intents/2026-09-30-h0.md', INTENT('h0', '状态: draft\n级别: L1\n日期: 2026-09-30'));
+  w(T, 'workflow/plans/2026-09-30-h0.md', PLAN('h0', '状态: draft\n级别: L1'));
+  const rOff = run(T);
+  const rOn = run(T, { args: ['--hardening'] });
+  check('加固门 H1：未标记 exploring 的 draft 件 → 带/不带 --hardening 均 exit 0',
+    rOff.status === 0 && rOn.status === 0, `off=${rOff.status}\non=${outOf(rOn)}`);
+  rmfix(T);
+}
+{
+  // H2：已标记 exploring、intent 仍 draft（配同名 plan 防 check 1 配对拦）→ --hardening hard 拦；
+  //  不带旗标 exit 0（泳道内推送/日常扫描不受影响）
+  const T = mkfix();
+  w(T, 'workflow/intents/2026-09-30-h1.md', INTENT('h1', '状态: draft\n级别: L1\nrisk_level: L1\n阶段: exploring\n日期: 2026-09-30'));
+  w(T, 'workflow/plans/2026-09-30-h1.md', PLAN('h1', '状态: draft\n级别: L1'));
+  const rOn = run(T, { args: ['--hardening'] });
+  const rOff = run(T);
+  check('加固门 H2：exploring 件 intent 仍 draft → --hardening exit 1「加固未过」；不带旗标 exit 0',
+    rOn.status === 1 && outOf(rOn).includes('加固未过') && rOff.status === 0, outOf(rOn));
+  rmfix(T);
+}
+{
+  // H3：已收口（intent approved + plan approved，均带真实指纹 + 台账配对防检查 15 先拦）→ 放行；L1 不索 spec
+  const T = mkfix();
+  const ent = mkConfirmedDoc(T, 'workflow/intents/2026-09-30-h2.md', '状态: approved\n级别: L1\nrisk_level: L1\n阶段: exploring\n日期: 2026-09-30');
+  const plan = mkConfirmedDoc(T, 'workflow/plans/2026-09-30-h2.md', '状态: approved\n级别: L1\n阶段: exploring');
+  writeLedger(T, [
+    { ts: '2026-09-30T01:00:00.000Z', doc: ent.rel, stage: 'approved', fingerprint: ent.fp, prev: 'draft', source: 'tty' },
+    { ts: '2026-09-30T02:00:00.000Z', doc: plan.rel, stage: 'approved', fingerprint: plan.fp, prev: 'draft', source: 'tty' },
+  ]);
+  const r = run(T, { args: ['--hardening'] });
+  check('加固门 H3：exploring 件已收口（intent/plan approved + 台账配对）→ --hardening exit 0',
+    r.status === 0, outOf(r));
+  rmfix(T);
+}
+{
+  // H4：intent 已收口但 plan 仍 draft → hard「加固未过」（plan 未收口；L2 缺 spec 由检查 1 同步出账）
+  const T = mkfix();
+  const ent = mkConfirmedDoc(T, 'workflow/intents/2026-09-30-h3.md', '状态: approved\n级别: L2\n阶段: exploring\n日期: 2026-09-30');
+  writeLedger(T, [{ ts: '2026-09-30T01:00:00.000Z', doc: ent.rel, stage: 'approved', fingerprint: ent.fp, prev: 'draft', source: 'tty' }]);
+  w(T, 'workflow/plans/2026-09-30-h3.md', PLAN('h3', '状态: draft\n级别: L2'));
+  const r = run(T, { args: ['--hardening'] });
+  check('加固门 H4：exploring 件 plan 未收口（draft）→ --hardening exit 1「加固未过」',
+    r.status === 1 && outOf(r).includes('加固未过'), outOf(r));
+  rmfix(T);
+}
+{
+  // H5：放弃态出列——intent 已 superseded 的 exploring 件 → --hardening 不拦（探索作废留档，无代码随行）。
+  //  台账指纹按 confirm-doc 前向语义复刻：fp = 跳转前（approved 态）内容的指纹，当前盘面 superseded + 指纹行
+  //  ——检查 15 的内容绑定（superseded 受绑）按 prev=approved 复原重算须能对上。
+  const T = mkfix();
+  const rel = 'workflow/intents/2026-09-30-h4.md';
+  const prevText = '---\n状态: approved\n级别: L1\n阶段: exploring\n日期: 2026-09-30\n---\n# DOC\n';
+  const fp = computeFingerprint(prevText);
+  fs.writeFileSync(path.join(T, rel), `---\n状态: superseded\n级别: L1\n阶段: exploring\n日期: 2026-09-30\n确认指纹: ${fp.slice(0, 16)}\n---\n# DOC\n`);
+  w(T, 'workflow/plans/2026-09-30-h4.md', PLAN('h4', '状态: draft\n级别: L1')); // 防 check 1 配对拦（L1 须 plan；draft 仅 warning 不碍 exit 0）
+  writeLedger(T, [{ ts: '2026-09-30T03:00:00.000Z', doc: rel, stage: 'superseded', fingerprint: fp, prev: 'approved', source: 'tty' }]);
+  const r = run(T, { args: ['--hardening'] });
+  check('加固门 H5：exploring 件显式放弃（superseded + 台账绑定）→ --hardening exit 0（出列不加固）',
+    r.status === 0, outOf(r));
+  rmfix(T);
+}
+{
+  // H6：未知参数 → 用法提示 exit 1（arg 解析收紧后的防倒退）
+  const T = mkfix();
+  const r = run(T, { args: ['--bogus'] });
+  check('加固门 H6：未知 CLI 参数 → exit 1 用法提示', r.status === 1 && /用法/.test(outOf(r)), outOf(r));
+  rmfix(T);
+}
+
 console.log(`\n合计: PASS ${pass} / FAIL ${fail}`);
 process.exit(fail ? 1 : 0);