agentic-flow-kit 1.8.7 → 2.1.0

package/templates/_agents/scripts/confirm-doc.test.mjs

@@ -1,1119 +0,0 @@
-#!/usr/bin/env node
-// confirm-doc.test.mjs — 用户确认门测试（2026-09-26 confirm-gate-machine；2026-09-27 confirm-gate-delegated 补委托场景）
-// 判据：① 指纹算法（CRLF 归一 / 剔指纹行防自引用 / 内容敏感） ② 跳转唯一合法性 ③ 落态只动两行
-//       ④ 台账追加 schema ⑤ 核心——非 TTY spawn（模拟 AI 调用路径）无 --delegated 必须被拒
-//       ⑥ 委托代录（--delegated）：免 TTY 落态 + 台账如实记 source/quote；空原话拒跑
-//       ⑦ 逐阶段前置门（2026-09-30 stage-gate-machine）：specs/plans 的 draft→approved 须入口（plan 另须
-//          L2/L3 时同名 spec）已确认；未过 → exit 2 + 未落盘未记账（S19-S22）
-//       ⑧ done 前置门（2026-09-30 confirm-gate-approved-history）：→done 须 git 历史已留 approved 态
-//          （先 done 后提交 / 两跳同批提交 → 拒绝）；非 git / legacy / 存量豁免声明 → 跳过（S25-S29）
-//       ⑨ 关单即归档（2026-10-13 archive-on-close，B9 自源仓回灌）：终态家族即时 git mv 进 archive、
-//          未涉及家族不越权清理、无归档约定不启用、CONFIRM_DOC_NO_ARCHIVE 逃生门（S43-S45）
-// 用法：node templates/_agents/scripts/confirm-doc.test.mjs（npm test 随跑）
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import { fileURLToPath } from 'node:url';
-import { computeFingerprint, nextStage, applyTransition, appendLedger, resolveTransition, machineScope } from './confirm-doc.mjs';
-import { scopeDigest, scopeMatches } from './policy.mjs';
-
-let pass = 0;
-let fail = 0;
-const check = (desc, cond, detail = '') => {
-  if (cond) { pass++; console.log(`PASS  ${desc}`); }
-  else { fail++; console.log(`FAIL  ${desc}${detail ? '\n      ' + detail : ''}`); }
-};
-
-const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
-const CLI = path.join(SCRIPT_DIR, 'confirm-doc.mjs');
-
-// 台账读取 helper（2026-09-30 复核 P2-1）：缺失/空行 → 安全返回（[]）——防「门拒路径下台账未生成」时
-// 未捕获 ENOENT 截断后续用例（注入验证实证：原裸读在门失效时崩溃、无「合计」行）
-const readLedgerOf = (root) => {
-  const p = path.join(root, '.agents', 'confirmations.jsonl');
-  if (!fs.existsSync(p)) return [];
-  return fs.readFileSync(p, 'utf8').split('\n').filter(Boolean).map((l) => JSON.parse(l));
-};
-
-// ---- S1 指纹：CRLF 归一（同内容不同行尾同指纹）----
-{
-  const lf = '---\n状态: draft\n---\n正文';
-  const crlf = lf.replace(/\n/g, '\r\n');
-  check('S1 CRLF 归一——同内容不同行尾指纹相同', computeFingerprint(lf) === computeFingerprint(crlf));
-}
-
-// ---- S2 指纹：剔「确认指纹:」行（防自引用——加指纹行不改指纹）----
-{
-  const a = '---\n状态: draft\n---\n正文';
-  const b = '---\n状态: draft\n确认指纹: abc123\n---\n正文';
-  check('S2 指纹行不参与指纹计算（防自引用）', computeFingerprint(a) === computeFingerprint(b));
-}
-
-// ---- S3 指纹：内容敏感（一字之差指纹不同；64 位 hex）----
-{
-  const fp1 = computeFingerprint('---\n状态: draft\n---\n正文A');
-  const fp2 = computeFingerprint('---\n状态: draft\n---\n正文B');
-  check('S3 内容敏感且为 64 位 hex', fp1 !== fp2 && /^[0-9a-f]{64}$/.test(fp1));
-}
-
-// ---- S4 nextStage：合法前向跳转（docs 两跳 + incidents 两跳，2026-09-27 gate-coverage）----
-{
-  check('S4 跳转表：draft→approved、approved→done、done/空/自造值→null',
-    nextStage('draft') === 'approved' && nextStage('approved') === 'done'
-      && nextStage('done') === null && nextStage('') === null && nextStage('进行中') === null);
-  check('S4 incidents 跳转表：open→fixed、fixed→closed、closed→null（无 open→closed 单跳）',
-    nextStage('open') === 'fixed' && nextStage('fixed') === 'closed'
-      && nextStage('closed') === null && nextStage('open') !== 'closed');
-  // --to 放弃态跳转表（2026-09-27 closing-coverage）：cancelled 自未确认/进行态；superseded 自已确认态
-  const cancelOk = ['draft', 'approved', 'open', 'fixed'].every((s) => resolveTransition(s, 'cancelled') === 'cancelled');
-  const supersedeOk = ['approved', 'done', 'fixed', 'closed'].every((s) => resolveTransition(s, 'superseded') === 'superseded');
-  check('S4 --to 合法表：cancelled×{draft,approved,open,fixed} / superseded×{approved,done,fixed,closed} 全通',
-    cancelOk && supersedeOk);
-  check('S4 --to 非法表：draft→superseded / open→superseded / done→cancelled / cancelled→cancelled / 非法目标值 全拒',
-    resolveTransition('draft', 'superseded') === null && resolveTransition('open', 'superseded') === null
-      && resolveTransition('done', 'cancelled') === null && resolveTransition('cancelled', 'cancelled') === null
-      && resolveTransition('approved', 'deleted') === null && resolveTransition('approved', null) === 'done');
-}
-
-// ---- S5 applyTransition：只动状态行 + 增指纹行，正文逐字节原样 ----
-{
-  const src = '---\n状态: draft\n级别: L2\n---\n\n# PLAN — x\n\n正文含 状态: 假行 不受影响';
-  const out = applyTransition(src, 'approved', 'a3f9000000000000');
-  check('S5 落态：状态行改值、指纹行追加、级别行与正文原样',
-    out.startsWith('---\n状态: approved\n级别: L2\n确认指纹: a3f9000000000000\n---\n\n# PLAN — x\n\n正文含 状态: 假行 不受影响'),
-    JSON.stringify(out));
-}
-
-// ---- S6 applyTransition：已有指纹行则覆盖（done 跳换新指纹）----
-{
-  const src = '---\n状态: approved\n确认指纹: old\n---\nX';
-  const out = applyTransition(src, 'done', 'new1234567890abcd');
-  check('S6 已有指纹行覆盖为新值', out.includes('状态: done') && out.includes('确认指纹: new1234567890abcd') && !out.includes('old'));
-}
-
-// ---- S7 applyTransition：无 frontmatter → null 不写 ----
-{
-  check('S7 无 frontmatter 返回 null', applyTransition('# 无 fm\n状态: draft', 'approved', 'x') === null);
-}
-
-// ---- S8 appendLedger：追加行 schema（ts/doc/stage/fingerprint/prev）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-led-'));
-  appendLedger(root, { ts: 'T', doc: 'workflow/plans/a.md', stage: 'approved', fingerprint: 'f'.repeat(64), prev: 'draft' });
-  const lines = fs.readFileSync(path.join(root, '.agents', 'confirmations.jsonl'), 'utf8').trim().split('\n');
-  const j = JSON.parse(lines[0]);
-  check('S8 台账追加且 schema 齐', lines.length === 1 && j.doc === 'workflow/plans/a.md' && j.stage === 'approved' && j.fingerprint.length === 64 && j.prev === 'draft');
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S8b 哈希链（2026-10-09 engine-quality-round2 D）：链字段写入 + 接续 + 重算自洽 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-chain-'));
-  // 先写一行无 hash 的「存量」行（模拟 v1.5.0 前台账）——新行 prevHash 应为 ''（链重启）
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.agents', 'confirmations.jsonl'), JSON.stringify({ ts: 'T0', doc: 'workflow/plans/old.md', stage: 'done', fingerprint: 'e'.repeat(64), prev: 'approved' }) + '\n');
-  appendLedger(root, { ts: 'T1', doc: 'workflow/plans/a.md', stage: 'approved', fingerprint: 'f'.repeat(64), prev: 'draft' });
-  appendLedger(root, { ts: 'T2', doc: 'workflow/plans/a.md', stage: 'done', fingerprint: 'g'.repeat(64), prev: 'approved' });
-  const rows = fs.readFileSync(path.join(root, '.agents', 'confirmations.jsonl'), 'utf8').trim().split('\n').map((l) => JSON.parse(l));
-  check('S8b 存量行后首链行 prevHash 为空（链重启，历史零回填）', rows[0].hash === undefined && rows[1].prevHash === '');
-  check('S8b 第二链行 prevHash 接续第一链行 hash', rows[2].prevHash === rows[1].hash);
-  const { ledgerChainHash } = await import('./policy.mjs');
-  const recompute = (row) => { const { hash, prevHash, ...rest } = row; return ledgerChainHash(rest, prevHash) === hash; };
-  check('S8b 两链行 hash 重算自洽（CRLF/键序规范化单源）', recompute(rows[1]) && recompute(rows[2]));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S9【核心】非 TTY spawn（AI 调用路径）必须被拒 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-tty-'));
-  const docP = path.join(root, 'workflow', 'plans');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.writeFileSync(path.join(docP, '2026-09-27-x.md'), '---\n状态: draft\n---\n# P');
-  // spawnSync 无 TTY（管道 stdin）——模拟 AI 会话内调用；即使参数完全合法也必须拒绝
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-27-x.md'], { cwd: root, encoding: 'utf8', input: '可以\n' });
-  const after = fs.readFileSync(path.join(docP, '2026-09-27-x.md'), 'utf8');
-  check('S9 非 TTY 调用被拒：exit 1 + 提示 + 文档未被改动（AI 无法代确认）',
-    r.status === 1 && /不可代确认/.test(r.stderr) && after === '---\n状态: draft\n---\n# P',
-    JSON.stringify({ status: r.status, stderr: r.stderr, after }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S10 非 TTY 拒绝先于参数校验（无参数同拒）----
-{
-  const r = spawnSync(process.execPath, [CLI], { encoding: 'utf8' });
-  check('S10 TTY 门最先（无参数也是拒绝而非用法提示）', r.status === 1 && /不可代确认/.test(r.stderr));
-}
-
-// ---- S11 委托代录：非 TTY spawn + --delegated → 免 TTY 落态 + 台账如实记 source/quote ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-del-'));
-  const docP = path.join(root, 'workflow', 'plans');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.writeFileSync(path.join(docP, '2026-09-27-d.md'), '---\n状态: draft\n级别: L2\n---\n# P\n');
-  // 逐阶段门夹具（2026-09-30 stage-gate-machine）：plan 批准须先有已确认入口——
-  // 入口用存量口径（日期早于 confirmDocsEffective）免台账；级别 L1 免 spec 档
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-27-d.md'), '---\n状态: approved\n级别: L1\n日期: 2026-01-01\n---\n# I（S11 入口夹具）\n');
-  const before = fs.readFileSync(path.join(docP, '2026-09-27-d.md'), 'utf8');
-  const fpExpect = computeFingerprint(before);
-  // spawnSync 无 TTY（管道 stdin）——模拟 AI 会话内委托代录调用
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-27-d.md', '--delegated', '2选2'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-09-27-d.md'), 'utf8');
-  const led = readLedgerOf(root);
-  const j = led[led.length - 1];
-  check('S11 委托代录：exit 0 + draft→approved + 指纹行 + 台账 source=chat-delegated / quote=原话 / 指纹全量与 frontmatter 前 16 位配对',
-    r.status === 0 && after.includes('状态: approved') && after.includes(`确认指纹: ${fpExpect.slice(0, 16)}`)
-      && j.source === 'chat-delegated' && j.quote === '2选2' && j.stage === 'approved' && j.prev === 'draft'
-      && j.fingerprint === fpExpect,
-    JSON.stringify({ status: r.status, stderr: r.stderr, ledger: led }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S12 委托代录第二跳：approved→done 换新指纹（台账行仍如实记来源）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-del2-'));
-  const docP = path.join(root, 'workflow', 'intents');
-  fs.mkdirSync(docP, { recursive: true });
-  const fp1 = computeFingerprint('---\n状态: draft\n---\n# I\n');
-  fs.writeFileSync(path.join(docP, '2026-09-27-e.md'), `---\n状态: approved\n确认指纹: ${fp1.slice(0, 16)}\n---\n# I\n`);
-  const before = fs.readFileSync(path.join(docP, '2026-09-27-e.md'), 'utf8');
-  const fp2 = computeFingerprint(before);
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-27-e.md', '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-09-27-e.md'), 'utf8');
-  const led = readLedgerOf(root);
-  check('S12 委托第二跳：approved→done + 指纹行换新值 + 台账 stage=done / source 如实',
-    r.status === 0 && after.includes('状态: done') && after.includes(`确认指纹: ${fp2.slice(0, 16)}`) && !after.includes(fp1.slice(0, 16))
-      && led[led.length - 1].stage === 'done' && led[led.length - 1].source === 'chat-delegated',
-    JSON.stringify({ status: r.status, after }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S13 委托代录：--delegated 空原话 → exit 1 用法提示，零文件改动 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-del3-'));
-  const docP = path.join(root, 'workflow', 'plans');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.writeFileSync(path.join(docP, '2026-09-27-f.md'), '---\n状态: draft\n---\n# P\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-27-f.md', '--delegated', '  '], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-09-27-f.md'), 'utf8');
-  const noLedger = !fs.existsSync(path.join(root, '.agents', 'confirmations.jsonl'));
-  check('S13 空原话拒跑：exit 1 + 用法提示 + 文档未动 + 无台账',
-    r.status === 1 && /--delegated 须带用户对话原话/.test(r.stderr) && after === '---\n状态: draft\n---\n# P\n' && noLedger,
-    JSON.stringify({ status: r.status, stderr: r.stderr }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S15 incidents 委托代录（2026-09-27 gate-coverage）：open→fixed 落态 + 台账 stage=fixed ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-inc-'));
-  const docP = path.join(root, 'workflow', 'incidents');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.writeFileSync(path.join(docP, '2026-09-28-i.md'), '---\n状态: open\n级别: L1\n---\n# I\n');
-  const before = fs.readFileSync(path.join(docP, '2026-09-28-i.md'), 'utf8');
-  const fpExpect = computeFingerprint(before);
-  const r = spawnSync(process.execPath, [CLI, 'workflow/incidents/2026-09-28-i.md', '--delegated', '修好了'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-09-28-i.md'), 'utf8');
-  const led = readLedgerOf(root);
-  const j = led[led.length - 1];
-  check('S15 incidents 委托代录：exit 0 + open→fixed + 指纹行 + 台账 stage=fixed / prev=open',
-    r.status === 0 && after.includes('状态: fixed') && after.includes(`确认指纹: ${fpExpect.slice(0, 16)}`)
-      && j.source === 'chat-delegated' && j.quote === '修好了' && j.stage === 'fixed' && j.prev === 'open'
-      && j.fingerprint === fpExpect,
-    JSON.stringify({ status: r.status, stderr: r.stderr, ledger: led }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S16 放弃态 --to（2026-09-27 closing-coverage）：draft --to cancelled 委托代录落态 + 台账 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-to-'));
-  const docP = path.join(root, 'workflow', 'intents');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.writeFileSync(path.join(docP, '2026-09-28-c.md'), '---\n状态: draft\n级别: L1\n---\n# I\n');
-  const before = fs.readFileSync(path.join(docP, '2026-09-28-c.md'), 'utf8');
-  const fpExpect = computeFingerprint(before);
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-28-c.md', '--to', 'cancelled', '--delegated', '不做了'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-09-28-c.md'), 'utf8');
-  const led = readLedgerOf(root);
-  const j = led[led.length - 1];
-  check('S16 --to cancelled 委托代录：exit 0 + draft→cancelled + 台账 stage=cancelled / prev=draft',
-    r.status === 0 && after.includes('状态: cancelled') && after.includes(`确认指纹: ${fpExpect.slice(0, 16)}`)
-      && j.stage === 'cancelled' && j.prev === 'draft' && j.quote === '不做了' && j.fingerprint === fpExpect,
-    JSON.stringify({ status: r.status, stderr: r.stderr, ledger: led }));
-  // 调用事实（2026-09-28 batch-ledger-audit）：委托单份 → of=1、seq=1、batch 为非空字符串
-  // （check-loop 检查 15 的并录审计据此判「是否一次调用落多份」——不再从 quote/ts 反推）
-  check('S16b 台账行含调用事实 batch/seq/of 且单份 = of=1 / seq=1',
-    typeof j.batch === 'string' && j.batch.length > 0 && j.seq === 1 && j.of === 1,
-    JSON.stringify({ batch: j.batch, seq: j.seq, of: j.of }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S17 --to 非法组合拒跑：done --to cancelled → 跳过且不落台账 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-to2-'));
-  const docP = path.join(root, 'workflow', 'plans');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.writeFileSync(path.join(docP, '2026-09-28-d.md'), '---\n状态: done\n级别: L1\n---\n# P\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-28-d.md', '--to', 'cancelled', '--delegated', '试试'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-09-28-d.md'), 'utf8');
-  const noLedger = !fs.existsSync(path.join(root, '.agents', 'confirmations.jsonl'));
-  check('S17 --to 非法组合（done→cancelled）：跳过不落态 + 无台账 + 文档未动',
-    /无合法跳转/.test(r.stderr || '') && after.includes('状态: done') && noLedger,
-    JSON.stringify({ stderr: r.stderr }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S18 delegated 单文档强制（2026-09-27 confirm-gate-one-per-call）----
-//     多文档并录曾系统性塌掉三道阶段门（build.md「逐件确认不得并作一次」）——机器层收口
-{
-  const mk2docs = () => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-single-'));
-    for (const sub of ['intents', 'plans']) {
-      fs.mkdirSync(path.join(root, 'workflow', sub), { recursive: true });
-      fs.writeFileSync(path.join(root, 'workflow', sub, '2026-09-27-s.md'), `---\n状态: draft\n级别: L1\n---\n# ${sub === 'intents' ? 'I' : 'P'}\n`);
-    }
-    return root;
-  };
-  {
-    const root = mk2docs();
-    const before1 = fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-09-27-s.md'), 'utf8');
-    const before2 = fs.readFileSync(path.join(root, 'workflow', 'plans', '2026-09-27-s.md'), 'utf8');
-    const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-27-s.md', 'workflow/plans/2026-09-27-s.md', '--delegated', '两份一起'], { cwd: root, encoding: 'utf8' });
-    const noLedger = !fs.existsSync(path.join(root, '.agents', 'confirmations.jsonl'));
-    const after1 = fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-09-27-s.md'), 'utf8');
-    const after2 = fs.readFileSync(path.join(root, 'workflow', 'plans', '2026-09-27-s.md'), 'utf8');
-    check('S18 delegated 双文档 → exit 1 拒绝 + 逐件口径提示 + 零台账 + 文档零改动',
-      r.status === 1 && /一次仅接受一份文档/.test(r.stderr) && /逐件/.test(r.stderr)
-        && noLedger && after1 === before1 && after2 === before2,
-      JSON.stringify({ status: r.status, stderr: r.stderr }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  {
-    const root = mk2docs();
-    const r1 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-27-s.md', '--delegated', '第一份可以'], { cwd: root, encoding: 'utf8' });
-    const r2 = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-27-s.md', '--delegated', '第一份可以'], { cwd: root, encoding: 'utf8' });
-    check('S18 delegated 单文档逐次调用照常（两次各落态各记账）',
-      r1.status === 0 && r2.status === 0
-        && fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-09-27-s.md'), 'utf8').includes('状态: approved')
-        && fs.readFileSync(path.join(root, 'workflow', 'plans', '2026-09-27-s.md'), 'utf8').includes('状态: approved'),
-      JSON.stringify({ r1: r1.status, r2: r2.status, stderr: r2.stderr }));
-    // 调用事实（2026-09-28 batch-ledger-audit）：每次进程调用 **一个** batch；两次独立调用 batch **不同**，
-    // 各自 seq=1 / of=1——这是并录审计「逐件 vs 并录」的判别基础（复核 P2-2：plan 要求覆盖此面）
-    const led2 = readLedgerOf(root);
-    const [e1, e2] = led2.slice(-2);
-    check('S18b 两次独立调用各生成独立 batch（不同批、各自 seq=1/of=1）',
-      e1.batch !== e2.batch && e1.seq === 1 && e2.seq === 1 && e1.of === 1 && e2.of === 1,
-      JSON.stringify(led2.slice(-2)));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  {
-    // 【复核 P2-2】单次调用落 N 份 → batch 相同 / seq 递增 1,2 / of=2 —— **端到端**验证 TTY 多文档路径。
-    // 该路径仅 TTY 可达（delegated 已被入口限为 1 份），故注入两个**仅测试用**逃生门：
-    //   CONFIRM_DOC_TEST_TTY=1      —— 放行 isTTY 判定（本环境无 TTY）
-    //   CONFIRM_DOC_TEST_ANSWERS    —— 按序注入问答应答（见下「为什么不能用管道 stdin」）
-    //   NODE_ENV=test               —— TTY 逃生门双条件的第二键（2026-09-28 check16-inline-debt：
-    //                                 单变量可被生产会话顺手设置绕过 TTY 门，收紧为双条件）
-    // 三者均不改动任何落态/记账语义。
-    //
-    // **为什么不能用 spawnSync 的 input 管道（2026-09-28 更正）**：此前本用例用 `input:'可以\n可以\n'`
-    // 并断言「首份」了事，注释把根因误记为「readline 对第二份提问会 unsettled / 管道输入不被逐次消费」。
-    // 经复现，真实机制是：spawnSync 的管道**一次性写完即关闭写端**，readline 在第一个 question 注册前
-    // 就已把第二行读入并丢弃，且 stdin 随即 EOF —— 第二个 question 永远等不到输入。**与「有无 TTY」无关**，
-    // 是「管道 EOF + 跨 await 边界的 question 注册时序」所致（嵌套回调版同样两问两答可用，加 await 即挂）。
-    const root = mk2docs();
-    const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-27-s.md', 'workflow/plans/2026-09-27-s.md'], {
-      cwd: root, encoding: 'utf8',
-      env: { ...process.env, CONFIRM_DOC_TEST_TTY: '1', CONFIRM_DOC_TEST_ANSWERS: '可以,可以', NODE_ENV: 'test' },
-    });
-    const ledN = readLedgerOf(root);
-    const stI = fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-09-27-s.md'), 'utf8');
-    const stP = fs.readFileSync(path.join(root, 'workflow', 'plans', '2026-09-27-s.md'), 'utf8');
-    check('S18c 单次调用落 2 份（TTY 多文档）端到端 → batch 相同 / seq 1,2 / of 均=2 / 两份都落态',
-      r.status === 0 && ledN.length === 2
-        && ledN[0].batch === ledN[1].batch && typeof ledN[0].batch === 'string' && ledN[0].batch.length > 0
-        && ledN[0].seq === 1 && ledN[1].seq === 2
-        && ledN[0].of === 2 && ledN[1].of === 2
-        && ledN[0].source === 'tty' && ledN[1].source === 'tty'
-        && stI.includes('状态: approved') && stP.includes('状态: approved'),
-      JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 300), ledger: ledN }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  {
-    // 【复核 P2-2】注入应答不足时，剩余文档按「未确认」跳过（不落态、不记账）——钉住注入语义的边界，
-    // 避免测试逃生门被误用成「无条件放行」。
-    const root = mk2docs();
-    const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-27-s.md', 'workflow/plans/2026-09-27-s.md'], {
-      cwd: root, encoding: 'utf8',
-      env: { ...process.env, CONFIRM_DOC_TEST_TTY: '1', CONFIRM_DOC_TEST_ANSWERS: '可以', NODE_ENV: 'test' }, // 只给一份应答
-    });
-    const led1 = readLedgerOf(root);
-    const stP1 = fs.readFileSync(path.join(root, 'workflow', 'plans', '2026-09-27-s.md'), 'utf8');
-    check('S18d 注入应答不足 → 仅首份落态，次份按跳过处理（不落态不记账）',
-      led1.length === 1 && led1[0].seq === 1 && led1[0].of === 2 && stP1.includes('状态: draft'),
-      JSON.stringify({ status: r.status, ledger: led1 }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  {
-    // 【T3 双条件】仅设 CONFIRM_DOC_TEST_TTY=1 而未设 NODE_ENV=test → 逃生门不生效，仍按非 TTY 拒绝
-    // （2026-09-28 check16-inline-debt：单变量可被生产会话顺手设置绕过 TTY 门，收紧为双条件——
-    //   本用例钉住「缺第二键即不放行」，与 S18c/S18d 的「双键齐 → 放行」构成双向覆盖）
-    const root = mk2docs();
-    const env1 = { ...process.env, CONFIRM_DOC_TEST_TTY: '1', CONFIRM_DOC_TEST_ANSWERS: '可以' };
-    delete env1.NODE_ENV; // 显式剔除——防宿主环境恰好携带 NODE_ENV 时用例失真
-    const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-27-s.md'], {
-      cwd: root, encoding: 'utf8', env: env1,
-    });
-    const noLedger = !fs.existsSync(path.join(root, '.agents', 'confirmations.jsonl'));
-    const afterI = fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-09-27-s.md'), 'utf8');
-    check('S18e 仅 CONFIRM_DOC_TEST_TTY=1 无 NODE_ENV=test → 仍非 TTY 拒绝（exit 1 + 零台账 + 文档未动）',
-      r.status === 1 && /不可代确认/.test(r.stderr) && noLedger && afterI.includes('状态: draft'),
-      JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 200) }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-}
-
-// ---- S19【逐阶段门】spec 无同名入口 → 拒绝落账（2026-09-30 stage-gate-machine）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-sg1-'));
-  const docP = path.join(root, 'workflow', 'specs');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.writeFileSync(path.join(docP, '2026-09-30-g.md'), '---\n状态: draft\n级别: L2\n---\n# S\n');
-  const before = fs.readFileSync(path.join(docP, '2026-09-30-g.md'), 'utf8');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/specs/2026-09-30-g.md', '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-09-30-g.md'), 'utf8');
-  const noLedger = !fs.existsSync(path.join(root, '.agents', 'confirmations.jsonl'));
-  check('S19 逐阶段门：spec 无同名入口 → exit 2 + 未落盘未记账 + 回退提示',
-    r.status === 2 && /逐阶段前置门/.test(r.stderr) && /未找到同名入口/.test(r.stderr) && after === before && noLedger,
-    JSON.stringify({ status: r.status, stderr: r.stderr }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S19b【待澄清门】spec 挂未澄清项 → 拒绝落账（2026-10-12 needs-clarification）----
-// 夹具沿 S23 的正路入口（台账行 + approved），确保**前置门已过**——否则拒绝原因会指向前置而非待澄清，
-// 用例就测不出新门。断言拒绝文案点名「needs-clarification」且**不含**前置门文案（两门分开出账）。
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-cl1-'));
-  for (const sub of ['intents', 'specs']) fs.mkdirSync(path.join(root, 'workflow', sub), { recursive: true });
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  const fp = 'c'.repeat(64);
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-10-12-n.md'), `---\n状态: approved\n级别: L2\n日期: 2026-10-12\n确认指纹: ${fp.slice(0, 16)}\n---\n# I\n`);
-  fs.writeFileSync(path.join(root, '.agents', 'confirmations.jsonl'), JSON.stringify({ ts: '2026-10-12T02:00:00.000Z', doc: 'workflow/intents/2026-10-12-n.md', stage: 'approved', fingerprint: fp, prev: 'draft', source: 'chat-delegated', batch: 'n1', seq: 1, of: 1 }) + '\n');
-  const specP = path.join(root, 'workflow', 'specs', '2026-10-12-n.md');
-  fs.writeFileSync(specP, '---\n状态: draft\n级别: L2\n---\n# S\n\n## 功能行为\n- 待澄清：错误率的判据是 5xx 占比还是全量？\n');
-  const before = fs.readFileSync(specP, 'utf8');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/specs/2026-10-12-n.md', '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(specP, 'utf8');
-  const led = readLedgerOf(root);
-  check('S19b 待澄清门：挂未澄清项 → exit 2 + 点名行号与内容 + 未落盘 + 零新增台账',
-    r.status === 2 && /needs-clarification/.test(r.stderr) && /第8行/.test(r.stderr) && /5xx 占比还是全量/.test(r.stderr)
-      && after === before && led.length === 1,
-    JSON.stringify({ status: r.status, stderr: r.stderr, ledger: led.length }));
-  check('S19b 待澄清门：拒绝原因不误指向前置门（两门分开出账，否则作者查错地方）',
-    !/逐阶段前置门/.test(r.stderr), r.stderr);
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S19c【待澄清门】解决后（行首改「已澄清」）→ 放行；纯删行亦可 ----
-{
-  const mkClarified = (body) => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-cl2-'));
-    for (const sub of ['intents', 'specs']) fs.mkdirSync(path.join(root, 'workflow', sub), { recursive: true });
-    fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-    const fp = 'd'.repeat(64);
-    fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-10-12-o.md'), `---\n状态: approved\n级别: L2\n日期: 2026-10-12\n确认指纹: ${fp.slice(0, 16)}\n---\n# I\n`);
-    fs.writeFileSync(path.join(root, '.agents', 'confirmations.jsonl'), JSON.stringify({ ts: '2026-10-12T02:00:00.000Z', doc: 'workflow/intents/2026-10-12-o.md', stage: 'approved', fingerprint: fp, prev: 'draft', source: 'chat-delegated', batch: 'o1', seq: 1, of: 1 }) + '\n');
-    fs.writeFileSync(path.join(root, 'workflow', 'specs', '2026-10-12-o.md'), body);
-    return root;
-  };
-  for (const [name, body] of [
-    ['改前缀为「已澄清」（保留行、留痕曾不清楚）', '---\n状态: draft\n级别: L2\n---\n# S\n\n- 已澄清：错误率判据 = 5xx 占比（与用户 10-12 对齐）\n'],
-    ['直接删行', '---\n状态: draft\n级别: L2\n---\n# S\n\n## 功能行为\n- 错误率判据 = 5xx 占比\n'],
-  ]) {
-    const root = mkClarified(body);
-    const r = spawnSync(process.execPath, [CLI, 'workflow/specs/2026-10-12-o.md', '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-    const after = fs.readFileSync(path.join(root, 'workflow', 'specs', '2026-10-12-o.md'), 'utf8');
-    check(`S19c 待澄清门：${name} → 放行落态`, r.status === 0 && after.includes('状态: approved'),
-      JSON.stringify({ status: r.status, stderr: r.stderr }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  // intents 挂门（2026-10-18 立项跳对称化，推翻旧判例「澄清天然发生在需求单处」——intent 是后链
-  // 全部文档的种子，立项时被含混带过的不确定项到 spec/plan 跳已无人能补标；存量无标记零回溯）
-  {
-    const root3 = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-cl3-'));
-    fs.mkdirSync(path.join(root3, 'workflow', 'intents'), { recursive: true });
-    const ip = path.join(root3, 'workflow', 'intents', '2026-10-12-p.md');
-    fs.writeFileSync(ip, '---\n状态: draft\n级别: L1\n---\n# I\n\n- 待澄清：范围含不含移动端？\n');
-    const r3 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-12-p.md', '--delegated', '可以'], { cwd: root3, encoding: 'utf8' });
-    check('S19c 待澄清门：intent 挂未澄清项 → exit 2 + 点名内容 + 未落盘（立项跳对称化）',
-      r3.status === 2 && /needs-clarification/.test(r3.stderr) && /移动端/.test(r3.stderr)
-        && !/逐阶段前置门/.test(r3.stderr)
-        && fs.readFileSync(ip, 'utf8').includes('状态: draft'),
-      JSON.stringify({ status: r3.status, stderr: r3.stderr }));
-    fs.writeFileSync(ip, '---\n状态: draft\n级别: L1\n---\n# I\n\n- 已澄清：范围仅桌面端（用户 10-12 拍板）\n');
-    const r4 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-12-p.md', '--delegated', '可以'], { cwd: root3, encoding: 'utf8' });
-    check('S19c 待澄清门：intent 已澄清 → 放行落态',
-      r4.status === 0 && fs.readFileSync(ip, 'utf8').includes('状态: approved'),
-      JSON.stringify({ status: r4.status, stderr: r4.stderr }));
-    fs.writeFileSync(ip, '---\n状态: draft\n级别: L1\n---\n# I\n\n## 目标\n- 无标记存量件\n');
-    const r5 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-12-p.md', '--delegated', '可以'], { cwd: root3, encoding: 'utf8' });
-    check('S19c 待澄清门：intent 无标记（存量口径）→ 放行零回溯',
-      r5.status === 0 && fs.readFileSync(ip, 'utf8').includes('状态: approved'),
-      JSON.stringify({ status: r5.status, stderr: r5.stderr }));
-    fs.rmSync(root3, { recursive: true, force: true });
-  }
-}
-
-// ---- S20【逐阶段门】入口存在但未确认（draft）→ 拒绝 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-sg2-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.mkdirSync(path.join(root, 'workflow', 'specs'), { recursive: true });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-h.md'), '---\n状态: draft\n级别: L2\n日期: 2026-09-30\n---\n# I\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'specs', '2026-09-30-h.md'), '---\n状态: draft\n级别: L2\n---\n# S\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/specs/2026-09-30-h.md', '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-  const noLedger = !fs.existsSync(path.join(root, '.agents', 'confirmations.jsonl'));
-  check('S20 逐阶段门：入口未确认（draft）→ exit 2 + 提示状态、零落账',
-    r.status === 2 && /状态「draft」/.test(r.stderr) && noLedger,
-    JSON.stringify({ status: r.status, stderr: r.stderr }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S21【逐阶段门】L1 入口已确认 → plan 放行（存量口径免台账；级别 L1 免 spec 档）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-sg3-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.mkdirSync(path.join(root, 'workflow', 'plans'), { recursive: true });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-j.md'), '---\n状态: approved\n级别: L1\n日期: 2026-01-01\n---\n# I\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'plans', '2026-09-30-j.md'), '---\n状态: draft\n级别: L1\n---\n# P\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-30-j.md', '--delegated', '继续'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(root, 'workflow', 'plans', '2026-09-30-j.md'), 'utf8');
-  check('S21 逐阶段门：L1 入口 approved（存量口径）→ plan 放行落态',
-    r.status === 0 && after.includes('状态: approved'),
-    JSON.stringify({ status: r.status, stderr: r.stderr }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S22【逐阶段门】L2 入口已确认但缺 spec → plan 拒绝 ----
-{
-  // 入口须有**台账行**（不复用存量日期短路路径）——夹具写 confirmed 行使前置成立，仅缺 spec
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-sg4-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.mkdirSync(path.join(root, 'workflow', 'plans'), { recursive: true });
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  const fp4 = '4'.repeat(64);
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-k.md'), `---\n状态: approved\n级别: L2\n日期: 2026-09-30\n确认指纹: ${fp4.slice(0, 16)}\n---\n# I\n`);
-  fs.writeFileSync(path.join(root, '.agents', 'confirmations.jsonl'), JSON.stringify({ ts: '2026-09-30T04:00:00.000Z', doc: 'workflow/intents/2026-09-30-k.md', stage: 'approved', fingerprint: fp4, prev: 'draft', source: 'chat-delegated', batch: 'k4', seq: 1, of: 1 }) + '\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'plans', '2026-09-30-k.md'), '---\n状态: draft\n级别: L2\n---\n# P\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-30-k.md', '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(root, 'workflow', 'plans', '2026-09-30-k.md'), 'utf8');
-  check('S22 逐阶段门：L2 入口（台账行）缺同名 spec → plan 拒绝（exit 2 + 未落态）',
-    r.status === 2 && /缺同名 spec/.test(r.stderr) && after.includes('状态: draft'),
-    JSON.stringify({ status: r.status, stderr: r.stderr }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S23【逐阶段门】入口「台账行」正路放行（非存量口径；复核 P2-4④）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-sg5-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.mkdirSync(path.join(root, 'workflow', 'specs'), { recursive: true });
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  const fp = 'b'.repeat(64);
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-m.md'), `---\n状态: approved\n级别: L2\n日期: 2026-09-30\n确认指纹: ${fp.slice(0, 16)}\n---\n# I\n`);
-  fs.writeFileSync(path.join(root, '.agents', 'confirmations.jsonl'), JSON.stringify({ ts: '2026-09-30T02:00:00.000Z', doc: 'workflow/intents/2026-09-30-m.md', stage: 'approved', fingerprint: fp, prev: 'draft', source: 'chat-delegated', batch: 't9', seq: 1, of: 1 }) + '\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'specs', '2026-09-30-m.md'), '---\n状态: draft\n级别: L2\n---\n# S\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/specs/2026-09-30-m.md', '--delegated', '继续'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(root, 'workflow', 'specs', '2026-09-30-m.md'), 'utf8');
-  check('S23 逐阶段门：入口状态 approved + 台账行（正路）→ spec 放行',
-    r.status === 0 && after.includes('状态: approved'),
-    JSON.stringify({ status: r.status, stderr: r.stderr }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-{
-  // N1：存量短路（confirm-doc 侧）——legacy 入口无级别 → spec 放行
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-n1-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.mkdirSync(path.join(root, 'workflow', 'specs'), { recursive: true });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-n1.md'), '---\n状态: approved\n日期: 2026-01-01\n流程: legacy\n---\n# I（存量、无级别）\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'specs', '2026-09-30-n1.md'), '---\n状态: draft\n级别: L2\n---\n# S\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/specs/2026-09-30-n1.md', '--delegated', 'n1 回归'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(root, 'workflow', 'specs', '2026-09-30-n1.md'), 'utf8');
-  check('S24 N1 存量短路：legacy 入口无级别 → confirm-doc 放行（不锁死确认）',
-    r.status === 0 && after.includes('状态: approved'),
-    JSON.stringify({ status: r.status, stderr: r.stderr }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S25–S29【done 前置门】approved 历史留痕（2026-09-30 confirm-gate-approved-history）----
-// git helper：与 check-loop.test 同口径（win32 → git.exe；-c 注入 user 免全局 config 依赖）
-const GITBIN = process.platform === 'win32' ? 'git.exe' : 'git';
-const gitAt = (root, ...args) => spawnSync(GITBIN, args, { cwd: root, encoding: 'utf8' });
-const gitHead = (root) => {
-  gitAt(root, 'init', '-q');
-  gitAt(root, '-c', 'user.email=t@t', '-c', 'user.name=t', 'commit', '-q', '--allow-empty', '-m', 'init');
-};
-
-// S25：有 HEAD 但文档从未提交（先 done 后提交形态）→ done 拒绝
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-dh1-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'plans'), { recursive: true });
-  const p = path.join(root, 'workflow', 'plans', '2026-09-30-d1.md');
-  fs.writeFileSync(p, '---\n状态: approved\n级别: L2\n日期: 2026-09-30\n---\n# P\n');
-  const before = fs.readFileSync(p, 'utf8');
-  gitHead(root);
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-30-d1.md', '--delegated', '关单'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(p, 'utf8');
-  const noLedger = !fs.existsSync(path.join(root, '.agents', 'confirmations.jsonl'));
-  check('S25 done 门：历史无 approved（先 done 后提交形态）→ exit 2 + 零落账 + 零写盘',
-    r.status === 2 && /done 前置门/.test(r.stderr) && /从未出现/.test(r.stderr) && after === before && noLedger,
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 260) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// S26：approved 态已提交（留痕）→ done 放行落账
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-dh2-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'plans'), { recursive: true });
-  const p = path.join(root, 'workflow', 'plans', '2026-09-30-d2.md');
-  fs.writeFileSync(p, '---\n状态: approved\n级别: L2\n日期: 2026-09-30\n---\n# P\n');
-  gitHead(root);
-  gitAt(root, 'add', '-A');
-  gitAt(root, '-c', 'user.email=t@t', '-c', 'user.name=t', 'commit', '-q', '-m', 'approved');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-30-d2.md', '--delegated', '关单'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(p, 'utf8');
-  const ledger = readLedgerOf(root); // 复核 P2-1：统一 helper（缺失 → []，不崩溃）
-  check('S26 done 门：approved 态已提交（留痕）→ 放行落态 + 台账 stage=done',
-    r.status === 0 && after.includes('状态: done') && ledger.some((e) => e.stage === 'done' && e.prev === 'approved'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// S27：非 git 环境 → 跳过（不误拦；沿检查 14 口径）
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-dh3-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'plans'), { recursive: true });
-  const p = path.join(root, 'workflow', 'plans', '2026-09-30-d3.md');
-  fs.writeFileSync(p, '---\n状态: approved\n级别: L2\n---\n# P\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/plans/2026-09-30-d3.md', '--delegated', '关单'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(p, 'utf8');
-  check('S27 done 门：非 git 环境 → 跳过放行',
-    r.status === 0 && after.includes('状态: done'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// S28：legacy 标记 → 跳过（存量口径；intent 文档承载——spec/plan 不产生 legacy 标记）
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-dh4-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  const p = path.join(root, 'workflow', 'intents', '2026-09-30-d4.md');
-  fs.writeFileSync(p, '---\n状态: approved\n级别: L1\n日期: 2026-01-01\n流程: legacy\n---\n# I\n');
-  gitHead(root);
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-d4.md', '--delegated', '关单'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(p, 'utf8');
-  check('S28 done 门：legacy 标记 → 跳过放行',
-    r.status === 0 && after.includes('状态: done'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// S29：正文「存量确认态豁免（」声明 → 跳过（显式逃生口；与检查 14 同标记）
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-dh5-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'specs'), { recursive: true });
-  const p = path.join(root, 'workflow', 'specs', '2026-09-30-d5.md');
-  fs.writeFileSync(p, '---\n状态: approved\n级别: L2\n---\n# S\n\n存量确认态豁免（S29 构造：声明式逃生口覆盖）\n');
-  gitHead(root);
-  const r = spawnSync(process.execPath, [CLI, 'workflow/specs/2026-09-30-d5.md', '--delegated', '关单'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(p, 'utf8');
-  check('S29 done 门：存量豁免声明 → 跳过放行',
-    r.status === 0 && after.includes('状态: done'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S30【协作道批量】--batch：delegated 多份 L1 一次代录 → 全部落态 + 台账 brief:true（2026-09-30 hybrid-governance-risk-lanes）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-bt1-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt1.md'), '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I1\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt2.md'), '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I2\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-bt1.md', 'workflow/intents/2026-09-30-bt2.md', '--delegated', '批量放行', '--batch'], { cwd: root, encoding: 'utf8' });
-  const led = readLedgerOf(root);
-  const st1 = fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt1.md'), 'utf8');
-  const st2 = fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt2.md'), 'utf8');
-  check('S30 --batch：2 份 L1 一次代录 → 全部 approved + 台账 brief:true / of=2 / seq 递增',
-    r.status === 0 && led.length === 2
-      && led.every((e) => e.brief === true && e.source === 'chat-delegated' && e.of === 2 && e.stage === 'approved')
-      && led[0].seq === 1 && led[1].seq === 2
-      && st1.includes('状态: approved') && st2.includes('状态: approved'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 300), led }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S31【协作道批量】--batch 混入 L2 → 该份逐份拒绝（exit 2 + 未落盘未记账），L1 份照常落态 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-bt2-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt3.md'), '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I3\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt4.md'), '---\n状态: draft\n级别: L2\n日期: 2026-09-30\n---\n# I4\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-bt3.md', 'workflow/intents/2026-09-30-bt4.md', '--delegated', '批量放行', '--batch'], { cwd: root, encoding: 'utf8' });
-  const led = readLedgerOf(root);
-  const st4 = fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt4.md'), 'utf8');
-  check('S31 --batch 混入 L2 → L2 拒绝（exit 2 + 未落盘未记账）+ L1 落态',
-    r.status === 2 && /不在协作道/.test(r.stderr) && led.length === 1 && led[0].doc.endsWith('bt3.md') && st4.includes('状态: draft'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 300), led }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S31b【方案 C 分歧双严】--batch 分歧件（级别 L1 / risk_level L2，协议期）→ 泳道 suspect 逐份拒绝（2026-10-02 caliber-convergence）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-bt3-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.agents', 'kit.json'), JSON.stringify({ policyVersion: 2 }));
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-10-02-dv1.md'), '---\n状态: draft\n级别: L1\nrisk_level: L2\n日期: 2026-10-02\n---\n# DV\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-02-dv1.md', '--delegated', '批量放行', '--batch'], { cwd: root, encoding: 'utf8' });
-  const led = readLedgerOf(root);
-  const st = fs.readFileSync(path.join(root, 'workflow', 'intents', '2026-10-02-dv1.md'), 'utf8');
-  check('S31b --batch 分歧件 → 泳道 suspect 拒（exit 2 + 对齐两字段提示 + 零台账未落盘）',
-    r.status === 2 && /泳道「suspect」/.test(r.stderr) && /对齐/.test(r.stderr) && led.length === 0 && st.includes('状态: draft'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 300), led }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S31c【方案 C 分歧双严】--auto 分歧件 → suspect 拒（消息锁定，先于 trust 判定短路）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-bt4-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.agents', 'kit.json'), JSON.stringify({ policyVersion: 2 }));
-  fs.writeFileSync(path.join(root, '.agents', 'trust-mode.json'), JSON.stringify({ enabled: true, level: 1, name: 'Standard', enabledAt: '2026-10-02T00:00:00.000Z' }));
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-10-02-dv2.md'), '---\n状态: draft\n级别: L1\nrisk_level: L2\n日期: 2026-10-02\n---\n# DV2\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-02-dv2.md', '--auto'], { cwd: root, encoding: 'utf8' });
-  check('S31c --auto（trust=Standard）分歧件 → 泳道 suspect 拒（消息含 suspect 与对齐指引）',
-    r.status !== 0 && /suspect/.test(r.stderr) && /对齐/.test(r.stderr),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 300) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S32 --batch 组合约束：与 --auto / --to 互斥（exit 1，零落账）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-bt3-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt5.md'), '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I5\n');
-  const r1 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-bt5.md', '--delegated', 'x', '--batch', '--auto'], { cwd: root, encoding: 'utf8' });
-  const r2 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-bt5.md', '--delegated', 'x', '--batch', '--to', 'cancelled'], { cwd: root, encoding: 'utf8' });
-  const noLedger = !fs.existsSync(path.join(root, '.agents', 'confirmations.jsonl'));
-  check('S32 --batch 与 --auto / --to 互斥 → 均 exit 1 + 零台账',
-    r1.status === 1 && r2.status === 1 && noLedger,
-    JSON.stringify({ r1: r1.status, r2: r2.status }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S33 简洁审计：单份 delegated L1（无 --batch）→ 台账 brief:true + 紧凑输出；L2 份不带 brief ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-bt4-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-bt6.md'), '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I6\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-bt6.md', '--delegated', '单份放行'], { cwd: root, encoding: 'utf8' });
-  const led = readLedgerOf(root);
-  check('S33 单份 L1 代录 → brief:true + 紧凑输出（协作道/异步审计标记）',
-    r.status === 0 && led.length === 1 && led[0].brief === true && /协作道\/异步审计/.test(r.stdout),
-    JSON.stringify({ status: r.status, stdout: String(r.stdout).slice(0, 200), led }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S34–S37【Trusted 自动泳道】trust-mode.json = Trusted（level 2）→ 非 TTY 免旗标隐式自治（2026-09-30 hybrid-governance-explore-hardening）----
-const writeTrust = (root, cfg) => {
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.agents', 'trust-mode.json'), JSON.stringify(cfg));
-};
-// S34：Trusted + L1 intent 免旗标 → draft→approved 落态 + 台账 source=ai-auto-trust-L2；第二跳 → done（全闭环）
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-tr1-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  writeTrust(root, { enabled: true, level: 2, name: 'Trusted', enabledAt: '2026-09-30T00:00:00.000Z' });
-  const p = path.join(root, 'workflow', 'intents', '2026-09-30-tr1.md');
-  fs.writeFileSync(p, '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I\n');
-  const r1 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-tr1.md'], { cwd: root, encoding: 'utf8' });
-  const led1 = readLedgerOf(root);
-  check('S34 Trusted 隐式：非 TTY 无旗标 L1 draft→approved + 台账 source=ai-auto-trust-L2',
-    r1.status === 0 && fs.readFileSync(p, 'utf8').includes('状态: approved')
-      && led1.length === 1 && led1[0].source === 'ai-auto-trust-L2' && led1[0].stage === 'approved' && led1[0].prev === 'draft',
-    JSON.stringify({ status: r1.status, stderr: String(r1.stderr).slice(0, 300), led: led1 }));
-  // 第二跳：非 git 环境 done 门跳过（S27 同口径）→ Level 2 全闭环直达 done
-  const r2 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-tr1.md'], { cwd: root, encoding: 'utf8' });
-  const led2 = readLedgerOf(root);
-  check('S34b Trusted 隐式第二跳：approved→done（Level 2 全闭环）',
-    r2.status === 0 && fs.readFileSync(p, 'utf8').includes('状态: done')
-      && led2.length === 2 && led2[1].stage === 'done' && led2[1].prev === 'approved',
-    JSON.stringify({ status: r2.status, stderr: String(r2.stderr).slice(0, 300), led: led2 }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-// S35：Trusted 隐式边界——L2 文档与 incidents 均不过自治门（exit 2 未落账）
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-tr2-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  fs.mkdirSync(path.join(root, 'workflow', 'incidents'), { recursive: true });
-  writeTrust(root, { enabled: true, level: 2, name: 'Trusted' });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-tr2.md'), '---\n状态: draft\n级别: L2\n日期: 2026-09-30\n---\n# I\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'incidents', '2026-09-30-tr3.md'), '---\n状态: open\n级别: L1\n---\n# I\n');
-  const r1 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-tr2.md'], { cwd: root, encoding: 'utf8' });
-  const r2 = spawnSync(process.execPath, [CLI, 'workflow/incidents/2026-09-30-tr3.md'], { cwd: root, encoding: 'utf8' });
-  check('S35 Trusted 隐式边界：L2 文档与 incidents 均拒绝（exit 2 未过自治门）+ 零台账',
-    r1.status === 2 && r2.status === 2 && readLedgerOf(root).length === 0,
-    JSON.stringify({ r1: r1.status, r2: r2.status, stderr1: String(r1.stderr).slice(0, 200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-// S36：Standard（level 1）不隐式——非 TTY 无旗标仍拒（隐式泳道仅 Trusted；fail-closed）
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-tr3-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  writeTrust(root, { enabled: true, level: 1, name: 'Standard' });
-  const p = path.join(root, 'workflow', 'intents', '2026-09-30-tr4.md');
-  fs.writeFileSync(p, '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-tr4.md'], { cwd: root, encoding: 'utf8' });
-  check('S36 Standard 不隐式：非 TTY 无旗标 → 仍 exit 1 拒绝 + 零写盘',
-    r.status === 1 && /不可代确认/.test(r.stderr) && fs.readFileSync(p, 'utf8').includes('状态: draft'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-// S37：Trusted 隐式边界——多份 / --to 放弃态 → 不隐式，仍拒（exit 1）
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-tr4-'));
-  fs.mkdirSync(path.join(root, 'workflow', 'intents'), { recursive: true });
-  writeTrust(root, { enabled: true, level: 2, name: 'Trusted' });
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-tr5.md'), '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I\n');
-  fs.writeFileSync(path.join(root, 'workflow', 'intents', '2026-09-30-tr6.md'), '---\n状态: draft\n级别: L1\n日期: 2026-09-30\n---\n# I\n');
-  const r1 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-tr5.md', 'workflow/intents/2026-09-30-tr6.md'], { cwd: root, encoding: 'utf8' });
-  const r2 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-30-tr5.md', '--to', 'cancelled'], { cwd: root, encoding: 'utf8' });
-  check('S37 Trusted 隐式边界：多份 / --to 放弃态 → 不隐式仍拒（exit 1 + 零台账）',
-    r1.status === 1 && r2.status === 1 && /不可代确认/.test(r1.stderr) && readLedgerOf(root).length === 0,
-    JSON.stringify({ r1: r1.status, r2: r2.status, stderr1: String(r1.stderr).slice(0, 160), stderr2: String(r2.stderr).slice(0, 160) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S38 测试绿凭证前置（2026-10-07 verify-evidence）：v5 + 验收节 + 无凭证 → ⚠️ advisory 且仍落账 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-verify1-'));
-  const docP = path.join(root, 'workflow', 'intents');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.agents', 'kit.json'), JSON.stringify({ policyVersion: 5 }), 'utf8');
-  fs.writeFileSync(path.join(docP, '2026-10-07-v.md'),
-    '---\n状态: approved\n级别: L1\n确认指纹: aaaa1111aaaa1111\n---\n# I\n\n## 验收标准（可测试）\n- [x] 用例通过（证据:测试全绿）\n', 'utf8');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-07-v.md', '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-10-07-v.md'), 'utf8');
-  check('S38 凭证前置：v5 + 验收节 + 无凭证 → ⚠️ 出账且 done 仍落态（advisory 不拦）',
-    r.status === 0 && /无测试绿凭证/.test(r.stderr) && /verify\.mjs/.test(r.stderr) && after.includes('状态: done'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S39 测试绿凭证前置：近期绿凭证在场 → 静默（无 ⚠️）----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-verify2-'));
-  const docP = path.join(root, 'workflow', 'intents');
-  fs.mkdirSync(docP, { recursive: true });
-  fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.agents', 'kit.json'), JSON.stringify({ policyVersion: 5 }), 'utf8');
-  fs.writeFileSync(path.join(root, '.agents', 'verifications.jsonl'),
-    `${JSON.stringify({ ts: new Date().toISOString(), exitCode: 0, suite: 'npm test', passed: 1, failed: 0 })}\n`, 'utf8');
-  fs.writeFileSync(path.join(docP, '2026-10-07-w.md'),
-    '---\n状态: approved\n级别: L1\n确认指纹: bbbb2222bbbb2222\n---\n# I\n\n## 验收标准（可测试）\n- [x] 用例通过（证据:测试全绿）\n', 'utf8');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-07-w.md', '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-  const after = fs.readFileSync(path.join(docP, '2026-10-07-w.md'), 'utf8');
-  check('S39 凭证前置：24h 内有绿行 → 静默（无 ⚠️）且 done 落态',
-    r.status === 0 && !/无测试绿凭证/.test(r.stderr) && after.includes('状态: done'),
-    JSON.stringify({ status: r.status, stderr: String(r.stderr).slice(0, 200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S40 测试绿凭证按 doc 绑定（2026-10-08 verify-doc-binding）----
-// 核心防线三条：① v6 + 只有**他单**绿行 → advisory 出账（漏洞已堵）；② v6 + 本单绿行 → 静默；
-// ③ **v5 + 只有他单绿行 → 静默**（向后兼容反例——收紧只许对 v6+ 生效，存量装户零变化）。
-// 文案锚点：既有 S38/S39 锚定「无测试绿凭证」六字连续 + 「verify.mjs」出现，本组不得破坏。
-{
-  const mkVerifyRoot = (pv, lines) => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-docbind-'));
-    const docP = path.join(root, 'workflow', 'intents');
-    fs.mkdirSync(docP, { recursive: true });
-    fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-    fs.writeFileSync(path.join(root, '.agents', 'kit.json'), JSON.stringify({ policyVersion: pv }), 'utf8');
-    fs.writeFileSync(path.join(root, '.agents', 'verifications.jsonl'), lines, 'utf8');
-    fs.writeFileSync(path.join(docP, '2026-10-08-m.md'),
-      '---\n状态: approved\n级别: L1\n确认指纹: cccc3333cccc3333\n---\n# I\n\n## 验收标准（可测试）\n- [x] 用例通过（证据:测试全绿）\n', 'utf8');
-    return root;
-  };
-  const green = (doc) => `${JSON.stringify({ ts: new Date().toISOString(), exitCode: 0, suite: 'npm test', passed: 1, failed: 0, ...(doc ? { doc } : {}) })}\n`;
-  const MINE = 'workflow/intents/2026-10-08-m.md';
-  const OTHER = 'workflow/intents/2026-10-08-other.md';
-  const runM = (root) => spawnSync(process.execPath, [CLI, MINE, '--delegated', '可以'], { cwd: root, encoding: 'utf8' });
-
-  const r40 = runM(mkVerifyRoot(6, green(OTHER)));
-  check('S40① v6 + 只有他单绿行 → advisory 出账（跨单背书漏洞已堵）+ 文案带 --doc',
-    r40.status === 0 && /无测试绿凭证/.test(r40.stderr) && /--doc/.test(r40.stderr), String(r40.stderr).slice(0, 200));
-  const r41 = runM(mkVerifyRoot(6, green(MINE)));
-  check('S40② v6 + 本单绿行 → 静默（绑定成立）',
-    r41.status === 0 && !/无测试绿凭证/.test(r41.stderr), String(r41.stderr).slice(0, 200));
-  const r42 = runM(mkVerifyRoot(5, green(OTHER)));
-  check('S40③ v5 + 只有他单绿行 → **静默**（兼容反例：收紧只对 v6+ 生效，存量装户零变化）',
-    r42.status === 0 && !/无测试绿凭证/.test(r42.stderr), String(r42.stderr).slice(0, 200));
-  const r43 = runM(mkVerifyRoot(6, green(null)));
-  check('S40④ v6 + 不带 doc 的绿行（CI 场景）→ 不给本单背书，advisory 出账',
-    r43.status === 0 && /无测试绿凭证/.test(r43.stderr), String(r43.stderr).slice(0, 200));
-}
-
-// ---- S41 台账 scope：机器派生改动面（2026-10-09 审查 A1 干净版）----
-// 背景：委托代录的授权凭据原是 `--delegated` 的用户原话——自由文本机器不可校验、AI 可零成本复用。
-// 干净版把分辨力换成机器派生的 scope{files,sha256}：写入侧机器派生（AI 无输入面），校验侧重算比对。
-// ① 归一与摘要单源（反斜杠 / 前导 ./ / 重复项 / 顺序无关 → 同一摘要）；② scopeMatches 抓「改了 files
-//    没改摘要」；③ 委托落账行带 scope 且含被确认文档；④ 非 git 夹具降级不崩（scope 退化为仅含 doc）。
-{
-  const d = scopeDigest(['b.md', 'a.md', './a.md', 'x\\y.md']);
-  check('S41① scopeDigest 归一：反斜杠→posix、去重、排序无关，摘要自洽',
-    d.files.join(',') === 'a.md,b.md,x/y.md' && d.sha256 === scopeDigest(['x/y.md', 'a.md', 'b.md']).sha256
-      && scopeMatches({ scope: d }), JSON.stringify(d));
-  check('S41② scopeMatches：files 被改而摘要未同步 → 判否',
-    !scopeMatches({ scope: { files: [...d.files, 'zz.md'], sha256: d.sha256 } })
-      && !scopeMatches({}) && !scopeMatches({ scope: { files: d.files } }));
-
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-scope-'));
-  const docP = path.join(root, 'workflow', 'intents'); // 用 intents：无逐阶段前置门，本用例只验 scope 落账
-  fs.mkdirSync(docP, { recursive: true });
-  fs.writeFileSync(path.join(docP, '2026-10-09-s.md'), '---\n状态: draft\n---\n# I\n');
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-09-s.md', '--delegated', '放行'], { cwd: root, encoding: 'utf8' });
-  const led = readLedgerOf(root);
-  const j = led[led.length - 1];
-  check('S41③ 委托落账行带机器派生 scope：含被确认文档 + 摘要自洽',
-    r.status === 0 && j && j.scope && Array.isArray(j.scope.files)
-      && j.scope.files.includes('workflow/intents/2026-10-09-s.md') && scopeMatches(j),
-    JSON.stringify({ status: r.status, stderr: r.stderr, scope: j && j.scope }));
-  check('S41④ 非 git 夹具降级：machineScope 不崩且仍含 doc（静默退化为无额外改动面，不拒绝关单）',
-    (() => { const s = machineScope(root, 'workflow/intents/2026-10-09-s.md');
-      return Array.isArray(s.files) && s.files.includes('workflow/intents/2026-10-09-s.md') && scopeMatches({ scope: s }); })(),
-    JSON.stringify(machineScope(root, 'workflow/intents/2026-10-09-s.md')));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S42 分片默认写入口径（2026-10-13 ledger-shard-default）：CLI 默认写分片 / 两种回退 / 存量回退 / 显式拒 ----
-{
-  const mkFixture = (withV8) => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-shard-'));
-    const docP = path.join(root, 'workflow', 'intents');
-    fs.mkdirSync(docP, { recursive: true });
-    fs.writeFileSync(path.join(docP, '2026-10-13-s.md'), '---\n状态: draft\n级别: L1\n---\n# I\n');
-    if (withV8) {
-      fs.mkdirSync(path.join(root, '.agents'), { recursive: true });
-      fs.writeFileSync(path.join(root, '.agents', 'kit.json'), JSON.stringify({ policyVersion: 8 }), 'utf8');
-    }
-    return root;
-  };
-  const shardPathOf = (root) => path.join(root, '.agents', 'confirmations.d', '2026-10-13-s.jsonl');
-  const mainPathOf = (root) => path.join(root, '.agents', 'confirmations.jsonl');
-  const readRows = (p) => (fs.existsSync(p) ? fs.readFileSync(p, 'utf8').split('\n').filter(Boolean).map((l) => JSON.parse(l)) : []);
-  const spawnConfirm = (root, args, env = {}) => spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-13-s.md', '--delegated', '可以', ...args], { cwd: root, encoding: 'utf8', env: { ...process.env, ...env } });
-
-  // S42① 默认（无旗标）+ doc 链已激活（policyVersion 8）→ 写分片，主台账零行
-  {
-    const root = mkFixture(true);
-    const r = spawnConfirm(root, []);
-    check('S42① 默认写分片：exit 0 + 行落 confirmations.d/<doc基名>.jsonl + 主台账零行',
-      r.status === 0 && readRows(shardPathOf(root)).length === 1
-        && readRows(shardPathOf(root))[0].source === 'chat-delegated'
-        && readRows(mainPathOf(root)).length === 0,
-      JSON.stringify({ status: r.status, stderr: r.stderr }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  // S42② --no-shard → 显式回退主台账
-  {
-    const root = mkFixture(true);
-    const r = spawnConfirm(root, ['--no-shard']);
-    check('S42② --no-shard 回退主台账：exit 0 + 行落 confirmations.jsonl + 分片不存在',
-      r.status === 0 && readRows(mainPathOf(root)).length === 1 && !fs.existsSync(shardPathOf(root)),
-      JSON.stringify({ status: r.status, stderr: r.stderr }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  // S42③ CONFIRM_SHARDED=0 → 环境变量回退主台账
-  {
-    const root = mkFixture(true);
-    const r = spawnConfirm(root, [], { CONFIRM_SHARDED: '0' });
-    check('S42③ CONFIRM_SHARDED=0 回退主台账：exit 0 + 行落 confirmations.jsonl + 分片不存在',
-      r.status === 0 && readRows(mainPathOf(root)).length === 1 && !fs.existsSync(shardPathOf(root)),
-      JSON.stringify({ status: r.status, stderr: r.stderr }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  // S42④ 存量装户（无 kit.json → policyVersion 1，doc 链未激活）默认 → 自动回退主台账 + ℹ️ 升级指引
-  {
-    const root = mkFixture(false);
-    const r = spawnConfirm(root, []);
-    check('S42④ 存量装户默认：自动回退主台账（exit 0 + 行落 confirmations.jsonl）+ stderr 带 policyVersion: 8 升级指引 + 分片不存在',
-      r.status === 0 && readRows(mainPathOf(root)).length === 1
-        && /policyVersion: 8/.test(r.stderr) && !fs.existsSync(shardPathOf(root)),
-      JSON.stringify({ status: r.status, stderr: r.stderr }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  // S42⑤ 存量装户显式 --shard → 参数期直接拒（原口径不变）
-  {
-    const root = mkFixture(false);
-    const r = spawnConfirm(root, ['--shard']);
-    check('S42⑤ 显式 --shard 缺 doc 链锚：exit 1 + 报错带修法 + 零落账（文档/台账均未动）',
-      r.status === 1 && /--shard 需要台账 doc 链口径/.test(r.stderr)
-        && !fs.existsSync(shardPathOf(root)) && !fs.existsSync(mainPathOf(root)),
-      JSON.stringify({ status: r.status, stderr: r.stderr }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  // S42⑥ --shard 与 --no-shard 互斥 → 用法错误
-  {
-    const root = mkFixture(true);
-    const r = spawnConfirm(root, ['--shard', '--no-shard']);
-    check('S42⑥ --shard 与 --no-shard 互斥：exit 1 + 用法提示 + 零落账',
-      r.status === 1 && /互斥/.test(r.stderr) && !fs.existsSync(shardPathOf(root)) && !fs.existsSync(mainPathOf(root)),
-      JSON.stringify({ status: r.status, stderr: r.stderr }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-}
-
-// ---- S43 关单即归档（2026-10-13 archive-on-close；B9 自源仓回灌随件测试）：终态家族超窗 → git mv 进 archive ----
-// 需真实 git 仓库（归档走 git mv）；家族原子：intent+plan 同进同退。月份断言锚定「实时今月」——
-// 与源仓同口径（台账终态锚 = 实时 now，归档月 = 家族最晚终态月），跨月运行需随今月更新断言。
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-arch-'));
-  const git = (...a) => spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', a, { cwd: root, encoding: 'utf8' });
-  git('init', '-q');
-  git('config', 'user.email', 't@t');
-  git('config', 'user.name', 't');
-  const ip = path.join(root, 'workflow', 'intents');
-  const pp = path.join(root, 'workflow', 'plans');
-  fs.mkdirSync(ip, { recursive: true });
-  fs.mkdirSync(pp, { recursive: true });
-  fs.mkdirSync(path.join(root, 'workflow', 'archive'), { recursive: true }); // 归档约定在场（启用条件）
-  // 家族：intent（本次关单）+ plan（已 done 且正文变更在 30 天前 → 超窗）
-  fs.writeFileSync(path.join(ip, '2026-09-01-fam.md'), '---\n状态: approved\n级别: L1\n确认指纹: aaaa1111aaaa1111\n---\n# I\n\n## 验收标准（可测试）\n- [x] 通过（证据:测试全绿）\n', 'utf8');
-  fs.writeFileSync(path.join(pp, '2026-09-01-fam.md'), '---\n状态: done\n级别: L1\n---\n# P\n\n## 改动方案\n- 正文\n', 'utf8');
-  git('add', '-A');
-  spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', ['commit', '-q', '-m', 'c1'], { cwd: root, env: { ...process.env, GIT_AUTHOR_DATE: '2026-09-01T10:00:00+08:00', GIT_COMMITTER_DATE: '2026-09-01T10:00:00+08:00' } });
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-01-fam.md', '--delegated', '可以'],
-    { cwd: root, encoding: 'utf8', env: { ...process.env, CONFIRM_DOC_TEST_NOW: '2026-10-13' } });
-  const intentArchived = fs.existsSync(path.join(root, 'workflow', 'archive', '2026-10', 'intents', '2026-09-01-fam.md'));
-  const planArchived = fs.existsSync(path.join(root, 'workflow', 'archive', '2026-10', 'plans', '2026-09-01-fam.md'));
-  check('S43 关单即归档：终态家族整族 git mv 进 archive（intent+plan 同批）',
-    r.status === 0 && intentArchived && planArchived && /📦 归档/.test(r.stdout),
-    JSON.stringify({ status: r.status, stdout: String(r.stdout).slice(-300), stderr: String(r.stderr).slice(-200), intentArchived, planArchived }));
-  check('S43b 归档后活跃目录不再留该家族', !fs.existsSync(path.join(ip, '2026-09-01-fam.md')) && !fs.existsSync(path.join(pp, '2026-09-01-fam.md')));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S44 归档边界：本次确认的家族即时归档（窗口对其冗余）；未涉及的家族不越权清理 ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-arch2-'));
-  const git = (...a) => spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', a, { cwd: root, encoding: 'utf8' });
-  git('init', '-q');
-  git('config', 'user.email', 't@t');
-  git('config', 'user.name', 't');
-  const ip = path.join(root, 'workflow', 'intents');
-  fs.mkdirSync(ip, { recursive: true });
-  fs.mkdirSync(path.join(root, 'workflow', 'archive'), { recursive: true }); // 归档约定在场（启用条件）
-  // 本次确认的家族（刚落终态 → 即时归档，窗口不适用）
-  fs.writeFileSync(path.join(ip, '2026-10-12-fresh.md'), '---\n状态: approved\n级别: L1\n确认指纹: bbbb2222bbbb2222\n---\n# I\n\n## 验收标准（可测试）\n- [x] 通过（证据:测试全绿）\n', 'utf8');
-  // 未涉及的家族（同为终态、超窗、零引用——但不在本次确认范围，须留守）
-  fs.writeFileSync(path.join(ip, '2026-09-01-other.md'), '---\n状态: done\n级别: L1\n---\n# I2\n\n## 验收标准（可测试）\n- [x] 通过（证据:测试全绿）\n', 'utf8');
-  git('add', '-A');
-  spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', ['commit', '-q', '-m', 'c1'], { cwd: root, env: { ...process.env, GIT_AUTHOR_DATE: '2026-10-12T10:00:00+08:00', GIT_COMMITTER_DATE: '2026-10-12T10:00:00+08:00' } });
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-10-12-fresh.md', '--delegated', '可以'],
-    { cwd: root, encoding: 'utf8', env: { ...process.env, CONFIRM_DOC_TEST_NOW: '2026-10-13' } });
-  check('S44 本次确认家族即时归档（窗口对刚过确认门的终态件冗余）',
-    r.status === 0 && fs.existsSync(path.join(root, 'workflow', 'archive', '2026-10', 'intents', '2026-10-12-fresh.md')) && /📦 归档/.test(r.stdout),
-    JSON.stringify({ status: r.status, stdout: String(r.stdout).slice(-200), stderr: String(r.stderr).slice(-200) }));
-  check('S44b 未涉及的家族不越权清理（历史积压走 archive-sweep 手工批次）',
-    fs.existsSync(path.join(ip, '2026-09-01-other.md')),
-    JSON.stringify({ exists: fs.existsSync(path.join(ip, '2026-09-01-other.md')) }));
-  fs.rmSync(root, { recursive: true, force: true });
-}
-
-// ---- S45 归档约定缺席 → 不启用（未采纳归档的仓库不凭空造目录）；env 逃生门 CONFIRM_DOC_NO_ARCHIVE ----
-{
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-arch3-'));
-  const git = (...a) => spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', a, { cwd: root, encoding: 'utf8' });
-  git('init', '-q');
-  git('config', 'user.email', 't@t');
-  git('config', 'user.name', 't');
-  const ip = path.join(root, 'workflow', 'intents');
-  fs.mkdirSync(ip, { recursive: true });
-  fs.writeFileSync(path.join(ip, '2026-09-01-noconv.md'), '---\n状态: approved\n级别: L1\n确认指纹: cccc3333cccc3333\n---\n# I\n\n## 验收标准（可测试）\n- [x] 通过（证据:测试全绿）\n', 'utf8');
-  git('add', '-A');
-  spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', ['commit', '-q', '-m', 'c1'], { cwd: root, env: { ...process.env, GIT_AUTHOR_DATE: '2026-09-01T10:00:00+08:00', GIT_COMMITTER_DATE: '2026-09-01T10:00:00+08:00' } });
-  const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-01-noconv.md', '--delegated', '可以'],
-    { cwd: root, encoding: 'utf8', env: { ...process.env, CONFIRM_DOC_TEST_NOW: '2026-10-13' } });
-  check('S45 无 workflow/archive/ 约定 → 不归档、不造目录',
-    r.status === 0 && fs.existsSync(path.join(ip, '2026-09-01-noconv.md')) && !fs.existsSync(path.join(root, 'workflow', 'archive')) && !/📦 归档/.test(r.stdout),
-    JSON.stringify({ status: r.status, stdout: String(r.stdout).slice(-200) }));
-  // S45b 有归档约定 + CONFIRM_DOC_NO_ARCHIVE=1 → 逃生门生效（关单不归档）
-  const root2 = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-arch4-'));
-  const git2 = (...a) => spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', a, { cwd: root2, encoding: 'utf8' });
-  git2('init', '-q');
-  git2('config', 'user.email', 't@t');
-  git2('config', 'user.name', 't');
-  const ip2 = path.join(root2, 'workflow', 'intents');
-  fs.mkdirSync(ip2, { recursive: true });
-  fs.mkdirSync(path.join(root2, 'workflow', 'archive'), { recursive: true });
-  fs.writeFileSync(path.join(ip2, '2026-09-01-optout.md'), '---\n状态: approved\n级别: L1\n确认指纹: dddd4444dddd4444\n---\n# I\n\n## 验收标准（可测试）\n- [x] 通过（证据:测试全绿）\n', 'utf8');
-  git2('add', '-A');
-  spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', ['commit', '-q', '-m', 'c1'], { cwd: root2, env: { ...process.env, GIT_AUTHOR_DATE: '2026-09-01T10:00:00+08:00', GIT_COMMITTER_DATE: '2026-09-01T10:00:00+08:00' } });
-  const r2 = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-01-optout.md', '--delegated', '可以'],
-    { cwd: root2, encoding: 'utf8', env: { ...process.env, CONFIRM_DOC_TEST_NOW: '2026-10-13', CONFIRM_DOC_NO_ARCHIVE: '1' } });
-  check('S45b CONFIRM_DOC_NO_ARCHIVE 逃生门：关单成功且不归档（状态已置 done）',
-    r2.status === 0 && /状态: done/.test(fs.readFileSync(path.join(ip2, '2026-09-01-optout.md'), 'utf8'))
-      && !fs.existsSync(path.join(root2, 'workflow', 'archive', 'intents')) && !/📦 归档/.test(r2.stdout),
-    JSON.stringify({ status: r2.status, stdout: String(r2.stdout).slice(-200) }));
-  fs.rmSync(root, { recursive: true, force: true });
-  fs.rmSync(root2, { recursive: true, force: true });
-}
-
-// ---- S45c/S45d 特性分支默认不归档（2026-10-16 自源仓 13f67ef7 回灌）----
-// 分支上先关单再合并时 diff 只剩 archive/ 路径，泳道/配对增量门只认 workflow 活跃直路径；
-// main/master/develop 与游离 HEAD 维持关单即归档。CONFIRM_DOC_ARCHIVE=1 可在特性分支强制归档。
-{
-  const mkRepoBranch = (branchName) => {
-    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'confirm-branch-'));
-    const git = (...a) => spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', a, { cwd: root, encoding: 'utf8' });
-    git('init', '-q');
-    git('config', 'user.email', 't@t');
-    git('config', 'user.name', 't');
-    git('checkout', '-q', '-b', branchName);
-    const ip = path.join(root, 'workflow', 'intents');
-    fs.mkdirSync(ip, { recursive: true });
-    fs.mkdirSync(path.join(root, 'workflow', 'archive'), { recursive: true });
-    const fp = branchName === 'main' ? 'eeee5555eeee5555' : 'ffff6666ffff6666';
-    fs.writeFileSync(path.join(ip, '2026-09-01-branch.md'), `---\n状态: approved\n级别: L1\n确认指纹: ${fp}\n---\n# I\n\n## 验收标准（可测试）\n- [x] 通过（证据:测试全绿）\n`, 'utf8');
-    git('add', '-A');
-    spawnSync(process.platform === 'win32' ? 'git.exe' : 'git', ['commit', '-q', '-m', 'c1'], { cwd: root, env: { ...process.env, GIT_AUTHOR_DATE: '2026-09-01T10:00:00+08:00', GIT_COMMITTER_DATE: '2026-09-01T10:00:00+08:00' } });
-    return { root, ip };
-  };
-  // S45c：特性分支关单 → 不归档（保持 workflow 活跃直路径），但状态照常 done
-  {
-    const { root, ip } = mkRepoBranch('feature/x');
-    const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-01-branch.md', '--delegated', '可以'],
-      { cwd: root, encoding: 'utf8', env: { ...process.env, CONFIRM_DOC_TEST_NOW: '2026-10-13' } });
-    check('S45c 特性分支关单默认不归档（状态置 done、文档留活跃路径）',
-      r.status === 0 && /状态: done/.test(fs.readFileSync(path.join(ip, '2026-09-01-branch.md'), 'utf8'))
-        && !fs.existsSync(path.join(root, 'workflow', 'archive', 'intents')) && /不归档/.test(r.stdout),
-      JSON.stringify({ status: r.status, stdout: String(r.stdout).slice(-260) }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-  // S45d：特性分支 + CONFIRM_DOC_ARCHIVE=1 → 强制归档
-  {
-    const { root } = mkRepoBranch('feature/y');
-    const r = spawnSync(process.execPath, [CLI, 'workflow/intents/2026-09-01-branch.md', '--delegated', '可以'],
-      { cwd: root, encoding: 'utf8', env: { ...process.env, CONFIRM_DOC_TEST_NOW: '2026-10-13', CONFIRM_DOC_ARCHIVE: '1' } });
-    check('S45d 特性分支 CONFIRM_DOC_ARCHIVE=1 强制归档',
-      r.status === 0 && /📦 归档/.test(r.stdout),
-      JSON.stringify({ status: r.status, stdout: String(r.stdout).slice(-260) }));
-    fs.rmSync(root, { recursive: true, force: true });
-  }
-}
-
-console.log(`\n合计: PASS ${pass} / FAIL ${fail}`);
-process.exit(fail ? 1 : 0);