agentic-qe 3.13.12 → 3.14.1

package/.claude/skills/qe-court/evals/qe-court.yaml

@@ -3,8 +3,8 @@ version: 0.3.0
 status: active
 description: >
   Acceptance eval for the QE-Court adversarial review protocol (ADR-124).
-  Command-eval suite: each case runs a real oracle from the referee suite
-  (tests/unit/skills/qe-court/referee.test.ts) through the `aqe eval` CLI and
+  Command-eval suite: each case runs a real oracle through the published
+  `aqe-court-referee` executable and
   asserts it passes. Each oracle passes on correct referee logic and FAILS on a
   seeded regression, so a green run is genuine tier-3 evidence — not a self-report.
   The seeded-mutant is mirrored in fixtures/seeded-mutant-delivery/ (canSpend
@@ -16,7 +16,7 @@ test_cases:
     category: overturn
     priority: critical
     input:
-      command: npx vitest run tests/unit/skills/qe-court/referee.test.ts -t "overturn_catches_mutant"
+      command: aqe-court-referee self-test overturn-catches-mutant
     expected:
       exit_code: 0
 
@@ -25,7 +25,7 @@ test_cases:
     category: overturn
     priority: critical
     input:
-      command: npx vitest run tests/unit/skills/qe-court/referee.test.ts -t "overturn_disabled"
+      command: aqe-court-referee self-test overturn-disabled
     expected:
       exit_code: 0
 
@@ -34,7 +34,7 @@ test_cases:
     category: anti-collusion
     priority: critical
     input:
-      command: npx vitest run tests/unit/skills/qe-court/referee.test.ts -t "writer_not_juror_enforced"
+      command: aqe-court-referee self-test writer-not-juror
     expected:
       exit_code: 0
 
@@ -43,7 +43,7 @@ test_cases:
     category: anti-collusion
     priority: high
     input:
-      command: npx vitest run tests/unit/skills/qe-court/referee.test.ts -t "vendor_diversity_enforced"
+      command: aqe-court-referee self-test vendor-diversity
     expected:
       exit_code: 0
 
@@ -52,7 +52,7 @@ test_cases:
     category: doe-gate
     priority: high
     input:
-      command: npx vitest run tests/unit/skills/qe-court/referee.test.ts -t "no_score_without_doe_gate"
+      command: aqe-court-referee self-test doe-score-gate
     expected:
       exit_code: 0
 
@@ -61,7 +61,7 @@ test_cases:
     category: verdict
     priority: high
     input:
-      command: npx vitest run tests/unit/skills/qe-court/referee.test.ts -t "verdict_classes"
+      command: aqe-court-referee self-test verdict-classes
     expected:
       exit_code: 0
 

package/.claude/skills/skills-manifest.json

@@ -940,7 +940,7 @@
   },
   "metadata": {
     "generatedBy": "Agentic QE Fleet",
-    "fleetVersion": "3.13.12",
+    "fleetVersion": "3.14.1",
     "manifestVersion": "1.4.0",
     "lastUpdated": "2026-04-13T00:00:00.000Z",
     "contributors": [

package/CHANGELOG.md

@@ -5,6 +5,136 @@ All notable changes to the Agentic QE project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.14.1] - 2026-09-07
+
+This release moves AQE to maintained Node.js runtimes and strengthens the
+evidence boundaries around runtime diagnosis, verification, session recovery,
+and learned-pattern storage.
+
+### Added
+
+- Added a reproducible runtime-fault diagnosis benchmark covering clean/fault
+  pairs, classification, localization, abstention, and uncertainty reporting
+  ([#649], [#662]).
+- Added revision-bound verification-reach manifests so quality gates expose
+  direct, partial, uncovered, stale, and legacy-unknown evidence instead of
+  passing without observable failure-mode coverage ([#651], [#664]).
+- Added a 100-query structural-transfer retrieval corpus with deterministic
+  ranking metrics and immutable receipts ([#653], [#665]).
+- Added sanitized judge-measurement receipts with schema-enforced trust,
+  identity, retry, decoding, and timestamp boundaries ([#658], [#670]).
+
+### Fixed
+
+- Hardened legacy session recovery against root escape, symlink and inode
+  substitution, malformed lineage, invalid UTF-8, oversized records, torn
+  tails, and unbounded caller overrides; legacy resume remains explicit and
+  unverified ([#659], [#671]).
+- Made SQLite pattern-write failures and incomplete HNSW/RVF indexing return
+  typed `FAILED` or `COMMITTED_PENDING_INDEX` evidence while preserving
+  committed witness and dual-write side effects ([#660], [#672]).
+- Removed package-manager calls from generated Claude lifecycle hooks, added
+  bounded Codex guidance modes, and separated Vibium detection from readiness
+  installation in response to reports from @pacphi ([#654], [#655], [#656],
+  [#661]).
+- Replaced rate-limited qe-browser public fixtures with deterministic loopback
+  fixtures and accepted current Vibium screenshot output paths ([#561], [#667]).
+- Refreshed embedded graph, Ruvocal, and Goal UI dependency locks with clean
+  Node 22+ installs and current vulnerability fixes ([#669]).
+- Kept Rust coverage analysis on the Rust instrumentation path so an available
+  JavaScript test runner cannot replace the documented static-estimation
+  fallback with an empty coverage report ([#569]).
+- Published the verdict JSON schemas and exposed pattern mutation outcomes at
+  the package root so downstream consumers can validate and classify writes.
+- Sealed one npm tarball after asset synchronization and reused those exact
+  bytes for initialization, consumer-audit, and publication gates.
+
+### Changed
+
+- Raised the published runtime floor to Node.js 22.13.0, recommends Node.js 24
+  for development and containers, and moved CI workflows off Node 18/20
+  runtimes ([#663]).
+- Early-exit presets now collect shadow-calibration evidence by default while
+  still executing every layer; enforced skipping remains explicit ([#657],
+  [#666]).
+
+[#561]: https://github.com/proffesor-for-testing/agentic-qe/issues/561
+[#569]: https://github.com/proffesor-for-testing/agentic-qe/issues/569
+[#649]: https://github.com/proffesor-for-testing/agentic-qe/issues/649
+[#651]: https://github.com/proffesor-for-testing/agentic-qe/issues/651
+[#653]: https://github.com/proffesor-for-testing/agentic-qe/issues/653
+[#654]: https://github.com/proffesor-for-testing/agentic-qe/issues/654
+[#655]: https://github.com/proffesor-for-testing/agentic-qe/issues/655
+[#656]: https://github.com/proffesor-for-testing/agentic-qe/issues/656
+[#657]: https://github.com/proffesor-for-testing/agentic-qe/issues/657
+[#658]: https://github.com/proffesor-for-testing/agentic-qe/issues/658
+[#659]: https://github.com/proffesor-for-testing/agentic-qe/issues/659
+[#660]: https://github.com/proffesor-for-testing/agentic-qe/issues/660
+[#661]: https://github.com/proffesor-for-testing/agentic-qe/pull/661
+[#662]: https://github.com/proffesor-for-testing/agentic-qe/pull/662
+[#663]: https://github.com/proffesor-for-testing/agentic-qe/pull/663
+[#664]: https://github.com/proffesor-for-testing/agentic-qe/pull/664
+[#665]: https://github.com/proffesor-for-testing/agentic-qe/pull/665
+[#666]: https://github.com/proffesor-for-testing/agentic-qe/pull/666
+[#667]: https://github.com/proffesor-for-testing/agentic-qe/pull/667
+[#669]: https://github.com/proffesor-for-testing/agentic-qe/pull/669
+[#670]: https://github.com/proffesor-for-testing/agentic-qe/pull/670
+[#671]: https://github.com/proffesor-for-testing/agentic-qe/pull/671
+[#672]: https://github.com/proffesor-for-testing/agentic-qe/pull/672
+
+## [3.14.0] - 2026-08-30
+
+This release makes learned evidence, semantic vectors, recovery mirrors, and
+adversarial verdicts carry explicit provenance and fail closed when that
+provenance cannot be established.
+
+### Added
+
+- Added immutable learning-evidence manifests, segment graphs, admission
+  decisions, and pattern lineage in additive unified-memory schema v12, with
+  disposable-copy migration coverage and portable JSONL/RVF backup support
+  ([#638]).
+- Added embedding-space identity and compatibility checks for learned patterns,
+  persisted `space_id` provenance in additive schema v13, and a read-only
+  `aqe learning embedding-health` diagnostic ([#633]).
+- Added the published `agentic-qe/skills/qe-court/referee` export and
+  `aqe-court-referee` executable, including consumer self-tests ([#632]).
+- Added context-compaction authority lineage, fault-stratified judge
+  qualification, and architecture decisions ADR-129 through ADR-131
+  ([#635], [#636], [#638]).
+
+### Fixed
+
+- Made RVF recovery-mirror replacement compare every portable table and fail
+  closed on ambiguous inspection while retaining explicit corruption recovery
+  and force-overwrite controls ([#629]).
+- Made configured subscription and external providers reachable by the advisor
+  without allowing repository configuration to redirect ambient credentials or
+  replace trusted CLI executables ([#628], [#631]).
+- Preserved authority labels through compaction using JSON-framed transcript
+  records so tool content cannot forge a user-authorized record ([#636]).
+- Required mandatory severity strata, precision, false-keep limits, and
+  directional Wilson confidence bounds before judge automation ([#635]).
+- Added the missing user-facing security disclosure for embedding-backed
+  analysis ([#615]).
+
+### Changed
+
+- Brain exports now cover 31 portable tables and exclude unverified vectors
+  from the portable ANN while retaining their SQLite rows for later repair.
+- The package adds public QE Court API and executable surfaces; this is an
+  additive minor release.
+
+[#615]: https://github.com/proffesor-for-testing/agentic-qe/issues/615
+[#628]: https://github.com/proffesor-for-testing/agentic-qe/issues/628
+[#629]: https://github.com/proffesor-for-testing/agentic-qe/issues/629
+[#631]: https://github.com/proffesor-for-testing/agentic-qe/issues/631
+[#632]: https://github.com/proffesor-for-testing/agentic-qe/issues/632
+[#633]: https://github.com/proffesor-for-testing/agentic-qe/issues/633
+[#635]: https://github.com/proffesor-for-testing/agentic-qe/issues/635
+[#636]: https://github.com/proffesor-for-testing/agentic-qe/issues/636
+[#638]: https://github.com/proffesor-for-testing/agentic-qe/issues/638
+
 ## [3.13.12] - 2026-08-21
 
 Downstream tools can now give a host they supervise its own AQE provider

package/assets/skills/qe-browser/evals/qe-browser.yaml

@@ -52,26 +52,18 @@ setup:
   optional_tools:
     - pixelmatch
     - pngjs
-  # NOTE: this yaml deliberately uses ONLY pinned public fixtures
-  # (httpbin.org/*) so it can be run end-to-end by CommandEvalRunner without
-  # any prerequisite services. Tests that need a local poisoned-HTML fixture
-  # (the check-injection severity path) live in scripts/smoke-test.sh, which
-  # starts fixtures/serve-skills.js out of band.
+  # The CI workflow starts fixtures/serve-skills.js on loopback before this
+  # suite runs. Keeping browser targets local removes rate limits and makes
+  # every page stable across repeated visual comparisons.
 
 fixtures:
-  public_pinned:
-    # Pinned public endpoints — chosen because they're stable, well-known, and
-    # serve predictable forms / HTML. Per feedback_no_unverified_failure_modes,
-    # these are the canonical "does the tool actually work" fixtures.
-    httpbin_form:
-      url: "https://httpbin.org/forms/post"
-      description: "Classic simple form — custname, custtel, custemail, size, toppings"
-    httpbin_html:
-      url: "https://httpbin.org/html"
-      description: "Static HTML page with known headings"
-    httpbin_status_404:
-      url: "https://httpbin.org/status/404"
-      description: "Known 404 for testing no_failed_requests"
+  local:
+    form:
+      url: "http://127.0.0.1:8088/fixtures/form.html"
+      description: "Deterministic form with an email input and submit button"
+    content:
+      url: "http://127.0.0.1:8088/fixtures/content.html"
+      description: "Deterministic static page with a known heading"
 
 test_cases:
   # -------- assert.js --------
@@ -81,10 +73,10 @@ test_cases:
     priority: critical
     input:
       setup:
-        - "vibium --headless go https://httpbin.org/forms/post"
+        - "vibium --headless go http://127.0.0.1:8088/fixtures/form.html"
       command: |
         node .claude/skills/qe-browser/scripts/assert.js --checks \
-          '[{"kind": "url_contains", "text": "httpbin.org/forms"}]'
+          '[{"kind": "url_contains", "text": "/fixtures/form.html"}]'
     expected:
       exit_code: 0
       json_fields:
@@ -98,7 +90,7 @@ test_cases:
     priority: critical
     input:
       setup:
-        - "vibium --headless go https://httpbin.org/html"
+        - "vibium --headless go http://127.0.0.1:8088/fixtures/content.html"
       command: |
         node .claude/skills/qe-browser/scripts/assert.js --checks \
           '[{"kind": "selector_visible", "selector": "h1"}]'
@@ -113,7 +105,7 @@ test_cases:
     priority: critical
     input:
       setup:
-        - "vibium --headless go https://httpbin.org/html"
+        - "vibium --headless go http://127.0.0.1:8088/fixtures/content.html"
       command: |
         node .claude/skills/qe-browser/scripts/assert.js --checks \
           '[{"kind": "url_contains", "text": "this-does-not-exist"}]'
@@ -132,10 +124,10 @@ test_cases:
       command: |
         node .claude/skills/qe-browser/scripts/batch.js --steps \
           '[
-            {"action": "go", "url": "https://httpbin.org/html"},
+            {"action": "go", "url": "http://127.0.0.1:8088/fixtures/content.html"},
             {"action": "wait_load"},
             {"action": "assert", "checks": [
-              {"kind": "url_contains", "text": "/html"},
+              {"kind": "url_contains", "text": "/fixtures/content.html"},
               {"kind": "selector_visible", "selector": "h1"}
             ]}
           ]' --summary-only
@@ -154,9 +146,11 @@ test_cases:
       command: |
         node .claude/skills/qe-browser/scripts/batch.js --steps \
           '[
-            {"action": "go", "url": "https://httpbin.org/html"},
-            {"action": "click", "selector": "#does-not-exist"},
-            {"action": "go", "url": "https://httpbin.org/forms/post"}
+            {"action": "go", "url": "http://127.0.0.1:8088/fixtures/content.html"},
+            {"action": "assert", "checks": [
+              {"kind": "url_contains", "text": "/does-not-exist"}
+            ]},
+            {"action": "go", "url": "http://127.0.0.1:8088/fixtures/form.html"}
           ]'
     expected:
       exit_code: 1
@@ -177,7 +171,7 @@ test_cases:
         # different dimensions (768×654 vs 765×672 observed), making the
         # pixel-diff in tc007 spuriously fail. Mirrors scripts/smoke-test.sh.
         - "vibium --headless viewport 1280 720"
-        - "vibium --headless go https://httpbin.org/html"
+        - "vibium --headless go http://127.0.0.1:8088/fixtures/content.html"
         - "rm -rf .aqe/visual-baselines/eval_httpbin_html*"
       command: |
         node .claude/skills/qe-browser/scripts/visual-diff.js \
@@ -195,7 +189,7 @@ test_cases:
     input:
       setup:
         - "vibium --headless viewport 1280 720"
-        - "vibium --headless go https://httpbin.org/html"
+        - "vibium --headless go http://127.0.0.1:8088/fixtures/content.html"
       command: |
         node .claude/skills/qe-browser/scripts/visual-diff.js \
           --name eval_httpbin_html --threshold 0.02
@@ -212,7 +206,7 @@ test_cases:
     priority: critical
     input:
       setup:
-        - "vibium --headless go https://httpbin.org/html"
+        - "vibium --headless go http://127.0.0.1:8088/fixtures/content.html"
       command: |
         node .claude/skills/qe-browser/scripts/check-injection.js --include-hidden
     expected:
@@ -221,15 +215,11 @@ test_cases:
         ".status": "success"
         ".output.checkInjection.severity": "none"
 
-  # GAP: the "poisoned-page detected with severity>=high" contract needs a
-  # local fixture (fixtures/injection-poisoned.html) served by
-  # fixtures/serve-skills.js. That's out of scope for this yaml — we keep
-  # CommandEvalRunner dependency-free so it can run anywhere httpbin.org
-  # is reachable. Coverage of the high-severity path is currently
+  # The "poisoned-page detected with severity>=high" contract is currently
+  # asserted outside this command suite. Coverage of the high-severity path is
   # only asserted by unit tests on check-injection.js (see
   # tests/unit/scripts/qe-browser-check-injection.test.ts). Follow-up:
-  # either teach CommandEvalRunner to spawn the fixture server, or add a
-  # tc009 to scripts/smoke-test.sh that starts/stops it out of band.
+  # add tc009 against fixtures/injection-poisoned.html.
 
   # -------- intent-score.js --------
   - id: tc010_intent_submit_form_on_httpbin
@@ -238,7 +228,7 @@ test_cases:
     priority: critical
     input:
       setup:
-        - "vibium --headless go https://httpbin.org/forms/post"
+        - "vibium --headless go http://127.0.0.1:8088/fixtures/form.html"
       command: |
         node .claude/skills/qe-browser/scripts/intent-score.js \
           --intent submit_form
@@ -255,7 +245,7 @@ test_cases:
     priority: medium
     input:
       setup:
-        - "vibium --headless go https://httpbin.org/html"
+        - "vibium --headless go http://127.0.0.1:8088/fixtures/content.html"
       command: |
         node .claude/skills/qe-browser/scripts/intent-score.js --intent fill_email
     expected:
@@ -270,5 +260,4 @@ validation:
   notes: |
     Evaluation assumes:
       - `vibium` v26.3.x+ is on PATH (from `aqe init` or `npm install -g vibium`)
-      - Network access to httpbin.org (public, stable)
-      - Local fixtures server running on :8088 (started in setup.local_docs_server)
+      - Local fixtures server running on 127.0.0.1:8088

package/assets/skills/qe-browser/fixtures/serve-skills.js

@@ -74,6 +74,31 @@ const POISONED_HTML = `<!doctype html>
 </body>
 </html>`;
 
+const CONTENT_HTML = `<!doctype html>
+<html lang="en">
+<head><meta charset="utf-8"><title>QE Browser Content Fixture</title></head>
+<body>
+  <main>
+    <h1>QE Browser Content Fixture</h1>
+    <p>This deterministic page exercises browser assertions and visual comparisons.</p>
+  </main>
+</body>
+</html>`;
+
+const FORM_HTML = `<!doctype html>
+<html lang="en">
+<head><meta charset="utf-8"><title>QE Browser Form Fixture</title></head>
+<body>
+  <main>
+    <h1>Contact form</h1>
+    <form method="post" action="/fixtures/form.html">
+      <label>Email <input id="email" name="email" type="email" autocomplete="email"></label>
+      <button type="submit">Submit</button>
+    </form>
+  </main>
+</body>
+</html>`;
+
 function notFound(res, message) {
   res.writeHead(404, { 'Content-Type': 'text/plain; charset=utf-8' });
   res.end(`404 Not Found: ${message}\n`);
@@ -95,6 +120,18 @@ function serve(req, res) {
     return;
   }
 
+  if (pathname === '/fixtures/content.html') {
+    res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+    res.end(CONTENT_HTML);
+    return;
+  }
+
+  if (pathname === '/fixtures/form.html') {
+    res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+    res.end(FORM_HTML);
+    return;
+  }
+
   // Rewrite /foo/SKILL.md.html → /foo/SKILL.md (or similar) and serve wrapped.
   if (pathname.endsWith('.html')) {
     const mdPath = pathname.replace(/\.html$/, '');

package/assets/skills/qe-browser/scripts/lib/vibium.js

@@ -292,7 +292,7 @@ function readInlineOrFile(value) {
 // "we couldn't run the test because the browser engine isn't installed."
 function emit(env) {
   process.stdout.write(`${JSON.stringify(env, null, 2)}\n`);
-  if (env.status === 'success') return 0;
+  if (env.status === 'success' || env.status === 'partial') return 0;
   if (env.status === 'skipped') return 2;
   return 1;
 }

package/assets/skills/qe-browser/scripts/smoke-test.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # qe-browser smoke test (bash mirror of evals/qe-browser.yaml)
 #
-# Runs each helper script against pinned public fixtures (httpbin.org) and
+# Runs each helper script against deterministic local fixtures and
 # verifies the output structure. Gates PR-reopen per ADR-091 Phase 3.
 #
 # RELATIONSHIP TO evals/qe-browser.yaml
@@ -24,16 +24,25 @@
 #   2 — vibium binary not on PATH (precondition unmet)
 #
 # Per feedback_no_unverified_failure_modes.md, this is the script we
-# actually run, not just write. Per feedback_synthetic_fixtures_dont_count,
-# all fixtures are pinned public endpoints (httpbin.org) — no synthetic
-# stubs, no inline HTML.
+# actually run, not just write. The fixture pages are maintained with the
+# skill and served only on loopback, removing public-service rate limits.
 
 set -uo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 SKILL_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
 WORK_DIR="$(mktemp -d)"
-trap 'rm -rf "$WORK_DIR"' EXIT
+FIXTURE_PORT="${QE_BROWSER_FIXTURE_PORT:-8088}"
+FIXTURE_URL="${QE_BROWSER_FIXTURE_URL:-http://127.0.0.1:${FIXTURE_PORT}}"
+FIXTURE_PID=""
+
+cleanup() {
+  if [ -n "$FIXTURE_PID" ]; then
+    kill "$FIXTURE_PID" >/dev/null 2>&1 || true
+  fi
+  rm -rf "$WORK_DIR"
+}
+trap cleanup EXIT
 
 GREEN='\033[0;32m'
 RED='\033[0;31m'
@@ -57,6 +66,28 @@ if ! command -v vibium >/dev/null 2>&1; then
   exit 2
 fi
 
+if ! curl --silent --fail "$FIXTURE_URL/fixtures/content.html" >/dev/null 2>&1; then
+  QE_BROWSER_FIXTURE_PORT="$FIXTURE_PORT" \
+    node "$SKILL_DIR/fixtures/serve-skills.js" >"$WORK_DIR/fixture-server.log" 2>&1 &
+  FIXTURE_PID=$!
+  fixture_ready=0
+  for _attempt in 1 2 3 4 5; do
+    if curl --silent --fail "$FIXTURE_URL/fixtures/content.html" >/dev/null 2>&1; then
+      fixture_ready=1
+      break
+    fi
+    sleep 1
+  done
+  if [ "$fixture_ready" != "1" ]; then
+    cat "$WORK_DIR/fixture-server.log" >&2
+    echo -e "${RED}qe-browser fixture server did not become ready${NC}" >&2
+    exit 1
+  fi
+fi
+
+CONTENT_URL="$FIXTURE_URL/fixtures/content.html"
+FORM_URL="$FIXTURE_URL/fixtures/form.html"
+
 VIBIUM_VERSION=$(vibium --version 2>&1 | head -1)
 echo "Smoke testing against $VIBIUM_VERSION"
 echo "Skill dir: $SKILL_DIR"
@@ -64,29 +95,29 @@ echo "Work dir:  $WORK_DIR"
 echo ""
 
 # ---------------------------------------------------------------------------
-# tc001 — assert.js url_contains against pinned httpbin form
+# tc001 — assert.js url_contains against the local form fixture
 # ---------------------------------------------------------------------------
-vibium --headless go https://httpbin.org/forms/post >/dev/null 2>&1 || true
+vibium --headless go "$FORM_URL" >/dev/null 2>&1 || true
 RESULT=$(node "$SKILL_DIR/scripts/assert.js" --checks \
-  '[{"kind": "url_contains", "text": "httpbin.org/forms"}]' 2>&1)
+  '[{"kind": "url_contains", "text": "/fixtures/form.html"}]' 2>&1)
 EXIT=$?
 if [ "$EXIT" = "0" ] && echo "$RESULT" | grep -q '"status": "success"'; then
-  ok "tc001 url_contains on httpbin form"
+  ok "tc001 url_contains on local form"
 else
-  bad "tc001 url_contains on httpbin form" "exit=$EXIT, result=$RESULT"
+  bad "tc001 url_contains on local form" "exit=$EXIT, result=$RESULT"
 fi
 
 # ---------------------------------------------------------------------------
-# tc002 — assert.js selector_visible against pinned httpbin /html
+# tc002 — assert.js selector_visible against the local content fixture
 # ---------------------------------------------------------------------------
-vibium --headless go https://httpbin.org/html >/dev/null 2>&1 || true
+vibium --headless go "$CONTENT_URL" >/dev/null 2>&1 || true
 RESULT=$(node "$SKILL_DIR/scripts/assert.js" --checks \
   '[{"kind": "selector_visible", "selector": "h1"}]' 2>&1)
 EXIT=$?
 if [ "$EXIT" = "0" ] && echo "$RESULT" | grep -q '"passed": true'; then
-  ok "tc002 selector_visible h1 on httpbin /html"
+  ok "tc002 selector_visible h1 on local content"
 else
-  bad "tc002 selector_visible h1 on httpbin /html" "exit=$EXIT"
+  bad "tc002 selector_visible h1 on local content" "exit=$EXIT"
 fi
 
 # ---------------------------------------------------------------------------
@@ -105,7 +136,7 @@ fi
 # tc004 — batch.js navigate + wait + assert in one call
 # ---------------------------------------------------------------------------
 RESULT=$(node "$SKILL_DIR/scripts/batch.js" --steps \
-  '[{"action":"go","url":"https://httpbin.org/html"},{"action":"wait_load"},{"action":"assert","checks":[{"kind":"url_contains","text":"/html"}]}]' \
+  "[{\"action\":\"go\",\"url\":\"$CONTENT_URL\"},{\"action\":\"wait_load\"},{\"action\":\"assert\",\"checks\":[{\"kind\":\"url_contains\",\"text\":\"/fixtures/content.html\"}]}]" \
   --summary-only 2>&1)
 EXIT=$?
 if [ "$EXIT" = "0" ] && echo "$RESULT" | grep -q '"passedSteps": 3'; then
@@ -118,7 +149,7 @@ fi
 # tc005 — batch.js stops on failure
 # ---------------------------------------------------------------------------
 RESULT=$(node "$SKILL_DIR/scripts/batch.js" --steps \
-  '[{"action":"go","url":"https://httpbin.org/html"},{"action":"click","selector":"#does-not-exist-selector"},{"action":"go","url":"https://httpbin.org/forms/post"}]' 2>&1)
+  "[{\"action\":\"go\",\"url\":\"$CONTENT_URL\"},{\"action\":\"assert\",\"checks\":[{\"kind\":\"url_contains\",\"text\":\"/does-not-exist\"}]},{\"action\":\"go\",\"url\":\"$FORM_URL\"}]" 2>&1)
 EXIT=$?
 if [ "$EXIT" = "1" ] && echo "$RESULT" | grep -q '"failedStep"'; then
   ok "tc005 batch stops on first failure"
@@ -131,19 +162,19 @@ fi
 #
 # Set explicit viewport BEFORE screenshot so the two visual-diff runs have
 # the same dimensions. Without this the chromium headless window picks
-# whatever size it likes per run, and httpbin.org/html renders at different
+# whatever size it likes per run, and pages may render at different
 # sizes between runs (768×654 vs 765×672 observed), making pixel-diff
 # spuriously fail. This is documented in references/assertion-kinds.md.
 # ---------------------------------------------------------------------------
 rm -rf "$PWD/.aqe/visual-baselines/smoke_test_baseline"*
 vibium --headless viewport 1280 720 >/dev/null 2>&1 || true
-vibium --headless go https://httpbin.org/html >/dev/null 2>&1 || true
+vibium --headless go "$CONTENT_URL" >/dev/null 2>&1 || true
 RESULT=$(node "$SKILL_DIR/scripts/visual-diff.js" --name smoke_test_baseline 2>&1)
 EXIT=$?
 if [ "$EXIT" = "0" ] && echo "$RESULT" | grep -q '"baseline_created"'; then
   ok "tc006 visual-diff baseline created"
 else
-  bad "tc006 visual-diff baseline created" "exit=$EXIT"
+  bad "tc006 visual-diff baseline created" "exit=$EXIT, result=$RESULT"
 fi
 
 # ---------------------------------------------------------------------------
@@ -157,13 +188,13 @@ EXIT=$?
 if [ "$EXIT" = "0" ] && echo "$RESULT" | grep -qE '"(match|baseline_created)"'; then
   ok "tc007 visual-diff second run matches"
 else
-  bad "tc007 visual-diff second run matches" "exit=$EXIT"
+  bad "tc007 visual-diff second run matches" "exit=$EXIT, result=$RESULT"
 fi
 
 # ---------------------------------------------------------------------------
 # tc008 — check-injection.js clean page
 # ---------------------------------------------------------------------------
-vibium --headless go https://httpbin.org/html >/dev/null 2>&1 || true
+vibium --headless go "$CONTENT_URL" >/dev/null 2>&1 || true
 RESULT=$(node "$SKILL_DIR/scripts/check-injection.js" --include-hidden 2>&1)
 EXIT=$?
 if [ "$EXIT" = "0" ] && echo "$RESULT" | grep -q '"severity": "none"'; then
@@ -173,15 +204,15 @@ else
 fi
 
 # ---------------------------------------------------------------------------
-# tc010 — intent-score.js submit_form on pinned httpbin form
+# tc010 — intent-score.js submit_form on the local form fixture
 # ---------------------------------------------------------------------------
-vibium --headless go https://httpbin.org/forms/post >/dev/null 2>&1 || true
+vibium --headless go "$FORM_URL" >/dev/null 2>&1 || true
 RESULT=$(node "$SKILL_DIR/scripts/intent-score.js" --intent submit_form 2>&1)
 EXIT=$?
 if [ "$EXIT" = "0" ] && echo "$RESULT" | grep -q '"intent": "submit_form"'; then
-  ok "tc010 intent-score submit_form on httpbin form"
+  ok "tc010 intent-score submit_form on local form"
 else
-  bad "tc010 intent-score submit_form on httpbin form" "exit=$EXIT"
+  bad "tc010 intent-score submit_form on local form" "exit=$EXIT"
 fi
 
 # ---------------------------------------------------------------------------