blun-king-cli 9.1.597 → 9.1.600

package/standard-skills/translate-native/references/commercial-localization.md

@@ -1,4 +1,4 @@
-# Commercial localization — profile v2
+# Commercial localization — profile v4
 
 Use for pricing pages, offer cards, checkout copy, subscription CTAs, discounts,
 trials and associated conditions in **any language or script**. The skill is
@@ -57,6 +57,12 @@ a translation to fill a gap. A grammatical target and model confidence alone
 are not publication evidence. Neither average scores nor unrelated successful
 checks override a blocking or major defect.
 
+For offer-local uncertainty, route the affected review dimension together with
+the offer's zero-based registry position. Keep configured offer identifiers out
+of the content-free summary. The independent model or qualified reviewer must
+resolve that exact ordered scope; never widen, narrow, reorder, or relabel it
+after the source-aware review.
+
 ## Skill-only evidence check
 
 The executable checker and its shared validator ship in this skill's `scripts/`
@@ -65,10 +71,14 @@ needed for this local check. Run from the skill directory:
 
 ```bash
 python3 scripts/check_commercial_review.py --contract
-python3 scripts/check_commercial_review.py --source source.txt --target target.txt --review review.json
+python3 scripts/check_commercial_review.py --source source.txt --target target.txt --review review.json \
+  --target-locale sv-SE \
+  --commercial-quality-profile-version commercial-eu-sv-SE-2026-09-2 \
+  --commercial-quality-profile-sha256 "${COMMERCIAL_QUALITY_PROFILE_SHA256}"
 ```
 
-The contract is a description, not a completed review. First perform the
+The contract response contains the review-input shape plus the content-free,
+hashed summary and resolution contracts; it is not a completed review. First perform the
 source-blind native review, then have the source-aware reviewer produce the
 `commercial_review` object; save that object alone as `review.json`. Do not
 manufacture positive evidence to satisfy the checker. Supply the full unchanged
@@ -104,27 +114,76 @@ existing `legal` path with required human review; this profile is not a legal
 approval. For mixed pages, supply complete contextual commercial units rather
 than isolated price fragments.
 
-The planner binds `translate-native.commercial.v2` into the job and plan IDs.
+The planner binds `translate-native.commercial.v13` and the exact target-locale
+commercial quality profile into the job and plan IDs.
 The authenticated capabilities response publishes the same profile as a
 separately hashed, brand-neutral machine-readable contract. It lists all ten
 semantic dimensions, exact preservation rules, permitted locale-aware
 rendering, the evidence method and the fail-closed route for ambiguity. CMS
 integrations can therefore preflight the implemented offer contract without
 receiving project prices, product lists, protected terms or deployment secrets.
-Its separately hashed `review_summary_contract` also declares the exact five
+Its separately hashed `review_summary_contract` also declares the exact six
 summary fields, both valid statuses, the only permitted ordered dimension
-names, the evidence-hash canonicalization and the explicit exclusion of source
-text, target text, spans, reviewer prose, project prices and project brands.
+names, the exact current review-evidence-contract SHA-256, and the evidence-hash
+canonicalization. The digest input is a versioned binding containing the
+profile, review-evidence-contract digest, target locale, commercial locale-quality
+profile version and digest, exact UTF-8 source and target hashes, and the
+complete evidence. The summary still explicitly excludes source text, target
+text, spans, reviewer prose, project prices and project brands.
 Adapters therefore do not need to infer the targeted-review envelope from a
 schema name or prose. A changed, missing, reordered or unknown dimension makes
 the complete capability response unavailable.
+
+Within every dimension, `offer_statuses` must contain exactly one entry for
+every registered offer, in registry order. The dimension-level status is not
+free-form: it is derived with `changed`, `uncertain`, `equivalent`, then
+`not_present` precedence. Each equivalent, changed, or uncertain offer verdict
+must carry evidence located inside that offer's declared regions. This proves
+structural completeness of the review, not semantic truth; uncertain values
+still require an independent model or qualified native-domain reviewer.
+
+The separately hashed `review_evidence_contract` is the machine-readable
+source of truth for the private source-fidelity report. It closes the exact
+top-level fields, coverage values, ten dimensions, item relations and limits;
+defines Unicode code-point offsets and offer-region containment; and requires
+one matched assignment per registered offer. It contains no project prices,
+text, spans, brands, or reviewer prose. Its structural validator cannot prove
+semantic truth, and the contract explicitly grants no publication authority.
+The portable `--contract` response exposes this same object.
+
+The separately hashed `review_resolution_contract` defines the exact ordered
+dimension acknowledgement and the two permitted resolution methods. A
+qualified-human resolution must omit reviewer provider identity; both methods
+must carry the primary provider's exact ID, model ID and model version. An
+independent-model resolution additionally carries the same fields for the
+second provider, whose provider ID must differ. Each result binds the advertised
+resolution-contract SHA-256 and publishes only the verified receipt SHA-256.
+Raw receipts, credentials, reviewer prose, qualified-human identity, source
+and target text, project prices and project brands remain excluded. The
+release-evidence schema uses the same provider-neutral resolution schema, so a
+consumer does not need to infer these conditional rules from documentation.
+
+Every commercial locale profile also carries an exact Unicode CLDR 48 numbers
+reference. Use its resolved locale, numbering system, grouping threshold,
+symbols, and standard decimal, percent, currency, ISO-currency, approximation,
+limit, and range patterns as native rendering guidance. Do not use a surface
+pattern or cross-language regex as evidence that the value is semantically
+equal. Meaning-preserving number words, written percentages, and digit forms
+remain eligible; unresolved values require independent model or qualified
+native-domain review.
 The worker uses the existing three ordered passes; the source-fidelity response
 additionally requires `commercial_review`. It contains all ten named dimensions,
-coverage and per-offer evidence. Each item declares `matched`, `source_only`, or
-`target_only` and supplies exact source/target character spans; the absent side
-of a one-sided item is `null`. Equivalent evidence must be matched. A specific
-changed or uncertain verdict needs a concrete item, while globally uncertain
-coverage may remain span-free rather than fabricate a location.
+coverage, a canonical offer registry, and per-offer evidence. Each registry
+entry has a unique stable identifier plus ordered, non-overlapping source and
+target regions. Multiple discontiguous regions are allowed for linked footnotes
+and conditions, but regions cannot overlap across offers. Each evidence item
+declares `matched`, `source_only`, or `target_only`, names a registered offer,
+and supplies exact source/target character spans contained in that offer's
+declared regions; the absent side of a one-sided item is `null`. Equivalent
+evidence must be matched, and `offer_assignment` must name every registered
+offer exactly once. A specific changed or uncertain verdict needs a concrete
+item, while globally uncertain coverage may remain span-free rather than
+fabricate a location.
 Missing/malformed checks, impossible relation/span combinations and changed
 terms produce no result or approval. Uncertainty or an all-absent report preserves the candidate only as a
 low-confidence fidelity result. It remains unpublishable until the host verifies
@@ -133,14 +192,34 @@ model receipt bound to the commercial profile and policy. The worker does not
 secretly call an alternative provider.
 
 The worker retains a content-free `commercial_review` summary in result schema
-v5. It contains only the profile, verdict, ordered unresolved dimension names
-and a hash of the complete commercial evidence. Prices, text spans,
-interpretations and reviewer prose do not survive in the summary. The same
-summary is bound into quality-evidence request schema v5 and receipt-binding
-schema v2, so an independent adapter receives the exact targeted scope and
+v8. It contains only the profile, verdict, exact review-evidence-contract
+SHA-256, ordered unresolved dimension names
+and a hash binding the profile, exact source and target hashes, and complete
+commercial evidence. Prices, text spans, interpretations and reviewer prose do
+not survive in the summary. The same
+summary is bound into quality-evidence request schema v12 and receipt-binding
+schema v8, so an independent adapter receives the exact targeted scope and
 cannot replace it with a generic approval. Tampered, unknown, reordered or
 contradictory dimensions block before network access or signing.
 
+For a review-required result, the worker also derives the private
+`translate-native.commercial-review-routing.v2` context from the already
+validated offer registry. It maps each zero-based opaque offer index to ordered
+source and target Unicode code-point spans and binds both text lengths. The
+context deliberately strips configured IDs, text, prices, brands, and reviewer
+explanations. It carries the exact digest of the separately advertised,
+machine-readable routing contract, which fixes code-point offsets, exclusive
+ends, complete text lengths, registry-order coverage, overlap rules, and the
+private-only trust boundary. Evidence-request identity and every receipt
+binding cover the route and contract digest;
+span, order, count, or length drift blocks before network access. It never
+appears in public CMS release evidence.
+For unresolved work, the evidence request also includes the complete
+content-free routing contract. The coordinator and HTTPS adapter independently
+reconstruct it, and request identity covers the exact object. Verified
+commercial and non-commercial requests require both route and contract to be
+`null`.
+
 The validator checks evidence shape and offsets, **not semantic truth**. A model
 can misinterpret text or omit a fact while claiming completeness. The host's
 independent quality-receipt verifier must inspect the complete request/response

package/standard-skills/translate-native/scripts/blun_language_guard.py

@@ -176,6 +176,7 @@ def validate_text(
     glossary: dict[str, Any] | None = None,
     content_type: str = "prose",
     short_text_reviewed: bool = False,
+    require_character_profile: bool = True,
 ) -> dict[str, Any]:
     findings: list[Finding] = []
     if not text.strip():
@@ -200,7 +201,7 @@ def validate_text(
     # count real prose characters. Native characters anywhere in the complete
     # text also disprove the specific hypothesis of wholesale ASCII folding.
     profile_prose_solid = sum(1 for character in profile_prose if not character.isspace())
-    if (profile and profile_prose_solid >= 200
+    if (require_character_profile and profile and profile_prose_solid >= 200
             and not any(character in profile for character in profile_prose)
             and not any(character in profile for character in text)):
         findings.append(Finding(
@@ -395,6 +396,7 @@ def release_response(arguments: dict[str, Any]) -> dict[str, Any]:
         arguments.get("glossary"),
         arguments.get("content_type", "prose"),
         arguments.get("short_text_reviewed") is True,
+        require_character_profile=False,
     )
     report["checks"].append("agent-response-native-orthography")
     if not target_is_text:

package/standard-skills/translate-native/scripts/check_commercial_review.py

@@ -8,10 +8,17 @@ import hashlib
 import json
 from pathlib import Path
 
-from commercial_localization_profile import CommercialReviewBlocked, review_contract, validate_review
+from commercial_localization_profile import (
+    CommercialReviewBlocked,
+    public_review_evidence_contract,
+    public_review_resolution_contract,
+    public_review_summary_contract,
+    review_contract,
+    validate_review,
+)
 
 
-PROFILE = "translate-native.commercial.v2"
+PROFILE = "translate-native.commercial.v13"
 MAX_INPUT_BYTES = 2_000_000
 
 
@@ -46,21 +53,66 @@ def main(argv=None) -> int:
     parser.add_argument("--source", help="complete source text, UTF-8 without BOM")
     parser.add_argument("--target", help="complete target text, UTF-8 without BOM")
     parser.add_argument("--review", help="source-aware review JSON, UTF-8 without BOM")
+    parser.add_argument("--target-locale", help="exact BCP-47 target locale")
+    parser.add_argument(
+        "--commercial-quality-profile-version",
+        help="exact target-locale commercial quality-profile version",
+    )
+    parser.add_argument(
+        "--commercial-quality-profile-sha256",
+        help="exact target-locale commercial quality-profile SHA-256",
+    )
     args = parser.parse_args(argv)
     if args.contract:
-        if any((args.source, args.target, args.review)):
+        if any((
+            args.source, args.target, args.review, args.target_locale,
+            args.commercial_quality_profile_version,
+            args.commercial_quality_profile_sha256,
+        )):
             parser.error("--contract cannot be combined with input files")
-        print(json.dumps({"status": "CONTRACT", "release_allowed": False,
-                          "commercial_review": review_contract(PROFILE)}, ensure_ascii=False))
+        print(json.dumps({
+            "status": "CONTRACT",
+            "release_allowed": False,
+            "commercial_review": review_contract(PROFILE),
+            "commercial_review_evidence_contract": (
+                public_review_evidence_contract(PROFILE)
+            ),
+            "commercial_review_summary_contract": (
+                public_review_summary_contract(PROFILE)
+            ),
+            "commercial_review_resolution_contract": (
+                public_review_resolution_contract(PROFILE)
+            ),
+        }, ensure_ascii=False, sort_keys=True))
         return 0
-    if not all((args.source, args.target, args.review)):
-        parser.error("--source, --target and --review are required")
-    result = {"schema": "translate-native.commercial-evidence-check.v1",
+    if not all((
+        args.source, args.target, args.review, args.target_locale,
+        args.commercial_quality_profile_version,
+        args.commercial_quality_profile_sha256,
+    )):
+        parser.error(
+            "--source, --target, --review, --target-locale, "
+            "--commercial-quality-profile-version and "
+            "--commercial-quality-profile-sha256 are required"
+        )
+    result = {"schema": "translate-native.commercial-evidence-check.v2",
               "profile": PROFILE, "release_allowed": False}
     try:
         source, target, raw_review = (_read(path) for path in (args.source, args.target, args.review))
         review = json.loads(raw_review, object_pairs_hook=_object, parse_constant=_constant)
-        validate_review(review, source, target, PROFILE)
+        summary = validate_review(
+            review,
+            source,
+            target,
+            PROFILE,
+            target_locale=args.target_locale,
+            commercial_quality_profile_version=(
+                args.commercial_quality_profile_version
+            ),
+            commercial_quality_profile_sha256=(
+                args.commercial_quality_profile_sha256
+            ),
+        )
     except CommercialReviewBlocked as error:
         result.update(status="BLOCK", reason=error.code)
     except (OSError, ValueError, RecursionError):
@@ -68,6 +120,14 @@ def main(argv=None) -> int:
     else:
         result.update(
             status="EVIDENCE_VALID", reason="independent_quality_and_signed_release_required",
+            target_locale=args.target_locale,
+            commercial_quality_profile_version=(
+                args.commercial_quality_profile_version
+            ),
+            commercial_quality_profile_sha256=(
+                args.commercial_quality_profile_sha256
+            ),
+            evidence_sha256=summary["evidence_sha256"],
             source_sha256=hashlib.sha256(source.encode("utf-8")).hexdigest(),
             target_sha256=hashlib.sha256(target.encode("utf-8")).hexdigest(),
             review_sha256=hashlib.sha256(raw_review.encode("utf-8")).hexdigest(),