create-yss-spec 3.3.0 → 3.3.3

package/template/docs/process/schemas/lifecycle-registry.schema.json

@@ -3,33 +3,312 @@
   "$id": "https://yss.dev/schemas/lifecycle-registry.schema.json",
   "title": "YSS 生命周期注册表",
   "type": "object",
-  "required": ["schema_version", "registry_id", "status", "id_policy", "stages", "gates", "artifacts", "work_units", "evidence"],
+  "required": [
+    "schema_version",
+    "registry_id",
+    "status",
+    "id_policy",
+    "stages",
+    "gates",
+    "artifacts",
+    "work_units",
+    "evidence",
+    "checks"
+  ],
   "properties": {
-    "schema_version": { "const": 1 },
-    "registry_id": { "const": "yss.lifecycle" },
-    "status": { "enum": ["shadow", "active"] },
+    "schema_version": {
+      "const": 1
+    },
+    "registry_id": {
+      "const": "yss.lifecycle"
+    },
+    "status": {
+      "enum": [
+        "shadow",
+        "active"
+      ]
+    },
     "id_policy": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["pattern", "published_ids_immutable", "baseline", "deprecated_ids"],
+      "required": [
+        "pattern",
+        "published_ids_immutable",
+        "baseline",
+        "deprecated_ids"
+      ],
       "properties": {
-        "pattern": { "const": "^(stage|gate|artifact|work-unit|evidence)\\.[a-z0-9][a-z0-9-]*$" },
-        "published_ids_immutable": { "const": true },
-        "baseline": { "const": "docs/process/lifecycle-registry-baseline.json" },
-        "deprecated_ids": { "type": "array", "uniqueItems": true, "items": { "$ref": "#/$defs/id" } }
+        "pattern": {
+          "const": "^(stage|gate|check|artifact|work-unit|evidence)\\.[a-z0-9][a-z0-9-]*$"
+        },
+        "published_ids_immutable": {
+          "const": true
+        },
+        "baseline": {
+          "const": "docs/process/lifecycle-registry-baseline.json"
+        },
+        "deprecated_ids": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "$ref": "#/$defs/id"
+          }
+        }
       }
     },
-    "stages": { "$ref": "#/$defs/stages" },
-    "gates": { "$ref": "#/$defs/objects" },
-    "artifacts": { "$ref": "#/$defs/objects" },
-    "work_units": { "$ref": "#/$defs/workUnits" },
-    "evidence": { "$ref": "#/$defs/evidence" }
+    "stages": {
+      "$ref": "#/$defs/stages"
+    },
+    "gates": {
+      "$ref": "#/$defs/objects"
+    },
+    "artifacts": {
+      "$ref": "#/$defs/objects"
+    },
+    "work_units": {
+      "$ref": "#/$defs/workUnits"
+    },
+    "evidence": {
+      "$ref": "#/$defs/evidence"
+    },
+    "checks": {
+      "$ref": "#/$defs/objects"
+    }
   },
   "$defs": {
-    "id": { "type": "string", "pattern": "^(stage|gate|artifact|work-unit|evidence)\\.[a-z0-9][a-z0-9-]*$" },
-    "stages": { "type": "array", "minItems": 1, "items": { "type": "object", "additionalProperties": false, "required": ["id", "name", "goal", "exit_criteria"], "properties": { "id": { "$ref": "#/$defs/id" }, "name": { "type": "string", "minLength": 1 }, "goal": { "type": "string", "minLength": 1 }, "exit_criteria": { "type": "string", "minLength": 1 }, "public_name": { "type": "string", "minLength": 1 }, "public_goal": { "type": "string", "minLength": 1 }, "public_exit_criteria": { "type": "string", "minLength": 1 } } } },
-    "objects": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["id", "name", "stage", "trigger"], "properties": { "id": { "$ref": "#/$defs/id" }, "name": { "type": "string", "minLength": 1 }, "stage": { "type": "string", "pattern": "^stage\\." }, "trigger": { "type": "string", "minLength": 1 }, "public_name": { "type": "string", "minLength": 1 }, "public_trigger": { "type": "string", "minLength": 1 }, "evidence": { "type": "array", "minItems": 1, "items": { "type": "string", "pattern": "^evidence\\." } }, "requires_gates": { "type": "array", "uniqueItems": true, "items": { "type": "string", "pattern": "^gate\\." } } } } },
-    "workUnits": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["id", "name", "scope", "input", "output", "completion"], "properties": { "id": { "$ref": "#/$defs/id" }, "name": { "type": "string", "minLength": 1 }, "scope": { "enum": ["template-source", "project-instance"] }, "input": { "type": "string", "minLength": 1 }, "output": { "type": "string", "minLength": 1 }, "completion": { "type": "string", "minLength": 1 }, "public_name": { "type": "string", "minLength": 1 }, "public_input": { "type": "string", "minLength": 1 }, "public_output": { "type": "string", "minLength": 1 }, "public_completion": { "type": "string", "minLength": 1 } } } },
-    "evidence": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["id", "name", "description"], "properties": { "id": { "$ref": "#/$defs/id" }, "name": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 }, "public_name": { "type": "string", "minLength": 1 }, "public_description": { "type": "string", "minLength": 1 } } } }
+    "id": {
+      "type": "string",
+      "pattern": "^(stage|gate|check|artifact|work-unit|evidence)\\.[a-z0-9][a-z0-9-]*$"
+    },
+    "stages": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "id",
+          "name",
+          "goal",
+          "exit_criteria"
+        ],
+        "properties": {
+          "spec_entry": {
+            "type": "object",
+            "required": [
+              "required_checks",
+              "gate_impacts"
+            ],
+            "additionalProperties": false,
+            "properties": {
+              "required_checks": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "gate_impacts": {
+                "type": "object",
+                "minProperties": 1,
+                "additionalProperties": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "check_impacts": {
+                "type": "object",
+                "additionalProperties": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              }
+            }
+          },
+          "id": {
+            "$ref": "#/$defs/id"
+          },
+          "name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "goal": {
+            "type": "string",
+            "minLength": 1
+          },
+          "exit_criteria": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_goal": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_exit_criteria": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      }
+    },
+    "objects": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "id",
+          "name",
+          "stage",
+          "trigger"
+        ],
+        "properties": {
+          "id": {
+            "$ref": "#/$defs/id"
+          },
+          "name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "stage": {
+            "type": "string",
+            "pattern": "^stage\\."
+          },
+          "trigger": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_trigger": {
+            "type": "string",
+            "minLength": 1
+          },
+          "evidence": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "type": "string",
+              "pattern": "^evidence\\."
+            }
+          },
+          "requires_gates": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": {
+              "type": "string",
+              "pattern": "^gate\\."
+            }
+          },
+          "requires_checks": {
+            "type": "array",
+            "uniqueItems": true,
+            "items": {
+              "type": "string",
+              "pattern": "^check\\."
+            }
+          }
+        }
+      }
+    },
+    "workUnits": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "id",
+          "name",
+          "scope",
+          "input",
+          "output",
+          "completion"
+        ],
+        "properties": {
+          "id": {
+            "$ref": "#/$defs/id"
+          },
+          "name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "scope": {
+            "enum": [
+              "template-source",
+              "project-instance"
+            ]
+          },
+          "input": {
+            "type": "string",
+            "minLength": 1
+          },
+          "output": {
+            "type": "string",
+            "minLength": 1
+          },
+          "completion": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_input": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_output": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_completion": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      }
+    },
+    "evidence": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "id",
+          "name",
+          "description"
+        ],
+        "properties": {
+          "id": {
+            "$ref": "#/$defs/id"
+          },
+          "name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "description": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "public_description": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      }
+    }
   }
 }

package/template/docs/process/schemas/openapi-draft-validation-record.schema.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://yss.dev/schemas/openapi-draft-validation-record-v1.json",
+  "title": "YSS OpenAPI Draft validation record",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "kind", "template", "status", "draft", "toolchain", "checks"],
+  "properties": {
+    "schema_version": {"const": 1},
+    "kind": {"const": "openapi-draft-validation"},
+    "template": {"type": "boolean"},
+    "status": {"enum": ["draft", "passed", "blocked", "stale"]},
+    "draft": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ref", "sha256", "oas_version"],
+      "properties": {
+        "ref": {"type": "string", "pattern": "^docs/\\.scratch/[a-z0-9][a-z0-9-]*/api/[a-z0-9][a-z0-9-]*\\.ya?ml$"},
+        "sha256": {"type": "string", "pattern": "^sha256:[a-f0-9]{64}$"},
+        "oas_version": {"const": "3.1.0"}
+      }
+    },
+    "toolchain": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["package", "version", "lockfile_ref", "command", "exit_code", "executed_at", "evidence_ref"],
+      "properties": {
+        "package": {"const": "@redocly/cli"},
+        "version": {"type": "string", "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(?:-[0-9A-Za-z.-]+)?$"},
+        "lockfile_ref": {"type": "string", "pattern": "(^|/)pnpm-lock\\.yaml$"},
+        "command": {"type": "string", "pattern": "^pnpm exec redocly lint docs/\\.scratch/\\S+\\.ya?ml$"},
+        "exit_code": {"type": "integer"},
+        "executed_at": {"type": "string", "format": "date-time"},
+        "evidence_ref": {"type": "string", "minLength": 1}
+      }
+    },
+    "checks": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["single_document", "oas_3_1", "ref_resolution", "path_parameters", "operation_ids", "lint"],
+      "properties": {
+        "single_document": {"enum": ["passed", "blocked"]},
+        "oas_3_1": {"enum": ["passed", "blocked"]},
+        "ref_resolution": {"enum": ["passed", "blocked"]},
+        "path_parameters": {"enum": ["passed", "blocked"]},
+        "operation_ids": {"enum": ["passed", "blocked"]},
+        "lint": {"enum": ["passed", "blocked"]}
+      }
+    }
+  }
+}

package/template/docs/process/strategic-handoff-package.md

@@ -6,7 +6,7 @@
 
 1. 源仓必须为 `project-instance`。业务边界与规则合同保留 schema v2，正式便携导出要求 `traceability_version: 1`。`rule_catalog` 的每行包含稳定 `rule_id`、`statement`、`responsible_context`、`status: confirmed`。不得用行号、文字 hash 或导出顺序生成业务身份。
 2. 每个场景明确 `critical`、`rule_refs`、`success_results` 和既有 `failure_results`；兼容字段 `rules` 必须与引用规则正文一致。不变量使用 `rule_ref`，并通过 `scenario_refs` 指向确实覆盖该规则的场景。缺身份或关联先回战略方确认、更新并重新批准，导出器不猜测。
-3. Handoff v3 的 `package_export` 使用导出 schema。`approvals` 按 `source` 字段及 `handoff` 绑定批准记录，声明 `record_ref`、`gate_id`、`digest_kind`。沿用源角色表的现有门禁；战略、阶段、Spec 分别对应各自批准门禁，原型和视觉基线对应 `gate.user-confirmation`，业务 Ticket 集和完整交接对应源 profile 的交接批准门禁（综合模板使用阶段决策包门禁绑定本次交接）。
+3. Handoff v3 的 `package_export` 使用导出 schema。`approvals` 按 `source` 字段及 `handoff` 绑定批准记录，声明 `record_ref`、`gate_id`、`digest_kind`。沿用源角色表的现有门禁；当前综合模板的战略、阶段决策及交接资产统一绑定 `gate.plan-approved`，Spec 对应 Spec 基线批准，原型和视觉基线对应 `gate.product-design-approved`；历史包及其他源 profile 仍按包内明确登记的源批准规则验证，不自动迁移当前门禁状态。
 4. 批准记录除既有会签字段，还要在 `artifact_bindings` 中逐项绑定 `{id, version, digest}`。战略/阶段建议 `canonical-json`；普通文件使用 `sha256-bytes`；视觉基线使用 `visual-baseline`。正文中的 `approved` 和可读取批准路径不能替代当前字节的批准绑定。源角色表要求用户决定记录时，接收端必须支持并核验该策略；旧工具缺少该能力时阻断并要求升级，不能按旧规则放行。
 5. `additional_files` 明确补充依赖；`reference_map` 将 `evidence.*` 稳定证据引用解析为仓内路径。源资产、批准记录、证据引用、Markdown 本地链接和显式目录共同形成依赖闭包。HTTP 引用保留为引用，不在导出时下载网页。
 6. `prototype` 指定 `profile`、`preview_root`、`entry_ref`、`verification_ref`、`verification_digest`（验证记录的字节摘要）；H2 另须 `source_root`、`lock_ref` 和 `source_digest`（源码目录树摘要，算法同下述预览树）。源码交付目录不含 node_modules / .git；锁文件与源码一同保存。预览目录须资源闭合，可通过本地静态服务离线浏览。源码、锁文件或验证记录变化须更新交接摘要并重新批准。
@@ -54,5 +54,3 @@ node .agents/skills/yss-technical-design/scripts/validate-technical-design.mjs <
 ## 维护与同步
 
 共享脚本和包 schema 以主模板为维护源，通过 `scripts/sync-strategic-handoff-tools` 同步到设计/研发模板；源战略 schema 的离线验证副本由该脚本从 canonical `yss-stage-decision/references` 派生。三仓技能仍只编辑 `.agents/skills`，再生成各 runtime 投影与锁。CLI 快照使用各自同步工具，工作树快照用于集成验证，不代表已发布 commit。
-
-维护者可先同步三个 CLI 快照，再运行 `node .template-source/scripts/verify-strategic-handoff-distribution.mjs`，用临时合成资产验证实际生成实例之间的完整链路；结束后清理临时项目。

package/template/docs/process/templates/context-reconciliation-template.yaml

@@ -1,7 +1,7 @@
 schema_version: 1
 repository_mode: project-instance
-stage: stage.discovery
-work_unit: work-unit.discovery-requirements
+stage: stage.plan
+work_unit: work-unit.plan-requirements
 status: reconciled
 context_snapshot:
   context_ref: CONTEXT.md

package/template/docs/process/templates/lifecycle-checkpoint-template.yaml

@@ -10,7 +10,7 @@ context_reconciliation:
   ref: null
   reason: 等待当前工作单元完成稳定术语回写与核对
   evidence_refs: []
-next_work_unit: work-unit.discovery-opportunity
+next_work_unit: work-unit.plan-opportunity
 phase_boundary:
   decision: continue
   reason: initial routing

package/template/docs/requirements/README.md

@@ -1,6 +1,6 @@
 # 需求定义 (Requirements) — 从想法到可执行定义
 
-> **Phase: Requirements | 输入: Discovery | 输出: Spec + Stories + 验收条件**
+> **Phase: Requirements | 输入: Plan | 输出: Spec + Stories + 验收条件**
 
 ---
 
@@ -79,7 +79,7 @@ delegate_task(
 ## AI-Human Loop
 
 ```
-Discovery报告 → AI生成Spec → PM审核
+Plan报告 → AI生成Spec → PM审核
 → AI补充边界 → PM确认 → AI拆解Stories
 → 团队估算 → AI标注风险 → TechLead确认 → 进入Architecture
 ```

package/template/docs/templates/approval-record-template.yaml

@@ -16,3 +16,7 @@ notes: 会签必须可读取；起草者不得出现在 countersigner_role_ids
 subject_ref: null
 approval_scope: []
 user_decision_ref: null
+# 聚合门禁 / 内部专业审查绑定的当前主体字节 SHA-256（64 位十六进制）。
+subject_digest: null
+# 专业检查必须与起草者为不同执行实例；不仅仅比较职称。
+drafter_principal_ref: null

package/template/docs/templates/implementation-repo-registry-template.md

@@ -92,5 +92,5 @@ Harness 内项目路径约束：`apps/backend/`、`apps/frontend/` 只能作为
 - 关联垂直切片：
 - 关联阶段 checkpoint：
 - 实现仓库准备聚合结果：
-- `gate.implementation-repositories-ready`：approved / blocked
+- `check.implementation-repositories-ready`：approved / blocked
 - fresh verification 命令：

package/template/docs/templates/local-parent-ticket-template.md

@@ -37,7 +37,7 @@ Status: ready-for-human
 
 ## 资产与证据
 
-- Discovery：`docs/.scratch/<feature>/discovery/`
+- Plan：`docs/.scratch/<feature>/plan/`
 - Spec Delta：`docs/.scratch/<feature>/spec-delta/`
 - Design：`docs/.scratch/<feature>/design/`
 - API：`docs/.scratch/<feature>/api/`

package/template/docs/templates/subagent-task-package-template.md

@@ -35,7 +35,7 @@ owner: ai
 
 | 输入 | 路径 / 链接 | 用途 |
 |---|---|---|
-| Spec / Discovery |  |  |
+| Spec / Plan |  |  |
 | Product / Interaction Design |  |  |
 | OpenAPI Draft / Freeze |  |  |
 | Architecture / ADR / CONTEXT |  |  |

package/template/docs/user-guide/yss-ui-mcp.md

@@ -2,7 +2,6 @@
 
 模板已为支持项目级 MCP 配置的客户端预置 `yss-ui` server：
 
-- Claude Code：`.mcp.json`
 - Antigravity：`.agents/mcp_config.json`
 - Cursor：`.cursor/mcp.json`
 - VS Code：`.vscode/mcp.json`

package/template/docs/user-guide//347/224/250/346/210/267/346/211/213/345/206/214.md

@@ -67,7 +67,7 @@ init 只创建不存在或空目录；attach / sync 默认只预览，写入要
 
 ## 按路线推进
 
-综合模板按本仓生命周期从分诊、Discovery、Spec/功能架构、产品设计、工程契约、Ticket、切片推进到验证与发布。战略模板在业务交接停止；通用研发从批准上游接入；专职两端按交付合同接力。
+综合模板按本仓生命周期从分诊、Plan、Spec/功能架构、产品设计、工程契约、Ticket、切片推进到验证与发布。战略模板在业务交接停止；通用研发从批准上游接入；专职两端按交付合同接力。
 
 每一步都让 Agent 说明：消费了哪些当前输入、准备了什么、缺谁确认、怎样检查结果。具体阶段和门禁从本仓注册表读取，不把别的模板阶段编号复制进本仓。
 

package/template/scripts/lib/approval-record.mjs

@@ -7,7 +7,8 @@ import {
   loadDigitalHumanRoles,
   collectCountersignGateIds
 } from "./digital-human-roles.mjs";
-import { ROOT } from "./lifecycle-registry.mjs";
+import { assertGateChecks } from "./lifecycle-controls.mjs";
+import { ROOT, loadRegistry } from "./lifecycle-registry.mjs";
 import { assertUserDecisionRequirement, assertWorkUnitUserDecision, assertImplementationDecision } from "./user-decision.mjs";
 
 const DECISIONS = new Set(["approved", "rejected", "vetoed"]);
@@ -65,6 +66,7 @@ export function validateApprovalRecord(record, { rolesDoc, requireApproved = fal
   if (!runtimeIds.has(record.runtime_id)) fail(`未知 runtime_id: ${record.runtime_id}`);
   if (record.actor_kind === "orchestrator") fail("编排器门禁不使用会签记录关闭");
 
+  if (!requireApproved && loadRegistry().id_policy.deprecated_ids.includes(record.gate_id)) return { bucket: "historical", gate: record.gate_id };
   const rule = countersignRuleForGate(registry.gate_policy, record.gate_id);
   if (!rule) fail(`${record.gate_id} 不是会签门禁；evidence_only / orchestrator 门禁不写 approval-record`);
 
@@ -120,10 +122,8 @@ export function assertApprovedGateHasValidApproval(gateId, gateState, { checkpoi
   if (!existsSync(resolved)) fail(`${gateId} 的 approval_ref 不可读: ${gateState.approval_ref}`);
   const record = loadApprovalRecord(resolved);
   if (record.gate_id !== gateId) fail(`${gateId} 的会签记录 gate_id 不匹配`);
-  if (rolesDoc.user_decision_policy.gates.includes(gateId) || countersignRuleForGate(rolesDoc.gate_policy, gateId)?.bucket === "biological_human") {
-    if (!gateState.subject_ref || gateState.subject_ref !== record.subject_ref || JSON.stringify([...(gateState.approval_scope || [])].sort()) !== JSON.stringify([...(record.approval_scope || [])].sort())) {
-      fail(`${gateId} user-decision-subject-mismatch: 当前门禁资产与会签范围不匹配`);
-    }
+  if (!gateState.subject_ref || gateState.subject_ref !== record.subject_ref || !gateState.approval_scope?.length || JSON.stringify([...gateState.approval_scope].sort()) !== JSON.stringify([...(record.approval_scope || [])].sort())) {
+    fail(`${gateId} user-decision-subject-mismatch: 当前门禁资产与会签范围不匹配`);
   }
   validateApprovalRecord(record, { rolesDoc, requireApproved: true });
 }
@@ -131,7 +131,10 @@ export function assertApprovedGateHasValidApproval(gateId, gateState, { checkpoi
 export function assertCheckpointApprovals(checkpoint, checkpointPath) {
   const gates = checkpoint?.gates;
   if (!gates || typeof gates !== "object") return;
+  const known = new Set(loadRegistry().gates.map(gate => gate.id));
   for (const [gateId, state] of Object.entries(gates)) {
+    if (!known.has(gateId)) fail(`未知或已退役门禁: ${gateId}；历史记录只读，不自动迁移批准`);
+    if (state.status === "approved") assertGateChecks(gateId, checkpoint);
     assertApprovedGateHasValidApproval(gateId, state, { checkpointPath });
   }
 }
@@ -149,6 +152,7 @@ export function assertCheckpointUserDecisions(checkpoint) {
   for (const requirement of review.required_decisions || []) assertUserDecisionRequirement(requirement);
   if (review.external_input) assertUserDecisionRequirement({ ...review.external_input, boundary: "external-input" });
   if (checkpoint.status === "completed") {
-    if (checkpoint.gates?.["gate.release-ready"]?.status !== "approved") throw new TypeError("user-decision-response-required: 阶段完成须发布就绪裁决");
+    if (checkpoint.blockers?.length || Object.values(checkpoint.gates || {}).some(gate => !["approved", "not-applicable"].includes(gate.status))) throw new TypeError("lifecycle-control-blocked: 仍有阻塞或未通过门禁，不可完成");
+    if (checkpoint.gates?.["gate.delivery-accepted"]?.status !== "approved") throw new TypeError("lifecycle-control-blocked: 阶段完成须交付验收，不等于发布授权");
   }
 }

package/template/scripts/lib/backend-delivery.mjs

@@ -43,7 +43,7 @@ export async function inspectBackendDelivery(root, ref) {
   const delivery=read(safe(root,ref));
   schema(delivery,'docs/process/schemas/backend-delivery.schema.json');
   ensure(boundFile(root,delivery.environment.test_data).length>0,'测试数据准备说明为空');
-  await approvedFile(root,delivery.openapi,['gate.openapi-frozen','gate.openapi-freeze-confirmed']);
+  await approvedFile(root,delivery.openapi,['gate.engineering-contract-approved','gate.openapi-frozen','gate.openapi-freeze-confirmed']);
   await approvedFile(root,delivery.slice_contract,'gate.slice-contract-approved');
   const contractDoc=read(safe(root,delivery.slice_contract.ref));
   const contract=contractDoc.slice_contract||contractDoc;
@@ -81,10 +81,13 @@ function validManifest(manifest,root) {
   ensure(manifest.files.reduce((total,file)=>total+file.size_bytes,0)<=512*1024*1024,'后端包大小超限');
   const originals=manifest.files.filter(x=>x.original_ref).map(x=>x.original_ref);
   ensure(new Set(originals.map(x=>x.toLowerCase())).size===originals.length,'后端包源路径重复');
+  const captured = new Map();
   for(const file of manifest.files) {
     const bytes=readFileSync(safe(root,file.path));
     ensure(bytes.length===file.size_bytes&&hash(bytes)===file.sha256,`后端包文件摘要不一致: ${file.path}`);
+    captured.set(file.path, bytes);
   }
+  return captured;
 }
 
 export async function openBackendDelivery(input, action) {
@@ -93,9 +96,9 @@ export async function openBackendDelivery(input, action) {
     ensure(existsSync(input)&&!lstatSync(input).isSymbolicLink(),'后端交付包不存在或是 symlink');
     let root=path.resolve(input);
     if(lstatSync(root).isFile()) { root=path.join(temporary,'unpacked');mkdirSync(root);archive('unpack',path.resolve(input),root); }
-    const manifest=read(safe(root,'manifest.json'));validManifest(manifest,root);
+    const manifest=read(safe(root,'manifest.json'));const captured=validManifest(manifest,root);
     const source=path.join(temporary,'source');mkdirSync(source);
-    for(const file of manifest.files)if(file.original_ref)write(source,file.original_ref,readFileSync(safe(root,file.path)));
+    for(const file of manifest.files)if(file.original_ref)write(source,file.original_ref,captured.get(file.path));
     const inspected=await inspectBackendDelivery(source,manifest.delivery_ref);
     ensure(manifest.delivery_id===inspected.delivery.delivery_id&&manifest.version===inspected.delivery.version,'后端包身份不一致');
     return await action({root,source,manifest,...inspected});