create-yss-spec 3.4.10 → 3.5.2

package/template/.pi/skills/yss-openapi-draft-review/SKILL.md

@@ -5,7 +5,7 @@ description: "审查 YSS OpenAPI Draft 的需求覆盖、页面动作、响应
 
 # YSS OpenAPI Draft Review
 
-已有生命周期资产优先用 `scripts/contract view <资产> --kind <类型>` 阅读；执行任务用 `--profile task --unit <ID>`，绑定与校验明细用 `--profile full`。视图不授予执行权限，仍按本 Skill 的原始来源和批准门禁处理。类型、准备和迁移见 `docs/process/contract-reading.md`。
+已有生命周期资产优先用 `scripts/contract view <资产> --kind <类型>` 阅读；执行任务用 `--profile task --unit <ID>`，绑定与校验明细用 `--profile full`。视图不授予执行权限，仍按本 Skill 的原始来源和批准门禁处理。类型、准备和迁移见 `.template-spec/process/contract-reading.md`。
 
 Use this skill after OpenAPI Draft creation and before Engineering Baseline / YSS DDD Review. It is a fail-closed contract review skill for design-time OpenAPI files under `docs/.scratch/<feature>/api/`; it does not bundle JSON or generate Orval clients.
 
@@ -96,4 +96,4 @@ Block if any of these are true:
 
 `Review Result` 只有在 `Structural Validation` 与 `Semantic Review` 均为 `Passed` 时才能是 `Approved`；不使用 `Conditionally Approved` 或 `Semantic Approved` 作为顶层结论。
 
-Prefer `docs/api/templates/openapi-draft-review-checklist.md` when a tabular checklist is useful.
+Prefer `.template-spec/api/templates/openapi-draft-review-checklist.md` when a tabular checklist is useful.

package/template/.pi/skills/yss-openapi-governance/SKILL.md

@@ -5,7 +5,7 @@ description: "维护、校验、冻结或导出 YSS OpenAPI 3.1 设计合同；
 
 # YSS OpenAPI Governance
 
-已有生命周期资产优先用 `scripts/contract view <资产> --kind <类型>` 阅读；执行任务用 `--profile task --unit <ID>`，绑定与校验明细用 `--profile full`。视图不授予执行权限，仍按本 Skill 的原始来源和批准门禁处理。类型、准备和迁移见 `docs/process/contract-reading.md`。
+已有生命周期资产优先用 `scripts/contract view <资产> --kind <类型>` 阅读；执行任务用 `--profile task --unit <ID>`，绑定与校验明细用 `--profile full`。视图不授予执行权限，仍按本 Skill 的原始来源和批准门禁处理。类型、准备和迁移见 `.template-spec/process/contract-reading.md`。
 
 本 skill 负责 YSS OpenAPI 的 **YAML-first** 工作流：
 
@@ -17,11 +17,11 @@ Spec / 设计输入 → OpenAPI YAML Draft → 审查与 Freeze → JSON 派生
 
 YSS DTO 的可复用 HTTP/JSON 映射由 `.agents/skills/yss-dto/references/openapi-wire-profile.yaml` 单一维护。它描述公开 wire shape，不是 Java 字段或 getter 清单；本 skill 必须消费 profile，不能在治理文档、feature YAML 和 JSON 中各自发明 `SingleResult`、`PageResult` 或 `PageQuery` 字段表。
 
-文档输出时按 `lifecycle-document-output` 条件调用 `i-have-adhd`，读取 `docs/process/document-writing.md`；作用域仅限当前产物，派发时传递条件及引用。
+文档输出时按 `lifecycle-document-output` 条件调用 `i-have-adhd`，读取 `.template-spec/process/document-writing.md`；作用域仅限当前产物，派发时传递条件及引用。
 
 ## 文档写作
 
-编写接口说明和契约评审交接正文前，读取 `docs/process/document-writing.md` 的共用写法及工程契约指引；协议标识、schema、冻结状态和验证记录按原合同保存。
+编写接口说明和契约评审交接正文前，读取 `.template-spec/process/document-writing.md` 的共用写法及工程契约指引；协议标识、schema、冻结状态和验证记录按原合同保存。
 
 ## 边界与职责
 
@@ -34,7 +34,7 @@ YSS DTO 的可复用 HTTP/JSON 映射由 `.agents/skills/yss-dto/references/open
 - 在 `docs/.scratch/<feature>/api/<feature>-validation.yaml` 持久化结构校验记录，并用 `scripts/verify-openapi-draft-validation-record` 复核当前 YAML SHA-256、锁定的 Redocly 版本、实际命令、退出码、执行时间和证据引用。
 - 在 OpenAPI Freeze 后，用锁定的 Redocly CLI 将 YAML bundle 为 JSON，并记录可重现证据。
 - 维护治理记录、Freeze 记录和 JSON 派生记录。
-- 在技术分析中生成 `api-contract-decision-v1`：有 API 影响时以原始字节摘要闭包绑定权威 YAML、Validation、独立 Draft Review 和 Freeze；无 API 影响时绑定影响评估、明确原因和至少一项可读证据，且不得生成空占位资产。
+- 在技术分析中生成 API Contract Decision（版本与历史兼容见下文第 3 步）：有 API 影响时以原始字节摘要闭包绑定权威 YAML、Validation、独立 Draft Review 和 Freeze；无 API 影响时绑定影响评估、明确原因和至少一项可读证据，且不得生成空占位资产。
 - Spec Delta 影响存在时，在 `docs/.scratch/<feature>/spec-delta/` 记录与冻结 YAML 的关系；没有影响时明确记录 `not-applicable`。
 
 不使用本 skill 来替代：
@@ -72,7 +72,7 @@ pnpm exec redocly bundle \
 2. **运行结构与治理校验**
    - 先执行项目 lockfile 锁定版本的 `pnpm exec redocly lint`；CI 可以包装调用，但 validation record 必须记录这条实际命令与退出码。
    - 检查 YAML 可解析、`$ref` 可解析、路径参数完整、operationId 唯一、examples 合法、schema 命名稳定。
-   - 从 `docs/api/templates/openapi-draft-validation-record-template.yaml` 创建 `<feature>-validation.yaml`，记录 YAML SHA-256 与 lint 工具链；运行 `scripts/verify-openapi-draft-validation-record --root <project-root> <record>`。自定义解析脚本可以补充诊断，但不能代替锁定的 Redocly lint evidence。
+   - 从 `.template-spec/api/templates/openapi-draft-validation-record-template.yaml` 创建 `<feature>-validation.yaml`，记录 YAML SHA-256 与 lint 工具链；运行 `scripts/verify-openapi-draft-validation-record --root <project-root> <record>`。自定义解析脚本可以补充诊断，但不能代替锁定的 Redocly lint evidence。
    - 对每个 P0 写模型、配置模型及影响关键交互的读模型建立字段级追踪：`Spec/交互来源 → operationId → request/response schema → property path → 类型与嵌套形状 → create/update requiredness → nullable/default/enum/format → error/test seam`。数组元素使用 `items[].property` 一类稳定 property path。
    - create/update 或其他不同生命周期操作复用同一写 schema 时，逐操作证明 requiredness 与省略语义一致；若不一致，拆分 schema 或明确条件契约。凭据类字段还要说明创建、更新、掩码回显、省略保留与显式清空语义，不能仅凭字段名统一设为必填。
    - 先运行 `scripts/verify-yss-dto-openapi-profile`，并记录 profile 版本；检查 `/api/v1/` 版本策略（或记录例外）、`x-yss-response-wrapper`、`YssResultMeta` + `allOf` 具体 schema、统一错误结构、分页、幂等 / 乐观锁和契约测试 seam。
@@ -83,12 +83,12 @@ pnpm exec redocly bundle \
    - 将通过 verifier 且 SHA-256 与当前 YAML 一致的 validation record 交给 `yss-openapi-draft-review`。缺锁定 lint 时可以先做语义预审，但独立 Review 总结果必须为 `Blocked`；不能用“Freeze 前补 lint”支持 `Approved`。
    - YAML、validation record 或 lint ruleset 变化后，旧结构证据与旧 Review 立即失效，必须重新校验和审查。阻断项未关闭前，YAML 仍是 review-only Draft，不得生成生产客户端。
    - Freeze 记录必须引用 YAML 路径、Git ref（如适用）和 YAML SHA-256。冻结后 API 行为变更必须先回到 YAML Draft 与审查。
-   - 将同一 YAML 的版本与摘要、validation record、独立 Review 和 Freeze 写入 API Contract Decision v1。`gate.engineering-contract-approved` 一次批准同时绑定 Technical Design、Data Architecture Decision、API Contract Decision；API `required` 时还必须直接绑定冻结 YAML。不得另造字符串 URI 或仅凭 `status: approved` 关闭门禁。
+   - 将同一 YAML 的版本与摘要、validation record、独立 Review 和 Freeze 写入 API Contract Decision（新建 v2；历史 v1 只读兼容，准备与迁移见 `.template-spec/process/contract-reading.md`）。`gate.engineering-contract-approved` 一次批准同时绑定 Technical Design、Data Architecture Decision、API Contract Decision；API `required` 时还必须直接绑定冻结 YAML。不得另造字符串 URI 或仅凭 `status: approved` 关闭门禁。
 
 4. **从冻结 YAML 派生 JSON**
    - 使用上面的锁定 `redocly bundle` 命令生成 `docs/.scratch/<feature>/api/<feature>.json`，JSON 不纳入人工编辑面。
    - 对输出 JSON 重新执行解析 / lint（按项目工具链），确认 bundle 未产生组件重名冲突或无法解析的引用。
-   - 写入 `docs/.scratch/<feature>/api/<feature>-json-export.md`，可从 `docs/api/templates/openapi-json-export-record-template.md` 创建。
+   - 写入 `docs/.scratch/<feature>/api/<feature>-json-export.md`，可从 `.template-spec/api/templates/openapi-json-export-record-template.md` 创建。
    - 记录 YAML SHA-256、JSON SHA-256、OAS 版本、Redocly CLI 版本与 lockfile 引用、完整命令、metafile、`$ref` 例外以及结果。
 
 5. **交给下游前端**

package/template/.pi/skills/yss-product-lifecycle/SKILL.md

@@ -5,11 +5,11 @@ description: 编排 YSS 研发全生命周期；当阶段、产物、门禁或 S
 
 # YSS Product Lifecycle
 
-合同阅读：`scripts/contract view`；见 `docs/process/contract-reading.md`。
+合同阅读：`scripts/contract view`；见 `.template-spec/process/contract-reading.md`。
 
-主控识别请求、仓库身份和可信阶段，计算 frontier、派发与验收工作单元；专项 Skill 负责设计、实现和独立审查。
+主控识别请求、身份及可信阶段，计算 frontier 并派发、验收工作单元；专项 Skill 执行与独立审查。
 
-文档按 `document_writing` 条件调用 `i-have-adhd`，并传递 `docs/process/document-writing.md` 规范。
+文档按 `document_writing` 条件调用 `i-have-adhd`，并传递 `.template-spec/process/document-writing.md` 规范。
 
 ## 事实源与按需加载
 
@@ -17,11 +17,11 @@ description: 编排 YSS 研发全生命周期；当阶段、产物、门禁或 S
 
 | 事实 | 权威来源 |
 |---|---|
-| 阶段、聚合门禁、内部检查、产物、工作单元、证据和稳定 ID | `docs/process/lifecycle-registry.yaml` |
+| 阶段、聚合门禁、内部检查、产物、工作单元、证据和稳定 ID | `.template-spec/process/lifecycle-registry.yaml` |
 | 执行模式、流转、readiness、暂停、结果和授权语义 | `references/orchestration-contract.yaml` |
-| Skill 身份、capability、依赖和路由 | `docs/agents/yss-skill-registry.yaml` |
-| 数字人角色、运行时和会签策略 | `docs/agents/digital-human-roles.yaml` |
-| 影响面、裁剪和模板维护强度 | `docs/process/harness-process-tailoring.md`、`docs/process/maintenance-intensity.yaml` |
+| Skill 身份、capability、依赖和路由 | `.template-spec/agents/yss-skill-registry.yaml` |
+| 数字人角色、运行时和会签策略 | `.template-spec/agents/digital-human-roles.yaml` |
+| 影响面、裁剪和模板维护强度 | `.template-spec/process/harness-process-tailoring.md`、`.template-source/process/maintenance-intensity.yaml` |
 
 用 `scripts/query-lifecycle-context` 查询合同：
 
@@ -40,7 +40,7 @@ scripts/query-lifecycle-context --mode route --stage stage.plan --work-unit work
 3. 按合同 `request_triage` 选择 `route`、`orchestrate`、`resume`、`audit`；明确行动请求无需模式关键字，意图不明时只读 `route`。`modes`、门禁及授权边界仍适用。
 4. `project-instance` 按生命周期注册表推进；`template-source` 只走模板维护流程。
 
-Plan 入口读取 `docs/plan/README.md` 和 `docs/process/plan-migration.md`，按注册表的退出条件核查战略输入。关键未决项阻断进入 Spec；非关键细节须有责任人、解决时点和下游接收方。只使用 Plan 标识；旧阶段不提供兼容解析，历史批准不自动成为 Plan 批准。
+Plan 入口读取 `.template-spec/plan/README.md` 和 `.template-spec/process/plan-migration.md`，核查战略输入与退出条件。关键未决项阻断 Spec；其他未决项记录责任人、解决时点和接收方。只用 Plan 标识；旧阶段不兼容解析，历史批准不自动沿用。
 
 理解、澄清与纠错见 [请求分诊协议](references/request-triage.md)；用 `scripts/query-lifecycle-context --include request_triage` 查询合同。先查上下文和证据，只问影响下一动作的缺口，不按问题长度追问。
 
@@ -83,9 +83,9 @@ Plan 入口读取 `docs/plan/README.md` 和 `docs/process/plan-migration.md`，
 
 `机会与目标 → 业务故事 → 责任与交接 → 规则、例子与疑问 → 可验收需求 → 页面验证 → 业务任务 → 交接研发`
 
-按当前决策澄清目标、流程、责任、规则、最小范围和验收例子。可生成引用权威资产的“业务方案总览”，展示状态、未决项、责任人和下一步；不复制正文或新增门禁。
+按当前决策澄清目标、流程、责任、规则、范围和验收例子。业务方案总览引用权威资产，展示状态、未决项、责任人和下一步；不复制正文或新增门禁。
 
-Plan → Spec（含正式草稿、恢复与显式 `to-spec`）写入前，按 `docs/plan/entry-review.md` 持久化审阅包并运行 `node scripts/verify-plan-spec-entry <state.yaml>`。检查默认 pending，缺项、过期或无真实回复即阻断；独立调研可继续。
+Plan → Spec（含正式草稿、恢复与显式 `to-spec`）写入前，按 `.template-spec/plan/entry-review.md` 持久化审阅包并运行 `node scripts/verify-plan-spec-entry <state.yaml>`。检查默认 pending，缺项、过期或无真实回复即阻断；独立调研可继续。
 
 ## 结果与暂停
 
@@ -97,4 +97,4 @@ Plan → Spec（含正式草稿、恢复与显式 `to-spec`）写入前，按 `d
 
 专项合同加载索引见 `references/orchestration.md`。
 
-Plan / Spec / Design 追踪按 `docs/process/stage-tracking.md`。
+Plan / Spec / Design 追踪按 `.template-spec/process/stage-tracking.md`。

package/template/.pi/skills/yss-product-lifecycle/references/matt-yss-adapter.md

@@ -19,7 +19,7 @@ Matt skills 决定如何工作；YSS 生命周期决定是否允许推进；YSS
 | 信息在其他人手中 | `to-questionnaire` | 使用 `external-input-required` 暂停；答案回流后记录 response、重新分类影响面，再进入 `grill-with-docs` 或 `to-spec` |
 | 大型模糊工作 | `wayfinder`（可选） | 仅在跨会话 / 跨 Agent 或 frontier 不清晰时启用；map 真正完成后 `handoff → to-spec` |
 | 技术或战略事实 | `yss-research`（`research` 为 deprecated alias） | `technical-evidence` 核验一手技术资料；`strategy-evidence` 为领域战略和阶段决策提供可审计证据；研究包不得自行修改或批准下游资产 |
-| runnable 问题 | `prototype` | 生成单文件可分享 HTML，保留 `prototype/<name>` 分支作为主来源；必须 source/return handoff 和结论回填，只能作为阶段 4 输入，不得替代低保真评审、H1/H2 档位路由、schema v3 验证和用户确认 |
+| runnable 问题 | `prototype` | 生成单文件可分享 HTML，保留 `prototype/<name>` 分支作为主来源；必须 source/return handoff 和结论回填，只能作为阶段 4 输入，不得替代低保真评审、H1/H2 档位路由、schema v4 验证和用户确认 |
 | Spec 综合 | 原生 `work-unit.spec-synthesis`；`to-spec`（用户显式兼容） | 初稿进入 `ready-for-human`，不得直接实现 |
 | 切片 | 原生 `work-unit.ticket-decomposition`；`to-tickets`（用户显式兼容） | 仅在冻结/无影响记录后拆垂直切片，初始 Ticket 状态为 `ready-for-human` |
 | 实现 | 原生 `work-unit.slice-implementation`；`implement`（用户显式兼容） | 当前合同批准并持久化后执行；内部使用 `tdd`，结果回交后再次核验 |
@@ -48,7 +48,7 @@ workflow_reference:
   invocation_mode: reference
 result: completed # completed / blocked / needs-human / failed
 evidence_refs:
-  - docs/process/yss-product-lifecycle-orchestrator-validation.md
+  - .template-spec/process/yss-product-lifecycle-orchestrator-validation.md
 changed_artifacts: []
 new_impacts: []
 stale_candidates: []
@@ -74,7 +74,7 @@ blocking_signals: []
 
 ## Review 候选与 Git 授权
 
-YSS 调用 `code-review` 前必须形成 review input，至少包含 `review_mode`、`review_base_ref`、`implementation_candidate_ref`、`candidate_snapshot_ref`、`candidate_digest`、`spec_ref`、`ticket_ref`、`slice_contract_ref`、`build_architecture_checklist_ref` 和 `yss_execution_result_refs`，并满足 `orchestration-contract.yaml.review_input.manifest_required_by_mode`。Standards 还必须编译 `review_standards_route`：合同 `required_skills`、影响面专项检查输入、报告模板与 `finding_disposition`；机器检查按 `run_if_present` 执行。质量标准只从 `engineering-baseline` 引用，禁止在 review input 或切片中另起一份。命中高风险影响时，review input 还要引用 Doubt-Driven 主张 / 反证记录；缺少反证或残余风险未处理时返回 `blocked`。`committed` 审查 merge-base 到不可变 `HEAD`；`worktree` 一次捕获 merge-base 到 working tree 的 committed、staged、unstaged 和 untracked 内容，使用 `yss-worktree-candidate-v1` 规定的 raw path、uint64 big-endian 长度、tracked/untracked record 和不支持条目阻断规则计算 SHA-256，让两个 Reviewer 消费同一不可变快照，并在返回和完成 checkpoint 复核摘要未变化。缺少输入、候选为空、专项覆盖缺失、未关闭 mandatory `violation`、适用行空白或摘要变化时返回 `blocked`，不能缩小审查范围、另起通用审查 skill、由审查者改实现，或合并不同候选的结论。`violation` 类 finding 交实现者在原合同路径修复后全轴复审；`drift` / `new_impacts` 使合同 `stale` 并回 实现合同编译器。
+YSS 调用 `code-review` 前必须形成 review input，至少包含 `review_mode`、`review_base_ref`、`implementation_candidate_ref`、`candidate_snapshot_ref`、`candidate_digest`、`spec_ref`、`ticket_ref`、`slice_contract_ref`、`build_architecture_checklist_ref` 和 `yss_execution_result_refs`，并满足 `orchestration-contract.yaml.review_input.manifest_required_by_mode`。Standards 还必须编译 `review_standards_route`：合同 `required_skills`、影响面专项检查输入、报告模板与 `finding_disposition`；机器检查按 `run_if_present` 执行。质量标准只从 `engineering-baseline` 引用，禁止在 review input 或切片中另起一份。命中高风险影响时，review input 还要引用 Doubt-Driven 主张 / 反证记录；缺少反证或残余风险未处理时返回 `blocked`。`committed` 审查 merge-base 到不可变 `HEAD`；`worktree` 一次捕获 merge-base 到 working tree 的 committed、staged、unstaged 和 untracked 内容，使用 `yss-worktree-candidate-v1` 规定的 raw path、uint64 big-endian 长度、tracked/untracked record 和不支持条目阻断规则计算 SHA-256，让所有参与审查者（人数按 `orchestration-contract.yaml.gate_consolidation`） 消费同一不可变快照，并在返回和完成 checkpoint 复核摘要未变化。缺少输入、候选为空、专项覆盖缺失、未关闭 mandatory `violation`、适用行空白或摘要变化时返回 `blocked`，不能缩小审查范围、另起通用审查 skill、由审查者改实现，或合并不同候选的结论。`violation` 类 finding 交实现者在原合同路径修复后全轴复审；`drift` / `new_impacts` 使合同 `stale` 并回 实现合同编译器。
 
 Matt `implement` 的通用提交指令不构成 YSS Git 授权。只有用户明确给出 `commit_authorized` 为 `true`、非空 `commit_scope` 和 `commit_authorization_ref` 时才能 commit；只有明确给出 `push_authorized` 为 `true`、非空 `push_scope` 和 `push_authorization_ref` 时才能 push。缺少任一字段时保持工作区不变，只输出 checkpoint 判断；不得把 `orchestrate`、实现授权、当前分支、测试通过或负责人要求解释为隐含授权。`git-submodule` 还必须按仓授权、禁止 detached HEAD 提交，并先推子仓再更新父仓 gitlink。
 
@@ -92,11 +92,11 @@ Matt `implement` 的通用提交指令不构成 YSS Git 授权。只有用户明
 
 当 YSS 生命周期处于 active 状态时，Matt `to-spec` 中独立运行时的 `ready-for-agent` 发布提示由本适配层覆盖为 `ready-for-human`：Spec 必须先经过产品总体设计 / 功能架构、必要的设计与契约门禁，之后才由生命周期编排器决定垂直切片 Ticket 的 `ready-for-agent`。这只约束 YSS 编排下的状态写入，不修改 Matt skill 单独运行时的核心行为。
 
-`setup-matt-pocock-skills` 仅由用户显式启动。readiness=`missing` 时返回 `needs-human`、`requested_skill=setup-matt-pocock-skills` 和 `resume_route=setup-readiness`；仅发现旧路径资产仍进入 migration-check 并暂停写入。`ready` 直接继续，`conflict` 进入迁移裁决，`degraded` 保留待发布草案，`not-applicable` 仅验证模板契约。通用 setup 文案与 YSS tracker 合同冲突时，以 `docs/agents/issue-tracker.md` 和本编排契约为准。
+`setup-matt-pocock-skills` 仅由用户显式启动。readiness=`missing` 时返回 `needs-human`、`requested_skill=setup-matt-pocock-skills` 和 `resume_route=setup-readiness`；仅发现旧路径资产仍进入 migration-check 并暂停写入。`ready` 直接继续，`conflict` 进入迁移裁决，`degraded` 保留待发布草案，`not-applicable` 仅验证模板契约。通用 setup 文案与 YSS tracker 合同冲突时，以 `.template-spec/agents/issue-tracker.md` 和本编排契约为准。
 
 ### Local Markdown 兼容映射
 
-当 `docs/agents/issue-tracker.md` 的 `platform` 为 `local-markdown` 时，Matt flow 的本地输出归一化为以下 YSS 载体：
+当 `.template-spec/agents/issue-tracker.md` 的 `platform` 为 `local-markdown` 时，Matt flow 的本地输出归一化为以下 YSS 载体：
 
 | Matt 产物 | Local 载体 |
 |---|---|

package/template/.pi/skills/yss-product-lifecycle/references/orchestration-contract.yaml

@@ -4,21 +4,21 @@ document_writing:
   condition: lifecycle-document-output
   scope: current-document-work-only
   dispatch: pass-condition-and-reference-to-document-owner
-  reference: docs/process/document-writing.md
-  examples: docs/templates/examples/lifecycle-writing-examples.md
+  reference: .template-spec/process/document-writing.md
+  examples: .template-spec/templates/examples/lifecycle-writing-examples.md
   load_when: [lifecycle-document-draft, lifecycle-document-revision, progress-or-decision-presentation]
   dispatch_input: include-reference-for-document-work
   artifact_ownership: unchanged
   gate_and_status_semantics: unchanged
 
 backend_architecture_identity_policy:
-  source: docs/agents/yss-skill-registry.yaml
+  source: .template-spec/agents/yss-skill-registry.yaml
   generated_profiles: architecture_profiles
   existing_profiles: existing_project_profiles
   existing_evidence: [repository-registration, engineering-baseline, existing-project-observation]
   evidence_policy: original-ref-digest-and-current-source-verification
   delivery_preflight: scripts/preflight-delivery
-  schema: docs/process/schemas/backend-architecture-identity.schema.json
+  schema: .template-spec/process/schemas/backend-architecture-identity.schema.json
   required_surfaces: [engineering-baseline, repository-registration, scaffold-manifest, slice-contract, work-unit, execution-result]
   agreement: exact-identity-and-digest
   missing_or_drift: blocked-and-recompile
@@ -89,6 +89,7 @@ request_triage:
     explicit_audit: audit
     authorized_continuation: resume
     clear_action_request: orchestrate
+    clear_read_only_investigation_request: orchestrate
     unresolved_intent: route
     investigation: read-only-actions-unless-additional-scope-authorized
     mode_keywords_required: false
@@ -138,9 +139,19 @@ execution_efficiency:
     template_regression_suite: template-maintenance-or-explicit-regression-task
     per_work_unit_context_reconciliation: required
     skip_triggered_gates: forbidden
+  recovery:
+    state_source: current-checkpoint-stage-tracking-and-readable-task-results
+    status_view: read-only-diagnostics-never-execution-authorization
+    running_or_unknown_task: inspect-existing-task-identity-before-dispatch
+    completed_task: verify-current-evidence-then-recompute-frontier
+    action_completed_before_checkpoint: reconcile-actual-artifacts-before-repeating-side-effects
+    changed_inputs: invalidate-affected-dependencies-and-revalidate
+    missing_legacy_tracking: existing-compatibility-or-explicit-migration
+    unknown_external_result: stop-duplicate-side-effect-and-report-missing-evidence
+    approval: revalidate-current-decision-or-supported-continuation
   interaction:
     questions: batch-independent-current-stage-questions
-    user_decision_policy_ref: docs/agents/digital-human-roles.yaml#user_decision_policy
+    user_decision_policy_ref: .template-spec/agents/digital-human-roles.yaml#user_decision_policy
     decision_evidence_ref: references/user-decisions.md
     dependent_future_approvals: forbidden
     checkpoint_policy_ref: checkpoint_policy
@@ -208,7 +219,7 @@ workflow_execution_result:
   evidence_ref_validation: readable-or-resolvable
   completed_requires_no_blocking_signals: true
   context_reconciliation:
-    schema_ref: docs/process/schemas/context-reconciliation.schema.json
+    schema_ref: .template-spec/process/schemas/context-reconciliation.schema.json
     validator: scripts/verify-context-reconciliation
     project-instance: {required_status: reconciled, readable_ref_required: true, transition_without_reconciliation: blocked}
     template-source: {required_status: not-applicable, reason_required: true}
@@ -233,8 +244,8 @@ workflow_execution_result:
 task_package:
   schema_version: 1
   applies_to: all-formal-digital-human-dispatches
-  schema_ref: docs/process/schemas/digital-human-task-package.schema.json
-  compatibility_schema_ref: docs/process/schemas/subagent-task-package.schema.json
+  schema_ref: .template-spec/process/schemas/digital-human-task-package.schema.json
+  compatibility_schema_ref: .template-spec/process/schemas/subagent-task-package.schema.json
   validator: scripts/verify-digital-human-task-package
   compatibility_validator: scripts/verify-subagent-task-package
   persistence_layout: docs/.scratch/<feature>/task-packages/<task-id>.yaml
@@ -242,7 +253,7 @@ task_package:
   execution_states: [Explorer, Drafter, Worker, Reviewer, Verifier]
   workflow_statuses: [not-started, active, paused, resolved, failed]
   skill_source:
-    registry_ref: docs/agents/digital-human-roles.yaml
+    registry_ref: .template-spec/agents/digital-human-roles.yaml
     defaults: taskPackageDefaults(role_id)
     copy_required: [core_skills, forbidden_skills]
   contract:
@@ -286,7 +297,7 @@ task_package:
 # may prepare, validate and accept their results, but cannot invoke them or create
 # their formal artifacts on their behalf.
 matt_invocation_boundary:
-  user_invoked_skills: [grill-me, grill-with-docs, handoff, implement, improve-codebase-architecture, setup-matt-pocock-skills, to-questionnaire, to-spec, to-tickets, triage, wait-what, wayfinder]
+  user_invoked_skills: [grill-with-docs, handoff, implement, improve-codebase-architecture, setup-matt-pocock-skills, to-questionnaire, to-spec, to-tickets, triage, wait-what, wayfinder]
   lifecycle_managed_user_entries: [setup-matt-pocock-skills, grill-with-docs, to-spec, to-tickets, implement]
   model_invoked_skills: [code-review, codebase-design, diagnosing-bugs, domain-modeling, grilling, prototype, resolving-merge-conflicts, tdd, writing-for-agents, yss-research]
   lifecycle_allowed_model_invoked_skills: [code-review, codebase-design, diagnosing-bugs, domain-modeling, grilling, prototype, tdd, yss-research]
@@ -299,13 +310,13 @@ skill_source_contract:
   lock_version: 3
   source_revisions_required: [mattpocock/skills, iloveZzz/yss-ui]
   adaptation_ref_required_when_effective_diff: true
-  retired_shared_skills: [yss-antd-design, yss-antdv-next-design, ask-matt, batch-grill-me, dispatching-parallel-agents, loop-me, migrate-to-shoehorn, product-design-prototype, prototype-page-acceptance, scaffold-exercises, setup-pre-commit, setup-ts-deep-modules, teach, writing-beats, writing-fragments, writing-shape, yss-components, yss-dictionary, yss-jdbc, yss-log, yss-microapp-commit, yss-mvc-scaffold-generator, yss-mvc-design, yss-mvc-data-analysis-project-initializer, yss-backend-scaffold-parent, yss-page-module-development, yss-taskflow, yss-backend-scaffold-application, yss-backend-scaffold-domain, yss-backend-scaffold-infrastructure, yss-backend-scaffold-web, yss-backend-scaffold-adapter, yss-application-layer-reference, yss-domain-layer-reference, yss-infrastructure-layer-reference, yss-web-layer-reference]
+  retired_shared_skills: [yss-antd-design, yss-antdv-next-design, ask-matt, batch-grill-me, grill-me, dispatching-parallel-agents, loop-me, migrate-to-shoehorn, product-design-prototype, prototype-page-acceptance, scaffold-exercises, setup-pre-commit, setup-ts-deep-modules, teach, writing-beats, writing-fragments, writing-shape, yss-components, yss-dictionary, yss-jdbc, yss-log, yss-microapp-commit, yss-mvc-scaffold-generator, yss-mvc-design, yss-mvc-data-analysis-project-initializer, yss-backend-scaffold-parent, yss-page-module-development, yss-taskflow, yss-backend-scaffold-application, yss-backend-scaffold-domain, yss-backend-scaffold-infrastructure, yss-backend-scaffold-web, yss-backend-scaffold-adapter, yss-application-layer-reference, yss-domain-layer-reference, yss-infrastructure-layer-reference, yss-web-layer-reference]
 
 # 生命周期默认走原生工作单元；Matt user-invoked skill 仅保留为兼容入口。
 lifecycle_native_entries:
   default_entry: yss-product-lifecycle
   formal_artifact_owner: yss-product-lifecycle
-  user_confirmation_policy_ref: docs/agents/digital-human-roles.yaml#user_decision_policy
+  user_confirmation_policy_ref: .template-spec/agents/digital-human-roles.yaml#user_decision_policy
   compatibility_entries:
     to-spec: lifecycle-validate-and-accept
     to-tickets: lifecycle-validate-and-accept
@@ -354,7 +365,7 @@ work_unit_routes:
     human_gate: spec-baseline
     applies_when: new_feature_or_behavior_change
     not_applicable_reason: existing_frozen_spec_is_current
-  work-unit.prototype-design:
+  work-unit.prototype-design-v2:
     native: {source: yss-product-lifecycle, skill: yss-product-lifecycle, invocation_mode: model-invoked}
     primary_skill: yss-prototype-stage
     supporting_skills: [prototype-review, yss-design-system, product-design:index]
@@ -362,7 +373,7 @@ work_unit_routes:
     execution_order: [yss-design-system, low-fidelity-assets, prototype-review, prototype-profile-routing, profile-adapter-build, browser-design-qa-accessibility, user-confirmation]
     profile_routing_ref: .agents/skills/yss-prototype-stage/references/prototype-profile-routing.md
     prototype_adapter_ref: .agents/skills/yss-prototype-stage/references/product-design-adapter.md
-    evidence_schema_version: 3
+    evidence_schema_version: 4
     profile_contract:
       default_when_uncertain: H2
       highest_matching_profile_wins: true
@@ -388,7 +399,7 @@ work_unit_routes:
         applies_when: new_backend_repository
         confirms: [architecture_family, exact_spring_boot_version]
         architecture_choices: [domain-driven, layered-mvc]
-        platform_source: docs/engineering/backend-platforms.json
+        platform_source: .template-spec/engineering/backend-platforms.json
         existing_repository: not-applicable-reuse-current-registration
         missing_or_stale: blocked
       branches:
@@ -438,6 +449,16 @@ work_unit_routes:
     result_schema_version: 2
     backend_design_prerequisites_required: [technical_design, data_architecture_decision, api_contract_decision, engineering_contract_approval_ref]
     must_complete_before: work-unit.ticket-decomposition
+  work-unit.service-project-initialization:
+    native: {source: yss-product-lifecycle, skill: yss-product-lifecycle, invocation_mode: model-invoked}
+    primary_skill: yss-layered-mvc-scaffold-generator
+    supporting_skills: []
+    skills: [yss-layered-mvc-scaffold-generator]
+    parent_work_unit: work-unit.implementation-repository-preparation
+    return_to: work-unit.implementation-repository-preparation
+    applies_when: new_backend_project_with_approved_current_v4_mvc-data-analysis-v1_contract
+    completion_evidence: [scaffold-manifest-v4, scaffold-verification, workflow-execution-result, context-handoff-digest]
+    not_applicable_reason: existing_project_or_other_architecture_profile
   work-unit.ticket-decomposition:
     native: {source: yss-product-lifecycle, skill: yss-product-lifecycle, invocation_mode: model-invoked}
     primary_skill: yss-product-lifecycle
@@ -498,7 +519,7 @@ work_unit_routes:
     review_standards_route:
       unique_default_skill: code-review
       second_generic_review_skill: forbidden
-      report_template: docs/templates/review-report-template.md
+      report_template: .template-spec/templates/review-report-template.md
       contract_required_skills: required
       write_implementation: forbidden
       machine_checks:
@@ -621,21 +642,22 @@ transition_graph:
   validator: scripts/lib/lifecycle-transition.mjs
   implementation_requires_predecessor: work-unit.ticket-decomposition
   routes:
-    work-unit.ssot-update: [work-unit.skill-projection-sync, work-unit.intensity-aware-verification]
-    work-unit.skill-projection-sync: [work-unit.template-snapshot-build, work-unit.intensity-aware-verification]
-    work-unit.template-snapshot-build: [work-unit.attach-sync-integration, work-unit.intensity-aware-verification]
-    work-unit.attach-sync-integration: [work-unit.intensity-aware-verification]
-    work-unit.intensity-aware-verification: [work-unit.intensity-aware-review]
-    work-unit.intensity-aware-review: [work-unit.release-and-rollback]
+    work-unit.ssot-update: [work-unit.skill-projection-sync, work-unit.intensity-aware-verification-v2]
+    work-unit.skill-projection-sync: [work-unit.template-snapshot-build, work-unit.intensity-aware-verification-v2]
+    work-unit.template-snapshot-build: [work-unit.attach-sync-integration, work-unit.intensity-aware-verification-v2]
+    work-unit.attach-sync-integration: [work-unit.intensity-aware-verification-v2]
+    work-unit.intensity-aware-verification-v2: [work-unit.intensity-aware-review-v2]
+    work-unit.intensity-aware-review-v2: [work-unit.release-and-rollback]
     work-unit.release-and-rollback: []
     work-unit.plan-opportunity: [work-unit.plan-requirements, work-unit.domain-strategy-design, work-unit.stage-decision, work-unit.spec-synthesis]
     work-unit.plan-requirements: [work-unit.domain-strategy-design, work-unit.stage-decision, work-unit.spec-synthesis]
     work-unit.domain-strategy-design: [work-unit.stage-decision, work-unit.spec-synthesis]
     work-unit.stage-decision: [work-unit.spec-synthesis]
-    work-unit.spec-synthesis: [work-unit.prototype-design, work-unit.technical-analysis]
-    work-unit.prototype-design: [work-unit.technical-analysis]
+    work-unit.spec-synthesis: [work-unit.prototype-design-v2, work-unit.technical-analysis]
+    work-unit.prototype-design-v2: [work-unit.technical-analysis]
     work-unit.technical-analysis: [work-unit.implementation-repository-preparation]
-    work-unit.implementation-repository-preparation: [work-unit.ticket-decomposition]
+    work-unit.implementation-repository-preparation: [work-unit.service-project-initialization, work-unit.ticket-decomposition]
+    work-unit.service-project-initialization: [work-unit.implementation-repository-preparation]
     work-unit.ticket-decomposition: [work-unit.slice-implementation]
     work-unit.slice-implementation: [work-unit.frontend-implementation-verification, work-unit.code-review]
     work-unit.frontend-implementation-verification: [work-unit.code-review]
@@ -644,23 +666,23 @@ transition_graph:
     work-unit.release-and-retrospective: []
   forbidden_shortcuts:
     - {from: work-unit.spec-synthesis, to: work-unit.implementation-repository-preparation}
-    - {from: work-unit.prototype-design, to: work-unit.implementation-repository-preparation}
+    - {from: work-unit.prototype-design-v2, to: work-unit.implementation-repository-preparation}
     - {from: work-unit.spec-synthesis, to: work-unit.slice-implementation}
-    - {from: work-unit.prototype-design, to: work-unit.slice-implementation}
+    - {from: work-unit.prototype-design-v2, to: work-unit.slice-implementation}
     - {from: work-unit.technical-analysis, to: work-unit.slice-implementation}
     - {from: work-unit.technical-analysis, to: work-unit.ticket-decomposition}
 
 planning:
   entry_validator: scripts/verify-plan-spec-entry
-  review_contract: docs/plan/entry-review.md
-  check_policy: docs/process/lifecycle-registry.yaml
+  review_contract: .template-spec/plan/entry-review.md
+  check_policy: .template-spec/process/lifecycle-registry.yaml
   default_check_status: pending
   formal_spec_draft_requires_passed_entry: true
   stage: stage.plan
   record: artifact.plan-record
-  template: docs/plan/templates/plan-template.md
-  exit_policy: docs/process/lifecycle-registry.yaml
-  migration_policy: docs/process/plan-migration.md
+  template: .template-spec/plan/templates/plan-template.md
+  exit_policy: .template-spec/process/lifecycle-registry.yaml
+  migration_policy: .template-spec/process/plan-migration.md
   critical_open_questions: block-before-spec
   deferred_details_require: [noncritical_reason, owner, resolution_point, downstream_recipient]
   reuse_requires: [source_ref, current_version, applicable_scope, reason]
@@ -805,7 +827,7 @@ scaffold_architecture_decision:
       display_name: MVC 开发脚手架
       recommendation_signals: [crud, reporting-query, data-transformation, external-system-orchestration, thin-domain]
   platform_choice:
-    source: docs/engineering/backend-platforms.json
+    source: .template-spec/engineering/backend-platforms.json
     confirms: [platform_profile, spring_boot_version, java_version]
     version_format: exact-patch
     latest_or_range: forbidden
@@ -855,7 +877,7 @@ backend_scaffold:
   contract_schema:
     schema_version: 4
     current_schema_version: 4
-    schema_ref: docs/process/schemas/project-scaffold-contract.schema.json
+    schema_ref: .template-spec/process/schemas/project-scaffold-contract.schema.json
     compatible_backend_versions: [3, 4]
     frontend_minimum_version: 4
     identity: service-engineering-baseline
@@ -878,9 +900,9 @@ backend_scaffold:
       component_version_policy: per-artifact-from-verified-component-capabilities
     profiles:
       discriminant: architecture_family
-      source: docs/engineering/backend-platforms.json
+      source: .template-spec/engineering/backend-platforms.json
       platform_binding: platform_configuration-v2
-      architecture_profiles_source: docs/agents/yss-skill-registry.yaml
+      architecture_profiles_source: .template-spec/agents/yss-skill-registry.yaml
       unsupported: [old-architecture-profile, arbitrary-module-combination, unverified-platform-or-component-capability]
     module_profile:
       required: [requested_capabilities, resolved_modules, resolution_version]
@@ -1048,7 +1070,7 @@ frontend_implementation_plan:
   applies_when: [ui_impact]
   required_before: [ready_for_agent]
   required: [prototype_ref, spec_ref, visual_baseline, route_and_page_inventory, baseline_case_ids, desktop_viewport, narrow_viewport, state_cases, pnpm_commands]
-  schema: docs/process/schemas/frontend-implementation-evidence.schema.json
+  schema: .template-spec/process/schemas/frontend-implementation-evidence.schema.json
   validator: scripts/verify-frontend-implementation-evidence
   acceptance: [kind_plan, template_false, status_approved, no_template_placeholders, readable_baseline_refs, approved_visual_baseline_digest_current, selected_case_ids_exist]
 
@@ -1057,7 +1079,7 @@ frontend_implementation_verification:
   required_before: [release]
   required: [prototype_ref, spec_ref, visual_baseline, route_and_page_inventory, case_results, interaction_results, console_warning_check, pnpm_commands, actual_verification, uncovered_differences, difference_owner]
   verification: [actual_command, exit_code, executed_at, evidence_ref]
-  schema: docs/process/schemas/frontend-implementation-evidence.schema.json
+  schema: .template-spec/process/schemas/frontend-implementation-evidence.schema.json
   validator: scripts/verify-frontend-implementation-evidence
   acceptance: [kind_verification, template_false, status_approved, no_template_placeholders, visual_baseline_identity_and_digest_match, case_results_pair_every_selected_case, no_unexplained_difference, console_warning_pass, pnpm_exit_codes_zero, independent_review_approved]
   blocked_when: [unexplained_visual_difference, missing_visual_evidence, typecheck_only, claimed_alignment_without_evidence]
@@ -1076,7 +1098,7 @@ impact_propagation:
     targets:
       - {kind: artifact, name: product-design, level: direct, when: ui_impact}
       - {kind: artifact, name: prototype, level: direct, when: ui_impact}
-      - {kind: gate, name: requirement-freeze, level: direct, when: ui_impact}
+      - {kind: gate, name: gate.product-design-approved, level: direct, when: ui_impact}
       - {kind: artifact, name: openapi-draft, level: transitive, when: api_impact}
       - {kind: gate, name: openapi-freeze, level: transitive, when: api_impact}
       - {kind: artifact, name: vertical-slice-tickets, level: transitive, when: always}
@@ -1097,7 +1119,8 @@ impact_propagation:
       - {kind: artifact, name: product-design, level: direct, when: ui_impact}
       - {kind: artifact, name: system-architecture, level: direct, when: always}
       - {kind: artifact, name: data-architecture, level: direct, when: data_impact}
-      - {kind: gate, name: requirement-freeze, level: direct, when: always}
+      - {kind: gate, name: gate.spec-baseline-approved, level: direct, when: always}
+      - {kind: gate, name: gate.product-design-approved, level: direct, when: ui_impact}
       - {kind: artifact, name: openapi-draft, level: transitive, when: api_impact}
       - {kind: gate, name: design-review, level: transitive, when: always}
       - {kind: gate, name: openapi-freeze, level: transitive, when: api_impact}
@@ -1181,8 +1204,8 @@ behavioral_invariants:
   diagnostics_redact_secrets: true
 
 user_decision_evidence:
-  policy_ref: docs/agents/digital-human-roles.yaml#user_decision_policy
-  schema_ref: docs/process/schemas/user-decision.schema.json
+  policy_ref: .template-spec/agents/digital-human-roles.yaml#user_decision_policy
+  schema_ref: .template-spec/process/schemas/user-decision.schema.json
   protocol_ref: references/user-decisions.md
   verifier: scripts/verify-user-decision
   workflow_result_fields: [user_decisions, user_decision_not_applicable]
@@ -1194,8 +1217,8 @@ user_decision_evidence:
   basis_changed: revalidate_then_continue_only_with_independent_equivalence_evidence
 
 gate_consolidation:
-  source: docs/process/lifecycle-registry.yaml
-  check_policy: docs/agents/digital-human-roles.yaml
+  source: .template-spec/process/lifecycle-registry.yaml
+  check_policy: .template-spec/agents/digital-human-roles.yaml
   checks: automatic_or_independent_review_without_separate_user_decision
   check_failure: blocks_aggregate_gate
   plan_decision_boundary: gate.plan-approved
@@ -1219,7 +1242,7 @@ execution_scopes:
     validator: scripts/lib/lifecycle-execution-scope.mjs
     terminal_work_unit: work-unit.backend-delivery
     terminal_record: .yss-backend-delivery.json
-    allowed_work_units: [work-unit.entry-triage, work-unit.plan-opportunity, work-unit.plan-requirements, work-unit.domain-strategy-design, work-unit.stage-decision, work-unit.spec-synthesis, work-unit.prototype-design, work-unit.technical-analysis, work-unit.implementation-repository-preparation, work-unit.scaffold-generation, work-unit.ticket-decomposition, work-unit.slice-implementation, work-unit.code-review, work-unit.backend-delivery]
+    allowed_work_units: [work-unit.entry-triage, work-unit.plan-opportunity, work-unit.plan-requirements, work-unit.domain-strategy-design, work-unit.stage-decision, work-unit.spec-synthesis, work-unit.prototype-design-v2, work-unit.technical-analysis, work-unit.implementation-repository-preparation, work-unit.service-project-initialization, work-unit.scaffold-generation, work-unit.ticket-decomposition, work-unit.slice-implementation, work-unit.code-review, work-unit.backend-delivery]
     route_overrides:
       work-unit.code-review: [work-unit.slice-implementation, work-unit.backend-delivery]
       work-unit.slice-implementation: [work-unit.code-review]
@@ -1250,8 +1273,8 @@ consumer_entry_routes:
       target_work_unit: work-unit.technical-design
 
 stage_tracking:
-  contract: docs/process/stage-tracking.md
-  schema: docs/process/schemas/stage-tracking.schema.json
+  contract: .template-spec/process/stage-tracking.md
+  schema: .template-spec/process/schemas/stage-tracking.schema.json
   verifier: scripts/stage-tracking
   configuration: tracker.lifecycle_tracking_version
   machine_state_owner: checkpoint.stage_tracking