create-yss-spec 3.5.0 → 3.5.3

package/template/docs/engineering/evidence/aliyun-artifact-resolution.json

@@ -1,446 +0,0 @@
-{
-  "schema_version": 1,
-  "kind": "backend-component-artifact-resolution",
-  "report_id": "aliyun-maven-artifact-resolution-2026-09-18",
-  "generated_at": "2026-09-18T22:46:00+08:00",
-  "status": "resolved-with-blockers",
-  "settings_ref": "~/.m2/settings.xml",
-  "settings_usage": "configuration-evidence-only",
-  "credentials_recorded": false,
-  "repository": {
-    "id": "2306938-snapshot-Yloqmt",
-    "url": "https://packages.aliyun.com/6381d2a25db8487f76c8149c/maven/2306938-snapshot-yloqmt"
-  },
-  "resolution_command": "./mvnw -N -U -s ~/.m2/settings.xml org.apache.maven.plugins:maven-dependency-plugin:3.6.1:get -Dartifact=<GAV> -Dtransitive=false",
-  "source_root": "isolated-worktree",
-  "source_commit": "a3be2b2e33dca4545782e2b31894aaa00d0305cd",
-  "artifacts": [
-    {
-      "capability_id": "contract.dto-wire",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-dto",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "feff02992897c622c6403cfa9546c4a61d17e9d00de8f539d79065b956bf240e",
-      "resolved_version": "2.0.0-20260916.162843-1",
-      "jar_sha256": "65d05ae596242fb683f29938d0d5f0247a445ff4a24cb03618f14622b41fa5a3",
-      "pom_sha256": "5653ee0785cc005efa9dfb626a00bc43a26c411f78a87da3c2efaa2fbac7c181",
-      "sources_sha256": "65d4b5d09ca77b6fca3c009ead2f7f170bcaf1f4b26f5708eaf7d49c26522366",
-      "module_path": "yss-microservice-components/yss-component-dto",
-      "source_tree": "3add70b98d26f6534a4ebf7d9b09d74790ea60a5",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": false,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": false,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": true,
-      "worktree_change_count": 0,
-      "blockers": []
-    },
-    {
-      "capability_id": "contract.request-validation",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-validation-jsr303",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "90ca51bd3b376e21e0043c48cae842d231479045d20518c708a87ada770c451c",
-      "resolved_version": "2.0.0-20260916.163229-1",
-      "jar_sha256": "5a3a73e3ddd24cceb23ddd27680107952ac3cb030bd36ef1db243dacb0bedcc1",
-      "pom_sha256": "f0aef77e7b1f9e853cc7527b3977d29410cf7f953c3f19691ff6d788791b2a48",
-      "sources_sha256": "d1b538b9c6387a1da5158ef8f469017c1a4bc6f1c2f259374e47527ae7442d56",
-      "module_path": "yss-microservice-components/yss-component-validation-jsr303",
-      "source_tree": "fe5b36afb474afa41541fe1187a6828bdae080dc",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": false,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": true,
-      "worktree_change_count": 0,
-      "blockers": []
-    },
-    {
-      "capability_id": "contract.error-mapping",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-exception",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "f8ae4611bfdc80ee23b89ff626712c0586a95495f4aa0c7c89dc9a4f76c5d2c4",
-      "resolved_version": "2.0.0-20260916.162932-1",
-      "jar_sha256": "520363b8ced9df0c6a664a6abb5eec6439818ccae0d92de77184d229e64b6732",
-      "pom_sha256": "d51a60e37a97a686c295bb1d5001b376e939698eac256eb6b8cd4eee55ae68b3",
-      "sources_sha256": "ae75fb5bf395fcdd166db011dd597388f7461f252a473c0b39f169632608a090",
-      "module_path": "yss-microservice-components/yss-component-exception",
-      "source_tree": "e5d71e213f26cd7e52d419ded1c2f5e7b7fbf40b",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": true,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": false,
-      "worktree_change_count": 5,
-      "blockers": [
-        "candidate-not-published: isolated hardening worktree differs from the resolved artifact"
-      ]
-    },
-    {
-      "capability_id": "framework.mybatis",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-mybatis-plus-starter",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "6c5be1e763f10f97d4c7ddbdbd911ef9154d06dccc1ac60dab0c08ada71cbc61",
-      "resolved_version": "2.0.0-20260916.162918-1",
-      "jar_sha256": "bdb2a477bef0825e2bc668c242f83e75b72f6ee5d9f34b3edfdb887481ff2a05",
-      "pom_sha256": "51e036bc15fcf79e38c5656d056731c78385750adf700bcf885d7a0954bb9ff9",
-      "sources_sha256": "be55556c98042e2c1abbe089c235c7e364b55990dc32d0f54ac328a0eb717939",
-      "module_path": "yss-microservice-components/yss-component-persistence/yss-component-mybatis-plus-starter",
-      "source_tree": "03e29e6d74cf0b2bc8e4b879f7252766fb607356",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": true,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": true,
-      "worktree_change_count": 0,
-      "blockers": []
-    },
-    {
-      "capability_id": "component.cache",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-cache-starter",
-      "declared_version": "3.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "8d8130760288af01085e3fbc8ecdf3e66e0b892d56654faa9edbf6c46bb5ee4c",
-      "resolved_version": "3.0.0-20260916.163035-1",
-      "jar_sha256": "1631b4e5bc64d0d59727f3988366962c4bbc9fc368581f359e89aed757fe10c2",
-      "pom_sha256": "55b57d85d2b21fe4ec3ca2536631b4a0c850a06a891e9104f620e9b8160b8bda",
-      "sources_sha256": null,
-      "module_path": "yss-microservice-components/yss-component-cache-parent/yss-component-cache-starter",
-      "source_tree": "da5acccf1450fe48014ffff36d2ad212119a33a2",
-      "sources_published_by_repository": false,
-      "sources_match_source_tree": null,
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": false,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": false,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": true,
-      "worktree_change_count": 0,
-      "blockers": [
-        "source-binding-missing: repository metadata does not publish a sources JAR",
-        "component-platform-generation-mismatch: published 3.x artifact was built with JDK 8 and belongs to the Boot 2 generation"
-      ]
-    },
-    {
-      "capability_id": "component.current-user-context",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-userinfo-starter",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "6562cde961b7f588200bf7ccc000eeb499863a94d2d7818e882e1a66b10c8491",
-      "resolved_version": "2.0.0-20260916.163623-1",
-      "jar_sha256": "cf85f2c6528c06adb296dd9c050b954fa33e6316fb22cdb2c57db5a59acf10c9",
-      "pom_sha256": "a56c3ed0e65f96ab81f8ebca378b70ad684b0c78e7a83e661aa5cef8912dbe0c",
-      "sources_sha256": "8941410b7a545e6ab8c9135a29dc7fb79d5408867ec1e941ca5af84ac992639c",
-      "module_path": "yss-microservice-components/yss-component-userinfo-starter",
-      "source_tree": "fc77d57e0be6ee81b10247c0746baed6a09c6bb4",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": false,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": false,
-      "worktree_change_count": 5,
-      "blockers": [
-        "candidate-not-published: isolated hardening worktree differs from the resolved artifact"
-      ]
-    },
-    {
-      "capability_id": "component.audit-log",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-audit-log",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "ba24c144ae630df1f0c0bc4dae467decebe03e3f21d483ab22b8d2a4a7aef803",
-      "resolved_version": "2.0.0-20260916.163223-1",
-      "jar_sha256": "01dd17d7fdf10bf1eef04957d59cf74f3b3abf2fbcf9bba6a1719055a537fb44",
-      "pom_sha256": "1eb2d2d1495ddc539e033c55a8cf4981427c9d054936a8dc09e794d81e5ddc9b",
-      "sources_sha256": "3483a0f158875f83beac1a46e098d75513d36d45ee77bff76033cffe28be5f84",
-      "module_path": "yss-microservice-components/yss-component-audit-log",
-      "source_tree": "d00f2e156714e43e8ec70b28e0bd33967d130485",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": false,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": true,
-      "worktree_change_count": 0,
-      "blockers": []
-    },
-    {
-      "capability_id": "component.excel-import-export",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-excel-starter",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "4e91090c8c13ceb3d775909b60b3e1ea236b812d3afd8ed39754ef6a61a3c2c9",
-      "resolved_version": "2.0.0-20260916.163244-1",
-      "jar_sha256": "1d5523b7b134c1bf63094ab274fa8d79fbea7c4e752cf434ef4b43a25ed86ce3",
-      "pom_sha256": "f106de25eef3c6b4a83dd5a5558cfc2e906b5a210b917638f26289be4019f466",
-      "sources_sha256": "a7077ca1c680800fec6d0c95e3a6563066d993f4495e0d8e91d2619a5b736b05",
-      "module_path": "yss-microservice-components/yss-component-excel-starter",
-      "source_tree": "82345616c26950981497f254c45bf0b2bc2077a8",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": true,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": true,
-      "worktree_change_count": 0,
-      "blockers": []
-    },
-    {
-      "capability_id": "component.excel-import-export",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-excel-mvc",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "ba3d5f3e05b048203c0ab7fe8716d4814c30c511bbba88857315a428d71a8586",
-      "resolved_version": "2.0.0-20260916.163630-1",
-      "jar_sha256": "986f4c5441749bd6f4d076893460b17c3015f74d2296969c89441da7d74e3bf7",
-      "pom_sha256": "fa6e8fb94edfc492e1b6da0814be266328c0f526347564797c3eaed8c8ca6a10",
-      "sources_sha256": "7a25a9578dba56e4d0a052271ce619c6f48a4bb49d5486eb92f30f7cc49201a5",
-      "module_path": "yss-microservice-components/yss-component-excel-mvc",
-      "source_tree": "acc02f7747905f715708dfe029c3f66a8457e3a5",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": false,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": true,
-      "worktree_change_count": 0,
-      "blockers": []
-    },
-    {
-      "capability_id": "component.distributed-id",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-distributed-id",
-      "declared_version": "3.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "ebc6e7431776dbb3d990fa6d1a297a51b4b145c56924aaa92ee672a56833430d",
-      "resolved_version": "3.0.0-20260916.163140-1",
-      "jar_sha256": "b22f0751d4fd6e465621e1743bae3452a66f8a648dc3e0aa2e74f8a0b75e71a8",
-      "pom_sha256": "0f43860eb182da2c82c6668c75436bff44e392279033bb5b24694a4e4ab63fb6",
-      "sources_sha256": "66dd0e67581264ce2b487e8bc739444937b276747dfab113219b6e42ed81b9a7",
-      "module_path": "yss-microservice-components/yss-component-distributed-id",
-      "source_tree": "ac54e61f980cfea3e0a574b0559b5fc6a6ccb9f6",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": true,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": true,
-      "worktree_change_count": 0,
-      "blockers": [
-        "component-platform-generation-mismatch: published 3.x artifact was built with JDK 8 and belongs to the Boot 2 generation"
-      ]
-    },
-    {
-      "capability_id": "component.security-algorithm",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-security-algorithm",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "56936651f0a9455db800111a017f7f27fb40aa1445f963d4eef6bc5ba1762bb9",
-      "resolved_version": "2.0.0-20260916.163215-1",
-      "jar_sha256": "e0a10bb655c24bb10397e8c75579bcb2b38469a48efc363a101d526f486f7f2d",
-      "pom_sha256": "e839c11d06abd1c324cc9e6c56339cbd65b7aad6e3fe80ea882372671e6a5a8a",
-      "sources_sha256": "a8016b719d65a8a12c9800f1462290cc0ca2f92300be67b8ca9357fb5ee0a10e",
-      "module_path": "yss-microservice-components/yss-component-security-algorithm",
-      "source_tree": "a28f507af00845909eef3ad6bdf8b716660f5b9d",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": true,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": true,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": false,
-      "worktree_change_count": 5,
-      "blockers": [
-        "candidate-not-published: isolated hardening worktree differs from the resolved artifact"
-      ]
-    },
-    {
-      "capability_id": "component.gateway-resilience",
-      "group_id": "com.yss.cloud",
-      "artifact_id": "yss-component-resilience4j-starter",
-      "declared_version": "2.0.0-SNAPSHOT",
-      "repository_id": "2306938-snapshot-Yloqmt",
-      "metadata_sha256": "a0d242173e1a6b54b2a701e46f5ced0492edc5d9e6648c7acbc022a7cafc56dd",
-      "resolved_version": "2.0.0-20260916.163208-1",
-      "jar_sha256": "69b92bb710267f5fe5d73cb144462157aaaa250c05685beeae62ee8aa623c58c",
-      "pom_sha256": "a4410689d02120d34e1b08cdbf46c513bec07aca0b3b9b8cdba9cf9149b68a59",
-      "sources_sha256": "66094d40ff02de7f44c717e898b1d417cd46f4ee8237e9e532c1a694eda723c0",
-      "module_path": "yss-microservice-components/yss-component-resilience4j-starter",
-      "source_tree": "10cdf49599161c77137cac47d047b23998aad75b",
-      "sources_published_by_repository": true,
-      "sources_match_source_tree": true,
-      "source_mismatch": {
-        "missing": [],
-        "extra": [],
-        "changed": []
-      },
-      "pom_matches_source_tree": true,
-      "build_jdk_spec": "1.8",
-      "namespace_signals": {
-        "javax": false,
-        "jakarta": false
-      },
-      "auto_configuration": {
-        "spring_factories": false,
-        "auto_configuration_imports": false
-      },
-      "component_subtree_clean": false,
-      "worktree_change_count": 11,
-      "blockers": [
-        "candidate-not-published: isolated hardening worktree differs from the resolved artifact"
-      ]
-    }
-  ],
-  "summary": {
-    "requested": 12,
-    "resolved": 12,
-    "source_bound": 11,
-    "candidate_subtree_clean": 8
-  },
-  "global_blockers": [
-    "architecture-evidence-missing: domain-driven and layered-mvc consuming-application reports are not recorded",
-    "candidate-publication-missing: hardening changes for Exception, UserInfo, Security and Resilience4j are not present in the resolved artifacts",
-    "settings-warning: distributionManagement under an active settings profile is ignored by Maven and must live in the publishing POM"
-  ]
-}

package/template/docs/process/MATT-POCOCK-ENGINEERING-SKILLS.md

@@ -1,13 +0,0 @@
-# Matt Pocock Engineering Skills 集成
-
-Matt Pocock Engineering Skills 提供轻量的澄清、实现、TDD、诊断和审查方法；YSS 生命周期、仓库身份、产品设计、OpenAPI 和跨仓库契约仍由本模板的权威资产裁决。
-
-## 进入与退出
-
-- `triage` 是显式 Issue / PR 兼容入口；普通请求由 `yss-product-lifecycle` 的 `request_triage` 合同处理。其 YSS 适配只回交取证、简报和状态建议；简报不替代批准的切片合同，状态调整由生命周期核验。详细规则见 [请求分诊协议](../../.agents/skills/yss-product-lifecycle/references/request-triage.md)。
-- Matt user-invoked 的 `grill-with-docs`、`to-spec`、`to-tickets` 和 `implement` 必须由用户显式启动，任何 skill 不得自动调用它们；YSS 生命周期只准备、校验和验收其结果。所有 Matt model-invoked skill 仍须遵守 `AGENTS.md` 的阶段、门禁和证据要求，并只能在生命周期允许的工作单元中调用。
-- `code-review` 保持唯一默认审查入口。YSS 适配把 Slice `required_skills`、`alibaba-java-code-style` 与命中的 `yss-ui` / `yss-domain` 等专项 skill 编译为 Standards 检查输入，并要求实现仓已有的 `pnpm` / `./mvnw` 机器检查；禁止再增加第二个通用审查 skill 或专用审查 Cloud 环境来代替这条接线。审查 finding 按编排合同分流：实现者修复后全轴复审，或合同 `stale` 后回 实现合同编译器；审查者不得写实现。
-- `template-source` 只执行模板维护流程，不生成具体产品 Spec、原型、OpenAPI 或垂直切片 Ticket。
-- `code-review` 的 YSS 人员适配：普通功能默认一个独立 Reviewer，分别完成 Standards、Spec 与适用 UI 检查；能力缺口、冲突、外部制度或用户指定时才拆分多审查者。保留检查轴和证据，不将上游并行 Agent 形式转成固定多人会签。
-- Matt 的 `research` 已适配为 canonical `yss-research`，旧名只作为 deprecated alias。YSS 版本提供 `technical-evidence` / `strategy-evidence` profile、`quick` / `evidence-audited` 模式、证据合同和确定性校验，同时保留上游 revision 与原始 hash 以便追溯。
-- Agent 完成工作单元后返回可核验的 evidence refs、变更资产、验证命令、残余风险和下一路由。

package/template/docs/process/github-workflows.md

@@ -1,52 +0,0 @@
-# GitHub CI 与发布前验证
-
-本合同区分模板源、项目实例和实现仓库的验证责任。生命周期门禁仍由 `lifecycle-registry.yaml` 定义；维护分级由 `maintenance-intensity.yaml` 和 `harness-process-tailoring.md` 定义；检查组、影响面和兼容触发路径只在 `template-verification-profiles.yaml` 维护。
-
-## 模板源
-
-| 入口 | 行为 | 结果边界 |
-|---|---|---|
-| PR：Template CI | 对合成 merge commit 执行 candidate；以事件 base SHA 计算影响面；核心或未映射路径升级全量 | 合并前机器检查，不宣布发布就绪 |
-| main push：Template CI | Node 24 全量 `scripts/verify-template` | 检查合并后的完整主干 |
-| Template compatibility | 工具影响 PR、main 全量及发布前执行 Node 22 工具测试、macOS vendor 一致性、Node 26 非阻断观察 | 独立于 Node 24 主验证，不再重复主验证中的工具测试 |
-| 手动：Template release verification | 输入完整 40 位模板 commit，精确检出；全量验证、生成器集成与兼容矩阵 | 产出证据，不打 tag、不创建 Release、不发布包 |
-
-模板工作流首先要求 `template-source`。全量检查初始化验证实际依赖的公开 gitlink 固定子模块，不追踪上游分支；兼容期私有 `yss-harness-dev-agent` 不参与主模板验证，也不要求 GitHub 默认 token 具备跨仓私有读取权限。工具依赖使用固定 pnpm 与 frozen lockfile；Node 24 为主验证环境，Python 3.12 / jsonschema 4.23.0 提供既有 schema 检查依赖。vendor 校验在临时目录重建并比较，不先覆盖受版本管理的 vendor。
-
-本地复验应把独立 Node 24 的 bin 加入 PATH 后直接运行验证入口；不要用带 `--package` 的 `npm exec` 包住整条验证链，其包配置可能被内部 npx 继承，改变实际执行的工具。
-
-PR 无工作流级 paths 过滤，始终产生 `Template checks` 汇总结果；兼容检查只有在计划要求时才能跳过。PR 同号的新运行取消旧运行；main 和发布前运行用 run ID 隔离。远程 required checks / 分支保护由仓库维护者配置，本轮不修改远程设置。
-
-## 发布版本与证据
-
-`Template release verification` 必须先存在于默认分支。输入 SHA 与实际 HEAD 必须一致；该提交也必须具备本合同对应的脚本和 action。调用工作流的版本与待验证 SHA 可能不同，Actions run 保留编排版本，报告记录被验证版本。
-
-`node .template-source/scripts/verify-template-release.mjs --commit <40位SHA> --output <仓库外绝对目录>` 要求干净的模板工作树、所有必需子模块已初始化且与 gitlink 一致；仅允许兼容期私有 `yss-harness-dev-agent` 未初始化。全量验证后，从 gitlink 对应的 `create-yss-spec` commit 创建隔离副本，用待发布模板重建快照；打包、干净安装、初始化、Skill 投影/锁校验，以及同步前后用户 `.github` 保留检查必须通过。不会改原始生成器工作树。既有其他专职生成器场景继续由全量 profile 执行。
-
-生成器消费者验收使用 `npm pack --ignore-scripts` 和本地 tarball 安装，属于包格式验证的受控工具例外；模板工具测试仍用 pnpm。不会执行 npm publish，也不使用浮动生成器版本或 latest 包。
-
-证据保存在 runner 临时目录，通过 artifact 上传：PR 保留计划、base/head/tested commit 与日志；发布保留 `release-verification.json`、每条命令实际退出码、日志、模板 SHA、生成器 SHA、子模块版本与新快照摘要；兼容 job 分别上传日志。失败时也尝试上传，准备阶段失败或 runner 丢失造成证据缺失时不得宣称通过。最终通过要求全量、集成和阻断兼容 job 均成功；Node 26 观察失败可见但不阻断。
-
-本地实现验证不等同于已执行 GitHub Actions。正式发布前仍须对实际待发布提交运行以上入口，由维护者明确发起实际发布。
-
-## 项目实例 CI 合同
-
-本轮仅定义合同，不安装实例 CI。现有生成器继续排除 `.github`；升级同步不得接管已有工作流。自动安装将作为独立能力处理。
-
-实例 CI 的后续实现须遵循：
-
-- 先验证根 `yss-project.yaml` 的 `project-instance` 身份，以及根 `CONTEXT.md` 合同。
-- 只检查已有流程资产的 schema、引用、摘要与状态真实性。Plan、Spec、设计和契约草案允许合入；不存在的未来阶段产物不是失败。
-- 对声称批准或正在流转的工作单元，按生命周期注册表检查其实际门禁、用户决定、当前资产和证据；不能以“草案允许合入”绕过流转条件。
-- 不运行上游技能分发、上游同步、模板生成器回归或模板发布检查，也不要求 `.template-source`、模板子模块或模板维护 checkpoint。
-- 业务构建、单元测试和交付验收归属已登记的实现仓库；按其接入合同引用证据，不在治理实例中猜测业务构建命令。
-
-## 平台事实依据
-
-- [GitHub 事件与 PR merge / workflow_dispatch 语义](https://docs.github.com/en/actions/reference/workflows-and-actions/events-that-trigger-workflows)
-- [checkout 的 ref 和子模块选项](https://github.com/actions/checkout#usage)
-- [job outputs](https://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/pass-job-outputs)
-- [并发控制](https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#concurrency)
-- [失败后 artifact 上传及隐藏路径规则](https://github.com/actions/upload-artifact/blob/v4/README.md)
-
-以上平台语义于 2026-09-10 使用 yss-research technical-evidence / quick 查阅官方文档；验证责任与裁剪策略来自本轮用户确认。

package/template/docs/process/subagent-collaboration.md

@@ -1,13 +0,0 @@
-# Subagent 协作规则
-
-Subagent 和其它运行时实例只接收边界清晰的任务包。主控数字人负责仓库身份、门禁计算、Ticket 状态、Git checkpoint 和完成结论。数字人角色、`runtime_id` 与 Explorer / Drafter / Worker / Reviewer / Verifier 执行态正交，任务包必须同时写明。
-
-写入范围不得与其他执行者重叠；实现者不得同时担任同一切片的独立审查者，也不得会签自己起草的资产。写隔离以任务包为准。某运行时若共享磁盘或会话，不得把不同实例当成安全边界。
-
-## 任务包
-
-凡主控向数字人角色或独立运行时正式派发生命周期工作单元，都必须使用 `docs/process/schemas/digital-human-task-package.schema.json` 定义的任务包，并写明 `task_id`、`work_unit_id`、`actor_id`、数字人角色 ID、`runtime_id`、执行态、工作流状态、从 `docs/agents/digital-human-roles.yaml` 复制的 `core_skills` / `forbidden_skills`（可用 `taskPackageDefaults`）、合同类型和版本、输入资产、目标、允许写路径、禁止事项、验收标准、验证命令及其实际退出码 / 执行时间 / 证据引用、下游消费者和汇合方式。`slice-implementation` 才额外绑定 Slice Implementation Contract；禁止手写第二套技能包；任务包由 `scripts/verify-digital-human-task-package` 校验，`scripts/verify-subagent-task-package` 仅为兼容入口。
-
-## 汇合
-
-返回结果必须符合 `workflow-execution-result-v1`，至少包括 `work_unit`、`workflow_reference`、`result`、`skill`、`changed_files` / `changed_artifacts`、`evidence_refs`、实际验证结果、`deferred_seams`、`drift`、`violation`、`new_impacts`、`stale_candidates`、`blocking_signals` 和 `next_route`。主控必须重新执行 fresh verification，并在集中 checkpoint 中保留阶段因果。会签写入 `docs/.scratch/<feature>/gates/<gate-id>-approval.yaml`（形状见 `docs/templates/approval-record-template.yaml`），不能用聊天表情代替。恢复前校验 `scripts/verify-approval-record`。

package/template/docs/templates/release-note-template.md

@@ -1,14 +0,0 @@
----
-pipeline: <feature-id>
-stage: archive
-status: draft
-owner: ai
----
-
-# 发布说明：<功能名称>
-
-## 变更内容
-
-## 迁移说明
-
-## 验证结果

package/template/docs/templates/retro-report-template.md

@@ -1,16 +0,0 @@
----
-pipeline: <feature-id>
-stage: archive
-status: draft
-owner: ai
----
-
-# 复盘报告：<功能名称>
-
-## 做得好的地方
-
-## 需要改进的地方
-
-## 改进动作
-
-## 沉淀去向

package/template/docs/templates/verification-record-template.md

@@ -1,53 +0,0 @@
----
-pipeline: <feature-id>
-stage: verify
-status: draft
-owner: ai
----
-
-# <功能名称>Fresh Verification 记录
-
-> 适用场景：合并、发布、归档或宣称完成前。
-> 本文记录最新验证证据；没有 fresh verification，不得给出“完成 / 可合并 / 可发布”结论。
-
-## 1. 验证范围
-
-| 范围 | 说明 | 是否覆盖 |
-|------|------|----------|
-| Spec 验收标准 |  | 是 / 否 |
-| OpenAPI / 契约 |  | 是 / 否 / 不适用 |
-| 后端行为 |  | 是 / 否 / 不适用 |
-| 前端组件 / 页面 |  | 是 / 否 / 不适用 |
-| E2E 关键路径 |  | 是 / 否 / 不适用 |
-| 风险 / 回滚约束 |  | 是 / 否 / 不适用 |
-
-## 2. 命令与结果
-
-| 时间 | 命令 | 结果 | 备注 |
-|------|------|------|------|
-|  |  | pass / fail / skipped |  |
-
-## 3. 手工验证
-
-| 场景 | 步骤 | 结果 | 证据 |
-|------|------|------|------|
-|  |  |  |  |
-
-## 4. 未覆盖风险
-
-| 风险 | 原因 | 处理方式 |
-|------|------|----------|
-|  |  |  |
-
-## 5. 完成标准
-
-- [ ] 验证命令是本次完成前新鲜执行的结果。
-- [ ] 失败项已有修复或明确阻断。
-- [ ] skipped 项有合理原因和后续处理方式。
-- [ ] 发布 / 合并 / 归档所需证据已能追溯。
-
-## 6. 结论
-
-- 验证结论：Approved / Blocked
-- 可合并 / 可发布：是 / 否
-- 阻断项：