create-yss-spec 3.5.2 → 3.5.4

package/template/.template-spec/process/schemas/lifecycle-checkpoint.schema.json

@@ -25,16 +25,46 @@
     "service_project_initialization": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["project_id", "contract_ref", "contract_digest", "project_root", "context_handoff_digest"],
+      "required": [
+        "project_id",
+        "contract_ref",
+        "contract_digest",
+        "project_root",
+        "context_handoff_digest"
+      ],
       "properties": {
-        "project_id": { "type": "string", "minLength": 1 },
-        "contract_ref": { "type": "string", "minLength": 1 },
-        "contract_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-        "project_root": { "type": "string", "minLength": 1 },
-        "context_handoff_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
-        "manifest_ref": { "type": "string", "minLength": 1 },
-        "verification_ref": { "type": "string", "minLength": 1 },
-        "result_ref": { "type": "string", "minLength": 1 }
+        "project_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "contract_ref": {
+          "type": "string",
+          "minLength": 1
+        },
+        "contract_digest": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$"
+        },
+        "project_root": {
+          "type": "string",
+          "minLength": 1
+        },
+        "context_handoff_digest": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$"
+        },
+        "manifest_ref": {
+          "type": "string",
+          "minLength": 1
+        },
+        "verification_ref": {
+          "type": "string",
+          "minLength": 1
+        },
+        "result_ref": {
+          "type": "string",
+          "minLength": 1
+        }
       }
     },
     "plan_continuation_ref": {
@@ -126,6 +156,10 @@
               "items": {
                 "type": "string"
               }
+            },
+            "digest": {
+              "type": "string",
+              "pattern": "^sha256:[a-f0-9]{64}$"
             }
           }
         }
@@ -238,10 +272,168 @@
       "pattern": "^work-unit\\.[a-z0-9][a-z0-9-]*$"
     },
     "phase_boundary": {
-      "type": "object"
+      "type": "object",
+      "required": [
+        "decision",
+        "reason"
+      ],
+      "properties": {
+        "decision": {
+          "enum": [
+            "continue",
+            "clear",
+            "handoff",
+            "subagent",
+            "compact"
+          ]
+        },
+        "reason": {
+          "type": "string",
+          "minLength": 1
+        },
+        "source_ref": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "destination_ref": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "task_package_ref": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "convergence_ref": {
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "next_phase": {
+          "type": [
+            "string",
+            "null"
+          ]
+        }
+      },
+      "allOf": [
+        {
+          "if": {
+            "properties": {
+              "decision": {
+                "const": "handoff"
+              }
+            },
+            "required": [
+              "decision"
+            ]
+          },
+          "then": {
+            "required": [
+              "source_ref",
+              "destination_ref"
+            ],
+            "properties": {
+              "source_ref": {
+                "type": "string",
+                "minLength": 1
+              },
+              "destination_ref": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "properties": {
+              "decision": {
+                "const": "subagent"
+              }
+            },
+            "required": [
+              "decision"
+            ]
+          },
+          "then": {
+            "required": [
+              "task_package_ref",
+              "convergence_ref"
+            ],
+            "properties": {
+              "task_package_ref": {
+                "type": "string",
+                "minLength": 1
+              },
+              "convergence_ref": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        {
+          "if": {
+            "properties": {
+              "decision": {
+                "const": "compact"
+              }
+            },
+            "required": [
+              "decision"
+            ]
+          },
+          "then": {
+            "required": [
+              "next_phase"
+            ],
+            "properties": {
+              "next_phase": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        }
+      ]
     },
     "stage_trace": {
-      "type": "object"
+      "type": "object",
+      "required": [
+        "stage",
+        "upstream_refs",
+        "artifact_refs",
+        "gate_decisions",
+        "downstream_impacts"
+      ],
+      "properties": {
+        "stage": {
+          "type": "string",
+          "pattern": "^stage\\.[a-z0-9-]+$"
+        },
+        "upstream_refs": {
+          "type": "array"
+        },
+        "artifact_refs": {
+          "type": "array"
+        },
+        "gate_decisions": {
+          "type": "array"
+        },
+        "downstream_impacts": {
+          "type": "array"
+        },
+        "completed_work_unit": {
+          "type": "string"
+        }
+      }
     },
     "ticket_sync": {
       "type": "object",

package/template/.template-spec/process/schemas/reading-manifest.schema.json

@@ -0,0 +1,14 @@
+{
+ "$schema":"https://json-schema.org/draft/2020-12/schema",
+ "title":"派生阅读清单",
+ "type":"object","additionalProperties":false,
+ "required":["schema_version","checkpoint_ref","renderer","dependencies","outputs","navigation","diagnostics"],
+ "properties":{
+  "schema_version":{"const":1},"checkpoint_ref":{"type":"string"},
+  "renderer":{"type":"object","additionalProperties":{"type":"string","pattern":"^sha256:[a-f0-9]{64}$"}},
+  "dependencies":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["scope","ref","digest"],"properties":{"scope":{"enum":["project","tool"]},"ref":{"type":"string"},"digest":{"anyOf":[{"type":"null"},{"type":"string","pattern":"^sha256:[a-f0-9]{64}$"}]}}}},
+  "outputs":{"type":"object","additionalProperties":{"type":"string","pattern":"^sha256:[a-f0-9]{64}$"}},
+  "navigation":{"type":"object","additionalProperties":false,"required":["ref","block_digest"],"properties":{"ref":{"type":"string"},"block_digest":{"type":"string","pattern":"^sha256:[a-f0-9]{64}$"}}},
+  "diagnostics":{"type":"array","items":{"type":"object","required":["ref","reason"],"properties":{"ref":{"type":"string"},"reason":{"type":"string"}}}}
+ }
+}

package/template/.template-spec/process/schemas/reading-policy.schema.json

@@ -0,0 +1,10 @@
+{
+ "$schema":"https://json-schema.org/draft/2020-12/schema",
+ "title":"阅读材料启用策略",
+ "type":"object","additionalProperties":false,
+ "required":["schema_version","mode","checkpoints"],
+ "properties":{
+  "schema_version":{"const":1},"mode":{"enum":["manual","managed"]},
+  "checkpoints":{"type":"array","uniqueItems":true,"items":{"type":"string","pattern":"^docs/\\.scratch/[a-z0-9][a-z0-9-]*/[^/]+\\.(yaml|json)$"}}
+ }
+}

package/template/.template-spec/process/schemas/stage-decision-package-reading.schema.json

@@ -0,0 +1,148 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://yss.local/schemas/stage-decision-package-current.json",
+  "title": "YSS Stage Decision Package",
+  "type": "object",
+  "required": ["schema_version", "stage_decision_id", "package_version", "status", "problem_statement", "target_users", "mvp", "non_goals", "success_criteria", "test_seams", "confirmed_decisions", "assumptions", "constraints", "unresolved_items", "context_snapshot", "domain_strategy_ref", "impact_assessment", "downstream_mapping", "evidence_refs", "approval"],
+  "properties": {
+    "schema_version": {"enum": [2, 3]},
+    "stage_decision_id": {"type": "string", "pattern": "^stage-decision\\.[a-z0-9][a-z0-9-]*$"},
+    "package_version": {"type": "string", "pattern": "^v[0-9]+$"},
+    "status": {"enum": ["draft", "ready-for-human", "approved", "stale", "blocked"]},
+    "problem_statement": {"type": "string", "minLength": 1},
+    "target_users": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}},
+    "mvp": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}},
+    "non_goals": {"type": "array", "items": {"type": "string", "minLength": 1}},
+    "success_criteria": {"type": "array", "minItems": 1},
+    "test_seams": {"type": "array", "minItems": 1},
+    "confirmed_decisions": {"type": "array", "minItems": 1},
+    "assumptions": {"type": "array"},
+    "constraints": {"type": "array"},
+    "unresolved_items": {"type": "array", "items": {"$ref": "#/$defs/unresolved"}},
+    "context_snapshot": {"$ref": "#/$defs/contextSnapshot"},
+    "domain_strategy_ref": {"$ref": "#/$defs/domainRef"},
+    "impact_assessment": {"$ref": "#/$defs/impact"},
+    "downstream_mapping": {"type": "array", "minItems": 1},
+    "evidence_refs": {"type": "array", "minItems": 1, "items": {"type": "string", "minLength": 1}},
+    "approval": {"$ref": "#/$defs/approval"}
+  },
+  "$defs": {
+    "contextSnapshot": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["context_ref", "context_schema_version", "document_digest", "referenced_terms_digest", "term_refs"],
+      "properties": {
+        "context_ref": {"const": "CONTEXT.md"},
+        "context_schema_version": {"const": 1},
+        "document_digest": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"},
+        "referenced_terms_digest": {"type": "string", "pattern": "^sha256:[0-9a-f]{64}$"},
+        "term_refs": {"type": "array", "items": {"type": "string", "pattern": "^(Global|[A-Z][A-Za-z0-9]+)/[A-Z][A-Za-z0-9]+$"}, "uniqueItems": true}
+      }
+    },
+    "unresolved": {
+      "type": "object",
+      "required": ["item", "type", "owner", "next_action", "target_version"],
+      "properties": {
+        "item": {"type": "string", "minLength": 1},
+        "type": {"enum": ["blocker", "deferred"]},
+        "owner": {"type": "string", "minLength": 1},
+        "next_action": {"type": "string", "minLength": 1},
+        "target_version": {"type": "string", "minLength": 1}
+      }
+    },
+    "domainRef": {
+      "type": "object",
+      "required": ["domain_strategy_id", "domain_version", "digest", "status", "persisted_ref"],
+      "properties": {
+        "domain_strategy_id": {"type": "string", "pattern": "^domain-strategy\\.[a-z0-9][a-z0-9-]*$"},
+        "domain_version": {"type": "string", "pattern": "^v[0-9]+$"},
+        "digest": {"type": "string", "minLength": 1},
+        "status": {"enum": ["approved", "stale", "blocked"]},
+        "persisted_ref": {"type": "string", "minLength": 1}
+      }
+    },
+    "impact": {
+      "type": "object",
+      "required": ["ui", "api", "data", "backend", "frontend", "cross_repo", "high_risk"],
+      "properties": {
+        "ui": {"type": "boolean"},
+        "api": {"type": "boolean"},
+        "data": {"type": "boolean"},
+        "backend": {"type": "boolean"},
+        "frontend": {"type": "boolean"},
+        "cross_repo": {"type": "boolean"},
+        "high_risk": {"type": "boolean"}
+      }
+    },
+    "mapping": {
+      "type": "object",
+      "required": ["domain_change", "consumer", "propagation", "reapproval_condition"],
+      "properties": {
+        "domain_change": {"type": "string", "minLength": 1},
+        "consumer": {"type": "string", "minLength": 1},
+        "propagation": {"enum": ["direct", "transitive", "not-applicable", "stale"]},
+        "reapproval_condition": {"type": "string", "minLength": 1}
+      }
+    },
+    "recordV3": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "statement", "evidence_refs"],
+      "properties": {
+        "id": {"type": "string", "pattern": "^(success-criterion|test-seam|decision|assumption|constraint)\\.[a-z0-9][a-z0-9-]*$"},
+        "statement": {"type": "string", "minLength": 1},
+        "source_refs": {"type": "array", "uniqueItems": true, "items": {"type": "string", "pattern": "^(rule|scenario|invariant)\\.[a-z0-9][a-z0-9-]*$"}},
+        "evidence_refs": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+        "status": {"enum": ["confirmed", "candidate", "stale"]}
+      }
+    },
+    "mappingV3": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mapping_id", "source_refs", "consumer_capability", "propagation", "reapproval_condition", "evidence_refs"],
+      "properties": {
+        "mapping_id": {"type": "string", "pattern": "^mapping\\.[a-z0-9][a-z0-9-]*$"},
+        "source_refs": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "pattern": "^(rule|scenario|invariant)\\.[a-z0-9][a-z0-9-]*$"}},
+        "consumer_capability": {"enum": ["backend-technical-design", "frontend-engineering-design", "delivery-coordination"]},
+        "propagation": {"enum": ["direct", "transitive", "not-applicable", "stale"]},
+        "reapproval_condition": {"type": "string", "minLength": 1},
+        "evidence_refs": {"type": "array", "minItems": 1, "uniqueItems": true, "items": {"type": "string", "minLength": 1}}
+      }
+    },
+    "approval": {
+      "type": "object",
+      "required": ["approval_ref", "approver", "persisted_ref", "current_version"],
+      "properties": {
+        "approval_ref": {"type": "string", "minLength": 1},
+        "approver": {"type": "string", "minLength": 1},
+        "persisted_ref": {"type": "string", "minLength": 1},
+        "current_version": {"type": "string", "pattern": "^v[0-9]+$"}
+      }
+    }
+  },
+  "allOf": [
+    {
+      "if": {"properties": {"schema_version": {"const": 3}}, "required": ["schema_version"]},
+      "then": {
+        "properties": {
+          "success_criteria": {"items": {"$ref": "#/$defs/recordV3"}},
+          "test_seams": {"items": {"$ref": "#/$defs/recordV3"}},
+          "confirmed_decisions": {"items": {"$ref": "#/$defs/recordV3"}},
+          "assumptions": {"items": {"$ref": "#/$defs/recordV3"}},
+          "constraints": {"items": {"$ref": "#/$defs/recordV3"}},
+          "downstream_mapping": {"items": {"$ref": "#/$defs/mappingV3"}}
+        }
+      },
+      "else": {
+        "properties": {
+          "success_criteria": {"items": {"type": "string", "minLength": 1}},
+          "test_seams": {"items": {"type": "string", "minLength": 1}},
+          "confirmed_decisions": {"items": {"type": "string", "minLength": 1}},
+          "assumptions": {"items": {"type": "string", "minLength": 1}},
+          "constraints": {"items": {"type": "string", "minLength": 1}},
+          "downstream_mapping": {"items": {"$ref": "#/$defs/mapping"}}
+        }
+      }
+    }
+  ]
+}

package/template/.template-spec/process/stage-tracking.md

@@ -60,3 +60,11 @@ apply 复验项目身份、计划摘要、全部观察文件及源证据摘要
 ```
 
 不同负责人和被其他项依赖的工作会自动拆分；独立验收使用 `split_reasons: [independent-acceptance]`。登记只创建 pending 项，不能把输入文件当成已通过的验收证据。启用项目缺少 checkpoint 时，check 返回非零退出码；先审阅并应用登记计划，再进入阶段写入。
+
+已显式启用的阅读包在 `stage-tracking apply` 源事务成功后更新；人工直接编辑 checkpoint 后运行 `scripts/contract render --checkpoint <ref>`。阅读页失败不会回滚已应用的源事务，按结果中的 `reading_update.recovery` 修复。map 人工正文与生成导航块分开维护；详见 [合同阅读](contract-reading.md)。
+
+## 输入与状态的生命周期
+
+一次性 `--items` 输入和未正式化的证据草稿优先放在系统临时工作区；持久 checkpoint 是当前机器状态源，父 Ticket 保留五态与引用入口。输入一旦被批准记录、正式证据或冻结包引用，即作为正式资产保留。已有迁移备份与回执支持恢复及幂等，不能因重复内容被清理。
+
+新父 Ticket 不重复维护阶段、阻塞和下一工作单元；`scripts/lifecycle-status` 与 `scripts/stage-tracking check` 均按需只读。阅读包继续显式启用，默认 `manual`。旧票改造与草稿归档遵循 [功能资产整理](feature-assets.md)，不调用 apply 来修正历史冲突。

package/template/.template-spec/process/strategic-handoff-package.md

@@ -6,7 +6,7 @@
 
 1. 源仓必须为 `project-instance`。新交付使用 Domain Strategy v3 与 Stage Decision Package v3；规则、场景、决定、假设、约束、成功标准、测试 seam 与 downstream mapping 使用稳定 ID 和证据。v2 仅用于历史 Handoff v3 的只读验证；修改或重发须显式迁移、重新批准。不得用行号、文字 hash 或导出顺序生成业务身份。
 2. 每个场景明确 `critical`、`rule_refs`、`success_results` 和既有 `failure_results`；兼容字段 `rules` 必须与引用规则正文一致。不变量使用 `rule_ref`，并通过 `scenario_refs` 指向确实覆盖该规则的场景。缺身份或关联先回战略方确认、更新并重新批准，导出器不猜测。
-3. 新原型与既有 UI 交接都使用 Handoff v5，分别选择 `prototype` 或 `existing-ui-baseline`。历史 Handoff v3/v4 与既有裸 v5 包继续按冻结 schema 执行 `verify/import`，但 v3/v4 不再创建新 export；修改或重新交付必须迁移到 v5 并重新批准。校验器先读取 `schema_version` 再选择固定 schema，未知版本输出支持列表并 fail closed。`package_export` 的 `approvals` 按 `source` 字段及 `handoff` 绑定批准记录，声明 `record_ref`、`gate_id`、`digest_kind`。当前战略 profile 的领域战略、阶段决策和业务 Ticket 绑定 `gate.plan-approved`，Spec 绑定 `gate.spec-baseline-approved`，原型、视觉或既有 UI 基线绑定 `gate.product-design-approved`，交接自身绑定 `gate.strategic-design-handoff-approved`。历史包仍按包内明确登记的源批准规则验证，但旧门禁只能作为历史证据，不能作为当前输入继续流转。
+3. 新原型与既有 UI 交接都使用 Handoff v5，分别选择 `prototype` 或 `existing-ui-baseline`。历史 Handoff v3/v4 与既有裸 v5 包继续按冻结 schema 执行 `verify/import`，但 v3/v4 不再创建新 export；修改或重新交付必须迁移到 v5 并重新批准。校验器先读取 `schema_version` 再选择固定 schema，未知版本输出支持列表并 fail closed。`package_export` 的 `approvals` 按 `source` 字段及 `handoff` 绑定批准记录，声明 `record_ref`、`gate_id`、`digest_kind`。当前战略 profile 的领域战略和阶段决策绑定 `gate.plan-approved`；声明 `business-ticket-approval-v1` 的业务 Ticket 集绑定当前 `gate.strategic-design-handoff-approved`（未声明能力的历史包保持原规则），Spec 绑定 `gate.spec-baseline-approved`，原型、视觉或既有 UI 基线绑定 `gate.product-design-approved`，交接自身绑定 `gate.strategic-design-handoff-approved`。历史包仍按包内明确登记的源批准规则验证，但旧门禁只能作为历史证据，不能作为当前输入继续流转。
 4. 批准记录除既有会签字段，还要在 `artifact_bindings` 中逐项绑定 `{id, version, digest}`。战略/阶段建议 `canonical-json`；普通文件使用 `sha256-bytes`；视觉基线使用 `visual-baseline`。正文中的 `approved` 和可读取批准路径不能替代当前字节的批准绑定。源角色表要求用户决定记录时，接收端必须支持并核验该策略；旧工具缺少该能力时阻断并要求升级，不能按旧规则放行。
 5. `additional_files` 明确补充依赖；`reference_map` 将 `evidence.*` 稳定证据引用解析为仓内路径。源资产、批准记录、证据引用、Markdown 本地链接和显式目录共同形成依赖闭包。HTTP 引用保留为引用，不在导出时下载网页。
 6. 原型分支的 `prototype` 指定 `profile`、`preview_root`、`entry_ref`、`verification_ref`、`verification_digest`（验证记录的字节摘要）；H2 另须 `source_root`、`lock_ref` 和 `source_digest`（源码目录树摘要，算法同下述预览树）。源码交付目录不含 node_modules / .git；锁文件与源码一同保存。预览目录须资源闭合，可通过本地静态服务离线浏览。源码、锁文件或验证记录变化须更新交接摘要并重新批准。
@@ -114,3 +114,5 @@ scripts/strategic-feedback verify-adjudication --root <消费者项目根> <adju
 源 `work-unit.technical-design` 保留不变，目标主控 `consumer_entry_routes` 持有精确映射；`plan-to-backend` 和完整主模板进入 `work-unit.technical-analysis`，专职后端进入自己的 `work-unit.technical-design`。目标工作单元不存在或超出 profile/职责范围时阻断。后端插件的 scope 只选择 backend-technical-design；源包保留完整前端、协调路线，不宣称已接管或完成。
 
 正式交付目录导入生成 Receipt v3；现有运输 package.zip 按已有协议生成 v2 收据，源包、批准、逻辑摘要仍须完整校验，不能补造 source-delivery-record。消费校验、反馈裁决和 Slice Contract 的实现门禁保持不变。
+
+业务集合、逐票正文和专业审查按 [业务 Ticket 协议](business-tickets.md) 校验并导出依赖闭包。研发承接 rows 同时登记业务 Ticket ID 与原规则/场景；source_digest 为业务票原字节摘要，dependent_slice_refs 按真实依赖登记，未知依赖阻断相关整体范围。

package/template/.template-spec/process/subagent-collaboration.md

@@ -11,3 +11,11 @@ Subagent 和其它运行时实例只接收边界清晰的任务包。主控数
 ## 汇合
 
 返回结果必须符合 `workflow-execution-result-v1`，至少包括 `work_unit`、`workflow_reference`、`result`、`skill`、`changed_files` / `changed_artifacts`、`evidence_refs`、实际验证结果、`deferred_seams`、`drift`、`violation`、`new_impacts`、`stale_candidates`、`blocking_signals` 和 `next_route`。主控必须重新执行 fresh verification，并在集中 checkpoint 中保留阶段因果。会签写入 `docs/.scratch/<feature>/gates/<gate-id>-approval.yaml`（形状见 `.template-spec/templates/approval-record-template.yaml`），不能用聊天表情代替。恢复前校验 `scripts/verify-approval-record`。
+
+## 只读分诊任务包 v2
+
+schema v1 及三种正式合同继续执行原规则。v2 仅用于 `read-only-intake`：`Explorer`、注册表已有 `work-unit.entry-triage` 或专职 Profile 的 `work-unit.harness-entry`、`allowed_write_paths: []`，不带 checkpoint、Slice 或正式审查合同。研究完成只回传来源和结论，不更新阶段、Ticket、批准或 `next_route`；写正式资产前由主控重新分析影响并生成正式任务包。旧消费者必须拒绝 v2 并升级，禁止改写为 v1 绕过边界。
+
+`prepare-read-only-intake --input <选择.yaml> --output <仓库外/task.json>` 从角色默认值生成任务包；输入沿用任务 ID、角色、运行时、分诊入口、合同 ID/版本/来源、输入、目标、禁止事项、预期输出、下游消费者和汇合字段。`run-read-only-intake --task <task.json> --run-dir <仓库外新目录> [--timeout-ms <毫秒>] -- <命令> <参数>` 保存观测与日志；不传命令时明确未执行验证。复核使用 `verify-digital-human-task-package <run-dir/task-result.json> --run-dir <绝对目录>`。
+
+运行证据使用 `run:` 相对引用，禁止绝对路径、`..` 与符号链接逃逸。命令、退出码、时间、stdout/stderr 与摘要必须一致；源码引用不能冒充运行日志。派发器观察 Git 跟踪、未跟踪及忽略文件的新增、删除、修改及已初始化子仓，结果中的空变更声明不能覆盖实际差异。未初始化子仓阻断观测。此工具是合同与结果审计，不是 OS 沙箱：执行期间改后恢复及可信派发器证据被恶意同步伪造不在终态观测能力内；运行目录应由派发器持有，不扩大 Agent 仓库写权限，运行时仍须采用只读权限。恢复后重新观察，不能直接复用旧完成状态。

package/template/.template-spec/process/templates/frontend-implementation-verification-template.yaml

@@ -19,12 +19,25 @@ case_results:
   - case_id: primary-desktop
     baseline_image_ref: docs/.scratch/example/handoff/visual-baseline-v1/images/primary-desktop.png
     implementation_image_ref: docs/.scratch/example/verification/images/primary-desktop.png
+    implementation_image_digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
+    diff_digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
     diff_ref: docs/.scratch/example/verification/diffs/primary-desktop.png
     mask_ref: not-applicable
     result: blocked
     uncovered_difference: false
     explanation: <difference-or-not-applicable>
-interaction_results: [loading, empty, error, permission, selected, key-interaction]
+implementation_plan:
+  ref: docs/.scratch/example/verification/frontend-plan.yaml
+  digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
+interaction_results:
+  - case_id: primary-desktop
+    state: key-interaction
+    result: blocked
+    evidence_ref: docs/.scratch/example/verification/interaction.json
+    evidence_digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
+console_evidence:
+  ref: docs/.scratch/example/verification/console.json
+  digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
 console_warning_check: blocked
 pnpm_commands: [pnpm lint, pnpm type-check, pnpm test]
 actual_verification:
@@ -32,6 +45,7 @@ actual_verification:
     exit_code: 0
     executed_at: <iso-8601>
     evidence_ref: docs/.scratch/example/verification/pnpm-test.txt
+    evidence_digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
 uncovered_differences: []
 difference_owner: null
 independent_review:

package/template/.template-spec/process/templates/stage-checkpoint-template.md

@@ -24,9 +24,12 @@ context_reconciliation:
 phase_boundary:
   decision: <continue|clear|handoff|subagent|compact>
   reason: <decision evidence>
-  next_phase: <next phase or pause reason>
+  # compact 填当前 registry 的 stage ID；handoff 填 source_ref / destination_ref；
+  # subagent 填 task_package_ref / convergence_ref。引用均为本地可读交接证据。
+  next_phase: <stage ID，仅 compact 时填写>
 stage_trace:
   stage: <current stage>
+  completed_work_unit: <已完成前驱，仅声明当前流转时填写>
   upstream_refs: []
   artifact_refs: []
   gate_decisions: []
@@ -50,3 +53,5 @@ rollback: []
 ```
 
 阶段 checkpoint 只在会签暂停、handoff、进入实现、合并或发布边界集中回写；出现阻塞、责任人变化或资产单独批准时立即回写，并保留阶段因果。`paused-human-gate` 表示等待 YAML `gate_policy` 指定的会签人（数字人或生物人），不是「必须是生物人」。会签桶内门禁标为 `approved` 时必须有可读的 `approval_ref`。
+
+当前边界必须具有非空 decision/reason 及完整 stage_trace；普通入口分诊不要求尚未产生的交接证据。`verify-lifecycle-checkpoint --history` 仅检查旧记录结构，不证明当前流转或批准。

package/template/.template-spec/templates/business-ticket-review-template.yaml

@@ -0,0 +1,11 @@
+schema_version: 1
+kind: business-ticket-review
+result: blocked
+subject_ref: docs/.scratch/<feature>/business-ticket-set.yaml
+subject_digest: sha256:<raw-bytes>
+drafter: <drafter-runtime-id>
+reviewer: <independent-reviewer-runtime-id>
+evidence:
+  - ref: docs/.scratch/<feature>/verification/business-ticket-review.md
+    version: v1
+    digest: sha256:<raw-bytes>

package/template/.template-spec/templates/business-ticket-set-template.yaml

@@ -0,0 +1,16 @@
+schema_version: 1
+kind: business-ticket-set
+id: business-ticket-set.<feature>
+version: v1
+status: draft
+spec:
+  ref: docs/.scratch/<feature>/spec.md
+  version: v1
+  digest: sha256:<raw-bytes>
+tickets:
+  - id: BT-001
+    ref: docs/.scratch/<feature>/business-tickets/BT-001.md
+    version: v1
+    digest: sha256:<raw-bytes>
+coverage_deferred: []
+review_ref: docs/.scratch/<feature>/verification/business-ticket-review.yaml

package/template/.template-spec/templates/business-ticket-template.md

@@ -0,0 +1,38 @@
+---
+schema_version: 1
+kind: business-ticket
+id: BT-<stable-id>
+version: v1
+status: draft
+spec:
+  ref: docs/.scratch/<feature>/spec.md
+  version: v1
+  digest: sha256:<raw-bytes>
+requirement_refs: [FR-001]
+acceptance_refs: [AC-001]
+dependencies: []
+source_refs: []
+open_questions: []
+---
+
+# <用户行为与可验收结果>
+
+## 业务结果
+
+<哪个角色完成什么行为，获得什么可观察结果。>
+
+## 范围
+
+<业务边界、适用规则、成功与失败/恢复路径；source_refs 按需绑定规则、场景和设计，使用精确 ID 或标题。>
+
+## 非目标
+
+<明确不覆盖的业务范围。>
+
+## 验收
+
+<引用原始 AC 并解释本票交付的行为；不得在这里改变已批准规则。>
+
+## 风险
+
+<风险、约束与处置；未决项在 frontmatter.open_questions 登记责任人、解决时点和 blocking。>

package/template/.template-spec/templates/examples/lifecycle-writing-examples.md

@@ -136,3 +136,19 @@
 | T4 | 验证段 | seam 明确，未臆造工程命令 |
 | T5 | 状态段 | 两项阻塞均展示，未只保留一个下一步 |
 | T6 | 范围、验证及状态段 | 状态未提前推进；未扩大范围 |
+
+## 4. 附件提交校验的来源、稳定 ID 与变更追溯
+
+以下配套文件全部是虚构输入，仅供模板和诊断练习；不代表产品决定、测量结果或已批准资产。前文 S1–S7 与“读取失败行为待确认”的限制在固定来源表中保留，不能把样本中的数字当成生产承诺。
+
+| 目的 | 可读资产 |
+|---|---|
+| 原始输入与保真基线 | [附件业务输入](plan-spec/ordinary-source.md) |
+| Plan 指标未知但有补齐动作 | [轻量 Plan](plan-spec/ordinary-plan.md) |
+| 来源 → FR → AC → 未决项 | [附件 Spec](plan-spec/ordinary-valid.md) |
+| 有意缺陷：重复 ID、断链、来源缺失 | [附件反例](plan-spec/ordinary-defective.md) |
+| 复杂状态、并发和恢复未知 | [状态输入](plan-spec/complex-source.md)、[状态 Spec](plan-spec/complex-valid.md)、[反例](plan-spec/complex-defective.md) |
+| 冻结基线上的权限变化 | [权限输入](plan-spec/high-risk-source.md)、[旧基线](plan-spec/high-risk-before.md)、[候选新 Spec](plan-spec/high-risk-valid.md)、[反例](plan-spec/high-risk-defective.md) |
+| 预登记发现与样本类别 | [样本清单](plan-spec/expectations.json) |
+
+附件案例的变化练习：若将 FR-002 的“一次列出全部缺失名称”改成“仅显示一项”，应同时审查 S3 和 AC-001。`diff` 能展示原文字节、FR 和 AC 引用的变化，但不能决定业务含义等价，也不能据此继续使用原批准。读取附件清单失败的行为仍为 Q-001，不能由成功路径的测试例子擅自确定。

package/template/.template-spec/templates/examples/plan-spec/complex-defective.md

@@ -0,0 +1,38 @@
+---
+content_profile: plan-spec-v1
+---
+
+# 审批状态流程
+
+> 虚构输入；仅为确定性 fixture，不代表已批准业务。
+
+## 功能需求
+
+| ID | 需求 | 优先级 | 来源引用 | 验收引用 | 未决项 |
+|---|---|---|---|---|---|
+| FR-001 | 仅草稿可提交；其他状态拒绝重复提交且状态不变 | P0 | .template-spec/templates/examples/plan-spec/complex-source.md :: id:C1 | AC-001 | 无 |
+| FR-002 | 提交成功进入待审核；审批通过进入已生效；驳回回草稿并保留原因 | P0 | .template-spec/templates/examples/plan-spec/complex-source.md :: id:C2；.template-spec/templates/examples/plan-spec/complex-source.md :: id:C3 | AC-002, AC-003 | 无 |
+| FR-003 | 并发审批仅首个合法转换生效，后续提示状态变化 | P0 | .template-spec/templates/examples/plan-spec/complex-source.md :: id:C999 | 无 | 无 |
+
+## 非功能需求
+
+not-applicable
+
+## 验收标准
+
+| ID | 需求引用 | 前提 | 触发 | 可观察结果 | 场景类型 | 未决项 |
+|---|---|---|---|---|---|---|
+| AC-001 | FR-001 | 单据为已生效 | 重复提交 | 拒绝，状态不变 | 拒绝 | 无 |
+| AC-002 | FR-002 | 草稿满足其他提交条件 | 提交后由审核员通过 | 依次进入待审核、已生效 | 状态变化 | 无 |
+| AC-003 | FR-002 | 待审核单据 | 审核员驳回并填写原因 | 回到草稿且原因可查看 | 恢复 | 无 |
+| AC-004 | FR-003 | 两位审核员并发操作同一待审核版本 | 首个通过，第二个驳回 | 首个转换生效，第二个显示状态已变化 | 边界 | 无 |
+
+## 未决项
+
+| ID | 问题 | 判断依据 | 责任人 | 解决时点 | 接收方 / 解决证据 |
+|---|---|---|---|---|---|
+| Q-001 | 审批超时恢复策略未知，需确认失败恢复方式 | .template-spec/templates/examples/plan-spec/complex-source.md :: id:C5；不承诺自动重试 | 业务负责人（虚构角色） | 冻结前 | Spec 起草者 / 待确认 |
+
+## 非目标范围
+
+不改变历史已生效单据，不增加补偿自动撤销。来源：.template-spec/templates/examples/plan-spec/complex-source.md :: id:C6