devlyn-cli 4.3.0 → 4.3.3

package/native/claude/skills/devlyn-ideate/scripts/acceptance.py

@@ -0,0 +1,882 @@
+#!/usr/bin/env python3
+"""Loop acceptance: derive a task result from its committed source and evidence.
+
+`run` executes the declared checks on the committed candidate; the executor may
+call it before review. `accept` derives the drain result: it binds the contract,
+requires the owned committed source, reuses the intact outcomes of a wholly clean
+runner result for the same source and contract, executes the rest, evaluates
+file/diff guards, confirms the source is unchanged and checks review records. A
+malformed executor record fails acceptance with its reason. An executor's summary
+verdict is never evidence. Protocol: ../references/loop.md.
+"""
+from __future__ import annotations
+
+import argparse
+import functools
+import hashlib
+import json
+import os
+from pathlib import Path
+import re
+import runpy
+import subprocess
+import sys
+import tempfile
+import unittest
+
+SKILLS = Path(__file__).resolve().parents[2]
+LOOP_DIR = ".devlyn/loop"
+QUEUE = "docs/specs/queue.md"
+SHA_RE = re.compile(r"[0-9a-f]{40}|[0-9a-f]{64}")
+BLOCKERS = ("failed", "needs-review", "blocked-infrastructure")
+REVIEW_KEYS = {"schema_version", "kind", "task", "engine", "model", "source_sha", "contract_sha256",
+               "expected_sha256", "requirements", "findings"}
+# findings, cleanup, handoff and summary are unread; allow them so earlier-template submissions validate.
+SUBMISSION_KEYS = {"schema_version", "task", "source_sha", "runner_results", "reviews", "findings", "cleanup",
+                   "handoff", "assumptions", "blockers", "summary"}
+PACKET_KEYS = {"task", "worktree", "branch", "inputs_sha", "allocation_base", "contract", "expected", "meta",
+               "requirements", "review_requirements"}
+
+
+class AcceptanceError(Exception):
+    pass
+
+
+@functools.lru_cache(maxsize=None)
+def shared(name):
+    return runpy.run_path(str(SKILLS / "_shared" / f"{name}.py"))
+
+
+def git(work, *args, ok=(0,)):
+    result = subprocess.run(["git", "-C", str(work), *args], capture_output=True)
+    if result.returncode not in ok:
+        raise AcceptanceError(f"git {' '.join(args[:2])}: {result.stderr.decode('utf-8', 'replace').strip()}")
+    return result
+
+
+def text(work, *args):
+    return git(work, *args).stdout.decode("utf-8").strip()
+
+
+def sha256(raw):
+    return hashlib.sha256(raw).hexdigest()
+
+
+def read_json(path):
+    try:
+        return shared("expected-contract")["loads_strict_json"](Path(path).read_text(encoding="utf-8"))
+    except (OSError, UnicodeError, ValueError) as exc:
+        raise AcceptanceError(f"{path}: {exc}") from exc
+
+
+def atomic_write(path, data):
+    path = Path(path)
+    path.parent.mkdir(parents=True, exist_ok=True)
+    fd, temporary = tempfile.mkstemp(dir=path.parent, prefix=f".{path.name}.")
+    try:
+        with os.fdopen(fd, "wb") as stream:
+            stream.write(data)
+        os.replace(temporary, path)
+    finally:
+        Path(temporary).unlink(missing_ok=True)
+
+
+def write_json(path, value):
+    atomic_write(path, (json.dumps(value, indent=2, sort_keys=True, ensure_ascii=False) + "\n").encode("utf-8"))
+
+
+def load_packet(path):
+    packet = read_json(path)
+    if not isinstance(packet, dict) or PACKET_KEYS - set(packet):
+        raise AcceptanceError(f"{path}: task packet lacks {sorted(PACKET_KEYS - set(packet if isinstance(packet, dict) else {}))}")
+    helper = shared("harness-store")
+    try:
+        helper["verify_packet"](packet, path, SKILLS)
+    except (helper["HarnessError"], OSError) as exc:
+        raise AcceptanceError(str(exc)) from exc
+    return packet
+
+
+def contract_digests(packet):
+    return {key: packet[key]["sha256"] for key in ("contract", "expected", "meta")}
+
+
+def relative(work, path):
+    return Path(path).resolve().relative_to(Path(work).resolve()).as_posix()
+
+
+def evidence_file(work, path, under=LOOP_DIR):
+    candidate = Path(path) if Path(path).is_absolute() else Path(work) / path
+    resolved = candidate.resolve()
+    if not resolved.is_relative_to((Path(work) / under).resolve()) or not resolved.is_file():
+        raise AcceptanceError(f"evidence must be a file under {under} in the task worktree: {path}")
+    return resolved
+
+
+def bound_contract(packet):
+    """Return the committed expected contract after checking every input against the packet digests."""
+    work = Path(packet["worktree"])
+    raw = {}
+    for key in ("contract", "expected", "meta"):
+        rel = relative(work, packet[key]["path"])
+        raw[key] = git(work, "show", f"{packet['inputs_sha']}:{rel}").stdout
+        if sha256(raw[key]) != packet[key]["sha256"]:
+            raise AcceptanceError(f"{rel} at the inputs commit differs from the task packet")
+    contract = shared("expected-contract")
+    try:
+        expected = contract["loads_strict_json"](raw["expected"].decode("utf-8"))
+    except (UnicodeError, ValueError) as exc:
+        raise AcceptanceError(f"expected contract: {exc}") from exc
+    error = contract["validate_expected_shape"](expected)
+    if error:
+        raise AcceptanceError(f"expected contract: {error}")
+    return expected
+
+
+def source_problems(packet, source):
+    """The candidate must be the owned task commit, descend from the inputs, leave them untouched and be clean."""
+    work = Path(packet["worktree"])
+    if not SHA_RE.fullmatch(source) or git(work, "cat-file", "-e", source + "^{commit}", ok=(0, 1, 128)).returncode:
+        return [f"candidate {source!r} is not a commit"]
+    problems = []
+    head = git(work, "symbolic-ref", "-q", "HEAD", ok=(0, 1)).stdout.decode("utf-8").strip()
+    branch = text(work, "rev-parse", "refs/heads/" + packet["branch"])
+    if (source, head) != (branch, "refs/heads/" + packet["branch"]):
+        problems.append(f"candidate {source} is not the owned task commit checked out on its branch (branch {branch}, HEAD {head or 'detached'})")
+    if git(work, "merge-base", "--is-ancestor", packet["inputs_sha"], source, ok=(0, 1)).returncode:
+        problems.append(f"candidate {source} does not descend from the committed inputs")
+    else:
+        package = relative(work, packet["meta"]["path"]).rpartition("/")[0] + "/"
+        edits = [path for path in changed_paths(work, packet["inputs_sha"], source) if path == QUEUE or path.startswith(package)]
+        if edits:
+            problems.append("candidate edits loop inputs: " + ", ".join(edits))
+    if dirty := git(work, "status", "--porcelain", "--untracked-files=all").stdout.decode("utf-8", "replace").splitlines():
+        problems.append("worktree has uncommitted or untracked changes (undeclared source delta): " + ", ".join(line[3:] for line in dirty))
+    return problems
+
+
+def changed_paths(work, old, new):
+    raw = git(work, "diff", "--name-only", "-z", "--no-renames", old, new).stdout
+    return [path.decode("utf-8", "surrogateescape") for path in raw.split(b"\0") if path]
+
+
+def evaluate(command, outcome, combined):
+    if outcome["kind"] != "exit":
+        return False, outcome["kind"]
+    expected_exit = command.get("exit_code", 0)
+    if outcome["exit_code"] != expected_exit:
+        return False, f"exit {outcome['exit_code']}, expected {expected_exit}"
+    missing = [value for value in command.get("stdout_contains", []) if value.encode("utf-8") not in combined]
+    if missing:
+        return False, f"output lacks {missing!r}"
+    found = [value for value in command.get("stdout_not_contains", []) if value.encode("utf-8") in combined]
+    if found:
+        return False, f"output contains forbidden {found!r}"
+    return True, None
+
+
+def execute(work, command, index, run_dir):
+    timeout = shared("expected-contract")["verification_timeout_sec"](command)
+    env = {**os.environ, "PYTHONDONTWRITEBYTECODE": "1"}  # A Python check would leave __pycache__/ in the source it checks.
+    try:
+        if "argv" in command:
+            proc = subprocess.run(shared("platform-support")["native_argv"](command["argv"], cwd=work), cwd=work,
+                                  capture_output=True, timeout=timeout, env=env)
+        else:
+            proc = subprocess.run(command["cmd"], cwd=work, shell=True, capture_output=True, timeout=timeout, env=env)
+        out, err = proc.stdout, proc.stderr
+        outcome = ({"kind": "exit", "exit_code": proc.returncode} if proc.returncode >= 0
+                   else {"kind": "signal", "signal": -proc.returncode})
+    except subprocess.TimeoutExpired as exc:
+        out, err, outcome = exc.stdout or b"", exc.stderr or b"", {"kind": "timeout", "timeout_sec": timeout}
+    except OSError as exc:
+        out, err, outcome = b"", str(exc).encode("utf-8"), {"kind": "spawn_error", "error": str(exc)}
+    record = {"index": index, "outcome": outcome}
+    for name, raw in (("stdout", out), ("stderr", err)):
+        path = run_dir / f"cmd-{index}.{name}"
+        path.write_bytes(raw)
+        record[name] = {"path": relative(work, path), "sha256": sha256(raw), "bytes": len(raw)}
+    record["passed"], record["reason"] = evaluate(command, outcome, out + err)
+    return record
+
+
+def new_run_dir(work):
+    runs = Path(work) / LOOP_DIR / "runs"
+    runs.mkdir(parents=True, exist_ok=True)
+    number = 1 + max((int(path.name) for path in runs.iterdir() if path.name.isdigit()), default=0)
+    run_dir = runs / str(number)
+    run_dir.mkdir()
+    return run_dir
+
+
+def intact(work, record):
+    try:
+        return all(sha256(evidence_file(work, record[name]["path"]).read_bytes()) == record[name]["sha256"]
+                   for name in ("stdout", "stderr"))
+    except (AcceptanceError, KeyError, TypeError, OSError):
+        return False
+
+
+def reusable(packet, source, paths):
+    """Passed outcomes of wholly clean runner results (no reasons, so no failed check or source change during
+    the checks) for this exact source and contract, with intact raw streams."""
+    work = Path(packet["worktree"])
+    reused = {}
+    for path in paths:
+        result_path = evidence_file(work, path)
+        result = read_json(result_path)
+        if not isinstance(result, dict) or (result.get("kind"), result.get("task"), result.get("source_sha"), result.get("contract"),
+                                            result.get("reasons")) != ("loop-checks", packet["task"], source, contract_digests(packet), []):
+            continue
+        records = result.get("commands")
+        if not isinstance(records, list) or not all(isinstance(record, dict) and type(record.get("index")) is int for record in records):
+            raise AcceptanceError(f"runner result {relative(work, result_path)} has malformed command records")
+        for record in records:
+            if record.get("passed") is True and intact(work, record):
+                reused.setdefault(record["index"], dict(record, reused_from=relative(work, result_path)))
+    return reused
+
+
+def run_checks(packet, expected, reused):
+    work = Path(packet["worktree"])
+    records, run_dir = [], None
+    for index, command in enumerate(expected.get("verification_commands", [])):
+        if index in reused:
+            records.append(reused[index])
+            continue
+        run_dir = run_dir or new_run_dir(work)
+        records.append(execute(work, command, index, run_dir))
+    for record, command in zip(records, expected.get("verification_commands", [])):
+        record["command"] = {key: command[key] for key in ("cmd", "argv") if key in command}
+        record["contract_refs"] = command.get("contract_refs", [])
+    return records, run_dir
+
+
+def guard_results(packet, expected, source):
+    work, inputs = Path(packet["worktree"]), packet["inputs_sha"]
+    contract = shared("expected-contract")
+    diff = git(work, "diff", "--no-color", "--no-ext-diff", inputs, source).stdout.decode("utf-8", "surrogateescape")
+    changed = set(changed_paths(work, inputs, source))
+    results = []
+    for index, pattern in enumerate(expected.get("forbidden_patterns", [])):
+        try:
+            matched = re.search(pattern["pattern"], contract["slice_diff_to_files"](diff, pattern.get("files") or [])) is not None
+        except re.error as exc:
+            raise AcceptanceError(f"forbidden_patterns/{index} is not a valid regex: {exc}") from exc
+        results.append({"rule": f"forbidden_patterns/{index}", "subject": pattern["description"], "passed": not matched,
+                        "blocking": pattern["severity"] == "disqualifier"})
+    for path in expected.get("required_files", []):
+        present = git(work, "cat-file", "-e", f"{source}:{path}", ok=(0, 1, 128)).returncode == 0
+        results.append({"rule": "required_files", "subject": path, "passed": present, "blocking": True})
+    for path in expected.get("forbidden_files", []):
+        results.append({"rule": "forbidden_files", "subject": path, "passed": path not in changed, "blocking": True})
+    limit = expected.get("max_deps_added", 0)
+    try:
+        before = dependency_names(work, inputs)
+    except ValueError as exc:
+        subject, passed = (f"inputs package.json at {inputs} unreadable; limit cannot apply. "
+                           f"Fix base: regular npm-valid file; start a new loop. {exc}"), False
+    else:
+        try:
+            added = len(dependency_names(work, source) - before)
+            subject, passed = f"{added} added, limit {limit}", added <= limit
+        except ValueError as exc:
+            subject, passed = f"candidate package.json at {source} is invalid; fix it in the candidate. {exc}", False
+    results.append({"rule": "max_deps_added", "subject": subject, "passed": passed, "blocking": True})
+    return results
+
+
+def dependency_names(work, commit):
+    """Package names under dependencies and devDependencies of the root package.json at `commit`; a missing file has none."""
+    entry = git(work, "ls-tree", commit, "--", "package.json").stdout
+    if not entry:
+        return set()
+    mode, kind, _ = entry.split(maxsplit=2)
+    if mode not in (b"100644", b"100755") or kind != b"blob":
+        kind = "symlink" if mode == b"120000" else "gitlink" if mode == b"160000" else kind.decode("ascii")
+        if mode == b"120000":
+            target = git(work, "show", f"{commit}:package.json").stdout.decode("utf-8", "backslashreplace")
+            kind += f" to {target!r}"
+        raise ValueError(f"{kind} (mode {mode.decode('ascii')}); expected a regular file")
+    try:
+        # Read as npm reads it: a leading BOM is ignored, a duplicate key's last value wins, a null section is empty and
+        # NaN or Infinity is invalid.
+        data = json.loads(git(work, "show", f"{commit}:package.json").stdout.decode("utf-8-sig"),
+                          parse_constant=shared("expected-contract")["reject_json_constant"])
+        sections = [data.get(key) or {} for key in ("dependencies", "devDependencies")] if isinstance(data, dict) else [None]
+        if not all(isinstance(section, dict) for section in sections):
+            raise ValueError("it must be an object whose dependencies and devDependencies are objects")
+    except ValueError as exc:
+        raise ValueError(f"package.json at {commit} is invalid: {exc}") from exc
+    return {name for section in sections for name in section}
+
+
+def review_problem(packet, record, source):
+    """(problem, malformed): a malformed record fails acceptance; a well-formed record bound elsewhere does not count.
+    Keys acceptance does not read are ignored: every key a blocking decision reads is required."""
+    if not isinstance(record, dict) or not REVIEW_KEYS <= set(record):
+        return f"review record keys must include {sorted(REVIEW_KEYS)}", True
+    if (record["schema_version"], record["kind"]) != (1, "devlyn-review"):
+        return "review record is not a schema 1 devlyn-review", True
+    if not all(isinstance(record[key], str) and record[key].strip() for key in ("engine", "model")):
+        return "review record must name its engine and model", True
+    if not isinstance(record["requirements"], list) or not all(req in packet["requirements"] for req in record["requirements"]):
+        return "review requirements must name task requirement IDs", True
+    findings = record["findings"]
+    if not isinstance(findings, list) or not all(
+            isinstance(f, dict) and {"id", "binding", "disposition"} <= set(f) and isinstance(f["id"], str)
+            and isinstance(f["binding"], bool) and f["disposition"] in ("open", "resolved", "rejected")
+            and (f["disposition"] != "rejected" or (isinstance(f.get("reason"), str) and f["reason"].strip()))
+            for f in findings):
+        return "findings need id, boolean binding and disposition open|resolved|rejected (rejected needs a reason)", True
+    if record["task"] != packet["task"]:
+        return f"review is for task {record['task']!r}, not {packet['task']}", False
+    if record["source_sha"] != source:
+        return f"review is bound to source {record['source_sha']}, not {source}", False
+    if (record["contract_sha256"], record["expected_sha256"]) != (packet["contract"]["sha256"], packet["expected"]["sha256"]):
+        return "review is bound to a different contract", False
+    return None, False
+
+
+def review_results(packet, paths, source):
+    work = Path(packet["worktree"])
+    counted, ignored = [], []
+    for path in paths:
+        try:
+            record_path = evidence_file(work, path, ".devlyn")
+            raw = record_path.read_bytes()
+            record = shared("expected-contract")["loads_strict_json"](raw.decode("utf-8"))
+            problem, malformed = review_problem(packet, record, source)
+        except (AcceptanceError, OSError, UnicodeError, ValueError) as exc:
+            problem, malformed = str(exc), True
+        if malformed:
+            raise AcceptanceError(f"malformed review record {path}: {problem}")
+        if problem:
+            ignored.append({"path": str(path), "reason": problem})
+            continue
+        counted.append({"path": relative(work, record_path), "sha256": sha256(raw), "engine": record["engine"],
+                        "model": record["model"], "requirements": record["requirements"],
+                        "open_binding_findings": [f["id"] for f in record["findings"] if f["binding"] and f["disposition"] == "open"]})
+    return counted, ignored
+
+
+def check_submission(packet, submission):
+    if not isinstance(submission, dict) or not {"schema_version", "task", "source_sha"} <= set(submission) <= SUBMISSION_KEYS:
+        raise AcceptanceError(f"submission keys must include schema_version, task, source_sha and stay within {sorted(SUBMISSION_KEYS)}")
+    if (submission["schema_version"], submission["task"]) != (1, packet["task"]) or not isinstance(submission["source_sha"], str):
+        raise AcceptanceError("submission is not schema 1 for this task with a string source_sha")
+    for key in ("runner_results", "reviews", "assumptions"):
+        value = submission.get(key, [])
+        if not isinstance(value, list) or not all(isinstance(item, str) for item in value):
+            raise AcceptanceError(f"submission {key} must be a list of strings")
+    blockers = submission.get("blockers", [])
+    if not isinstance(blockers, list) or not all(
+            isinstance(b, dict) and {"kind", "detail"} <= set(b) and b["kind"] in BLOCKERS and isinstance(b["detail"], str) and b["detail"].strip()
+            for b in blockers):
+        raise AcceptanceError(f"submission blockers must include {{kind, detail}} with kind in {sorted(BLOCKERS)}")
+
+
+def result_shell(packet, kind, source):
+    return {"schema_version": 1, "kind": kind, "task": packet["task"], "source_sha": source,
+            "inputs_sha": packet["inputs_sha"], "allocation_base": packet["allocation_base"],
+            "contract": contract_digests(packet), "commands": [], "guards": []}
+
+
+def check_reasons(result):
+    reasons = [f"failed: command {r['index']} ({', '.join(r['contract_refs']) or 'no refs'}) {r['reason']}"
+               for r in result["commands"] if not r["passed"]]
+    return reasons + [f"failed: guard {g['rule']} {g['subject']}" for g in result["guards"] if g["blocking"] and not g["passed"]]
+
+
+def run(packet_path, source=None):
+    """Executor-side runner: checks on the committed candidate, before review."""
+    packet = load_packet(packet_path)
+    work = Path(packet["worktree"])
+    source = source or text(work, "rev-parse", "HEAD")
+    expected = bound_contract(packet)
+    problems = source_problems(packet, source)
+    if problems:
+        raise AcceptanceError("; ".join(problems))
+    result = result_shell(packet, "loop-checks", source)
+    result["commands"], run_dir = run_checks(packet, expected, {})
+    result["guards"] = guard_results(packet, expected, source)
+    result["reasons"] = check_reasons(result) + [f"failed: source changed during checks: {p}" for p in source_problems(packet, source)]
+    path = (run_dir or new_run_dir(work)) / "result.json"
+    write_json(path, result)
+    return path, result
+
+
+def accept(packet_path, submission_path, failure=None):
+    """Drain-side derivation; writes .devlyn/loop/acceptance.json for task-complete custody. A drain-recorded
+    `failure` (changed inputs, an unobservable interrupted execution) fails the task without its submission."""
+    packet = load_packet(packet_path)
+    work = Path(packet["worktree"])
+    result = result_shell(packet, "loop", text(work, "rev-parse", "refs/heads/" + packet["branch"]))
+    result.update(reviews=[], ignored_reviews=[], assumptions=[], reasons=[failure] if failure else [])
+    try:
+        if not failure:
+            submission = read_json(submission_path)
+            check_submission(packet, submission)
+            result["assumptions"] = submission.get("assumptions", [])
+            if submission.get("blockers"):
+                result["reasons"] = [f"{b['kind']}: {b['detail']}" for b in submission["blockers"]]
+            else:
+                derive(packet, submission, result)
+    except AcceptanceError as exc:
+        result["reasons"].append(f"failed: {exc}")
+    result["verdict"] = "FAILED" if result["reasons"] else "ACCEPTED"
+    result["evidence"] = sorted({r[name]["path"] for r in result["commands"] for name in ("stdout", "stderr")}
+                                | {review["path"] for review in result["reviews"]})
+    write_json(work / LOOP_DIR / "acceptance.json", result)
+    return result
+
+
+def derive(packet, submission, result):
+    source = submission["source_sha"]
+    expected = bound_contract(packet)
+    problems = source_problems(packet, source)
+    if problems:
+        result["reasons"] += [f"failed: {problem}" for problem in problems]
+        return
+    result["source_sha"] = source
+    result["commands"], _ = run_checks(packet, expected, reusable(packet, source, submission.get("runner_results", [])))
+    result["guards"] = guard_results(packet, expected, source)
+    result["reasons"] += check_reasons(result)
+    result["reasons"] += [f"failed: source changed during checks: {p}" for p in source_problems(packet, source)]
+    result["reviews"], result["ignored_reviews"] = review_results(packet, submission.get("reviews", []), source)
+    covered = {req for review in result["reviews"] for req in review["requirements"]}
+    missing = [req for req in packet["review_requirements"] if req not in covered]
+    if missing:
+        result["reasons"].append("failed: required review coverage missing for " + ", ".join(missing))
+    unresolved = [finding for review in result["reviews"] for finding in review["open_binding_findings"]]
+    if unresolved:
+        result["reasons"].append("failed: unresolved binding review findings " + ", ".join(unresolved))
+
+
+class AcceptanceTests(unittest.TestCase):
+    def setUp(self):
+        self.temp = tempfile.TemporaryDirectory(prefix="devlyn-acceptance ")
+        self.addCleanup(self.temp.cleanup)
+        self.root = Path(self.temp.name).resolve()
+        self.work = self.root / "work tree"
+        env = {"GIT_CONFIG_NOSYSTEM": "1", "GIT_CONFIG_GLOBAL": str(self.root / "gitconfig"), "GIT_AUTHOR_NAME": "Fixture",
+               "GIT_AUTHOR_EMAIL": "fixture@example.invalid", "GIT_COMMITTER_NAME": "Fixture", "GIT_COMMITTER_EMAIL": "fixture@example.invalid"}
+        self.saved = {key: os.environ.get(key) for key in env}
+        os.environ.update(env)
+        self.addCleanup(lambda: [os.environ.pop(k, None) if v is None else os.environ.__setitem__(k, v) for k, v in self.saved.items()])
+        subprocess.run(["git", "init", "-q", "--initial-branch=main", str(self.work)], check=True)
+        self.write(".gitignore", ".devlyn/\n")
+        self.commit("base")
+        self.g("switch", "-q", "-c", "devlyn/l/t")
+        self.commands = [
+            {"argv": [sys.executable, "-c", "import pathlib; print(pathlib.Path('product.txt').read_text())"],
+             "stdout_contains": ["ready"], "contract_refs": ["R1"]},
+            {"cmd": "echo shell-ok", "stdout_contains": ["shell-ok"], "contract_refs": ["R1"]},
+        ]
+
+    def g(self, *args):
+        return text(self.work, *args)
+
+    def write(self, rel, data):
+        path = self.work / rel
+        path.parent.mkdir(parents=True, exist_ok=True)
+        path.write_text(data, encoding="utf-8")
+
+    def commit(self, message):
+        self.g("add", "-A")
+        self.g("commit", "-q", "-m", message)
+        return self.g("rev-parse", "HEAD")
+
+    def inputs(self, expected=None, review=()):
+        base = self.g("rev-parse", "HEAD")
+        files = {"docs/specs/l/meta.md": "# meta\n", "docs/specs/l/t/spec.md": "# task R1 R2\n",
+                 "docs/specs/l/t/spec.expected.json": json.dumps(expected or {"verification_commands": self.commands}),
+                 QUEUE: "- [ ] l.t [T](docs/specs/l/t/spec.md)\n"}
+        for rel, data in files.items():
+            self.write(rel, data)
+        inputs = self.commit("inputs")
+        digest = {rel: sha256((self.work / rel).read_bytes()) for rel in files}
+        self.packet = {"task": "l.t", "worktree": str(self.work), "branch": "devlyn/l/t", "inputs_sha": inputs, "allocation_base": base,
+                       "contract": {"path": str(self.work / "docs/specs/l/t/spec.md"), "sha256": digest["docs/specs/l/t/spec.md"]},
+                       "expected": {"path": str(self.work / "docs/specs/l/t/spec.expected.json"), "sha256": digest["docs/specs/l/t/spec.expected.json"]},
+                       "meta": {"path": str(self.work / "docs/specs/l/meta.md"), "sha256": digest["docs/specs/l/meta.md"]},
+                       "requirements": ["R1", "R2"], "review_requirements": list(review)}
+        self.packet_path = self.root / "packet.json"
+        self.packet_path.write_text(json.dumps(self.packet), encoding="utf-8")
+
+    def product(self, body="ready"):
+        self.write("product.txt", body)
+        return self.commit("product")
+
+    def review(self, source, name="review.json", **changes):
+        record = {"schema_version": 1, "kind": "devlyn-review", "task": "l.t", "engine": "codex", "model": "fixture-model",
+                  "source_sha": source, "contract_sha256": self.packet["contract"]["sha256"],
+                  "expected_sha256": self.packet["expected"]["sha256"], "requirements": ["R2"], "findings": [], **changes}
+        self.write(f".devlyn/reviews/{name}", json.dumps(record))
+        return f".devlyn/reviews/{name}"
+
+    def submit(self, source, **fields):
+        path = self.root / "submission.json"
+        path.write_text(json.dumps({"schema_version": 1, "task": "l.t", "source_sha": source, **fields}), encoding="utf-8")
+        return accept(self.packet_path, path)
+
+    def test_accepts_owned_source_with_checks_and_bound_review(self):
+        self.inputs(review=["R2"])
+        source = self.product()
+        result = self.submit(source, reviews=[self.review(source)])
+        self.assertEqual((result["verdict"], result["reasons"]), ("ACCEPTED", []))
+        self.assertEqual(json.loads((self.work / LOOP_DIR / "acceptance.json").read_text(encoding="utf-8"))["source_sha"], source)
+        self.assertIn(".devlyn/reviews/review.json", result["evidence"])
+        for path in result["evidence"]:
+            self.assertTrue((self.work / path).is_file(), path)
+
+    def test_command_assertions_timeout_and_spawn_failure(self):
+        python = sys.executable
+        self.inputs({"verification_commands": [
+            {"argv": [python, "-c", "raise SystemExit(3)"], "contract_refs": ["R1"]},
+            {"argv": [python, "-c", "print('nope')"], "stdout_contains": ["yes"], "contract_refs": ["R1"]},
+            {"argv": [python, "-c", "print('secret')"], "stdout_not_contains": ["secret"], "contract_refs": ["R1"]},
+            {"argv": [python, "-c", "import time; time.sleep(5)"], "timeout_sec": 1, "contract_refs": ["R2"]},
+            {"argv": ["devlyn-missing-binary-for-test"], "contract_refs": ["R2"]},
+        ]})
+        result = self.submit(self.product())
+        self.assertEqual(result["verdict"], "FAILED")
+        self.assertEqual([r["outcome"]["kind"] for r in result["commands"]], ["exit", "exit", "exit", "timeout", "spawn_error"])
+        self.assertEqual([bool(r["reason"]) for r in result["commands"]], [True] * 5)
+        self.assertIn("exit 3, expected 0", " ".join(result["reasons"]))
+        self.assertTrue(all((self.work / r["stdout"]["path"]).is_file() for r in result["commands"]))
+
+    def test_source_and_contract_binding(self):
+        self.inputs()
+        source = self.product()
+        self.write("untracked.txt", "delta")
+        self.assertIn("undeclared source delta", " ".join(self.submit(source)["reasons"]))
+        (self.work / "untracked.txt").unlink()
+        self.g("checkout", "-q", "--detach", source)
+        self.assertIn("is not the owned task commit", " ".join(self.submit(source)["reasons"]))
+        self.g("switch", "-q", "devlyn/l/t")
+        self.assertIn("is not the owned task commit", " ".join(self.submit(self.packet["inputs_sha"])["reasons"]))
+        self.write("docs/specs/l/t/spec.md", "# weakened\n")
+        weakened = self.commit("weaken")
+        self.assertIn("candidate edits loop inputs: docs/specs/l/t/spec.md", " ".join(self.submit(weakened)["reasons"]))
+        self.packet["contract"]["sha256"] = "0" * 64
+        self.packet_path.write_text(json.dumps(self.packet), encoding="utf-8")
+        self.assertIn("differs from the task packet", " ".join(self.submit(weakened)["reasons"]))
+
+    def test_review_binding_and_findings(self):
+        self.inputs(review=["R2"])
+        first = self.product()
+        stale = self.review(first, "stale.json")
+        source = self.product("ready again")
+        for reviews, message in (
+            ([stale], "required review coverage missing for R2"),
+            ([self.review(source, "contract.json", expected_sha256="0" * 64)], "required review coverage missing for R2"),
+            ([self.review(source, "rejected.json", findings=[{"id": "F1", "binding": True, "disposition": "rejected"}])], "malformed review record"),
+            ([self.review(source, "open.json", findings=[{"id": "F2", "binding": True, "disposition": "open"}])], "unresolved binding review findings F2"),
+        ):
+            result = self.submit(source, reviews=reviews)
+            self.assertEqual(result["verdict"], "FAILED")
+            self.assertIn(message, " ".join(result["reasons"]))
+        result = self.submit(source, reviews=[stale, self.review(source, findings=[{"id": "F3", "binding": False, "disposition": "open"}])])
+        self.assertEqual(result["verdict"], "ACCEPTED")
+        self.assertEqual([item["path"] for item in result["ignored_reviews"]], [stale])
+
+    def test_review_records_and_findings_ignore_other_keys(self):
+        """E2. Prediction: a review record with an extra top-level key and an extra key in a finding counts, and an open
+        binding finding carrying an extra key still fails acceptance with its id named. Before: both records failed as
+        "malformed review record", so the outcome depended on which engine wrote the record."""
+        self.inputs(review=["R2"])
+        source = self.product()
+        extra = {"evidence": ["checks pass"]}
+        counted = self.review(source, "extra.json", **extra, findings=[{"id": "F1", "binding": True, "disposition": "resolved", **extra}])
+        result = self.submit(source, reviews=[counted])
+        self.assertEqual((result["verdict"], [review["path"] for review in result["reviews"]]), ("ACCEPTED", [counted]))
+        blocking = self.review(source, "open.json", findings=[{"id": "F2", "binding": True, "disposition": "open", **extra}])
+        result = self.submit(source, reviews=[blocking])
+        self.assertEqual((result["verdict"], result["reasons"]), ("FAILED", ["failed: unresolved binding review findings F2"]))
+
+    def test_blockers_ignore_keys_beyond_kind_and_detail(self):
+        """T6. Prediction: a needs-review blocker carrying a key beyond kind and detail records its question as the reason,
+        as one without it does, so the report and queue row keep the question. Before: the extra key failed the submission
+        "submission blockers must be {kind, detail} ...", and the question was lost."""
+        self.inputs()
+        result = self.submit(self.product(), blockers=[{"kind": "needs-review", "detail": "Which store wins?", "requirement": "R1"}])
+        self.assertEqual((result["verdict"], result["reasons"]), ("FAILED", ["needs-review: Which store wins?"]))
+
+    def test_python_checks_leave_no_bytecode_and_a_dirty_worktree_names_its_paths(self):
+        """H7. Prediction: a check that imports a module committed in the task worktree, where nothing ignores
+        __pycache__/, writes no bytecode there, so the runner and acceptance both pass; a file left untracked fails
+        acceptance with its path named. Before: the import wrote __pycache__/ into the worktree, so the correct task failed
+        "source changed during checks: worktree has uncommitted or untracked changes (undeclared source delta)", naming
+        no path."""
+        self.inputs({"verification_commands": [{"argv": [sys.executable, "-c", "import greeting; print(greeting.greet())"],
+                                                "stdout_contains": ["hello"], "contract_refs": ["R1", "R2"]}]})
+        self.write("greeting.py", "def greet():\n    return 'hello'\n")
+        source = self.commit("product")
+        _, checks = run(self.packet_path)
+        result = self.submit(source)
+        self.assertEqual((checks["reasons"], result["verdict"], result["reasons"], (self.work / "__pycache__").exists()), ([], "ACCEPTED", [], False))
+        self.write("notes.txt", "left behind\n")
+        self.assertEqual(self.submit(source)["reasons"], ["failed: worktree has uncommitted or untracked changes (undeclared source delta): notes.txt"])
+
+    def test_runner_result_with_a_source_change_is_never_reused(self):
+        mutate = [sys.executable, "-c", "import pathlib; p = pathlib.Path('product.txt'); p.write_text(p.read_text() + '!'); print('ok')"]
+        self.inputs({"verification_commands": [{"argv": mutate, "stdout_contains": ["ok"], "contract_refs": ["R1", "R2"]}]})
+        source = self.product()
+        path, checks = run(self.packet_path)
+        self.assertTrue(checks["commands"][0]["passed"])
+        self.assertIn("failed: source changed during checks", " ".join(checks["reasons"]))
+        self.g("checkout", "--", "product.txt")
+        result = self.submit(source, runner_results=[relative(self.work, path)])
+        self.assertEqual(result["verdict"], "FAILED")
+        self.assertNotIn("reused_from", result["commands"][0])
+        self.assertIn("failed: source changed during checks", " ".join(result["reasons"]))
+
+    def test_malformed_executor_records_fail_with_a_named_reason(self):
+        self.inputs(review=["R2"])
+        source = self.product()
+        malformed = self.review(source, "malformed.json", requirements=[{"id": "R2"}])
+        result = self.submit(source, reviews=[malformed])
+        self.assertEqual(result["verdict"], "FAILED")
+        self.assertIn(f"malformed review record {malformed}", " ".join(result["reasons"]))
+        path, _ = run(self.packet_path)
+        checks = json.loads(path.read_text(encoding="utf-8"))
+        del checks["commands"][0]["index"]
+        path.write_text(json.dumps(checks), encoding="utf-8")
+        result = self.submit(source, runner_results=[relative(self.work, path)], reviews=[self.review(source)])
+        self.assertEqual(result["verdict"], "FAILED")
+        self.assertIn("malformed command records", " ".join(result["reasons"]))
+        blocked = self.submit(source, blockers=[{"kind": ["failed"], "detail": "unhashable kind"}])
+        self.assertEqual(blocked["verdict"], "FAILED")
+        self.assertIn("submission blockers must include", " ".join(blocked["reasons"]))
+
+    def test_reuses_intact_runner_results_and_reexecutes_altered_evidence(self):
+        counter = [sys.executable, "-c", "import pathlib; p = pathlib.Path('.devlyn/count'); p.parent.mkdir(exist_ok=True); "
+                   "p.write_text(str(int(p.read_text()) + 1) if p.exists() else '1'); print('counted')"]
+        self.inputs({"verification_commands": [{"argv": counter, "stdout_contains": ["counted"], "contract_refs": ["R1", "R2"]}]})
+        source = self.product()
+        path, checks = run(self.packet_path)
+        self.assertEqual(checks["reasons"], [])
+        runner = relative(self.work, path)
+        self.assertEqual(self.submit(source, runner_results=[runner])["commands"][0]["reused_from"], runner)
+        self.assertEqual((self.work / ".devlyn/count").read_text(), "1")
+        (self.work / checks["commands"][0]["stdout"]["path"]).write_text("altered", encoding="utf-8")
+        result = self.submit(source, runner_results=[runner])
+        self.assertNotIn("reused_from", result["commands"][0])
+        self.assertEqual(((self.work / ".devlyn/count").read_text(), result["verdict"]), ("2", "ACCEPTED"))
+
+    def test_windows_runs_node_command_shims_without_cmd(self):
+        """Windows resolution mocked: verification argv such as ["npm", "test"] runs the Node and script its command
+        shim names, as cmd.exe would resolve it; any other batch file is refused with an actionable message."""
+        from types import SimpleNamespace
+        from unittest import mock
+        npm_cmd = "\r\n".join((  # npm 10 and 11 ship this npm.cmd byte for byte.
+            ":: Created by npm, please don't edit manually.", "@ECHO OFF", "", "SETLOCAL", "",
+            'SET "NODE_EXE=%~dp0\\node.exe"', 'IF NOT EXIST "%NODE_EXE%" (', '  SET "NODE_EXE=node"', ")", "",
+            'SET "NPM_PREFIX_JS=%~dp0\\node_modules\\npm\\bin\\npm-prefix.js"', 'SET "NPM_CLI_JS=%~dp0\\node_modules\\npm\\bin\\npm-cli.js"',
+            'FOR /F "delims=" %%F IN (\'CALL "%NODE_EXE%" "%NPM_PREFIX_JS%"\') DO (',
+            '  SET "NPM_PREFIX_NPM_CLI_JS=%%F\\node_modules\\npm\\bin\\npm-cli.js"', ")",
+            'IF EXIST "%NPM_PREFIX_NPM_CLI_JS%" (', '  SET "NPM_CLI_JS=%NPM_PREFIX_NPM_CLI_JS%"', ")", "", '"%NODE_EXE%" "%NPM_CLI_JS%" %*', ""))
+        cmd_shim = "\r\n".join((  # npm's cmd-shim 6 (npm install -g, node_modules/.bin).
+            "@ECHO off", "GOTO start", ":find_dp0", "SET dp0=%~dp0", "EXIT /b", ":start", "SETLOCAL", "CALL :find_dp0", "",
+            'IF EXIST "%dp0%\\node.exe" (', '  SET "_prog=%dp0%\\node.exe"', ") ELSE (", '  SET "_prog=node"',
+            "  SET PATHEXT=%PATHEXT:;.JS;=;%", ")", "",
+            'endLocal & goto #_undefined_# 2>NUL || title %COMSPEC% & "%_prog%"  "%dp0%\\node_modules\\pnpm\\bin\\pnpm.cjs" %*', ""))
+        corepack = "\r\n".join((  # @zkochan/cmd-shim, as corepack enable and pnpm write it.
+            "@SETLOCAL", '@IF EXIST "%~dp0\\node.exe" (', '  "%~dp0\\node.exe"  "%~dp0\\node_modules\\corepack\\dist\\yarn.js" %*', ") ELSE (",
+            "  @SET PATHEXT=%PATHEXT:;.JS;=;%", '  node  "%~dp0\\node_modules\\corepack\\dist\\yarn.js" %*', ")", ""))
+        node_path = corepack.replace("@SETLOCAL\r\n", '@SETLOCAL\r\n@SET "NODE_PATH=C:\\proj\\node_modules\\.pnpm\\node_modules"\r\n')
+        nodejs, tools, prefix = self.root / "nodejs", self.root / "tools", self.root / "prefix"
+        node = nodejs / "node.exe"
+        files = {nodejs / "npm.cmd": npm_cmd, node: "", tools / "pnpm.cmd": cmd_shim, tools / "yarn.cmd": corepack,
+                 tools / "vitest.cmd": node_path, tools / "build.bat": "@echo off\r\necho built\r\n"}
+        for path in (nodejs / "node_modules/npm/bin/npm-cli.js", nodejs / "node_modules/npm/bin/npm-prefix.js",
+                     tools / "node_modules/pnpm/bin/pnpm.cjs", tools / "node_modules/corepack/dist/yarn.js"):
+            files[path] = ""
+        for path, body in files.items():
+            path.parent.mkdir(parents=True, exist_ok=True)
+            path.write_bytes(body.encode("utf-8"))
+        found = {"npm": nodejs / "npm.cmd", "node.exe": node, **{path.stem: path for path in tools.glob("*.*")}}
+        platform = shared("platform-support")
+        lookups = []
+
+        def npm_prefix(argv, cwd=None, **kwargs):  # what node npm-prefix.js prints, recorded with the directory it ran in
+            lookups.append((argv, cwd))
+            return SimpleNamespace(stdout=f"{prefix}\n")
+        windows = {"os": SimpleNamespace(name="nt"), "shutil": SimpleNamespace(which=lambda name: str(found[name]) if name in found else None),
+                   "subprocess": SimpleNamespace(run=npm_prefix)}
+        with mock.patch.dict(platform["native_argv"].__globals__, windows):
+            resolve = platform["native_argv"]
+            self.assertEqual(resolve(["npm", "test"]), [str(node), str(nodejs / "node_modules/npm/bin/npm-cli.js"), "test"])
+            upgraded = prefix / "node_modules/npm/bin/npm-cli.js"  # npm install -g npm: npm.cmd defers to the global prefix's npm.
+            upgraded.parent.mkdir(parents=True)
+            upgraded.write_bytes(b"")
+            self.assertEqual(resolve(["npm", "test"], cwd=self.root), [str(node), str(upgraded), "test"])
+            self.assertEqual(lookups[-1], ([str(node), str(nodejs / "node_modules/npm/bin/npm-prefix.js")], self.root))
+            self.assertEqual(resolve(["pnpm", "test"]), [str(node), str(tools / "node_modules/pnpm/bin/pnpm.cjs"), "test"])
+            self.assertEqual(resolve(["yarn", "test"]), [str(node), str(tools / "node_modules/corepack/dist/yarn.js"), "test"])
+            for name in ("vitest", "build"):
+                with self.subTest(name=name), self.assertRaisesRegex(OSError, "use argv with an explicit interpreter"):
+                    resolve([name, "run"])
+
+    def test_guards_and_blockers(self):
+        self.inputs({"verification_commands": self.commands, "required_files": ["missing.txt"], "forbidden_files": ["product.txt"],
+                     "forbidden_patterns": [{"pattern": "rea+dy", "description": "no ready", "severity": "disqualifier"},
+                                            {"pattern": "ready", "description": "warn only", "severity": "warning"}]})
+        source = self.product()
+        result = self.submit(source)
+        failed = {g["rule"] for g in result["guards"] if not g["passed"]}
+        self.assertEqual(failed, {"forbidden_patterns/0", "forbidden_patterns/1", "required_files", "forbidden_files"})
+        self.assertNotIn("warn only", " ".join(result["reasons"]))
+        blocked = self.submit(source, blockers=[{"kind": "needs-review", "detail": "Which store wins?"}])
+        self.assertEqual((blocked["verdict"], blocked["reasons"], blocked["commands"]), ("FAILED", ["needs-review: Which store wins?"], []))
+
+    def test_max_deps_added_counts_the_names_the_root_package_json_gains(self):
+        """P4-3. Prediction: under the default limit 0 with a passing check, one dependency added to a one-line
+        package.json (none at the inputs) counts 1 and fails acceptance; two appended to a multi-line one count 2; a name
+        moved from dependencies to devDependencies counts 0 and is accepted; an invalid package.json fails the guard,
+        naming it. A leading UTF-8 BOM, which npm and Node accept, is ignored: with one at both commits, one added
+        counts 1. A duplicate key (its last value wins) and a null dependencies section, which npm also reads, count 0
+        and are accepted; NaN, which npm rejects, fails the guard. Invalid inputs fail before an invalid candidate,
+        naming inputs and the base repair/new loop action; invalid candidates name the candidate and its repair.
+        The action survives the queue's 200-character first-reason collapse, with parser detail after it."""
+        passing = {"verification_commands": [{"argv": [sys.executable, "-c", "pass"], "contract_refs": ["R1"]}]}
+
+        def guard(inputs, source):
+            if inputs is not None:
+                self.write("package.json", json.dumps(inputs, indent=2))
+            self.inputs(passing)
+            self.write("package.json", source)
+            commit = self.commit("product")
+            result = self.submit(commit)
+            return commit, result, next(g for g in result["guards"] if g["rule"] == "max_deps_added")
+
+        with self.subTest("one-line add"):
+            _, result, deps = guard(None, json.dumps({"name": "app", "dependencies": {"left-pad": "1.0.0"}}))
+            self.assertEqual((deps["subject"], result["reasons"]), ("1 added, limit 0", ["failed: guard max_deps_added 1 added, limit 0"]))
+        with self.subTest("multi-line add of 2"):
+            _, _, deps = guard({"dependencies": {"a": "1"}}, json.dumps({"dependencies": {"a": "1", "b": "1", "c": "1"}}, indent=2))
+            self.assertEqual((deps["subject"], deps["passed"]), ("2 added, limit 0", False))
+        with self.subTest("move"):
+            _, result, deps = guard({"dependencies": {"a": "1", "b": "1"}, "devDependencies": {"c": "1"}},
+                                    json.dumps({"dependencies": {"b": "1"}, "devDependencies": {"a": "1", "c": "1"}}, indent=2))
+            self.assertEqual((deps["subject"], result["verdict"]), ("0 added, limit 0", "ACCEPTED"))
+        with self.subTest("invalid"):
+            commit, result, deps = guard({"dependencies": {"a": "1"}}, '{"dependencies": {"a": "1",}}\n')
+            self.assertEqual((deps["passed"], result["verdict"]), (False, "FAILED"))
+            self.assertTrue(deps["subject"].startswith(f"candidate package.json at {commit} is invalid; fix it in the candidate."))
+        with self.subTest("BOM"):
+            self.write("package.json", "\ufeff" + json.dumps({"dependencies": {"a": "1"}}))
+            _, _, deps = guard(None, "\ufeff" + json.dumps({"dependencies": {"a": "1", "b": "1"}}))
+            self.assertEqual(deps["subject"], "1 added, limit 0")
+        with self.subTest("duplicate key and null"):
+            self.write("package.json", '{"dependencies": null, "scripts": {"a": "1"}, "scripts": {"b": "2"}}')
+            _, result, deps = guard(None, '{"dependencies": {"a": "1"}, "dependencies": null}')
+            self.assertEqual((deps["subject"], result["verdict"]), ("0 added, limit 0", "ACCEPTED"))
+        with self.subTest("NaN"):
+            commit, result, deps = guard({"dependencies": {"a": "1"}}, '{"config": {"threshold": NaN}}')
+            self.assertEqual((deps["passed"], result["verdict"]), (False, "FAILED"))
+            self.assertTrue(deps["subject"].startswith(f"candidate package.json at {commit} is invalid; fix it in the candidate."))
+        with self.subTest("invalid inputs precede invalid candidate"):
+            self.write("package.json", "{")
+            _, result, deps = guard(None, "[")
+            self.assertEqual((deps["passed"], result["verdict"]), (False, "FAILED"))
+            self.assertTrue(deps["subject"].startswith(f"inputs package.json at {self.packet['inputs_sha']} unreadable; limit cannot apply."))
+            one_line = runpy.run_path(str(Path(__file__).with_name("queue.py")))["one_line"]
+            for size in (40, 64):
+                reason = result["reasons"][0].replace(self.packet["inputs_sha"], "a" * size)
+                self.assertIn("Fix base: regular npm-valid file; start a new loop", one_line(reason))
+
+    @unittest.skipIf(os.name == "nt", "a symbolic link needs a privilege on Windows")
+    def test_max_deps_added_rejects_symlinks(self):
+        """Prediction: a candidate package.json symlink to a file named '{}' containing a dependency fails the guard,
+        naming the candidate, symlink and target; before, the target text parsed as an empty object and passed limit 0.
+        An ordinary candidate symlink also names its target and candidate repair. An inputs symlink fails first even
+        when the candidate is invalid JSON, naming inputs and the base repair/new loop action."""
+        passing = {"verification_commands": [{"argv": [sys.executable, "-c", "pass"], "contract_refs": ["R1"]}]}
+        package = self.work / "package.json"
+        one_line = runpy.run_path(str(Path(__file__).with_name("queue.py")))["one_line"]
+        for side, target in (("candidate", "{}"), ("inputs", "deps.json"), ("candidate", "deps.json")):
+            with self.subTest(side=side, target=target):
+                package.unlink(missing_ok=True)
+                self.write(target, json.dumps({"dependencies": {"hidden": "1"}}))
+                if side == "inputs":
+                    package.symlink_to(target)
+                else:
+                    self.write("package.json", "{}")
+                self.inputs(passing)
+                package.unlink()
+                if side == "candidate":
+                    package.symlink_to(target)
+                else:
+                    self.write("package.json", "[")
+                source = self.commit("product")
+                result = self.submit(source)
+                deps = next(g for g in result["guards"] if g["rule"] == "max_deps_added")
+                self.assertEqual((deps["passed"], result["verdict"]), (False, "FAILED"))
+                commit = self.packet["inputs_sha"] if side == "inputs" else source
+                self.assertTrue(deps["subject"].startswith(f"{side} package.json at {commit}"))
+                self.assertIn(f"symlink to {target!r}", deps["subject"])
+                action = "Fix base: regular npm-valid file; start a new loop" if side == "inputs" else "fix it in the candidate."
+                self.assertIn(action, one_line(result["reasons"][0]))
+
+    def test_max_deps_added_requires_regular_blobs(self):
+        """Prediction: both regular blob modes count names; a tree or gitlink at package.json fails the guard with
+        its kind and candidate repair, rather than escaping as an AcceptanceError without a guard subject."""
+        self.write("package.json", '{"dependencies": {"a": "1"}}')
+        self.inputs()
+        inputs = self.packet["inputs_sha"]
+        blob = self.g("rev-parse", f"{inputs}:package.json")
+        tree = self.g("rev-parse", f"{inputs}^{{tree}}")
+        for mode, kind, oid in (("100644", "blob", blob), ("100755", "blob", blob),
+                                ("040000", "tree", tree), ("160000", "commit", inputs)):
+            with self.subTest(mode=mode):
+                made = subprocess.run(["git", "-C", str(self.work), "mktree"],
+                                      input=f"{mode} {kind} {oid}\tpackage.json\n".encode(), capture_output=True, check=True)
+                source = self.g("commit-tree", made.stdout.decode().strip(), "-p", inputs, "-m", "package kind")
+                deps = next(g for g in guard_results(self.packet, {}, source) if g["rule"] == "max_deps_added")
+                if kind == "blob":
+                    self.assertEqual(dependency_names(self.work, source), {"a"})
+                    self.assertEqual((deps["passed"], deps["subject"]), (True, "0 added, limit 0"))
+                else:
+                    self.assertFalse(deps["passed"])
+                    self.assertTrue(deps["subject"].startswith(f"candidate package.json at {source} is invalid; fix it in the candidate."))
+                    self.assertIn("gitlink" if kind == "commit" else kind, deps["subject"])
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--self-test", action="store_true")
+    actions = parser.add_subparsers(dest="action")
+    runner = actions.add_parser("run")
+    runner.add_argument("--packet", required=True)
+    runner.add_argument("--source")
+    acceptance = actions.add_parser("accept")
+    acceptance.add_argument("--packet", required=True)
+    acceptance.add_argument("--submission", required=True)
+    args = parser.parse_args()
+    if args.self_test:
+        result = unittest.TextTestRunner(verbosity=1).run(unittest.defaultTestLoader.loadTestsFromTestCase(AcceptanceTests))
+        if result.wasSuccessful():
+            print(f"acceptance self-test: PASS ({result.testsRun} tests)")
+        return 0 if result.wasSuccessful() else 1
+    if args.action is None:
+        parser.error("run or accept is required")
+    try:
+        if args.action == "run":
+            path, result = run(args.packet, args.source)
+            output = {"status": "CHECKED", "result": str(path), "passed": not result["reasons"], "reasons": result["reasons"]}
+        else:
+            result = accept(args.packet, args.submission)
+            output = {"status": result["verdict"], "result": str(Path(load_packet(args.packet)["worktree"]) / LOOP_DIR / "acceptance.json"),
+                      "reasons": result["reasons"]}
+        print(json.dumps(output, sort_keys=True))
+        return 0
+    except (AcceptanceError, OSError, KeyError, TypeError, ValueError) as exc:
+        print(json.dumps({"status": "BLOCKED", "reason": str(exc)}, sort_keys=True))
+        return 1
+
+
+if __name__ == "__main__":
+    shared("platform-support")["configure_utf8"]()
+    sys.exit(main())