dsh-scout 0.9.2 → 0.9.4

package/tests/model.test.mjs

@@ -91,12 +91,13 @@ test('renders a sourced claim and preserves a VERIFY decision', () => {
   const report = renderReport(scoutCase)
 
   assert.equal(scoutCase.decision, 'VERIFY')
-  assert.match(report, /Example Co — HR Head/)
+  assert.match(report, /^# Example Co$/m)
+  assert.match(report, /^> 岗位：HR Head/m)
   assert.match(report, /job-posting/)
   assert.match(report, /Confirm the mandate/)
-  assert.match(report, /Blocking or unresolved risks/)
-  assert.match(report, /Role task and authority hypotheses/)
-  assert.match(report, /Interview questions/)
+  assert.match(report, /## 3\. 线索与待确认/)
+  assert.match(report, /## 4\. 风险与红旗/)
+  assert.match(report, /## 5\. 面试问题/)
 })
 
 test('requires an E3 source to verify company identity', () => {
@@ -234,8 +235,8 @@ test('replays the Snapmaker fixture offline with a stable VERIFY result', () =>
 
   const report = renderReport(scoutCase)
   assert.equal(scoutCase.decision, fixture.expectedDecision)
-  assert.match(report, /历史材料不能替代运行时实时核验|公司主体仍未核验/)
-  assert.match(report, /Interview questions/)
+  assert.match(report, /公司主体还没有核验/)
+  assert.match(report, /## 5\. 面试问题/)
   assert.equal(scoutCase.interviewQuestions.length, 5)
 })
 
@@ -373,13 +374,11 @@ test('renders an evidence summary, source URLs, and a prioritized verification c
   })
   const report = renderReport(scoutCase)
 
-  assert.match(report, /证据概况：2 reported/)
+  assert.match(report, /## 3\. 线索与待确认/)
+  assert.match(report, /The role exists\./)
+  assert.match(report, /## 4\. 风险与红旗[\s\S]*A litigation risk is reported/)
   assert.match(report, /https:\/\/example\.com\/job/)
-  assert.match(report, /## Verification checklist/)
-  const checklistStart = report.indexOf('## Verification checklist')
-  const checklist = report.slice(checklistStart, report.indexOf('## Claim ledger'))
-  assert.ok(checklist.indexOf('[blocking]') < checklist.indexOf('[material]'), 'blocking items rank before material')
-  assert.match(checklist, /→ 下一步：Confirm the mandate/)
+  assert.match(report, /## 5\. 面试问题/)
 })
 
 test('round-trips a case through the five-file export', () => {
@@ -418,7 +417,7 @@ test('round-trips a case through the five-file export', () => {
 
   const files = exportCaseFiles(scoutCase)
   assert.deepEqual(Object.keys(files).sort(), ['case.json', 'claims.json', 'events.jsonl', 'report.md', 'sources.json'])
-  assert.match(files['report.md'], /## Verification checklist/)
+  assert.match(files['report.md'], /## 5\. 面试问题/)
   assert.match(files['events.jsonl'], /"type":"case_started"/)
 
   const restored = importCaseFromFiles(files)
@@ -463,6 +462,7 @@ test('generates a deduplicated, prioritized interview question list', () => {
     sourceIds: ['job-posting'],
     confidenceNote: 'A source describes the role.',
     nextAction: 'Confirm the mandate in the interview.',
+    interviewQuestion: 'Who owns the people roadmap in this role?',
   })
   scoutCase = addClaim(scoutCase, {
     claimId: 'claim-reporting',
@@ -474,15 +474,20 @@ test('generates a deduplicated, prioritized interview question list', () => {
     sourceIds: [],
     confidenceNote: 'No source discloses the reporting line.',
     nextAction: 'Ask who this role reports to.',
+    interviewQuestion: 'Who would this role report to on day one?',
   })
 
   const questions = generateInterviewQuestions(scoutCase)
-  assert.ok(questions.includes('Confirm the mandate in the interview.'))
-  assert.ok(questions.includes('Ask who this role reports to.'))
+  // 0.9.4: only explicit interviewQuestion values feed the head; nextAction
+  // (a research instruction) must never become an interview question.
+  assert.ok(questions.includes('Who owns the people roadmap in this role?'))
+  assert.ok(questions.includes('Who would this role report to on day one?'))
+  assert.ok(!questions.includes('Confirm the mandate in the interview.'))
+  assert.ok(!questions.includes('Ask who this role reports to.'))
   // missing verified mandate dimension gets its default question
   const mandateQuestion = questions.findIndex(q => q.includes('最终决定权'))
   assert.ok(mandateQuestion >= 0)
-  // 0.9.1 ordering: untouched dimensions rank after the missing required ones
+  // untouched dimensions rank after the missing required ones
   const untouchedQuestion = questions.findIndex(q => q.includes('法定名称'))
   assert.ok(
     untouchedQuestion > mandateQuestion,
@@ -718,63 +723,146 @@ function legacyCase() {
   return decideCase(scoutCase)
 }
 
-// Captured verbatim from dsh-scout 0.9.0 (HEAD 3406a4e) before the 0.9.1
-// Coverage block existed. Only that block may be inserted: any other byte
-// change to the zh-CN report is a regression.
-const LEGACY_REPORT_GOLDEN = [
-  "# Legacy Co — HR Head",
+// Captured from dsh-scout 0.9.3 plus the 0.9.4 report changes (verified
+// subject block, source capture dates, derived interview questions). Any byte
+// change to the zh-CN report must update this baseline deliberately, together
+// with CHANGELOG.
+const REPORT_GOLDEN = [
+  "# Legacy Co",
   "",
-  "- 判断：**VERIFY**",
-  "- 理由：公司主体仍未核验，不能直接推进。",
-  "- 目标：判断是否值得进入下一轮，并准备面试反问",
-  "- 证据概况：1 reported",
+  "> 岗位：HR Head ｜ 地点：未指定 ｜ 证据截至：2026-08-16 ｜ 判断：继续核验（VERIFY）",
+  "> 目标：判断是否值得进入下一轮，并准备面试反问",
+  "> 阅读顺序：30 秒结论 → 主体 → 已确认事实 → 待确认 → 风险 → 面试问题 → 附录（证据台账）",
+  "> 可信度：已核实=多来源一致；有报道=单一来源；推断=由事实推出；未知=没查到；未找到证据=不代表不存在",
   "",
-  "## Key supporting evidence (up to 3)",
+  "## 30 秒结论",
   "",
-  "- 暂无已核验的支持证据",
+  "**继续核验**：公司主体还没有核验，现在还不能决定是否推进。",
   "",
-  "## Blocking or unresolved risks (up to 3)",
+  "- 主体：Legacy Co——尚未核验。",
+  "- 业务：公开信息未形成可核实的产品描述。",
+  "- 资本：未找到公开融资信息。",
   "",
-  "- **reported / E1 / blocking** The role may own the people roadmap.（维度：mandate；来源：job-posting；置信说明：Only the job posting says so.；下一步：Confirm the mandate in the interview.）",
+  "**最该先确认的 3 件事**",
   "",
-  "## Role task and authority hypotheses",
+  "1. 取得官方登记证据（营业执照或工商公示页），确认合同主体与信用代码",
+  "2. 确认岗位是否真实在招、汇报给谁、有多大授权（只能见面问）",
   "",
-  "- **reported / E1 / blocking** The role may own the people roadmap.（维度：mandate；来源：job-posting；置信说明：Only the job posting says so.；下一步：Confirm the mandate in the interview.）",
+  "## 1. 公司与主体（已确认）",
   "",
-  "## Verification checklist",
+  "| 项目 | 内容 |",
+  "|---|---|",
+  "| 法定主体 | 未知 |",
+  "| 统一社会信用代码 | 未知 |",
+  "| 注册地 | 未知 |",
+  "| 法定代表人 | 未知 |",
+  "| 品牌关系 | 未知 |",
+  "| 核验等级 | 未核验：尚无足够来源确认主体。 |",
   "",
-  "- [blocking] claim-1: The role may own the people roadmap. → 下一步：Confirm the mandate in the interview.",
+  "**这意味着**：可以按该主体继续尽调与判断，但把它视为“未拿到官方盖章的事实”，关键动作（签约、背调、开票）前需复核。",
   "",
-  "## Claim ledger",
+  "## 2. 已确认的事实（阶段：可直接使用）",
   "",
-  "- **reported / E1 / blocking** The role may own the people roadmap.（维度：mandate；来源：job-posting；置信说明：Only the job posting says so.；下一步：Confirm the mandate in the interview.）",
+  "- 暂无已核实的事实",
   "",
-  "## Sources",
+  "## 3. 线索与待确认（阶段：先别当事实）",
   "",
-  "- job-posting: Legacy job posting [job_posting / E1] — https://example.com/job",
+  "### 还能通过公开渠道再核实",
   "",
-  "## Interview questions",
+  "- The role may own the people roadmap.",
+  "  - 转述 · 单方说法 · 下一步：Confirm the mandate in the interview.",
   "",
+  "## 4. 风险与红旗（阶段：已识别）",
+  "",
+  "- 暂无已识别风险",
+  "",
+  "## 5. 面试问题（按主题，最多 12 条）",
+  "",
+  "### 岗位与团队",
+  "",
+  "- 该岗位当前是否真实在招？招聘状态与到岗时间如何？",
+  "- 该岗位直接向谁汇报？虚线/实线如何划分？",
+  "- 该岗位在哪些事项上拥有最终决定权？团队与预算规模如何？",
+  "- 创始团队背景与股权结构如何？关键决策人是谁？",
   "- 这个岗位在前三个月最重要的业务结果是什么？",
   "- 该岗位直接向谁汇报，在哪些事项上拥有最终决定权？",
   "- 现有团队、预算和外部供应商资源分别是什么？",
   "- 当前最影响业务增长的组织问题是什么？",
   "- 六个月后，哪些可观察结果代表这个岗位取得成功？",
   "",
+  "### 产品与市场",
+  "",
+  "- 核心产品当前处于什么阶段？技术壁垒与依赖是什么？",
+  "- 目标市场与主要竞争对手是谁？差异化优势如何维持？",
+  "",
+  "### 通用",
+  "",
+  "- 公司主体的法定名称、注册号与注册地是什么？如何与品牌对应？",
+  "",
+  "## 6. 距离下一步还差什么",
+  "",
+  "- **为什么现在还是「继续核验」**：公司主体还没有核验，现在还不能决定是否推进。",
+  "- **补齐后可以进入「可以推进」**：",
+  "  - 主体：取得官方登记页/营业执照（或明确接受“多源交叉核验”的残余风险）",
+  "  - 授权与职责：The role may own the people roadmap.",
+  "- **最小行动清单**：",
+  "  1. 取得官方登记证据（营业执照或工商公示页），确认合同主体与信用代码",
+  "  2. 确认岗位是否真实在招、汇报给谁、有多大授权（只能见面问）",
+  "",
+  "## 附录 A · 来源表",
+  "",
+  "| 编号 | 来源 | 类型 | 可信度 | 采集日期 |",
+  "|---|---|---|---|---|",
+  "| job-posting | Legacy job posting | 招聘平台 | 单方说法 | 2026-08-16 |",
+  "- job-posting: https://example.com/job",
+  "",
+  "## 附录 B · 主张台账（技术可追溯）",
+  "",
+  "| 结论摘要 | 阶段/证据 | 影响 | 来源 | 下一步 |",
+  "|---|---|---|---|---|",
+  "| The role may own the people roadmap. | 转述 · 单方说法 | 阻断级 | job-posting | Confirm the mandate in th… |",
+  "",
+  "## 附录 C · 调查覆盖度",
+  "",
+  "- 主体身份：未调查",
+  "- 岗位真实性：未调查",
+  "- 汇报关系：未调查",
+  "- 授权与职责：仅 1 条待确认线索",
+  "- 公司与创始人：未调查",
+  "- 产品与技术：未调查",
+  "- 市场与竞争：未调查",
+  "- 融资与商业化：未调查",
+  "- 组织与人力：未调查",
+  "- 风险：未调查",
+  "- 岗位匹配度：未调查",
+  "",
+  "## 附录 D · 术语表",
+  "",
+  "| 代码 | 面向读者的说法 | 含义 |",
+  "|---|---|---|",
+  "| E3 | 官方/权威来源 | 政府登记、监管、官方文件；可直接引用 |",
+  "| E2 | 独立来源 | 独立媒体、公开数据库、招聘平台；可交叉核对 |",
+  "| E1 | 单方说法 | 公司自述、招聘信息、匿名评价、用户提供 |",
+  "| E0 | 未找到证据 | 没找到证据，不等于不存在 |",
+  "| verified | 已核验 | 多来源一致 |",
+  "| reported | 转述 | 单一来源转述，未交叉 |",
+  "| inferred | 推断 | 由事实推出，不是直接证据 |",
+  "| contradicted | 矛盾 | 两个来源口径不一致 |",
+  "| unknown | 未知 | 没查到，需要补 |",
+  "| needs_verification | 待核验 | 有线索但未核实 |",
+  "",
   "> 本报告只表达当前证据边界内的判断，不替代法律、投资或医疗意见。",
   "",
 ].join('\n')
 
-test('keeps the zh-CN report byte-identical apart from the Coverage block', () => {
+test('matches the 0.9.4 zh-CN report baseline', () => {
   const report = renderReport(legacyCase())
-  const lines = report.split('\n')
-  const start = lines.indexOf('## Coverage')
-  assert.ok(start > 0, 'the Coverage block is present')
-  let end = start + 1
-  while (end < lines.length && !lines[end].startsWith('## ')) end += 1
-  const withoutCoverage = [...lines.slice(0, start), ...lines.slice(end)].join('\n')
-  assert.equal(withoutCoverage, LEGACY_REPORT_GOLDEN)
-  assert.match(report, /## Coverage\n\n- identity/)
+  assert.equal(report, REPORT_GOLDEN)
+  // the blocks added in 0.9.4 are part of the baseline, not optional extras
+  assert.match(report, /## 1\. 公司与主体（已确认）/)
+  assert.match(report, /\| job-posting \| Legacy job posting \| 招聘平台 \| 单方说法 \| 2026-08-16 \|/)
+  assert.match(report, /## 5\. 面试问题（按主题，最多 12 条）/)
+  assert.match(report, /## 附录 D · 术语表/)
 })
 
 test('renders an English report and English questions, defaulting to the case language', () => {
@@ -796,24 +884,26 @@ test('renders an English report and English questions, defaulting to the case la
   scoutCase = decideCase(scoutCase)
 
   const report = renderReport(scoutCase)
-  assert.match(report, /- Decision: \*\*VERIFY\*\*/)
-  assert.match(report, /- Reason: The company identity is not verified yet/)
-  assert.match(report, /- identity \(Company identity\): verified 0 \/ open 0 \/ untouched: yes/)
-  assert.match(report, /- mandate \(Mandate and authority\): verified 0 \/ open 1 \/ untouched: no/)
-  assert.match(report, /Untouched dimensions \(10\):/)
-  assert.match(report, /The role may own the people roadmap\. \(dimension: mandate; sources: job-posting/)
+  assert.match(report, /^> Role: CTO \| Location: unspecified \| Evidence as of: 2026-08-16 \| Decision: verify \(VERIFY\)$/m)
+  assert.match(report, /## 30-second verdict/)
+  assert.match(report, /## 1\. The company and its legal subject \(confirmed\)/)
+  assert.match(report, /## 4\. Risks and red flags/)
+  assert.match(report, /## 5\. Interview questions \(by theme, up to 12\)/)
+  assert.match(report, /reported · Single-party account/)
   assert.doesNotMatch(report, /[\u4e00-\u9fff]/, 'the English report contains no CJK characters')
 
   const questions = generateInterviewQuestions(scoutCase)
   assert.equal(questions.length, 12)
-  assert.equal(questions[0], 'Confirm the mandate in the interview.')
-  assert.ok(questions.includes('Is this role actually open right now, and what are the hiring status and start date?'))
+  // 0.9.4: nextAction no longer feeds questions; missing dimensions lead with
+  // their own default question (role existence first in REQUIRED order).
+  assert.equal(questions[0], 'Is this role actually open right now, and what are the hiring status and start date?')
+  assert.ok(!questions.includes('Confirm the mandate in the interview.'))
   assert.ok(questions.every(question => !/[\u4e00-\u9fff]/.test(question)))
 
   // an explicit option overrides the case language in either direction
   const zhReport = renderReport(scoutCase, { language: 'zh-CN' })
-  assert.match(zhReport, /- 判断：\*\*VERIFY\*\*/)
-  assert.doesNotMatch(zhReport, /- Decision:/)
+  assert.match(zhReport, /^> 岗位：CTO .*判断：继续核验（VERIFY）$/m)
+  assert.doesNotMatch(zhReport, /Decision:/)
   const zhQuestions = generateInterviewQuestions(scoutCase, { language: 'zh-CN' })
   assert.ok(zhQuestions.includes('公司主体的法定名称、注册号与注册地是什么？如何与品牌对应？'))
   // the comparison report follows the same language resolution
@@ -864,14 +954,12 @@ test('computes coverage for all 11 dimensions, including untouched ones', () =>
   })
 
   const report = renderReport(scoutCase)
-  assert.match(report, /## Coverage/)
-  assert.ok(report.indexOf('## Coverage') < report.indexOf('## Key supporting evidence'))
-  assert.match(report, /- identity（主体身份）：已核验 1 \/ 待核验 0 \/ 未调查：否/)
-  assert.match(report, /- mandate（授权与职责）：已核验 0 \/ 待核验 0 \/ 未调查：是/)
-  assert.match(
-    report,
-    /未调查维度（9）：role_existence、reporting_line、mandate、company_and_founder、product_and_technology、market_and_competition、financing_and_commercialization、organization_and_hr、role_fit/,
-  )
+  assert.match(report, /## 附录 C · 调查覆盖度/)
+  assert.ok(report.indexOf('## 附录 C') < report.indexOf('## 附录 D'))
+  assert.match(report, /- 主体身份：1 条已核实/)
+  assert.match(report, /- 授权与职责：未调查/)
+  assert.match(report, /- 岗位真实性：未调查/)
+  assert.match(report, /- 市场与竞争：未调查/)
   // coverage drives the question list
   assert.ok(generateInterviewQuestions(scoutCase)
     .includes('该岗位当前是否真实在招？招聘状态与到岗时间如何？'))
@@ -996,7 +1084,7 @@ test('imports a legacy five-file export without the new optional fields', () =>
   assert.equal(restored.decisionReasonCode, undefined)
   assert.equal('decisionReasonCode' in restored, false)
   assert.deepEqual(restored.interviewQuestions, ['第一个问题？'])
-  assert.match(renderReport(restored), /## Coverage/)
+  assert.match(renderReport(restored), /## 附录 C · 调查覆盖度/)
 
   // a payload that predates the language field still imports as zh-CN
   const withoutLanguage = importCaseFromFiles({
@@ -1074,13 +1162,13 @@ test('renders the exported report.md in the requested language', () => {
   const zhCase = legacyCase()
   const zhFiles = exportCaseFiles(zhCase)
   assert.equal(zhFiles['report.md'], renderReport(zhCase))
-  assert.match(zhFiles['report.md'], /^- 判断：\*\*VERIFY\*\*$/m)
+  assert.match(zhFiles['report.md'], /^> 岗位：HR Head .*判断：继续核验（VERIFY）$/m)
   const enFiles = exportCaseFiles(zhCase, { language: 'en' })
   assert.equal(enFiles['report.md'], renderReport(zhCase, { language: 'en' }))
   // the framework text follows the requested language; stored case data
   // (claim text, decisionReason, curated questions) is not translated
-  assert.match(enFiles['report.md'], /^- Decision: \*\*VERIFY\*\*$/m)
-  assert.match(enFiles['report.md'], /^Untouched dimensions \(10\):/m)
+  assert.match(enFiles['report.md'], /^> Role: HR Head \| Location: unspecified \| Evidence as of: 2026-08-16 \| Decision: verify \(VERIFY\)$/m)
+  assert.match(enFiles['report.md'], /## Appendix C - Investigation coverage/)
   assert.doesNotMatch(enFiles['report.md'], /- 判断：/)
   assert.equal(
     JSON.parse(enFiles['case.json']).language,
@@ -1137,3 +1225,147 @@ test('keeps the ingest draft defaults in both language tables', () => {
   assert.doesNotMatch(renderReport(ingestCase), /[\u4e00-\u9fff]/)
   assert.ok(generateInterviewQuestions(ingestCase).every(question => !/[\u4e00-\u9fff]/.test(question)))
 })
+
+test('a corroborated identity still blocks PROCEED until an E3 registration source exists', () => {
+  let scoutCase = createCase({ caseId: 'gate', companyName: 'Example Co', roleTitle: 'HR Head' })
+  scoutCase = addSource(scoutCase, {
+    sourceId: 'agg-a', type: 'public_database', title: 'Aggregator A',
+    url: 'https://www.qixin.com/brand/gate', capturedAt: '2026-08-14T00:00:00.000Z',
+    evidenceLevel: 'E2', status: 'captured',
+  })
+  scoutCase = addSource(scoutCase, {
+    sourceId: 'agg-b', type: 'company_official', title: 'App Store listing',
+    url: 'https://apps.apple.com/cn/app/gate/id1', capturedAt: '2026-08-14T00:00:00.000Z',
+    evidenceLevel: 'E2', status: 'captured',
+  })
+  scoutCase = verifyIdentity(scoutCase, {
+    legalEntity: 'Example Co Ltd',
+    registrationNumber: 'REG-1',
+    registeredRegion: 'Shenzhen',
+    legalRepresentative: 'Example Person',
+    brandRelationship: 'Operating entity',
+    sourceIds: ['agg-a', 'agg-b'],
+    fieldSources: {
+      legalEntity: ['agg-a'],
+      registrationNumber: ['agg-a', 'agg-b'],
+      registeredRegion: ['agg-a'],
+      legalRepresentative: ['agg-b'],
+      brandRelationship: ['agg-b'],
+    },
+  })
+  assert.equal(scoutCase.subject.identityStatus, 'corroborated')
+
+  // Cover every dimension with verified, informational claims so the only
+  // remaining blocker is the identity tier itself.
+  const dimensions = [
+    'identity', 'role_existence', 'reporting_line', 'mandate', 'company_and_founder',
+    'product_and_technology', 'market_and_competition', 'financing_and_commercialization',
+    'organization_and_hr', 'risk', 'role_fit',
+  ]
+  dimensions.forEach((dimension, index) => {
+    scoutCase = addClaim(scoutCase, {
+      claimId: `gate-${index}`,
+      text: `Verified ${dimension} claim.`,
+      status: 'verified',
+      evidenceLevel: 'E2',
+      dimension,
+      impact: 'informational',
+      sourceIds: ['agg-a'],
+      confidenceNote: 'Two independent sources agree.',
+      nextAction: 'None.',
+    })
+  })
+  scoutCase = decideCase(scoutCase)
+  assert.equal(scoutCase.decision, 'VERIFY')
+  assert.equal(scoutCase.decisionReasonCode, 'identity')
+  assert.match(scoutCase.decisionReason, /多源交叉核验/)
+  assert.doesNotMatch(scoutCase.decisionReason, /尚有未核验结论/, 'nothing else is open in this case')
+})
+
+test('new source-type hints and URL normalization behave as documented', () => {
+  // 0.9.4 inference: first-party app stores and Chinese registry aggregators are
+  // no longer lumped into `other`.
+  assert.deepEqual(inferSourceType('https://apps.apple.com/cn/app/x/id1'), { type: 'company_official', inferred: true })
+  assert.deepEqual(inferSourceType('https://play.google.com/store/apps/details?id=x'), { type: 'company_official', inferred: true })
+  assert.deepEqual(inferSourceType('https://www.qixin.com/brand/x'), { type: 'public_database', inferred: true })
+  assert.deepEqual(inferSourceType('https://m-harmony.qcc.com/pl/x.html'), { type: 'public_database', inferred: true })
+  // Campaign parameters do not change source identity, content-selectors do.
+  assert.equal(
+    normalizeSourceUrl('https://example.com/a?utm_source=x&hmsr=y#frag'),
+    'https://example.com/a',
+  )
+  assert.equal(
+    normalizeSourceUrl('https://example.com/a?id=42&utm_medium=z'),
+    'https://example.com/a?id=42',
+  )
+})
+
+test('verifyIdentity rejects field provenance that points outside sourceIds', () => {
+  let scoutCase = createCase({ caseId: 'provenance', companyName: 'Example Co', roleTitle: 'HR Head' })
+  scoutCase = addSource(scoutCase, {
+    sourceId: 'a', type: 'public_database', title: 'A', url: 'https://www.qixin.com/brand/a',
+    capturedAt: '2026-08-14T00:00:00.000Z', evidenceLevel: 'E2', status: 'captured',
+  })
+  scoutCase = addSource(scoutCase, {
+    sourceId: 'b', type: 'company_official', title: 'B', url: 'https://apps.apple.com/cn/app/b/id1',
+    capturedAt: '2026-08-14T00:00:00.000Z', evidenceLevel: 'E2', status: 'captured',
+  })
+  assert.throws(
+    () => verifyIdentity(scoutCase, {
+      legalEntity: 'Example Co Ltd',
+      registrationNumber: 'REG-1',
+      registeredRegion: 'Shenzhen',
+      legalRepresentative: 'P',
+      brandRelationship: 'brand',
+      sourceIds: ['a', 'b'],
+      fieldSources: { legalEntity: ['a'], registrationNumber: ['a', 'b'], registeredRegion: ['a'], legalRepresentative: ['b'], brandRelationship: ['missing'] },
+    }),
+    /Unknown source for identity field brandRelationship: missing/,
+  )
+})
+
+test('the reader-facing report body stays free of internal codes and keeps the stage order', () => {
+  const report = renderReport(legacyCase())
+  const appendixStart = report.indexOf('## 附录 A · 来源表')
+  assert.ok(appendixStart > 0, 'the audit appendix exists')
+  const body = report.slice(0, appendixStart)
+
+  // The readability contract: readers never see evidence codes, source ids, or
+  // internal status/impact enum values in the narrative; those live in the
+  // appendices with the glossary.
+  assert.doesNotMatch(body, /\bE[0-3]\b/, 'no evidence codes in the reader-facing body')
+  assert.doesNotMatch(body, /src-\d+/, 'no source ids in the reader-facing body')
+  assert.doesNotMatch(
+    body,
+    /\b(verified|reported|inferred|contradicted|needs_verification|blocking|material|informational)\b/i,
+    'no internal enum values in the reader-facing body',
+  )
+  assert.match(body, /已核验|有报道|推断|未知/)
+
+  // Stage order is the navigation contract: verdict -> subject -> confirmed ->
+  // open -> risks -> questions -> gap -> appendices.
+  const stageHeadings = [
+    '## 30 秒结论',
+    '## 1. 公司与主体（已确认）',
+    '## 2. 已确认的事实（阶段：可直接使用）',
+    '## 3. 线索与待确认（阶段：先别当事实）',
+    '## 4. 风险与红旗（阶段：已识别）',
+    '## 5. 面试问题（按主题，最多 12 条）',
+    '## 6. 距离下一步还差什么',
+    '## 附录 A · 来源表',
+  ]
+  const positions = stageHeadings.map(heading => report.indexOf(heading))
+  assert.ok(positions.every(position => position >= 0), 'every stage heading is present')
+  assert.deepEqual([...positions].sort((left, right) => left - right), positions, 'stages render in order')
+
+  // The English framework keeps the same contract (case-authored prose is
+  // deliberately not translated, so only heading/label checks apply here).
+  const enReport = renderReport(createCase({
+    caseId: 'readable-en', companyName: 'Readable Co', roleTitle: 'CTO', language: 'en',
+  }))
+  const enBody = enReport.slice(0, enReport.indexOf('## Appendix A - Sources'))
+  assert.ok(enBody.length > 0, 'the English appendix boundary exists')
+  assert.doesNotMatch(enBody, /\bE[0-3]\b/)
+  assert.doesNotMatch(enBody, /src-\d+/)
+  assert.match(enBody, /## 30-second verdict/)
+})