dsh-vibe-math 2.0.22 → 2.2.0

package/audit-v5-integrity.mjs

@@ -0,0 +1,343 @@
+// ============================================================
+// V5 INTEGRITY AUDIT — static self-check of vibe-math-v5.js against the ways this
+// kind of single-file plugin actually breaks:
+//   1. a function CALLED but never defined (ReferenceError at runtime only)
+//   2. a `params.X` read for a key that DEFAULT_PARAMS never declares (silent undefined)
+//   3. a tool handler calling `s.NAME(...)` on the session API object that the session
+//      never returns (TypeError only when that tool is used)
+//   4. documented error codes that are never raised, and raised codes never documented
+//   5. leftover development markers / TODO scaffolding
+// Run: node audit-v5-integrity.mjs   (exit 1 on any finding)
+// ============================================================
+import { readFileSync, existsSync } from 'node:fs'
+
+const FILE = new URL('./vibe-math-v5/vibe-math-v5.js', import.meta.url)
+const raw = readFileSync(FILE, 'utf8')
+// Strip comments and string literals before any identifier scan. Without this the
+// heuristic matches English words inside comments that merely precede a '(' (e.g.
+// "// per unit (" becomes a phantom call to unit()), drowning the real findings.
+function stripNoise(s) {
+  let out = ''
+  let i = 0
+  const n = s.length
+  while (i < n) {
+    const c = s[i], c2 = s[i + 1]
+    if (c === '/' && c2 === '/') { while (i < n && s[i] !== '\n') i++; continue }
+    if (c === '/' && c2 === '*') { i += 2; while (i < n && !(s[i] === '*' && s[i + 1] === '/')) i++; i += 2; continue }
+    if (c === "'" || c === '"' || c === '`') {
+      const q = c
+      i++
+      while (i < n) {
+        if (s[i] === '\\') { i += 2; continue }
+        if (s[i] === q) { i++; break }
+        if (q !== '`' && s[i] === '\n') break
+        i++
+      }
+      out += q + q   // keep a placeholder so `X: ''` shape survives
+      continue
+    }
+    out += c
+    i++
+  }
+  return out
+}
+const src = stripNoise(raw)
+const findings = []
+const notes = []
+
+const lineOf = (idx) => src.slice(0, idx).split('\n').length
+
+// ---- 1. called-but-undefined -------------------------------------------
+const defined = new Set()
+for (const m of src.matchAll(/function\s+([A-Za-z_$][\w$]*)\s*\(/g)) defined.add(m[1])
+for (const m of src.matchAll(/(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=/g)) defined.add(m[1])
+for (const m of src.matchAll(/(?:const|let|var)\s+\{([^}]+)\}\s*=/g)) {
+  for (const part of m[1].split(',')) { const n = part.split(':').pop().trim(); if (n) defined.add(n) }
+}
+for (const m of src.matchAll(/catch\s*\(\s*([A-Za-z_$][\w$]*)\s*\)/g)) defined.add(m[1])
+// Function/method PARAMETERS are locally bound identifiers too, not free calls.
+for (const m of src.matchAll(/function\s*[A-Za-z_$]*\s*\(([^)]*)\)/g)) {
+  for (const raw of m[1].split(',')) {
+    const name = raw.trim().replace(/[={].*$/s, '').trim()
+    if (/^[A-Za-z_$][\w$]*$/.test(name)) defined.add(name)
+  }
+}
+for (const m of src.matchAll(/\(([^()]*)\)\s*=>/g)) {
+  for (const raw of m[1].split(',')) {
+    const name = raw.trim().replace(/[={].*$/s, '').trim()
+    if (/^[A-Za-z_$][\w$]*$/.test(name)) defined.add(name)
+  }
+}
+for (const m of src.matchAll(/([A-Za-z_$][\w$]*)\s*=>/g)) defined.add(m[1])
+// JS/DSH globals that are legitimately free
+const GLOBALS = new Set([
+  'if', 'for', 'while', 'switch', 'catch', 'return', 'typeof', 'function', 'new', 'await', 'delete', 'void', 'do', 'else', 'try',
+  'Array', 'Object', 'JSON', 'Number', 'String', 'Boolean', 'Math', 'Date', 'Promise', 'Set', 'Map', 'WeakRef', 'WeakMap', 'Symbol', 'Error',
+  'isFinite', 'isNaN', 'parseInt', 'parseFloat', 'encodeURIComponent', 'decodeURIComponent', 'structuredClone',
+  'AbortSignal', 'console', 'require', 'import', 'super', 'this', 'of', 'in', 'instanceof',
+  'RegExp', 'Proxy', 'Reflect', 'AggregateError', 'TextEncoder', 'TextDecoder', 'URL', 'BigInt', 'Intl', 'Buffer', 'process',
+])
+const LOCAL_METHODS = new Set()
+for (const m of src.matchAll(/[{,]\s*([A-Za-z_$][\w$]*)\s*[:(]/g)) LOCAL_METHODS.add(m[1])
+for (const m of src.matchAll(/\.\s*([A-Za-z_$][\w$]*)\s*\(/g)) LOCAL_METHODS.add(m[1])
+
+const called = new Map()
+for (const m of src.matchAll(/(?<![.\w$])([A-Za-z_$][\w$]*)\s*\(/g)) {
+  const name = m[1]
+  if (GLOBALS.has(name) || LOCAL_METHODS.has(name)) continue
+  if (!called.has(name)) called.set(name, { n: 0, line: lineOf(m.index) })
+  called.get(name).n++
+}
+for (const [name, info] of called) {
+  if (!defined.has(name)) findings.push('line ' + info.line + ': called but never defined: ' + name + '()  (' + info.n + ' call site(s))')
+}
+
+// ---- 2. params keys ----------------------------------------------------
+const dpBlock = /const DEFAULT_PARAMS = \{([\s\S]*?)\n    \}/.exec(src)
+if (!dpBlock) findings.push('could not locate DEFAULT_PARAMS')
+else {
+  const declared = new Set()
+  for (const m of dpBlock[1].matchAll(/^\s*([A-Za-z_$][\w$]*)\s*:/gm)) declared.add(m[1])
+  const used = new Map()
+  for (const m of src.matchAll(/\bparams\.([A-Za-z_$][\w$]*)/g)) used.set(m[1], (used.get(m[1]) || 0) + 1)
+  for (const [k, n] of used) {
+    if (!declared.has(k)) findings.push('params.' + k + ' read but not declared in DEFAULT_PARAMS (' + n + ' use(s))')
+  }
+  notes.push('DEFAULT_PARAMS keys: ' + declared.size + '; params.* reads: ' + used.size)
+}
+
+// ---- 3. session-API surface used by tool handlers -----------------------
+// The returned API object is the last `return { ... }` inside makeSession.
+const apiStart = src.lastIndexOf('    return {\n      sessionId,')
+if (apiStart === -1) findings.push('could not locate the session API return object')
+else {
+  const apiEnd = src.indexOf('\n    }\n  }', apiStart)
+  const apiText = src.slice(apiStart, apiEnd === -1 ? apiStart + 4000 : apiEnd)
+  const apiKeys = new Set()
+  for (const m of apiText.matchAll(/(?:^|[\s{,])([A-Za-z_$][\w$]*)\s*:/g)) apiKeys.add(m[1])
+  for (const m of apiText.matchAll(/(?:^|[\s{,])([A-Za-z_$][\w$]*)\s*,/g)) apiKeys.add(m[1])
+  const usedOnS = new Map()
+  for (const m of src.matchAll(/(?<![\w$.])s\.([A-Za-z_$][\w$]*)\s*\(/g)) {
+    if (!usedOnS.has(m[1])) usedOnS.set(m[1], lineOf(m.index))
+  }
+  for (const [k, line] of usedOnS) {
+    if (!apiKeys.has(k)) findings.push('line ' + line + ': tool handler calls s.' + k + '() but the session API does not export it')
+  }
+  notes.push('session API keys: ' + apiKeys.size + '; s.*() called: ' + usedOnS.size)
+}
+
+// ---- 4. error codes ----------------------------------------------------
+// Scan the RAW source: these patterns live inside string literals, which `src` strips.
+const raised = new Set()
+for (const m of raw.matchAll(/v5err\(\s*'(V5_[A-Z_]+)'/g)) raised.add(m[1])
+for (const m of raw.matchAll(/code:\s*'(V5_[A-Z_]+)'/g)) raised.add(m[1])
+const docs = readFileSync(new URL('./vibe-math-v5/实现方案.md', import.meta.url), 'utf8')
+const documented = new Set()
+for (const m of docs.matchAll(/`(V5_[A-Z_]+)`/g)) documented.add(m[1])
+const onlyDocs = new Set()
+for (const m of docs.matchAll(/(V5_[A-Z_]+)/g)) onlyDocs.add(m[1])
+const raisedNotDocumented = [...raised].filter(c => !onlyDocs.has(c))
+const documentedNotRaised = [...documented].filter(c => !raised.has(c))
+if (raisedNotDocumented.length) findings.push('error codes raised but absent from 实现方案.md: ' + raisedNotDocumented.join(', '))
+if (documentedNotRaised.length) notes.push('documented but not raised in code (ok if advisory): ' + documentedNotRaised.join(', '))
+notes.push('error codes raised: ' + raised.size)
+
+// ---- 5. leftover scaffolding -------------------------------------------
+for (const bad of ['@@V5_SECTION@@', 'TODO', 'FIXME', 'XXX', 'PLACEHOLDER']) {
+  if (src.includes(bad)) findings.push('leftover development marker: ' + bad)
+}
+// every event type declared in EV must be appended somewhere
+const evBlock = /const EV = \{([\s\S]*?)\n\}/.exec(raw)
+if (evBlock) {
+  const keys = [...evBlock[1].matchAll(/([A-Za-z]+):\s*'(vibe5\/[a-z]+)'/g)]
+  for (const [, prop, literal] of keys) {
+    const uses = (raw.match(new RegExp("EV\\." + prop + "\\b", 'g')) || []).length
+    if (uses <= 1) findings.push('event type EV.' + prop + ' (' + literal + ') is declared but never committed')
+  }
+  notes.push('event types declared: ' + keys.length)
+}
+
+// ---- 6. composition sanity --------------------------------------------
+// The v5 preset is a composition, and a typo in a row `name` is a mounting failure that
+// no unit test of the plugin can catch (the mock calls apply() directly and never goes
+// through the loader). v4 is a proven-good composition mounted on the same hosts, so any
+// package row v5 names that v4 does not is either a genuine new dependency or a typo —
+// and a new dependency must be justified, so surface it for review.
+function packageRows(yaml) {
+  const rows = []
+  const lines = yaml.split('\n')
+  for (let i = 0; i < lines.length; i++) {
+    const idm = /^\s*-\s*id:\s*(\S+)\s*$/.exec(lines[i])
+    if (!idm) continue
+    const row = { id: idm[1], name: '', disabled: false, line: i + 1 }
+    for (let j = i + 1; j < lines.length && j < i + 12; j++) {
+      if (/^\s*-\s*id:\s*\S+\s*$/.test(lines[j])) break
+      const nm = /^\s*name:\s*'?([^'\n]+?)'?\s*$/.exec(lines[j])
+      if (nm && !row.name) row.name = nm[1].trim()
+      if (/^\s*disabled:\s*true/.test(lines[j])) row.disabled = true
+    }
+    if (row.name) rows.push(row)
+  }
+  return rows
+}
+const v5yaml = readFileSync(new URL('./vibe-math-v5/agent.cordis.yml', import.meta.url), 'utf8')
+const v4yaml = readFileSync(new URL('./vibe-math-v4/agent.cordis.yml', import.meta.url), 'utf8')
+const v5rows = packageRows(v5yaml)
+const v4names = new Set(packageRows(v4yaml).map(r => r.name))
+const RELATIVE_OK = new Set(['./vibe-math-v5.js'])
+if (!v5rows.length) findings.push('composition: no rows parsed out of agent.cordis.yml (is the file still YAML?)')
+for (const r of v5rows) {
+  if (r.name === 'cordis:group') continue
+  if (r.name.startsWith('./')) {
+    if (!RELATIVE_OK.has(r.name)) findings.push('composition line ' + r.line + ': relative row name "' + r.name + '" has no matching file in the preset directory')
+    continue
+  }
+  if (!v4names.has(r.name)) findings.push('composition line ' + r.line + ': row "' + r.id + '" names "' + r.name + '", which v4 does not — verify the package/name is correct')
+}
+// the preset must reference its own plugin row, and that file must exist
+if (!v5rows.some(r => r.name === './vibe-math-v5.js')) findings.push('composition: the preset never mounts ./vibe-math-v5.js')
+// prefix AND text are required on the persona row for the DSH schema and for back-compat
+const personaBlock = /- id:\s*persona[\s\S]*?(?=\n-\s*id:)/.exec(v5yaml)
+if (!personaBlock) findings.push('composition: no persona row found')
+else {
+  if (!/^\s*prefix:\s*\|/m.test(personaBlock[0])) findings.push('composition: persona row lacks the required `prefix` key')
+  if (!/^\s*text:\s*\|/m.test(personaBlock[0])) findings.push('composition: persona row lacks the legacy `text` key')
+}
+notes.push('composition rows: ' + v5rows.length + '; non-v4 package rows: ' + v5rows.filter(r => r.name !== 'cordis:group' && !r.name.startsWith('./') && !v4names.has(r.name)).length)
+
+// ---- 7. requirements traceability against the plan ---------------------
+// "No missing logic" is only checkable mechanically if the SPEC is machine-readable.
+// The plan's §15 names every tool and §16 every parameter, so compare those sets
+// against the implementation: a name in the plan but not the code is an unimplemented
+// requirement, and a name in the code but not the plan is undocumented surface.
+{
+  const plan = readFileSync(new URL('./vibe-math-v5/实现方案.md', import.meta.url), 'utf8')
+  const planTools = new Set()
+  for (const m of plan.matchAll(/\bvibe_v5_[a-z_]+/g)) planTools.add(m[0])
+  const codeTools = new Set()
+  for (const m of raw.matchAll(/registerTool\(\s*'(vibe_v5_[a-z_]+)'/g)) codeTools.add(m[1])
+  // documented-but-wildcarded placeholders are not real tools
+  const IGNORE = new Set(['vibe_v5_', 'vibe_v5_record_'])
+  for (const t of planTools) {
+    if (IGNORE.has(t)) continue
+    if (!codeTools.has(t)) findings.push('plan names tool ' + t + ' but the plugin never registers it')
+  }
+  const undocumented = [...codeTools].filter(t => !planTools.has(t))
+  if (undocumented.length) notes.push('tools registered but not named in the plan: ' + undocumented.join(', '))
+  notes.push('plan tools: ' + planTools.size + '; registered tools: ' + codeTools.size)
+
+  // Parameters: only the §16 default table, NOT the §15 tool tables (whose rows also
+  // begin with a backticked name).
+  const declared2 = new Set()
+  if (dpBlock) for (const m of dpBlock[1].matchAll(/^\s*([A-Za-z_$][\w$]*)\s*:/gm)) declared2.add(m[1])
+  const sec16 = /##\s*16\.[\s\S]*?(?=\n##\s*17\.)/.exec(plan)
+  const paramRows = new Set()
+  if (sec16) {
+    for (const m of sec16[0].matchAll(/^\|\s*`([A-Za-z][\w]*)`(?:\s*\/\s*`([A-Za-z][\w]*)`)?\s*\|/gm)) {
+      paramRows.add(m[1])
+      if (m[2]) paramRows.add(m[2])
+    }
+  } else findings.push('could not locate the plan\'s §16 parameter table')
+  for (const p of paramRows) {
+    if (!declared2.has(p)) findings.push('plan documents parameter `' + p + '` but DEFAULT_PARAMS does not declare it')
+  }
+  notes.push('plan §16 parameter rows: ' + paramRows.size)
+
+  // The plan's philosophy is enforced by concrete gates; assert the load-bearing ones
+  // still exist so a future edit cannot quietly drop a guard.
+  const GATES = [
+    ['temp workers cannot vote', "if (m.kind === 'temp') return   // no vote"],
+    ['temp workers cannot hire', "if (caller.kind === 'temp') return { ok: false, code: 'V5_NOT_VOTER'"],
+    ['only the academician assigns', "code: 'V5_NOT_ACADEMICIAN', message: 'only the academician (or the office) can assign tasks'"],
+    ['only the academician sets priorities', "code: 'V5_NOT_ACADEMICIAN', message: 'only the academician (or the office) can set priorities'"],
+    ['permanent-staff changes need the office', "code: 'V5_NOT_ACADEMICIAN', message: '解聘常驻研究员只能向所办提议，由所办批准（成员不能直接执行）'"],
+    ['assignment objections are broadcast', 'if (p.reject_assign && typeof p.reject_assign === \'object\' && params.memberMayRejectAssign)'],
+    ['the academician has no extra vote weight', 'const E = voters().map((m) => m.id)'],
+    ['members may reject an assignment', "memberMayRejectAssign: true,"],
+    ['the charter states the progress definition', "'  · Progress/<你>/progress.md —— **你的研究日志**（叙述体，可追加）。'"],
+    ['the charter describes the academician as organizer', "'  【四、你的组织职责与边界（院士）】'"],
+    ['the framework never assigns on its own', "agenda: '本所较长时间没有新进展。请你们自行讨论：现在最该推进的是什么？谁来做？是否需要发起验证？'"],
+
+    // ── PROMPT / INTERACTION CORRECTNESS GATES ─────────────────────────────
+    // The 2026-09 field test shipped a framework whose every member brief named the WRONG
+    // member. These gates keep the structural fixes in place, and the companion
+    // prompt-v5-integrity.test.mjs asserts the TEXT those fixes produce.
+    ['the status block takes the member it describes', 'function briefBlock(member) {'],
+    ['an unknown identity fails loudly instead of being guessed', "throw v5err('V5_INTERNAL', 'briefBlock: a member is required"],
+    ['the status block is built from that member, never a global', 'function stateBlock(member) {\n      return briefBlock(member)\n    }'],
+    ['the joiner is committed to the roster BEFORE its brief is built', "member.phase = 'active'\n      member.childId = ''\n      await putMember(member)"],
+    ['the charter is frozen at hire and reused on resume', 'const persona = member.persona || memberPersona(member)'],
+    ['a rebuilt session is framed as a rebuild', "const resume = mode === 'resume'"],
+    ['leadership text follows the live roster', 'function academicianId() {'],
+    ['no charter invents a leader when there is none', "本所当前**没有在册院士**"],
+    ['the office resolves as the office, never as a guessed member', "try { if (rootOf(agent) === agent) return 'office' } catch (e) { /* fall through */ }"],
+    ['the mailbox is acked BEFORE the round prompt is built', 'if (pending.length) await ackPending(pending)\n      const base = typeof baseFn === \'function\' ? baseFn() : baseFn'],
+    ['framework feedback has its own sender (never a self-message)', "return await say('framework', { to: memberId, kind: 'notice', text: String(text) })"],
+    ['an assignment is framed by its true origin', "if (m.kind === 'assign') return (m.from === 'office' ? '【所办分派】' : '【院士分派】') + m.text"],
+    ['a nudge is framed as supervision, not as an assignment', "to, kind: 'nudge',"],
+    ['a voters-only broadcast is framed as such', "if (m.kind === 'voters') return '【研究所·致全体表决者 from ' + m.from + '】' + m.text"],
+    ['relayed messages carry their true sender', "await say(callerId, { to: 'voters', kind: 'voters', text: '提议开会：「' + agenda + '」（' + kind + '）' })"],
+    ['a member that failed to provision stays visible', "b.push('[未就位] ' + absent.map((m) => m.id + '（' + m.phase + '）').join('、'))"],
+    ['the objection channel is documented in the reply spec', '"reject_assign": {"task_id":"t-3"'],
+    ['the task-done channel is documented in the reply spec', '"task_done": "t-3",'],
+    ['the meeting input channel is documented in the reply spec', '"input": "本轮会议/辩论的发言正文'],
+    ['the work push is paced, not an unbounded loop', 'if ((now() - (lastActiveAt.get(m.id) || 0)) < idleMs) continue'],
+  ]
+  for (const [label, needle] of GATES) {
+    if (!raw.includes(needle)) findings.push('philosophy gate missing from the implementation: ' + label)
+  }
+  notes.push('philosophy gates checked: ' + GATES.length)
+
+  // The prompt corpus is a SHIPPED deliverable, not a build artifact: a human must be able
+  // to read the exact text every member receives without decoding session logs.
+  const REPO_ROOT = new URL('.', import.meta.url)
+  const needFiles = [
+    ['the prompt-integrity suite is shipped', 'prompt-v5-integrity.test.mjs'],
+    ['the machine-readable prompt corpus is shipped', 'prompt-corpus-v5/prompt-corpus-v5.json'],
+    ['the human-readable prompt corpus is shipped', 'prompt-corpus-v5/prompt-corpus-v5.md'],
+  ]
+  for (const [label, rel] of needFiles) {
+    let ok = false
+    try { ok = existsSync(new URL(rel, REPO_ROOT)) } catch (e) { ok = false }
+    if (!ok) findings.push('missing shipped prompt-correctness artifact: ' + label + ' (' + rel + ')')
+  }
+  notes.push('prompt-correctness artifacts checked: ' + needFiles.length)
+
+  // The corpus must actually contain the interactions a reviewer needs to see, and must
+  // never contain a wrong-identity brief.
+  try {
+    const corpusPath = new URL('prompt-corpus-v5/prompt-corpus-v5.json', REPO_ROOT)
+    const c = JSON.parse(readFileSync(corpusPath, 'utf8'))
+    const kinds = new Set((c.prompts || []).map(p => p.kind))
+    const need = ['founding', 'founding-temp', 'founding-leaderless', 'resume', 'normal', 'checkpoint',
+      'verify', 'verify-debate', 'meeting', 'meeting-proposal', 'inbox-dm', 'inbox-voters', 'inbox-chat',
+      'inbox-office', 'inbox-assign', 'inbox-nudge', 'inbox-office-assign', 'inbox-office-nudge',
+      'notice', 'notice-claim', 'after-failure']
+    for (const k of need) if (!kinds.has(k)) findings.push('the prompt corpus is missing a ' + k + ' prompt')
+    const all = (c.prompts || []).map(p => p.prompt + '\n' + (p.charter || '')).join('\n')
+    if (/你是 \?/.test(all)) findings.push('the prompt corpus contains a wrong-identity "你是 ?" brief')
+    if (/\[状态\][^\n]*你是\s+(\S+?)[^\n]*\n/.test(all)) {
+      // every [状态] line must name a real member id, never a placeholder
+      for (const m of all.match(/\[状态\][^\n]*/g) || []) {
+        const id = (/\[状态\]\s*你是\s+(\S+?)（/.exec(m) || [])[1]
+        if (!id || id === '?' || id === 'undefined') findings.push('the prompt corpus has a bad identity line: ' + m.slice(0, 60))
+      }
+    }
+    notes.push('prompt corpus: ' + (c.total || 0) + ' prompts, ' + kinds.size + ' kinds')
+  } catch (e) {
+    findings.push('the prompt corpus could not be read/parsed: ' + String((e && e.message) || e))
+  }
+}
+
+// ---- report ------------------------------------------------------------
+console.log('-- V5 integrity audit --')
+for (const n of notes) console.log('  note: ' + n)
+console.log('')
+if (findings.length) {
+  for (const f of findings) console.error('  FINDING: ' + f)
+  console.error('')
+  console.error(findings.length + ' finding(s)')
+  process.exit(1)
+}
+console.log('clean: no undefined calls, no undeclared params keys, no missing session API, no leftover markers')
+process.exit(0)

package/audit-v5-sensitivity.mjs

@@ -0,0 +1,306 @@
+// ============================================================
+// V5 SENSITIVITY PROBES — prove the suites are not vacuous.
+//
+// Each probe copies vibe-math-v5.js, applies ONE targeted mutation that breaks a
+// specific guarantee, and runs the referencing suite against the mutated copy. A probe
+// PASSES when the suite goes RED (non-zero exit) — i.e. the assertions really do detect
+// that break. A probe that stays green means the suite has a blind spot.
+//
+// The prompt-integrity block below exists because the 2026-09 field test found a bug
+// that 123 tool-level assertions could not see: every member's brief named the WRONG
+// member. Any guarantee about the TEXT a member reads must have a probe that proves
+// prompt-v5-integrity.test.mjs detects its violation.
+//
+// Run: node audit-v5-sensitivity.mjs
+// ============================================================
+import { readFileSync, writeFileSync, mkdtempSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+import { spawnSync } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+
+const SRC = new URL('./vibe-math-v5/vibe-math-v5.js', import.meta.url)
+const TESTS = {
+  selfdrive: fileURLToPath(new URL('./selfdrive-v5.mjs', import.meta.url)),
+  round2: fileURLToPath(new URL('./e2e-v5-round2.test.mjs', import.meta.url)),
+  prompt: fileURLToPath(new URL('./prompt-v5-integrity.test.mjs', import.meta.url)),
+}
+const original = readFileSync(SRC, 'utf8')
+const REPO = fileURLToPath(new URL('.', import.meta.url))
+const dir = mkdtempSync(join(tmpdir(), 'v5-sens-'))
+
+// Each probe: { name, ref, guarantee, from, to }
+// `from` must occur exactly once, so a mutation can never quietly hit the wrong site.
+const probes = [
+  {
+    // The m floor is enforced by THREE cooperating checks (an early `bTrue + bFalse < m`
+    // return, the conflict check, and a final `bTrue >= m`), so a single weakened check is
+    // masked by the others and is a SEMANTICALLY INERT mutation — it must never be used as
+    // a probe (it would look like a "blind spot"). Forcing the quorum itself to 1 breaks
+    // the rule on every path at once, which is exactly the guarantee under test.
+    name: 'quorum-forced-to-one',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '④ only >= m boolean votes may verify (m must be min(quorumCap, |voters|))',
+    from: "      return Math.max(1, Math.min(cap, voterCount()))",
+    to: "      return 1",
+  },
+  {
+    name: 'abstention-counts-as-true',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '⑤ an abstention must NOT count toward the quorum',
+    from: "        else if (p === 0) bFalse += 1\n        else abstain += 1",
+    to: "        else if (p === 0) bFalse += 1\n        else { abstain += 1; bTrue += 1 }",
+  },
+  {
+    // `judgeVerdict` checks the m floor, then the conflict, then the floor again, and each
+    // guard masks the next — so deleting a guard is inert. The behaviour-changing break is
+    // letting a CONFLICT pass as a verdict, which is what this mutation does.
+    name: 'conflict-allowed',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '④ a conflicting 1 vs 0 must BLOCK the verdict',
+    from: "        return Object.assign(base, { outcome: 'undecided', reason: 'conflicting assertions (true=' + bTrue + ', false=' + bFalse + ')' })",
+    to: "        return Object.assign(base, { outcome: 'true', reason: 'conflicting assertions (true=' + bTrue + ', false=' + bFalse + ')' })",
+  },
+  {
+    name: 'temp-worker-can-vote',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '⑦ a temp worker must NOT be able to vote',
+    from: "      if (member.kind === 'temp') {\n        // Temp workers have no vote",
+    to: "      if (false) {\n        // Temp workers have no vote",
+  },
+  {
+    name: 'academician-gate-removed',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '⑬ only the academician may assign tasks',
+    from: "        return { ok: false, code: 'V5_NOT_ACADEMICIAN', message: 'only the academician (or the office) can assign tasks' }",
+    to: "        return { ok: false, code: 'NO_GATE', message: 'x' }",
+  },
+  {
+    name: 'spawn-not-registered-inflight',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '⑯ the founding turn must be registered in-flight or its end is dropped',
+    from: "      inflight.set(started.childId, shortId())",
+    to: "",
+  },
+  {
+    name: 'group-chat-not-fanned-out',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '③ group chat must reach every other member',
+    from: "      if (to === 'all' || to === '') targets = activeMembers().filter((m) => m.id !== from)",
+    to: "      if (to === 'all' || to === '') targets = activeMembers().filter((m) => m.id !== from).slice(0, 1)",
+  },
+  {
+    name: 'verify-round-advances-anyway',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '④ a round must not advance without every voter answering',
+    from: "      const missing = need.filter((id) => !vs.votes[id])\n      if (missing.length) {",
+    to: "      const missing = need.filter((id) => !vs.votes[id])\n      if (false) {",
+  },
+  {
+    name: 'fire-does-not-release',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '⑨ firing must really release the resident child',
+    from: "          if (typeof subagents.drainContinuableChildren === 'function') await subagents.drainContinuableChildren(rootAgent, [target.childId])",
+    to: "          if (false) await subagents.drainContinuableChildren(rootAgent, [target.childId])",
+  },
+  {
+    name: 'solve-vote-not-unanimous',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '⑥ the institute must not stop unless EVERY voter agrees',
+    from: "      if (!vs.every((id) => solveVotes.get(id) === true)) return false",
+    to: "      if (false) return false",
+  },
+  // ── probes added after the round-2 audit found these defects ──────────────
+  {
+    name: 'fallback-state-never-loaded',
+    ref: 'e2e-v5-round2.test.mjs',
+    guarantee: '⑰ the file fallback must LOAD persisted state before any read (restart safety)',
+    from: "      if (backend.kind === 'file' && typeof backend.load === 'function') await backend.load()",
+    to: "      if (false) await backend.load()",
+  },
+  {
+    name: 'solve-vote-never-re-evaluated',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '⑥ a solve vote landing OUTSIDE a meeting must still stop the institute',
+    // The anchor must include the CALL. An `if (false)` inserted before the comment would
+    // leave the real `await checkSolved()` below it untouched — an inert mutation that
+    // would masquerade as a blind spot.
+    from: "      solveVotes.set(memberId, val === true)\n      // Evaluate the stop condition on EVERY solve vote, not only when a meeting\n      // finalizes. A vote that lands after the meeting closed — a late reply, or an\n      // ordinary round carrying vote_solved — would otherwise be recorded and never\n      // read, leaving a unanimously-concluded institute running forever.\n      await checkSolved()",
+    to: "      solveVotes.set(memberId, val === true)",
+  },
+  {
+    name: 'proposal-only-kicks-scheduler',
+    ref: 'selfdrive-v5.mjs',
+    guarantee: '④ a proposal must actually START, not just ask the scheduler to try',
+    from: "      await armNextVerify()\n      if (!hasVerifyInFlight()) await scheduleNext()",
+    to: "      await scheduleNext()",
+  },
+  {
+    name: 'begin-not-exclusive',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '⑱ a second proposal must QUEUE, never start a concurrent ballot',
+    from: "      if (beginLock) return\n      if (currentVerify()) return\n      beginLock = true",
+    to: "      beginLock = true",
+  },
+  // NOTE — a probe for `continueMeetingRound`'s `if (finalizeLock) { armHeartbeat(); return }`
+  // re-arm was REMOVED, not because the re-arm is unnecessary but because the state it
+  // guards is UNREACHABLE, so no black-box probe can detect its removal:
+  //   · `schedulePass` handles a live meeting BEFORE it looks at a verification, and
+  //   · `startMeeting` parks any meeting while `hasVerifyInFlight()`,
+  // so a meeting and a running verify settlement can never overlap. The re-arm stays in
+  // the code as cheap insurance against a future ordering change; leaving a probe that can
+  // never go red would be a false "detection" and is worse than no probe.
+  {
+    name: 'meeting-never-finalized',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '⑲ a meeting that collected every input must actually finalize and write its minutes',
+    from: "      finalizeLock = 'meeting'\n      try {\n        await finalizeMeeting(meeting)",
+    to: "      finalizeLock = 'meeting'\n      try {\n        meeting = null",
+  },
+
+  // ── PROMPT / INTERACTION INTEGRITY PROBES ────────────────────────────────
+  // These are the probes that would have caught the 2026-09 field-test bug. Every one
+  // of them breaks something a member READS (identity, roster, framing, persona), and
+  // prompt-v5-integrity.test.mjs must go RED for each.
+  {
+    name: 'brief-names-the-last-woken-member',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '⑳ a prompt\'s [状态] block must name the member it is sent to (the exact field bug: briefs named the previous member)',
+    from: "    function stateBlock(member) {\n      return briefBlock(member)\n    }",
+    to: "    function stateBlock(member) {\n      return briefBlock(memberById(currentMember) || activeMembers()[0] || member)\n    }",
+  },
+  {
+    name: 'joiner-absent-from-own-roster',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '⑳ a founding brief must show the roster INCLUDING its reader (roster committed before the prompt is built)',
+    from: "      member.phase = 'active'\n      member.childId = ''\n      await putMember(member)",
+    to: "      member.childId = ''\n      await putMember(member)",
+  },
+  {
+    name: 'inbox-message-delivered-twice',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉑ one prompt must not deliver the same message twice',
+    from: "      if (pending.length) await ackPending(pending)\n      const base = typeof baseFn === 'function' ? baseFn() : baseFn",
+    to: "      const base = typeof baseFn === 'function' ? baseFn() : baseFn\n      if (pending.length) await ackPending(pending)",
+  },
+  {
+    name: 'charter-rewritten-on-resume',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉒ the charter is frozen at hire; a resume must not rewrite the induction snapshot',
+    from: "      const persona = member.persona || memberPersona(member)",
+    to: "      const persona = memberPersona(member)",
+  },
+  {
+    name: 'resume-framed-as-induction',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉓ a rebuilt session must not be told it just joined the institute',
+    from: "      const resume = mode === 'resume'",
+    to: "      const resume = false",
+  },
+  {
+    name: 'meeting-proposal-misattributed',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉔ a relayed message must carry its TRUE sender, never the last-woken member',
+    from: "          await say(callerId, { to: 'voters', kind: 'voters', text: '提议开会：「' + agenda + '」（' + kind + '）' })",
+    to: "          await say(academicianId() || callerId, { to: 'voters', kind: 'voters', text: '提议开会：「' + agenda + '」（' + kind + '）' })",
+  },
+  {
+    name: 'office-impersonates-a-member',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉕ the office/host caller must resolve to the office, not to a guessed member',
+    // The FAITHFUL regression mutation: restore the old "answer with whoever this session
+    // woke last" fallback, which made the office's own assignments resolve to a random
+    // researcher and be refused as V5_NOT_ACADEMICIAN.
+    from: "        try { if (rootOf(agent) === agent) return 'office' } catch (e) { /* fall through */ }",
+    to: "        if (currentMember && memberById(currentMember)) return currentMember",
+  },
+  {
+    name: 'office-assignment-framed-as-academician',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉖ an assignment must be framed by its true origin (office vs academician)',
+    from: "      if (m.kind === 'assign') return (m.from === 'office' ? '【所办分派】' : '【院士分派】') + m.text",
+    to: "      if (m.kind === 'assign') return '【院士分派】' + m.text",
+  },
+  {
+    name: 'nudge-mislabelled-as-assignment',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉗ a nudge is supervision, not an assignment, and must say so',
+    from: "        to, kind: 'nudge',",
+    to: "        to, kind: 'assign',",
+  },
+  {
+    name: 'framework-notice-sent-as-self-message',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉘ framework feedback must actually reach the member (not be refused as a self-message)',
+    from: "      return await say('framework', { to: memberId, kind: 'notice', text: String(text) })",
+    to: "      return await say(memberId, { to: memberId, kind: 'notice', text: String(text) })",
+  },
+  {
+    name: 'failed-member-hidden',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉙ a member that failed to provision must be visible in [未就位]',
+    from: "      if (absent.length) b.push('[未就位] ' + absent.map((m) => m.id + '（' + m.phase + '）').join('、'))",
+    to: "      if (false) b.push('[未就位] ' + absent.map((m) => m.id + '（' + m.phase + '）').join('、'))",
+  },
+  {
+    name: 'leaderless-charter-invents-a-leader',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉚ with academician:false no charter may name a leader who does not exist',
+    from: "      const a = academicianId()\n      const L = [",
+    to: "      const a = 'acad'\n      const L = [",
+  },
+  {
+    name: 'reply-spec-hides-the-objection-channel',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉛ every field the framework honours must be documented in the reply spec',
+    from: "      L.push('  \"reject_assign\": {\"task_id\":\"t-3\",\"why\":\"你对这项分派的异议理由\"}",
+    to: "      if (false) L.push('  \"reject_assign\": {\"task_id\":\"t-3\",\"why\":\"你对这项分派的异议理由\"}",
+  },
+  {
+    name: 'task-owner-rewoken-unpaced',
+    ref: 'prompt-v5-integrity.test.mjs',
+    guarantee: '㉜ a task owner must be pushed on a paced cadence, not in an unbounded tight loop',
+    from: "        if ((now() - (lastActiveAt.get(m.id) || 0)) < idleMs) continue",
+    to: "        if (false) continue",
+  },
+]
+
+let probesPassed = 0
+let probesFailed = 0
+console.log('-- V5 sensitivity probes --')
+console.log('(a probe passes when breaking the guarantee turns the suite RED)')
+console.log('')
+
+for (const p of probes) {
+  const occurrences = original.split(p.from).length - 1
+  if (occurrences !== 1) {
+    console.error('  SETUP-FAIL - ' + p.name + ': anchor matched ' + occurrences + ' times (need exactly 1)')
+    probesFailed++
+    continue
+  }
+  const mutated = original.replace(p.from, p.to)
+  const file = join(dir, p.name + '.js')
+  writeFileSync(file, mutated, 'utf8')
+  const testPath = TESTS[p.ref === 'e2e-v5-round2.test.mjs' ? 'round2'
+    : p.ref === 'prompt-v5-integrity.test.mjs' ? 'prompt' : 'selfdrive']
+  const r = spawnSync(process.execPath, [testPath], {
+    env: Object.assign({}, process.env, { V5_PLUGIN: file }),
+    encoding: 'utf8',
+    cwd: REPO,
+  })
+  const red = r.status !== 0
+  if (red) {
+    probesPassed++
+    console.log('  ok - ' + p.name + ' [' + p.ref + '] => suite went RED as required  [' + p.guarantee + ']')
+  } else {
+    probesFailed++
+    console.error('  BLIND SPOT - ' + p.name + ' [' + p.ref + '] => suite stayed GREEN, so it does NOT detect: ' + p.guarantee)
+  }
+}
+
+rmSync(dir, { recursive: true, force: true })
+console.log('')
+console.log('sensitivity: ' + probesPassed + ' probes detected the break, ' + probesFailed + ' blind spots')
+if (probesFailed) process.exit(1)
+console.log('ALL PROBES RED AS REQUIRED')
+process.exit(0)