elanous 0.2.36 → 0.2.38

package/src/cli/pr-land-overlap-evidence.ts

@@ -21,11 +21,13 @@
  *   하나라도 못 재거나 어긋나면 거부 — 호출부는 종전 거부를 그대로 낸다(fail-closed).
  * - 관측: `pr.land` · `overlap-evidence` (decision · reason · 잰 값).
  */
+import { createHash } from 'node:crypto';
 import { basename, dirname, join, resolve } from 'node:path';
 import { debug } from '../debug/log.js';
 import type { CmdRunner } from '../autopilot/pr-manager.js';
 import { parseReviewResultOutput } from '../task-agent/review-result-capture.js';
 import { verifyVirtualRebasePatch } from './pr-land-virtual-rebase.js';
+import { proveReviewCarry } from './review-carry.js';
 
 const SHA40 = /^[0-9a-f]{40}$/i;
 
@@ -36,6 +38,8 @@ interface OverlapEvidenceFile {
   gate?: { head: string; baseCommit: string; passed: boolean };
   /** `self review --json` stdout 을 받은 파일(TA: `<state>/review-results/<card>-<pr>-<head접두 10~40>.json`); 내용의 전체 head도 확인한다. */
   reviewResult: string;
+  /** Explicit old-head review for a mechanically merged main head. Always re-proved against Git. */
+  reviewCarry?: { oldHead: string; oldBase: string; newBase: string; patchId: string; pathsModesHash: string; reviewSha256: string };
   /** Evidence-file override for explicitly replaced failed reviews. Each reason is the verifier's refusal reason. */
   supersedes?: { reviewResult: string; reason: string }[];
   /** OPEN follow-up PR that owns the findings intentionally split from this landing. */
@@ -82,9 +86,15 @@ function checkSelectedReviewAttempts(input: VerifyOverlapEvidenceInput, e: Parti
   let names: readonly string[];
   try { names = input.listDir(dir); } catch { return { ok: false, reason: 'review-attempts-unmeasured' }; }
   const filename = new RegExp(`^[A-Za-z0-9][A-Za-z0-9._-]*-${input.pr}-([a-f0-9]{10,40})\\.json$`, 'i');
-  const candidates = [...names].filter((name) => {
+  const selectedHead = e.reviewCarry?.oldHead?.toLowerCase() ?? head;
+  // A fresh review of the merged head supersedes carry. Never hide a failed current-head attempt.
+  if (e.reviewCarry && names.some((name) => {
     const match = filename.exec(name);
     return Boolean(match && head.startsWith(match[1]!.toLowerCase()));
+  })) return { ok: false, reason: 'carry-new-head-review-exists' };
+  const candidates = [...names].filter((name) => {
+    const match = filename.exec(name);
+    return Boolean(match && selectedHead.startsWith(match[1]!.toLowerCase()));
   }).map((name) => join(dir, name));
   if (!candidates.includes(selected)) return { ok: false, reason: 'review-selected-missing' };
   let physicalDir: string;
@@ -127,7 +137,7 @@ function checkSelectedReviewAttempts(input: VerifyOverlapEvidenceInput, e: Parti
   }
   for (const path of candidates) {
     if (path === selected) continue;
-    const review = checkReview(input, { reviewResult: path }, head);
+    const review = checkReview(input, { reviewResult: path }, selectedHead);
     if (review.ok) {
       if (superseded.has(path)) return { ok: false, reason: 'review-supersedes-passing' };
       continue;
@@ -324,8 +334,12 @@ type Checked = { ok: false; reason: string; baseTip?: string; gateBase?: string;
 const ACCEPTED_REVIEW_VERDICTS: ReadonlySet<string> = new Set(['pass', 'warn']);
 const COMMIT_MARK = '\u0001';
 
-function checkReview(input: Pick<VerifyOverlapEvidenceInput, 'pr' | 'readFile'>, e: Partial<OverlapEvidenceFile>, head: string, baseTip?: string): { ok: false; reason: string; baseTip?: string } | { ok: true; reviewResult: string } {
+function checkReview(input: Pick<VerifyOverlapEvidenceInput, 'pr' | 'readFile'> & Partial<Pick<VerifyOverlapEvidenceInput, 'cwd' | 'remote' | 'branch'>>,
+  e: Partial<OverlapEvidenceFile>, head: string, baseTip?: string): { ok: false; reason: string; baseTip?: string } | { ok: true; reviewResult: string } {
   if (typeof e.reviewResult !== 'string' || !e.reviewResult) return { ok: false, reason: 'review-missing', baseTip };
+  const carry = e.reviewCarry;
+  const reviewHead = carry?.oldHead?.toLowerCase() ?? head;
+  if (carry && (!SHA40.test(reviewHead) || reviewHead === head)) return { ok: false, reason: 'carry-invalid-old-head', baseTip };
   // TA 가 받는 자리(`<state>/review-results/<card>-<pr>-<head접두 10~40>.json` · reviewResultPath)만; 내용의 전체 head도 확인한다.
   const resultName = basename(e.reviewResult);
   const resultMatch = /^([A-Za-z0-9][A-Za-z0-9._-]*)-(\d+)-([a-f0-9]{10,40})\.json$/i.exec(resultName);
@@ -333,7 +347,7 @@ function checkReview(input: Pick<VerifyOverlapEvidenceInput, 'pr' | 'readFile'>,
     || !resultMatch
     || Number(resultMatch[2]) !== input.pr
     || resultMatch[3]!.length < 10
-    || !head.startsWith(resultMatch[3]!.toLowerCase())) {
+    || !reviewHead.startsWith(resultMatch[3]!.toLowerCase())) {
     return { ok: false, reason: 'review-path-not-for-this-pr-head', baseTip };
   }
   let text: string;
@@ -341,7 +355,7 @@ function checkReview(input: Pick<VerifyOverlapEvidenceInput, 'pr' | 'readFile'>,
   const review = parseReviewResultOutput(text);
   if (!review) return { ok: false, reason: 'review-no-result', baseTip };
   if (review.pr !== input.pr) return { ok: false, reason: 'review-pr-mismatch', baseTip };
-  if (!review.head || review.head.toLowerCase() !== head) return { ok: false, reason: 'review-head-mismatch', baseTip };
+  if (!review.head || review.head.toLowerCase() !== reviewHead) return { ok: false, reason: 'review-head-mismatch', baseTip };
   // The capture parser projects away model provenance; inspect the same last result-shaped line here.
   const raw = lastReviewRecord(text);
   if (raw) {
@@ -377,6 +391,25 @@ function checkReview(input: Pick<VerifyOverlapEvidenceInput, 'pr' | 'readFile'>,
   if (review.reviewed !== true) return { ok: false, reason: 'review-not-reviewed', baseTip };
   if (review.verdict === null || !ACCEPTED_REVIEW_VERDICTS.has(review.verdict)) return { ok: false, reason: `review-verdict-${review.verdict ?? 'null'}`, baseTip };
   if (review.mustFix !== 0) return { ok: false, reason: review.mustFix === null ? 'review-must-fix-unknown' : `review-must-fix-${review.mustFix}`, baseTip };
+  if (carry) {
+    if (!input.cwd || !input.remote || !input.branch) return { ok: false, reason: 'carry-repo-unmeasured', baseTip };
+    const digest = createHash('sha256').update(text).digest('hex');
+    if (carry.reviewSha256 !== digest) return { ok: false, reason: 'carry-review-hash-mismatch', baseTip };
+    const proof = proveReviewCarry(input.cwd, reviewHead, head, input.remote, input.branch);
+    if (!proof.ok) return { ok: false, reason: proof.reason, baseTip };
+    const gate = e.gate;
+    if (!gate || gate.passed !== true || gate.head?.toLowerCase() !== head
+      || gate.baseCommit?.toLowerCase() !== proof.newBase) {
+      return { ok: false, reason: 'carry-new-head-gate-missing-or-mismatch', baseTip };
+    }
+    if (carry.oldBase?.toLowerCase() !== proof.oldBase || carry.newBase?.toLowerCase() !== proof.newBase
+      || carry.patchId?.toLowerCase() !== proof.patchId || carry.pathsModesHash?.toLowerCase() !== proof.pathsModesHash) {
+      return { ok: false, reason: 'carry-proof-mismatch', baseTip };
+    }
+    debug.log('pr.land', 'review-carry', { pr: input.pr, remote: input.remote, branch: input.branch,
+      oldHead: reviewHead, newHead: head, oldBase: proof.oldBase,
+      newBase: proof.newBase, patchId: proof.patchId, reviewSha256: digest, decision: 'accepted' });
+  }
   return { ok: true, reviewResult: e.reviewResult };
 }
 

package/src/cli/pr-land-refusal.ts

@@ -12,7 +12,7 @@ export function classifyPrLandRefusal(message: string, context: { isDraft?: bool
   if (message.startsWith('✗ ancestor-auto: ancestor-auto-not-ancestor:')) return 'not-ancestor';
   if (/^✗ (?:ancestor-auto|overlap-evidence): (?:review-missing|review-not-reviewed|review-error|review-no-result|review-unreadable|review-pr-mismatch|review-head-mismatch|review-path-not-for-this-pr-head|review-verdict-null|review-must-fix-unknown)(?:\b|$)/.test(message)) return 'review-missing';
   if (message.startsWith('✗ heavy-remote: PR base=unreadable ≠ main')) return 'pr-base-unreadable';
-  if (/^✗ heavy-remote: (?:원격|병합 직전 원격|node-b) 게이트 gate-host-busy(?:\b|\s|$)/.test(message)) return 'gate-host-busy';
+  if (/^✗ heavy-remote: (?:원격|병합 직전 원격|[a-z][a-z0-9-]*) 게이트 gate-host-busy(?:\b|\s|$)/.test(message)) return 'gate-host-busy';
   if (message.startsWith('✗ heavy-remote: 원격 게이트 gate-rc-1 · remote: stdout: CONFLICT (content): Merge conflict')) return 'gate-merge-conflict';
   if (message.startsWith('✗ heavy-remote: 원격 게이트 gate-rc-1 · remote: stderr: 건드린 src/scripts 파일과 baseline 밖 test 파일은 tsc 클린이어야 합니다(touch-clean).')) return 'gate-touch-clean';
   if (message.startsWith('✗ public-export-leak: 바뀐 파일')) return 'public-export-leak';

package/src/cli/pty-takeover-cli.ts

@@ -4,7 +4,7 @@ import { readFileSync, realpathSync, statSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { runGitCommand } from '../git-fs/runner.js';
 import { debug } from '../debug/log.js';
-import { getPty, listPty, renamePty, requestPtyTakeover } from '../pty-shell/registry.js';
+import { getPty, listPty, renamePty, requestPtyTakeover, startPty, type StartOpts } from '../pty-shell/registry.js';
 import { describePtyRunState, describeTurnCell, formatTurnCell, ptyTurnViewOfRow, readCheckoutHead, readCurrentInstallRecord, shortSha, UNKNOWN_TURN_CELL, type InstalledRecord, type PtyRunStateView, type PtyTurnCell } from '../pty-shell/tui-run-state.js';
 import { getPtyManifest, isProcessAlive, listPtyManifest, listPtyManifestRows, listPtyManifestRowsAt, ptyManifestDbPath, readPtyManifestFrame, reapDeadPtyManifest, reapDeadPtyManifestAt, reapStalePtyManifest, removePtyManifest, PTY_MANIFEST_CLOSED_TTL_MS, PTY_MANIFEST_STALE_MS, type PtyManifestExternalReapResult, type PtyManifestRow } from '../pty-shell/pty-manifest.js';
 import { readPtyEventsAfter, readPtyEventsAfterAt, type PtyEventLogReadResult, type PtyEventRow } from '../pty-shell/pty-event-log.js';
@@ -131,6 +131,10 @@ interface PtyLineageRow {
   readonly nestDepth?: number;
   readonly originRoot?: string;
   readonly controller?: string;
+  /** Copied from spawned/exited ledger payloads; omitted when the old event never recorded a seat. */
+  readonly seat?: string;
+  /** Cumulative bytes from the lifecycle payload; omitted when the old event never recorded a total. */
+  readonly outputBytesTotal?: number;
 }
 
 interface PtyLineageGroup {
@@ -164,6 +168,7 @@ function ptyLineageResult(groups: readonly PtyLineageGroup[], unreadablePayloads
 type PtyLifecyclePayload = {
   event?: unknown; ptyId?: unknown; kind?: unknown; instance?: unknown; runId?: unknown; runIdSource?: unknown; workdir?: unknown; codeSha?: unknown;
   parentPtyId?: unknown; parentPid?: unknown; parentKind?: unknown; startedAt?: unknown; closedAt?: unknown;
+  seat?: unknown; outputBytesTotal?: unknown;
 };
 
 function stringField(value: unknown): string { return typeof value === 'string' ? value : ''; }
@@ -182,6 +187,10 @@ function lineageRowFromManifest(row: PtyManifestRow & { readonly sourceRoot?: st
     ...(row.nestDepth !== undefined ? { nestDepth: row.nestDepth } : {}),
     ...(row.originRoot !== undefined ? { originRoot: row.originRoot } : {}),
     ...(row.controller !== undefined ? { controller: row.controller } : {}),
+    ...(row.seat ? { seat: row.seat } : {}),
+    ...(typeof row.outputBytesTotal === 'number' && Number.isFinite(row.outputBytesTotal) && row.outputBytesTotal > 0
+      ? { outputBytesTotal: row.outputBytesTotal }
+      : {}),
   };
 }
 
@@ -200,16 +209,17 @@ function lifecyclePatchFromEvent(row: PtyEventRow, payload: PtyLifecyclePayload)
   const assignRunIdSource = (): void => {
     if (typeof payload.runIdSource === 'string') patch.runIdSource = normalizeRunIdSource(payload.runIdSource);
   };
-  const assignNumber = <K extends 'startedAt' | 'closedAt' | 'parentPid'>(key: K): void => {
+  const assignNumber = <K extends 'startedAt' | 'closedAt' | 'parentPid' | 'outputBytesTotal'>(key: K): void => {
     if (typeof payload[key] === 'number' && Number.isFinite(payload[key])) patch[key] = payload[key] as PtyLineageRow[K];
   };
   for (const key of ['kind', 'parentPtyId', 'parentKind', 'runId', 'workdir', 'codeSha'] as const) assignString(key);
+  if (typeof payload.seat === 'string' && payload.seat) patch.seat = payload.seat;
   assignRunIdSource();
   if (typeof payload.instance === 'string') patch.instance = payload.instance;
   else if (event === 'spawned') patch.instance = row.instance;
   const sourceRoot = (row as PtyEventRow & { readonly sourceRoot?: string }).sourceRoot;
   if (sourceRoot) patch.sourceRoot = sourceRoot;
-  for (const key of ['startedAt', 'parentPid'] as const) assignNumber(key);
+  for (const key of ['startedAt', 'parentPid', 'outputBytesTotal'] as const) assignNumber(key);
   if (event === 'spawned' || event === 'seen-alive') {
     patch.alive = true;
     if (event === 'spawned') patch.closedAt = 0;
@@ -230,6 +240,10 @@ function mergeLifecyclePatch(previous: PtyLineageRow | undefined, patch: PtyLife
     ...patch,
     startedAt: base.startedAt || patch.startedAt || 0,
     ...(patch.workdir === undefined ? (base.workdir ? { workdir: base.workdir } : {}) : patch.workdir ? { workdir: patch.workdir } : {}),
+    ...(patch.seat === undefined ? (base.seat ? { seat: base.seat } : {}) : { seat: patch.seat }),
+    ...(patch.outputBytesTotal === undefined
+      ? (base.outputBytesTotal === undefined ? {} : { outputBytesTotal: base.outputBytesTotal })
+      : { outputBytesTotal: patch.outputBytesTotal }),
   };
 }
 
@@ -272,7 +286,15 @@ export function joinPtyLineage(
   for (const row of manifestRows) {
     if (manifestIds.has(row.id)) continue;
     manifestIds.add(row.id);
-    rows.set(row.id, lineageRowFromManifest(row));
+    const previous = rows.get(row.id);
+    const fromManifest = lineageRowFromManifest(row);
+    rows.set(row.id, {
+      ...fromManifest,
+      ...(fromManifest.seat === undefined && previous?.seat ? { seat: previous.seat } : {}),
+      ...(fromManifest.outputBytesTotal === undefined && previous?.outputBytesTotal !== undefined
+        ? { outputBytesTotal: previous.outputBytesTotal }
+        : {}),
+    });
   }
   const allRows = [...rows.values()];
   const byId = allRows.filter((row) => row.ptyId === query);
@@ -380,6 +402,8 @@ export function joinPtyLineage(
 
 export interface PtyTakeoverCommandDeps {
   getPty(id: string): PtyControlTarget | undefined;
+  /** Spawn a locally-owned PTY; default = registry startPty. */
+  startPty?(opts: StartOpts): PtyHandle;
   requestPtyTakeover(id: string, actor: 'human'): boolean;
   requestRemote(id: string, action: PtyControlAction, payload?: PtyControlPayload, options?: PtyControlRequestOptions): Promise<PtyControlResult>;
   /** Local (same-process) rename; default = registry renamePty. */
@@ -1492,7 +1516,9 @@ function ptyListJsonRow(row: PtyManifestRow, instance: string, sourceRoot: PtyMa
     ...provenanceFields(provenance),
     ownerProcessAlive: proof.liveness.alive,
     updatedAgeMs: proof.inactivity.ageMs,
-    outputBytesTotal: row.outputBytesTotal ?? 0,
+    // ⛔⭐ «미상 ≠ 0»: `outputBytesTotal` 가 optional 가 된 뒤로, 옛 스키마/NULL 행을 `0` 으로
+    //   채우면 «0바이트»라는 사실처럼 나온다. 미상은 'unknown' 으로 «보존»한다.
+    outputBytesTotal: row.outputBytesTotal ?? 'unknown',
     ...(row.lastControlAt === undefined ? {} : { lastControlAt: row.lastControlAt }),
     ...ptyAgeField(row.startedAt, observedAt),
     runTerminated,
@@ -2280,6 +2306,33 @@ export function registerPtyTakeoverCommands(program: Command, deps: PtyTakeoverC
     await deps.registerObservationSink?.();
     const result = await start(); (result.exitCode === 0 ? process.stdout : process.stderr).write(`${result.message}\n`); if (result.notice) process.stderr.write(`${result.notice}\n`); process.exitCode = result.exitCode;
   };
+  pty.command('new')
+    .description('Spawn a named PTY and register it for later access')
+    .requiredOption('--name <name>', 'human-readable PTY name')
+    .option('--purpose <purpose>', 'what this PTY is for')
+    .option('--kind <kind>', 'PTY kind (default: shell)', 'shell')
+    .option('--cwd <path>', 'working directory for the command')
+    .argument('[command...]', 'command and arguments to run after --')
+    .action(async (command: string[] = [], options: { name: string; purpose?: string; kind: string; cwd?: string }) => {
+      await deps.registerObservationSink?.();
+      if (command.length === 0) {
+        process.stderr.write('pty new requires a command after --\n');
+        process.exitCode = 2;
+        return;
+      }
+      try {
+        const handle = (deps.startPty ?? startPty)({
+          cmd: command[0]!, args: command.slice(1), kind: options.kind, nickname: options.name,
+          ...(options.purpose ? { purpose: options.purpose } : {}),
+          ...(options.cwd ? { workdir: options.cwd } : {}),
+        });
+        process.stdout.write(`${handle.id}\t${options.name}\t${options.purpose ?? ''}\n`);
+        process.exitCode = 0;
+      } catch (error) {
+        process.stderr.write(`failed to spawn PTY: ${error instanceof Error ? error.message : String(error)}\n`);
+        process.exitCode = 1;
+      }
+    });
   pty.command('list')
     .description('List PTY ids available to other PTY commands')
     // ⭐ 하니스 자식은 **자기 워크트리 인스턴스**에 등록된다 — 부모 뿌리만 보면 안 보인다(실측).

package/src/cli/release-checklist-read-cli.ts

@@ -1,10 +1,11 @@
 import { existsSync, readFileSync } from 'node:fs';
+import { spawnSync } from 'node:child_process';
 import { join } from 'node:path';
 import type { Command } from 'commander';
 import { debug } from '../debug/log.js';
 import { getElanousConfigDirOverride } from '../elanous-config-dir.js';
 import { effectiveInstanceRoot } from '../instance/resolve.js';
-import { devVersion, listChecklist, ownerMatches, parseOwner, parityGap, summarizeChecklist } from '../release-loop/checklist.js';
+import { checklistEvidenceChain, devVersion, listChecklist, ownerMatches, parseOwner, parityGap, summarizeChecklist, type ChecklistEvidenceStage } from '../release-loop/checklist.js';
 import { userConfigPath } from '../user-config.js';
 import { CliUserError } from './cli-user-error.js';
 import { writeStdoutJson } from './stdout-json.js';
@@ -55,8 +56,105 @@ export async function checklistOutput(v: string, codenames: Record<string, strin
   }
 }
 
+/** `version` scopes the item lookup; the default collector only needs that resolved item. */
+export type ChecklistEvidenceReader = (item: ReturnType<typeof listChecklist>['items'][number], version: string) => readonly ChecklistEvidenceStage[];
+
+const defaultChecklistEvidenceReader: ChecklistEvidenceReader = (item) => collectChecklistEvidenceStages(item);
+
+export type ChecklistEvidenceCommandRunner = (command: string, args: string[], timeout?: number) => { status: number | null; stdout: string; stderr: string; error?: string };
+const evidenceCommand: ChecklistEvidenceCommandRunner = (command, args, timeout = 20_000) => {
+  const result = spawnSync(command, args, { cwd: process.cwd(), encoding: 'utf8', timeout, maxBuffer: 4 * 1024 * 1024 });
+  return { status: result.status, stdout: result.stdout ?? '', stderr: result.stderr ?? '', ...(result.error ? { error: result.error.message } : {}) };
+}
+
+function evidenceJson(stdout: string): Record<string, unknown> | null {
+  for (const line of stdout.split(/\r?\n/u).reverse()) {
+    const start = line.indexOf('{');
+    if (start < 0) continue;
+    try { return JSON.parse(line.slice(start)) as Record<string, unknown>; } catch { /* try another complete JSON line */ }
+  }
+  return null;
+}
+
+export function collectChecklistEvidenceStages(item: ReturnType<typeof listChecklist>['items'][number], run: ChecklistEvidenceCommandRunner = evidenceCommand): ChecklistEvidenceStage[] {
+  const measuredAt = new Date().toISOString();
+  const evidence = item.evidence ?? '';
+  const prRefs = [...new Set([...evidence.matchAll(/(?:^|\s)#(\d{1,8})\b/gu)].map((match) => match[1]!))];
+  const pr = prRefs.length === 1 ? prRefs[0] : undefined;
+  const prLine = pr ? evidence.split(/\r?\n/u).find((line) => new RegExp(`(?:^|\\s)#${pr}\\b`).test(line)) : undefined;
+  const e1: ChecklistEvidenceStage = { id: 'E1', state: 'missing', source: 'checklist evidence + eln gh pr view', measuredAt,
+    reason: prRefs.length > 1 ? '근거에서 교차할 PR이 하나로 좁혀지지 않는다' : '근거에 병합 PR 번호가 없다' };
+  let mergeSha: string | null = null;
+  if (pr) {
+    const view = run('eln', ['gh', 'pr', 'view', pr, '--json', 'state,mergeCommit']);
+    const record = view.status === 0 ? evidenceJson(view.stdout) : null;
+    if (!record) { e1.state = 'unmeasurable'; e1.reason = `PR #${pr} 조회 실패${view.error ? `: ${view.error}` : ''}`; }
+    else if (record.state !== 'MERGED') { e1.reason = `PR #${pr} 상태가 MERGED가 아니다`; }
+    else {
+      const commit = record.mergeCommit && typeof record.mergeCommit === 'object' ? (record.mergeCommit as { oid?: unknown }).oid : null;
+      mergeSha = typeof commit === 'string' && /^[a-f0-9]{40}$/i.test(commit) ? commit : null;
+      if (!mergeSha) { e1.state = 'unmeasurable'; e1.reason = `PR #${pr} 조회에 유효한 merge SHA가 없다`; }
+      else if (!prLine || !new RegExp(`\\b${mergeSha}\\b`, 'i').test(prLine)) { e1.reason = `병합 PR #${pr}와 merge SHA가 같은 근거 줄에서 결속되지 않았다`; e1.source = `eln gh pr view #${pr} → ${mergeSha}`; }
+      else { e1.state = 'observed'; e1.reason = `PR #${pr} MERGED 및 merge SHA가 근거와 일치한다`; e1.source = `eln gh pr view #${pr} → ${mergeSha}`; }
+    }
+  }
+
+  const e3: ChecklistEvidenceStage = { id: 'E3', state: 'unmeasurable', source: null, measuredAt, reason: mergeSha ? '설치본 pin을 조회하지 못했다' : 'E1 merge SHA가 없어 조상 관계를 검사할 수 없다' };
+  if (mergeSha) {
+    const pin = run('eln', ['--version']);
+    const pinSha = pin.stdout.match(/\b[a-f0-9]{40}\b/i)?.[0];
+    if (!pinSha) e3.reason = `eln --version에서 설치본 SHA를 읽지 못했다${pin.error ? `: ${pin.error}` : ''}`;
+    else {
+      const repoRoot = run('git', ['rev-parse', '--show-toplevel']);
+      const origin = run('git', ['remote', 'get-url', 'origin']);
+      const pinObject = run('git', ['cat-file', '-e', `${pinSha}^{commit}`]);
+      const repoUrl = origin.stdout.trim().replace(/^git@github\.com:/i, 'https://github.com/').replace(/\.git$/i, '').replace(/\/$/u, '').toLowerCase();
+      const expectedRepo = 'https://github.com/elanvitalai/elanous';
+      if (repoRoot.status !== 0 || !repoRoot.stdout.trim() || origin.status !== 0 || repoUrl !== expectedRepo || pinObject.status !== 0) {
+        e3.reason = '현재 git 저장소가 elanous 원본이 아니거나 설치본 pin 객체가 없어 조상 관계를 판정할 수 없다';
+      } else {
+      const ancestry = run('git', ['merge-base', '--is-ancestor', mergeSha, pinSha]);
+      e3.source = `eln --version ${pinSha}; git -C ${repoRoot.stdout.trim()} merge-base --is-ancestor ${mergeSha} ${pinSha}`;
+      if (ancestry.status === 0) { e3.state = 'observed'; e3.reason = '설치본 pin이 merge SHA의 후손이다'; }
+      else if (ancestry.status === 1) { e3.state = 'missing'; e3.reason = '설치본 pin이 merge SHA의 후손이 아니다'; }
+      else { e3.reason = `설치본 저장소에서 조상 관계를 검사할 수 없다${ancestry.error ? `: ${ancestry.error}` : ''}`; }
+      }
+    }
+  }
+
+  const runId = /\b(run-[a-f0-9]{8}-[a-f0-9-]{27,})\b/i.exec(evidence)?.[1]
+    ?? /\b([a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})\b/i.exec(evidence)?.[1];
+  const event = /(?:event|이벤트)\s*[:=]\s*([A-Za-z0-9_.:-]+)/iu.exec(evidence)?.[1];
+  const verificationCommand = /(?:완료 경계 증거 명령|증거 명령|verification command)\s*[:=]\s*([^\r\n]+)/iu.exec(`${item.title}\n${evidence}`)?.[1]?.trim() ?? null;
+  const e4: ChecklistEvidenceStage = { id: 'E4', state: 'missing', source: null, measuredAt, verificationCommand, reason: '근거에 runId·event·원문 검증 명령이 모두 필요하다' };
+  if (runId && event && verificationCommand) {
+    const logs = run('eln', ['logs', '--grep', runId, '--since', '365d', '--all', '--include-test', '--limit', '1000', '--json'], 30_000);
+    if (logs.status !== 0) { e4.state = 'unmeasurable'; e4.reason = `runId 로그 조회 실패${logs.error ? `: ${logs.error}` : ''}`; }
+    else {
+      const rows = logs.stdout.split(/\r?\n/u).flatMap((line) => { try { return [JSON.parse(line) as Record<string, unknown>]; } catch { return []; } });
+      const truncated = rows.length >= 1000 || rows.some((row) => row._meta && typeof row._meta === 'object' && (row._meta as { limitReached?: unknown }).limitReached === true);
+      const observed = rows.some((row) => {
+        if (row.event !== event || typeof row.data !== 'string') return false;
+        try { return (JSON.parse(row.data) as { runId?: unknown }).runId === runId; } catch { return false; }
+      });
+      e4.source = `eln logs --grep ${runId} --since 365d --all --include-test --limit 1000 --json (event=${event})`;
+      if (observed) { e4.state = 'observed'; e4.reason = `같은 runId의 ${event} 실물 이벤트를 찾았다`; }
+      else if (truncated) { e4.state = 'unmeasurable'; e4.reason = '로그 결과가 잘려 사건 부재를 판정할 수 없다'; }
+      else { e4.reason = `같은 runId의 ${event} 이벤트가 없다`; }
+    }
+  }
+
+  const acceptance = /- 완료 경계 실물:([^\r\n]+)/u.exec(item.title)?.[1]?.trim();
+  const e5Observed = Boolean(acceptance && evidence.includes(acceptance));
+  const e5: ChecklistEvidenceStage = { id: 'E5', state: e5Observed ? 'observed' : 'missing', source: 'checklist title/evidence exact acceptance-text comparison', measuredAt,
+    reason: e5Observed ? '완료 경계 실물 문구가 기록된 근거와 일치한다' : '완료 경계 실물 문구와 일치하는 근거가 없다' };
+  return [
+    e1, e3, e4, e5,
+  ];
+}
+
 /** Register the same read commands on the full and lightweight release roots. */
-export function registerChecklistReadCommands(checklist: Command): void {
+export function registerChecklistReadCommands(checklist: Command, evidenceReader: ChecklistEvidenceReader = defaultChecklistEvidenceReader): void {
   const withContext = (cmd: Command) => cmd.option('--version <v>', '판 또는 별칭').option('--json', '결과 JSON').option('--hq-override', '본부 임대 거부를 관측하며 수동 우회');
   withContext(checklist.command('list').description('모든 칸')).option('--owner <owner>', '자리 또는 하위 자리로 거르기').action(async (opts: { owner?: string }, cmd: Command) => {
     const { version, codenames, json } = readChecklistContext(cmd);
@@ -66,14 +164,24 @@ export function registerChecklistReadCommands(checklist: Command): void {
     const { version, codenames, json } = readChecklistContext(cmd);
     await checklistOutput(version, codenames, 'status', json, opts.owner);
   });
+  withContext(checklist.command('evidence [id]').description('칸의 단계별 실물 근거 사슬 조회·PR 참조 추가'))
+    .action(async (id: string | undefined, _opts: unknown, cmd: Command) => {
+      const { version, json } = readChecklistContext(cmd);
+      if (!id) throw new CliUserError('조회할 칸 id를 지정하라');
+      if (!json) throw new CliUserError('evidence 조회는 --json 이 필요하다');
+      const item = listChecklist(version).items.find((row) => row.id === id);
+      if (!item) throw new CliUserError(`없는 칸: ${id}`);
+      const result = checklistEvidenceChain({ item, version, stages: evidenceReader(item, version) });
+      await writeStdoutJson(`${JSON.stringify(result)}\n`);
+    });
 }
 
 /** The light router enters only list/status, so no publishing modules are loaded. */
-export function registerReleaseChecklistReadCommands(program: Command): void {
+export function registerReleaseChecklistReadCommands(program: Command, evidenceReader: ChecklistEvidenceReader = defaultChecklistEvidenceReader): void {
   const release = program.command('release').description('공개 배포 한 판 — prepare(로컬) → publish(--yes) → verify (docs/manual/MANUAL-versioning-and-release-2026-09-25.md)');
   const checklist = release.command('checklist').description('판별 확인표 조회·갱신')
     .option('--version <v>', '판 또는 별칭(기본: package.json 의 개발판에서 -dev.N 제거)')
     .option('--json', '결과 JSON')
     .option('--hq-override', '본부 임대 거부를 관측하며 수동 우회');
-  registerChecklistReadCommands(checklist);
+  registerChecklistReadCommands(checklist, evidenceReader);
 }