master-skill 0.12.1 → 0.12.3

package/prebuilt/master-zhiyi/references/teaching.md

@@ -20,13 +20,13 @@
 
 空、假、中三谛非前后次第，非一非异，三谛互具互融。一空一切空，假中皆空；一假一切假，空中皆假；一中一切中，空假皆中。三谛圆融无碍，即是实相。此为天台教观的理论基石。
 
-> 出处：【《法华玄义》卷二下】→ https://fojin.app/texts/52
+> 出处：【《法华玄义》卷二下】→ https://fojin.app/texts/7889
 
 ### 3. 五时八教判教体系
 
 五时：华严时、阿含时、方等时、般若时、法华涅槃时。八教分化仪四教（顿、渐、秘密、不定）与化法四教（藏、通、别、圆）。以此体系统摄佛陀一代时教，判定诸经深浅先后，法华为纯圆独妙，会三归一。
 
-> 出处：【《法华玄义》卷一上】→ https://fojin.app/texts/52
+> 出处：【《法华玄义》卷一上】→ https://fojin.app/texts/7889
 
 ### 4. 止观双修（一心三观）
 
@@ -46,7 +46,7 @@
 |------|------|------|
 | 《妙法莲华经》 | 天台宗根本经典，开权显实，会三归一 | [阅读原文](https://fojin.app/texts/6513) |
 | 《摩诃止观》 | 天台三大部之一，圆顿止观之集大成 | [阅读原文](https://fojin.app/texts/53) |
-| 《妙法莲华经玄义》 | 天台三大部之一，法华经深义之系统阐发 | [阅读原文](https://fojin.app/texts/52) |
+| 《妙法莲华经玄义》 | 天台三大部之一，法华经深义之系统阐发 | [阅读原文](https://fojin.app/texts/7889) |
 | 《妙法莲华经文句》 | 天台三大部之一，法华经逐句注释 | [阅读原文](https://fojin.app/texts/52) |
 | 《修习止观坐禅法要》（小止观） | 止观入门之作，初学必读 | [阅读原文](https://fojin.app/texts/8085) |
 | 《观音玄义》 | 天台五小部之一，性具善恶之重要出处 | [阅读原文](https://fojin.app/texts/7898) |

package/prebuilt/master-zhiyi/references/voice.md

@@ -92,5 +92,5 @@
 
 - "建议阅读《修习止观坐禅法要》（小止观）作为入门 → [FoJin 原文](https://fojin.app/texts/8085)"
 - "可参考《摩诃止观》深入圆顿止观之理 → [FoJin 原文](https://fojin.app/texts/53)"
-- "关于法华经义理，可详阅《法华玄义》 → [FoJin 原文](https://fojin.app/texts/52)"
+- "关于法华经义理，可详阅《法华玄义》 → [FoJin 原文](https://fojin.app/texts/7889)"
 - "可在 FoJin 词典中查阅相关佛学术语的详解"

package/prebuilt/master-zhiyi/sources/INDEX.md

@@ -7,7 +7,7 @@
 | 文件 | 来源经典 | CBETA | FoJin | 覆盖主题 |
 |---|---|---|---|---|
 | `mohezhiguan-excerpts.md` | 《摩訶止觀》 | T1911 | [53](https://fojin.app/texts/53) | 一念三千、一心三观、二十五方便、十境十乘、六即佛、圆顿止观 |
-| `fahua-xuanyi-excerpts.md` | 《妙法蓮華經玄義》 | T1716 | [52](https://fojin.app/texts/52) | 五重玄义、五时判教、八教、三谛圆融、开权显实、火宅三车 |
+| `fahua-xuanyi-excerpts.md` | 《妙法蓮華經玄義》 | T1716 | [7889](https://fojin.app/texts/7889) | 五重玄义、五时判教、八教、三谛圆融、开权显实、火宅三车 |
 
 ## 引用规范
 

package/prebuilt/master-zhiyi/sources/fahua-xuanyi-excerpts.md

@@ -1,13 +1,13 @@
 # 《妙法蓮華經玄義》关键片段
 
-> 智顗大师说，弟子灌顶记。CBETA ID: T1716。FoJin: https://fojin.app/texts/52
+> 智顗大师说，弟子灌顶记。CBETA ID: T1716。FoJin: https://fojin.app/texts/7889
 > 本文件为教学引用用，节选自 CBETA 公开资料。完整经文请访问 FoJin 或 CBETA。
 
 ## 五重玄义（卷一上）
 
 解经总纲——**释名、辨体、明宗、论用、判教相**。
 
-**引用格式：**【《法華玄義》卷一上，T1716】→ https://fojin.app/texts/52
+**引用格式：**【《法華玄義》卷一上，T1716】→ https://fojin.app/texts/7889
 
 **教义要点：**
 - 释名：解经题
@@ -20,11 +20,13 @@
 
 ## 五时判教（卷十上）
 
-原典要义：
+要义（整理，非原文）：
 
-> 佛一代時教，判為五時：華嚴時、阿含時（鹿苑）、方等時、般若時、法華涅槃時。如乳、酪、生酥、熟酥、醍醐五味次第。
+五时：华严时、阿含时（鹿苑）、方等时、般若时、法华涅槃时，配乳、酪、生酥、熟酥、醍醐五味。
 
-**引用格式：**【《法華玄義》卷十上，T1716】→ https://fojin.app/texts/52
+**引用格式：**【《法華玄義》卷十上，T1716】→ https://fojin.app/texts/7889
+
+注：上面一句是整理，不是《法华玄义》原文，不可加引号作引文。玄义卷十以五味讨论判教；下列年数是后世天台家的通说。
 
 **教义要点：**
 - **华严时**（21日）：顿说大法，如日出先照高山
@@ -41,7 +43,7 @@
 **化仪四教**（佛说法的方式）：顿、渐、秘密、不定
 **化法四教**（所说内容的深浅）：藏、通、别、圆
 
-**引用格式：**【《法華玄義》卷十上，T1716】→ https://fojin.app/texts/52
+**引用格式：**【《法華玄義》卷十上，T1716】→ https://fojin.app/texts/7889
 
 **教义要点：**
 - 化仪如药方（怎么说）
@@ -53,28 +55,29 @@
 
 ---
 
-## 三谛圆融（卷二下）
+## 三谛圆融（卷二）
 
 原典（节选）：
 
-> 即空即假即中，一空一切空，無假無中而不空；一假一切假，無空無中而不假；一中一切中，無空無假而不中。三諦圓融，不縱不橫。
+> 圓三諦者，非但中道具足佛法，真、俗亦然。三諦圓融，一三、三一，如《止觀》中說云云。
 
-**引用格式：**【《法華玄義》卷二下，T1716】→ https://fojin.app/texts/52
+**引用格式：**【《法華玄義》卷二，T1716】→ https://fojin.app/texts/7889
 
 **教义要点：**
 - 空、假、中三谛非前后次第
-- 三谛互具互融、一即一切、一切即一
+- 三谛互具互融，一三、三一
+- 玄义此处指向《摩诃止观》详说；「一空一切空……」一段见 `mohezhiguan-excerpts.md` §一心三观
 - 为天台教观的理论基石
 
 ---
 
-## 开权显实（卷一上）
+## 开权显实（卷一）
 
-原典要义：
+原典（节选）：
 
-> 《法華》為眾經之王，開權顯實，會三歸一。
+> 九、開權顯實者，一切諸法莫不皆妙，一色一香無非中道，眾生情隔於妙耳。大悲順物，不與世諍，是故明諸權、實不同。
 
-**引用格式：**【《法華玄義》卷一上，T1716】→ https://fojin.app/texts/52
+**引用格式：**【《法華玄義》卷一，T1716】→ https://fojin.app/texts/7889
 
 **教义要点：**
 - "权"：方便权教（三乘、诸经权说）
@@ -87,7 +90,7 @@
 
 ## 火宅三车（引法华经譬喻品）
 
-**引用格式：**【《法華玄義》卷八下引《法華經》卷二，T1716/T0262】→ https://fojin.app/texts/52
+**引用格式：**【《法華玄義》卷八下引《法華經》卷二，T1716/T0262】→ https://fojin.app/texts/7889
 
 **教义要点：**
 - 长者以羊车（声闻）、鹿车（缘觉）、牛车（菩萨）诱子出火宅

package/prebuilt/master-zhiyi/sources/mohezhiguan-excerpts.md

@@ -23,7 +23,7 @@
 
 原典（节选）：
 
-> 一空一切空，无假无中而不空，总空观也；一假一切假，无空无中而不假，总假观也；一中一切中，无空无假而不中，总中观也。即中论所说不可思议一心三观。
+> 一空一切空，无假中而不空，总空观也。一假一切假，无空中而不假，总假观也。一中一切中，无空假而不中，总中观也。即《中论》所说不可思议一心三观。
 
 **引用格式：**【《摩訶止觀》卷五上，T1911】→ https://fojin.app/texts/53
 
@@ -99,10 +99,14 @@
 
 原典（节选）：
 
-> 止觀明靜，前代未聞。智者大師，承南岳之教，在瓦官寺說圓頓止觀。功在漸次，證在圓融。
+> 止观明静，前代未闻。智者，大隋开皇十四年四月二十六日，于荆州玉泉寺，一夏敷扬、二时慈霔……
+>
+> 「圆顿」者，初缘实相，造境即中，无不真实。系缘法界，一念法界，一色一香无非中道。己界及佛界、众生界亦然。……法性寂然名「止」，寂而常照名「观」。虽言初后，无二无别，是名「圆顿止观」。
 
 **引用格式：**【《摩訶止觀》卷一上，T1911】→ https://fojin.app/texts/53
 
+注：第一段是灌顶序，记智者大师于隋开皇十四年（594）在荆州玉泉寺讲出本书。
+
 **教义要点：**
 - "圆顿"区别于渐次、不定三种止观
 - 不历次第，初心即观实相

package/references/source-conventions.md

@@ -6,12 +6,12 @@
 
 | 系统 | 适用 | 编号格式 | 示例 |
 |------|------|---------|------|
-| **CBETA** | 汉文藏经 | `<藏别><册号>n<经号>` | `T08n0235`（金刚经）/ `X62n1182`（印光文钞） |
+| **CBETA** | 汉文藏经 | `<藏别><册号>n<经号>` | `T08n0235`（金刚经）/ `X62n1182`（彻悟禅师语录） |
 | **BDRC** | 藏文文献 | `BDRC:W<编号>`；具体版本可用 `BDRC:MW<编号>` | `BDRC:W22084`（作品 ID） |
 | **SuttaCentral** | 巴利经藏 | `MN 10` / `SC:MN 10`，或语料库声明 `SuttaCentral` | `MN 10`（中部第 10 经《念处经》） |
 | **Toh.** | 藏文大藏经德格版 | `Toh <序号>` | `Toh 4465`（阿底峡《菩提道灯论》） |
 | **PTS** | 巴利圣典协会版本 | `PTS:<作品简称>`；册页 / 章节单列为 locator | `PTS:Vism`，locator `I.85` |
-| **compiled teachings** | 经授权或合规收录的编纂开示 | `<权利人或语料名>:<作品 ID>` | `AjahnChah:FoodForTheHeart` |
+| **compiled teachings** | 经授权或合规收录的编纂开示 | `<权利人或语料名>:<作品 ID>` | `AjahnChah:FoodForTheHeart` / `Yinguang:WenchaoZhengbian`（印光文钞，CBETA 未收） |
 
 ## 来源中立 Citation Contract
 

package/scripts/check-pe-subsystem.py

@@ -0,0 +1,64 @@
+#!/usr/bin/env python3
+"""Check which Windows subsystem a PE executable was linked for.
+
+The field is the Subsystem word of the PE optional header: 2 for a GUI
+program, 3 for a console one (`file` prints the latter as `PE32+ executable
+(console)`). The desktop manager is kept a console program. A GUI-subsystem
+build stops double-clicking from opening a console window, but on
+release-desktop run 34858072308 PowerShell did not wait for it, closed the
+pipe, and `--help > help.txt` panicked. The release smoke test runs this with
+`--expect 3` so the switch cannot come back unmeasured.
+
+Output is ASCII only. This runs on the Windows release runner, whose console
+encoding is cp1252; a check mark there raised UnicodeEncodeError after the
+check itself had passed.
+
+Usage:
+    python scripts/check-pe-subsystem.py <exe> --expect 2
+"""
+
+from __future__ import annotations
+
+import argparse
+import struct
+import sys
+from pathlib import Path
+
+SUBSYSTEMS = {2: "Windows GUI", 3: "Windows console"}
+
+
+def pe_subsystem(data: bytes) -> int:
+    """Return the Subsystem field of a PE image's optional header."""
+    if data[:2] != b"MZ":
+        raise ValueError("not a PE file: no MZ header")
+    (pe_offset,) = struct.unpack_from("<I", data, 0x3C)
+    if data[pe_offset:pe_offset + 4] != b"PE\0\0":
+        raise ValueError("not a PE file: no PE signature")
+    # The optional header follows the 4-byte signature and the 20-byte COFF
+    # header; Subsystem sits 68 bytes into it in both PE32 and PE32+.
+    (subsystem,) = struct.unpack_from("<H", data, pe_offset + 24 + 68)
+    return subsystem
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    parser.add_argument("exe", type=Path)
+    parser.add_argument("--expect", type=int, required=True, help="2 = GUI, 3 = console")
+    args = parser.parse_args(argv)
+    try:
+        with args.exe.open("rb") as handle:
+            subsystem = pe_subsystem(handle.read(4096))
+    except (OSError, ValueError, struct.error) as exc:
+        print(f"FAIL {args.exe}: {exc}")
+        return 1
+    found = f"{subsystem} ({SUBSYSTEMS.get(subsystem, 'other')})"
+    if subsystem != args.expect:
+        wanted = f"{args.expect} ({SUBSYSTEMS.get(args.expect, 'other')})"
+        print(f"FAIL {args.exe}: subsystem {found}, expected {wanted}")
+        return 1
+    print(f"OK {args.exe}: subsystem {found}")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/scripts/reaudit-report.py

@@ -13,6 +13,12 @@ The ¥3.89 sweep is re-measurable for nothing, and a family added to the auditor
 has to show what it bought instead of asserting it.
 
     python3 scripts/reaudit-report.py eval/reports/0.11.0-06b8142-deepseek.json
+    python3 scripts/reaudit-report.py eval/reports/0.11.0-06b8142-deepseek.json --online
+
+`--online` also asks FoJin about the run's live citations, the ones that passed
+offline on a link alone: does each link open, and is it the work the citation
+names (same sutra number, agreeing title)? It needs the network and reads
+nothing back into the report.
 
 The report file itself is never rewritten: it is the record of what that run
 measured with that instrument, and editing it would be rewriting the experiment.
@@ -29,6 +35,7 @@ from verify_citations import (  # noqa: E402
     load_declared_ids,
     load_member_aliases,
     load_title_aliases,
+    verify_online,
 )
 
 
@@ -80,6 +87,7 @@ def reaudit(report: dict) -> dict:
             continue
 
         checked = unparsed = 0
+        live: list[dict] = []
         fabricated: list[str] = []
         noncitation: list[str] = []
         for result in suite["results"]:
@@ -92,6 +100,7 @@ def reaudit(report: dict) -> dict:
                 len(audit["offline"]) + len(audit["live"]) + len(audit["fabricated"])
             )
             unparsed += len(audit["unparsed"])
+            live.extend(audit["live_detail"])
             fabricated.extend(audit["fabricated"])
             noncitation.extend(audit.get("noncitation", ()))
         recomputed = {"checked": checked, "unparsed": unparsed}
@@ -104,6 +113,8 @@ def reaudit(report: dict) -> dict:
                 "recorded": recorded,
                 "recomputed": recomputed,
                 "fabricated": sorted(set(fabricated)),
+                # Passed on a FoJin link alone; only `--online` checks the link.
+                "live": live,
                 # 判定为「不是引文」的【…】块。不计入覆盖率的分母,但必须
                 # 数出来:排除而不申报,和静默跳过没有区别。
                 "noncitation": sorted(set(noncitation)),
@@ -121,12 +132,41 @@ def _coverage(counts: dict | None) -> str:
     return f"{counts['checked']}/{total} {counts['checked'] / total:.0%}"
 
 
+def _print_online(out: dict) -> None:
+    """Ask FoJin whether each stored live citation's link is the work it names."""
+    cited = [(s["master"], c) for s in out["suites"] for c in s.get("live", ())]
+    if not cited:
+        print("\nlive 引文在线核验：这次运行没有 live 引文")
+        return
+    tids = [c["text_id"] for _, c in cited]
+    res = verify_online(tids, citations=[c for _, c in cited])
+    print(f"\nlive 引文在线核验：{len(cited)} 条，{len(set(tids))} 个 FoJin 链接")
+    if res.unreachable:
+        print(f"  ⚠ 未能核验：FoJin 不可达（{res.unreachable}）")
+        return
+    groups: dict[tuple[str, str], int] = {}
+    for master, citation in cited:
+        key = (master, citation["text_id"])
+        groups[key] = groups.get(key, 0) + 1
+    for (master, tid), count in sorted(groups.items()):
+        verdict = res.verdicts.get(tid)
+        if verdict is True:
+            continue
+        mark = "✗" if verdict is False else "?"
+        print(f"  {mark} {master} ×{count}  {res.reasons.get(tid, '未能核验')}")
+    passed = sum(count for (_, tid), count in groups.items() if res.verdicts.get(tid) is True)
+    print(f"  ✓ {passed} 条的链接是所引之书")
+
+
 def main(argv: list[str]) -> int:
-    if len(argv) != 2:
+    args = argv[1:]
+    online = "--online" in args
+    paths = [arg for arg in args if arg != "--online"]
+    if len(paths) != 1:
         print(__doc__.strip().splitlines()[0])
-        print(f"usage: {Path(argv[0]).name} <eval/reports/*.json>")
+        print(f"usage: {Path(argv[0]).name} <eval/reports/*.json> [--online]")
         return 2
-    path = Path(argv[1])
+    path = Path(paths[0])
     report = json.loads(path.read_text())
     out = reaudit(report)
 
@@ -156,6 +196,8 @@ def main(argv: list[str]) -> int:
         )
         for block in skipped:
             print(f"    【{block}】")
+    if online:
+        _print_online(out)
     return 0
 
 

package/scripts/validate-citation-references.py

@@ -14,17 +14,29 @@ as the prescribed format while `meta.json` declares five sources, none of them
 That was found by a ¥3.89 graded run over 211 fixtures, which caught it only
 because one fixture happened to trigger it. This finds every instance of the
 class deterministically, for free, on every PR.
+
+It reads source ids outside 【…】 too. A routing table is an instruction as
+much as a citation template is, and until 2026-09-14 this gate saw only
+bracketed citations — while six genuine works that personas' own tables and
+prose pointed at had never been declared (see `_bare_ids`).
 """
 from __future__ import annotations
 
 import json
 import re
 import sys
+from collections import Counter
 from dataclasses import dataclass
 from pathlib import Path
 
 sys.path.insert(0, str(Path(__file__).resolve().parent))
-from verify_citations import audit_answer, load_declared_ids, load_member_aliases  # noqa: E402
+from verify_citations import (  # noqa: E402
+    audit_answer,
+    extract_citation_ids,
+    load_declared_ids,
+    load_member_aliases,
+    load_title_aliases,
+)
 
 PREBUILT_DIR = Path(__file__).resolve().parent.parent / "prebuilt"
 
@@ -47,12 +59,14 @@ _TEMPLATE_MARKERS = (
 # been permitted. Do not add to it to turn a red build green — that is exactly
 # the failure this gate exists to prevent.
 #
-# Empty as of 2026-09-03. Both findings this gate ever recorded were resolved
+# Empty as of 2026-09-14. The first two findings this gate recorded were resolved
 # by declaring the source: `Toh:3861` in master-tsongkhapa/meta.json (月称《入
 # 中论》is a real Tengyur text Tsongkhapa's tradition treats as its own
 # foundation) and `J36nB348` in master-ouyi/meta.json (《灵峰宗论》is Ouyi's own
 # collected works). Neither needed a B1 contract change — both simply belonged
-# in the declared set. See CHANGELOG.md for the maintainer decision.
+# in the declared set. See CHANGELOG.md for the maintainer decision. The six the
+# bare-id sweep found on 2026-09-14 were resolved the same way, never entered
+# here.
 KNOWN_UNDECLARED: dict[tuple[str, str], str] = {}
 
 
@@ -77,6 +91,33 @@ def _strip_template_citations(text: str) -> str:
     return "".join(out)
 
 
+# `BDRC W-number` in a persona's own rules names a field, it is not an id:
+# master-tsongkhapa says 不得编造未验证的 BDRC W-number, master-atisha asks for
+# a BDRC W-ID. `_FAMILY_ID` stays loose on purpose — in an answer, reading too
+# much fails safe as fabricated (see the note above `_FOJIN_TEXT_LINK` in
+# verify_citations.py) — so it reads both as ids. Only this prose sweep drops
+# them: a real BDRC work id is W followed by a digit (W22272, W1KG14334), the
+# rule the auditor's own bare-W branch already applies.
+_BDRC_FIELD_NAME = re.compile(r"^BDRC:W(?![0-9])")
+
+
+def _bare_ids(text: str) -> list[str]:
+    """Source ids written outside every 【…】 block: table cells, prose, frontmatter.
+
+    `audit_answer` reads only bracketed citations, so a persona's routing table
+    was invisible to this gate. master-xuanzang's SKILL.md sent 五位百法
+    questions to `《百法明门论》，T31n1614` in a table cell; master-ouyi had an
+    offline excerpt file for 《教觀綱宗》 T46n1939. Neither id was declared.
+
+    Callers audit each id alone, as `【id】` with nothing after it, so a FoJin
+    link in the same table row cannot make it `live`: in an answer a link can
+    vouch for one citation, but in the persona's own material a link is not a
+    declaration.
+    """
+    ids = extract_citation_ids(_BLOCK.sub(" ", text))
+    return [cid for cid in ids if not _BDRC_FIELD_NAME.match(cid)]
+
+
 @dataclass(frozen=True)
 class Finding:
     master: str
@@ -84,8 +125,12 @@ class Finding:
     path: str
 
 
-def find_undeclared(prebuilt_dir: Path) -> list[Finding]:
-    """Every citation the personas' own material makes that meta.json omits."""
+def find_undeclared(prebuilt_dir: Path, reach: Counter | None = None) -> list[Finding]:
+    """Every citation the personas' own material makes that meta.json omits.
+
+    `reach`, when given, counts what was read: bracketed citations the audit
+    could resolve to an id, and bare ids outside brackets.
+    """
     findings: list[Finding] = []
     for persona in sorted(Path(prebuilt_dir).iterdir()):
         meta_path = persona / "meta.json"
@@ -100,6 +145,13 @@ def find_undeclared(prebuilt_dir: Path) -> list[Finding]:
         try:
             declared = load_declared_ids(persona.name, base=str(prebuilt_dir))
             aliases = load_member_aliases(persona.name, base=str(prebuilt_dir))
+            # Declared titles, as reaudit-report.py and test-fidelity.py already
+            # pass them. Without them a source with no sutra number is unreadable:
+            # master-yinguang's own 【《印光法師文鈔正編》卷一】 examples counted as
+            # nothing, and the sweep read fewer citations after the Wenchao was
+            # re-declared. An alias only makes a block readable; it cannot turn an
+            # undeclared id into a declared one.
+            titles = load_title_aliases(persona.name, base=str(prebuilt_dir))
         except (FileNotFoundError, ValueError):
             continue  # meta.json exists (meta_path.is_file() above) but is unreadable
         if not declared:
@@ -111,7 +163,17 @@ def find_undeclared(prebuilt_dir: Path) -> list[Finding]:
             if not doc.is_file():
                 continue
             text = _strip_template_citations(doc.read_text(encoding="utf-8"))
-            for citation in dict.fromkeys(audit_answer(declared, text, aliases)["fabricated"]):
+            bracketed = audit_answer(declared, text, aliases, titles)
+            undeclared = list(bracketed["fabricated"])
+            bare = _bare_ids(text)
+            for cid in bare:
+                undeclared += audit_answer(declared, f"【{cid}】", aliases)["fabricated"]
+            if reach is not None:
+                reach["bracketed"] += sum(
+                    len(bracketed[bucket]) for bucket in ("offline", "live", "fabricated")
+                )
+                reach["bare"] += len(bare)
+            for citation in dict.fromkeys(undeclared):
                 findings.append(
                     Finding(persona.name, citation, str(doc.relative_to(prebuilt_dir.parent)))
                 )
@@ -119,7 +181,18 @@ def find_undeclared(prebuilt_dir: Path) -> list[Finding]:
 
 
 def main() -> int:
-    findings = find_undeclared(PREBUILT_DIR)
+    reach: Counter = Counter()
+    findings = find_undeclared(PREBUILT_DIR, reach)
+    print(
+        f"Read {reach['bracketed']} bracketed citations and {reach['bare']} bare "
+        "source ids in the personas' own docs."
+    )
+    if not reach["bracketed"] or not reach["bare"]:
+        print(
+            "FAIL: the sweep read nothing of one kind — it is not looking at what "
+            "it claims to check."
+        )
+        return 1
     known, new = [], []
     for f in findings:
         (known if (f.master, f.citation) in KNOWN_UNDECLARED else new).append(f)

package/scripts/validate-self-audit-sources.py

@@ -0,0 +1,116 @@
+#!/usr/bin/env python3
+"""Gate: a persona's self-audit list must include every source it declares.
+
+Nine personas end SKILL.md with the same pre-answer rule (B1): before replying,
+check that each offline citation's identifier "∈ 本 master frontmatter `sources:`
+声明的对应字段", and strip any claim that fails. The list the model checks
+against is the frontmatter, not meta.json, and nothing compared the two.
+
+master-ouyi declares 《灵峰宗论》 `J36nB348` in meta.json, and its own
+references/teaching.md cites it, but its frontmatter never listed it. A model
+following the rule to the letter deletes a correct citation of Ouyi's own
+collected works. The audit would never notice: it reads meta.json.
+
+Personas whose rule points at meta.json instead are not examined here.
+
+Usage:
+    python3 scripts/validate-self-audit-sources.py
+"""
+
+from __future__ import annotations
+
+import json
+import sys
+from pathlib import Path
+
+import yaml
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+from verify_citations import audit_answer  # noqa: E402
+
+PREBUILT = Path(__file__).resolve().parent.parent / "prebuilt"
+
+# The phrase every frontmatter-pointing rule uses. If the wording changes, the
+# gate examines nothing and says so instead of passing.
+_RULE = "frontmatter `sources:`"
+
+# The identifier fields the rule itself enumerates.
+_ID_FIELDS = (
+    "cbeta_id", "toh_id", "bdrc_id", "pts_id", "suttacentral", "suttacentral_id", "teaching_id",
+)
+
+
+def _frontmatter_ids(text: str) -> list[str]:
+    parts = text.split("---", 2)
+    if len(parts) < 3 or parts[0].strip():
+        return []
+    front = yaml.safe_load(parts[1]) or {}
+    ids: list[str] = []
+    for src in front.get("sources") or []:
+        if isinstance(src, dict):
+            ids += [str(src[field]) for field in _ID_FIELDS if src.get(field) is not None]
+    return ids
+
+
+def _covered(declared_id: str, listed: list[str]) -> bool:
+    """Does some frontmatter identifier name `declared_id`, in a spelling the audit accepts?
+
+    The resolution is the auditor's own. master-zhiyi's frontmatter writes
+    `T1716` for the declared `T33n1716`; master-milarepa writes `W22272` for
+    `BDRC:W22272`. A model citing either passes the audit, so the list covers
+    the source. Reimplementing those rules here would drift from them.
+    """
+    return any(
+        declared_id in audit_answer({declared_id}, f"【{value}】")["offline"] for value in listed
+    )
+
+
+def check_persona(persona: Path) -> tuple[list[str], bool]:
+    """Return (problems, whether this persona was examined)."""
+    skill, meta = persona / "SKILL.md", persona / "meta.json"
+    if not skill.is_file() or not meta.is_file():
+        return [], False
+    text = skill.read_text(encoding="utf-8")
+    if _RULE not in text:
+        return [], False
+    rule_line = text[: text.index(_RULE)].count("\n") + 1
+    listed = _frontmatter_ids(text)
+    problems: list[str] = []
+    for src in json.loads(meta.read_text(encoding="utf-8")).get("sources", []):
+        source_id = src.get("id")
+        if source_id and not _covered(source_id, listed):
+            problems.append(
+                f"{persona.name}: meta.json declares {source_id} ({src.get('title', '')}) "
+                f"but the frontmatter `sources:` never lists it. The self-audit rule at "
+                f"SKILL.md:{rule_line} checks citations against that list, so a correct "
+                f"citation of this source would be stripped."
+            )
+    return problems, True
+
+
+def main(prebuilt: Path = PREBUILT) -> int:
+    problems: list[str] = []
+    examined: list[str] = []
+    for persona in sorted(p for p in prebuilt.iterdir() if p.is_dir()):
+        found, looked = check_persona(persona)
+        problems += found
+        if looked:
+            examined.append(persona.name)
+
+    if not examined:
+        print(f"✗ no persona's SKILL.md contains {_RULE!r} — this check examined nothing")
+        return 1
+    if problems:
+        print(f"✗ {len(problems)} declared source(s) missing from a self-audit list:\n")
+        for problem in problems:
+            print(f"  - {problem}")
+        return 1
+    print(
+        f"✓ self-audit sources ok — {len(examined)} persona(s) check citations against "
+        f"their frontmatter: {', '.join(examined)}"
+    )
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())