motionloom 2.0.0 → 2.2.0

package/docs/audits/data/deep-stress-latest.json

@@ -0,0 +1,329 @@
+{
+  "schema_version": "1.0",
+  "audit": "motionloom-deep-stress",
+  "generated_at": "2026-08-13T10:13:55.979988Z",
+  "seed": 20260813,
+  "requested_iterations": 5000,
+  "actual_iterations": 6900,
+  "fixture": {
+    "task_id": "browser-review-smoke-task",
+    "scene": "browser-review-smoke"
+  },
+  "summary": {
+    "passed": 6900,
+    "failed": 0,
+    "pass_rate": 1.0,
+    "false_positive": 0,
+    "false_negative": 0,
+    "clean_contracts_preserved": true,
+    "faults_rejected_without_false_negative": true,
+    "approval_false_invariant_preserved": true
+  },
+  "metrics": {
+    "canonical-json-metamorphic": {
+      "attempts": 600,
+      "passed": 600,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "equal": 600
+      },
+      "p50_ms": 0.018526,
+      "p95_ms": 0.019782,
+      "max_ms": 0.034744,
+      "pass_rate": 1.0
+    },
+    "dsse-ed25519-roundtrip": {
+      "attempts": 250,
+      "passed": 250,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "verified": 250
+      },
+      "p50_ms": 0.127995,
+      "p95_ms": 0.141972,
+      "max_ms": 0.244296,
+      "pass_rate": 1.0
+    },
+    "dsse-ed25519-tamper": {
+      "attempts": 250,
+      "passed": 250,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "invalid-signature": 250
+      },
+      "p50_ms": 0.131456,
+      "p95_ms": 0.144911,
+      "max_ms": 0.257528,
+      "pass_rate": 1.0
+    },
+    "statement-contract": {
+      "attempts": 600,
+      "passed": 600,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "valid": 200,
+        "rejected": 400
+      },
+      "p50_ms": 0.007304,
+      "p95_ms": 0.008605,
+      "max_ms": 0.063033,
+      "pass_rate": 1.0
+    },
+    "attestation-verifier-boundary": {
+      "attempts": 1500,
+      "passed": 1500,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "0": 375,
+        "11": 375,
+        "14": 375,
+        "13": 375
+      },
+      "p50_ms": 0.300549,
+      "p95_ms": 0.484133,
+      "max_ms": 0.866072,
+      "pass_rate": 1.0
+    },
+    "strict-quality-gate-clean": {
+      "attempts": 400,
+      "passed": 400,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "accepted": 400
+      },
+      "p50_ms": 25.817357,
+      "p95_ms": 28.37167,
+      "max_ms": 35.746459,
+      "pass_rate": 1.0
+    },
+    "intelligence-p1-clean": {
+      "attempts": 400,
+      "passed": 400,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "accepted": 400
+      },
+      "p50_ms": 19.18085,
+      "p95_ms": 21.672868,
+      "max_ms": 29.969583,
+      "pass_rate": 1.0
+    },
+    "replay-hash-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 7.51816,
+      "p95_ms": 7.916555,
+      "max_ms": 11.545468,
+      "pass_rate": 1.0
+    },
+    "semantic-lint-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 0.024703,
+      "p95_ms": 0.03313,
+      "max_ms": 0.08727,
+      "pass_rate": 1.0
+    },
+    "continuity-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 0.024346,
+      "p95_ms": 0.033119,
+      "max_ms": 0.052678,
+      "pass_rate": 1.0
+    },
+    "approval-invariant": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "approval=false": 475
+      },
+      "p50_ms": 0.063713,
+      "p95_ms": 0.080847,
+      "max_ms": 0.1211,
+      "pass_rate": 1.0
+    },
+    "fault-graph-task-id": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 13.765242,
+      "p95_ms": 15.757552,
+      "max_ms": 17.026196,
+      "pass_rate": 1.0
+    },
+    "fault-motion-ir-scene": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 2.148835,
+      "p95_ms": 2.448147,
+      "max_ms": 2.860418,
+      "pass_rate": 1.0
+    },
+    "fault-provenance-task-id": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.857105,
+      "p95_ms": 1.049827,
+      "max_ms": 1.36859,
+      "pass_rate": 1.0
+    },
+    "fault-replay-path-escape": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 8.091177,
+      "p95_ms": 9.353946,
+      "max_ms": 10.112846,
+      "pass_rate": 1.0
+    },
+    "fault-p1-fix-plan-hash": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.730294,
+      "p95_ms": 0.866361,
+      "max_ms": 1.132574,
+      "pass_rate": 1.0
+    },
+    "fault-p1-wrong-scene": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.675249,
+      "p95_ms": 0.807189,
+      "max_ms": 1.103894,
+      "pass_rate": 1.0
+    },
+    "fault-continuity-structure": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.066832,
+      "p95_ms": 0.081028,
+      "max_ms": 0.100648,
+      "pass_rate": 1.0
+    },
+    "fault-semantic-structure": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.064075,
+      "p95_ms": 0.081449,
+      "max_ms": 0.116428,
+      "pass_rate": 1.0
+    },
+    "fault-attestation-approval": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "10": 100
+      },
+      "p50_ms": 0.204615,
+      "p95_ms": 0.265782,
+      "max_ms": 0.341527,
+      "pass_rate": 1.0
+    },
+    "fault-attestation-payload": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "11": 100
+      },
+      "p50_ms": 0.262104,
+      "p95_ms": 0.301103,
+      "max_ms": 0.414031,
+      "pass_rate": 1.0
+    }
+  },
+  "failures": [],
+  "interpretation": {
+    "logical_trials": "Each trial executes a real repository validator/helper against canonical fixture bytes or a controlled mutation; this is not a claim that 5,000 browser renders were performed.",
+    "false_positive": "A clean canonical case was rejected.",
+    "false_negative": "A controlled tamper, binding, revocation or invalid-contract case was accepted."
+  },
+  "wall_time_s": 25.354826
+}

package/docs/audits/external-project-corpus-2026-08-13.md

@@ -0,0 +1,26 @@
+# External Project Corpus Evidence — 2026-08-13
+
+## Purpose
+
+This is a labeled analyzer evaluation, not a claim that MotionLoom has been validated across the entire animation ecosystem. The runner reads explicit checkouts only; it does not install dependencies, execute external project code, or treat an absent checkout as a pass.
+
+## Reproducibility
+
+The evaluation used `python3 scripts/eval-projects.py` with the default bounded scan policy: at most 2,500 files, 25,000,000 bytes and 10 seconds per project. The first-party repository was evaluated from the local MotionLoom checkout. External checkouts were placed under `external/` in a temporary workspace and pinned to the following observed commits.
+
+| Case | Source | Observed revision | Result | Signals checked |
+|---|---|---|---|---|
+| MotionLoom | [lenhonbp/MotionLoom](https://github.com/lenhonbp/MotionLoom) | local checkout | PASS | `name=motionloom` |
+| Motion One | [motiondivision/motion](https://github.com/motiondivision/motion) | `adaf7a4e5368d704ea350669f6ac674fb26ff270` | PASS | `name=motion-one`, `framework=motion` |
+| GSAP | [greensock/GSAP](https://github.com/greensock/GSAP) | `13e2b790546426a1a2e0e9b409f3f8dc6d6611f2` | PASS | `framework=gsap` |
+| Rive React | [rive-app/rive-react](https://github.com/rive-app/rive-react) | `c05ec1842324a4a61d01f8e49dfd2ac2c37ae72c` | PASS | `name=rive-react`, `framework=rive` |
+
+The final report was `status=pass`, with 3/3 required external projects available and 4/4 total cases passing. All four scans reported `scan_truncated=false` under the stated budgets.
+
+## Interpretation
+
+The package-identity precedence change is material. Motion One is a monorepo whose root workspace contains GSAP tooling; a dependency-only detector labeled it GSAP. Rive React similarly contains React dependencies but should expose a Rive runtime signal. MotionLoom now prefers an exact package identity (`motion`, `motion-one`, `framer-motion`, Rive packages) before generic dependency fallback, while retaining the bounded scan metadata.
+
+This evidence supports a **small, reproducible analyzer corpus signal**. It does not prove animation quality, runtime correctness, visual fidelity, accessibility, licensing compliance, or first-pass acceptance. Those remain separate gates requiring runtime evidence, Dev Lab review and explicit user confirmation.
+
+When external checkouts are not supplied, the same command intentionally reports `insufficient_evidence`; CI uses `--allow-insufficient` for visibility without converting missing product evidence into a green product claim.

package/docs/releases/2.1.0.md

@@ -0,0 +1,23 @@
+## Summary
+
+MotionLoom 2.1.0 adds durable, relocatable **Project Memory** and a cross-platform execution layer for Ubuntu, macOS and Windows. The memory restores project identity, motion decisions, rejected patterns, remediation outcomes, runtime policy and freshness state after long periods without animation work or after an Agent context reset. It remains project context rather than approval: stale, invalid or cross-project memory is never treated as permission to generate, confirm or open a PR.
+
+## Added
+
+The release adds `schemas/project-memory.schema.json`, the `memory init`, `inspect`, `validate`, `refresh`, `recover`, `record-decision` and `record-outcome` lifecycle, atomic writes, canonical integrity checking, stable exit codes and a loader API for other MotionLoom scripts. Durable outcomes require `--user-confirmed`; unreviewed outcomes cannot become learning signals. Project identity binds to a normalized Git remote when available and falls back to the package/project name, so the memory is not tied to an absolute checkout path.
+
+The integrity contract treats `project.root_path` as runtime metadata. A relocated checkout can be rebound to its current path during recovery without invalidating the durable payload, while meaningful direct edits still fail the integrity guard. Recovery also refreshes the current repository and package metadata atomically. Cross-project recovery remains fail-closed through identity comparison.
+
+The npm CLI now routes memory, analyze, Dev Lab, render, PR preflight and runtime telemetry commands through platform-neutral Node/Python entrypoints. The implementation avoids Bash-only orchestration, hard-coded temporary paths, shell-string execution and system `zip`/`unzip` requirements in the user-facing workflow. The CI workflow includes an Ubuntu/macOS/Windows matrix for the cross-platform contract.
+
+## Verified behavior
+
+The release acceptance suite passes Python compilation, Project Memory recovery/relocation contracts, the full regression harness, intelligence evaluation, Skill Doctor, report contract, strict quality gate with browser review/intelligence/P1/benchmark/telemetry/attestation requirements, npm packaging dry-run and the Animation Dev Lab production build. The relocation fixture covers Unicode and space-containing paths, Git remote identity, user-confirmed decisions/outcomes, stale context detection and current-path rebinding.
+
+`npm publish --dry-run --access public` produces the intended public tarball `motionloom-2.1.0.tgz` with package version `2.1.0`. Actual publication must be performed from the maintainer workstation using the authenticated npm account; this sandbox run does not publish the package.
+
+## Trust boundary and remaining scope
+
+Project Memory is a continuity and context mechanism, not a user-review substitute. It does not approve animation quality, visual fidelity, accessibility, source licensing, runtime evidence or PR side effects. Dev Lab review, artifact binding, attestation verification and explicit user confirmation remain required before any PR operation.
+
+Visual comparison with provenance-labeled fixtures, append-only benchmark history, multi-project/browser/device corpus and remediation metrics for first-pass acceptance and rerender avoidance remain the next roadmap slice. The Dev Lab build still reports a bundle-size advisory for the main JavaScript chunk; it is a performance warning, not an acceptance failure.

package/docs/releases/2.2.0.md

@@ -0,0 +1,35 @@
+# MotionLoom 2.2.0
+
+## Summary
+
+MotionLoom 2.2.0 turns the project-aware animation Skill into a more portable Agent production contract. This release candidate adds canonical discovery surfaces, consumer fixtures, cross-platform installation evidence, provenance-bound Visual Truth, append-only Remediation Learning and a CI replay remediation that fails closed without confusing stale evidence with user approval.
+
+## Added
+
+### Agent interoperability and installation
+
+The package now exposes one canonical `SKILL.md` through `.agents/skills`, `.claude`, `.codex` and `AGENTS.md`. The discovery manifest and schema describe source kind, version, canonical files, compatibility and verification commands. The `motionloom discovery check`, `source` and `install-matrix` commands are cross-platform and do not require network access for local contract checks.
+
+The consumer fixture manifest covers Lottie/dotLottie, Rive, GSAP, Framer Motion, body rigs and multi-scene continuity. Ubuntu, macOS and Windows are represented as explicit installation-matrix targets rather than an unverified portability claim.
+
+### Visual Truth
+
+`visual-truth.json` binds baseline and candidate frame hashes, dimensions, scene/task identity, source and manifest provenance, runtime evidence and Motion IR where available. The validator emits deterministic comparison signals and region-level explanations for review. A changed frame produces `review_required`; it never becomes automatic approval.
+
+### Remediation Learning
+
+The append-only, hash-chained remediation history stores user-confirmed outcomes and deterministic benchmark records. Summaries expose correction count, first-pass acceptance, success rate, issue-class outliers and benchmark pass rate. Unconfirmed outcomes cannot enter acceptance metrics.
+
+## Fixed
+
+The Quality workflow now rebuilds the exact task-bound replay bundle after runtime, report and attestation artifacts are generated and before the context-bound quality gate. Regression coverage exercises tamper rejection and canonical replay rebuild, preventing stale generated hashes from causing a false CI rejection.
+
+## Verified behavior
+
+The release candidate passes the full regression harness, docs audit, Skill Doctor, skill-creator validator, runtime adapter smoke, discovery and installation matrix checks, Visual Truth validation, Remediation Learning validation, quality attestation with Visual Truth required, npm package dry-run, Python syntax compilation and diff hygiene. The mainline commit carrying the replay fix also passed Quality, Documentation and Package Hygiene, and Security workflows on GitHub.
+
+## Trust boundary and remaining scope
+
+This release does not infer approval from visual metrics, heuristics, signatures, attestations or benchmark scores. The user must inspect the Dev Lab review candidate and explicitly approve before PR preparation. Commit, push, tag creation, GitHub Release creation and npm publication remain separate explicit side effects.
+
+The next evidence priority is paired evaluation across additional real animation projects to measure first-pass acceptance, correction count, time-to-fix and rerender avoidance without presenting synthetic scores as human approval.

package/docs/releases/npm-publish-from-workstation.md

@@ -1,6 +1,6 @@
 # Publish MotionLoom to npm from your workstation
 
-This guide publishes the prepared `motionloom@2.0.0` package from your own computer. The npm password, authenticator code and access token must stay on your computer; never paste them into chat, GitHub issues or repository files.
+This guide publishes the prepared `motionloom@2.2.0` package from your own computer. The npm password, authenticator code and access token must stay on your computer; never paste them into chat, GitHub issues or repository files.
 
 ## 1. Install prerequisites
 
@@ -48,7 +48,7 @@ npm pack --dry-run --json --ignore-scripts
 npm publish --dry-run --access public
 ```
 
-The dry-run should report `motionloom@2.0.0`, public access, approximately 260 kB compressed size and 111 files. The prepack hook removes generated Python bytecode before packaging. Do not publish if the dry-run shows private keys, `.env` files, `artifacts/`, `dev-lab/` or `__pycache__/` entries.
+The dry-run should report `motionloom@2.2.0`, public access, and the current package file list. Do not hard-code a historical file count: inspect the JSON output and compare it with the checked-in package allowlist. The prepack hook removes generated Python bytecode before packaging. Do not publish if the dry-run shows private keys, `.env` files, `artifacts/`, `dev-lab/` or `__pycache__/` entries.
 
 ## 5. Publish the package
 
@@ -58,15 +58,15 @@ When the dry-run is correct and `npm whoami` shows the intended account, publish
 npm publish --access public
 ```
 
-The version `2.0.0` becomes immutable on npm after a successful publish. If npm reports that the version already exists, stop and verify the registry instead of trying to overwrite it.
+The version `2.2.0` becomes immutable on npm after a successful publish. If npm reports that the version already exists, stop and verify the registry instead of trying to overwrite it.
 
 ## 6. Verify the registry publication
 
-Run the following commands and confirm that they return `2.0.0` and a tarball URL:
+Run the following commands and confirm that they return `2.2.0` and a tarball URL:
 
 ```bash
 npm view motionloom version --registry=https://registry.npmjs.org/
-npm view motionloom@2.0.0 name version license dist.tarball dist.shasum --json \
+npm view motionloom@2.2.0 name version license dist.tarball dist.shasum --json \
   --registry=https://registry.npmjs.org/
 ```
 
@@ -76,7 +76,7 @@ Then test installation in a clean temporary directory:
 TMP_DIR="$(mktemp -d)"
 cd "$TMP_DIR"
 npm init --yes
-npm install motionloom@2.0.0
+npm install motionloom@2.2.0
 motionloom --help
 motionloom doctor
 ```

package/examples/agent-consumer/README.md

@@ -0,0 +1,18 @@
+# Agent consumer fixtures
+
+This example set is a small, machine-readable map of how an Agent should consume MotionLoom. It is intentionally not a fake demo application and it does not claim user approval. Each case points to a repository artifact or a real runtime harness and states its evidence level.
+
+Run the offline contract checks first:
+
+```text
+motionloom discovery check --root . --json
+python3 tests/scripts/test_consumer_fixtures.py
+```
+
+For the browser-backed runtime cases, install the repository dependencies and run:
+
+```text
+npm run runtime:test
+```
+
+The real runtime harness emits deterministic scrub points at 0/50/100% for Rive, GSAP and Framer Motion. The Lottie and dotLottie cases are asset/package contracts; they must not be described as runtime-verified unless corresponding runtime evidence exists in the task bundle. The body-rig and continuity cases exercise structure and cross-scene semantics.

package/examples/agent-consumer/fixture-manifest.json

@@ -0,0 +1,82 @@
+{
+  "schema_version": "1.0",
+  "fixture_set": "agent-consumer-smoke",
+  "purpose": "Show Agents how to select an animation capability, locate evidence and preserve review boundaries.",
+  "repository_root": "..",
+  "cases": [
+    {
+      "id": "lottie-json-source-bound",
+      "framework": "lottie",
+      "category": "asset-runtime",
+      "source": "src/output/browser-review-smoke/animation.json",
+      "manifest": "src/output/browser-review-smoke/manifest.json",
+      "verification": "python3 scripts/validate-lottie.py src/output/browser-review-smoke/animation.json",
+      "evidence_level": "asset-contract",
+      "expected": "source_binding and Lottie structural validation; runtime acceptance still requires runtime evidence"
+    },
+    {
+      "id": "dotlottie-package",
+      "framework": "dotlottie",
+      "category": "asset-package",
+      "source": "src/output/browser-review-smoke/animation.json",
+      "manifest": "src/output/browser-review-smoke/manifest.json",
+      "verification": "node scripts/to-dotlottie.mjs --scene-dir src/output/browser-review-smoke --output <temporary-output>/animation.lottie",
+      "evidence_level": "package-contract",
+      "expected": "manifest.json selects the initial animation and the archive validates without system zip"
+    },
+    {
+      "id": "rive-runtime",
+      "framework": "rive",
+      "category": "browser-runtime",
+      "source": "tests/runtime-harness/main.jsx",
+      "evidence": "artifacts/runtime-adapters/rive/runtime-evidence.json",
+      "verification": "RUNTIME_FRAMEWORKS=rive npm run runtime:test",
+      "evidence_level": "runtime-verified-fixture",
+      "expected": "real browser adapter, ready=true, runtime state and 0/50/100 snapshots"
+    },
+    {
+      "id": "gsap-runtime",
+      "framework": "gsap",
+      "category": "browser-runtime",
+      "source": "tests/runtime-harness/main.jsx",
+      "evidence": "artifacts/runtime-adapters/gsap/runtime-evidence.json",
+      "verification": "RUNTIME_FRAMEWORKS=gsap npm run runtime:test",
+      "evidence_level": "runtime-verified-fixture",
+      "expected": "real browser adapter, ready=true, runtime state and 0/50/100 snapshots"
+    },
+    {
+      "id": "framer-motion-runtime",
+      "framework": "framer-motion",
+      "category": "browser-runtime",
+      "source": "tests/runtime-harness/main.jsx",
+      "evidence": "artifacts/runtime-adapters/framer-motion/runtime-evidence.json",
+      "verification": "RUNTIME_FRAMEWORKS=framer-motion npm run runtime:test",
+      "evidence_level": "runtime-verified-fixture",
+      "expected": "real browser adapter, ready=true, runtime state and 0/50/100 snapshots"
+    },
+    {
+      "id": "body-rig",
+      "framework": "svg-cutout-rig",
+      "category": "body-animation",
+      "source": "assets/library/avatar-base.svg",
+      "verification": "python3 src/rig/cutout_rig.py build --input assets/library/avatar-base.svg --output <temporary-output>/rigged.svg",
+      "evidence_level": "structure-verified-fixture",
+      "expected": "named anatomy, pivot markers and parent-first hierarchy remain inspectable"
+    },
+    {
+      "id": "continuity-multiscene",
+      "framework": "framework-neutral",
+      "category": "continuity",
+      "source": "tests/fixtures/continuity-multiscene",
+      "evidence": "tests/fixtures/continuity-multiscene/continuity-report.json",
+      "verification": "python3 scripts/intelligence.py continuity validate --report tests/fixtures/continuity-multiscene/continuity-report.json",
+      "evidence_level": "semantic-structure-fixture",
+      "expected": "scene-01 and scene-02 share continuity while scene-02-drift remains an explicit negative case"
+    }
+  ],
+  "review_boundary": {
+    "approval": false,
+    "user_review_required": true,
+    "pr_side_effects": "explicit-confirmation"
+  }
+}