motionloom 2.5.0 → 2.5.1

package/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable MotionLoom changes are documented here. The project follows semantic
 
 ## [Unreleased]
 
+## [2.5.1] - 2026-08-18
+
+### Fixed
+
+- Preserve the caller's working directory through the npm CLI router, so default onboarding targets the consumer project instead of the installed package directory.
+- Ship Dev Lab assets, the runtime harness, Python requirements and optional browser runtime dependencies in the npm tarball; verify the installed package from an isolated consumer project before release.
+- Render Dev Lab metadata and checks with safe DOM APIs, enforce a same-origin script CSP, and reject invalid, terminal or expired browser-review candidates before enabling review.
+- Restrict runtime evidence cleanup to a dedicated child of an explicit policy root and preserve caller data outside that boundary.
+- Read the CLI version from `package.json` so displayed status stays aligned with release metadata.
+- Publish from GitHub Actions through npm Trusted Publishing/OIDC with a pinned compatible npm client, without a long-lived `NPM_TOKEN`; provenance is generated automatically by npm.
+
+### Verified
+
+- Pass the full Python/Node regression suite, quality and signed-attestation gate, isolated installed-package smoke test, Dev Lab browser-security smoke test, real Rive/GSAP/Framer Motion runtime capture, 6,900-case deep stress run and twelve Swift package tests.
+- Pass the pull-request Quality, Security Analysis, Documentation and Package Hygiene, Dev Lab and Apple workflows before preparing this patch release.
+
+### Boundary
+
+- This patch does not add framework capability, Apple signing, TestFlight distribution or production approval. Browser review and remote release actions remain explicit human-governed steps.
+
 ## [2.5.0] - 2026-08-17
 
 ### Added

package/README.md

@@ -15,7 +15,7 @@ MotionLoom is an independent open-source Agent Skill for building UI motion, Lot
 
 > **MotionLoom is not an auto-approval layer.** A valid signature, a passing heuristic, or a successful render proves only the contract it checks. Visual quality, intent, accessibility and PR authorization remain reviewable human decisions.
 
-> **Release posture:** MotionLoom 2.5.0 adds an evidence-bound Agent capability card, benchmark-informed runtime discovery, and the native macOS/iOS review alpha in the GitHub source release under `apps/apple/`. The npm package remains the cross-platform Node/Python Skill and documentation surface; it does not distribute or sign the Xcode app. Verify npm/GitHub publication metadata separately; passing evidence never implies user approval.
+> **Release posture:** MotionLoom 2.5.1 hardens installed-package onboarding, Dev Lab browser review, runtime-output cleanup and consumer-package acceptance. The native macOS/iOS review app remains an unsigned source alpha under `apps/apple/`; the npm package remains the cross-platform Node/Python Skill and documentation surface. Verify npm/GitHub publication metadata separately; passing evidence never implies user approval.
 
 ## Why MotionLoom
 
@@ -77,7 +77,7 @@ npx --no-install motionloom doctor             # check the installed package
 npx --no-install motionloom repair --yes       # restore only missing managed pieces
 ```
 
-MotionLoom supports **Node.js 18+** and **Python 3.11+** on Ubuntu, macOS and Windows. `npx` is the recommended first-run surface; after setup, use the project-local binary through `npx --no-install motionloom ...`. A global install remains optional, not required.
+MotionLoom's onboarding and contract CLI supports **Node.js 18+** and **Python 3.11+** on Ubuntu, macOS and Windows. Browser-runtime capture uses the separately declared optional Playwright/Vite dependencies and follows the capability contract's Node.js 22 requirement. Signed-attestation commands additionally require the Python `cryptography` package declared in the shipped `requirements.txt`; `motionloom doctor` reports missing runtime prerequisites. `npx` is the recommended first-run surface; after setup, use the project-local binary through `npx --no-install motionloom ...`. A global install remains optional, not required.
 
 ### When you begin animation work
 
@@ -324,6 +324,7 @@ Read [the Apple workspace guide](apps/apple/README.md), [the contract boundary](
 
 ```bash
 npm install
+python3 -m pip install --requirement requirements.txt
 python3 scripts/skill-doctor.py --json
 python3 tests/scripts/run_tests.py
 python3 scripts/eval-intelligence.py

package/SKILL.md

@@ -7,7 +7,7 @@ description: >-
   validate, review, or deliver animation inside an existing project.
 license: MIT
 metadata:
-  version: "2.5.0"
+  version: "2.5.1"
   target_frameworks: "lottie,dotlottie,rive,gsap,framer-motion,spine,threejs"
   verified_runtimes: "lottie-json,dotlottie-package,svg-cutout-rig,rive,gsap,framer-motion"
 ---

package/agent-card.json

@@ -1,7 +1,7 @@
 {
   "card_version": "1.0",
   "name": "motionloom",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "description": "Project-aware animation production with durable Project Memory, provider-neutral Artifact Intake, hash-bound control-to-runtime candidates, tiered asset provenance, framework-neutral motion IR, rig compatibility, runtime verification and telemetry, Visual Truth, Remediation Learning, DSSE-compatible signed attestation, internal browser review, trust-boundary hardening and deterministic Agent handoff.",
   "capabilities": [
     "project.setup",

package/agent-surfaces.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.0",
   "name": "motionloom",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "canonical": {
     "skill": "SKILL.md",
     "agent_card": "agent-card.json",

package/bin/motionloom.mjs

@@ -8,8 +8,11 @@
 import { fileURLToPath } from "node:url";
 import { dirname, resolve } from "node:path";
 import { spawnSync } from "node:child_process";
+import { readFileSync } from "node:fs";
 
 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const PACKAGE = JSON.parse(readFileSync(resolve(ROOT, "package.json"), "utf8"));
+const VERSION = PACKAGE.version || "unknown";
 const PYTHON = process.env.MOTIONLOOM_PYTHON || (process.platform === "win32" ? "python" : "python3");
 
 const PYTHON_COMMANDS = {
@@ -32,8 +35,6 @@ const PYTHON_COMMANDS = {
   pr: "scripts/pr.py",
   "validate-lottie": "scripts/validate-lottie.py",
   manifest: "scripts/manifest.py",
-  test: "tests/scripts/run_tests.py",
-  "deep-audit": "tests/scripts/deep-stress.py",
   discovery: "scripts/discovery.py",
   "visual-truth": "scripts/visual-truth.py",
   "remediation-learning": "scripts/remediation-learning.py",
@@ -59,7 +60,7 @@ const COMMAND_ALIASES = {
 };
 
 function printHelp() {
-  console.log(`MotionLoom 2.4.0 — project-aware animation production and evidence contracts
+  console.log(`MotionLoom ${VERSION} — project-aware animation production and evidence contracts
 
 Usage:
   motionloom <command> [args...]
@@ -147,7 +148,7 @@ const delegatedArgs = alias
       ? ["init", ...args]
       : args;
 const result = spawnSync(executable, [resolve(ROOT, script), ...delegatedArgs], {
-  cwd: ROOT,
+  cwd: process.cwd(),
   stdio: "inherit",
   env: process.env,
 });

package/capability-registry.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "0.1",
-  "registry_id": "registry-motionloom-2.5.0",
-  "generated_at": "2026-08-17T05:39:24Z",
+  "registry_id": "registry-motionloom-2.5.1",
+  "generated_at": "2026-08-17T23:50:53Z",
   "selection_policy": {
     "require_verified": true,
     "allow_scaffold_only": false,
@@ -12,7 +12,7 @@
       "id": "runtime.lottie-json",
       "kind": "renderer",
       "status": "verified",
-      "adapter_version": "2.5.0",
+      "adapter_version": "2.5.1",
       "inputs": [
         "project-context",
         "motion-spec",
@@ -30,11 +30,11 @@
         ],
         "node": ">=22"
       },
-      "last_verified_at": "2026-08-17T05:39:24Z",
+      "last_verified_at": "2026-08-17T23:50:53Z",
       "evidence": [
         {
           "path": "scripts/runtime-adapters.mjs",
-          "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89",
+          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
           "kind": "ci"
         }
       ],
@@ -49,7 +49,7 @@
       "id": "runtime.dotlottie-package",
       "kind": "packager",
       "status": "verified",
-      "adapter_version": "2.5.0",
+      "adapter_version": "2.5.1",
       "inputs": [
         "project-context",
         "motion-spec",
@@ -67,11 +67,11 @@
         ],
         "node": ">=22"
       },
-      "last_verified_at": "2026-08-17T05:39:24Z",
+      "last_verified_at": "2026-08-17T23:50:53Z",
       "evidence": [
         {
           "path": "scripts/runtime-adapters.mjs",
-          "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89",
+          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
           "kind": "ci"
         }
       ],
@@ -86,7 +86,7 @@
       "id": "runtime.svg-cutout-rig",
       "kind": "renderer",
       "status": "verified",
-      "adapter_version": "2.5.0",
+      "adapter_version": "2.5.1",
       "inputs": [
         "project-context",
         "motion-spec",
@@ -104,11 +104,11 @@
         ],
         "node": ">=22"
       },
-      "last_verified_at": "2026-08-17T05:39:24Z",
+      "last_verified_at": "2026-08-17T23:50:53Z",
       "evidence": [
         {
           "path": "scripts/runtime-adapters.mjs",
-          "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89",
+          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
           "kind": "ci"
         }
       ],
@@ -123,7 +123,7 @@
       "id": "runtime.rive",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.0",
+      "adapter_version": "2.5.1",
       "inputs": [
         "project-context",
         "motion-spec",
@@ -141,11 +141,11 @@
         ],
         "node": ">=22"
       },
-      "last_verified_at": "2026-08-17T05:39:24Z",
+      "last_verified_at": "2026-08-17T23:50:53Z",
       "evidence": [
         {
           "path": "scripts/runtime-adapters.mjs",
-          "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89",
+          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
           "kind": "ci"
         }
       ],
@@ -160,7 +160,7 @@
       "id": "runtime.gsap",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.0",
+      "adapter_version": "2.5.1",
       "inputs": [
         "project-context",
         "motion-spec",
@@ -178,11 +178,11 @@
         ],
         "node": ">=22"
       },
-      "last_verified_at": "2026-08-17T05:39:24Z",
+      "last_verified_at": "2026-08-17T23:50:53Z",
       "evidence": [
         {
           "path": "scripts/runtime-adapters.mjs",
-          "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89",
+          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
           "kind": "ci"
         }
       ],
@@ -197,7 +197,7 @@
       "id": "runtime.framer-motion",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.0",
+      "adapter_version": "2.5.1",
       "inputs": [
         "project-context",
         "motion-spec",
@@ -215,11 +215,11 @@
         ],
         "node": ">=22"
       },
-      "last_verified_at": "2026-08-17T05:39:24Z",
+      "last_verified_at": "2026-08-17T23:50:53Z",
       "evidence": [
         {
           "path": "scripts/runtime-adapters.mjs",
-          "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89",
+          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
           "kind": "ci"
         }
       ],
@@ -234,7 +234,7 @@
       "id": "runtime.spine",
       "kind": "renderer",
       "status": "scaffold_only",
-      "adapter_version": "2.5.0",
+      "adapter_version": "2.5.1",
       "inputs": [
         "project-context",
         "motion-spec",
@@ -252,11 +252,11 @@
         ],
         "node": ">=22"
       },
-      "last_verified_at": "2026-08-17T05:39:24Z",
+      "last_verified_at": "2026-08-17T23:50:53Z",
       "evidence": [
         {
           "path": "scripts/runtime-adapters.mjs",
-          "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89",
+          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
           "kind": "ci"
         }
       ],
@@ -271,7 +271,7 @@
       "id": "runtime.threejs",
       "kind": "renderer",
       "status": "scaffold_only",
-      "adapter_version": "2.5.0",
+      "adapter_version": "2.5.1",
       "inputs": [
         "project-context",
         "motion-spec",
@@ -289,11 +289,11 @@
         ],
         "node": ">=22"
       },
-      "last_verified_at": "2026-08-17T05:39:24Z",
+      "last_verified_at": "2026-08-17T23:50:53Z",
       "evidence": [
         {
           "path": "scripts/runtime-adapters.mjs",
-          "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89",
+          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
           "kind": "ci"
         }
       ],

package/dev-lab/public/devlab.js

@@ -0,0 +1,193 @@
+const params = new URLSearchParams(location.search);
+const scene = params.get("scene");
+const taskId = params.get("task_id") || "unbound";
+const candidateId = params.get("candidate_id");
+const base = `/scenes/${encodeURIComponent(scene || "")}`;
+const frames = [0, 50, 100];
+const allowedStatuses = new Set(["prepared", "opened"]);
+const $ = (id) => document.getElementById(id);
+let manifest;
+let spec;
+let candidate;
+let review;
+
+function nearest(progress) {
+  return frames.reduce(
+    (current, frame) => Math.abs(frame - progress) < Math.abs(current - progress) ? frame : current,
+    frames[0],
+  );
+}
+
+function showProgress(progress) {
+  const bounded = Math.max(0, Math.min(1, progress));
+  const percent = bounded * 100;
+  const frame = nearest(percent);
+  $("scrubber").value = percent;
+  $("timecode").textContent = `00:00:${(Number(spec?.duration_s || 0) * bounded).toFixed(3).padStart(6, "0")}`;
+  $("frame").src = `${base}/snapshot/frame-${String(frame).padStart(2, "0")}.png`;
+  $("frame").hidden = false;
+  $("empty").hidden = true;
+  window.__lab.lastProgress = bounded;
+}
+
+function currentChecks() {
+  return [...document.querySelectorAll("[data-check]")].map((element) => ({
+    id: element.dataset.check,
+    pass: element.checked,
+  }));
+}
+
+function currentReview(decision) {
+  return {
+    review_version: "1.0",
+    task_id: taskId,
+    candidate_id: candidate.candidate_id,
+    scene,
+    decision,
+    reviewer: "user",
+    reviewed_at: new Date().toISOString(),
+    checks: currentChecks(),
+    notes: $("notes").value,
+    frames_inspected: frames,
+    spec: {
+      framework: spec.framework,
+      category: spec.category,
+      context_binding: spec.context_binding,
+    },
+    candidate: {
+      source_sha256: candidate.source_sha256,
+      context_sha256: candidate.context_sha256,
+    },
+  };
+}
+
+function saveLocal(payload) {
+  localStorage.setItem(`devlab:${taskId}:${candidate.candidate_id}`, JSON.stringify(payload));
+}
+
+function expose(payload) {
+  window.__lab.lastReview = payload;
+  window.__lab.getReview = () => window.__lab.lastReview;
+  window.__lab.exportReview = () => JSON.stringify(window.__lab.lastReview, null, 2);
+}
+
+async function fetchJson(url) {
+  const response = await fetch(url);
+  if (!response.ok) throw new Error(`Could not load ${url} (${response.status})`);
+  return response.json();
+}
+
+function validateCandidate() {
+  if (candidate.candidate_id !== candidateId) {
+    throw new Error("Candidate identity mismatch; refusing to review a different scene");
+  }
+  if (candidate.task_id !== taskId) {
+    throw new Error("Task identity mismatch; refusing unbound review");
+  }
+  if (!allowedStatuses.has(candidate.status)) {
+    throw new Error(`Candidate status is not reviewable: ${candidate.status || "missing"}`);
+  }
+  const expiresAt = Date.parse(candidate.expires_at);
+  if (!Number.isFinite(expiresAt)) {
+    throw new Error("Candidate expiry is missing or invalid");
+  }
+  if (Date.now() > expiresAt) {
+    throw new Error("Candidate has expired; prepare a new browser-review URL");
+  }
+}
+
+function renderMetadata() {
+  const values = [
+    ["TASK", taskId],
+    ["CANDIDATE", candidateId],
+    ["FRAMEWORK", spec.framework],
+    ["DURATION", `${spec.duration_s}s`],
+    ["FPS", spec.fps],
+    ["EASING", spec.easing],
+    ["PRIMARY", spec.theme?.primary || "unbound"],
+  ];
+  const nodes = values.map(([key, value]) => {
+    const pill = document.createElement("div");
+    pill.className = "pill";
+    const label = document.createElement("b");
+    label.textContent = key;
+    pill.append(label, document.createTextNode(` ${value ?? "—"}`));
+    return pill;
+  });
+  $("meta").replaceChildren(...nodes);
+}
+
+function renderChecks() {
+  const nodes = (manifest.checks || []).map((check) => {
+    const label = document.createElement("label");
+    label.className = "check";
+    const input = document.createElement("input");
+    input.type = "checkbox";
+    input.dataset.check = String(check.id || "");
+    input.checked = Boolean(review.checks.find((item) => item.id === check.id)?.pass);
+    const copy = document.createElement("span");
+    const title = document.createElement("b");
+    const detail = document.createElement("small");
+    title.textContent = check.label || check.id || "Unnamed check";
+    detail.textContent = check.detail || "";
+    copy.append(title, detail);
+    label.append(input, copy);
+    return label;
+  });
+  $("checks").replaceChildren(...nodes);
+}
+
+function confirmReview() {
+  const checks = currentChecks();
+  const approved = checks.length > 0 && checks.every((check) => check.pass);
+  const payload = currentReview(approved ? "approved" : "changes_requested");
+  saveLocal(payload);
+  expose(payload);
+  $("status").className = approved ? "ok" : "warn";
+  $("status").textContent = approved
+    ? "BROWSER REVIEW APPROVED · browser Agent must persist review.json before PR"
+    : "CHANGES REQUESTED · browser Agent must persist notes and return to generation";
+}
+
+window.__lab = { seek: showProgress, ready: false, taskId, candidateId, reviewRequired: true };
+
+async function load() {
+  if (!scene || !candidateId) {
+    throw new Error("Missing scene or candidate_id; open the emitted browser-review URL");
+  }
+  [manifest, spec, candidate] = await Promise.all([
+    fetchJson(`${base}/manifest.json`),
+    fetchJson(`${base}/motion-spec.json`),
+    fetchJson(`${base}/browser-review.json`),
+  ]);
+  validateCandidate();
+
+  $("title").textContent = `${manifest.name || scene} · candidate ${candidateId}`;
+  $("description").textContent = `${manifest.description || "Evidence review for this animation scene."} Review candidate ${candidateId} is bound to task ${taskId}.`;
+  $("stage-label").textContent = `${scene.toUpperCase()} · ${spec.category || "animation"} · CANDIDATE`;
+  $("stage-mode").textContent = `${spec.framework || "unknown"} · ${candidate.status} · runtime evidence`;
+  renderMetadata();
+
+  const saved = JSON.parse(localStorage.getItem(`devlab:${taskId}:${candidateId}`) || "null");
+  review = saved || {
+    checks: (manifest.checks || []).map((check) => ({ id: check.id, pass: false })),
+    notes: "",
+    decision: "pending",
+  };
+  renderChecks();
+  $("notes").value = review.notes || "";
+  $("scrubber").addEventListener("input", (event) => showProgress(Number(event.target.value) / 100));
+  $("confirm").addEventListener("click", confirmReview);
+  $("reset").addEventListener("click", () => {
+    localStorage.removeItem(`devlab:${taskId}:${candidateId}`);
+    location.reload();
+  });
+  window.__lab.ready = true;
+  showProgress(0);
+}
+
+load().catch((error) => {
+  $("status").className = "warn";
+  $("status").textContent = `DEV LAB ERROR: ${error.message}`;
+  $("empty").textContent = "Unable to load the exact candidate evidence.";
+});

package/dev-lab/public/index.html

@@ -0,0 +1,30 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'none'; form-action 'none'" />
+  <title>Animation Dev Lab</title>
+  <style>
+    :root { color-scheme: dark; --bg:#111218; --panel:#1b1d25; --line:#303440; --text:#e7e9ee; --muted:#8f96a6; --amber:#f59e0b; --good:#46d18c; --bad:#ff6b6b; }
+    * { box-sizing:border-box; } body { margin:0; background:radial-gradient(circle at 40% -10%,#2a2630 0,#111218 40%); color:var(--text); font:14px/1.45 ui-sans-serif,system-ui,sans-serif; }
+    header { height:58px; display:flex; align-items:center; justify-content:space-between; padding:0 22px; border-bottom:1px solid var(--line); background:#15171e; }
+    header strong { letter-spacing:.12em; text-transform:uppercase; font-size:12px; } header span { color:var(--amber); font-family:ui-monospace,monospace; }
+    main { display:grid; grid-template-columns:minmax(0,1fr) 330px; min-height:calc(100vh - 58px); } .workbench { padding:24px; min-width:0; }
+    .stage { min-height:430px; display:flex; align-items:center; justify-content:center; border:1px solid #3b3f4c; background:repeating-conic-gradient(#181a22 0 25%,#15171e 0 50%) 50%/32px 32px; position:relative; overflow:hidden; }
+    .stage img { max-width:92%; max-height:390px; object-fit:contain; image-rendering:auto; filter:drop-shadow(0 18px 32px #0009); } .stage .empty { color:var(--muted); text-align:center; }
+    .stage-label { position:absolute; left:14px; top:12px; color:var(--muted); font:11px ui-monospace,monospace; letter-spacing:.08em; } .stage-mode { position:absolute; right:14px; top:12px; color:var(--amber); font:11px ui-monospace,monospace; }
+    .timeline { padding:18px 0 0; } input[type=range] { width:100%; accent-color:var(--amber); } .ticks { display:flex; justify-content:space-between; color:var(--muted); font:11px ui-monospace,monospace; }
+    .meta-row { display:flex; gap:10px; flex-wrap:wrap; margin-top:18px; } .pill { border:1px solid var(--line); background:#191b22; padding:8px 10px; color:var(--muted); } .pill b { color:var(--text); font-weight:600; }
+    aside { border-left:1px solid var(--line); background:#171920; padding:20px; } h1 { font-size:24px; margin:0 0 6px; } h2 { font-size:13px; letter-spacing:.09em; text-transform:uppercase; color:var(--muted); margin:24px 0 10px; }
+    p { color:var(--muted); margin:0; } .check { display:flex; gap:10px; padding:9px 0; border-bottom:1px solid #272a34; } .check input { accent-color:var(--good); } .check small { color:var(--muted); display:block; } textarea { width:100%; min-height:90px; resize:vertical; color:var(--text); background:#111218; border:1px solid var(--line); padding:10px; font:13px ui-monospace,monospace; }
+    button { border:0; padding:11px 14px; color:#17120b; background:var(--amber); font-weight:750; cursor:pointer; } button:hover { filter:brightness(1.08); } button:active { transform:scale(.98); } button.secondary { color:var(--text); background:#2a2d38; margin-left:8px; } .actions { margin-top:14px; } #status { margin-top:10px; font:12px ui-monospace,monospace; } .ok { color:var(--good); } .warn { color:var(--bad); }
+    @media (max-width:800px) { main { grid-template-columns:1fr; } aside { border-left:0; border-top:1px solid var(--line); } .stage { min-height:330px; } }
+  </style>
+</head>
+<body>
+  <header><strong>Animation Dev Lab</strong><span id="timecode">00:00:00.000</span></header>
+  <main><section class="workbench"><div class="stage" id="stage" data-snapshot><div class="stage-label" id="stage-label">LOADING SCENE</div><div class="stage-mode" id="stage-mode"></div><div class="empty" id="empty">Loading evidence…</div><img id="frame" alt="Rendered animation snapshot" hidden /></div><div class="timeline"><input id="scrubber" type="range" min="0" max="100" value="0" aria-label="Animation progress" /><div class="ticks"><span>00%</span><span>25%</span><span>50%</span><span>75%</span><span>100%</span></div></div><div class="meta-row" id="meta"></div></section><aside><h1 id="title">Scene</h1><p id="description">Loading manifest and signed motion spec.</p><h2>Quality checklist</h2><div id="checks"></div><h2>Fix notes</h2><textarea id="notes" placeholder="Describe a fix request or confirmation for the PR…"></textarea><div class="actions"><button id="confirm">Confirm review</button><button class="secondary" id="reset">Reset</button></div><div id="status"></div></aside></main>
+  <script src="/devlab.js" defer></script>
+</body>
+</html>

package/docs/STATUS.md

@@ -4,7 +4,7 @@
 
 ## Current release posture
 
-MotionLoom's repository source and package manifest are prepared for **2.4.0 release metadata**. The publication state of the npm registry and GitHub Release/tag must be verified against the latest release workflow rather than inferred from this document. The repository has a cross-platform CLI, one-command project onboarding, durable Project Memory, Agent interoperability surfaces, artifact-first handoff, runtime evidence, Visual Truth, Remediation Learning, signed attestation, AI-first asset provenance, a truthful code-authored runtime lane and a browser-based Dev Lab review contract. The protected manual release workflow verifies package/changelog/release-note alignment before publication.
+MotionLoom's repository source and package manifest carry **2.5.1 release metadata**. The publication state of the npm registry and GitHub Release/tag must be verified against the latest release workflow rather than inferred from this document. The repository has a cross-platform CLI, one-command project onboarding, durable Project Memory, Agent interoperability surfaces, artifact-first handoff, runtime evidence, Visual Truth, Remediation Learning, signed attestation, AI-first asset provenance, a truthful code-authored runtime lane and a browser-based Dev Lab review contract. The protected manual release workflow verifies package/changelog/release-note alignment before publication.
 
 The repository is **engineering-ready for continued integration work**, not a universal production certification for every animation framework or every host project. CI status must be read from the latest GitHub Actions run, not inferred from historical audit prose.
 
@@ -30,4 +30,4 @@ Use the following order when sources disagree:
 
 ## Known next work
 
-The bounded analyzer has now been exercised against a labeled external corpus; see the [dated evidence note](audits/external-project-corpus-2026-08-13.md). The highest-value remaining evidence work is paired product evaluation across more real projects and verification of the 2.4.0 version–tag–GitHub Release–npm provenance chain. Missing external projects are reported as `insufficient_evidence`, never as a pass. None of these items should weaken the user-review gate or convert heuristic warnings into approval.
+The bounded analyzer has now been exercised against a labeled external corpus; see the [dated evidence note](audits/external-project-corpus-2026-08-13.md). The 2.5.0 version–tag–GitHub Release–npm chain has been verified against public metadata. The highest-value remaining evidence work is paired product evaluation across more real projects and repeating the same provenance verification for each new release. Missing external projects are reported as `insufficient_evidence`, never as a pass. None of these items should weaken the user-review gate or convert heuristic warnings into approval.

package/docs/releases/2.5.1.md

@@ -0,0 +1,21 @@
+# MotionLoom 2.5.1
+
+## Summary
+
+MotionLoom 2.5.1 is a hardening patch for the installed npm package, browser review boundary and runtime-output policy. It preserves the 2.5.0 capability surface while making the advertised onboarding, Dev Lab and runtime evidence paths work safely from an isolated consumer project.
+
+## Fixed
+
+- The npm CLI preserves the caller's working directory, so default setup and onboarding target the consumer project instead of the installed package directory. The displayed CLI version is read from package metadata.
+- The npm tarball includes the Dev Lab assets, runtime harness, Python requirements and optional browser-runtime dependencies required by its documented commands. Release validation installs the packed tarball into an isolated consumer project.
+- Dev Lab renders manifest values through safe DOM APIs, enforces a same-origin script content-security policy and rejects invalid, expired or terminal browser-review candidates before review can be enabled.
+- Runtime evidence cleanup is constrained to a dedicated child directory below an explicit policy root and cannot remove caller data outside that boundary.
+- The protected GitHub Actions release uses npm Trusted Publishing/OIDC with a compatible pinned npm client instead of a long-lived publish token. npm generates public-package provenance automatically for the trusted workflow.
+
+## Verified behavior
+
+The release candidate passes the full regression harness, quality and signed-attestation gate, isolated package-consumer smoke test, Dev Lab browser-security smoke test, real Rive/GSAP/Framer Motion runtime capture at 0/50/100%, a 6,900-case deep stress run, twelve Swift package tests, Skill Doctor, documentation audit, discovery, release verification and package inspection. The pull request carrying the implementation passed all twelve GitHub checks before merge.
+
+## Trust boundary
+
+This patch does not add a framework capability, sign or distribute the Apple alpha, grant production approval or authorize a pull request or release from machine-generated evidence. Browser review remains identity-bound and human-governed. npm publication and GitHub Release creation remain explicit maintainer actions after the prepared commit is green on `main`.

package/docs/releases/npm-publish-from-workstation.md

@@ -1,6 +1,6 @@
 # Publish MotionLoom to npm from your workstation
 
-This guide publishes the prepared `motionloom@2.5.0` package from your own computer. The npm password, authenticator code and access token must stay on your computer; never paste them into chat, GitHub issues or repository files.
+This guide publishes the prepared `motionloom@2.5.1` package from your own computer. The npm password, authenticator code and access token must stay on your computer; never paste them into chat, GitHub issues or repository files.
 
 ## 1. Install prerequisites
 
@@ -48,7 +48,7 @@ npm pack --dry-run --json --ignore-scripts
 npm publish --dry-run --access public
 ```
 
-The dry-run should report `motionloom@2.5.0`, public access, and the current package file list. Do not hard-code a historical file count: inspect the JSON output and compare it with the checked-in package allowlist. The prepack hook removes generated Python bytecode before packaging. Do not publish if the dry-run shows private keys, `.env` files, `artifacts/`, `dev-lab/` or `__pycache__/` entries.
+The dry-run should report `motionloom@2.5.1`, public access, and the current package file list. Do not hard-code a historical file count: inspect the JSON output and compare it with the checked-in package allowlist. The prepack hook removes generated Python bytecode before packaging. Do not publish if the dry-run shows private keys, `.env` files, `artifacts/`, `dev-lab/` or `__pycache__/` entries.
 
 ## 5. Publish the package
 
@@ -60,15 +60,15 @@ npm publish --access public
 
 Do not add `--provenance` unless the local npm client and its CI/provider integration explicitly support automatic npm provenance. Some workstation setups report `Automatic provenance generation not supported for provider: null`; in that case the package itself is still valid, and the supported fallback for this release is the command above without `--provenance`. Never retry by changing the version or by bypassing the package verification steps.
 
-The version `2.5.0` becomes immutable on npm after a successful publish. If npm reports that the version already exists, stop and verify the registry instead of trying to overwrite it.
+The version `2.5.1` becomes immutable on npm after a successful publish. If npm reports that the version already exists, stop and verify the registry instead of trying to overwrite it.
 
 ## 6. Verify the registry publication
 
-Run the following commands and confirm that they return `2.5.0` and a tarball URL:
+Run the following commands and confirm that they return `2.5.1` and a tarball URL:
 
 ```bash
 npm view motionloom version --registry=https://registry.npmjs.org/
-npm view motionloom@2.5.0 name version license dist.tarball dist.shasum --json \
+npm view motionloom@2.5.1 name version license dist.tarball dist.shasum --json \
   --registry=https://registry.npmjs.org/
 ```
 
@@ -78,7 +78,7 @@ Then test installation in a clean temporary directory:
 TMP_DIR="$(mktemp -d)"
 cd "$TMP_DIR"
 npm init --yes
-npm install motionloom@2.5.0
+npm install motionloom@2.5.1
 motionloom --help
 motionloom doctor
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "motionloom",
-  "version": "2.5.0",
+  "version": "2.5.1",
   "type": "module",
   "packageManager": "pnpm@11.20.0",
   "description": "MotionLoom: project-aware animation Skill with Agent interoperability, graph, provenance, Motion IR, runtime telemetry, Visual Truth, Remediation Learning, DSSE-compatible signed attestation, external evidence verification and Dev Lab review.",
@@ -33,6 +33,10 @@
     "schemas/asset-provenance.schema.json",
     "examples/agent-consumer/ai-generated-pilot-provenance.json",
     "project-context.example.json",
+    "requirements.txt",
+    "dev-lab/public/index.html",
+    "dev-lab/public/devlab.js",
+    "tests/runtime-harness",
     "tests/evals",
     "tests/scripts/run_tests.py",
     "tests/scripts/test_attestation.py",
@@ -124,7 +128,7 @@
   },
   "scripts": {
     "prepack": "node scripts/prepack-clean.mjs",
-    "test": "node bin/motionloom.mjs test",
+    "test": "python3 tests/scripts/run_tests.py",
     "validate": "npm run quality:attestation",
     "doctor": "node bin/motionloom.mjs doctor --json",
     "init": "node bin/motionloom.mjs init",
@@ -147,7 +151,8 @@
     "intelligence:p1": "node bin/motionloom.mjs intelligence",
     "quality:p1": "node bin/motionloom.mjs quality-gate --require-intelligence --require-p1 --require-benchmark",
     "eval:intelligence": "node bin/motionloom.mjs eval-intelligence",
-    "audit:deep": "node bin/motionloom.mjs deep-audit --iterations 5000 --seed 20260813 --report docs/audits/data/deep-stress-latest.json",
+    "audit:deep": "python3 tests/scripts/deep-stress.py --iterations 5000 --seed 20260813 --report docs/audits/data/deep-stress-latest.json",
+    "package:smoke": "node scripts/package-consumer-smoke.mjs",
     "memory:init": "node bin/motionloom.mjs memory init --project-root .",
     "memory:bootstrap": "node bin/motionloom.mjs analyze . --init-memory",
     "memory:recover": "node bin/motionloom.mjs memory recover --project-root .",
@@ -191,9 +196,10 @@
     "react": "^19.2.8",
     "react-dom": "^19.2.8"
   },
-  "devDependencies": {
+  "optionalDependencies": {
     "playwright": "^1.62.1",
     "vite": "^8.2.1"
   },
+  "devDependencies": {},
   "license": "MIT"
 }

package/requirements.txt

@@ -0,0 +1 @@
+cryptography>=42.0,<47.0

package/rig-adapter-registry.json

@@ -16,7 +16,7 @@
       "target": "rive",
       "framework": "rive",
       "status": "project_integrated",
-      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89"}],
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d"}],
       "limitations": ["Runtime harness evidence must be captured for the concrete scene and source bytes."]
     },
     {
@@ -24,7 +24,7 @@
       "target": "gsap",
       "framework": "gsap",
       "status": "project_integrated",
-      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89"}],
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d"}],
       "limitations": ["Runtime harness evidence must be captured for the concrete scene and source bytes."]
     },
     {
@@ -32,7 +32,7 @@
       "target": "framer-motion",
       "framework": "framer-motion",
       "status": "project_integrated",
-      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "711a64c07b4d82f646d066c7b0d91deaefc5c9c0fb701358706bf31d558b4d89"}],
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d"}],
       "limitations": ["Runtime harness evidence must be captured for the concrete scene and source bytes."]
     }
   ]

package/scripts/capture-runtime-telemetry.py

@@ -47,9 +47,15 @@ def main() -> int:
         print("capture-runtime-telemetry: --max-age-days must be non-negative", file=sys.stderr)
         return 2
 
-    root = Path(__file__).resolve().parents[1]
+    package_root = Path(__file__).resolve().parents[1]
+    root = Path(os.environ.get("MOTIONLOOM_PROJECT_ROOT") or Path.cwd()).expanduser().resolve()
     task_dir = Path(args.task_dir).expanduser()
     task_dir = task_dir.resolve() if task_dir.is_absolute() else (root / task_dir).resolve()
+    try:
+        task_dir.relative_to(root)
+    except ValueError:
+        print("capture-runtime-telemetry: task directory must remain inside the project root", file=sys.stderr)
+        return 2
     scene_dir = (root / "src" / "output" / args.scene).resolve()
     manifest_path = scene_dir / "manifest.json"
     task_path = task_dir / "task.json"
@@ -74,10 +80,6 @@ def main() -> int:
         return 2
 
     output_dir = task_dir / "runtime-adapters"
-    if output_dir.exists():
-        shutil.rmtree(output_dir)
-    output_dir.mkdir(parents=True, exist_ok=True)
-
     env = os.environ.copy()
     env.update(
         {
@@ -87,17 +89,23 @@ def main() -> int:
             "RUNTIME_SOURCE_PATH": str(source_path),
             "RUNTIME_MANIFEST_PATH": str(manifest_path),
             "RUNTIME_MOTION_IR_PATH": str(task_dir / "motion-ir.json"),
+            "MOTIONLOOM_RUNTIME_OUTPUT_ROOT": str(root),
         }
     )
-    npm = "npm.cmd" if os.name == "nt" else "npm"
-    runtime = subprocess.run([npm, "run", "runtime:test"], cwd=root, env=env, check=False)
+    node = shutil.which("node") or ("node.exe" if os.name == "nt" else "node")
+    runtime = subprocess.run(
+        [node, str(package_root / "scripts" / "runtime-adapters.mjs")],
+        cwd=root,
+        env=env,
+        check=False,
+    )
     if runtime.returncode != 0:
         return runtime.returncode
 
     verifier = subprocess.run(
         [
             sys.executable,
-            str(root / "scripts" / "evidence-verifier.py"),
+            str(package_root / "scripts" / "evidence-verifier.py"),
             "--scene-dir",
             str(scene_dir),
             "--task-dir",

package/scripts/devlab.py

@@ -87,17 +87,9 @@ def prepare_scene(root: Path, lab: Path, scene: str, task_dir: Path | None) -> t
     return destination, task_destination, task_id
 
 
-def pnpm_executable() -> str:
-    candidate = "pnpm.cmd" if os.name == "nt" else "pnpm"
-    return shutil.which(candidate) or candidate
-
-
 def serve(lab: Path, port: int) -> int:
     if not (lab / "public").is_dir():
         fail(f"Dev Lab public directory not found: {lab / 'public'}")
-    if not (lab / "node_modules").is_dir():
-        print("== installing Dev Lab dependencies (first run) ==")
-        subprocess.run([pnpm_executable(), "install", "--silent"], cwd=lab, check=True)
     print(f"== Dev Lab ready: http://localhost:{port}/ ==")
     return subprocess.run([sys.executable, "-m", "http.server", str(port), "--directory", str(lab / "public")], check=False).returncode
 
@@ -110,8 +102,9 @@ def main() -> int:
     parser.add_argument("--port", type=int, default=int(os.environ.get("PORT", "3300")))
     parser.add_argument("--prepare-only", action="store_true")
     args = parser.parse_args()
-    root = Path(__file__).resolve().parents[1]
-    lab = Path(args.lab_dir or os.environ.get("MOTIONLOOM_DEV_LAB") or root / "dev-lab").expanduser().resolve()
+    package_root = Path(__file__).resolve().parents[1]
+    root = Path(os.environ.get("MOTIONLOOM_PROJECT_ROOT") or Path.cwd()).expanduser().resolve()
+    lab = Path(args.lab_dir or os.environ.get("MOTIONLOOM_DEV_LAB") or package_root / "dev-lab").expanduser().resolve()
     task_dir = Path(args.task_dir).expanduser().resolve() if args.task_dir else None
     destination, task_destination, task_id = prepare_scene(root, lab, args.scene, task_dir)
     print(f"== Dev Lab scene prepared: {destination} ==")

package/scripts/docs-audit.py

@@ -93,9 +93,21 @@ if "--require-asset-provenance" not in (workflow_dir / "quality.yml").read_text(
         errors.append(f"{workflow.relative_to(ROOT)}: secrets referenced in pull_request workflow")
 
 release = (workflow_dir / "release.yml").read_text(encoding="utf-8")
-for required in ["workflow_dispatch:", "environment: npm-release", "id-token: write", "release_version:", "scripts/release-verify.py"]:
+for required in [
+    "workflow_dispatch:",
+    "environment: npm-release",
+    "id-token: write",
+    "release_version:",
+    "scripts/release-verify.py",
+    'node-version: "24"',
+    "npm@11.19.0",
+    'npm publish --access public --tag "$NPM_TAG"',
+]:
     if required not in release:
         errors.append(f"release.yml: missing release safety control {required}")
+for forbidden in ["NODE_AUTH_TOKEN", "secrets.NPM_TOKEN", "--provenance"]:
+    if forbidden in release:
+        errors.append(f"release.yml: token-based or redundant trusted-publishing control remains: {forbidden}")
 
 devlab = (workflow_dir / "devlab.yml").read_text(encoding="utf-8")
 for required in [

package/scripts/package-consumer-smoke.mjs

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import process from "node:process";
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const expectedVersion = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8")).version;
+const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "motionloom-consumer-"));
+const consumer = path.join(temporary, "consumer");
+fs.mkdirSync(consumer);
+fs.writeFileSync(
+  path.join(consumer, "package.json"),
+  `${JSON.stringify({ name: "motionloom-package-smoke", private: true }, null, 2)}\n`,
+);
+
+function run(command, args, options = {}) {
+  const result = spawnSync(command, args, {
+    cwd: options.cwd || root,
+    encoding: "utf8",
+    env: process.env,
+    ...options,
+  });
+  if (result.status !== 0) {
+    throw new Error(
+      `${command} ${args.join(" ")} failed (${result.status})\n${result.stdout || ""}\n${result.stderr || ""}`,
+    );
+  }
+  return result.stdout.trim();
+}
+
+try {
+  const packOutput = JSON.parse(run("npm", ["pack", "--json", "--pack-destination", temporary]));
+  const tarball = path.join(temporary, packOutput[0].filename);
+  run("npm", ["install", "--ignore-scripts", "--no-audit", "--no-fund", tarball], { cwd: consumer });
+
+  const bin = process.platform === "win32"
+    ? path.join(consumer, "node_modules", ".bin", "motionloom.cmd")
+    : path.join(consumer, "node_modules", ".bin", "motionloom");
+  const installedRoot = path.dirname(fs.realpathSync(path.join(consumer, "node_modules", "motionloom", "package.json")));
+  const help = run(bin, ["--help"], { cwd: consumer });
+  const init = JSON.parse(run(bin, ["init", "--dry-run", "--json"], { cwd: consumer }));
+  const doctor = JSON.parse(run(bin, ["doctor", "--json"], { cwd: consumer }));
+
+  if (!help.startsWith(`MotionLoom ${expectedVersion}`)) throw new Error(`unexpected help version: ${help.split("\n")[0]}`);
+  if (fs.realpathSync(init.project_root || ".") !== fs.realpathSync(consumer)) {
+    throw new Error(`installed CLI used the wrong project_root: ${init.project_root}`);
+  }
+  if (doctor.status !== "pass") throw new Error(`installed doctor failed: ${JSON.stringify(doctor.errors)}`);
+  for (const relative of [
+    "requirements.txt",
+    "dev-lab/public/index.html",
+    "dev-lab/public/devlab.js",
+    "tests/runtime-harness/index.html",
+  ]) {
+    if (!fs.existsSync(path.join(installedRoot, relative))) throw new Error(`tarball omitted ${relative}`);
+  }
+  const scene = "browser-review-smoke";
+  const consumerScene = path.join(consumer, "src", "output", scene);
+  fs.mkdirSync(path.dirname(consumerScene), { recursive: true });
+  fs.cpSync(path.join(installedRoot, "src", "output", scene), consumerScene, { recursive: true });
+  const candidatePath = path.join(consumerScene, "browser-review.json");
+  const candidate = JSON.parse(fs.readFileSync(candidatePath, "utf8"));
+  candidate.expires_at = "2099-01-01T00:00:00Z";
+  fs.writeFileSync(candidatePath, `${JSON.stringify(candidate, null, 2)}\n`);
+  run(bin, ["devlab", scene, "--prepare-only"], { cwd: consumer });
+  if (!fs.existsSync(path.join(installedRoot, "dev-lab", "public", "scenes", scene, "browser-review.json"))) {
+    throw new Error("installed Dev Lab did not prepare the consumer scene");
+  }
+  run(process.execPath, ["--input-type=module", "-e", "await import('playwright'); await import('vite');"], { cwd: consumer });
+  console.log(JSON.stringify({ status: "pass", project_root: init.project_root, installed_root: installedRoot }, null, 2));
+} finally {
+  fs.rmSync(temporary, { recursive: true, force: true });
+}

package/scripts/runtime-adapters.mjs

@@ -6,9 +6,11 @@ import { spawn } from "node:child_process";
 import { setTimeout as sleep } from "node:timers/promises";
 import { chromium } from "playwright";
 import crypto from "node:crypto";
+import { fileURLToPath } from "node:url";
 
-const ROOT = path.resolve(new URL("..", import.meta.url).pathname);
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const outputRoot = path.resolve(process.env.RUNTIME_EVIDENCE_DIR || path.join(ROOT, "artifacts/runtime-adapters"));
+const outputPolicyRoot = path.resolve(process.env.MOTIONLOOM_RUNTIME_OUTPUT_ROOT || ROOT);
 const port = Number(process.env.RUNTIME_HARNESS_PORT || 4179);
 const supportedFrameworks = new Set(["rive", "gsap", "framer-motion"]);
 const frameworks = (process.env.RUNTIME_FRAMEWORKS || "rive,gsap,framer-motion")
@@ -17,8 +19,31 @@ const unsupported = frameworks.filter((name) => !supportedFrameworks.has(name));
 if (unsupported.length) {
   throw new Error(`unsupported runtime framework(s): ${unsupported.join(", ")}`);
 }
-if (outputRoot === ROOT || outputRoot === path.parse(outputRoot).root) {
-  throw new Error("RUNTIME_EVIDENCE_DIR must be a dedicated child output directory");
+function canonicalPath(target) {
+  let existing = target;
+  const missing = [];
+  while (!fs.existsSync(existing)) {
+    const parent = path.dirname(existing);
+    if (parent === existing) break;
+    missing.unshift(path.basename(existing));
+    existing = parent;
+  }
+  const base = fs.existsSync(existing) ? fs.realpathSync(existing) : path.resolve(existing);
+  return path.resolve(base, ...missing);
+}
+
+function isStrictChild(target, parent) {
+  const relative = path.relative(parent, target);
+  return Boolean(relative) && relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
+}
+
+const canonicalOutputRoot = canonicalPath(outputRoot);
+const canonicalPolicyRoot = canonicalPath(outputPolicyRoot);
+if (!isStrictChild(canonicalOutputRoot, canonicalPolicyRoot)) {
+  throw new Error(
+    `RUNTIME_EVIDENCE_DIR must be a dedicated child of ${outputPolicyRoot}; ` +
+    "set MOTIONLOOM_RUNTIME_OUTPUT_ROOT explicitly to authorize another parent",
+  );
 }
 const baseUrl = `http://127.0.0.1:${port}`;
 const runId = `${Date.now()}-${process.pid}`;

package/scripts/skill-doctor.py

@@ -4,6 +4,7 @@
 from __future__ import annotations
 
 import argparse
+import importlib.util
 import json
 import re
 import sys
@@ -11,7 +12,15 @@ from pathlib import Path
 
 
 ROOT = Path(__file__).resolve().parents[1]
-REQUIRED_FILES = ["SKILL.md", "agent-card.json", "package.json"]
+REQUIRED_FILES = [
+    "SKILL.md",
+    "agent-card.json",
+    "package.json",
+    "requirements.txt",
+    "dev-lab/public/index.html",
+    "dev-lab/public/devlab.js",
+    "tests/runtime-harness/index.html",
+]
 REQUIRED_DIRS = ["scripts", "templates", "references", "schemas"]
 REQUIRED_SCRIPT_FILES = [
     "scripts/report-contract.py",
@@ -135,9 +144,26 @@ def run() -> int:
         for script in ("test", "validate", "doctor", "setup", "setup:dry", "status", "repair", "report", "report:check", "review", "memory:bootstrap", "memory:recover", "memory:validate", "devlab", "pack:dotlottie"):
             if script not in package.get("scripts", {}):
                 warnings.append({"code": "missing_package_script", "message": f"package.json has no {script} script."})
+        runtime_dependencies = {
+            **package.get("dependencies", {}),
+            **package.get("optionalDependencies", {}),
+        }
+        for dependency in ("playwright", "vite"):
+            present = dependency in runtime_dependencies
+            checks.append({"id": f"runtime-dependency:{dependency}", "status": "pass" if present else "fail"})
+            if not present:
+                errors.append({"code": "missing_runtime_dependency", "message": f"package.json runtime dependencies omit {dependency}."})
     except (FileNotFoundError, json.JSONDecodeError) as exc:
         errors.append({"code": "invalid_package_json", "message": str(exc)})
 
+    cryptography_available = importlib.util.find_spec("cryptography") is not None
+    checks.append({"id": "python-dependency:cryptography", "status": "pass" if cryptography_available else "fail"})
+    if not cryptography_available:
+        errors.append({
+            "code": "missing_python_dependency",
+            "message": "Python package cryptography is required; install dependencies from requirements.txt.",
+        })
+
     result = {
         "doctor_version": "1.0",
         "skill_root": str(ROOT),

package/tests/runtime-harness/index.html

@@ -0,0 +1,24 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Animation Skill Runtime Harness</title>
+    <style>
+      html, body { margin: 0; min-height: 100%; background: #111827; color: #f8fafc; font-family: system-ui, sans-serif; }
+      body { display: grid; place-items: center; }
+      #root { width: 512px; height: 512px; display: grid; place-items: center; }
+      .stage { position: relative; width: 420px; height: 420px; overflow: hidden; background: #f8fafc; border-radius: 12px; }
+      .stage::after { content: ""; position: absolute; inset: 0; pointer-events: none; border: 1px solid rgba(15,23,42,.2); border-radius: inherit; }
+      .gsap-box, .motion-box { width: 96px; height: 96px; position: absolute; left: 40px; top: 160px; border-radius: 18px; background: #2563eb; transform-origin: center; }
+      .gsap-box::after, .motion-box::after { content: ""; position: absolute; width: 16px; height: 16px; border-radius: 50%; right: 14px; top: 14px; background: #f59e0b; }
+      canvas { width: 420px; height: 420px; display: block; }
+      #status { position: fixed; left: 12px; bottom: 12px; font: 12px ui-monospace, monospace; color: #fbbf24; }
+    </style>
+  </head>
+  <body>
+    <div id="root"></div>
+    <div id="status">loading</div>
+    <script type="module" src="/tests/runtime-harness/main.jsx"></script>
+  </body>
+</html>

package/tests/runtime-harness/main.jsx

@@ -0,0 +1,111 @@
+import React from "react";
+import { createRoot } from "react-dom/client";
+import { gsap } from "gsap";
+import { Rive } from "@rive-app/canvas";
+import { FramerRuntimePilot } from "../../src/output/runtime-pilot-framer/scene.jsx";
+
+const params = new URLSearchParams(window.location.search);
+const framework = params.get("framework") || "gsap";
+const statusNode = document.getElementById("status");
+const rootNode = document.getElementById("root");
+
+function status(text) {
+  if (statusNode) statusNode.textContent = text;
+}
+
+function expose(adapter) {
+  window.__animationAdapter = adapter;
+  status(`${adapter.framework}: ${adapter.status}`);
+}
+
+function mountGsap() {
+  const stage = document.createElement("div");
+  stage.className = "stage";
+  const box = document.createElement("div");
+  box.className = "gsap-box";
+  stage.appendChild(box);
+  rootNode.replaceChildren(stage);
+  const timeline = gsap.timeline({ paused: true });
+  timeline.fromTo(
+    box,
+    { x: 0, y: 0, rotation: 0, opacity: 0.25, scale: 0.82 },
+    { x: 240, y: -36, rotation: 28, opacity: 1, scale: 1, duration: 1, ease: "power2.out" },
+  );
+  const adapter = {
+    framework: "gsap",
+    runtime: `gsap@${gsap.version}`,
+    status: "ready",
+    ready: true,
+    setProgress(value) { timeline.progress(Math.max(0, Math.min(1, Number(value)))); },
+    getState() { return { progress: timeline.progress(), transform: getComputedStyle(box).transform, opacity: getComputedStyle(box).opacity }; },
+  };
+  expose(adapter);
+  adapter.setProgress(0);
+}
+
+async function mountRive() {
+  const canvas = document.createElement("canvas");
+  canvas.width = 420;
+  canvas.height = 420;
+  rootNode.replaceChildren(canvas);
+  let riveInstance;
+  const bytes = await fetch("/assets/library/rive/state-machine-test.riv").then((response) => {
+    if (!response.ok) throw new Error(`Rive fixture HTTP ${response.status}`);
+    return response.arrayBuffer();
+  });
+  await new Promise((resolve, reject) => {
+    riveInstance = new Rive({
+      buffer: bytes,
+      canvas,
+      stateMachines: "StateMachine",
+      autoplay: true,
+      autoBind: false,
+      onLoad: resolve,
+      onLoadError: reject,
+    });
+  });
+  riveInstance.resizeDrawingSurfaceToCanvas();
+  riveInstance.pause();
+  const inputs = riveInstance.stateMachineInputs("StateMachine") || [];
+  const byName = Object.fromEntries(inputs.map((input) => [input.name, input]));
+  if (!byName.MyNum || !byName.MyBool || !byName.MyTrig) {
+    throw new Error(`Rive StateMachine inputs missing: ${inputs.map((input) => input.name).join(", ")}`);
+  }
+  const adapter = {
+    framework: "rive",
+    runtime: "@rive-app/canvas@2.39.2",
+    status: "ready",
+    ready: true,
+    setProgress(value) {
+      const progress = Math.max(0, Math.min(1, Number(value)));
+      byName.MyNum.value = progress * 12;
+      byName.MyBool.value = progress >= 0.5;
+      if (progress > 0) byName.MyTrig.fire();
+      if (typeof riveInstance.advance === "function") riveInstance.advance(1 / 60);
+    },
+    getState() {
+      return {
+        inputs: inputs.map((input) => ({ name: input.name, type: input.type, value: input.value })),
+        stateMachines: riveInstance.playingStateMachineNames,
+        loaded: riveInstance.loaded,
+      };
+    },
+    dispose() { riveInstance.cleanup(); },
+  };
+  expose(adapter);
+  adapter.setProgress(0);
+}
+
+async function main() {
+  try {
+    if (framework === "gsap") mountGsap();
+    else if (framework === "framer-motion") createRoot(rootNode).render(<FramerRuntimePilot expose={expose} />);
+    else if (framework === "rive") await mountRive();
+    else throw new Error(`Unknown framework: ${framework}`);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    expose({ framework, status: "error", ready: false, error: message, getState: () => ({ error: message }) });
+  }
+}
+
+main();

package/tests/scripts/run_tests.py

@@ -402,6 +402,47 @@ def test_task_bundle_resolver_contract():
     )
     check("runtime adapter rejects unsupported framework path", unsafe_runtime.returncode != 0 and "unsupported" in (unsafe_runtime.stderr + unsafe_runtime.stdout))
 
+    with tempfile.TemporaryDirectory() as td:
+        outside = Path(td) / "protected-output"
+        outside.mkdir()
+        sentinel = outside / "keep.txt"
+        sentinel.write_text("do not delete", encoding="utf-8")
+        unsafe_output = subprocess.run(
+            ["node", str(ROOT / "scripts/runtime-adapters.mjs")],
+            env={**os.environ, "RUNTIME_FRAMEWORKS": "rive", "RUNTIME_EVIDENCE_DIR": str(outside)},
+            capture_output=True,
+            text=True,
+        )
+        check(
+            "runtime adapter rejects destructive output outside policy root",
+            unsafe_output.returncode != 0
+            and "MOTIONLOOM_RUNTIME_OUTPUT_ROOT" in (unsafe_output.stderr + unsafe_output.stdout)
+            and sentinel.read_text(encoding="utf-8") == "do not delete",
+        )
+
+    with tempfile.TemporaryDirectory() as td:
+        outside_task = Path(td) / "protected-task"
+        outside_task.mkdir()
+        sentinel = outside_task / "keep.txt"
+        sentinel.write_text("do not delete", encoding="utf-8")
+        unsafe_capture = subprocess.run(
+            [
+                sys.executable,
+                str(ROOT / "scripts/capture-runtime-telemetry.py"),
+                "browser-review-smoke",
+                str(outside_task),
+            ],
+            cwd=ROOT,
+            capture_output=True,
+            text=True,
+        )
+        check(
+            "runtime telemetry rejects task output outside project before cleanup",
+            unsafe_capture.returncode != 0
+            and "inside the project root" in (unsafe_capture.stderr + unsafe_capture.stdout)
+            and sentinel.read_text(encoding="utf-8") == "do not delete",
+        )
+
 
 def test_runtime_telemetry_verifier_contract():
     with tempfile.TemporaryDirectory() as td: