motionloom 2.6.0 → 2.7.0

package/bin/motionloom.mjs

@@ -40,6 +40,10 @@ const PYTHON_COMMANDS = {
   "remediation-learning": "scripts/remediation-learning.py",
   "asset-provenance": "scripts/asset-provenance.py",
   "asset-consistency": "scripts/asset-consistency.py",
+  "frame-generation-lock": "scripts/frame-generation-lock.py",
+  "frame-set-preflight": "scripts/frame-set-preflight.py",
+  "action-separation": "scripts/action-separation.py",
+  "asset-generation-plan": "scripts/asset-generation-plan.py",
   "artifact-intake": "scripts/artifact-intake.py",
   "runtime-candidate": "scripts/runtime-candidate.py",
   "rig-compatibility": "scripts/rig-compatibility.py",
@@ -48,6 +52,10 @@ const PYTHON_COMMANDS = {
   "alpha-isolate": "scripts/isolate-alpha-background.py",
 };
 
+const DIRECT_NODE_COMMANDS = {
+  "asset-adapt": "scripts/asset-adapt.mjs",
+};
+
 const NODE_COMMANDS = {
   init: "scripts/setup.mjs",
   setup: "scripts/setup.mjs",
@@ -69,6 +77,7 @@ Start here:
   init                   One safe project setup; no animation gate runs
   status                 Short read-only readiness report
   doctor                 Validate the installed Skill package
+  doctor --runtime       Also verify the Playwright Chromium executable
 
 Use when an animation task needs it:
   analyze                Run project analysis and refresh Project Memory
@@ -92,6 +101,11 @@ Use when an animation task needs it:
   remediation-learning   Record or summarize user-confirmed remediation and benchmark history
   asset-provenance       Validate, classify or report asset origin and production readiness
   asset-consistency      Validate frame geometry, atlas contamination and layered-map contracts
+  frame-generation-lock  Validate or compose locked per-frame generation instructions
+  frame-set-preflight    Fail closed on shared canvases, scale drift, frame contamination and action manifest binding
+  action-separation      Validate action-scoped frame manifests and independent competitor-action evidence
+  asset-generation-plan  Produce a MotionLoom project assessment, ranked routes and explicit canvas/frame guidance without invoking APIs
+  asset-adapt             Apply deterministic transparent padding/integer upscale with a hash-bound report
   artifact-intake        Bind generation controls, provenance, adapter metadata and exported bytes
   runtime-candidate      Bind intake exports to consistency contracts before runtime testing
   rig-compatibility      Validate rig bones, sockets, actions, events and runtime adapter evidence
@@ -108,12 +122,19 @@ Cross-platform examples:
   motionloom memory record-decision --project-root . --id ui-easing \\
     --status accepted --summary "Use ease-out for UI entry" --user-confirmed
   motionloom discovery check --root . --json
+  motionloom doctor --runtime --json
   motionloom discovery install-matrix --root . --json
   motionloom capability card --format json
   motionloom visual-truth validate --root . --input src/output/<scene>/visual-truth.json
   motionloom remediation-learning summary --history artifacts/remediation-history.jsonl --json
   motionloom asset-provenance check --input <asset-provenance.json> --root <scene-dir> --mode runtime --json
   motionloom asset-consistency validate --kind frame-geometry --input <frame-geometry.json> --root <scene-dir> --json
+  motionloom frame-generation-lock compose --input <frame-generation-lock.json> --root <asset-root> --frame-id walk.00 --json
+  motionloom frame-set-preflight --input <frame-geometry.json> --root <asset-root> --action-manifest <action-sequence.json> --json
+  motionloom action-separation validate --input <action-sequence.json> --root <asset-root> --json
+  motionloom asset-generation-plan plan --request <asset-generation-request.json> --project-root .
+  motionloom asset-generation-plan plan --request <asset-generation-request.json> --project-root . --json --strict
+  motionloom asset-adapt pad --input source.png --output target.png --width 256 --height 448 --anchor footline --report adaptation.json --json
   motionloom artifact-intake intake --root <asset-dir> --registry artifact-adapter-registry.json \\
     --receipt <generation-receipt.json> --controls <control-track.json> --export-manifest <export-manifest.json> --json
   motionloom alpha-isolate <opaque.png> <isolated.png> --report <alpha-report.json>
@@ -132,7 +153,7 @@ if (!command || command === "help" || command === "--help" || command === "-h")
 }
 
 const alias = COMMAND_ALIASES[command];
-const script = alias?.script || NODE_COMMANDS[command] || PYTHON_COMMANDS[command];
+const script = alias?.script || DIRECT_NODE_COMMANDS[command] || NODE_COMMANDS[command] || PYTHON_COMMANDS[command];
 if (!script) {
   console.error(`Unknown MotionLoom command: ${command}`);
   printHelp();
@@ -142,7 +163,9 @@ if (!script) {
 const executable = script.endsWith(".mjs") ? process.execPath : PYTHON;
 const delegatedArgs = alias
   ? [...alias.args, ...args]
-  : NODE_COMMANDS[command] && !["setup", "init"].includes(command)
+  : DIRECT_NODE_COMMANDS[command]
+    ? args
+    : NODE_COMMANDS[command] && !["setup", "init"].includes(command)
     ? [command, ...args]
     : command === "init"
       ? ["init", ...args]

package/capability-registry.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "0.1",
-  "registry_id": "registry-motionloom-2.5.1",
-  "generated_at": "2026-08-17T23:50:53Z",
+  "registry_id": "registry-motionloom-2.7.0",
+  "generated_at": "2026-08-22T06:55:00Z",
   "selection_policy": {
     "require_verified": true,
     "allow_scaffold_only": false,
@@ -12,35 +12,13 @@
       "id": "runtime.lottie-json",
       "kind": "renderer",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -49,35 +27,13 @@
       "id": "runtime.dotlottie-package",
       "kind": "packager",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -86,35 +42,13 @@
       "id": "runtime.svg-cutout-rig",
       "kind": "renderer",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -123,35 +57,13 @@
       "id": "runtime.rive",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -160,35 +72,13 @@
       "id": "runtime.gsap",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -197,35 +87,13 @@
       "id": "runtime.framer-motion",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -234,35 +102,13 @@
       "id": "runtime.spine",
       "kind": "renderer",
       "status": "scaffold_only",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Scaffold only; do not use for production acceptance."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Scaffold only; do not use for production acceptance."],
       "fallback": "runtime.lottie-json",
       "risk_level": "high",
       "side_effect_level": "local_write"
@@ -271,35 +117,13 @@
       "id": "runtime.threejs",
       "kind": "renderer",
       "status": "scaffold_only",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Scaffold only; do not use for production acceptance."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Scaffold only; do not use for production acceptance."],
       "fallback": "runtime.lottie-json",
       "risk_level": "high",
       "side_effect_level": "local_write"

package/dev-lab/public/devlab.js

@@ -9,6 +9,7 @@ let manifest;
 let spec;
 let candidate;
 let runtimeDescriptor = null;
+let actionSeparation = null;
 let review;
 let driver;
 let currentAnimationId = null;
@@ -117,6 +118,17 @@ function validateRuntimeDescriptor(value) {
   return value;
 }
 
+function validateActionSeparation(value) {
+  if (!value) return null;
+  if (typeof value !== "object") throw new Error("Action-separation evidence must be an object");
+  if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,95}$/.test(value.action_id || "")) throw new Error("Action-separation evidence requires a safe action_id");
+  if (!new Set(["pass", "quarantined"]).has(value.status)) throw new Error("Action-separation evidence has an invalid status");
+  if (!Number.isInteger(value.frame_count) || value.frame_count < 1) throw new Error("Action-separation evidence requires a positive frame_count");
+  if (!Number.isInteger(value.passing_frame_count) || value.passing_frame_count < 0 || value.passing_frame_count > value.frame_count) throw new Error("Action-separation passing_frame_count is invalid");
+  if (!Array.isArray(value.forbidden_action_ids)) throw new Error("Action-separation evidence requires forbidden_action_ids");
+  return value;
+}
+
 function controlEnabled(name, capability = true) {
   if (!runtimeDescriptor) return false;
   return runtimeDescriptor.controls?.[name] !== false && capability !== false;
@@ -386,7 +398,8 @@ function currentReview(decision) {
       mode: runtimeDescriptor ? "live-runtime" : "captured-evidence",
       descriptor_sha256: candidate.runtime_review?.bundle_sha256 || null,
       selected_animation: currentAnimationId,
-      state
+      state,
+      action_separation: actionSeparation
     },
     spec: { framework: spec.framework, category: spec.category, context_binding: spec.context_binding },
     candidate: { source_sha256: candidate.source_sha256, context_sha256: candidate.context_sha256 }
@@ -422,6 +435,20 @@ function renderMetadata() {
   }));
 }
 
+function renderActionSeparation() {
+  const node = $("action-separation");
+  if (!node) return;
+  if (!actionSeparation) {
+    node.className = "progress-note";
+    node.textContent = "No action-separation evidence bound; legacy review compatibility mode.";
+    return;
+  }
+  const pass = actionSeparation.status === "pass";
+  node.className = `progress-note ${pass ? "pass" : "quarantine"}`;
+  const forbidden = actionSeparation.forbidden_action_ids.join(", ") || "none";
+  node.textContent = `${pass ? "PASS" : "QUARANTINED"} · expected ${actionSeparation.action_id} · ${actionSeparation.passing_frame_count}/${actionSeparation.frame_count} frames separated · competitors: ${forbidden}`;
+}
+
 function renderChecks() {
   const nodes = (manifest.checks || []).map((check) => {
     const label = document.createElement("label"); label.className = "check";
@@ -474,12 +501,17 @@ function updateReviewGate() {
   const checks = currentChecks();
   const checksPass = checks.length > 0 && checks.every((item) => item.pass);
   const coverage = reviewCoverageComplete();
+  const actionGate = !actionSeparation || actionSeparation.status === "pass";
   const liveRuntimeBlocked = candidate?.runtime_review?.live === true && driver instanceof SnapshotDriver;
-  $("confirm").disabled = !(checksPass && coverage && !liveRuntimeBlocked);
+  $("confirm").disabled = !(checksPass && coverage && actionGate && !liveRuntimeBlocked);
   if (liveRuntimeBlocked) {
     setStatus("warn", "LIVE RUNTIME UNAVAILABLE · approval is blocked; captured evidence remains inspectable and changes may still be requested.");
     return;
   }
+  if (!actionGate) {
+    setStatus("warn", "ACTION SEPARATION QUARANTINED · regenerate or independently verify the ambiguous frame before approval.");
+    return;
+  }
   const missing = requiredAnimationIds().filter((id) => !inspectedAnimations.has(id));
   if (!coverage && missing.length) setStatus("info", `Inspect required animations before approval: ${missing.join(", ")}`);
 }
@@ -669,6 +701,7 @@ async function load() {
   ]);
   validateCandidate();
   runtimeDescriptor = validateRuntimeDescriptor(runtimeDescriptor);
+  actionSeparation = validateActionSeparation(runtimeDescriptor?.action_separation || null);
   const expectedLiveRuntimeMissing = candidate.runtime_review?.live === true && !runtimeDescriptor;
 
   $("title").textContent = `${manifest.name || scene}`;
@@ -680,7 +713,7 @@ async function load() {
   const saved = JSON.parse(localStorage.getItem(`devlab:${taskId}:${candidateId}`) || "null");
   review = saved || { checks: (manifest.checks || []).map((check) => ({ id: check.id, pass: false })), notes: "", decision: "pending", animations_inspected: [] };
   for (const id of review.animations_inspected || []) inspectedAnimations.add(id);
-  renderChecks(); $("notes").value = review.notes || ""; expose(review);
+  renderActionSeparation(); renderChecks(); $("notes").value = review.notes || ""; expose(review);
   wireControls(); applyViewportOverlays(); setZoom(1);
 
   if (expectedLiveRuntimeMissing) {

package/dev-lab/public/index.html

@@ -93,6 +93,8 @@
     #status { margin-top:10px; font:11px/1.4 ui-monospace,monospace; }
     .ok { color:var(--good); }.warn { color:var(--bad); }.info { color:var(--blue); }
     .progress-note { margin-top:9px; color:var(--muted); font:11px ui-monospace,monospace; }
+    #action-separation.pass { color:var(--good); }
+    #action-separation.quarantine { color:var(--bad); }
     @media (max-width:1050px) { .app { grid-template-columns:180px minmax(0,1fr) 285px; } }
     @media (max-width:820px) { header { height:auto; min-height:58px; flex-wrap:wrap; padding:10px 12px; } .app { height:auto; min-height:0; grid-template-columns:1fr; } nav { border-right:0; border-bottom:1px solid var(--line); } #animations { flex-direction:row; overflow:auto; } .animation-btn { width:auto; min-width:130px; } aside { border-left:0; border-top:1px solid var(--line); } .workbench { min-height:620px; } }
   </style>
@@ -150,8 +152,10 @@
     <aside>
       <h1 class="inspector-title" id="title">Scene</h1><p id="description">Loading manifest and candidate binding.</p>
       <div class="meta-grid" id="meta"></div>
-      <h2>Runtime inspector</h2><pre class="runtime-state" id="runtime-state">Waiting for runtime…</pre>
-      <h2>Quality checklist</h2><div id="checks"></div>
+            <h2>Runtime inspector</h2><pre class="runtime-state" id="runtime-state">Waiting for runtime…</pre>
+      <h2>Action separation</h2><div class="progress-note" id="action-separation">No action-separation evidence bound.</div>
+      <h2>Quality checklist</h2>
+<div id="checks"></div>
       <h2>Fix notes</h2><textarea id="notes" placeholder="Describe a precise fix request, timing issue, visual defect, or confirmation…"></textarea>
       <div class="review-actions"><button class="danger" id="request-changes" type="button">Request changes</button><button class="primary" id="confirm" type="button">Approve candidate</button><button id="reset" type="button">Reset review</button></div>
       <div id="status"></div>

package/docs/ACTION-SEPARATION.md

@@ -0,0 +1,104 @@
+# Action-scoped isolated frame pipeline
+
+MotionLoom keeps generated source frames isolated: one source PNG per frame, no pose sheet as production input, no shared-canvas crop and no post-generation resize. Isolation prevents pixel contamination, but it does not by itself prove that a frame belongs to the intended action. This document adds the action-level contract that closes that gap.
+
+## Model
+
+A frame belongs to an immutable `sequence_id` and `action_id`. The sequence manifest declares the expected action, explicitly forbidden competitor actions, the ordered frame set, the identity-lock hash and one envelope for every image. A verifier result is evidence only; it cannot grant approval or move a file.
+
+The lock and manifest deliberately use two separate layers. Verifier identity is not the same thing as verifier provenance: a different `verifier_id` alone does not prove that a separate verifier ran.
+
+| Layer | Source of truth | Purpose |
+|---|---|---|
+| Generation lock | `frame-generation-lock.schema.json` / `frame-generation-lock.py` | Compose one isolated request per frame with shared identity, geometry and action cues |
+| Action manifest | `action-sequence-manifest.schema.json` / `action-separation.py` | Bind frame order, image bytes, envelope metadata and competitor-action separation |
+| Geometry preflight | `frame-set-preflight.py` | Measure actual PNG geometry and optionally require the action manifest to pass |
+| Human review | Dev Lab | Inspect the live sequence and see whether action evidence is pass or quarantined |
+
+## CLI
+
+Validate the action manifest directly:
+
+```bash
+motionloom action-separation validate \
+  --input examples/agent-consumer/asset-consistency/action-sequence/hero-walk-action-manifest.json \
+  --root examples/agent-consumer/asset-consistency --json
+```
+
+Run geometry and action checks together:
+
+```bash
+motionloom frame-set-preflight \
+  --input examples/agent-consumer/asset-consistency/hero-walk-frame-geometry.json \
+  --root examples/agent-consumer/asset-consistency \
+  --action-manifest examples/agent-consumer/asset-consistency/action-sequence/hero-walk-action-manifest.json \
+  --json
+```
+
+The equivalent npm scripts are `npm run action:separation` and `npm run frame:preflight`. To create one envelope from a manifest and a real PNG, use:
+
+```bash
+motionloom action-separation envelope \
+  --manifest examples/agent-consumer/asset-consistency/action-sequence/hero-walk-action-manifest.json \
+  --root examples/agent-consumer/asset-consistency \
+  --frame-id walk.00 --expected-action walk --top-competitor run \
+  --margin 0.42 --threshold 0.20 \
+  --output examples/agent-consumer/asset-consistency/action-sequence/envelopes/walk.00.json --json
+```
+
+The `envelope` command is generator-side convenience only: it emits `verification_mode: declared`, keeps the result `quarantined` and returns non-zero even when the supplied numbers meet the rubric. A separate verifier process/agent must create the evidence artifact and a review workflow must bind it into an `independently_bound` envelope. The validator checks those bindings, but cryptographic hashes prove artifact integrity and provenance claims, not the truthfulness of a claimed producer identity.
+
+## Frame envelope
+
+Every manifest frame points to an envelope. The envelope binds the frame to the exact sequence, action, frame index, identity lock and image bytes. The verifier must provide an expected action, a top competitor, a numeric confidence margin and a declared threshold. Schema 0.2 also classifies the result as `declared` or `independently_bound`. A `declared` result may describe a check, but it is never accepted as independent proof. An `independently_bound` result must reference a separate verifier artifact whose bytes, canonical result, producer provenance and frame binding all match the envelope. A margin below threshold is quarantined; it is not silently assigned to the nearest action.
+
+```json
+{
+  "sequence_id": "hero-walk-v1",
+  "action_id": "walk",
+  "frame_id": "walk.01",
+  "frame_index": 1,
+  "image": "assets/hero-frame-01.png",
+  "image_sha256": "<sha256>",
+  "identity_lock_sha256": "<lock-sha256>",
+  "verifier": {
+    "verifier_id": "motionloom-separation-verifier-v1",
+    "verification_mode": "independently_bound",
+    "expected_action": "walk",
+    "top_competitor": "run",
+    "margin": 0.42,
+    "threshold": 0.20,
+    "status": "pass",
+    "method": "independent-action-rubric-v1",
+    "evidence": {
+      "artifact": "action-sequence/verifier-evidence/walk.01.json",
+      "artifact_sha256": "<sha256>",
+      "result_sha256": "<sha256>",
+      "provenance": {
+        "kind": "separate_verifier_artifact",
+        "producer_id": "motionloom-independent-verifier-v1",
+        "run_id": "verifier-run-2026-08-22"
+      }
+    }
+  },
+  "approval": false
+}
+```
+
+The validator rejects duplicate images, non-contiguous frame indexes, path escapes, mismatched envelope fields, stale image hashes, missing/tampered verifier provenance, verifier-generator collisions, undeclared competitors, low margins and any verifier status other than `pass`. It never repairs, renames, relocates or approves an asset.
+
+## Generation lock 0.2
+
+`frame-generation-lock` accepts legacy schema `0.1` and enhanced schema `0.2`. A `0.2` lock requires `sequence_id`, `forbidden_action_ids` and `action_contract.positive_cues`/`negative_cues`. `compose` and `compose-all` include those cues in every provider-facing instruction while preserving the one-image-per-frame rule.
+
+The canonical example is [`examples/agent-consumer/frame-generation-lock/hero-walk-lock.json`](../examples/agent-consumer/frame-generation-lock/hero-walk-lock.json). The action manifest and envelopes are under [`examples/agent-consumer/asset-consistency/action-sequence/`](../examples/agent-consumer/asset-consistency/action-sequence/).
+
+## Status and approval boundary
+
+The manifest may be `review_required` or `quarantined`; it must never claim approval. A passing verifier means that the evidence is sufficiently separated for the next gate, not that the user approved the action. Dev Lab still requires animation coverage and explicit checklist confirmation before enabling Approve.
+
+For live runtime fixtures, the optional `action_separation` summary in `devlab-runtime.json` is displayed in Dev Lab. A quarantined summary disables approval and instructs the reviewer to regenerate or independently verify the ambiguous frame. Contact sheets remain review projections only; production packing must use the manifest-approved isolated images.
+
+## Adversarial coverage
+
+The regression suite covers a valid four-frame sequence with independently bound evidence and rejects cross-action envelopes, verifier-generator collisions, missing provenance, modified verifier results, modified evidence hashes, low-confidence margins, wrong expected actions, undeclared competitors, quarantined evidence, reused images and approval assertions. The canonical fixture also runs through geometry preflight, so a sequence can only pass when both the measured PNG contract and the action-scoped evidence pass.