motionloom 2.6.1 → 2.7.0

package/capability-registry.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "0.1",
-  "registry_id": "registry-motionloom-2.5.1",
-  "generated_at": "2026-08-17T23:50:53Z",
+  "registry_id": "registry-motionloom-2.7.0",
+  "generated_at": "2026-08-22T06:55:00Z",
   "selection_policy": {
     "require_verified": true,
     "allow_scaffold_only": false,
@@ -12,35 +12,13 @@
       "id": "runtime.lottie-json",
       "kind": "renderer",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -49,35 +27,13 @@
       "id": "runtime.dotlottie-package",
       "kind": "packager",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -86,35 +42,13 @@
       "id": "runtime.svg-cutout-rig",
       "kind": "renderer",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -123,35 +57,13 @@
       "id": "runtime.rive",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -160,35 +72,13 @@
       "id": "runtime.gsap",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -197,35 +87,13 @@
       "id": "runtime.framer-motion",
       "kind": "runtime-adapter",
       "status": "verified",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Capability evidence is refreshed by runtime:test."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Capability evidence is refreshed by runtime:test."],
       "fallback": "",
       "risk_level": "low",
       "side_effect_level": "local_write"
@@ -234,35 +102,13 @@
       "id": "runtime.spine",
       "kind": "renderer",
       "status": "scaffold_only",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Scaffold only; do not use for production acceptance."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Scaffold only; do not use for production acceptance."],
       "fallback": "runtime.lottie-json",
       "risk_level": "high",
       "side_effect_level": "local_write"
@@ -271,35 +117,13 @@
       "id": "runtime.threejs",
       "kind": "renderer",
       "status": "scaffold_only",
-      "adapter_version": "2.5.1",
-      "inputs": [
-        "project-context",
-        "motion-spec",
-        "source-binding"
-      ],
-      "outputs": [
-        "runtime-evidence"
-      ],
-      "compatibility": {
-        "browsers": [
-          "chromium"
-        ],
-        "os": [
-          "linux"
-        ],
-        "node": ">=22"
-      },
-      "last_verified_at": "2026-08-17T23:50:53Z",
-      "evidence": [
-        {
-          "path": "scripts/runtime-adapters.mjs",
-          "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d",
-          "kind": "ci"
-        }
-      ],
-      "limitations": [
-        "Scaffold only; do not use for production acceptance."
-      ],
+      "adapter_version": "2.7.0",
+      "inputs": ["project-context", "motion-spec", "source-binding"],
+      "outputs": ["runtime-evidence"],
+      "compatibility": {"browsers": ["chromium"], "os": ["linux"], "node": ">=22"},
+      "last_verified_at": "2026-08-21T18:23:59Z",
+      "evidence": [{"path": "scripts/runtime-adapters.mjs", "sha256": "6f135e75e700a7bb105903db59445fcd3577669b595082a2b542db639f5fe56d", "kind": "ci"}],
+      "limitations": ["Scaffold only; do not use for production acceptance."],
       "fallback": "runtime.lottie-json",
       "risk_level": "high",
       "side_effect_level": "local_write"

package/dev-lab/public/devlab.js

@@ -9,6 +9,7 @@ let manifest;
 let spec;
 let candidate;
 let runtimeDescriptor = null;
+let actionSeparation = null;
 let review;
 let driver;
 let currentAnimationId = null;
@@ -117,6 +118,17 @@ function validateRuntimeDescriptor(value) {
   return value;
 }
 
+function validateActionSeparation(value) {
+  if (!value) return null;
+  if (typeof value !== "object") throw new Error("Action-separation evidence must be an object");
+  if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,95}$/.test(value.action_id || "")) throw new Error("Action-separation evidence requires a safe action_id");
+  if (!new Set(["pass", "quarantined"]).has(value.status)) throw new Error("Action-separation evidence has an invalid status");
+  if (!Number.isInteger(value.frame_count) || value.frame_count < 1) throw new Error("Action-separation evidence requires a positive frame_count");
+  if (!Number.isInteger(value.passing_frame_count) || value.passing_frame_count < 0 || value.passing_frame_count > value.frame_count) throw new Error("Action-separation passing_frame_count is invalid");
+  if (!Array.isArray(value.forbidden_action_ids)) throw new Error("Action-separation evidence requires forbidden_action_ids");
+  return value;
+}
+
 function controlEnabled(name, capability = true) {
   if (!runtimeDescriptor) return false;
   return runtimeDescriptor.controls?.[name] !== false && capability !== false;
@@ -386,7 +398,8 @@ function currentReview(decision) {
       mode: runtimeDescriptor ? "live-runtime" : "captured-evidence",
       descriptor_sha256: candidate.runtime_review?.bundle_sha256 || null,
       selected_animation: currentAnimationId,
-      state
+      state,
+      action_separation: actionSeparation
     },
     spec: { framework: spec.framework, category: spec.category, context_binding: spec.context_binding },
     candidate: { source_sha256: candidate.source_sha256, context_sha256: candidate.context_sha256 }
@@ -422,6 +435,20 @@ function renderMetadata() {
   }));
 }
 
+function renderActionSeparation() {
+  const node = $("action-separation");
+  if (!node) return;
+  if (!actionSeparation) {
+    node.className = "progress-note";
+    node.textContent = "No action-separation evidence bound; legacy review compatibility mode.";
+    return;
+  }
+  const pass = actionSeparation.status === "pass";
+  node.className = `progress-note ${pass ? "pass" : "quarantine"}`;
+  const forbidden = actionSeparation.forbidden_action_ids.join(", ") || "none";
+  node.textContent = `${pass ? "PASS" : "QUARANTINED"} · expected ${actionSeparation.action_id} · ${actionSeparation.passing_frame_count}/${actionSeparation.frame_count} frames separated · competitors: ${forbidden}`;
+}
+
 function renderChecks() {
   const nodes = (manifest.checks || []).map((check) => {
     const label = document.createElement("label"); label.className = "check";
@@ -474,12 +501,17 @@ function updateReviewGate() {
   const checks = currentChecks();
   const checksPass = checks.length > 0 && checks.every((item) => item.pass);
   const coverage = reviewCoverageComplete();
+  const actionGate = !actionSeparation || actionSeparation.status === "pass";
   const liveRuntimeBlocked = candidate?.runtime_review?.live === true && driver instanceof SnapshotDriver;
-  $("confirm").disabled = !(checksPass && coverage && !liveRuntimeBlocked);
+  $("confirm").disabled = !(checksPass && coverage && actionGate && !liveRuntimeBlocked);
   if (liveRuntimeBlocked) {
     setStatus("warn", "LIVE RUNTIME UNAVAILABLE · approval is blocked; captured evidence remains inspectable and changes may still be requested.");
     return;
   }
+  if (!actionGate) {
+    setStatus("warn", "ACTION SEPARATION QUARANTINED · regenerate or independently verify the ambiguous frame before approval.");
+    return;
+  }
   const missing = requiredAnimationIds().filter((id) => !inspectedAnimations.has(id));
   if (!coverage && missing.length) setStatus("info", `Inspect required animations before approval: ${missing.join(", ")}`);
 }
@@ -669,6 +701,7 @@ async function load() {
   ]);
   validateCandidate();
   runtimeDescriptor = validateRuntimeDescriptor(runtimeDescriptor);
+  actionSeparation = validateActionSeparation(runtimeDescriptor?.action_separation || null);
   const expectedLiveRuntimeMissing = candidate.runtime_review?.live === true && !runtimeDescriptor;
 
   $("title").textContent = `${manifest.name || scene}`;
@@ -680,7 +713,7 @@ async function load() {
   const saved = JSON.parse(localStorage.getItem(`devlab:${taskId}:${candidateId}`) || "null");
   review = saved || { checks: (manifest.checks || []).map((check) => ({ id: check.id, pass: false })), notes: "", decision: "pending", animations_inspected: [] };
   for (const id of review.animations_inspected || []) inspectedAnimations.add(id);
-  renderChecks(); $("notes").value = review.notes || ""; expose(review);
+  renderActionSeparation(); renderChecks(); $("notes").value = review.notes || ""; expose(review);
   wireControls(); applyViewportOverlays(); setZoom(1);
 
   if (expectedLiveRuntimeMissing) {

package/dev-lab/public/index.html

@@ -93,6 +93,8 @@
     #status { margin-top:10px; font:11px/1.4 ui-monospace,monospace; }
     .ok { color:var(--good); }.warn { color:var(--bad); }.info { color:var(--blue); }
     .progress-note { margin-top:9px; color:var(--muted); font:11px ui-monospace,monospace; }
+    #action-separation.pass { color:var(--good); }
+    #action-separation.quarantine { color:var(--bad); }
     @media (max-width:1050px) { .app { grid-template-columns:180px minmax(0,1fr) 285px; } }
     @media (max-width:820px) { header { height:auto; min-height:58px; flex-wrap:wrap; padding:10px 12px; } .app { height:auto; min-height:0; grid-template-columns:1fr; } nav { border-right:0; border-bottom:1px solid var(--line); } #animations { flex-direction:row; overflow:auto; } .animation-btn { width:auto; min-width:130px; } aside { border-left:0; border-top:1px solid var(--line); } .workbench { min-height:620px; } }
   </style>
@@ -150,8 +152,10 @@
     <aside>
       <h1 class="inspector-title" id="title">Scene</h1><p id="description">Loading manifest and candidate binding.</p>
       <div class="meta-grid" id="meta"></div>
-      <h2>Runtime inspector</h2><pre class="runtime-state" id="runtime-state">Waiting for runtime…</pre>
-      <h2>Quality checklist</h2><div id="checks"></div>
+            <h2>Runtime inspector</h2><pre class="runtime-state" id="runtime-state">Waiting for runtime…</pre>
+      <h2>Action separation</h2><div class="progress-note" id="action-separation">No action-separation evidence bound.</div>
+      <h2>Quality checklist</h2>
+<div id="checks"></div>
       <h2>Fix notes</h2><textarea id="notes" placeholder="Describe a precise fix request, timing issue, visual defect, or confirmation…"></textarea>
       <div class="review-actions"><button class="danger" id="request-changes" type="button">Request changes</button><button class="primary" id="confirm" type="button">Approve candidate</button><button id="reset" type="button">Reset review</button></div>
       <div id="status"></div>

package/docs/ACTION-SEPARATION.md

@@ -0,0 +1,104 @@
+# Action-scoped isolated frame pipeline
+
+MotionLoom keeps generated source frames isolated: one source PNG per frame, no pose sheet as production input, no shared-canvas crop and no post-generation resize. Isolation prevents pixel contamination, but it does not by itself prove that a frame belongs to the intended action. This document adds the action-level contract that closes that gap.
+
+## Model
+
+A frame belongs to an immutable `sequence_id` and `action_id`. The sequence manifest declares the expected action, explicitly forbidden competitor actions, the ordered frame set, the identity-lock hash and one envelope for every image. A verifier result is evidence only; it cannot grant approval or move a file.
+
+The lock and manifest deliberately use two separate layers. Verifier identity is not the same thing as verifier provenance: a different `verifier_id` alone does not prove that a separate verifier ran.
+
+| Layer | Source of truth | Purpose |
+|---|---|---|
+| Generation lock | `frame-generation-lock.schema.json` / `frame-generation-lock.py` | Compose one isolated request per frame with shared identity, geometry and action cues |
+| Action manifest | `action-sequence-manifest.schema.json` / `action-separation.py` | Bind frame order, image bytes, envelope metadata and competitor-action separation |
+| Geometry preflight | `frame-set-preflight.py` | Measure actual PNG geometry and optionally require the action manifest to pass |
+| Human review | Dev Lab | Inspect the live sequence and see whether action evidence is pass or quarantined |
+
+## CLI
+
+Validate the action manifest directly:
+
+```bash
+motionloom action-separation validate \
+  --input examples/agent-consumer/asset-consistency/action-sequence/hero-walk-action-manifest.json \
+  --root examples/agent-consumer/asset-consistency --json
+```
+
+Run geometry and action checks together:
+
+```bash
+motionloom frame-set-preflight \
+  --input examples/agent-consumer/asset-consistency/hero-walk-frame-geometry.json \
+  --root examples/agent-consumer/asset-consistency \
+  --action-manifest examples/agent-consumer/asset-consistency/action-sequence/hero-walk-action-manifest.json \
+  --json
+```
+
+The equivalent npm scripts are `npm run action:separation` and `npm run frame:preflight`. To create one envelope from a manifest and a real PNG, use:
+
+```bash
+motionloom action-separation envelope \
+  --manifest examples/agent-consumer/asset-consistency/action-sequence/hero-walk-action-manifest.json \
+  --root examples/agent-consumer/asset-consistency \
+  --frame-id walk.00 --expected-action walk --top-competitor run \
+  --margin 0.42 --threshold 0.20 \
+  --output examples/agent-consumer/asset-consistency/action-sequence/envelopes/walk.00.json --json
+```
+
+The `envelope` command is generator-side convenience only: it emits `verification_mode: declared`, keeps the result `quarantined` and returns non-zero even when the supplied numbers meet the rubric. A separate verifier process/agent must create the evidence artifact and a review workflow must bind it into an `independently_bound` envelope. The validator checks those bindings, but cryptographic hashes prove artifact integrity and provenance claims, not the truthfulness of a claimed producer identity.
+
+## Frame envelope
+
+Every manifest frame points to an envelope. The envelope binds the frame to the exact sequence, action, frame index, identity lock and image bytes. The verifier must provide an expected action, a top competitor, a numeric confidence margin and a declared threshold. Schema 0.2 also classifies the result as `declared` or `independently_bound`. A `declared` result may describe a check, but it is never accepted as independent proof. An `independently_bound` result must reference a separate verifier artifact whose bytes, canonical result, producer provenance and frame binding all match the envelope. A margin below threshold is quarantined; it is not silently assigned to the nearest action.
+
+```json
+{
+  "sequence_id": "hero-walk-v1",
+  "action_id": "walk",
+  "frame_id": "walk.01",
+  "frame_index": 1,
+  "image": "assets/hero-frame-01.png",
+  "image_sha256": "<sha256>",
+  "identity_lock_sha256": "<lock-sha256>",
+  "verifier": {
+    "verifier_id": "motionloom-separation-verifier-v1",
+    "verification_mode": "independently_bound",
+    "expected_action": "walk",
+    "top_competitor": "run",
+    "margin": 0.42,
+    "threshold": 0.20,
+    "status": "pass",
+    "method": "independent-action-rubric-v1",
+    "evidence": {
+      "artifact": "action-sequence/verifier-evidence/walk.01.json",
+      "artifact_sha256": "<sha256>",
+      "result_sha256": "<sha256>",
+      "provenance": {
+        "kind": "separate_verifier_artifact",
+        "producer_id": "motionloom-independent-verifier-v1",
+        "run_id": "verifier-run-2026-08-22"
+      }
+    }
+  },
+  "approval": false
+}
+```
+
+The validator rejects duplicate images, non-contiguous frame indexes, path escapes, mismatched envelope fields, stale image hashes, missing/tampered verifier provenance, verifier-generator collisions, undeclared competitors, low margins and any verifier status other than `pass`. It never repairs, renames, relocates or approves an asset.
+
+## Generation lock 0.2
+
+`frame-generation-lock` accepts legacy schema `0.1` and enhanced schema `0.2`. A `0.2` lock requires `sequence_id`, `forbidden_action_ids` and `action_contract.positive_cues`/`negative_cues`. `compose` and `compose-all` include those cues in every provider-facing instruction while preserving the one-image-per-frame rule.
+
+The canonical example is [`examples/agent-consumer/frame-generation-lock/hero-walk-lock.json`](../examples/agent-consumer/frame-generation-lock/hero-walk-lock.json). The action manifest and envelopes are under [`examples/agent-consumer/asset-consistency/action-sequence/`](../examples/agent-consumer/asset-consistency/action-sequence/).
+
+## Status and approval boundary
+
+The manifest may be `review_required` or `quarantined`; it must never claim approval. A passing verifier means that the evidence is sufficiently separated for the next gate, not that the user approved the action. Dev Lab still requires animation coverage and explicit checklist confirmation before enabling Approve.
+
+For live runtime fixtures, the optional `action_separation` summary in `devlab-runtime.json` is displayed in Dev Lab. A quarantined summary disables approval and instructs the reviewer to regenerate or independently verify the ambiguous frame. Contact sheets remain review projections only; production packing must use the manifest-approved isolated images.
+
+## Adversarial coverage
+
+The regression suite covers a valid four-frame sequence with independently bound evidence and rejects cross-action envelopes, verifier-generator collisions, missing provenance, modified verifier results, modified evidence hashes, low-confidence margins, wrong expected actions, undeclared competitors, quarantined evidence, reused images and approval assertions. The canonical fixture also runs through geometry preflight, so a sequence can only pass when both the measured PNG contract and the action-scoped evidence pass.