nccgs 2.1.0 → 2.1.1

package/tests/phase2.test.mjs

@@ -1,250 +1,250 @@
-import assert from "node:assert/strict";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import test from "node:test";
-import { artifact, json } from "../.claude/nccgs/tools/policy.mjs";
-import { initialize, snapshot, record, close, taskPath, refreshInputs, reclassify } from "../.claude/nccgs/tools/gates.mjs";
-import { reserve, claim, attachAgent, complete, status, reconcile } from "../.claude/nccgs/tools/orchestration.mjs";
-import { startVerification, waitVerification } from "../.claude/nccgs/tools/verification-jobs.mjs";
-import { assessCriteria } from "../.claude/nccgs/tools/criteria.mjs";
-import { guardTool, safeTaskCommand } from "../.claude/nccgs/tools/tool-guard.mjs";
-import { run } from "../.claude/nccgs/tools/task.mjs";
-
-// Provider observations in these tests are SYNTHETIC fixtures, never Claude evidence.
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const measurement = ".nccgs/evidence/measurements/runtime.json";
-const criteria = ["needle", "orbit"].map(id => ({ id, description: `${id} wins unassisted`, check: "runtime", checkpoint: "early",
-  assertions: [{ artifact: measurement, pointer: `/builds/${id}/won`, op: "eq", value: true },
-    { artifact: measurement, pointer: "/assisted", op: "eq", value: false },
-    { artifact: measurement, pointer: "/reportOnly", op: "eq", value: false }] }));
-const passed = { builds: { needle: { won: true }, orbit: { won: true } }, assisted: false, reportOnly: false };
-
-function fixture(acceptance = criteria, contractOverrides = {}) {
-  const temporaryRoot = fs.realpathSync(os.tmpdir()), project = fs.mkdtempSync(path.join(temporaryRoot, "nccgs-phase2-"));
-  const write = (relative, value) => {
-    const file = path.join(project, relative); fs.mkdirSync(path.dirname(file), { recursive: true });
-    fs.writeFileSync(file, typeof value === "string" ? value : JSON.stringify(value)); return artifact(project, relative);
-  };
-  fs.cpSync(path.join(root, ".claude/nccgs/tools"), path.join(project, ".claude/nccgs/tools"), { recursive: true });
-  for (const file of ["pipeline.json", "studio.json"]) write(`.claude/nccgs/${file}`, fs.readFileSync(path.join(root, ".claude/nccgs", file), "utf8"));
-  write("Assets/game.cs", "// fixture baseline");
-  write("Tools/probe.mjs", `import fs from 'node:fs';fs.mkdirSync('.nccgs/evidence/measurements',{recursive:true});const input=JSON.parse(process.argv[2]);if(input.delayMs)await new Promise(r=>setTimeout(r,input.delayMs));if(!input.skip)fs.writeFileSync('${measurement}',input.malformed?'bad JSON':JSON.stringify(input.data));console.log('Synthetic gameplay measurement fixture');process.exitCode=input.exitCode||0;`);
-  write(".nccgs/project.yaml", "schema_version: 2\nmodels:\n  profile: claude-standalone\n");
-  write(".nccgs/execution.json", { schemaVersion: 1, name: "standalone", externalReview: { mode: "off" } });
-  write(".nccgs/inputs.json", { schemaVersion: 1, canonicalInputs: [], outputDirectories: [], checks: { runtime: { timeoutMs: 15000 } } });
-  const intake = { objective: "Synthetic test of acceptance mapping and repair budget", mode: "implement", readiness: "ready", requiredChecks: ["runtime"], acceptance, ...contractOverrides };
-  write(".nccgs/intake.json", intake);
-  initialize(project, "fixture", null, null, null, { intake: ".nccgs/intake.json" });
-  let serial = 0;
-  const task = () => json(taskPath(project, "fixture"));
-  const snap = () => snapshot(project, task()).sha256;
-  const assess = () => assessCriteria(project, task(), snap());
-  function verify(data = passed, options = {}) {
-    const job = startVerification(project, "fixture", { name: "runtime", executable: process.execPath, arguments: ["Tools/probe.mjs", JSON.stringify({ data, ...options })], requestKey: `probe-${++serial}` });
-    return waitVerification(project, job.jobId, "fixture", 20000);
-  }
-  function request(kind = "implementation", overrides = {}) {
-    return { kind, agent: kind === "review" ? "nccgs-adversarial-reviewer" : kind === "analysis" ? "nccgs-qa-engineer" : "nccgs-gameplay-programmer",
-      requestKey: `dispatch-${++serial}`, reason: "SYNTHETIC TEST FIXTURE", writePaths: kind === "implementation" ? ["Assets/game.cs"] : [], ...overrides };
-  }
-  function worker(kind = "implementation", overrides = {}, mutate = null) {
-    const req = request(kind, overrides);
-    if (req.purpose === "repair") {
-      req.workPacket = `.nccgs/evidence/work-packets/${req.requestKey}.json`;
-      req.handoffPaths = [`.nccgs/evidence/analysis/${req.requestKey}.md`];
-      write(req.workPacket, { schemaVersion: 1, taskId: "fixture", contractHash: task().contractHash, sourceSnapshot: snap(),
-        problem: "Synthetic acceptance failure", solution: "Apply the predetermined fixture correction", changes: [{ path: "Assets/game.cs", instruction: "Apply the synthetic bounded correction" }],
-        context: [], verification: ["runtime"] });
-    }
-    const d = reserve(project, "fixture", req), count = ++serial;
-    claim(project, d.id, { sessionId: "fixture-session", toolUseId: `tool-${count}`, agent: req.agent });
-    if (req.workPacket) {
-      attachAgent(project, d.id, `${kind}-${count}`);
-      guardTool(project, { session_id: "fixture-session", agent_id: `${kind}-${count}`, tool_use_id: `edit-${count}`, tool_name: "Edit", tool_input: { file_path: "Assets/game.cs", old_string: "fixture", new_string: "correction" } });
-    }
-    if (mutate) mutate();
-    if (req.workPacket) {
-      const content = "NCCGS-HANDOFF: COMPLETE\nSynthetic bounded correction; coordinator verification pending.";
-      guardTool(project, { session_id: "fixture-session", agent_id: `${kind}-${count}`, tool_use_id: `handoff-${count}`, tool_name: "Write", tool_input: { file_path: req.handoffPaths[0], content } });
-      write(req.handoffPaths[0], content);
-    }
-    const current = task(), route = kind === "review" ? current.execution.profile.models.review : current.implementationRoute;
-    const source = `.nccgs/evidence/raw-${count}.json`;
-    write(source, { taskId: "fixture", contractHash: current.contractHash, snapshot: snap(), dispatchId: d.id,
-      sessionId: "fixture-session", toolUseId: `tool-${count}`, agentId: `${kind}-${count}`, status: "completed", capturedAt: new Date().toISOString(),
-      observedProvider: "claude-code", observedModel: route.model === "sonnet" ? "claude-sonnet-4-6" : "claude-opus-5-5", observedEffort: null,
-      provenance: { kind: "provider-log", reference: "SYNTHETIC TEST FIXTURE, not real Claude" } });
-    const runtime = run(["observe", "--project", project, "--id", "fixture", "--file", source]);
-    complete(project, d.id, { runtime });
-    return { snapshot: snap(), dispatchId: d.id, runtime };
-  }
-  const work = (attempt, receipt) => record(project, "fixture", "implementation", { ...attempt, checks: [{ name: "runtime", status: "PASS", evidence: receipt.evidence }] });
-  const review = (attempt, verdict = "PASS") => record(project, "fixture", "review", { ...attempt, verdict, criteriaMet: verdict === "PASS", findings: [], evidence: write(`.nccgs/evidence/review-${++serial}.md`, "Synthetic independent review; never native evidence") });
-  return { project, write, intake, task, snap, assess, verify, request, worker, work, review, dispose() {
-    assert.equal(path.dirname(fs.realpathSync(project)).toLowerCase(), temporaryRoot.toLowerCase());
-    assert.ok(path.basename(project).startsWith("nccgs-phase2-")); assert.equal(fs.lstatSync(project).isSymbolicLink(), false);
-    fs.rmSync(project, { recursive: true, force: true });
-  } };
-}
-
-test("technical exit 0 cannot turn failed or assisted gameplay into acceptance PASS", () => {
-  const f = fixture();
-  try {
-    const attempt = f.worker();
-    const receipt = f.verify({ ...passed, builds: { needle: { won: false }, orbit: { won: false } }, reportOnly: true });
-    assert.equal(receipt.status, "PASS"); assert.deepEqual(f.assess().criteria.map(c => c.status), ["FAIL", "FAIL"]);
-    f.work(attempt, receipt);
-    const reviewer = f.worker("review");
-    assert.throws(() => f.review(reviewer), /Acceptance criteria not proven/);
-    f.review(reviewer, "CHANGES_REQUIRED");
-    assert.throws(() => record(f.project, "fixture", "report", { outcome: "success", summary: "Incorrect PASS" }), /Cannot report success/);
-    const partial = record(f.project, "fixture", "report", { outcome: "partial", summary: "Two unassisted builds remain unproven" });
-    assert.equal(partial.stages.report.acceptanceAssessment.status, "FAIL");
-    assert.throws(() => close(f.project, "fixture"), /review has not passed/);
-    assert.equal(f.verify({ ...passed, assisted: true }).status, "PASS");
-    assert.equal(f.assess().status, "FAIL");
-  } finally { f.dispose(); }
-});
-
-test("fresh measured criteria plus independent review permit DONE", () => {
-  const f = fixture();
-  try {
-    const attempt = f.worker(), receipt = f.verify(); f.work(attempt, receipt);
-    assert.equal(f.assess().status, "PASS"); f.review(f.worker("review"));
-    record(f.project, "fixture", "report", { outcome: "success", summary: "Synthetic acceptance passed" });
-    assert.equal(close(f.project, "fixture").phase, "DONE");
-    assert.equal(run(["acceptance-status", "--project", f.project, "--id", "fixture"]).automaticPassed, true);
-  } finally { f.dispose(); }
-});
-
-test("missing, malformed, old, failed and source-stale measurements stay unverified", () => {
-  const f = fixture();
-  try {
-    assert.equal(f.assess().status, "UNVERIFIED");
-    f.write(measurement, passed); f.verify(passed, { skip: true });
-    assert.equal(f.assess().status, "UNVERIFIED");
-    f.verify(passed, { malformed: true }); assert.equal(f.assess().status, "UNVERIFIED");
-    f.verify({ ...passed, builds: {} }); assert.equal(f.assess().status, "UNVERIFIED");
-    f.verify(); assert.equal(f.assess().status, "PASS");
-    assert.equal(f.verify(passed, { exitCode: 2 }).status, "FAIL"); assert.equal(f.assess().status, "UNVERIFIED");
-    f.verify(); f.write("Assets/game.cs", "// changed after verification"); assert.equal(f.assess().status, "UNVERIFIED");
-  } finally { f.dispose(); }
-});
-
-test("frozen measurement survives output overwrite but detects captured-evidence tampering", () => {
-  const f = fixture();
-  try {
-    f.verify(); f.write(measurement, { ...passed, assisted: true }); assert.equal(f.assess().status, "PASS");
-    const assessment = f.assess(), receipt = json(path.join(f.project, assessment.criteria[0].receipt.path));
-    const captured = receipt.acceptance.criteria[0].checks[0].evidence.path;
-    f.write(captured, { ...passed, assisted: true }); assert.equal(f.assess().status, "UNVERIFIED");
-    assert.throws(() => guardTool(f.project, { tool_name: "Write", tool_input: { file_path: captured } }), /immutable/);
-    assert.equal(safeTaskCommand("node .claude/nccgs/tools/task.mjs acceptance-status --id fixture", f.project), "acceptance-status");
-  } finally { f.dispose(); }
-});
-
-test("pending latest attempt supersedes PASS and owns its measurement paths exclusively", () => {
-  const f = fixture(); let job;
-  try {
-    f.verify(); assert.equal(f.assess().status, "PASS");
-    const args = { name: "runtime", executable: process.execPath, arguments: ["Tools/probe.mjs", JSON.stringify({ data: passed, delayMs: 1000 })], requestKey: "pending" };
-    job = startVerification(f.project, "fixture", args);
-    assert.equal(f.assess().status, "UNVERIFIED");
-    assert.throws(() => startVerification(f.project, "fixture", { ...args, requestKey: "overlap" }), /owns these measurement/);
-    assert.equal(waitVerification(f.project, job.jobId, "fixture", 20000).status, "PASS");
-    assert.equal(f.assess().status, "PASS");
-  } finally { if (job) waitVerification(f.project, job.jobId, "fixture", 20000); f.dispose(); }
-});
-
-test("check-only criteria require mapping and manual criteria keep their owner gate", () => {
-  const f = fixture([{ id: "legacy", description: "Must not infer acceptance from exit 0", check: "runtime" }, { id: "feel", description: "Human playtest", manual: true }]);
-  try {
-    f.verify(); assert.deepEqual(f.assess().criteria.map(c => c.status), ["UNVERIFIED", "MANUAL_PENDING"]);
-    assert.deepEqual(f.task().contract.manualGates, ["feel"]);
-    f.write(".nccgs/bad.json", { ...f.intake, acceptance: [{ ...criteria[0], assertions: [{ artifact: "../outside.json", pointer: "/x", op: "eq", value: true }] }] });
-    assert.throws(() => initialize(f.project, "bad", null, null, null, { intake: ".nccgs/bad.json" }), /measurement/);
-    f.write(".nccgs/bad.json", { ...f.intake, acceptance: [{ ...criteria[0], assertions: [{ artifact: ".nccgs/evidence/measurements/../criteria/x.json", pointer: "/x", op: "eq", value: true }] }] });
-    assert.throws(() => initialize(f.project, "alias", null, null, null, { intake: ".nccgs/bad.json" }), /canonical/);
-  } finally { f.dispose(); }
-});
-
-test("typed thresholds and escaped JSON pointers are evaluated without coercion", () => {
-  const f = fixture([{ id: "load", description: "Measured load", check: "runtime", assertions: [
-    { artifact: measurement, pointer: "/a~1b/~0load", op: "gte", value: 200 },
-    { artifact: measurement, pointer: "/p95", op: "lte", value: 16.7 }] }]);
-  try {
-    f.verify({ "a/b": { "~load": 201 }, p95: 15 }); assert.equal(f.assess().status, "PASS");
-    f.verify({ "a/b": { "~load": "201" }, p95: 15 }); assert.equal(f.assess().status, "UNVERIFIED");
-    f.verify({ "a/b": { "~load": 201 }, p95: 20 }); assert.equal(f.assess().status, "FAIL");
-  } finally { f.dispose(); }
-});
-
-test("early viability blocks expansion while leaving repair, QA and review available", () => {
-  const f = fixture();
-  try {
-    f.worker();
-    assert.throws(() => reserve(f.project, "fixture", f.request()), /Early acceptance checkpoint/);
-    f.verify({ ...passed, assisted: true });
-    assert.throws(() => reserve(f.project, "fixture", f.request()), /Early acceptance checkpoint/);
-    assert.throws(() => reserve(f.project, "fixture", f.request("analysis", { purpose: "qa" })), /reserved for a completed repair/);
-    const repair = f.worker("implementation", { purpose: "repair" }, () => f.write("Assets/game.cs", "// repaired tuning"));
-    assert.equal(f.assess().status, "UNVERIFIED");
-    f.verify();
-    f.worker("analysis", { purpose: "qa" });
-    f.worker();
-    assert.equal(status(f.project, "fixture").deliveryBudget.remaining.repair, 0);
-    assert.ok(repair.dispatchId);
-  } finally { f.dispose(); }
-});
-
-test("STANDARD preserves a repair plus QA plus re-review after initial review at total cap", () => {
-  const f = fixture(criteria.map(c => ({ ...c, checkpoint: "final" })));
-  try {
-    let implementation;
-    for (let i = 0; i < 8; i++) implementation = f.worker();
-    const failed = f.verify({ ...passed, assisted: true }); f.work(implementation, failed);
-    assert.throws(() => reserve(f.project, "fixture", f.request()), /budget reserved/);
-    f.review(f.worker("review"), "CHANGES_REQUIRED");
-    assert.deepEqual(status(f.project, "fixture").deliveryBudget.remaining, { repair: 1, qa: 1, review: 1 });
-    const repair = f.worker("implementation", { purpose: "repair" }, () => f.write("Assets/game.cs", "// bounded correction"));
-    const fresh = f.verify(); f.work(repair, fresh);
-    f.worker("analysis", { purpose: "qa" }); f.review(f.worker("review"));
-    assert.equal(status(f.project, "fixture").usage.dispatches, 12);
-    record(f.project, "fixture", "report", { outcome: "success", summary: "Synthetic repaired acceptance passed" });
-    assert.equal(close(f.project, "fixture").phase, "DONE");
-    assert.throws(() => reserve(f.project, "fixture", f.request()), /budget exhausted/);
-  } finally { f.dispose(); }
-});
-
-test("protected purposes cannot be used without feedback or by an unrelated role", () => {
-  const f = fixture([]);
-  try {
-    assert.throws(() => reserve(f.project, "fixture", f.request("implementation", { purpose: "repair" })), /requires recorded negative/);
-    assert.throws(() => reserve(f.project, "fixture", f.request("implementation", { purpose: "qa" })), /read-only QA/);
-    assert.throws(() => reserve(f.project, "fixture", f.request("analysis", { purpose: "qa", repairFeedback: { fake: true } })), /reserved for a completed repair/);
-    assert.throws(() => reserve(f.project, "fixture", f.request("implementation", { limits: { maxDispatches: 4 } })), /cannot fit/);
-  } finally { f.dispose(); }
-});
-
-test("cancellation, child tasks, input refresh and reclassification cannot refund protected budget", () => {
-  const f = fixture([]);
-  try {
-    for (let i = 0; i < 7; i++) f.worker();
-    f.write(".nccgs/child.json", { ...f.intake, acceptance: [] });
-    initialize(f.project, "child", null, null, null, { intake: ".nccgs/child.json", parentId: "fixture" });
-    const req = f.request("analysis"), child = reserve(f.project, "child", req);
-    const saved = [process.env.CLAUDECODE, process.env.CLAUDE_CODE_ENTRYPOINT];
-    delete process.env.CLAUDECODE; delete process.env.CLAUDE_CODE_ENTRYPOINT;
-    try { reconcile(f.project, child.id, { status: "cancelled", reason: "Synthetic cancelled before launch", reference: "Synthetic fixture" }); }
-    finally { for (const [i, name] of ["CLAUDECODE", "CLAUDE_CODE_ENTRYPOINT"].entries()) if (saved[i] === undefined) delete process.env[name]; else process.env[name] = saved[i]; }
-    assert.equal(status(f.project, "fixture").deliveryBudget.deliveryRemaining, 0);
-    refreshInputs(f.project, "fixture", "Synthetic explicit refresh");
-    reclassify(f.project, "fixture", { risk: "CONTROLLED", reason: "Synthetic escalation", evidence: ["Synthetic observed risk"] });
-    assert.throws(() => reserve(f.project, "fixture", f.request()), /budget reserved/);
-    assert.throws(() => reserve(f.project, "child", f.request("analysis")), /budget reserved/);
-    assert.equal(reserve(f.project, "child", req).id, child.id);
-    assert.equal(status(f.project, "fixture").usage.dispatches, 8);
-  } finally { f.dispose(); }
-});
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import test from "node:test";
+import { artifact, json } from "../.claude/nccgs/tools/policy.mjs";
+import { initialize, snapshot, record, close, taskPath, refreshInputs, reclassify } from "../.claude/nccgs/tools/gates.mjs";
+import { reserve, claim, attachAgent, complete, status, reconcile } from "../.claude/nccgs/tools/orchestration.mjs";
+import { startVerification, waitVerification } from "../.claude/nccgs/tools/verification-jobs.mjs";
+import { assessCriteria } from "../.claude/nccgs/tools/criteria.mjs";
+import { guardTool, safeTaskCommand } from "../.claude/nccgs/tools/tool-guard.mjs";
+import { run } from "../.claude/nccgs/tools/task.mjs";
+
+// Provider observations in these tests are SYNTHETIC fixtures, never Claude evidence.
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const measurement = ".nccgs/evidence/measurements/runtime.json";
+const criteria = ["needle", "orbit"].map(id => ({ id, description: `${id} wins unassisted`, check: "runtime", checkpoint: "early",
+  assertions: [{ artifact: measurement, pointer: `/builds/${id}/won`, op: "eq", value: true },
+    { artifact: measurement, pointer: "/assisted", op: "eq", value: false },
+    { artifact: measurement, pointer: "/reportOnly", op: "eq", value: false }] }));
+const passed = { builds: { needle: { won: true }, orbit: { won: true } }, assisted: false, reportOnly: false };
+
+function fixture(acceptance = criteria, contractOverrides = {}) {
+  const temporaryRoot = fs.realpathSync(os.tmpdir()), project = fs.mkdtempSync(path.join(temporaryRoot, "nccgs-phase2-"));
+  const write = (relative, value) => {
+    const file = path.join(project, relative); fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, typeof value === "string" ? value : JSON.stringify(value)); return artifact(project, relative);
+  };
+  fs.cpSync(path.join(root, ".claude/nccgs/tools"), path.join(project, ".claude/nccgs/tools"), { recursive: true });
+  for (const file of ["pipeline.json", "studio.json"]) write(`.claude/nccgs/${file}`, fs.readFileSync(path.join(root, ".claude/nccgs", file), "utf8"));
+  write("Assets/game.cs", "// fixture baseline");
+  write("Tools/probe.mjs", `import fs from 'node:fs';fs.mkdirSync('.nccgs/evidence/measurements',{recursive:true});const input=JSON.parse(process.argv[2]);if(input.delayMs)await new Promise(r=>setTimeout(r,input.delayMs));if(!input.skip)fs.writeFileSync('${measurement}',input.malformed?'bad JSON':JSON.stringify(input.data));console.log('Synthetic gameplay measurement fixture');process.exitCode=input.exitCode||0;`);
+  write(".nccgs/project.yaml", "schema_version: 2\nmodels:\n  profile: claude-standalone\n");
+  write(".nccgs/execution.json", { schemaVersion: 1, name: "standalone", externalReview: { mode: "off" } });
+  write(".nccgs/inputs.json", { schemaVersion: 1, canonicalInputs: [], outputDirectories: [], checks: { runtime: { timeoutMs: 15000 } } });
+  const intake = { objective: "Synthetic test of acceptance mapping and repair budget", mode: "implement", readiness: "ready", requiredChecks: ["runtime"], acceptance, ...contractOverrides };
+  write(".nccgs/intake.json", intake);
+  initialize(project, "fixture", null, null, null, { intake: ".nccgs/intake.json" });
+  let serial = 0;
+  const task = () => json(taskPath(project, "fixture"));
+  const snap = () => snapshot(project, task()).sha256;
+  const assess = () => assessCriteria(project, task(), snap());
+  function verify(data = passed, options = {}) {
+    const job = startVerification(project, "fixture", { name: "runtime", executable: process.execPath, arguments: ["Tools/probe.mjs", JSON.stringify({ data, ...options })], requestKey: `probe-${++serial}` });
+    return waitVerification(project, job.jobId, "fixture", 20000);
+  }
+  function request(kind = "implementation", overrides = {}) {
+    return { kind, agent: kind === "review" ? "nccgs-adversarial-reviewer" : kind === "analysis" ? "nccgs-qa-engineer" : "nccgs-gameplay-programmer",
+      requestKey: `dispatch-${++serial}`, reason: "SYNTHETIC TEST FIXTURE", writePaths: kind === "implementation" ? ["Assets/game.cs"] : [], ...overrides };
+  }
+  function worker(kind = "implementation", overrides = {}, mutate = null) {
+    const req = request(kind, overrides);
+    if (req.purpose === "repair") {
+      req.workPacket = `.nccgs/evidence/work-packets/${req.requestKey}.json`;
+      req.handoffPaths = [`.nccgs/evidence/analysis/${req.requestKey}.md`];
+      write(req.workPacket, { schemaVersion: 1, taskId: "fixture", contractHash: task().contractHash, sourceSnapshot: snap(),
+        problem: "Synthetic acceptance failure", solution: "Apply the predetermined fixture correction", changes: [{ path: "Assets/game.cs", instruction: "Apply the synthetic bounded correction" }],
+        context: [], verification: ["runtime"] });
+    }
+    const d = reserve(project, "fixture", req), count = ++serial;
+    claim(project, d.id, { sessionId: "fixture-session", toolUseId: `tool-${count}`, agent: req.agent });
+    if (req.workPacket) {
+      attachAgent(project, d.id, `${kind}-${count}`);
+      guardTool(project, { session_id: "fixture-session", agent_id: `${kind}-${count}`, tool_use_id: `edit-${count}`, tool_name: "Edit", tool_input: { file_path: "Assets/game.cs", old_string: "fixture", new_string: "correction" } });
+    }
+    if (mutate) mutate();
+    if (req.workPacket) {
+      const content = "NCCGS-HANDOFF: COMPLETE\nSynthetic bounded correction; coordinator verification pending.";
+      guardTool(project, { session_id: "fixture-session", agent_id: `${kind}-${count}`, tool_use_id: `handoff-${count}`, tool_name: "Write", tool_input: { file_path: req.handoffPaths[0], content } });
+      write(req.handoffPaths[0], content);
+    }
+    const current = task(), route = kind === "review" ? current.execution.profile.models.review : current.implementationRoute;
+    const source = `.nccgs/evidence/raw-${count}.json`;
+    write(source, { taskId: "fixture", contractHash: current.contractHash, snapshot: snap(), dispatchId: d.id,
+      sessionId: "fixture-session", toolUseId: `tool-${count}`, agentId: `${kind}-${count}`, status: "completed", capturedAt: new Date().toISOString(),
+      observedProvider: "claude-code", observedModel: route.model === "sonnet" ? "claude-sonnet-4-6" : route.model === "fable" ? "claude-fable-5-1" : "claude-opus-5-5", observedEffort: null,
+      provenance: { kind: "provider-log", reference: "SYNTHETIC TEST FIXTURE, not real Claude" } });
+    const runtime = run(["observe", "--project", project, "--id", "fixture", "--file", source]);
+    complete(project, d.id, { runtime });
+    return { snapshot: snap(), dispatchId: d.id, runtime };
+  }
+  const work = (attempt, receipt) => record(project, "fixture", "implementation", { ...attempt, checks: [{ name: "runtime", status: "PASS", evidence: receipt.evidence }] });
+  const review = (attempt, verdict = "PASS") => record(project, "fixture", "review", { ...attempt, verdict, criteriaMet: verdict === "PASS", findings: [], evidence: write(`.nccgs/evidence/review-${++serial}.md`, "Synthetic independent review; never native evidence") });
+  return { project, write, intake, task, snap, assess, verify, request, worker, work, review, dispose() {
+    assert.equal(path.dirname(fs.realpathSync(project)).toLowerCase(), temporaryRoot.toLowerCase());
+    assert.ok(path.basename(project).startsWith("nccgs-phase2-")); assert.equal(fs.lstatSync(project).isSymbolicLink(), false);
+    fs.rmSync(project, { recursive: true, force: true });
+  } };
+}
+
+test("technical exit 0 cannot turn failed or assisted gameplay into acceptance PASS", () => {
+  const f = fixture();
+  try {
+    const attempt = f.worker();
+    const receipt = f.verify({ ...passed, builds: { needle: { won: false }, orbit: { won: false } }, reportOnly: true });
+    assert.equal(receipt.status, "PASS"); assert.deepEqual(f.assess().criteria.map(c => c.status), ["FAIL", "FAIL"]);
+    f.work(attempt, receipt);
+    const reviewer = f.worker("review");
+    assert.throws(() => f.review(reviewer), /Acceptance criteria not proven/);
+    f.review(reviewer, "CHANGES_REQUIRED");
+    assert.throws(() => record(f.project, "fixture", "report", { outcome: "success", summary: "Incorrect PASS" }), /Cannot report success/);
+    const partial = record(f.project, "fixture", "report", { outcome: "partial", summary: "Two unassisted builds remain unproven" });
+    assert.equal(partial.stages.report.acceptanceAssessment.status, "FAIL");
+    assert.throws(() => close(f.project, "fixture"), /review has not passed/);
+    assert.equal(f.verify({ ...passed, assisted: true }).status, "PASS");
+    assert.equal(f.assess().status, "FAIL");
+  } finally { f.dispose(); }
+});
+
+test("fresh measured criteria plus independent review permit DONE", () => {
+  const f = fixture();
+  try {
+    const attempt = f.worker(), receipt = f.verify(); f.work(attempt, receipt);
+    assert.equal(f.assess().status, "PASS"); f.review(f.worker("review"));
+    record(f.project, "fixture", "report", { outcome: "success", summary: "Synthetic acceptance passed" });
+    assert.equal(close(f.project, "fixture").phase, "DONE");
+    assert.equal(run(["acceptance-status", "--project", f.project, "--id", "fixture"]).automaticPassed, true);
+  } finally { f.dispose(); }
+});
+
+test("missing, malformed, old, failed and source-stale measurements stay unverified", () => {
+  const f = fixture();
+  try {
+    assert.equal(f.assess().status, "UNVERIFIED");
+    f.write(measurement, passed); f.verify(passed, { skip: true });
+    assert.equal(f.assess().status, "UNVERIFIED");
+    f.verify(passed, { malformed: true }); assert.equal(f.assess().status, "UNVERIFIED");
+    f.verify({ ...passed, builds: {} }); assert.equal(f.assess().status, "UNVERIFIED");
+    f.verify(); assert.equal(f.assess().status, "PASS");
+    assert.equal(f.verify(passed, { exitCode: 2 }).status, "FAIL"); assert.equal(f.assess().status, "UNVERIFIED");
+    f.verify(); f.write("Assets/game.cs", "// changed after verification"); assert.equal(f.assess().status, "UNVERIFIED");
+  } finally { f.dispose(); }
+});
+
+test("frozen measurement survives output overwrite but detects captured-evidence tampering", () => {
+  const f = fixture();
+  try {
+    f.verify(); f.write(measurement, { ...passed, assisted: true }); assert.equal(f.assess().status, "PASS");
+    const assessment = f.assess(), receipt = json(path.join(f.project, assessment.criteria[0].receipt.path));
+    const captured = receipt.acceptance.criteria[0].checks[0].evidence.path;
+    f.write(captured, { ...passed, assisted: true }); assert.equal(f.assess().status, "UNVERIFIED");
+    assert.throws(() => guardTool(f.project, { tool_name: "Write", tool_input: { file_path: captured } }), /immutable/);
+    assert.equal(safeTaskCommand("node .claude/nccgs/tools/task.mjs acceptance-status --id fixture", f.project), "acceptance-status");
+  } finally { f.dispose(); }
+});
+
+test("pending latest attempt supersedes PASS and owns its measurement paths exclusively", () => {
+  const f = fixture(); let job;
+  try {
+    f.verify(); assert.equal(f.assess().status, "PASS");
+    const args = { name: "runtime", executable: process.execPath, arguments: ["Tools/probe.mjs", JSON.stringify({ data: passed, delayMs: 1000 })], requestKey: "pending" };
+    job = startVerification(f.project, "fixture", args);
+    assert.equal(f.assess().status, "UNVERIFIED");
+    assert.throws(() => startVerification(f.project, "fixture", { ...args, requestKey: "overlap" }), /owns these measurement/);
+    assert.equal(waitVerification(f.project, job.jobId, "fixture", 20000).status, "PASS");
+    assert.equal(f.assess().status, "PASS");
+  } finally { if (job) waitVerification(f.project, job.jobId, "fixture", 20000); f.dispose(); }
+});
+
+test("check-only criteria require mapping and manual criteria keep their owner gate", () => {
+  const f = fixture([{ id: "legacy", description: "Must not infer acceptance from exit 0", check: "runtime" }, { id: "feel", description: "Human playtest", manual: true }]);
+  try {
+    f.verify(); assert.deepEqual(f.assess().criteria.map(c => c.status), ["UNVERIFIED", "MANUAL_PENDING"]);
+    assert.deepEqual(f.task().contract.manualGates, ["feel"]);
+    f.write(".nccgs/bad.json", { ...f.intake, acceptance: [{ ...criteria[0], assertions: [{ artifact: "../outside.json", pointer: "/x", op: "eq", value: true }] }] });
+    assert.throws(() => initialize(f.project, "bad", null, null, null, { intake: ".nccgs/bad.json" }), /measurement/);
+    f.write(".nccgs/bad.json", { ...f.intake, acceptance: [{ ...criteria[0], assertions: [{ artifact: ".nccgs/evidence/measurements/../criteria/x.json", pointer: "/x", op: "eq", value: true }] }] });
+    assert.throws(() => initialize(f.project, "alias", null, null, null, { intake: ".nccgs/bad.json" }), /canonical/);
+  } finally { f.dispose(); }
+});
+
+test("typed thresholds and escaped JSON pointers are evaluated without coercion", () => {
+  const f = fixture([{ id: "load", description: "Measured load", check: "runtime", assertions: [
+    { artifact: measurement, pointer: "/a~1b/~0load", op: "gte", value: 200 },
+    { artifact: measurement, pointer: "/p95", op: "lte", value: 16.7 }] }]);
+  try {
+    f.verify({ "a/b": { "~load": 201 }, p95: 15 }); assert.equal(f.assess().status, "PASS");
+    f.verify({ "a/b": { "~load": "201" }, p95: 15 }); assert.equal(f.assess().status, "UNVERIFIED");
+    f.verify({ "a/b": { "~load": 201 }, p95: 20 }); assert.equal(f.assess().status, "FAIL");
+  } finally { f.dispose(); }
+});
+
+test("early viability blocks expansion while leaving repair, QA and review available", () => {
+  const f = fixture();
+  try {
+    f.worker();
+    assert.throws(() => reserve(f.project, "fixture", f.request()), /Early acceptance checkpoint/);
+    f.verify({ ...passed, assisted: true });
+    assert.throws(() => reserve(f.project, "fixture", f.request()), /Early acceptance checkpoint/);
+    assert.throws(() => reserve(f.project, "fixture", f.request("analysis", { purpose: "qa" })), /reserved for a completed repair/);
+    const repair = f.worker("implementation", { purpose: "repair" }, () => f.write("Assets/game.cs", "// repaired tuning"));
+    assert.equal(f.assess().status, "UNVERIFIED");
+    f.verify();
+    f.worker("analysis", { purpose: "qa" });
+    f.worker();
+    assert.equal(status(f.project, "fixture").deliveryBudget.remaining.repair, 0);
+    assert.ok(repair.dispatchId);
+  } finally { f.dispose(); }
+});
+
+test("STANDARD preserves a repair plus QA plus re-review after initial review at total cap", () => {
+  const f = fixture(criteria.map(c => ({ ...c, checkpoint: "final" })));
+  try {
+    let implementation;
+    for (let i = 0; i < 8; i++) implementation = f.worker();
+    const failed = f.verify({ ...passed, assisted: true }); f.work(implementation, failed);
+    assert.throws(() => reserve(f.project, "fixture", f.request()), /budget reserved/);
+    f.review(f.worker("review"), "CHANGES_REQUIRED");
+    assert.deepEqual(status(f.project, "fixture").deliveryBudget.remaining, { repair: 1, qa: 1, review: 1 });
+    const repair = f.worker("implementation", { purpose: "repair" }, () => f.write("Assets/game.cs", "// bounded correction"));
+    const fresh = f.verify(); f.work(repair, fresh);
+    f.worker("analysis", { purpose: "qa" }); f.review(f.worker("review"));
+    assert.equal(status(f.project, "fixture").usage.dispatches, 12);
+    record(f.project, "fixture", "report", { outcome: "success", summary: "Synthetic repaired acceptance passed" });
+    assert.equal(close(f.project, "fixture").phase, "DONE");
+    assert.throws(() => reserve(f.project, "fixture", f.request()), /budget exhausted/);
+  } finally { f.dispose(); }
+});
+
+test("protected purposes cannot be used without feedback or by an unrelated role", () => {
+  const f = fixture([]);
+  try {
+    assert.throws(() => reserve(f.project, "fixture", f.request("implementation", { purpose: "repair" })), /requires recorded negative/);
+    assert.throws(() => reserve(f.project, "fixture", f.request("implementation", { purpose: "qa" })), /read-only QA/);
+    assert.throws(() => reserve(f.project, "fixture", f.request("analysis", { purpose: "qa", repairFeedback: { fake: true } })), /reserved for a completed repair/);
+    assert.throws(() => reserve(f.project, "fixture", f.request("implementation", { limits: { maxDispatches: 4 } })), /cannot fit/);
+  } finally { f.dispose(); }
+});
+
+test("cancellation, child tasks, input refresh and reclassification cannot refund protected budget", () => {
+  const f = fixture([]);
+  try {
+    for (let i = 0; i < 7; i++) f.worker();
+    f.write(".nccgs/child.json", { ...f.intake, acceptance: [] });
+    initialize(f.project, "child", null, null, null, { intake: ".nccgs/child.json", parentId: "fixture" });
+    const req = f.request("analysis"), child = reserve(f.project, "child", req);
+    const saved = [process.env.CLAUDECODE, process.env.CLAUDE_CODE_ENTRYPOINT];
+    delete process.env.CLAUDECODE; delete process.env.CLAUDE_CODE_ENTRYPOINT;
+    try { reconcile(f.project, child.id, { status: "cancelled", reason: "Synthetic cancelled before launch", reference: "Synthetic fixture" }); }
+    finally { for (const [i, name] of ["CLAUDECODE", "CLAUDE_CODE_ENTRYPOINT"].entries()) if (saved[i] === undefined) delete process.env[name]; else process.env[name] = saved[i]; }
+    assert.equal(status(f.project, "fixture").deliveryBudget.deliveryRemaining, 0);
+    refreshInputs(f.project, "fixture", "Synthetic explicit refresh");
+    reclassify(f.project, "fixture", { risk: "CONTROLLED", reason: "Synthetic escalation", evidence: ["Synthetic observed risk"] });
+    assert.throws(() => reserve(f.project, "fixture", f.request()), /budget reserved/);
+    assert.throws(() => reserve(f.project, "child", f.request("analysis")), /budget reserved/);
+    assert.equal(reserve(f.project, "child", req).id, child.id);
+    assert.equal(status(f.project, "fixture").usage.dispatches, 8);
+  } finally { f.dispose(); }
+});