phasegate 0.165.0 → 0.171.0

package/scripts/harness/nyquist-validation/domain/services/matrix-validation-service.ts

@@ -35,15 +35,15 @@ function extractStoryMappings(rawData: unknown): RawStoryMappingEntry[] {
   if (rawData === null || typeof rawData !== 'object') return [];
   const obj = rawData as Record<string, unknown>;
 
-  const source = Array.isArray(obj['stories'])
-    ? (obj['stories'] as unknown[])
-    : Array.isArray(obj['storyMappings'])
-      ? (obj['storyMappings'] as unknown[])
+  const source = Array.isArray(obj.stories)
+    ? (obj.stories as unknown[])
+    : Array.isArray(obj.storyMappings)
+      ? (obj.storyMappings as unknown[])
       : [];
 
   return source.map((item) => {
     const entry = item as Record<string, unknown>;
-    return { storyId: String(entry['storyId'] ?? '') };
+    return { storyId: String(entry.storyId ?? '') };
   });
 }
 

package/scripts/harness/nyquist-validation/domain/value-objects/impact-analysis-result.ts

@@ -4,7 +4,7 @@
  *
  * テストケース逆引き結果を表す値オブジェクト
  */
-import { TestReference } from './test-reference.js';
+import type { TestReference } from './test-reference.js';
 
 export interface ImpactAnalysisResultProps {
   readonly storyId: string;

package/scripts/harness/nyquist-validation/infrastructure/adapters/ajv-json-schema-validator-adapter.ts

@@ -15,13 +15,13 @@ function convertAjvError(err: ErrorObject): NyquistHarnessError {
 
   switch (err.keyword) {
     case 'required':
-      message = `${err.instancePath || '(root)'} に必須フィールド '${String(err.params['missingProperty'] ?? '')}' がありません`;
+      message = `${err.instancePath || '(root)'} に必須フィールド '${String(err.params.missingProperty ?? '')}' がありません`;
       break;
     case 'type':
-      message = `${err.instancePath} の型が不正です。期待: ${String(err.params['type'] ?? '')}`;
+      message = `${err.instancePath} の型が不正です。期待: ${String(err.params.type ?? '')}`;
       break;
     case 'pattern':
-      message = `${err.instancePath} の値が形式 '${String(err.params['pattern'] ?? '')}' に一致しません`;
+      message = `${err.instancePath} の値が形式 '${String(err.params.pattern ?? '')}' に一致しません`;
       break;
     case 'enum':
       message = `${err.instancePath} の値は許容値のいずれでもありません`;

package/scripts/harness/nyquist-validation/infrastructure/adapters/config-foundation-coverage-threshold-adapter.ts

@@ -35,10 +35,10 @@ export class ConfigFoundationCoverageThresholdAdapter implements CoverageThresho
       preset = 'standard';
     }
 
-    const active = THRESHOLDS[preset] ?? THRESHOLDS['standard'];
+    const active = THRESHOLDS[preset] ?? THRESHOLDS.standard;
     return {
-      standard: THRESHOLDS['standard'] ?? 0.90,
-      strict: THRESHOLDS['strict'] ?? 0.95,
+      standard: THRESHOLDS.standard ?? 0.90,
+      strict: THRESHOLDS.strict ?? 0.95,
       active: active ?? 0.90,
     };
   }

package/scripts/harness/nyquist-validation/infrastructure/adapters/type-script-test-reference-source-adapter.ts

@@ -1,17 +1,31 @@
 // @layer infrastructure
 // @unit nyquist-validation
 // @work-item-id WI-125
+// @work-item-id WI-222
 
 import { readdir, readFile, stat } from 'node:fs/promises';
 import path from 'node:path';
 import type { TestReferenceSourcePort } from '../../application/usecases/generate-requirement-test-matrix-usecase.js';
-import type { TestReferenceSourceDto } from '../../application/dto/generate-matrix-output.js';
+import type { OrphanAcTagDto, TestReferenceSourceDto } from '../../application/dto/generate-matrix-output.js';
 
 // StoryId は HXX-XX 形式に加え Phase 2 拡張 Epic の HF\d+-XX 形式も許容する
 // （markdown-requirement-source-adapter の STORY_HEADING / traceability-model の StoryId 正規表現と整合）。
 // 旧 /H\d{2}-\d{2}/ は HF2-01 等を取りこぼし、正しく注釈されたテストが「テストなし」と誤判定されていた。
 const STORY_TAG = /@story(?:-id)?\s+(H(?:F\d+|\d{2})-\d{2})/;
-const TEST_NAME = /\b(?:it|test)(?:\.each\([^)]*\))?\s*\(\s*['"`]([^'"`]+)['"`]/g;
+const STORY_TAG_GLOBAL = /@story(?:-id)?\s+(H(?:F\d+|\d{2})-\d{2})/g;
+// HF2-05: @ac は 1 行に複数 AC を許容する。行末までの全トークンを個別に解釈する。
+// 各トークンは絶対形式 `HXX-YY-N`（story-relative でない）または相対形式 `AC-N`。
+const AC_TAG_LINE = /@ac\s+(.+?)\s*$/;
+const AC_ABSOLUTE_TOKEN = /^(H(?:F\d+|\d{2})-\d{2})-([1-9][0-9]*)$/;
+const AC_RELATIVE_TOKEN = /^AC-([1-9][0-9]*)$/;
+// テストケース開始行の検出（it / test、.each やスペースを許容）。
+const TEST_START = /\b(?:it|test)(?:\.each\([^)]*\))?\s*\(\s*['"`]([^'"`]+)['"`]/;
+
+interface PendingAcToken {
+  readonly rawTag: string;
+  readonly resolvedAcId: string | null;
+  readonly reason: OrphanAcTagDto['reason'] | null;
+}
 
 async function collectTestFiles(root: string): Promise<readonly string[]> {
   const rootStat = await stat(root).catch(() => null);
@@ -43,15 +57,103 @@ export class TypeScriptTestReferenceSourceAdapter implements TestReferenceSource
       const storyId = storyMatch[1];
       const relativePath = path.relative(process.cwd(), filePath).replaceAll(path.sep, '/');
       const testType = classifyTestType(relativePath);
-      const names = [...content.matchAll(TEST_NAME)].map((match) => match[1]);
-      if (names.length === 0) {
-        references.push({ storyId, filePath: relativePath, testType });
+      // HF2-05: 相対 @ac (AC-N) はファイルに @story がちょうど 1 件のときのみ解決する。
+      const storyCount = [...content.matchAll(STORY_TAG_GLOBAL)].length;
+      references.push(...this.scanFile({ content, storyId, relativePath, testType, storyCount }));
+    }
+    return Object.freeze(references);
+  }
+
+  /**
+   * HF2-05: ファイル内容を行単位で走査し、直前の it()/test() 以降に現れた @ac を
+   * 「最近接の @ac」として次のテストケースへ紐づける（positional scan）。
+   * @ac が無いテストは従来どおり acIds 無しの参照を生成する。
+   */
+  private scanFile(args: {
+    content: string;
+    storyId: string;
+    relativePath: string;
+    testType: 'unit' | 'it' | 'scenario';
+    storyCount: number;
+  }): TestReferenceSourceDto[] {
+    const { content, storyId, relativePath, testType, storyCount } = args;
+    const lines = content.split('\n');
+    const result: TestReferenceSourceDto[] = [];
+    let pending: PendingAcToken[] = [];
+
+    for (const line of lines) {
+      const acMatch = line.match(AC_TAG_LINE);
+      if (acMatch) {
+        for (const token of acMatch[1].trim().split(/\s+/)) {
+          if (token.length > 0) pending.push(this.resolveAcToken(token, storyId, storyCount));
+        }
         continue;
       }
-      for (const testName of names) {
-        references.push({ storyId, filePath: relativePath, testType, testName });
+      const testMatch = line.match(TEST_START);
+      if (testMatch) {
+        result.push(this.buildReference({
+          storyId,
+          relativePath,
+          testType,
+          testName: testMatch[1],
+          pending,
+        }));
+        pending = [];
       }
     }
-    return Object.freeze(references);
+
+    // it()/test() が 1 件も無い注釈済みファイルは、file-level 参照 1 件を維持する（従来挙動）。
+    if (result.length === 0) {
+      result.push({ storyId, filePath: relativePath, testType });
+    }
+    return result;
+  }
+
+  private buildReference(args: {
+    storyId: string;
+    relativePath: string;
+    testType: 'unit' | 'it' | 'scenario';
+    testName: string;
+    pending: readonly PendingAcToken[];
+  }): TestReferenceSourceDto {
+    const { storyId, relativePath, testType, testName, pending } = args;
+    const base: TestReferenceSourceDto = { storyId, filePath: relativePath, testType, testName };
+    if (pending.length === 0) return base;
+
+    const acIds = pending.filter((p) => p.resolvedAcId !== null).map((p) => p.resolvedAcId as string);
+    const orphanAcTags: OrphanAcTagDto[] = pending
+      .filter((p) => p.resolvedAcId === null && p.reason !== null)
+      .map((p) => ({ storyId, filePath: relativePath, testName, rawTag: p.rawTag, reason: p.reason as OrphanAcTagDto['reason'] }));
+
+    return {
+      ...base,
+      ...(acIds.length > 0 ? { acIds: Object.freeze([...new Set(acIds)]) } : {}),
+      ...(orphanAcTags.length > 0 ? { orphanAcTags: Object.freeze(orphanAcTags) } : {}),
+    };
+  }
+
+  /**
+   * 1 個の @ac トークンを解釈する。
+   * - 絶対形式 `HXX-YY-N`: story が一致すれば `AC-N` に解決、不一致なら ac-not-in-story orphan。
+   * - 相対形式 `AC-N`: @story が単一なら `AC-N` に解決、複数なら relative-multi-story orphan。
+   */
+  private resolveAcToken(token: string, storyId: string, storyCount: number): PendingAcToken {
+    const absolute = token.match(AC_ABSOLUTE_TOKEN);
+    if (absolute) {
+      const [, tokenStory, acNumber] = absolute;
+      if (tokenStory === storyId) {
+        return { rawTag: token, resolvedAcId: `AC-${acNumber}`, reason: null };
+      }
+      return { rawTag: token, resolvedAcId: null, reason: 'ac-not-in-story' };
+    }
+    const relative = token.match(AC_RELATIVE_TOKEN);
+    if (relative) {
+      if (storyCount === 1) {
+        return { rawTag: token, resolvedAcId: `AC-${relative[1]}`, reason: null };
+      }
+      return { rawTag: token, resolvedAcId: null, reason: 'relative-multi-story' };
+    }
+    // 形式不明トークンは advisory orphan として ac-not-in-story 扱い。
+    return { rawTag: token, resolvedAcId: null, reason: 'ac-not-in-story' };
   }
 }

package/scripts/harness/nyquist-validation/infrastructure/schema/matrix-schema-loader.ts

@@ -1,8 +1,13 @@
 /**
  * @layer infrastructure
  * @unit nyquist-validation
+ * @work-item-id WI-222
  *
  * requirement-test-matrix.schema.json ローダー（シングルトンキャッシュ付き）
+ *
+ * HF2-05 (schema 1.1): testReferences に optional な `binding` enum（"ac"|"file"）を追加。
+ * 1.1 は追加フィールドが optional かつ additionalProperties:false を満たすため、
+ * `binding` を持たない 1.0 マトリクスも引き続き検証を通過する（後方互換）。
  */
 import { readFile } from 'node:fs/promises';
 import { resolve, join } from 'node:path';

package/scripts/harness/validator-system/application/dto/run-l3-validators-input.ts

@@ -9,4 +9,6 @@ export interface RunL3ValidatorsInput {
   readonly targetPaths: readonly string[];
   readonly coverageReportPath?: string;
   readonly requirementMatrixPath?: string;
+  /** L3-005（AC-bound coverage）のスコープ対象 story-id 配列。省略時 []。 */
+  readonly acBoundStories?: readonly string[];
 }

package/scripts/harness/validator-system/application/use-cases/run-l1-validators-usecase.ts

@@ -10,7 +10,7 @@ import { ValidatorId } from '../../domain/value-objects/validator-id.js';
 import { ValidationResult } from '../../domain/value-objects/validation-result.js';
 import { ItTestMockDetectionService } from '../../domain/services/it-test-mock-detection-service.js';
 import { StubCommentDetectionService } from '../../domain/services/stub-comment-detection-service.js';
-import { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
+import type { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
 import type { ValidationResultContract } from '../dto/validation-result-contract.js';
 import type { RunL1ValidatorsInput } from '../dto/run-l1-validators-input.js';
 import type { ItTestFileAnalyzerPort } from '../../domain/ports/it-test-file-analyzer-port.js';

package/scripts/harness/validator-system/application/use-cases/run-l2-validators-usecase.ts

@@ -8,9 +8,9 @@
 import { readFile } from 'node:fs/promises';
 import { ValidatorId, InvalidValidatorIdError } from '../../domain/value-objects/validator-id.js';
 import { ValidationResult, type HarnessErrorLike } from '../../domain/value-objects/validation-result.js';
-import { ValidatorRegistry } from '../../domain/services/validator-registry.js';
-import { ValidatorExecutionService, ValidatorExecutionError } from '../../domain/services/validator-execution-service.js';
-import { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
+import type { ValidatorRegistry } from '../../domain/services/validator-registry.js';
+import { type ValidatorExecutionService, ValidatorExecutionError } from '../../domain/services/validator-execution-service.js';
+import type { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
 import type { ValidationResultContract } from '../dto/validation-result-contract.js';
 import type { RunL2ValidatorsInput } from '../dto/run-l2-validators-input.js';
 import type { ValidatorConfigPort } from '../../domain/ports/validator-config-port.js';

package/scripts/harness/validator-system/application/use-cases/run-l3-validators-usecase.ts

@@ -7,14 +7,15 @@
  */
 import { ValidatorId } from '../../domain/value-objects/validator-id.js';
 import { ValidationResult } from '../../domain/value-objects/validation-result.js';
-import { ValidatorRegistry } from '../../domain/services/validator-registry.js';
-import { ValidatorExecutionService, ValidatorExecutionError } from '../../domain/services/validator-execution-service.js';
+import type { ValidatorRegistry } from '../../domain/services/validator-registry.js';
+import { type ValidatorExecutionService, ValidatorExecutionError } from '../../domain/services/validator-execution-service.js';
 import { ValidatorLanguageCapabilityService } from '../../domain/services/validator-language-capability-service.js';
-import { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
+import type { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
 import type { ValidationResultContract } from '../dto/validation-result-contract.js';
 import type { RunL3ValidatorsInput } from '../dto/run-l3-validators-input.js';
 import type { ValidatorConfigPort } from '../../domain/ports/validator-config-port.js';
 import type { AcCoveragePolicyPort } from '../../domain/ports/ac-coverage-policy-port.js';
+import type { AcBoundCoveragePolicyPort } from '../../domain/ports/ac-bound-coverage-policy-port.js';
 import type { SecurityPatternScannerPort } from '../../domain/ports/security-pattern-scanner-port.js';
 import type { PerformanceScannerPort } from '../../domain/ports/performance-scanner-port.js';
 
@@ -31,9 +32,12 @@ export interface RunL3ValidatorsUseCaseDeps {
   validatorConfigPort: ValidatorConfigPort;
   contractMapper: ValidationResultContractMapper;
   acCoveragePolicyPort?: AcCoveragePolicyPort;
+  acBoundCoveragePolicyPort?: AcBoundCoveragePolicyPort;
   coverageReportPort?: { getCoverage(): Promise<{ overallCoverage: number; perFileCoverage: readonly { filePath: string; coverage: number }[] }> };
   securityScannerPort?: SecurityPatternScannerPort;
   performanceScannerPort?: PerformanceScannerPort;
+  /** L3-005 のスコープ対象 story-id（config layers.L3.acBoundStories 由来。既定 []）。 */
+  acBoundStories?: readonly string[];
 }
 
 export class RunL3ValidatorsUseCase {
@@ -42,9 +46,11 @@ export class RunL3ValidatorsUseCase {
   private readonly configPort: ValidatorConfigPort;
   private readonly mapper: ValidationResultContractMapper;
   private readonly acCoveragePolicyPort?: AcCoveragePolicyPort;
+  private readonly acBoundCoveragePolicyPort?: AcBoundCoveragePolicyPort;
   private readonly coverageReportPort?: RunL3ValidatorsUseCaseDeps['coverageReportPort'];
   private readonly securityScannerPort?: SecurityPatternScannerPort;
   private readonly performanceScannerPort?: PerformanceScannerPort;
+  private readonly acBoundStories: readonly string[];
   private readonly languageCapabilityService = new ValidatorLanguageCapabilityService();
 
   constructor(deps: RunL3ValidatorsUseCaseDeps) {
@@ -53,9 +59,11 @@ export class RunL3ValidatorsUseCase {
     this.configPort = deps.validatorConfigPort;
     this.mapper = deps.contractMapper;
     this.acCoveragePolicyPort = deps.acCoveragePolicyPort;
+    this.acBoundCoveragePolicyPort = deps.acBoundCoveragePolicyPort;
     this.coverageReportPort = deps.coverageReportPort;
     this.securityScannerPort = deps.securityScannerPort;
     this.performanceScannerPort = deps.performanceScannerPort;
+    this.acBoundStories = deps.acBoundStories ?? [];
   }
 
   async execute(input: RunL3ValidatorsInput): Promise<readonly ValidationResultContract[]> {
@@ -195,6 +203,28 @@ export class RunL3ValidatorsUseCase {
       }
     }
 
+    // L3-005: AC-bound coverage（fail-closed, default-OFF）。
+    // override map に unskipped な L3-005 がある場合のみ policy を呼ぶ（L3-004 と同じ方式）。
+    if (this.acBoundCoveragePolicyPort) {
+      const l3005Result = overrideMap.get('L3-005');
+      if (l3005Result && !l3005Result.skipped) {
+        const policyResult = await this.acBoundCoveragePolicyPort.checkAcBoundCoverage({
+          matrixFilePath: input.requirementMatrixPath,
+          acBoundStories: input.acBoundStories ?? this.acBoundStories,
+        });
+        if (!policyResult.passed) {
+          overrideMap.set(
+            'L3-005',
+            ValidationResult.fail(
+              ValidatorId.create('L3-005'),
+              [...policyResult.errors],
+              0,
+            ),
+          );
+        }
+      }
+    }
+
     const finalResults = definitions.map(
       (definition) => overrideMap.get(definition.validatorId.value) ?? ValidationResult.skip(definition.validatorId),
     );

package/scripts/harness/validator-system/application/use-cases/run-l4-validators-usecase.ts

@@ -10,10 +10,10 @@
 import { ValidatorId } from '../../domain/value-objects/validator-id.js';
 import { ValidationResult } from '../../domain/value-objects/validation-result.js';
 import { LayerConfig } from '../../domain/value-objects/layer-config.js';
-import { ValidatorRegistry } from '../../domain/services/validator-registry.js';
-import { ValidatorExecutionService, ValidatorExecutionError } from '../../domain/services/validator-execution-service.js';
+import type { ValidatorRegistry } from '../../domain/services/validator-registry.js';
+import { type ValidatorExecutionService, ValidatorExecutionError } from '../../domain/services/validator-execution-service.js';
 import { ValidatorLanguageCapabilityService } from '../../domain/services/validator-language-capability-service.js';
-import { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
+import type { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
 import type { ValidationResultContract } from '../dto/validation-result-contract.js';
 import type { RunL4ValidatorsInput } from '../dto/run-l4-validators-input.js';
 import type { ValidatorConfigPort } from '../../domain/ports/validator-config-port.js';
@@ -23,6 +23,8 @@ import type { DeadCodeDetectionService } from '../../domain/services/l4/dead-cod
 import type { ArchitectureSemanticAnalysisService } from '../../domain/services/l4/architecture-semantic-analysis-service.js';
 import { SkillCatalogDriftService } from '../../domain/services/l4/skill-catalog-drift-service.js';
 import type { SkillCatalogDriftPort } from '../../domain/ports/skill-catalog-drift-port.js';
+import { AcLevelTraceabilityService } from '../../domain/services/l4/ac-level-traceability-service.js';
+import type { AcLevelTraceabilityPort } from '../../domain/ports/ac-level-traceability-port.js';
 
 interface ScheduledHarnessErrorContract {
   readonly severity: string;
@@ -73,6 +75,7 @@ export interface RunL4ValidatorsUseCaseDeps {
   deadCodeDetectionService?: DeadCodeDetectionService;
   architectureSemanticAnalysisService?: ArchitectureSemanticAnalysisService;
   skillCatalogDriftPort?: SkillCatalogDriftPort;
+  acLevelTraceabilityPort?: AcLevelTraceabilityPort;
   pathRoots?: {
     readonly inceptionRoot: string;
     readonly designRoot: string;
@@ -92,6 +95,8 @@ export class RunL4ValidatorsUseCase {
   private readonly architectureSemanticAnalysisService?: ArchitectureSemanticAnalysisService;
   private readonly skillCatalogDriftPort?: SkillCatalogDriftPort;
   private readonly skillCatalogDriftService = new SkillCatalogDriftService();
+  private readonly acLevelTraceabilityPort?: AcLevelTraceabilityPort;
+  private readonly acLevelTraceabilityService = new AcLevelTraceabilityService();
   private readonly pathRoots: { readonly inceptionRoot: string; readonly designRoot: string };
   private readonly checkDocFreshnessUseCase?: CheckDocFreshnessUseCasePort;
   private readonly validateDocPointersUseCase?: ValidateDocPointersUseCasePort;
@@ -107,6 +112,7 @@ export class RunL4ValidatorsUseCase {
     this.deadCodeDetectionService = deps.deadCodeDetectionService;
     this.architectureSemanticAnalysisService = deps.architectureSemanticAnalysisService;
     this.skillCatalogDriftPort = deps.skillCatalogDriftPort;
+    this.acLevelTraceabilityPort = deps.acLevelTraceabilityPort;
     this.pathRoots = deps.pathRoots ?? {
       inceptionRoot: 'docs/inception',
       designRoot: 'docs/product/construction',
@@ -263,6 +269,23 @@ export class RunL4ValidatorsUseCase {
       }
     }
 
+    if (this.acLevelTraceabilityPort) {
+      const l4007Result = overrideMap.get('L4-007');
+      // default-OFF: L4-007 が enabled validator set に含まれず skip される場合は上書きしない。
+      if (l4007Result && !l4007Result.skipped) {
+        const snapshot = await this.acLevelTraceabilityPort.collect();
+        const report = this.acLevelTraceabilityService.check(snapshot);
+        // advisory-only: finding があっても severity は必ず warning。overall gate は
+        // failOnWarning=false（既定）で PASS のまま（ADR-019 §5）。finding が無ければ PASS。
+        overrideMap.set(
+          'L4-007',
+          report.hasFindings()
+            ? ValidationResult.fail(ValidatorId.create('L4-007'), report.toHarnessErrors(), 0)
+            : ValidationResult.pass(ValidatorId.create('L4-007'), 0),
+        );
+      }
+    }
+
     const finalResults = definitions.map(
       (definition) => overrideMap.get(definition.validatorId.value) ?? ValidationResult.skip(definition.validatorId),
     );

package/scripts/harness/validator-system/application/use-cases/run-quick-mode-usecase.ts

@@ -5,9 +5,9 @@
  * RunQuickModeUseCase — H08-04: Quickモード緩和実行
  */
 import { ValidatorId } from '../../domain/value-objects/validator-id.js';
-import { ValidatorRegistry } from '../../domain/services/validator-registry.js';
-import { ValidatorExecutionService, ValidatorExecutionError } from '../../domain/services/validator-execution-service.js';
-import { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
+import type { ValidatorRegistry } from '../../domain/services/validator-registry.js';
+import { type ValidatorExecutionService, ValidatorExecutionError } from '../../domain/services/validator-execution-service.js';
+import type { ValidationResultContractMapper } from '../mappers/validation-result-contract-mapper.js';
 import type { ValidationResultContract } from '../dto/validation-result-contract.js';
 import type { RunQuickModeInput } from '../dto/run-quick-mode-input.js';
 import type { ValidatorConfigPort } from '../../domain/ports/validator-config-port.js';

package/scripts/harness/validator-system/composition-root.ts

@@ -29,6 +29,7 @@ import { FileSystemContractTraceabilityPolicyAdapter } from './infrastructure/ad
 import { PhaseDependencyPhaseGatePolicyAdapter } from './infrastructure/adapters/phase-dependency-phase-gate-policy-adapter.js';
 import { TraceabilityMetadataPolicyAdapter } from './infrastructure/adapters/traceability-metadata-policy-adapter.js';
 import { NyquistAcCoveragePolicyAdapter } from './infrastructure/adapters/nyquist-ac-coverage-policy-adapter.js';
+import { NyquistAcBoundCoveragePolicyAdapter } from './infrastructure/adapters/nyquist-ac-bound-coverage-policy-adapter.js';
 import { JsonCoverageReportAdapter } from './infrastructure/adapters/json-coverage-report-adapter.js';
 import { BiomeAstTestQualityAnalyzerAdapter } from './infrastructure/adapters/biome-ast-test-quality-analyzer-adapter.js';
 import { FileSystemSecurityPatternScannerAdapter } from './infrastructure/adapters/file-system-security-pattern-scanner-adapter.js';
@@ -39,6 +40,7 @@ import { AdrFoundationReferenceAdapter } from './infrastructure/adapters/adr-fou
 import { ImportGraphSourceAnalysisAdapter } from './infrastructure/adapters/import-graph-source-analysis-adapter.js';
 import { FileSystemArchitectureSemanticSourceAdapter } from './infrastructure/adapters/file-system-architecture-semantic-source-adapter.js';
 import { FileSystemSkillCatalogDriftAdapter } from './infrastructure/adapters/file-system-skill-catalog-drift-adapter.js';
+import { NyquistAcLevelTraceabilityAdapter } from './infrastructure/adapters/nyquist-ac-level-traceability-adapter.js';
 import { FileSystemWorkItemReflectionAdapter } from './infrastructure/adapters/file-system-work-item-reflection-adapter.js';
 import { DriftDetectionService } from './domain/services/l4/drift-detection-service.js';
 import { ConsistencyCheckService } from './domain/services/l4/consistency-check-service.js';
@@ -111,12 +113,18 @@ export function buildDefaultRegistry(): ValidatorRegistry {
     createDef('L3-002', 'L3', 'strictOnly'),
     createDef('L3-003', 'L3', 'always'),
     createDef('L3-004', 'L3', 'always', 'AcCoveragePolicyPort'),
+    // WI-227 / H16-03: L3-005 (ac-bound-coverage) は registry には登録するが
+    // default-OFF（DEFAULT_CONFIG.layers.L3.validators に含めない）。fail-closed / opt-in。
+    createDef('L3-005', 'L3', 'always', 'AcBoundCoveragePolicyPort'),
     createDef('L4-001', 'L4', 'always'),
     createDef('L4-002', 'L4', 'always'),
     createDef('L4-003', 'L4', 'strictOnly'),
     createDef('L4-004', 'L4', 'always'),
     createDef('L4-005', 'L4', 'always'),
     createDef('L4-006', 'L4', 'always', 'SkillCatalogDriftPort'),
+    // WI-222 / HF2-05: L4-007 (ac-level-traceability) は registry には登録するが
+    // default-OFF（DEFAULT_CONFIG.layers.L4.validators に含めない）。advisory-only。
+    createDef('L4-007', 'L4', 'always', 'AcLevelTraceabilityPort'),
   ];
 
   return new ValidatorRegistry(definitions);
@@ -150,6 +158,8 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
   const phaseGatePolicyPort = new PhaseDependencyPhaseGatePolicyAdapter();
   const metadataPolicyPort = new TraceabilityMetadataPolicyAdapter();
   const acCoveragePolicyPort = new NyquistAcCoveragePolicyAdapter();
+  // WI-227 / H16-03: L3-005 (ac-bound-coverage, fail-closed, default-OFF) 用の adapter。
+  const acBoundCoveragePolicyPort = new NyquistAcBoundCoveragePolicyAdapter();
   // L3-003: テストカバレッジレポート（vitest --coverage の json-summary 出力）を読み取る。
   // 未配線だと L3-003 は装飾的な pass になり 90% 閾値が形骸化するため必ず配線する。
   const coverageReportPort = new JsonCoverageReportAdapter(
@@ -189,15 +199,21 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
     contractTraceabilityPolicyPort,
   });
 
+  // WI-227 / H16-03: L3-005 のスコープ対象 story-id を config から取得（既定 []）。
+  const acBoundStories =
+    (configData.layers?.L3 as { acBoundStories?: readonly string[] } | undefined)?.acBoundStories ?? [];
+
   const runL3ValidatorsUseCase = new RunL3ValidatorsUseCase({
     validatorRegistry: registry,
     validatorExecutionService: executionService,
     validatorConfigPort: configPort,
     contractMapper,
     acCoveragePolicyPort,
+    acBoundCoveragePolicyPort,
     coverageReportPort,
     securityScannerPort,
     performanceScannerPort,
+    acBoundStories,
   });
 
   const markdownDesignDocumentPort = new MarkdownDesignDocumentAdapter(docsRoot);
@@ -206,6 +222,11 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
   const sourceAnalysisPort = new ImportGraphSourceAnalysisAdapter();
   const architectureSemanticSourcePort = new FileSystemArchitectureSemanticSourceAdapter();
   const skillCatalogDriftPort = new FileSystemSkillCatalogDriftAdapter(cwd);
+  // WI-222 / HF2-05: L4-007 (advisory) 用の AC 単位トレーサビリティ port。
+  // matrix path は L3-004 と同じ config キーを参照する。
+  const acLevelTraceabilityPort = new NyquistAcLevelTraceabilityAdapter({
+    matrixFilePath: configData.layers?.L3?.requirementMatrixPath ?? '.harness/requirement-test-matrix.json',
+  });
   const workItemReflectionPort = new FileSystemWorkItemReflectionAdapter(cwd);
 
   const driftDetectionService = new DriftDetectionService({
@@ -236,6 +257,7 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
     deadCodeDetectionService,
     architectureSemanticAnalysisService,
     skillCatalogDriftPort,
+    acLevelTraceabilityPort,
     pathRoots: {
       inceptionRoot: inceptionDocsRoot,
       designRoot: designDocsRoot,

package/scripts/harness/validator-system/domain/ports/ac-bound-coverage-policy-port.ts

@@ -0,0 +1,22 @@
+/**
+ * @layer domain
+ * @unit validator-system
+ * @work-item-id WI-227
+ *
+ * AcBoundCoveragePolicyPort — L3-005（AC-bound coverage, fail-closed, default-OFF）
+ *
+ * L3-004（story-level の AC 網羅ゲート）とは独立した per-AC binding ゲート。
+ * `acBoundStories`（スコープ）内の各 story について、全 linked AC が
+ * ≥1 の `binding:"ac"` テスト参照（fileFallbackOnly===0）を持つことを検査する。
+ */
+import type { HarnessErrorLike } from '../value-objects/validation-result.js';
+
+export interface AcBoundCoveragePolicyPort {
+  checkAcBoundCoverage(context: {
+    matrixFilePath?: string;
+    acBoundStories: readonly string[];
+  }): Promise<{
+    passed: boolean;
+    errors: readonly HarnessErrorLike[];
+  }>;
+}

package/scripts/harness/validator-system/domain/ports/ac-level-traceability-port.ts

@@ -0,0 +1,14 @@
+/**
+ * @layer domain
+ * @unit validator-system
+ * @work-item-id WI-222
+ *
+ * HF2-05 / L4-007: nyquist-validation のマトリクス生成レポートを AC 単位トレーサビリティの
+ * snapshot へ橋渡しする port。実装（infrastructure adapter）が nyquist の generate-matrix
+ * usecase を実行し、acLevelCoverage / fileFallbackOnlyAcs / orphanAcTags を収集する。
+ */
+import type { AcLevelTraceabilitySnapshot } from '../services/l4/ac-level-traceability-service.js';
+
+export interface AcLevelTraceabilityPort {
+  collect(): Promise<AcLevelTraceabilitySnapshot>;
+}