phasegate 0.167.0 → 0.172.0

package/CHANGELOG.md

@@ -7,6 +7,50 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.171.0] - 2026-07-05
+
+### Added
+
+- **WI-227 / H16-03 — L3-005 "AC-bound coverage" gate (fail-closed, default-OFF)** — new opt-in L3 validator that, for each story in `layers.L3.acBoundStories`, fail-closed verifies that **every** linked AC has ≥1 `binding:"ac"` test reference (`fileFallbackOnly===0`). Unlike L3-004 (story-level) this is per-AC binding. `ac-bound-coverage-policy-port.ts` (domain) + `nyquist-ac-bound-coverage-policy-adapter.ts` (infrastructure, reads the matrix and fail-closes on absent/parse-fail); `ValidatorId` gains `L3-005 → ac-bound-coverage`; `RunL3ValidatorsUseCase` gains an L3-005 override block mirroring L3-004 (only when config enables L3-005). **NOT** added to `DEFAULT_CONFIG` nor to standard/strict presets (default-OFF opt-in). config alias `ac-bound-coverage → L3-005`; new `layers.L3.acBoundStories?: string[]` (additive-safe; existing configs still load).
+- **WI-227 / H16-03 — attestation `acBoundScope`** — attestation records now carry a machine-readable `acBoundScope: string[]` (sorted; stories that are genuinely ac-bound AND in scope AND passing). New pure domain `AcBoundScopeService.derive(matrix, allowlist)`; new application ports `MatrixSourcePort` / `AcBoundAllowlistPort` with `FileSystemMatrixSourceAdapter` / `ConfigAcBoundAllowlistAdapter`. `acBoundScope` is included in the canonical payload (covered by `attestationDigest`) and in `equals()`/`create/reconstruct/seal`. **verify RE-DERIVES** `acBoundScope` from the stored (hash-verified) matrix + config allowlist and compares to stored (anti-laundering); unreadable/unparsable re-derivation inputs → fail-closed (exit 1). `GranularityDerivationService` is UNTOUCHED — `granularity.traceability.level` stays `"file"` (acBoundScope is an independent per-story dimension, no global flip).
+- **Attestation readiness docs (debt repayment)** — authored the three readiness docs that had been missing for the attestation unit since 手1/v0.165.0: `docs/product/construction/attestation/unit_test_design.md`, `it_test_design.md`, `coverage_report.md`. Coverage is measured (vitest v8: 83.53% statements/lines, 78.08% branches, 97.75% functions on the pre-slice baseline) with the exact reproduction command recorded; numbers are real, not fabricated.
+- **`l3-005-ac-bound-ratchet.md`** — new honesty/ratchet doc mirroring the l3-004 R-table; first scope `["HF2-05"]`, records H05-02 excluded (legacy) and H06-03 partial (only AC-4).
+
+### Changed
+
+- **Self-repo `phasegate.config.json` only** — `layers.L3.validators` gains `L3-005` and `layers.L3.acBoundStories: ["HF2-05"]`. Product presets (`standard.json`/`strict.json`) and `DEFAULT_CONFIG` are untouched — no impact on other users. HF2-05 is genuinely ac-bound (all 6 ACs have ≥1 `binding:"ac"`), so enabling L3-005 keeps self-repo CI green.
+- Design docs updated design-first: validator-system `logical_design.md` (§1.3, §2.1.1 L3-005 row, §3.4.2 note, §4.8b adapter), attestation `logical_design.md` (§1.3, §1.4.1 acBoundScope-in-canonical note, §1.4.3 record format, §4.4/§4.5/§4.6) and `domain_model.md` (INV-8), `user_stories.md` (H16-03 + summary tables), config schemas v2/v3 (`acBoundStories`).
+
+## [0.170.0] - 2026-07-05
+
+### Added
+
+- **WI-226 / H05-02 — real-corpus ADR integration test (honest-partial)** — closes the honesty gap recorded in `l3-004-traceability-ratchet.md` §6b ("no test verifies the real `docs/ADR/` corpus exists / conforms / has valid status"). New `scripts/harness/__tests__/integration/adr-foundation/real-adr-corpus.it.test.ts` wires the **real** `createAdrFoundationModule(<repoRoot>/docs/ADR)` pipeline against the **committed** corpus (no `mkdtemp`, repoRoot resolved from the test file location) and **fail-closed verifies** four SCOPED properties: (1) canonical (`NNN-slug.md`) ADRs are discovered with 019/020/021 present (membership + floor, property-based so ADR-022 won't break it); (2) every discovered ADR conforms via `validate-all` (zero violations); (3) each discovered ADR's status ∈ {Accepted, Proposed}; (4) the **≥18 legacy `ADR-NNN-*.md` files exist on disk but are provably excluded from discovery** — pinning the known gate-invisibility limitation as a tested invariant.
+- **Honest-partial framing — H05-02 NOT over-claimed** — the new file carries **only** a file-level `// @story H05-02` tag and **deliberately no `// @ac H05-02-N` tags**. The §12 Key Decisions that H05-02 AC-1/2/3 enumerate live mostly in the legacy (gate-invisible) corpus, so the test genuinely verifies only the discoverable canonical corpus + the legacy-exclusion invariant — it does not fully assert AC-1/2/3 as written. Adding `@ac` tags would flip those ACs to `binding:"ac"` and over-claim per-AC verification of an unverified corpus. **H05-02 AC-1/2/3 remain `fileFallbackOnly`** (confirmed via `phasegate:generate-matrix`: all H05-02 references stay `binding:"file"`). Per-AC binding is deferred until the legacy corpus is normalized to canonical format (adr-gate-normalization-followup.md); H05-02 stays out of any future L3-005 "AC-bound coverage" scope until then. `l3-004-traceability-ratchet.md` §6b updated to record the now-existing real-corpus test and the retained fileFallbackOnly status. No gate behavior, matrix byte-equality, or attestation granularity (`level:"file"`) changed.
+
+## [0.169.0] - 2026-07-05
+
+### Fixed
+
+- **WI-225 / H06-03 AC-4 — severity contract violation message now carries its ADR basis (correct ADR-021)** — `SeverityDowngradeViolationError` previously threw a message stating only the violation content (`default=…` / `requested=…`) but **omitted the ADR reference** that H06-03 AC-4 requires ("契約違反時のエラーメッセージに違反内容と根拠（ADR参照）が含まれる"). The message now appends `根拠: ADR-021`. A new **ADR-021 "severity 契約 — 格下げ禁止"** (`docs/ADR/021-severity-contract.md`, status Accepted) forward-documents the existing downgrade-prohibition rule (implemented in `SeverityContractEnforcer`, specified in `harness-error/logical_design.md` §2.3.3 / §4.6) and is the ADR that actually decides the prohibition. This corrects a prior draft that referenced **ADR-017 by mistake** — ADR-017 governs warning-severity aggregation (`failOnWarning`), **not** the downgrade prohibition; citing it was a plausible-but-wrong reference of exactly the kind phasegate exists to prevent. The domain unit test (`severity-contract-enforcer.test.ts`) asserts the message contains the violation content **and** `ADR-021`. Constructor signature is unchanged (single call site is the enforcer); no API contract change.
+
+### Changed
+
+- **Honest `@ac` backfill — 3 ACs promoted to `binding:"ac"` (no new gate, no attestation change)** — prerequisite work for a future fail-closed L3-005 gate. Global `acLevelCoverage.acBound` moves **4 → 7**:
+  - **H06-03 AC-4** — tagged (`// @ac AC-4`) on the new severity-contract-enforcer assertion above.
+  - **HF2-05 AC-1 / AC-2** — tagged on the tracer's own genuine assertions in `type-script-test-reference-source-adapter-ac.it.test.ts` using the **absolute** form (`// @ac HF2-05-1` / `// @ac HF2-05-2`). Assessed as SAFE: the file's `storyCount` is 9 (real `@story HF2-05` plus fixture `@story` string-literals), so the **relative** form (`AC-N`) would become a `relative-multi-story` orphan; the absolute form binds against the file's real storyId and was empirically confirmed to add exactly 2 correct `binding:"ac"` references with **zero** new spurious/orphan matrix entries (total refs and orphan-bearing refs unchanged). **HF2-05 is now `fileFallbackOnly === 0`** (all 6 ACs `binding:"ac"`).
+  - **H05-02 left untouched** (AC-1/2/3 remain `fileFallbackOnly`); its genuine test is planned separately.
+  - No `binding` was faked; L3-004 verdict and attestation granularity (`level:"file"`) are unchanged.
+
+## [0.168.0] - 2026-07-05
+
+### Fixed
+
+- **WI-223 — biome dogfooding cleanup (`nyquist-validation` / `validator-system` units)** — cleared pre-existing repo-wide biome lint debt in files not touched by recent work. All fixes are mechanical and behavior-preserving:
+  - `lint/complexity/useLiteralKeys` (58 diagnostics) — converted string-literal computed member access (`obj['stories']`) to dot access (`obj.stories`) where the key is a valid identifier, across the coverage/impact use-cases, `matrix-validation-service`, the AJV adapter, the coverage-threshold adapter, the JSON coverage-report adapter, and the validation-result contract handler.
+  - `lint/style/useImportType` (27 diagnostics) — marked type-only imports with `import type` (or `type` specifiers) across `nyquist-validation` domain entities/aggregates/services/value-objects and `validator-system` L1–L4 use-cases and domain services/value-objects.
+  - `lint/complexity/noStaticOnlyClass` (2 diagnostics) — converted the static-only `CoverageResultMapper` and `ImpactAnalysisResultMapper` classes into plain exported functions (`toCalculateCoverageOutput`, `toAnalyzeImpactOutput`) and updated their single call sites in `calculate-coverage-usecase` / `analyze-impact-usecase`. No public behavior change.
+
 ## [0.167.0] - 2026-07-05
 
 ### Added

package/docs/ADR/021-severity-contract.md

@@ -0,0 +1,46 @@
+---
+adr_id: "021"
+title: "severity 契約 — 格下げ禁止"
+status: Accepted
+date: 2026-07-05
+---
+
+# severity 契約 — 格下げ禁止
+
+## Context
+
+phasegate は品質防御ツールであり、その検査結果 severity（`error` / `warning`）はゲートの通過可否を左右する。各 error code は canonical カタログ（`ErrorDefinition`）に `defaultSeverity` を持ち、これがその code の最小限の重大度を規定する。
+
+呼び出し側（orchestration 層 / CLI）は effective severity を明示的に要求できるが、ここに **severity を静かに弱めてゲートをすり抜ける** という抜け道のリスクがある。例えば `defaultSeverity=error` の違反を `warning` に格下げすれば、`--fail-on-error` 系の終了コード判定を回避できてしまう。これは「チェッカーは常に機械であり、trust は機械的・再現可能な検査のみが付与する」という ADR-019 の trust 境界、および「単方向の強制は交渉不可」という ADR-020 の単方向規律の精神に反する — severity の格下げは、検査が既に検出した違反を事後的に無力化する行為だからである。
+
+この格下げ禁止ルールの実体は既に `scripts/harness/harness-error/domain/services/severity-contract-enforcer.ts`（`SeverityContractEnforcer`）に実装され、`docs/product/construction/harness-error/logical_design.md` §2.3.3 / §4.6 に規定されている。しかし ADR としては未文書化であり、`SeverityDowngradeViolationError` のメッセージは根拠として ADR-017（warning severity の集計 / `failOnWarning`）を誤って参照していた。ADR-017 は集計側の決定であって格下げ禁止を定めるものではない。本 ADR-021 は、この既存ルールを前方文書化し、格下げ禁止を実際に決定する ADR として位置づける。
+
+## Decision
+
+error の effective severity を、その canonical `defaultSeverity` より **下位へ格下げすることを禁止する。**
+
+- `SeverityContractEnforcer.resolveEffectiveSeverity(requested, defaultSeverity)` は次のように振る舞う。
+  1. `requested` 未指定なら `defaultSeverity` を返す。
+  2. `requested` が `defaultSeverity` より高位（格上げ）なら `requested` を返す — 格上げは許容する。
+  3. `requested` が `defaultSeverity` と同一なら `requested` を返す。
+  4. それ以外（格下げ）は `SeverityDowngradeViolationError` を throw する。
+- 不変条件として `error -> warning` の格下げは常に拒否される。
+- 格下げ違反時のメッセージは **違反内容（default / requested の両 severity）と根拠（本 ADR-021）** を必ず含む。これにより違反の再現・監査が機械的に可能になる。
+
+trust 境界の性質上（ADR-019）、この判定は LLM を一切用いず、値の比較のみで機械的に完結する。
+
+## Consequences
+
+- severity が黙って弱められてゲートをすり抜けることが構造的に不可能になる。attestation の「green」が severity の観点でも信頼できる。
+- 呼び出し側は severity を格上げ（より厳格化）することはできるが、格下げはできない。厳格化の一方向のみが許容され、ADR-020 の単方向規律と整合する。
+- `defaultSeverity` を運用上どうしても下げたい正当なケースがある場合、それは呼び出し側での格下げではなく **canonical カタログ（`ErrorDefinition`）の `defaultSeverity` そのものを前方フローで変更する** ことでしか実現できない。これは意図的な設計判断を前方ゲート経由で通すことを強制する。
+
+## Alternatives
+
+1. **格下げを警告のみとし throw しない** — 事実上の格下げを許すため抜け道が残る。品質防御の目的に反するため不採用。
+
+2. **格下げ禁止を throw で強制（本決定で採用）** — 格下げは `SeverityDowngradeViolationError` を throw し、メッセージに違反内容と根拠 ADR-021 を含める。
+
+3. **呼び出し側で任意の severity 上書きを許容し、カタログを advisory 扱いにする** — canonical カタログの規範性が失われ、severity 契約が有名無実化するため不採用。
+
+関連: ADR-019（「AI 非依存」の境界 — trust 境界は機械的）、ADR-020（単方向規律と逆流学習）、ADR-006（エージェント非依存設計原則）、ADR-017（warning severity の集計 / `failOnWarning` — 集計側の別決定）、`docs/product/construction/harness-error/logical_design.md` §2.3.3 / §4.6。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phasegate",
-  "version": "0.167.0",
+  "version": "0.172.0",
   "packageManager": "pnpm@10.30.1",
   "description": "Phasegate — AI-agnostic quality defense toolkit. Enforces structural integrity between design intent and code.",
   "license": "MIT",

package/scripts/harness/attestation/application/dto/attestation-document.ts

@@ -39,6 +39,8 @@ export interface AttestationDocument {
   readonly granularity: {
     readonly traceability: AttestationDocumentGranularityClaim;
   };
+  /** H16-03: 実際に ac-bound かつ L3-005 スコープ内で pass した story-id（昇順）。 */
+  readonly acBoundScope: string[];
   readonly metadata: {
     readonly producedAt: string;
     readonly producer: string;

package/scripts/harness/attestation/application/dto/verify-attestation-output.ts

@@ -15,6 +15,8 @@ export interface VerifyAttestationChecks {
   readonly inputHashes: boolean;
   /** granularity を validatorSet から再導出 == 格納値（anti-laundering） */
   readonly granularity: boolean;
+  /** acBoundScope を stored matrix + allowlist から再導出 == 格納値（anti-laundering, H16-03） */
+  readonly acBoundScope: boolean;
 }
 
 /**

package/scripts/harness/attestation/application/mappers/attestation-record-mapper.ts

@@ -75,6 +75,7 @@ export class AttestationRecordMapper {
           knownLimitations: [...record.granularity.traceability.knownLimitations],
         },
       },
+      acBoundScope: [...record.acBoundScope],
       metadata: {
         producedAt: record.metadata.producedAt,
         producer: record.metadata.producer,
@@ -153,6 +154,8 @@ export class AttestationRecordMapper {
     }
     const traceability = this.toGranularityClaim(granularity.traceability);
 
+    const acBoundScope = this.toAcBoundScope(doc.acBoundScope);
+
     const metadata = doc.metadata;
     if (!isObject(metadata)) {
       throw new MalformedAttestationError("metadata must be an object");
@@ -181,6 +184,7 @@ export class AttestationRecordMapper {
         gitCommit,
       },
       signature: this.toSignatureBlock(mode, attestationDigest, signature),
+      acBoundScope,
     };
 
     // verify 用の再構築: INV-1/INV-3 は verify usecase が機械的チェックとして検出するため
@@ -188,6 +192,15 @@ export class AttestationRecordMapper {
     return AttestationRecord.reconstruct(props);
   }
 
+  private toAcBoundScope(v: unknown): string[] {
+    // H16-03: 後方互換のため未設定は [] とみなす（additive-safe）。
+    if (v === undefined || v === null) return [];
+    if (!Array.isArray(v)) {
+      throw new MalformedAttestationError("acBoundScope must be an array of strings");
+    }
+    return v.map((item, i) => requireString(item, `acBoundScope[${i}]`));
+  }
+
   private toDigest(v: unknown, field: string): Digest {
     const raw = requireString(v, field);
     try {

package/scripts/harness/attestation/application/ports/ac-bound-allowlist-port.ts

@@ -0,0 +1,12 @@
+// @unit attestation
+// @layer application
+
+/**
+ * AcBoundAllowlistPort（H16-03 / WI-227）
+ *
+ * acBoundScope 導出のスコープ（`layers.L3.acBoundStories`）を供給する application ポート。
+ */
+export interface AcBoundAllowlistPort {
+  /** スコープ対象 story-id を返す（未設定は []）。 */
+  getAcBoundStories(): Promise<readonly string[]>;
+}

package/scripts/harness/attestation/application/ports/matrix-source-port.ts

@@ -0,0 +1,16 @@
+// @unit attestation
+// @layer application
+
+/**
+ * MatrixSourcePort（H16-03 / WI-227）
+ *
+ * acBoundScope 導出用の requirement-test-matrix を供給する application ポート。
+ * 読み込み/parse に失敗した場合は throw する（呼び出し側 usecase が fail-closed に変換する）。
+ */
+export interface MatrixSourcePort {
+  /**
+   * @param matrixFilePath matrix のパス（省略時は adapter の既定パス）
+   * @returns parse 済みの matrix plain object
+   */
+  load(matrixFilePath?: string): Promise<unknown>;
+}

package/scripts/harness/attestation/application/usecases/produce-attestation-usecase.ts

@@ -4,6 +4,7 @@
 import { AttestationRecord, type GateResult, type SourceEntry } from "../../domain/entities/attestation-record.js";
 import type { ContentHasherPort } from "../../domain/ports/content-hasher-port.js";
 import type { GranularityDerivationService } from "../../domain/services/granularity-derivation-service.js";
+import type { AcBoundScopeService } from "../../domain/services/ac-bound-scope-service.js";
 import { SignatureBlock } from "../../domain/value-objects/signature-block.js";
 import { ValidatorOutcome } from "../../domain/value-objects/validator-outcome.js";
 import type { AttestationDocument } from "../dto/attestation-document.js";
@@ -12,6 +13,8 @@ import type { AttestationRecordMapper } from "../mappers/attestation-record-mapp
 import type { AttestationRepositoryPort } from "../ports/attestation-repository-port.js";
 import type { GateResultSourcePort } from "../ports/gate-result-source-port.js";
 import type { SourceDigesterPort } from "../ports/source-digester-port.js";
+import type { MatrixSourcePort } from "../ports/matrix-source-port.js";
+import type { AcBoundAllowlistPort } from "../ports/ac-bound-allowlist-port.js";
 
 const SCHEMA_VERSION = "phasegate-attestation/v1";
 const PREDICATE_TYPE = "https://phasegate.dev/attestation/gate-run/v1";
@@ -35,6 +38,14 @@ export interface ProduceAttestationDeps {
   readonly clock?: () => Date;
   /** 入力 source パス群（既定は config + matrix）。 */
   readonly inputSourcePaths?: readonly string[];
+  /** H16-03: acBoundScope 導出用 matrix 供給（省略時は acBoundScope=[]）。 */
+  readonly matrixSource?: MatrixSourcePort;
+  /** H16-03: acBoundScope 導出用 allowlist 供給（省略時は acBoundScope=[]）。 */
+  readonly allowlist?: AcBoundAllowlistPort;
+  /** H16-03: acBoundScope 導出サービス（省略時は acBoundScope=[]）。 */
+  readonly acBoundScopeService?: AcBoundScopeService;
+  /** H16-03: matrix 供給元パス（inputSourcePaths のうち matrix にあたるもの。既定は 2 番目の source）。 */
+  readonly matrixFilePath?: string;
 }
 
 export interface ProduceAttestationResult {
@@ -76,10 +87,15 @@ export class ProduceAttestationUseCase {
       producedAt: "1970-01-01T00:00:00Z",
       producer: `phasegate-attestation/${this.deps.pkgVersion}`,
       gitCommit: null,
+      acBoundScope: [],
     });
     const inputDigest = preInputRecord.computeInputDigest(this.deps.hasher);
 
     // 5. granularity 導出（domain service）
+    // 5b. acBoundScope 導出（H16-03）: matrixSource + allowlist + AcBoundScopeService。
+    //     いずれか未配線なら acBoundScope=[]。
+    const acBoundScope = await this.deriveAcBoundScope();
+
     // 6. metadata 構築
     const now = (this.deps.clock ?? (() => new Date()))().toISOString();
     const gitCommit = await this.deps.gitCommitProvider();
@@ -93,6 +109,7 @@ export class ProduceAttestationUseCase {
       producedAt: now,
       producer: `phasegate-attestation/${this.deps.pkgVersion}`,
       gitCommit,
+      acBoundScope,
     });
     const sealed = record.seal(this.deps.hasher);
 
@@ -112,6 +129,7 @@ export class ProduceAttestationUseCase {
     producedAt: string;
     producer: string;
     gitCommit: string | null;
+    acBoundScope: readonly string[];
   }): AttestationRecord {
     const granularity = this.deps.granularityService.derive(args.validatorSet);
     return AttestationRecord.create({
@@ -135,9 +153,30 @@ export class ProduceAttestationUseCase {
       },
       // 仮の unsigned-poc block（seal 前）。seal が正しい digest で置換する。
       signature: SignatureBlock.unsignedPoc(args.inputDigest),
+      acBoundScope: args.acBoundScope,
     });
   }
 
+  /**
+   * H16-03: matrixSource + allowlist + AcBoundScopeService から acBoundScope を導出する。
+   * いずれかのポート/サービスが未配線なら [] を返す（additive-safe）。
+   * matrix の読み込みに失敗した場合も [] を返す（produce は attest の記録が主目的であり、
+   * 過大主張の防止は verify の再導出比較が担保する）。
+   */
+  private async deriveAcBoundScope(): Promise<string[]> {
+    if (!this.deps.matrixSource || !this.deps.allowlist || !this.deps.acBoundScopeService) {
+      return [];
+    }
+    try {
+      const allowlist = await this.deps.allowlist.getAcBoundStories();
+      if (allowlist.length === 0) return [];
+      const matrix = await this.deps.matrixSource.load(this.deps.matrixFilePath);
+      return this.deps.acBoundScopeService.derive(matrix, allowlist);
+    } catch {
+      return [];
+    }
+  }
+
   private async buildSources(): Promise<SourceEntry[]> {
     const paths = this.deps.inputSourcePaths ?? DEFAULT_INPUT_SOURCES;
     const sources: SourceEntry[] = [];

package/scripts/harness/attestation/application/usecases/verify-attestation-usecase.ts

@@ -4,11 +4,14 @@
 import type { AttestationRecord } from "../../domain/entities/attestation-record.js";
 import type { ContentHasherPort } from "../../domain/ports/content-hasher-port.js";
 import type { GranularityDerivationService } from "../../domain/services/granularity-derivation-service.js";
+import type { AcBoundScopeService } from "../../domain/services/ac-bound-scope-service.js";
 import type { VerifyAttestationInput } from "../dto/verify-attestation-input.js";
 import type { VerifyAttestationChecks, VerifyAttestationOutput } from "../dto/verify-attestation-output.js";
 import type { AttestationRecordMapper } from "../mappers/attestation-record-mapper.js";
 import type { AttestationRepositoryPort } from "../ports/attestation-repository-port.js";
 import type { SourceDigesterPort } from "../ports/source-digester-port.js";
+import type { MatrixSourcePort } from "../ports/matrix-source-port.js";
+import type { AcBoundAllowlistPort } from "../ports/ac-bound-allowlist-port.js";
 
 export interface VerifyAttestationDeps {
   readonly repository: AttestationRepositoryPort;
@@ -16,6 +19,12 @@ export interface VerifyAttestationDeps {
   readonly hasher: ContentHasherPort;
   readonly granularityService: GranularityDerivationService;
   readonly mapper: AttestationRecordMapper;
+  /** H16-03: acBoundScope 再導出用（省略時は空 allowlist として扱い、格納が [] のときのみ合格）。 */
+  readonly matrixSource?: MatrixSourcePort;
+  readonly allowlist?: AcBoundAllowlistPort;
+  readonly acBoundScopeService?: AcBoundScopeService;
+  /** H16-03: matrix パスの明示指定（省略時は inputs.sources から解決）。 */
+  readonly matrixFilePath?: string;
 }
 
 export interface VerifyAttestationResult {
@@ -96,14 +105,18 @@ export class VerifyAttestationUseCase {
       mismatches.push("granularity mismatch: stored granularity does not match re-derived value");
     }
 
+    // 6b. acBoundScope を stored matrix + allowlist から再導出 == 格納値（anti-laundering, H16-03）
+    const acBoundScopeOk = await this.checkAcBoundScope(record, mismatches);
+
     const checks: VerifyAttestationChecks = {
       schema: true,
       mode: true,
       attestationDigest: attestationDigestOk,
       inputHashes: inputHashesOk,
       granularity: granularityOk,
+      acBoundScope: acBoundScopeOk,
     };
-    const ok = attestationDigestOk && inputHashesOk && granularityOk;
+    const ok = attestationDigestOk && inputHashesOk && granularityOk && acBoundScopeOk;
 
     return {
       output: { ok, checks, mismatches },
@@ -118,10 +131,56 @@ export class VerifyAttestationUseCase {
       attestationDigest: false,
       inputHashes: false,
       granularity: false,
+      acBoundScope: false,
       ...partialChecks,
     };
     return { output: { ok: false, checks, mismatches }, exitCode: 2 };
   }
+
+  /**
+   * H16-03: acBoundScope を stored matrix + config allowlist から再導出し格納値と比較する（anti-laundering）。
+   *
+   * - ポート/サービスが未配線: 格納 acBoundScope が [] のときのみ合格（後方互換。空 allowlist 相当）。
+   * - matrix/allowlist が読めない・parse 不能: fail-closed（false, Q2）。
+   * - matrix パスは inputs.sources（ハッシュ検証済み入力）から解決する（Q3）。
+   */
+  private async checkAcBoundScope(record: AttestationRecord, mismatches: string[]): Promise<boolean> {
+    const stored = [...record.acBoundScope].sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
+
+    if (!this.deps.matrixSource || !this.deps.allowlist || !this.deps.acBoundScopeService) {
+      // 未配線: 格納が空のときのみ合格（空 allowlist で再導出すれば [] になるため）。
+      if (stored.length === 0) return true;
+      mismatches.push("acBoundScope check unavailable: matrix source not wired but stored acBoundScope is non-empty");
+      return false;
+    }
+
+    let rederived: string[];
+    try {
+      const allowlist = await this.deps.allowlist.getAcBoundStories();
+      const matrixPath = this.deps.matrixFilePath ?? this.resolveMatrixPath(record);
+      const matrix = await this.deps.matrixSource.load(matrixPath);
+      rederived = this.deps.acBoundScopeService.derive(matrix, allowlist);
+    } catch (e) {
+      // FAIL-CLOSED（Q2）: 再導出入力が読めない/parse 不能は不一致として扱う。
+      mismatches.push(`acBoundScope re-derivation failed (fail-closed): ${errMsg(e)}`);
+      return false;
+    }
+
+    const rederivedSorted = [...rederived].sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
+    const equal = stored.length === rederivedSorted.length && stored.every((s, i) => s === rederivedSorted[i]);
+    if (!equal) {
+      mismatches.push(
+        `acBoundScope mismatch: stored [${stored.join(",")}], re-derived [${rederivedSorted.join(",")}]`,
+      );
+    }
+    return equal;
+  }
+
+  /** inputs.sources から matrix にあたるパスを解決する（Q3）。 */
+  private resolveMatrixPath(record: AttestationRecord): string | undefined {
+    const matrixEntry = record.inputs.sources.find((s) => s.path.includes("requirement-test-matrix"));
+    return matrixEntry?.path;
+  }
 }
 
 function errMsg(e: unknown): string {

package/scripts/harness/attestation/composition-root.ts

@@ -13,9 +13,12 @@ import { AttestationRecordMapper } from "./application/mappers/attestation-recor
 import { ProduceAttestationUseCase } from "./application/usecases/produce-attestation-usecase.js";
 import { VerifyAttestationUseCase } from "./application/usecases/verify-attestation-usecase.js";
 import { GranularityDerivationService } from "./domain/services/granularity-derivation-service.js";
+import { AcBoundScopeService } from "./domain/services/ac-bound-scope-service.js";
 import { CiCheckGateResultAdapter } from "./infrastructure/adapters/ci-check-gate-result-adapter.js";
 import { FileSystemAttestationRepositoryAdapter } from "./infrastructure/adapters/file-system-attestation-repository-adapter.js";
 import { FileSystemSourceDigesterAdapter } from "./infrastructure/adapters/file-system-source-digester-adapter.js";
+import { FileSystemMatrixSourceAdapter } from "./infrastructure/adapters/file-system-matrix-source-adapter.js";
+import { ConfigAcBoundAllowlistAdapter } from "./infrastructure/adapters/config-ac-bound-allowlist-adapter.js";
 import { NodeCryptoContentHasherAdapter } from "./infrastructure/adapters/node-crypto-content-hasher-adapter.js";
 import { AttestHandler } from "./presentation/handlers/attest-handler.js";
 import { VerifyAttestationHandler } from "./presentation/handlers/verify-attestation-handler.js";
@@ -51,8 +54,13 @@ export function createAttestationModule(rootDir: string, options?: AttestationMo
 
   // Domain services / mappers
   const granularityService = new GranularityDerivationService();
+  const acBoundScopeService = new AcBoundScopeService();
   const mapper = new AttestationRecordMapper();
 
+  // H16-03: acBoundScope 導出用 adapter（matrix 供給 + config allowlist）。
+  const matrixSource = new FileSystemMatrixSourceAdapter(rootDir);
+  const allowlist = new ConfigAcBoundAllowlistAdapter();
+
   const gitCommitProvider = options?.gitCommitProvider ?? (() => defaultGitCommitProvider(rootDir));
 
   // Use cases
@@ -66,6 +74,9 @@ export function createAttestationModule(rootDir: string, options?: AttestationMo
     gitCommitProvider,
     pkgVersion: options?.pkgVersion ?? "0.0.0",
     clock: options?.clock,
+    matrixSource,
+    allowlist,
+    acBoundScopeService,
   });
   const verifyUseCase = new VerifyAttestationUseCase({
     repository,
@@ -73,6 +84,9 @@ export function createAttestationModule(rootDir: string, options?: AttestationMo
     hasher,
     granularityService,
     mapper,
+    matrixSource,
+    allowlist,
+    acBoundScopeService,
   });
 
   // Handlers

package/scripts/harness/attestation/domain/entities/attestation-record.ts

@@ -41,6 +41,12 @@ export interface AttestationRecordProps {
   readonly granularity: { readonly traceability: GranularityClaim };
   readonly metadata: MetadataSection;
   readonly signature: SignatureBlock;
+  /**
+   * H16-03 / WI-227: 実際に ac-bound かつ L3-005 スコープ内で pass した story-id（昇順）。
+   * canonical payload に含まれ attestationDigest でカバーされる。granularity.level とは独立。
+   * 省略時は [] として扱う（additive-safe）。
+   */
+  readonly acBoundScope?: readonly string[];
 }
 
 /**
@@ -87,6 +93,7 @@ export class AttestationRecord {
   readonly granularity: { readonly traceability: GranularityClaim };
   readonly metadata: MetadataSection;
   readonly signature: SignatureBlock;
+  readonly acBoundScope: readonly string[];
 
   private constructor(props: AttestationRecordProps) {
     this.schemaVersion = props.schemaVersion;
@@ -96,6 +103,7 @@ export class AttestationRecord {
     this.granularity = props.granularity;
     this.metadata = props.metadata;
     this.signature = props.signature;
+    this.acBoundScope = Object.freeze([...(props.acBoundScope ?? [])]);
     Object.freeze(this);
   }
 
@@ -185,6 +193,8 @@ export class AttestationRecord {
           knownLimitations: [...this.granularity.traceability.knownLimitations],
         },
       },
+      // H16-03: acBoundScope は canonical payload に含める（attestationDigest でカバー）。
+      acBoundScope: [...this.acBoundScope],
       metadata: {
         producer: this.metadata.producer,
       },
@@ -211,6 +221,7 @@ export class AttestationRecord {
       granularity: this.granularity,
       metadata: this.metadata,
       signature: SignatureBlock.unsignedPoc(digest),
+      acBoundScope: this.acBoundScope,
     });
   }
 
@@ -234,6 +245,8 @@ export class AttestationRecord {
       return false;
     }
     if (!this.granularity.traceability.equals(other.granularity.traceability)) return false;
+    if (this.acBoundScope.length !== other.acBoundScope.length) return false;
+    if (!this.acBoundScope.every((s, i) => s === other.acBoundScope[i])) return false;
     if (!this.signature.equals(other.signature)) return false;
     return true;
   }

package/scripts/harness/attestation/domain/services/ac-bound-scope-service.ts

@@ -0,0 +1,80 @@
+// @unit attestation
+// @layer domain
+
+/**
+ * AcBoundScopeService（H16-03 / WI-227）
+ *
+ * requirement-test-matrix + allowlist から acBoundScope を機械導出する純粋・決定論サービス。
+ * 生成（produce）と検証（verify anti-laundering 再導出）で完全に同一の結果を返す（option-a determinism）。
+ *
+ * 資格条件（domain_model INV-8）: story が返り値に含まれる ⟺
+ *   (1) allowlist に含まれ、かつ
+ *   (2) その story の全 linked AC が ≥1 の `binding:"ac"` テスト参照を持つ（fileFallbackOnly===0）。
+ *
+ * anti-laundering: 導出は stored matrix + config allowlist のみを真実の源とする。格納 acBoundScope を
+ * 過大主張へ改竄しても、再導出は matrix/allowlist の honest な結果を返すため mismatch が検出される。
+ *
+ * `granularity.traceability.level`（"file"）とは完全に独立した別次元の主張である。
+ */
+
+interface MatrixTestReference {
+  readonly binding?: string;
+}
+
+interface MatrixAcMapping {
+  readonly testReferences?: readonly MatrixTestReference[];
+}
+
+interface MatrixStory {
+  readonly storyId?: string;
+  readonly storyMappings?: readonly MatrixAcMapping[];
+  readonly acMappings?: readonly MatrixAcMapping[];
+}
+
+export class AcBoundScopeService {
+  /**
+   * @param matrix requirement-test-matrix（parse 済み plain object）
+   * @param allowlist スコープ対象 story-id
+   * @returns 資格を満たす story-id の昇順ソート配列
+   */
+  derive(matrix: unknown, allowlist: readonly string[]): string[] {
+    const scope = new Set(allowlist);
+    if (scope.size === 0) return [];
+
+    const stories = this.extractStories(matrix);
+    const qualified: string[] = [];
+
+    for (const story of stories) {
+      const storyId = story.storyId ?? "";
+      if (!scope.has(storyId)) continue;
+
+      const acMappings = story.storyMappings ?? story.acMappings ?? [];
+      // linked AC が 1 件も無い場合は資格対象外（検証すべき AC が存在しない）。
+      if (acMappings.length === 0) continue;
+
+      const everyAcBound = acMappings.every((ac) => {
+        const refs = ac.testReferences ?? [];
+        // 未リンク AC（refs 空）があれば ac-bound 主張は成立しない。
+        if (refs.length === 0) return false;
+        return refs.some((ref) => ref.binding === "ac");
+      });
+
+      if (everyAcBound) {
+        qualified.push(storyId);
+      }
+    }
+
+    return qualified.sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));
+  }
+
+  private extractStories(matrix: unknown): readonly MatrixStory[] {
+    if (typeof matrix !== "object" || matrix === null) return [];
+    const obj = matrix as { stories?: unknown; storyMappings?: unknown };
+    const raw = Array.isArray(obj.stories)
+      ? obj.stories
+      : Array.isArray(obj.storyMappings)
+        ? obj.storyMappings
+        : [];
+    return raw as readonly MatrixStory[];
+  }
+}

package/scripts/harness/attestation/infrastructure/adapters/config-ac-bound-allowlist-adapter.ts

@@ -0,0 +1,23 @@
+// @unit attestation
+// @layer infrastructure
+
+import type { AcBoundAllowlistPort } from "../../application/ports/ac-bound-allowlist-port.js";
+
+/**
+ * AcBoundAllowlistPort の config-foundation 実装（H16-03 / WI-227）。
+ * resolved config の `layers.L3.acBoundStories`（既定 []）を供給する。
+ * config 不在・取得失敗時は [] を返す（acBoundScope は空になる）。
+ */
+export class ConfigAcBoundAllowlistAdapter implements AcBoundAllowlistPort {
+  async getAcBoundStories(): Promise<readonly string[]> {
+    try {
+      const { createConfigFoundationModule } = await import("../../../config-foundation/composition-root.js");
+      const configModule = createConfigFoundationModule();
+      const resolvedConfig = await configModule.usecases.loadResolvedConfigUseCase.execute();
+      const l3 = resolvedConfig.config.layers.L3 as { acBoundStories?: readonly string[] };
+      return l3.acBoundStories ?? [];
+    } catch {
+      return [];
+    }
+  }
+}

package/scripts/harness/attestation/infrastructure/adapters/file-system-matrix-source-adapter.ts

@@ -0,0 +1,25 @@
+// @unit attestation
+// @layer infrastructure
+
+import { readFile } from "node:fs/promises";
+import { isAbsolute, resolve } from "node:path";
+import type { MatrixSourcePort } from "../../application/ports/matrix-source-port.js";
+
+/**
+ * MatrixSourcePort の node:fs 実装（H16-03 / WI-227）。
+ * requirement-test-matrix.json を読み込み parse して返す。
+ * 不在・parse 不能は throw する（呼び出し側 usecase が fail-closed / [] に変換する）。
+ */
+export class FileSystemMatrixSourceAdapter implements MatrixSourcePort {
+  constructor(
+    private readonly baseDir: string,
+    private readonly defaultMatrixPath = ".harness/requirement-test-matrix.json",
+  ) {}
+
+  async load(matrixFilePath?: string): Promise<unknown> {
+    const rel = matrixFilePath && matrixFilePath.length > 0 ? matrixFilePath : this.defaultMatrixPath;
+    const absPath = isAbsolute(rel) ? rel : resolve(this.baseDir, rel);
+    const raw = await readFile(absPath, "utf8");
+    return JSON.parse(raw);
+  }
+}

package/scripts/harness/attestation/presentation/handlers/verify-attestation-handler.ts

@@ -55,6 +55,7 @@ function renderHuman(output: VerifyAttestationOutput, exitCode: 0 | 1 | 2): stri
   lines.push(`attestationDigest: ${mark(c.attestationDigest)}`);
   lines.push(`inputHashes      : ${mark(c.inputHashes)}`);
   lines.push(`granularity      : ${mark(c.granularity)}`);
+  lines.push(`acBoundScope     : ${mark(c.acBoundScope)}`);
   if (output.mismatches.length > 0) {
     lines.push("");
     lines.push("Mismatches:");