phasegate 0.254.0 → 0.264.0

package/CHANGELOG.md

@@ -7,8 +7,30 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- **WI-309 — WI-305 validator domain reflection repair** — `DesignChangeDeclarationPolicy`を実装・配線しながらvalidator-system `domain_model.md`へのWI-305累積反映を欠落させ、story reflection corpusが検出したbaseline外違反を正規に解消。exact `corpusRole + DeclaredKey`照合、pinned change限定、Work-Item trailer intersection、unique sorted finding、local fast-path / L3 authority境界を実コードどおり記録し、baseline / allowlistには触れていない。
+
+- **WI-308 — CLI large stdout drain** — self-repoのWorld enforcement有効化により`validate --layer L2 --json`が604件のadopted-legacy warningを含む64 KiB超のJSONとなり、`console.log`直後の`process.exit`がpipe bufferをdrainせず末尾を切断する回帰を修正。direct stdout resultを返す全top-level CLI経路を共通graceful exitへ統合し、warningを省略せず任意サイズの完全な出力と既存exit codeを維持する。64 KiB超を必須条件とするprocess E2Eで`--format json` / `--json`双方を固定し、同E2E fileの全subprocess caseへ明示60秒timeoutを適用した。
+
 ### Added
 
+- **WI-307 / H17-19 — World production-ready CI / template regression（WM-24）** — self-repo CIをtest → requirement-test matrix生成 → pure `world:derive --json`二重byte一致 → authoritative L3 → attestation v2 produce / verify → integrity verifyのtrust chainへ整列。保存obligation reportをCI入力にせず、runner tempの二出力とv2 evidenceだけを比較・検証する。bundled `aidlc-gate`はconfig JSONをfail-closedで読み、`world.enabled:true`の場合だけmatrix後のderive二重一致を実行するため、false / absentの採用projectは既存L3契約を維持する。regression-suiteにactual processの3 `world:*` command、`phasegate-world-cli/v1` envelope、exit 0 / 1 / 2、CI source order、package surfaceのcontract testを追加。README / README.ja / CLI guideを登録済み`L2-017` / `L3-008`、bounded SessionStart、attestation v2 root pin、self-repo dogfood有効のproduction仕様へ更新し、H17-19を同一着地でrequiredとして登録した。Phase CのCI統合により、warning-only validatorの`passed:false`とaggregate `allPassed:true`が同時に公開される潜在矛盾を顕在化。harness-apiのpublic ci-check projectionで同一`failOnWarning` policyをper-validator結果にも適用し、warning diagnosticsを保持したまま既定時は`passed:true`、strict時は`passed:false`へ一貫させ、attestation INV-1を緩和せずv2 smokeを成立させた。
+
+- **WI-306 / H17-18 — Attestation v2 World snapshot root pin（WM-23）** — `phasegate-attestation/v2` / `https://phasegate.dev/attestation/gate-run/v2`を追加し、World canonical `corpusRoot`を必須`worldSnapshotRoot`としてattestationDigestのcanonical payloadへ封印する。fragment / node個別digestは保存せず、published `attestation-v2.schema.json`もroot一件だけを許可する。attestation applicationはconsumer-owned plain root providerだけを受け、top-level harness compositionがworld-model public `WorldSnapshotRootFacade`からrootを注入するため、attestation→world-model importを作らない。provider未配線のprogrammatic produceと全v1 verifyは無期限互換のv1を維持し、schema / predicate / root presence mismatchやprovider failureはv1へdowngradeせずfail-closed。World owner projectionはv1 / v2を受理しながらv2 root self-referenceをcorpus projectionから除外する。v1 / v2 produce→verify、root改竄、published schema、projection determinismをtestで固定し、H17-18を同一着地でrequiredとして登録した。
+
+- **WI-305 / H17-17 — Design change declaration / reflection hook（WM-22）** — commit-msg経路へpin済み設計fragmentの変更宣言checkを追加。traceability-modelのpublic plain DTO facadeがGit index / HEADから内容の変わったexplicit product / inception fragmentだけをrole、DeclaredKey、path、change kind、sorted `@work-item-id`、明示`@world-reflects`付きで観測し、world-modelのpublic facadeがconstraint repositoryを露出せずclaimant / premiseのexplicit fragment pinだけを投影する。validator-system policyは両者をrole + keyでendpoint-symmetricに突合し、pin済み変更fragmentのWork Item集合とcommitの`Work-Item: WI-NNN` trailerに共通IDがない場合だけnon-bypassableでblockする。unpinned / legacy whole-file / ADR / source変更へblocking面を広げず、`world.enabled:false`ではproviderを呼ばず従来挙動を維持。Git / control observation不能はfixed code warningへfail-openし、local hookは偽造可能なfast-path、authoritative trust rootはL3-008であることを出力する。H17-17を同一着地で`planned -> required`として登録し、changed fragment / pin projection / matching・mismatch・unavailable contractをunit / Git fixture testで固定した。
+
+- **WI-304 / H17-16 — SessionStart open World obligations summary（WM-21）** — agent-integrationのSessionStart経路へconsumer-owned `WorldObligationsQueryPort`、plain context DTO、priority / adopted-count usecase、bounded presentationを追加。infrastructure adapterはworld-model public `createWorldModelModule`だけを消費し、保存済み`.harness/world-obligations.json`を読まず`writeReport:false`でcurrent corpusからpure deriveする。`new-structural` / `invalid-declaration` / expired waiverをcleanup-required / waivedより先にstable keyで表示し、adopted-legacyは個別列挙せず件数一行へ集約。World sectionはconfig値にかかわらず最大5件 / 2000 Unicode scalar、entry途中切断なし、決定的省略行を保証し、reason / diagnostic details / corpus prose / full reportをpromptへ中継しない。`world.enabled:false`またはsession summary無効時はquery未実行・非表示、config / derive不能時はrepository由来reasonを含まない固定一行warningへfail-openしてhook exit 0を維持する。self-repo E2Eで604 adopted-legacyが一行だけになりfingerprint本文を注入しないことを固定し、H17-16を同一着地で`planned -> required`へ進めた。
+
+- **WI-303 — self-repo World enforcement 有効化（dogfood）** — CP-4 合格を受け `phasegate.config.json` に `world.enabled: true` を設定。以後 self-repo の L2 は L2-017（constraint admission fast-path）、L3 は L3-008（authoritative re-derivation）を実際に実行する。604 件の adopted-legacy baseline は非 blocking warning として可視化され、新規構造違反・不正宣言は fail-closed。実測コストは両ゲート合計 2 秒未満。
+
+- **WI-302 / H17-15 — L3-008 authoritative World constraint re-derivation（WM-20）** — ADR-030のCI trust rootとADR-035 / ADR-037のnon-authoritative generated report contractを執行し、`L3-008 world-constraint-rederivation`をValidatorId、default registry、RunL3、composition-rootへ登録。専用consumer-owned port / service / infrastructure adapterが呼出しごとにworld-model public compositionをfresh構築し、current corpusとversioned constraints / baseline / waiver / debtから`writeReport:false`で義務を独立再導出する。`.harness/world-obligations.json`のreader / cache / pathを依存に持たず、report absent / forged / unsupported-version / deletedでobservationとblocking結果が不変であることをreal filesystem fixtureで固定した。validator-system policyは`new-structural` / `invalid-declaration`と全derive diagnosticをfingerprint・WCR rule付きerrorとしてfail-closed、`adopted-legacy` / active waiverをwarningとして可視non-blockingにする。base fixtureはPASSし、new unpinned claim / duplicate IDを既存mutation manifestのexact fingerprint、unknown schemaをauthoritative diagnosticとして検証。resolved `world.enabled:false`ではL3-008を明示skip、trueの場合だけ実行し、self-repo config自体は変更していない。H17-15を同一着地で`planned -> required`へ進め、enforceable MVPのL2 local / L3 authoritative dual pathを完成した。
+
+- **WI-301 / H17-14 — L2-017 World constraint admission fast-path（WM-19）** — ADR-037で予約した`L2-017 world-constraint-admission`をValidatorId、default registry、RunL2、composition-rootへ登録。config-foundationのresolved `world.enabled`をautomatic gate selectionとして消費し、false / absentではdefinitionを残した明示skip、trueの場合だけworld-model public facadeからpure `deriveWorldObligationsUseCase`を実行する。validator-system所有のpolicy serviceは`new-structural` / `invalid-declaration`とconstraint document admission failureをerrorとしてfail-closedにし、`adopted-legacy` / active waiverをfingerprint・WCR rule付きwarningとして可視化する。validなnew claim / pin自体はblockせず、保存obligation reportは入力にしない。HarnessErrorはlocal fast-pathが偽造可能でauthoritative判定は後続L3 clean-corpus re-derivationであると明記。fixtureでunpinned claim / malformed schemaのfail-closed、new pin finding、baseline採用後のlegacy non-blocking、disabled時のport非実行を固定した。self-repo `world.enabled`はfalseのまま、L3-008は未登録。H17-14を同一着地で`planned -> required`へ進めた。
+
+- **WI-300 / H17-13 — World config surface と resolved mapping（WM-18）** — `phasegate.config.json` v2 / v3へADR-037のtop-level `world` contractを追加し、corpus roots / selection、matrix・attestation・integrity inputs、constraints・baseline・waivers・debts declarations、obligation report、session-start limitをschema / domain Value Objectでfail-closed検証する。absolute / backslash / traversal path、cross-role root overlap、case-fold collision、unknown field、範囲外limitを拒否。minimal / standard / strictは全てcanonical defaultsと`world.enabled:false`を持ち、explicit `world:*` commandは引き続き常時実行可能。preset resolutionはnested overrideをmergeし、World field省略時だけlegacy design / inception / matrix pathを継承する。dedicated `toWorldModelConfig()`をpublic mapping boundaryとして追加し、mainから完全plain DTOをWorld compositionへ注入。複数root、custom provider / control / output pathをextractor、repository、writerへ配線し、corpus digestからoutput / session / gate enablementを除外した。validator-system mapperにもWM-19 / WM-20用World projectionを渡すが、`L2-017` / `L3-008`は未登録のまま維持。H17-13を同一着地で`planned -> required`として登録し、configuration guideとaffected Unit設計を更新した。
+
 - **WI-299 — World Model のユーザー向けドキュメント反映** — README.md / README.ja.md に World Model 節（端点対称な制約再評価、`world:inspect` / `world:pin` / `world:derive`、immutable obligation report、adoption baseline、fail-closed 新規違反、CLI-only の現状スコープ）と Core Capabilities 行・CLI 表エントリを追加。`docs/guide/cli-reference.md` に World Model 節（options / exit code 0-1-2 / 制御ファイル 4 種 + `.harness/world-obligations.json` / `phasegate-world-cli/v1` envelope / `world.enabled` 既定 false と L2-017 / L3-008 予約の明記）を新設。README.ja footer の版表記を現行へ更新。
 
 - **WI-298 / H17-12 — Self-repo World adoption baseline と dogfood smoke（WM-17）** — final tracked corpus、H17-12 AC-bound smoke、再生成matrix、skill-quality semantic debt reflectionを含むcheckoutをbaselineなしで二重deriveし、serialized bytesとunique fingerprint集合の一致を確認。initial structural violationは実測604件で、全件implicit global TestReference ID duplicateの`WCR-005`、WCR-001 / explicit constraint finding / waiver / malformed policy inputは0件だった。candidate evaluation / corpus / constraint rootsをprovenanceに持つ604-entry closed `phasegate.world-baseline.json`を`adoptedByWorkItemId: WI-298`で採用し、same-ruleset追記禁止・返済削除onlyを明記。skill-quality coverage reportのungated attestation gapを`pgw:v1:semantic-debt:skill-quality.coverage-attestation-legacy`として`phasegate.world-debts.json`へ一件宣言し、既存`@coverage-gating`と`@world-semantic-debt`を併存させてL2-016を変更せず別collectionへimportした。self-repo smokeはmatrix再生成後の`world:derive --json`二重実行をbyte-identical、baseline=current fingerprint集合、604件全て`adopted-legacy`、new / repaid / policy diagnostic 0、semantic debt 1、exit 0として固定。H17-12を`planned -> required`へ進め、Phase B機能MVPを完成した。

package/README.ja.md

@@ -189,7 +189,7 @@ npx phasegate reconcile --apply
 | **HarnessError 形式** | 全エラーに ADR 参照 + 修正例が含まれ、AI が自己修正できる |
 | **Baseline (retrofit)** | 既存リポジトリ導入時、`baseline` snapshot に登録した既存ファイルは構造的に編集されるまで gate 対象外 |
 | **カスタム gate** | AIDLC 以外のプロジェクトでも schema-first など独自の前提条件を設定できる |
-| **World Model (CLI)** | 設計文書・ソース・テスト・matrix・attestation を型付き事実グラフに抽出し、制約の両端点を pin して義務を決定的に再導出（`world:inspect` / `world:pin` / `world:derive`） |
+| **World Model** | 設計文書・ソース・テスト・matrix・attestationを型付き事実グラフへ抽出。決定的`world:*` CLI、L2 fast-path、L3 authoritative再導出、bounded SessionStart、attestation v2 root pinを提供 |
 
 ---
 
@@ -260,7 +260,7 @@ Phasegate はプロンプトインジェクションを独立した新規脅威
 
 phasegate のゲートは従来一方向でした: 書き込み時にコードを設計と照合する。**World Model**（[ADR-031](docs/ADR/031-world-model-ownership-and-corpus-lifecycle.md)〜[037](docs/ADR/037-world-cli-and-output-contract.md)）はこの制約面を**端点対称**にします。設計文書・ソースメタデータ・テスト・requirement-test matrix・attestation を型付き・content-addressed な事実グラフとして抽出し、pin された制約は**どちらの端点が変わっても**再評価されます — 設計文書を編集すれば、それを根拠として主張していたコード側に可視の義務が生まれます（逆方向だけではなく）。
 
-3 コマンドを提供します（明示実行は常に可能。`phasegate.config.json` の `world.enabled` は既定 `false` で、将来のゲート統合のみを制御します）:
+3 コマンドは常に明示実行できます。`world.enabled` の product 既定値は `false` で、有効化すると登録済み L2/L3 統合が動きます。このリポジトリでは dogfood のため有効です。
 
 ```bash
 npx phasegate world:inspect --json    # 決定的な read-only snapshot: node / edge / 抽出 diagnostics
@@ -274,8 +274,11 @@ npx phasegate world:derive --json     # 制約評価から obligation report を
 - **新規違反は初日から fail-closed。** 既存違反は閉じた・人間レビュー可能な baseline（`phasegate.world-baseline.json`）として採用され、縮小のみ許されます（同一 ruleset での追加は拒否）。
 - **既知の意味的ギャップは宣言するもので「再発見」しない。** explicit debt は `phasegate.world-debts.json` に宣言し import として表示。waiver（`phasegate.world-waivers.json`）は fingerprint / 理由 / 期限 / Work Item が必須です。
 - **決定性は契約。** 同一 checkout での 2 回実行は byte-identical な JSON を出力します。
+- **enforcement は二つの信頼レベルを持つ。** `L2-017` は偽造可能な local fast-path、`L3-008` は current corpus から authoritative に再導出し、`.harness/world-obligations.json`を信頼しません。adopted legacy は可視・非blocking、新規構造違反や不正宣言はfail-closedです。
+- **agent context はbounded。** SessionStartは最大5件 / 2000文字でopen itemを表示し、adopted legacyは件数だけに集約。導出不能時は固定warningへfail-openします。
+- **evidenceはroot一件だけをpinする。** attestation v2はfragment digestを複製せず`worldSnapshotRoot`をgate-run evidenceへ封印し、v1 produce / verify互換も維持します。
 
-現在のスコープは **CLI のみ**です: validator ID L2-017 / L3-008 は予約済みですが pre-commit / CI ゲートへの登録は未実施で、将来フェーズとして管理しています。
+World enforcementはproduction統合済みです。`L2-017` / `L3-008`は登録済み、bundled CI gateはWorld有効projectで決定的deriveを条件付き実行し、このリポジトリはfull dogfood pathを実行します。
 
 ---
 

package/README.md

@@ -173,7 +173,7 @@ npx phasegate reconcile --apply
 | **Agent-readable HarnessError output** | Gives AI agents the reason, missing artifacts, references, and examples needed to self-correct |
 | **Retrofit baseline** | Lets existing repositories adopt Phasegate gradually by grandfathering unchanged files |
 | **Configurable gates** | Supports AIDLC defaults or custom gates such as schema-first API development |
-| **World Model (CLI)** | Extracts design docs, source, tests, matrices, and attestations into a typed fact graph, pins constraints between endpoints, and deterministically re-derives obligations (`world:inspect` / `world:pin` / `world:derive`) |
+| **World Model** | Extracts design docs, source, tests, matrices, and attestations into a typed fact graph; deterministic `world:*` commands, L2 fast-path, L3 authoritative re-derivation, bounded SessionStart context, and attestation v2 root pinning |
 
 ---
 
@@ -240,7 +240,7 @@ Five components implement this posture:
 
 Phasegate's gates historically pointed one way: code is checked against design at write time. The **World Model** (per [ADR-031](docs/ADR/031-world-model-ownership-and-corpus-lifecycle.md)–[037](docs/ADR/037-world-cli-and-output-contract.md)) makes that constraint surface **endpoint-symmetric**: design documents, source metadata, tests, the requirement-test matrix, and attestations are extracted into a typed, content-addressed fact graph, and a pinned constraint is re-evaluated whenever *either* endpoint changes — so editing a design document creates visible obligations on the code that claimed it, not just the other way around.
 
-Three commands (always runnable explicitly; `world.enabled` in `phasegate.config.json` defaults to `false` and only governs future gate integration):
+Three commands are always runnable explicitly. The product default for `world.enabled` is `false`; enabling it activates the registered L2/L3 integrations. This repository enables it for dogfooding.
 
 ```bash
 npx phasegate world:inspect --json    # deterministic read-only snapshot: nodes, edges, extraction diagnostics
@@ -254,8 +254,11 @@ Design commitments that keep it honest:
 - **New violations fail closed from day one.** Pre-existing violations are adopted into a closed, human-reviewable baseline (`phasegate.world-baseline.json`) that can only shrink; same-ruleset additions are rejected.
 - **Known semantic gaps are declared, never "rediscovered."** Explicit debts live in `phasegate.world-debts.json` and are displayed as imports; waivers (`phasegate.world-waivers.json`) require a fingerprint, reason, expiry, and Work Item.
 - **Determinism is a contract.** Double runs over the same checkout produce byte-identical JSON output.
+- **Enforcement has two trust levels.** `L2-017` is a forgeable local fast-path; `L3-008` authoritatively re-derives from the current corpus and never trusts `.harness/world-obligations.json`. Adopted legacy remains visible and non-blocking; new structural or malformed declarations fail closed.
+- **Agent context is bounded.** SessionStart shows at most five open items within 2,000 characters, summarizes adopted legacy as a count, and fails open with a fixed warning if derivation is unavailable.
+- **Evidence pins one root.** Attestation v2 seals `worldSnapshotRoot` in gate-run evidence without copying fragment digests; v1 produce/verify compatibility remains available.
 
-Current scope is **CLI-only**: validator IDs L2-017 / L3-008 are reserved but not yet registered into pre-commit/CI gating, which is tracked as a future phase.
+World enforcement is production-integrated: `L2-017` and `L3-008` are registered, the bundled CI gate conditionally runs deterministic derivation for World-enabled projects, and this repository runs the full dogfood path.
 
 ---
 

package/docs/contracts/attestation-v2.schema.json

@@ -0,0 +1,110 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://phasegate.dev/contracts/attestation-v2.schema.json",
+  "title": "PhaseGate attestation v2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "predicateType",
+    "subject",
+    "inputs",
+    "granularity",
+    "acBoundScope",
+    "worldSnapshotRoot",
+    "metadata",
+    "signature"
+  ],
+  "properties": {
+    "schemaVersion": { "const": "phasegate-attestation/v2" },
+    "predicateType": { "const": "https://phasegate.dev/attestation/gate-run/v2" },
+    "worldSnapshotRoot": { "$ref": "#/$defs/digest" },
+    "subject": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["command", "gateResult", "validatorSet"],
+      "properties": {
+        "command": { "type": "string", "minLength": 1 },
+        "gateResult": { "enum": ["pass", "fail"] },
+        "validatorSet": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["validatorId", "passed", "skipped"],
+            "properties": {
+              "validatorId": { "type": "string", "minLength": 1 },
+              "passed": { "type": "boolean" },
+              "skipped": { "type": "boolean" }
+            }
+          }
+        }
+      }
+    },
+    "inputs": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["digestAlgorithm", "sources", "inputDigest"],
+      "properties": {
+        "digestAlgorithm": { "const": "sha256" },
+        "sources": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["path", "digest"],
+            "properties": {
+              "path": { "type": "string", "minLength": 1 },
+              "digest": { "$ref": "#/$defs/digest" }
+            }
+          }
+        },
+        "inputDigest": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "granularity": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["traceability"],
+      "properties": {
+        "traceability": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["validator", "level", "claim", "knownLimitations"],
+          "properties": {
+            "validator": { "type": "string", "minLength": 1 },
+            "level": { "enum": ["file", "ac"] },
+            "claim": { "type": "string" },
+            "knownLimitations": { "type": "array", "items": { "type": "string" } }
+          }
+        }
+      }
+    },
+    "acBoundScope": { "type": "array", "items": { "type": "string" } },
+    "metadata": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["producedAt", "producer", "gitCommit"],
+      "properties": {
+        "producedAt": { "type": "string", "minLength": 1 },
+        "producer": { "type": "string", "minLength": 1 },
+        "gitCommit": { "type": ["string", "null"] }
+      }
+    },
+    "signature": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "attestationDigest", "algorithm", "keyId", "value"],
+      "properties": {
+        "mode": { "enum": ["unsigned-poc", "signed"] },
+        "attestationDigest": { "$ref": "#/$defs/digest" },
+        "algorithm": { "type": ["string", "null"] },
+        "keyId": { "type": ["string", "null"] },
+        "value": { "type": ["string", "null"] }
+      }
+    }
+  },
+  "$defs": {
+    "digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+  }
+}

package/docs/guide/cli-reference.md

@@ -328,8 +328,9 @@ L4 warning findings fail the process only when warning strictness is enabled (`v
 ## World Model
 
 <!-- @work-item-id WI-299 -->
+<!-- @work-item-id WI-307 -->
 
-World Model コマンド（ADR-037）。設計文書・ソース・テスト・matrix・attestation を型付き事実グラフとして抽出し、pin された制約を両端点対称に再評価して義務を導出する。明示実行は config に依存せず常に可能（`world.enabled` は既定 `false` で、将来の L2/L3 ゲート統合のみを制御。validator ID `L2-017` / `L3-008` は予約済み・未登録）。
+World Model コマンド（ADR-037）。設計文書・ソース・テスト・matrix・attestation を型付き事実グラフとして抽出し、pin された制約を両端点対称に再評価して義務を導出する。明示実行は config に依存せず常に可能。`world.enabled` のproduct既定値は`false`で、trueの場合に登録済み`L2-017` / `L3-008`とSessionStart integrationを有効化する。phasegate self-repoはdogfoodのためtrueである。
 
 | Command | Options | Description |
 |---|---|---|
@@ -337,6 +338,16 @@ World Model コマンド（ADR-037）。設計文書・ソース・テスト・m
 | `world:pin` | `--constraint <id>`（`pgw:v1:constraint` ID, 必須） `--endpoint <claimant\|premise>`（必須） `--apply` `--format human\|json` `--json` | 制約端点の現在 digest をプレビュー。`--apply` で `phasegate.world-constraints.json` を atomic に更新 |
 | `world:derive` | `--write` `--out <path>`（`--write` 必須） `--format human\|json` `--json` | immutable な obligation report を再導出。既定は pure・read-only。`--write` で raw report を `.harness/world-obligations.json`（untracked）へ永続化 |
 
+### Automatic integration
+
+| Surface | Contract |
+|---|---|
+| `L2-017 world-constraint-admission` | local fast-path。new / changed constraintのmalformed、新規pin / unpinned claimをfail-closed。adopted-legacyはwarningのみ。local resultは偽造可能でauthorityではない |
+| `L3-008 world-constraint-rederivation` | current corpusとversioned control inputからauthoritativeにpure再導出。保存`.harness/world-obligations.json`は読まず、改竄・削除で結果が変わらない |
+| SessionStart | blocking相当を優先して最大5件 / 2000 Unicode scalar。adopted-legacyは件数一行、全文やreasonをpromptへ注入しない。derive不能は固定warningへfail-open |
+| Attestation v2 | `phasegate-attestation/v2`がcanonical`worldSnapshotRoot`一件をpin。fragment digest collectionは保存しない。既存v1のproduce / verify互換を維持 |
+| Bundled `aidlc-gate` | `world.enabled:true`のprojectでmatrix生成後にpure deriveを二回実行してbyte一致を確認し、その後L3を実行。false / absentではWorld段階だけをskip |
+
 ### Exit code
 
 | Exit | 意味 |

package/docs/guide/configuration.md

@@ -76,6 +76,36 @@ The plan identifies target fields, managed artifacts, commands, validation, risk
     "format": "json",
     "outputDir": "reports"
   },
+  "world": {
+    "enabled": false,
+    "corpus": {
+      "productRoots": ["docs/product"],
+      "inceptionRoots": ["docs/inception"],
+      "adrRoots": ["docs/ADR"],
+      "sourceRoots": ["scripts/harness"],
+      "include": ["**/*"],
+      "exclude": []
+    },
+    "inputs": {
+      "matrixPath": ".harness/requirement-test-matrix.json",
+      "attestationPath": ".harness/attestation.json",
+      "integrityManifestPath": "phasegate.integrity.json"
+    },
+    "declarations": {
+      "constraintsPath": "phasegate.world-constraints.json",
+      "baselinePath": "phasegate.world-baseline.json",
+      "waiversPath": "phasegate.world-waivers.json",
+      "debtsPath": "phasegate.world-debts.json"
+    },
+    "output": {
+      "obligationReportPath": ".harness/world-obligations.json"
+    },
+    "sessionStart": {
+      "enabled": true,
+      "maxItems": 5,
+      "maxChars": 2000
+    }
+  },
   "preCommit": {
     "implementationExtensions": [".ts"]
   },
@@ -115,6 +145,8 @@ The `strict` preset also enables:
 - `bundleSizeLimit` -- 500 KB default cap
 - `deadCodeGC` -- automatic dead-code garbage collection
 
+All three presets resolve the same World Model defaults with `world.enabled: false`. This switch controls future automatic L2/L3 and hook integration; it does not disable explicit `world:inspect`, `world:pin`, or `world:derive` commands. Enabling automatic World gates remains an explicit rollout decision. <!-- @work-item-id WI-300 -->
+
 ---
 
 ### Field Reference
@@ -216,6 +248,30 @@ Example for Python and TypeScript:
 
 The metadata validators read `@unit` and `@layer` with language-agnostic regular expressions, so Python `# @unit api` and Go `// @unit api` style comments are both valid as long as the file extension is included here.
 
+#### `world`
+
+<!-- @work-item-id WI-300 -->
+
+`world` configures the World Model read corpus and reviewed control inputs. It is available in both v2 and v3 config schemas. Nested fields may be omitted and are resolved from the selected preset.
+
+| Field | Default | Meaning |
+|---|---|---|
+| `enabled` | `false` | Enables future automatic validator/hook integration; explicit `world:*` commands remain available |
+| `corpus.productRoots` | `["docs/product"]` | Canonical product corpus roots |
+| `corpus.inceptionRoots` | `["docs/inception"]` | Proposal/delta corpus roots |
+| `corpus.adrRoots` | `["docs/ADR"]` | ADR corpus roots |
+| `corpus.sourceRoots` | `["scripts/harness"]` | Source/test corpus roots |
+| `corpus.include` / `exclude` | `["**/*"]` / `[]` | Versioned selection patterns |
+| `inputs.matrixPath` | `.harness/requirement-test-matrix.json` | Matrix owner projection input |
+| `inputs.attestationPath` | `.harness/attestation.json` | Attestation evidence input |
+| `inputs.integrityManifestPath` | `phasegate.integrity.json` | Integrity declaration input |
+| `declarations.*Path` | `phasegate.world-{constraints,baseline,waivers,debts}.json` | Git-reviewed external declarations |
+| `output.obligationReportPath` | `.harness/world-obligations.json` | Generated, non-authoritative report path |
+| `sessionStart.enabled` | `true` | Allows the bounded World summary when session integration is installed |
+| `sessionStart.maxItems` / `maxChars` | `5` / `2000` | Summary caps; valid ranges are 1–20 and 1–8000 |
+
+All paths are project-relative POSIX paths. Absolute paths, backslashes, `.` / `..` segments, cross-role corpus root overlap, and case-fold collisions are rejected. When the matching World field is omitted, legacy `paths.designDocs`, `paths.inceptionDocs`, and `layers.L3.requirementMatrixPath` remain compatible inputs. A present but invalid `world` section fails closed; it is never replaced with defaults silently.
+
 #### `phase2Extensions`
 
 <!-- @work-item-id WI-170 -->

package/docs/templates/ci/aidlc-gate.yml

@@ -7,8 +7,10 @@
 # 実行内容:
 #   1. bypass:audit — bypass trailer / evidence 監査
 #   2. phasegate lint  — L1 Biome AST ルール検証
-#   3. phasegate:ci-check — L3 CI バリデータ（security / performance / coverage / nyquist）
-#   4. 失敗時: PR にエラーサマリーをコメント
+#   3. requirement-test matrix をcurrent testsから再生成
+#   4. world.enabled=true の場合、world:derive を2回実行してbyte一致を検証
+#   5. phasegate:ci-check — L3 CI バリデータ（security / performance / coverage / nyquist / World）
+#   6. 失敗時: PR にエラーサマリーをコメント
 
 name: AIDLC Quality Gate
 
@@ -77,6 +79,44 @@ jobs:
           echo "exit_code=$EXIT_CODE" >> $GITHUB_OUTPUT
           exit $EXIT_CODE
 
+      # L3-004 consumes the generated requirement-test matrix. Always rebuild it
+      # from this checkout instead of trusting a stale or persisted artifact.
+      - name: Generate requirement-test matrix
+        if: always()
+        run: npx phasegate phasegate:generate-matrix
+
+      # Automatic World integration is selected only by an explicit true value.
+      # Missing/false keeps existing projects compatible; invalid JSON is a hard
+      # configuration error and must not be laundered into a disabled result.
+      - name: Detect World Model enablement
+        id: world_config
+        if: always()
+        shell: bash
+        run: |
+          set -euo pipefail
+          ENABLED=$(node --input-type=module <<'NODE'
+          import { existsSync, readFileSync } from 'node:fs';
+          if (!existsSync('phasegate.config.json')) {
+            process.stdout.write('false');
+          } else {
+            const config = JSON.parse(readFileSync('phasegate.config.json', 'utf8'));
+            process.stdout.write(config.world?.enabled === true ? 'true' : 'false');
+          }
+          NODE
+          )
+          echo "enabled=$ENABLED" >> "$GITHUB_OUTPUT"
+
+      - name: World derive determinism
+        if: steps.world_config.outputs.enabled == 'true'
+        shell: bash
+        run: |
+          set -euo pipefail
+          FIRST="$RUNNER_TEMP/phasegate-world-first.json"
+          SECOND="$RUNNER_TEMP/phasegate-world-second.json"
+          npx phasegate world:derive --json > "$FIRST"
+          npx phasegate world:derive --json > "$SECOND"
+          cmp --silent "$FIRST" "$SECOND"
+
       # L3: CI バリデータ（security / performance / coverage / nyquist）
       - name: L3 CI Check
         id: ci_check

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phasegate",
-  "version": "0.254.0",
+  "version": "0.264.0",
   "packageManager": "pnpm@10.30.1",
   "description": "Phasegate — AI-agnostic quality defense toolkit. Enforces structural integrity between design intent and code.",
   "license": "MIT",

package/scripts/harness/agent-integration/application/dto/open-world-obligations-context-dto.ts

@@ -0,0 +1,30 @@
+// @unit agent-integration
+// @layer application
+// @work-item-id WI-304
+
+export type OpenWorldObligationClassification =
+  | "new-structural"
+  | "invalid-declaration"
+  | "expired-waiver"
+  | "policy-diagnostic"
+  | "cleanup-required"
+  | "waived";
+
+export interface OpenWorldObligationContextItemDto {
+  readonly kind: "structural" | "cleanup-required" | "policy-diagnostic";
+  readonly classification: OpenWorldObligationClassification;
+  readonly ruleId: string | null;
+  readonly constraintId: string | null;
+  readonly violationFingerprint: string | null;
+  readonly subjectId: string | null;
+  readonly policyCode?: string | null;
+}
+
+export type OpenWorldObligationsContextDto =
+  | { readonly status: "disabled" }
+  | { readonly status: "unavailable" }
+  | {
+      readonly status: "available";
+      readonly entries: readonly OpenWorldObligationContextItemDto[];
+      readonly adoptedLegacyCount: number;
+    };

package/scripts/harness/agent-integration/application/ports/world-obligations-query-port.ts

@@ -0,0 +1,30 @@
+// @unit agent-integration
+// @layer application
+// @work-item-id WI-304
+
+export type QueriedWorldObligationClassification =
+  | "adopted-legacy"
+  | "new-structural"
+  | "invalid-declaration"
+  | "expired-waiver"
+  | "policy-diagnostic"
+  | "cleanup-required"
+  | "waived";
+
+export interface QueriedWorldObligationEntry {
+  readonly kind: "structural" | "cleanup-required" | "policy-diagnostic";
+  readonly classification: QueriedWorldObligationClassification;
+  readonly ruleId: string | null;
+  readonly constraintId: string | null;
+  readonly violationFingerprint: string | null;
+  readonly subjectId?: string | null;
+  readonly policyCode?: string | null;
+}
+
+export type WorldObligationsQueryResult =
+  | { readonly status: "available"; readonly entries: readonly QueriedWorldObligationEntry[] }
+  | { readonly status: "unavailable" };
+
+export interface WorldObligationsQueryPort {
+  query(): Promise<WorldObligationsQueryResult>;
+}

package/scripts/harness/agent-integration/application/usecases/get-open-world-obligations-context-usecase.ts

@@ -0,0 +1,66 @@
+// @unit agent-integration
+// @layer application
+// @work-item-id WI-304
+
+import type {
+  OpenWorldObligationContextItemDto,
+  OpenWorldObligationsContextDto,
+} from "../dto/open-world-obligations-context-dto.js";
+import type { QueriedWorldObligationEntry, WorldObligationsQueryPort } from "../ports/world-obligations-query-port.js";
+
+interface Dependencies {
+  readonly worldObligationsQueryPort: WorldObligationsQueryPort;
+}
+
+const priority = (entry: OpenWorldObligationContextItemDto): number => {
+  if (entry.classification === "new-structural" || entry.classification === "invalid-declaration") return 0;
+  if (entry.classification === "expired-waiver" || entry.classification === "policy-diagnostic") return 1;
+  if (entry.classification === "cleanup-required") return 2;
+  return 3;
+};
+
+const stableKey = (entry: OpenWorldObligationContextItemDto): string =>
+  [
+    priority(entry).toString().padStart(2, "0"),
+    entry.ruleId ?? "",
+    entry.constraintId ?? "",
+    entry.violationFingerprint ?? "",
+    entry.subjectId ?? "",
+    entry.policyCode ?? "",
+  ].join("\u0000");
+
+type DisplayableQueriedEntry = QueriedWorldObligationEntry & {
+  readonly classification: Exclude<QueriedWorldObligationEntry["classification"], "adopted-legacy">;
+};
+
+const isDisplayable = (entry: QueriedWorldObligationEntry): entry is DisplayableQueriedEntry =>
+  entry.classification !== "adopted-legacy";
+
+const toContextItem = (entry: DisplayableQueriedEntry): OpenWorldObligationContextItemDto => ({
+  kind: entry.kind,
+  classification: entry.classification,
+  ruleId: entry.ruleId,
+  constraintId: entry.constraintId,
+  violationFingerprint: entry.violationFingerprint,
+  subjectId: entry.subjectId ?? null,
+  policyCode: entry.policyCode ?? null,
+});
+
+export class GetOpenWorldObligationsContextUseCase {
+  constructor(private readonly dependencies: Dependencies) {}
+
+  async execute(input: { readonly enabled: boolean }): Promise<OpenWorldObligationsContextDto> {
+    if (!input.enabled) return { status: "disabled" };
+
+    const result = await this.dependencies.worldObligationsQueryPort.query();
+    if (result.status === "unavailable") return { status: "unavailable" };
+
+    const adoptedLegacyCount = result.entries.filter((entry) => entry.classification === "adopted-legacy").length;
+    const entries = result.entries
+      .filter(isDisplayable)
+      .map(toContextItem)
+      .sort((left, right) => (stableKey(left) < stableKey(right) ? -1 : stableKey(left) > stableKey(right) ? 1 : 0));
+
+    return { status: "available", entries: Object.freeze(entries), adoptedLegacyCount };
+  }
+}

package/scripts/harness/agent-integration/infrastructure/adapters/world-model-open-obligations-query-adapter.ts

@@ -0,0 +1,58 @@
+// @unit agent-integration
+// @layer infrastructure
+// @work-item-id WI-304
+
+import { createWorldModelModule, type WorldResolvedConfigInput } from "../../../world-model/index.js";
+import type {
+  QueriedWorldObligationEntry,
+  WorldObligationsQueryPort,
+  WorldObligationsQueryResult,
+} from "../../application/ports/world-obligations-query-port.js";
+
+interface Options {
+  readonly rootDir: string;
+  readonly resolvedConfig?: WorldResolvedConfigInput;
+}
+
+export class WorldModelOpenObligationsQueryAdapter implements WorldObligationsQueryPort {
+  constructor(private readonly options: Options) {}
+
+  async query(): Promise<WorldObligationsQueryResult> {
+    try {
+      const world = createWorldModelModule(this.options);
+      const derived = await world.deriveWorldObligationsUseCase.execute({ writeReport: false });
+      if (derived.status !== "derived") return { status: "unavailable" };
+
+      const report = derived.result.report;
+      const entries: QueriedWorldObligationEntry[] = [
+        ...report.structuralObligations.map((entry) => ({
+          kind: "structural" as const,
+          classification: entry.classification,
+          ruleId: entry.ruleId,
+          constraintId: entry.constraintId,
+          violationFingerprint: entry.violationFingerprint,
+        })),
+        ...report.repaidBaselineEntries.map((entry) => ({
+          kind: "cleanup-required" as const,
+          classification: "cleanup-required" as const,
+          ruleId: entry.ruleId,
+          constraintId: entry.constraintId,
+          violationFingerprint: entry.violationFingerprint,
+        })),
+        ...report.policyDiagnostics.map((entry) => ({
+          kind: "policy-diagnostic" as const,
+          classification:
+            entry.code === "expired-waiver" ? ("expired-waiver" as const) : ("policy-diagnostic" as const),
+          ruleId: null,
+          constraintId: null,
+          violationFingerprint: null,
+          subjectId: entry.subjectId,
+          policyCode: entry.code,
+        })),
+      ];
+      return { status: "available", entries: Object.freeze(entries) };
+    } catch {
+      return { status: "unavailable" };
+    }
+  }
+}