phasegate 0.254.0 → 0.283.0

package/scripts/harness/traceability-model/application/dto/changed-design-fragment-dto.ts

@@ -0,0 +1,31 @@
+// @unit traceability-model
+// @layer application
+// @work-item-id WI-305
+
+export type DesignFragmentCorpusRole = "product" | "inception";
+export type DesignFragmentChangeKind = "added" | "modified" | "deleted";
+
+export interface ChangedDesignFragmentDto {
+  readonly corpusRole: DesignFragmentCorpusRole;
+  readonly declaredKey: string;
+  readonly path: string;
+  readonly changeKind: DesignFragmentChangeKind;
+  readonly workItemIds: readonly string[];
+  readonly reflectionTargets: readonly string[];
+}
+
+export interface DesignChangeReadDiagnosticDto {
+  readonly code: string;
+  readonly path: string | null;
+}
+
+export type DesignChangeReadResultDto =
+  | {
+      readonly state: "available";
+      readonly fragments: readonly ChangedDesignFragmentDto[];
+      readonly diagnostics: readonly DesignChangeReadDiagnosticDto[];
+    }
+  | {
+      readonly state: "unavailable";
+      readonly diagnostics: readonly DesignChangeReadDiagnosticDto[];
+    };

package/scripts/harness/traceability-model/application/facades/design-change-read-facade.ts

@@ -0,0 +1,14 @@
+// @unit traceability-model
+// @layer application
+// @work-item-id WI-305
+
+import type { DesignChangeReadResultDto } from "../dto/changed-design-fragment-dto.js";
+import type { StagedDesignChangeSourcePort } from "../ports/staged-design-change-source-port.js";
+
+export class DesignChangeReadFacade {
+  constructor(private readonly source: StagedDesignChangeSourcePort) {}
+
+  observe(stagedFiles: readonly string[]): Promise<DesignChangeReadResultDto> {
+    return this.source.observe(stagedFiles);
+  }
+}

package/scripts/harness/traceability-model/application/ports/staged-design-change-source-port.ts

@@ -0,0 +1,9 @@
+// @unit traceability-model
+// @layer application
+// @work-item-id WI-305
+
+import type { DesignChangeReadResultDto } from "../dto/changed-design-fragment-dto.js";
+
+export interface StagedDesignChangeSourcePort {
+  observe(stagedFiles: readonly string[]): Promise<DesignChangeReadResultDto>;
+}

package/scripts/harness/traceability-model/composition-root.ts

@@ -2,11 +2,13 @@
  * @layer application
  * @unit traceability-model
  * @work-item-id WI-093
+ * @work-item-id WI-305
  *
  * traceability-model ユニットの Composition Root。
  * 全コンポーネントを生成・配線し、外部に公開するハンドラー群を返す。
  */
 
+import { DesignChangeReadFacade } from "./application/facades/design-change-read-facade.js";
 import { TraceabilityWorldReadFacade } from "./application/facades/traceability-world-read-facade.js";
 import { ApplyWorkItemMigrationUseCase } from "./application/usecases/apply-work-item-migration-usecase.js";
 import { ApplyWorkItemStatusUseCase } from "./application/usecases/apply-work-item-status-usecase.js";
@@ -21,6 +23,7 @@ import { TraceabilityChainBuilder } from "./domain/services/traceability-chain-b
 import { WorkItemStatusDerivationService } from "./domain/services/work-item-status-derivation-service.js";
 import { ProjectRelativePath } from "./domain/value-objects/project-relative-path.js";
 import { FileSystemTraceabilityWorldReadAdapter } from "./infrastructure/adapters/file-system-traceability-world-read-adapter.js";
+import { GitStagedDesignChangeAdapter } from "./infrastructure/adapters/git-staged-design-change-adapter.js";
 import { FileSystemInceptionPlanGateway } from "./infrastructure/gateways/file-system-inception-plan-gateway.js";
 import { FileSystemMetadataReader } from "./infrastructure/gateways/file-system-metadata-reader.js";
 import { FileSystemWorkItemIdentityGateway } from "./infrastructure/gateways/file-system-work-item-identity-gateway.js";
@@ -101,6 +104,7 @@ export function createTraceabilityModelModule(rootDir: string, options: Traceabi
   const worldReadFacade = new TraceabilityWorldReadFacade({
     sourcePort: worldReadSource,
   });
+  const designChangeReadFacade = new DesignChangeReadFacade(new GitStagedDesignChangeAdapter(rootDir));
 
   // Usecases
   const validateImplementationMetadataUseCase = new ValidateImplementationMetadataUseCase({
@@ -157,5 +161,6 @@ export function createTraceabilityModelModule(rootDir: string, options: Traceabi
     traceabilityChainBuilder,
     storyIdAliasResolver,
     worldReadFacade,
+    designChangeReadFacade,
   } as const;
 }

package/scripts/harness/traceability-model/index.ts

@@ -1,10 +1,18 @@
 /**
  * @layer public-api
  * @unit traceability-model
+ * @work-item-id WI-305
  *
  * traceability-model ユニットのバレルエクスポート。
  */
 
+export type {
+  ChangedDesignFragmentDto,
+  DesignChangeReadDiagnosticDto,
+  DesignChangeReadResultDto,
+  DesignFragmentChangeKind,
+  DesignFragmentCorpusRole,
+} from "./application/dto/changed-design-fragment-dto.js";
 export type {
   TraceabilityAcceptanceCriterionDto,
   TraceabilityReadDiagnosticDto,
@@ -16,6 +24,7 @@ export type {
   TraceabilityWorldReadDto,
 } from "./application/dto/traceability-world-read-dto.js";
 export { TRACEABILITY_WORLD_READ_SCHEMA_VERSION } from "./application/dto/traceability-world-read-dto.js";
+export { DesignChangeReadFacade } from "./application/facades/design-change-read-facade.js";
 // Application — public World read facade and plain DTO contract
 export { TraceabilityWorldReadFacade } from "./application/facades/traceability-world-read-facade.js";
 // Composition Root

package/scripts/harness/traceability-model/infrastructure/adapters/git-staged-design-change-adapter.ts

@@ -0,0 +1,155 @@
+// @unit traceability-model
+// @layer infrastructure
+// @work-item-id WI-305
+
+import { execFileSync } from "node:child_process";
+import type {
+  ChangedDesignFragmentDto,
+  DesignChangeReadDiagnosticDto,
+  DesignChangeReadResultDto,
+  DesignFragmentCorpusRole,
+} from "../../application/dto/changed-design-fragment-dto.js";
+import type { StagedDesignChangeSourcePort } from "../../application/ports/staged-design-change-source-port.js";
+
+const FRAGMENT = /^\s*<!--\s*@world-fragment-id\s+(\S+)\s*-->\s*$/;
+const WORK_ITEM = /^\s*<!--\s*@work-item-id\s+(.+?)\s*-->\s*$/;
+const REFLECTS = /^\s*<!--\s*@world-reflects\s+(\S+)\s*-->\s*$/;
+const HEADING = /^#{1,6}\s+/;
+const FENCE = /^\s*(`{3,}|~{3,})/;
+const compare = (left: string, right: string): number => (left < right ? -1 : left > right ? 1 : 0);
+
+interface ParsedFragment {
+  readonly declaredKey: string;
+  readonly content: string;
+  readonly workItemIds: readonly string[];
+  readonly reflectionTargets: readonly string[];
+}
+
+interface ParsedFragmentSet {
+  readonly fragments: readonly ParsedFragment[];
+  readonly validPrelude: boolean;
+}
+
+const corpusRoleOf = (filePath: string): DesignFragmentCorpusRole | null => {
+  if (filePath.startsWith("docs/product/")) return "product";
+  if (filePath.startsWith("docs/inception/")) return "inception";
+  return null;
+};
+
+const uniqueSorted = (values: readonly string[]): readonly string[] =>
+  Object.freeze([...new Set(values)].sort(compare));
+
+const parseFragments = (text: string): ParsedFragmentSet => {
+  const lines = text.replace(/\r\n?/g, "\n").split("\n");
+  const markers: { readonly index: number; readonly key: string }[] = [];
+  let activeFence: string | null = null;
+  for (let index = 0; index < lines.length; index += 1) {
+    const fence = FENCE.exec(lines[index]);
+    if (fence) {
+      const character = fence[1][0];
+      activeFence = activeFence === null ? character : activeFence === character ? null : activeFence;
+      continue;
+    }
+    if (activeFence !== null) continue;
+    const marker = FRAGMENT.exec(lines[index]);
+    if (marker) markers.push({ index, key: marker[1] });
+  }
+
+  let validPrelude = true;
+  const fragments = markers.flatMap((marker, markerIndex): readonly ParsedFragment[] => {
+    const end = markers[markerIndex + 1]?.index ?? lines.length;
+    let headingIndex = marker.index + 1;
+    while (headingIndex < end && (WORK_ITEM.test(lines[headingIndex]) || REFLECTS.test(lines[headingIndex]))) {
+      headingIndex += 1;
+    }
+    if (headingIndex >= end || !HEADING.test(lines[headingIndex])) {
+      validPrelude = false;
+      return [];
+    }
+    const metadata = lines.slice(marker.index, headingIndex);
+    return [
+      Object.freeze({
+        declaredKey: marker.key,
+        content: lines.slice(marker.index, end).join("\n"),
+        workItemIds: uniqueSorted(metadata.flatMap((line) => WORK_ITEM.exec(line)?.[1].match(/\bWI-\d+\b/g) ?? [])),
+        reflectionTargets: uniqueSorted(metadata.flatMap((line) => REFLECTS.exec(line)?.[1] ?? [])),
+      }),
+    ];
+  });
+  return Object.freeze({ fragments: Object.freeze(fragments), validPrelude });
+};
+
+const indexByKey = (fragments: readonly ParsedFragment[]): Map<string, ParsedFragment> | null => {
+  const result = new Map<string, ParsedFragment>();
+  for (const fragment of fragments) {
+    if (result.has(fragment.declaredKey)) return null;
+    result.set(fragment.declaredKey, fragment);
+  }
+  return result;
+};
+
+export class GitStagedDesignChangeAdapter implements StagedDesignChangeSourcePort {
+  constructor(private readonly rootDir: string) {}
+
+  async observe(stagedFiles: readonly string[]): Promise<DesignChangeReadResultDto> {
+    const fragments: ChangedDesignFragmentDto[] = [];
+    const diagnostics: DesignChangeReadDiagnosticDto[] = [];
+    for (const filePath of [...new Set(stagedFiles)].sort(compare)) {
+      const corpusRole = corpusRoleOf(filePath);
+      if (corpusRole === null || !filePath.endsWith(".md")) continue;
+      const beforeText = this.readBlob(`HEAD:${filePath}`);
+      const afterText = this.readBlob(`:${filePath}`);
+      if (beforeText === null && afterText === null) {
+        diagnostics.push(Object.freeze({ code: "staged-design-content-unavailable", path: filePath }));
+        continue;
+      }
+      const beforeParsed = parseFragments(beforeText ?? "");
+      const afterParsed = parseFragments(afterText ?? "");
+      if (!beforeParsed.validPrelude || !afterParsed.validPrelude) {
+        diagnostics.push(Object.freeze({ code: "invalid-staged-fragment-prelude", path: filePath }));
+        continue;
+      }
+      const before = indexByKey(beforeParsed.fragments);
+      const after = indexByKey(afterParsed.fragments);
+      if (before === null || after === null) {
+        diagnostics.push(Object.freeze({ code: "duplicate-staged-fragment-key", path: filePath }));
+        continue;
+      }
+      const keys = uniqueSorted([...before.keys(), ...after.keys()]);
+      for (const key of keys) {
+        const oldFragment = before.get(key);
+        const newFragment = after.get(key);
+        if (oldFragment?.content === newFragment?.content) continue;
+        const observed = newFragment ?? oldFragment;
+        if (!observed) continue;
+        fragments.push(
+          Object.freeze({
+            corpusRole,
+            declaredKey: key,
+            path: filePath,
+            changeKind: oldFragment === undefined ? "added" : newFragment === undefined ? "deleted" : "modified",
+            workItemIds: observed.workItemIds,
+            reflectionTargets: observed.reflectionTargets,
+          }),
+        );
+      }
+    }
+    if (diagnostics.length > 0) {
+      return Object.freeze({ state: "unavailable", diagnostics: Object.freeze(diagnostics) });
+    }
+    return Object.freeze({ state: "available", fragments: Object.freeze(fragments), diagnostics: Object.freeze([]) });
+  }
+
+  private readBlob(spec: string): string | null {
+    try {
+      return execFileSync("git", ["show", spec], {
+        cwd: this.rootDir,
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        maxBuffer: 8 * 1024 * 1024,
+      });
+    } catch {
+      return null;
+    }
+  }
+}

package/scripts/harness/validator-system/application/use-cases/run-l2-validators-usecase.ts

@@ -4,6 +4,7 @@
  *
  * RunL2ValidatorsUseCase — H08-01: L2バリデータ実行
  * @work-item-id WI-110 / WI-111 / WI-140 / WI-132 / WI-133 / WI-136 / WI-137 / WI-138
+ * @work-item-id WI-301
  */
 import { readFile } from "node:fs/promises";
 import type { CliCommandRegistryPort } from "../../domain/ports/cli-command-registry-port.js";
@@ -15,6 +16,7 @@ import type { PhaseGatePolicyPort } from "../../domain/ports/phase-gate-policy-p
 import type { TestQualityAnalyzerPort } from "../../domain/ports/test-quality-analyzer-port.js";
 import type { ValidatorConfigPort } from "../../domain/ports/validator-config-port.js";
 import type { WorkItemStatusPolicyPort } from "../../domain/ports/work-item-status-policy-port.js";
+import type { WorldConstraintAdmissionPolicyPort } from "../../domain/ports/world-constraint-admission-policy-port.js";
 import { CliE2eTestExistenceService } from "../../domain/services/cli-e2e-test-existence-service.js";
 import { ContractTraceabilityCoverageService } from "../../domain/services/contract-traceability-coverage-service.js";
 import { CoverageAttestationGatingService } from "../../domain/services/coverage-attestation-gating-service.js";
@@ -23,6 +25,7 @@ import {
   type ValidatorExecutionService,
 } from "../../domain/services/validator-execution-service.js";
 import type { ValidatorRegistry } from "../../domain/services/validator-registry.js";
+import { WorldConstraintAdmissionService } from "../../domain/services/world-constraint-admission-service.js";
 import { type HarnessErrorLike, ValidationResult } from "../../domain/value-objects/validation-result.js";
 import { ValidatorId } from "../../domain/value-objects/validator-id.js";
 import type { RunL2ValidatorsInput } from "../dto/run-l2-validators-input.js";
@@ -42,6 +45,7 @@ export interface RunL2ValidatorsUseCaseDeps {
   workItemStatusPolicyPort?: WorkItemStatusPolicyPort;
   contractTraceabilityPolicyPort?: ContractTraceabilityPolicyPort;
   coverageAttestationGatingPolicyPort?: CoverageAttestationGatingPolicyPort;
+  worldConstraintAdmissionPolicyPort?: WorldConstraintAdmissionPolicyPort;
 }
 
 export class RunL2ValidatorsUseCase {
@@ -57,9 +61,11 @@ export class RunL2ValidatorsUseCase {
   private readonly workItemStatusPolicyPort?: WorkItemStatusPolicyPort;
   private readonly contractTraceabilityPolicyPort?: ContractTraceabilityPolicyPort;
   private readonly coverageAttestationGatingPolicyPort?: CoverageAttestationGatingPolicyPort;
+  private readonly worldConstraintAdmissionPolicyPort?: WorldConstraintAdmissionPolicyPort;
   private readonly cliE2eTestExistenceService = new CliE2eTestExistenceService();
   private readonly contractTraceabilityCoverageService = new ContractTraceabilityCoverageService();
   private readonly coverageAttestationGatingService = new CoverageAttestationGatingService();
+  private readonly worldConstraintAdmissionService = new WorldConstraintAdmissionService();
 
   constructor(deps: RunL2ValidatorsUseCaseDeps) {
     this.registry = deps.validatorRegistry;
@@ -74,6 +80,7 @@ export class RunL2ValidatorsUseCase {
     this.workItemStatusPolicyPort = deps.workItemStatusPolicyPort;
     this.contractTraceabilityPolicyPort = deps.contractTraceabilityPolicyPort;
     this.coverageAttestationGatingPolicyPort = deps.coverageAttestationGatingPolicyPort;
+    this.worldConstraintAdmissionPolicyPort = deps.worldConstraintAdmissionPolicyPort;
   }
 
   async execute(input: RunL2ValidatorsInput): Promise<readonly ValidationResultContract[]> {
@@ -241,6 +248,30 @@ export class RunL2ValidatorsUseCase {
       }
     }
 
+    if (this.worldConstraintAdmissionPolicyPort) {
+      const l2017Result = overrideMap.get("L2-017");
+      if (l2017Result && !l2017Result.skipped) {
+        const observation = await this.worldConstraintAdmissionPolicyPort.collect();
+        const findings = this.worldConstraintAdmissionService.evaluate(observation);
+        if (findings.length > 0) {
+          const errors: HarnessErrorLike[] = findings.map((finding) => ({
+            code: { value: "L2-017", toString: () => "L2-017" },
+            severity: { value: finding.severity, toString: () => finding.severity },
+            message: finding.message,
+            suggestion: finding.suggestion,
+            ruleId: finding.ruleId,
+            violationFingerprint: finding.violationFingerprint,
+            constraintId: finding.constraintId,
+            classification: finding.classification,
+            sourcePath: finding.sourcePath,
+          }));
+          overrideMap.set("L2-017", ValidationResult.fail(ValidatorId.create("L2-017"), errors, 0));
+        } else {
+          overrideMap.set("L2-017", ValidationResult.pass(ValidatorId.create("L2-017"), 0));
+        }
+      }
+    }
+
     const finalResults = definitions.map(
       (definition) => overrideMap.get(definition.validatorId.value) ?? ValidationResult.skip(definition.validatorId),
     );

package/scripts/harness/validator-system/application/use-cases/run-l3-validators-usecase.ts

@@ -2,6 +2,9 @@
  * @layer application
  * @unit validator-system
  * @work-item-id WI-212
+ * @work-item-id WI-302
+ * @work-item-id WI-317
+ * @work-item-id WI-324
  *
  * RunL3ValidatorsUseCase — H08-02: L3バリデータ実行
  */
@@ -13,6 +16,7 @@ import type { InjectionScanPolicyPort } from "../../domain/ports/injection-scan-
 import type { PerformanceScannerPort } from "../../domain/ports/performance-scanner-port.js";
 import type { SecurityPatternScannerPort } from "../../domain/ports/security-pattern-scanner-port.js";
 import type { ValidatorConfigPort } from "../../domain/ports/validator-config-port.js";
+import type { WorldConstraintRederivationPolicyPort } from "../../domain/ports/world-constraint-rederivation-policy-port.js";
 import { CoverageAttestationVerificationService } from "../../domain/services/coverage-attestation-verification-service.js";
 import { InjectionPatternScanService } from "../../domain/services/injection-pattern-scan-service.js";
 import {
@@ -21,6 +25,7 @@ import {
 } from "../../domain/services/validator-execution-service.js";
 import { ValidatorLanguageCapabilityService } from "../../domain/services/validator-language-capability-service.js";
 import type { ValidatorRegistry } from "../../domain/services/validator-registry.js";
+import { WorldConstraintRederivationService } from "../../domain/services/world-constraint-rederivation-service.js";
 import type { HarnessErrorLike } from "../../domain/value-objects/validation-result.js";
 import { ValidationResult } from "../../domain/value-objects/validation-result.js";
 import { ValidatorId } from "../../domain/value-objects/validator-id.js";
@@ -54,6 +59,8 @@ export interface RunL3ValidatorsUseCaseDeps {
   injectionScanPolicyPort?: InjectionScanPolicyPort;
   /** WI-268 / ADR-030 §Decision.1・§Decision.3.② 第2段: L3-007 (coverage-attestation-verification, fail-closed) 用ポート。 */
   coverageAttestationVerificationPolicyPort?: CoverageAttestationVerificationPolicyPort;
+  /** WI-302: L3-008 authoritative World clean-corpus re-derivation port. */
+  worldConstraintRederivationPolicyPort?: WorldConstraintRederivationPolicyPort;
   /** L3-005 のスコープ対象 story-id（config layers.L3.acBoundStories 由来。既定 []）。 */
   acBoundStories?: readonly string[];
 }
@@ -70,10 +77,12 @@ export class RunL3ValidatorsUseCase {
   private readonly performanceScannerPort?: PerformanceScannerPort;
   private readonly injectionScanPolicyPort?: InjectionScanPolicyPort;
   private readonly coverageAttestationVerificationPolicyPort?: CoverageAttestationVerificationPolicyPort;
+  private readonly worldConstraintRederivationPolicyPort?: WorldConstraintRederivationPolicyPort;
   private readonly acBoundStories: readonly string[];
   private readonly languageCapabilityService = new ValidatorLanguageCapabilityService();
   private readonly injectionScanService = new InjectionPatternScanService();
   private readonly coverageAttestationVerificationService = new CoverageAttestationVerificationService();
+  private readonly worldConstraintRederivationService = new WorldConstraintRederivationService();
 
   constructor(deps: RunL3ValidatorsUseCaseDeps) {
     this.registry = deps.validatorRegistry;
@@ -87,6 +96,7 @@ export class RunL3ValidatorsUseCase {
     this.performanceScannerPort = deps.performanceScannerPort;
     this.injectionScanPolicyPort = deps.injectionScanPolicyPort;
     this.coverageAttestationVerificationPolicyPort = deps.coverageAttestationVerificationPolicyPort;
+    this.worldConstraintRederivationPolicyPort = deps.worldConstraintRederivationPolicyPort;
     this.acBoundStories = deps.acBoundStories ?? [];
   }
 
@@ -125,8 +135,10 @@ export class RunL3ValidatorsUseCase {
     );
 
     // L3-003: カバレッジ判定（カバレッジゲートはオプトイン）
-    // - coverageThreshold 未設定 → SKIP（透過的に判定をスキップ。getCoverage() は呼ばない）
-    // - coverageThreshold 設定あり → getCoverage() を try/catch で包み FAIL-CLOSED で判定する
+    // - coverageThreshold 未設定 or 0 → SKIP（透過的に判定をスキップ。getCoverage() は呼ばない）
+    //   0 は正規の opt-out（ドメイン VO L3Config.hasCoverageGate() の「threshold > 0 でのみ有効」と整合。
+    //   minimal preset の coverageThreshold: 0 もこの opt-out 意図。WI-317 / github#37）
+    // - coverageThreshold > 0 → getCoverage() を try/catch で包み FAIL-CLOSED で判定する
     //   - 閾値未満 → FAIL / 閾値以上 → PASS
     //   - レポート不在などで getCoverage() が失敗 → FAIL（合格扱いにしない）
     // このブロックは例外を送出せず、L3-003 の per-validator 結果のみを差し替える。
@@ -137,12 +149,12 @@ export class RunL3ValidatorsUseCase {
       const l3003Id = ValidatorId.create("L3-003");
       const threshold = layerConfig.getThreshold("coverageThreshold");
 
-      if (threshold === null) {
+      if (threshold === null || threshold === 0) {
         overrideMap.set(
           "L3-003",
           ValidationResult.skipWithReason(
             l3003Id,
-            "coverageThreshold が未設定のためカバレッジ判定をスキップ（カバレッジゲートはオプトイン）",
+            "coverageThreshold が未設定/0 のためカバレッジ判定をスキップ（カバレッジゲートはオプトイン。0 で opt-out）",
           ),
         );
       } else {
@@ -178,7 +190,8 @@ export class RunL3ValidatorsUseCase {
                   code: "L3-003",
                   severity: "error",
                   message: `coverageThreshold=${threshold}% が設定されていますがカバレッジレポートが見つかりません（テストをカバレッジ付きで実行してください）`,
-                  suggestion: "vitest --coverage 等でカバレッジレポートを生成してから再実行してください",
+                  suggestion:
+                    '次のいずれかで解消してください: (a) テストをカバレッジ付きで実行してレポートを生成する（例: vitest --coverage）、(b) カバレッジゲートを opt-out するなら config の layers.L3.coverageThreshold を 0 に設定する、(c) 非 JS/TS プロジェクトなら project.languages を宣言する（例: ["python"]。L3-003 自体が unsupported-language SKIP になる）',
                 },
               ],
               0,
@@ -216,7 +229,19 @@ export class RunL3ValidatorsUseCase {
         const policyResult = await this.acCoveragePolicyPort.checkCoverage({
           matrixFilePath: input.requirementMatrixPath,
         });
-        if (!policyResult.passed) {
+        // WI-324: フレッシュプロジェクト（story 未作成・matrix 未生成）は policy adapter が
+        // skipped=true を返すので、L3-003 の opt-out と同じ表現で skipWithReason に変換する。
+        // story が存在するのに matrix が不在の場合は従来どおり fail-closed（下の分岐）。
+        if (policyResult.skipped) {
+          overrideMap.set(
+            "L3-004",
+            ValidationResult.skipWithReason(
+              ValidatorId.create("L3-004"),
+              policyResult.skipReason ??
+                "story 未作成のため L3-004 をスキップ（story 作成後に requirement-test-matrix を生成すると有効化されます）",
+            ),
+          );
+        } else if (!policyResult.passed) {
           overrideMap.set("L3-004", ValidationResult.fail(ValidatorId.create("L3-004"), [...policyResult.errors], 0));
         }
       }
@@ -305,6 +330,32 @@ export class RunL3ValidatorsUseCase {
       }
     }
 
+    // WI-302 / ADR-030 trust root: L3-008 independently re-derives World obligations from the
+    // current corpus and versioned control declarations. The adapter has no persisted-report input.
+    if (this.worldConstraintRederivationPolicyPort) {
+      const l3008Result = overrideMap.get("L3-008");
+      if (l3008Result && !l3008Result.skipped) {
+        const observation = await this.worldConstraintRederivationPolicyPort.collect();
+        const findings = this.worldConstraintRederivationService.evaluate(observation);
+        if (findings.length > 0) {
+          const errors: HarnessErrorLike[] = findings.map((finding) => ({
+            code: { value: "L3-008", toString: () => "L3-008" },
+            severity: { value: finding.severity, toString: () => finding.severity },
+            message: finding.message,
+            suggestion: finding.suggestion,
+            sourcePath: finding.sourcePath,
+            ruleId: finding.ruleId,
+            violationFingerprint: finding.violationFingerprint,
+            constraintId: finding.constraintId,
+            classification: finding.classification,
+          }));
+          overrideMap.set("L3-008", ValidationResult.fail(ValidatorId.create("L3-008"), errors, 0));
+        } else {
+          overrideMap.set("L3-008", ValidationResult.pass(ValidatorId.create("L3-008"), 0));
+        }
+      }
+    }
+
     const finalResults = definitions.map(
       (definition) => overrideMap.get(definition.validatorId.value) ?? ValidationResult.skip(definition.validatorId),
     );

package/scripts/harness/validator-system/composition-root.ts

@@ -5,6 +5,10 @@
  * DI 組み立て — validator-system の全依存関係を構築する
  * @work-item-id WI-110 / WI-111 / WI-132 / WI-133 / WI-136 / WI-137 / WI-138 / WI-156
  * @work-item-id WI-217
+ * @work-item-id WI-301
+ * @work-item-id WI-302
+ * @work-item-id WI-305
+ * @work-item-id WI-322
  */
 
 import { join } from "node:path";
@@ -17,6 +21,7 @@ import { RunL2ValidatorsUseCase } from "./application/use-cases/run-l2-validator
 import { RunL3ValidatorsUseCase } from "./application/use-cases/run-l3-validators-usecase.js";
 import { RunL4ValidatorsUseCase } from "./application/use-cases/run-l4-validators-usecase.js";
 import { RunQuickModeUseCase } from "./application/use-cases/run-quick-mode-usecase.js";
+import { DesignChangeDeclarationPolicy } from "./domain/services/design-change-declaration-policy.js";
 import {
   ArchitectureSemanticAnalysisService,
   type ArchitectureSemanticPolicy,
@@ -55,6 +60,8 @@ import { PhaseDependencyPhaseGatePolicyAdapter } from "./infrastructure/adapters
 import { SourceFileTextScannerAdapter } from "./infrastructure/adapters/source-file-text-scanner-adapter.js";
 import { TraceabilityMetadataPolicyAdapter } from "./infrastructure/adapters/traceability-metadata-policy-adapter.js";
 import { TraceabilityWorkItemStatusPolicyAdapter } from "./infrastructure/adapters/traceability-work-item-status-policy-adapter.js";
+import { WorldModelConstraintAdmissionAdapter } from "./infrastructure/adapters/world-model-constraint-admission-adapter.js";
+import { WorldModelConstraintRederivationAdapter } from "./infrastructure/adapters/world-model-constraint-rederivation-adapter.js";
 import { ReportValidationResultsHandler } from "./presentation/handlers/report-validation-results-handler.js";
 import { RunQuickModeHandler } from "./presentation/handlers/run-quick-mode-handler.js";
 import { RunValidatorsHandler } from "./presentation/handlers/run-validators-handler.js";
@@ -67,7 +74,9 @@ const DEFAULT_CONFIG = {
     L3: {
       enabled: true,
       validators: ["L3-001", "L3-002", "L3-003", "L3-004", "L3-006", "L3-007"],
-      coverageThreshold: 90,
+      // WI-322 (github#37 残課題): カバレッジゲートはオプトイン（WI-317）。config なし環境の
+      // fallback で 90% を強制しない。0 = 正規の opt-out（L3-003 は透過 SKIP になる）。
+      coverageThreshold: 0,
       bundleSizeLimit: 512000,
       requirementMatrixPath: ".harness/requirement-test-matrix.json",
     },
@@ -99,12 +108,6 @@ const DEFAULT_CONFIG = {
 
 /** バリデータ定義カタログ */
 export function buildDefaultRegistry(): ValidatorRegistry {
-  const defaultRule = ValidationRule.create({
-    ruleName: "default-rule",
-    errorTemplate: { code: "L2-001", severity: "error", messageTemplate: "{{message}}" },
-    fixExample: null,
-  });
-
   const createDef = (
     id: string,
     layer: "L2" | "L3" | "L4",
@@ -134,6 +137,7 @@ export function buildDefaultRegistry(): ValidatorRegistry {
     createDef("L2-015", "L2", "always", "ContractTraceabilityPolicyPort"),
     // WI-258 / ADR-030 §Decision.3.②: L2-016 (coverage-attestation-gating, fail-closed, default-ON)。
     createDef("L2-016", "L2", "always", "CoverageAttestationGatingPolicyPort"),
+    createDef("L2-017", "L2", "always", "WorldConstraintAdmissionPolicyPort"),
     createDef("L3-001", "L3", "always"),
     createDef("L3-002", "L3", "strictOnly"),
     createDef("L3-003", "L3", "always"),
@@ -146,6 +150,7 @@ export function buildDefaultRegistry(): ValidatorRegistry {
     // WI-268 / ADR-030 §Decision.1・§Decision.3.② 第2段: L3-007 (coverage-attestation-verification)
     // は fail-closed / default-ON。L2-016 の authoritative 相棒。
     createDef("L3-007", "L3", "always", "CoverageAttestationVerificationPolicyPort"),
+    createDef("L3-008", "L3", "always", "WorldConstraintRederivationPolicyPort"),
     createDef("L4-001", "L4", "always"),
     createDef("L4-002", "L4", "always"),
     createDef("L4-003", "L4", "strictOnly"),
@@ -170,6 +175,7 @@ export interface ValidatorSystemModule {
   aggregateValidationResultsUseCase: AggregateValidationResultsUseCase;
   runFullValidationUseCase: RunFullValidationUseCase;
   driftDetectionService: DriftDetectionService;
+  designChangeDeclarationPolicy: DesignChangeDeclarationPolicy;
   handlers: {
     runValidators: RunValidatorsHandler;
     runQuickMode: RunQuickModeHandler;
@@ -184,6 +190,7 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
   const defaultFailOnWarning = configData.validate?.failOnWarning ?? false;
   const registry = buildDefaultRegistry();
   const executionService = new ValidatorExecutionService({ configPort });
+  const designChangeDeclarationPolicy = new DesignChangeDeclarationPolicy();
   const contractMapper = new ValidationResultContractMapper();
   const phaseGatePolicyPort = new PhaseDependencyPhaseGatePolicyAdapter();
   const metadataPolicyPort = new TraceabilityMetadataPolicyAdapter();
@@ -201,6 +208,14 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
   // WI-258 / ADR-030 §Decision.3.②: L2-016 (coverage-attestation-gating) 用アダプタ。
   // docs/product/construction/*​/coverage_report.md を cwd 起点で走査する（targetPaths 非依存）。
   const coverageAttestationGatingPolicyPort = new FileSystemCoverageAttestationGatingAdapter(process.cwd());
+  const worldConstraintAdmissionPolicyPort = new WorldModelConstraintAdmissionAdapter({
+    rootDir: process.cwd(),
+    resolvedConfig: (configData as { world?: import("../world-model/index.js").WorldResolvedConfigInput }).world,
+  });
+  const worldConstraintRederivationPolicyPort = new WorldModelConstraintRederivationAdapter({
+    rootDir: process.cwd(),
+    resolvedConfig: (configData as { world?: import("../world-model/index.js").WorldResolvedConfigInput }).world,
+  });
   // WI-259 / ADR-030 §Decision.3.④: L3-006 (injection-scan, advisory) 用アダプタ。
   // 指示搭載ファイル群（skills/**​/SKILL.md / CLAUDE.md / AGENTS.md / agent-context / .claude/settings.json）を
   // cwd 起点で走査する（targetPaths 非依存）。
@@ -249,6 +264,7 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
     workItemStatusPolicyPort,
     contractTraceabilityPolicyPort,
     coverageAttestationGatingPolicyPort,
+    worldConstraintAdmissionPolicyPort,
   });
 
   // WI-227 / H16-03: L3-005 のスコープ対象 story-id を config から取得（既定 []）。
@@ -267,6 +283,7 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
     performanceScannerPort,
     injectionScanPolicyPort,
     coverageAttestationVerificationPolicyPort,
+    worldConstraintRederivationPolicyPort,
     acBoundStories,
   });
 
@@ -367,6 +384,7 @@ export function createValidatorSystemModule(config?: object): ValidatorSystemMod
     aggregateValidationResultsUseCase,
     runFullValidationUseCase,
     driftDetectionService,
+    designChangeDeclarationPolicy,
     handlers,
   };
 }

package/scripts/harness/validator-system/domain/ports/ac-coverage-policy-port.ts

@@ -4,11 +4,20 @@
  *
  * AcCoveragePolicyPort — nyquist-validation AcCoverageGatePolicy（L3-004）
  */
-import type { HarnessErrorLike } from '../value-objects/validation-result.js';
+import type { HarnessErrorLike } from "../value-objects/validation-result.js";
 
 export interface AcCoveragePolicyPort {
   checkCoverage(context: { matrixFilePath?: string }): Promise<{
     passed: boolean;
     errors: readonly HarnessErrorLike[];
+    /**
+     * WI-324: フレッシュプロジェクト（story 未作成・matrix 未生成）では L3-004 を
+     * fail-closed ではなく SKIP として扱う。true の場合、上位（RunL3ValidatorsUseCase）は
+     * skipReason 付きの skipWithReason 結果へ変換する。省略時（既存実装・既存モック）は
+     * 従来どおり passed/errors のみで判定される（後方互換 optional）。
+     */
+    skipped?: boolean;
+    /** skipped=true のときの人間可読なスキップ理由。 */
+    skipReason?: string;
   }>;
 }