pomaster 0.3.0 → 0.4.0

package/catalog/policies/policy.test.risk_driven_plan.json

@@ -0,0 +1,92 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+25+9 条同因同请，合并进同一 vocab PR）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "B6c BE 播种移植（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G1",
+    "candidate_id": "POLICY.TEST.RISK_DRIVEN_PLAN",
+    "density_rank": "UNIVERSAL",
+    "density_score": 32.12,
+    "pool_statement_sha16": "63e15d625c19ba94",
+    "curated_rule": "B6c 分母（BE universal 33：32 编号协议 + index）required 池（ELIGIBLE 未物化 + 卡层锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）按池密度序取前 22 + advisory 池（SHOULD 源 backlog policy 卡 + 行锚全落建议段闭包）按同公式密度序取前 3 = 25（D5 上限/批内执行）；UNIVERSAL + UNIVERSAL_POLICY + 无 uncertainty + 非 project_scope + 非重复",
+    "denominator": "MASTer（池卡 source 锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "B6C",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "MUST"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/28-testing-protocol.md",
+      "sha256": "f5df73dd7bec4ccf4132c3d7a9918a6f1cb0dd9682aa17956cb24446aa406ad7",
+      "bytes": 1267
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/28-testing-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json"
+  },
+  "id": "POLICY.TEST.RISK_DRIVEN_PLAN",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "测试计划按风险覆盖",
+  "statement_zh": "测试计划必须覆盖被变更行为、边界条件、失败路径、兼容性与高风险交互。",
+  "statement_en_keywords": [
+    "risk driven test plan",
+    "failure path",
+    "compatibility"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "制定测试计划",
+    "applicability_note": "制定测试计划"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "B6c BE 播种移植物化；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.TEST.RISK_DRIVEN_PLAN",
+        "source_protocol": ".trellis/spec/backend/28-testing-protocol.md",
+        "lines": "25"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "测试计划风险覆盖在既有 193 条中无对应条目（TEST.PYRAMID_AND_CI_MATRIX 管形态与 CI 矩阵），零语义重复。"
+  ]
+}

package/catalog/policies/policy.test.stable_observable_assertions.json

@@ -0,0 +1,92 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）；新 id 域段待登记：TEST",
+    "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+25 条同因同请，合并进同一 vocab PR）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "B6b-I FE 播种移植（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "FE-G1",
+    "candidate_id": "POLICY.TEST.STABLE_OBSERVABLE_ASSERTIONS",
+    "density_rank": null,
+    "density_score": 32.44,
+    "pool_statement_sha16": "4f751d4f7233fccb",
+    "curated_rule": "B6b-I 分母（FE 01-23）required 池（ELIGIBLE 未物化）按池密度序取前 22 + advisory 池（SHOULD 源 backlog policy 卡）按同公式密度序取前 3 = 25（D5 上限）；UNIVERSAL + UNIVERSAL_POLICY + 无 uncertainty + 非 project_scope + 非重复",
+    "denominator": "MASTer（池卡 source_protocol 锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "B6B-1",
+    "human_review_required": true,
+    "enforcement_axis": {
+      "source_sections": [
+        "MUST",
+        "MUST NOT"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/frontend-hard-spec/assets/universal/20-testing-protocol.md",
+      "sha256": "477dc049d1e1ec72898a07615655ee374924c7796a0210741e8c97474644a4d6",
+      "bytes": 2831
+    },
+    "seeded_spec": ".pomaster/specs/hard/frontend/20-testing-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json"
+  },
+  "id": "POLICY.TEST.STABLE_OBSERVABLE_ASSERTIONS",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "测试断言可观察行为",
+  "statement_zh": "测试必须稳定、可重复，并断言用户可观察的行为；以实现细节作为主定位手段被禁止。",
+  "statement_en_keywords": [
+    "observable assertions",
+    "stable repeatable tests",
+    "no implementation detail selectors"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "测试编写与定位器选择",
+    "applicability_note": "测试编写与定位器选择"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "B6b-I FE 播种移植物化；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/FE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.TEST.STABLE_OBSERVABLE_ASSERTIONS",
+        "source_protocol": ".trellis/spec/frontend/20-testing-protocol.md",
+        "lines": "L23, L35"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "测试断言质量在既有 143 条中无对应条目，零语义重复。"
+  ]
+}

package/catalog/policies/policy.tool.discoverable_toolchain.json

@@ -0,0 +1,92 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+25+9 条同因同请，合并进同一 vocab PR）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "B6c BE 播种移植（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G1",
+    "candidate_id": "POLICY.TOOL.DISCOVERABLE_TOOLCHAIN",
+    "density_rank": "UNIVERSAL",
+    "density_score": 32.31,
+    "pool_statement_sha16": "44b1d0cd7a528ae6",
+    "curated_rule": "B6c 分母（BE universal 33：32 编号协议 + index）required 池（ELIGIBLE 未物化 + 卡层锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）按池密度序取前 22 + advisory 池（SHOULD 源 backlog policy 卡 + 行锚全落建议段闭包）按同公式密度序取前 3 = 25（D5 上限/批内执行）；UNIVERSAL + UNIVERSAL_POLICY + 无 uncertainty + 非 project_scope + 非重复",
+    "denominator": "MASTer（池卡 source 锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "B6C",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "MUST"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/26-engineering-tooling-protocol.md",
+      "sha256": "b0fcecee17a3acdb11f59f065ae7cac269cc292e999dd39444e5293565d38fe1",
+      "bytes": 1263
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/26-engineering-tooling-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json"
+  },
+  "id": "POLICY.TOOL.DISCOVERABLE_TOOLCHAIN",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "工具链可发现可复现",
+  "statement_zh": "运行时、构建工具、依赖锁定与质量命令必须能在仓库或受控环境中被找到并复现。",
+  "statement_en_keywords": [
+    "discoverable toolchain",
+    "lockfile",
+    "reproducible commands"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "搭建或维护构建与检查链",
+    "applicability_note": "搭建或维护构建与检查链"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "B6c BE 播种移植物化；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.TOOL.DISCOVERABLE_TOOLCHAIN",
+        "source_protocol": ".trellis/spec/backend/26-engineering-tooling-protocol.md",
+        "lines": "25"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "工具链可发现性在既有 193 条中无对应条目（TOOL.NO_VENDORED_BODY_EDITS 管第三方工具正文），零语义重复。"
+  ]
+}

package/catalog/policies/policy.tool.no_hand_edit_generated_no_ci_drift.json

@@ -0,0 +1,91 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+25+9 条同因同请，合并进同一 vocab PR）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "B6c BE 播种移植（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G1",
+    "candidate_id": "POLICY.TOOL.NO_HAND_EDIT_GENERATED_NO_CI_DRIFT",
+    "density_rank": "UNIVERSAL",
+    "density_score": 31.94,
+    "pool_statement_sha16": "5accb43a83c786e9",
+    "curated_rule": "B6c 分母（BE universal 33：32 编号协议 + index）required 池（ELIGIBLE 未物化 + 卡层锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）按池密度序取前 22 + advisory 池（SHOULD 源 backlog policy 卡 + 行锚全落建议段闭包）按同公式密度序取前 3 = 25（D5 上限/批内执行）；UNIVERSAL + UNIVERSAL_POLICY + 无 uncertainty + 非 project_scope + 非重复",
+    "denominator": "MASTer（池卡 source 锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "B6C",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "MUST NOT"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/26-engineering-tooling-protocol.md",
+      "sha256": "b0fcecee17a3acdb11f59f065ae7cac269cc292e999dd39444e5293565d38fe1",
+      "bytes": 1263
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/26-engineering-tooling-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json"
+  },
+  "id": "POLICY.TOOL.NO_HAND_EDIT_GENERATED_NO_CI_DRIFT",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "禁手改产物与门禁双标",
+  "statement_zh": "禁止手工修改生成产物；本地与 CI 必须执行同一套门禁，不得双标。",
+  "statement_en_keywords": [
+    "no hand edit generated artifacts",
+    "no local CI gate divergence"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "处理生成产物或配置本地与 CI 环境",
+    "applicability_note": "处理生成产物或配置本地与 CI 环境"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "B6c BE 播种移植物化；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.TOOL.NO_HAND_EDIT_GENERATED_NO_CI_DRIFT",
+        "source_protocol": ".trellis/spec/backend/26-engineering-tooling-protocol.md",
+        "lines": "29"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "生成产物禁手改与门禁一致性在既有 193 条中无对应条目（REGISTRY.HUMAN_FIELDS_VALIDATED_DECORRELATED 的 generator decoupled assertion 为登记表轴），零语义重复。"
+  ]
+}

package/catalog/policies/policy.tool.no_vendored_body_edits.json

@@ -0,0 +1,94 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+25 条同因同请，合并进同一 vocab PR）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "B6b-I FE 播种移植（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "FE-G1",
+    "candidate_id": "POLICY.TOOL.NO_VENDORED_BODY_EDITS",
+    "density_rank": null,
+    "density_score": 33.06,
+    "pool_statement_sha16": "d47b4bba8a56a7fe",
+    "curated_rule": "B6b-I 分母（FE 01-23）required 池（ELIGIBLE 未物化）按池密度序取前 22 + advisory 池（SHOULD 源 backlog policy 卡）按同公式密度序取前 3 = 25（D5 上限）；UNIVERSAL + UNIVERSAL_POLICY + 无 uncertainty + 非 project_scope + 非重复",
+    "denominator": "MASTer（池卡 source_protocol 锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "B6B-1",
+    "human_review_required": true,
+    "enforcement_axis": {
+      "source_sections": [
+        "MUST NOT",
+        "Anti-patterns"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [
+      "调试排查：AG Grid / 复杂组件空白"
+    ],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/frontend-hard-spec/assets/universal/10-engineering-tooling-protocol.md",
+      "sha256": "c628d47dcae1ddd58ea3651eeae9dd84ff5157365a3892a367bd7b5bf0af2b9d",
+      "bytes": 2782
+    },
+    "seeded_spec": ".pomaster/specs/hard/frontend/10-engineering-tooling-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json"
+  },
+  "id": "POLICY.TOOL.NO_VENDORED_BODY_EDITS",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "禁改第三方工具正文消误报",
+  "statement_zh": "不得为消除第三方或生成工具的误报而放宽应用侧规则，更不得直接改动工具包正文；修复应走适配或配置层。",
+  "statement_en_keywords": [
+    "no vendored body edits",
+    "suppress false positives properly",
+    "adapter or config layer"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "vendored/generated 工具与门禁冲突处置",
+    "applicability_note": "vendored/generated 工具与门禁冲突处置"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "B6b-I FE 播种移植物化；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/FE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.TOOL.NO_VENDORED_BODY_EDITS",
+        "source_protocol": ".trellis/spec/frontend/10-engineering-tooling-protocol.md",
+        "lines": "L39, L131, L149"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "vendored 物料修复纪律在既有 143 条中无对应条目，零语义重复；statement 措辞为 lane 中性（第三方工具/生成物通用）。"
+  ]
+}

package/catalog/policies/policy.tool.scoped_scan_boundary.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）；新 id 域段待登记：TOOL",
     "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+9 条同因同请，合并进同一 vocab PR）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-spec-d-materialization": {
     "status": "PROPOSAL",

package/catalog/policies/policy.tool.upgrade_verify_lock_rollback.json

@@ -0,0 +1,92 @@
+{
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "裁定批 F/D3-R1 排除卡逐卡复核物化（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G1",
+    "candidate_id": "POLICY.TOOL.UPGRADE_VERIFY_LOCK_ROLLBACK",
+    "pool_statement_sha16": "2f1c5656b02a0479",
+    "curated_rule": "D3 逐卡复核批（Owner 2026-09-05 裁定 D3=逐卡复核；72 张保守排除卡逐卡核锚）：required 9（D3b source=null 补锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）+ advisory 16（Change Policy 锚 14 张降 advisory[行内容含「必须」行为规范、强度只降不升] + 池密度序前 2）= 25（D6 合并上限 policy+TP 合计 25/批内执行；超出 17 张 advisory 留 D3-R2 轮次台账）；维持排除 30（Ownership 归属说明族）",
+    "denominator": "MASTer（池卡锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "D3-R1",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "Change Policy"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/26-engineering-tooling-protocol.md",
+      "sha256": "b0fcecee17a3acdb11f59f065ae7cac269cc292e999dd39444e5293565d38fe1",
+      "bytes": 1263
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/26-engineering-tooling-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json",
+    "d3_review": {
+      "excluded_from_batch": "B6C",
+      "exclusion_reason_at_seed": "行锚段映射非 MUST/MUST NOT（池 enforcement 判定矛盾，保守排除待复核）",
+      "adjudication": "D3 逐卡复核（Owner 2026-09-05 裁定 D3=逐卡复核，裁定批 F 落地 2026-09-05）：本卡原属 B6C 保守排除留池（排除理由：行锚段映射非 MUST/MUST NOT（池 enforcement 判定矛盾，保守排除待复核））；复核补锚回 vendor/MASTer 源取得行级证据，锚段=Change Policy，按强度入册（行内容含「必须」行为规范、Change Policy 段 advisory 落点（强度只降不升））",
+      "anchor_evidence": "MASTer 26-engineering-tooling-protocol.md 57「工具升级必须验证兼容、锁文件、生成差异和回退。」",
+      "pool_enforcement_at_seed": "required_when_applicable"
+    }
+  },
+  "id": "POLICY.TOOL.UPGRADE_VERIFY_LOCK_ROLLBACK",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "工具升级验证与回退",
+  "statement_zh": "工具升级必须验证兼容性、锁文件变化与生成差异，并预备回退路径。",
+  "statement_en_keywords": [
+    "tool upgrade",
+    "compat verification",
+    "lockfile",
+    "rollback"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "升级构建或检查工具",
+    "applicability_note": "升级构建或检查工具"
+  },
+  "enforcement": "advisory",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "裁定批 F/D3-R1 D3 逐卡复核物化（原 B6C 保守排除卡补锚收编）；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.TOOL.UPGRADE_VERIFY_LOCK_ROLLBACK",
+        "source_protocol": ".trellis/spec/backend/26-engineering-tooling-protocol.md",
+        "lines": "57"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "工具升级四验证（兼容/锁文件/生成差异/回退）在既有 228 条中无对应条目；与 POLICY.DEP.BUILD_PATH_SUPPLY_CHAIN（B6b-I 构建链路供应链）互引（升级时点专项）。",
+    "Change Policy 锚（MASTer 26 L57）——降 advisory 入册。"
+  ]
+}

package/catalog/policies/policy.web.api.auth_app_client_split.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
     "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45 条同因同请，合并进同一 vocab PR）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-batch4-uplift": {
     "status": "PROPOSAL",

package/catalog/policies/policy.web.api.client_change_impact.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
     "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-pilot-proposal": {
     "status": "PROPOSAL",

package/catalog/policies/policy.web.api.domain_api_only.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
     "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-pilot-proposal": {
     "status": "PROPOSAL",

package/catalog/policies/policy.web.api.error_normalization.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
     "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-pilot-proposal": {
     "status": "PROPOSAL",

package/catalog/policies/policy.web.api.generated_client.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
     "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-pilot-proposal": {
     "status": "PROPOSAL",