pomaster 0.3.0 → 0.4.0

package/catalog/policies/policy.api.contract_impl_consistency.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
     "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-pilot-proposal": {
     "status": "PROPOSAL",

package/catalog/policies/policy.api.no_informal_contract.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
     "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-pilot-proposal": {
     "status": "PROPOSAL",

package/catalog/policies/policy.arch.adr_immutable_history.json

@@ -0,0 +1,91 @@
+{
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "裁定批 F/D3-R1 排除卡逐卡复核物化（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G1",
+    "candidate_id": "POLICY.ARCH.ADR_IMMUTABLE_HISTORY",
+    "pool_statement_sha16": "c625fdf153e9ef45",
+    "curated_rule": "D3 逐卡复核批（Owner 2026-09-05 裁定 D3=逐卡复核；72 张保守排除卡逐卡核锚）：required 9（D3b source=null 补锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）+ advisory 16（Change Policy 锚 14 张降 advisory[行内容含「必须」行为规范、强度只降不升] + 池密度序前 2）= 25（D6 合并上限 policy+TP 合计 25/批内执行；超出 17 张 advisory 留 D3-R2 轮次台账）；维持排除 30（Ownership 归属说明族）",
+    "denominator": "MASTer（池卡锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "D3-R1",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "Change Policy"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/01-architecture-governance-protocol.md",
+      "sha256": "726502f4e5a5dcf2e8076fafa943b33de4b7ab9bd0fc2d8551479b43385e7636",
+      "bytes": 1394
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/01-architecture-governance-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json",
+    "d3_review": {
+      "excluded_from_batch": "B6C",
+      "exclusion_reason_at_seed": "行锚段映射非 MUST/MUST NOT（池 enforcement 判定矛盾，保守排除待复核）",
+      "adjudication": "D3 逐卡复核（Owner 2026-09-05 裁定 D3=逐卡复核，裁定批 F 落地 2026-09-05）：本卡原属 B6C 保守排除留池（排除理由：行锚段映射非 MUST/MUST NOT（池 enforcement 判定矛盾，保守排除待复核））；复核补锚回 vendor/MASTer 源取得行级证据，锚段=Change Policy，按强度入册（行内容含「必须」行为规范、Change Policy 段 advisory 落点（强度只降不升））",
+      "anchor_evidence": "MASTer 01-architecture-governance-protocol.md 57「改变已采用架构必须新增或替代 ADR，不得静默改写历史结论。」",
+      "pool_enforcement_at_seed": "required_when_applicable"
+    }
+  },
+  "id": "POLICY.ARCH.ADR_IMMUTABLE_HISTORY",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "架构结论禁静默改写",
+  "statement_zh": "推翻既有架构结论必须新增或显式替代既有决策记录，禁止静默改写历史结论。",
+  "statement_en_keywords": [
+    "immutable decision history",
+    "supersede",
+    "no silent rewrite"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "改变已采用架构时",
+    "applicability_note": "改变已采用架构时"
+  },
+  "enforcement": "advisory",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "裁定批 F/D3-R1 D3 逐卡复核物化（原 B6C 保守排除卡补锚收编）；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.ARCH.ADR_IMMUTABLE_HISTORY",
+        "source_protocol": ".trellis/spec/backend/01-architecture-governance-protocol.md",
+        "lines": "57"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "决策记录禁静默改写在既有 228 条中无对应条目；与 kernel decision-graph 冻结纪律（投影指纹 human_touch forbidden）语义呼应不同层。",
+    "Change Policy 锚（MASTer 01 L57）——降 advisory 入册。"
+  ]
+}

package/catalog/policies/policy.arch.decision_tradeoff_record.json

@@ -3,7 +3,8 @@
     "status": "vocab_pr_candidate",
     "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）；新 id 域段待登记：ARCH",
     "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+9 条同因同请，合并进同一 vocab PR）",
-    "locked_vocab_untouched": true
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
   },
   "x-spec-d-materialization": {
     "status": "PROPOSAL",

package/catalog/policies/policy.arch.no_convenience_over_boundary.json

@@ -0,0 +1,93 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+25+9 条同因同请，合并进同一 vocab PR）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "B6c BE 播种移植（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G1",
+    "candidate_id": "POLICY.ARCH.NO_CONVENIENCE_OVER_BOUNDARY",
+    "density_rank": "UNIVERSAL",
+    "density_score": 32.94,
+    "pool_statement_sha16": "63fe37b325accbda",
+    "curated_rule": "B6c 分母（BE universal 33：32 编号协议 + index）required 池（ELIGIBLE 未物化 + 卡层锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）按池密度序取前 22 + advisory 池（SHOULD 源 backlog policy 卡 + 行锚全落建议段闭包）按同公式密度序取前 3 = 25（D5 上限/批内执行）；UNIVERSAL + UNIVERSAL_POLICY + 无 uncertainty + 非 project_scope + 非重复",
+    "denominator": "MASTer（池卡 source 锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "B6C",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "MUST NOT"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/01-architecture-governance-protocol.md",
+      "sha256": "726502f4e5a5dcf2e8076fafa943b33de4b7ab9bd0fc2d8551479b43385e7636",
+      "bytes": 1394
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/01-architecture-governance-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json"
+  },
+  "id": "POLICY.ARCH.NO_CONVENIENCE_OVER_BOUNDARY",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "禁以便利越过边界分析",
+  "statement_zh": "禁止以局部实现便利为由绕开边界、数据所有权或部署约束的结构化分析，便利性论据不能替代影响评估。",
+  "statement_en_keywords": [
+    "no convenience shortcut",
+    "boundary analysis",
+    "data ownership",
+    "deployment constraint"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "任何架构相关实现决策",
+    "applicability_note": "任何架构相关实现决策"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "B6c BE 播种移植物化；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.ARCH.NO_CONVENIENCE_OVER_BOUNDARY",
+        "source_protocol": ".trellis/spec/backend/01-architecture-governance-protocol.md",
+        "lines": "29"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "便利性不得替代边界影响评估在既有 193 条中无对应条目（BOUNDARY.VALIDATE_IN_ENCODE_OUT 管数据边界，非结构决策轴），零语义重复。"
+  ]
+}

package/catalog/policies/policy.arch.prefer_verifiable_option.json

@@ -0,0 +1,92 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind 及新域段；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45+25+9 条同因同请，合并进同一 vocab PR）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0009 收编落地（vocab-lock@v0.8-resolved，三镜像同 commit；Owner 裁定 D4=(a) 2026-09-05）：kind='policy' 是 catalog 物料分类词形（catalog_layer_vocab.catalog_kind 在册——PR-0006，不受 kinds_registry.truth_bodies 闭包管辖），POLICY. 前缀为 governed 闭包既有前缀，id 域段词形随 catalog_layer_vocab.policy_id_domains / policy_web_domains 收编；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "B6c BE 播种移植（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G1",
+    "candidate_id": "POLICY.ARCH.PREFER_VERIFIABLE_OPTION",
+    "density_rank": "UNIVERSAL",
+    "density_score": 32.0,
+    "pool_statement_sha16": "a2617515696dbf35",
+    "curated_rule": "B6c 分母（BE universal 33：32 编号协议 + index）required 池（ELIGIBLE 未物化 + 卡层锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）按池密度序取前 22 + advisory 池（SHOULD 源 backlog policy 卡 + 行锚全落建议段闭包）按同公式密度序取前 3 = 25（D5 上限/批内执行）；UNIVERSAL + UNIVERSAL_POLICY + 无 uncertainty + 非 project_scope + 非重复",
+    "denominator": "MASTer（池卡 source 锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "B6C",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "SHOULD"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/01-architecture-governance-protocol.md",
+      "sha256": "726502f4e5a5dcf2e8076fafa943b33de4b7ab9bd0fc2d8551479b43385e7636",
+      "bytes": 1394
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/01-architecture-governance-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json"
+  },
+  "id": "POLICY.ARCH.PREFER_VERIFIABLE_OPTION",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "优先可验证方案",
+  "statement_zh": "方案取舍应优先选择现有团队、工具链与运行证据能够持续验证的选项。",
+  "statement_en_keywords": [
+    "verifiable option",
+    "team capability",
+    "runtime evidence"
+  ],
+  "applies_when": {
+    "lane": "any",
+    "condition": "多个可行方案比较时",
+    "applicability_note": "多个可行方案比较时"
+  },
+  "enforcement": "advisory",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "B6c BE 播种移植物化；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G1.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.ARCH.PREFER_VERIFIABLE_OPTION",
+        "source_protocol": ".trellis/spec/backend/01-architecture-governance-protocol.md",
+        "lines": "33"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "advisory 物化（SHOULD 源）：方案取舍优先可验证选项，源段 SHOULD——advisory 落点；与 ARCH.DECISION_TRADEOFF_RECORD（ELIGIBLE 池未物化）同域不同时点，零语义重复；enforcement 轴断言钉。"
+  ]
+}

package/catalog/policies/policy.authz.no_gating_proxy_trust.json

@@ -0,0 +1,99 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "id 域段待登记：AUTHZ（vocab-lock@v0.8-resolved policy_id_domains 32 段未含——PR-0009 后新用域段沿用候选注记先例，词汇表 PR 增补）",
+    "proposal": "词汇表 PR 增补新 id 域段至 catalog_layer_vocab.policy_id_domains（与 PR-0009 同轴追加，append-only）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0010 增补落地（vocab-lock@v0.9-resolved，append-only 纯增量；Owner 2026-09-05 第二轮裁定开放项 2 全做——裁定批 G 收尾批）：AUTHZ/PRV/ERR 三 id 域段随 catalog_layer_vocab.policy_id_domains 扩值收编（32→35 段，与 PR-0009 同轴追加，词值零改动）；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "裁定批 F/D3-R1 排除卡逐卡复核物化（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G2",
+    "candidate_id": "POLICY.AUTHZ.NO_GATING_PROXY_TRUST",
+    "pool_statement_sha16": "f57a38b345fbc8b6",
+    "curated_rule": "D3 逐卡复核批（Owner 2026-09-05 裁定 D3=逐卡复核；72 张保守排除卡逐卡核锚）：required 9（D3b source=null 补锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）+ advisory 16（Change Policy 锚 14 张降 advisory[行内容含「必须」行为规范、强度只降不升] + 池密度序前 2）= 25（D6 合并上限 policy+TP 合计 25/批内执行；超出 17 张 advisory 留 D3-R2 轮次台账）；维持排除 30（Ownership 归属说明族）",
+    "denominator": "MASTer（池卡锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "D3-R1",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "MUST NOT"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/17-permission-authorization-protocol.md",
+      "sha256": "d85a431b682a3a7c3dd4a6ee1f67fc375b54edb4a8e7fe98d283103b64a6b41e",
+      "bytes": 1378
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/17-permission-authorization-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json",
+    "d3_review": {
+      "excluded_from_batch": "B6C",
+      "exclusion_reason_at_seed": "卡层 source=null（锚证据不足），保守排除待复核",
+      "adjudication": "D3 逐卡复核（Owner 2026-09-05 裁定 D3=逐卡复核，裁定批 F 落地 2026-09-05）：本卡原属 B6C 保守排除留池（排除理由：卡层 source=null（锚证据不足），保守排除待复核）；复核补锚回 vendor/MASTer 源取得行级证据，锚段=MUST NOT，按强度入册（MUST/MUST NOT 行锚 required 原样）",
+      "anchor_evidence": "MASTer 17-permission-authorization-protocol.md 29「- 不得只依赖路由隐藏、按钮状态或客户端传入的租户与 owner。」",
+      "pool_enforcement_at_seed": "required_when_applicable"
+    }
+  },
+  "id": "POLICY.AUTHZ.NO_GATING_PROXY_TRUST",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "门禁表象不作授权凭据",
+  "statement_zh": "路由不可见、按钮置灰、或请求方自行声明的租户与归属字段——这些客户端侧表象一律不得当作授权通过的凭据。",
+  "statement_en_keywords": [
+    "no gating proxy trust",
+    "route hiding",
+    "button state",
+    "client-declared tenant/owner"
+  ],
+  "applies_when": {
+    "lane": "backend",
+    "condition": "服务端授权判定",
+    "applicability_note": "服务端授权判定"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "裁定批 F/D3-R1 D3 逐卡复核物化（原 B6C 保守排除卡补锚收编）；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G2.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.AUTHZ.NO_GATING_PROXY_TRUST",
+        "source_protocol": ".trellis/spec/backend/17-permission-authorization-protocol.md",
+        "lines": "29"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "客户端门禁表象禁令在既有 228 条中无对应条目；与同批 SERVER_FIVE_FACTOR_VERIFICATION 互引（正反两面）。",
+    "D3b 补锚：MASTer 17-permission-authorization-protocol.md L29（MUST NOT 段）。"
+  ]
+}

package/catalog/policies/policy.authz.permission_scope_expansion_gate.json

@@ -0,0 +1,99 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "id 域段待登记：AUTHZ（vocab-lock@v0.8-resolved policy_id_domains 32 段未含——PR-0009 后新用域段沿用候选注记先例，词汇表 PR 增补）",
+    "proposal": "词汇表 PR 增补新 id 域段至 catalog_layer_vocab.policy_id_domains（与 PR-0009 同轴追加，append-only）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0010 增补落地（vocab-lock@v0.9-resolved，append-only 纯增量；Owner 2026-09-05 第二轮裁定开放项 2 全做——裁定批 G 收尾批）：AUTHZ/PRV/ERR 三 id 域段随 catalog_layer_vocab.policy_id_domains 扩值收编（32→35 段，与 PR-0009 同轴追加，词值零改动）；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "裁定批 F/D3-R1 排除卡逐卡复核物化（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G2",
+    "candidate_id": "POLICY.AUTHZ.PERMISSION_SCOPE_EXPANSION_GATE",
+    "pool_statement_sha16": "1396b5b32e0ebac8",
+    "curated_rule": "D3 逐卡复核批（Owner 2026-09-05 裁定 D3=逐卡复核；72 张保守排除卡逐卡核锚）：required 9（D3b source=null 补锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）+ advisory 16（Change Policy 锚 14 张降 advisory[行内容含「必须」行为规范、强度只降不升] + 池密度序前 2）= 25（D6 合并上限 policy+TP 合计 25/批内执行；超出 17 张 advisory 留 D3-R2 轮次台账）；维持排除 30（Ownership 归属说明族）",
+    "denominator": "MASTer（池卡锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "D3-R1",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "Change Policy"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/17-permission-authorization-protocol.md",
+      "sha256": "d85a431b682a3a7c3dd4a6ee1f67fc375b54edb4a8e7fe98d283103b64a6b41e",
+      "bytes": 1378
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/17-permission-authorization-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json",
+    "d3_review": {
+      "excluded_from_batch": "B6C",
+      "exclusion_reason_at_seed": "卡层 source=null（锚证据不足），保守排除待复核",
+      "adjudication": "D3 逐卡复核（Owner 2026-09-05 裁定 D3=逐卡复核，裁定批 F 落地 2026-09-05）：本卡原属 B6C 保守排除留池（排除理由：卡层 source=null（锚证据不足），保守排除待复核）；复核补锚回 vendor/MASTer 源取得行级证据，锚段=Change Policy，按强度入册（行内容含「必须」行为规范、Change Policy 段 advisory 落点（强度只降不升））",
+      "anchor_evidence": "MASTer 17-permission-authorization-protocol.md 57「扩大权限范围必须经过正式业务确认、安全评审和回归测试。」",
+      "pool_enforcement_at_seed": "required_when_applicable"
+    }
+  },
+  "id": "POLICY.AUTHZ.PERMISSION_SCOPE_EXPANSION_GATE",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "权限扩围三道手续",
+  "statement_zh": "扩大权限覆盖面——更多主体、更多资源、更大范围——必须集齐三道手续：业务方正式确认、安全评审通过、回归测试佐证。",
+  "statement_en_keywords": [
+    "permission scope expansion",
+    "business confirmation",
+    "security review",
+    "regression evidence"
+  ],
+  "applies_when": {
+    "lane": "backend",
+    "condition": "扩大权限范围时",
+    "applicability_note": "扩大权限范围时"
+  },
+  "enforcement": "advisory",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "裁定批 F/D3-R1 D3 逐卡复核物化（原 B6C 保守排除卡补锚收编）；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G2.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.AUTHZ.PERMISSION_SCOPE_EXPANSION_GATE",
+        "source_protocol": ".trellis/spec/backend/17-permission-authorization-protocol.md",
+        "lines": "57"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "权限扩围三道手续在既有 228 条中无对应条目；与同批 SERVER_FIVE_FACTOR_VERIFICATION 正交（运行时核验 vs 扩围准入），互引。",
+    "Change Policy 锚（MASTer 17 L57）——降 advisory 入册。"
+  ]
+}

package/catalog/policies/policy.authz.server_five_factor_verification.json

@@ -0,0 +1,101 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "id 域段待登记：AUTHZ（vocab-lock@v0.8-resolved policy_id_domains 32 段未含——PR-0009 后新用域段沿用候选注记先例，词汇表 PR 增补）",
+    "proposal": "词汇表 PR 增补新 id 域段至 catalog_layer_vocab.policy_id_domains（与 PR-0009 同轴追加，append-only）",
+    "locked_vocab_untouched": true,
+    "resolution": "2026-09-05 vocab PR-0010 增补落地（vocab-lock@v0.9-resolved，append-only 纯增量；Owner 2026-09-05 第二轮裁定开放项 2 全做——裁定批 G 收尾批）：AUTHZ/PRV/ERR 三 id 域段随 catalog_layer_vocab.policy_id_domains 扩值收编（32→35 段，与 PR-0009 同轴追加，词值零改动）；本 pending 注记就此转正（finding/proposal/locked_vocab_untouched 为创建时点历史记录原样保留——mcp_eyes 先例）"
+  },
+  "x-spec-d-materialization": {
+    "status": "PROPOSAL",
+    "package": "裁定批 F/D3-R1 排除卡逐卡复核物化（SPEC-D 池卡复用；分母=MASTer 池卡 + vendor 播种字节双锚）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/spec-knowledge/candidates/consolidated-pool.yaml",
+    "group": "BE-G2",
+    "candidate_id": "POLICY.AUTHZ.SERVER_FIVE_FACTOR_VERIFICATION",
+    "pool_statement_sha16": "95cbaf23fa6bbca1",
+    "curated_rule": "D3 逐卡复核批（Owner 2026-09-05 裁定 D3=逐卡复核；72 张保守排除卡逐卡核锚）：required 9（D3b source=null 补锚落 MUST/MUST NOT 且与 MASTer 行锚交叉验证）+ advisory 16（Change Policy 锚 14 张降 advisory[行内容含「必须」行为规范、强度只降不升] + 池密度序前 2）= 25（D6 合并上限 policy+TP 合计 25/批内执行；超出 17 张 advisory 留 D3-R2 轮次台账）；维持排除 30（Ownership 归属说明族）",
+    "denominator": "MASTer（池卡锚）"
+  },
+  "x-b6-porting": {
+    "status": "PROPOSAL",
+    "batch": "D3-R1",
+    "human_review_required": true,
+    "classification_face": "policy",
+    "enforcement_axis": {
+      "source_sections": [
+        "MUST"
+      ],
+      "rule": "SHOULD/Change Policy 源条目 enforcement 必须 advisory（禁升 required）；MUST/MUST NOT 源条目 enforcement 必须 required_when_applicable（降级合法）",
+      "asserted_by": "packages/cli/tests/catalog-b6-porting.spec.ts"
+    },
+    "extra_master_sections": [],
+    "denominator": "vendor",
+    "vendor_pin": {
+      "path": "pomaster/components/backend-hard-spec/assets/universal/17-permission-authorization-protocol.md",
+      "sha256": "d85a431b682a3a7c3dd4a6ee1f67fc375b54edb4a8e7fe98d283103b64a6b41e",
+      "bytes": 1378
+    },
+    "seeded_spec": ".pomaster/specs/hard/backend/17-permission-authorization-protocol.md",
+    "seed_manifest": "packages/cli/seeds/manifest.json",
+    "d3_review": {
+      "excluded_from_batch": "B6C",
+      "exclusion_reason_at_seed": "卡层 source=null（锚证据不足），保守排除待复核",
+      "adjudication": "D3 逐卡复核（Owner 2026-09-05 裁定 D3=逐卡复核，裁定批 F 落地 2026-09-05）：本卡原属 B6C 保守排除留池（排除理由：卡层 source=null（锚证据不足），保守排除待复核）；复核补锚回 vendor/MASTer 源取得行级证据，锚段=MUST，按强度入册（MUST/MUST NOT 行锚 required 原样）",
+      "anchor_evidence": "MASTer 17-permission-authorization-protocol.md 25「- 每个受保护操作必须在服务端验证主体、操作、租户、数据范围和资源归属。」",
+      "pool_enforcement_at_seed": "required_when_applicable"
+    }
+  },
+  "id": "POLICY.AUTHZ.SERVER_FIVE_FACTOR_VERIFICATION",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "受保护操作五元核验",
+  "statement_zh": "每个受保护操作在服务端执行时必须完成五元核验：请求主体是谁、要执行什么动作、属于哪个租户、数据范围边界在哪、目标资源归谁所有。",
+  "statement_en_keywords": [
+    "server-side five-factor verification",
+    "subject",
+    "action",
+    "tenant",
+    "data scope",
+    "resource ownership"
+  ],
+  "applies_when": {
+    "lane": "backend",
+    "condition": "执行任何受保护操作",
+    "applicability_note": "执行任何受保护操作"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-spec-decomposition"
+  },
+  "origin": "ingested",
+  "origin_note": "裁定批 F/D3-R1 D3 逐卡复核物化（原 B6C 保守排除卡补锚收编）；statement 沿用 SPEC-D 候选卡独立措辞（clean-room），零逐字拷贝上游源文本；播种分母=vendor 字节（x-b6-porting.vendor_pin），分解分母=MASTer 池卡（x-spec-d-materialization）",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/spec-knowledge/candidates/BE-G2.yaml",
+      "captured_by": "agent:claude/spec-d-consolidation",
+      "locator": {
+        "candidate": "POLICY.AUTHZ.SERVER_FIVE_FACTOR_VERIFICATION",
+        "source_protocol": ".trellis/spec/backend/17-permission-authorization-protocol.md",
+        "lines": "25"
+      },
+      "clean_room_note": "independently rewritten from SPEC-D decomposition candidate cards; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "服务端五元核验在既有 228 条中无对应条目（AUTHZ 域段本批新用，待词汇表 PR）；与同批 NO_GATING_PROXY_TRUST 正交（正面核验义务 vs 客户端表象禁令），互引。",
+    "D3b 补锚：MASTer 17-permission-authorization-protocol.md L25（MUST 段）。"
+  ]
+}