release-skill 0.9.22 → 0.9.24

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.22",
+  "version": "0.9.24",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codebuddy-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.22",
+  "version": "0.9.24",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.22",
+  "version": "0.9.24",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"
@@ -19,7 +19,7 @@
     ],
     "defaultPrompt": [
       "Assess this project for release readiness.",
-      "Prepare a release plan for version 0.9.22.",
+      "Prepare a release plan for version 0.9.24.",
       "Help me understand the release workflow."
     ]
   }

package/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.22",
+  "version": "0.9.24",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.22",
+  "version": "0.9.24",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/.qoder-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.22",
+  "version": "0.9.24",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"

package/CHANGELOG.md

@@ -1,9 +1,68 @@
 # Changelog
 
-<!-- release-skill:changelog:start version=0.9.22 locale=en baseline=sha256:5b9ca7ff99b3d072831f4f114ff4830f6d76540f7c5262fd1deb97eaec9d0a57 -->
+<!-- release-skill:changelog:start version=0.9.24 locale=en baseline=sha256:17152a17c71bea35445f03040022e41c7fb5a77be0024c049f96d3fb6b0053bb -->
+## [0.9.24] - 2026-10-02
+
+0.9.24 is a local source candidate. Production prepare no longer deletes run directories. captureBaseline accepts a git status listing up to 64 MiB. Frozen commit dates treat a Git Z reading and the plan +00:00 form as the same UTC instant before comparison. The three Foundation dependencies stay pinned to 0.22.0. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+
+### Security
+
+- Hub publication remains a compare-and-swap operation bound to the observed branch head. A partial Hub publication is never rolled back or force-pushed automatically.
+
+### Changed
+
+- Skill Family Hub remains the central marketplace. After release verification, its release entry still uses the existing GitHub Git Data API through the postVerify Hook.
+
+### Removed
+
+- Production prepare no longer runs the run-retention cleanup. It keeps the directories already present under .release-skill/runs/, including sealed failed prepares and finished lineages. src/core/run-retention.mjs is not part of the public file list.
+
+### Fixed
+
+- captureBaseline reads git status with a 64 MiB maxBuffer, the same bound computeWorkspaceDigest already uses. A status listing larger than Node's default 1 MiB no longer fails that capture.
+- Frozen commit verification still requires the author and committer instants to equal the plan freeze timestamp. Git may return the same UTC instant as Z, and the plan form stays +00:00. Both sides pass through normalizeGitTimestamp before comparison. A different instant still fails.
+
+### Upgrade Notes
+
+Compared with 0.9.23, this candidate needs no configuration migration. Prepare no longer reclaims disk by deleting old run directories; those directories remain until an operator removes them outside this command. An installation still using the old release-skill standalone marketplace should remove it and use the ifoohoo/skill-family-hub repository with the Hub-qualified plugin id release-skill@skill-family-hub. This file describes the local source candidate. Publication, host loading, and acceptance remain separate later authorizations.
+<!-- release-skill:changelog:end version=0.9.24 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.9.23 locale=en baseline=sha256:f8bd83211dfe0baa2fc5f55f90498973ef3050f5c78871db22d3784db0ae7442 -->
+## [0.9.23] - 2026-09-26
+
+0.9.23 is a local source candidate. The adoption check, offline static readiness, and historical record consistency can issue a shared family proof and read an existing proof. Prepare and publish skill text now builds the human-readable approval summary from the immutable plan. The three Foundation dependencies stay pinned to 0.22.0. A static-readiness pass does not mean the release is published. Consistent records do not mean the release succeeded or that it is verified. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+
+### Security
+
+- Hub publication remains a compare-and-swap operation bound to the observed branch head. A partial Hub publication is never rolled back or force-pushed automatically.
+
+### Added
+
+- setup --assess-adoption, assess --offline, and verify-records accept an optional --conclusion-output <absolute-path>. On a successful write, the command exclusively creates one new family proof and keeps the original domain status and exit code; conclusionPath is added only then. Omitting the option writes no proof file.
+- read-proof --proof-root <root> --proof <relative> --json reads one existing release-skill proof under that root. It does not rescan the target, follow details, or turn a failed or incomplete check into a pass.
+- When the declared scope is complete, ASSESSED means the static readiness check finished. Under the same condition, CONSISTENT means the supplied historical records agree, and historicalTerminalStatus stays as recorded. A native pass code is not a professional pass while that scope is incomplete. PUBLISHED and VERIFIED still use the existing conditions of the publish and verify phases.
+- Exclusive writing and professional-conclusion schema checks call Foundation 0.22.0. Reading also uses Foundation to keep the proof path inside the given root. Release-skill keeps the domain mapping for the three entries.
+
+### Changed
+
+- Skill Family Hub remains the central marketplace. After release verification, its release entry still uses the existing GitHub Git Data API through the postVerify Hook.
+
+### Fixed
+
+- The prepare and publish skills read the immutable plan and build the human-readable approval summary only from the units, externalActions, waivers, and postPublish values actually present. Versions and public targets come only from values already written there. Missing fields stay missing.
+- Successful prepare returns the immutable planPath, planDigest, and its other result fields. Approval stays bound to that plan, and copying planDigest is not required. A postPublish checkpoint that needs its own approval remains a separate approval. The publish authorization gate uses the same reading.
+
+### Upgrade Notes
+
+Compared with 0.9.22, this candidate needs no additional configuration migration. An installation still using the old release-skill standalone marketplace should remove it and use the ifoohoo/skill-family-hub repository with the Hub-qualified plugin id release-skill@skill-family-hub. The three checks keep their previous commands, and a proof file is written only when --conclusion-output is set. Reading an existing proof does not advance release state. This file describes the local source candidate; publication, host loading, and acceptance remain separate later authorizations.
+<!-- release-skill:changelog:end version=0.9.23 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.9.22 locale=en baseline=sha256:ae4fc78ae5e454ee7a6cf37f6ae6130dfe7fefb5948aaa21197a7ef409ffb794 -->
 ## [0.9.22] - 2026-09-17
 
-0.9.22 is a local source candidate that fixes two failures found during the real-host rollout of 0.9.21. CodeBuddy and WorkBuddy keep the same frozen Hub identity and installed-payload checks. Foundation dependencies remain pinned to 0.21.0. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+0.9.22 is a local source candidate that fixes two failures found during the real-host rollout of 0.9.21. CodeBuddy and WorkBuddy keep the same frozen Hub identity and installed-payload checks. Foundation dependencies remain pinned to 0.22.0. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
 
 ### Security
 

package/INSTALL.md

@@ -2,10 +2,10 @@
 
 [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.22 -->
+<!-- release-skill:release-version: 0.9.24 -->
 ## Prerequisites
 
-- Node.js 22.0.0 or later
+- Node.js `>=22.22.2 <23` (22.22.2 or newer, and below 23)
 - Git 2.30+
 
 ## Install from npm (recommended)
@@ -125,7 +125,7 @@ tag pinned to the exact version (never the bare repository URL, which installs
 the latest release or default branch), confirm the trust prompt, then reload:
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.22
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.24
    /plugins reload
    ```
 
@@ -307,7 +307,7 @@ For development or when working from source:
 ```bash
 export RELEASE_SKILL_HOME=/absolute/path/to/release-skill
 cd "$RELEASE_SKILL_HOME"
-npm exec --yes pnpm@10.17.1 -- install --frozen-lockfile
+npm exec --yes pnpm@10.30.0 -- install --frozen-lockfile
 ```
 
 Then use the CLI via:

package/INSTALL.zh-CN.md

@@ -2,10 +2,10 @@
 
 [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.22 -->
+<!-- release-skill:release-version: 0.9.24 -->
 ## 前置条件
 
-- Node.js 22.0.0 或更高版本
+- Node.js `>=22.22.2 <23`（22.22.2 及以上，且低于 23）
 - Git 2.30 或更高版本
 
 ## 从 npm 安装（推荐）
@@ -113,7 +113,7 @@ release-skill 当前只采用并验证 Kimi Code 的交互式 TUI 路径，**无
 （切勿使用裸仓库地址，它会安装最新 release 或默认分支），确认信任提示后重新加载：
 
    ```
-   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.22
+   /plugins install https://github.com/ifoohoo/release-skill/releases/tag/release-skill-v0.9.24
    /plugins reload
    ```
 
@@ -248,7 +248,7 @@ node <installed-plugin-root>/bin/release-skill-local-finish.mjs \
 ```bash
 export RELEASE_SKILL_HOME=/absolute/path/to/release-skill
 cd "$RELEASE_SKILL_HOME"
-npm exec --yes pnpm@10.17.1 -- install --frozen-lockfile
+npm exec --yes pnpm@10.30.0 -- install --frozen-lockfile
 ```
 
 通过以下数组调用命令行工具：

package/README.md

@@ -2,7 +2,7 @@
 
 [简体中文](README.zh-CN.md) · Installation: [English](INSTALL.md) / [简体中文](INSTALL.zh-CN.md)
 
-<!-- release-skill:release-version: 0.9.22 -->
+<!-- release-skill:release-version: 0.9.24 -->
 Release preparation for Claude Code, CodeBuddy, WorkBuddy, Codex, and Kimi Code, with human-edited files kept intact.
 
 release-skill helps a maintainer answer three questions: what will be released,
@@ -14,32 +14,34 @@ Setup surfaces only the deterministic `compactSummary` review view; the full
 report stays in a temporary session directory.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.22** (2026-09-17)
+**0.9.24** (2026-10-02)
 
-0.9.22 is a local source candidate that fixes two failures found during the real-host rollout of 0.9.21. CodeBuddy and WorkBuddy keep the same frozen Hub identity and installed-payload checks. Foundation dependencies remain pinned to 0.21.0. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
+0.9.24 is a local source candidate. Production prepare no longer deletes run directories. captureBaseline accepts a git status listing up to 64 MiB. Frozen commit dates treat a Git Z reading and the plan +00:00 form as the same UTC instant before comparison. The three Foundation dependencies stay pinned to 0.22.0. This note is not evidence of publication, real-host acceptance, consumer installation verification, or independent acceptance.
 
 **Security**
 
-- Hub publication remains a compare-and-swap operation. A partial Hub publication is never rolled back or force-pushed automatically.
-- A Hub marketplace reported as github is accepted only on the Hub-backed CodeBuddy/WorkBuddy path. The updater still verifies the checkout origin, branch, HEAD, host-specific index, installed revision, and complete frozen payload.
-- WorkBuddy reuses the existing strict residual_process_group envelope only when the child exited successfully and Foundation reports the exact cleanup evidence. Any field mismatch fails closed before later writes.
+- Hub publication remains a compare-and-swap operation bound to the observed branch head. A partial Hub publication is never rolled back or force-pushed automatically.
 
 **Changed**
 
-- Skill Family Hub remains the central marketplace, and its release entry continues to use the existing GitHub Git Data API after release verification.
+- Skill Family Hub remains the central marketplace. After release verification, its release entry still uses the existing GitHub Git Data API through the postVerify Hook.
+
+**Removed**
+
+- Production prepare no longer runs the run-retention cleanup. It keeps the directories already present under .release-skill/runs/, including sealed failed prepares and finished lineages. src/core/run-retention.mjs is not part of the public file list.
 
 **Fixed**
 
-- CodeBuddy 2.148.0 can now update an existing Hub plugin when its official marketplace list reports type github instead of type git.
-- WorkBuddy can complete the same existing-plugin update when its embedded CodeBuddy CLI exits successfully but leaves a process group that Foundation has already terminated and verified.
+- captureBaseline reads git status with a 64 MiB maxBuffer, the same bound computeWorkspaceDigest already uses. A status listing larger than Node's default 1 MiB no longer fails that capture.
+- Frozen commit verification still requires the author and committer instants to equal the plan freeze timestamp. Git may return the same UTC instant as Z, and the plan form stays +00:00. Both sides pass through normalizeGitTimestamp before comparison. A different instant still fails.
 
 **Upgrade Notes**
 
-Upgrade from 0.9.21 before running local host finishing for CodeBuddy or WorkBuddy. No configuration migration is required. Remove the old release-skill standalone marketplace; use the ifoohoo/skill-family-hub repository and Hub-qualified plugin id release-skill@skill-family-hub. Reload or restart each updated host before claiming that 0.9.22 is loaded.
+Compared with 0.9.23, this candidate needs no configuration migration. Prepare no longer reclaims disk by deleting old run directories; those directories remain until an operator removes them outside this command. An installation still using the old release-skill standalone marketplace should remove it and use the ifoohoo/skill-family-hub repository with the Hub-qualified plugin id release-skill@skill-family-hub. This file describes the local source candidate. Publication, host loading, and acceptance remain separate later authorizations.
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **Current boundary:** v0.9.22 is the current source candidate. This README
+> **Current boundary:** v0.9.24 is the current source candidate. This README
 > records intended scope and verification boundaries; it is not evidence of
 > publication, consumer-installation verification, or independent acceptance.
 > Release availability must be established from the corresponding release records
@@ -63,7 +65,7 @@ Upgrade from 0.9.21 before running local host finishing for CodeBuddy or WorkBud
 > publish global preflight.
 
 <!-- release-skill:capability:safe-first-command -->
-> **Production path verified since the v0.1.1 milestone; v0.9.22 is the current
+> **Production path verified since the v0.1.1 milestone; v0.9.24 is the current
 > source candidate. Its README does not establish publication,
 > consumer-installation verification, or independent acceptance.**
 > The npm-installed CLI is the supported user entry. Source checkout
@@ -73,6 +75,10 @@ Upgrade from 0.9.21 before running local host finishing for CodeBuddy or WorkBud
 > - npm install: `npm install -g release-skill` → `release-skill help`
 > - source checkout: `node "$RELEASE_SKILL_HOME/packages/release-skill/bin/release-skill.mjs" help`
 
+<a id="release-terms"></a>
+
+A release unit is a release object with independently configured version, public files, and distribution targets. A release plan is a record for review before approval, linking target versions, frozen artifacts, and proposed external actions; see the [human review and approval steps](#release-plan-review).
+
 ### 0.8.0 scope and verification boundaries
 
 For `prepare --workflow config`, public-byte comparison selects the branch:
@@ -92,7 +98,7 @@ checkpoints remain intact and use matching-version recovery. Evidence v1 stays
 read-only; v2 uses a closed top level with phase extensions in `details`.
 Summaries and recovery suggestions are diagnostic, never publication authority.
 
-The current 0.9.22 candidate includes the narrow R-05 Hook cache v2 consumer
+The current 0.9.24 candidate includes the narrow R-05 Hook cache v2 consumer
 path, the public `postverify` path, and the stable isolated install-tree record
 path (A2/A3). It also adds the explicit-input `verify-records` command and a
 self-contained Qoder projection, first-class Cursor packaging, and the
@@ -107,7 +113,7 @@ the selected host has loaded the released plugin. This candidate still excludes
 R-02 safe full-tree inventory. Marketplace installation and live invocation
 remain host-level post-release checks; Cursor is distributed through its
 supported local-plugin directory rather than a Hub marketplace entry.
-Foundation dependencies are pinned to the three released 0.21.0 packages.
+Foundation dependencies are pinned to the three released 0.22.0 packages.
 For Kimi/CodeBuddy plans that still use the bundled-family distribution form,
 verify calls the released
 `runPluginVerification` entry with the complete frozen payload and records a
@@ -196,7 +202,7 @@ This scope summary is not a remote publication record or a consumer upgrade inst
 
 ## Quick start
 
-A release unit is a release object with independently configured version, public files, and distribution targets.
+The release unit and release plan are defined [above](#release-terms); the review steps are the [human review and approval steps](#release-plan-review).
 
 ### Selecting a release scope
 
@@ -290,6 +296,23 @@ Use the existing Skills and choose only the check the request needs:
 
 These entry points run release-skill's read-only analyzers. Governance diagnosis does not run target Skills, hooks, builds, or release actions, and it does not treat `prepare`, `verify`, or `release-finish` as static governance checks. When a maintainer asks to set up or publish instead, continue through the existing product Skill with the authorization and safety contract for that action.
 
+All three entry points accept the optional `--conclusion-output <absolute-path>`
+to save a proof of the check. Without it, no proof is written. With it, the
+command exclusively creates a new file and preserves the original domain result
+and exit code. For example:
+
+```text
+release-skill assess --root <project-root> --offline --conclusion-output <absolute-path> --json
+release-skill read-proof --proof-root <root> --proof <relative> --json
+```
+
+`read-proof` reads an existing release-skill proof beneath the specified root.
+It does not follow `details` references, check the current target again, or
+authenticate the author or publication. A readable proof may record a failed or
+incomplete check; reading it successfully does not make that check pass. To
+refresh the conclusion, rerun the original check with a new output path and
+retain the old proof.
+
 ### Offline historical record verification
 
 Use the public command below when a consumer already has an explicit plan,
@@ -301,9 +324,11 @@ release-skill verify-records --plan <path> --approval <path> --target-run <path>
 
 The command reads only those paths and emits one JSON object. `CONSISTENT`
 exits 0, `CONTRADICTED` exits 1, and `INSUFFICIENT` exits 2. It does not scan
-`.release-skill`, follow paths embedded in a record, contact a remote, write a
-file, or advance release state. A consistent historical chain does not prove
-that its records are globally latest or that remote objects still exist.
+`.release-skill`, follow paths embedded in a record, contact a remote, or advance
+release state. Without `--conclusion-output`, it does not write a file. A
+consistent historical chain does not mean `VERIFIED` or that the current target
+passes all checks; it does not prove that its records are globally latest or
+that remote objects still exist.
 
 ### Main workflow
 
@@ -316,7 +341,7 @@ observes the complete frozen payload in a fresh local installation. Real
 marketplace installation and host invocation remain non-blocking post-release
 manual tasks; the system does not verify their completion.
 
-A release plan is a record for review before approval, linking target versions, frozen artifacts, and proposed external actions; see the [human review and approval steps](#release-plan-review).
+The release unit and release plan are defined [above](#release-terms); the review steps are the [human review and approval steps](#release-plan-review).
 
 ```bash
 release-skill ship --root "$PROJECT" --target-version 1.2.3 --json
@@ -326,11 +351,7 @@ release-skill ship --root "$PROJECT" --approve --actor "$ACTOR" --json
 During development, `release-skill hooks validate` runs declared hooks and
 writes the same content-bound cache receipts that `prepare` consumes.
 
-Run these steps in order. Steps 1-3 are read-only. In step 4, release-skill's own
-prepare pipeline is local-only and never invokes remote publish adapters; configured
-hooks and gates remain arbitrary unsandboxed processes and can perform local or remote
-side effects. Step 4 is therefore local-only only when those processes are absent or
-separately audited and explicitly acknowledged. Steps 5-9 require explicit human gates.
+Run these steps in order. The `help` call in step 1, the default `setup` diagnosis in step 2 without `--write`, and the `assess` call shown in step 3 are read-only diagnoses. When step 2 explicitly runs `setup --write --confirm-setup`, it creates project configuration; that same step also creates, writes, and deletes local temporary session files. Those are local writes, not remote publication. In step 4, release-skill's own prepare pipeline is local-only and never invokes remote publish adapters; configured hooks and gates remain arbitrary unsandboxed processes and can perform local or remote side effects. Step 4 is therefore local-only only when those processes are absent or separately audited and explicitly acknowledged. Steps 5-9 require explicit human gates.
 
 ```bash
 CLI=(release-skill)           # or: CLI=(node "$RELEASE_SKILL_HOME/packages/release-skill/bin/release-skill.mjs")
@@ -340,8 +361,13 @@ ACTOR=your-name
 
 1. **help** — check the environment:
    ```bash
-   "${CLI[@]}" help
+   "${CLI[@]}" help --json
    ```
+   Local preparation requires both `status: "READY"` and exit code 0. Check
+   `readiness.localPreparation` for local gaps and `readiness.productionPublish`
+   for production requirements. `AUTH_CHECK_REQUIRED` still requires authentication
+   and permission checks; local readiness does not establish those checks or
+   release approval.
 2. **setup** — first-use only (read-only discovery, then create-once config):
    ```bash
    SETUP_SESSION="$(mktemp -d "${TMPDIR:-/tmp}/release-setup.XXXXXX")"
@@ -890,13 +916,8 @@ verify an exact current installation offline; Codex reinstalls when its list
 does not expose an installation root. Existing frozen installation actions
 and the Qoder and Cursor paths remain supported without duplicate execution.
 
-Production `prepare` also performs one best-effort retention pass after its new
-run evidence exists and before expensive snapshot and hook work. It removes
-only superseded complete run lineages and sealed failed prepare directories
-that have no valid plan or external-write trace. The current plan, the newest
-complete lineage, and every non-terminal, partial, corrupt, ambiguous, or
-out-of-bounds lineage remain protected. Retention failures never change the
-prepare result.
+Production `prepare` keeps the run directories already present under
+`.release-skill/runs/`, including sealed failed prepares and finished lineages.
 
 New `codebuddy-plugin` project configurations must declare `marketplace`
 explicitly so product families cannot silently inherit another family's Hub.

package/README.zh-CN.md

@@ -2,38 +2,40 @@
 
 [English](README.md) · 安装指南：[中文](INSTALL.zh-CN.md) / [English](INSTALL.md)
 
-<!-- release-skill:release-version: 0.9.22 -->
+<!-- release-skill:release-version: 0.9.24 -->
 面向 Claude Code、CodeBuddy、WorkBuddy、Codex 和 Kimi Code 的发布准备工具，完整保留人工维护的文件内容。
 
 release-skill 帮助维护者回答三个问题：准备发布什么、还有哪些检查未通过、最终发布的内容是什么。它不重新生成、也不回写项目源文件。`prepare` 把每个配置的公开文件复制到隔离快照并验证字节——先冻结并供人工审阅，再从同一份冻结产物发布。`setup` 只显示确定性的 `compactSummary` 审阅视图，完整报告保留在临时会话目录中。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.22** (2026-09-17)
+**0.9.24** (2026-10-02)
 
-0.9.22 是一个本地源码候选，修复 0.9.21 真实宿主收尾暴露的两处问题。CodeBuddy 与 WorkBuddy 继续使用同一份冻结 Hub 身份和安装载荷检查。Foundation 依赖保持固定为 0.21.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
+0.9.24 是一个本地源码候选。生产 prepare 不再删除运行目录。captureBaseline 可以接收不超过 64 MiB 的 git status 列表。冻结提交日期在比较前把 Git 读出的 Z 与计划中的 +00:00 视为同一 UTC 时刻。Foundation 三个依赖继续固定为 0.22.0。本说明不代表已经发布、完成真实宿主验收、完成消费者安装验证或通过独立验收。
 
 **安全**
 
-- Hub 发布继续绑定已观察的分支头执行比较后写入。部分发布时不回滚、不覆盖已经成功的远端步骤。
-- 只有 Hub-backed CodeBuddy/WorkBuddy 路径接受 github 市场类型。更新器仍核对 checkout 的 origin、分支、HEAD、宿主专用索引、安装修订号和完整冻结载荷。
-- WorkBuddy 只复用现有的严格 residual_process_group 信封。子进程必须成功退出，Foundation 也必须返回精确的清理证据；任一字段不符时，在后续写入前失败关闭。
+- Hub 发布仍绑定已观察的分支头执行比较后写入。部分发布时不回滚、不覆盖已成功的远端步骤，也不自动强推。
 
 **变更**
 
-- Skill Family Hub 继续作为统一市场；发布完成验证后，仍通过既有 GitHub Git Data API 更新 Hub 条目。
+- Skill Family Hub 继续作为统一市场。发布验证完成后，postVerify Hook 仍使用既有 GitHub Git Data API 更新 Hub 的发布条目。
+
+**移除**
+
+- 生产 prepare 不再执行 run-retention 清理。它保留 .release-skill/runs/ 中已有的目录，包括封口失败的 prepare 和已经结束的谱系。src/core/run-retention.mjs 不再属于公开文件清单。
 
 **修复**
 
-- CodeBuddy 2.148.0 的官方市场列表返回 github 类型时，现在可以继续更新既有 Hub 插件。
-- WorkBuddy 的内嵌 CodeBuddy CLI 成功退出，且 Foundation 已清理并验证残留进程组时，现在可以完成同一条既有插件更新路径。
+- captureBaseline 读取 git status 时使用 64 MiB maxBuffer，与 computeWorkspaceDigest 已有的上限相同。状态列表超过 Node 默认的 1 MiB 时，这次采集不再因此失败。
+- 冻结提交校验仍要求作者和提交者时刻等于计划冻结时间。Git 可能把同一 UTC 时刻读成 Z，计划形式仍是 +00:00。两边都先经过 normalizeGitTimestamp 再比较。不同的时刻仍然失败。
 
 **升级说明**
 
-执行 CodeBuddy 或 WorkBuddy 本机宿主收尾前，请从 0.9.21 升级到 0.9.22，无需迁移配置。请移除独立的 `release-skill` 市场，改用 ifoohoo/skill-family-hub 仓库与 Hub 限定插件名 release-skill@skill-family-hub。更新后必须重新加载或重启宿主，确认实际加载 0.9.22 后再报告完成。
+本候选相对 0.9.23 无需迁移配置。prepare 不再通过删除旧运行目录回收磁盘；这些目录会保留，直到操作者在该命令之外移除。若安装仍使用独立的 `release-skill` 市场，应将其移除，改用 ifoohoo/skill-family-hub 仓库与 Hub 限定插件名 release-skill@skill-family-hub。本文件只说明本地源码候选；正式发布、宿主加载和验收留待后续单独授权。
 <!-- release-skill:managed:end id=latest-release -->
 
 <!-- release-skill:capability:external-write-boundary -->
-> **当前边界：** v0.9.22 只是当前源码候选。本 README 记录预期范围与验证边界，
+> **当前边界：** v0.9.24 只是当前源码候选。本 README 记录预期范围与验证边界，
 > 不代表已经发布、完成消费者安装验证或通过独立验收。
 > 版本可用性以对应发布记录及发布后验证结果为准。
 > v0.4.1 是更早的已发布里程碑（v0.2.2 曾处于已发布状态，后因平台验证收敛修复而更新）。
@@ -49,13 +51,17 @@ release-skill 帮助维护者回答三个问题：准备发布什么、还有哪
 > 远端唯一性检查在 `publish` 全局预检执行。
 
 <!-- release-skill:capability:safe-first-command -->
-> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.22 是当前源码候选，本 README 不证明该候选已经发布、完成消费者安装验证或通过独立验收。**
+> **生产路径自 v0.1.1 里程碑起已完成真实生产验证；v0.9.24 是当前源码候选，本 README 不证明该候选已经发布、完成消费者安装验证或通过独立验收。**
 > npm 安装的 CLI 是受支持的用户入口；源码 checkout 保留为开发/贡献者路径。
 >
 > **第一条命令：**
 > - npm 安装：`npm install -g release-skill` → `release-skill help`
 > - 源码 checkout：`node "$RELEASE_SKILL_HOME/packages/release-skill/bin/release-skill.mjs" help`
 
+<a id="release-terms"></a>
+
+发布单元是独立配置版本、公开文件和分发目标的发布对象。发布计划是供批准前审阅的记录，将目标版本、冻结产物和拟执行的外部动作关联起来；详见[人工审阅与批准步骤](#release-plan-review)。
+
 ### 0.8.0 范围与验证边界
 
 `prepare --workflow config` 按公开字节是否变化分支：
@@ -67,7 +73,7 @@ marketplace 委托目标工作区发布的边界不变。
 
 旧 production 计划缺少 `sourceAuthority` 时，在外部写入前拒绝。未发生外部写入的计划必须重新 prepare 并批准新摘要，不能补写旧计划或迁移批准。已有 `PARTIAL` 保留检查点，走匹配版本的恢复路径。evidence v1 只读；v2 顶层封闭，阶段扩展放在 `details`。摘要和恢复建议只作诊断，不构成发布权威。
 
-当前 0.9.22 候选包含窄范围的 R-05 Hook cache v2 消费路径、公开 `postverify`
+当前 0.9.24 候选包含窄范围的 R-05 Hook cache v2 消费路径、公开 `postverify`
 路径和稳定隔离安装树记录路径（A2/A3），并增加只接受显式输入的 `verify-records`
 命令、自包含 Qoder 投影、Cursor 正式打包，以及基于 Foundation 的宿主核验桥。
 Skill Family Hub 仍是唯一市场来源。
@@ -77,7 +83,7 @@ Skill Family Hub 仍是唯一市场来源。
 当前仍不包含 R-02 安全整树盘点。市场安装与真实调用继续作为各宿主的发布后检查；Cursor
 通过其支持的本机插件目录分发，不进入 Hub 市场条目。本范围说明不构成远端发布记录或消费者升级指引。
 
-Foundation 三包精确依赖已发布的 0.21.0。仍采用 bundled-family 分发形态的
+Foundation 三包精确依赖已发布的 0.22.0。仍采用 bundled-family 分发形态的
 Kimi/CodeBuddy 计划会在 verify 阶段调用正式 `runPluginVerification`，把完整冻结载荷
 交给 Foundation，并记录最小的 `install-only` 观察收据。Kimi 映射为 `kimi-code`，
 CodeBuddy 映射为兼容的 `workbuddy`。`observed` 与 `payloadMatches` 只表示机制观察结果，
@@ -152,7 +158,7 @@ CodeBuddy 映射为兼容的 `workbuddy`。`observed` 与 `payloadMatches` 只
 
 ## 快速开始
 
-发布单元是独立配置版本、公开文件和分发目标的发布对象。
+发布单元和发布计划的定义见[上文](#release-terms)，审阅步骤见[人工审阅与批准步骤](#release-plan-review)。
 
 ### 选择本轮发布范围
 
@@ -236,6 +242,18 @@ CodeBuddy、Codex、Kimi Code、Qoder 和 Cursor 的完整命令见 [INSTALL.zh-
 
 这些入口只运行 release-skill 自身的只读分析。治理诊断不运行目标 Skill、hook、构建或发布动作，也不把 `prepare`、`verify` 或 `release-finish` 当作静态治理检查。维护者要求实际接入或发布时，继续使用原有业务 Skill，并沿用该动作的授权与安全合同。
 
+三个入口均可选用 `--conclusion-output <absolute-path>` 保存本次检查的证明。
+未指定时不出证；指定时只排他创建新文件，并保留原业务结果和退出码。例如：
+
+```text
+release-skill assess --root <project-root> --offline --conclusion-output <absolute-path> --json
+release-skill read-proof --proof-root <root> --proof <relative> --json
+```
+
+`read-proof` 读取指定根目录下已有的 release-skill 证明。它不跟随 `details` 引用，
+不重新检查当前目标，也不认证作者或发布事实。可读取的证明也可能记录失败或未完成的检查，
+读取成功不代表该检查通过。需要刷新结论时，重新运行原检查并写入新路径，保留旧证明。
+
 ### 离线核验历史发布记录
 
 消费者已经持有明确的计划、批准、目标 run 和该目标引用的全部前驱 run 时，可以运行：
@@ -246,8 +264,9 @@ release-skill verify-records --plan <path> --approval <path> --target-run <path>
 
 该命令只读取这些路径，并输出一个 JSON 对象。`CONSISTENT` 的退出码是 0，
 `CONTRADICTED` 的退出码是 1，`INSUFFICIENT` 的退出码是 2。它不会扫描
-`.release-skill`、跟随记录内嵌路径、访问远端、写文件或推进发布状态。历史链一致也不能
-证明这些记录是全局最新，或远端对象仍然存在。
+`.release-skill`、跟随记录内嵌路径、访问远端或推进发布状态。未指定 `--conclusion-output`
+时不会写文件。历史链一致不代表 `VERIFIED` 或当前目标全面通过，也不能证明这些记录
+是全局最新，或远端对象仍然存在。
 
 ### 主流程
 
@@ -257,7 +276,7 @@ hook 授权等待态。受限的 postPublish hook 仍须独立批准，计划批
 观察完整冻结载荷。真实市场安装和宿主调用仍是发布完成后的非阻塞人工后续任务，
 系统不核验其完成结果。
 
-发布计划是供批准前审阅的记录，将目标版本、冻结产物和拟执行的外部动作关联起来；详见[人工审阅与批准步骤](#release-plan-review)。
+发布单元和发布计划的定义见[上文](#release-terms)，审阅步骤见[人工审阅与批准步骤](#release-plan-review)。
 
 ```bash
 release-skill ship --root "$PROJECT" --target-version 1.2.3 --json
@@ -267,10 +286,7 @@ release-skill ship --root "$PROJECT" --approve --actor "$ACTOR" --json
 开发阶段可运行 `release-skill hooks validate`；它会执行声明的 hooks，并写入
 `prepare` 可复用的内容绑定收据。
 
-按以下顺序执行。步骤 1-3 只读。步骤 4 中，release-skill 自身的 prepare 流水线仅在本地写入，
-且不会调用远端发布适配器；配置的 hook 和 gate 仍是可产生本地或远端副作用的任意无沙箱进程。
-只有这些进程不存在，或已单独审计并显式确认副作用时，步骤 4 才能视为“仅本地”。步骤 5-9
-需要显式人工门禁。
+按以下顺序执行。步骤 1 的 `help`、步骤 2 不带 `--write` 的默认 `setup` 诊断，以及步骤 3 所示的 `assess`，是只读诊断。步骤 2 显式执行 `setup --write --confirm-setup` 时，会在项目中创建配置；同一步骤还会创建、写入并删除本地临时会话文件，这些操作属于本地写入，不涉及远端发布。步骤 4 中，release-skill 自身的 prepare 流水线仅在本地写入，且不会调用远端发布适配器；配置的 hook 和 gate 仍是可产生本地或远端副作用的任意无沙箱进程。只有这些进程不存在，或已单独审计并显式确认副作用时，步骤 4 才能视为“仅本地”。步骤 5-9 需要显式人工门禁。
 
 ```bash
 CLI=(release-skill)           # 或：CLI=(node "$RELEASE_SKILL_HOME/packages/release-skill/bin/release-skill.mjs")
@@ -280,8 +296,12 @@ ACTOR=your-name
 
 1. **help** — 环境检查：
    ```bash
-   "${CLI[@]}" help
+   "${CLI[@]}" help --json
    ```
+   本地准备就绪须同时满足 `status: "READY"` 和退出码 0。通过
+   `readiness.localPreparation` 查看本地缺口，通过 `readiness.productionPublish`
+   查看生产要求。`AUTH_CHECK_REQUIRED` 表示仍需检查认证和权限；本地就绪不代表
+   这些检查已通过，也不代表获得发布批准。
 2. **setup** — 首次接入（只读发现，然后 create-once 配置）：
    ```bash
    SETUP_SESSION="$(mktemp -d "${TMPDIR:-/tmp}/release-setup.XXXXXX")"
@@ -742,10 +762,7 @@ GitHub Release 和受控终端交互，保留三个代理变量；只有仓库 U
 精确当前安装；Codex 列表没有安装根时仍须正式重装。旧安装动作与 Qoder、Cursor
 路径继续可用，身份一致的重复目标只执行一次。
 
-生产 prepare 还会在本轮运行证据建立后、高成本快照和 Hook 之前执行一次尽力清理。
-它只删除已被更新完整谱系取代的终态运行目录，以及没有有效计划或外部写入迹象的封口
-失败 prepare。当前计划、最近完整谱系，以及所有非终态、部分成功、损坏、含糊或越界
-谱系都受保护。清理失败不会改变 prepare 结果。
+生产 prepare 保留 `.release-skill/runs/` 中已有的运行目录，包括封口失败的 prepare 和已经结束的谱系。
 
 新的 `codebuddy-plugin` 项目配置必须显式声明 `marketplace`，避免不同产品线误用同一市场；`marketplaceSource`（消费者添加市场所用的 URL）仍可按需声明。只有已经冻结、且未携带该字段的历史计划会继续按旧规则解释为 `artifact-skill-set`，以保证 reconcile 可以重放原计划。
 

package/adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "release-skill",
-  "version": "0.9.22",
+  "version": "0.9.24",
   "description": "Safe preparation and frozen GitHub/npm production publishing with full happy end verification",
   "author": {
     "name": "广州市风荷科技有限公司"