sillyspec 3.33.0 → 3.33.1

package/src/scan-refresh.js

@@ -25,6 +25,7 @@
  * 无引用论断检不出。refresh 只声称「核对至 HEAD 的检出项已处理」，不声称「一致」。
  */
 import { existsSync, readFileSync, readdirSync, mkdirSync } from 'node:fs'
+import { runtimeStatePath } from './runtime-paths.js'
 import { join } from 'node:path'
 import { createHash } from 'node:crypto'
 import { safeGit } from './git-helper.js'
@@ -227,7 +228,7 @@ export function computeRefreshPlan({ projectRoot, specBase, projectName, force =
     try {
       const guardDir = join(specBase, '.runtime')
       mkdirSync(guardDir, { recursive: true })
-      writeAtomicSync(join(guardDir, 'scan-guard.json'), JSON.stringify({
+      writeAtomicSync(runtimeStatePath(guardDir, 'scan-guard.json'), JSON.stringify({
         name_zh: '增量刷新守卫',
         mode: 'scan-refresh',
         refreshDocs,
@@ -381,7 +382,7 @@ export async function finalizeRefresh(opts = {}) {
   const scanDir = join(specBase, 'docs', projectName, 'scan')
   // ①拍 guard 会话态必须存在（握手文件=工单受影响集与内容哈希的唯一来源）
   let guard = null
-  const guardPath = join(specBase, '.runtime', 'scan-guard.json')
+  const guardPath = runtimeStatePath(join(specBase, '.runtime'), 'scan-guard.json')
   try { guard = JSON.parse(readFileSync(guardPath, 'utf8')) } catch { /* 缺失/坏 JSON → 下方拒绝 */ }
   if (!guard || guard.mode !== 'scan-refresh') {
     console.error('scan refresh --done：未找到增量刷新会话态（.runtime/scan-guard.json 无 mode=scan-refresh）')
@@ -453,7 +454,7 @@ export async function finalizeRefresh(opts = {}) {
     const runtimeRoot = resolveRuntimeRoot(platformOpts, specBase)
     mkdirSync(runtimeRoot, { recursive: true })
     const ts = new Date().toISOString().replace(/[-:T.]/g, '').slice(0, 14)
-    auditPath = join(runtimeRoot, `scan-refresh-${ts}.json`)
+    auditPath = runtimeStatePath(runtimeRoot, `scan-refresh-${ts}.json`)
     writeAtomicSync(auditPath, JSON.stringify({
       changeType: 'scan-refresh',
       head: headShort,

package/src/scope-audit.js

@@ -32,6 +32,7 @@
  * degraded 仓退 v1 ⊘ 形态不炸主仓表；预执行形态不调内核（跨仓行保持清单形态）。
  */
 import { existsSync, readFileSync, readdirSync } from 'node:fs'
+import { runtimeStatePath } from './runtime-paths.js'
 import { createHash } from 'node:crypto'
 import { join, dirname } from 'node:path'
 import { locateQuickSessionGuard, auditQuickCompletion, resolveRuntimeRoot, collectOtherQuickSessionDeclarations, ancestorSpecDirs, isQuickMetadata } from './run/shared.js'
@@ -263,7 +264,7 @@ function readScopeSnapshot(changeDir, runtimeRoot, changeName) {
     } catch { /* 缺失/损坏 → 下一源 */ }
   }
   try {
-    const snap = JSON.parse(readFileSync(join(runtimeRoot, `scope-audit-${changeName}.json`), 'utf8'))
+    const snap = JSON.parse(readFileSync(runtimeStatePath(runtimeRoot, `scope-audit-${changeName}.json`), 'utf8'))
     if (snap && typeof snap === 'object' && Array.isArray(snap.rows)) return snap
   } catch { /* 缺失/损坏 → null */ }
   return null
@@ -859,10 +860,10 @@ async function computeFullFlowAudit({ cwd, specBase, changeName, platformOpts, c
   })() : false
   const hasSnapshotFile = hasMergedScopeAudit
     || (changeDirInfo
-      ? existsSync(join(changeDirInfo.dir, 'scope-audit.json')) || existsSync(join(runtimeRoot, `scope-audit-${changeName}.json`))
-      : existsSync(join(runtimeRoot, `scope-audit-${changeName}.json`)))
-  const hasApplyPathspec = existsSync(join(runtimeRoot, `apply-pathspec-${changeName}.txt`))
-  const hasCleanupReceipt = existsSync(join(runtimeRoot, `execute-cleanup-${changeName}.json`))
+      ? existsSync(join(changeDirInfo.dir, 'scope-audit.json')) || existsSync(runtimeStatePath(runtimeRoot, `scope-audit-${changeName}.json`))
+      : existsSync(runtimeStatePath(runtimeRoot, `scope-audit-${changeName}.json`)))
+  const hasApplyPathspec = existsSync(runtimeStatePath(runtimeRoot, `apply-pathspec-${changeName}.txt`))
+  const hasCleanupReceipt = existsSync(runtimeStatePath(runtimeRoot, `execute-cleanup-${changeName}.json`))
   let hasExecuteRunStamp = false
   if (!hasWorktreeMeta && !hasBranch && !hasAuditTag && !hasSnapshotFile && !hasApplyPathspec && !hasCleanupReceipt) {
     try {
@@ -1016,7 +1017,7 @@ async function computeFullFlowAudit({ cwd, specBase, changeName, platformOpts, c
   let narrowNote = null
   if (freshActual && collectPatch) {
     try {
-      const pathspecFile = join(runtimeRoot, `apply-pathspec-${changeName}.txt`)
+      const pathspecFile = runtimeStatePath(runtimeRoot, `apply-pathspec-${changeName}.txt`)
       const owned = readFileSync(pathspecFile, 'utf8').split('\n').map(l => toPosix(l.trim())).filter(Boolean)
       if (owned.length > 0) {
         const ownedSet = new Set(owned)

package/src/sentinel-assertions.js

@@ -207,6 +207,43 @@ export function detectTickBurst(tickLog, opts = {}) {
   };
 }
 
+/**
+ * 勾选时点判定·换源版（2026-10-17-tick-timing-source，纯函数）：task-ticks.jsonl 侧车的逐格
+ * 墙钟时戳 → 勾选是「边干边勾」还是「末尾集中」。旧判据（tasks.md git 首次提交 == 收口最后
+ * 提交）已退役——git 历史形态被官方允许的 reset --soft 压扁无声摧毁（tick-timing-squash-
+ * blindspot 坑：边干边勾的渐进提交被并行会话压扁后警告照出，结构性误报；且 tasks.md 不进
+ * 交付 pathspec 的纪律下「untracked 直至归档」恒复现）。墙钟时戳是侧车文件事实，压扁/
+ * rebase 均不可改写——与「审计真相锚 change.patch sha256、不依赖 git 形态」口径对齐。
+ * 判定序（豁免优先）：
+ *   'no-ticks'    侧车无记录（agent 全程直接 Edit）——不判（调用方给一行 task tick 教学）；
+ *   'single'      仅 1 格——单格无节奏可言；
+ *   'spread'      时戳跨度 > clusterWindowMs（缺省 120s）——天然分散，边干边勾确认
+ *                 （超窗即铁证，无需存活锚）；
+ *   'no-anchor'   lifespanMs 非有限或 ≤0（baseline 缺失）——fail-open 不判（防误报）；
+ *   'concentrated' 跨度 ≤ clusterWindowMs 且 lifespanMs ≥ ratio×max(跨度,1ms)（缺省 10）
+ *                 ——格子全挤在收口前短窗且变更活得够久，末尾集中勾选形态；
+ *   其余（挤短窗但存活比不足）→ 'spread'——快变更快勾是合法形态，不告。
+ * 输入 ticks 为 [{ts, task}]（parseTickLog 产物或同形）；行序不保证，内部按 ts 排序。
+ * 坏行（ts 非有限/≤0）静默剔除。watcher 采样事件刻意不作判据（部分观测会把分散勾选采样
+ * 成尾窗聚集，与采样合并跳系列坑同源——缺观测宁可教学不判）。
+ * @param {{ticks?:Array<{ts:number,task:string}>, lifespanMs?:number, clusterWindowMs?:number, ratio?:number}} args
+ * @returns {{status:'spread'|'concentrated'|'single'|'no-ticks'|'no-anchor', count:number, spanMs:number}}
+ */
+export function detectTickTiming({ ticks, lifespanMs, clusterWindowMs = 120_000, ratio = 10 } = {}) {
+  const list = (Array.isArray(ticks) ? ticks : [])
+    .map((r) => Number(r && r.ts))
+    .filter((ts) => Number.isFinite(ts) && ts > 0)
+    .sort((a, b) => a - b);
+  if (list.length === 0) return { status: 'no-ticks', count: 0, spanMs: 0 };
+  if (list.length === 1) return { status: 'single', count: 1, spanMs: 0 };
+  const spanMs = list[list.length - 1] - list[0];
+  if (spanMs > clusterWindowMs) return { status: 'spread', count: list.length, spanMs };
+  const life = Number(lifespanMs);
+  if (!Number.isFinite(life) || life <= 0) return { status: 'no-anchor', count: list.length, spanMs };
+  if (life >= ratio * Math.max(spanMs, 1)) return { status: 'concentrated', count: list.length, spanMs };
+  return { status: 'spread', count: list.length, spanMs };
+}
+
 /**
  * 单拍勾选门决策（2026-09-29-batch-tick-gate，纯函数）：检出单拍跳（batchTick 非 null）
  * 时的收口动作裁决。镜像豁免分支退役（2026-10-07-thin-tasks-v3——任务面统一为 agent

package/src/spec-sync.js

@@ -19,6 +19,7 @@ import { createHash } from 'crypto';
 import { existsSync, readdirSync, readFileSync, statSync, mkdirSync, writeFileSync, unlinkSync } from 'fs';
 import { join, relative, sep } from 'path';
 import { bindSyncNoiseRoot, syncConnectionWarn, isConnectionClassStatus, noteSyncSuccess } from './sync-noise.js';
+import { runtimeStatePath } from './runtime-paths.js';
 import { writeAtomicSync } from './fs-atomic.js';
 
 // 与 sillyhub-daemon/src/spec-sync.ts 共用排除口径（task-07 / FR-06 / D-008@v2）：
@@ -69,7 +70,7 @@ export function describeSyncError(err) {
 // 才拿到），且失败走「下次自动重试」无限静默循环——归档半态（本地已归档、平台仍「进行中」）
 // 挂数小时无人知晓。两道护栏：①非 2xx 响应体解析进告警行；②按 label 连续失败计数持久化，
 // 连续 ≥3 次升级 🚨 显式告警，任一次成功清零。
-const FAIL_STREAK_FILE = join('.runtime', 'spec-sync-fail-streak.json');
+const FAIL_STREAK_FILE = join('.runtime', 'state', 'spec-sync-fail-streak.json');
 const FAIL_STREAK_ESCALATE_AT = 3;
 
 export function describeErrorBody(status, rawBody) {
@@ -387,7 +388,7 @@ const LAST_SUCCESS_MARKER = 'spec-sync-last-success.json';
 
 function readLastSyncTs(specRoot) {
   try {
-    const raw = readFileSync(join(specRoot, '.runtime', LAST_SUCCESS_MARKER), 'utf8');
+    const raw = readFileSync(runtimeStatePath(join(specRoot, '.runtime'), LAST_SUCCESS_MARKER), 'utf8');
     const ts = JSON.parse(raw).ts;
     return Number.isFinite(ts) ? ts : null;
   } catch {
@@ -398,7 +399,7 @@ function readLastSyncTs(specRoot) {
 function writeLastSyncTs(specRoot) {
   try {
     mkdirSync(join(specRoot, '.runtime'), { recursive: true });
-    writeFileSync(join(specRoot, '.runtime', LAST_SUCCESS_MARKER), JSON.stringify({ ts: Date.now() }) + '\n', 'utf8');
+    writeFileSync(runtimeStatePath(join(specRoot, '.runtime'), LAST_SUCCESS_MARKER), JSON.stringify({ ts: Date.now() }) + '\n', 'utf8');
   } catch { /* 标记失败只损失下次的防回推过滤，不影响本次同步结果 */ }
 }
 
@@ -415,7 +416,7 @@ const BASE_SNAPSHOT = 'spec-sync-base.json';
 
 function readBaseSnapshot(specRoot) {
   try {
-    const raw = readFileSync(join(specRoot, '.runtime', BASE_SNAPSHOT), 'utf8');
+    const raw = readFileSync(runtimeStatePath(join(specRoot, '.runtime'), BASE_SNAPSHOT), 'utf8');
     const hashes = JSON.parse(raw).hashes;
     return hashes && typeof hashes === 'object' ? hashes : null;
   } catch {
@@ -428,7 +429,7 @@ function writeBaseSnapshot(specRoot, localFiles) {
     const hashes = {};
     for (const f of localFiles) hashes[f.path] = f.hash;
     mkdirSync(join(specRoot, '.runtime'), { recursive: true });
-    writeFileSync(join(specRoot, '.runtime', BASE_SNAPSHOT), JSON.stringify({ ts: Date.now(), hashes }, null, 2) + '\n', 'utf8');
+    writeFileSync(runtimeStatePath(join(specRoot, '.runtime'), BASE_SNAPSHOT), JSON.stringify({ ts: Date.now(), hashes }, null, 2) + '\n', 'utf8');
   } catch { /* 快照失败只损失下次的内容级防回推，不影响本次同步结果 */ }
 }
 
@@ -497,7 +498,7 @@ export function partitionConflictPaths(serverVersions, localFiles, baseHashes, l
  */
 function isSamePendingSpecConflict(specRoot, changeName, realPaths) {
   try {
-    const raw = readFileSync(join(specRoot, '.runtime', `spec-sync-conflict-${changeName}.json`), 'utf8');
+    const raw = readFileSync(runtimeStatePath(join(specRoot, '.runtime'), `spec-sync-conflict-${changeName}.json`), 'utf8');
     const prev = JSON.parse(raw).conflicting_paths;
     if (!Array.isArray(prev) || prev.length !== realPaths.length) return false;
     const prevSet = new Set(prev);
@@ -514,7 +515,7 @@ function isSamePendingSpecConflict(specRoot, changeName, realPaths) {
  */
 function clearSpecConflictMarker(specRoot, changeName) {
   try {
-    const p = join(specRoot, '.runtime', `spec-sync-conflict-${changeName}.json`);
+    const p = runtimeStatePath(join(specRoot, '.runtime'), `spec-sync-conflict-${changeName}.json`);
     if (existsSync(p)) unlinkSync(p);
   } catch { /* 清理失败不影响同步结果 */ }
 }
@@ -553,7 +554,7 @@ export function writeTombstoneAttribution(specRoot, platformDeleted) {
   const byChange = extractTombstonedChanges(platformDeleted);
   const written = [];
   for (const [name, paths] of byChange) {
-    const filePath = join(specRoot, '.runtime', `spec-sync-conflict-${name}.json`);
+    const filePath = runtimeStatePath(join(specRoot, '.runtime'), `spec-sync-conflict-${name}.json`);
     let prev = null;
     try { prev = JSON.parse(readFileSync(filePath, 'utf8')); } catch { /* 首见 */ }
     const record = {
@@ -584,13 +585,17 @@ export function writeTombstoneAttribution(specRoot, platformDeleted) {
  * 清理条数。挂在两个全绿点：POST 成功无冲突分支与无差异跳过分支。
  */
 export function clearStaleTombstoneMarkers(specRoot) {
+  // 2026-10-18 布局分层：冲突文件落 state/；根目录扫描保留旧布局兜底
   const runtimeDir = join(specRoot, '.runtime');
   let files = [];
-  try { files = readdirSync(runtimeDir); } catch { return 0; }
+  const conflictDirs = [join(runtimeDir, 'state'), runtimeDir]
   let cleared = 0;
-  for (const f of files) {
+  for (const dir of conflictDirs) {
+  let dirFiles = [];
+  try { dirFiles = readdirSync(dir); } catch { continue; }
+  for (const f of dirFiles) {
     if (!f.startsWith('spec-sync-conflict-') || !f.endsWith('.json')) continue;
-    const p = join(runtimeDir, f);
+    const p = join(dir, f);
     try {
       const j = JSON.parse(readFileSync(p, 'utf8'));
       const cp = Array.isArray(j.conflicting_paths) ? j.conflicting_paths : null;
@@ -601,6 +606,7 @@ export function clearStaleTombstoneMarkers(specRoot) {
       }
     } catch { /* 损坏文件不动 */ }
   }
+  }
   if (cleared > 0) {
     console.log(`[spec-sync] 全绿同步清理 ${cleared} 条陈旧墓碑冲突记录（被删变更已收敛）`);
   }
@@ -624,7 +630,7 @@ const FOLLOW_REPORT_MARKER = 'spec-sync-follow-reported.json';
  */
 export function isFollowerSetChanged(specRoot, key, list) {
   const sorted = [...(list || [])].sort();
-  const p = join(specRoot, '.runtime', FOLLOW_REPORT_MARKER);
+  const p = runtimeStatePath(join(specRoot, '.runtime'), FOLLOW_REPORT_MARKER);
   let cur = {};
   try { cur = JSON.parse(readFileSync(p, 'utf8')) || {}; } catch { /* 无 marker = 首报 */ }
   const prev = Array.isArray(cur[key]) ? cur[key] : [];
@@ -665,10 +671,20 @@ function attributeChangeLabel(paths) {
   return names.size === 1 ? [...names][0] : 'full-tree'
 }
 
+/**
+ * spec 树增量同步（以服务器清单为锚做全树 diff → POST ops）。
+ *
+ * 返回契约（2026-10-17-archive-half-state-location-stuck-active）：`ok` 字段表达
+ * 「本轮文件树通道是否确认收敛」——ok:true = 确认（无差异 no-op / 推送成功 / 冲突自愈
+ * / 未连接本地合法态）；ok:false = 确认失败（清单/推送 HTTP 失败、异常）；**无 ok 字段
+ * = 未确认**（未决冲突待人裁等，fail-closed）。终态强校验消费方
+ * （run/shared.js triggerSyncTerminalStrict）按 `ok === true` 判收敛——历史调用方
+ * （syncSpecTreeOnly / resolve forcePush 等）不消费该字段，向后兼容。
+ */
 export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
   if (!platform || !platform.url || !platform.token) {
     debugLog('[spec-sync] 未连接平台（本地合法状态）；跳过 spec 树增量同步');
-    return { synced: 0 };
+    return { synced: 0, ok: true };
   }
   // 全树入口（platform sync 无 --change，2026-10-11-sync-conflict-tri-fix FR-03）
   // changeName=null：日志用 full-tree 标签，冲突归因见下方 conflictLabel。
@@ -705,7 +721,7 @@ export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
       if (failCount >= FAIL_STREAK_ESCALATE_AT) {
         console.warn(`🚨 [spec-sync] 已连续 ${failCount} 次同步失败——平台文件树可能持续落后（变更中心或仍显示「进行中」/旧内容）: ${logLabel}`);
       }
-      return { synced: 0 };
+      return { synced: 0, ok: false };
     }
     const body = await res.json().catch(() => ({}));
     serverManifest = body.files || {};
@@ -716,7 +732,7 @@ export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
     if (failCount >= FAIL_STREAK_ESCALATE_AT) {
       console.warn(`🚨 [spec-sync] 已连续 ${failCount} 次同步失败——平台文件树可能持续落后（变更中心或仍显示「进行中」/旧内容）: ${logLabel}`);
     }
-    return { synced: 0 };
+    return { synced: 0, ok: false };
   }
 
   // 2. walk/hash/diff
@@ -758,7 +774,7 @@ export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
     debugLog(`[spec-sync] 无差异，跳过同步: ${logLabel}`);
     clearStaleTombstoneMarkers(specRoot);
     clearFailStreak(specRoot, logLabel);
-    return { synced: 0 };
+    return { synced: 0, ok: true };
   }
 
   // 3. POST ops
@@ -782,7 +798,7 @@ export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
       if (failCount >= FAIL_STREAK_ESCALATE_AT) {
         console.warn(`🚨 [spec-sync] 已连续 ${failCount} 次同步失败——平台文件树可能持续落后（变更中心或仍显示「进行中」/旧内容）: ${logLabel}`);
       }
-      return { synced: 0 };
+      return { synced: 0, ok: false };
     }
     const body = await res.json().catch(() => ({}));
     if (body.conflict) {
@@ -843,7 +859,7 @@ export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
           debugLog(`[spec-sync] ${followers.length} 个本地未改动文件自动跟随服务器: ${followers.slice(0, 5).join(', ')}${followers.length > 5 ? ' 等' : ''}`);
         }
         console.warn(`⚠️ [spec-sync] 变更 ${conflictLabel} 存在未决 spec 树冲突（${realPaths.length} 个文件待裁决，本轮非冲突改动已照常同步）。处理：sillyspec platform resolve ${conflictLabel} --keep-local | --take-platform | --abort`);
-        return { synced: 0, conflict: true, serverVersions: real, autoResolved: followers.length, conflictPath: join(specRoot, '.runtime', `spec-sync-conflict-${conflictLabel}.json`), suppressed: true };
+        return { synced: 0, conflict: true, serverVersions: real, autoResolved: followers.length, conflictPath: runtimeStatePath(join(specRoot, '.runtime'), `spec-sync-conflict-${conflictLabel}.json`), suppressed: true };
       }
       if (followers.length > 0) {
         console.warn(`[spec-sync] ${followers.length} 个本地未改动文件自动跟随服务器（正常多端前进，无需人工裁决）: ${followers.slice(0, 5).join(', ')}${followers.length > 5 ? ' 等' : ''}`);
@@ -855,13 +871,13 @@ export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
         noteSyncSuccess();
         clearFailStreak(specRoot, logLabel);
         console.log(`[spec-sync] 冲突已自动消解（0 个需人工裁决；本会话改动 ${ops.length - followers.length > 0 ? '已同步' : '无差异'}）: ${conflictLabel}`);
-        return { synced: Math.max(ops.length - followers.length, 0), conflict: false, autoResolved: followers.length };
+        return { synced: Math.max(ops.length - followers.length, 0), ok: true, conflict: false, autoResolved: followers.length };
       }
       let conflictPath = null;
       try {
         const runtimeDir = join(specRoot, '.runtime');
         mkdirSync(runtimeDir, { recursive: true });
-        conflictPath = join(runtimeDir, `spec-sync-conflict-${conflictLabel}.json`);
+        conflictPath = runtimeStatePath(runtimeDir, `spec-sync-conflict-${conflictLabel}.json`);
         writeFileSync(conflictPath, JSON.stringify({
           change: conflictLabel,
           kind: 'spec-tree',
@@ -901,7 +917,7 @@ export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
     clearStaleTombstoneMarkers(specRoot);
     writeLastSyncTs(specRoot);
     writeBaseSnapshot(specRoot, localFiles);
-    return { synced: ops.length };
+    return { synced: ops.length, ok: true };
   } catch (err) {
     const failCount = bumpFailStreak(specRoot, logLabel, describeSyncError(err));
     const line = `[spec-sync] 同步异常（文件树本次未同步，下次自动重试）: ${logLabel}: ${describeSyncError(err)}`;
@@ -909,7 +925,7 @@ export async function syncSpecTree(specRoot, platform, changeName, opts = {}) {
     if (failCount >= FAIL_STREAK_ESCALATE_AT) {
       console.warn(`🚨 [spec-sync] 已连续 ${failCount} 次同步失败——平台文件树可能持续落后（变更中心或仍显示「进行中」/旧内容）: ${logLabel}`);
     }
-    return { synced: 0 };
+    return { synced: 0, ok: false };
   }
 }
 

package/src/stage-contract.js

@@ -897,7 +897,7 @@ function matrixEvidenceMissing(verdict, evidence) {
  */
 export function extractAcceptanceMatrixSlots(verifyMd) {
   const md = String(verifyMd || '')
-  const out = { present: false, rows: [], unfilled: 0, missingEvidence: 0 }
+  const out = { present: false, rows: [], unfilled: 0, missingEvidence: 0, strayRows: [] }
   const hm = md.match(/^#### 探针 7[：:]/m)
   if (!hm) return out
   out.present = true
@@ -905,15 +905,27 @@ export function extractAcceptanceMatrixSlots(verifyMd) {
   const endMatch = rest.match(/^#{1,4}(?:[ \t]|$)/m)
   const sectionText = endMatch ? rest.slice(0, endMatch.index) : rest
 
+  // 表头武装（坑 carry-orphan-rows，2026-10-16 下游实证）：五列表行只在探针 7 段已被表头行
+  // 武装时才计数；refresh 携载注释块解除武装——其后残行（旧模板占位行/键漂移携载行）是无
+  // 表头归属的孤行，不栽给最近 **task-NN** 锚误报「判定未填」，进独立 strayRows 桶由
+  // validateAcceptanceMatrix 报错要求裁决。武装是段级粘性（首表头武装整段，锚行不重置——
+  // 锚下不重复表头的既有手写/历史形态照旧按锚归属）；只有携载注释块与其后无新表头重新
+  // 武装的窗口内，行才进孤行桶。正常渲染文法（锚行→表头→分隔→数据行）行为与既有口径一致。
   let currentTask = ''
+  let tableArmed = false
   for (const rawLine of sectionText.split(/\r?\n/)) {
     const anchor = rawLine.match(/^\*\*\s*(task-[A-Za-z0-9._-]+)\s*\*\*/)
     if (anchor) { currentTask = anchor[1]; continue }
+    if (/<!--\s*refresh 携载/.test(rawLine)) { tableArmed = false; continue } // 携载注释块：其后表行是孤行（直至新表头重新武装）
     const cells = splitMatrixRowCells(rawLine)
     if (!cells || cells.length !== 5) continue // 列表防御行/不适用行/非五列表行不计槽
     const c = cells.map(x => x.trim())
     if (c.every(x => /^:?-{3,}:?$/.test(x))) continue // 分隔行 |---|---|…|
-    if (c[3] === '判定' && c[4] === '证据') continue // 表头行
+    if (c[3] === '判定' && c[4] === '证据') { tableArmed = true; continue } // 表头行（武装本段）
+    if (!tableArmed) {
+      out.strayRows.push({ task: currentTask, acceptance: c[0], verdict: c[3], evidence: c[4] })
+      continue
+    }
     const verdict = c[3]
     const evidence = c[4]
     const row = { task: currentTask, acceptance: c[0], verdict, evidence }
@@ -985,6 +997,16 @@ function validateAcceptanceMatrix(cwd, changeName, context = {}) {
       `修复：在证据列补测试锚点（如 \`test/foo.test.mjs\` 或 \`src/x.js:42\`）或 non-testable 理由（运行验证移交场景适用：构建回执+移交去向一句话）。`
     )
   }
+  // 孤行报错（坑 carry-orphan-rows，2026-10-16 下游实证）：无表头归属的五列残行（refresh
+  // 携载块后的旧模板占位行/键漂移携载行/手误行）不归属任何 task 锚——不栽给最近锚计
+  // unfilled（旧路径误报「文档同步任务判定未填」），独立报错要求裁决：删或补归属。
+  if ((matrix.strayRows || []).length > 0) {
+    const list = matrix.strayRows.map((r) => `${r.task || '（无 task 锚）'}｜${clip(r.acceptance)}`).join('；')
+    errors.push(
+      `探针 7 验收×测试覆盖矩阵存在 ${matrix.strayRows.length} 行无表头归属的孤行（携载残行/旧模板占位行/手误——不属于任何 task 锚下的有效表，不计入任务矩阵）：${list}。` +
+      `修复：删除这些残行，或补全 **task-NN** 锚行与表头后按五列格式填判定与证据。`
+    )
+  }
 
   // ── partial/uncovered × facts.handover 联动（D-003/FR-04，2026-09-17-pass-cap-semantics task-03）──
   // 部分实现必须有移交去向：矩阵含 partial/uncovered 行且 facts.handover 零有效行（任意

package/src/stage-review.js

@@ -14,6 +14,7 @@
  */
 
 import { existsSync, readFileSync, mkdirSync, readdirSync } from 'fs'
+import { runtimeStatePath } from './runtime-paths.js'
 import { writeAtomicSync } from './fs-atomic.js'
 import { join, dirname } from 'path'
 import { createHash } from 'crypto'
@@ -364,7 +365,7 @@ export function generateStageReviewRunId() {
  */
 export function stageReviewMarkerPath(runtimeRoot, stage, changeName) {
   const suffix = changeName ? `${stage}-${changeName}` : stage
-  return join(runtimeRoot, `current-stage-review-run-id-${suffix}`)
+  return runtimeStatePath(runtimeRoot, `current-stage-review-run-id-${suffix}`)
 }
 
 /**
@@ -853,7 +854,7 @@ export function printStageReviewResult(result, context = {}) {
     // fail-open：无 changeName / 无记录 / 读失败 → 零输出（旧口径）。
     if (changeName && runtimeRoot) {
       try {
-        const recPath = join(runtimeRoot, `review-dispatch-${changeName}.json`)
+        const recPath = runtimeStatePath(runtimeRoot, `review-dispatch-${changeName}.json`)
         if (existsSync(recPath)) {
           const rec = JSON.parse(readFileSync(recPath, 'utf8'))
           if (rec && typeof rec === 'object' && (rec.state === 'in-flight' || rec.state === 'dispatching')) {

package/src/stages/brainstorm.js

@@ -58,7 +58,7 @@ export const definition = {
 - **明显 small**（满足：单上下文可吞吐的纯执行类——改文案/修 bug/样式调整/配置微调，预计无 Wave 编排/上下文分片需求）→ 输出：「此变更规模较小，建议直接走轻量变更」+ 一句依据，给出可照抄建议命令（--input 引号内换行合法）：
 
 \`\`\`
-sillyspec flow start --change <YYYY-MM-DD-名> --input "<一句中文概括（首行即变更标题）；随后动机与背景
+sillyspec flow start --change <YYYY-MM-DD-名> --input "<一句 10-30 字中文概括（首行即变更标题，硬区间 10-30 必须、建议 ~20 字）；随后动机与背景
 
 成功标准：
 - <可验证标准>"

package/src/sync-noise.js

@@ -24,6 +24,7 @@
  * 调用方传 noMute 绕过。
  */
 import { readFileSync, writeFileSync, mkdirSync, unlinkSync } from 'fs'
+import { runtimeStatePath } from './runtime-paths.js'
 import { join } from 'path'
 
 const NOISE_MARKER = 'sync-noise-mute.json'
@@ -254,7 +255,7 @@ let _openedSelfHealByThisProcess = new Set()
 const _seenSelfHealInProcess = new Set()
 
 function _readSelfHealWindows() {
-  const p = _runtimeDir ? join(_runtimeDir, SELF_HEAL_MARKER) : null
+  const p = _runtimeDir ? runtimeStatePath(_runtimeDir, SELF_HEAL_MARKER) : null
   if (!p) return null
   try {
     const s = JSON.parse(readFileSync(p, 'utf8'))
@@ -279,7 +280,7 @@ function _selfHealLineVisible(changeName, kind, noMute) {
   next[key] = now + MUTE_WINDOW_MS
   try {
     mkdirSync(_runtimeDir, { recursive: true })
-    writeFileSync(join(_runtimeDir, SELF_HEAL_MARKER), JSON.stringify(next) + '\n', 'utf8')
+    writeFileSync(runtimeStatePath(_runtimeDir, SELF_HEAL_MARKER), JSON.stringify(next) + '\n', 'utf8')
   } catch { /* marker 写失败 = 闸门失效退化为直通，仅损失降噪 */ }
   _openedSelfHealByThisProcess.add(key)
   return true