skill-family-contracts 0.1.2 → 0.2.0

package/CONTRIBUTING.md

@@ -1,79 +1,25 @@
-# 贡献指南（Contributing）
+# 贡献指南（skill-family-contracts）
 
-感谢关注 `skill-family-foundation-workspace`。本文件说明本地开发环境、
-验证流程与 PR 规则。行为准则见 [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md)，
-Git 写操作的授权边界见仓库内文档站的生命周期指南（`docs/git-lifecycle.md`）。
+本仓是 `skill-family-contracts` 的公开发布镜像，只承载版本化发布物。开发在私有工作区进行，不在本仓公开。
 
-拓扑说明：本工作区仓永久 private，是唯一开发真源；三个 public 仓
-（`skill-family-contracts`、`skill-family-harness-node`、
-`skill-family-engineering-kit`）是版本化发布镜像，不承载完整开发历史与
-测试。本指南描述的是私有工作区内经授权的开发流程；消费坐标与发布状态
-唯一见 `docs/status/current.md`。
+## 问题报告
 
-## Bug 报告与 Issue
+Bug 报告请在本仓 GitHub Issues 提交：https://github.com/ifoohoo/skill-family-contracts/issues
 
-普通 bug 报告欢迎通过各 public 发布镜像仓的 GitHub Issues 提交（例如
-`https://github.com/ifoohoo/skill-family-engineering-kit/issues`）。提交
-bug 报告时请尽量提供：受影响包与版本、最小复现步骤、预期与实际行为。
+提交时请尽量提供：受影响版本、最小复现步骤、预期与实际行为。
 
-**未经事先讨论的 Pull Request 不予接受。** 如果你希望贡献代码，请先
-通过 Issue 讨论变更的动机与范围，获得维护者确认后再提交 PR。这是为了
-避免重复劳动、确保变更与本项目的架构裁决和发布合同一致。
+## 代码贡献
 
-## 本地安装
+未经事先讨论的 Pull Request 不予接受。请先通过 Issue 讨论变更的动机与范围，获得维护者确认后再提交 PR。
 
-必需工具（精确版本见仓库内 `docs/setup.md` 的安装合同）：
+## 行为准则
 
-- Node.js：`>=22.22.2 <23`（版本取自 `.node-version`）
-- pnpm：10.30.0（`packageManager` 精确锁定）
-- Python：3.10 或更高（仅文档站构建需要）
+互动请遵守本仓 CODE_OF_CONDUCT.md。
 
-```bash
-pnpm install
-pnpm synth
-pnpm check
-```
-
-- `pnpm synth` 再生成 projen 受管文件。受管文件只能通过修改
-  `.projenrc.js` 间接变更；手写源码、文档和 fixture 不会被 synth 覆盖。
-- `pnpm check` 是统一根门禁：10 个稳定门禁 ID 按固定顺序串联执行，
-  任一步骤非 0 即整体失败。
-
-## 提交 PR 前必须做到
-
-1. 只修改当前任务授权的文件，不顺手改动无关文件；
-2. 修改 `.projenrc.js` 后运行 `pnpm synth`，并保证连续两次 synth 零漂移；
-3. 本地完整通过根门禁：
-
-   ```bash
-   pnpm check
-   ```
-
-4. 涉及文档时额外运行文档事实与链接检查：
-
-   ```bash
-   node scripts/docs/fact-check.mjs
-   node scripts/docs/link-check.mjs
-   ```
-
-5. 涉及三个叶子包时，确认发布字节合同仍然成立：
-
-   ```bash
-   pnpm run release-artifacts:build -- --output .artifacts/publish-candidates
-   pnpm run release-artifacts:verify -- --root .artifacts/publish-candidates --manifest .artifacts/publish-candidates/release-artifacts.manifest.json
-   ```
-
-## PR 规则
+## 安全报告
 
-- PR 描述须包含：动机、变更面、本地门禁结果（退出码）与剩余风险；
-- 不得为转绿而弱化任何产品门禁、Action pin、权限、泄漏策略或 tarball 合同；
-- 不新增运行时依赖，除非先经评审并显式修订泄漏策略中的公开依赖清单；
-- 不提交生成物与本地状态：`node_modules`、`site/`、`.artifacts/`、缓存、
-  日志、凭据或本机绝对路径一律不进入提交；
-- 受管投影必须与产生它的源变更在同一 PR 内提交，禁止手改受管文件；
-- 动态状态（实时发布状态、远端对象状态）不写入版本化文档，唯一产品状态
-  口径见 `docs/status/current.md`。
+漏洞报告渠道见本仓 SECURITY.md。请走 Private vulnerability reporting，不要以公开 Issue 提交漏洞。
 
-## 安全报告
+## 许可证
 
-漏洞报告渠道与支持版本见 [SECURITY.md](SECURITY.md)。
+贡献内容默认按 Apache-2.0 授权，与本包许可证一致。

package/README.md

@@ -3,9 +3,9 @@
 
 # skill-family-contracts
 
-机器可执行工程结构和机制协议的唯一权威包（Contracts v1，冻结）。
+机器可执行工程结构和机制协议的唯一权威包（Contracts 1.4.0，冻结）。
 
-本包拥有：六类顶层对象的 JSON Schema、Kernel Protocol（内核协议）、稳定错误码、
+本包拥有：十八类顶层对象的 JSON Schema、Kernel Protocol（内核协议）、稳定错误码、
 协议名/`$id` 登记表，以及九种有限机械检查类型与受限强制规则集。
 本包不执行骨架生成、文件写入、审计或发布；机制实现由 Harness 承担，
 工程命令由 Kit 承担，二者单向消费本包。
@@ -13,7 +13,7 @@
 Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.json`），
 按方言路由到对应 Ajv 类；不实现任何手写 Schema 子集解释器。
 
-## 六类顶层对象
+## 十八类顶层对象
 
 | 对象 | `$id` | Schema 文件 |
 | --- | --- | --- |
@@ -23,6 +23,18 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 | `operation-request` | `https://contracts.skill-family.example/v1/operation-request.json` | `src/schemas/operation-request.schema.json` |
 | `operation-result` | `https://contracts.skill-family.example/v1/operation-result.json` | `src/schemas/operation-result.schema.json` |
 | `migration-manifest` | `https://contracts.skill-family.example/v1/migration-manifest.json` | `src/schemas/migration-manifest.schema.json` |
+| `report-model` | `https://contracts.skill-family.example/v1/report-model.json` | `src/schemas/report-model.schema.json` |
+| `report-binding` | `https://contracts.skill-family.example/v1/report-binding.json` | `src/schemas/report-binding.schema.json` |
+| `host-descriptor` | `https://contracts.skill-family.example/v1/host-descriptor.json` | `src/schemas/host-descriptor.schema.json` |
+| `host-capability-fact` | `https://contracts.skill-family.example/v1/host-capability-fact.json` | `src/schemas/host-capability-fact.schema.json` |
+| `adapter-build-manifest` | `https://contracts.skill-family.example/v1/adapter-build-manifest.json` | `src/schemas/adapter-build-manifest.schema.json` |
+| `host-operation-plan` | `https://contracts.skill-family.example/v1/host-operation-plan.json` | `src/schemas/host-operation-plan.schema.json` |
+| `host-operation-receipt` | `https://contracts.skill-family.example/v1/host-operation-receipt.json` | `src/schemas/host-operation-receipt.schema.json` |
+| `adapter-source` | `https://contracts.skill-family.example/v1/adapter-source.json` | `src/schemas/adapter-source.schema.json` |
+| `host-registry` | `https://contracts.skill-family.example/v1/host-registry.json` | `src/schemas/host-registry.schema.json` |
+| `host-probe-result` | `https://contracts.skill-family.example/v1/host-probe-result.json` | `src/schemas/host-probe-result.schema.json` |
+| `state-event-envelope` | `https://contracts.skill-family.example/v1/state-event-envelope.json` | `src/schemas/state-event-envelope.schema.json` |
+| `state-snapshot-metadata` | `https://contracts.skill-family.example/v1/state-snapshot-metadata.json` | `src/schemas/state-snapshot-metadata.schema.json` |
 
 所有 v1 Schema 使用 draft 2020-12 方言；实例信封统一为
 `schemaVersion: 1` + 唯一 `kind` 常量 + 各层 `additionalProperties: false`。
@@ -48,7 +60,7 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 ## 稳定错误码
 
 冻结登记表：`src/error-codes.json`。`SFC1xxx` 为合同权威层错误，
-`SFC2xxx` 为内核操作错误。码只增不改、不复用。v1 冻结：
+`SFC2xxx` 为内核操作错误，`SFC3xxx` 为报告绑定错误。码只增不改、不复用。v1 冻结：
 
 | 码 | 名称 | 含义摘要 |
 | --- | --- | --- |
@@ -67,6 +79,9 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 | SFC2002 | UNKNOWN_OPERATION | 操作名不在冻结词汇表 |
 | SFC2003 | INVALID_PARAMS | 参数不满足操作的冻结 params 合同 |
 | SFC2004 | EXECUTION_FAILED | 机制运行时执行失败（仅运行时可演示） |
+| SFC3001 | REPORT_DIGEST_MISMATCH | 报告或结果摘要与绑定不一致 |
+| SFC3002 | REPORT_ELEMENT_MISSING | 报告缺少强制元素 |
+| SFC3003 | REPORT_FACT_DRIFT | 报告字节偏离确定性重渲染结果 |
 
 ## 方言与验证策略（Ajv）
 
@@ -85,13 +100,14 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 `schema.ref-resolves`、`schema.dialect-declared`、`fixture.positive-passes`、
 `fixture.negative-coded`、`error-code.registered`、`rules.budget`。
 
-首版强制规则 **13 条**（CR-001…CR-013），预算上限 20 条、绝对上限 30 条；
+当前强制规则 **9 条**（CR-001、CR-006…CR-013）。其中 CR-001 对登记表内全部 Schema 做统一编译，
+不再为每个对象重复占用一条规则；预算上限 20 条、绝对上限 30 条；
 `rules.budget` 是机械门禁，超限即 `runChecks` 失败并报 `SFC1008`。
 
 ## Fixture
 
 `src/fixtures/<contract>/` 为每类合同提供正例（positive）、反例（negative）
-与方言边界（dialect-boundary）样例，共 32 个。每个 fixture 声明目标 Schema、
+与方言边界（dialect-boundary）样例，共 76 个。每个 fixture 声明目标 Schema、
 方言、策略与期望；反例期望携带稳定失败码。`verifyAllFixtures()` 机械重放全部期望，
 行为不符报 `SFC1010`。fixture 是完全虚构数据，不是审计 oracle。
 
@@ -125,14 +141,14 @@ import {
 ## 安装
 
 ```sh
-npm install skill-family-contracts
+npm install skill-family-contracts@0.2.0
 npm info skill-family-contracts --help
 ```
 
 ## 最小示例
 
 ```js
-// 从空目录运行：npm install skill-family-contracts
+// 从空目录运行：npm install skill-family-contracts@0.2.0
 import { validateDocument } from "skill-family-contracts";
 
 const document = {
@@ -153,4 +169,4 @@ if (!result.valid) console.error(result.errorCode);
 
 ## 故障诊断
 
-验证失败时 `errorCode` 为 `SCHEMA_VALIDATION_FAILED`（SFC1001）；未知 Schema 报 `UNKNOWN_SCHEMA_ID`（SFC1002）。如失败，检查文档是否满足目标 Schema 的必填字段与类型约束。
+验证失败时 `errorCode` 为 `SFC1001`（SCHEMA_VALIDATION_FAILED，文档未通过目标 Schema 验证）；`$id` 未注册时报 `SFC1002`（UNKNOWN_SCHEMA_ID）。如失败，检查文档是否满足目标 Schema 的必填字段与类型约束。

package/SECURITY.md

@@ -12,15 +12,10 @@
 ## 报告漏洞
 
 请勿通过公开 issue 直接披露未修复的安全漏洞。private workspace 仓永久
-private，不是公开报告渠道；请通过以下渠道私下报告：
-
-1. **首选**：通过任一 public 发布镜像仓（例如
-   `https://github.com/ifoohoo/skill-family-engineering-kit`）在 GitHub 上使用
-   **Private vulnerability reporting**（仓库 Security 页签的
-   "Report a vulnerability"）；
-2. **备选**：如上述通道不可用，请通过邮件联系仓库维护者
-   （`ifoohoo` GitHub 组织的 `security` 团队，或仓库 `README.md` 中列出的
-   维护者邮箱）。
+private，不是公开报告渠道；请通过任一 public 发布镜像仓（例如
+`https://github.com/ifoohoo/skill-family-engineering-kit`）在 GitHub 上使用
+**Private vulnerability reporting**（仓库 Security 页签的
+"Report a vulnerability"）私下报告。
 
 报告时请尽量提供：
 

package/package.json

@@ -27,9 +27,9 @@
     "url": "https://github.com/ifoohoo/skill-family-contracts.git"
   },
   "type": "module",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "scripts": {
-    "check": "node --input-type=module -e \"import('./src/index.mjs').then(() => console.log('smoke ok')).catch(e => { console.error(e); process.exit(1) })\"",
-    "test": "node --input-type=module -e \"import('./src/index.mjs').then(() => console.log('smoke ok')).catch(e => { console.error(e); process.exit(1) })\""
+    "check": "node --test",
+    "test": "node --test"
   }
 }

package/src/checker.mjs

@@ -117,22 +117,26 @@ function schemaEntries(ctx) {
 
 const HANDLERS = {
   "schema.compile": (rule, ctx) => {
-    const registration = ctx.registry.schemas.find(
-      (entry) => entry.object === rule.target.object,
-    );
-    if (!registration) {
-      return fail(rule, "SFC1002", `no registered schema for object: ${rule.target.object}`);
+    const registrations = rule.target.registry === "schemas"
+      ? ctx.registry.schemas
+      : ctx.registry.schemas.filter((entry) => entry.object === rule.target.object);
+    if (registrations.length === 0) {
+      return fail(rule, "SFC1002", `no registered schema for target: ${rule.target.object ?? rule.target.registry}`);
     }
-    try {
-      compileSchema(
-        { schema: ctx.loadSchema(registration) },
-        { dialect: registration.dialect, policy: "strict" },
-      );
-      return pass(rule);
-    } catch (cause) {
-      if (cause instanceof ContractsError) return fail(rule, cause.code, cause.message);
-      throw cause;
+    for (const registration of registrations) {
+      try {
+        compileSchema(
+          { schema: ctx.loadSchema(registration) },
+          { dialect: registration.dialect, policy: "strict" },
+        );
+      } catch (cause) {
+        if (cause instanceof ContractsError) {
+          return fail(rule, cause.code, `${registration.object}: ${cause.message}`);
+        }
+        throw cause;
+      }
     }
+    return pass(rule);
   },
 
   "schema.unique-id": (rule, ctx) => {

package/src/error-codes.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "kind": "skill-family.contracts.error-codes",
-  "contractsVersion": "1.1.1",
+  "contractsVersion": "1.4.0",
   "policy": {
     "format": "^SFC[0-9]{4}$",
     "ranges": [
@@ -14,6 +14,11 @@
         "prefix": "SFC2",
         "category": "kernel",
         "note": "Kernel protocol operation errors."
+      },
+      {
+        "prefix": "SFC3",
+        "category": "report",
+        "note": "Report contract errors: digest binding, mandatory elements, fact drift. Style findings are never coded here; they are advisory output of the report check, not errors."
       }
     ],
     "stability": "Codes are append-only. A frozen code is never reused for a different meaning; a deprecated code stays reserved. New codes require a contracts change."
@@ -123,6 +128,27 @@
       "category": "kernel",
       "stableSince": "1.0.0",
       "meaning": "The mechanism runtime failed while executing a well-formed operation; details carry the mechanism evidence. Demonstrable only by a mechanism runtime, not by static contracts checks."
+    },
+    {
+      "code": "SFC3001",
+      "name": "REPORT_DIGEST_MISMATCH",
+      "category": "report",
+      "stableSince": "1.2.0",
+      "meaning": "A report binding digest (model, result, or report digest) does not match the recomputed sha256 digest, or the report is not the canonical render of its model; the binding is stale or tampered and is never trusted."
+    },
+    {
+      "code": "SFC3002",
+      "name": "REPORT_ELEMENT_MISSING",
+      "category": "report",
+      "stableSince": "1.2.0",
+      "meaning": "A mandatory report element is absent, empty where it must not be, or declared in an unsupported form: the conclusion, non-empty evidence, risks/next-action sections, a supported locale, or a coded outcome for failed/blocked runs. No half report is issued for a missing element."
+    },
+    {
+      "code": "SFC3003",
+      "name": "REPORT_FACT_DRIFT",
+      "category": "report",
+      "stableSince": "1.2.0",
+      "meaning": "A report model misstates the bound operation result's terminal state/errors, or rendered report bytes diverge from the deterministic re-render of the bound report model: fact fields rewritten, sections deleted, duplicated, or injected."
     }
   ]
 }

package/src/errors.mjs

@@ -17,7 +17,8 @@ function deepFreeze(obj) {
  *
  * The registry file (error-codes.json) is the single source of truth; codes are
  * append-only and never reused. SFC1xxx covers contracts-authority failures,
- * SFC2xxx covers kernel-operation failures.
+ * SFC2xxx covers kernel-operation failures, SFC3xxx covers report-contract
+ * failures (digest binding, mandatory elements, fact drift).
  */
 
 const ERROR_REGISTRY = deepFreeze(JSON.parse(

package/src/fixtures/adapter-build-manifest/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-build-manifest.dialect-boundary.unsupported", "contract": "adapter-build-manifest", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-build-manifest.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-build-manifest" }
+}

package/src/fixtures/adapter-build-manifest/negative-01-path-escape.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-build-manifest.negative.path-escape", "contract": "adapter-build-manifest", "class": "negative",
+  "description": "An escaping target is rejected.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-build-manifest.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-build-manifest", "hostId": "fixture-host", "pathCategory": { "id": "fixture-project-skills", "scope": "project", "anchor": "project-root", "relPath": ".fixture/skills" }, "sourceClosure": { "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "members": [{ "sourcePath": "demo/SKILL.md", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "bytes": 4 }] }, "members": [{ "sourcePath": "demo/SKILL.md", "target": "../outside", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "bytes": 4 }], "digest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" }
+}

package/src/fixtures/adapter-build-manifest/positive-01-single-file.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-build-manifest.positive.single-file", "contract": "adapter-build-manifest", "class": "positive",
+  "description": "A manifest binds one source byte set to one controlled target.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-build-manifest.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-build-manifest", "hostId": "fixture-host", "pathCategory": { "id": "fixture-project-skills", "scope": "project", "anchor": "project-root", "relPath": ".fixture/skills" }, "sourceClosure": { "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "members": [{ "sourcePath": "demo/SKILL.md", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "bytes": 4 }] }, "members": [{ "sourcePath": "demo/SKILL.md", "target": ".fixture/skills/demo/SKILL.md", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "bytes": 4 }], "digest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" }
+}

package/src/fixtures/adapter-source/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-source.dialect-boundary.unsupported", "contract": "adapter-source", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before source validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-source.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-source", "skillFamilyId": "fixture-family", "skills": [{ "id": "demo-skill", "files": [{ "path": "SKILL.md", "content": "# Demo\n" }] }] }
+}

package/src/fixtures/adapter-source/negative-01-path-escape.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-source.negative.path-escape", "contract": "adapter-source", "class": "negative",
+  "description": "An adapter source path cannot escape its declared skill directory.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-source.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-source", "skillFamilyId": "fixture-family", "skills": [{ "id": "demo-skill", "files": [{ "path": "../outside", "content": "bad" }] }] }
+}

package/src/fixtures/adapter-source/positive-01-minimal.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-source.positive.minimal", "contract": "adapter-source", "class": "positive",
+  "description": "A minimal source closure contains one skill and its required SKILL.md bytes.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-source.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-source", "skillFamilyId": "fixture-family", "skills": [{ "id": "demo-skill", "files": [{ "path": "SKILL.md", "content": "# Demo\n" }] }] }
+}

package/src/fixtures/host-capability-fact/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-capability-fact.dialect-boundary.unsupported", "contract": "host-capability-fact", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-capability-fact.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-capability-fact", "hostId": "fixture-host", "capability": "smoke", "state": "unknown", "evidence": ["No frozen probe."], "unknownReason": "driver-limited", "manualSteps": ["Verify manually."] }
+}

package/src/fixtures/host-capability-fact/negative-01-unknown-without-manual.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-capability-fact.negative.unknown-without-manual", "contract": "host-capability-fact", "class": "negative",
+  "description": "Unknown without a manual verification path is rejected.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-capability-fact.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-capability-fact", "hostId": "fixture-host", "capability": "smoke", "state": "unknown", "evidence": ["No frozen probe."], "unknownReason": "driver-limited" }
+}

package/src/fixtures/host-capability-fact/positive-01-unknown.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-capability-fact.positive.unknown", "contract": "host-capability-fact", "class": "positive",
+  "description": "An unknown fact includes a reason and manual steps.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-capability-fact.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-capability-fact", "hostId": "fixture-host", "capability": "smoke", "state": "unknown", "evidence": ["No frozen probe."], "unknownReason": "driver-limited", "manualSteps": ["Verify manually."] }
+}

package/src/fixtures/host-descriptor/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-descriptor.dialect-boundary.unsupported", "contract": "host-descriptor", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-descriptor.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-descriptor", "hostId": "fixture-host", "displayName": "Fixture Host", "support": "unsupported", "unsupportedReason": "No frozen driver.", "pathCategories": [], "probeCapabilities": [] }
+}

package/src/fixtures/host-descriptor/negative-01-command-data.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-descriptor.negative.command-data", "contract": "host-descriptor", "class": "negative",
+  "description": "Descriptor command data is outside the closed contract.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-descriptor.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-descriptor", "hostId": "fixture-host", "displayName": "Fixture Host", "support": "unsupported", "unsupportedReason": "No frozen driver.", "pathCategories": [], "probeCapabilities": [], "executable": "dangerous" }
+}

package/src/fixtures/host-descriptor/positive-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-descriptor.positive.unsupported", "contract": "host-descriptor", "class": "positive",
+  "description": "An unsupported host is explicit and carries neither a driver nor paths.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-descriptor.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-descriptor", "hostId": "fixture-host", "displayName": "Fixture Host", "support": "unsupported", "unsupportedReason": "No frozen driver.", "pathCategories": [], "probeCapabilities": [] }
+}

package/src/fixtures/host-operation-plan/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-plan.dialect-boundary.unsupported", "contract": "host-operation-plan", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-plan.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-plan" }
+}

package/src/fixtures/host-operation-plan/negative-01-unsupported-action.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-plan.negative.unsupported-action", "contract": "host-operation-plan", "class": "negative",
+  "description": "Unsupported planning cannot hide an action.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-plan.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-plan", "hostId": "fixture-host", "status": "unsupported", "unsupportedReason": "No frozen driver.", "probeFacts": [], "actions": [{ "sequence": 1 }], "writeSet": [], "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }
+}

package/src/fixtures/host-operation-plan/positive-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-plan.positive.unsupported", "contract": "host-operation-plan", "class": "positive",
+  "description": "Unsupported planning is an explicit zero-action result.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-plan.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-plan", "hostId": "fixture-host", "status": "unsupported", "unsupportedReason": "No frozen driver.", "probeFacts": [], "actions": [], "writeSet": [], "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }
+}

package/src/fixtures/host-operation-receipt/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-receipt.dialect-boundary.unsupported", "contract": "host-operation-receipt", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-receipt.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-receipt" }
+}

package/src/fixtures/host-operation-receipt/negative-01-success-without-hash.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-receipt.negative.success-without-hash", "contract": "host-operation-receipt", "class": "negative",
+  "description": "A successful write without sha256 is rejected.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-receipt.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-receipt", "hostId": "fixture-host", "planDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "overall": "succeeded", "authorizationRef": "approval-1", "writes": [{ "target": ".fixture/skills/demo/SKILL.md", "outcome": "succeeded" }], "closure": { "digestAlgorithm": "sha256", "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "resources": [{ "path": ".fixture/skills/demo/SKILL.md", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }] } }
+}

package/src/fixtures/host-operation-receipt/positive-01-rejected.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-receipt.positive.rejected", "contract": "host-operation-receipt", "class": "positive",
+  "description": "A rejected receipt has a reason and zero writes.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-receipt.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-receipt", "hostId": "fixture-host", "planDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "overall": "rejected", "reason": "Apply is unavailable.", "writes": [] }
+}

package/src/fixtures/host-probe-result/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-probe-result.dialect-boundary.unsupported", "contract": "host-probe-result", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before probe-result validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-probe-result.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-probe-result", "hostId": "fixture-host", "support": "unsupported", "reason": "No audited driver.", "facts": [] }
+}

package/src/fixtures/host-probe-result/negative-01-unsupported-with-fact.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-probe-result.negative.unsupported-with-fact", "contract": "host-probe-result", "class": "negative",
+  "description": "An unsupported host cannot claim a capability fact.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-probe-result.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-probe-result", "hostId": "fixture-host", "support": "unsupported", "reason": "No audited driver.", "facts": [{ "schemaVersion": 1, "kind": "skill-family.host-capability-fact", "hostId": "fixture-host", "capability": "cli", "state": "unavailable", "evidence": ["Not present."] }] }
+}

package/src/fixtures/host-probe-result/positive-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-probe-result.positive.unsupported", "contract": "host-probe-result", "class": "positive",
+  "description": "An unsupported host probe is explicit and contains no capability facts.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-probe-result.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-probe-result", "hostId": "fixture-host", "support": "unsupported", "reason": "No audited driver.", "facts": [] }
+}

package/src/fixtures/host-registry/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-registry.dialect-boundary.unsupported", "contract": "host-registry", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before registry validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-registry.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-registry", "hosts": ["fixture-host"] }
+}

package/src/fixtures/host-registry/negative-01-path-escape.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-registry.negative.duplicate-host", "contract": "host-registry", "class": "negative",
+  "description": "A registry cannot declare the same fictional host twice.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-registry.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-registry", "hosts": ["fixture-host", "fixture-host"] }
+}

package/src/fixtures/host-registry/positive-01-reference.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-registry.positive.reference", "contract": "host-registry", "class": "positive",
+  "description": "A registry declares fictional host identifiers without embedding Profile data.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-registry.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-registry", "hosts": ["fixture-host"] }
+}

package/src/fixtures/report-binding/dialect-01-unsupported-dialect.json

@@ -0,0 +1,21 @@
+{
+  "fixtureId": "report-binding.dialect-boundary.unsupported-dialect",
+  "contract": "report-binding",
+  "class": "dialect-boundary",
+  "description": "Dialect boundary: a valid binding document declared under an unsupported dialect (draft-04) is rejected before any schema validation, with the stable dialect code.",
+  "validation": {
+    "schemaId": "https://contracts.skill-family.example/v1/report-binding.json",
+    "dialect": "draft-04",
+    "policy": "strict"
+  },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.report-binding",
+    "runId": "run-aurora-0001",
+    "modelDigest": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789",
+    "resultDigest": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+    "reportDigest": "fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
+    "rendererVersion": "0.2.0"
+  }
+}

package/src/fixtures/report-binding/negative-01-wrong-kind.json

@@ -0,0 +1,21 @@
+{
+  "fixtureId": "report-binding.negative.wrong-kind",
+  "contract": "report-binding",
+  "class": "negative",
+  "description": "A binding with a wrong kind discriminator is rejected: a report model or any other document cannot impersonate the binding envelope.",
+  "validation": {
+    "schemaId": "https://contracts.skill-family.example/v1/report-binding.json",
+    "dialect": "2020-12",
+    "policy": "strict"
+  },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.report-model",
+    "runId": "run-aurora-0001",
+    "modelDigest": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789",
+    "resultDigest": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+    "reportDigest": "fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
+    "rendererVersion": "0.2.0"
+  }
+}