skill-family-contracts 0.1.3 → 0.2.0

package/README.md

@@ -3,9 +3,9 @@
 
 # skill-family-contracts
 
-机器可执行工程结构和机制协议的唯一权威包（Contracts v1，冻结）。
+机器可执行工程结构和机制协议的唯一权威包（Contracts 1.4.0，冻结）。
 
-本包拥有：六类顶层对象的 JSON Schema、Kernel Protocol（内核协议）、稳定错误码、
+本包拥有：十八类顶层对象的 JSON Schema、Kernel Protocol（内核协议）、稳定错误码、
 协议名/`$id` 登记表，以及九种有限机械检查类型与受限强制规则集。
 本包不执行骨架生成、文件写入、审计或发布；机制实现由 Harness 承担，
 工程命令由 Kit 承担，二者单向消费本包。
@@ -13,7 +13,7 @@
 Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.json`），
 按方言路由到对应 Ajv 类；不实现任何手写 Schema 子集解释器。
 
-## 六类顶层对象
+## 十八类顶层对象
 
 | 对象 | `$id` | Schema 文件 |
 | --- | --- | --- |
@@ -23,6 +23,18 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 | `operation-request` | `https://contracts.skill-family.example/v1/operation-request.json` | `src/schemas/operation-request.schema.json` |
 | `operation-result` | `https://contracts.skill-family.example/v1/operation-result.json` | `src/schemas/operation-result.schema.json` |
 | `migration-manifest` | `https://contracts.skill-family.example/v1/migration-manifest.json` | `src/schemas/migration-manifest.schema.json` |
+| `report-model` | `https://contracts.skill-family.example/v1/report-model.json` | `src/schemas/report-model.schema.json` |
+| `report-binding` | `https://contracts.skill-family.example/v1/report-binding.json` | `src/schemas/report-binding.schema.json` |
+| `host-descriptor` | `https://contracts.skill-family.example/v1/host-descriptor.json` | `src/schemas/host-descriptor.schema.json` |
+| `host-capability-fact` | `https://contracts.skill-family.example/v1/host-capability-fact.json` | `src/schemas/host-capability-fact.schema.json` |
+| `adapter-build-manifest` | `https://contracts.skill-family.example/v1/adapter-build-manifest.json` | `src/schemas/adapter-build-manifest.schema.json` |
+| `host-operation-plan` | `https://contracts.skill-family.example/v1/host-operation-plan.json` | `src/schemas/host-operation-plan.schema.json` |
+| `host-operation-receipt` | `https://contracts.skill-family.example/v1/host-operation-receipt.json` | `src/schemas/host-operation-receipt.schema.json` |
+| `adapter-source` | `https://contracts.skill-family.example/v1/adapter-source.json` | `src/schemas/adapter-source.schema.json` |
+| `host-registry` | `https://contracts.skill-family.example/v1/host-registry.json` | `src/schemas/host-registry.schema.json` |
+| `host-probe-result` | `https://contracts.skill-family.example/v1/host-probe-result.json` | `src/schemas/host-probe-result.schema.json` |
+| `state-event-envelope` | `https://contracts.skill-family.example/v1/state-event-envelope.json` | `src/schemas/state-event-envelope.schema.json` |
+| `state-snapshot-metadata` | `https://contracts.skill-family.example/v1/state-snapshot-metadata.json` | `src/schemas/state-snapshot-metadata.schema.json` |
 
 所有 v1 Schema 使用 draft 2020-12 方言；实例信封统一为
 `schemaVersion: 1` + 唯一 `kind` 常量 + 各层 `additionalProperties: false`。
@@ -48,7 +60,7 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 ## 稳定错误码
 
 冻结登记表：`src/error-codes.json`。`SFC1xxx` 为合同权威层错误，
-`SFC2xxx` 为内核操作错误。码只增不改、不复用。v1 冻结：
+`SFC2xxx` 为内核操作错误，`SFC3xxx` 为报告绑定错误。码只增不改、不复用。v1 冻结：
 
 | 码 | 名称 | 含义摘要 |
 | --- | --- | --- |
@@ -67,6 +79,9 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 | SFC2002 | UNKNOWN_OPERATION | 操作名不在冻结词汇表 |
 | SFC2003 | INVALID_PARAMS | 参数不满足操作的冻结 params 合同 |
 | SFC2004 | EXECUTION_FAILED | 机制运行时执行失败（仅运行时可演示） |
+| SFC3001 | REPORT_DIGEST_MISMATCH | 报告或结果摘要与绑定不一致 |
+| SFC3002 | REPORT_ELEMENT_MISSING | 报告缺少强制元素 |
+| SFC3003 | REPORT_FACT_DRIFT | 报告字节偏离确定性重渲染结果 |
 
 ## 方言与验证策略（Ajv）
 
@@ -85,13 +100,14 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 `schema.ref-resolves`、`schema.dialect-declared`、`fixture.positive-passes`、
 `fixture.negative-coded`、`error-code.registered`、`rules.budget`。
 
-首版强制规则 **13 条**（CR-001…CR-013），预算上限 20 条、绝对上限 30 条；
+当前强制规则 **9 条**（CR-001、CR-006…CR-013）。其中 CR-001 对登记表内全部 Schema 做统一编译，
+不再为每个对象重复占用一条规则；预算上限 20 条、绝对上限 30 条；
 `rules.budget` 是机械门禁，超限即 `runChecks` 失败并报 `SFC1008`。
 
 ## Fixture
 
 `src/fixtures/<contract>/` 为每类合同提供正例（positive）、反例（negative）
-与方言边界（dialect-boundary）样例，共 32 个。每个 fixture 声明目标 Schema、
+与方言边界（dialect-boundary）样例，共 76 个。每个 fixture 声明目标 Schema、
 方言、策略与期望；反例期望携带稳定失败码。`verifyAllFixtures()` 机械重放全部期望，
 行为不符报 `SFC1010`。fixture 是完全虚构数据，不是审计 oracle。
 
@@ -125,14 +141,14 @@ import {
 ## 安装
 
 ```sh
-npm install skill-family-contracts@0.1.3
+npm install skill-family-contracts@0.2.0
 npm info skill-family-contracts --help
 ```
 
 ## 最小示例
 
 ```js
-// 从空目录运行：npm install skill-family-contracts@0.1.3
+// 从空目录运行：npm install skill-family-contracts@0.2.0
 import { validateDocument } from "skill-family-contracts";
 
 const document = {

package/package.json

@@ -27,7 +27,7 @@
     "url": "https://github.com/ifoohoo/skill-family-contracts.git"
   },
   "type": "module",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "scripts": {
     "check": "node --test",
     "test": "node --test"

package/src/checker.mjs

@@ -117,22 +117,26 @@ function schemaEntries(ctx) {
 
 const HANDLERS = {
   "schema.compile": (rule, ctx) => {
-    const registration = ctx.registry.schemas.find(
-      (entry) => entry.object === rule.target.object,
-    );
-    if (!registration) {
-      return fail(rule, "SFC1002", `no registered schema for object: ${rule.target.object}`);
+    const registrations = rule.target.registry === "schemas"
+      ? ctx.registry.schemas
+      : ctx.registry.schemas.filter((entry) => entry.object === rule.target.object);
+    if (registrations.length === 0) {
+      return fail(rule, "SFC1002", `no registered schema for target: ${rule.target.object ?? rule.target.registry}`);
     }
-    try {
-      compileSchema(
-        { schema: ctx.loadSchema(registration) },
-        { dialect: registration.dialect, policy: "strict" },
-      );
-      return pass(rule);
-    } catch (cause) {
-      if (cause instanceof ContractsError) return fail(rule, cause.code, cause.message);
-      throw cause;
+    for (const registration of registrations) {
+      try {
+        compileSchema(
+          { schema: ctx.loadSchema(registration) },
+          { dialect: registration.dialect, policy: "strict" },
+        );
+      } catch (cause) {
+        if (cause instanceof ContractsError) {
+          return fail(rule, cause.code, `${registration.object}: ${cause.message}`);
+        }
+        throw cause;
+      }
     }
+    return pass(rule);
   },
 
   "schema.unique-id": (rule, ctx) => {

package/src/error-codes.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "kind": "skill-family.contracts.error-codes",
-  "contractsVersion": "1.1.1",
+  "contractsVersion": "1.4.0",
   "policy": {
     "format": "^SFC[0-9]{4}$",
     "ranges": [
@@ -14,6 +14,11 @@
         "prefix": "SFC2",
         "category": "kernel",
         "note": "Kernel protocol operation errors."
+      },
+      {
+        "prefix": "SFC3",
+        "category": "report",
+        "note": "Report contract errors: digest binding, mandatory elements, fact drift. Style findings are never coded here; they are advisory output of the report check, not errors."
       }
     ],
     "stability": "Codes are append-only. A frozen code is never reused for a different meaning; a deprecated code stays reserved. New codes require a contracts change."
@@ -123,6 +128,27 @@
       "category": "kernel",
       "stableSince": "1.0.0",
       "meaning": "The mechanism runtime failed while executing a well-formed operation; details carry the mechanism evidence. Demonstrable only by a mechanism runtime, not by static contracts checks."
+    },
+    {
+      "code": "SFC3001",
+      "name": "REPORT_DIGEST_MISMATCH",
+      "category": "report",
+      "stableSince": "1.2.0",
+      "meaning": "A report binding digest (model, result, or report digest) does not match the recomputed sha256 digest, or the report is not the canonical render of its model; the binding is stale or tampered and is never trusted."
+    },
+    {
+      "code": "SFC3002",
+      "name": "REPORT_ELEMENT_MISSING",
+      "category": "report",
+      "stableSince": "1.2.0",
+      "meaning": "A mandatory report element is absent, empty where it must not be, or declared in an unsupported form: the conclusion, non-empty evidence, risks/next-action sections, a supported locale, or a coded outcome for failed/blocked runs. No half report is issued for a missing element."
+    },
+    {
+      "code": "SFC3003",
+      "name": "REPORT_FACT_DRIFT",
+      "category": "report",
+      "stableSince": "1.2.0",
+      "meaning": "A report model misstates the bound operation result's terminal state/errors, or rendered report bytes diverge from the deterministic re-render of the bound report model: fact fields rewritten, sections deleted, duplicated, or injected."
     }
   ]
 }

package/src/errors.mjs

@@ -17,7 +17,8 @@ function deepFreeze(obj) {
  *
  * The registry file (error-codes.json) is the single source of truth; codes are
  * append-only and never reused. SFC1xxx covers contracts-authority failures,
- * SFC2xxx covers kernel-operation failures.
+ * SFC2xxx covers kernel-operation failures, SFC3xxx covers report-contract
+ * failures (digest binding, mandatory elements, fact drift).
  */
 
 const ERROR_REGISTRY = deepFreeze(JSON.parse(

package/src/fixtures/adapter-build-manifest/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-build-manifest.dialect-boundary.unsupported", "contract": "adapter-build-manifest", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-build-manifest.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-build-manifest" }
+}

package/src/fixtures/adapter-build-manifest/negative-01-path-escape.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-build-manifest.negative.path-escape", "contract": "adapter-build-manifest", "class": "negative",
+  "description": "An escaping target is rejected.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-build-manifest.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-build-manifest", "hostId": "fixture-host", "pathCategory": { "id": "fixture-project-skills", "scope": "project", "anchor": "project-root", "relPath": ".fixture/skills" }, "sourceClosure": { "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "members": [{ "sourcePath": "demo/SKILL.md", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "bytes": 4 }] }, "members": [{ "sourcePath": "demo/SKILL.md", "target": "../outside", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "bytes": 4 }], "digest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" }
+}

package/src/fixtures/adapter-build-manifest/positive-01-single-file.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-build-manifest.positive.single-file", "contract": "adapter-build-manifest", "class": "positive",
+  "description": "A manifest binds one source byte set to one controlled target.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-build-manifest.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-build-manifest", "hostId": "fixture-host", "pathCategory": { "id": "fixture-project-skills", "scope": "project", "anchor": "project-root", "relPath": ".fixture/skills" }, "sourceClosure": { "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "members": [{ "sourcePath": "demo/SKILL.md", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "bytes": 4 }] }, "members": [{ "sourcePath": "demo/SKILL.md", "target": ".fixture/skills/demo/SKILL.md", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "bytes": 4 }], "digest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb" }
+}

package/src/fixtures/adapter-source/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-source.dialect-boundary.unsupported", "contract": "adapter-source", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before source validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-source.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-source", "skillFamilyId": "fixture-family", "skills": [{ "id": "demo-skill", "files": [{ "path": "SKILL.md", "content": "# Demo\n" }] }] }
+}

package/src/fixtures/adapter-source/negative-01-path-escape.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-source.negative.path-escape", "contract": "adapter-source", "class": "negative",
+  "description": "An adapter source path cannot escape its declared skill directory.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-source.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-source", "skillFamilyId": "fixture-family", "skills": [{ "id": "demo-skill", "files": [{ "path": "../outside", "content": "bad" }] }] }
+}

package/src/fixtures/adapter-source/positive-01-minimal.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "adapter-source.positive.minimal", "contract": "adapter-source", "class": "positive",
+  "description": "A minimal source closure contains one skill and its required SKILL.md bytes.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/adapter-source.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.adapter-source", "skillFamilyId": "fixture-family", "skills": [{ "id": "demo-skill", "files": [{ "path": "SKILL.md", "content": "# Demo\n" }] }] }
+}

package/src/fixtures/host-capability-fact/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-capability-fact.dialect-boundary.unsupported", "contract": "host-capability-fact", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-capability-fact.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-capability-fact", "hostId": "fixture-host", "capability": "smoke", "state": "unknown", "evidence": ["No frozen probe."], "unknownReason": "driver-limited", "manualSteps": ["Verify manually."] }
+}

package/src/fixtures/host-capability-fact/negative-01-unknown-without-manual.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-capability-fact.negative.unknown-without-manual", "contract": "host-capability-fact", "class": "negative",
+  "description": "Unknown without a manual verification path is rejected.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-capability-fact.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-capability-fact", "hostId": "fixture-host", "capability": "smoke", "state": "unknown", "evidence": ["No frozen probe."], "unknownReason": "driver-limited" }
+}

package/src/fixtures/host-capability-fact/positive-01-unknown.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-capability-fact.positive.unknown", "contract": "host-capability-fact", "class": "positive",
+  "description": "An unknown fact includes a reason and manual steps.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-capability-fact.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-capability-fact", "hostId": "fixture-host", "capability": "smoke", "state": "unknown", "evidence": ["No frozen probe."], "unknownReason": "driver-limited", "manualSteps": ["Verify manually."] }
+}

package/src/fixtures/host-descriptor/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-descriptor.dialect-boundary.unsupported", "contract": "host-descriptor", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-descriptor.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-descriptor", "hostId": "fixture-host", "displayName": "Fixture Host", "support": "unsupported", "unsupportedReason": "No frozen driver.", "pathCategories": [], "probeCapabilities": [] }
+}

package/src/fixtures/host-descriptor/negative-01-command-data.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-descriptor.negative.command-data", "contract": "host-descriptor", "class": "negative",
+  "description": "Descriptor command data is outside the closed contract.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-descriptor.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-descriptor", "hostId": "fixture-host", "displayName": "Fixture Host", "support": "unsupported", "unsupportedReason": "No frozen driver.", "pathCategories": [], "probeCapabilities": [], "executable": "dangerous" }
+}

package/src/fixtures/host-descriptor/positive-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-descriptor.positive.unsupported", "contract": "host-descriptor", "class": "positive",
+  "description": "An unsupported host is explicit and carries neither a driver nor paths.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-descriptor.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-descriptor", "hostId": "fixture-host", "displayName": "Fixture Host", "support": "unsupported", "unsupportedReason": "No frozen driver.", "pathCategories": [], "probeCapabilities": [] }
+}

package/src/fixtures/host-operation-plan/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-plan.dialect-boundary.unsupported", "contract": "host-operation-plan", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-plan.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-plan" }
+}

package/src/fixtures/host-operation-plan/negative-01-unsupported-action.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-plan.negative.unsupported-action", "contract": "host-operation-plan", "class": "negative",
+  "description": "Unsupported planning cannot hide an action.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-plan.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-plan", "hostId": "fixture-host", "status": "unsupported", "unsupportedReason": "No frozen driver.", "probeFacts": [], "actions": [{ "sequence": 1 }], "writeSet": [], "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }
+}

package/src/fixtures/host-operation-plan/positive-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-plan.positive.unsupported", "contract": "host-operation-plan", "class": "positive",
+  "description": "Unsupported planning is an explicit zero-action result.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-plan.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-plan", "hostId": "fixture-host", "status": "unsupported", "unsupportedReason": "No frozen driver.", "probeFacts": [], "actions": [], "writeSet": [], "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }
+}

package/src/fixtures/host-operation-receipt/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-receipt.dialect-boundary.unsupported", "contract": "host-operation-receipt", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-receipt.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-receipt" }
+}

package/src/fixtures/host-operation-receipt/negative-01-success-without-hash.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-receipt.negative.success-without-hash", "contract": "host-operation-receipt", "class": "negative",
+  "description": "A successful write without sha256 is rejected.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-receipt.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-receipt", "hostId": "fixture-host", "planDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "overall": "succeeded", "authorizationRef": "approval-1", "writes": [{ "target": ".fixture/skills/demo/SKILL.md", "outcome": "succeeded" }], "closure": { "digestAlgorithm": "sha256", "digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "resources": [{ "path": ".fixture/skills/demo/SKILL.md", "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" }] } }
+}

package/src/fixtures/host-operation-receipt/positive-01-rejected.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-operation-receipt.positive.rejected", "contract": "host-operation-receipt", "class": "positive",
+  "description": "A rejected receipt has a reason and zero writes.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-operation-receipt.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-operation-receipt", "hostId": "fixture-host", "planDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "overall": "rejected", "reason": "Apply is unavailable.", "writes": [] }
+}

package/src/fixtures/host-probe-result/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-probe-result.dialect-boundary.unsupported", "contract": "host-probe-result", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before probe-result validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-probe-result.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-probe-result", "hostId": "fixture-host", "support": "unsupported", "reason": "No audited driver.", "facts": [] }
+}

package/src/fixtures/host-probe-result/negative-01-unsupported-with-fact.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-probe-result.negative.unsupported-with-fact", "contract": "host-probe-result", "class": "negative",
+  "description": "An unsupported host cannot claim a capability fact.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-probe-result.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-probe-result", "hostId": "fixture-host", "support": "unsupported", "reason": "No audited driver.", "facts": [{ "schemaVersion": 1, "kind": "skill-family.host-capability-fact", "hostId": "fixture-host", "capability": "cli", "state": "unavailable", "evidence": ["Not present."] }] }
+}

package/src/fixtures/host-probe-result/positive-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-probe-result.positive.unsupported", "contract": "host-probe-result", "class": "positive",
+  "description": "An unsupported host probe is explicit and contains no capability facts.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-probe-result.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-probe-result", "hostId": "fixture-host", "support": "unsupported", "reason": "No audited driver.", "facts": [] }
+}

package/src/fixtures/host-registry/dialect-01-unsupported.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-registry.dialect-boundary.unsupported", "contract": "host-registry", "class": "dialect-boundary",
+  "description": "Unsupported schema dialect fails before registry validation.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-registry.json", "dialect": "draft-04", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-registry", "hosts": ["fixture-host"] }
+}

package/src/fixtures/host-registry/negative-01-path-escape.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-registry.negative.duplicate-host", "contract": "host-registry", "class": "negative",
+  "description": "A registry cannot declare the same fictional host twice.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-registry.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-registry", "hosts": ["fixture-host", "fixture-host"] }
+}

package/src/fixtures/host-registry/positive-01-reference.json

@@ -0,0 +1,7 @@
+{
+  "fixtureId": "host-registry.positive.reference", "contract": "host-registry", "class": "positive",
+  "description": "A registry declares fictional host identifiers without embedding Profile data.",
+  "validation": { "schemaId": "https://contracts.skill-family.example/v1/host-registry.json", "dialect": "2020-12", "policy": "strict" },
+  "expect": { "valid": true },
+  "data": { "schemaVersion": 1, "kind": "skill-family.host-registry", "hosts": ["fixture-host"] }
+}

package/src/fixtures/report-binding/dialect-01-unsupported-dialect.json

@@ -0,0 +1,21 @@
+{
+  "fixtureId": "report-binding.dialect-boundary.unsupported-dialect",
+  "contract": "report-binding",
+  "class": "dialect-boundary",
+  "description": "Dialect boundary: a valid binding document declared under an unsupported dialect (draft-04) is rejected before any schema validation, with the stable dialect code.",
+  "validation": {
+    "schemaId": "https://contracts.skill-family.example/v1/report-binding.json",
+    "dialect": "draft-04",
+    "policy": "strict"
+  },
+  "expect": { "valid": false, "errorCode": "SFC1006" },
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.report-binding",
+    "runId": "run-aurora-0001",
+    "modelDigest": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789",
+    "resultDigest": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+    "reportDigest": "fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
+    "rendererVersion": "0.2.0"
+  }
+}

package/src/fixtures/report-binding/negative-01-wrong-kind.json

@@ -0,0 +1,21 @@
+{
+  "fixtureId": "report-binding.negative.wrong-kind",
+  "contract": "report-binding",
+  "class": "negative",
+  "description": "A binding with a wrong kind discriminator is rejected: a report model or any other document cannot impersonate the binding envelope.",
+  "validation": {
+    "schemaId": "https://contracts.skill-family.example/v1/report-binding.json",
+    "dialect": "2020-12",
+    "policy": "strict"
+  },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.report-model",
+    "runId": "run-aurora-0001",
+    "modelDigest": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789",
+    "resultDigest": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+    "reportDigest": "fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
+    "rendererVersion": "0.2.0"
+  }
+}

package/src/fixtures/report-binding/negative-02-short-report-digest.json

@@ -0,0 +1,21 @@
+{
+  "fixtureId": "report-binding.negative.short-report-digest",
+  "contract": "report-binding",
+  "class": "negative",
+  "description": "A truncated reportDigest is rejected: a binding must carry the full sha256 hex of the rendered report bytes; a shortened digest never verifies.",
+  "validation": {
+    "schemaId": "https://contracts.skill-family.example/v1/report-binding.json",
+    "dialect": "2020-12",
+    "policy": "strict"
+  },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.report-binding",
+    "runId": "run-aurora-0001",
+    "modelDigest": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789",
+    "resultDigest": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+    "reportDigest": "fedcba9876543210",
+    "rendererVersion": "0.2.0"
+  }
+}

package/src/fixtures/report-binding/negative-03-floating-renderer-version.json

@@ -0,0 +1,21 @@
+{
+  "fixtureId": "report-binding.negative.floating-renderer-version",
+  "contract": "report-binding",
+  "class": "negative",
+  "description": "A floating renderer version is rejected: the binding must pin an exact renderer semver; ranges and tags are not bindings.",
+  "validation": {
+    "schemaId": "https://contracts.skill-family.example/v1/report-binding.json",
+    "dialect": "2020-12",
+    "policy": "strict"
+  },
+  "expect": { "valid": false, "errorCode": "SFC1001" },
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.report-binding",
+    "runId": "run-aurora-0001",
+    "modelDigest": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789",
+    "resultDigest": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+    "reportDigest": "fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
+    "rendererVersion": "^1.2.0"
+  }
+}

package/src/fixtures/report-binding/positive-01-valid-binding.json

@@ -0,0 +1,21 @@
+{
+  "fixtureId": "report-binding.positive.valid-binding",
+  "contract": "report-binding",
+  "class": "positive",
+  "description": "A complete binding: run identity, sha256 result digest, sha256 report digest, and an exact renderer semver.",
+  "validation": {
+    "schemaId": "https://contracts.skill-family.example/v1/report-binding.json",
+    "dialect": "2020-12",
+    "policy": "strict"
+  },
+  "expect": { "valid": true },
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.report-binding",
+    "runId": "run-aurora-0001",
+    "modelDigest": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789",
+    "resultDigest": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+    "reportDigest": "fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
+    "rendererVersion": "0.2.0"
+  }
+}

package/src/fixtures/report-model/dialect-01-coerce-count-tolerant.json

@@ -0,0 +1,49 @@
+{
+  "fixtureId": "report-model.dialect-boundary.coerce-count-tolerant",
+  "contract": "report-model",
+  "class": "dialect-boundary",
+  "description": "Coercion policy boundary: a string-valued section count passes only because the tolerant policy enables Ajv integer coercion.",
+  "validation": {
+    "schemaId": "https://contracts.skill-family.example/v1/report-model.json",
+    "dialect": "2020-12",
+    "policy": "tolerant"
+  },
+  "expect": { "valid": true },
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.report-model",
+    "identity": {
+      "runId": "run-borealis-0043",
+      "skillFamily": "borealis-index-rebuild",
+      "audience": "operator",
+      "locale": "en-US"
+   },
+    "timeRange": { "startedAt": "2026-08-09T08:00:00Z", "completedAt": "2026-08-09T08:05:00Z" },
+    "outcome": {
+      "executionStatus": "SUCCEEDED",
+      "summary": "Coercion boundary probe.",
+      "counts": {
+        "changes": "0",
+        "evidence": 1,
+        "risks": 0,
+        "unresolved": 0,
+        "nextActions": 0,
+        "appendices": 0
+      }
+    },
+    "errors": [],
+    "changes": [],
+    "evidence": [
+      { "id": "evd-1", "title": "Run log", "reference": "logs/borealis-0043.log" }
+    ],
+    "risks": [],
+    "unresolved": [],
+    "nextActions": [],
+    "appendices": [],
+    "source": {
+      "resultDigest": "fedcba9876543210fedcba9876543210fedcba9876543210fedcba9876543210",
+      "resultState": "succeeded"
+    },
+    "renderer": { "name": "skill-family-harness-node/report", "version": "0.2.0" }
+  }
+}