skill-family-contracts 0.2.1 → 0.4.0

package/CHANGELOG.md

@@ -1,5 +1,50 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.4.0 locale=en baseline=sha256:813375a1145b9de729fa5d128a34b1f9a12b5942ab6f06da92486aa72df7a297 -->
+## [0.4.0] - 2026-08-16
+
+This release extends the stable Contracts registry to 20 top-level object classes under the unchanged contract-spec version 1.4.0, adds finite-closed-semantics fixtures and schemas (FND-ADR-009), and ships new fixed-set-publication and schema-inventory candidates.
+
+### Added
+
+- Registers two new stable top-level objects, token-estimate-result (deterministic UTF-8 byte-count estimation result with a closed guarantee enumeration) and surface-scan-policy (path/content patterns plus carried-only allowedUses), raising the object registry from 18 to 20 classes under contract-spec version 1.4.0 (FND-ADR-009).
+- Extends the migration-manifest schema with legacy reference support and adds the matching fixtures (negative-06, negative-07, negative-08, positive-03).
+- Adds the fixed-set-publication candidate (manifest and receipt schemas, fixtures, and a capability-fit declaration covering native-prebuild runtimes) outside the stable registry.
+- Extends the Quickstart Profile candidate with consumer-schema-inventory and harness-surface-inventory schemas plus inventory fixtures.
+- Applies the FND-ADR-001 gate-1 relaxation (one existing plus one structurally identical foreseeable consumer) and introduces gate 8 for finite closed semantics (FND-ADR-009).
+
+### Changed
+
+- Keeps CONTRACTS_VERSION at 1.4.0; the same contract-spec line now covers the 20-object set, while the published 0.3.0 bytes carry the 18-object set of that version.
+- Keeps method identifiers, parameter schemas, and domain result semantics under consumer ownership.
+
+### Upgrade Notes
+
+Version 0.4.0 is released on npm and the public mirror. Candidate subpaths are public but not stable; pin candidate imports to exactly 0.4.0 and validate stable objects against the 20-class registry contract.
+<!-- release-skill:changelog:end version=0.4.0 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.3.0 locale=en baseline=sha256:32a8df58662f9dbb64e142cb8a2b329556b4bd59872e48fcbc317cc971cbdd7c -->
+## [0.3.0] - 2026-08-12
+
+This source candidate replaces the Quickstart Profile candidate with v2 while preserving the stable Contracts registry and kernel protocol.
+
+### Added
+
+- Adds the v2 protocol definition with the business-neutral execute-method operation and a real $id-indexed Resource, Task, and Result schema collection.
+- Enforces JSON-safe Task and Result boundaries, one path-backed observation, terminal output shapes, and exact evidence bindings.
+
+### Changed
+
+- Replaces the incompatible 0.2.1 candidate surface; consumers that still require v1 must remain pinned to exactly 0.2.1.
+- Keeps method identifiers, parameter schemas, and domain result semantics under consumer ownership.
+
+### Upgrade Notes
+
+Version 0.3.0 is a local, unpublished source candidate. Pin all candidate imports to an exact package version and migrate v1 integrations before selecting this version.
+<!-- release-skill:changelog:end version=0.3.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.2.1 locale=en baseline=sha256:b759650e4d52969bd907bccea937c64622b00b0ff97851da9c6c4aee8adb4888 -->
 ## [0.2.1] - 2026-08-10
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,50 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.4.0 locale=zh-CN baseline=sha256:99c7f1d548dff69c87156f903efe5b05fa214299c01c9db4d79b0a322fe8ee5d -->
+## [0.4.0] - 2026-08-16
+
+本版在契约规格版本 1.4.0 不变的前提下把稳定 Contracts 登记表扩到 20 类顶层对象，补齐有限封闭语义（FND-ADR-009）的 fixtures 与 schema，并新增 fixed-set-publication 与 schema 清单候选。
+
+### 新增
+
+- 新增两个 stable 顶层对象：token-estimate-result（确定性 UTF-8 字节计数估算结果，封闭 guarantees 枚举）与 surface-scan-policy（路径/内容模式 + 只携带不解释的 allowedUses），对象登记从 18 类增至 20 类，契约规格版本保持 1.4.0（FND-ADR-009）。
+- migration-manifest schema 增加遗留引用支持，并补齐对应 fixtures（negative-06、negative-07、negative-08、positive-03）。
+- 新增 fixed-set-publication 候选（manifest/receipt schema、fixtures 与覆盖 native-prebuild 运行时的能力适配声明），不进入稳定登记表。
+- Quickstart Profile 候选扩展 consumer-schema-inventory 与 harness-surface-inventory schema 及 inventory fixtures。
+- 落地 FND-ADR-001 门 1 放宽（一个现有 + 一个结构同型可预见消费者）与门 8「有限封闭语义」（FND-ADR-009）。
+
+### 变更
+
+- CONTRACTS_VERSION 保持 1.4.0：同一契约规格版本线现在覆盖 20 类对象集，而已发布的 0.3.0 字节携带的是该版本的 18 类对象集。
+- 方法标识、参数 Schema 与领域结果语义继续归消费者所有。
+
+### 升级说明
+
+0.4.0 已发布到 npm 与 public 镜像仓。candidate 子路径公开但不稳定；candidate 导入必须精确锁定 0.4.0，稳定对象按 20 类登记表契约校验。
+<!-- release-skill:changelog:end version=0.4.0 locale=zh-CN -->
+
+
+<!-- release-skill:changelog:start version=0.3.0 locale=zh-CN baseline=sha256:5f1c4cf56cc336279cbc6f11bc6cf8ce0a7524f454ff6589e067e828707a7cc7 -->
+## [0.3.0] - 2026-08-12
+
+本源码候选版以 Quickstart Profile v2 替换原 candidate，同时保持稳定 Contracts 登记表和内核协议不变。
+
+### 新增
+
+- 新增 v2 协议定义，以业务中立的 execute-method 作为唯一操作，并按真实 $id 登记 Resource、Task、Result Schema 集合。
+- 收紧 Task 与 Result 的 JSON-safe 边界、单一 path-backed observation、终态输出形状及 evidence 精确回指。
+
+### 变更
+
+- 替换与 0.2.1 不兼容的 candidate 面；仍依赖 v1 的消费者必须继续精确锁定 0.2.1。
+- 方法标识、参数 Schema 与领域结果语义继续归消费者所有。
+
+### 升级说明
+
+0.3.0 当前只是本地、未发布的源码候选。candidate 导入必须精确锁定包版本，v1 接入完成迁移后才能选用本版本。
+<!-- release-skill:changelog:end version=0.3.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.2.1 locale=zh-CN baseline=sha256:1f9b53564843c024415fda87d41abf96bc22db2ec5b90d12d7a8cd7c897a24fc -->
 ## [0.2.1] - 2026-08-10
 

package/README.md

@@ -4,28 +4,31 @@
 
 # skill-family-contracts
 
-<!-- release-skill:release-version: 0.2.1 -->
+<!-- release-skill:release-version: 0.4.0 -->
 
 The single authoritative package of machine-executable engineering structure and mechanism protocols (Contracts 1.4.0, frozen).
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.2.1** (2026-08-10)
+**0.4.0** (2026-08-16)
 
-This release adds a candidate Quickstart Profile contract surface and makes the package release documentation available in English and Simplified Chinese.
+This release extends the stable Contracts registry to 20 top-level object classes under the unchanged contract-spec version 1.4.0, adds finite-closed-semantics fixtures and schemas (FND-ADR-009), and ships new fixed-set-publication and schema-inventory candidates.
 
 **Added**
 
-- Adds candidate Resource, Task, and Result schemas with strict validation helpers. The candidate schemas remain outside the stable Contracts registry.
-- Adds complete English and Simplified Chinese package documentation, including an agent quick-reference section.
+- Registers two new stable top-level objects, token-estimate-result (deterministic UTF-8 byte-count estimation result with a closed guarantee enumeration) and surface-scan-policy (path/content patterns plus carried-only allowedUses), raising the object registry from 18 to 20 classes under contract-spec version 1.4.0 (FND-ADR-009).
+- Extends the migration-manifest schema with legacy reference support and adds the matching fixtures (negative-06, negative-07, negative-08, positive-03).
+- Adds the fixed-set-publication candidate (manifest and receipt schemas, fixtures, and a capability-fit declaration covering native-prebuild runtimes) outside the stable registry.
+- Extends the Quickstart Profile candidate with consumer-schema-inventory and harness-surface-inventory schemas plus inventory fixtures.
+- Applies the FND-ADR-001 gate-1 relaxation (one existing plus one structurally identical foreseeable consumer) and introduces gate 8 for finite closed semantics (FND-ADR-009).
 
 **Changed**
 
-- Manages the current README and CHANGELOG release sections from one bilingual, versioned notes source.
-- Distributes the project NOTICE separately from the Apache-2.0 LICENSE.
+- Keeps CONTRACTS_VERSION at 1.4.0; the same contract-spec line now covers the 20-object set, while the published 0.3.0 bytes carry the 18-object set of that version.
+- Keeps method identifiers, parameter schemas, and domain result semantics under consumer ownership.
 
 **Upgrade Notes**
 
-Stable registry consumers do not need to change. Import the Quickstart Profile only through its candidate subpath and do not treat it as a frozen Contracts object.
+Version 0.4.0 is released on npm and the public mirror. Candidate subpaths are public but not stable; pin candidate imports to exactly 0.4.0 and validate stable objects against the 20-class registry contract.
 <!-- release-skill:managed:end id=latest-release -->
 
 ## Problem It Solves
@@ -41,14 +44,14 @@ Schema validation is based entirely on [Ajv](https://ajv.js.org/) (exact version
 ## Installation and Minimal Example
 
 ```sh
-npm install skill-family-contracts@0.2.1
+npm install skill-family-contracts@0.4.0
 npm info skill-family-contracts --help
 ```
 
 The minimal example starts from an empty directory and demonstrates how to validate a registered contract object:
 
 ```js
-// Run from an empty directory: npm install skill-family-contracts@0.2.1
+// Run from an empty directory: npm install skill-family-contracts@0.4.0
 import { validateDocument } from "skill-family-contracts";
 
 const document = {
@@ -81,7 +84,9 @@ import {
 } from "skill-family-contracts/candidate/quickstart-profile";
 ```
 
-The subpath is public but **not stable**. Its schemas are deliberately absent from `src/registry.json`, do not expand the eighteen stable object classes, and may change or be removed in a later minor release. Consumers should pin the exact package version and keep candidate imports outside their stable public API. Use the root package export for production contracts that require frozen registry and compatibility guarantees.
+Version 0.4.0 carries Quickstart Profile v2. Its protocol fixes the business-neutral operation to `execute-method`; Resource, Task, and Result schemas resolve one another through their real v2 `$id` values. Foundation validates the JSON-safe exchange shape, while the consumer owns method identifiers, parameter schemas, and domain results.
+
+The subpath is public but **not stable**. Its schemas remain absent from `src/registry.json`, do not expand the eighteen stable object classes, and may change or be removed in a later minor release. Pin exactly `0.4.0` when evaluating v2. Integrations that still require candidate v1 must stay pinned to exactly `0.2.1`.
 
 ## Typical Use Cases
 
@@ -217,7 +222,7 @@ On validation failure `errorCode` is `SFC1001` (SCHEMA_VALIDATION_FAILED, docume
 
 ### Capability selection
 
-- `foundation.contracts.object-validation`: Ajv dual-dialect validation of the 18 object classes.
+- `foundation.contracts.object-validation`: Ajv dual-dialect validation of the 20 object classes.
 - `foundation.contracts.registry-protocol`: Schema `$id` and protocol-name registry query.
 - `foundation.contracts.kernel-protocol`: operation-request/result protocol.
 - `foundation.contracts.mandatory-checks`: nine mandatory rules and unresolved references.
@@ -247,7 +252,7 @@ On validation failure `errorCode` is `SFC1001` (SCHEMA_VALIDATION_FAILED, docume
 
 ### Architectural invariants
 
-- The set of 18 top-level object classes is fixed; additions require an ADR; the error-code freeze does not drift.
+- The set of 20 top-level object classes is fixed; additions require an ADR; the error-code freeze does not drift.
 - The validator is exclusively Ajv 8.20.0 (exact pin); no other implementation is accepted.
 
 ### Route elsewhere when

package/README.zh-CN.md

@@ -5,28 +5,31 @@
 
 # skill-family-contracts
 
-<!-- release-skill:release-version: 0.2.1 -->
+<!-- release-skill:release-version: 0.4.0 -->
 
 机器可执行工程结构和机制协议的唯一权威包（Contracts 1.4.0，冻结）。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.2.1** (2026-08-10)
+**0.4.0** (2026-08-16)
 
-本版新增 Quickstart Profile 候选契约面，并为包发布文档提供完整英文版与简体中文版。
+本版在契约规格版本 1.4.0 不变的前提下把稳定 Contracts 登记表扩到 20 类顶层对象，补齐有限封闭语义（FND-ADR-009）的 fixtures 与 schema，并新增 fixed-set-publication 与 schema 清单候选。
 
 **新增**
 
-- 新增候选 Resource、Task、Result Schema 及其严格校验辅助函数。这组候选 Schema 不进入稳定 Contracts 登记表。
-- 新增完整的英文与简体中文包文档，并补充智能体快速参考章节。
+- 新增两个 stable 顶层对象：token-estimate-result（确定性 UTF-8 字节计数估算结果，封闭 guarantees 枚举）与 surface-scan-policy（路径/内容模式 + 只携带不解释的 allowedUses），对象登记从 18 类增至 20 类，契约规格版本保持 1.4.0（FND-ADR-009）。
+- migration-manifest schema 增加遗留引用支持，并补齐对应 fixtures（negative-06、negative-07、negative-08、positive-03）。
+- 新增 fixed-set-publication 候选（manifest/receipt schema、fixtures 与覆盖 native-prebuild 运行时的能力适配声明），不进入稳定登记表。
+- Quickstart Profile 候选扩展 consumer-schema-inventory 与 harness-surface-inventory schema 及 inventory fixtures。
+- 落地 FND-ADR-001 门 1 放宽（一个现有 + 一个结构同型可预见消费者）与门 8「有限封闭语义」（FND-ADR-009）。
 
 **变更**
 
-- 使用同一份双语版本化说明源管理当前 README 与 CHANGELOG 的发布区域。
-- 项目 NOTICE 与 Apache-2.0 LICENSE 分开分发。
+- CONTRACTS_VERSION 保持 1.4.0：同一契约规格版本线现在覆盖 20 类对象集，而已发布的 0.3.0 字节携带的是该版本的 18 类对象集。
+- 方法标识、参数 Schema 与领域结果语义继续归消费者所有。
 
 **升级说明**
 
-稳定登记表的消费者无需修改。Quickstart Profile 只能通过 candidate 子路径导入，不得把它当作已冻结的 Contracts 对象。
+0.4.0 已发布到 npm 与 public 镜像仓。candidate 子路径公开但不稳定；candidate 导入必须精确锁定 0.4.0，稳定对象按 20 类登记表契约校验。
 <!-- release-skill:managed:end id=latest-release -->
 
 ## 解决的问题
@@ -42,14 +45,14 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 ## 安装和最小示例
 
 ```sh
-npm install skill-family-contracts@0.2.1
+npm install skill-family-contracts@0.4.0
 npm info skill-family-contracts --help
 ```
 
 最小示例从空目录开始，演示如何校验一份已登记契约对象：
 
 ```js
-// 从空目录运行：npm install skill-family-contracts@0.2.1
+// 从空目录运行：npm install skill-family-contracts@0.4.0
 import { validateDocument } from "skill-family-contracts";
 
 const document = {
@@ -82,7 +85,9 @@ import {
 } from "skill-family-contracts/candidate/quickstart-profile";
 ```
 
-以上子路径公开但**不稳定**。这些 Schema 刻意不进入 `src/registry.json`，不扩张十八类稳定对象，后续小版本可以修改或移除。调用方需要锁定精确包版本，并避免把 candidate 导入转成自身稳定公共 API。生产合同若需要冻结登记与兼容性保证，继续使用包根导出。
+0.4.0 携带 Quickstart Profile v2。协议把业务中立的操作固定为 `execute-method`，Resource、Task、Result Schema 通过真实的 v2 `$id` 互相解析。Foundation 只校验 JSON-safe 交换结构；方法标识、参数 Schema 与领域结果继续归消费者所有。
+
+以上子路径公开但**不稳定**。这些 Schema 不进入 `src/registry.json`，也不扩张十八类稳定对象，后续小版本可以修改或移除。评估 v2 时应精确锁定 `0.4.0`；仍依赖 candidate v1 的接入必须继续精确锁定 `0.2.1`。
 
 ## 典型使用场景
 
@@ -218,7 +223,7 @@ import {
 
 ### Capability selection
 
-- `foundation.contracts.object-validation`：Ajv 双方言校验 18 类对象。
+- `foundation.contracts.object-validation`：Ajv 双方言校验 20 类对象。
 - `foundation.contracts.registry-protocol`：Schema `$id` 与协议名登记查询。
 - `foundation.contracts.kernel-protocol`：operation-request/result 协议。
 - `foundation.contracts.mandatory-checks`：九类强制规则与未解析引用。
@@ -248,7 +253,7 @@ import {
 
 ### Architectural invariants
 
-- 18 类顶层对象集合固定，新增需 ADR；错误码冻结不漂移。
+- 20 类顶层对象集合固定，新增需 ADR；错误码冻结不漂移。
 - 校验器仅 Ajv 8.20.0（精确 pin），不接受其他实现。
 
 ### Route elsewhere when

package/candidate/fixed-set-publication/capability.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.fixed-set-publication-capability-fit",
+  "status": "stable",
+  "runtimeSupport": "native-prebuild",
+  "stableRegistry": true,
+  "implementationExported": true,
+  "supportedPlatforms": [
+    "darwin-arm64",
+    "darwin-x64",
+    "linux-arm64-gnu",
+    "linux-x64-gnu"
+  ],
+  "requiredPrimitives": [
+    "darwin.renameatx_np(RENAME_EXCL)",
+    "linux.renameat2(RENAME_NOREPLACE)"
+  ],
+  "blockingReason": "Stable for the four supported platform keys (darwin-arm64, darwin-x64, linux-arm64-gnu, linux-x64-gnu). Windows, Linux musl, and unknown OS/architecture/libc combinations remain unsupported and fail closed."
+}

package/candidate/fixed-set-publication/fixtures/manifest-negative-directory-mode.json

@@ -0,0 +1,38 @@
+{
+  "fixtureId": "fixed-set.manifest.negative.directory-mode",
+  "schema": "manifest",
+  "expectValid": false,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-manifest",
+    "source": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "1111111111111111111111111111111111111111111111111111111111111111"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "1", "inode": "1" },
+      "directories": [
+        { "path": "nested", "type": "directory", "mode": 512, "device": "1", "inode": "2" }
+      ],
+      "closureDigest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "target": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "3333333333333333333333333333333333333333333333333333333333333333"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "3", "inode": "3" },
+      "directories": [],
+      "closureDigest": "4444444444444444444444444444444444444444444444444444444444444444",
+      "expectation": "absent"
+    },
+    "members": [
+      { "path": "nested/file", "type": "regular", "mode": 420, "bytes": 1, "sha256": "5555555555555555555555555555555555555555555555555555555555555555" }
+    ],
+    "digest": "6666666666666666666666666666666666666666666666666666666666666666"
+  }
+}

package/candidate/fixed-set-publication/fixtures/manifest-negative-path-escape.json

@@ -0,0 +1,42 @@
+{
+  "fixtureId": "fixed-set.manifest.negative.path-escape",
+  "schema": "manifest",
+  "expectValid": false,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-manifest",
+    "source": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "1111111111111111111111111111111111111111111111111111111111111111"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "1", "inode": "101" },
+      "directories": [],
+      "closureDigest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "target": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "3333333333333333333333333333333333333333333333333333333333333333"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "3", "inode": "301" },
+      "directories": [],
+      "closureDigest": "6666666666666666666666666666666666666666666666666666666666666666",
+      "expectation": "absent"
+    },
+    "members": [
+      {
+        "path": "../outside.txt",
+        "type": "regular",
+        "mode": 420,
+        "bytes": 1,
+        "sha256": "4444444444444444444444444444444444444444444444444444444444444444"
+      }
+    ],
+    "digest": "5555555555555555555555555555555555555555555555555555555555555555"
+  }
+}

package/candidate/fixed-set-publication/fixtures/manifest-positive-platform-bundle.json

@@ -0,0 +1,55 @@
+{
+  "fixtureId": "fixed-set.manifest.positive.platform-bundle",
+  "schema": "manifest",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-manifest",
+    "source": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "1111111111111111111111111111111111111111111111111111111111111111"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "1", "inode": "101" },
+      "directories": [
+        { "path": "generated", "type": "directory", "mode": 493, "device": "1", "inode": "102" },
+        { "path": "generated/platforms", "type": "directory", "mode": 493, "device": "1", "inode": "103" },
+        { "path": "generated/platforms/fixture", "type": "directory", "mode": 493, "device": "1", "inode": "104" },
+        { "path": "generated/platforms/fixture/skills", "type": "directory", "mode": 493, "device": "1", "inode": "105" },
+        { "path": "generated/platforms/fixture/skills/demo", "type": "directory", "mode": 493, "device": "1", "inode": "106" }
+      ],
+      "closureDigest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "target": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "3333333333333333333333333333333333333333333333333333333333333333"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "2", "inode": "201" },
+      "directories": [],
+      "closureDigest": "7777777777777777777777777777777777777777777777777777777777777777",
+      "expectation": "absent"
+    },
+    "members": [
+      {
+        "path": "generated/platforms/fixture/plugin.json",
+        "type": "regular",
+        "mode": 420,
+        "bytes": 18,
+        "sha256": "4444444444444444444444444444444444444444444444444444444444444444"
+      },
+      {
+        "path": "generated/platforms/fixture/skills/demo/SKILL.md",
+        "type": "regular",
+        "mode": 420,
+        "bytes": 24,
+        "sha256": "5555555555555555555555555555555555555555555555555555555555555555"
+      }
+    ],
+    "digest": "6666666666666666666666666666666666666666666666666666666666666666"
+  }
+}

package/candidate/fixed-set-publication/fixtures/manifest-positive-versioned-candidate.json

@@ -0,0 +1,53 @@
+{
+  "fixtureId": "fixed-set.manifest.positive.versioned-candidate",
+  "schema": "manifest",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-manifest",
+    "source": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "7777777777777777777777777777777777777777777777777777777777777777"
+      },
+      "root": { "type": "directory", "mode": 448, "device": "7", "inode": "701" },
+      "directories": [
+        { "path": "versions", "type": "directory", "mode": 448, "device": "7", "inode": "702" },
+        { "path": "versions/v1", "type": "directory", "mode": 448, "device": "7", "inode": "703" },
+        { "path": "versions/v1/scripts", "type": "directory", "mode": 448, "device": "7", "inode": "704" }
+      ],
+      "closureDigest": "8888888888888888888888888888888888888888888888888888888888888888"
+    },
+    "target": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "9999999999999999999999999999999999999999999999999999999999999999"
+      },
+      "root": { "type": "directory", "mode": 448, "device": "9", "inode": "901" },
+      "directories": [],
+      "closureDigest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "expectation": "absent"
+    },
+    "members": [
+      {
+        "path": "versions/v1/SKILL.md",
+        "type": "regular",
+        "mode": 420,
+        "bytes": 31,
+        "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      },
+      {
+        "path": "versions/v1/scripts/runner.py",
+        "type": "regular",
+        "mode": 493,
+        "bytes": 42,
+        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+      }
+    ],
+    "digest": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-negative-partial.json

@@ -0,0 +1,25 @@
+{
+  "fixtureId": "fixed-set.receipt.negative.partial",
+  "schema": "receipt",
+  "expectValid": false,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "6666666666666666666666666666666666666666666666666666666666666666",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "7777777777777777777777777777777777777777777777777777777777777777"
+    },
+    "platform": "darwin",
+    "primitive": "darwin-renameatx-noreplace-v1",
+    "status": "partially_applied",
+    "targetState": "published",
+    "commitState": "rename-committed",
+    "verification": "verified",
+    "durability": "indeterminate",
+    "publishedClosureDigest": "8888888888888888888888888888888888888888888888888888888888888888",
+    "memberCount": 1
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-positive-fsync-indeterminate.json

@@ -0,0 +1,29 @@
+{
+  "fixtureId": "fixed-set.receipt.positive.fsync-indeterminate",
+  "schema": "receipt",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "1111111111111111111111111111111111111111111111111111111111111111",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "platform": "linux",
+    "primitive": "linux-renameat2-noreplace-v1",
+    "status": "indeterminate",
+    "targetState": "published",
+    "commitState": "rename-committed",
+    "verification": "verified",
+    "durability": "indeterminate",
+    "publishedClosureDigest": "3333333333333333333333333333333333333333333333333333333333333333",
+    "memberCount": 2,
+    "error": {
+      "code": "DIRECTORY_FSYNC_FAILED",
+      "message": "The fixed set verified after rename, but directory fsync failed."
+    }
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-positive-success.json

@@ -0,0 +1,25 @@
+{
+  "fixtureId": "fixed-set.receipt.positive.success",
+  "schema": "receipt",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "1111111111111111111111111111111111111111111111111111111111111111",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "platform": "linux",
+    "primitive": "linux-renameat2-noreplace-v1",
+    "status": "succeeded",
+    "targetState": "published",
+    "commitState": "rename-committed",
+    "verification": "verified",
+    "durability": "synced",
+    "publishedClosureDigest": "3333333333333333333333333333333333333333333333333333333333333333",
+    "memberCount": 2
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-positive-unsupported.json

@@ -0,0 +1,27 @@
+{
+  "fixtureId": "fixed-set.receipt.positive.unsupported",
+  "schema": "receipt",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "4444444444444444444444444444444444444444444444444444444444444444",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "5555555555555555555555555555555555555555555555555555555555555555"
+    },
+    "platform": "other",
+    "primitive": "none",
+    "status": "refused",
+    "targetState": "absent",
+    "commitState": "not-committed",
+    "verification": "not-run",
+    "durability": "not-attempted",
+    "error": {
+      "code": "UNSUPPORTED_PLATFORM",
+      "message": "No verified no-replace primitive is available."
+    }
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-positive-verify-indeterminate.json

@@ -0,0 +1,27 @@
+{
+  "fixtureId": "fixed-set.receipt.positive.verify-indeterminate",
+  "schema": "receipt",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    "platform": "darwin",
+    "primitive": "darwin-renameatx-noreplace-v1",
+    "status": "indeterminate",
+    "targetState": "indeterminate",
+    "commitState": "rename-committed",
+    "verification": "failed",
+    "durability": "indeterminate",
+    "error": {
+      "code": "POST_VERIFY_FAILED",
+      "message": "Rename committed, but the target identity could not be verified."
+    }
+  }
+}