skill-family-contracts 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.4.0 locale=en baseline=sha256:813375a1145b9de729fa5d128a34b1f9a12b5942ab6f06da92486aa72df7a297 -->
+## [0.4.0] - 2026-08-16
+
+This release extends the stable Contracts registry to 20 top-level object classes under the unchanged contract-spec version 1.4.0, adds finite-closed-semantics fixtures and schemas (FND-ADR-009), and ships new fixed-set-publication and schema-inventory candidates.
+
+### Added
+
+- Registers two new stable top-level objects, token-estimate-result (deterministic UTF-8 byte-count estimation result with a closed guarantee enumeration) and surface-scan-policy (path/content patterns plus carried-only allowedUses), raising the object registry from 18 to 20 classes under contract-spec version 1.4.0 (FND-ADR-009).
+- Extends the migration-manifest schema with legacy reference support and adds the matching fixtures (negative-06, negative-07, negative-08, positive-03).
+- Adds the fixed-set-publication candidate (manifest and receipt schemas, fixtures, and a capability-fit declaration covering native-prebuild runtimes) outside the stable registry.
+- Extends the Quickstart Profile candidate with consumer-schema-inventory and harness-surface-inventory schemas plus inventory fixtures.
+- Applies the FND-ADR-001 gate-1 relaxation (one existing plus one structurally identical foreseeable consumer) and introduces gate 8 for finite closed semantics (FND-ADR-009).
+
+### Changed
+
+- Keeps CONTRACTS_VERSION at 1.4.0; the same contract-spec line now covers the 20-object set, while the published 0.3.0 bytes carry the 18-object set of that version.
+- Keeps method identifiers, parameter schemas, and domain result semantics under consumer ownership.
+
+### Upgrade Notes
+
+Version 0.4.0 is released on npm and the public mirror. Candidate subpaths are public but not stable; pin candidate imports to exactly 0.4.0 and validate stable objects against the 20-class registry contract.
+<!-- release-skill:changelog:end version=0.4.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.3.0 locale=en baseline=sha256:32a8df58662f9dbb64e142cb8a2b329556b4bd59872e48fcbc317cc971cbdd7c -->
 ## [0.3.0] - 2026-08-12
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,29 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.4.0 locale=zh-CN baseline=sha256:99c7f1d548dff69c87156f903efe5b05fa214299c01c9db4d79b0a322fe8ee5d -->
+## [0.4.0] - 2026-08-16
+
+本版在契约规格版本 1.4.0 不变的前提下把稳定 Contracts 登记表扩到 20 类顶层对象，补齐有限封闭语义（FND-ADR-009）的 fixtures 与 schema，并新增 fixed-set-publication 与 schema 清单候选。
+
+### 新增
+
+- 新增两个 stable 顶层对象：token-estimate-result（确定性 UTF-8 字节计数估算结果，封闭 guarantees 枚举）与 surface-scan-policy（路径/内容模式 + 只携带不解释的 allowedUses），对象登记从 18 类增至 20 类，契约规格版本保持 1.4.0（FND-ADR-009）。
+- migration-manifest schema 增加遗留引用支持，并补齐对应 fixtures（negative-06、negative-07、negative-08、positive-03）。
+- 新增 fixed-set-publication 候选（manifest/receipt schema、fixtures 与覆盖 native-prebuild 运行时的能力适配声明），不进入稳定登记表。
+- Quickstart Profile 候选扩展 consumer-schema-inventory 与 harness-surface-inventory schema 及 inventory fixtures。
+- 落地 FND-ADR-001 门 1 放宽（一个现有 + 一个结构同型可预见消费者）与门 8「有限封闭语义」（FND-ADR-009）。
+
+### 变更
+
+- CONTRACTS_VERSION 保持 1.4.0：同一契约规格版本线现在覆盖 20 类对象集，而已发布的 0.3.0 字节携带的是该版本的 18 类对象集。
+- 方法标识、参数 Schema 与领域结果语义继续归消费者所有。
+
+### 升级说明
+
+0.4.0 已发布到 npm 与 public 镜像仓。candidate 子路径公开但不稳定；candidate 导入必须精确锁定 0.4.0，稳定对象按 20 类登记表契约校验。
+<!-- release-skill:changelog:end version=0.4.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.3.0 locale=zh-CN baseline=sha256:5f1c4cf56cc336279cbc6f11bc6cf8ce0a7524f454ff6589e067e828707a7cc7 -->
 ## [0.3.0] - 2026-08-12
 

package/README.md

@@ -4,28 +4,31 @@
 
 # skill-family-contracts
 
-<!-- release-skill:release-version: 0.3.0 -->
+<!-- release-skill:release-version: 0.4.0 -->
 
 The single authoritative package of machine-executable engineering structure and mechanism protocols (Contracts 1.4.0, frozen).
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.3.0** (2026-08-12)
+**0.4.0** (2026-08-16)
 
-This source candidate replaces the Quickstart Profile candidate with v2 while preserving the stable Contracts registry and kernel protocol.
+This release extends the stable Contracts registry to 20 top-level object classes under the unchanged contract-spec version 1.4.0, adds finite-closed-semantics fixtures and schemas (FND-ADR-009), and ships new fixed-set-publication and schema-inventory candidates.
 
 **Added**
 
-- Adds the v2 protocol definition with the business-neutral execute-method operation and a real $id-indexed Resource, Task, and Result schema collection.
-- Enforces JSON-safe Task and Result boundaries, one path-backed observation, terminal output shapes, and exact evidence bindings.
+- Registers two new stable top-level objects, token-estimate-result (deterministic UTF-8 byte-count estimation result with a closed guarantee enumeration) and surface-scan-policy (path/content patterns plus carried-only allowedUses), raising the object registry from 18 to 20 classes under contract-spec version 1.4.0 (FND-ADR-009).
+- Extends the migration-manifest schema with legacy reference support and adds the matching fixtures (negative-06, negative-07, negative-08, positive-03).
+- Adds the fixed-set-publication candidate (manifest and receipt schemas, fixtures, and a capability-fit declaration covering native-prebuild runtimes) outside the stable registry.
+- Extends the Quickstart Profile candidate with consumer-schema-inventory and harness-surface-inventory schemas plus inventory fixtures.
+- Applies the FND-ADR-001 gate-1 relaxation (one existing plus one structurally identical foreseeable consumer) and introduces gate 8 for finite closed semantics (FND-ADR-009).
 
 **Changed**
 
-- Replaces the incompatible 0.2.1 candidate surface; consumers that still require v1 must remain pinned to exactly 0.2.1.
+- Keeps CONTRACTS_VERSION at 1.4.0; the same contract-spec line now covers the 20-object set, while the published 0.3.0 bytes carry the 18-object set of that version.
 - Keeps method identifiers, parameter schemas, and domain result semantics under consumer ownership.
 
 **Upgrade Notes**
 
-Version 0.3.0 is a local, unpublished source candidate. Pin all candidate imports to an exact package version and migrate v1 integrations before selecting this version.
+Version 0.4.0 is released on npm and the public mirror. Candidate subpaths are public but not stable; pin candidate imports to exactly 0.4.0 and validate stable objects against the 20-class registry contract.
 <!-- release-skill:managed:end id=latest-release -->
 
 ## Problem It Solves
@@ -41,14 +44,14 @@ Schema validation is based entirely on [Ajv](https://ajv.js.org/) (exact version
 ## Installation and Minimal Example
 
 ```sh
-npm install skill-family-contracts@0.3.0
+npm install skill-family-contracts@0.4.0
 npm info skill-family-contracts --help
 ```
 
 The minimal example starts from an empty directory and demonstrates how to validate a registered contract object:
 
 ```js
-// Run from an empty directory: npm install skill-family-contracts@0.3.0
+// Run from an empty directory: npm install skill-family-contracts@0.4.0
 import { validateDocument } from "skill-family-contracts";
 
 const document = {
@@ -81,9 +84,9 @@ import {
 } from "skill-family-contracts/candidate/quickstart-profile";
 ```
 
-Version 0.3.0 carries Quickstart Profile v2. Its protocol fixes the business-neutral operation to `execute-method`; Resource, Task, and Result schemas resolve one another through their real v2 `$id` values. Foundation validates the JSON-safe exchange shape, while the consumer owns method identifiers, parameter schemas, and domain results.
+Version 0.4.0 carries Quickstart Profile v2. Its protocol fixes the business-neutral operation to `execute-method`; Resource, Task, and Result schemas resolve one another through their real v2 `$id` values. Foundation validates the JSON-safe exchange shape, while the consumer owns method identifiers, parameter schemas, and domain results.
 
-The subpath is public but **not stable**. Its schemas remain absent from `src/registry.json`, do not expand the eighteen stable object classes, and may change or be removed in a later minor release. Pin exactly `0.3.0` when evaluating v2. Integrations that still require candidate v1 must stay pinned to exactly `0.2.1`.
+The subpath is public but **not stable**. Its schemas remain absent from `src/registry.json`, do not expand the eighteen stable object classes, and may change or be removed in a later minor release. Pin exactly `0.4.0` when evaluating v2. Integrations that still require candidate v1 must stay pinned to exactly `0.2.1`.
 
 ## Typical Use Cases
 
@@ -219,7 +222,7 @@ On validation failure `errorCode` is `SFC1001` (SCHEMA_VALIDATION_FAILED, docume
 
 ### Capability selection
 
-- `foundation.contracts.object-validation`: Ajv dual-dialect validation of the 18 object classes.
+- `foundation.contracts.object-validation`: Ajv dual-dialect validation of the 20 object classes.
 - `foundation.contracts.registry-protocol`: Schema `$id` and protocol-name registry query.
 - `foundation.contracts.kernel-protocol`: operation-request/result protocol.
 - `foundation.contracts.mandatory-checks`: nine mandatory rules and unresolved references.
@@ -249,7 +252,7 @@ On validation failure `errorCode` is `SFC1001` (SCHEMA_VALIDATION_FAILED, docume
 
 ### Architectural invariants
 
-- The set of 18 top-level object classes is fixed; additions require an ADR; the error-code freeze does not drift.
+- The set of 20 top-level object classes is fixed; additions require an ADR; the error-code freeze does not drift.
 - The validator is exclusively Ajv 8.20.0 (exact pin); no other implementation is accepted.
 
 ### Route elsewhere when

package/README.zh-CN.md

@@ -5,28 +5,31 @@
 
 # skill-family-contracts
 
-<!-- release-skill:release-version: 0.3.0 -->
+<!-- release-skill:release-version: 0.4.0 -->
 
 机器可执行工程结构和机制协议的唯一权威包（Contracts 1.4.0，冻结）。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.3.0** (2026-08-12)
+**0.4.0** (2026-08-16)
 
-本源码候选版以 Quickstart Profile v2 替换原 candidate，同时保持稳定 Contracts 登记表和内核协议不变。
+本版在契约规格版本 1.4.0 不变的前提下把稳定 Contracts 登记表扩到 20 类顶层对象，补齐有限封闭语义（FND-ADR-009）的 fixtures 与 schema，并新增 fixed-set-publication 与 schema 清单候选。
 
 **新增**
 
-- 新增 v2 协议定义，以业务中立的 execute-method 作为唯一操作，并按真实 $id 登记 Resource、Task、Result Schema 集合。
-- 收紧 Task 与 Result 的 JSON-safe 边界、单一 path-backed observation、终态输出形状及 evidence 精确回指。
+- 新增两个 stable 顶层对象：token-estimate-result（确定性 UTF-8 字节计数估算结果，封闭 guarantees 枚举）与 surface-scan-policy（路径/内容模式 + 只携带不解释的 allowedUses），对象登记从 18 类增至 20 类，契约规格版本保持 1.4.0（FND-ADR-009）。
+- migration-manifest schema 增加遗留引用支持，并补齐对应 fixtures（negative-06、negative-07、negative-08、positive-03）。
+- 新增 fixed-set-publication 候选（manifest/receipt schema、fixtures 与覆盖 native-prebuild 运行时的能力适配声明），不进入稳定登记表。
+- Quickstart Profile 候选扩展 consumer-schema-inventory 与 harness-surface-inventory schema 及 inventory fixtures。
+- 落地 FND-ADR-001 门 1 放宽（一个现有 + 一个结构同型可预见消费者）与门 8「有限封闭语义」（FND-ADR-009）。
 
 **变更**
 
-- 替换与 0.2.1 不兼容的 candidate 面；仍依赖 v1 的消费者必须继续精确锁定 0.2.1。
+- CONTRACTS_VERSION 保持 1.4.0：同一契约规格版本线现在覆盖 20 类对象集，而已发布的 0.3.0 字节携带的是该版本的 18 类对象集。
 - 方法标识、参数 Schema 与领域结果语义继续归消费者所有。
 
 **升级说明**
 
-0.3.0 当前只是本地、未发布的源码候选。candidate 导入必须精确锁定包版本，v1 接入完成迁移后才能选用本版本。
+0.4.0 已发布到 npm 与 public 镜像仓。candidate 子路径公开但不稳定；candidate 导入必须精确锁定 0.4.0，稳定对象按 20 类登记表契约校验。
 <!-- release-skill:managed:end id=latest-release -->
 
 ## 解决的问题
@@ -42,14 +45,14 @@ Schema 验证完全基于 [Ajv](https://ajv.js.org/)（精确版本见 `package.
 ## 安装和最小示例
 
 ```sh
-npm install skill-family-contracts@0.3.0
+npm install skill-family-contracts@0.4.0
 npm info skill-family-contracts --help
 ```
 
 最小示例从空目录开始，演示如何校验一份已登记契约对象：
 
 ```js
-// 从空目录运行：npm install skill-family-contracts@0.3.0
+// 从空目录运行：npm install skill-family-contracts@0.4.0
 import { validateDocument } from "skill-family-contracts";
 
 const document = {
@@ -82,9 +85,9 @@ import {
 } from "skill-family-contracts/candidate/quickstart-profile";
 ```
 
-0.3.0 携带 Quickstart Profile v2。协议把业务中立的操作固定为 `execute-method`，Resource、Task、Result Schema 通过真实的 v2 `$id` 互相解析。Foundation 只校验 JSON-safe 交换结构；方法标识、参数 Schema 与领域结果继续归消费者所有。
+0.4.0 携带 Quickstart Profile v2。协议把业务中立的操作固定为 `execute-method`，Resource、Task、Result Schema 通过真实的 v2 `$id` 互相解析。Foundation 只校验 JSON-safe 交换结构；方法标识、参数 Schema 与领域结果继续归消费者所有。
 
-以上子路径公开但**不稳定**。这些 Schema 不进入 `src/registry.json`，也不扩张十八类稳定对象，后续小版本可以修改或移除。评估 v2 时应精确锁定 `0.3.0`；仍依赖 candidate v1 的接入必须继续精确锁定 `0.2.1`。
+以上子路径公开但**不稳定**。这些 Schema 不进入 `src/registry.json`，也不扩张十八类稳定对象，后续小版本可以修改或移除。评估 v2 时应精确锁定 `0.4.0`；仍依赖 candidate v1 的接入必须继续精确锁定 `0.2.1`。
 
 ## 典型使用场景
 
@@ -220,7 +223,7 @@ import {
 
 ### Capability selection
 
-- `foundation.contracts.object-validation`：Ajv 双方言校验 18 类对象。
+- `foundation.contracts.object-validation`：Ajv 双方言校验 20 类对象。
 - `foundation.contracts.registry-protocol`：Schema `$id` 与协议名登记查询。
 - `foundation.contracts.kernel-protocol`：operation-request/result 协议。
 - `foundation.contracts.mandatory-checks`：九类强制规则与未解析引用。
@@ -250,7 +253,7 @@ import {
 
 ### Architectural invariants
 
-- 18 类顶层对象集合固定，新增需 ADR；错误码冻结不漂移。
+- 20 类顶层对象集合固定，新增需 ADR；错误码冻结不漂移。
 - 校验器仅 Ajv 8.20.0（精确 pin），不接受其他实现。
 
 ### Route elsewhere when

package/candidate/fixed-set-publication/capability.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.fixed-set-publication-capability-fit",
+  "status": "stable",
+  "runtimeSupport": "native-prebuild",
+  "stableRegistry": true,
+  "implementationExported": true,
+  "supportedPlatforms": [
+    "darwin-arm64",
+    "darwin-x64",
+    "linux-arm64-gnu",
+    "linux-x64-gnu"
+  ],
+  "requiredPrimitives": [
+    "darwin.renameatx_np(RENAME_EXCL)",
+    "linux.renameat2(RENAME_NOREPLACE)"
+  ],
+  "blockingReason": "Stable for the four supported platform keys (darwin-arm64, darwin-x64, linux-arm64-gnu, linux-x64-gnu). Windows, Linux musl, and unknown OS/architecture/libc combinations remain unsupported and fail closed."
+}

package/candidate/fixed-set-publication/fixtures/manifest-negative-directory-mode.json

@@ -0,0 +1,38 @@
+{
+  "fixtureId": "fixed-set.manifest.negative.directory-mode",
+  "schema": "manifest",
+  "expectValid": false,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-manifest",
+    "source": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "1111111111111111111111111111111111111111111111111111111111111111"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "1", "inode": "1" },
+      "directories": [
+        { "path": "nested", "type": "directory", "mode": 512, "device": "1", "inode": "2" }
+      ],
+      "closureDigest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "target": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "3333333333333333333333333333333333333333333333333333333333333333"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "3", "inode": "3" },
+      "directories": [],
+      "closureDigest": "4444444444444444444444444444444444444444444444444444444444444444",
+      "expectation": "absent"
+    },
+    "members": [
+      { "path": "nested/file", "type": "regular", "mode": 420, "bytes": 1, "sha256": "5555555555555555555555555555555555555555555555555555555555555555" }
+    ],
+    "digest": "6666666666666666666666666666666666666666666666666666666666666666"
+  }
+}

package/candidate/fixed-set-publication/fixtures/manifest-negative-path-escape.json

@@ -0,0 +1,42 @@
+{
+  "fixtureId": "fixed-set.manifest.negative.path-escape",
+  "schema": "manifest",
+  "expectValid": false,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-manifest",
+    "source": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "1111111111111111111111111111111111111111111111111111111111111111"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "1", "inode": "101" },
+      "directories": [],
+      "closureDigest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "target": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "3333333333333333333333333333333333333333333333333333333333333333"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "3", "inode": "301" },
+      "directories": [],
+      "closureDigest": "6666666666666666666666666666666666666666666666666666666666666666",
+      "expectation": "absent"
+    },
+    "members": [
+      {
+        "path": "../outside.txt",
+        "type": "regular",
+        "mode": 420,
+        "bytes": 1,
+        "sha256": "4444444444444444444444444444444444444444444444444444444444444444"
+      }
+    ],
+    "digest": "5555555555555555555555555555555555555555555555555555555555555555"
+  }
+}

package/candidate/fixed-set-publication/fixtures/manifest-positive-platform-bundle.json

@@ -0,0 +1,55 @@
+{
+  "fixtureId": "fixed-set.manifest.positive.platform-bundle",
+  "schema": "manifest",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-manifest",
+    "source": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "1111111111111111111111111111111111111111111111111111111111111111"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "1", "inode": "101" },
+      "directories": [
+        { "path": "generated", "type": "directory", "mode": 493, "device": "1", "inode": "102" },
+        { "path": "generated/platforms", "type": "directory", "mode": 493, "device": "1", "inode": "103" },
+        { "path": "generated/platforms/fixture", "type": "directory", "mode": 493, "device": "1", "inode": "104" },
+        { "path": "generated/platforms/fixture/skills", "type": "directory", "mode": 493, "device": "1", "inode": "105" },
+        { "path": "generated/platforms/fixture/skills/demo", "type": "directory", "mode": 493, "device": "1", "inode": "106" }
+      ],
+      "closureDigest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "target": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "3333333333333333333333333333333333333333333333333333333333333333"
+      },
+      "root": { "type": "directory", "mode": 493, "device": "2", "inode": "201" },
+      "directories": [],
+      "closureDigest": "7777777777777777777777777777777777777777777777777777777777777777",
+      "expectation": "absent"
+    },
+    "members": [
+      {
+        "path": "generated/platforms/fixture/plugin.json",
+        "type": "regular",
+        "mode": 420,
+        "bytes": 18,
+        "sha256": "4444444444444444444444444444444444444444444444444444444444444444"
+      },
+      {
+        "path": "generated/platforms/fixture/skills/demo/SKILL.md",
+        "type": "regular",
+        "mode": 420,
+        "bytes": 24,
+        "sha256": "5555555555555555555555555555555555555555555555555555555555555555"
+      }
+    ],
+    "digest": "6666666666666666666666666666666666666666666666666666666666666666"
+  }
+}

package/candidate/fixed-set-publication/fixtures/manifest-positive-versioned-candidate.json

@@ -0,0 +1,53 @@
+{
+  "fixtureId": "fixed-set.manifest.positive.versioned-candidate",
+  "schema": "manifest",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-manifest",
+    "source": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "7777777777777777777777777777777777777777777777777777777777777777"
+      },
+      "root": { "type": "directory", "mode": 448, "device": "7", "inode": "701" },
+      "directories": [
+        { "path": "versions", "type": "directory", "mode": 448, "device": "7", "inode": "702" },
+        { "path": "versions/v1", "type": "directory", "mode": 448, "device": "7", "inode": "703" },
+        { "path": "versions/v1/scripts", "type": "directory", "mode": 448, "device": "7", "inode": "704" }
+      ],
+      "closureDigest": "8888888888888888888888888888888888888888888888888888888888888888"
+    },
+    "target": {
+      "rootBinding": {
+        "kind": "trusted-filesystem-root-binding",
+        "digestAlgorithm": "sha256",
+        "basis": "canonical-realpath-device-inode-type-mode-v1",
+        "digest": "9999999999999999999999999999999999999999999999999999999999999999"
+      },
+      "root": { "type": "directory", "mode": 448, "device": "9", "inode": "901" },
+      "directories": [],
+      "closureDigest": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "expectation": "absent"
+    },
+    "members": [
+      {
+        "path": "versions/v1/SKILL.md",
+        "type": "regular",
+        "mode": 420,
+        "bytes": 31,
+        "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      },
+      {
+        "path": "versions/v1/scripts/runner.py",
+        "type": "regular",
+        "mode": 493,
+        "bytes": 42,
+        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+      }
+    ],
+    "digest": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-negative-partial.json

@@ -0,0 +1,25 @@
+{
+  "fixtureId": "fixed-set.receipt.negative.partial",
+  "schema": "receipt",
+  "expectValid": false,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "6666666666666666666666666666666666666666666666666666666666666666",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "7777777777777777777777777777777777777777777777777777777777777777"
+    },
+    "platform": "darwin",
+    "primitive": "darwin-renameatx-noreplace-v1",
+    "status": "partially_applied",
+    "targetState": "published",
+    "commitState": "rename-committed",
+    "verification": "verified",
+    "durability": "indeterminate",
+    "publishedClosureDigest": "8888888888888888888888888888888888888888888888888888888888888888",
+    "memberCount": 1
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-positive-fsync-indeterminate.json

@@ -0,0 +1,29 @@
+{
+  "fixtureId": "fixed-set.receipt.positive.fsync-indeterminate",
+  "schema": "receipt",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "1111111111111111111111111111111111111111111111111111111111111111",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "platform": "linux",
+    "primitive": "linux-renameat2-noreplace-v1",
+    "status": "indeterminate",
+    "targetState": "published",
+    "commitState": "rename-committed",
+    "verification": "verified",
+    "durability": "indeterminate",
+    "publishedClosureDigest": "3333333333333333333333333333333333333333333333333333333333333333",
+    "memberCount": 2,
+    "error": {
+      "code": "DIRECTORY_FSYNC_FAILED",
+      "message": "The fixed set verified after rename, but directory fsync failed."
+    }
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-positive-success.json

@@ -0,0 +1,25 @@
+{
+  "fixtureId": "fixed-set.receipt.positive.success",
+  "schema": "receipt",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "1111111111111111111111111111111111111111111111111111111111111111",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "2222222222222222222222222222222222222222222222222222222222222222"
+    },
+    "platform": "linux",
+    "primitive": "linux-renameat2-noreplace-v1",
+    "status": "succeeded",
+    "targetState": "published",
+    "commitState": "rename-committed",
+    "verification": "verified",
+    "durability": "synced",
+    "publishedClosureDigest": "3333333333333333333333333333333333333333333333333333333333333333",
+    "memberCount": 2
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-positive-unsupported.json

@@ -0,0 +1,27 @@
+{
+  "fixtureId": "fixed-set.receipt.positive.unsupported",
+  "schema": "receipt",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "4444444444444444444444444444444444444444444444444444444444444444",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "5555555555555555555555555555555555555555555555555555555555555555"
+    },
+    "platform": "other",
+    "primitive": "none",
+    "status": "refused",
+    "targetState": "absent",
+    "commitState": "not-committed",
+    "verification": "not-run",
+    "durability": "not-attempted",
+    "error": {
+      "code": "UNSUPPORTED_PLATFORM",
+      "message": "No verified no-replace primitive is available."
+    }
+  }
+}

package/candidate/fixed-set-publication/fixtures/receipt-positive-verify-indeterminate.json

@@ -0,0 +1,27 @@
+{
+  "fixtureId": "fixed-set.receipt.positive.verify-indeterminate",
+  "schema": "receipt",
+  "expectValid": true,
+  "data": {
+    "schemaVersion": 1,
+    "kind": "skill-family.fixed-set-publication-receipt",
+    "manifestDigest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "targetRootBinding": {
+      "kind": "trusted-filesystem-root-binding",
+      "digestAlgorithm": "sha256",
+      "basis": "canonical-realpath-device-inode-type-mode-v1",
+      "digest": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    },
+    "platform": "darwin",
+    "primitive": "darwin-renameatx-noreplace-v1",
+    "status": "indeterminate",
+    "targetState": "indeterminate",
+    "commitState": "rename-committed",
+    "verification": "failed",
+    "durability": "indeterminate",
+    "error": {
+      "code": "POST_VERIFY_FAILED",
+      "message": "Rename committed, but the target identity could not be verified."
+    }
+  }
+}