skill-family-engineering-kit 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.11.0 locale=en baseline=sha256:108e261312b0838af53184710453fe19f369a9ea10ac5d1fc3e829e919d0f99d -->
+## [0.11.0] - 2026-08-25
+
+Engineering Kit 0.11.0 adds a candidate real-host verification API and ships the registered host Profile closure.
+
+### Added
+
+- Adds runHostVerification for one fresh, bounded Kimi or WorkBuddy invocation reusing the caller's existing login state, and verifyHostVerificationBindings for pure result composition.
+- Recomputes closure and stream digests from raw bytes and keeps private evidence outside the public result.
+- Ships the registered host Profile closure through bundledHostProfilesRoot().
+
+### Changed
+
+- Manual Profiles retain their lifecycle restrictions; host verification does not grant build, plan, apply, install, update, uninstall, or rollback support.
+
+### Upgrade Notes
+
+The 0.11.0 host-verification API is candidate-only. It does not own domain PASS/FAIL, release state, or automatic login, and it claims no authentication isolation, unchanged credentials, fixed model identity, or disabled host tool capability. executableSha256 is a point-in-time preflight observation, not proof of the executed image; the caller exclusively controls that namespace. Foundation retains session directories, and the caller cleans its outer temporaryRoot after inspection.
+<!-- release-skill:changelog:end version=0.11.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.10.0 locale=en baseline=sha256:fc575df3b8c5f7a0d819090ce9637f8cdc654c277892fe3f14149d5cc1746b24 -->
 ## [0.10.0] - 2026-08-24
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,26 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.11.0 locale=zh-CN baseline=sha256:5d5852f3fa3c970b4d277600a0886d533e3c883fc72ce144a85a071d1e270771 -->
+## [0.11.0] - 2026-08-25
+
+Engineering Kit 0.11.0 增加候选真实宿主验证 API，并随包携带已登记宿主 Profile 闭包。
+
+### 新增
+
+- 新增 runHostVerification，执行一次 fresh、受约束的 Kimi 或 WorkBuddy 调用（复用调用方现有登录态）；新增 verifyHostVerificationBindings，组合结果时只做纯校验。
+- 从原始字节重算闭包和流摘要，并把私有证据留在公共结果之外。
+- 通过 bundledHostProfilesRoot() 携带已登记宿主 Profile 闭包。
+
+### 变更
+
+- manual Profile 继续保留生命周期限制；宿主验证不会授予 build、plan、apply、install、update、uninstall 或 rollback 能力。
+
+### 升级说明
+
+0.11.0 宿主验证 API 仍为候选能力，不拥有领域 PASS/FAIL、发布状态或自动登录；不宣称认证状态隔离、凭证未变化、模型身份固定或宿主工具能力已关闭。executableSha256 只是启动前的点时观察，不证明实际执行映像；调用方独占对应命名空间。Foundation 保留 session 目录，调用方检查后清理外层 temporaryRoot。
+<!-- release-skill:changelog:end version=0.11.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.10.0 locale=zh-CN baseline=sha256:45180b7a3b60853842cbe3a379da7ff95f1bd1fe832192368ec2c92a813279dc -->
 ## [0.10.0] - 2026-08-24
 

package/README.md

@@ -4,29 +4,28 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.10.0 -->
+<!-- release-skill:release-version: 0.11.0 -->
 
 An engineering toolkit used in development and CI. There are **exactly four** top-level commands, and no fifth:
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.10.0** (2026-08-24)
+**0.11.0** (2026-08-25)
 
-Engineering Kit 0.10.0 adds responsibility-specific canonical entrypoints, a bounded host lifecycle slice, and a thin read-only peer adapter verification entry.
+Engineering Kit 0.11.0 adds a candidate real-host verification API and ships the registered host Profile closure.
 
 **Added**
 
-- Adds skill-family-engineering-kit/quickstart-profile, /adoption, and /skill-naming canonical exports.
-- Adds finite Profile alias resolution, independent manual probe facts for non-driver hosts, and explicit local install/update plans; uninstall remains a manual-recovery refusal.
-- Adds `verifyHostPeers` as a thin wrapper over Harness peer verification; the Kit retains four top-level commands and does not write peer directories.
+- Adds runHostVerification for one fresh, bounded Kimi or WorkBuddy invocation reusing the caller's existing login state, and verifyHostVerificationBindings for pure result composition.
+- Recomputes closure and stream digests from raw bytes and keeps private evidence outside the public result.
+- Ships the registered host Profile closure through bundledHostProfilesRoot().
 
 **Changed**
 
-- Keeps the historical Quickstart candidate export as a same-source migration alias and preserves the four-command Kit boundary.
-- Compiles one canonical Quickstart and batch Schema set while mapping historical and canonical IDs to the same standalone validators.
+- Manual Profiles retain their lifecycle restrictions; host verification does not grant build, plan, apply, install, update, uninstall, or rollback support.
 
 **Upgrade Notes**
 
-Update all three exact pins to 0.10.0 and migrate imports and Schema IDs once to canonical identities. A later maturity-label promotion adds no separate Bundle rebuild requirement; package-identity, source-digest, and provenance changes continue to follow the existing projection contract.
+The 0.11.0 host-verification API is candidate-only. It does not own domain PASS/FAIL, release state, or automatic login, and it claims no authentication isolation, unchanged credentials, fixed model identity, or disabled host tool capability. executableSha256 is a point-in-time preflight observation, not proof of the executed image; the caller exclusively controls that namespace. Foundation retains session directories, and the caller cleans its outer temporaryRoot after inspection.
 <!-- release-skill:managed:end id=latest-release -->
 
 | Command | Purpose | Side effects |
@@ -47,7 +46,7 @@ Kit is the "engineering stage" layer, depending on the Harness and Contracts. It
 ## Installation and Minimal Example
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.10.0
+npm install --save-dev skill-family-engineering-kit@0.11.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -55,7 +54,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.10.0 -- skill-family-kit --help`.
+The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.11.0 -- skill-family-kit --help`.
 
 ### Public Profile SPI
 
@@ -111,6 +110,14 @@ npm exec -- skill-family-kit adopt-plan host-plan --root <workspace> --host <id>
 
 The Profile must be provided explicitly; Kit does not bind a specific host by default. Canonical host IDs may resolve only aliases declared by the finite registered Profile set. Probe starts no process by default; only when both `--allow-host-spawn --host-executable <absolute-path>` are given is the frozen version vector executed. Local install and update use an explicit authorization reference plus the existing contained publication primitives; uninstall is rejected with `manual-recovery-required` because Foundation has no safe bound deletion primitive. Two registered hosts have trusted version drivers; Kimi Code, WorkBuddy, CodeBuddy, and DeepSeek Harness expose independent manual facts; Qoder is `unsupported`. Adapter source only accepts declared text closures; binary projection is not supported; see the [host capability matrix](../../docs/reference/host-capability-matrix.md) and registered Profiles.
 
+### Candidate real-host verification library API
+
+`runHostVerification({ request, bindings, hostsRoot })` and `verifyHostVerificationBindings({ results, expectedCommon, expectedRequestDigestByHost })` are library APIs, not a fifth Kit command. The first runs one bounded candidate verification against caller-bound roots using an admitted built-in driver (`kimi-code-print-v1` or `workbuddy-codebuddy-print-v1`, both bound to `existing-user-state + host-managed`) and returns a Contracts-validated, redacted four-state result. The second is pure and combines only `observed` results with the exact common fields and per-host request digest expected by the caller.
+
+The API keeps consumer workload, domain output checks, domain PASS/FAIL, release freshness, and release state outside Foundation. The caller supplies a canonical `existingUserStateRoot` that is projected into the child environment but never read, digested, modified or cleaned by Foundation; it does not grant manual Profiles any build, plan, apply, install, update, or uninstall capability. The Kimi and WorkBuddy real-host publication gates remain a hard publication requirement for 0.11.0.
+
+`executableSha256` binds only the bytes observed by the strict preflight read; the actual process is still spawned by pathname, so the caller must exclusively control the executable namespace through probe and invocation. Foundation retains the call's `session-*` directory and never deletes it by pathname. After inspection, the caller cleans its exclusively owned outer `temporaryRoot`.
+
 ## Typical Use Cases
 
 - New project skeleton: `scaffold` (does not overwrite a non-empty existing repo).

package/README.zh-CN.md

@@ -5,29 +5,28 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.10.0 -->
+<!-- release-skill:release-version: 0.11.0 -->
 
 开发与 CI 阶段使用的工程工具包。**恰好四个**顶层命令，没有第五个：
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.10.0** (2026-08-24)
+**0.11.0** (2026-08-25)
 
-Engineering Kit 0.10.0 为历史 candidate 提供职责明确的规范入口，增加受限的跨平台宿主身份、探针和本地生命周期能力，并提供同级适配器只读验证薄入口。
+Engineering Kit 0.11.0 增加候选真实宿主验证 API，并随包携带已登记宿主 Profile 闭包。
 
 **新增**
 
-- 新增 skill-family-engineering-kit/quickstart-profile、/adoption 与 /skill-naming 规范导出。
-- 增加有限 Profile alias 解析、非 driver 宿主的独立手动 probe fact 和显式本地 install/update 计划；uninstall 仍要求人工恢复。
-- 新增 `verifyHostPeers`，只包装 Harness 的 peer 验证，不增加第五个顶层命令，也不写入 peer 目录。
+- 新增 runHostVerification，执行一次 fresh、受约束的 Kimi 或 WorkBuddy 调用（复用调用方现有登录态）；新增 verifyHostVerificationBindings，组合结果时只做纯校验。
+- 从原始字节重算闭包和流摘要，并把私有证据留在公共结果之外。
+- 通过 bundledHostProfilesRoot() 携带已登记宿主 Profile 闭包。
 
 **变更**
 
-- 历史 Quickstart candidate 导出继续作为同源迁移别名，Kit 四命令边界不变。
-- 只编译一套规范 Quickstart 与批量校验 Schema；历史和规范 ID 指向同一 standalone validator。
+- manual Profile 继续保留生命周期限制；宿主验证不会授予 build、plan、apply、install、update、uninstall 或 rollback 能力。
 
 **升级说明**
 
-消费者应把三个包的精确 pin 更新到 0.10.0，并把导入与 Schema ID 一次迁移到规范身份。以后仅晋升成熟度标签时不另加 Bundle 重建要求；包身份、来源摘要或 provenance 变化仍按既有投影合同处理。
+0.11.0 宿主验证 API 仍为候选能力，不拥有领域 PASS/FAIL、发布状态或自动登录；不宣称认证状态隔离、凭证未变化、模型身份固定或宿主工具能力已关闭。executableSha256 只是启动前的点时观察，不证明实际执行映像；调用方独占对应命名空间。Foundation 保留 session 目录，调用方检查后清理外层 temporaryRoot。
 <!-- release-skill:managed:end id=latest-release -->
 
 | 命令 | 用途 | 副作用 |
@@ -48,7 +47,7 @@ Kit 是「工程阶段」层，依赖 Harness 与 Contracts。它只做四件事
 ## 安装和最小示例
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.10.0
+npm install --save-dev skill-family-engineering-kit@0.11.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -56,7 +55,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.10.0 -- skill-family-kit --help`。
+以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.11.0 -- skill-family-kit --help`。
 
 ### 公共 Profile SPI
 
@@ -112,6 +111,14 @@ npm exec -- skill-family-kit adopt-plan host-plan --root <workspace> --host <id>
 
 Profile 必须显式提供，Kit 不默认绑定具体宿主。规范宿主 ID 只能解析已登记有限 Profile 中声明的 alias。probe 默认不启动进程；只有同时给出 `--allow-host-spawn --host-executable <绝对路径>` 才执行冻结版本向量。本地 install/update 通过显式授权引用和既有受收容发布原语执行；uninstall 因没有安全的绑定删除原语而返回 `manual-recovery-required`，不删除文件。Claude/Codex 使用受信版本 driver；Kimi Code、WorkBuddy、CodeBuddy 和 DeepSeek Harness 只提供独立手动事实；Qoder 为 `unsupported`。adapter source 只接受已声明的文本闭包，不支持二进制投影；精确宿主支持矩阵见 [宿主能力矩阵](../../docs/reference/host-capability-matrix.md) 与已登记 Profile。
 
+### 候选真实宿主验证库 API
+
+`runHostVerification({ request, bindings, hostsRoot })` 和 `verifyHostVerificationBindings({ results, expectedCommon, expectedRequestDigestByHost })` 是库 API，不是第五个 Kit 命令。前者通过已准入的内置 driver（`kimi-code-print-v1` 或 `workbuddy-codebuddy-print-v1`，均绑定 `existing-user-state + host-managed`），针对调用方绑定的根执行一次候选验证，并返回经过 Contracts 校验的脱敏四态结果；后者是纯函数，只组合 `observed` 结果，并核对共同字段和逐宿主 request digest。
+
+该 API 不接管消费者 workload、领域输出检查、领域 PASS/FAIL、发布新鲜度或发布状态。调用方提供 canonical 的 `existingUserStateRoot`；Foundation 只把它投影进子进程环境，不读取、摘要、修改或清理其中内容，也不会因此为 manual Profile 授予 build、plan、apply、install、update 或 uninstall 能力。
+
+`executableSha256` 只绑定启动前严格读取到的字节。实际进程仍按 pathname 启动，因此调用方必须在 probe 和正式调用期间独占可执行文件的命名空间。Foundation 保留本次调用的 `session-*` 目录，不按路径删除；调用方检查完成后，统一清理其独占的外层 `temporaryRoot`。
+
 ## 典型使用场景
 
 - 新项目骨架：`scaffold`（不覆盖非空存量仓）。

package/data/hosts/claude/host-descriptor.json

@@ -0,0 +1,40 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "claude",
+  "displayName": "Claude Code",
+  "support": "supported",
+  "maturity": "stable",
+  "sourceAliases": [
+    "claude-code"
+  ],
+  "driverId": "claude-version-v1",
+  "adapterFormat": "skill-directory-v1",
+  "pathCategories": [
+    {
+      "id": "claude-user-skills",
+      "role": "skill-root",
+      "scope": "user",
+      "anchor": "user-home",
+      "relPath": ".claude/skills"
+    },
+    {
+      "id": "claude-project-skills",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": ".claude/skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/data/hosts/codebuddy/host-descriptor.json

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "codebuddy",
+  "displayName": "CodeBuddy",
+  "support": "manual",
+  "maturity": "manual",
+  "sourceAliases": [],
+  "pathCategories": [],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/data/hosts/codex/host-descriptor.json

@@ -0,0 +1,40 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "codex",
+  "displayName": "Codex",
+  "support": "supported",
+  "maturity": "stable",
+  "sourceAliases": [
+    "openai-codex"
+  ],
+  "driverId": "codex-version-v1",
+  "adapterFormat": "skill-directory-v1",
+  "pathCategories": [
+    {
+      "id": "codex-user-skills",
+      "role": "skill-root",
+      "scope": "user",
+      "anchor": "user-home",
+      "relPath": ".agents/skills"
+    },
+    {
+      "id": "codex-project-skills",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": ".agents/skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/data/hosts/deepseek-harness/host-descriptor.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "deepseek-harness",
+  "displayName": "DeepSeek Harness",
+  "support": "manual",
+  "maturity": "developer-preview",
+  "sourceAliases": [
+    "dsh"
+  ],
+  "pathCategories": [],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/data/hosts/kimi-code/host-descriptor.json

@@ -0,0 +1,36 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "kimi-code",
+  "displayName": "Kimi Code",
+  "support": "manual",
+  "maturity": "manual",
+  "verification": {
+    "driverId": "kimi-code-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "sourceAliases": [
+    "kimi"
+  ],
+  "pathCategories": [
+    {
+      "id": "plugin-adapter-skill-root",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": "skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/data/hosts/qoder/host-descriptor.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "qoder",
+  "displayName": "Qoder",
+  "support": "unsupported",
+  "maturity": "unsupported",
+  "sourceAliases": [],
+  "unsupportedReason": "No auditable non-interactive host driver is frozen for this release.",
+  "pathCategories": [],
+  "probeCapabilities": []
+}

package/data/hosts/registry.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-registry",
+  "hosts": [
+    "claude",
+    "codex",
+    "kimi-code",
+    "workbuddy",
+    "codebuddy",
+    "qoder",
+    "deepseek-harness"
+  ]
+}

package/data/hosts/workbuddy/host-descriptor.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": 1,
+  "kind": "skill-family.host-descriptor",
+  "hostId": "workbuddy",
+  "displayName": "WorkBuddy",
+  "support": "manual",
+  "maturity": "manual",
+  "verification": {
+    "driverId": "workbuddy-codebuddy-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
+  "sourceAliases": [],
+  "pathCategories": [
+    {
+      "id": "plugin-adapter-skill-root",
+      "role": "skill-root",
+      "scope": "project",
+      "anchor": "project-root",
+      "relPath": "skills"
+    }
+  ],
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
+}

package/docs/agents/capability-catalog.en.json

@@ -20,7 +20,7 @@
  "capabilities": [
   {
    "id": "foundation.contracts.object-validation",
-   "intent": "Compile and validate all 37 registered top-level Foundation contract object documents under both the draft-07 and 2020-12 dialects using Ajv 8.20.0 (exact pin).",
+   "intent": "Compile and validate all 39 registered top-level Foundation contract object documents under both the draft-07 and 2020-12 dialects using Ajv 8.20.0 (exact pin).",
    "useWhen": [
     "Need to validate registered contract objects such as project-manifest, profile-descriptor, report-model",
     "Need to detect the document dialect and select the strict or tolerant validation policy"
@@ -73,7 +73,7 @@
     "Need to find a kernel protocol definition by protocol name"
    ],
    "doNotUseWhen": [
-    "Need to add a registered top-level object without an ADR (the 37-object set is fixed)"
+    "Need to add a registered top-level object without an ADR (the 39-object set is fixed)"
    ],
    "prerequisites": [
     "registry.json is shipped with the package",
@@ -95,7 +95,7 @@
    ],
    "invariants": [
     "registry.json's schemaVersion=1 and contractsVersion=1.10.0 are the single authority",
-    "The set of 37 top-level objects is fixed; additions require an ADR"
+    "The set of 39 top-level objects is fixed; additions require an ADR"
    ],
    "ownedByCaller": [
     "Interpretation of an object's business meaning"
@@ -1265,7 +1265,7 @@
   },
   {
    "id": "foundation.kit.host",
-  "intent": "Inject a finite host Profile set and trusted drivers, providing canonical identity resolution, describe/build/probe/plan, bounded local install/update, and read-only peer adapter verification; uninstall remains a manual-recovery refusal.",
+  "intent": "Explicitly select a packaged or caller-provided finite host Profile set and trusted drivers, providing canonical identity resolution, describe/build/probe/plan, bounded local install/update, and read-only peer adapter verification; uninstall remains a manual-recovery refusal.",
    "useWhen": [
     "Need to resolve a registered host or finite Profile alias",
     "Need to probe, build, plan, or locally install/update host integration",
@@ -1277,7 +1277,7 @@
     "Need a full Qoder driver (that host is unsupported)"
    ],
    "prerequisites": [
-    "The host Profile is registered in profiles/hosts and aliases are finite",
+    "The host Profile is registered in profiles/hosts and aliases are finite; npm consumers may explicitly select the Kit's packaged projection root",
     "Trusted drivers are only claude-version-v1 / codex-version-v1"
    ],
    "inputs": [
@@ -1947,7 +1947,7 @@
    ],
    "invariants": [
     "The sole business-neutral operation is execute-method; method identifiers and domain schemas remain consumer-owned",
-    "Candidate schemas remain absent from src/registry.json and do not expand the 37 stable object classes",
+    "Candidate schemas remain absent from src/registry.json and do not expand the 39 stable object classes",
     "Stability is candidate: actively upgrading the candidate version requires contract verification",
     "Historical entrypoints and eight Schema IDs migrate once; stable promotion requires no further contract-identity change, while obtaining the new published promise still requires exact-pin updates"
    ],

package/docs/agents/capability-catalog.json

@@ -799,12 +799,15 @@
    "since": "0.2.0",
    "stability": "unstable",
    "entrypoints": [
+    "bundledHostProfilesRoot (packages/skill-family-engineering-kit/src/host-profiles.mjs)",
     "describeHost (packages/skill-family-engineering-kit/src/host-profiles.mjs)",
     "resolveHostId (packages/skill-family-engineering-kit/src/host-profiles.mjs)",
     "loadHostRegistry (packages/skill-family-engineering-kit/src/host-profiles.mjs)",
     "probeHost (packages/skill-family-engineering-kit/src/host.mjs)",
     "buildHostAdapter (packages/skill-family-engineering-kit/src/host.mjs)",
     "verifyHostPeers (packages/skill-family-engineering-kit/src/host.mjs)",
+    "runHostVerification (packages/skill-family-engineering-kit/src/host-verification.mjs)",
+    "verifyHostVerificationBindings (packages/skill-family-engineering-kit/src/host-verification.mjs)",
     "materializeHostBuild (packages/skill-family-engineering-kit/src/host.mjs)",
     "planHost (packages/skill-family-engineering-kit/src/host.mjs)",
     "assertPlanConsistency (packages/skill-family-engineering-kit/src/host.mjs)",
@@ -815,13 +818,17 @@
    "sourceRefs": [
     "packages/skill-family-engineering-kit/src/host.mjs",
     "packages/skill-family-engineering-kit/src/host-profiles.mjs",
-    "packages/skill-family-engineering-kit/src/host-drivers.mjs"
+    "packages/skill-family-engineering-kit/src/host-drivers.mjs",
+    "packages/skill-family-engineering-kit/src/host-verification.mjs",
+    "packages/skill-family-engineering-kit/src/host-verification-drivers.mjs"
    ],
    "positiveTestRefs": [
-    "packages/skill-family-engineering-kit/test/host.test.mjs"
+    "packages/skill-family-engineering-kit/test/host.test.mjs",
+    "packages/skill-family-engineering-kit/test/host-verification.test.mjs"
    ],
    "negativeTestRefs": [
-    "packages/skill-family-engineering-kit/test/host.test.mjs"
+    "packages/skill-family-engineering-kit/test/host.test.mjs",
+    "packages/skill-family-engineering-kit/test/host-verification.test.mjs"
    ]
   },
   {
@@ -1015,6 +1022,7 @@
    "since": "0.2.0",
    "stability": "unstable",
    "entrypoints": [
+    "bundledHostProfilesRoot (packages/skill-family-engineering-kit/src/host-profiles.mjs)",
     "describeHost (packages/skill-family-engineering-kit/src/host-profiles.mjs)",
     "resolveHostId (packages/skill-family-engineering-kit/src/host-profiles.mjs)"
    ],

package/docs/agents/capability-catalog.zh-CN.json

@@ -20,7 +20,7 @@
  "capabilities": [
   {
    "id": "foundation.contracts.object-validation",
-   "intent": "用 Ajv 8.20.0（精确 pin）在 draft-07 与 2020-12 双方言下编译并校验 Foundation 已登记的全部 37 类顶层契约对象文档",
+   "intent": "用 Ajv 8.20.0（精确 pin）在 draft-07 与 2020-12 双方言下编译并校验 Foundation 已登记的全部 39 类顶层契约对象文档",
    "useWhen": [
     "需要校验 project-manifest、profile-descriptor、report-model 等已登记契约对象",
     "需要探测文档方言并选择 strict 或 tolerant 校验策略"
@@ -73,7 +73,7 @@
     "需要按协议名查找 kernel 协议定义"
    ],
    "doNotUseWhen": [
-    "需要在没有 ADR 的情况下新增顶层登记对象（37 类对象集已经固定）"
+    "需要在没有 ADR 的情况下新增顶层登记对象（39 类对象集已经固定）"
    ],
    "prerequisites": [
     "registry.json 已随包发布",
@@ -95,7 +95,7 @@
    ],
    "invariants": [
     "registry.json 的 schemaVersion=1、contractsVersion=1.10.0 为唯一权威",
-    "37 类顶层对象集合固定，新增需 ADR"
+    "39 类顶层对象集合固定，新增需 ADR"
    ],
    "ownedByCaller": [
     "对象业务含义的解释"
@@ -1265,7 +1265,7 @@
   },
   {
    "id": "foundation.kit.host",
-  "intent": "注入有限宿主 Profile 集合与受信 driver，提供规范身份解析、describe/build/probe/plan、受限的本地 install/update 以及只读同级适配器验证；uninstall 始终要求人工恢复",
+  "intent": "显式选择随包或调用方提供的有限宿主 Profile 集合与受信 driver，提供规范身份解析、describe/build/probe/plan、受限的本地 install/update 以及只读同级适配器验证；uninstall 始终要求人工恢复",
    "useWhen": [
     "需要解析已登记宿主或有限 Profile alias",
     "需要探测、构建、规划或本地 install/update 宿主接入",
@@ -1277,7 +1277,7 @@
     "需要 Qoder 完整 driver（该宿主 unsupported）"
    ],
    "prerequisites": [
-    "宿主 Profile 已在 profiles/hosts 登记，alias 也必须来自有限集合",
+    "宿主 Profile 已在 profiles/hosts 登记，alias 也必须来自有限集合；npm 消费者可显式选择 Kit 随包投影根",
     "受信 driver 仅 claude-version-v1 / codex-version-v1"
    ],
    "inputs": [
@@ -1947,7 +1947,7 @@
    ],
    "invariants": [
     "唯一业务中立操作为 execute-method；method 标识与领域 Schema 继续归消费者所有",
-    "候选 Schema 不进入 src/registry.json，也不扩张 37 类稳定对象",
+    "候选 Schema 不进入 src/registry.json，也不扩张 39 类稳定对象",
     "稳定性为 candidate：主动升级候选版本时须复验合同",
     "历史入口和八个 Schema ID 只迁移一次；晋升 stable 不再要求改合同身份，但取得新发布承诺仍须更新精确 pin"
    ],

package/docs/architecture/index.html

@@ -1994,7 +1994,7 @@ Contracts（结构、协议、错误码、协议名登记）
 <tbody>
 <tr>
 <td>Contracts</td>
-<td>结构、协议、错误码、协议名登记；37 类顶层对象；9 条 mandatory rule</td>
+<td>结构、协议、错误码、协议名登记；39 类顶层对象；9 条 mandatory rule</td>
 <td>业务字段语义、领域审计、远端写入、模型生成</td>
 </tr>
 <tr>
@@ -2088,6 +2088,7 @@ Contracts（结构、协议、错误码、协议名登记）
 <li><strong>领域审计</strong>：独立审计消费者拥有语义与最终接受/拒绝；Foundation 只提供确定性审计表面（<code>foundation.unsupported.domain-audit-semantics</code>）。</li>
 <li><strong>宿主应用与生命周期</strong>：有限 host identity/alias 解析、独立 probe facts 与本地 install/update 复用既有绑定读取和发布原语；uninstall 因缺少安全绑定删除原语而拒绝并转人工恢复。Qoder 仍为 unsupported，DeepSeek Harness 仅为 developer-preview 身份事实；远端发布、自动信任和消费者 smoke 不在 Foundation（<code>foundation.unsupported.qoder-driver</code>）。</li>
 <li><strong>同级适配器只读验证</strong>：Contracts 1.10.0 增加成熟度中立的 request/result；Harness 复用真实根绑定、路径收容、读取、闭包和 manifest，按 peer 归一化后验证共同来源与唯一 <code>SKILL.md</code> mapping；Kit 只提供薄入口。Foundation 不拥有 canonical source，不写目录，不产生 receipt，也不接管旧 manifest 的业务迁移。</li>
+<li><strong>真实宿主验证</strong>：Contracts 1.11.0 增加 <code>host-verification-request</code> 与 <code>host-verification-result</code>；Harness 在既有 <code>superviseProcess</code> 上提供原始字节 sink，Kit 实现 Kimi 与 WorkBuddy 两个内置 candidate driver（均绑定 <code>existing-user-state + host-managed</code>）的受约束执行、现有用户状态根边界与结果组合。Foundation 不拥有领域输出或发布状态，也不宣称认证状态隔离、凭证未变化、模型身份固定或宿主工具能力已关闭。</li>
 </ul>
 <h2 id="能力身份与成熟度">能力身份与成熟度<a class="headerlink" href="#能力身份与成熟度" title="Permanent link">&para;</a></h2>
 <p>能力身份和成熟度是两个维度（FND-ADR-016）。历史 <code>./candidate/**</code> 消费者迁移一次到 0.10.0 提供的规范入口；旧入口
@@ -2099,7 +2100,7 @@ operation。后续晋升 stable 只提高兼容承诺，不再触发消费者源
 <h2 id="下一阶段能力线架构-hand-off">下一阶段能力线（架构 hand-off）<a class="headerlink" href="#下一阶段能力线架构-hand-off" title="Permanent link">&para;</a></h2>
 <p>三条能力线均经 FND-ADR-001 能力纳入门裁决纳入，全部在既有分层内落位：</p>
 <ul>
-<li><strong>宿主接入线</strong>（FND-FR-001/FND-FR-002，FND-ADR-003，FND-ADR-017）：Contracts 1.10.0 在既有 stable descriptor/probe/plan/receipt 合同上补足有限成熟度、手动事实与 digest 绑定的操作约束；Harness 复用 source closure、绑定读取、严格发布和原子替换；Kit 注入有限 Profile 与两类受信 driver。0.10.0 提供 describe/build/probe/plan 及受显式授权保护的本地 install/update；uninstall 保持人工恢复拒绝。</li>
+<li><strong>宿主接入线</strong>（FND-FR-001/FND-FR-002，FND-ADR-003，FND-ADR-017）：Contracts 1.10.0 在既有 stable descriptor/probe/plan/receipt 合同上补足有限成熟度、手动事实与 digest 绑定的操作约束；Harness 复用 source closure、绑定读取、严格发布和原子替换；Kit 注入有限 Profile 与两类受信 driver。0.10.0 提供 describe/build/probe/plan 及受显式授权保护的本地 install/update；uninstall 保持人工恢复拒绝。0.11.0 追加独立的真实宿主验证候选，登记 Kimi 与 WorkBuddy 两个内置 driver，复用现有登录态。</li>
 <li><strong>持久状态底座线</strong>（FND-FR-003，FND-ADR-004）：append-only 事件、hash chain、快照与校验恢复；只提供状态底座，状态机、任务节点、重试、终态、记忆等业务语义不纳入 Foundation。</li>
 <li><strong>人类报告线</strong>（FND-FR-004，FND-ADR-005）：双层合同——机器结果是唯一真源，人类报告由机器结果确定性渲染（Markdown + digest 绑定 + 分级检查），不自由撰写。</li>
 <li><strong>有限封闭语义工具线</strong>（FND-ADR-009）：基线物化 + contentGuard（摘要不符、物化中途变化、守卫检出均失败关闭）、通用只读 chokepoint（允许根集合 + 可选身份谓词）、策略化表面扫描（策略契约 + 注入式自测）、token 上界估算（确定性领域估算原语，无模型/网络/tokenizer 依赖）、通用上限守卫（复用 state-store 事件账与 token-lock，上限与超限策略由消费者配置）。</li>
@@ -2107,12 +2108,12 @@ operation。后续晋升 stable 只提高兼容承诺，不再触发消费者源
 <p>三包结构保持、不拆第四包（FND-ADR-007）；制品治理采用 artifact-graph CLI 与版本锁（FND-ADR-006）。</p>
 <h2 id="首版预算">首版预算<a class="headerlink" href="#首版预算" title="Permanent link">&para;</a></h2>
 <ul>
-<li>顶层 Contracts 对象：37 类（完整清单以 <code>packages/skill-family-contracts/src/registry.json</code> 为唯一真源）：project-manifest、profile-descriptor、project-profile（FND-ADR-013，1.7.0 纳入）、managed-file-lock、operation-request、operation-result、migration-manifest、adapter-source、report-model、report-binding、host-descriptor、host-registry、host-capability-fact、host-probe-result、adapter-build-manifest、host-operation-plan、host-operation-receipt、state-event-envelope、state-snapshot-metadata、token-estimate-result、surface-scan-policy、declared-read-surface-result、structured-scan-policy（FND-ADR-010/011）、timeout-policy、watchdog-termination-envelope（FND-ADR-012，append-only 保持 1.5.0）、public-boundary-declaration、platform-difference-registry、observation-scope、profile-adoption-declaration、audit-baseline-pin、token-estimate-record（审计规则裁决与整改 1.6.0 纳入）、source-authority-receipt（1.8.0 纳入）、filesystem-root-binding、fixed-set-publication-manifest、fixed-set-publication-receipt（1.9.0 纳入）、adapter-peer-verification-request、adapter-peer-verification-result（FND-ADR-018，1.10.0 纳入）；</li>
+<li>顶层 Contracts 对象：39 类（完整清单以 <code>packages/skill-family-contracts/src/registry.json</code> 为唯一真源）：project-manifest、profile-descriptor、project-profile（FND-ADR-013，1.7.0 纳入）、managed-file-lock、operation-request、operation-result、migration-manifest、adapter-source、report-model、report-binding、host-descriptor、host-registry、host-capability-fact、host-probe-result、adapter-build-manifest、host-operation-plan、host-operation-receipt、state-event-envelope、state-snapshot-metadata、token-estimate-result、surface-scan-policy、declared-read-surface-result、structured-scan-policy（FND-ADR-010/011）、timeout-policy、watchdog-termination-envelope（FND-ADR-012，append-only 保持 1.5.0）、public-boundary-declaration、platform-difference-registry、observation-scope、profile-adoption-declaration、audit-baseline-pin、token-estimate-record（审计规则裁决与整改 1.6.0 纳入）、source-authority-receipt（1.8.0 纳入）、filesystem-root-binding、fixed-set-publication-manifest、fixed-set-publication-receipt（1.9.0 纳入）、adapter-peer-verification-request、adapter-peer-verification-result（FND-ADR-018，1.10.0 纳入）、host-verification-request、host-verification-result（FND-ADR-019，1.11.0 纳入）；</li>
 <li>Kit 顶层命令：4 个（scaffold、adopt-plan、projection、check）；</li>
 <li>强制机械规则：当前 9 条，预算不超过 20 条，绝对上限 30 条；CR-001 对登记表内全部 Schema 做统一编译；</li>
 <li>叶子包：3 个（skill-family-contracts、skill-family-harness-node、skill-family-engineering-kit）；</li>
 <li>Schema 校验器：Ajv 8.20.0（精确版本 pin），支持 draft-07 与 2020-12 双方言；</li>
-<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 规格版本 1.10.0；Kernel 文档仍保持 1.8.0 生命周期坐标和字节基线；</li>
+<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 规格版本 1.11.0；Kernel 文档仍保持 1.8.0 生命周期坐标和字节基线；</li>
 <li>默认运行时语言：Node；第二语言实现首版为 0。</li>
 </ul>
 <p>任何新增组件必须说明删除它会导致的两个以上真实消费者重复实现，并通过独立 fixture 验证。</p>