skill-family-engineering-kit 0.11.0 → 0.12.0

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.12.0 locale=en baseline=sha256:6000579dc8b473dbeda1832274d971df0c4f3a62a90c973184dd70e59ffc8602 -->
+## [0.12.0] - 2026-08-26
+
+Engineering Kit 0.12.0 extends bounded real-host verification from two to five fixed built-in drivers.
+
+### Added
+
+- Extends runHostVerification with three fixed built-in drivers while retaining the Kimi and WorkBuddy raw-byte behavior.
+
+### Changed
+
+- Uses the classic plugin-root/skills/skill-id layout for the plugin-directory driver and validates complete JSONL event streams before accepting execution.
+- Keeps output meaning with consumers and applies strict text decoding only to the three new text-protocol drivers.
+- Registers Qoder as manual for host support and descriptor maturity, while its real-host verification capability remains candidate.
+
+### Fixed
+
+- Rejects malformed protocol tails, invalid UTF-8 in text-protocol drivers, and version suffixes outside each driver's fixed format before they can support a successful public result.
+
+### Upgrade Notes
+
+Pin all three Foundation packages to 0.12.0. Existing runHostVerification and verifyHostVerificationBindings entrypoints and request identities remain unchanged. Reuse the host's existing login state; Foundation does not isolate authentication, freeze model identity, disable host tools, or decide domain PASS/FAIL. Qoder verification grants no build, plan, apply, install, update, uninstall, or rollback capability. The executable digest is a preflight observation and member snapshots cover only the declared members at the two observed times.
+<!-- release-skill:changelog:end version=0.12.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.11.0 locale=en baseline=sha256:108e261312b0838af53184710453fe19f369a9ea10ac5d1fc3e829e919d0f99d -->
 ## [0.11.0] - 2026-08-25
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,30 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.12.0 locale=zh-CN baseline=sha256:f2a68cdeac0b2a44d7a4cc64df8e8f371795b4150719d821a31866a6e8873e2f -->
+## [0.12.0] - 2026-08-26
+
+Engineering Kit 0.12.0 将受约束真实宿主验证从两个固定内置驱动扩展为五个。
+
+### 新增
+
+- 为 runHostVerification 增加三个固定的内置驱动，保留 Kimi 与 WorkBuddy 的原始字节行为。
+
+### 变更
+
+- 插件目录驱动使用 plugin-root/skills/skill-id 经典插件布局；JSONL 驱动必须扫描完整事件流后才接受执行结果。
+- 输出的业务含义由消费者判断，严格文本解码仅用于三个新增的文本协议驱动。
+- Qoder 的宿主支持和 Descriptor 成熟度登记为 manual，真实宿主验证能力继续标为 candidate。
+
+### 修复
+
+- 拒绝畸形协议尾部、文本协议中的非法 UTF-8，以及驱动固定格式之外的版本后缀，避免产生错误的公共成功结果。
+
+### 升级说明
+
+三个 Foundation 包须精确锁定到同一 0.12.0 版本。runHostVerification、verifyHostVerificationBindings 入口与请求身份不变。验证复用宿主现有登录态；Foundation 不隔离认证、不固定模型身份、不关闭宿主工具，也不判定领域 PASS/FAIL。Qoder 验证不授予 build、plan、apply、install、update、uninstall 或 rollback 能力。可执行文件摘要仅是启动前观察，成员快照仅覆盖已声明成员的两个观察时点。
+<!-- release-skill:changelog:end version=0.12.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.11.0 locale=zh-CN baseline=sha256:5d5852f3fa3c970b4d277600a0886d533e3c883fc72ce144a85a071d1e270771 -->
 ## [0.11.0] - 2026-08-25
 

package/README.md

@@ -4,28 +4,32 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.11.0 -->
+<!-- release-skill:release-version: 0.12.0 -->
 
 An engineering toolkit used in development and CI. There are **exactly four** top-level commands, and no fifth:
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.11.0** (2026-08-25)
+**0.12.0** (2026-08-26)
 
-Engineering Kit 0.11.0 adds a candidate real-host verification API and ships the registered host Profile closure.
+Engineering Kit 0.12.0 extends bounded real-host verification from two to five fixed built-in drivers.
 
 **Added**
 
-- Adds runHostVerification for one fresh, bounded Kimi or WorkBuddy invocation reusing the caller's existing login state, and verifyHostVerificationBindings for pure result composition.
-- Recomputes closure and stream digests from raw bytes and keeps private evidence outside the public result.
-- Ships the registered host Profile closure through bundledHostProfilesRoot().
+- Extends runHostVerification with three fixed built-in drivers while retaining the Kimi and WorkBuddy raw-byte behavior.
 
 **Changed**
 
-- Manual Profiles retain their lifecycle restrictions; host verification does not grant build, plan, apply, install, update, uninstall, or rollback support.
+- Uses the classic plugin-root/skills/skill-id layout for the plugin-directory driver and validates complete JSONL event streams before accepting execution.
+- Keeps output meaning with consumers and applies strict text decoding only to the three new text-protocol drivers.
+- Registers Qoder as manual for host support and descriptor maturity, while its real-host verification capability remains candidate.
+
+**Fixed**
+
+- Rejects malformed protocol tails, invalid UTF-8 in text-protocol drivers, and version suffixes outside each driver's fixed format before they can support a successful public result.
 
 **Upgrade Notes**
 
-The 0.11.0 host-verification API is candidate-only. It does not own domain PASS/FAIL, release state, or automatic login, and it claims no authentication isolation, unchanged credentials, fixed model identity, or disabled host tool capability. executableSha256 is a point-in-time preflight observation, not proof of the executed image; the caller exclusively controls that namespace. Foundation retains session directories, and the caller cleans its outer temporaryRoot after inspection.
+Pin all three Foundation packages to 0.12.0. Existing runHostVerification and verifyHostVerificationBindings entrypoints and request identities remain unchanged. Reuse the host's existing login state; Foundation does not isolate authentication, freeze model identity, disable host tools, or decide domain PASS/FAIL. Qoder verification grants no build, plan, apply, install, update, uninstall, or rollback capability. The executable digest is a preflight observation and member snapshots cover only the declared members at the two observed times.
 <!-- release-skill:managed:end id=latest-release -->
 
 | Command | Purpose | Side effects |
@@ -46,7 +50,7 @@ Kit is the "engineering stage" layer, depending on the Harness and Contracts. It
 ## Installation and Minimal Example
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.11.0
+npm install --save-dev skill-family-engineering-kit@0.12.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -54,7 +58,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.11.0 -- skill-family-kit --help`.
+The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.12.0 -- skill-family-kit --help`.
 
 ### Public Profile SPI
 
@@ -108,13 +112,13 @@ npm exec -- skill-family-kit scaffold host-build --root <workspace> --host <id>
 npm exec -- skill-family-kit adopt-plan host-plan --root <workspace> --host <id> --path-category <id> --build-manifest <relpath> --probe-facts <relpath> --hosts-root <dir>
 ```
 
-The Profile must be provided explicitly; Kit does not bind a specific host by default. Canonical host IDs may resolve only aliases declared by the finite registered Profile set. Probe starts no process by default; only when both `--allow-host-spawn --host-executable <absolute-path>` are given is the frozen version vector executed. Local install and update use an explicit authorization reference plus the existing contained publication primitives; uninstall is rejected with `manual-recovery-required` because Foundation has no safe bound deletion primitive. Two registered hosts have trusted version drivers; Kimi Code, WorkBuddy, CodeBuddy, and DeepSeek Harness expose independent manual facts; Qoder is `unsupported`. Adapter source only accepts declared text closures; binary projection is not supported; see the [host capability matrix](../../docs/reference/host-capability-matrix.md) and registered Profiles.
+The Profile must be provided explicitly; Kit does not bind a specific host by default. Canonical host IDs may resolve only aliases declared by the finite registered Profile set. Probe starts no process by default; only when both `--allow-host-spawn --host-executable <absolute-path>` are given is the frozen version vector executed. Local install and update use an explicit authorization reference plus the existing contained publication primitives; uninstall is rejected with `manual-recovery-required` because Foundation has no safe bound deletion primitive. Two registered hosts have trusted version drivers; Kimi Code, WorkBuddy, CodeBuddy, and DeepSeek Harness expose independent manual facts. Qoder is `manual` from 0.12.0; its candidate real-host verification grants no lifecycle support. Adapter source only accepts declared text closures; binary projection is not supported; see the [host capability matrix](../../docs/reference/host-capability-matrix.md) and registered Profiles.
 
 ### Candidate real-host verification library API
 
-`runHostVerification({ request, bindings, hostsRoot })` and `verifyHostVerificationBindings({ results, expectedCommon, expectedRequestDigestByHost })` are library APIs, not a fifth Kit command. The first runs one bounded candidate verification against caller-bound roots using an admitted built-in driver (`kimi-code-print-v1` or `workbuddy-codebuddy-print-v1`, both bound to `existing-user-state + host-managed`) and returns a Contracts-validated, redacted four-state result. The second is pure and combines only `observed` results with the exact common fields and per-host request digest expected by the caller.
+`runHostVerification({ request, bindings, hostsRoot })` and `verifyHostVerificationBindings({ results, expectedCommon, expectedRequestDigestByHost })` are library APIs, not a fifth Kit command. The first runs one bounded candidate verification against caller-bound roots using a fixed built-in driver and returns a Contracts-validated, redacted four-state result. All five drivers use `existing-user-state + host-managed`; their exact identities and limitations are listed in the [host capability matrix](../../docs/reference/host-capability-matrix.md). The second API is pure and combines only `observed` results with the exact common fields and per-host request digest expected by the caller.
 
-The API keeps consumer workload, domain output checks, domain PASS/FAIL, release freshness, and release state outside Foundation. The caller supplies a canonical `existingUserStateRoot` that is projected into the child environment but never read, digested, modified or cleaned by Foundation; it does not grant manual Profiles any build, plan, apply, install, update, or uninstall capability. The Kimi and WorkBuddy real-host publication gates remain a hard publication requirement for 0.11.0.
+The API keeps consumer workload, domain output checks, domain PASS/FAIL, release freshness, and release state outside Foundation. The caller supplies a canonical `existingUserStateRoot` that is projected into the child environment but never read, digested, modified or cleaned by Foundation; it does not grant manual Profiles any build, plan, apply, install, update, or uninstall capability. Version 0.12.0 requires real-host verification of all five fixed drivers before publication; the API does not own that release decision.
 
 `executableSha256` binds only the bytes observed by the strict preflight read; the actual process is still spawned by pathname, so the caller must exclusively control the executable namespace through probe and invocation. Foundation retains the call's `session-*` directory and never deletes it by pathname. After inspection, the caller cleans its exclusively owned outer `temporaryRoot`.
 

package/README.zh-CN.md

@@ -5,28 +5,32 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.11.0 -->
+<!-- release-skill:release-version: 0.12.0 -->
 
 开发与 CI 阶段使用的工程工具包。**恰好四个**顶层命令，没有第五个：
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.11.0** (2026-08-25)
+**0.12.0** (2026-08-26)
 
-Engineering Kit 0.11.0 增加候选真实宿主验证 API，并随包携带已登记宿主 Profile 闭包。
+Engineering Kit 0.12.0 将受约束真实宿主验证从两个固定内置驱动扩展为五个。
 
 **新增**
 
-- 新增 runHostVerification，执行一次 fresh、受约束的 Kimi 或 WorkBuddy 调用（复用调用方现有登录态）；新增 verifyHostVerificationBindings，组合结果时只做纯校验。
-- 从原始字节重算闭包和流摘要，并把私有证据留在公共结果之外。
-- 通过 bundledHostProfilesRoot() 携带已登记宿主 Profile 闭包。
+- 为 runHostVerification 增加三个固定的内置驱动，保留 Kimi 与 WorkBuddy 的原始字节行为。
 
 **变更**
 
-- manual Profile 继续保留生命周期限制；宿主验证不会授予 build、plan、apply、install、update、uninstall 或 rollback 能力。
+- 插件目录驱动使用 plugin-root/skills/skill-id 经典插件布局；JSONL 驱动必须扫描完整事件流后才接受执行结果。
+- 输出的业务含义由消费者判断，严格文本解码仅用于三个新增的文本协议驱动。
+- Qoder 的宿主支持和 Descriptor 成熟度登记为 manual，真实宿主验证能力继续标为 candidate。
+
+**修复**
+
+- 拒绝畸形协议尾部、文本协议中的非法 UTF-8，以及驱动固定格式之外的版本后缀，避免产生错误的公共成功结果。
 
 **升级说明**
 
-0.11.0 宿主验证 API 仍为候选能力，不拥有领域 PASS/FAIL、发布状态或自动登录；不宣称认证状态隔离、凭证未变化、模型身份固定或宿主工具能力已关闭。executableSha256 只是启动前的点时观察，不证明实际执行映像；调用方独占对应命名空间。Foundation 保留 session 目录，调用方检查后清理外层 temporaryRoot。
+三个 Foundation 包须精确锁定到同一 0.12.0 版本。runHostVerification、verifyHostVerificationBindings 入口与请求身份不变。验证复用宿主现有登录态；Foundation 不隔离认证、不固定模型身份、不关闭宿主工具，也不判定领域 PASS/FAIL。Qoder 验证不授予 build、plan、apply、install、update、uninstall 或 rollback 能力。可执行文件摘要仅是启动前观察，成员快照仅覆盖已声明成员的两个观察时点。
 <!-- release-skill:managed:end id=latest-release -->
 
 | 命令 | 用途 | 副作用 |
@@ -47,7 +51,7 @@ Kit 是「工程阶段」层，依赖 Harness 与 Contracts。它只做四件事
 ## 安装和最小示例
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.11.0
+npm install --save-dev skill-family-engineering-kit@0.12.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -55,7 +59,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.11.0 -- skill-family-kit --help`。
+以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.12.0 -- skill-family-kit --help`。
 
 ### 公共 Profile SPI
 
@@ -109,7 +113,15 @@ npm exec -- skill-family-kit scaffold host-build --root <workspace> --host <id>
 npm exec -- skill-family-kit adopt-plan host-plan --root <workspace> --host <id> --path-category <id> --build-manifest <relpath> --probe-facts <relpath> --hosts-root <dir>
 ```
 
-Profile 必须显式提供，Kit 不默认绑定具体宿主。规范宿主 ID 只能解析已登记有限 Profile 中声明的 alias。probe 默认不启动进程；只有同时给出 `--allow-host-spawn --host-executable <绝对路径>` 才执行冻结版本向量。本地 install/update 通过显式授权引用和既有受收容发布原语执行；uninstall 因没有安全的绑定删除原语而返回 `manual-recovery-required`，不删除文件。Claude/Codex 使用受信版本 driver；Kimi Code、WorkBuddy、CodeBuddy 和 DeepSeek Harness 只提供独立手动事实；Qoder 为 `unsupported`。adapter source 只接受已声明的文本闭包，不支持二进制投影；精确宿主支持矩阵见 [宿主能力矩阵](../../docs/reference/host-capability-matrix.md) 与已登记 Profile。
+Profile 必须显式提供，Kit 不默认绑定具体宿主。规范宿主 ID 只能解析已登记有限 Profile 中声明的 alias。probe 默认不启动进程；只有同时给出 `--allow-host-spawn --host-executable <绝对路径>` 才执行冻结版本向量。本地 install/update 通过显式授权引用和既有受收容发布原语执行；uninstall 因没有安全的绑定删除原语而返回 `manual-recovery-required`，不删除文件。Claude/Codex 使用受信版本 driver；Kimi Code、WorkBuddy、CodeBuddy 和 DeepSeek Harness 只提供独立手动事实。Qoder 自 0.12.0 起为 `manual`，候选真实验证不授予生命周期能力。adapter source 只接受已声明的文本闭包，不支持二进制投影；精确宿主支持矩阵见 [宿主能力矩阵](../../docs/reference/host-capability-matrix.md) 与已登记 Profile。
+
+### 候选真实宿主验证 API
+
+`runHostVerification({ request, bindings, hostsRoot })` 使用固定内置驱动执行一次受约束验证，返回经过 Contracts 校验和脱敏的四态结果。五个驱动覆盖 Kimi、WorkBuddy、Claude Code、Codex exec 和 Qoder CLI，均复用 `existing-user-state + host-managed` 登录态。`verifyHostVerificationBindings({ results, expectedCommon, expectedRequestDigestByHost })` 只组合校验 `observed` 结果，公共字段与请求摘要必须匹配调用方预期。两者都是库 API，不增加第五个 Kit 命令。
+
+调用方保留工作负载、领域输出检查、领域 PASS/FAIL、发布新鲜度和发布状态。规范路径 `existingUserStateRoot` 仅投影到子进程环境，Foundation 自身不读取、摘要、修改或清理其中内容，也不授予手动宿主生命周期能力。0.12.0 发布前须完成五个固定驱动的真实验证，发布决定不归该 API。
+
+`executableSha256` 只绑定启动前严格读取的字节，进程仍按路径启动；调用方须在版本观察和执行期间独占可执行文件命名空间。Foundation 保留 `session-*` 目录，调用方检查后清理独占的外层 `temporaryRoot`。
 
 ### 候选真实宿主验证库 API
 

package/data/hosts/claude/host-descriptor.json

@@ -10,6 +10,11 @@
   ],
   "driverId": "claude-version-v1",
   "adapterFormat": "skill-directory-v1",
+  "verification": {
+    "driverId": "claude-code-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
   "pathCategories": [
     {
       "id": "claude-user-skills",

package/data/hosts/codex/host-descriptor.json

@@ -10,6 +10,11 @@
   ],
   "driverId": "codex-version-v1",
   "adapterFormat": "skill-directory-v1",
+  "verification": {
+    "driverId": "codex-exec-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
   "pathCategories": [
     {
       "id": "codex-user-skills",

package/data/hosts/qoder/host-descriptor.json

@@ -3,10 +3,24 @@
   "kind": "skill-family.host-descriptor",
   "hostId": "qoder",
   "displayName": "Qoder",
-  "support": "unsupported",
-  "maturity": "unsupported",
+  "support": "manual",
+  "maturity": "manual",
   "sourceAliases": [],
-  "unsupportedReason": "No auditable non-interactive host driver is frozen for this release.",
+  "verification": {
+    "driverId": "qodercli-print-v1",
+    "authStrategy": "existing-user-state",
+    "credentialMutation": "host-managed"
+  },
   "pathCategories": [],
-  "probeCapabilities": []
+  "probeCapabilities": [
+    "cli",
+    "version",
+    "payload",
+    "registry",
+    "discover",
+    "enabled",
+    "reload",
+    "smoke",
+    "uninstall"
+  ]
 }

package/docs/agents/capability-catalog.en.json

@@ -1274,7 +1274,7 @@
    "doNotUseWhen": [
     "Need remote host publication, automatic trust, or uninstall deletion",
     "Need peer verification to decide domain semantics or to grant install/apply lifecycle support",
-    "Need a full Qoder driver (that host is unsupported)"
+    "Need a Qoder lifecycle driver (that host is manual and grants no lifecycle capability)"
    ],
    "prerequisites": [
     "The host Profile is registered in profiles/hosts and aliases are finite; npm consumers may explicitly select the Kit's packaged projection root",
@@ -1292,7 +1292,7 @@
     "verifyHostPeers reads caller-owned peer roots and writes no peer directory"
    ],
    "failureSemantics": [
-    "An unsupported host (e.g. qoder) returns an unsupported result",
+    "Hosts without a bound verification driver (e.g. codebuddy) are rejected before spawn with preflight-rejected",
     "Uninstall returns manual-recovery-required without deleting files",
     "Missing probe facts, unknown projection categories, identity spoofing, or scope/anchor conflicts fail closed"
    ],
@@ -1305,7 +1305,7 @@
    ],
    "routeElsewhere": [
     "Remote host publication and automatic trust: explicitly unsupported",
-    "Full Qoder driver: unsupported"
+    "Qoder lifecycle driver: unsupported"
    ]
   },
   {
@@ -1601,7 +1601,7 @@
     "Need to provide declarative data for host integration"
    ],
    "doNotUseWhen": [
-    "Need to register a full Qoder driver (that host is unsupported)"
+    "Need to register a Qoder lifecycle driver (that host is manual and registers only a verification driver)"
    ],
    "prerequisites": [
     "The host descriptor is bound to a trusted driverId"
@@ -1616,16 +1616,16 @@
     "No side effects (declared data)"
    ],
    "failureSemantics": [
-    "qoder is marked unsupported and manual hosts never acquire an implicit driver"
+    "qoder is marked manual and manual hosts never acquire an implicit lifecycle driver"
    ],
    "invariants": [
-    "claude/codex have support=supported and are bound to a driverId; manual hosts have no driver; qoder has support=unsupported"
+    "claude/codex have support=supported and are bound to a driverId; qoder has support=manual and binds only the verification driver (qodercli-print-v1), with no lifecycle driver"
    ],
    "ownedByCaller": [
     "Host business semantics"
    ],
    "routeElsewhere": [
-    "Full Qoder driver: unsupported"
+    "Qoder lifecycle driver: unsupported"
    ]
   },
   {
@@ -1692,38 +1692,6 @@
     "Host lifecycle: external tools or a later version"
    ]
   },
-  {
-   "id": "foundation.unsupported.qoder-driver",
-   "intent": "The full driver for the Qoder host is not frozen (No auditable non-interactive host driver is frozen), marked unsupported, referenced for structure only.",
-   "useWhen": [],
-   "doNotUseWhen": [
-    "Any scenario requiring actual execution on Qoder"
-   ],
-   "prerequisites": [
-    "none"
-   ],
-   "inputs": [
-    "none"
-   ],
-   "outputs": [
-    "none (unsupported)"
-   ],
-   "sideEffects": [
-    "none"
-   ],
-   "failureSemantics": [
-    "Referencing the qoder driver throws"
-   ],
-   "invariants": [
-    "HOST_DRIVER_IDS contains only claude-version-v1 / codex-version-v1"
-   ],
-   "ownedByCaller": [
-    "Qoder integration"
-   ],
-   "routeElsewhere": [
-    "Qoder support: a later version or external"
-   ]
-  },
   {
    "id": "foundation.unsupported.binary-adapter-source",
    "intent": "The adapter source content supports only string (utf8 text closure); binary projection is out of scope.",
@@ -1916,6 +1884,40 @@
     "Git write operations: the Git lifecycle guide"
    ]
   },
+  {
+   "id": "foundation.kit.qoder-verification",
+   "intent": "Qoder has been a manual host (descriptor maturity=manual) since 0.12.0: one constrained real-host verification runs through the frozen qodercli-print-v1 verification driver (capability stability=candidate) in a fresh workspace",
+   "useWhen": [
+    "Need to request Qoder candidate real-host verification for upgraded consumers"
+   ],
+   "doNotUseWhen": [
+    "Need Qoder build, plan, apply, generic install/update/uninstall, or rollback lifecycle capability"
+   ],
+   "prerequisites": [
+    "The qoder executable exists and is logged in; qoder static preflight and fresh-workspace layout checks pass"
+   ],
+   "inputs": [
+    "Qoder host Profile and verification driver binding"
+   ],
+   "outputs": [
+    "A single constrained real-execution observed, failed, or rejected result (quota and error-code details stay out of the public result)"
+   ],
+   "sideEffects": [
+    "Runs one qoder CLI execution in a fresh workspace; writes private evidence and snapshots"
+   ],
+   "failureSemantics": [
+    "Static preflight failures reject before spawn with preflight-rejected; execution failures such as quota exhaustion are marked execution-failed"
+   ],
+   "invariants": [
+    "qoder gains no lifecycle driver; all nine probe facts remain unknown/driver-limited"
+   ],
+   "ownedByCaller": [
+    "Qoder integration and the real release gate"
+   ],
+   "routeElsewhere": [
+    "Qoder lifecycle capability: external tools or a later version"
+   ]
+  },
   {
    "id": "foundation.contracts.quickstart-profile-candidate",
    "intent": "Expose the Quickstart Profile v2 protocol, canonical-$id Schema collection, and frozen eight-entry historical-ID migration map through skill-family-contracts/quickstart-profile for exact-version integration trials.",

package/docs/agents/capability-catalog.json

@@ -1078,22 +1078,6 @@
     "packages/skill-family-engineering-kit/test/host.test.mjs"
    ]
   },
-  {
-   "id": "foundation.unsupported.qoder-driver",
-   "package": "foundation",
-   "layer": "unsupported",
-   "since": "0.2.0",
-   "stability": "unsupported",
-   "entrypoints": [],
-   "sourceRefs": [
-    "profiles/hosts/qoder/host-descriptor.json",
-    "packages/skill-family-engineering-kit/src/host-drivers.mjs"
-   ],
-   "positiveTestRefs": [],
-   "negativeTestRefs": [
-    "packages/skill-family-engineering-kit/test/host.test.mjs"
-   ]
-  },
   {
    "id": "foundation.unsupported.binary-adapter-source",
    "package": "foundation",
@@ -1193,6 +1177,29 @@
     "packages/skill-family-engineering-kit/test/git-probe.test.mjs"
    ]
   },
+  {
+   "id": "foundation.kit.qoder-verification",
+   "package": "skill-family-engineering-kit",
+   "layer": "engineering-kit",
+   "since": "0.12.0",
+   "stability": "candidate",
+   "entrypoints": [
+    "runHostVerification (packages/skill-family-engineering-kit/src/host-verification.mjs)"
+   ],
+   "migration": "none",
+   "promotionPolicy": "consumer-transparent",
+   "sourceRefs": [
+    "profiles/hosts/qoder/host-descriptor.json",
+    "packages/skill-family-engineering-kit/src/host-verification-drivers.mjs"
+   ],
+   "positiveTestRefs": [
+    "packages/skill-family-engineering-kit/test/host-verification.test.mjs"
+   ],
+   "negativeTestRefs": [
+    "packages/skill-family-engineering-kit/test/host.test.mjs",
+    "packages/skill-family-engineering-kit/test/host-verification.test.mjs"
+   ]
+  },
   {
    "id": "foundation.contracts.quickstart-profile-candidate",
    "package": "skill-family-contracts",

package/docs/agents/capability-catalog.zh-CN.json

@@ -1274,7 +1274,7 @@
    "doNotUseWhen": [
     "需要远端宿主发布、自动信任或删除式 uninstall",
     "需要用同级验证替代领域语义，或借此获得 install/apply 生命周期能力",
-    "需要 Qoder 完整 driver（该宿主 unsupported）"
+    "需要 Qoder 生命周期 driver（该宿主为 manual，不授予生命周期能力）"
    ],
    "prerequisites": [
     "宿主 Profile 已在 profiles/hosts 登记，alias 也必须来自有限集合；npm 消费者可显式选择 Kit 随包投影根",
@@ -1292,7 +1292,7 @@
     "verifyHostPeers 只读取调用方拥有的 peer 根，不写入 peer 目录"
    ],
    "failureSemantics": [
-    "unsupported host（如 qoder）返回 unsupported 结果",
+    "未绑定验证 driver 的宿主（如 codebuddy）在 spawn 前拒绝，标记 preflight-rejected",
     "uninstall 返回 manual-recovery-required 且不删除文件",
     "缺 probe facts、未知投影类别、身份伪造或 scope/anchor 冲突均失败关闭"
    ],
@@ -1305,7 +1305,7 @@
    ],
    "routeElsewhere": [
     "远端宿主发布和自动信任：明确 unsupported",
-    "Qoder 完整 driver：unsupported"
+    "Qoder 生命周期 driver：unsupported"
    ]
   },
   {
@@ -1601,7 +1601,7 @@
     "需要为宿主接入提供声明数据"
    ],
    "doNotUseWhen": [
-    "需要登记 Qoder 完整 driver（该宿主 unsupported）"
+    "需要登记 Qoder 生命周期 driver（该宿主为 manual，仅登记验证 driver）"
    ],
    "prerequisites": [
     "宿主 descriptor 绑定受信 driverId"
@@ -1616,16 +1616,16 @@
     "无副作用（声明数据）"
    ],
    "failureSemantics": [
-    "qoder 标记 unsupported，手动宿主不隐式获得 driver"
+    "qoder 标记 manual，手动宿主不隐式获得生命周期 driver"
    ],
    "invariants": [
-    "claude/codex support=supported 且绑定 driverId；手动宿主无 driver；qoder support=unsupported"
+    "claude/codex support=supported 且绑定 driverId；qoder support=manual 且仅绑定验证 driver（qodercli-print-v1），无生命周期 driver"
    ],
    "ownedByCaller": [
     "宿主业务语义"
    ],
    "routeElsewhere": [
-    "Qoder 完整 driver：unsupported"
+    "Qoder 生命周期 driver：unsupported"
    ]
   },
   {
@@ -1692,38 +1692,6 @@
     "宿主生命周期：外部工具或后续版本"
    ]
   },
-  {
-   "id": "foundation.unsupported.qoder-driver",
-   "intent": "Qoder 宿主的完整 driver 未冻结（No auditable non-interactive host driver is frozen），标记为 unsupported，仅参考其结构",
-   "useWhen": [],
-   "doNotUseWhen": [
-    "任何需要在 Qoder 实际运行的场景"
-   ],
-   "prerequisites": [
-    "无"
-   ],
-   "inputs": [
-    "无"
-   ],
-   "outputs": [
-    "无（unsupported）"
-   ],
-   "sideEffects": [
-    "无"
-   ],
-   "failureSemantics": [
-    "引用 qoder driver 即报错"
-   ],
-   "invariants": [
-    "HOST_DRIVER_IDS 仅 claude-version-v1 / codex-version-v1"
-   ],
-   "ownedByCaller": [
-    "Qoder 接入"
-   ],
-   "routeElsewhere": [
-    "Qoder 支持：后续版本或外部"
-   ]
-  },
   {
    "id": "foundation.unsupported.binary-adapter-source",
    "intent": "adapter source 的 content 仅支持 string（utf8 文本闭包），二进制投影不在范围",
@@ -1916,6 +1884,40 @@
     "Git 写操作：Git 生命周期指南"
    ]
   },
+  {
+   "id": "foundation.kit.qoder-verification",
+   "intent": "Qoder 自 0.12.0 起为 manual 宿主（Descriptor maturity=manual）：通过冻结的 qodercli-print-v1 验证 driver（能力 stability=candidate）在 fresh 工作区执行一次受约束的真实宿主验证",
+   "useWhen": [
+    "需要为升级消费者请求 Qoder 的 candidate 真实宿主验证"
+   ],
+   "doNotUseWhen": [
+    "需要 Qoder 的 build、plan、apply、通用 install/update/uninstall 或 rollback 生命周期能力"
+   ],
+   "prerequisites": [
+    "qoder 可执行文件存在且已登录；qoder 静态预检与 fresh 工作区布局检查通过"
+   ],
+   "inputs": [
+    "Qoder 宿主 Profile 与验证 driver 绑定"
+   ],
+   "outputs": [
+    "一次受约束真实执行的 observed、failed 或 rejected 结果（额度与错误码详情不进公共结果）"
+   ],
+   "sideEffects": [
+    "在 fresh 工作区执行一次 qoder CLI；写入私有证据与快照"
+   ],
+   "failureSemantics": [
+    "静态预检失败在 spawn 前拒绝并标记 preflight-rejected；额度用尽等执行失败标记 execution-failed"
+   ],
+   "invariants": [
+    "qoder 不获得任何生命周期 driver；九项 probe 事实仍为 unknown/driver-limited"
+   ],
+   "ownedByCaller": [
+    "Qoder 接入与真实发布门"
+   ],
+   "routeElsewhere": [
+    "Qoder 生命周期能力：外部工具或后续版本"
+   ]
+  },
   {
    "id": "foundation.contracts.quickstart-profile-candidate",
    "intent": "通过 skill-family-contracts/quickstart-profile 公开 Quickstart Profile v2 协议、按规范 $id 索引的 Schema 集合和冻结的八项历史 ID 迁移表，供锁定精确版本的接入试验使用",

package/docs/architecture/index.html

@@ -2113,7 +2113,7 @@ operation。后续晋升 stable 只提高兼容承诺，不再触发消费者源
 <li>强制机械规则：当前 9 条，预算不超过 20 条，绝对上限 30 条；CR-001 对登记表内全部 Schema 做统一编译；</li>
 <li>叶子包：3 个（skill-family-contracts、skill-family-harness-node、skill-family-engineering-kit）；</li>
 <li>Schema 校验器：Ajv 8.20.0（精确版本 pin），支持 draft-07 与 2020-12 双方言；</li>
-<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 规格版本 1.11.0；Kernel 文档仍保持 1.8.0 生命周期坐标和字节基线；</li>
+<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 规格版本 1.12.0；Kernel 文档仍保持 1.8.0 生命周期坐标和字节基线；</li>
 <li>默认运行时语言：Node；第二语言实现首版为 0。</li>
 </ul>
 <p>任何新增组件必须说明删除它会导致的两个以上真实消费者重复实现，并通过独立 fixture 验证。</p>