skill-family-engineering-kit 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.5.0 locale=en baseline=sha256:f83b9c3442e5391149531b198be25131cf45728ff945d4ffc531342996e4e6f3 -->
+## [0.5.0] - 2026-08-16
+
+This release keeps the stable four-command Kit surface unchanged and strengthens the offline-consumer verification gates to cover the complete third-party production closure of the three Foundation packages.
+
+### Added
+
+- Strengthens the offline-consumer verification gates: the third-party closure derivation in candidate-profile-bundle and tarball-source-binding tests is extended from a single-package closure to the complete production closure of the three Foundation packages (identity-deduplicated, npm: alias-aware, range-scoped override selectors, byte identity against the real store directory of pnpm), so the harness runtime-dependency review decision (FND-ADR-011) is continuously verified against the real installed bytes.
+
+### Changed
+
+- Keeps the stable scaffold, adopt-plan, projection, and check commands unchanged.
+- Carries forward the 0.4.0 adoption CLI candidate and the Quickstart Profile v2 offline bundle; no Kit surface or candidate entry point is added or removed in 0.5.0.
+
+### Upgrade Notes
+
+Version 0.5.0 is released on npm and the public mirror. The Kit public surface is unchanged from 0.4.0; pin the package to exactly 0.5.0 for the new contract-spec 1.5.0 line.
+<!-- release-skill:changelog:end version=0.5.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.4.0 locale=en baseline=sha256:b75bcca6a62cddc63d0a8d88faf268415aec803bcf00e04aacd797907d1ea6e8 -->
 ## [0.4.0] - 2026-08-16
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,25 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.5.0 locale=zh-CN baseline=sha256:bdeefb2e456f6e9d1348152b464c701e96a739e514c5a08ca3576e9982e9b7e0 -->
+## [0.5.0] - 2026-08-16
+
+本版保持 Kit 稳定四命令边界不变，并把离线消费者验证门加固为覆盖三个 Foundation 包的完整第三方生产闭包。
+
+### 新增
+
+- 加固离线消费者验证门：candidate-profile-bundle 与 tarball-source-binding 测试中的第三方闭包推导从单包闭包扩展为三个 Foundation 包的完整生产闭包（真实身份去重、npm: 别名感知、range-scoped override selector、对 pnpm 真实本地存储目录的字节身份），使 harness 运行时依赖评审决策（FND-ADR-011）持续对着真实安装字节被验证。
+
+### 变更
+
+- 稳定四命令（scaffold、adopt-plan、projection、check）保持不变。
+- 延续 0.4.0 的 adoption CLI 候选与 Quickstart Profile v2 离线 Bundle；0.5.0 未新增或移除任何 Kit 边界或候选入口。
+
+### 升级说明
+
+0.5.0 已发布到 npm 与 public 镜像仓。Kit 公开面与 0.4.0 相同；面向新的契约规格 1.5.0 线请把包精确锁定为 0.5.0。
+<!-- release-skill:changelog:end version=0.5.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.4.0 locale=zh-CN baseline=sha256:0305934fb2f833eff10b17014f551533bfca9e9e51d3820a5a1e62613a3edb6a -->
 ## [0.4.0] - 2026-08-16
 

package/README.md

@@ -4,28 +4,27 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.4.0 -->
+<!-- release-skill:release-version: 0.5.0 -->
 
 An engineering toolkit used in development and CI. There are **exactly four** top-level commands, and no fifth:
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.4.0** (2026-08-16)
+**0.5.0** (2026-08-16)
 
-This release adds the candidate adoption CLI and adoption mechanisms to the Engineering Kit while preserving the stable four-command surface and the 0.3.0 offline bundle.
+This release keeps the stable four-command Kit surface unchanged and strengthens the offline-consumer verification gates to cover the complete third-party production closure of the three Foundation packages.
 
 **Added**
 
-- Adds the adoption-cli candidate, a stdin/stdout CLI that assesses adoption bindings, legacy exit lists, and legacy references through the migration manifest, and verifies managed-bundle identity and harness surface inventory.
-- Adds the adoption-mechanisms candidate module as the shared implementation behind the adoption CLI.
+- Strengthens the offline-consumer verification gates: the third-party closure derivation in candidate-profile-bundle and tarball-source-binding tests is extended from a single-package closure to the complete production closure of the three Foundation packages (identity-deduplicated, npm: alias-aware, range-scoped override selectors, byte identity against the real store directory of pnpm), so the harness runtime-dependency review decision (FND-ADR-011) is continuously verified against the real installed bytes.
 
 **Changed**
 
 - Keeps the stable scaffold, adopt-plan, projection, and check commands unchanged.
-- Carries forward the 0.3.0 Quickstart Profile v2 offline bundle (standalone validators selected by schema $id, full provenance recording) and the candidate plugin skill naming checker.
+- Carries forward the 0.4.0 adoption CLI candidate and the Quickstart Profile v2 offline bundle; no Kit surface or candidate entry point is added or removed in 0.5.0.
 
 **Upgrade Notes**
 
-Version 0.4.0 is released on npm and the public mirror. The adoption CLI is a candidate entry point; invoke it through its explicit candidate subpath and pin the package to exactly 0.4.0.
+Version 0.5.0 is released on npm and the public mirror. The Kit public surface is unchanged from 0.4.0; pin the package to exactly 0.5.0 for the new contract-spec 1.5.0 line.
 <!-- release-skill:managed:end id=latest-release -->
 
 | Command | Purpose | Side effects |
@@ -46,7 +45,7 @@ Kit is the "engineering stage" layer, depending on the Harness and Contracts. It
 ## Installation and Minimal Example
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.4.0
+npm install --save-dev skill-family-engineering-kit@0.5.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -54,7 +53,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.4.0 -- skill-family-kit --help`.
+The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.5.0 -- skill-family-kit --help`.
 
 ### Report sub-action
 

package/README.zh-CN.md

@@ -5,28 +5,27 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.4.0 -->
+<!-- release-skill:release-version: 0.5.0 -->
 
 开发与 CI 阶段使用的工程工具包。**恰好四个**顶层命令，没有第五个：
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.4.0** (2026-08-16)
+**0.5.0** (2026-08-16)
 
-本版为 Engineering Kit 新增候选 adoption CLI 与 adoption mechanisms，同时保持稳定四命令边界与 0.3.0 的离线 Bundle 不变。
+本版保持 Kit 稳定四命令边界不变，并把离线消费者验证门加固为覆盖三个 Foundation 包的完整第三方生产闭包。
 
 **新增**
 
-- 新增 adoption-cli 候选：基于 stdin/stdout 的 CLI，通过 migration manifest 评估 adoption 绑定、遗留 exit list 与遗留引用，并校验 managed-bundle 身份与 harness 表面清单。
-- 新增 adoption-mechanisms 候选模块，作为 adoption CLI 的共享实现。
+- 加固离线消费者验证门：candidate-profile-bundle 与 tarball-source-binding 测试中的第三方闭包推导从单包闭包扩展为三个 Foundation 包的完整生产闭包（真实身份去重、npm: 别名感知、range-scoped override selector、对 pnpm 真实本地存储目录的字节身份），使 harness 运行时依赖评审决策（FND-ADR-011）持续对着真实安装字节被验证。
 
 **变更**
 
 - 稳定四命令（scaffold、adopt-plan、projection、check）保持不变。
-- 延续 0.3.0 的 Quickstart Profile v2 离线 Bundle（按 schema $id 选择的 standalone validator、完整 provenance 记录）与候选插件技能命名检查器。
+- 延续 0.4.0 的 adoption CLI 候选与 Quickstart Profile v2 离线 Bundle；0.5.0 未新增或移除任何 Kit 边界或候选入口。
 
 **升级说明**
 
-0.4.0 已发布到 npm 与 public 镜像仓。adoption CLI 是候选入口，须经显式 candidate 子路径调用，并把包精确锁定为 0.4.0。
+0.5.0 已发布到 npm 与 public 镜像仓。Kit 公开面与 0.4.0 相同；面向新的契约规格 1.5.0 线请把包精确锁定为 0.5.0。
 <!-- release-skill:managed:end id=latest-release -->
 
 | 命令 | 用途 | 副作用 |
@@ -47,7 +46,7 @@ Kit 是「工程阶段」层，依赖 Harness 与 Contracts。它只做四件事
 ## 安装和最小示例
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.4.0
+npm install --save-dev skill-family-engineering-kit@0.5.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -55,7 +54,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.4.0 -- skill-family-kit --help`。
+以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.5.0 -- skill-family-kit --help`。
 
 ### 报告子动作
 

package/docs/agents/capability-catalog.en.json

@@ -684,7 +684,7 @@
   },
   {
    "id": "foundation.harness.surface-scan",
-   "intent": "Scan a declared surface for path and content patterns according to a policy contract document; the first hit fails closed, and an invalid policy also fails closed",
+   "intent": "Scan a declared surface for path and content patterns under a policy contract; the first hit fails closed, invalid policies also fail closed. It is the execution-core generalization projection of the same mechanism family as the structured scanner, carrying no private identity or approval-list interpretation",
    "useWhen": [
     "Need to scan a set of contained files for path or content patterns under a configurable policy",
     "Need an injection self-test with byte-recoverable results to prove the scanner is stateless"
@@ -719,6 +719,79 @@
     "Business forbidden words and exemption decisions: keep with the consumer"
    ]
   },
+  {
+   "id": "foundation.harness.declared-read-surface",
+   "intent": "Assert that every node:fs named import inside the declared module set is contained in the consumer-declared read surface; the conservative syntax-surface approximation also covers fs API text in comments and strings, with no execution",
+   "useWhen": [
+    "Need a no-execution assertion that all filesystem reads come from declared readers",
+    "Need fail-closed guarantees against undeclared fs modules and write-family fs APIs"
+   ],
+   "doNotUseWhen": [
+    "Need runtime behavior analysis beyond the static import syntax surface"
+   ],
+   "prerequisites": [
+    "A declared module-to-API mapping; modules are analyzed by syntax only"
+   ],
+   "inputs": [
+    "Workspace root and declaredReaders mapping"
+   ],
+   "outputs": [
+    "A declared-read-surface-result contract object with violations from a closed rule set"
+   ],
+   "sideEffects": [
+    "Read-only syntax scan, no execution"
+   ],
+   "failureSemantics": [
+    "Violations fail closed in the result; illegal inputs throw declared-read-surface-invalid"
+   ],
+   "invariants": [
+    "Syntax-surface only, conservative approximation, no execution, no model calls, no network access",
+    "guarantees is a closed enumeration and the result carries no timestamp"
+   ],
+   "ownedByCaller": [
+    "Declared reader sets and post-violation disposition"
+   ],
+   "routeElsewhere": [
+    "Runtime behavior, dynamic imports, and write enforcement: beyond this primitive"
+   ]
+  },
+  {
+   "id": "foundation.harness.structured-scan",
+   "intent": "Scan a declared surface with structural semantics under a structured-scan-policy contract: IP-shaped candidates enter a single standard parse entry with CIDR approval, coordinates, registries, and hosts need approval, format adapters (pnpm-lockfile, tree-json) parse structurally, binary and symlink policies fail closed; the first hit fails closed, invalid policies also fail closed. It is the public, consumer-parameterized form of the same mechanism family as scanSurface, with no private identity, path, or approval-list interpretation",
+   "useWhen": [
+    "Need to scan lockfiles, JSON trees, or text for addresses, coordinates, registries, and hosts under consumer-declared approvals",
+    "Need deterministic structure-aware scanning with no position-level exemptions"
+   ],
+   "doNotUseWhen": [
+    "Need workspace-private facts interpreted (managed-path interpretation stays with the consumer)",
+    "Need credential-pattern or lockfile-integrity-shape rules (outside the closed vocabulary)"
+   ],
+   "prerequisites": [
+    "A structured-scan-policy contract document with valid CIDRs and compilable patterns"
+   ],
+   "inputs": [
+    "Scan root, relative-path list, and structured-scan-policy document"
+   ],
+   "outputs": [
+    "A { scanned, bytes, policy } result object"
+   ],
+   "sideEffects": [
+    "Read-only except one temporary pnpm-lock.yaml copy under the OS temp directory, removed afterwards"
+   ],
+   "failureSemantics": [
+    "Hits throw structured-scan-violation with details.rule from the closed nine-rule vocabulary; invalid policies throw structured-scan-invalid"
+   ],
+   "invariants": [
+    "The closed rule vocabulary is never silently skipped; unparseable IP-shaped tokens fail closed",
+    "Symlinks are never followed; parse failures fail closed"
+   ],
+   "ownedByCaller": [
+    "Approval lists, adapter selection, and post-hit disposition"
+   ],
+   "routeElsewhere": [
+    "Workspace layout facts, lockfile integrity guarantees, and credential patterns: keep with the consumer"
+   ]
+  },
   {
    "id": "foundation.harness.token-estimation",
    "intent": "Provide a deterministic upper-bound estimate for text: a pure UTF-8 byte-count function with no model, network, or tokenizer dependency",

package/docs/agents/capability-catalog.json

@@ -440,6 +440,45 @@
     "packages/skill-family-harness-node/test/surface-scan.test.mjs"
    ]
   },
+  {
+   "id": "foundation.harness.declared-read-surface",
+   "package": "skill-family-harness-node",
+   "layer": "harness",
+   "since": "0.5.0",
+   "stability": "stable",
+   "entrypoints": [
+    "assertDeclaredReadSurface (packages/skill-family-harness-node/src/declared-read-surface.mjs)"
+   ],
+   "sourceRefs": [
+    "packages/skill-family-harness-node/src/declared-read-surface.mjs"
+   ],
+   "positiveTestRefs": [
+    "packages/skill-family-harness-node/test/declared-read-surface.test.mjs"
+   ],
+   "negativeTestRefs": [
+    "packages/skill-family-harness-node/test/declared-read-surface.test.mjs"
+   ]
+  },
+  {
+   "id": "foundation.harness.structured-scan",
+   "package": "skill-family-harness-node",
+   "layer": "harness",
+   "since": "0.5.0",
+   "stability": "stable",
+   "entrypoints": [
+    "scanSurfaceStructured (packages/skill-family-harness-node/src/structured-scan.mjs)",
+    "STRUCTURED_SCAN_RULES (packages/skill-family-harness-node/src/structured-scan.mjs)"
+   ],
+   "sourceRefs": [
+    "packages/skill-family-harness-node/src/structured-scan.mjs"
+   ],
+   "positiveTestRefs": [
+    "packages/skill-family-harness-node/test/structured-scan.test.mjs"
+   ],
+   "negativeTestRefs": [
+    "packages/skill-family-harness-node/test/structured-scan.test.mjs"
+   ]
+  },
   {
    "id": "foundation.harness.token-estimation",
    "package": "skill-family-harness-node",

package/docs/agents/capability-catalog.zh-CN.json

@@ -684,7 +684,7 @@
   },
   {
    "id": "foundation.harness.surface-scan",
-   "intent": "按策略契约文档对声明表面做路径与内容模式扫描，首个命中即失败关闭，策略非法也失败关闭",
+   "intent": "按策略契约文档对声明表面做路径与内容模式扫描，首个命中即失败关闭，策略非法同样失败关闭。它是与结构化扫描器同一机制族的执行内核通用化投影，不携带任何私有身份或批准清单解释",
    "useWhen": [
     "需要按可配置策略扫描一组受收容文件的路径或内容模式",
     "需要注入后字节可恢复的自测证明扫描器无状态"
@@ -719,6 +719,79 @@
     "业务禁词与豁免判定：留在消费者"
    ]
   },
+  {
+   "id": "foundation.harness.declared-read-surface",
+   "intent": "断言声明模块集内的每个 node:fs 具名导入都落在消费者声明的读取表面内；保守的语法面近似同样覆盖注释与字符串中的 fs API 文本，且不执行任何代码",
+   "useWhen": [
+    "需要在不执行的前提下断言所有文件系统读取来自已声明读取器",
+    "需要对未声明 fs 模块与写族 fs API 的失败关闭保证"
+   ],
+   "doNotUseWhen": [
+    "需要超出静态导入语法面的运行时行为分析"
+   ],
+   "prerequisites": [
+    "一份模块到 API 的声明映射；模块仅按语法分析"
+   ],
+   "inputs": [
+    "工作区根与 declaredReaders 映射"
+   ],
+   "outputs": [
+    "declared-read-surface-result 契约对象，违规项来自闭集规则集"
+   ],
+   "sideEffects": [
+    "只读语法扫描，不执行代码"
+   ],
+   "failureSemantics": [
+    "违规在结果中失败关闭；非法输入抛出 declared-read-surface-invalid"
+   ],
+   "invariants": [
+    "仅语法面、保守近似、不执行、无模型调用、无网络访问",
+    "guarantees 是闭集枚举，结果不携带时间戳"
+   ],
+   "ownedByCaller": [
+    "声明读取器集合与违规后的处置"
+   ],
+   "routeElsewhere": [
+    "运行时行为、动态导入与写强制：超出本原语范围"
+   ]
+  },
+  {
+   "id": "foundation.harness.structured-scan",
+   "intent": "按 structured-scan-policy 契约对声明表面做结构化语义扫描：IP 形候选统一进入单一标准解析入口并按 CIDR 批准，坐标、注册表与主机需批准，格式适配器（pnpm-lockfile、tree-json）结构化解析，二进制与符号链接策略失败关闭；首个命中即失败关闭，策略非法同样失败关闭。它与 scanSurface 属同一机制族，是公开、消费者参数化的形态，自身不解释任何私有身份、路径或批准清单",
+   "useWhen": [
+    "需要按消费者声明的批准项扫描锁文件、JSON 树或文本中的地址、坐标、注册表与主机",
+    "需要无位置级豁免的确定性结构化扫描"
+   ],
+   "doNotUseWhen": [
+    "需要机制解释工作区私有事实（托管路径解释留在消费者侧）",
+    "需要凭据模式或锁文件完整性形状规则（不在闭集词汇表内）"
+   ],
+   "prerequisites": [
+    "一份 CIDR 合法、模式可编译的 structured-scan-policy 契约文档"
+   ],
+   "inputs": [
+    "扫描根、相对路径清单与 structured-scan-policy 文档"
+   ],
+   "outputs": [
+    "{ scanned, bytes, policy } 结果对象"
+   ],
+   "sideEffects": [
+    "只读；唯一的写入是 OS 临时目录下的一份 pnpm-lock.yaml 临时副本，用后即删"
+   ],
+   "failureSemantics": [
+    "命中抛出 structured-scan-violation，details.rule 来自闭集九规则词汇表；策略非法抛出 structured-scan-invalid"
+   ],
+   "invariants": [
+    "闭集规则词汇表永不静默跳过；不可解析的 IP 形 token 失败关闭",
+    "永不跟随符号链接；解析失败失败关闭"
+   ],
+   "ownedByCaller": [
+    "批准清单、适配器选择与命中后的处置"
+   ],
+   "routeElsewhere": [
+    "工作区布局事实、锁文件完整性保证与凭据模式：留在消费者侧"
+   ]
+  },
   {
    "id": "foundation.harness.token-estimation",
    "intent": "对文本内容给出确定性上界估算：UTF-8 字节数纯函数，无模型、无网络、无 tokenizer 依赖",

package/docs/architecture/index.html

@@ -1972,7 +1972,7 @@ Contracts（结构、协议、错误码、协议名登记）
 <tbody>
 <tr>
 <td>Contracts</td>
-<td>结构、协议、错误码、协议名登记；20 类顶层对象；9 条 mandatory rule</td>
+<td>结构、协议、错误码、协议名登记；22 类顶层对象；9 条 mandatory rule</td>
 <td>业务字段语义、领域审计、远端写入、模型生成</td>
 </tr>
 <tr>
@@ -2077,12 +2077,12 @@ Contracts（结构、协议、错误码、协议名登记）
 <p>三包结构保持、不拆第四包（FND-ADR-007）；制品治理采用 artifact-graph CLI 与版本锁（FND-ADR-006）。</p>
 <h2 id="首版预算">首版预算<a class="headerlink" href="#首版预算" title="Permanent link">&para;</a></h2>
 <ul>
-<li>顶层 Contracts 对象：20 类（完整清单以 <code>packages/skill-family-contracts/src/registry.json</code> 为唯一真源）：project-manifest、profile-descriptor、managed-file-lock、operation-request、operation-result、migration-manifest、adapter-source、report-model、report-binding、host-descriptor、host-registry、host-capability-fact、host-probe-result、adapter-build-manifest、host-operation-plan、host-operation-receipt、state-event-envelope、state-snapshot-metadata、token-estimate-result、surface-scan-policy；</li>
+<li>顶层 Contracts 对象：22 类（完整清单以 <code>packages/skill-family-contracts/src/registry.json</code> 为唯一真源）：project-manifest、profile-descriptor、managed-file-lock、operation-request、operation-result、migration-manifest、adapter-source、report-model、report-binding、host-descriptor、host-registry、host-capability-fact、host-probe-result、adapter-build-manifest、host-operation-plan、host-operation-receipt、state-event-envelope、state-snapshot-metadata、token-estimate-result、surface-scan-policy、declared-read-surface-result、structured-scan-policy（FND-ADR-010/011）；</li>
 <li>Kit 顶层命令：4 个（scaffold、adopt-plan、projection、check）；</li>
 <li>强制机械规则：当前 9 条，预算不超过 20 条，绝对上限 30 条；CR-001 对登记表内全部 Schema 做统一编译；</li>
 <li>叶子包：3 个（skill-family-contracts、skill-family-harness-node、skill-family-engineering-kit）；</li>
 <li>Schema 校验器：Ajv 8.20.0（精确版本 pin），支持 draft-07 与 2020-12 双方言；</li>
-<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 版本 1.4.0；</li>
+<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 版本 1.5.0；</li>
 <li>默认运行时语言：Node；第二语言实现首版为 0。</li>
 </ul>
 <p>任何新增组件必须说明删除它会导致的两个以上真实消费者重复实现，并通过独立 fixture 验证。</p>

package/docs/integration/audit/index.html

@@ -1796,7 +1796,7 @@
   isolation-and-lockfile.md     隔离安装与包锁验证设计
   independence.md               独立性声明与机械证明
   schemas/audit-evidence.schema.json   证据文档的 JSON Schema（审计自有）
-  baseline/contracts-1.4.0.pin.json    Contracts 1.4.0 现行基线 pin（摘要+事实）
+  baseline/contracts-1.5.0.pin.json    Contracts 1.5.0 现行基线 pin（摘要+事实）
   baseline/contracts-1.1.1.pin.json    Contracts 1.1.1 只读兼容存档 pin
   baseline/contracts-1.1.0.pin.json    Contracts 1.1.0 只读兼容存档 pin
   baseline/contracts-1.0.0.pin.json    Contracts 1.0.0 只读兼容存档 pin

package/docs/integration/audit/version-compatibility/index.html

@@ -1769,7 +1769,7 @@
 <tbody>
 <tr>
 <td><code>contractsVersion</code></td>
-<td>Contracts 冻结版本（当前 <code>1.4.0</code>）</td>
+<td>Contracts 冻结版本（当前 <code>1.5.0</code>）</td>
 <td>机器契约内容的版本</td>
 </tr>
 <tr>
@@ -1784,7 +1784,7 @@
 </tr>
 </tbody>
 </table>
-<p>三者都由 <code>describeAuditSurface()</code> 一次性给出，审计侧把它们与基线 pin（当前为 <code>baseline/contracts-1.4.0.pin.json</code>）比对。</p>
+<p>三者都由 <code>describeAuditSurface()</code> 一次性给出，审计侧把它们与基线 pin（当前为 <code>baseline/contracts-1.5.0.pin.json</code>）比对。</p>
 <h2 id="兼容规则">兼容规则<a class="headerlink" href="#兼容规则" title="Permanent link">&para;</a></h2>
 <p>一个被消费的 Contracts 包与某个基线 pin <strong>兼容</strong>，当且仅当同时满足：</p>
 <ol>
@@ -1839,7 +1839,8 @@
 <li><strong>Contracts 1.1.1（2026-08-05）</strong>：仅描述补丁（migration-manifest schema 三处 description 改写为稳定产品语义；无任何校验关键字、公开 API、错误码、规则或引擎参数变化）。按本生命周期新增 <code>contracts-1.1.1.pin.json</code> 为现行基线，<code>contracts-1.1.0.pin.json</code> 转为只读兼容存档。1.1.1 pin 相对 1.1.0 pin 的准确事实：<strong>校验语义和事实清单不变</strong>（<code>facts</code> 逐项一致）；四个 Contracts 文档（registry、error-codes、rules、kernel-protocol）因内嵌 <code>contractsVersion</code> 从 <code>1.1.0</code> 更新到 <code>1.1.1</code> 而改变摘要；migration-manifest Schema 因上述三处 description 更新而改变摘要；其余五个 Schema（project-manifest、profile-descriptor、managed-file-lock、operation-request、operation-result）摘要不变。<code>proof-independence.mjs</code> 的 P5 强制这套如实声明的 provenance 词汇（pin：<code>product-compatibility-fixture</code>；变异夹具：<code>product-fixture</code>）；</li>
 <li><strong>Contracts 1.2.0（2026-08-09）</strong>：报告能力线增量，不是描述补丁：新增 <code>report-model</code>、<code>report-binding</code> 两个顶层契约和 SFC3001～SFC3003 报告错误码，改变了公开机器合同与审计事实。</li>
 <li><strong>Contracts 1.3.0（2026-08-09）</strong>：宿主接入能力线增量，不是描述补丁：新增 <code>host-descriptor</code>、<code>host-capability-fact</code>、<code>adapter-build-manifest</code>、<code>host-operation-plan</code>、<code>host-operation-receipt</code> 五个顶层契约，改变了公开机器合同与审计事实。</li>
-<li><strong>Contracts 1.4.0（2026-08-09）</strong>：持久状态能力线增量，不是描述补丁：新增 <code>state-event-envelope</code>、<code>state-snapshot-metadata</code> 两个顶层契约，改变了公开机器合同与审计事实。<code>contracts-1.4.0.pin.json</code> 是当前现行基线；1.1.x 及更早 pin 保留为只读兼容存档。该 pin 的摘要与事实均从当前 <code>describeAuditSurface()/digestAuditSurface()</code> 机械投影，provenance 仍为 <code>product-compatibility-fixture</code>。</li>
+<li><strong>Contracts 1.4.0（2026-08-09）</strong>：持久状态能力线增量，不是描述补丁：新增 <code>state-event-envelope</code>、<code>state-snapshot-metadata</code> 两个顶层契约，改变了公开机器合同与审计事实。</li>
+<li><strong>Contracts 1.5.0（2026-08-16）</strong>：FND-ADR-010/011 能力线增量，不是描述补丁：新增 <code>declared-read-surface-result</code>、<code>structured-scan-policy</code> 两个顶层契约（顶层对象集合 20 → 22），改变了公开机器合同与审计事实。<code>contracts-1.5.0.pin.json</code> 是当前现行基线；1.4.0 及更早 pin 保留为只读兼容存档。该 pin 的摘要与事实均从当前 <code>describeAuditSurface()/digestAuditSurface()</code> 机械投影，provenance 仍为 <code>product-compatibility-fixture</code>。</li>
 <li>审计运行时先做包锁验证（见 isolation-and-lockfile.md），再做变异重放；pin 不匹配时，变异重放结果不得被采信。</li>
 </ul>
 

package/docs/public/status/index.html

@@ -1792,17 +1792,17 @@
 <tbody>
 <tr>
 <td><code>skill-family-contracts</code></td>
-<td>0.4.0</td>
+<td>0.5.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-contracts">ifoohoo/skill-family-contracts</a></td>
 </tr>
 <tr>
 <td><code>skill-family-harness-node</code></td>
-<td>0.4.0</td>
+<td>0.5.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-harness-node">ifoohoo/skill-family-harness-node</a></td>
 </tr>
 <tr>
 <td><code>skill-family-engineering-kit</code></td>
-<td>0.4.0</td>
+<td>0.5.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-engineering-kit">ifoohoo/skill-family-engineering-kit</a></td>
 </tr>
 </tbody>