skill-family-engineering-kit 0.8.3 → 0.9.0

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.9.0 locale=en baseline=sha256:6419bbdc8d469e6dd7f9fda5995e5465cc6bf98724371f9f4aa9293a7e0d9f14 -->
+## [0.9.0] - 2026-08-24
+
+Engineering Kit 0.9.0 projects the stable filesystem schemas, bound-read Harness closure, and candidate ordered batch validation into the existing Quickstart Bundle.
+
+### Added
+
+- Projects the three stable filesystem schemas and two candidate batch schemas from Contracts authorities.
+- Projects the stable bound-read entry and its exact native prebuild closure without adding a Kit command.
+
+### Changed
+
+- Keeps the four top-level Kit commands and Profile SPI candidate boundary unchanged.
+
+### Upgrade Notes
+
+Pin all three Foundation packages to exactly 0.9.0 and rebuild managed Bundles. Batch validation is available only through the existing candidate Bundle and mechanisms CLI.
+<!-- release-skill:changelog:end version=0.9.0 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.8.4 locale=en baseline=sha256:0f6ad4e641ae6ef85ea323e458aa6263aa6d87280e704ac1324742f83016d779 -->
+## [0.8.4] - 2026-08-24
+
+Lockstep Foundation 0.8.4 update documents validated external source authority without changing Kit commands or Profile SPI.
+
+### Changed
+
+- Moves the package version to 0.8.4 together with Contracts and Harness.
+- Documents that consumers validate a source-authority receipt through Contracts before passing the returned coordinates through the existing sourceRepository and sourceBaseCommit fields.
+- Keeps the four stable top-level Kit commands, builder, Profile SPI, and public exports unchanged.
+
+### Upgrade Notes
+
+Pin all three Foundation packages to exactly 0.8.4. A provider Profile descriptor upgrading from 0.8.3 and Contracts 1.7.0 must mechanically update its base.contractsVersion field to 1.8.0. Existing functions and Schema shapes, Profile SPI v3, and the four Kit commands require no migration; source-authority consumers only add the Contracts validation step before invoking the existing builder surface.
+<!-- release-skill:changelog:end version=0.8.4 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.8.3 locale=en baseline=sha256:93875982c9f941309d63e40d5758b0fe7b20d74242f71934c3fd3cd90fe6ba52 -->
 ## [0.8.3] - 2026-08-23
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,42 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.9.0 locale=zh-CN baseline=sha256:c84db7b53f562cbdad947ccf8fcc23209f18137100270b2691bab7d9a7ad623c -->
+## [0.9.0] - 2026-08-24
+
+Engineering Kit 0.9.0 将稳定文件系统 Schema、绑定读取 Harness 闭包与有序批量校验 candidate 投影到既有 Quickstart Bundle。
+
+### 新增
+
+- 从 Contracts 权威源投影三个稳定文件系统 Schema 与两个批量校验 candidate Schema。
+- 投影稳定绑定读取入口及其精确原生预构建闭包，不新增 Kit 命令。
+
+### 变更
+
+- 四个顶层 Kit 命令与 Profile SPI 的 candidate 边界保持不变。
+
+### 升级说明
+
+三个 Foundation 包必须精确锁定 0.9.0 并重新构建 managed Bundle；批量校验只能通过既有 candidate Bundle 与 mechanisms CLI 使用。
+<!-- release-skill:changelog:end version=0.9.0 locale=zh-CN -->
+
+
+<!-- release-skill:changelog:start version=0.8.4 locale=zh-CN baseline=sha256:38a973bb735c925e8453656ce24a11173b530c6376609d68dfb850d9029daa21 -->
+## [0.8.4] - 2026-08-24
+
+随 Foundation 0.8.4 锁步升版，补充外置 source authority 校验用法；Kit 命令与 Profile SPI 不变。
+
+### 变更
+
+- 包版本与 Contracts、Harness 一同升至 0.8.4。
+- 说明消费者先经 Contracts 校验 source-authority receipt，再把返回坐标传入既有 sourceRepository 与 sourceBaseCommit 字段。
+- 四个稳定顶层命令、builder、Profile SPI 与公共导出保持不变。
+
+### 升级说明
+
+消费者必须把三个 Foundation 包精确锁定到 0.8.4。provider Profile descriptor 从 0.8.3 与 Contracts 1.7.0 升级时，必须把自身的 base.contractsVersion 字段机械更新为 1.8.0。既有函数与 Schema 形状、Profile SPI v3、Kit 四命令均不需要迁移；需要 source authority 的消费者只增加调用 builder 前的 Contracts 校验步骤。
+<!-- release-skill:changelog:end version=0.8.4 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.8.3 locale=zh-CN baseline=sha256:3315d4594a7e28926b54dae3057c35d192b1e9293d07d22fd8856f44da2a7d80 -->
 ## [0.8.3] - 2026-08-23
 

package/README.md

@@ -4,23 +4,27 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.8.3 -->
+<!-- release-skill:release-version: 0.9.0 -->
 
 An engineering toolkit used in development and CI. There are **exactly four** top-level commands, and no fifth:
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.8.3** (2026-08-23)
+**0.9.0** (2026-08-24)
 
-Lockstep patch release whose managed Bundle carries the bounded Harness containment fix.
+Engineering Kit 0.9.0 projects the stable filesystem schemas, bound-read Harness closure, and candidate ordered batch validation into the existing Quickstart Bundle.
+
+**Added**
+
+- Projects the three stable filesystem schemas and two candidate batch schemas from Contracts authorities.
+- Projects the stable bound-read entry and its exact native prebuild closure without adding a Kit command.
 
 **Changed**
 
-- Moves the package version to 0.8.3 together with Contracts and Harness; the four stable top-level Kit commands and Profile SPI remain unchanged.
-- Rebuilding a managed Bundle projects the updated Harness paths module, including its single ENOENT anchor recomputation and unchanged fail-closed boundaries.
+- Keeps the four top-level Kit commands and Profile SPI candidate boundary unchanged.
 
 **Upgrade Notes**
 
-Consumers must pin Contracts, Harness, and Engineering Kit to exactly 0.8.3 and rebuild the managed Bundle. No Kit API or Profile SPI migration is required.
+Pin all three Foundation packages to exactly 0.9.0 and rebuild managed Bundles. Batch validation is available only through the existing candidate Bundle and mechanisms CLI.
 <!-- release-skill:managed:end id=latest-release -->
 
 | Command | Purpose | Side effects |
@@ -41,7 +45,7 @@ Kit is the "engineering stage" layer, depending on the Harness and Contracts. It
 ## Installation and Minimal Example
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.8.3
+npm install --save-dev skill-family-engineering-kit@0.9.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -49,7 +53,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.8.3 -- skill-family-kit --help`.
+The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.9.0 -- skill-family-kit --help`.
 
 ### Public Profile SPI
 
@@ -59,6 +63,8 @@ The package carries three SPI JSON resources and the Contracts canonical `profil
 
 `verifyProfile({ profileRoot })` is read-only and data-only for Profile descriptors. `verifyProjectProfile({ projectRoot, profileRelPath? })` is the corresponding entry for a project root declaration. Both refuse invalid input with stable result codes, never execute Profile-provided files, and leave Profile domain meaning to the caller.
 
+When a provider Profile descriptor moves from Foundation 0.8.4 and Contracts 1.8.0 to Foundation 0.9.0, update its `base.contractsVersion` field mechanically to `1.9.0`. The four Kit commands and Profile SPI retain their existing shapes.
+
 ### Report sub-action
 
 ```sh
@@ -73,13 +79,22 @@ The caller must first construct a valid report model; Kit does not derive facts
 Use the candidate subpath to build a deterministic Quickstart Profile v2 projection from explicit consumer schemas and frozen source identity:
 
 ```js
+import { parseSourceAuthorityReceipt } from "skill-family-contracts";
 import {
   buildQuickstartProfileProjection,
   QUICKSTART_PROFILE_TARGET_PREFIX,
 } from "skill-family-engineering-kit/candidate/quickstart-profile";
+
+const authority = parseSourceAuthorityReceipt(receipt, actualSubjects);
+if (!authority.valid) throw new Error(authority.errorCode);
+
+const projection = await buildQuickstartProfileProjection({
+  ...projectionInputs,
+  ...authority.data,
+});
 ```
 
-The generated Bundle selects standalone validators by schema `$id` and runs offline without Foundation packages, `node_modules`, or runtime Ajv. Its provenance binds Foundation sources, consumer schemas, payload bytes, tool versions, and the licenses of code that actually enters the Bundle.
+The caller obtains `receipt` and `actualSubjects` outside Kit. Contracts validates their exact binding before the existing builder receives `sourceRepository` and `sourceBaseCommit`; Kit does not parse release plans or discover source authority. The generated Bundle selects standalone validators by schema `$id` and runs offline without Foundation packages, `node_modules`, or runtime Ajv. Its provenance binds Foundation sources, consumer schemas, payload bytes, tool versions, and the licenses of code that actually enters the Bundle.
 
 Pass the returned `manifest` to the stable `runProjection` API; the helper does not write files or add a fifth top-level command. This subpath is public but **not stable**. Pin exactly `0.4.0` for v2; integrations that still require the v1 dependency-closure Bundle must stay pinned to exactly `0.2.1`.
 

package/README.zh-CN.md

@@ -5,23 +5,27 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.8.3 -->
+<!-- release-skill:release-version: 0.9.0 -->
 
 开发与 CI 阶段使用的工程工具包。**恰好四个**顶层命令，没有第五个：
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.8.3** (2026-08-23)
+**0.9.0** (2026-08-24)
 
-随 Foundation 0.8.3 锁步升版；受管 Bundle 携带 Harness 的有界路径收容修复。
+Engineering Kit 0.9.0 将稳定文件系统 Schema、绑定读取 Harness 闭包与有序批量校验 candidate 投影到既有 Quickstart Bundle。
+
+**新增**
+
+- 从 Contracts 权威源投影三个稳定文件系统 Schema 与两个批量校验 candidate Schema。
+- 投影稳定绑定读取入口及其精确原生预构建闭包，不新增 Kit 命令。
 
 **变更**
 
-- 包版本与 Contracts、Harness 一同升至 0.8.3；Kit 的四个稳定顶层命令与 Profile SPI 均保持不变。
-- 重建受管 Bundle 会投影更新后的 Harness paths 模块，包括仅一次 ENOENT 锚点重求和保持不变的失败关闭边界。
+- 四个顶层 Kit 命令与 Profile SPI 的 candidate 边界保持不变。
 
 **升级说明**
 
-消费者必须把 Contracts、Harness 和 Engineering Kit 精确锁定到 0.8.3，再重建受管 Bundle；无需迁移 Kit API 或 Profile SPI。
+三个 Foundation 包必须精确锁定 0.9.0 并重新构建 managed Bundle；批量校验只能通过既有 candidate Bundle 与 mechanisms CLI 使用。
 <!-- release-skill:managed:end id=latest-release -->
 
 | 命令 | 用途 | 副作用 |
@@ -42,7 +46,7 @@ Kit 是「工程阶段」层，依赖 Harness 与 Contracts。它只做四件事
 ## 安装和最小示例
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.8.3
+npm install --save-dev skill-family-engineering-kit@0.9.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -50,7 +54,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.8.3 -- skill-family-kit --help`。
+以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.9.0 -- skill-family-kit --help`。
 
 ### 公共 Profile SPI
 
@@ -60,6 +64,8 @@ npm exec -- skill-family-kit check --root <repo>
 
 `verifyProfile({ profileRoot })` 只读处理 Profile descriptor；项目根声明使用对应的 `verifyProjectProfile({ projectRoot, profileRelPath? })`。两个入口遇到无效输入都以稳定结果码失败关闭，不会执行 Profile 提供的文件；Profile 的领域含义仍由调用方负责。
 
+provider Profile descriptor 从 Foundation 0.8.4 与 Contracts 1.8.0 升级到 Foundation 0.9.0 时，须把自身的 `base.contractsVersion` 字段更新为 `1.9.0`。Kit 四个顶层命令与 Profile SPI 的形状保持不变。
+
 ### 报告子动作
 
 ```sh
@@ -74,13 +80,22 @@ npm exec -- skill-family-kit check report --root <repo> --report <report.md> --m
 需要从显式消费者 Schema 与冻结来源身份生成确定性的 Quickstart Profile v2 投影时，使用 candidate 子路径：
 
 ```js
+import { parseSourceAuthorityReceipt } from "skill-family-contracts";
 import {
   buildQuickstartProfileProjection,
   QUICKSTART_PROFILE_TARGET_PREFIX,
 } from "skill-family-engineering-kit/candidate/quickstart-profile";
+
+const authority = parseSourceAuthorityReceipt(receipt, actualSubjects);
+if (!authority.valid) throw new Error(authority.errorCode);
+
+const projection = await buildQuickstartProfileProjection({
+  ...projectionInputs,
+  ...authority.data,
+});
 ```
 
-生成的 Bundle 按 Schema `$id` 选择 standalone validator，离线运行时不依赖 Foundation 包、`node_modules` 或 Ajv。provenance 绑定 Foundation 来源、消费者 Schema、payload 字节、工具版本，以及实际进入 Bundle 的代码许可证。
+`receipt` 与 `actualSubjects` 由调用方在 Kit 外取得。Contracts 先精确核对两者，既有 builder 再接收返回的 `sourceRepository` 与 `sourceBaseCommit`；Kit 不解析发布计划，也不发现来源权威。生成的 Bundle 按 Schema `$id` 选择 standalone validator，离线运行时不依赖 Foundation 包、`node_modules` 或 Ajv。provenance 绑定 Foundation 来源、消费者 Schema、payload 字节、工具版本，以及实际进入 Bundle 的代码许可证。
 
 以上辅助函数不写文件，也不增加第五个顶层命令。调用方需要把返回的 `manifest` 交给稳定的 `runProjection` API。该子路径公开但**不稳定**；使用 v2 时应精确锁定 `0.4.0`，仍依赖 v1 依赖闭包 Bundle 的接入必须继续精确锁定 `0.2.1`。
 

package/candidate/profile-bundle.mjs

@@ -69,6 +69,14 @@ const FOUNDATION_SCHEMA_FILES = Object.freeze([
   ["harness-surface-inventory.schema.json", "schemas/foundation/harness-surface-inventory.schema.json"],
 ]);
 
+const ADDITIONAL_FOUNDATION_SCHEMA_FILES = Object.freeze([
+  ["filesystem-root-binding.schema.json", "src/schemas/filesystem-root-binding.schema.json", "schemas/foundation/filesystem-root-binding.schema.json"],
+  ["fixed-set-publication-manifest.schema.json", "src/schemas/fixed-set-publication-manifest.schema.json", "schemas/foundation/fixed-set-publication-manifest.schema.json"],
+  ["fixed-set-publication-receipt.schema.json", "src/schemas/fixed-set-publication-receipt.schema.json", "schemas/foundation/fixed-set-publication-receipt.schema.json"],
+  ["schema-validation-batch-request.schema.json", "candidate/foundation-mechanisms/schema-validation-batch-request.schema.json", "schemas/foundation/schema-validation-batch-request.schema.json"],
+  ["schema-validation-batch-result.schema.json", "candidate/foundation-mechanisms/schema-validation-batch-result.schema.json", "schemas/foundation/schema-validation-batch-result.schema.json"],
+]);
+
 const HARNESS_IMPORT_MAP = new Map([
   ["skill-family-contracts", "../contracts/index.mjs"],
   ["skill-family-contracts/candidate/quickstart-profile", "../contracts-candidate/index.mjs"],
@@ -76,6 +84,7 @@ const HARNESS_IMPORT_MAP = new Map([
   ["../src/errors.mjs", "./errors.mjs"],
   ["../src/paths.mjs", "./paths.mjs"],
   ["../src/strict-read.mjs", "./strict-read.mjs"],
+  ["../src/bound-read.mjs", "./bound-read.mjs"],
 ]);
 
 const HARNESS_STRICT_READ_IMPORT_MAP = new Map([
@@ -124,6 +133,18 @@ const FIXED_SET_CANDIDATE_FILES = Object.freeze([
   "prebuilds/linux-x64-gnu/rename_directory_no_replace.linux-x64-gnu.node",
 ]);
 const FIXED_SET_BINARY_PREFIX = "prebuilds/";
+const STABLE_BOUND_READ_NATIVE_FILES = Object.freeze([
+  "prebuild-manifest.json",
+  "prebuilds/darwin-arm64/bound_read.darwin-arm64.node",
+  "prebuilds/darwin-x64/bound_read.darwin-x64.node",
+  "prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node",
+  "prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node",
+]);
+const STABLE_BOUND_READ_METADATA_FILES = Object.freeze([
+  "NOTICE",
+  "prebuild-sbom.json",
+  "prebuild-release-receipt.json",
+]);
 
 // These fragments are the exact case-sensitive words rejected by the
 // bundle-wide byte scan. Caller-provided source identities enter provenance
@@ -958,6 +979,13 @@ function projectContractsCandidateIndex(sourceText) {
       `schema load path ${fileName}`,
     );
   }
+  for (const [fileName] of ADDITIONAL_FOUNDATION_SCHEMA_FILES.filter(([name]) => name.startsWith("schema-validation-batch-"))) {
+    applyOnce(
+      `load(new URL("../foundation-mechanisms/${fileName}", import.meta.url))`,
+      `load(new URL("../../schemas/foundation/${fileName}", import.meta.url))`,
+      `schema load path ${fileName}`,
+    );
+  }
 
   const getCollectionMarker = "function getCollection(";
   const getCollectionHits = projected.split(getCollectionMarker).length - 1;
@@ -1068,12 +1096,15 @@ function runnerSource() {
     'export * from "./runtime/harness/quickstart-profile.mjs";',
     'export { validateQuickstartProfileDocument } from "./runtime/contracts-candidate/index.mjs";',
     'export { validateBySchemaId } from "./validators.mjs";',
+    'export { createFilesystemRootBinding, readFileBound } from "./runtime/harness/bound-read.mjs";',
+    'export { createFixedSetPublicationManifest, publishFixedSet } from "./runtime/harness/fixed-set-publication.mjs";',
     'export { publishFileExclusive, publishFileOrReplace, replaceFileAtomic } from "./runtime/harness/atomic.mjs";',
     'export { acquireFilesystemLock, inspectFilesystemLock, releaseFilesystemLock, recoverFilesystemLock } from "./runtime/harness/token-lock.mjs";',
     'import { invokeFoundationMechanism as invokeHarnessMechanism } from "./runtime/harness/quickstart-profile.mjs";',
     'import { validateBySchemaId } from "./validators.mjs";',
+    'import { listValidatableSchemaIds } from "./validators.mjs";',
     'export function invokeFoundationMechanism(request) {',
-    '  return invokeHarnessMechanism(request, { validateBySchemaId });',
+    '  return invokeHarnessMechanism(request, { validateBySchemaId, listValidatableSchemaIds });',
     '}',
     "",
   ].join("\n");
@@ -1176,6 +1207,10 @@ export async function buildQuickstartProfileProjection({
       `candidate/quickstart-profile/${fileName}`,
     );
   }
+  const additionalSchemaTexts = {};
+  for (const [fileName, sourcePath] of ADDITIONAL_FOUNDATION_SCHEMA_FILES) {
+    additionalSchemaTexts[fileName] = await readSourceText(contractsRoot, sourcePath);
+  }
   sources.harnessIndex = await readSourceText(harnessRoot, "src/index.mjs");
   sources.harnessCandidate = await readSourceText(harnessRoot, "candidate/quickstart-profile.mjs");
   sources.harnessMechanismsCli = await readSourceText(harnessRoot, "candidate/mechanisms-cli.mjs");
@@ -1185,6 +1220,22 @@ export async function buildQuickstartProfileProjection({
   sources.harnessStrictRead = await readSourceText(harnessRoot, "src/strict-read.mjs");
   sources.harnessAtomic = await readSourceText(harnessRoot, "src/atomic.mjs");
   sources.harnessTokenLock = await readSourceText(harnessRoot, "src/token-lock.mjs");
+  sources.harnessBoundRead = await readSourceText(harnessRoot, "src/bound-read.mjs");
+  sources.harnessFixedSetPublication = await readSourceText(harnessRoot, "src/fixed-set-publication.mjs");
+  sources.harnessFixedSetPublicationLoader = await readSourceText(harnessRoot, "src/fixed-set-publication-loader.mjs");
+  sources.harnessBoundReadLoader = await readSourceText(harnessRoot, "src/native/loader.mjs");
+  sources.harnessBoundReadManifest = await readSourceText(harnessRoot, "src/native/prebuild-manifest.json");
+  sources.harnessBoundReadMetadata = {};
+  for (const relative of STABLE_BOUND_READ_METADATA_FILES) {
+    sources.harnessBoundReadMetadata[relative] = await readSourceText(harnessRoot, `src/native/${relative}`);
+  }
+  const harnessBoundReadBinaries = {};
+  for (const relative of STABLE_BOUND_READ_NATIVE_FILES.slice(1)) {
+    harnessBoundReadBinaries[relative] = await readCanonicalRegularFile(
+      path.join(harnessRoot, "src/native", relative),
+      `stable bound-read prebuild ${relative}`,
+    );
+  }
   // The package manifests are recorded as complete original bytes below, so
   // every provenance path digest recomputes from the real file.
   const contractsPackageJsonText = await readSourceText(contractsRoot, "package.json");
@@ -1233,6 +1284,10 @@ export async function buildQuickstartProfileProjection({
       name: fileName,
       text: candidateSchemaTexts[fileName],
     })),
+    ...ADDITIONAL_FOUNDATION_SCHEMA_FILES.map(([fileName]) => ({
+      name: fileName,
+      text: additionalSchemaTexts[fileName],
+    })),
   ].map((entry) => ({ name: entry.name, document: JSON.parse(entry.text) }));
 
   const graph = buildSchemaGraph(consumerRecords, foundationSchemaDocuments);
@@ -1359,6 +1414,9 @@ export async function buildQuickstartProfileProjection({
   for (const [fileName, bundlePath] of FOUNDATION_SCHEMA_FILES) {
     setText(bundlePath, candidateSchemaTexts[fileName]);
   }
+  for (const [fileName, , bundlePath] of ADDITIONAL_FOUNDATION_SCHEMA_FILES) {
+    setText(bundlePath, additionalSchemaTexts[fileName]);
+  }
   setText("schemas/foundation/operation-request.schema.json", sources.operationRequest);
   setText("schemas/foundation/operation-result.schema.json", sources.operationResult);
   setText("schemas/foundation/migration-manifest.schema.json", sources.migrationManifestSchema);
@@ -1387,6 +1445,31 @@ export async function buildQuickstartProfileProjection({
     "runtime/harness/token-lock.mjs",
     projectModuleWithImportMap(sources.harnessTokenLock, HARNESS_TOKEN_LOCK_IMPORT_MAP, "harness src/token-lock.mjs"),
   );
+  setText(
+    "runtime/harness/bound-read.mjs",
+    projectModuleWithImportMap(
+      sources.harnessBoundRead,
+      new Map([["skill-family-contracts", "../contracts/index.mjs"]]),
+      "harness src/bound-read.mjs",
+    ),
+  );
+  setText(
+    "runtime/harness/fixed-set-publication.mjs",
+    projectModuleWithImportMap(
+      sources.harnessFixedSetPublication,
+      new Map([["skill-family-contracts", "../contracts/index.mjs"]]),
+      "harness src/fixed-set-publication.mjs",
+    ),
+  );
+  setText("runtime/harness/fixed-set-publication-loader.mjs", sources.harnessFixedSetPublicationLoader);
+  setText("runtime/harness/native/loader.mjs", sources.harnessBoundReadLoader);
+  setText("runtime/harness/native/prebuild-manifest.json", sources.harnessBoundReadManifest);
+  for (const relative of STABLE_BOUND_READ_METADATA_FILES) {
+    setText(`runtime/harness/native/${relative}`, sources.harnessBoundReadMetadata[relative]);
+  }
+  for (const relative of STABLE_BOUND_READ_NATIVE_FILES.slice(1)) {
+    setBytes(`runtime/harness/native/${relative}`, harnessBoundReadBinaries[relative].bytes);
+  }
   const migrationManifestSchemaId = JSON.parse(sources.migrationManifestSchema).$id;
   setText(
     "runtime/kit/migration.mjs",
@@ -1472,6 +1555,11 @@ export async function buildQuickstartProfileProjection({
     ["packages/skill-family-contracts/candidate/quickstart-profile/result.schema.json", candidateSchemaTexts["result.schema.json"], "projected"],
     ["packages/skill-family-contracts/candidate/quickstart-profile/consumer-schema-inventory.schema.json", candidateSchemaTexts["consumer-schema-inventory.schema.json"], "projected"],
     ["packages/skill-family-contracts/candidate/quickstart-profile/harness-surface-inventory.schema.json", candidateSchemaTexts["harness-surface-inventory.schema.json"], "projected"],
+    ...ADDITIONAL_FOUNDATION_SCHEMA_FILES.map(([fileName, sourcePath]) => [
+      `packages/skill-family-contracts/${sourcePath}`,
+      additionalSchemaTexts[fileName],
+      "projected",
+    ]),
     ["packages/skill-family-contracts/candidate/quickstart-profile/index.mjs", sources.candidateIndex, "extraction-input"],
     ["packages/skill-family-harness-node/package.json", harnessPackageJsonText, "identity"],
     ["packages/skill-family-harness-node/src/index.mjs", sources.harnessIndex, "imported-surface"],
@@ -1483,6 +1571,21 @@ export async function buildQuickstartProfileProjection({
     ["packages/skill-family-harness-node/src/strict-read.mjs", sources.harnessStrictRead, "projected"],
     ["packages/skill-family-harness-node/src/atomic.mjs", sources.harnessAtomic, "projected"],
     ["packages/skill-family-harness-node/src/token-lock.mjs", sources.harnessTokenLock, "projected"],
+    ["packages/skill-family-harness-node/src/bound-read.mjs", sources.harnessBoundRead, "projected"],
+    ["packages/skill-family-harness-node/src/fixed-set-publication.mjs", sources.harnessFixedSetPublication, "projected"],
+    ["packages/skill-family-harness-node/src/fixed-set-publication-loader.mjs", sources.harnessFixedSetPublicationLoader, "projected"],
+    ["packages/skill-family-harness-node/src/native/loader.mjs", sources.harnessBoundReadLoader, "projected"],
+    ["packages/skill-family-harness-node/src/native/prebuild-manifest.json", sources.harnessBoundReadManifest, "identity"],
+    ...STABLE_BOUND_READ_METADATA_FILES.map((relative) => [
+      `packages/skill-family-harness-node/src/native/${relative}`,
+      sources.harnessBoundReadMetadata[relative],
+      "identity",
+    ]),
+    ...STABLE_BOUND_READ_NATIVE_FILES.slice(1).map((relative) => [
+      `packages/skill-family-harness-node/src/native/${relative}`,
+      harnessBoundReadBinaries[relative].bytes,
+      "binary",
+    ]),
     ["packages/skill-family-engineering-kit/package.json", kitPackageJsonText, "identity"],
     ["packages/skill-family-engineering-kit/candidate/profile-bundle.mjs", kitBuilderSource, "builder"],
     ["packages/skill-family-engineering-kit/candidate/projection-bundle-cli.mjs", kitCliSource, "builder"],

package/docs/architecture/index.html

@@ -1972,7 +1972,7 @@ Contracts（结构、协议、错误码、协议名登记）
 <tbody>
 <tr>
 <td>Contracts</td>
-<td>结构、协议、错误码、协议名登记；24 类顶层对象；9 条 mandatory rule</td>
+<td>结构、协议、错误码、协议名登记；35 类顶层对象；9 条 mandatory rule</td>
 <td>业务字段语义、领域审计、远端写入、模型生成</td>
 </tr>
 <tr>
@@ -2077,12 +2077,12 @@ Contracts（结构、协议、错误码、协议名登记）
 <p>三包结构保持、不拆第四包（FND-ADR-007）；制品治理采用 artifact-graph CLI 与版本锁（FND-ADR-006）。</p>
 <h2 id="首版预算">首版预算<a class="headerlink" href="#首版预算" title="Permanent link">&para;</a></h2>
 <ul>
-<li>顶层 Contracts 对象：31 类（完整清单以 <code>packages/skill-family-contracts/src/registry.json</code> 为唯一真源）：project-manifest、profile-descriptor、project-profile（FND-ADR-013，1.7.0 纳入）、managed-file-lock、operation-request、operation-result、migration-manifest、adapter-source、report-model、report-binding、host-descriptor、host-registry、host-capability-fact、host-probe-result、adapter-build-manifest、host-operation-plan、host-operation-receipt、state-event-envelope、state-snapshot-metadata、token-estimate-result、surface-scan-policy、declared-read-surface-result、structured-scan-policy（FND-ADR-010/011）、timeout-policy、watchdog-termination-envelope（FND-ADR-012，append-only 保持 1.5.0）、public-boundary-declaration、platform-difference-registry、observation-scope、profile-adoption-declaration、audit-baseline-pin、token-estimate-record（审计规则裁决与整改 1.6.0 纳入）；</li>
+<li>顶层 Contracts 对象：35 类（完整清单以 <code>packages/skill-family-contracts/src/registry.json</code> 为唯一真源）：project-manifest、profile-descriptor、project-profile（FND-ADR-013，1.7.0 纳入）、managed-file-lock、operation-request、operation-result、migration-manifest、adapter-source、report-model、report-binding、host-descriptor、host-registry、host-capability-fact、host-probe-result、adapter-build-manifest、host-operation-plan、host-operation-receipt、state-event-envelope、state-snapshot-metadata、token-estimate-result、surface-scan-policy、declared-read-surface-result、structured-scan-policy（FND-ADR-010/011）、timeout-policy、watchdog-termination-envelope（FND-ADR-012，append-only 保持 1.5.0）、public-boundary-declaration、platform-difference-registry、observation-scope、profile-adoption-declaration、audit-baseline-pin、token-estimate-record（审计规则裁决与整改 1.6.0 纳入）、source-authority-receipt（1.8.0 纳入）、filesystem-root-binding、fixed-set-publication-manifest、fixed-set-publication-receipt（1.9.0 纳入）；</li>
 <li>Kit 顶层命令：4 个（scaffold、adopt-plan、projection、check）；</li>
 <li>强制机械规则：当前 9 条，预算不超过 20 条，绝对上限 30 条；CR-001 对登记表内全部 Schema 做统一编译；</li>
 <li>叶子包：3 个（skill-family-contracts、skill-family-harness-node、skill-family-engineering-kit）；</li>
 <li>Schema 校验器：Ajv 8.20.0（精确版本 pin），支持 draft-07 与 2020-12 双方言；</li>
-<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 版本 1.7.0；</li>
+<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 版本 1.9.0；</li>
 <li>默认运行时语言：Node；第二语言实现首版为 0。</li>
 </ul>
 <p>任何新增组件必须说明删除它会导致的两个以上真实消费者重复实现，并通过独立 fixture 验证。</p>

package/docs/integration/audit/index.html

@@ -1796,7 +1796,8 @@
   isolation-and-lockfile.md     隔离安装与包锁验证设计
   independence.md               独立性声明与机械证明
   schemas/audit-evidence.schema.json   证据文档的 JSON Schema（审计自有）
-  baseline/contracts-1.7.0.pin.json    Contracts 1.7.0 当前候选基线 pin（摘要+事实）
+  baseline/contracts-1.9.0.pin.json    Contracts 1.9.0 当前候选基线 pin（摘要+事实）
+  baseline/contracts-1.8.0.pin.json    Contracts 1.8.0 只读兼容存档 pin
   baseline/contracts-1.6.0.pin.json    Contracts 1.6.0 只读兼容存档 pin
   baseline/contracts-1.5.0.pin.json    Contracts 1.5.0 只读兼容存档 pin
   baseline/contracts-1.1.1.pin.json    Contracts 1.1.1 只读兼容存档 pin

package/docs/integration/audit/mutation-taxonomy/index.html

@@ -1943,7 +1943,7 @@
 <h3 id="M4-遗漏omission">M4 遗漏（omission）<a class="headerlink" href="#M4-遗漏omission" title="Permanent link">&para;</a></h3>
 <p>变异从冻结文档中<strong>删除</strong>必备部件。三个覆盖检查（fixture 用 <code>expect.check</code> 声明）：</p>
 <ul>
-<li><code>registry-schema-coverage</code>：五个顶层对象的 schema 登记缺一不可；</li>
+<li><code>registry-schema-coverage</code>：当前基线 pin 中的全部顶层对象都必须登记；</li>
 <li><code>rules-checktype-coverage</code>：九个检查类型每个都必须被至少一条 mandatory 规则覆盖；</li>
 <li><code>error-code-coverage</code>：冻结错误码清单一个不能少。</li>
 </ul>

package/docs/integration/audit/version-compatibility/index.html

@@ -1791,7 +1791,7 @@
 <tbody>
 <tr>
 <td><code>contractsVersion</code></td>
-<td>Contracts 冻结版本（当前 <code>1.7.0</code>）</td>
+<td>Contracts 冻结版本（当前 <code>1.9.0</code>）</td>
 <td>机器契约内容的版本</td>
 </tr>
 <tr>
@@ -1806,7 +1806,7 @@
 </tr>
 </tbody>
 </table>
-<p>三者都由 <code>describeAuditSurface()</code> 一次性给出，审计侧把它们与基线 pin（当前为 <code>baseline/contracts-1.7.0.pin.json</code>）比对。</p>
+<p>三者都由 <code>describeAuditSurface()</code> 一次性给出，审计侧把它们与基线 pin（当前为 <code>baseline/contracts-1.9.0.pin.json</code>）比对。</p>
 <h2 id="兼容规则">兼容规则<a class="headerlink" href="#兼容规则" title="Permanent link">&para;</a></h2>
 <p>一个被消费的 Contracts 包与某个基线 pin <strong>兼容</strong>，当且仅当同时满足：</p>
 <ol>
@@ -1864,7 +1864,9 @@
 <li><strong>Contracts 1.4.0（2026-08-09）</strong>：持久状态能力线增量，不是描述补丁：新增 <code>state-event-envelope</code>、<code>state-snapshot-metadata</code> 两个顶层契约，改变了公开机器合同与审计事实。</li>
 <li><strong>Contracts 1.5.0（2026-08-16）</strong>：FND-ADR-010/011 能力线增量，不是描述补丁：新增 <code>declared-read-surface-result</code>、<code>structured-scan-policy</code> 两个顶层契约（顶层对象集合 20 → 22），改变了公开机器合同与审计事实。该 pin 的摘要与事实均从当前 <code>describeAuditSurface()/digestAuditSurface()</code> 机械投影，provenance 仍为 <code>product-compatibility-fixture</code>。</li>
 <li><strong>Contracts 1.6.0（2026-08-18）</strong>：审计整改 C5 能力线增量，不是描述补丁：新增 <code>public-boundary-declaration</code>、<code>platform-difference-registry</code>、<code>observation-scope</code>、<code>profile-adoption-declaration</code>、<code>audit-baseline-pin</code>、<code>token-estimate-record</code> 六个顶层契约（顶层对象集合 24 → 30），改变了公开机器合同与审计事实；未新增 SFC 错误码，规则与 kernel 协议仅随 <code>contractsVersion</code> 字段更新。pin 合同本身（<code>audit-baseline-pin</code>）与消费面校验函数 <code>verifyBaselinePin()</code>（AUD-BASE-001 / AUD-LOCK-001 编码）在本版本落地（GAP-5 / SG-28）。</li>
-<li><strong>Contracts 1.7.0（2026-08-22）</strong>：FND-ADR-013 的 Project Profile 能力线增量。新增 <code>project-profile</code> 顶层契约（顶层对象集合 30 → 31），统一 scaffold 项目根声明的机器结构；未新增 SFC 错误码。<code>contracts-1.7.0.pin.json</code> 是当前候选基线，由 <code>scripts/baseline-pin-gen.mjs --update</code> 从 <code>describeAuditSurface()/describeBaselinePin()</code> 机械生成，并经过合同校验和 <code>verifyBaselinePin()</code> 自校验。1.6.0 及更早 pin 保留为只读兼容存档。</li>
+<li><strong>Contracts 1.7.0（2026-08-22）</strong>：FND-ADR-013 的 Project Profile 能力线增量。新增 <code>project-profile</code> 顶层契约（顶层对象集合 30 → 31），统一 scaffold 项目根声明的机器结构；未新增 SFC 错误码。<code>contracts-1.7.0.pin.json</code> 由 <code>scripts/baseline-pin-gen.mjs --update</code> 从 <code>describeAuditSurface()/describeBaselinePin()</code> 机械生成，并经过合同校验和 <code>verifyBaselinePin()</code> 自校验；现作为历史只读兼容存档保留。</li>
+<li><strong>Contracts 1.8.0（2026-08-24）</strong>：新增业务中立的 <code>source-authority-receipt</code> 顶层契约（31 → 32），以及纯校验、解析 API；未新增 SFC 错误码。<code>contracts-1.8.0.pin.json</code> 由 <code>scripts/baseline-pin-gen.mjs --update</code> 从公开 Contracts 表面机械生成并自校验；1.7.0 及更早 pin 保留为只读兼容存档。</li>
+<li><strong>Contracts 1.9.0（2026-08-24）</strong>：新增业务中立的 <code>filesystem-root-binding</code>、<code>fixed-set-publication-manifest</code> 和 <code>fixed-set-publication-receipt</code> 三个顶层契约（32 → 35）。错误码、规则、检查类型、预算、Kernel 操作和校验策略均未变化。<code>contracts-1.9.0.pin.json</code> 由 <code>scripts/baseline-pin-gen.mjs --update</code> 从公开 Contracts 表面机械生成并自校验；1.8.0 及更早 pin 保留为只读兼容存档。</li>
 <li>审计运行时先做包锁验证（见 isolation-and-lockfile.md），再做变异重放；pin 不匹配时，变异重放结果不得被采信。</li>
 </ul>
 <h2 id="profile-行为变更纪律2026-08-19D6">profile 行为变更纪律（2026-08-19，D6）<a class="headerlink" href="#profile-行为变更纪律2026-08-19D6" title="Permanent link">&para;</a></h2>

package/docs/public/status/index.html

@@ -1792,17 +1792,17 @@
 <tbody>
 <tr>
 <td><code>skill-family-contracts</code></td>
-<td>0.8.3</td>
+<td>0.9.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-contracts">ifoohoo/skill-family-contracts</a></td>
 </tr>
 <tr>
 <td><code>skill-family-harness-node</code></td>
-<td>0.8.3</td>
+<td>0.9.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-harness-node">ifoohoo/skill-family-harness-node</a></td>
 </tr>
 <tr>
 <td><code>skill-family-engineering-kit</code></td>
-<td>0.8.3</td>
+<td>0.9.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-engineering-kit">ifoohoo/skill-family-engineering-kit</a></td>
 </tr>
 </tbody>