skill-family-engineering-kit 0.8.4 → 0.9.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.9.0 locale=en baseline=sha256:6419bbdc8d469e6dd7f9fda5995e5465cc6bf98724371f9f4aa9293a7e0d9f14 -->
+## [0.9.0] - 2026-08-24
+
+Engineering Kit 0.9.0 projects the stable filesystem schemas, bound-read Harness closure, and candidate ordered batch validation into the existing Quickstart Bundle.
+
+### Added
+
+- Projects the three stable filesystem schemas and two candidate batch schemas from Contracts authorities.
+- Projects the stable bound-read entry and its exact native prebuild closure without adding a Kit command.
+
+### Changed
+
+- Keeps the four top-level Kit commands and Profile SPI candidate boundary unchanged.
+
+### Upgrade Notes
+
+Pin all three Foundation packages to exactly 0.9.0 and rebuild managed Bundles. Batch validation is available only through the existing candidate Bundle and mechanisms CLI.
+<!-- release-skill:changelog:end version=0.9.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.8.4 locale=en baseline=sha256:0f6ad4e641ae6ef85ea323e458aa6263aa6d87280e704ac1324742f83016d779 -->
 ## [0.8.4] - 2026-08-24
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,25 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.9.0 locale=zh-CN baseline=sha256:c84db7b53f562cbdad947ccf8fcc23209f18137100270b2691bab7d9a7ad623c -->
+## [0.9.0] - 2026-08-24
+
+Engineering Kit 0.9.0 将稳定文件系统 Schema、绑定读取 Harness 闭包与有序批量校验 candidate 投影到既有 Quickstart Bundle。
+
+### 新增
+
+- 从 Contracts 权威源投影三个稳定文件系统 Schema 与两个批量校验 candidate Schema。
+- 投影稳定绑定读取入口及其精确原生预构建闭包，不新增 Kit 命令。
+
+### 变更
+
+- 四个顶层 Kit 命令与 Profile SPI 的 candidate 边界保持不变。
+
+### 升级说明
+
+三个 Foundation 包必须精确锁定 0.9.0 并重新构建 managed Bundle；批量校验只能通过既有 candidate Bundle 与 mechanisms CLI 使用。
+<!-- release-skill:changelog:end version=0.9.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.8.4 locale=zh-CN baseline=sha256:38a973bb735c925e8453656ce24a11173b530c6376609d68dfb850d9029daa21 -->
 ## [0.8.4] - 2026-08-24
 

package/README.md

@@ -4,24 +4,27 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.8.4 -->
+<!-- release-skill:release-version: 0.9.0 -->
 
 An engineering toolkit used in development and CI. There are **exactly four** top-level commands, and no fifth:
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.8.4** (2026-08-24)
+**0.9.0** (2026-08-24)
 
-Lockstep Foundation 0.8.4 update documents validated external source authority without changing Kit commands or Profile SPI.
+Engineering Kit 0.9.0 projects the stable filesystem schemas, bound-read Harness closure, and candidate ordered batch validation into the existing Quickstart Bundle.
+
+**Added**
+
+- Projects the three stable filesystem schemas and two candidate batch schemas from Contracts authorities.
+- Projects the stable bound-read entry and its exact native prebuild closure without adding a Kit command.
 
 **Changed**
 
-- Moves the package version to 0.8.4 together with Contracts and Harness.
-- Documents that consumers validate a source-authority receipt through Contracts before passing the returned coordinates through the existing sourceRepository and sourceBaseCommit fields.
-- Keeps the four stable top-level Kit commands, builder, Profile SPI, and public exports unchanged.
+- Keeps the four top-level Kit commands and Profile SPI candidate boundary unchanged.
 
 **Upgrade Notes**
 
-Pin all three Foundation packages to exactly 0.8.4. A provider Profile descriptor upgrading from 0.8.3 and Contracts 1.7.0 must mechanically update its base.contractsVersion field to 1.8.0. Existing functions and Schema shapes, Profile SPI v3, and the four Kit commands require no migration; source-authority consumers only add the Contracts validation step before invoking the existing builder surface.
+Pin all three Foundation packages to exactly 0.9.0 and rebuild managed Bundles. Batch validation is available only through the existing candidate Bundle and mechanisms CLI.
 <!-- release-skill:managed:end id=latest-release -->
 
 | Command | Purpose | Side effects |
@@ -42,7 +45,7 @@ Kit is the "engineering stage" layer, depending on the Harness and Contracts. It
 ## Installation and Minimal Example
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.8.4
+npm install --save-dev skill-family-engineering-kit@0.9.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -50,7 +53,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.8.4 -- skill-family-kit --help`.
+The four commands above cover skeleton generation, read-only inventory, managed projection, and diagnostics respectively; a zero-install form is available via `npm exec --package=skill-family-engineering-kit@0.9.0 -- skill-family-kit --help`.
 
 ### Public Profile SPI
 
@@ -60,7 +63,7 @@ The package carries three SPI JSON resources and the Contracts canonical `profil
 
 `verifyProfile({ profileRoot })` is read-only and data-only for Profile descriptors. `verifyProjectProfile({ projectRoot, profileRelPath? })` is the corresponding entry for a project root declaration. Both refuse invalid input with stable result codes, never execute Profile-provided files, and leave Profile domain meaning to the caller.
 
-When a provider Profile descriptor moves from Foundation 0.8.3 and Contracts 1.7.0 to Foundation 0.8.4, update its `base.contractsVersion` field mechanically to `1.8.0`. Functions and Schema shapes, Profile SPI v3, and all four Kit commands retain their existing shapes.
+When a provider Profile descriptor moves from Foundation 0.8.4 and Contracts 1.8.0 to Foundation 0.9.0, update its `base.contractsVersion` field mechanically to `1.9.0`. The four Kit commands and Profile SPI retain their existing shapes.
 
 ### Report sub-action
 

package/README.zh-CN.md

@@ -5,24 +5,27 @@
 
 # skill-family-engineering-kit
 
-<!-- release-skill:release-version: 0.8.4 -->
+<!-- release-skill:release-version: 0.9.0 -->
 
 开发与 CI 阶段使用的工程工具包。**恰好四个**顶层命令，没有第五个：
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.8.4** (2026-08-24)
+**0.9.0** (2026-08-24)
 
-随 Foundation 0.8.4 锁步升版，补充外置 source authority 校验用法；Kit 命令与 Profile SPI 不变。
+Engineering Kit 0.9.0 将稳定文件系统 Schema、绑定读取 Harness 闭包与有序批量校验 candidate 投影到既有 Quickstart Bundle。
+
+**新增**
+
+- 从 Contracts 权威源投影三个稳定文件系统 Schema 与两个批量校验 candidate Schema。
+- 投影稳定绑定读取入口及其精确原生预构建闭包，不新增 Kit 命令。
 
 **变更**
 
-- 包版本与 Contracts、Harness 一同升至 0.8.4。
-- 说明消费者先经 Contracts 校验 source-authority receipt，再把返回坐标传入既有 sourceRepository 与 sourceBaseCommit 字段。
-- 四个稳定顶层命令、builder、Profile SPI 与公共导出保持不变。
+- 四个顶层 Kit 命令与 Profile SPI 的 candidate 边界保持不变。
 
 **升级说明**
 
-消费者必须把三个 Foundation 包精确锁定到 0.8.4。provider Profile descriptor 从 0.8.3 与 Contracts 1.7.0 升级时，必须把自身的 base.contractsVersion 字段机械更新为 1.8.0。既有函数与 Schema 形状、Profile SPI v3、Kit 四命令均不需要迁移；需要 source authority 的消费者只增加调用 builder 前的 Contracts 校验步骤。
+三个 Foundation 包必须精确锁定 0.9.0 并重新构建 managed Bundle；批量校验只能通过既有 candidate Bundle 与 mechanisms CLI 使用。
 <!-- release-skill:managed:end id=latest-release -->
 
 | 命令 | 用途 | 副作用 |
@@ -43,7 +46,7 @@ Kit 是「工程阶段」层，依赖 Harness 与 Contracts。它只做四件事
 ## 安装和最小示例
 
 ```sh
-npm install --save-dev skill-family-engineering-kit@0.8.4
+npm install --save-dev skill-family-engineering-kit@0.9.0
 npm exec -- skill-family-kit --help
 npm exec -- skill-family-kit scaffold --root <empty-dir> --project-id my-project
 npm exec -- skill-family-kit adopt-plan --root <repo>
@@ -51,7 +54,7 @@ npm exec -- skill-family-kit projection --root <repo>
 npm exec -- skill-family-kit check --root <repo>
 ```
 
-以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.8.4 -- skill-family-kit --help`。
+以上四条命令分别覆盖生成骨架、只读盘点、受管投影与诊断；零安装形式可用 `npm exec --package=skill-family-engineering-kit@0.9.0 -- skill-family-kit --help`。
 
 ### 公共 Profile SPI
 
@@ -61,7 +64,7 @@ npm exec -- skill-family-kit check --root <repo>
 
 `verifyProfile({ profileRoot })` 只读处理 Profile descriptor；项目根声明使用对应的 `verifyProjectProfile({ projectRoot, profileRelPath? })`。两个入口遇到无效输入都以稳定结果码失败关闭，不会执行 Profile 提供的文件；Profile 的领域含义仍由调用方负责。
 
-provider Profile descriptor 从 Foundation 0.8.3 与 Contracts 1.7.0 升级到 Foundation 0.8.4 时，须把自身的 `base.contractsVersion` 字段机械更新为 `1.8.0`。既有函数与 Schema 形状、Profile SPI v3、Kit 四命令的形状均不变。
+provider Profile descriptor 从 Foundation 0.8.4 与 Contracts 1.8.0 升级到 Foundation 0.9.0 时，须把自身的 `base.contractsVersion` 字段更新为 `1.9.0`。Kit 四个顶层命令与 Profile SPI 的形状保持不变。
 
 ### 报告子动作
 

package/candidate/profile-bundle.mjs

@@ -69,6 +69,14 @@ const FOUNDATION_SCHEMA_FILES = Object.freeze([
   ["harness-surface-inventory.schema.json", "schemas/foundation/harness-surface-inventory.schema.json"],
 ]);
 
+const ADDITIONAL_FOUNDATION_SCHEMA_FILES = Object.freeze([
+  ["filesystem-root-binding.schema.json", "src/schemas/filesystem-root-binding.schema.json", "schemas/foundation/filesystem-root-binding.schema.json"],
+  ["fixed-set-publication-manifest.schema.json", "src/schemas/fixed-set-publication-manifest.schema.json", "schemas/foundation/fixed-set-publication-manifest.schema.json"],
+  ["fixed-set-publication-receipt.schema.json", "src/schemas/fixed-set-publication-receipt.schema.json", "schemas/foundation/fixed-set-publication-receipt.schema.json"],
+  ["schema-validation-batch-request.schema.json", "candidate/foundation-mechanisms/schema-validation-batch-request.schema.json", "schemas/foundation/schema-validation-batch-request.schema.json"],
+  ["schema-validation-batch-result.schema.json", "candidate/foundation-mechanisms/schema-validation-batch-result.schema.json", "schemas/foundation/schema-validation-batch-result.schema.json"],
+]);
+
 const HARNESS_IMPORT_MAP = new Map([
   ["skill-family-contracts", "../contracts/index.mjs"],
   ["skill-family-contracts/candidate/quickstart-profile", "../contracts-candidate/index.mjs"],
@@ -76,6 +84,7 @@ const HARNESS_IMPORT_MAP = new Map([
   ["../src/errors.mjs", "./errors.mjs"],
   ["../src/paths.mjs", "./paths.mjs"],
   ["../src/strict-read.mjs", "./strict-read.mjs"],
+  ["../src/bound-read.mjs", "./bound-read.mjs"],
 ]);
 
 const HARNESS_STRICT_READ_IMPORT_MAP = new Map([
@@ -124,6 +133,18 @@ const FIXED_SET_CANDIDATE_FILES = Object.freeze([
   "prebuilds/linux-x64-gnu/rename_directory_no_replace.linux-x64-gnu.node",
 ]);
 const FIXED_SET_BINARY_PREFIX = "prebuilds/";
+const STABLE_BOUND_READ_NATIVE_FILES = Object.freeze([
+  "prebuild-manifest.json",
+  "prebuilds/darwin-arm64/bound_read.darwin-arm64.node",
+  "prebuilds/darwin-x64/bound_read.darwin-x64.node",
+  "prebuilds/linux-arm64-gnu/bound_read.linux-arm64-gnu.node",
+  "prebuilds/linux-x64-gnu/bound_read.linux-x64-gnu.node",
+]);
+const STABLE_BOUND_READ_METADATA_FILES = Object.freeze([
+  "NOTICE",
+  "prebuild-sbom.json",
+  "prebuild-release-receipt.json",
+]);
 
 // These fragments are the exact case-sensitive words rejected by the
 // bundle-wide byte scan. Caller-provided source identities enter provenance
@@ -958,6 +979,13 @@ function projectContractsCandidateIndex(sourceText) {
       `schema load path ${fileName}`,
     );
   }
+  for (const [fileName] of ADDITIONAL_FOUNDATION_SCHEMA_FILES.filter(([name]) => name.startsWith("schema-validation-batch-"))) {
+    applyOnce(
+      `load(new URL("../foundation-mechanisms/${fileName}", import.meta.url))`,
+      `load(new URL("../../schemas/foundation/${fileName}", import.meta.url))`,
+      `schema load path ${fileName}`,
+    );
+  }
 
   const getCollectionMarker = "function getCollection(";
   const getCollectionHits = projected.split(getCollectionMarker).length - 1;
@@ -1068,12 +1096,15 @@ function runnerSource() {
     'export * from "./runtime/harness/quickstart-profile.mjs";',
     'export { validateQuickstartProfileDocument } from "./runtime/contracts-candidate/index.mjs";',
     'export { validateBySchemaId } from "./validators.mjs";',
+    'export { createFilesystemRootBinding, readFileBound } from "./runtime/harness/bound-read.mjs";',
+    'export { createFixedSetPublicationManifest, publishFixedSet } from "./runtime/harness/fixed-set-publication.mjs";',
     'export { publishFileExclusive, publishFileOrReplace, replaceFileAtomic } from "./runtime/harness/atomic.mjs";',
     'export { acquireFilesystemLock, inspectFilesystemLock, releaseFilesystemLock, recoverFilesystemLock } from "./runtime/harness/token-lock.mjs";',
     'import { invokeFoundationMechanism as invokeHarnessMechanism } from "./runtime/harness/quickstart-profile.mjs";',
     'import { validateBySchemaId } from "./validators.mjs";',
+    'import { listValidatableSchemaIds } from "./validators.mjs";',
     'export function invokeFoundationMechanism(request) {',
-    '  return invokeHarnessMechanism(request, { validateBySchemaId });',
+    '  return invokeHarnessMechanism(request, { validateBySchemaId, listValidatableSchemaIds });',
     '}',
     "",
   ].join("\n");
@@ -1176,6 +1207,10 @@ export async function buildQuickstartProfileProjection({
       `candidate/quickstart-profile/${fileName}`,
     );
   }
+  const additionalSchemaTexts = {};
+  for (const [fileName, sourcePath] of ADDITIONAL_FOUNDATION_SCHEMA_FILES) {
+    additionalSchemaTexts[fileName] = await readSourceText(contractsRoot, sourcePath);
+  }
   sources.harnessIndex = await readSourceText(harnessRoot, "src/index.mjs");
   sources.harnessCandidate = await readSourceText(harnessRoot, "candidate/quickstart-profile.mjs");
   sources.harnessMechanismsCli = await readSourceText(harnessRoot, "candidate/mechanisms-cli.mjs");
@@ -1185,6 +1220,22 @@ export async function buildQuickstartProfileProjection({
   sources.harnessStrictRead = await readSourceText(harnessRoot, "src/strict-read.mjs");
   sources.harnessAtomic = await readSourceText(harnessRoot, "src/atomic.mjs");
   sources.harnessTokenLock = await readSourceText(harnessRoot, "src/token-lock.mjs");
+  sources.harnessBoundRead = await readSourceText(harnessRoot, "src/bound-read.mjs");
+  sources.harnessFixedSetPublication = await readSourceText(harnessRoot, "src/fixed-set-publication.mjs");
+  sources.harnessFixedSetPublicationLoader = await readSourceText(harnessRoot, "src/fixed-set-publication-loader.mjs");
+  sources.harnessBoundReadLoader = await readSourceText(harnessRoot, "src/native/loader.mjs");
+  sources.harnessBoundReadManifest = await readSourceText(harnessRoot, "src/native/prebuild-manifest.json");
+  sources.harnessBoundReadMetadata = {};
+  for (const relative of STABLE_BOUND_READ_METADATA_FILES) {
+    sources.harnessBoundReadMetadata[relative] = await readSourceText(harnessRoot, `src/native/${relative}`);
+  }
+  const harnessBoundReadBinaries = {};
+  for (const relative of STABLE_BOUND_READ_NATIVE_FILES.slice(1)) {
+    harnessBoundReadBinaries[relative] = await readCanonicalRegularFile(
+      path.join(harnessRoot, "src/native", relative),
+      `stable bound-read prebuild ${relative}`,
+    );
+  }
   // The package manifests are recorded as complete original bytes below, so
   // every provenance path digest recomputes from the real file.
   const contractsPackageJsonText = await readSourceText(contractsRoot, "package.json");
@@ -1233,6 +1284,10 @@ export async function buildQuickstartProfileProjection({
       name: fileName,
       text: candidateSchemaTexts[fileName],
     })),
+    ...ADDITIONAL_FOUNDATION_SCHEMA_FILES.map(([fileName]) => ({
+      name: fileName,
+      text: additionalSchemaTexts[fileName],
+    })),
   ].map((entry) => ({ name: entry.name, document: JSON.parse(entry.text) }));
 
   const graph = buildSchemaGraph(consumerRecords, foundationSchemaDocuments);
@@ -1359,6 +1414,9 @@ export async function buildQuickstartProfileProjection({
   for (const [fileName, bundlePath] of FOUNDATION_SCHEMA_FILES) {
     setText(bundlePath, candidateSchemaTexts[fileName]);
   }
+  for (const [fileName, , bundlePath] of ADDITIONAL_FOUNDATION_SCHEMA_FILES) {
+    setText(bundlePath, additionalSchemaTexts[fileName]);
+  }
   setText("schemas/foundation/operation-request.schema.json", sources.operationRequest);
   setText("schemas/foundation/operation-result.schema.json", sources.operationResult);
   setText("schemas/foundation/migration-manifest.schema.json", sources.migrationManifestSchema);
@@ -1387,6 +1445,31 @@ export async function buildQuickstartProfileProjection({
     "runtime/harness/token-lock.mjs",
     projectModuleWithImportMap(sources.harnessTokenLock, HARNESS_TOKEN_LOCK_IMPORT_MAP, "harness src/token-lock.mjs"),
   );
+  setText(
+    "runtime/harness/bound-read.mjs",
+    projectModuleWithImportMap(
+      sources.harnessBoundRead,
+      new Map([["skill-family-contracts", "../contracts/index.mjs"]]),
+      "harness src/bound-read.mjs",
+    ),
+  );
+  setText(
+    "runtime/harness/fixed-set-publication.mjs",
+    projectModuleWithImportMap(
+      sources.harnessFixedSetPublication,
+      new Map([["skill-family-contracts", "../contracts/index.mjs"]]),
+      "harness src/fixed-set-publication.mjs",
+    ),
+  );
+  setText("runtime/harness/fixed-set-publication-loader.mjs", sources.harnessFixedSetPublicationLoader);
+  setText("runtime/harness/native/loader.mjs", sources.harnessBoundReadLoader);
+  setText("runtime/harness/native/prebuild-manifest.json", sources.harnessBoundReadManifest);
+  for (const relative of STABLE_BOUND_READ_METADATA_FILES) {
+    setText(`runtime/harness/native/${relative}`, sources.harnessBoundReadMetadata[relative]);
+  }
+  for (const relative of STABLE_BOUND_READ_NATIVE_FILES.slice(1)) {
+    setBytes(`runtime/harness/native/${relative}`, harnessBoundReadBinaries[relative].bytes);
+  }
   const migrationManifestSchemaId = JSON.parse(sources.migrationManifestSchema).$id;
   setText(
     "runtime/kit/migration.mjs",
@@ -1472,6 +1555,11 @@ export async function buildQuickstartProfileProjection({
     ["packages/skill-family-contracts/candidate/quickstart-profile/result.schema.json", candidateSchemaTexts["result.schema.json"], "projected"],
     ["packages/skill-family-contracts/candidate/quickstart-profile/consumer-schema-inventory.schema.json", candidateSchemaTexts["consumer-schema-inventory.schema.json"], "projected"],
     ["packages/skill-family-contracts/candidate/quickstart-profile/harness-surface-inventory.schema.json", candidateSchemaTexts["harness-surface-inventory.schema.json"], "projected"],
+    ...ADDITIONAL_FOUNDATION_SCHEMA_FILES.map(([fileName, sourcePath]) => [
+      `packages/skill-family-contracts/${sourcePath}`,
+      additionalSchemaTexts[fileName],
+      "projected",
+    ]),
     ["packages/skill-family-contracts/candidate/quickstart-profile/index.mjs", sources.candidateIndex, "extraction-input"],
     ["packages/skill-family-harness-node/package.json", harnessPackageJsonText, "identity"],
     ["packages/skill-family-harness-node/src/index.mjs", sources.harnessIndex, "imported-surface"],
@@ -1483,6 +1571,21 @@ export async function buildQuickstartProfileProjection({
     ["packages/skill-family-harness-node/src/strict-read.mjs", sources.harnessStrictRead, "projected"],
     ["packages/skill-family-harness-node/src/atomic.mjs", sources.harnessAtomic, "projected"],
     ["packages/skill-family-harness-node/src/token-lock.mjs", sources.harnessTokenLock, "projected"],
+    ["packages/skill-family-harness-node/src/bound-read.mjs", sources.harnessBoundRead, "projected"],
+    ["packages/skill-family-harness-node/src/fixed-set-publication.mjs", sources.harnessFixedSetPublication, "projected"],
+    ["packages/skill-family-harness-node/src/fixed-set-publication-loader.mjs", sources.harnessFixedSetPublicationLoader, "projected"],
+    ["packages/skill-family-harness-node/src/native/loader.mjs", sources.harnessBoundReadLoader, "projected"],
+    ["packages/skill-family-harness-node/src/native/prebuild-manifest.json", sources.harnessBoundReadManifest, "identity"],
+    ...STABLE_BOUND_READ_METADATA_FILES.map((relative) => [
+      `packages/skill-family-harness-node/src/native/${relative}`,
+      sources.harnessBoundReadMetadata[relative],
+      "identity",
+    ]),
+    ...STABLE_BOUND_READ_NATIVE_FILES.slice(1).map((relative) => [
+      `packages/skill-family-harness-node/src/native/${relative}`,
+      harnessBoundReadBinaries[relative].bytes,
+      "binary",
+    ]),
     ["packages/skill-family-engineering-kit/package.json", kitPackageJsonText, "identity"],
     ["packages/skill-family-engineering-kit/candidate/profile-bundle.mjs", kitBuilderSource, "builder"],
     ["packages/skill-family-engineering-kit/candidate/projection-bundle-cli.mjs", kitCliSource, "builder"],

package/docs/architecture/index.html

@@ -1972,7 +1972,7 @@ Contracts（结构、协议、错误码、协议名登记）
 <tbody>
 <tr>
 <td>Contracts</td>
-<td>结构、协议、错误码、协议名登记；32 类顶层对象；9 条 mandatory rule</td>
+<td>结构、协议、错误码、协议名登记；35 类顶层对象；9 条 mandatory rule</td>
 <td>业务字段语义、领域审计、远端写入、模型生成</td>
 </tr>
 <tr>
@@ -2077,12 +2077,12 @@ Contracts（结构、协议、错误码、协议名登记）
 <p>三包结构保持、不拆第四包（FND-ADR-007）；制品治理采用 artifact-graph CLI 与版本锁（FND-ADR-006）。</p>
 <h2 id="首版预算">首版预算<a class="headerlink" href="#首版预算" title="Permanent link">&para;</a></h2>
 <ul>
-<li>顶层 Contracts 对象：32 类（完整清单以 <code>packages/skill-family-contracts/src/registry.json</code> 为唯一真源）：project-manifest、profile-descriptor、project-profile（FND-ADR-013，1.7.0 纳入）、managed-file-lock、operation-request、operation-result、migration-manifest、adapter-source、report-model、report-binding、host-descriptor、host-registry、host-capability-fact、host-probe-result、adapter-build-manifest、host-operation-plan、host-operation-receipt、state-event-envelope、state-snapshot-metadata、token-estimate-result、surface-scan-policy、declared-read-surface-result、structured-scan-policy（FND-ADR-010/011）、timeout-policy、watchdog-termination-envelope（FND-ADR-012，append-only 保持 1.5.0）、public-boundary-declaration、platform-difference-registry、observation-scope、profile-adoption-declaration、audit-baseline-pin、token-estimate-record（审计规则裁决与整改 1.6.0 纳入）、source-authority-receipt（1.8.0 纳入）；</li>
+<li>顶层 Contracts 对象：35 类（完整清单以 <code>packages/skill-family-contracts/src/registry.json</code> 为唯一真源）：project-manifest、profile-descriptor、project-profile（FND-ADR-013，1.7.0 纳入）、managed-file-lock、operation-request、operation-result、migration-manifest、adapter-source、report-model、report-binding、host-descriptor、host-registry、host-capability-fact、host-probe-result、adapter-build-manifest、host-operation-plan、host-operation-receipt、state-event-envelope、state-snapshot-metadata、token-estimate-result、surface-scan-policy、declared-read-surface-result、structured-scan-policy（FND-ADR-010/011）、timeout-policy、watchdog-termination-envelope（FND-ADR-012，append-only 保持 1.5.0）、public-boundary-declaration、platform-difference-registry、observation-scope、profile-adoption-declaration、audit-baseline-pin、token-estimate-record（审计规则裁决与整改 1.6.0 纳入）、source-authority-receipt（1.8.0 纳入）、filesystem-root-binding、fixed-set-publication-manifest、fixed-set-publication-receipt（1.9.0 纳入）；</li>
 <li>Kit 顶层命令：4 个（scaffold、adopt-plan、projection、check）；</li>
 <li>强制机械规则：当前 9 条，预算不超过 20 条，绝对上限 30 条；CR-001 对登记表内全部 Schema 做统一编译；</li>
 <li>叶子包：3 个（skill-family-contracts、skill-family-harness-node、skill-family-engineering-kit）；</li>
 <li>Schema 校验器：Ajv 8.20.0（精确版本 pin），支持 draft-07 与 2020-12 双方言；</li>
-<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 版本 1.8.0；</li>
+<li>kernel 协议：skill-family.kernel.operation（stable），Contracts 版本 1.9.0；</li>
 <li>默认运行时语言：Node；第二语言实现首版为 0。</li>
 </ul>
 <p>任何新增组件必须说明删除它会导致的两个以上真实消费者重复实现，并通过独立 fixture 验证。</p>

package/docs/integration/audit/index.html

@@ -1796,7 +1796,8 @@
   isolation-and-lockfile.md     隔离安装与包锁验证设计
   independence.md               独立性声明与机械证明
   schemas/audit-evidence.schema.json   证据文档的 JSON Schema（审计自有）
-  baseline/contracts-1.8.0.pin.json    Contracts 1.8.0 当前候选基线 pin（摘要+事实）
+  baseline/contracts-1.9.0.pin.json    Contracts 1.9.0 当前候选基线 pin（摘要+事实）
+  baseline/contracts-1.8.0.pin.json    Contracts 1.8.0 只读兼容存档 pin
   baseline/contracts-1.6.0.pin.json    Contracts 1.6.0 只读兼容存档 pin
   baseline/contracts-1.5.0.pin.json    Contracts 1.5.0 只读兼容存档 pin
   baseline/contracts-1.1.1.pin.json    Contracts 1.1.1 只读兼容存档 pin

package/docs/integration/audit/mutation-taxonomy/index.html

@@ -1943,7 +1943,7 @@
 <h3 id="M4-遗漏omission">M4 遗漏（omission）<a class="headerlink" href="#M4-遗漏omission" title="Permanent link">&para;</a></h3>
 <p>变异从冻结文档中<strong>删除</strong>必备部件。三个覆盖检查（fixture 用 <code>expect.check</code> 声明）：</p>
 <ul>
-<li><code>registry-schema-coverage</code>：五个顶层对象的 schema 登记缺一不可；</li>
+<li><code>registry-schema-coverage</code>：当前基线 pin 中的全部顶层对象都必须登记；</li>
 <li><code>rules-checktype-coverage</code>：九个检查类型每个都必须被至少一条 mandatory 规则覆盖；</li>
 <li><code>error-code-coverage</code>：冻结错误码清单一个不能少。</li>
 </ul>

package/docs/integration/audit/version-compatibility/index.html

@@ -1791,7 +1791,7 @@
 <tbody>
 <tr>
 <td><code>contractsVersion</code></td>
-<td>Contracts 冻结版本（当前 <code>1.8.0</code>）</td>
+<td>Contracts 冻结版本（当前 <code>1.9.0</code>）</td>
 <td>机器契约内容的版本</td>
 </tr>
 <tr>
@@ -1806,7 +1806,7 @@
 </tr>
 </tbody>
 </table>
-<p>三者都由 <code>describeAuditSurface()</code> 一次性给出，审计侧把它们与基线 pin（当前为 <code>baseline/contracts-1.8.0.pin.json</code>）比对。</p>
+<p>三者都由 <code>describeAuditSurface()</code> 一次性给出，审计侧把它们与基线 pin（当前为 <code>baseline/contracts-1.9.0.pin.json</code>）比对。</p>
 <h2 id="兼容规则">兼容规则<a class="headerlink" href="#兼容规则" title="Permanent link">&para;</a></h2>
 <p>一个被消费的 Contracts 包与某个基线 pin <strong>兼容</strong>，当且仅当同时满足：</p>
 <ol>
@@ -1866,6 +1866,7 @@
 <li><strong>Contracts 1.6.0（2026-08-18）</strong>：审计整改 C5 能力线增量，不是描述补丁：新增 <code>public-boundary-declaration</code>、<code>platform-difference-registry</code>、<code>observation-scope</code>、<code>profile-adoption-declaration</code>、<code>audit-baseline-pin</code>、<code>token-estimate-record</code> 六个顶层契约（顶层对象集合 24 → 30），改变了公开机器合同与审计事实；未新增 SFC 错误码，规则与 kernel 协议仅随 <code>contractsVersion</code> 字段更新。pin 合同本身（<code>audit-baseline-pin</code>）与消费面校验函数 <code>verifyBaselinePin()</code>（AUD-BASE-001 / AUD-LOCK-001 编码）在本版本落地（GAP-5 / SG-28）。</li>
 <li><strong>Contracts 1.7.0（2026-08-22）</strong>：FND-ADR-013 的 Project Profile 能力线增量。新增 <code>project-profile</code> 顶层契约（顶层对象集合 30 → 31），统一 scaffold 项目根声明的机器结构；未新增 SFC 错误码。<code>contracts-1.7.0.pin.json</code> 由 <code>scripts/baseline-pin-gen.mjs --update</code> 从 <code>describeAuditSurface()/describeBaselinePin()</code> 机械生成，并经过合同校验和 <code>verifyBaselinePin()</code> 自校验；现作为历史只读兼容存档保留。</li>
 <li><strong>Contracts 1.8.0（2026-08-24）</strong>：新增业务中立的 <code>source-authority-receipt</code> 顶层契约（31 → 32），以及纯校验、解析 API；未新增 SFC 错误码。<code>contracts-1.8.0.pin.json</code> 由 <code>scripts/baseline-pin-gen.mjs --update</code> 从公开 Contracts 表面机械生成并自校验；1.7.0 及更早 pin 保留为只读兼容存档。</li>
+<li><strong>Contracts 1.9.0（2026-08-24）</strong>：新增业务中立的 <code>filesystem-root-binding</code>、<code>fixed-set-publication-manifest</code> 和 <code>fixed-set-publication-receipt</code> 三个顶层契约（32 → 35）。错误码、规则、检查类型、预算、Kernel 操作和校验策略均未变化。<code>contracts-1.9.0.pin.json</code> 由 <code>scripts/baseline-pin-gen.mjs --update</code> 从公开 Contracts 表面机械生成并自校验；1.8.0 及更早 pin 保留为只读兼容存档。</li>
 <li>审计运行时先做包锁验证（见 isolation-and-lockfile.md），再做变异重放；pin 不匹配时，变异重放结果不得被采信。</li>
 </ul>
 <h2 id="profile-行为变更纪律2026-08-19D6">profile 行为变更纪律（2026-08-19，D6）<a class="headerlink" href="#profile-行为变更纪律2026-08-19D6" title="Permanent link">&para;</a></h2>

package/docs/public/status/index.html

@@ -1792,17 +1792,17 @@
 <tbody>
 <tr>
 <td><code>skill-family-contracts</code></td>
-<td>0.8.4</td>
+<td>0.9.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-contracts">ifoohoo/skill-family-contracts</a></td>
 </tr>
 <tr>
 <td><code>skill-family-harness-node</code></td>
-<td>0.8.4</td>
+<td>0.9.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-harness-node">ifoohoo/skill-family-harness-node</a></td>
 </tr>
 <tr>
 <td><code>skill-family-engineering-kit</code></td>
-<td>0.8.4</td>
+<td>0.9.0</td>
 <td><a href="https://github.com/ifoohoo/skill-family-engineering-kit">ifoohoo/skill-family-engineering-kit</a></td>
 </tr>
 </tbody>

package/docs/reference/api/contracts/index.html

@@ -743,6 +743,17 @@
       </ul>
     </nav>
 
+</li>
+
+        <li class="md-nav__item">
+  <a href="#文件系统契约-foundationcontractsfilesystem" class="md-nav__link">
+    <span class="md-ellipsis">
+
+        文件系统契约 (foundation.contracts.filesystem)
+
+    </span>
+  </a>
+
 </li>
 
         <li class="md-nav__item">
@@ -2028,6 +2039,17 @@
       </ul>
     </nav>
 
+</li>
+
+        <li class="md-nav__item">
+  <a href="#文件系统契约-foundationcontractsfilesystem" class="md-nav__link">
+    <span class="md-ellipsis">
+
+        文件系统契约 (foundation.contracts.filesystem)
+
+    </span>
+  </a>
+
 </li>
 
         <li class="md-nav__item">
@@ -2254,6 +2276,7 @@
 <ul>
 <li><a href="#对象校验-foundationcontractsobject-validation">对象校验</a> → <code>validateDocument</code> / <code>compileSchema</code> / <code>detectDialect</code></li>
 <li><a href="#来源权威收据-foundationcontractssource-authority">来源权威收据</a> → <code>validateSourceAuthorityReceipt</code> / <code>parseSourceAuthorityReceipt</code></li>
+<li><a href="#文件系统契约-foundationcontractsfilesystem">文件系统契约</a> → 根绑定与固定集合 manifest/receipt Schema</li>
 <li><a href="#登记与协议-foundationcontractsregistry-protocol">登记与协议</a> → <code>loadRegistry</code> / <code>findSchemaByObject</code> / <code>findProtocol</code> / <code>registerSchema</code> / <code>registerProtocol</code></li>
 <li><a href="#内核协议-foundationcontractskernel-protocol">内核协议</a> → <code>loadKernelProtocol</code> / <code>findOperation</code> / <code>checkOperation</code></li>
 <li><a href="#强制检查-foundationcontractsmandatory-checks">强制检查</a> → <code>runChecks</code> / <code>collectUnresolvedRefs</code></li>
@@ -2261,7 +2284,7 @@
 <li><a href="#错误码-foundationcontractserror-codes">错误码</a> → <code>ContractsError</code> / <code>isRegisteredErrorCode</code> / <code>stableError</code></li>
 <li><a href="#审计表面-foundationcontractsaudit-surface">审计表面</a> → <code>canonicalJson</code> / <code>digestDocument</code> / <code>digestAuditSurface</code></li>
 </ul>
-<p>包级常量（冻结，仅作事实投影，不另立权威）：<code>CONTRACT_OBJECTS</code>（32 类顶层对象，闭集）、<code>CONTRACT_BOUNDARY</code>、<code>CONTRACTS_VERSION = "1.8.0"</code>、<code>SUPPORTED_DIALECTS</code>、<code>VALIDATION_POLICIES</code>、<code>CHECK_TYPES</code>（9 类机械检查）、<code>MANDATORY_RULES</code>、<code>RULE_BUDGET</code>、<code>ERROR_CODES</code>。</p>
+<p>包级常量（冻结，仅作事实投影，不另立权威）：<code>CONTRACT_OBJECTS</code>（35 类顶层对象，闭集）、<code>CONTRACT_BOUNDARY</code>、<code>CONTRACTS_VERSION = "1.9.0"</code>、<code>SUPPORTED_DIALECTS</code>、<code>VALIDATION_POLICIES</code>、<code>CHECK_TYPES</code>（9 类机械检查）、<code>MANDATORY_RULES</code>、<code>RULE_BUDGET</code>、<code>ERROR_CODES</code>。</p>
 <hr />
 <h2 id="对象校验-foundationcontractsobject-validation">对象校验 (foundation.contracts.object-validation)<a class="headerlink" href="#对象校验-foundationcontractsobject-validation" title="Permanent link">&para;</a></h2>
 <h3 id="validateDocument">validateDocument<a class="headerlink" href="#validateDocument" title="Permanent link">&para;</a></h3>
@@ -2324,6 +2347,13 @@
 <li>调用方仍拥有的业务语义：receipt 的签发、存储和传输；实际包发现；校验后是否采用该来源。Contracts 不执行目标，也不解释私有发布计划。</li>
 </ul>
 <hr />
+<h2 id="文件系统契约-foundationcontractsfilesystem">文件系统契约 (foundation.contracts.filesystem)<a class="headerlink" href="#文件系统契约-foundationcontractsfilesystem" title="Permanent link">&para;</a></h2>
+<p>0.9.0 新增三个稳定顶层 Schema：<code>filesystem-root-binding</code>、<code>fixed-set-publication-manifest</code> 与 <code>fixed-set-publication-receipt</code>。它们只描述结构与回执，不提供删除、替换或通用恢复状态机。</p>
+<ul>
+<li>根绑定 Schema：<code>https://contracts.skill-family.example/v1/filesystem-root-binding.json</code>。值固定为 <code>kind</code>、<code>digestAlgorithm</code>、<code>basis</code>、<code>digest</code> 四个字段；绑定值可序列化且不包含公开目录句柄。</li>
+<li>固定集合 manifest/receipt Schema：<code>https://contracts.skill-family.example/v1/fixed-set-publication-manifest.json</code> 与 <code>https://contracts.skill-family.example/v1/fixed-set-publication-receipt.json</code>。发布回执的终态只允许 <code>succeeded</code>、<code>refused</code>、<code>failed</code>、<code>indeterminate</code>。</li>
+<li>这三个 Schema 的真实登记与 fixture 由 <code>packages/skill-family-contracts/src/registry.json</code>、<code>src/schemas/</code> 和 <code>test/</code> 共同核验；批量校验 Schema 保持 candidate，不进入稳定 Registry。</li>
+</ul>
 <h2 id="登记与协议-foundationcontractsregistry-protocol">登记与协议 (foundation.contracts.registry-protocol)<a class="headerlink" href="#登记与协议-foundationcontractsregistry-protocol" title="Permanent link">&para;</a></h2>
 <h3 id="loadRegistry--listSchemas--listProtocols--findSchemaRegistration--findSchemaByObject--findProtocol">loadRegistry / listSchemas / listProtocols / findSchemaRegistration / findSchemaByObject / findProtocol<a class="headerlink" href="#loadRegistry--listSchemas--listProtocols--findSchemaRegistration--findSchemaByObject--findProtocol" title="Permanent link">&para;</a></h3>
 <ul>
@@ -2565,6 +2595,7 @@
 <hr />
 <h2 id="Quickstart-Profile-v2-candidate">Quickstart Profile v2 candidate<a class="headerlink" href="#Quickstart-Profile-v2-candidate" title="Permanent link">&para;</a></h2>
 <p><code>skill-family-contracts/candidate/quickstart-profile</code> 导出 v2 协议、按真实 <code>$id</code> 索引的 Resource/Task/Result Schema 集合，以及 <code>validateQuickstartProfileDocument</code>。唯一操作名是业务中立的 <code>execute-method</code>；Foundation 不登记 method 词表，也不解释 parameters、evidence 或 domainResult 的领域含义。</p>
+<p>0.9.0 另提供两个 candidate batch Schema：<code>schema-validation-batch-request.json</code> 与 <code>schema-validation-batch-result.json</code>。它们只供现有 Quickstart Bundle 的 <code>validate-many-by-schema-id</code> 机制使用；未知 <code>schemaId</code> 或任一结构畸形都使整批请求失败，不改变稳定 Registry。</p>
 <p>该入口从 <code>0.2.1</code> 起公开，但稳定性仍为 <code>candidate</code>。0.3.0 已用 v2 替换 v1，两者不兼容：新接入需精确锁定 <code>0.3.0</code>，仍需 v1 的接入继续精确锁定 <code>0.2.1</code>。candidate Schema 不进入稳定 <code>src/registry.json</code>。</p>
 <hr />
 <h2 id="与机器事实层的互链">与机器事实层的互链<a class="headerlink" href="#与机器事实层的互链" title="Permanent link">&para;</a></h2>

package/docs/reference/api/engineering-kit/index.html

@@ -2376,7 +2376,7 @@
 <p>本页从真实导出（<code>src/index.mjs</code> 与各源模块、CLI 入口）核对，不手写无法证明新鲜度的全集。每个公共入口按 hand-off §4.3 说明：签名、输入与输出、是否纯函数、文件/进程/Git/网络副作用、稳定错误码与 <code>details.kind</code>、前置条件与信任锚、<code>since</code> 与 <code>stability</code>、源文件与正例/负例测试、调用方仍拥有的业务语义。</p>
 <p>Kit 消费 Contracts 与 Harness，只拥有四个顶层命令与它们的只读/受控写边界。包级常量：<code>TOP_LEVEL_COMMANDS</code>（冻结 4 个：<code>scaffold</code> / <code>adopt-plan</code> / <code>projection</code> / <code>check</code>）、<code>FORBIDDEN_SIDE_EFFECTS</code>、<code>COMMAND_SIDE_EFFECTS</code>、<code>KIT_EXIT_CODES</code>（<code>ok=0</code> / <code>findings=1</code> / <code>rejected=2</code>）。Kit 永不执行 Git 写、发布、删除用户内容或触网。</p>
 <p>外置 source authority 不增加 Kit API。调用方先用 Contracts <code>parseSourceAuthorityReceipt(receipt, actualSubjects)</code> 核对收据，再把成功结果中的 <code>sourceRepository</code> 与 <code>sourceBaseCommit</code> 传给既有 Quickstart builder。Kit 不读取私有发布 plan，不发现实际包，也不签发 receipt。</p>
-<p>provider Profile descriptor 从 Foundation 0.8.3 与 Contracts 1.7.0 升级到 Foundation 0.8.4 时，须把自身的 <code>base.contractsVersion</code> 字段机械更新为 <code>1.8.0</code>。既有函数与 Schema 形状、Profile SPI v3、Kit 四命令的形状均不变。</p>
+<p>provider Profile descriptor 从 Foundation 0.8.4 与 Contracts 1.8.0 升级到 Foundation 0.9.0 时，须把自身的 <code>base.contractsVersion</code> 字段机械更新为 <code>1.9.0</code>。Kit 仍只有四个顶层命令；Quickstart Bundle 继续是 candidate 精确版本，并在同一 mechanisms CLI 中提供有序 <code>validate-many-by-schema-id</code>。</p>
 <p>能力分组（与 <code>docs/agents/capability-catalog.json</code> 对应）：</p>
 <ul>
 <li><a href="#scaffold-foundationkitscaffold">scaffold</a> → <code>scaffoldTarget</code></li>