skill-family-harness-node 0.8.4 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,48 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.10.0 locale=en baseline=sha256:64a325d3e51604a8436b33df5a7f617f9aab1f1e02adb32ccb58316aa5c5eab1 -->
+## [0.10.0] - 2026-08-24
+
+Harness 0.10.0 adds canonical entrypoints, reuses existing host mechanisms, and adds read-only peer adapter verification from real directories.
+
+### Added
+
+- Adds skill-family-harness-node/quickstart-profile and skill-family-harness-node/rename-directory-no-replace canonical exports.
+- Reuses filesystem-root binding, strict no-replace publication, atomic replacement, and existing build digests for the Kit's local host install/update path.
+- Adds `verifyPeerAdapterDirectories`, which re-enumerates peer roots and verifies common closure, byte digests, standard manifests, and complete logical mappings without writing them.
+
+### Changed
+
+- Keeps each historical candidate export as a same-source migration alias and leaves the mechanism registry unchanged.
+- Keeps validate-many-by-schema-id and its error semantics unchanged while managed Bundles accept historical and canonical Schema IDs through the same validator.
+
+### Upgrade Notes
+
+Update all three exact pins to 0.10.0 and migrate historical candidate imports and Schema IDs once to canonical identities. The low-level no-replace primitive remains distinct from the stable fixed-set-publication API; choose the contract that matches the use case.
+<!-- release-skill:changelog:end version=0.10.0 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.9.0 locale=en baseline=sha256:e5f4e3bb6ab343e4ccfb7dcdbba8b9ab4576b4cf285c30bb3597d577be5eb391 -->
+## [0.9.0] - 2026-08-24
+
+Harness 0.9.0 adds stable identity-bound reads and fixed-set no-replace publication with a fixed four-platform native closure.
+
+### Added
+
+- Adds createFilesystemRootBinding and readFileBound with handle-relative no-follow acquisition and optional byte digest guarding.
+- Adds the stable fixed-set-publication subpath with native no-replace publication and terminal indeterminate receipts.
+- Adds the candidate validate-many-by-schema-id mechanism to the existing Quickstart dispatcher.
+
+### Changed
+
+- Keeps protected deletion excluded and preserves the existing 21-item capability registry.
+
+### Upgrade Notes
+
+Pin Contracts, Harness, and Engineering Kit to exactly 0.9.0. Batch validation and the Quickstart Bundle remain candidate; filesystem binding and fixed-set publication are stable.
+<!-- release-skill:changelog:end version=0.9.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.8.4 locale=en baseline=sha256:dfb053d7719d3c7cb5b7d8dbe7a2349597696614651ef4ae04451c34cd7bbc02 -->
 ## [0.8.4] - 2026-08-24
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,48 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.10.0 locale=zh-CN baseline=sha256:d8e27cce0c3e97b7d10b6f88fad4df66c8d527d3d6a2fb165f8c909612ff9f19 -->
+## [0.10.0] - 2026-08-24
+
+Harness 0.10.0 增加规范入口，复用既有宿主机制，并从真实目录提供同级适配器只读验证。
+
+### 新增
+
+- 新增 skill-family-harness-node/quickstart-profile 与 skill-family-harness-node/rename-directory-no-replace 规范导出。
+- 复用 filesystem-root binding、严格不替换发布、原子替换和既有构建摘要，支持 Kit 的本地宿主 install/update。
+- 新增 `verifyPeerAdapterDirectories`，重新枚举 peer 根目录，验证共同闭包、逐字节摘要、标准 manifest 和完整 logicalMappings，不写入目录。
+
+### 变更
+
+- 历史 candidate 导出继续作为同源迁移别名，机制登记表不变。
+- validate-many-by-schema-id 及错误语义不变；受管 Bundle 让历史与规范 Schema ID 共用同一 validator。
+
+### 升级说明
+
+消费者应把三个包的精确 pin 更新到 0.10.0，并把历史 candidate 导入和 Schema ID 一次迁移到规范身份。低层不替换原语仍不同于稳定 fixed-set-publication API，消费者按所需合同选择。
+<!-- release-skill:changelog:end version=0.10.0 locale=zh-CN -->
+
+
+<!-- release-skill:changelog:start version=0.9.0 locale=zh-CN baseline=sha256:7f3ff503831b8fb52f20293a4af4003ff116b7f9d820a0c2da1bd34a0b261248 -->
+## [0.9.0] - 2026-08-24
+
+Harness 0.9.0 新增稳定身份绑定读取与固定集合不替换发布，并携带固定四平台原生闭包。
+
+### 新增
+
+- 新增 createFilesystemRootBinding 与 readFileBound，使用句柄相对不跟随符号链接获取，并支持可选字节摘要保护。
+- 新增稳定 fixed-set-publication 子路径，使用原生不替换发布并保留终态 indeterminate 回执。
+- 在既有 Quickstart dispatcher 中增加 validate-many-by-schema-id candidate 机制。
+
+### 变更
+
+- 身份保护删除继续排除，既有 21 项能力登记保持不变。
+
+### 升级说明
+
+三个 Foundation 包必须精确锁定 0.9.0。批量校验与 Quickstart Bundle 仍为 candidate；文件系统绑定与固定集合发布为 stable。
+<!-- release-skill:changelog:end version=0.9.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.8.4 locale=zh-CN baseline=sha256:e8d7be87a26ef296ee4ae27e2325ac8ff1dc33fc69e5f4a65520656f9860bb91 -->
 ## [0.8.4] - 2026-08-24
 

package/README.md

@@ -4,23 +4,29 @@
 
 # skill-family-harness-node
 
-<!-- release-skill:release-version: 0.8.4 -->
+<!-- release-skill:release-version: 0.10.0 -->
 
 The **single default Node implementation** of the Contracts mechanism protocol. This is a thin runtime: it only implements the mechanism protocol, introduces no business semantics, and does not provide a second-language implementation.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.8.4** (2026-08-24)
+**0.10.0** (2026-08-24)
 
-Lockstep Foundation 0.8.4 version update with no new Harness mechanism or public API.
+Harness 0.10.0 adds canonical entrypoints, reuses existing host mechanisms, and adds read-only peer adapter verification from real directories.
+
+**Added**
+
+- Adds skill-family-harness-node/quickstart-profile and skill-family-harness-node/rename-directory-no-replace canonical exports.
+- Reuses filesystem-root binding, strict no-replace publication, atomic replacement, and existing build digests for the Kit's local host install/update path.
+- Adds `verifyPeerAdapterDirectories`, which re-enumerates peer roots and verifies common closure, byte digests, standard manifests, and complete logical mappings without writing them.
 
 **Changed**
 
-- Moves the package version to 0.8.4 together with Contracts and Engineering Kit.
-- Keeps all 21 Harness capabilities and public exports unchanged; source-authority receipt validation belongs to Contracts.
+- Keeps each historical candidate export as a same-source migration alias and leaves the mechanism registry unchanged.
+- Keeps validate-many-by-schema-id and its error semantics unchanged while managed Bundles accept historical and canonical Schema IDs through the same validator.
 
 **Upgrade Notes**
 
-Consumers must pin all three Foundation packages to exactly 0.8.4. No Harness API migration is required.
+Update all three exact pins to 0.10.0 and migrate historical candidate imports and Schema IDs once to canonical identities. The low-level no-replace primitive remains distinct from the stable fixed-set-publication API; choose the contract that matches the use case.
 <!-- release-skill:managed:end id=latest-release -->
 
 ## Problem It Solves
@@ -34,14 +40,14 @@ The Harness consumes `skill-family-contracts` (a workspace dependency), reusing
 ## Installation and Minimal Example
 
 ```sh
-npm install skill-family-harness-node@0.8.4
+npm install skill-family-harness-node@0.10.0
 npm info skill-family-harness-node --help
 ```
 
 The minimal example shows validating a contract document inside Node:
 
 ```js
-// Run from an empty directory: npm install skill-family-harness-node@0.8.4
+// Run from an empty directory: npm install skill-family-harness-node@0.10.0
 import { validateContractDocument } from "skill-family-harness-node";
 
 const document = {
@@ -70,12 +76,12 @@ import {
   createQuickstartTask,
   wrapQuickstartResult,
   verifyQuickstartExchange,
-} from "skill-family-harness-node/candidate/quickstart-profile";
+} from "skill-family-harness-node/quickstart-profile";
 ```
 
 The v2 mechanism recomputes the bytes of every path-backed output and evidence Resource. It also rejects duplicate Resource ids, correlation drift, a changed Task digest, and incomplete or mismatched evidence bindings. It does not perform a domain audit, choose a method, retry work, or own lifecycle state.
 
-The subpath is public but **not stable** and may change or be removed in a later minor release. Pin exactly `0.4.0` for v2; integrations that still produce candidate v1 exchanges must stay pinned to exactly `0.2.1`.
+The capability remains **candidate**. Pin all three Foundation packages exactly while evaluating it. Version 0.10.0 adds the canonical path above; the historical `/candidate/quickstart-profile` path remains a same-source migration alias. Migrate once to the canonical path. A later stable promotion will not require another import or same-byte Bundle rebuild. Integrations that still produce candidate v1 exchanges must stay pinned to exactly `0.2.1`.
 
 ## Typical Use Cases
 
@@ -162,7 +168,7 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 ### Do not use when
 
 - You need to put file-selection business rules into the Foundation (business rules are owned by the caller).
-- You need host apply/install/update/uninstall, a full Qoder driver, or binary adapter source (explicitly unsupported).
+- You need host identity policy, host drivers, remote publication, uninstall deletion, a full Qoder driver, or binary adapter source (explicitly unsupported).
 - You need domain audit semantics, retry orchestration, or a compatibility-frozen Quickstart API.
 
 ### Capability selection
@@ -174,7 +180,7 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 - `foundation.harness.resource-closure`: deterministic resource closure and sha256 digest.
 - `foundation.harness.request-processing`: operation-request → terminal operation-result.
 - `foundation.harness.report`: report-model validation/render/binding/check.
-- `foundation.harness.host-adapter`: adapter source closure/build/materialize and version probe.
+- `foundation.harness.host-adapter`: adapter source closure/build/materialize, version probe, and read-only peer adapter verification.
 - `foundation.harness.state-store`: append-only events, hash chain, snapshots, and lock recovery.
 - `foundation.harness.errors`: mechanism error types and stable error classes.
 - `foundation.harness.quickstart-profile-candidate`: exact-version observation/task/result construction and binding verification.
@@ -203,16 +209,17 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 
 - Event meaning and reducer transitions remain consumer-owned; state-store only provides the base.
 - Only text adapter source (utf8) is supported; binary projection is not supported.
+- `verifyPeerAdapterDirectories` enumerates and reads two or more real peer roots, reuses bound-read/path containment/closure/manifest primitives, and fails closed on symlinks, escapes, byte drift, member drift, or incomplete mappings.
 
 ### Route elsewhere when
 
 - Business state machine / terminal states: route to loop-agent.
-- Host apply: explicitly unsupported.
+- Host identity policy, host drivers, and lifecycle authorization belong to Engineering Kit; Harness supplies only the reusable bound-read, strict-publication, atomic-write, closure, and probe mechanisms.
 - Domain audit semantics: route to a standalone audit consumer.
 
 ### Machine-readable sources
 
 - Public capability catalog: [`capability-catalog.json`](https://ifoohoo.github.io/skill-family-engineering-kit/agents/capability-catalog.json) (`foundation.harness.*` entries).
 - Package-local source: `src/*.mjs`.
-- Package-local candidate source: `candidate/quickstart-profile.mjs`; public import: `skill-family-harness-node/candidate/quickstart-profile`.
+- Package-local candidate source: `candidate/quickstart-profile.mjs`; canonical public import: `skill-family-harness-node/quickstart-profile`; historical migration alias: `skill-family-harness-node/candidate/quickstart-profile`.
 <!-- agent-quick-reference:end -->

package/README.zh-CN.md

@@ -5,23 +5,29 @@
 
 # skill-family-harness-node
 
-<!-- release-skill:release-version: 0.8.4 -->
+<!-- release-skill:release-version: 0.10.0 -->
 
 Contracts 机制协议的**唯一默认 Node 实现**。这是一个薄运行时（thin runtime）：只实现机制协议，不引入业务语义，不做第二语言实现。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.8.4** (2026-08-24)
+**0.10.0** (2026-08-24)
 
-随 Foundation 0.8.4 锁步升版；Harness 不新增机制或公共 API。
+Harness 0.10.0 增加规范入口，复用既有宿主机制，并从真实目录提供同级适配器只读验证。
+
+**新增**
+
+- 新增 skill-family-harness-node/quickstart-profile 与 skill-family-harness-node/rename-directory-no-replace 规范导出。
+- 复用 filesystem-root binding、严格不替换发布、原子替换和既有构建摘要，支持 Kit 的本地宿主 install/update。
+- 新增 `verifyPeerAdapterDirectories`，重新枚举 peer 根目录，验证共同闭包、逐字节摘要、标准 manifest 和完整 logicalMappings，不写入目录。
 
 **变更**
 
-- 包版本与 Contracts、Engineering Kit 一同升至 0.8.4。
-- 21 项 Harness 能力与公共导出保持不变；source-authority receipt 校验归 Contracts。
+- 历史 candidate 导出继续作为同源迁移别名，机制登记表不变。
+- validate-many-by-schema-id 及错误语义不变；受管 Bundle 让历史与规范 Schema ID 共用同一 validator。
 
 **升级说明**
 
-消费者必须把三个 Foundation 包精确锁定到 0.8.4；Harness API 无需迁移。
+消费者应把三个包的精确 pin 更新到 0.10.0，并把历史 candidate 导入和 Schema ID 一次迁移到规范身份。低层不替换原语仍不同于稳定 fixed-set-publication API，消费者按所需合同选择。
 <!-- release-skill:managed:end id=latest-release -->
 
 ## 解决的问题
@@ -35,14 +41,14 @@ Harness 消费 `skill-family-contracts`（工作区依赖），复用其方言
 ## 安装和最小示例
 
 ```sh
-npm install skill-family-harness-node@0.8.4
+npm install skill-family-harness-node@0.10.0
 npm info skill-family-harness-node --help
 ```
 
 最小示例演示在 Node 内校验一份契约文档：
 
 ```js
-// 从空目录运行：npm install skill-family-harness-node@0.8.4
+// 从空目录运行：npm install skill-family-harness-node@0.10.0
 import { validateContractDocument } from "skill-family-harness-node";
 
 const document = {
@@ -71,12 +77,12 @@ import {
   createQuickstartTask,
   wrapQuickstartResult,
   verifyQuickstartExchange,
-} from "skill-family-harness-node/candidate/quickstart-profile";
+} from "skill-family-harness-node/quickstart-profile";
 ```
 
 v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字节摘要，并拒绝重复 Resource id、correlation 漂移、Task digest 变化，以及缺失或错配的 evidence binding。它不执行领域审计，不选择 method，不编排重试，也不拥有生命周期状态。
 
-该子路径公开但**不稳定**，后续小版本可以修改或移除。使用 v2 时应精确锁定 `0.4.0`；仍生产 candidate v1 交换的接入必须继续精确锁定 `0.2.1`。
+该能力仍是 **candidate**，评估时必须精确锁定三个 Foundation 包。0.10.0 新增上面的规范入口；历史 `/candidate/quickstart-profile` 入口作为同源迁移别名继续可用。消费者迁移一次后，未来晋升 stable 不再切入口或重建相同 Bundle。仍生产 candidate v1 交换的接入必须继续精确锁定 `0.2.1`。
 
 ## 典型使用场景
 
@@ -163,7 +169,7 @@ v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字
 ### Do not use when
 
 - 需要把文件选择的业务规则放入 Foundation（业务规则由调用方拥有）。
-- 需要 host apply/install/update/uninstall、Qoder 完整 driver 或二进制 adapter source（明确 unsupported）。
+- 需要宿主身份策略、宿主 driver、远端发布、删除式 uninstall、Qoder 完整 driver 或二进制 adapter source（明确 unsupported）。
 - 需要领域审计语义、重试编排或兼容性已冻结的 Quickstart API。
 
 ### Capability selection
@@ -208,12 +214,12 @@ v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字
 ### Route elsewhere when
 
 - 业务状态机/终态：转 loop-agent。
-- 宿主 apply：明确 unsupported。
+- 宿主身份策略、宿主 driver 和生命周期授权归 Engineering Kit；Harness 只提供可复用的绑定读取、严格发布、原子写、闭包和探测机制。
 - 领域审计语义：转独立审计消费者。
 
 ### Machine-readable sources
 
 - 公开能力目录：[`capability-catalog.json`](https://ifoohoo.github.io/skill-family-engineering-kit/agents/capability-catalog.json)（`foundation.harness.*` 条目）。
 - 包内源：`src/*.mjs`。
-- 包内 Candidate 源：`candidate/quickstart-profile.mjs`；公共导入：`skill-family-harness-node/candidate/quickstart-profile`。
+- 包内 Candidate 源：`candidate/quickstart-profile.mjs`；规范公共导入：`skill-family-harness-node/quickstart-profile`；历史迁移别名：`skill-family-harness-node/candidate/quickstart-profile`。
 <!-- agent-quick-reference:end -->

package/candidate/mechanisms-cli.mjs

@@ -22,6 +22,8 @@ function errorResponse(cause) {
     error: {
       name: typeof cause?.name === "string" ? cause.name : "Error",
       message: cause?.message ?? String(cause),
+      ...(typeof cause?.code === "string" ? { code: cause.code } : {}),
+      ...(cause?.details !== undefined ? { details: cause.details } : {}),
     },
   };
 }

package/candidate/quickstart-profile.mjs

@@ -1,4 +1,4 @@
-import { canonicalJson, digestDocument, isRegisteredErrorCode } from "skill-family-contracts";
+import { canonicalJson, ContractsError, digestDocument, isRegisteredErrorCode } from "skill-family-contracts";
 import {
   QUICKSTART_PROTOCOL,
   findNonJsonValue,
@@ -6,7 +6,7 @@ import {
   validateHarnessSurfaceDetectorDocument,
   validateHarnessSurfaceInventoryDocument,
   validateQuickstartProfileDocument,
-} from "skill-family-contracts/candidate/quickstart-profile";
+} from "skill-family-contracts/quickstart-profile";
 import { lstat, readdir, readFile, realpath } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -452,6 +452,7 @@ export async function verifyHarnessSurfaceInventory({ root, inventory, detectors
 
 const FOUNDATION_MECHANISM_OPERATIONS = Object.freeze([
   "validate-by-schema-id",
+  "validate-many-by-schema-id",
   "canonical-json",
   "digest-document",
   "resource-closure",
@@ -518,7 +519,48 @@ async function invokeReadFileStrict(params) {
  * several Foundation modules directly. validateBySchemaId is injected only
  * by the trusted offline Bundle; callers cannot name arbitrary functions.
  */
-export async function invokeFoundationMechanism(request, { validateBySchemaId } = {}) {
+function assertBatchRequest(request) {
+  if (Object.keys(request).sort().join(",") !== "operation,params" ||
+      request.operation !== "validate-many-by-schema-id" ||
+      request.params === null || typeof request.params !== "object" || Array.isArray(request.params) ||
+      Object.keys(request.params).sort().join(",") !== "requests" ||
+      !Array.isArray(request.params.requests) || request.params.requests.length === 0) {
+    throw new TypeError("invokeFoundationMechanism: validate-many-by-schema-id request is malformed");
+  }
+  for (const item of request.params.requests) {
+    if (item === null || typeof item !== "object" || Array.isArray(item) ||
+        Object.keys(item).sort().join(",") !== "document,schemaId" ||
+        typeof item.schemaId !== "string" || item.schemaId.length === 0) {
+      throw new TypeError("invokeFoundationMechanism: validate-many-by-schema-id item is malformed");
+    }
+  }
+}
+
+function invokeValidationBatch(request, { validateBySchemaId, listValidatableSchemaIds } = {}) {
+  assertBatchRequest(request);
+  if (typeof validateBySchemaId !== "function" || typeof listValidatableSchemaIds !== "function") {
+    throw new TypeError("invokeFoundationMechanism: validate-many-by-schema-id requires the trusted Bundle validator index");
+  }
+  const schemaIds = listValidatableSchemaIds();
+  if (!Array.isArray(schemaIds) || schemaIds.some((schemaId) => typeof schemaId !== "string")) {
+    throw new TypeError("invokeFoundationMechanism: trusted Bundle validator index is unavailable");
+  }
+  const known = new Set(schemaIds);
+  for (const item of request.params.requests) {
+    if (!known.has(item.schemaId)) {
+      throw new ContractsError("SFC1002", `unknown schema $id: ${item.schemaId}`, { schemaId: item.schemaId });
+    }
+  }
+  return {
+    results: request.params.requests.map((item, inputIndex) => ({
+      inputIndex,
+      schemaId: item.schemaId,
+      result: validateBySchemaId(item.schemaId, item.document),
+    })),
+  };
+}
+
+export async function invokeFoundationMechanism(request, { validateBySchemaId, listValidatableSchemaIds } = {}) {
   if (request === null || typeof request !== "object" || Array.isArray(request)) {
     throw new TypeError("invokeFoundationMechanism: request must be an object");
   }
@@ -530,6 +572,9 @@ export async function invokeFoundationMechanism(request, { validateBySchemaId }
   if (params === null || typeof params !== "object" || Array.isArray(params)) {
     throw new TypeError("invokeFoundationMechanism: params must be an object");
   }
+  if (operation === "validate-many-by-schema-id") {
+    return invokeValidationBatch(request, { validateBySchemaId, listValidatableSchemaIds });
+  }
   if (operation === "validate-by-schema-id") {
     if (typeof validateBySchemaId !== "function") {
       throw new TypeError("invokeFoundationMechanism: validate-by-schema-id requires the trusted Bundle validator");

package/package.json

@@ -10,7 +10,7 @@
   "dependencies": {
     "@pnpm/lockfile.fs": "1001.1.35",
     "ipaddr.js": "2.5.0",
-    "skill-family-contracts": "0.8.4",
+    "skill-family-contracts": "0.10.0",
     "yaml": "2.9.0"
   },
   "description": "Thin Node.js mechanism runtime for Skill Family engineering contracts.",
@@ -21,7 +21,10 @@
   "exports": {
     ".": "./src/index.mjs",
     "./candidate/quickstart-profile": "./candidate/quickstart-profile.mjs",
-    "./candidate/rename-directory-no-replace": "./candidate/rename-directory-no-replace/rename-directory-no-replace.mjs"
+    "./candidate/rename-directory-no-replace": "./candidate/rename-directory-no-replace/rename-directory-no-replace.mjs",
+    "./fixed-set-publication": "./src/fixed-set-publication.mjs",
+    "./quickstart-profile": "./candidate/quickstart-profile.mjs",
+    "./rename-directory-no-replace": "./candidate/rename-directory-no-replace/rename-directory-no-replace.mjs"
   },
   "files": [
     "src",
@@ -45,7 +48,7 @@
     "url": "https://github.com/ifoohoo/skill-family-harness-node.git"
   },
   "type": "module",
-  "version": "0.8.4",
+  "version": "0.10.0",
   "scripts": {
     "check": "node --test",
     "test": "node --test"

package/release-notes/0.10.0.yaml

@@ -0,0 +1,25 @@
+version: 0.10.0
+date: 2026-08-24
+locales:
+  en:
+    summary: Harness 0.10.0 adds canonical entrypoints, reuses existing host mechanisms, and adds read-only peer adapter verification from real directories.
+    changes:
+      added:
+        - Adds skill-family-harness-node/quickstart-profile and skill-family-harness-node/rename-directory-no-replace canonical exports.
+        - Reuses filesystem-root binding, strict no-replace publication, atomic replacement, and existing build digests for the Kit's local host install/update path.
+        - Adds `verifyPeerAdapterDirectories`, which re-enumerates peer roots and verifies common closure, byte digests, standard manifests, and complete logical mappings without writing them.
+      changed:
+        - Keeps each historical candidate export as a same-source migration alias and leaves the mechanism registry unchanged.
+        - Keeps validate-many-by-schema-id and its error semantics unchanged while managed Bundles accept historical and canonical Schema IDs through the same validator.
+    upgradeNotes: Update all three exact pins to 0.10.0 and migrate historical candidate imports and Schema IDs once to canonical identities. The low-level no-replace primitive remains distinct from the stable fixed-set-publication API; choose the contract that matches the use case.
+  zh-CN:
+    summary: Harness 0.10.0 增加规范入口，复用既有宿主机制，并从真实目录提供同级适配器只读验证。
+    changes:
+      added:
+        - 新增 skill-family-harness-node/quickstart-profile 与 skill-family-harness-node/rename-directory-no-replace 规范导出。
+        - 复用 filesystem-root binding、严格不替换发布、原子替换和既有构建摘要，支持 Kit 的本地宿主 install/update。
+        - 新增 `verifyPeerAdapterDirectories`，重新枚举 peer 根目录，验证共同闭包、逐字节摘要、标准 manifest 和完整 logicalMappings，不写入目录。
+      changed:
+        - 历史 candidate 导出继续作为同源迁移别名，机制登记表不变。
+        - validate-many-by-schema-id 及错误语义不变；受管 Bundle 让历史与规范 Schema ID 共用同一 validator。
+    upgradeNotes: 消费者应把三个包的精确 pin 更新到 0.10.0，并把历史 candidate 导入和 Schema ID 一次迁移到规范身份。低层不替换原语仍不同于稳定 fixed-set-publication API，消费者按所需合同选择。

package/release-notes/0.9.0.yaml

@@ -0,0 +1,23 @@
+version: 0.9.0
+date: 2026-08-24
+locales:
+  en:
+    summary: Harness 0.9.0 adds stable identity-bound reads and fixed-set no-replace publication with a fixed four-platform native closure.
+    changes:
+      added:
+        - Adds createFilesystemRootBinding and readFileBound with handle-relative no-follow acquisition and optional byte digest guarding.
+        - Adds the stable fixed-set-publication subpath with native no-replace publication and terminal indeterminate receipts.
+        - Adds the candidate validate-many-by-schema-id mechanism to the existing Quickstart dispatcher.
+      changed:
+        - Keeps protected deletion excluded and preserves the existing 21-item capability registry.
+    upgradeNotes: Pin Contracts, Harness, and Engineering Kit to exactly 0.9.0. Batch validation and the Quickstart Bundle remain candidate; filesystem binding and fixed-set publication are stable.
+  zh-CN:
+    summary: Harness 0.9.0 新增稳定身份绑定读取与固定集合不替换发布，并携带固定四平台原生闭包。
+    changes:
+      added:
+        - 新增 createFilesystemRootBinding 与 readFileBound，使用句柄相对不跟随符号链接获取，并支持可选字节摘要保护。
+        - 新增稳定 fixed-set-publication 子路径，使用原生不替换发布并保留终态 indeterminate 回执。
+        - 在既有 Quickstart dispatcher 中增加 validate-many-by-schema-id candidate 机制。
+      changed:
+        - 身份保护删除继续排除，既有 21 项能力登记保持不变。
+    upgradeNotes: 三个 Foundation 包必须精确锁定 0.9.0。批量校验与 Quickstart Bundle 仍为 candidate；文件系统绑定与固定集合发布为 stable。