skill-family-harness-node 0.9.0 → 0.10.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.10.0 locale=en baseline=sha256:64a325d3e51604a8436b33df5a7f617f9aab1f1e02adb32ccb58316aa5c5eab1 -->
+## [0.10.0] - 2026-08-24
+
+Harness 0.10.0 adds canonical entrypoints, reuses existing host mechanisms, and adds read-only peer adapter verification from real directories.
+
+### Added
+
+- Adds skill-family-harness-node/quickstart-profile and skill-family-harness-node/rename-directory-no-replace canonical exports.
+- Reuses filesystem-root binding, strict no-replace publication, atomic replacement, and existing build digests for the Kit's local host install/update path.
+- Adds `verifyPeerAdapterDirectories`, which re-enumerates peer roots and verifies common closure, byte digests, standard manifests, and complete logical mappings without writing them.
+
+### Changed
+
+- Keeps each historical candidate export as a same-source migration alias and leaves the mechanism registry unchanged.
+- Keeps validate-many-by-schema-id and its error semantics unchanged while managed Bundles accept historical and canonical Schema IDs through the same validator.
+
+### Upgrade Notes
+
+Update all three exact pins to 0.10.0 and migrate historical candidate imports and Schema IDs once to canonical identities. The low-level no-replace primitive remains distinct from the stable fixed-set-publication API; choose the contract that matches the use case.
+<!-- release-skill:changelog:end version=0.10.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.9.0 locale=en baseline=sha256:e5f4e3bb6ab343e4ccfb7dcdbba8b9ab4576b4cf285c30bb3597d577be5eb391 -->
 ## [0.9.0] - 2026-08-24
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,27 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.10.0 locale=zh-CN baseline=sha256:d8e27cce0c3e97b7d10b6f88fad4df66c8d527d3d6a2fb165f8c909612ff9f19 -->
+## [0.10.0] - 2026-08-24
+
+Harness 0.10.0 增加规范入口，复用既有宿主机制，并从真实目录提供同级适配器只读验证。
+
+### 新增
+
+- 新增 skill-family-harness-node/quickstart-profile 与 skill-family-harness-node/rename-directory-no-replace 规范导出。
+- 复用 filesystem-root binding、严格不替换发布、原子替换和既有构建摘要，支持 Kit 的本地宿主 install/update。
+- 新增 `verifyPeerAdapterDirectories`，重新枚举 peer 根目录，验证共同闭包、逐字节摘要、标准 manifest 和完整 logicalMappings，不写入目录。
+
+### 变更
+
+- 历史 candidate 导出继续作为同源迁移别名，机制登记表不变。
+- validate-many-by-schema-id 及错误语义不变；受管 Bundle 让历史与规范 Schema ID 共用同一 validator。
+
+### 升级说明
+
+消费者应把三个包的精确 pin 更新到 0.10.0，并把历史 candidate 导入和 Schema ID 一次迁移到规范身份。低层不替换原语仍不同于稳定 fixed-set-publication API，消费者按所需合同选择。
+<!-- release-skill:changelog:end version=0.10.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.9.0 locale=zh-CN baseline=sha256:7f3ff503831b8fb52f20293a4af4003ff116b7f9d820a0c2da1bd34a0b261248 -->
 ## [0.9.0] - 2026-08-24
 

package/README.md

@@ -4,28 +4,29 @@
 
 # skill-family-harness-node
 
-<!-- release-skill:release-version: 0.9.0 -->
+<!-- release-skill:release-version: 0.10.0 -->
 
 The **single default Node implementation** of the Contracts mechanism protocol. This is a thin runtime: it only implements the mechanism protocol, introduces no business semantics, and does not provide a second-language implementation.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.0** (2026-08-24)
+**0.10.0** (2026-08-24)
 
-Harness 0.9.0 adds stable identity-bound reads and fixed-set no-replace publication with a fixed four-platform native closure.
+Harness 0.10.0 adds canonical entrypoints, reuses existing host mechanisms, and adds read-only peer adapter verification from real directories.
 
 **Added**
 
-- Adds createFilesystemRootBinding and readFileBound with handle-relative no-follow acquisition and optional byte digest guarding.
-- Adds the stable fixed-set-publication subpath with native no-replace publication and terminal indeterminate receipts.
-- Adds the candidate validate-many-by-schema-id mechanism to the existing Quickstart dispatcher.
+- Adds skill-family-harness-node/quickstart-profile and skill-family-harness-node/rename-directory-no-replace canonical exports.
+- Reuses filesystem-root binding, strict no-replace publication, atomic replacement, and existing build digests for the Kit's local host install/update path.
+- Adds `verifyPeerAdapterDirectories`, which re-enumerates peer roots and verifies common closure, byte digests, standard manifests, and complete logical mappings without writing them.
 
 **Changed**
 
-- Keeps protected deletion excluded and preserves the existing 21-item capability registry.
+- Keeps each historical candidate export as a same-source migration alias and leaves the mechanism registry unchanged.
+- Keeps validate-many-by-schema-id and its error semantics unchanged while managed Bundles accept historical and canonical Schema IDs through the same validator.
 
 **Upgrade Notes**
 
-Pin Contracts, Harness, and Engineering Kit to exactly 0.9.0. Batch validation and the Quickstart Bundle remain candidate; filesystem binding and fixed-set publication are stable.
+Update all three exact pins to 0.10.0 and migrate historical candidate imports and Schema IDs once to canonical identities. The low-level no-replace primitive remains distinct from the stable fixed-set-publication API; choose the contract that matches the use case.
 <!-- release-skill:managed:end id=latest-release -->
 
 ## Problem It Solves
@@ -39,14 +40,14 @@ The Harness consumes `skill-family-contracts` (a workspace dependency), reusing
 ## Installation and Minimal Example
 
 ```sh
-npm install skill-family-harness-node@0.9.0
+npm install skill-family-harness-node@0.10.0
 npm info skill-family-harness-node --help
 ```
 
 The minimal example shows validating a contract document inside Node:
 
 ```js
-// Run from an empty directory: npm install skill-family-harness-node@0.9.0
+// Run from an empty directory: npm install skill-family-harness-node@0.10.0
 import { validateContractDocument } from "skill-family-harness-node";
 
 const document = {
@@ -75,12 +76,12 @@ import {
   createQuickstartTask,
   wrapQuickstartResult,
   verifyQuickstartExchange,
-} from "skill-family-harness-node/candidate/quickstart-profile";
+} from "skill-family-harness-node/quickstart-profile";
 ```
 
 The v2 mechanism recomputes the bytes of every path-backed output and evidence Resource. It also rejects duplicate Resource ids, correlation drift, a changed Task digest, and incomplete or mismatched evidence bindings. It does not perform a domain audit, choose a method, retry work, or own lifecycle state.
 
-The subpath is public but **not stable** and may change or be removed in a later minor release. Pin exactly `0.4.0` for v2; integrations that still produce candidate v1 exchanges must stay pinned to exactly `0.2.1`.
+The capability remains **candidate**. Pin all three Foundation packages exactly while evaluating it. Version 0.10.0 adds the canonical path above; the historical `/candidate/quickstart-profile` path remains a same-source migration alias. Migrate once to the canonical path. A later stable promotion will not require another import or same-byte Bundle rebuild. Integrations that still produce candidate v1 exchanges must stay pinned to exactly `0.2.1`.
 
 ## Typical Use Cases
 
@@ -167,7 +168,7 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 ### Do not use when
 
 - You need to put file-selection business rules into the Foundation (business rules are owned by the caller).
-- You need host apply/install/update/uninstall, a full Qoder driver, or binary adapter source (explicitly unsupported).
+- You need host identity policy, host drivers, remote publication, uninstall deletion, a full Qoder driver, or binary adapter source (explicitly unsupported).
 - You need domain audit semantics, retry orchestration, or a compatibility-frozen Quickstart API.
 
 ### Capability selection
@@ -179,7 +180,7 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 - `foundation.harness.resource-closure`: deterministic resource closure and sha256 digest.
 - `foundation.harness.request-processing`: operation-request → terminal operation-result.
 - `foundation.harness.report`: report-model validation/render/binding/check.
-- `foundation.harness.host-adapter`: adapter source closure/build/materialize and version probe.
+- `foundation.harness.host-adapter`: adapter source closure/build/materialize, version probe, and read-only peer adapter verification.
 - `foundation.harness.state-store`: append-only events, hash chain, snapshots, and lock recovery.
 - `foundation.harness.errors`: mechanism error types and stable error classes.
 - `foundation.harness.quickstart-profile-candidate`: exact-version observation/task/result construction and binding verification.
@@ -208,16 +209,17 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 
 - Event meaning and reducer transitions remain consumer-owned; state-store only provides the base.
 - Only text adapter source (utf8) is supported; binary projection is not supported.
+- `verifyPeerAdapterDirectories` enumerates and reads two or more real peer roots, reuses bound-read/path containment/closure/manifest primitives, and fails closed on symlinks, escapes, byte drift, member drift, or incomplete mappings.
 
 ### Route elsewhere when
 
 - Business state machine / terminal states: route to loop-agent.
-- Host apply: explicitly unsupported.
+- Host identity policy, host drivers, and lifecycle authorization belong to Engineering Kit; Harness supplies only the reusable bound-read, strict-publication, atomic-write, closure, and probe mechanisms.
 - Domain audit semantics: route to a standalone audit consumer.
 
 ### Machine-readable sources
 
 - Public capability catalog: [`capability-catalog.json`](https://ifoohoo.github.io/skill-family-engineering-kit/agents/capability-catalog.json) (`foundation.harness.*` entries).
 - Package-local source: `src/*.mjs`.
-- Package-local candidate source: `candidate/quickstart-profile.mjs`; public import: `skill-family-harness-node/candidate/quickstart-profile`.
+- Package-local candidate source: `candidate/quickstart-profile.mjs`; canonical public import: `skill-family-harness-node/quickstart-profile`; historical migration alias: `skill-family-harness-node/candidate/quickstart-profile`.
 <!-- agent-quick-reference:end -->

package/README.zh-CN.md

@@ -5,28 +5,29 @@
 
 # skill-family-harness-node
 
-<!-- release-skill:release-version: 0.9.0 -->
+<!-- release-skill:release-version: 0.10.0 -->
 
 Contracts 机制协议的**唯一默认 Node 实现**。这是一个薄运行时（thin runtime）：只实现机制协议，不引入业务语义，不做第二语言实现。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.0** (2026-08-24)
+**0.10.0** (2026-08-24)
 
-Harness 0.9.0 新增稳定身份绑定读取与固定集合不替换发布，并携带固定四平台原生闭包。
+Harness 0.10.0 增加规范入口，复用既有宿主机制，并从真实目录提供同级适配器只读验证。
 
 **新增**
 
-- 新增 createFilesystemRootBinding 与 readFileBound，使用句柄相对不跟随符号链接获取，并支持可选字节摘要保护。
-- 新增稳定 fixed-set-publication 子路径，使用原生不替换发布并保留终态 indeterminate 回执。
-- 在既有 Quickstart dispatcher 中增加 validate-many-by-schema-id candidate 机制。
+- 新增 skill-family-harness-node/quickstart-profile 与 skill-family-harness-node/rename-directory-no-replace 规范导出。
+- 复用 filesystem-root binding、严格不替换发布、原子替换和既有构建摘要，支持 Kit 的本地宿主 install/update。
+- 新增 `verifyPeerAdapterDirectories`，重新枚举 peer 根目录，验证共同闭包、逐字节摘要、标准 manifest 和完整 logicalMappings，不写入目录。
 
 **变更**
 
-- 身份保护删除继续排除，既有 21 项能力登记保持不变。
+- 历史 candidate 导出继续作为同源迁移别名，机制登记表不变。
+- validate-many-by-schema-id 及错误语义不变；受管 Bundle 让历史与规范 Schema ID 共用同一 validator。
 
 **升级说明**
 
-三个 Foundation 包必须精确锁定 0.9.0。批量校验与 Quickstart Bundle 仍为 candidate；文件系统绑定与固定集合发布为 stable。
+消费者应把三个包的精确 pin 更新到 0.10.0，并把历史 candidate 导入和 Schema ID 一次迁移到规范身份。低层不替换原语仍不同于稳定 fixed-set-publication API，消费者按所需合同选择。
 <!-- release-skill:managed:end id=latest-release -->
 
 ## 解决的问题
@@ -40,14 +41,14 @@ Harness 消费 `skill-family-contracts`（工作区依赖），复用其方言
 ## 安装和最小示例
 
 ```sh
-npm install skill-family-harness-node@0.9.0
+npm install skill-family-harness-node@0.10.0
 npm info skill-family-harness-node --help
 ```
 
 最小示例演示在 Node 内校验一份契约文档：
 
 ```js
-// 从空目录运行：npm install skill-family-harness-node@0.9.0
+// 从空目录运行：npm install skill-family-harness-node@0.10.0
 import { validateContractDocument } from "skill-family-harness-node";
 
 const document = {
@@ -76,12 +77,12 @@ import {
   createQuickstartTask,
   wrapQuickstartResult,
   verifyQuickstartExchange,
-} from "skill-family-harness-node/candidate/quickstart-profile";
+} from "skill-family-harness-node/quickstart-profile";
 ```
 
 v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字节摘要，并拒绝重复 Resource id、correlation 漂移、Task digest 变化，以及缺失或错配的 evidence binding。它不执行领域审计，不选择 method，不编排重试，也不拥有生命周期状态。
 
-该子路径公开但**不稳定**，后续小版本可以修改或移除。使用 v2 时应精确锁定 `0.4.0`；仍生产 candidate v1 交换的接入必须继续精确锁定 `0.2.1`。
+该能力仍是 **candidate**，评估时必须精确锁定三个 Foundation 包。0.10.0 新增上面的规范入口；历史 `/candidate/quickstart-profile` 入口作为同源迁移别名继续可用。消费者迁移一次后，未来晋升 stable 不再切入口或重建相同 Bundle。仍生产 candidate v1 交换的接入必须继续精确锁定 `0.2.1`。
 
 ## 典型使用场景
 
@@ -168,7 +169,7 @@ v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字
 ### Do not use when
 
 - 需要把文件选择的业务规则放入 Foundation（业务规则由调用方拥有）。
-- 需要 host apply/install/update/uninstall、Qoder 完整 driver 或二进制 adapter source（明确 unsupported）。
+- 需要宿主身份策略、宿主 driver、远端发布、删除式 uninstall、Qoder 完整 driver 或二进制 adapter source（明确 unsupported）。
 - 需要领域审计语义、重试编排或兼容性已冻结的 Quickstart API。
 
 ### Capability selection
@@ -213,12 +214,12 @@ v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字
 ### Route elsewhere when
 
 - 业务状态机/终态：转 loop-agent。
-- 宿主 apply：明确 unsupported。
+- 宿主身份策略、宿主 driver 和生命周期授权归 Engineering Kit；Harness 只提供可复用的绑定读取、严格发布、原子写、闭包和探测机制。
 - 领域审计语义：转独立审计消费者。
 
 ### Machine-readable sources
 
 - 公开能力目录：[`capability-catalog.json`](https://ifoohoo.github.io/skill-family-engineering-kit/agents/capability-catalog.json)（`foundation.harness.*` 条目）。
 - 包内源：`src/*.mjs`。
-- 包内 Candidate 源：`candidate/quickstart-profile.mjs`；公共导入：`skill-family-harness-node/candidate/quickstart-profile`。
+- 包内 Candidate 源：`candidate/quickstart-profile.mjs`；规范公共导入：`skill-family-harness-node/quickstart-profile`；历史迁移别名：`skill-family-harness-node/candidate/quickstart-profile`。
 <!-- agent-quick-reference:end -->

package/candidate/quickstart-profile.mjs

@@ -6,7 +6,7 @@ import {
   validateHarnessSurfaceDetectorDocument,
   validateHarnessSurfaceInventoryDocument,
   validateQuickstartProfileDocument,
-} from "skill-family-contracts/candidate/quickstart-profile";
+} from "skill-family-contracts/quickstart-profile";
 import { lstat, readdir, readFile, realpath } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";

package/package.json

@@ -10,7 +10,7 @@
   "dependencies": {
     "@pnpm/lockfile.fs": "1001.1.35",
     "ipaddr.js": "2.5.0",
-    "skill-family-contracts": "0.9.0",
+    "skill-family-contracts": "0.10.0",
     "yaml": "2.9.0"
   },
   "description": "Thin Node.js mechanism runtime for Skill Family engineering contracts.",
@@ -22,7 +22,9 @@
     ".": "./src/index.mjs",
     "./candidate/quickstart-profile": "./candidate/quickstart-profile.mjs",
     "./candidate/rename-directory-no-replace": "./candidate/rename-directory-no-replace/rename-directory-no-replace.mjs",
-    "./fixed-set-publication": "./src/fixed-set-publication.mjs"
+    "./fixed-set-publication": "./src/fixed-set-publication.mjs",
+    "./quickstart-profile": "./candidate/quickstart-profile.mjs",
+    "./rename-directory-no-replace": "./candidate/rename-directory-no-replace/rename-directory-no-replace.mjs"
   },
   "files": [
     "src",
@@ -46,7 +48,7 @@
     "url": "https://github.com/ifoohoo/skill-family-harness-node.git"
   },
   "type": "module",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "scripts": {
     "check": "node --test",
     "test": "node --test"

package/release-notes/0.10.0.yaml

@@ -0,0 +1,25 @@
+version: 0.10.0
+date: 2026-08-24
+locales:
+  en:
+    summary: Harness 0.10.0 adds canonical entrypoints, reuses existing host mechanisms, and adds read-only peer adapter verification from real directories.
+    changes:
+      added:
+        - Adds skill-family-harness-node/quickstart-profile and skill-family-harness-node/rename-directory-no-replace canonical exports.
+        - Reuses filesystem-root binding, strict no-replace publication, atomic replacement, and existing build digests for the Kit's local host install/update path.
+        - Adds `verifyPeerAdapterDirectories`, which re-enumerates peer roots and verifies common closure, byte digests, standard manifests, and complete logical mappings without writing them.
+      changed:
+        - Keeps each historical candidate export as a same-source migration alias and leaves the mechanism registry unchanged.
+        - Keeps validate-many-by-schema-id and its error semantics unchanged while managed Bundles accept historical and canonical Schema IDs through the same validator.
+    upgradeNotes: Update all three exact pins to 0.10.0 and migrate historical candidate imports and Schema IDs once to canonical identities. The low-level no-replace primitive remains distinct from the stable fixed-set-publication API; choose the contract that matches the use case.
+  zh-CN:
+    summary: Harness 0.10.0 增加规范入口，复用既有宿主机制，并从真实目录提供同级适配器只读验证。
+    changes:
+      added:
+        - 新增 skill-family-harness-node/quickstart-profile 与 skill-family-harness-node/rename-directory-no-replace 规范导出。
+        - 复用 filesystem-root binding、严格不替换发布、原子替换和既有构建摘要，支持 Kit 的本地宿主 install/update。
+        - 新增 `verifyPeerAdapterDirectories`，重新枚举 peer 根目录，验证共同闭包、逐字节摘要、标准 manifest 和完整 logicalMappings，不写入目录。
+      changed:
+        - 历史 candidate 导出继续作为同源迁移别名，机制登记表不变。
+        - validate-many-by-schema-id 及错误语义不变；受管 Bundle 让历史与规范 Schema ID 共用同一 validator。
+    upgradeNotes: 消费者应把三个包的精确 pin 更新到 0.10.0，并把历史 candidate 导入和 Schema ID 一次迁移到规范身份。低层不替换原语仍不同于稳定 fixed-set-publication API，消费者按所需合同选择。

package/src/index.mjs

@@ -148,6 +148,7 @@ export {
   materializeAdapterBuild,
   probeVersionVector,
 } from "./host.mjs";
+export { verifyPeerAdapterDirectories } from "./peer-adapter.mjs";
 
 // Deterministic report layer (FND-ADR-005): validate -> render -> bind -> check.
 // Pure functions only: no clock, no environment, no network, no model calls.

package/src/peer-adapter.mjs

@@ -0,0 +1,186 @@
+import { lstat, opendir } from "node:fs/promises";
+import { TextDecoder } from "node:util";
+import path from "node:path";
+import { canonicalJson, validateDocument } from "skill-family-contracts";
+import { classifyPathInput, resolveContained } from "./paths.mjs";
+import { createFilesystemRootBinding, readFileBound } from "./bound-read.mjs";
+import { buildAdapterClosure } from "./host.mjs";
+import { HARNESS_ERROR_KINDS, HarnessError, mechanismError } from "./errors.mjs";
+
+const REQUEST_SCHEMA_ID = "https://contracts.skill-family.example/v1/adapter-peer-verification-request.json";
+const RESULT_SCHEMA_ID = "https://contracts.skill-family.example/v1/adapter-peer-verification-result.json";
+
+function invalidParams(message, details) {
+  return new HarnessError("SFC2003", message, { ...(details ?? {}), kind: "invalid-params" });
+}
+
+function validate(document, schemaId, message) {
+  const result = validateDocument(document, { schemaId, dialect: "2020-12", policy: "strict" });
+  if (!result.valid) throw mechanismError(HARNESS_ERROR_KINDS.HOST_CONTRACT_INVALID, message, { errors: result.errors });
+  return result.data;
+}
+
+function relativeChild(parent, name) {
+  const rel = parent ? `${parent}/${name}` : name;
+  const classified = classifyPathInput(rel);
+  if (!classified.ok || path.posix.normalize(rel) !== rel) {
+    throw mechanismError(classified.kind ?? HARNESS_ERROR_KINDS.INVALID_PATH, "peer adapter member path is not portable", { input: rel });
+  }
+  return rel;
+}
+
+async function collectFiles(root, rootBinding) {
+  const files = [];
+  async function walk(relDir) {
+    const directoryPath = relDir ? await resolveContained(root, relDir) : root;
+    const directoryStat = await lstat(directoryPath).catch((cause) => {
+      throw mechanismError(cause?.code === "ENOENT" ? HARNESS_ERROR_KINDS.MISSING_RESOURCE : HARNESS_ERROR_KINDS.READ_FAILED, "peer adapter directory cannot be inspected", { input: relDir || "." });
+    });
+    if (directoryStat.isSymbolicLink()) throw mechanismError(HARNESS_ERROR_KINDS.SYMLINK_ESCAPE, "peer adapter directory contains a symbolic link", { input: relDir || "." });
+    if (!directoryStat.isDirectory()) throw mechanismError(HARNESS_ERROR_KINDS.READ_FAILED, "peer adapter path is not a directory", { input: relDir || "." });
+    let entries;
+    try {
+      entries = await opendir(directoryPath);
+    } catch (cause) {
+      throw mechanismError(HARNESS_ERROR_KINDS.READ_FAILED, "peer adapter directory cannot be enumerated", { input: relDir || ".", code: cause?.code ?? "unknown" });
+    }
+    try {
+      for await (const entry of entries) {
+        const relPath = relativeChild(relDir, entry.name);
+        const absolutePath = await resolveContained(root, relPath);
+        const entryStat = await lstat(absolutePath).catch((cause) => {
+          throw mechanismError(cause?.code === "ENOENT" ? HARNESS_ERROR_KINDS.MISSING_RESOURCE : HARNESS_ERROR_KINDS.READ_FAILED, "peer adapter member disappeared during enumeration", { input: relPath });
+        });
+        if (entryStat.isSymbolicLink()) throw mechanismError(HARNESS_ERROR_KINDS.SYMLINK_ESCAPE, "peer adapter member is a symbolic link", { input: relPath });
+        if (entryStat.isDirectory()) {
+          await walk(relPath);
+        } else if (entryStat.isFile()) {
+          const receipt = await readFileBound(root, relPath, { rootBinding });
+          let content;
+          try {
+            content = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(receipt.content);
+          } catch {
+            throw mechanismError(HARNESS_ERROR_KINDS.READ_FAILED, "peer adapter member is not valid UTF-8", { input: relPath, encoding: "utf8" });
+          }
+          files.push({ path: relPath, content, sha256: receipt.sha256, bytes: receipt.bytes });
+        } else {
+          throw mechanismError(HARNESS_ERROR_KINDS.READ_FAILED, "peer adapter contains a non-regular member", { input: relPath });
+        }
+      }
+    } finally {
+      await entries.close().catch(() => {});
+    }
+  }
+  await walk("");
+  files.sort((left, right) => left.path.localeCompare(right.path));
+  return files;
+}
+
+function sourceFromFiles(skillFamilyId, files) {
+  const skills = new Map();
+  for (const file of files) {
+    const slash = file.path.indexOf("/");
+    if (slash <= 0 || slash === file.path.length - 1) throw invalidParams("peer adapter files must be nested below a skill directory", { path: file.path });
+    const skillId = file.path.slice(0, slash);
+    const skillPath = file.path.slice(slash + 1);
+    if (!skills.has(skillId)) skills.set(skillId, []);
+    skills.get(skillId).push({ path: skillPath, content: file.content });
+  }
+  return {
+    schemaVersion: 1,
+    kind: "skill-family.adapter-source",
+    skillFamilyId,
+    skills: [...skills.entries()].sort(([left], [right]) => left.localeCompare(right)).map(([id, entries]) => ({
+      id,
+      files: entries.sort((left, right) => left.path.localeCompare(right.path)),
+    })),
+  };
+}
+
+function verifyMappings(peer, manifest) {
+  const mappings = peer.logicalMappings;
+  const logicalIds = new Set();
+  const sourcePaths = new Set();
+  const expectedSkillEntries = new Set(manifest.sourceClosure.members
+    .filter((member) => member.sourcePath.split("/").length === 2 && member.sourcePath.endsWith("/SKILL.md"))
+    .map((member) => member.sourcePath));
+  if (mappings.length !== expectedSkillEntries.size) throw mechanismError(HARNESS_ERROR_KINDS.HOST_CONTRACT_INVALID, "peer logicalMappings must cover every skill entry exactly once");
+  const output = mappings.map((mapping) => {
+    if (logicalIds.has(mapping.logicalId)) throw mechanismError(HARNESS_ERROR_KINDS.HOST_CONTRACT_INVALID, "peer logicalMappings contain a duplicate logicalId", { logicalId: mapping.logicalId });
+    logicalIds.add(mapping.logicalId);
+    if (sourcePaths.has(mapping.sourcePath)) throw mechanismError(HARNESS_ERROR_KINDS.HOST_CONTRACT_INVALID, "peer logicalMappings contain a duplicate sourcePath", { sourcePath: mapping.sourcePath });
+    sourcePaths.add(mapping.sourcePath);
+    const sourceParts = mapping.sourcePath.split("/");
+    if (sourceParts.length !== 2 || sourceParts[1] !== "SKILL.md" || !expectedSkillEntries.has(mapping.sourcePath)) throw mechanismError(HARNESS_ERROR_KINDS.HOST_CONTRACT_INVALID, "peer logicalMapping must point to a root-level existing SKILL.md", { sourcePath: mapping.sourcePath });
+    const expectedSkillId = sourceParts[0];
+    if (mapping.skillId !== expectedSkillId) throw mechanismError(HARNESS_ERROR_KINDS.HOST_CONTRACT_INVALID, "peer logicalMapping skillId does not match its sourcePath", { sourcePath: mapping.sourcePath });
+    return { ...mapping, target: `${peer.pathCategory.relPath}/${mapping.sourcePath}` };
+  }).sort((left, right) => left.logicalId.localeCompare(right.logicalId));
+  if (canonicalJson([...sourcePaths].sort()) !== canonicalJson([...expectedSkillEntries].sort())) throw mechanismError(HARNESS_ERROR_KINDS.HOST_CONTRACT_INVALID, "peer logicalMappings do not cover the complete SKILL.md set");
+  return output;
+}
+
+function mappingSemantics(mappings) {
+  return mappings.map(({ logicalId, skillId, sourcePath, entryType, userInvocable }) => ({ logicalId, skillId, sourcePath, entryType, userInvocable }))
+    .sort((left, right) => left.logicalId.localeCompare(right.logicalId));
+}
+
+function assertRawBytesMatch(files, manifest) {
+  const byPath = new Map(files.map((file) => [file.path, file]));
+  for (const member of manifest.sourceClosure.members) {
+    const file = byPath.get(member.sourcePath);
+    if (!file || file.sha256 !== member.sha256 || file.bytes !== member.bytes) {
+      throw mechanismError(HARNESS_ERROR_KINDS.MANIFEST_MISMATCH, "adapter manifest does not match the original bound bytes", { sourcePath: member.sourcePath });
+    }
+  }
+}
+
+/** Reads and verifies two or more real peer adapter directories. */
+export async function verifyPeerAdapterDirectories({ request, peerRoots } = {}) {
+  const verifiedRequest = validate(request, REQUEST_SCHEMA_ID, "peer adapter verification request fails its registered contract");
+  if (!peerRoots || typeof peerRoots !== "object" || Array.isArray(peerRoots)) throw invalidParams("verifyPeerAdapterDirectories requires a peerRoots object");
+  const requestIds = verifiedRequest.peers.map((peer) => peer.peerId);
+  if (new Set(requestIds).size !== requestIds.length) throw invalidParams("peerIds must be unique");
+  const rootIds = Object.keys(peerRoots);
+  if (canonicalJson([...rootIds].sort()) !== canonicalJson([...requestIds].sort())) throw invalidParams("peerRoots must contain exactly one absolute root for every requested peer");
+
+  const built = [];
+  for (const peer of verifiedRequest.peers) {
+    const root = peerRoots[peer.peerId];
+    if (typeof root !== "string" || !path.isAbsolute(root)) throw invalidParams("peer root must be an absolute path", { peerId: peer.peerId });
+    const rootBinding = await createFilesystemRootBinding(root);
+    const files = await collectFiles(root, rootBinding);
+    const build = buildAdapterClosure({ hostId: peer.hostId, pathCategory: peer.pathCategory, input: sourceFromFiles(verifiedRequest.skillFamilyId, files) });
+    assertRawBytesMatch(files, build.manifest);
+    const logicalMappings = verifyMappings(peer, build.manifest);
+    built.push({ peer, build, logicalMappings });
+  }
+
+  const sorted = [...built].sort((left, right) => left.peer.peerId.localeCompare(right.peer.peerId));
+  const common = sorted[0].build.manifest.sourceClosure;
+  const commonMappings = mappingSemantics(sorted[0].logicalMappings);
+  for (const entry of sorted.slice(1)) {
+    if (canonicalJson(entry.build.manifest.sourceClosure) !== canonicalJson(common)) {
+      throw mechanismError(HARNESS_ERROR_KINDS.CLOSURE_CONFLICT, "peer adapter source closures differ", { peerId: entry.peer.peerId });
+    }
+    if (canonicalJson(mappingSemantics(entry.logicalMappings)) !== canonicalJson(commonMappings)) {
+      throw mechanismError(HARNESS_ERROR_KINDS.CLOSURE_CONFLICT, "peer logical mapping semantics differ", { peerId: entry.peer.peerId });
+    }
+  }
+  const result = {
+    schemaVersion: 1,
+    kind: "skill-family.adapter-peer-verification-result",
+    status: "verified",
+    decision: "peer-verification",
+    skillFamilyId: verifiedRequest.skillFamilyId,
+    commonSourceClosure: common,
+    peers: sorted.map(({ peer, build, logicalMappings }) => ({
+      peerId: peer.peerId,
+      hostId: peer.hostId,
+      pathCategory: peer.pathCategory,
+      manifest: build.manifest,
+      logicalMappings,
+    })),
+  };
+  return validate(result, RESULT_SCHEMA_ID, "peer adapter verification result fails its registered contract");
+}