skill-family-harness-node 0.9.0 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+<!-- release-skill:changelog:start version=0.11.0 locale=en baseline=sha256:e20f505e42ba45865bfee38a6c83671006bf20148d5d4e421ff7f443bcce260b -->
+## [0.11.0] - 2026-08-25
+
+Harness 0.11.0 adds raw-byte subprocess sinks and exposes the bound-read root identity needed by host verification.
+
+### Added
+
+- Extends superviseProcess with an exclusive, no-follow raw stdout/stderr sink that waits for stream close, queued writes, fsync, and close.
+- Keeps the existing bound-read mechanism as the only root and member read authority.
+
+### Changed
+
+- Carries the previously prepared host Profile closure into the lockstep 0.11.0 family release.
+
+### Upgrade Notes
+
+The raw sink is mechanism-only; it does not create a second process runner, receipt state machine, or host-specific policy. The caller must exclusively control the sink namespace for the whole call; handle protection does not prove stable pathname or root identity.
+<!-- release-skill:changelog:end version=0.11.0 locale=en -->
+
+
+<!-- release-skill:changelog:start version=0.10.0 locale=en baseline=sha256:64a325d3e51604a8436b33df5a7f617f9aab1f1e02adb32ccb58316aa5c5eab1 -->
+## [0.10.0] - 2026-08-24
+
+Harness 0.10.0 adds canonical entrypoints, reuses existing host mechanisms, and adds read-only peer adapter verification from real directories.
+
+### Added
+
+- Adds skill-family-harness-node/quickstart-profile and skill-family-harness-node/rename-directory-no-replace canonical exports.
+- Reuses filesystem-root binding, strict no-replace publication, atomic replacement, and existing build digests for the Kit's local host install/update path.
+- Adds `verifyPeerAdapterDirectories`, which re-enumerates peer roots and verifies common closure, byte digests, standard manifests, and complete logical mappings without writing them.
+
+### Changed
+
+- Keeps each historical candidate export as a same-source migration alias and leaves the mechanism registry unchanged.
+- Keeps validate-many-by-schema-id and its error semantics unchanged while managed Bundles accept historical and canonical Schema IDs through the same validator.
+
+### Upgrade Notes
+
+Update all three exact pins to 0.10.0 and migrate historical candidate imports and Schema IDs once to canonical identities. The low-level no-replace primitive remains distinct from the stable fixed-set-publication API; choose the contract that matches the use case.
+<!-- release-skill:changelog:end version=0.10.0 locale=en -->
+
+
 <!-- release-skill:changelog:start version=0.9.0 locale=en baseline=sha256:e5f4e3bb6ab343e4ccfb7dcdbba8b9ab4576b4cf285c30bb3597d577be5eb391 -->
 ## [0.9.0] - 2026-08-24
 

package/CHANGELOG.zh-CN.md

@@ -1,5 +1,47 @@
 # 变更日志
 
+<!-- release-skill:changelog:start version=0.11.0 locale=zh-CN baseline=sha256:51776685eead52118cc98ee47b8ac8990650a493d60567002133ff74e1c779c6 -->
+## [0.11.0] - 2026-08-25
+
+Harness 0.11.0 增加原始字节子进程输出 sink，并暴露真实宿主验证所需的受保护根身份。
+
+### 新增
+
+- 为 superviseProcess 增加独占、禁止跟随符号链接的 stdout/stderr 原始字节 sink，并等待流关闭、排队写入、fsync 与 close。
+- 继续把既有 bound-read 机制作为唯一根目录与成员读取权威。
+
+### 变更
+
+- 把此前准备好的宿主 Profile 闭包并入 0.11.0 三包锁步交付。
+
+### 升级说明
+
+原始 sink 只提供机制，不建立第二个进程 runner、收据状态机或宿主专属策略。调用方必须在整个调用期间独占 sink 命名空间；句柄保护不证明 pathname 或根目录身份始终不变。
+<!-- release-skill:changelog:end version=0.11.0 locale=zh-CN -->
+
+
+<!-- release-skill:changelog:start version=0.10.0 locale=zh-CN baseline=sha256:d8e27cce0c3e97b7d10b6f88fad4df66c8d527d3d6a2fb165f8c909612ff9f19 -->
+## [0.10.0] - 2026-08-24
+
+Harness 0.10.0 增加规范入口，复用既有宿主机制，并从真实目录提供同级适配器只读验证。
+
+### 新增
+
+- 新增 skill-family-harness-node/quickstart-profile 与 skill-family-harness-node/rename-directory-no-replace 规范导出。
+- 复用 filesystem-root binding、严格不替换发布、原子替换和既有构建摘要，支持 Kit 的本地宿主 install/update。
+- 新增 `verifyPeerAdapterDirectories`，重新枚举 peer 根目录，验证共同闭包、逐字节摘要、标准 manifest 和完整 logicalMappings，不写入目录。
+
+### 变更
+
+- 历史 candidate 导出继续作为同源迁移别名，机制登记表不变。
+- validate-many-by-schema-id 及错误语义不变；受管 Bundle 让历史与规范 Schema ID 共用同一 validator。
+
+### 升级说明
+
+消费者应把三个包的精确 pin 更新到 0.10.0，并把历史 candidate 导入和 Schema ID 一次迁移到规范身份。低层不替换原语仍不同于稳定 fixed-set-publication API，消费者按所需合同选择。
+<!-- release-skill:changelog:end version=0.10.0 locale=zh-CN -->
+
+
 <!-- release-skill:changelog:start version=0.9.0 locale=zh-CN baseline=sha256:7f3ff503831b8fb52f20293a4af4003ff116b7f9d820a0c2da1bd34a0b261248 -->
 ## [0.9.0] - 2026-08-24
 

package/README.md

@@ -4,28 +4,27 @@
 
 # skill-family-harness-node
 
-<!-- release-skill:release-version: 0.9.0 -->
+<!-- release-skill:release-version: 0.11.0 -->
 
 The **single default Node implementation** of the Contracts mechanism protocol. This is a thin runtime: it only implements the mechanism protocol, introduces no business semantics, and does not provide a second-language implementation.
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.0** (2026-08-24)
+**0.11.0** (2026-08-25)
 
-Harness 0.9.0 adds stable identity-bound reads and fixed-set no-replace publication with a fixed four-platform native closure.
+Harness 0.11.0 adds raw-byte subprocess sinks and exposes the bound-read root identity needed by host verification.
 
 **Added**
 
-- Adds createFilesystemRootBinding and readFileBound with handle-relative no-follow acquisition and optional byte digest guarding.
-- Adds the stable fixed-set-publication subpath with native no-replace publication and terminal indeterminate receipts.
-- Adds the candidate validate-many-by-schema-id mechanism to the existing Quickstart dispatcher.
+- Extends superviseProcess with an exclusive, no-follow raw stdout/stderr sink that waits for stream close, queued writes, fsync, and close.
+- Keeps the existing bound-read mechanism as the only root and member read authority.
 
 **Changed**
 
-- Keeps protected deletion excluded and preserves the existing 21-item capability registry.
+- Carries the previously prepared host Profile closure into the lockstep 0.11.0 family release.
 
 **Upgrade Notes**
 
-Pin Contracts, Harness, and Engineering Kit to exactly 0.9.0. Batch validation and the Quickstart Bundle remain candidate; filesystem binding and fixed-set publication are stable.
+The raw sink is mechanism-only; it does not create a second process runner, receipt state machine, or host-specific policy. The caller must exclusively control the sink namespace for the whole call; handle protection does not prove stable pathname or root identity.
 <!-- release-skill:managed:end id=latest-release -->
 
 ## Problem It Solves
@@ -34,19 +33,19 @@ Contracts defines "what should be", and the Harness turns that into "can be safe
 
 ## Core Mental Model
 
-The Harness consumes `skill-family-contracts` (a workspace dependency), reusing its dialect-routed Ajv validator, Kernel Protocol, frozen error codes, and fixtures; it does not copy protocol definitions or re-interpret the Schema. It only implements mechanisms: Schema validation, atomic writes, path containment, temporary workspaces, resource closure, the operation-request → operation-result pipeline, and business-neutral event logging with derived snapshots. Explicitly excluded: business semantics, task orchestration, Git writes, model calls, remote networking, and publish state. See `HARNESS_EXCLUSIONS`.
+The Harness consumes `skill-family-contracts` (a workspace dependency), reusing its dialect-routed Ajv validator, Kernel Protocol, frozen error codes, and fixtures; it does not copy protocol definitions or re-interpret the Schema. It only implements mechanisms: Schema validation, atomic writes, path containment, temporary workspaces, resource closure, bounded process supervision, the operation-request → operation-result pipeline, and business-neutral event logging with derived snapshots. Explicitly excluded: business semantics, task orchestration, Git writes, model calls, remote networking, and publish state. See `HARNESS_EXCLUSIONS`.
 
 ## Installation and Minimal Example
 
 ```sh
-npm install skill-family-harness-node@0.9.0
+npm install skill-family-harness-node@0.11.0
 npm info skill-family-harness-node --help
 ```
 
 The minimal example shows validating a contract document inside Node:
 
 ```js
-// Run from an empty directory: npm install skill-family-harness-node@0.9.0
+// Run from an empty directory: npm install skill-family-harness-node@0.11.0
 import { validateContractDocument } from "skill-family-harness-node";
 
 const document = {
@@ -75,12 +74,12 @@ import {
   createQuickstartTask,
   wrapQuickstartResult,
   verifyQuickstartExchange,
-} from "skill-family-harness-node/candidate/quickstart-profile";
+} from "skill-family-harness-node/quickstart-profile";
 ```
 
 The v2 mechanism recomputes the bytes of every path-backed output and evidence Resource. It also rejects duplicate Resource ids, correlation drift, a changed Task digest, and incomplete or mismatched evidence bindings. It does not perform a domain audit, choose a method, retry work, or own lifecycle state.
 
-The subpath is public but **not stable** and may change or be removed in a later minor release. Pin exactly `0.4.0` for v2; integrations that still produce candidate v1 exchanges must stay pinned to exactly `0.2.1`.
+The capability remains **candidate**. Pin all three Foundation packages exactly while evaluating it. Version 0.10.0 adds the canonical path above; the historical `/candidate/quickstart-profile` path remains a same-source migration alias. Migrate once to the canonical path. A later stable promotion will not require another import or same-byte Bundle rebuild. Integrations that still produce candidate v1 exchanges must stay pinned to exactly `0.2.1`.
 
 ## Typical Use Cases
 
@@ -106,6 +105,7 @@ The subpath is public but **not stable** and may change or be removed in a later
 | `writeFileAtomic` | Atomic write: leaves no half-written artifact on failure (temp file + fsync + rename). |
 | `TemporaryWorkspace` / `createTemporaryWorkspace` / `withTemporaryWorkspace` | Auto-cleanup temporary workspace, cleaned up even on exception paths. |
 | `digestBytes` / `computeResourceClosure` / `closureContains` | Resource closure and deterministic sha256 digest. |
+| `superviseProcess` / `validateTimeoutPolicy` | The single bounded subprocess supervisor. Its 0.11.0 `rawSink` option writes raw stdout/stderr bytes only to a fresh canonical private root, then waits for child/stream close, queued writes, fsync, and handle close. The caller must exclusively control the sink namespace for the entire call; handle protection does not prove stable pathname/root identity. |
 | `parseRequest` / `processRequest` | Parse `operation-request`, output terminal `operation-result`. |
 | `validateReportModel` / `renderReportMarkdown` / `buildBinding` / `checkReport` | Consume a Contracts-validated report model, deterministically render neutral Markdown, and verify source/result/report binding; does not interpret business output. |
 | `normalizeAdapterSource` / `buildAdapterClosure` / `verifyAdapterBuildManifest` / `materializeAdapterBuild` | Generic text-source closure, full-manifest digest re-verification, and atomic landing of the target set; specific Profile/driver is not in the Harness. |
@@ -143,7 +143,7 @@ Comparison is based on the canonical root after `realpath`, avoiding misjudgment
 
 ## Testing
 
-`node --test` covers: full Contracts fixture replay, security negative cases, atomic-failure paths, temporary workspaces, closure determinism, report fact binding and Markdown injection, host manifest/path/command trust, and state-store crashes, concurrency, corruption, fencing, explicit recovery, symlinks, hard links, and FIFO negative cases.
+`node --test` covers: full Contracts fixture replay, security negative cases, atomic-failure paths, temporary workspaces, closure determinism, raw sink delayed-stream and failure paths, report fact binding and Markdown injection, host manifest/path/command trust, and state-store crashes, concurrency, corruption, fencing, explicit recovery, symlinks, hard links, and FIFO negative cases.
 
 ## Troubleshooting
 
@@ -167,7 +167,7 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 ### Do not use when
 
 - You need to put file-selection business rules into the Foundation (business rules are owned by the caller).
-- You need host apply/install/update/uninstall, a full Qoder driver, or binary adapter source (explicitly unsupported).
+- You need host identity policy, host drivers, remote publication, uninstall deletion, a full Qoder driver, or binary adapter source (explicitly unsupported).
 - You need domain audit semantics, retry orchestration, or a compatibility-frozen Quickstart API.
 
 ### Capability selection
@@ -177,9 +177,10 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 - `foundation.harness.atomic-write`: atomic write within contained paths, rolling back on failure.
 - `foundation.harness.temporary-workspace`: auto-cleanup temporary workspace.
 - `foundation.harness.resource-closure`: deterministic resource closure and sha256 digest.
+- `foundation.harness.supervise-process`: one bounded subprocess supervisor; raw evidence capture remains mechanism-only and does not produce a receipt or domain verdict.
 - `foundation.harness.request-processing`: operation-request → terminal operation-result.
 - `foundation.harness.report`: report-model validation/render/binding/check.
-- `foundation.harness.host-adapter`: adapter source closure/build/materialize and version probe.
+- `foundation.harness.host-adapter`: adapter source closure/build/materialize, version probe, and read-only peer adapter verification.
 - `foundation.harness.state-store`: append-only events, hash chain, snapshots, and lock recovery.
 - `foundation.harness.errors`: mechanism error types and stable error classes.
 - `foundation.harness.quickstart-profile-candidate`: exact-version observation/task/result construction and binding verification.
@@ -208,16 +209,17 @@ Mechanism failures uniformly throw `SFC2004` (EXECUTION_FAILED), with `details.k
 
 - Event meaning and reducer transitions remain consumer-owned; state-store only provides the base.
 - Only text adapter source (utf8) is supported; binary projection is not supported.
+- `verifyPeerAdapterDirectories` enumerates and reads two or more real peer roots, reuses bound-read/path containment/closure/manifest primitives, and fails closed on symlinks, escapes, byte drift, member drift, or incomplete mappings.
 
 ### Route elsewhere when
 
 - Business state machine / terminal states: route to loop-agent.
-- Host apply: explicitly unsupported.
+- Host identity policy, host drivers, and lifecycle authorization belong to Engineering Kit; Harness supplies only the reusable bound-read, strict-publication, atomic-write, closure, and probe mechanisms.
 - Domain audit semantics: route to a standalone audit consumer.
 
 ### Machine-readable sources
 
 - Public capability catalog: [`capability-catalog.json`](https://ifoohoo.github.io/skill-family-engineering-kit/agents/capability-catalog.json) (`foundation.harness.*` entries).
 - Package-local source: `src/*.mjs`.
-- Package-local candidate source: `candidate/quickstart-profile.mjs`; public import: `skill-family-harness-node/candidate/quickstart-profile`.
+- Package-local candidate source: `candidate/quickstart-profile.mjs`; canonical public import: `skill-family-harness-node/quickstart-profile`; historical migration alias: `skill-family-harness-node/candidate/quickstart-profile`.
 <!-- agent-quick-reference:end -->

package/README.zh-CN.md

@@ -5,28 +5,27 @@
 
 # skill-family-harness-node
 
-<!-- release-skill:release-version: 0.9.0 -->
+<!-- release-skill:release-version: 0.11.0 -->
 
 Contracts 机制协议的**唯一默认 Node 实现**。这是一个薄运行时（thin runtime）：只实现机制协议，不引入业务语义，不做第二语言实现。
 
 <!-- release-skill:managed:start id=latest-release -->
-**0.9.0** (2026-08-24)
+**0.11.0** (2026-08-25)
 
-Harness 0.9.0 新增稳定身份绑定读取与固定集合不替换发布，并携带固定四平台原生闭包。
+Harness 0.11.0 增加原始字节子进程输出 sink，并暴露真实宿主验证所需的受保护根身份。
 
 **新增**
 
-- 新增 createFilesystemRootBinding 与 readFileBound，使用句柄相对不跟随符号链接获取，并支持可选字节摘要保护。
-- 新增稳定 fixed-set-publication 子路径，使用原生不替换发布并保留终态 indeterminate 回执。
-- 在既有 Quickstart dispatcher 中增加 validate-many-by-schema-id candidate 机制。
+- 为 superviseProcess 增加独占、禁止跟随符号链接的 stdout/stderr 原始字节 sink，并等待流关闭、排队写入、fsync 与 close。
+- 继续把既有 bound-read 机制作为唯一根目录与成员读取权威。
 
 **变更**
 
-- 身份保护删除继续排除，既有 21 项能力登记保持不变。
+- 把此前准备好的宿主 Profile 闭包并入 0.11.0 三包锁步交付。
 
 **升级说明**
 
-三个 Foundation 包必须精确锁定 0.9.0。批量校验与 Quickstart Bundle 仍为 candidate；文件系统绑定与固定集合发布为 stable。
+原始 sink 只提供机制，不建立第二个进程 runner、收据状态机或宿主专属策略。调用方必须在整个调用期间独占 sink 命名空间；句柄保护不证明 pathname 或根目录身份始终不变。
 <!-- release-skill:managed:end id=latest-release -->
 
 ## 解决的问题
@@ -40,14 +39,14 @@ Harness 消费 `skill-family-contracts`（工作区依赖），复用其方言
 ## 安装和最小示例
 
 ```sh
-npm install skill-family-harness-node@0.9.0
+npm install skill-family-harness-node@0.11.0
 npm info skill-family-harness-node --help
 ```
 
 最小示例演示在 Node 内校验一份契约文档：
 
 ```js
-// 从空目录运行：npm install skill-family-harness-node@0.9.0
+// 从空目录运行：npm install skill-family-harness-node@0.11.0
 import { validateContractDocument } from "skill-family-harness-node";
 
 const document = {
@@ -76,12 +75,12 @@ import {
   createQuickstartTask,
   wrapQuickstartResult,
   verifyQuickstartExchange,
-} from "skill-family-harness-node/candidate/quickstart-profile";
+} from "skill-family-harness-node/quickstart-profile";
 ```
 
 v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字节摘要，并拒绝重复 Resource id、correlation 漂移、Task digest 变化，以及缺失或错配的 evidence binding。它不执行领域审计，不选择 method，不编排重试，也不拥有生命周期状态。
 
-该子路径公开但**不稳定**，后续小版本可以修改或移除。使用 v2 时应精确锁定 `0.4.0`；仍生产 candidate v1 交换的接入必须继续精确锁定 `0.2.1`。
+该能力仍是 **candidate**，评估时必须精确锁定三个 Foundation 包。0.10.0 新增上面的规范入口；历史 `/candidate/quickstart-profile` 入口作为同源迁移别名继续可用。消费者迁移一次后，未来晋升 stable 不再切入口或重建相同 Bundle。仍生产 candidate v1 交换的接入必须继续精确锁定 `0.2.1`。
 
 ## 典型使用场景
 
@@ -107,6 +106,7 @@ v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字
 | `writeFileAtomic` | 原子写：失败不留半成品（临时文件 + fsync + rename）。 |
 | `TemporaryWorkspace` / `createTemporaryWorkspace` / `withTemporaryWorkspace` | 自动清理的临时工作区，异常路径也清理。 |
 | `digestBytes` / `computeResourceClosure` / `closureContains` | 资源闭包与确定性 sha256 摘要。 |
+| `superviseProcess` / `validateTimeoutPolicy` | 唯一的受约束子进程监督器。0.11.0 的 `rawSink` 只向 fresh canonical 私有根写原始 stdout/stderr 字节，并等待子进程、流、排队写入、fsync 与句柄全部关闭。调用方必须在整个调用期间独占 sink 命名空间；句柄保护不证明 pathname 或根目录身份始终不变。 |
 | `parseRequest` / `processRequest` | 解析 `operation-request`，输出终态 `operation-result`。 |
 | `validateReportModel` / `renderReportMarkdown` / `buildBinding` / `checkReport` | 消费经 Contracts 验证的 report model，确定性渲染中性 Markdown 并校验来源/结果/报告绑定；不解释业务输出。 |
 | `normalizeAdapterSource` / `buildAdapterClosure` / `verifyAdapterBuildManifest` / `materializeAdapterBuild` | 通用文本 source closure、manifest 全摘要复验和目标集合原子落盘；具体 Profile/driver 不在 Harness。 |
@@ -168,7 +168,7 @@ v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字
 ### Do not use when
 
 - 需要把文件选择的业务规则放入 Foundation（业务规则由调用方拥有）。
-- 需要 host apply/install/update/uninstall、Qoder 完整 driver 或二进制 adapter source（明确 unsupported）。
+- 需要宿主身份策略、宿主 driver、远端发布、删除式 uninstall、Qoder 完整 driver 或二进制 adapter source（明确 unsupported）。
 - 需要领域审计语义、重试编排或兼容性已冻结的 Quickstart API。
 
 ### Capability selection
@@ -178,6 +178,7 @@ v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字
 - `foundation.harness.atomic-write`：受收容路径内原子写，失败回滚。
 - `foundation.harness.temporary-workspace`：自动清理的临时工作区。
 - `foundation.harness.resource-closure`：确定性资源闭包与 sha256 摘要。
+- `foundation.harness.supervise-process`：监督一个有界子进程；原始证据收集仍只提供机制，不产生收据或领域结论。
 - `foundation.harness.request-processing`：operation-request → 终态 operation-result。
 - `foundation.harness.report`：report-model 校验/渲染/绑定/检查。
 - `foundation.harness.host-adapter`：adapter source closure/build/materialize 与版本探测。
@@ -213,12 +214,12 @@ v2 机制会重算每个 path-backed output 和 evidence Resource 的真实字
 ### Route elsewhere when
 
 - 业务状态机/终态：转 loop-agent。
-- 宿主 apply：明确 unsupported。
+- 宿主身份策略、宿主 driver 和生命周期授权归 Engineering Kit；Harness 只提供可复用的绑定读取、严格发布、原子写、闭包和探测机制。
 - 领域审计语义：转独立审计消费者。
 
 ### Machine-readable sources
 
 - 公开能力目录：[`capability-catalog.json`](https://ifoohoo.github.io/skill-family-engineering-kit/agents/capability-catalog.json)（`foundation.harness.*` 条目）。
 - 包内源：`src/*.mjs`。
-- 包内 Candidate 源：`candidate/quickstart-profile.mjs`；公共导入：`skill-family-harness-node/candidate/quickstart-profile`。
+- 包内 Candidate 源：`candidate/quickstart-profile.mjs`；规范公共导入：`skill-family-harness-node/quickstart-profile`；历史迁移别名：`skill-family-harness-node/candidate/quickstart-profile`。
 <!-- agent-quick-reference:end -->

package/candidate/quickstart-profile.mjs

@@ -6,7 +6,7 @@ import {
   validateHarnessSurfaceDetectorDocument,
   validateHarnessSurfaceInventoryDocument,
   validateQuickstartProfileDocument,
-} from "skill-family-contracts/candidate/quickstart-profile";
+} from "skill-family-contracts/quickstart-profile";
 import { lstat, readdir, readFile, realpath } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";

package/candidate/rename-directory-no-replace/build-prebuild-candidate.mjs

@@ -16,6 +16,7 @@ import {
 import path from "node:path";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
+import { run as runReceiptAssembler } from "../../src/native/receipt-assembler-core.mjs";
 
 const ROOT = path.dirname(fileURLToPath(import.meta.url));
 const SOURCE = path.join(ROOT, "addon", "rename_directory_no_replace.c");
@@ -128,60 +129,35 @@ function replaceManaged(outputRoot, stage, names) {
 }
 
 export function assemble(argv) {
-  const args = parseArgs(argv);
-  const sourceSha = sha256(readFileSync(SOURCE));
-  const inputs = [];
-  for (const key of KEYS) {
-    const receiptPath = path.resolve(args.get(`${key}-receipt`));
-    const binaryPath = path.resolve(args.get(`${key}-binary`));
-    const receipt = readJson(receiptPath);
-    const facts = receiptFacts(key, receipt.document);
-    if (facts.sourceSha !== sourceSha) throw new Error(`${key}: receipt source SHA与current native source不匹配`);
-    verifyBinary(key, binaryPath, facts);
-    inputs.push({ key, receiptSha: receipt.sha256, binaryPath, ...facts });
-  }
-  if (new Set(inputs.map((entry) => entry.sourceSha)).size !== 1) throw new Error("四份receipt的native source SHA不一致");
-
-  const outputRoot = path.resolve(args.get("output-root"));
-  const stage = mkdtempSync(path.join(path.dirname(outputRoot), ".native-prebuild-stage-"));
-  const entries = [];
-  try {
-    for (const input of inputs) {
-      const filename = `rename_directory_no_replace.${input.key}.node`;
-      const relative = `prebuilds/${input.key}/${filename}`;
-      const destination = path.join(stage, relative);
-      mkdirSync(path.dirname(destination), { recursive: true });
-      copyFileSync(input.binaryPath, destination);
-      chmodSync(destination, MODE);
-      entries.push({ platformKey: input.key, ...CONFIG[input.key], binary: relative, mode: MODE, sha256: input.binarySha, napi: Number(NAPI), exports: EXPORTS });
-    }
-    const manifest = { schemaVersion: 2, kind: "skill-family.rename-directory-no-replace-prebuild-manifest", status: "candidate", entries };
-    const sbom = {
+  return runReceiptAssembler({
+    keys: KEYS,
+    platforms: CONFIG,
+    sourceFile: SOURCE,
+    mode: MODE,
+    napi: NAPI,
+    exports: EXPORTS,
+    binaryName: (key) => `rename_directory_no_replace.${key}.node`,
+    extractFacts: (key, receipt) => receiptFacts(key, receipt),
+    manifestDoc: (entries) => ({ schemaVersion: 2, kind: "skill-family.rename-directory-no-replace-prebuild-manifest", status: "candidate", entries }),
+    sbomDoc: (sourceSha, entries) => ({
       schemaVersion: 1,
       kind: "skill-family.rename-directory-no-replace-prebuild-sbom",
       status: "candidate",
       source: { path: EXPECTED_SOURCE, sha256: sourceSha },
       files: entries.map(({ platformKey, binary, sha256: digest }) => ({ platformKey, binary, sha256: digest, license: "Apache-2.0" })),
-    };
-    const releaseReceipt = {
+    }),
+    releaseReceiptDoc: ({ inputs, sourceSha, manifestSha }) => ({
       schemaVersion: 1,
       kind: "skill-family.rename-directory-no-replace-prebuild-release-receipt",
       status: "candidate",
       node: { version: NODE_VERSION, napi: Number(NAPI) },
       source: { path: EXPECTED_SOURCE, sha256: sourceSha },
-      manifestSha256: sha256(Buffer.from(canonical(manifest))),
+      manifestSha256: manifestSha,
       inputs: inputs.map(({ key, receiptSha, binarySha }) => ({ platformKey: key, platformReceiptSha256: receiptSha, binarySha256: binarySha })),
-    };
-    writeFileSync(path.join(stage, "prebuild-manifest.json"), canonical(manifest));
-    writeFileSync(path.join(stage, "prebuild-sbom.json"), canonical(sbom));
-    writeFileSync(path.join(stage, "prebuild-release-receipt.json"), canonical(releaseReceipt));
-    writeFileSync(path.join(stage, "NOTICE"), "Skill Family Foundation rename-directory-no-replace candidate prebuilds\nCompiled from the Apache-2.0 source identified in prebuild-sbom.json.\nNo fallback implementation or stable-registry activation is included.\n");
-    const managed = ["prebuilds", "prebuild-manifest.json", "prebuild-sbom.json", "prebuild-release-receipt.json", "NOTICE"];
-    replaceManaged(outputRoot, stage, managed);
-    return releaseReceipt;
-  } finally {
-    rmSync(stage, { recursive: true, force: true });
-  }
+    }),
+    noticeText: "Skill Family Foundation rename-directory-no-replace candidate prebuilds\nCompiled from the Apache-2.0 source identified in prebuild-sbom.json.\nNo fallback implementation or stable-registry activation is included.\n",
+    managedNames: ["prebuilds", "prebuild-manifest.json", "prebuild-sbom.json", "prebuild-release-receipt.json", "NOTICE"],
+  }, argv);
 }
 
 if (process.argv[1] === fileURLToPath(import.meta.url)) {

package/package.json

@@ -10,7 +10,7 @@
   "dependencies": {
     "@pnpm/lockfile.fs": "1001.1.35",
     "ipaddr.js": "2.5.0",
-    "skill-family-contracts": "0.9.0",
+    "skill-family-contracts": "0.11.0",
     "yaml": "2.9.0"
   },
   "description": "Thin Node.js mechanism runtime for Skill Family engineering contracts.",
@@ -22,7 +22,9 @@
     ".": "./src/index.mjs",
     "./candidate/quickstart-profile": "./candidate/quickstart-profile.mjs",
     "./candidate/rename-directory-no-replace": "./candidate/rename-directory-no-replace/rename-directory-no-replace.mjs",
-    "./fixed-set-publication": "./src/fixed-set-publication.mjs"
+    "./fixed-set-publication": "./src/fixed-set-publication.mjs",
+    "./quickstart-profile": "./candidate/quickstart-profile.mjs",
+    "./rename-directory-no-replace": "./candidate/rename-directory-no-replace/rename-directory-no-replace.mjs"
   },
   "files": [
     "src",
@@ -46,7 +48,7 @@
     "url": "https://github.com/ifoohoo/skill-family-harness-node.git"
   },
   "type": "module",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "scripts": {
     "check": "node --test",
     "test": "node --test"

package/release-notes/0.10.0.yaml

@@ -0,0 +1,25 @@
+version: 0.10.0
+date: 2026-08-24
+locales:
+  en:
+    summary: Harness 0.10.0 adds canonical entrypoints, reuses existing host mechanisms, and adds read-only peer adapter verification from real directories.
+    changes:
+      added:
+        - Adds skill-family-harness-node/quickstart-profile and skill-family-harness-node/rename-directory-no-replace canonical exports.
+        - Reuses filesystem-root binding, strict no-replace publication, atomic replacement, and existing build digests for the Kit's local host install/update path.
+        - Adds `verifyPeerAdapterDirectories`, which re-enumerates peer roots and verifies common closure, byte digests, standard manifests, and complete logical mappings without writing them.
+      changed:
+        - Keeps each historical candidate export as a same-source migration alias and leaves the mechanism registry unchanged.
+        - Keeps validate-many-by-schema-id and its error semantics unchanged while managed Bundles accept historical and canonical Schema IDs through the same validator.
+    upgradeNotes: Update all three exact pins to 0.10.0 and migrate historical candidate imports and Schema IDs once to canonical identities. The low-level no-replace primitive remains distinct from the stable fixed-set-publication API; choose the contract that matches the use case.
+  zh-CN:
+    summary: Harness 0.10.0 增加规范入口，复用既有宿主机制，并从真实目录提供同级适配器只读验证。
+    changes:
+      added:
+        - 新增 skill-family-harness-node/quickstart-profile 与 skill-family-harness-node/rename-directory-no-replace 规范导出。
+        - 复用 filesystem-root binding、严格不替换发布、原子替换和既有构建摘要，支持 Kit 的本地宿主 install/update。
+        - 新增 `verifyPeerAdapterDirectories`，重新枚举 peer 根目录，验证共同闭包、逐字节摘要、标准 manifest 和完整 logicalMappings，不写入目录。
+      changed:
+        - 历史 candidate 导出继续作为同源迁移别名，机制登记表不变。
+        - validate-many-by-schema-id 及错误语义不变；受管 Bundle 让历史与规范 Schema ID 共用同一 validator。
+    upgradeNotes: 消费者应把三个包的精确 pin 更新到 0.10.0，并把历史 candidate 导入和 Schema ID 一次迁移到规范身份。低层不替换原语仍不同于稳定 fixed-set-publication API，消费者按所需合同选择。

package/release-notes/0.11.0.yaml

@@ -0,0 +1,21 @@
+version: 0.11.0
+date: 2026-08-25
+locales:
+  en:
+    summary: Harness 0.11.0 adds raw-byte subprocess sinks and exposes the bound-read root identity needed by host verification.
+    changes:
+      added:
+        - Extends superviseProcess with an exclusive, no-follow raw stdout/stderr sink that waits for stream close, queued writes, fsync, and close.
+        - Keeps the existing bound-read mechanism as the only root and member read authority.
+      changed:
+        - Carries the previously prepared host Profile closure into the lockstep 0.11.0 family release.
+    upgradeNotes: The raw sink is mechanism-only; it does not create a second process runner, receipt state machine, or host-specific policy. The caller must exclusively control the sink namespace for the whole call; handle protection does not prove stable pathname or root identity.
+  zh-CN:
+    summary: Harness 0.11.0 增加原始字节子进程输出 sink，并暴露真实宿主验证所需的受保护根身份。
+    changes:
+      added:
+        - 为 superviseProcess 增加独占、禁止跟随符号链接的 stdout/stderr 原始字节 sink，并等待流关闭、排队写入、fsync 与 close。
+        - 继续把既有 bound-read 机制作为唯一根目录与成员读取权威。
+      changed:
+        - 把此前准备好的宿主 Profile 闭包并入 0.11.0 三包锁步交付。
+    upgradeNotes: 原始 sink 只提供机制，不建立第二个进程 runner、收据状态机或宿主专属策略。调用方必须在整个调用期间独占 sink 命名空间；句柄保护不证明 pathname 或根目录身份始终不变。

package/src/bound-read.mjs

@@ -176,6 +176,31 @@ function assertRelativePath(relPath) {
   return segments;
 }
 
+// The only closed set of native failure reasons that can prove a static
+// member policy violation. Anything else — unknown reasons, missing root
+// identity, root identity drift, or "native-io" — stays
+// boundary-indeterminate. This set is the stable branching fact between the
+// harness and the Kit; it must never be derived from errno values or error
+// messages.
+const MEMBER_POLICY_FAILURE_REASONS = Object.freeze([
+  "member-missing",
+  "intermediate-not-real-directory",
+  "leaf-symbolic-link",
+  "leaf-not-regular",
+  "leaf-multiple-links",
+]);
+const MEMBER_POLICY_FAILURE_REASON_SET = new Set(MEMBER_POLICY_FAILURE_REASONS);
+
+function nativeBoundReadDisposition(native, captured) {
+  if (native?.rootDevice !== captured.identity.device || native?.rootInode !== captured.identity.inode ||
+      Number(native?.rootMode) !== captured.identity.mode) {
+    return "boundary-indeterminate";
+  }
+  return MEMBER_POLICY_FAILURE_REASON_SET.has(native?.failureReason)
+    ? "member-policy-violation"
+    : "boundary-indeterminate";
+}
+
 export async function readFileBound(root, relPath, { rootBinding, encoding, expectedSha256 } = {}) {
   assertSupportedPlatform();
   assertCanonicalAbsolute(root, "root");
@@ -197,26 +222,36 @@ export async function readFileBound(root, relPath, { rootBinding, encoding, expe
       throw mechanismError(
         HARNESS_ERROR_KINDS.UNSAFE_STATE_ENTRY,
         "approved root binding does not match the current root",
+        { boundReadDisposition: "boundary-indeterminate" },
       );
     }
     const { addon } = await loadNativeBoundReadAddon();
     const native = addon.readFileBoundNative(captured.canonical, segments);
     if (!native?.ok) {
-      const cause = {
-        code: native?.errorCode === (process.platform === "darwin" ? 62 : 40) ? "ELOOP" : native?.errorCode === 2 ? "ENOENT" :
-          native?.errorCode === 20 ? "ENOTDIR" : `errno-${native?.errorCode ?? "unknown"}`,
-      };
-      if (cause.code === "ENOTDIR" && segments.length > 1) {
-        throw mechanismError(HARNESS_ERROR_KINDS.UNSAFE_STATE_ENTRY, "an intermediate component is not a real directory", {
-          input: relPath,
-        });
+      // Disposition is decided only by the two documented conditions: the
+      // native root identity must equal the captured binding, and the native
+      // failureReason must be one of the five closed-set member policy
+      // reasons. The reason also selects the stable details.kind; it is never
+      // derived from errno values or error messages.
+      const boundReadDisposition = nativeBoundReadDisposition(native, captured);
+      const details = { input: relPath, boundReadDisposition };
+      const reason = native?.failureReason;
+      if (reason === "intermediate-not-real-directory") {
+        throw mechanismError(HARNESS_ERROR_KINDS.UNSAFE_STATE_ENTRY, "an intermediate component is not a real directory", details);
+      }
+      if (reason === "leaf-symbolic-link") {
+        throw mechanismError(HARNESS_ERROR_KINDS.UNSAFE_STATE_ENTRY, "bound path became a symbolic link during read", details);
+      }
+      if (reason === "member-missing") {
+        throw mechanismError(HARNESS_ERROR_KINDS.MISSING_RESOURCE, "bound path does not exist during read", details);
       }
-      mapOpenFailure(cause, relPath, segments.length > 1 ? "bound path" : "leaf");
+      throw mechanismError(HARNESS_ERROR_KINDS.READ_FAILED, `bound path could not be read: ${reason ?? "native-io"}`, details);
     }
     if (native.rootDevice !== captured.identity.device || native.rootInode !== captured.identity.inode ||
         Number(native.rootMode) !== captured.identity.mode) {
       throw mechanismError(HARNESS_ERROR_KINDS.UNSAFE_STATE_ENTRY, "root identity changed during bound read", {
         input: relPath,
+        boundReadDisposition: "boundary-indeterminate",
       });
     }
     const bytes = Buffer.from(native.bytes);
@@ -234,6 +269,7 @@ export async function readFileBound(root, relPath, { rootBinding, encoding, expe
       sha256,
       bytes: bytes.length,
       mode: Number(native.leafMode),
+      rootMode: captured.identity.mode,
     });
   } finally {
     await captured.handle.close().catch(() => {});

package/src/index.mjs

@@ -148,6 +148,7 @@ export {
   materializeAdapterBuild,
   probeVersionVector,
 } from "./host.mjs";
+export { verifyPeerAdapterDirectories } from "./peer-adapter.mjs";
 
 // Deterministic report layer (FND-ADR-005): validate -> render -> bind -> check.
 // Pure functions only: no clock, no environment, no network, no model calls.

package/src/native/NOTICE

@@ -1,3 +1,2 @@
-Skill Family Foundation stable filesystem native prebuilds (bound-read and fixed-set publication).
-Compiled from the Apache-2.0 source identified in prebuild-sbom.json.
-The closure contains no JavaScript fallback and no candidate entry-point dependency.
+Skill Family Foundation filesystem bound-read stable prebuilds
+Generated only from four verified platform receipts.