spec-kitty-cli 3.2.0a8__tar.gz → 3.2.0a9__tar.gz

{spec_kitty_cli-3.2.0a8 → spec_kitty_cli-3.2.0a9}/CHANGELOG.md

@@ -17,6 +17,43 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Removed
 
+## [3.2.0a9] - 2026-05-03
+
+3.2.0a9 is a prerelease that adds mission-state audit diagnostics and hardens
+the 3.2.0 workflow reliability path for implementation, review, merge, and
+release-blocker triage.
+
+### Added
+
+- Added a read-only mission-state audit engine for inspecting mission status,
+  work package state, review artifacts, and lifecycle consistency without
+  mutating project state.
+- Added reliability fixture coverage for branch, mission, review prompt, and
+  sync workflows used by the 3.2.0 release-blocker tranche.
+
+### Fixed
+
+- Implementation start is now idempotent across planned, claimed, and
+  in-progress task states, preventing duplicate or inconsistent lifecycle
+  transitions (#946).
+- Merge preflight now refreshes the target branch tracking ref before enforcing
+  target-branch synchronization, so stale local `origin/main` state cannot
+  allow an unsafe merge (#959).
+- Merge, review prompt, worktree ownership, sync finalization, and review
+  artifact consistency checks now have tighter diagnostics and regression
+  coverage for the 3.2.0 workflow reliability tranche (#959).
+- Command JSON output now avoids leaking non-serializable status event mocks in
+  covered move-task paths, preserving strict JSON command contracts.
+
+### Internal
+
+- Recorded the atomic work-package start lifecycle ADR and expanded regression
+  coverage around status persistence, bootstrap seeding, merge preflight, and
+  test sync isolation.
+- Restored CI release confidence by covering the previously failing
+  `fast-tests-core-misc`, `integration-tests-merge`, `integration-tests-cli`,
+  and `diff-coverage` gates.
+
 ## [3.2.0a8] - 2026-05-01
 
 3.2.0a8 is a prerelease that hardens direct SaaS sync ingress around the

{spec_kitty_cli-3.2.0a8 → spec_kitty_cli-3.2.0a9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: spec-kitty-cli
-Version: 3.2.0a8
+Version: 3.2.0a9
 Summary: Spec Kitty, a tool for Specification Driven Development (SDD) agentic projects, with kanban and git worktree isolation.
 Project-URL: Repository, https://github.com/Priivacy-ai/spec-kitty
 Project-URL: Issues, https://github.com/Priivacy-ai/spec-kitty/issues
@@ -143,7 +143,7 @@ Spec Kitty addresses this with repository-native artifacts, work package workflo
 
 ---
 
-## 🚀 What You Get on `main` (`3.2.0a8`)
+## 🚀 What You Get on `main` (`3.2.0a9`)
 
 | Capability | What Spec Kitty provides |
 |------------|--------------------------|
@@ -205,7 +205,7 @@ graph LR
 
 **Current stable release line:** `v3.1.x` (current stable release: `3.1.8` on GitHub Releases and PyPI)
 
-**Current `main` development version:** `3.2.0a8`
+**Current `main` development version:** `3.2.0a9`
 
 **Current `main` highlights:**
 - **Brief-first and ticket-first intake** — `spec-kitty intake` ingests external plans into `.kittify/mission-brief.md`, and `spec-kitty mission create --from-ticket <provider:KEY>` seeds tracker context before `/spec-kitty.specify`
@@ -228,18 +228,18 @@ graph LR
 
 ## 📌 Release Channels
 
-Spec Kitty currently ships stable `3.1.x` releases while `main` carries the active `3.2.0a8` prerelease/dev line.
+Spec Kitty currently ships stable `3.1.x` releases while `main` carries the active `3.2.0a9` prerelease/dev line.
 The former `1.x` line is deprecated and lives on `1.x-maintenance` for maintenance-only fixes.
 
 | Source | Version | Status | Install |
 |--------|---------|--------|---------|
 | **PyPI / GitHub Releases** | **3.1.8** | Current stable line | `pip install spec-kitty-cli` |
-| **main** | **3.2.0a8** | Active prerelease / development line | Install from a source checkout or a published prerelease tag |
+| **main** | **3.2.0a9** | Active prerelease / development line | Install from a source checkout or a published prerelease tag |
 | **1.x-maintenance** | **1.x** | Deprecated, maintenance-only | Install from a pinned maintenance tag or source checkout |
 
 **For users:** install the stable line from PyPI with `pip install spec-kitty-cli`.
 **For testers following `main`:** use a source checkout or published prerelease builds to get the intake, profile-invocation, hosted tracker-read, and Teamspace-routing work that is newer than stable `3.1.x`.
-After `3.2.0a8` is published, testers can install the exact prerelease with `pip install "spec-kitty-cli==3.2.0a8"` or opt into prereleases with `pip install --pre spec-kitty-cli`.
+After `3.2.0a9` is published, testers can install the exact prerelease with `pip install "spec-kitty-cli==3.2.0a9"` or opt into prereleases with `pip install --pre spec-kitty-cli`.
 **For existing 3.0.x users:** upgrade to `3.1.x` and run `spec-kitty upgrade` in each project — the charter rename, mission identity, and prompt-neutrality migrations remain automatic.
 **For existing 1.x or 2.x users:** migrate to `3.1.x`; `1.x-maintenance` is maintenance-only and will no longer publish new PyPI releases.
 

{spec_kitty_cli-3.2.0a8 → spec_kitty_cli-3.2.0a9}/README.md

@@ -45,7 +45,7 @@ Spec Kitty addresses this with repository-native artifacts, work package workflo
 
 ---
 
-## 🚀 What You Get on `main` (`3.2.0a8`)
+## 🚀 What You Get on `main` (`3.2.0a9`)
 
 | Capability | What Spec Kitty provides |
 |------------|--------------------------|
@@ -107,7 +107,7 @@ graph LR
 
 **Current stable release line:** `v3.1.x` (current stable release: `3.1.8` on GitHub Releases and PyPI)
 
-**Current `main` development version:** `3.2.0a8`
+**Current `main` development version:** `3.2.0a9`
 
 **Current `main` highlights:**
 - **Brief-first and ticket-first intake** — `spec-kitty intake` ingests external plans into `.kittify/mission-brief.md`, and `spec-kitty mission create --from-ticket <provider:KEY>` seeds tracker context before `/spec-kitty.specify`
@@ -130,18 +130,18 @@ graph LR
 
 ## 📌 Release Channels
 
-Spec Kitty currently ships stable `3.1.x` releases while `main` carries the active `3.2.0a8` prerelease/dev line.
+Spec Kitty currently ships stable `3.1.x` releases while `main` carries the active `3.2.0a9` prerelease/dev line.
 The former `1.x` line is deprecated and lives on `1.x-maintenance` for maintenance-only fixes.
 
 | Source | Version | Status | Install |
 |--------|---------|--------|---------|
 | **PyPI / GitHub Releases** | **3.1.8** | Current stable line | `pip install spec-kitty-cli` |
-| **main** | **3.2.0a8** | Active prerelease / development line | Install from a source checkout or a published prerelease tag |
+| **main** | **3.2.0a9** | Active prerelease / development line | Install from a source checkout or a published prerelease tag |
 | **1.x-maintenance** | **1.x** | Deprecated, maintenance-only | Install from a pinned maintenance tag or source checkout |
 
 **For users:** install the stable line from PyPI with `pip install spec-kitty-cli`.
 **For testers following `main`:** use a source checkout or published prerelease builds to get the intake, profile-invocation, hosted tracker-read, and Teamspace-routing work that is newer than stable `3.1.x`.
-After `3.2.0a8` is published, testers can install the exact prerelease with `pip install "spec-kitty-cli==3.2.0a8"` or opt into prereleases with `pip install --pre spec-kitty-cli`.
+After `3.2.0a9` is published, testers can install the exact prerelease with `pip install "spec-kitty-cli==3.2.0a9"` or opt into prereleases with `pip install --pre spec-kitty-cli`.
 **For existing 3.0.x users:** upgrade to `3.1.x` and run `spec-kitty upgrade` in each project — the charter rename, mission identity, and prompt-neutrality migrations remain automatic.
 **For existing 1.x or 2.x users:** migrate to `3.1.x`; `1.x-maintenance` is maintenance-only and will no longer publish new PyPI releases.
 

spec_kitty_cli-3.2.0a9/kitty-specs/unified-charter-bundle-chokepoint-01KP5Q2G/tasks/README.md

@@ -0,0 +1,64 @@
+# Tasks Directory
+
+This directory contains work package (WP) prompt files.
+
+## Directory Structure (v0.9.0+)
+
+```
+tasks/
+├── WP01-setup-infrastructure.md
+├── WP02-user-authentication.md
+├── WP03-api-endpoints.md
+└── README.md
+```
+
+All WP files are stored flat in `tasks/`. Status is tracked in `status.events.jsonl`, not in WP frontmatter.
+
+## Work Package File Format
+
+Each WP file **MUST** use YAML frontmatter:
+
+```yaml
+---
+work_package_id: "WP01"
+title: "Work Package Title"
+dependencies: []
+planning_base_branch: "main"
+merge_target_branch: "main"
+branch_strategy: "Planning artifacts were generated on main; completed changes must merge back into main."
+subtasks:
+  - "T001"
+  - "T002"
+phase: "Phase 1 - Setup"
+assignee: ""
+agent: ""
+shell_pid: ""
+history:
+  - timestamp: "2025-01-01T00:00:00Z"
+    agent: "system"
+    action: "Prompt generated via /spec-kitty.tasks"
+---
+
+# Work Package Prompt: WP01 – Work Package Title
+
+[Content follows...]
+```
+
+## Status Tracking
+
+Status is tracked via the canonical event log (`status.events.jsonl`), not in WP frontmatter.
+Use `spec-kitty agent tasks move-task` to change WP status:
+
+```bash
+spec-kitty agent tasks move-task <WPID> --to <lane>
+```
+
+Example:
+```bash
+spec-kitty agent tasks move-task WP01 --to doing
+```
+
+## File Naming
+
+- Format: `WP01-kebab-case-slug.md`
+- Examples: `WP01-setup-infrastructure.md`, `WP02-user-auth.md`

{spec_kitty_cli-3.2.0a8 → spec_kitty_cli-3.2.0a9}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "spec-kitty-cli"
-version = "3.2.0a8"
+version = "3.2.0a9"
 description = "Spec Kitty, a tool for Specification Driven Development (SDD) agentic projects, with kanban and git worktree isolation."
 readme = "README.md"
 license = { file = "LICENSE" }

spec_kitty_cli-3.2.0a9/src/specify_cli/audit/__init__.py

@@ -0,0 +1,15 @@
+"""Read-only mission-state audit engine for spec-kitty."""
+
+from .engine import run_audit
+from .models import AuditOptions, MissionFinding, MissionAuditResult, RepoAuditReport, Severity
+from .serializer import build_report_json
+
+__all__ = [
+    "run_audit",
+    "AuditOptions",
+    "MissionFinding",
+    "MissionAuditResult",
+    "RepoAuditReport",
+    "Severity",
+    "build_report_json",
+]

spec_kitty_cli-3.2.0a9/src/specify_cli/audit/classifiers/__init__.py

@@ -0,0 +1 @@
+"""Per-artifact classifier functions for the audit engine."""

spec_kitty_cli-3.2.0a9/src/specify_cli/audit/classifiers/decisions_events.py

@@ -0,0 +1,22 @@
+"""Classifier for decisions/events.jsonl mission artifacts."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+from ..models import MissionFinding
+from .mission_events import _classify_jsonl_file
+
+
+def classify_decisions_events_jsonl(mission_dir: Path) -> list[MissionFinding]:
+    """Classify decisions/events.jsonl for legacy keys, forbidden keys, and corruption.
+
+    Args:
+        mission_dir: Path to the mission directory.
+
+    Returns:
+        A list of :class:`~specify_cli.audit.models.MissionFinding` objects.
+        Returns ``[]`` when the file is absent.
+    """
+    path = mission_dir / "decisions" / "events.jsonl"
+    return _classify_jsonl_file(path, "decisions/events.jsonl", "decision_event_row")

spec_kitty_cli-3.2.0a9/src/specify_cli/audit/classifiers/handoff_events.py

@@ -0,0 +1,22 @@
+"""Classifier for handoff/events.jsonl mission artifacts."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+from ..models import MissionFinding
+from .mission_events import _classify_jsonl_file
+
+
+def classify_handoff_events_jsonl(mission_dir: Path) -> list[MissionFinding]:
+    """Classify handoff/events.jsonl for legacy keys, forbidden keys, and corruption.
+
+    Args:
+        mission_dir: Path to the mission directory.
+
+    Returns:
+        A list of :class:`~specify_cli.audit.models.MissionFinding` objects.
+        Returns ``[]`` when the file is absent.
+    """
+    path = mission_dir / "handoff" / "events.jsonl"
+    return _classify_jsonl_file(path, "handoff/events.jsonl", "handoff_event_row")

spec_kitty_cli-3.2.0a9/src/specify_cli/audit/classifiers/meta.py

@@ -0,0 +1,75 @@
+"""Classifier for meta.json mission artifacts."""
+
+from __future__ import annotations
+
+import json
+import re
+from pathlib import Path
+
+from ..detectors import detect_legacy_keys
+from ..models import MissionFinding, Severity
+from ..shape_registry import check_unknown_keys
+
+# ULID character set: Crockford Base32 (excludes I, L, O, U)
+_ULID_RE = re.compile(r"^[0-9A-HJKMNP-TV-Z]{26}$")
+
+
+def classify_meta_json(mission_dir: Path) -> list[MissionFinding]:
+    """Classify meta.json for legacy keys, identity issues, and unknown keys.
+
+    Returns an empty list when meta.json is absent (the identity adapter
+    handles IDENTITY_MISSING for orphan missions at the repo level).
+
+    Args:
+        mission_dir: Path to the mission directory (e.g. kitty-specs/NNN-slug/).
+
+    Returns:
+        A list of :class:`~specify_cli.audit.models.MissionFinding` objects.
+        Never raises — all exceptions become findings.
+    """
+    path = mission_dir / "meta.json"
+    if not path.exists():
+        return []
+
+    findings: list[MissionFinding] = []
+
+    try:
+        obj: dict[str, object] = json.loads(path.read_text(encoding="utf-8"))
+    except json.JSONDecodeError as exc:
+        return [
+            MissionFinding(
+                code="CORRUPT_JSON",
+                severity=Severity.ERROR,
+                artifact_path="meta.json",
+                detail=f"JSON decode error: {exc.msg}",
+            )
+        ]
+
+    # Legacy key detection (work_package_id is valid in meta, so no extra_keys)
+    findings.extend(detect_legacy_keys(obj, "meta.json"))
+
+    # Identity checks
+    mission_id = obj.get("mission_id")
+    if mission_id is None:
+        findings.append(
+            MissionFinding(
+                code="IDENTITY_MISSING",
+                severity=Severity.ERROR,
+                artifact_path="meta.json",
+                detail="missing mission_id field",
+            )
+        )
+    elif not isinstance(mission_id, str) or not _ULID_RE.match(mission_id):
+        findings.append(
+            MissionFinding(
+                code="IDENTITY_INVALID",
+                severity=Severity.ERROR,
+                artifact_path="meta.json",
+                detail=f"mission_id is not a valid ULID: {mission_id!r}",
+            )
+        )
+
+    # Unknown key detection
+    findings.extend(check_unknown_keys("meta.json", obj, "meta.json"))
+
+    return findings

spec_kitty_cli-3.2.0a9/src/specify_cli/audit/classifiers/mission_events.py

@@ -0,0 +1,96 @@
+"""Classifier for mission-events.jsonl mission artifacts."""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+from ..detectors import detect_legacy_keys
+from ..models import MissionFinding, Severity
+from ..shape_registry import check_unknown_keys
+
+
+def _classify_jsonl_file(
+    path: Path,
+    artifact_path: str,
+    artifact_type: str,
+) -> list[MissionFinding]:
+    """Shared JSONL classifier helper.
+
+    Reads *path* line by line.  For each non-blank line:
+    - On decode error: emits ``CORRUPT_JSONL`` and continues (collects all).
+    - On valid line: runs legacy-key and unknown-key checks.
+
+    Args:
+        path: Absolute path to the JSONL file.
+        artifact_path: Relative artifact path used in findings.
+        artifact_type: Key into ``KNOWN_TOP_LEVEL_KEYS_BY_ARTIFACT``.
+
+    Returns:
+        A list of :class:`~specify_cli.audit.models.MissionFinding` objects.
+        Never raises.
+    """
+    if not path.exists():
+        return []
+
+    findings: list[MissionFinding] = []
+
+    try:
+        raw_text = path.read_text(encoding="utf-8")
+    except OSError as exc:
+        return [
+            MissionFinding(
+                code="CORRUPT_JSONL",
+                severity=Severity.ERROR,
+                artifact_path=artifact_path,
+                detail=f"could not read file: {exc}",
+            )
+        ]
+
+    for line_number, raw_line in enumerate(raw_text.splitlines(), start=1):
+        stripped = raw_line.strip()
+        if not stripped:
+            continue
+
+        try:
+            obj: dict[str, object] = json.loads(stripped)
+        except json.JSONDecodeError as exc:
+            findings.append(
+                MissionFinding(
+                    code="CORRUPT_JSONL",
+                    severity=Severity.ERROR,
+                    artifact_path=artifact_path,
+                    detail=f"line {line_number}: {exc.msg}",
+                )
+            )
+            continue
+
+        if not isinstance(obj, dict):
+            findings.append(
+                MissionFinding(
+                    code="CORRUPT_JSONL",
+                    severity=Severity.ERROR,
+                    artifact_path=artifact_path,
+                    detail=f"line {line_number}: expected JSON object, got {type(obj).__name__}",
+                )
+            )
+            continue
+
+        findings.extend(detect_legacy_keys(obj, artifact_path))
+        findings.extend(check_unknown_keys(artifact_type, obj, artifact_path))
+
+    return findings
+
+
+def classify_mission_events_jsonl(mission_dir: Path) -> list[MissionFinding]:
+    """Classify mission-events.jsonl for legacy keys, forbidden keys, and corruption.
+
+    Args:
+        mission_dir: Path to the mission directory.
+
+    Returns:
+        A list of :class:`~specify_cli.audit.models.MissionFinding` objects.
+        Returns ``[]`` when the file is absent.
+    """
+    path = mission_dir / "mission-events.jsonl"
+    return _classify_jsonl_file(path, "mission-events.jsonl", "mission_event_row")

spec_kitty_cli-3.2.0a9/src/specify_cli/audit/classifiers/status_events.py

@@ -0,0 +1,133 @@
+"""Classifier for status.events.jsonl mission artifacts."""
+
+from __future__ import annotations
+
+import json
+import re
+from pathlib import Path
+
+from ..detectors import (
+    STATUS_EVENT_ONLY_LEGACY_KEYS,
+    detect_forbidden_keys,
+    detect_legacy_keys,
+)
+from ..models import MissionFinding, Severity
+from ..shape_registry import check_unknown_keys
+
+# Actor format research (from real event logs and tests):
+#
+# Modern format examples:
+#   "finalize-tasks"      — system actor (kebab word)
+#   "migration"           — system actor (single word)
+#   "claude"              — agent (single word)
+#   "human"               — actor (single word)
+#   "user"                — actor (single word, legacy)
+#   "claude:opus"         — namespaced (agent:variant)
+#   "human:rob"           — namespaced (human:name)
+#
+# Old/drift format examples:
+#   Pure integers, empty strings, or values with spaces or unusual characters.
+#
+# We accept:
+#   - Any value matching ^[a-z][a-z0-9_:-]*$ (word chars, hyphens, colons, no spaces)
+# We flag as drift:
+#   - Anything else (e.g. uppercase, spaces, empty string, numeric-only)
+_ACTOR_RE = re.compile(r"^[a-z][a-z0-9_:-]*$")
+
+
+def classify_status_events_jsonl(
+    mission_dir: Path,
+) -> tuple[list[MissionFinding], bool]:
+    """Classify status.events.jsonl for legacy keys, forbidden keys, and corruption.
+
+    Unlike other classifiers this function returns a 2-tuple so the engine can
+    pass ``skip_drift=True`` to the status_json classifier when corruption is
+    detected.
+
+    Args:
+        mission_dir: Path to the mission directory.
+
+    Returns:
+        ``(findings, has_corrupt_jsonl)`` — findings is a list of
+        :class:`~specify_cli.audit.models.MissionFinding` objects;
+        ``has_corrupt_jsonl`` is True if at least one line failed to parse.
+        Never raises — all exceptions become findings.
+    """
+    path = mission_dir / "status.events.jsonl"
+    if not path.exists():
+        return [], False
+
+    findings: list[MissionFinding] = []
+    has_corrupt_jsonl = False
+
+    try:
+        raw_text = path.read_text(encoding="utf-8")
+    except OSError as exc:
+        return [
+            MissionFinding(
+                code="CORRUPT_JSONL",
+                severity=Severity.ERROR,
+                artifact_path="status.events.jsonl",
+                detail=f"could not read file: {exc}",
+            )
+        ], True
+
+    for line_number, raw_line in enumerate(raw_text.splitlines(), start=1):
+        stripped = raw_line.strip()
+        if not stripped:
+            continue
+
+        try:
+            obj: dict[str, object] = json.loads(stripped)
+        except json.JSONDecodeError as exc:
+            findings.append(
+                MissionFinding(
+                    code="CORRUPT_JSONL",
+                    severity=Severity.ERROR,
+                    artifact_path="status.events.jsonl",
+                    detail=f"line {line_number}: {exc.msg}",
+                )
+            )
+            has_corrupt_jsonl = True
+            continue
+
+        if not isinstance(obj, dict):
+            findings.append(
+                MissionFinding(
+                    code="CORRUPT_JSONL",
+                    severity=Severity.ERROR,
+                    artifact_path="status.events.jsonl",
+                    detail=f"line {line_number}: expected JSON object, got {type(obj).__name__}",
+                )
+            )
+            has_corrupt_jsonl = True
+            continue
+
+        # Legacy key detection — include work_package_id for event rows
+        findings.extend(
+            detect_legacy_keys(
+                obj,
+                "status.events.jsonl",
+                extra_keys=STATUS_EVENT_ONLY_LEGACY_KEYS,
+            )
+        )
+
+        # Forbidden key detection
+        findings.extend(detect_forbidden_keys(obj, "status.events.jsonl"))
+
+        # Actor drift check
+        actor = obj.get("actor")
+        if actor is not None and not (isinstance(actor, str) and _ACTOR_RE.match(actor)):
+            findings.append(
+                MissionFinding(
+                    code="ACTOR_DRIFT",
+                    severity=Severity.WARNING,
+                    artifact_path="status.events.jsonl",
+                    detail=f"actor format unexpected: {actor!r}",
+                )
+            )
+
+        # Unknown key detection
+        findings.extend(check_unknown_keys("status_event_row", obj, "status.events.jsonl"))
+
+    return findings, has_corrupt_jsonl

spec_kitty_cli-3.2.0a9/src/specify_cli/audit/classifiers/status_json.py

@@ -0,0 +1,101 @@
+"""Classifier for status.json mission artifacts."""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+from ..detectors import detect_legacy_keys
+from ..models import MissionFinding, Severity
+from ..shape_registry import check_unknown_keys
+
+
+def classify_status_json(
+    mission_dir: Path,
+    *,
+    skip_drift: bool = False,
+) -> list[MissionFinding]:
+    """Classify status.json for legacy keys, unknown keys, and snapshot drift.
+
+    The drift check is read-only: it uses ``materialize_to_json`` (which
+    produces a deterministic string without writing any file) rather than
+    ``materialize`` (which writes status.json to disk).  When
+    ``skip_drift=True`` the drift check is skipped entirely — the engine
+    passes this flag when ``status.events.jsonl`` has corruption that would
+    cause the reducer to raise.
+
+    Args:
+        mission_dir: Path to the mission directory.
+        skip_drift: If True, skip the snapshot drift check.
+
+    Returns:
+        A list of :class:`~specify_cli.audit.models.MissionFinding` objects.
+        Never raises — all exceptions become findings.
+    """
+    path = mission_dir / "status.json"
+    if not path.exists():
+        return []
+
+    findings: list[MissionFinding] = []
+
+    try:
+        raw_text = path.read_text(encoding="utf-8")
+        obj: dict[str, object] = json.loads(raw_text)
+    except json.JSONDecodeError as exc:
+        return [
+            MissionFinding(
+                code="CORRUPT_JSON",
+                severity=Severity.ERROR,
+                artifact_path="status.json",
+                detail=f"JSON decode error: {exc.msg}",
+            )
+        ]
+
+    # Legacy key detection
+    findings.extend(detect_legacy_keys(obj, "status.json"))
+
+    # Unknown key detection
+    findings.extend(check_unknown_keys("status.json", obj, "status.json"))
+
+    if skip_drift:
+        return findings
+
+    # Read-only drift check (C-001 compliance).
+    # NEVER call reducer.materialize() — it writes status.json to disk.
+    # materialize_snapshot() keeps parity with materialize() without writing.
+    try:
+        from specify_cli.status.reducer import materialize_snapshot, materialize_to_json
+
+        snapshot = materialize_snapshot(mission_dir)
+        computed_json = materialize_to_json(snapshot)
+    except Exception as exc:
+        findings.append(
+            MissionFinding(
+                code="SNAPSHOT_DRIFT",
+                severity=Severity.ERROR,
+                artifact_path="status.json",
+                detail=f"reducer raised during drift check: {exc}",
+            )
+        )
+        return findings
+
+    # Normalise both sides: parse + re-serialise with identical options
+    try:
+        persisted_normalised = (
+            json.dumps(json.loads(raw_text), sort_keys=True, indent=2) + "\n"
+        )
+    except Exception:
+        # raw_text is already parsed above, so this branch is unreachable in practice
+        persisted_normalised = raw_text
+
+    if computed_json != persisted_normalised:
+        findings.append(
+            MissionFinding(
+                code="SNAPSHOT_DRIFT",
+                severity=Severity.ERROR,
+                artifact_path="status.json",
+                detail="reducer output does not match persisted status.json",
+            )
+        )
+
+    return findings