specpro-cli 0.1.0__py3-none-any.whl

specpro_cli/assets/scripts/powershell/verify-shapes.ps1

@@ -0,0 +1,978 @@
+#!/usr/bin/env pwsh
+#
+# Shape-detection verifier — PowerShell twin of scripts/bash/verify-shapes.sh.
+#
+# Same stdout, same exit code, by the contract in `specs/contracts/dev-shellcheck-tool.md`
+# and FR-008. The rationale lives in the bash side's header; keep the two in step.
+#
+# ⚠️ ONE DECLARED NON-PARITY, stated here rather than discovered later — 落点政策 §3:
+# shapes 1 and 6 EXECUTE a criterion that is carried in a document as **bash**, and the
+# only way to run a bash function is with bash. Both sides therefore run the criterion
+# through a `bash -c` subprocess, and on a host WITHOUT bash this side reports those two
+# shapes as `⊘ not executable` instead of guessing a verdict. That is a difference in the
+# verdict by design: the alternative is a second implementation of the criterion in
+# PowerShell, which would be a second source (形态 3) and would drift from the first.
+#
+# ⚠️ `.Contains` / `[regex]` stand in for `grep -qF` / `grep -E`; POSIX classes have no
+# .NET equivalent, so `[[:space:]]` becomes `[ \t]`. Both substitutions are visible at
+# every use site, and the parity suite is what proves the two agree.
+
+$Base = if ($env:SHAPES_HOOK_BASE) { $env:SHAPES_HOOK_BASE }
+        else { (Resolve-Path (Join-Path $PSScriptRoot '..' '..')).Path }
+
+$script:Hits = 0
+$script:Oks = 0
+$script:Skips = 0
+
+function Write-Hit  { param([string]$m) $script:Hits++;  Write-Output "        ✗ $m" }
+function Write-Ok   { param([string]$m) $script:Oks++;   Write-Output "        ✓ $m" }
+function Write-Skip { param([string]$m) $script:Skips++; Write-Output "        ⊘ $m" }
+
+# ---------------------------------------------------------------------------------------
+# ⊘ sites that are a LIVE SILENCE — 形态 12's subject, collected as DATA
+# ---------------------------------------------------------------------------------------
+# `Write-Skip` above means "this subject could not be exercised **here**" (absent carrier,
+# stale registry row, empty registry). `Write-Unreceived` means something stronger: **the
+# subject exists and was not judged**, so somebody must own filling its scope.
+#
+# ⚠️ Why the receiver is a COLLECTED PAIR and not parsed back out of the report text
+# (`T213` / `ISS-177`): deriving the subject from the message is 形态 1 — a semantic
+# conclusion drawn from a literal match — and it would go silently dead the first time
+# somebody reworded a message. The messages below are NOT uniform (some carry a subject id,
+# some do not), so there is nothing stable to parse even today.
+$script:Unreceived = @()
+function Write-Unreceived {
+    param([string]$Receiver, [string]$Message)
+    $script:Skips++
+    $script:Unreceived += ,@($Receiver, $Message)
+    Write-Output "        ⊘ $Message"
+}
+
+# Is <id> present as an ENTRY — not as a mention? The pattern is the entry body's
+# line-start shape, which is the discipline the ledger's own verifier already uses
+# (`^- \[[x ]\] ISS-<N>:` rather than a full-text ID search; `TOOL-009`). A full-text
+# match would count every cross-reference as a receiver, and this file's own commentary
+# names these ids — so the weaker check would pass on its own prose.
+function Test-ReceiversExist {
+    param([string]$Id)
+    foreach ($f in @("specs/tasks.md", "specs/implement_issues.md")) {
+        $path = Join-Path $Base $f
+        if (-not (Test-Path -LiteralPath $path -PathType Leaf)) { continue }
+        if (Get-Count -Path $path -Pattern ("^- \[[x ]\] " + [regex]::Escape($Id) + "([ :]|$)")) {
+            return $true
+        }
+    }
+    return $false
+}
+
+function Get-Lines {
+    param([string]$Path)
+    if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) { return @() }
+    $text = [System.IO.File]::ReadAllText($Path) -replace "`r`n", "`n"
+    # ⚠️ No `,` around the result: `return ,$array` wraps the array in a one-element array,
+    # and every caller feeds it straight into a pipeline — which then enumerates ONE item
+    # (the whole file) instead of one item per line. That single character made shapes 3, 4
+    # and 7 read the entire document as a single line.
+    return ($text -split "`n")
+}
+
+function Get-MatchLines {
+    param([string]$Path, [string]$Pattern)
+    return @(Get-Lines $Path | Where-Object { $_ -match $Pattern })
+}
+
+function Get-Count {
+    param([string]$Path, [string]$Pattern)
+    return @(Get-MatchLines $Path $Pattern).Count
+}
+
+function Get-CountUnfenced {
+    # ⚠️ **只数围栏之外的行** —— 与 Bash 侧 `count_of_unfenced` 同一理由：模板里有一条
+    # `- [ ] **Status**: ⊘ Skipped` 的 fenced EXAMPLE，逐行计数会把它算成第 12 项。
+    param([string]$Path, [string]$Pattern)
+    $n = 0; $inFence = $false
+    foreach ($ln in (Get-Lines $Path)) {
+        if ($ln -match '^[ 	]*```') { $inFence = -not $inFence; continue }
+        if ((-not $inFence) -and ($ln -match $Pattern)) { $n++ }
+    }
+    return $n
+}
+
+function Test-HasMatch {
+    param([string]$Path, [string]$Pattern)
+    return (@(Get-MatchLines $Path $Pattern).Count -gt 0)
+}
+
+function Get-FullText {
+    param([string]$Path)
+    if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) { return "" }
+    return ([System.IO.File]::ReadAllText($Path) -replace "`r`n", "`n")
+}
+
+function Get-FirstNumber {
+    param([string]$Path, [string]$Pattern)
+    # Mirrors `grep -oE "$Pattern" file | grep -oE '[0-9]+' | head -1`: the digits are taken
+    # from the MATCHED SUBSTRING, not from its line. Taking them from the line picks up an
+    # earlier number that has nothing to do with the claim — a file stating both "12
+    # templates" and "15 channels" on one line reads as 12 for the channel count.
+    $m = [regex]::Match((Get-FullText $Path), $Pattern)
+    if (-not $m.Success) { return "" }
+    $d = [regex]::Match($m.Value, '[0-9]+')
+    if ($d.Success) { return $d.Value }
+    return ""
+}
+
+# --- the criterion harness, shared by shapes 1 and 6 -----------------------------------
+# ⚠️ The criterion is EXTRACTED from its carrier, never re-stated here: a second copy of
+# the predicate is a second source (形态 3). Extraction that silently returns nothing is
+# ISS-83's shape, so the harness reports `not executable` rather than a verdict.
+function Get-Fence {
+    param([string]$Carrier, [string]$Fn)
+    if (-not (Test-Path -LiteralPath $Carrier -PathType Leaf)) { return "" }
+    $buf = ""
+    $inFence = $false
+    foreach ($line in (Get-Lines $Carrier)) {
+        if ($line -match '^```bash') { $inFence = $true; $buf = ""; continue }
+        if ($line -match '^```') {
+            if ($inFence -and $buf -match ([regex]::Escape($Fn) + '\(\)')) { return $buf }
+            $inFence = $false; continue
+        }
+        if ($inFence) { $buf += $line + "`n" }
+    }
+    return ""
+}
+
+function Get-Probe {
+    param([string]$Cid, [string]$Kind)
+    $key = "$Cid-$Kind"
+    switch ($key) {
+        'CQ001-compliant' {
+@'
+## Requirements *(mandatory)*
+
+### Functional Requirements
+
+  - **FR-001**: The system MUST classify incoming events into categories.
+    **Lifecycle**: [specify:create][plan:create][tasks:create]
+    System MUST classify each event and record its category.
+
+  - **FR-002**: The system MUST show a definition of every category it reports.
+    **Lifecycle**: [specify:create][plan:create][tasks:create]
+    System MUST present a declarative summary for each category.
+'@
+        }
+        'CQ001-falsifying' {
+@'
+## Requirements *(mandatory)*
+
+### Functional Requirements
+
+  - **FR-001**: The system MUST render its configuration screen with React.
+    **Lifecycle**: [specify:create][plan:create][tasks:create]
+    System MUST use an async/await HTTP client for the sync endpoint.
+'@
+        }
+        'CS003-compliant' {
+@'
+### US1 - Alpha (Priority: P1)
+
+**Independent Test**: run it.
+
+### US2 - Beta (Priority: P2)
+
+**Independent Test**: run it.
+
+## Requirements *(mandatory)*
+
+#### Alpha (US1)
+
+  - **FR-001**: The system MUST do alpha.
+
+#### Beta (US2)
+
+  - **FR-002**: The system MUST do beta.
+'@
+        }
+        'CS003-falsifying' {
+@'
+### US1 - Alpha (Priority: P1)
+
+**Independent Test**: run it.
+
+### US2 - Beta (Priority: P2)
+
+**Independent Test**: run it.
+
+## Requirements *(mandatory)*
+
+#### Alpha (US1)
+
+  - **FR-001**: The system MUST do alpha.
+'@
+        }
+        # ---- the rest (T192, minus one retired 2026-09-19 / T197) — same as bash --------
+        # Each is a MINIMAL input that falsifies its criterion's predicate. They are the
+        # cases T124 ran through a throwaway harness; without a home here they had no
+        # owner at all (ISS-151). ⚠️ The probe for the retired criterion was removed with
+        # it: a probe for a criterion that no longer exists would be registered against a
+        # `CRITERIA` row that no longer exists, and `S6_DECLARED` would then never reach it.
+        'CQ003-falsifying' {
+@'
+## Requirements
+
+  - **FR-001**: The system MUST implement search using React for the index.
+'@
+        }
+        'CP001-falsifying' {
+@'
+## Requirements *(mandatory)*
+
+### Functional Requirements
+
+  - **FR-001**: The system MUST do the thing.
+'@
+        }
+        'CP002-falsifying' {
+@'
+### US1 - Alpha (Priority: P1)
+
+No scenarios here at all.
+
+### US2 - Beta (Priority: P2)
+
+**Acceptance Scenarios**:
+
+1. **Given** a, **When** b, **Then** c
+'@
+        }
+        'CP003-falsifying' {
+@'
+### US1 - Alpha (Priority: P1)
+
+**Acceptance Scenarios**:
+
+1. **Given** a live session, **When** the screen changes, **Then** it updates within 200ms
+
+**Why this priority**: because.
+'@
+        }
+        'CS001-falsifying' {
+@'
+### US1 - Alpha (Priority: P1)
+
+The system MUST support offline mode for disconnected sites.
+
+### US2 - Beta (Priority: P2)
+
+The system MUST require an always-on connection to the server.
+'@
+        }
+        'CS002-falsifying' {
+@'
+## Requirements
+
+  - **FR-001**: The system MUST store the data locally on the device.
+  - **FR-002**: The system MUST NOT use local storage for records.
+'@
+        }
+        # ⚠️ **Why the cited id is `FR-042` and not a number outside the project's range** (T202),
+        # same as the bash twin: the probe's subject is "cited in this sample but not
+        # defined in it", and any number satisfies that — while one ABOVE the project's
+        # range is indistinguishable from a foreign identifier to the anti-coupling scan's
+        # class 1, turning the fixture itself into an O1 finding. An id inside the project's
+        # range removes the false finding without touching the probe or the criterion.
+        'CS004-falsifying' {
+@'
+## Requirements
+
+  - **FR-001**: The system MUST do alpha, per FR-042.
+'@
+        }
+        'TR001-falsifying' {
+@'
+## Requirements *(mandatory)*
+
+  - **FR-001**: The system MUST do the thing.
+'@
+        }
+        'TR002-falsifying' {
+@'
+## Requirements *(mandatory)*
+
+  - **FR-001**: The system MUST call the external service to settle the order.
+'@
+        }
+        default { return $null }
+    }
+}
+
+$Criteria = @(
+    "CQ001|commands/specpro.qc.md|check_cq001_implementation_details",
+    "CQ003|commands/specpro.qc.md|check_cq003_functional_not_technical",
+    "CP001|commands/specpro.qc.md|check_cp001_mandatory_sections",
+    "CP002|commands/specpro.qc.md|check_cp002_acceptance_scenarios",
+    "CP003|commands/specpro.qc.md|check_cp003_scenarios_functional",
+    "CS001|commands/specpro.qc.md|check_cs001_us_consistency",
+    "CS002|commands/specpro.qc.md|check_cs002_fr_consistency",
+    "CS003|commands/specpro.qc.md|check_cs003_us_fr_mapping",
+    "CS004|commands/specpro.qc.md|check_cs004_reference_integrity",
+    "TR001|commands/specpro.qc.md|check_tr001_constitution_constraints",
+    "TR002|commands/specpro.qc.md|check_tr002_external_dependencies"
+)
+
+function Invoke-Criterion {
+    param([string]$Cid, [string]$Carrier, [string]$Fn, [string]$Kind)
+    $probe = Get-Probe -Cid $Cid -Kind $Kind
+    if ($null -eq $probe) { return $null }
+    $block = Get-Fence -Carrier (Join-Path $Base $Carrier) -Fn $Fn
+    if ([string]::IsNullOrEmpty($block)) { return $null }
+    $bash = Get-Command bash -ErrorAction SilentlyContinue
+    if (-not $bash) { return $null }
+
+    $tmp = [System.IO.Path]::Combine([System.IO.Path]::GetTempPath(), [System.IO.Path]::GetRandomFileName())
+    [System.IO.File]::WriteAllText($tmp, ($probe -replace "`r`n", "`n") + "`n")
+    # ⚠️ The working directory and an ABSOLUTE template path are both load-bearing: CP001
+    # and TR002 read `$SPEC_TEMPLATE` (unset ⇒ "" ⇒ "the template declares no mandatory
+    # sections"), and TR001 reads `specs/constitution.md` relative to the working directory.
+    # Without these, the harness reports three criteria as wrong for reasons that have
+    # nothing to do with the criteria.
+    $env:FEATURE_SPEC = $tmp
+    $env:TARGET_FRS = "all"
+    $env:SCOPE = "full"
+    $env:SPEC_TEMPLATE = (Join-Path $Base ".specpro/templates/spec-template.md")
+    $driver = @'
+eval "$1"
+PASSED=0; FAILED=0; SKIPPED=0; FAILED_ITEMS=(); AUTO_FIXED_COUNT=0
+NEED_CLARIFY=false
+auto_fix_implementation_details() { return 0; }
+add_to_clarifications() { return 0; }
+update_checklist() { return 0; }
+save_qc_cache() { return 0; }
+"$2" 2>/dev/null
+'@
+    Push-Location $Base
+    try { $out = & bash -c $driver _ $block $Fn 2>$null }
+    finally { Pop-Location }
+    Remove-Item -LiteralPath $tmp -Force -ErrorAction SilentlyContinue
+    return (@($out) -join "`n")
+}
+
+Write-Output "Shape detections: $Base"
+Write-Output ""
+
+# =======================================================================================
+# SHAPE 1 — literal match used as a semantic conclusion
+# =======================================================================================
+Write-Output "  [1] literal match used as a semantic conclusion"
+$s1N = 0
+$s1Unprobed = @()
+foreach ($row in $Criteria) {
+    $parts = $row -split '\|'
+    $cid = $parts[0]; $carrier = $parts[1]; $fn = $parts[2]
+    $s1N++
+    $verdict = Invoke-Criterion -Cid $cid -Carrier $carrier -Fn $fn -Kind "compliant"
+    if ($null -eq $verdict) {
+        # The criterion is reachable; the COMPLIANT PROBE is what is missing. Reporting
+        # those as "not reachable" was untrue, and a ⊘ with the wrong reason costs more
+        # than no line — the reader checks the claim, finds the function, and stops
+        # trusting the report. They are aggregated once, as a coverage fact.
+        $s1Unprobed += $cid
+        continue
+    }
+    if ($verdict -match '✗') {
+        Write-Hit "SHAPE-1 $cid`: reports on a compliant probe where the keywords are substrings only"
+        foreach ($l in (@($verdict -split "`n") | Where-Object { $_ -match '✗' } | Select-Object -First 2)) {
+            Write-Output ("          " + $l)
+        }
+    } else {
+        Write-Ok "SHAPE-1 $cid`: compliant probe reported clean"
+    }
+}
+if (@($s1Unprobed).Count -gt 0) {
+    Write-Unreceived "T124" "SHAPE-1: $(@($s1Unprobed).Count) of $s1N criteria have no COMPLIANT probe — unproven, not clean: $($s1Unprobed -join ' ')"
+}
+if ($s1N -eq 0) { Write-Skip "SHAPE-1: no criterion is registered" }
+
+# =======================================================================================
+# SHAPE 2 — mechanism written but not wired into the execution chain
+# =======================================================================================
+Write-Output "  [2] mechanism written but not wired into the execution chain"
+$S2Claims = @(
+    "verify-ledger-enforcement|commands/specpro.implement.md|verify-ledger|scripts/git-hooks/pre-commit|verify-ledger",
+    "verify-deployment-enforcement|CLAUDE.md|verify-deployment|scripts/git-hooks/pre-commit|verify-deployment"
+)
+$s2N = 0
+foreach ($row in $S2Claims) {
+    $p = $row -split '\|'
+    $cid = $p[0]; $claimFile = $p[1]; $subject = $p[2]; $enforcer = $p[3]; $inv = $p[4]
+    if ([string]::IsNullOrEmpty($cid)) { continue }
+    $s2N++
+    if (-not (Test-Path -LiteralPath (Join-Path $Base $claimFile) -PathType Leaf)) {
+        Write-Skip "SHAPE-2 $cid`: not executable — claim carrier $claimFile is absent"
+        continue
+    }
+    if (-not (Test-HasMatch -Path (Join-Path $Base $claimFile) -Pattern ([regex]::Escape($subject)))) {
+        Write-Skip "SHAPE-2 $cid`: the claim is no longer made in $claimFile (registry row is stale)"
+        continue
+    }
+    if (-not (Test-Path -LiteralPath (Join-Path $Base $enforcer) -PathType Leaf)) {
+        Write-Hit "SHAPE-2 $cid`: $claimFile claims enforcement by $enforcer, which does not exist"
+        continue
+    }
+    if (Test-HasMatch -Path (Join-Path $Base $enforcer) -Pattern ([regex]::Escape($inv))) {
+        Write-Ok "SHAPE-2 $cid`: $enforcer really invokes '$inv'"
+    } else {
+        Write-Hit "SHAPE-2 $cid`: $enforcer does not invoke '$inv' — the claim has no enforcement point"
+    }
+}
+if ($s2N -eq 0) { Write-Skip "SHAPE-2: no enforcement claim is registered" }
+
+# --- the consumer side: is a consumer NAMED where the artifact is defined? ---------------
+# 判据 (Q2's OTHER half — `ISS-174` / `T212`): 宪法 Q2 要求「新增产物时必须**同时指定**其负责
+# 命令与**具名消费者**」。⚠️ **写入侧**有强制点（上面那两行：pre-commit 真的调用核验体）；
+# **消费者侧此前什么都没有** —— 而 `S2Claims` 问的是另一个问题（"声称的强制者是否真的调用
+# 它"），把两者塞进同一个表会让"命令有没有声明该产物"与"产物有没有人读"互相冒充。
+#
+# ⚠️ 注册的对象是「**产物 ↔ 它的定义载体**」这一**对**，不是产物单侧。单侧那一半
+# （"这个字在仓库里出现过吗"）是**形态 1**（字面匹配求语义结论）—— 而本文件的 SHAPE 1
+# 存在的意义就是查它。
+#
+# ⚠️ 今天每一行都是 `carrier == artifact`（这些产物**在自身**里点名消费者）。该列**不是装饰**：
+# 它是"消费者被写在**契约**里而不是产物里"那一行要用的槽位，而这样的行**今天还没有**。
+#
+# ⚠️ **一次命中证明了什么、没证明什么**：载体里有 ≥1 行匹配，回答的是「**这里点名了消费者**」；
+# **不**回答「这个产物的每一部分都有」—— 后者是**形态 10**（一般规则只以实例形式存在）的
+# 判据，是另一处检查。写在这里，是因为把它当成后者读的人**会停止寻找**。
+$S2ConsumerRows = @(
+    "ledger-sections|specs/contracts/ledger.md|specs/contracts/ledger.md|^## Sections and their consumers",
+    "plan-purpose-consumers|specs/plan.md|specs/plan.md|^\*Purpose:.*Consumers:"
+)
+$s2cN = 0
+foreach ($row in $S2ConsumerRows) {
+    $p = $row -split '\|'
+    $cid = $p[0]; $artifact = $p[1]; $carrier = $p[2]; $cpattern = $p[3]
+    if ([string]::IsNullOrEmpty($cid)) { continue }
+    $s2cN++
+    if (-not (Test-Path -LiteralPath (Join-Path $Base $artifact) -PathType Leaf)) {
+        Write-Skip "SHAPE-2 $cid`: not executable — the artifact $artifact is absent"
+        continue
+    }
+    if (-not (Test-Path -LiteralPath (Join-Path $Base $carrier) -PathType Leaf)) {
+        Write-Hit "SHAPE-2 $cid`: $artifact names no consumer — its definition carrier $carrier does not exist"
+        continue
+    }
+    if ((Get-Count -Path (Join-Path $Base $carrier) -Pattern $cpattern) -gt 0) {
+        Write-Ok "SHAPE-2 $cid`: $artifact names its consumer(s) in $carrier"
+    } else {
+        Write-Hit "SHAPE-2 $cid`: $artifact names no consumer in $carrier — Q2 requires one"
+    }
+}
+if ($s2cN -eq 0) { Write-Skip "SHAPE-2: no consumer-side row is registered (Q2's consumer half is unproven, not clean)" }
+
+# =======================================================================================
+# SHAPE 3 — the same fact in two places, and they disagree
+# =======================================================================================
+Write-Output "  [3] the same fact in two places, and they disagree"
+$S3Facts = @(
+    "analyze-pass-count|commands/specpro.analyze.md|^#### ([A-P])\. |count|CLAUDE.md|([0-9]+) 个检测通道"
+)
+$s3N = 0
+foreach ($row in $S3Facts) {
+    $p = $row -split '\|'
+    $fid = $p[0]; $aFile = $p[1]; $aRe = $p[2]; $arity = $p[3]; $bFile = $p[4]; $bRe = $p[5]
+    if ([string]::IsNullOrEmpty($fid)) { continue }
+    $s3N++
+    $aPath = Join-Path $Base $aFile; $bPath = Join-Path $Base $bFile
+    if (-not (Test-Path -LiteralPath $aPath -PathType Leaf) -or -not (Test-Path -LiteralPath $bPath -PathType Leaf)) {
+        Write-Skip "SHAPE-3 $fid`: not executable — a carrier is absent"
+        continue
+    }
+    if ($arity -eq "count") {
+        $av = [string](Get-Count -Path $aPath -Pattern $aRe)
+    } else {
+        $m = @(Get-MatchLines -Path $aPath -Pattern $aRe)
+        $av = if (@($m).Count -gt 0) { $m[0] } else { "" }
+    }
+    $bv = Get-FirstNumber -Path $bPath -Pattern $bRe
+    if ([string]::IsNullOrEmpty($av) -or [string]::IsNullOrEmpty($bv)) {
+        Write-Skip "SHAPE-3 $fid`: not executable — one side states no value (a form change, not agreement)"
+        continue
+    }
+    if ($av -eq $bv) {
+        Write-Ok "SHAPE-3 $fid`: both carriers state $av"
+    } else {
+        Write-Hit "SHAPE-3 $fid`: $aFile says $av, $bFile says $bv"
+    }
+}
+if ($s3N -eq 0) { Write-Skip "SHAPE-3: no fact pair is registered" }
+
+# =======================================================================================
+# SHAPE 4 — the report disagrees with what is actually there
+# =======================================================================================
+Write-Output "  [4] the report disagrees with what is actually there"
+$S4Rows = @(
+    "checklist-total|specs/checklists/requirements.md|Total Items|\*\*Total Items\*\*: ([0-9]+)|unfenced:^[ \t]*- \[[ x]\] \*\*Status\*\*:[ \t]*[^ \t]+",
+    "checklist-passed|specs/checklists/requirements.md|Passed|\*\*Passed\*\*: ([0-9]+)|unfenced:^[ \t]*- \[[ x]\] \*\*Status\*\*:[ \t]*x[ \t]*$",
+    "checklist-failed|specs/checklists/requirements.md|Failed|\*\*Failed\*\*: ([0-9]+)|unfenced:^[ \t]*- \[[ x]\] \*\*Status\*\*:[ \t]*✗",
+    "req-template-total|templates/requirements-template.md|Total Items|\*\*Total Items\*\*: ([0-9]+)|^### [A-Z]{2}[0-9]{3}:"
+)
+$s4N = 0
+foreach ($row in $S4Rows) {
+    $p = $row -split '\|'
+    $rid = $p[0]; $rFile = $p[1]; $label = $p[2]; $claimRe = $p[3]; $countRe = $p[4]
+    if ([string]::IsNullOrEmpty($rid)) { continue }
+    $s4N++
+    $rPath = Join-Path $Base $rFile
+    if (-not (Test-Path -LiteralPath $rPath -PathType Leaf)) {
+        Write-Skip "SHAPE-4 $rid`: not executable — report $rFile is absent"
+        continue
+    }
+    $stated = Get-FirstNumber -Path $rPath -Pattern $claimRe
+    # ⚠️ `unfenced:` 前缀 = 这一行必须跳过围栏内的行（见 Get-CountUnfenced 的理由）
+    if ($countRe.StartsWith("unfenced:")) {
+        # ⚠️ **9, not 10** — `"unfenced:"`.Length is 9, and off-by-one here is SILENT:
+        # dropping one extra character takes `^` off the pattern, after which it matches
+        # anywhere and the count goes back to including the fenced example. Measured:
+        # re-derived 12 (wrong) with 10, 11 (right) with 9.
+        $actual = [string](Get-CountUnfenced -Path $rPath -Pattern $countRe.Substring(9))
+    } else {
+        $actual = [string](Get-Count -Path $rPath -Pattern $countRe)
+    }
+    if ([string]::IsNullOrEmpty($stated)) {
+        Write-Skip "SHAPE-4 $rid`: not executable — the report states no '$label' value"
+        continue
+    }
+    if ($stated -eq $actual) {
+        Write-Ok "SHAPE-4 $rid`: report says $stated, re-derived $actual"
+    } else {
+        Write-Hit "SHAPE-4 $rid`: report says $label=$stated, re-derived $actual"
+    }
+}
+if ($s4N -eq 0) { Write-Skip "SHAPE-4: no report claim is registered" }
+
+# =======================================================================================
+# SHAPE 5 — the deliverable is there, the record that receives it is not
+# =======================================================================================
+Write-Output "  [5] the deliverable is there, the record that receives it is not"
+$S5Globs = @("scripts/bash/*.sh", "tools/*.sh", "tools/*.md")
+$s5Tasks = Join-Path $Base "specs/tasks.md"
+$s5Ledger = Join-Path $Base "specs/implement_issues.md"
+$s5Corpora = @()
+foreach ($c in @($s5Tasks, $s5Ledger)) { if (Test-Path -LiteralPath $c -PathType Leaf) { $s5Corpora += $c } }
+$s5N = 0
+$s5Files = @()
+foreach ($g in $S5Globs) {
+    foreach ($f in @(Get-ChildItem -Path (Join-Path $Base $g) -File -ErrorAction SilentlyContinue)) {
+        $s5Files += $f
+    }
+}
+if ($s5Corpora.Count -eq 0) {
+    Write-Skip "SHAPE-5: not executable — neither tasks.md nor the ledger exists, so nothing can receive anything"
+    $s5N = @($s5Files).Count
+} else {
+    foreach ($f in $s5Files) {
+        $s5N++
+        $name = $f.Name
+        $found = $false
+        foreach ($c in $s5Corpora) {
+            if ((Get-FullText $c).Contains($name)) { $found = $true }
+        }
+        if ($found) {
+            Write-Ok "SHAPE-5 $name`: named by a task or a ledger entry"
+        } else {
+            Write-Hit "SHAPE-5 $name`: no task and no ledger entry receives it"
+        }
+    }
+}
+if ($s5N -eq 0) { Write-Skip "SHAPE-5: the registered globs matched no artifact — the scope is the finding" }
+
+# =======================================================================================
+# SHAPE 6 — the criterion is voided by the way it is written
+# =======================================================================================
+Write-Output "  [6] the criterion is voided by the way it is written"
+$s6Carrier = "commands/specpro.qc.md"
+$s6Body = Get-Fence -Carrier (Join-Path $Base $s6Carrier) -Fn "run_qc_check"
+$s6Declared = @()
+if (-not [string]::IsNullOrEmpty($s6Body)) {
+    foreach ($l in ($s6Body -split "`n")) {
+        $m = [regex]::Match($l, '^  (check_[a-z0-9_]+)')
+        if ($m.Success) { $s6Declared += $m.Groups[1].Value }
+    }
+    $s6Declared = @($s6Declared | Sort-Object -Unique)
+}
+if (@($s6Declared).Count -eq 0) {
+    Write-Skip "SHAPE-6: not executable — no criterion is declared in $s6Carrier's run_qc_check"
+} else {
+    $unproven = @()
+    foreach ($fn in $s6Declared) {
+        $m = [regex]::Match($fn, '^check_([a-z]+[0-9]+)_')
+        $cid = if ($m.Success) { $m.Groups[1].Value.ToUpper() } else { $fn.ToUpper() }
+        $row = @($Criteria | Where-Object { $_ -match ('^' + [regex]::Escape($cid) + '\|') })
+        if (@($row).Count -eq 0) { $unproven += $cid; continue }
+        $parts = $row[0] -split '\|'
+        $verdict = Invoke-Criterion -Cid $cid -Carrier $parts[1] -Fn $parts[2] -Kind "falsifying"
+        if ($null -eq $verdict) {
+            Write-Skip "SHAPE-6 $cid`: not executable — the falsifying probe or the criterion is unreachable"
+        } elseif ($verdict -match '✗') {
+            Write-Ok "SHAPE-6 $cid`: judges fail on an input that falsifies it"
+        } else {
+            Write-Hit "SHAPE-6 $cid`: did NOT judge fail on a falsifying input — always-true, or never ran"
+            foreach ($l in (@($verdict -split "`n") | Select-Object -First 2)) {
+                Write-Output ("          " + $l)
+            }
+        }
+    }
+    if (@($unproven).Count -gt 0) {
+        $names = ($unproven -join " ")
+        Write-Unreceived "T124" "SHAPE-6: $(@($unproven).Count) declared criterion(s) have no falsifying probe — unproven, not clean: $names"
+    }
+}
+
+# =======================================================================================
+# SHAPE 7 — self-witnessing (the evidence's producer is the judged implementation)
+# =======================================================================================
+Write-Output "  [7] self-witnessing (the evidence's producer is the judged implementation)"
+$S7Cite = '^[ \t]*>[ \t]*\**[Ss]ource\**[ \t]*[:：]'
+$S7Rows = @(
+    "dev-shellcheck-contract|specs/contracts/dev-shellcheck-tool.md|tools/verify-doc-shell\.sh",
+    "ledger-contract|specs/contracts/ledger.md|scripts/bash/verify-ledger\.sh"
+)
+$s7N = 0
+foreach ($row in $S7Rows) {
+    $p = $row -split '\|'
+    $aid = $p[0]; $aFile = $p[1]; $subject = $p[2]
+    if ([string]::IsNullOrEmpty($aid)) { continue }
+    $s7N++
+    $aPath = Join-Path $Base $aFile
+    if (-not (Test-Path -LiteralPath $aPath -PathType Leaf)) {
+        Write-Skip "SHAPE-7 $aid`: not executable — artifact $aFile is absent"
+        continue
+    }
+    $cites = Get-Count -Path $aPath -Pattern $S7Cite
+    if ($cites -eq 0) {
+        Write-Unreceived "ISS-178" "SHAPE-7 $aid`: not executable — $aFile carries no Source: citation, so there is no evidence chain to audit"
+        continue
+    }
+    $selfwitness = @(Get-MatchLines -Path $aPath -Pattern $S7Cite | Where-Object { $_ -match $subject })
+    if (@($selfwitness).Count -gt 0) {
+        Write-Hit "SHAPE-7 $aid`: a Source: line attributes the fact to the surface being judged"
+        $line = $selfwitness[0]
+        if ($line.Length -gt 120) { $line = $line.Substring(0, 120) }
+        Write-Output ("          " + $line)
+    } else {
+        Write-Ok "SHAPE-7 $aid`: $cites Source: citation(s), none of them self-witnessing"
+    }
+}
+if ($s7N -eq 0) { Write-Skip "SHAPE-7: no artifact is registered" }
+
+# =======================================================================================
+# SHAPE 8 — position decides ownership and there is no boundary sentinel
+# =======================================================================================
+Write-Output "  [8] position decides ownership and there is no boundary sentinel"
+$S8Rows = @(
+    "ledger|specs/implement_issues.md|^-->$",
+    "requirements-checklist|specs/checklists/requirements.md|^[ \t]*<!--[ \t]*[Ee]nd-of-file sentinel"
+)
+$s8N = 0
+foreach ($row in $S8Rows) {
+    $p = $row -split '\|'
+    $sid = $p[0]; $sFile = $p[1]; $marker = $p[2]
+    if ([string]::IsNullOrEmpty($sid)) { continue }
+    $s8N++
+    $sPath = Join-Path $Base $sFile
+    if (-not (Test-Path -LiteralPath $sPath -PathType Leaf)) {
+        Write-Skip "SHAPE-8 $sid`: not executable — carrier $sFile is absent"
+        continue
+    }
+    if (Test-HasMatch -Path $sPath -Pattern $marker) {
+        Write-Ok "SHAPE-8 $sid`: $sFile declares a boundary sentinel"
+    } else {
+        Write-Hit "SHAPE-8 $sid`: $sFile owns rows by position and declares no boundary sentinel"
+    }
+}
+if ($s8N -eq 0) { Write-Skip "SHAPE-8: no position-owned structure is registered" }
+
+# =======================================================================================
+# SHAPE 9 — a compatibility layer for a gap that is not there
+# =======================================================================================
+Write-Output "  [9] a compatibility layer for a gap that is not there"
+$S9Rows = @(
+    "create-new-feature|scripts/bash/create-new-feature.sh|commands/specpro.specify.md"
+)
+$s9N = 0
+foreach ($row in $S9Rows) {
+    $p = $row -split '\|'
+    $lid = $p[0]; $lFile = $p[1]; $consumer = $p[2]
+    if ([string]::IsNullOrEmpty($lid)) { continue }
+    $s9N++
+    if (-not (Test-Path -LiteralPath (Join-Path $Base $lFile) -PathType Leaf)) {
+        Write-Skip "SHAPE-9 $lid`: not executable — $lFile is absent (the layer may already be gone)"
+        continue
+    }
+    if (-not (Test-Path -LiteralPath (Join-Path $Base $consumer) -PathType Leaf)) {
+        Write-Skip "SHAPE-9 $lid`: not executable — the consumer named for the gap is absent"
+        continue
+    }
+    $stem = [System.IO.Path]::GetFileNameWithoutExtension($lFile)
+    if ((Get-FullText (Join-Path $Base $consumer)).Contains($stem)) {
+        Write-Ok "SHAPE-9 $lid`: the gap is real — $consumer still calls it"
+    } else {
+        Write-Hit "SHAPE-9 $lid`: $consumer no longer calls it — the gap it exists for is gone"
+    }
+}
+if ($s9N -eq 0) { Write-Skip "SHAPE-9: no compatibility layer is registered" }
+
+# =======================================================================================
+# SHAPE 10 — a general rule that exists only as an instance
+# =======================================================================================
+Write-Output "  [10] a general rule that exists only as an instance"
+$S10Rows = @(
+    "detect-then-ask|detect-then-ask|commands/specpro.implement.md commands/specpro.plan.md commands/specpro.tasks.md commands/specpro.test-plan.md commands/specpro.specify.md"
+)
+$s10N = 0
+foreach ($row in $S10Rows) {
+    $p = $row -split '\|'
+    $rid = $p[0]; $statement = $p[1]; $scope = $p[2]
+    if ([string]::IsNullOrEmpty($rid)) { continue }
+    $s10N++
+    $missing = @()
+    $seen = 0
+    foreach ($f in ($scope -split ' ')) {
+        if ([string]::IsNullOrEmpty($f)) { continue }
+        $fPath = Join-Path $Base $f
+        if (-not (Test-Path -LiteralPath $fPath -PathType Leaf)) { continue }
+        $seen++
+        if (-not (Test-HasMatch -Path $fPath -Pattern $statement)) { $missing += $f }
+    }
+    if ($seen -eq 0) {
+        Write-Skip "SHAPE-10 $rid`: not executable — none of the declared scope exists"
+    } elseif (@($missing).Count -gt 0) {
+        $miss = " " + ($missing -join " ")
+        Write-Hit "SHAPE-10 $rid`: stated in $($seen - @($missing).Count) of $seen declared files; missing:$miss"
+    } else {
+        Write-Ok "SHAPE-10 $rid`: stated in all $seen files of its declared scope"
+    }
+}
+if ($s10N -eq 0) { Write-Skip "SHAPE-10: no rule is registered" }
+
+# =======================================================================================
+# SHAPE 11 — the criterion's conclusion is not a function of its input
+# =======================================================================================
+Write-Output "  [11] the criterion's conclusion is not a function of its input"
+$S11Rows = @("verify-ledger|scripts/bash/verify-ledger.sh")
+$s11N = 0
+$s11Runs = 3
+$bashCmd = Get-Command bash -ErrorAction SilentlyContinue
+foreach ($row in $S11Rows) {
+    $p = $row -split '\|'
+    $cid = $p[0]; $runner = $p[1]
+    if ([string]::IsNullOrEmpty($cid)) { continue }
+    $s11N++
+    if (-not (Test-Path -LiteralPath (Join-Path $Base $runner) -PathType Leaf)) {
+        Write-Skip "SHAPE-11 $cid`: not executable — runner $runner is absent"
+        continue
+    }
+    if (-not $bashCmd) {
+        Write-Skip "SHAPE-11 $cid`: not executable — no bash on this host to run the runner"
+        continue
+    }
+    $first = $null
+    $varies = $false
+    for ($i = 1; $i -le $s11Runs; $i++) {
+        Push-Location $Base
+        $out = @(& bash $runner 2>&1) -join "`n"
+        Pop-Location
+        if ($null -eq $first) { $first = $out } elseif ($out -ne $first) { $varies = $true }
+    }
+    if ($varies) {
+        Write-Hit "SHAPE-11 $cid`: $s11Runs runs on one input disagreed — the verdict is not a function of the input"
+    } else {
+        Write-Ok "SHAPE-11 $cid`: $s11Runs runs on one input agreed"
+    }
+}
+if ($s11N -eq 0) { Write-Skip "SHAPE-11: no criterion runner is registered" }
+
+# =======================================================================================
+# COVERAGE — the register and the detections must be the same set
+# =======================================================================================
+# 判据 (形态 4 applied to this file itself): the report states how many shapes were
+# checked, and that number MUST be re-derived — from the detections this file defines,
+# and from the REGISTER the claim is about.
+#
+# ⚠️ Why this block exists (`ISS-171` / `T211`): the verdict used to read
+# `shapes: 11 checked` — a LITERAL. Registering a 12th shape (in both carriers, so
+# pre-commit's own sync invariant still holds) produced `11 checked` and `rc=0`: a shape
+# with no detection at all, reported as completely covered. That is 形态 6's shape — the
+# step was there, but its verdict could not be anything but pass — and it is why `T132`,
+# whose whole job is "every registered shape has a detection", could not fail.
+#
+# ⚠️ One derived number, against the register — and it MUST be the register, not this
+# file's own count. Comparing the report only to its own detections would catch an edited
+# comment and nothing else; it is the REGISTER that the report makes a claim about.
+#
+# ⚠️ The marker is `# SHAPE n`, and it is the SAME regex on both implementations on purpose.
+# An earlier version counted the section-heading idiom instead, which is `echo "  [n] …" on
+# the Bash side and `Write-Output "  [n] …"` here — so the two sides counted different
+# things and this half read 0. The parity suite caught it, and the fix is to count the one
+# marker both files actually share.
+Write-Output "  [coverage] the register and the detections must be the same set"
+
+$Self = Join-Path $PSScriptRoot "verify-shapes.ps1"
+$shapesChecked = Get-Count $Self '^# SHAPE [0-9]+'
+$register = Join-Path $Base "specs/plan.md"
+if (-not (Test-Path -LiteralPath $register -PathType Leaf)) {
+    Write-Skip "COVERAGE: not executable — the shape register $register is absent, so 'every registered shape was checked' cannot be judged"
+} else {
+    $shapesRegistered = Get-Count $register '^\| \*\*[0-9]+\*\* \|'
+    if ($shapesChecked -eq $shapesRegistered) {
+        Write-Ok "COVERAGE: $shapesChecked detection(s) for $shapesRegistered registered shape(s)"
+    } else {
+        Write-Hit "COVERAGE: the register declares $shapesRegistered shape(s) but this file defines $shapesChecked detection(s) — the difference has no detection"
+    }
+}
+
+# =======================================================================================
+# SHAPE 12 — a silence with no receiver
+# =======================================================================================
+# 判据 (`spec.md` → FR-047 登记表第 12 行 · `plan.md` → Constraint 7 第 12 行，照引不重推):
+# 一条**已登记**的检出，其作用域对某一**整类**对象为空（或全部为"不可行使"）；该 `⊘` 在
+# **任务与台账里都零承接**即命中。
+#
+# ⚠️ **承接的匹配是「条目形状」的，不是「关键词出现」的** (`TOOL-009`): the ledger's own
+# verifier already made this correction (`^- \[[x ]\] ISS-<N>:` rather than a full-text ID
+# search). ⚠️ And the weaker check would pass on THIS FILE'S OWN COMMENTARY — the comments
+# above name `T124` and `ISS-178` — which is the cleanest available demonstration that a
+# full-text match answers a different question.
+#
+# ⚠️ **What a pass does and does not prove**, stated because reading it as the stronger
+# claim would stop the search: it proves **the silences declared this run have receivers
+# that exist as entries**. It does NOT prove that every silence declared a receiver — that
+# judgement is made at the call site (`Write-Skip` vs `Write-Unreceived`) and is visible in
+# the code, not decidable here.
+Write-Output "  [12] a silence with no receiver"
+
+$s12N = 0
+foreach ($pair in $script:Unreceived) {
+    $rcv = $pair[0]; $msg = $pair[1]
+    if ([string]::IsNullOrEmpty($msg)) { continue }
+    $s12N++
+    if ([string]::IsNullOrEmpty($rcv)) {
+        Write-Hit "SHAPE-12: a silence names no receiver — $msg"
+        continue
+    }
+    if (Test-ReceiversExist $rcv) {
+        Write-Ok "SHAPE-12 $rcv`: receives '$msg'"
+    } else {
+        Write-Hit "SHAPE-12 $rcv`: names a receiver that is not an entry in tasks.md or the ledger — $msg"
+    }
+}
+if ($s12N -eq 0) { Write-Skip "SHAPE-12: no silence was declared this run — nothing to receive, so nothing is proven" }
+
+
+# =======================================================================================
+# Constraint 7's detection column — a TWO-WAY map (`T222`)
+# =======================================================================================
+# 判据 (`plan.md` → Constraint 7 · `spec.md` → FR-047 形态 2 的判据, 照引不重推):
+# 那张表的**每一行**点名一处检出，而**每一处检出都要有一行点名它**。
+#
+# ⚠️ **本条补的是哪个缺口** (`ISS-192`): `S2_CLAIMS` · `S2_CONSUMER_ROWS` · `COVERAGE`
+# 三处**都在本文件内部自洽，没有一处读 `plan.md`**。而 `spec.md` 的判据**明确把检出方式
+# 的真源指给 `plan.md`** ⇒ 那张表**指不到任何东西时不报错**，且它自称是真源。
+$c7Rows = @(
+    "1|回归用例|SHAPE 1"
+    "2|S2_CLAIMS|S2_CLAIMS"
+    "3|全文反查|SHAPE 3"
+    "4|重跑|SHAPE 4"
+    "5|承接|SHAPE 5"
+    "6|使该判据为假的输入|SHAPE 6"
+    "7|生产者是不是被判定的实现本身|SHAPE 7"
+    "8|边界哨兵|SHAPE 8"
+    "9|缺口是否真实存在|SHAPE 9"
+    "10|同一表述|SHAPE 10"
+    "11|连跑 N 次|SHAPE 11"
+    "12|有谁承接它|SHAPE 12"
+)
+$c7Plan = Join-Path $Base "specs/plan.md"
+$c7N = 0
+if (-not (Test-Path -LiteralPath $c7Plan -PathType Leaf)) {
+    Write-Skip "SHAPE-2 c7-table: not executable — specs/plan.md is absent"
+} else {
+    $c7SelfText = (Get-Lines $Self) -join "`n"
+    foreach ($row in $c7Rows) {
+        $c = $row -split '\|'
+        $num = $c[0]; $planTok = $c[1]; $scriptTok = $c[2]
+        if ([string]::IsNullOrEmpty($num)) { continue }
+        $c7N++
+        $planRow = @(Get-Lines $c7Plan | Where-Object { $_ -match ("^\| \*\*" + [regex]::Escape($num) + "\*\* \|") }) | Select-Object -First 1
+        if ([string]::IsNullOrEmpty($planRow)) {
+            Write-Hit "SHAPE-2 c7-$num`: Constraint 7 has no row for shape $num"
+            continue
+        }
+        if (-not $planRow.Contains($planTok)) {
+            Write-Hit "SHAPE-2 c7-$num`: the row's detection column does not name '$planTok'"
+            continue
+        }
+        if (-not $c7SelfText.Contains($scriptTok)) {
+            Write-Hit "SHAPE-2 c7-$num`: the row names a detection that does not exist here — '$scriptTok'"
+            continue
+        }
+        Write-Ok "SHAPE-2 c7-$num`: names '$planTok' → '$scriptTok' exists"
+    }
+    # (c) 反向: 三处计数必须相等
+    # ⚠️ 约束在 `#### Constraint 7` 那一节之内，理由同 Bash 侧
+    $c7PlanRows = 0; $inC7 = $false
+    foreach ($c7ln in (Get-Lines $c7Plan)) {
+        if ($c7ln -match '^#### Constraint 7') { $inC7 = $true; continue }
+        if ($inC7 -and ($c7ln -match '^#### ')) { $inC7 = $false; continue }
+        if ($inC7 -and ($c7ln -match '^\| \*\*[0-9]+\*\* \|')) { $c7PlanRows++ }
+    }
+    if ($c7PlanRows -ne $c7N) {
+        Write-Hit "SHAPE-2 c7-table: Constraint 7 declares $c7PlanRows row(s), this registry maps $c7N"
+    }
+    if ($shapesChecked -ne $c7N) {
+        Write-Hit "SHAPE-2 c7-table: this file defines $shapesChecked detection(s), this registry maps $c7N"
+    }
+    if ($c7N -eq 0) { Write-Skip "SHAPE-2 c7-table: the registry is empty — nothing is proven" }
+}
+
+# =======================================================================================
+# `specs/audit/` — NO COMMAND MAY DECLARE IT (`T221`)
+# =======================================================================================
+# 判据 (`plan.md` → Pattern 7 的边界裁定 · `specs/contracts/dev-audit-tool.md`):
+# `specs/audit/` 下的产物**不属于任何命令** —— 它们的生产者是**维护者的人工轮次**。
+# ⇒ 任何命令的 `writes:` 里出现它即**越界**。
+# ⚠️ **输出格式必须与 `grep -rn` 逐字节一致** —— `path:line:text`。FR-008 的 parity 契约比的是
+# stdout 的每一个字节，所以这里不能只写行内容；`_Pair` 事后把两棵树各自的根替换成 <ROOT>。
+$c7Audit = @()
+foreach ($f in (Get-ChildItem -Path (Join-Path $Base "commands") -Filter *.md -File -ErrorAction SilentlyContinue | Sort-Object Name)) {
+    $ln_no = 0
+    foreach ($ln in (Get-Lines $f.FullName)) {
+        $ln_no++
+        if ($ln -match 'artifact: specs/audit') { $c7Audit += ("$($f.FullName):$ln_no`:$ln") }
+    }
+}
+if ($c7Audit.Count -gt 0) {
+    foreach ($ln in $c7Audit) {
+        if ([string]::IsNullOrEmpty($ln)) { continue }
+        Write-Hit "SHAPE-2 audit-boundary: a command declares an artifact no command owns — $ln"
+    }
+} else {
+    Write-Ok "SHAPE-2 audit-boundary: no command declares specs/audit/"
+}
+
+# =======================================================================================
+# Verdict
+# =======================================================================================
+Write-Output ""
+Write-Output "shapes: $shapesChecked checked · $($script:Oks) clean · $($script:Hits) hit · $($script:Skips) not executable"
+if ($script:Hits -eq 0) {
+    Write-Output "✓ shapes: no registered shape has a live instance"
+    Write-Output "  ⚠️ coverage: this is 'no known instance' for the registered subjects only."
+    Write-Output "     It is NOT a statement that the tool is free of defects. $($script:Skips) subject group(s)"
+    Write-Output "     could not be exercised at all, and each such group is unproven, not clean."
+    exit 0
+} else {
+    Write-Output "✗ shapes: $($script:Hits) hit(s) — each one is a live instance of its shape"
+    Write-Output "  ⚠️ FR-048: 消除以重跑检出成立，不以「已修」的声明。"
+    exit 1
+}