docs: refresh governed review lock

2026-06-14 11:58:00 +08:00
parent ab58c97bce
commit 22c7145db7
5 changed files with 100 additions and 95 deletions
@@ -3,7 +3,7 @@
  "ok": true,
  "generated_at": "2026-06-14",
  "skill_dir": ".",
-  "commit": "fbaa3c821296303ee9b1fc892de970f2a74b475a",
+  "commit": "ab58c97bce07ef00acefd499a6d4499041ebfa91",
  "git_status": {
    "available": true,
    "dirty": false,
@@ -17,9 +17,9 @@
    "methodology_complete": true,
    "required_artifact_count": 24,
    "missing_artifact_count": 0,
-    "evidence_bundle_sha256": "9fb86d4bcc0aaf58bc96c9cb30c1abe665abe53c6bc482b4f140fcebd95d79c1",
-    "source_contract_sha256": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677",
-    "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc",
+    "evidence_bundle_sha256": "a358b81f0d5418371d422da439958fa541a864e928a0be915be95c74bc55b48f",
+    "source_contract_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7",
+    "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68",
    "output_case_count": 5,
    "failure_disclosure_count": 3,
    "command_count": 21,
@@ -50,7 +50,7 @@
  },
  "release_lock": {
    "ready": true,
-    "commit": "fbaa3c821296303ee9b1fc892de970f2a74b475a",
+    "commit": "ab58c97bce07ef00acefd499a6d4499041ebfa91",
    "status_scope": "generation-time status before this report is written",
    "reason": "clean generation-time HEAD"
  },
@@ -60,7 +60,7 @@
    "existing_count": 24,
    "missing_count": 0,
    "missing_paths": [],
-    "sha256": "9fb86d4bcc0aaf58bc96c9cb30c1abe665abe53c6bc482b4f140fcebd95d79c1"
+    "sha256": "a358b81f0d5418371d422da439958fa541a864e928a0be915be95c74bc55b48f"
  },
  "methodology": {
    "path": "reports/benchmark_methodology.md",
@@ -133,8 +133,8 @@
      "label": "output_execution",
      "path": "reports/output_execution_runs.json",
      "exists": true,
-      "bytes": 7964,
-      "sha256": "c90136a4365e2db855de37883bff7266b581bb132717770e041f05e4b01c282e"
+      "bytes": 7966,
+      "sha256": "815dad0e8e7817fdb0092375f14b0e5f96a0645c52d762434e433e52123920b6"
    },
    {
      "label": "blind_review",
@@ -169,7 +169,7 @@
      "path": "reports/security_trust_report.json",
      "exists": true,
      "bytes": 98830,
-      "sha256": "f66d8161676b4738b579ceb922e85acbe6b15d3f34602d26951692d142f8a80f"
+      "sha256": "dc06cc6e7c80726ba1158c214c660ef5e07d933d9783124ee114bfd3e2aaab49"
    },
    {
      "label": "python_compatibility",
@@ -183,14 +183,14 @@
      "path": "reports/registry_audit.json",
      "exists": true,
      "bytes": 3183,
-      "sha256": "3aa3cded25b31f16deb0fdf5266e1375c5facf57081d4d58e5f88b9de01e5cbc"
+      "sha256": "9a288c41f8af0f5490c26662513695e8d8752600cbf2e7262471b8eec9932f92"
    },
    {
      "label": "package_verification",
      "path": "reports/package_verification.json",
      "exists": true,
      "bytes": 19325,
-      "sha256": "ccbb1be773ed9945dadbe841f9a5a451ef6bfc872c3ef9e46b662a7e67637fd6"
+      "sha256": "7ad16e1c57b7cb54832143d8d7f469c3c53771f053b27adbeaef9013e687c21a"
    },
    {
      "label": "install_simulation",
@@ -1,9 +1,9 @@
 # Benchmark Reproducibility

 Generated at: `2026-06-14`
-Commit: `fbaa3c821296303ee9b1fc892de970f2a74b475a`
+Commit: `ab58c97bce07ef00acefd499a6d4499041ebfa91`
 Working tree dirty at generation: `false`
-Evidence bundle SHA256: `9fb86d4bcc0aaf58bc96c9cb30c1abe665abe53c6bc482b4f140fcebd95d79c1`
+Evidence bundle SHA256: `a358b81f0d5418371d422da439958fa541a864e928a0be915be95c74bc55b48f`

 ## Summary

@@ -12,8 +12,8 @@ Evidence bundle SHA256: `9fb86d4bcc0aaf58bc96c9cb30c1abe665abe53c6bc482b4f140fce
 - methodology complete: `true`
 - required artifacts: `24`
 - missing artifacts: `0`
- source contract sha256: `8b89cae0e2ea`
- archive sha256: `1bb01abccae0`
+- source contract sha256: `0de594f90374`
+- archive sha256: `9761608424bb`
 - output cases: `5`
 - disclosed failure cases: `3`
 - reproduction commands: `21`
@@ -48,7 +48,7 @@ This report proves local benchmark reproducibility only. It keeps external provi

 - algorithm: `sha256(path,label,exists,artifact_sha256)`
 - artifacts: `24` / `24`
- sha256: `9fb86d4bcc0aaf58bc96c9cb30c1abe665abe53c6bc482b4f140fcebd95d79c1`
+- sha256: `a358b81f0d5418371d422da439958fa541a864e928a0be915be95c74bc55b48f`

 ## Methodology Sections

@@ -70,15 +70,15 @@ This report proves local benchmark reproducibility only. It keeps external provi
 | output_cases | `evals/output/cases.jsonl` | present | `a6ae96857116` |
 | output_schema | `evals/output/schema.json` | present | `8ee340c95064` |
 | output_scorecard | `reports/output_quality_scorecard.json` | present | `0806258a8e08` |
-| output_execution | `reports/output_execution_runs.json` | present | `c90136a4365e` |
+| output_execution | `reports/output_execution_runs.json` | present | `815dad0e8e78` |
 | blind_review | `reports/output_blind_review_pack.json` | present | `bbe2db8ec277` |
 | review_adjudication | `reports/output_review_adjudication.json` | present | `240485a721af` |
 | trigger_scorecard | `reports/route_scorecard.json` | present | `c164e83e36d0` |
 | runtime_conformance | `reports/conformance_matrix.json` | present | `8251329e663d` |
-| trust_report | `reports/security_trust_report.json` | present | `f66d8161676b` |
+| trust_report | `reports/security_trust_report.json` | present | `dc06cc6e7c80` |
 | python_compatibility | `reports/python_compatibility.json` | present | `ae16e17266e4` |
-| registry_audit | `reports/registry_audit.json` | present | `3aa3cded25b3` |
-| package_verification | `reports/package_verification.json` | present | `ccbb1be773ed` |
+| registry_audit | `reports/registry_audit.json` | present | `9a288c41f8af` |
+| package_verification | `reports/package_verification.json` | present | `7ad16e1c57b7` |
 | install_simulation | `reports/install_simulation.json` | present | `8f987e805c92` |
 | skill_os2_audit | `reports/skill_os2_audit.json` | present | `6bb2dcb0e1e5` |
 | world_class_evidence_plan | `reports/world_class_evidence_plan.json` | present | `a9bd392cd45f` |
@@ -510,7 +510,7 @@

    <section>
      <h2>审查闸门</h2>
-      <div class="gates"><article class='gate pass'><div><span>通过</span><h3>意图画布</h3></div><p>intent confidence 100/100; Intent is clear enough to package the first routeable version.</p><footer>reports/intent-confidence.json <a href='intent-confidence.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>触发实验</h3></div><p>13 trigger cases; 0 misroutes; 0 ambiguous</p><footer>reports/route_scorecard.json <a href='route_scorecard.md'>证据</a></footer></article><article class='gate warn'><div><span>关注</span><h3>输出实验</h3></div><p>5/5 cases; with-skill 100.0; baseline 0.0; file-backed 1; near-neighbor 1; blind A/B 5; exec 10; command 10; model 0; recorded 0; reviewed 0/5; review pending 5</p><footer>reports/output_quality_scorecard.json <a href='output_quality_scorecard.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>上下文</h3></div><p>initial load 944/1000; deferred 387788/120000; top deferred scripts 340305; resource governance governed; quality density 137.7</p><footer>reports/context_budget.json <a href='context_budget.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>运行矩阵</h3></div><p>5 / 5 targets pass</p><footer>reports/conformance_matrix.json <a href='conformance_matrix.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>信任报告</h3></div><p>0 secrets; 97 scripts; 3 network-capable scripts; 0 help smoke failures</p><footer>reports/security_trust_report.json <a href='security_trust_report.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>Python 兼容</h3></div><p>Python 3.11; 159 files; 0 compatibility issues; 0 syntax; 0 f-string 3.11 hazards</p><footer>reports/python_compatibility.json <a href='python_compatibility.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>架构维护</h3></div><p>156 Python files; 0 hotspots; 0 blockers; largest 888 lines; 34 CLI handlers</p><footer>reports/architecture_maintainability.json <a href='architecture_maintainability.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>权限批准</h3></div><p>3/3 permissions approved; gaps 0; required file_write, network, subprocess</p><footer>reports/security_trust_report.json + security/permission_policy.json <a href='../security/permission_policy.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>权限探针</h3></div><p>4/4 targets probed; native 0; metadata fallback 4; installer 4; residual risks 4</p><footer>reports/runtime_permission_probes.json <a href='runtime_permission_probes.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>组合治理</h3></div><p>12 skills, 1 actionable; 0 actionable route collisions; 0 actionable owner gaps; 0 actionable stale; 0 actionable drift; 24 scoped non-actionable issues</p><footer>reports/skill_atlas.json <a href='skill_atlas.html'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>运营回路</h3></div><p>1 metadata events; adoption 0; missed 0; bad-output 0; risk low</p><footer>reports/adoption_drift_report.json <a href='adoption_drift_report.md'>证据</a></footer></article><article class='gate warn'><div><span>关注</span><h3>人工批准</h3></div><p>0 active waivers; 1 warning gates still need reviewer decision</p><footer>reports/review_waivers.json <a href='review_waivers.md'>证据</a></footer></article><article class='gate warn'><div><span>关注</span><h3>世界证据</h3></div><p>4 pending world-class evidence entries; 1 human pending; 3 external pending; overclaim guard true</p><footer>reports/world_class_evidence_ledger.json <a href='world_class_evidence_ledger.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>注册审计</h3></div><p>yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures</p><footer>reports/registry_audit.json + reports/install_simulation.json <a href='registry_audit.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>发布路线</h3></div><p>0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended</p><footer>reports/promotion_decisions.json + reports/upgrade_check.json + docs/migration-v2.md <a href='promotion_decisions.md'>证据</a></footer></article></div>
+      <div class="gates"><article class='gate pass'><div><span>通过</span><h3>意图画布</h3></div><p>intent confidence 100/100; Intent is clear enough to package the first routeable version.</p><footer>reports/intent-confidence.json <a href='intent-confidence.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>触发实验</h3></div><p>13 trigger cases; 0 misroutes; 0 ambiguous</p><footer>reports/route_scorecard.json <a href='route_scorecard.md'>证据</a></footer></article><article class='gate warn'><div><span>关注</span><h3>输出实验</h3></div><p>5/5 cases; with-skill 100.0; baseline 0.0; file-backed 1; near-neighbor 1; blind A/B 5; exec 10; command 10; model 0; recorded 0; reviewed 0/5; review pending 5</p><footer>reports/output_quality_scorecard.json <a href='output_quality_scorecard.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>上下文</h3></div><p>initial load 960/1000; deferred 388041/120000; top deferred scripts 340305; resource governance governed; quality density 135.4</p><footer>reports/context_budget.json <a href='context_budget.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>运行矩阵</h3></div><p>5 / 5 targets pass</p><footer>reports/conformance_matrix.json <a href='conformance_matrix.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>信任报告</h3></div><p>0 secrets; 97 scripts; 3 network-capable scripts; 0 help smoke failures</p><footer>reports/security_trust_report.json <a href='security_trust_report.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>Python 兼容</h3></div><p>Python 3.11; 159 files; 0 compatibility issues; 0 syntax; 0 f-string 3.11 hazards</p><footer>reports/python_compatibility.json <a href='python_compatibility.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>架构维护</h3></div><p>156 Python files; 0 hotspots; 0 blockers; largest 888 lines; 34 CLI handlers</p><footer>reports/architecture_maintainability.json <a href='architecture_maintainability.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>权限批准</h3></div><p>3/3 permissions approved; gaps 0; required file_write, network, subprocess</p><footer>reports/security_trust_report.json + security/permission_policy.json <a href='../security/permission_policy.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>权限探针</h3></div><p>4/4 targets probed; native 0; metadata fallback 4; installer 4; residual risks 4</p><footer>reports/runtime_permission_probes.json <a href='runtime_permission_probes.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>组合治理</h3></div><p>12 skills, 1 actionable; 0 actionable route collisions; 0 actionable owner gaps; 0 actionable stale; 0 actionable drift; 24 scoped non-actionable issues</p><footer>reports/skill_atlas.json <a href='skill_atlas.html'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>运营回路</h3></div><p>1 metadata events; adoption 0; missed 0; bad-output 0; risk low</p><footer>reports/adoption_drift_report.json <a href='adoption_drift_report.md'>证据</a></footer></article><article class='gate warn'><div><span>关注</span><h3>人工批准</h3></div><p>0 active waivers; 1 warning gates still need reviewer decision</p><footer>reports/review_waivers.json <a href='review_waivers.md'>证据</a></footer></article><article class='gate warn'><div><span>关注</span><h3>世界证据</h3></div><p>4 pending world-class evidence entries; 1 human pending; 3 external pending; overclaim guard true</p><footer>reports/world_class_evidence_ledger.json <a href='world_class_evidence_ledger.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>注册审计</h3></div><p>yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures</p><footer>reports/registry_audit.json + reports/install_simulation.json <a href='registry_audit.md'>证据</a></footer></article><article class='gate pass'><div><span>通过</span><h3>发布路线</h3></div><p>0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended</p><footer>reports/promotion_decisions.json + reports/upgrade_check.json + docs/migration-v2.md <a href='promotion_decisions.md'>证据</a></footer></article></div>
    </section>

    <div class="twocol">
@@ -572,12 +572,12 @@
    </section>

    <section class="twocol">
-      <div class="panel"><h2>上下文</h2><p>initial load 944/1000; deferred 387788/120000; top deferred scripts 340305; resource governance governed; quality density 137.7</p></div>
+      <div class="panel"><h2>上下文</h2><p>initial load 960/1000; deferred 388041/120000; top deferred scripts 340305; resource governance governed; quality density 135.4</p></div>
      <div class="panel"><h2>编译证据</h2><p>Review reports/compiled_targets.md before packaging to inspect target adapter modes, generated files, preserved semantics, warnings, and unsupported features.</p></div>
    </section>

    <section id="trust" class="twocol">
-      <div class="panel"><h2>信任报告</h2><dl class='kv-grid'><div><dt>Secret</dt><dd>0</dd></div><div><dt>脚本数</dt><dd>97</dd></div><div><dt>网络脚本</dt><dd>3</dd></div><div><dt>Help 失败</dt><dd>0</dd></div><div><dt>包体哈希</dt><dd><code>8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677</code></dd></div></dl></div>
+      <div class="panel"><h2>信任报告</h2><dl class='kv-grid'><div><dt>Secret</dt><dd>0</dd></div><div><dt>脚本数</dt><dd>97</dd></div><div><dt>网络脚本</dt><dd>3</dd></div><div><dt>Help 失败</dt><dd>0</dd></div><div><dt>包体哈希</dt><dd><code>0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7</code></dd></div></dl></div>
      <div class="panel"><h2>安全边界</h2><p>高风险 secret、远程 inline execution、缺失依赖策略或无法解释的脚本接口应阻断 governed release。</p></div>
    </section>

@@ -656,12 +656,12 @@

    <section id="registry" class="twocol">
      <div class="panel"><h2>注册审计</h2><p>yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures</p></div>
-      <div class="panel"><h2>包体元数据</h2><dl class='kv-grid'><div><dt>名称</dt><dd>yao-meta-skill</dd></div><div><dt>版本</dt><dd>1.1.0</dd></div><div><dt>Maturity</dt><dd>governed</dd></div><div><dt>Owner</dt><dd>Yao Team</dd></div><div><dt>License</dt><dd>MIT</dd></div><div><dt>信任级别</dt><dd>local</dd></div><div><dt>目标平台</dt><dd>openai, claude, generic, agent-skills-compatible, vscode</dd></div><div><dt>兼容通过</dt><dd>6/6</dd></div><div><dt>归档哈希</dt><dd><code>1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc</code></dd></div></dl></div>
+      <div class="panel"><h2>包体元数据</h2><dl class='kv-grid'><div><dt>名称</dt><dd>yao-meta-skill</dd></div><div><dt>版本</dt><dd>1.1.0</dd></div><div><dt>Maturity</dt><dd>governed</dd></div><div><dt>Owner</dt><dd>Yao Team</dd></div><div><dt>License</dt><dd>MIT</dd></div><div><dt>信任级别</dt><dd>local</dd></div><div><dt>目标平台</dt><dd>openai, claude, generic, agent-skills-compatible, vscode</dd></div><div><dt>兼容通过</dt><dd>6/6</dd></div><div><dt>归档哈希</dt><dd><code>9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68</code></dd></div></dl></div>
    </section>

    <section id="release" class="twocol">
      <div class="panel"><h2>发布路线</h2><p>0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended</p></div>
-      <div class="panel"><h2>包体验证</h2><dl class='kv-grid'><div><dt>目标数</dt><dd>4</dd></div><div><dt>Adapter</dt><dd>4</dd></div><div><dt>归档存在</dt><dd>是</dd></div><div><dt>Zip 条目</dt><dd>576</dd></div><div><dt>失败数</dt><dd>0</dd></div><div><dt>警告数</dt><dd>0</dd></div><div><dt>归档哈希</dt><dd><code>1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc</code></dd></div></dl></div>
+      <div class="panel"><h2>包体验证</h2><dl class='kv-grid'><div><dt>目标数</dt><dd>4</dd></div><div><dt>Adapter</dt><dd>4</dd></div><div><dt>归档存在</dt><dd>是</dd></div><div><dt>Zip 条目</dt><dd>576</dd></div><div><dt>失败数</dt><dd>0</dd></div><div><dt>警告数</dt><dd>0</dd></div><div><dt>归档哈希</dt><dd><code>9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68</code></dd></div></dl></div>
    </section>

    <section class="twocol">
@@ -43,7 +43,7 @@
      "key": "context-budget",
      "label": "上下文",
      "status": "pass",
-      "detail": "initial load 944/1000; deferred 387788/120000; top deferred scripts 340305; resource governance governed; quality density 137.7",
+      "detail": "initial load 960/1000; deferred 388041/120000; top deferred scripts 340305; resource governance governed; quality density 135.4",
      "evidence": "reports/context_budget.json",
      "link": "context_budget.md"
    },
@@ -493,7 +493,7 @@
          "label": "可维护性",
          "score": 100,
          "reasons": [
-            "SKILL.md 约 350 个词/字。",
+            "SKILL.md 约 356 个词/字。",
            "入口文件保持克制，可维护性较好。",
            "references/ 已承载扩展指导。",
            "scripts/ 已承载确定性逻辑。",
@@ -514,7 +514,7 @@
          "label": "上下文成本",
          "score": 42,
          "reasons": [
-            "入口约 350 个词/字，references 约 15431 个词/字。",
+            "入口约 356 个词/字，references 约 15566 个词/字。",
            "分数越高代表上下文成本越低。",
            "上下文成本偏高，建议压缩入口或拆分 references。"
          ]
@@ -618,7 +618,7 @@
          "已生成 Output Review Adjudication，可记录盲评决策、一致率和待评审项。"
        ],
        "gaps": [
-          "上下文成本需要补强：入口约 350 个词/字，references 约 15431 个词/字。"
+          "上下文成本需要补强：入口约 356 个词/字，references 约 15566 个词/字。"
        ],
        "recommendations": [
          "先改触发边界，再扩展工作流。",
@@ -683,7 +683,7 @@
            "name": "包体膨胀风险",
            "impact": 2,
            "probability": 1,
-            "signal": "SKILL.md 约 350 个词/字。",
+            "signal": "SKILL.md 约 356 个词/字。",
            "response": "先补证据和边界，再增加包体复杂度。"
          },
          {
@@ -1336,9 +1336,9 @@
          "methodology_complete": true,
          "required_artifact_count": 24,
          "missing_artifact_count": 0,
-          "evidence_bundle_sha256": "d1e46322a670ebd2d3977fd716c13b3d00bc37816e83343fc21978eba96d40bb",
-          "source_contract_sha256": "e38d34ebe54c377f47f6010c06716f8f972406cf1019a27e6ebc057371dd260f",
-          "archive_sha256": "0e4ba92cd88c099965383daf5c3d6319b917d7c83d5ef29917f1cd932c1bd6f8",
+          "evidence_bundle_sha256": "a358b81f0d5418371d422da439958fa541a864e928a0be915be95c74bc55b48f",
+          "source_contract_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7",
+          "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68",
          "output_case_count": 5,
          "failure_disclosure_count": 3,
          "command_count": 21,
@@ -1357,7 +1357,7 @@
          "working_tree_dirty": false,
          "changed_file_count": 0
        },
-        "commit": "78f94e47fd7ab999fdfc6d18ffb9917cf8848dba",
+        "commit": "ab58c97bce07ef00acefd499a6d4499041ebfa91",
        "missing_artifacts": [],
        "limitations": [
          "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.",
@@ -1462,7 +1462,7 @@
        "interactive_script_count": 0,
        "package_hash_scope": "source-contract-without-generated-reports",
        "package_hash_file_count": 181,
-        "package_sha256": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677"
+        "package_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7"
      },
      "skill_atlas": {
        "skill_count": 12,
@@ -1500,8 +1500,8 @@
          "trust_level": "local",
          "license": "MIT",
          "checksums": {
-            "package_sha256": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677",
-            "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc"
+            "package_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7",
+            "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68"
          },
          "compatibility": {
            "openai": "pass",
@@ -1532,7 +1532,7 @@
          },
          "distribution": {
            "archive_verified": true,
-            "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc",
+            "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68",
            "package_verification": "reports/package_verification.json",
            "install_simulated": true,
            "install_simulation": "reports/install_simulation.json"
@@ -1548,7 +1548,7 @@
          "target_count": 4,
          "adapter_count": 4,
          "archive_present": true,
-          "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc",
+          "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68",
          "archive_entry_count": 576,
          "failure_count": 0,
          "warning_count": 0
@@ -1627,12 +1627,12 @@
            {
              "field": "archive_sha256",
              "from": "",
-              "to": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc"
+              "to": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68"
            },
            {
              "field": "package_sha256",
              "from": "0000000000000000000000000000000000000000000000000000000000000000",
-              "to": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677"
+              "to": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7"
            }
          ]
        },
@@ -3811,7 +3811,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 30.68,
+          "duration_ms": 33.35,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -3839,7 +3839,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 28.53,
+          "duration_ms": 32.64,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -3862,7 +3862,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 29.59,
+          "duration_ms": 33.25,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -3890,7 +3890,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 31.84,
+          "duration_ms": 33.84,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -3913,7 +3913,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 30.95,
+          "duration_ms": 33.23,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -3941,7 +3941,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 27.6,
+          "duration_ms": 33.36,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -3964,7 +3964,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 26.76,
+          "duration_ms": 38.65,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -3991,7 +3991,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 26.87,
+          "duration_ms": 34.63,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4014,7 +4014,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 26.9,
+          "duration_ms": 32.6,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4043,7 +4043,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 27.3,
+          "duration_ms": 32.85,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4764,7 +4764,7 @@
      "ok": true,
      "generated_at": "2026-06-14",
      "skill_dir": ".",
-      "commit": "fbaa3c821296303ee9b1fc892de970f2a74b475a",
+      "commit": "ab58c97bce07ef00acefd499a6d4499041ebfa91",
      "git_status": {
        "available": true,
        "dirty": false,
@@ -4778,9 +4778,9 @@
        "methodology_complete": true,
        "required_artifact_count": 24,
        "missing_artifact_count": 0,
-        "evidence_bundle_sha256": "9fb86d4bcc0aaf58bc96c9cb30c1abe665abe53c6bc482b4f140fcebd95d79c1",
-        "source_contract_sha256": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677",
-        "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc",
+        "evidence_bundle_sha256": "a358b81f0d5418371d422da439958fa541a864e928a0be915be95c74bc55b48f",
+        "source_contract_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7",
+        "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68",
        "output_case_count": 5,
        "failure_disclosure_count": 3,
        "command_count": 21,
@@ -4811,7 +4811,7 @@
      },
      "release_lock": {
        "ready": true,
-        "commit": "fbaa3c821296303ee9b1fc892de970f2a74b475a",
+        "commit": "ab58c97bce07ef00acefd499a6d4499041ebfa91",
        "status_scope": "generation-time status before this report is written",
        "reason": "clean generation-time HEAD"
      },
@@ -4821,7 +4821,7 @@
        "existing_count": 24,
        "missing_count": 0,
        "missing_paths": [],
-        "sha256": "9fb86d4bcc0aaf58bc96c9cb30c1abe665abe53c6bc482b4f140fcebd95d79c1"
+        "sha256": "a358b81f0d5418371d422da439958fa541a864e928a0be915be95c74bc55b48f"
      },
      "methodology": {
        "path": "reports/benchmark_methodology.md",
@@ -4894,8 +4894,8 @@
          "label": "output_execution",
          "path": "reports/output_execution_runs.json",
          "exists": true,
-          "bytes": 7964,
-          "sha256": "c90136a4365e2db855de37883bff7266b581bb132717770e041f05e4b01c282e"
+          "bytes": 7966,
+          "sha256": "815dad0e8e7817fdb0092375f14b0e5f96a0645c52d762434e433e52123920b6"
        },
        {
          "label": "blind_review",
@@ -4930,7 +4930,7 @@
          "path": "reports/security_trust_report.json",
          "exists": true,
          "bytes": 98830,
-          "sha256": "f66d8161676b4738b579ceb922e85acbe6b15d3f34602d26951692d142f8a80f"
+          "sha256": "dc06cc6e7c80726ba1158c214c660ef5e07d933d9783124ee114bfd3e2aaab49"
        },
        {
          "label": "python_compatibility",
@@ -4944,14 +4944,14 @@
          "path": "reports/registry_audit.json",
          "exists": true,
          "bytes": 3183,
-          "sha256": "3aa3cded25b31f16deb0fdf5266e1375c5facf57081d4d58e5f88b9de01e5cbc"
+          "sha256": "9a288c41f8af0f5490c26662513695e8d8752600cbf2e7262471b8eec9932f92"
        },
        {
          "label": "package_verification",
          "path": "reports/package_verification.json",
          "exists": true,
          "bytes": 19325,
-          "sha256": "ccbb1be773ed9945dadbe841f9a5a451ef6bfc872c3ef9e46b662a7e67637fd6"
+          "sha256": "7ad16e1c57b7cb54832143d8d7f469c3c53771f053b27adbeaef9013e687c21a"
        },
        {
          "label": "install_simulation",
@@ -5858,6 +5858,7 @@
                "`Scaffold`: exploratory or personal.",
                "`Production`: team reuse.",
                "`Library`: shared infrastructure.",
+                "`Governed`: high-trust, policy-sensitive, or release-critical.",
                "Ask one focused clarification when the real job, output, or exclusion boundary is unclear.",
                "Escalate visible tradeoffs when benchmark patterns conflict with local privacy, naming, or governance constraints.",
                "Do not silently broaden the skill into adjacent jobs just because the examples are nearby."
@@ -5980,6 +5981,7 @@
                "scripts/review_studio_gates.py",
                "scripts/review_studio_layout.py",
                "scripts/review_studio_output_review.py",
+                "scripts/review_studio_waivers.py",
                "scripts/review_studio_world_class.py",
                "scripts/review_viewer_data.py",
                "scripts/run_conformance_suite.py",
@@ -5989,8 +5991,7 @@
                "scripts/run_output_execution.py",
                "scripts/simulate_install.py",
                "scripts/skill_report_charts.py",
-                "scripts/skill_report_layout.py",
-                "scripts/skill_report_metrics.py"
+                "scripts/skill_report_layout.py"
              ],
              "assets": [
                "templates/basic_skill.md.j2",
@@ -6707,6 +6708,7 @@
                "`Scaffold`: exploratory or personal.",
                "`Production`: team reuse.",
                "`Library`: shared infrastructure.",
+                "`Governed`: high-trust, policy-sensitive, or release-critical.",
                "Ask one focused clarification when the real job, output, or exclusion boundary is unclear.",
                "Escalate visible tradeoffs when benchmark patterns conflict with local privacy, naming, or governance constraints.",
                "Do not silently broaden the skill into adjacent jobs just because the examples are nearby."
@@ -6829,6 +6831,7 @@
                "scripts/review_studio_gates.py",
                "scripts/review_studio_layout.py",
                "scripts/review_studio_output_review.py",
+                "scripts/review_studio_waivers.py",
                "scripts/review_studio_world_class.py",
                "scripts/review_viewer_data.py",
                "scripts/run_conformance_suite.py",
@@ -6838,8 +6841,7 @@
                "scripts/run_output_execution.py",
                "scripts/simulate_install.py",
                "scripts/skill_report_charts.py",
-                "scripts/skill_report_layout.py",
-                "scripts/skill_report_metrics.py"
+                "scripts/skill_report_layout.py"
              ],
              "assets": [
                "templates/basic_skill.md.j2",
@@ -7556,6 +7558,7 @@
                "`Scaffold`: exploratory or personal.",
                "`Production`: team reuse.",
                "`Library`: shared infrastructure.",
+                "`Governed`: high-trust, policy-sensitive, or release-critical.",
                "Ask one focused clarification when the real job, output, or exclusion boundary is unclear.",
                "Escalate visible tradeoffs when benchmark patterns conflict with local privacy, naming, or governance constraints.",
                "Do not silently broaden the skill into adjacent jobs just because the examples are nearby."
@@ -7678,6 +7681,7 @@
                "scripts/review_studio_gates.py",
                "scripts/review_studio_layout.py",
                "scripts/review_studio_output_review.py",
+                "scripts/review_studio_waivers.py",
                "scripts/review_studio_world_class.py",
                "scripts/review_viewer_data.py",
                "scripts/run_conformance_suite.py",
@@ -7687,8 +7691,7 @@
                "scripts/run_output_execution.py",
                "scripts/simulate_install.py",
                "scripts/skill_report_charts.py",
-                "scripts/skill_report_layout.py",
-                "scripts/skill_report_metrics.py"
+                "scripts/skill_report_layout.py"
              ],
              "assets": [
                "templates/basic_skill.md.j2",
@@ -8389,6 +8392,7 @@
                "`Scaffold`: exploratory or personal.",
                "`Production`: team reuse.",
                "`Library`: shared infrastructure.",
+                "`Governed`: high-trust, policy-sensitive, or release-critical.",
                "Ask one focused clarification when the real job, output, or exclusion boundary is unclear.",
                "Escalate visible tradeoffs when benchmark patterns conflict with local privacy, naming, or governance constraints.",
                "Do not silently broaden the skill into adjacent jobs just because the examples are nearby."
@@ -8511,6 +8515,7 @@
                "scripts/review_studio_gates.py",
                "scripts/review_studio_layout.py",
                "scripts/review_studio_output_review.py",
+                "scripts/review_studio_waivers.py",
                "scripts/review_studio_world_class.py",
                "scripts/review_viewer_data.py",
                "scripts/run_conformance_suite.py",
@@ -8520,8 +8525,7 @@
                "scripts/run_output_execution.py",
                "scripts/simulate_install.py",
                "scripts/skill_report_charts.py",
-                "scripts/skill_report_layout.py",
-                "scripts/skill_report_metrics.py"
+                "scripts/skill_report_layout.py"
              ],
              "assets": [
                "templates/basic_skill.md.j2",
@@ -9222,6 +9226,7 @@
                "`Scaffold`: exploratory or personal.",
                "`Production`: team reuse.",
                "`Library`: shared infrastructure.",
+                "`Governed`: high-trust, policy-sensitive, or release-critical.",
                "Ask one focused clarification when the real job, output, or exclusion boundary is unclear.",
                "Escalate visible tradeoffs when benchmark patterns conflict with local privacy, naming, or governance constraints.",
                "Do not silently broaden the skill into adjacent jobs just because the examples are nearby."
@@ -9344,6 +9349,7 @@
                "scripts/review_studio_gates.py",
                "scripts/review_studio_layout.py",
                "scripts/review_studio_output_review.py",
+                "scripts/review_studio_waivers.py",
                "scripts/review_studio_world_class.py",
                "scripts/review_viewer_data.py",
                "scripts/run_conformance_suite.py",
@@ -9353,8 +9359,7 @@
                "scripts/run_output_execution.py",
                "scripts/simulate_install.py",
                "scripts/skill_report_charts.py",
-                "scripts/skill_report_layout.py",
-                "scripts/skill_report_metrics.py"
+                "scripts/skill_report_layout.py"
              ],
              "assets": [
                "templates/basic_skill.md.j2",
@@ -10648,7 +10653,7 @@
        "interactive_script_count": 0,
        "package_hash_scope": "source-contract-without-generated-reports",
        "package_hash_file_count": 181,
-        "package_sha256": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677"
+        "package_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7"
      },
      "failures": [],
      "warnings": [],
@@ -14167,7 +14172,7 @@
        },
        {
          "path": "tests/verify_review_studio.py",
-          "lines": 674,
+          "lines": 677,
          "kind": "test",
          "severity": "pass",
          "recommendation": "Break broad integration assertions into focused verifier helpers when the next behavior change lands."
@@ -14201,11 +14206,11 @@
      "stats": {
        "context_budget_tier": "production",
        "context_budget_limit": 1000,
-        "skill_body_tokens": 751,
-        "other_text_tokens": 1202458,
-        "estimated_initial_load_tokens": 944,
-        "estimated_total_text_tokens": 1203209,
-        "deferred_resource_tokens": 387788,
+        "skill_body_tokens": 767,
+        "other_text_tokens": 1203081,
+        "estimated_initial_load_tokens": 960,
+        "estimated_total_text_tokens": 1203848,
+        "deferred_resource_tokens": 388041,
        "deferred_resource_warn_threshold": 120000,
        "deferred_resource_dirs": [
          {
@@ -14215,7 +14220,7 @@
          },
          {
            "path": "references",
-            "estimated_tokens": 25648,
+            "estimated_tokens": 25901,
            "file_count": 32
          },
          {
@@ -14260,7 +14265,7 @@
        "relevant_file_count": 508,
        "unused_resource_dirs": [],
        "quality_signal_points": 130,
-        "quality_density": 137.7
+        "quality_density": 135.4
      }
    },
    "promotion": {
@@ -17739,8 +17744,8 @@
        "trust_level": "local",
        "license": "MIT",
        "checksums": {
-          "package_sha256": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677",
-          "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc"
+          "package_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7",
+          "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68"
        },
        "compatibility": {
          "openai": "pass",
@@ -17771,7 +17776,7 @@
        },
        "distribution": {
          "archive_verified": true,
-          "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc",
+          "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68",
          "package_verification": "reports/package_verification.json",
          "install_simulated": true,
          "install_simulation": "reports/install_simulation.json"
@@ -17796,7 +17801,7 @@
              "vscode"
            ],
            "package_metadata": "registry/packages/yao-meta-skill.json",
-            "package_sha256": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677"
+            "package_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7"
          }
        ]
      },
@@ -17819,7 +17824,7 @@
        "target_count": 4,
        "adapter_count": 4,
        "archive_present": true,
-        "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc",
+        "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68",
        "archive_entry_count": 576,
        "failure_count": 0,
        "warning_count": 0
@@ -18827,12 +18832,12 @@
          {
            "field": "archive_sha256",
            "from": "",
-            "to": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc"
+            "to": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68"
          },
          {
            "field": "package_sha256",
            "from": "0000000000000000000000000000000000000000000000000000000000000000",
-            "to": "8b89cae0e2eaf8456b9e97940706576db7ecaf0f46e5de8153c45486f3ab1677"
+            "to": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7"
          }
        ]
      },
@@ -918,13 +918,13 @@
    "ok": true,
    "summary": {
      "reproducibility_ready": true,
-      "release_lock_ready": false,
+      "release_lock_ready": true,
      "methodology_complete": true,
      "required_artifact_count": 24,
      "missing_artifact_count": 0,
-      "evidence_bundle_sha256": "f54d5131bea27a3c055b8a2d7fd6d647f69148b293518eff57592eb35d5f6983",
+      "evidence_bundle_sha256": "a358b81f0d5418371d422da439958fa541a864e928a0be915be95c74bc55b48f",
      "source_contract_sha256": "0de594f90374f72387eea382b32ad0dd220d0f1d6f809b8fdd39859a1f35d5b7",
-      "archive_sha256": "1bb01abccae0984f63251cb73a7782163bcf4b0afb260c73230dcb35da68d0dc",
+      "archive_sha256": "9761608424bbab003651eb643921a13f86b51220de705a3255d7c201e267dc68",
      "output_case_count": 5,
      "failure_disclosure_count": 3,
      "command_count": 21,
@@ -939,11 +939,11 @@
      "world_class_task_count": 4,
      "world_class_ledger_pending_count": 4,
      "public_claim_ready": false,
-      "public_claim_blocker_count": 4,
-      "working_tree_dirty": true,
-      "changed_file_count": 33
+      "public_claim_blocker_count": 3,
+      "working_tree_dirty": false,
+      "changed_file_count": 0
    },
-    "commit": "c2d15206e25551022b02b86f36e7e6f0158888f2",
+    "commit": "ab58c97bce07ef00acefd499a6d4499041ebfa91",
    "missing_artifacts": [],
    "limitations": [
      "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.",