Refresh release flow evidence lock

2026-06-16 01:56:34 +08:00
parent 959fcaee08
commit c91d01bc1b
8 changed files with 113 additions and 109 deletions
@@ -3,7 +3,7 @@
  "ok": true,
  "generated_at": "2026-06-16",
  "skill_dir": ".",
-  "commit": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+  "commit": "959fcaee0893a21850d82acccd9d630f3f1bd495",
  "git_status": {
    "available": true,
    "dirty": false,
@@ -17,9 +17,9 @@
    "methodology_complete": true,
    "required_artifact_count": 25,
    "missing_artifact_count": 0,
-    "evidence_bundle_sha256": "2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504",
-    "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-    "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+    "evidence_bundle_sha256": "3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a",
+    "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+    "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
    "output_case_count": 5,
    "failure_disclosure_count": 3,
    "command_count": 23,
@@ -54,7 +54,7 @@
  },
  "release_lock": {
    "ready": true,
-    "commit": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+    "commit": "959fcaee0893a21850d82acccd9d630f3f1bd495",
    "status_scope": "generation-time status before this report is written",
    "reason": "clean generation-time HEAD"
  },
@@ -64,7 +64,7 @@
    "existing_count": 25,
    "missing_count": 0,
    "missing_paths": [],
-    "sha256": "2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504"
+    "sha256": "3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a"
  },
  "methodology": {
    "path": "reports/benchmark_methodology.md",
@@ -137,8 +137,8 @@
      "label": "output_execution",
      "path": "reports/output_execution_runs.json",
      "exists": true,
-      "bytes": 7965,
-      "sha256": "f076e09900b42558342643daa14eb9864e86223a8c80818e7686749efa40662d"
+      "bytes": 7967,
+      "sha256": "2e35417d7bf9982271ad1f692c1dee92f368a417fbb2e686078869b01b10b080"
    },
    {
      "label": "blind_review",
@@ -173,7 +173,7 @@
      "path": "reports/security_trust_report.json",
      "exists": true,
      "bytes": 111439,
-      "sha256": "a61a6ff31166f379eaaa9cb3acfc9e9a7ba7d111363a9b9f0f5fbe64cde8856c"
+      "sha256": "0e7e96eda8ee29bb253842f555a5123d81b161cde9d31e66c0b91ed0af0fb566"
    },
    {
      "label": "python_compatibility",
@@ -187,14 +187,14 @@
      "path": "reports/registry_audit.json",
      "exists": true,
      "bytes": 3183,
-      "sha256": "41dfe1467cb415e638982fc5f81cdda8f2758071e29306460b149d12ce177781"
+      "sha256": "11c4be579a25c785b50bab84444ff0ad6640df52d7b375136c4ac1d30558b9f2"
    },
    {
      "label": "package_verification",
      "path": "reports/package_verification.json",
      "exists": true,
      "bytes": 19338,
-      "sha256": "b1dbf4798c7af9491eca90f2adba0fd80b74f80bd3a0aafe289605832e648e92"
+      "sha256": "415cdec157889b39069e2ff5b189015a4d1fe586acf088aeebe6bd6e6af746ae"
    },
    {
      "label": "install_simulation",
@@ -1,9 +1,9 @@
 # Benchmark Reproducibility

 Generated at: `2026-06-16`
-Commit: `d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0`
+Commit: `959fcaee0893a21850d82acccd9d630f3f1bd495`
 Working tree dirty at generation: `false`
-Evidence bundle SHA256: `2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504`
+Evidence bundle SHA256: `3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a`

 ## Summary

@@ -12,8 +12,8 @@ Evidence bundle SHA256: `2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897
 - methodology complete: `true`
 - required artifacts: `25`
 - missing artifacts: `0`
- source contract sha256: `c031eba962de`
- archive sha256: `729d4a307944`
+- source contract sha256: `fa285e57f36f`
+- archive sha256: `19810129f02c`
 - output cases: `5`
 - disclosed failure cases: `3`
 - reproduction commands: `23`
@@ -50,7 +50,7 @@ This report proves local benchmark reproducibility only. It keeps external provi

 - algorithm: `sha256(path,label,exists,artifact_sha256)`
 - artifacts: `25` / `25`
- sha256: `2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504`
+- sha256: `3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a`

 ## Methodology Sections

@@ -72,15 +72,15 @@ This report proves local benchmark reproducibility only. It keeps external provi
 | output_cases | `evals/output/cases.jsonl` | present | `a6ae96857116` |
 | output_schema | `evals/output/schema.json` | present | `8ee340c95064` |
 | output_scorecard | `reports/output_quality_scorecard.json` | present | `0806258a8e08` |
-| output_execution | `reports/output_execution_runs.json` | present | `f076e09900b4` |
+| output_execution | `reports/output_execution_runs.json` | present | `2e35417d7bf9` |
 | blind_review | `reports/output_blind_review_pack.json` | present | `bbe2db8ec277` |
 | review_adjudication | `reports/output_review_adjudication.json` | present | `240485a721af` |
 | trigger_scorecard | `reports/route_scorecard.json` | present | `c164e83e36d0` |
 | runtime_conformance | `reports/conformance_matrix.json` | present | `97f9ba949c23` |
-| trust_report | `reports/security_trust_report.json` | present | `a61a6ff31166` |
+| trust_report | `reports/security_trust_report.json` | present | `0e7e96eda8ee` |
 | python_compatibility | `reports/python_compatibility.json` | present | `44e2c3c42579` |
-| registry_audit | `reports/registry_audit.json` | present | `41dfe1467cb4` |
-| package_verification | `reports/package_verification.json` | present | `b1dbf4798c7a` |
+| registry_audit | `reports/registry_audit.json` | present | `11c4be579a25` |
+| package_verification | `reports/package_verification.json` | present | `415cdec15788` |
 | install_simulation | `reports/install_simulation.json` | present | `f0cad15cbdff` |
 | skill_os2_audit | `reports/skill_os2_audit.json` | present | `57536bc67370` |
 | world_class_evidence_plan | `reports/world_class_evidence_plan.json` | present | `76a3f8e2b12b` |
@@ -53,6 +53,7 @@
        "source_refresh_section": true,
        "clean_lock_section": true,
        "source_refresh_commands": {
+          "python3 scripts/render_benchmark_reproducibility.py . --generated-at \"$GENERATED_AT\"": true,
          "python3 scripts/render_skill_overview.py .": true,
          "python3 scripts/render_skill_interpretation.py .": true,
          "python3 scripts/render_review_viewer.py .": true,
@@ -61,6 +62,7 @@
          "python3 scripts/render_evidence_consistency.py . --generated-at \"$GENERATED_AT\"": true
        },
        "clean_lock_commands": {
+          "python3 scripts/render_benchmark_reproducibility.py . --generated-at \"$GENERATED_AT\"": true,
          "python3 scripts/render_skill_overview.py .": true,
          "python3 scripts/render_skill_interpretation.py .": true,
          "python3 scripts/render_review_viewer.py .": true,
@@ -74,6 +76,7 @@
        "source_refresh_section": true,
        "clean_lock_section": true,
        "source_refresh_commands": {
+          "python3 scripts/render_benchmark_reproducibility.py . --generated-at \"$GENERATED_AT\"": true,
          "python3 scripts/render_skill_overview.py .": true,
          "python3 scripts/render_skill_interpretation.py .": true,
          "python3 scripts/render_review_viewer.py .": true,
@@ -82,6 +85,7 @@
          "python3 scripts/render_evidence_consistency.py . --generated-at \"$GENERATED_AT\"": true
        },
        "clean_lock_commands": {
+          "python3 scripts/render_benchmark_reproducibility.py . --generated-at \"$GENERATED_AT\"": true,
          "python3 scripts/render_skill_overview.py .": true,
          "python3 scripts/render_skill_interpretation.py .": true,
          "python3 scripts/render_review_viewer.py .": true,
@@ -117,8 +121,8 @@
      "key": "overview-benchmark-commit",
      "label": "overview embeds the benchmark commit",
      "status": "pass",
-      "expected": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
-      "actual": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+      "expected": "959fcaee0893a21850d82acccd9d630f3f1bd495",
+      "actual": "959fcaee0893a21850d82acccd9d630f3f1bd495",
      "paths": [
        "reports/benchmark_reproducibility.json",
        "reports/skill-overview.json"
@@ -133,8 +137,8 @@
        "release_lock_ready": true,
        "required_artifact_count": 25,
        "missing_artifact_count": 0,
-        "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "world_class_ledger_pending_count": 4,
        "world_class_source_check_count": 13,
        "world_class_source_pass_count": 6,
@@ -146,8 +150,8 @@
        "release_lock_ready": true,
        "required_artifact_count": 25,
        "missing_artifact_count": 0,
-        "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "world_class_ledger_pending_count": 4,
        "world_class_source_check_count": 13,
        "world_class_source_pass_count": 6,
@@ -263,8 +267,8 @@
      "key": "interpretation-benchmark-commit",
      "label": "interpretation embeds the benchmark commit",
      "status": "pass",
-      "expected": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
-      "actual": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+      "expected": "959fcaee0893a21850d82acccd9d630f3f1bd495",
+      "actual": "959fcaee0893a21850d82acccd9d630f3f1bd495",
      "paths": [
        "reports/benchmark_reproducibility.json",
        "reports/skill-interpretation.json"
@@ -279,8 +283,8 @@
        "release_lock_ready": true,
        "required_artifact_count": 25,
        "missing_artifact_count": 0,
-        "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "world_class_ledger_pending_count": 4,
        "world_class_source_check_count": 13,
        "world_class_source_pass_count": 6,
@@ -292,8 +296,8 @@
        "release_lock_ready": true,
        "required_artifact_count": 25,
        "missing_artifact_count": 0,
-        "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "world_class_ledger_pending_count": 4,
        "world_class_source_check_count": 13,
        "world_class_source_pass_count": 6,
@@ -748,7 +748,7 @@
    </section>

    <section id="trust" class="twocol">
-      <div class="panel"><h2>信任报告</h2><dl class='kv-grid'><div><dt>Secret</dt><dd>0</dd></div><div><dt>脚本数</dt><dd>113</dd></div><div><dt>网络脚本</dt><dd>3</dd></div><div><dt>Help 失败</dt><dd>0</dd></div><div><dt>包体哈希</dt><dd><code>c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d</code></dd></div></dl></div>
+      <div class="panel"><h2>信任报告</h2><dl class='kv-grid'><div><dt>Secret</dt><dd>0</dd></div><div><dt>脚本数</dt><dd>113</dd></div><div><dt>网络脚本</dt><dd>3</dd></div><div><dt>Help 失败</dt><dd>0</dd></div><div><dt>包体哈希</dt><dd><code>fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee</code></dd></div></dl></div>
      <div class="panel"><h2>安全边界</h2><p>高风险 secret、远程 inline execution、缺失依赖策略或无法解释的脚本接口应阻断 governed release。</p></div>
    </section>

@@ -827,12 +827,12 @@

    <section id="registry" class="twocol">
      <div class="panel"><h2>注册审计</h2><p>yao-meta-skill 1.1.0; 6/6 compatibility entries pass; install pass with 4 adapters; installer permissions 12 enforced / 0 failures</p></div>
-      <div class="panel"><h2>包体元数据</h2><dl class='kv-grid'><div><dt>名称</dt><dd>yao-meta-skill</dd></div><div><dt>版本</dt><dd>1.1.0</dd></div><div><dt>Maturity</dt><dd>governed</dd></div><div><dt>Owner</dt><dd>Yao Team</dd></div><div><dt>License</dt><dd>MIT</dd></div><div><dt>信任级别</dt><dd>local</dd></div><div><dt>目标平台</dt><dd>openai, claude, generic, agent-skills-compatible, vscode</dd></div><div><dt>兼容通过</dt><dd>6/6</dd></div><div><dt>归档哈希</dt><dd><code>729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d</code></dd></div></dl></div>
+      <div class="panel"><h2>包体元数据</h2><dl class='kv-grid'><div><dt>名称</dt><dd>yao-meta-skill</dd></div><div><dt>版本</dt><dd>1.1.0</dd></div><div><dt>Maturity</dt><dd>governed</dd></div><div><dt>Owner</dt><dd>Yao Team</dd></div><div><dt>License</dt><dd>MIT</dd></div><div><dt>信任级别</dt><dd>local</dd></div><div><dt>目标平台</dt><dd>openai, claude, generic, agent-skills-compatible, vscode</dd></div><div><dt>兼容通过</dt><dd>6/6</dd></div><div><dt>归档哈希</dt><dd><code>19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050</code></dd></div></dl></div>
    </section>

    <section id="release" class="twocol">
      <div class="panel"><h2>发布路线</h2><p>0 promote; 3 keep current; 0 blocked; upgrade minor declared / minor recommended</p></div>
-      <div class="panel"><h2>包体验证</h2><dl class='kv-grid'><div><dt>目标数</dt><dd>4</dd></div><div><dt>Adapter</dt><dd>4</dd></div><div><dt>归档存在</dt><dd>是</dd></div><div><dt>Zip 条目</dt><dd>623</dd></div><div><dt>失败数</dt><dd>0</dd></div><div><dt>警告数</dt><dd>0</dd></div><div><dt>归档哈希</dt><dd><code>729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d</code></dd></div></dl></div>
+      <div class="panel"><h2>包体验证</h2><dl class='kv-grid'><div><dt>目标数</dt><dd>4</dd></div><div><dt>Adapter</dt><dd>4</dd></div><div><dt>归档存在</dt><dd>是</dd></div><div><dt>Zip 条目</dt><dd>623</dd></div><div><dt>失败数</dt><dd>0</dd></div><div><dt>警告数</dt><dd>0</dd></div><div><dt>归档哈希</dt><dd><code>19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050</code></dd></div></dl></div>
    </section>

    <section class="twocol">
@@ -1735,9 +1735,9 @@
          "methodology_complete": true,
          "required_artifact_count": 25,
          "missing_artifact_count": 0,
-          "evidence_bundle_sha256": "2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504",
-          "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-          "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+          "evidence_bundle_sha256": "3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a",
+          "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+          "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
          "output_case_count": 5,
          "failure_disclosure_count": 3,
          "command_count": 23,
@@ -1759,7 +1759,7 @@
          "working_tree_dirty": false,
          "changed_file_count": 0
        },
-        "commit": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+        "commit": "959fcaee0893a21850d82acccd9d630f3f1bd495",
        "missing_artifacts": [],
        "limitations": [
          "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.",
@@ -1864,7 +1864,7 @@
        "interactive_script_count": 0,
        "package_hash_scope": "source-contract-without-generated-reports",
        "package_hash_file_count": 200,
-        "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+        "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
      },
      "skill_atlas": {
        "skill_count": 12,
@@ -1902,8 +1902,8 @@
          "trust_level": "local",
          "license": "MIT",
          "checksums": {
-            "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-            "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+            "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+            "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
          },
          "compatibility": {
            "openai": "pass",
@@ -1934,7 +1934,7 @@
          },
          "distribution": {
            "archive_verified": true,
-            "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+            "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
            "package_verification": "reports/package_verification.json",
            "install_simulated": true,
            "install_simulation": "reports/install_simulation.json"
@@ -1950,7 +1950,7 @@
          "target_count": 4,
          "adapter_count": 4,
          "archive_present": true,
-          "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+          "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
          "archive_entry_count": 623,
          "failure_count": 0,
          "warning_count": 0
@@ -2029,12 +2029,12 @@
            {
              "field": "archive_sha256",
              "from": "",
-              "to": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+              "to": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
            },
            {
              "field": "package_sha256",
              "from": "0000000000000000000000000000000000000000000000000000000000000000",
-              "to": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+              "to": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
            }
          ]
        },
@@ -4401,7 +4401,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 30.29,
+          "duration_ms": 27.11,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4429,7 +4429,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 30.71,
+          "duration_ms": 26.32,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4452,7 +4452,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 31.61,
+          "duration_ms": 25.75,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4480,7 +4480,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 31.54,
+          "duration_ms": 28.01,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4503,7 +4503,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 30.87,
+          "duration_ms": 29.77,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4531,7 +4531,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 29.9,
+          "duration_ms": 28.46,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4554,7 +4554,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 31.08,
+          "duration_ms": 26.53,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4581,7 +4581,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 31.5,
+          "duration_ms": 26.46,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4604,7 +4604,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 31.33,
+          "duration_ms": 25.86,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -4633,7 +4633,7 @@
          "execution_mode": "command",
          "model_executed": false,
          "command_executed": true,
-          "duration_ms": 29.65,
+          "duration_ms": 25.67,
          "provider": "local-output-eval-runner",
          "model": "",
          "usage": {
@@ -5354,7 +5354,7 @@
      "ok": true,
      "generated_at": "2026-06-16",
      "skill_dir": ".",
-      "commit": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+      "commit": "959fcaee0893a21850d82acccd9d630f3f1bd495",
      "git_status": {
        "available": true,
        "dirty": false,
@@ -5368,9 +5368,9 @@
        "methodology_complete": true,
        "required_artifact_count": 25,
        "missing_artifact_count": 0,
-        "evidence_bundle_sha256": "2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504",
-        "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "evidence_bundle_sha256": "3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a",
+        "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "output_case_count": 5,
        "failure_disclosure_count": 3,
        "command_count": 23,
@@ -5405,7 +5405,7 @@
      },
      "release_lock": {
        "ready": true,
-        "commit": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+        "commit": "959fcaee0893a21850d82acccd9d630f3f1bd495",
        "status_scope": "generation-time status before this report is written",
        "reason": "clean generation-time HEAD"
      },
@@ -5415,7 +5415,7 @@
        "existing_count": 25,
        "missing_count": 0,
        "missing_paths": [],
-        "sha256": "2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504"
+        "sha256": "3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a"
      },
      "methodology": {
        "path": "reports/benchmark_methodology.md",
@@ -5488,8 +5488,8 @@
          "label": "output_execution",
          "path": "reports/output_execution_runs.json",
          "exists": true,
-          "bytes": 7965,
-          "sha256": "f076e09900b42558342643daa14eb9864e86223a8c80818e7686749efa40662d"
+          "bytes": 7967,
+          "sha256": "2e35417d7bf9982271ad1f692c1dee92f368a417fbb2e686078869b01b10b080"
        },
        {
          "label": "blind_review",
@@ -5524,7 +5524,7 @@
          "path": "reports/security_trust_report.json",
          "exists": true,
          "bytes": 111439,
-          "sha256": "a61a6ff31166f379eaaa9cb3acfc9e9a7ba7d111363a9b9f0f5fbe64cde8856c"
+          "sha256": "0e7e96eda8ee29bb253842f555a5123d81b161cde9d31e66c0b91ed0af0fb566"
        },
        {
          "label": "python_compatibility",
@@ -5538,14 +5538,14 @@
          "path": "reports/registry_audit.json",
          "exists": true,
          "bytes": 3183,
-          "sha256": "41dfe1467cb415e638982fc5f81cdda8f2758071e29306460b149d12ce177781"
+          "sha256": "11c4be579a25c785b50bab84444ff0ad6640df52d7b375136c4ac1d30558b9f2"
        },
        {
          "label": "package_verification",
          "path": "reports/package_verification.json",
          "exists": true,
          "bytes": 19338,
-          "sha256": "b1dbf4798c7af9491eca90f2adba0fd80b74f80bd3a0aafe289605832e648e92"
+          "sha256": "415cdec157889b39069e2ff5b189015a4d1fe586acf088aeebe6bd6e6af746ae"
        },
        {
          "label": "install_simulation",
@@ -6074,7 +6074,7 @@
          "label": "Benchmark Methodology",
          "status": "pass",
          "objective": "Recommended Skill OS 2.0 implementation PR from the upgrade plan.",
-          "current": "24 required artifacts checked",
+          "current": "25 required artifacts checked",
          "command": "make ci-test",
          "test": "tests/verify_benchmark_reproducibility.py",
          "evidence": [
@@ -11489,7 +11489,7 @@
        "interactive_script_count": 0,
        "package_hash_scope": "source-contract-without-generated-reports",
        "package_hash_file_count": 200,
-        "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+        "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
      },
      "failures": [],
      "warnings": [],
@@ -20611,8 +20611,8 @@
        "trust_level": "local",
        "license": "MIT",
        "checksums": {
-          "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-          "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+          "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+          "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
        },
        "compatibility": {
          "openai": "pass",
@@ -20643,7 +20643,7 @@
        },
        "distribution": {
          "archive_verified": true,
-          "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+          "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
          "package_verification": "reports/package_verification.json",
          "install_simulated": true,
          "install_simulation": "reports/install_simulation.json"
@@ -20668,7 +20668,7 @@
              "vscode"
            ],
            "package_metadata": "registry/packages/yao-meta-skill.json",
-            "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+            "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
          }
        ]
      },
@@ -20691,7 +20691,7 @@
        "target_count": 4,
        "adapter_count": 4,
        "archive_present": true,
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "archive_entry_count": 623,
        "failure_count": 0,
        "warning_count": 0
@@ -21699,12 +21699,12 @@
          {
            "field": "archive_sha256",
            "from": "",
-            "to": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+            "to": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
          },
          {
            "field": "package_sha256",
            "from": "0000000000000000000000000000000000000000000000000000000000000000",
-            "to": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+            "to": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
          }
        ]
      },
@@ -1000,9 +1000,9 @@
        "methodology_complete": true,
        "required_artifact_count": 25,
        "missing_artifact_count": 0,
-        "evidence_bundle_sha256": "2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504",
-        "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "evidence_bundle_sha256": "3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a",
+        "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "output_case_count": 5,
        "failure_disclosure_count": 3,
        "command_count": 23,
@@ -1024,7 +1024,7 @@
        "working_tree_dirty": false,
        "changed_file_count": 0
      },
-      "commit": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+      "commit": "959fcaee0893a21850d82acccd9d630f3f1bd495",
      "missing_artifacts": [],
      "limitations": [
        "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.",
@@ -1129,7 +1129,7 @@
      "interactive_script_count": 0,
      "package_hash_scope": "source-contract-without-generated-reports",
      "package_hash_file_count": 200,
-      "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+      "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
    },
    "skill_atlas": {
      "skill_count": 12,
@@ -1167,8 +1167,8 @@
        "trust_level": "local",
        "license": "MIT",
        "checksums": {
-          "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-          "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+          "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+          "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
        },
        "compatibility": {
          "openai": "pass",
@@ -1199,7 +1199,7 @@
        },
        "distribution": {
          "archive_verified": true,
-          "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+          "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
          "package_verification": "reports/package_verification.json",
          "install_simulated": true,
          "install_simulation": "reports/install_simulation.json"
@@ -1215,7 +1215,7 @@
        "target_count": 4,
        "adapter_count": 4,
        "archive_present": true,
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "archive_entry_count": 623,
        "failure_count": 0,
        "warning_count": 0
@@ -1294,12 +1294,12 @@
          {
            "field": "archive_sha256",
            "from": "",
-            "to": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+            "to": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
          },
          {
            "field": "package_sha256",
            "from": "0000000000000000000000000000000000000000000000000000000000000000",
-            "to": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+            "to": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
          }
        ]
      },
@@ -1004,9 +1004,9 @@
      "methodology_complete": true,
      "required_artifact_count": 25,
      "missing_artifact_count": 0,
-      "evidence_bundle_sha256": "2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504",
-      "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-      "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+      "evidence_bundle_sha256": "3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a",
+      "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+      "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
      "output_case_count": 5,
      "failure_disclosure_count": 3,
      "command_count": 23,
@@ -1028,7 +1028,7 @@
      "working_tree_dirty": false,
      "changed_file_count": 0
    },
-    "commit": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+    "commit": "959fcaee0893a21850d82acccd9d630f3f1bd495",
    "missing_artifacts": [],
    "limitations": [
      "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.",
@@ -1133,7 +1133,7 @@
    "interactive_script_count": 0,
    "package_hash_scope": "source-contract-without-generated-reports",
    "package_hash_file_count": 200,
-    "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+    "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
  },
  "skill_atlas": {
    "skill_count": 12,
@@ -1171,8 +1171,8 @@
      "trust_level": "local",
      "license": "MIT",
      "checksums": {
-        "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+        "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
      },
      "compatibility": {
        "openai": "pass",
@@ -1203,7 +1203,7 @@
      },
      "distribution": {
        "archive_verified": true,
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "package_verification": "reports/package_verification.json",
        "install_simulated": true,
        "install_simulation": "reports/install_simulation.json"
@@ -1219,7 +1219,7 @@
      "target_count": 4,
      "adapter_count": 4,
      "archive_present": true,
-      "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+      "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
      "archive_entry_count": 623,
      "failure_count": 0,
      "warning_count": 0
@@ -1298,12 +1298,12 @@
        {
          "field": "archive_sha256",
          "from": "",
-          "to": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+          "to": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
        },
        {
          "field": "package_sha256",
          "from": "0000000000000000000000000000000000000000000000000000000000000000",
-          "to": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+          "to": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
        }
      ]
    },
@@ -999,9 +999,9 @@
      "methodology_complete": true,
      "required_artifact_count": 25,
      "missing_artifact_count": 0,
-      "evidence_bundle_sha256": "2e0765bd7b1c3aca5e05b0c87b495f7454c17c020387c6b1f265897f38e97504",
-      "source_contract_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-      "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+      "evidence_bundle_sha256": "3cb681ab4634331610f30ea080c8c33a8aa66509402ca38e0f4fdbdd29276e7a",
+      "source_contract_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+      "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
      "output_case_count": 5,
      "failure_disclosure_count": 3,
      "command_count": 23,
@@ -1023,7 +1023,7 @@
      "working_tree_dirty": false,
      "changed_file_count": 0
    },
-    "commit": "d3fb78f4feb4ff6db70f4339159cc8b0019ab3b0",
+    "commit": "959fcaee0893a21850d82acccd9d630f3f1bd495",
    "missing_artifacts": [],
    "limitations": [
      "The git commit and dirty flag are generation-time context; the evidence bundle hash is the durable artifact anchor inside a committed report.",
@@ -1128,7 +1128,7 @@
    "interactive_script_count": 0,
    "package_hash_scope": "source-contract-without-generated-reports",
    "package_hash_file_count": 200,
-    "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+    "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
  },
  "skill_atlas": {
    "skill_count": 12,
@@ -1166,8 +1166,8 @@
      "trust_level": "local",
      "license": "MIT",
      "checksums": {
-        "package_sha256": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d",
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+        "package_sha256": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
      },
      "compatibility": {
        "openai": "pass",
@@ -1198,7 +1198,7 @@
      },
      "distribution": {
        "archive_verified": true,
-        "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+        "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
        "package_verification": "reports/package_verification.json",
        "install_simulated": true,
        "install_simulation": "reports/install_simulation.json"
@@ -1214,7 +1214,7 @@
      "target_count": 4,
      "adapter_count": 4,
      "archive_present": true,
-      "archive_sha256": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d",
+      "archive_sha256": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050",
      "archive_entry_count": 623,
      "failure_count": 0,
      "warning_count": 0
@@ -1293,12 +1293,12 @@
        {
          "field": "archive_sha256",
          "from": "",
-          "to": "729d4a307944e544a830974363f436149fc647f9eb12e6e712d66a96f79b022d"
+          "to": "19810129f02c71eb00d04a5eb9c9570febded99beac0230de82a09610e027050"
        },
        {
          "field": "package_sha256",
          "from": "0000000000000000000000000000000000000000000000000000000000000000",
-          "to": "c031eba962def76fe31e98da4220d9db7f58a1ed8c6c6d1c8906d71f0c24c93d"
+          "to": "fa285e57f36fb8f33b0c9cdc5de924532a4ec3f30be5880fd3bcde6d53d363ee"
        }
      ]
    },