fix(harbour): close repair diagnostic drift and audit rules at exact SHA

.botte/engine-LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sylvain Galliez
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

.botte/engine.md

@@ -0,0 +1,57 @@
+# Committed rule audit
+
+The three dependency-free Python modules are copied unchanged from
+[Botte Secrète PR #103](https://github.com/zedarvates/botte-secrete/pull/103),
+source commit [`e121ea16cbd5a772ddb485414928c0938eace2d5`](https://github.com/zedarvates/botte-secrete/tree/e121ea16cbd5a772ddb485414928c0938eace2d5).
+Python 3.10+ is required. The upstream MIT notice is retained in
+`engine-LICENSE.txt`; it does not change this repository's licensing.
+
+| Engine file | SHA-256 |
+| --- | --- |
+| `skills/console_utf8.py` | `80e0583b55e816b85193238abcca6f16ae84d38c382b792763e0f5e90e662eb5` |
+| `skills/directives_audit/rules.py` | `6af048fa89d1214d21e5abb2a82144ebfde26bf9bfaec120a3f91ead61e18284` |
+| `skills/directives_audit/rules_cli.py` | `28da4117cd51bd12f7392857bf82b144895353b44d04c5f4d378968e4347fea7` |
+
+From the repository root:
+
+```bash
+PYTHONDONTWRITEBYTECODE=1 PYTHONPATH=. python -m skills.directives_audit.rules_cli audit . --json
+```
+
+## Verification boundary
+
+The audit reads exact source statements, guard anchors, positive and negative
+probe anchors, owner-boundary metadata and the replacement graph. It does not
+execute probes, import project code, contact services or authorize an action.
+`last_verified` records semantic source review, not runtime success or a CI SHA.
+All initial `supersedes` lists are empty. These local data rules use
+`owner_only: false`; that does not grant owner-only external authority.
+
+The report must be `botte.rules-audit/v1`, with a present manifest, at least one
+rule, and zero errors and warnings. A missing/empty manifest is BLOCKED/DRIFT,
+even if its numeric score is 100. The CLI returns 2 for an absent manifest and 1
+for errors, but warnings require the additional strict check used in CI.
+
+The fingerprint is a deterministic rule/report receipt, not a hash of the entire
+source tree. Always record `git rev-parse HEAD` alongside the report and actual
+test results. A result from another SHA or a pull-request merge commit cannot
+stand in for the tested head. Regenerate verification receipts only after source
+review and relevant probes; do not refresh dates merely to silence drift.
+
+## Registered scope and execution
+
+This initial contract covers three Harbour invariants: source-only repair
+context, project ID references, and public acceptance-output redaction. It is
+not a complete inventory of StoryCore Engine rules. `AGENTS.md`, mission limits,
+and owner decisions remain authoritative outside this registered scope.
+
+Run the reviewed behavioral probes separately from the repository root:
+
+```bash
+node --test apps/storycore-harbour/tests/repair-prompt.test.mjs apps/storycore-harbour/tests/contracts.test.mjs apps/storycore-harbour/tests/acceptance-public-output.test.mjs
+```
+
+The existing Harbour CI checks out and verifies the exact PR head, runs this
+audit, then retains the full contract/evaluator, official Anna strict-validation,
+and browser mock gates. CI is separate evidence; none of those mock checks proves
+real-model acceptance, Anna eligibility, publication, or owner approval.

.botte/rules.json

@@ -0,0 +1,119 @@
+{
+  "schema": "botte.rules-manifest/v1",
+  "rules": [
+    {
+      "id": "harbour.repair-source-only",
+      "action": "repair-context",
+      "effect": "REQUIRE",
+      "scope": [
+        "harbour-repair-request"
+      ],
+      "statement": "repair validation errors contain only the fixed categories\n`json_invalid` and `contract_invalid`; the exact normalized user input remains\nthe reconstruction source.",
+      "source_ref": "apps/storycore-harbour/DECISIONS.md#ADR-023",
+      "owner_only": false,
+      "enforced": true,
+      "enforcement_refs": [
+        "apps/storycore-harbour/bundle/repair-prompt.js#const validationErrors = [...new Set(errors.map(error => (",
+        "apps/storycore-harbour/bundle/app.js#createRepairPrompt(input, errors)"
+      ],
+      "probes": [
+        {
+          "id": "harbour.repair-source-only.allow",
+          "polarity": "allow",
+          "evidence_ref": "apps/storycore-harbour/tests/repair-prompt.test.mjs#repair rebuilds from the exact user input without carrying truncated model output"
+        },
+        {
+          "id": "harbour.repair-source-only.deny",
+          "polarity": "deny",
+          "evidence_ref": "apps/storycore-harbour/tests/repair-prompt.test.mjs#repair excludes model-derived text in parser and reference diagnostics"
+        }
+      ],
+      "supersedes": [],
+      "last_verified": {
+        "at": "2026-09-09T05:21:49+00:00",
+        "content_sha256": "ee1a2f6819fc9282355b5e97900c261e671d8c62863c722531cb20d98ebb3166",
+        "evidence_ref": ".botte/engine.md#Verification boundary"
+      }
+    },
+    {
+      "id": "harbour.project-references",
+      "action": "project-validation",
+      "effect": "REQUIRE",
+      "scope": [
+        "harbour-project-contract"
+      ],
+      "statement": "all referenced character and location IDs must exist;",
+      "source_ref": "apps/storycore-harbour/ARCHITECTURE.md#all referenced character and location IDs must exist;",
+      "owner_only": false,
+      "enforced": true,
+      "enforcement_refs": [
+        "apps/storycore-harbour/bundle/project-contract.js#if (isText(id) && !knownIds.has(id)) {",
+        "apps/storycore-harbour/bundle/project-contract.js#if (isText(id) && !characterIds.has(id)) {",
+        "apps/storycore-harbour/bundle/project-contract.js#if (isText(scene.locationId) && !context.locationIds.has(scene.locationId)) {"
+      ],
+      "probes": [
+        {
+          "id": "harbour.project-references.allow",
+          "polarity": "allow",
+          "evidence_ref": "apps/storycore-harbour/tests/contracts.test.mjs#sample project passes the contract"
+        },
+        {
+          "id": "harbour.project-references.deny",
+          "polarity": "deny",
+          "evidence_ref": "apps/storycore-harbour/tests/contracts.test.mjs#unknown scene location is rejected"
+        },
+        {
+          "id": "harbour.project-references.deny-scene-character",
+          "polarity": "deny",
+          "evidence_ref": "apps/storycore-harbour/tests/contracts.test.mjs#unknown scene character is rejected"
+        },
+        {
+          "id": "harbour.project-references.deny-shot-character",
+          "polarity": "deny",
+          "evidence_ref": "apps/storycore-harbour/tests/contracts.test.mjs#unknown shot character is rejected"
+        }
+      ],
+      "supersedes": [],
+      "last_verified": {
+        "at": "2026-09-09T05:21:49+00:00",
+        "content_sha256": "aaed2b94d47a6089dac53d1df74223fb52eea8e4c80e89dab9c68322ec94b414",
+        "evidence_ref": ".botte/engine.md#Verification boundary"
+      }
+    },
+    {
+      "id": "harbour.public-acceptance-redaction",
+      "action": "acceptance-summary",
+      "effect": "REQUIRE",
+      "scope": [
+        "harbour-evaluator-public-output"
+      ],
+      "statement": "Redact model-derived validation text and unknown identifiers from evaluator output.",
+      "source_ref": "apps/storycore-harbour/CODEX_TASKS.md#Redact model-derived validation text and unknown identifiers from evaluator output.",
+      "owner_only": false,
+      "enforced": true,
+      "enforcement_refs": [
+        "apps/storycore-harbour/scripts/evaluate-acceptance.mjs#function publicPromptId(value) {",
+        "apps/storycore-harbour/scripts/evaluate-acceptance.mjs#return PUBLIC_CATEGORIES.has(value) ? value : \"unknown\";",
+        "apps/storycore-harbour/scripts/evaluate-acceptance.mjs#reasonCount: Array.isArray(failure.reasons) ? failure.reasons.length : 0,"
+      ],
+      "probes": [
+        {
+          "id": "harbour.public-acceptance-redaction.allow",
+          "polarity": "allow",
+          "evidence_ref": "apps/storycore-harbour/tests/acceptance-public-output.test.mjs#public acceptance output strips model-derived validation text"
+        },
+        {
+          "id": "harbour.public-acceptance-redaction.deny",
+          "polarity": "deny",
+          "evidence_ref": "apps/storycore-harbour/tests/acceptance-public-output.test.mjs#public acceptance output replaces unknown identifiers and categories"
+        }
+      ],
+      "supersedes": [],
+      "last_verified": {
+        "at": "2026-09-09T05:21:49+00:00",
+        "content_sha256": "455c248ffa202f2b885f33ebe4f4decc71ea6808da63fb07dbaa46e2731276a8",
+        "evidence_ref": ".botte/engine.md#Verification boundary"
+      }
+    }
+  ]
+}

.github/workflows/music-plan-contract.yml

@@ -0,0 +1,72 @@
+name: MusicPlan Contract
+
+on:
+  pull_request:
+    branches: [main]
+    paths:
+      - "schemas/music-plan-v1.schema.json"
+      - "src/music_plan.py"
+      - "src/music_provider.py"
+      - "scripts/music_plan_mutation_probe.py"
+      - "scripts/music_plan_holdout_evaluator.py"
+      - "tests/test_music_plan.py"
+      - "tests/fixtures/music_plan/**"
+      - "docs/music-planning-layer-v1.md"
+      - ".github/workflows/music-plan-contract.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.12"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Install focused validation dependencies
+        run: python -m pip install 'pytest>=8,<10' 'jsonschema>=4.23,<5'
+      - name: Compile model-free contracts
+        run: python -m py_compile src/music_plan.py src/music_provider.py scripts/music_plan_mutation_probe.py scripts/music_plan_holdout_evaluator.py
+      - name: Run MusicPlan contract tests
+        run: python -m pytest -q tests/test_music_plan.py
+      - name: Run controlled negative mutation probe
+        run: python -m scripts.music_plan_mutation_probe
+      - name: Verify private holdout evaluator protocol
+        run: |
+          python - <<'PY'
+          import json
+          import subprocess
+          import sys
+          from pathlib import Path
+
+          plan = json.loads(Path('tests/fixtures/music_plan/full.json').read_text(encoding='utf-8'))
+          request = {"id": "public-protocol-smoke", "input": {"plan": plan, "expected_valid": True}}
+          r = subprocess.run(
+              [sys.executable, '-m', 'scripts.music_plan_holdout_evaluator'],
+              input=json.dumps(request), text=True, capture_output=True, check=True,
+          )
+          response = json.loads(r.stdout)
+          assert response == {"passed": True}, response
+          print('holdout evaluator protocol OK')
+          PY
+      - name: Verify Draft 2020-12 schema and reference fixtures
+        run: |
+          python - <<'PY'
+          import json
+          from pathlib import Path
+          from jsonschema import Draft202012Validator
+
+          schema_path = Path('schemas/music-plan-v1.schema.json')
+          schema = json.loads(schema_path.read_text(encoding='utf-8'))
+          Draft202012Validator.check_schema(schema)
+          validator = Draft202012Validator(schema)
+          for path in sorted(Path('tests/fixtures/music_plan').glob('*.json')):
+              data = json.loads(path.read_text(encoding='utf-8'))
+              validator.validate(data)
+              print(f'OK {path}')
+          PY

.github/workflows/repository-checkout-ci.yml

@@ -0,0 +1,19 @@
+name: Repository Checkout CI
+
+on:
+  pull_request:
+    paths:
+      - 'GemReward-Service-Repo'
+      - '.gitmodules'
+      - '.github/workflows/repository-checkout-ci.yml'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  checkout:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4

.github/workflows/storycore-harbour-ci.yml

@@ -4,6 +4,10 @@ on:
   pull_request:
     paths:
       - "apps/storycore-harbour/**"
+      - ".botte/**"
+      - "skills/console_utf8.py"
+      - "skills/directives_audit/rules.py"
+      - "skills/directives_audit/rules_cli.py"
       - ".github/workflows/storycore-harbour-ci.yml"
   workflow_dispatch:
 
@@ -26,6 +30,41 @@ jobs:
     steps:
       - name: Check out repository
         uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
+          persist-credentials: false
+
+      - name: Verify the exact source revision
+        working-directory: ${{ github.workspace }}
+        shell: bash
+        env:
+          SOURCE_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+        run: |
+          set -euo pipefail
+          test "$(git rev-parse HEAD)" = "${SOURCE_SHA}"
+          printf 'SOURCE_SHA=%s\n' "${SOURCE_SHA}"
+
+      - name: Audit committed rule references
+        working-directory: ${{ github.workspace }}
+        shell: bash
+        env:
+          PYTHONPATH: .
+          PYTHONDONTWRITEBYTECODE: "1"
+        run: |
+          set -euo pipefail
+          python3 -m skills.directives_audit.rules_cli audit . --json > "${RUNNER_TEMP}/rules-audit.json"
+          cat "${RUNNER_TEMP}/rules-audit.json"
+          python3 - "${RUNNER_TEMP}/rules-audit.json" <<'PY'
+          import json, sys
+          with open(sys.argv[1], encoding="utf-8") as stream:
+              report = json.load(stream)
+          summary = report["summary"]
+          if (report["schema"] != "botte.rules-audit/v1"
+                  or report["manifest_present"] is not True
+                  or summary["rules"] < 1
+                  or summary["errors"] != 0 or summary["warnings"] != 0):
+              raise SystemExit("BLOCKED/DRIFT: rule audit needs a present, nonempty, clean contract")
+          PY
 
       - name: Set up Node.js 22
         uses: actions/setup-node@v4