fix: bind skill reviews to mother and team roots

This commit is contained in:
冰朔 2026-09-08 14:21:16 +08:00
commit b9e4938a0f
5 changed files with 31 additions and 13 deletions

View file

@ -2,7 +2,7 @@ schema: tcs.module-lock/v1
module_id: TCS-AGENT-SANITIZED-MIRROR-001
module_source_sha256: 1210b30c7dabc56b8b989763230a3cf56c0fe02a3b409be5f3833dee9853d771
module_gir_sha256: 0e7b1bbd5f3f8dbc83df6c72e4a1e0532b6f44beed21c8c8315f85cc76096712
runtime_sha256: 4b396550a144fa83614e340a34d087a96e2fb3e18045dabc801150f63b93c211
runtime_sha256: 155e3fc332a4474593ca095b7ac03e9baf65fbcaaf3d40e393a1419444ec5c8b
mirror_map_sha256: a03b5ba9e06f5fd3f626301305d75add0332ae06948a67c8bcd03c3cab248fe1
protocol_source_sha256: cf198e7939e4ab70828b74cef8a2b84c2dac2ff262582bb3d5663904d602d71b
protocol_gir_sha256: 69f1a2a5cfc5ee61bdc2bf2065751d9cc41b9f662b28c35e61b393fd2187e1dc

View file

@ -1,7 +1,7 @@
schema: tcs.module-self-test-receipt/v1
module_id: TCS-AGENT-SANITIZED-MIRROR-001
result: PASS
tests: 7/7
tests: 8/8
verified:
- committed architecture projection contains no private absolute path
- missing persona share decision creates no candidate
@ -9,6 +9,7 @@ verified:
- sanitization produces quarantine only and never publication
- mother acceptance is required before team review
- both reviews bind the exact candidate hash and use independent reviewers
- review commands cannot replace the registered mother or team authority root
- replay with changed content and review hash drift are rejected
repository_regression: node --test 483/483 PASS
tcs_root_regression: 5/5 PASS