diff --git a/README.md b/README.md
index 6db14b1..b9bf3d9 100644
--- a/README.md
+++ b/README.md
@@ -65,8 +65,8 @@ Entity / relation / content records can be traced in the parallel `provenance` s
 </td>
 <td width="33%" valign="top">
 
-### 🧪 Lossless by construction
-`__fromPack(pack)` must deep-equal the engine's embedded defaults — extraction bugs surface as path-level diffs, not production surprises.
+### 🧪 Scoped equivalence by construction
+Every extracted literal must be mapped to `__fromPack(pack)` or explicitly ignored with evidence. The configured surface deep-equals engine defaults; runtime/visual behavior needs separate evidence.
 
 </td>
 <td width="33%" valign="top">
@@ -97,8 +97,8 @@ and how entities reference each other.
 
 ### 02 · Extract — normalize without losing a byte
 
-The CLI slices default-data literals straight from the engine source with acorn,
-then your config's `buildPack()` normalizes them: entities get stable slug IDs,
+The CLI slices default-data literals straight from the engine source with acorn as a
+**bootstrap baseline**, then your config's `buildPack()` normalizes them: entities get stable slug IDs,
 crawled names become `aliases`, per-stage duplicated copies collapse into
 `{a,b}` references, and prose lifts out of templates into `contents`.
 
@@ -121,8 +121,8 @@ an asset manifest with sha1, entity-identity `sameAs`, and record-level
 
 `SGDataLoader` checks **E1–E16** on mount (dangling refs, illegal enums,
 coordinate range, asset registration, scope disambiguation, derivation paths…) and reports
-**W1–W8** honestly. The equivalence test proves `__fromPack(pack)` deep-equals
-the engine defaults; `--verify-hash` catches replaced assets.
+**W1–W8** honestly. Equivalence proves only the configured literal mappings; coverage is explicit.
+`--compare-existing` catches output drift and `--verify-hash` catches replaced assets.
 
 <br clear="all"/>
 
@@ -157,6 +157,24 @@ The human output is deliberately fixed to five sections: **发现的问题**, **
 **验证范围**, **剩余风险**, and **下一步**. The JSON and Markdown files are projections of the
 same RunReport object, so counts and conclusions cannot drift between CI and developer views.
 
+### 07 · Agent evaluation — test modifications, not just data
+
+The next layer asks a stricter question: can an AI use these contracts to make a correct component-
+library change? An `AgentTaskManifest` binds instructions, source/input trees, allowed/forbidden
+files, patch limits, grader bytes and runtime/visual evidence requirements. “Hidden” means omitted from the prompt and candidate workspace, not secret from a malicious host process without an OS sandbox. The agent emits a patch only; the runner applies it in a disposable workspace, rechecks the complete tree diff (including `.git/**`), runs task-specific graders from digest-verified per-trial staging copies, and records every artifact digest in TaskRun.
+
+```text
+AgentTaskManifest
+  → patch-only agent
+  → preflight + exact apply + postflight file policy
+  → Data Pack / hidden / command graders
+  → runtime + visual evidence
+  → TaskRun → repeated ExperimentReport
+```
+
+`research/agent-eval/` contains a three-task benchmark and scripted/real-provider experiment specs.
+A scripted run proves the harness only. A real-provider success rate is reported with its valid trial denominator, Wilson 95% interval, actual provider model metadata, tokens, cost, and failure taxonomy. Candidate timeout/crash/evidence failure and post-agent integrity drift remain valid failures; only verified pre-subject infrastructure failures are excluded. It is not generalized into a claim about arbitrary production libraries. TaskRun explicitly records that the portable runner has no OS, network, process, or malicious-agent grader-secrecy sandbox.
+
 ---
 
 ## Quick Start
@@ -177,10 +195,12 @@ ln -s "$PWD/sg-data-pack" ~/.claude/skills/sg-data-pack   # Claude Code
 ```bash
 SK=~/.zcode/skills/sg-data-pack/scripts/sg-data-pack
 
-node "$SK" extract <path/to/config.js>          # extract + validate + equivalence test
-node "$SK" extract <path/to/config.js> --check  # validate only (regression)
-node "$SK" validate <data.json> --strict --verify-hash
-node "$SK" rules <libDir> [--strict]
+node "$SK" extract <path/to/config.js>                 # bootstrap from source literals; refuses divergent existing data.json
+node "$SK" extract <path/to/config.js> --check         # source-equivalence only; does not read current data.json
+node "$SK" extract <path/to/config.js> --compare-existing  # compare fresh pack with current data.json
+node "$SK" compile <data.json> [--domain-schema fragment.json] [--check]  # reviewed data.json -> data.js + schema; explicit custom domain contract
+node "$SK" validate <data.json> --strict --verify-hash [--asset-root dir]
+node "$SK" rules <libDir> [--strict] [--rule id]
 node "$SK" diff <old.json> <new.json> [--json]
 node "$SK" templatize <instances.json> [--out dir]
 node "$SK" alias-candidates <data.json> <names.json|txt>
@@ -192,6 +212,11 @@ node "$SK" report <libDir> [--config extract.config.js] [--baseline old-data.jso
   [--review review-report.json] [--audit candidate-audit.json] [--strict] \
   [--verify-hash] [--out report/] [--json]
 node "$SK" types <data.json> [--out data-types.d.ts] [--name PackName]
+node "$SK" task validate <task.json> [--json]
+node "$SK" task run <task.json> --agent-command <exe> --agent-arg '<arg>' --artifacts <dir> [--json]
+node "$SK" grade <grader.json> <workspace> [--artifacts dir] [--json]
+node "$SK" evidence <runtime|visual> <evidence.json> [--json]
+node "$SK" experiment <experiment.json> --out <dir> [--json]
 node "$SK" loader    # print runtime-validator path (copy into a library's lib/src/)
 node "$SK" schema    # print contract-schema path
 ```
@@ -203,16 +228,20 @@ node "$SK" schema    # print contract-schema path
 ### Recommended product workflow
 
 ```bash
-# 1. Create or refresh the canonical pack
+# 1. Bootstrap the canonical pack once; later detect, do not overwrite, reviewed evolution
 node "$SK" extract path/to/extract.config.js
+node "$SK" extract path/to/extract.config.js --compare-existing
 
-# 2. Produce one human + CI hand-off
+# 2. After reviewing/editing data.json, regenerate browser/schema artifacts from that canonical source
+node "$SK" compile path/to/library/lib/data/data.json
+
+# 3. Produce one human + CI hand-off
 node "$SK" report path/to/library \
   --config path/to/extract.config.js \
   --verify-hash \
   --out report/
 
-# 3. For evolution or recrawl work, bind the related evidence
+# 4. For evolution or recrawl work, bind the related evidence
 node "$SK" report path/to/library \
   --baseline old-data.json \
   --review review/review-report.json \
@@ -310,6 +339,12 @@ Full contract: [`references/data-pack-contract.md`](references/data-pack-contrac
 | [`references/data-pack-contract.md`](references/data-pack-contract.md) | Data Pack v1.3 field-level contract |
 | [`references/review-candidate-contract.md`](references/review-candidate-contract.md) | Candidate-ready recrawl reports, explicit decisions, and audit contract |
 | [`references/run-report-contract.md`](references/run-report-contract.md) | Unified Library Evolution Report, coverage, risks, and exit codes |
+| [`references/agent-task-contract.md`](references/agent-task-contract.md) | Content-bound task, source/input, file-policy and grader contract |
+| [`references/patch-execution-contract.md`](references/patch-execution-contract.md) | Patch-only execution, postflight file enforcement and PatchAudit |
+| [`references/grader-contract.md`](references/grader-contract.md) | Task-specific checks, score and GradeReport |
+| [`references/task-run-contract.md`](references/task-run-contract.md) | One agent execution and artifact audit |
+| [`references/runtime-visual-evidence-contract.md`](references/runtime-visual-evidence-contract.md) | Runtime/visual producer evidence and recomputed gates |
+| [`references/agent-experiment-contract.md`](references/agent-experiment-contract.md) | Repeated TaskRuns, success rate, Wilson interval and failure taxonomy |
 | [`references/extraction-config.md`](references/extraction-config.md) | Config guide + three real-world patterns |
 | [`references/engine-integration.md`](references/engine-integration.md) | Engine-patch standard template |
 | [`assets/extract.config.template.js`](assets/extract.config.template.js) | Annotated config template for a new library |
@@ -323,7 +358,13 @@ the TypeScript generator, and cross-artifact version consistency:
 node --test tests/*.test.js
 ```
 
-The same suite runs in CI via `.github/workflows/smoke.yml`. Three reproducible v1.3 synthetic pilots and their machine-readable result live under `research/`; rerun them with `node research/run-v1.3-pilots.js`. The suite also contains a hermetic real-engine integration fixture for the Qinshihuang event graph at `tests/fixtures/integration/qinshihuang-0716-ts/`, covering external HTML JSON extraction, deep equivalence, committed asset baselines plus tamper detection, library rules, generated types, and real derivation impact.
+The same suite runs in CI via `.github/workflows/smoke.yml`. Three reproducible v1.3 synthetic pilots and their machine-readable result live under `research/`; rerun them with `node research/run-v1.3-pilots.js`. The suite also contains a hermetic real-engine integration fixture for the Qinshihuang event graph at `tests/fixtures/integration/qinshihuang-0716-ts/`, covering external HTML JSON extraction, configured equivalence, committed asset baselines plus tamper detection, library rules, generated types, and real derivation impact.
+
+Agent evaluation fixtures live under `research/agent-eval/`: three content-bound tasks, hidden graders,
+patch-only providers, a real headless-Chrome/Pillow evidence producer, and scripted/AI experiment specs.
+Regenerate their task/experiment ids with `node research/agent-eval/build-fixtures.js`. Committed result
+reports state their narrow benchmark scope and preserve failures rather than presenting a green test
+suite as proof of general AI capability.
 
 ## License
 
diff --git a/SKILL.md b/SKILL.md
index a1c8d01..c371695 100644
--- a/SKILL.md
+++ b/SKILL.md
@@ -20,10 +20,12 @@ A Data Pack is the **single entry point** for a component library's business dat
 ```bash
 SK=~/.zcode/skills/sg-data-pack/scripts/sg-data-pack   # or the codex/claude install path
 
-node "$SK" extract <path/to/xxx.config.js>          # extract + validate + equivalence test; writes lib/data/{data.json,data.js,data.schema.json}
-node "$SK" extract <path/to/xxx.config.js> --check  # validate + equivalence only (no writes)
-node "$SK" validate <data.json> [--strict] [--verify-hash]  # standalone validation (--verify-hash detects replaced assets)
-node "$SK" rules <libDir> [--strict]                      # execute library-level data rules (data-rules.json)
+node "$SK" extract <path/to/xxx.config.js>          # bootstrap from source literals; divergent existing data.json requires --force
+node "$SK" extract <path/to/xxx.config.js> --check  # source-equivalence only; does not read current data.json
+node "$SK" extract <path/to/xxx.config.js> --compare-existing  # fresh in-memory pack vs current data.json
+node "$SK" compile <data.json> [--domain-schema fragment.json] [--check]  # preserve explicit custom domain schema
+node "$SK" validate <data.json> [--strict] [--verify-hash] [--asset-root dir]
+node "$SK" rules <libDir> [--strict] [--rule id]      # execute all or one library rule
 node "$SK" diff <old.json> <new.json> [--json]            # structural diff between two packs (evolution / recrawl review)
 node "$SK" templatize <instances.json> [--out dir]        # derive item template from repeated HTML instances (collection pages)
 node "$SK" alias-candidates <data.json> <names.json|txt>     # rank unresolved crawled names
@@ -31,6 +33,11 @@ node "$SK" recrawl-skeleton <data.json> <records.json> [--out dir]  # generate c
 node "$SK" data-surface-import <ui-dismantler-manifest.json> [--out report.json] [--allow-review-required]  # read-only interface handoff; never generate a Data Pack
 node "$SK" candidate <data.json> <review-report.json> <decisions.json> --records <records.json> --out <candidate.json>  # apply explicit Review Decisions
 node "$SK" report <libDir> [--config config.js] [--baseline old.json] [--review review-report.json] [--audit candidate-audit.json] [--strict] [--verify-hash] [--out report/] [--json]  # unified user-facing report
+node "$SK" task validate <task.json> [--json]              # validate source/input/grader-bound AgentTaskManifest
+node "$SK" task run <task.json> --agent-command <exe> --agent-arg '<arg>' --artifacts <dir> [--json]  # patch-only disposable TaskRun
+node "$SK" grade <grader.json> <workspace> [--artifacts dir] [--json]
+node "$SK" evidence <runtime|visual> <evidence.json> [--json]
+node "$SK" experiment <experiment.json> --out <dir> [--json]
 node "$SK" types <data.json> [--out file.d.ts] [--name N]   # generate TypeScript declarations
 node "$SK" loader    # print runtime-validator path (copy into the library's lib/src/)
 node "$SK" schema    # print contract schema path
@@ -84,9 +91,10 @@ cp "$(node "$SK" loader)" <lib>/lib/src/sg-data-loader.js
 node "$SK" extract <config>          # must be fully green: 0 validation errors, equivalence passed
 ```
 
-The equivalence test is the **losslessness guarantee**: `__fromPack(pack)` must deep-equal the
-embedded defaults. Common failure causes: missing fields in fromPack / key-order changes /
-undeduplicated duplicates — fix item by item using the reported diff paths.
+The equivalence test is a **configured-surface guarantee**: every extracted literal must map to an
+own field returned by `__fromPack(pack)` or be explicitly ignored with an evidence-backed reason.
+It does not validate the current disk `data.json`, DOM mount, renderer constants, or pixels. Use
+`--compare-existing`, TaskRun runtime evidence, and visual evidence for those independent claims.
 
 ### 5. Integrate + regress
 
@@ -128,6 +136,24 @@ remaining risks, and next steps. Use `--json` for CI; JSON stdout contains only
 `NOT_ASSESSED` means no evidence was supplied, never “passed”. The report is read-only and binds
 consumed inputs by SHA-256. Full field and exit-code semantics are in `references/run-report-contract.md`.
 
+### 8. Evaluate an AI modification under contract
+
+Use an AgentTaskManifest only after the Data Pack, file policy, hidden grader and required runtime/
+visual scenarios are explicit. “Hidden” means absent from the prompt/workspace, not secret from an unsandboxed malicious local process. The agent must emit a unified diff; it must not edit source or the disposable workspace directly. TaskRun rechecks the complete tree including `.git/**`, revalidates task/adapter/grader/tool digests across stages, grades from per-trial verified staging copies, and preserves PatchAudit, GradeReport and evidence artifacts. Missing OS/filesystem/network/process isolation remains visible.
+
+```bash
+node "$SK" task validate path/to/task.json
+node "$SK" task run path/to/task.json --agent-command <provider-wrapper> \
+  --agent-arg '{workspace}' --agent-arg '{patch}' --agent-arg '{prompt}' \
+  --artifacts /tmp/task-run
+node "$SK" experiment research/agent-eval/experiment-claude.json --out /tmp/agent-experiment
+```
+
+Never treat a scripted provider as AI evidence. Never exclude invalid/infra trials silently. Report
+valid denominator, Wilson interval, actual provider model metadata, token/cost evidence, failure
+taxonomy, and which task subset had runtime/visual evidence. See the agent-task, patch-execution,
+grader, task-run, runtime/visual, and agent-experiment contracts in `references/`.
+
 ## Rule Cheat Sheet (enforced by the validator)
 
 | Rule | Meaning |
@@ -158,6 +184,12 @@ Crawl output may only consist of: `data.json` + `assets/` + the alias table. Req
 - `references/data-surface-manifest-import.md` — read-only Data Surface Manifest handoff and review gate
 - `references/review-candidate-contract.md` — candidate-ready reports, explicit decisions, and audit sidecars
 - `references/run-report-contract.md` — unified Library Evolution Report, coverage, risks, and exit codes
+- `references/agent-task-contract.md` — content-bound task/source/input/file/grader manifest
+- `references/patch-execution-contract.md` — patch-only application, file policy, PatchAudit and capability limits
+- `references/grader-contract.md` — task-specific checks, score and GradeReport
+- `references/task-run-contract.md` — one agent execution and all artifact digests
+- `references/runtime-visual-evidence-contract.md` — runtime/visual evidence and recomputed gates
+- `references/agent-experiment-contract.md` — repetitions, success rate, Wilson interval and failure taxonomy
 - `references/extraction-config.md` — extraction-config guide with three typical patterns
 - `references/engine-integration.md` — engine-patch standard template (copy-paste grade)
 - `references/data-rules-guide.md` — library-level feature rules: format, check convention, evidence discipline
diff --git a/assets/extract.config.template.js b/assets/extract.config.template.js
index 9709b26..9902fe2 100644
--- a/assets/extract.config.template.js
+++ b/assets/extract.config.template.js
@@ -14,8 +14,9 @@ module.exports = {
   libDir: LIB_DIR,
   engineFile: 'lib/src/your-lib.js',
   globalName: 'YourLibrary', // engine global name (global.X = {mount, create})
+  assetDir: 'lib/assets',    // physical asset root relative to libDir; independent from meta.assetBase
 
-  // Default-data literal slicing (losslessness baseline). Pattern match end = expression start.
+  // Default-data literal slicing (equivalence baseline). Pattern match end = expression start.
   literals: [
     { key: 'chars', pattern: /var chars = \(options && options\.chars\) \|\|/, ctx: { IMG: '../assets/' } },
     // { key: 'edges', pattern: /var edges = \(options && options\.edges\) \|\|/ },
@@ -81,11 +82,13 @@ module.exports = {
     return pack;
   },
 
-  // Losslessness check: fromPack(pack)[from] deep-equals defaults[lit]
+  // Configured equivalence check: fromPack(pack)[from] deep-equals defaults[lit]
   equivalence: [
     { lit: 'chars', from: 'chars' },
     // { lit: 'edges', from: 'allEdges' },
   ],
+  // Every literal must be mapped above or explicitly ignored with an evidence-backed reason:
+  // equivalenceIgnore: [{ lit: 'rendererDefaults', reason: 'Renderer-only; covered by visual regression VR-1' }],
 
   // sortKeys: { edges: (x, y) => edgeKey(x).localeCompare(edgeKey(y)) },
 
diff --git a/references/agent-experiment-contract.md b/references/agent-experiment-contract.md
new file mode 100644
index 0000000..fd4b141
--- /dev/null
+++ b/references/agent-experiment-contract.md
@@ -0,0 +1,24 @@
+# Agent success-rate ExperimentSpec and ExperimentReport v1.0
+
+An experiment runs a fixed task set repeatedly from fresh immutable baselines:
+
+```bash
+node scripts/sg-data-pack experiment research/agent-eval/experiment-claude.json \
+  --out /tmp/sg-agent-experiment
+```
+
+`ExperimentSpec` binds agent kind/provider/model label, argv, the actual adapter path and byte digest, ordered task manifest paths/taskIds/manifest digests, repetitions and seed through `experimentId`. Each task × repetition receives a new disposable workspace and its own TaskRun artifact directory. The experiment rechecks spec, adapter, task manifest/taskId, source, grader bundle, and tool integrity before/after every trial rather than trusting one initialization check.
+
+The report preserves:
+
+- total, valid, invalid and infrastructure-error trial counts;
+- pass rate over valid trials and Wilson 95% interval;
+- stage rates for agent completion, patch apply, file-policy compliance, graders, runtime and visual;
+- verdict failure taxonomy;
+- mean/median duration;
+- provider-reported actual models, input/output/cache tokens and cost;
+- a reference to every TaskRun.
+
+Invalid input and pre-subject infrastructure failures are reported separately rather than silently removed or counted as AI task failures. Candidate timeout/crash/evidence failure and any post-agent integrity drift remain valid failures. A simultaneous candidate failure takes precedence over infra so a failing trial cannot disappear from the denominator. Runtime/visual denominators include every valid trial whose task declares those checks, including patch/policy/grader precondition failures that never reached evidence collection.
+
+A scripted provider proves the harness only (`harness-only`). A real AI provider can support an initial task-contract claim, but a small synthetic benchmark is not evidence of general component library autonomy. `ai-task-contract-not-demonstrated` means no valid AI trial passed. `ai-static-contract-only` means at least one valid AI trial passed but required runtime/visual coverage was not fully successful. `ai-task-contract-with-runtime-visual-subset` means at least one valid trial passed and every valid trial in the declared browser-evidence subset passed its runtime/visual checks; it is deliberately narrower than a claim about arbitrary production libraries.
diff --git a/references/agent-task-contract.md b/references/agent-task-contract.md
new file mode 100644
index 0000000..7d05863
--- /dev/null
+++ b/references/agent-task-contract.md
@@ -0,0 +1,94 @@
+# AgentTaskManifest v1 contract
+
+`AgentTaskManifest` is a declarative, content-addressed description of one agent task. The machine-readable contract is [`scripts/lib/agent-task.schema.json`](../scripts/lib/agent-task.schema.json); the read-only implementation is [`scripts/lib/agent-task-manifest.js`](../scripts/lib/agent-task-manifest.js).
+
+The current version is exactly `taskVersion: "1.0"`. The validator fails closed: unknown fields, malformed paths, missing digests, duplicate identifiers/patterns, and resource-policy violations are errors, not warnings.
+
+## Shape
+
+A manifest has exactly these top-level fields:
+
+- `taskVersion`: `"1.0"`;
+- `taskId`: `sha256:<64 lowercase hex>`;
+- `instructions`: `{ text, sha256 }`, where `sha256` hashes the UTF-8 bytes of `text`;
+- `source`: `{ root, revision, treeSha256 }`;
+- `inputs`: entries `{ id, path, role, sha256 }`;
+- `filePolicy`: `allowed` rules, `forbidden` patterns, `denyPrecedence: true`, `allowSymlinks: false`, `allowHardlinks: false`, `maxChangedFiles`, and `maxPatchBytes`;
+- `patchPolicy`: `{ format: "unified-diff", fuzz: 0, allowBinary: false }`;
+- `graders`: entries `{ id, spec, sha256, treeSha256, weight }`; the spec bytes and complete hidden grader/reference directory are content-bound;
+- `evidence`: `{ runtime: [], visual: [] }` arrays (their contents are evidence descriptors owned by the caller);
+- `execution`: `{ timeoutMs, network: "off", maxOutputBytes }`.
+
+`id` values are unique within their respective arrays (`inputs` and `graders`). `filePolicy.allowed[].pattern` and `filePolicy.forbidden[]` do not repeat. `allowed[].operations` contains one or more distinct operations from `add`, `modify`, and `delete`. A forbidden match wins over an allowed match because `denyPrecedence` is mandatory `true`.
+
+All digest fields use the repository-wide prefixed form `sha256:<hex>`. `sha256` means SHA-256 over bytes, not a hexadecimal string that has first been re-encoded.
+
+## Canonical JSON and task ID
+
+Canonical JSON is compact `JSON.stringify` output after recursively sorting keys of every JSON object. Array order is preserved. There is no trailing newline, whitespace normalization, number conversion, or array sorting. The canonical material for the task ID is the complete manifest with the `taskId` property removed. Therefore:
+
+```text
+taskId = sha256(UTF-8(canonicalJson(manifest without taskId)))
+```
+
+`computeTaskId(manifest)` implements this rule. It is useful when authoring a manifest, but `validateTaskManifest` still checks that the supplied ID is present and matches; computing a new ID does not make an otherwise invalid manifest valid.
+
+The implementation also exposes `canonicalJson`, `canonicalize`, `sha256`, and `computeTreeSha256` for producers and tests. These functions do not write files.
+
+## Path rules and resolution
+
+Manifest paths are POSIX-style, relative, non-empty paths. Concrete `source.root` and `inputs[].path` values are not globs; only the `filePolicy` pattern fields may contain glob metacharacters. They must not contain:
+
+- a leading `/` or a Windows drive prefix such as `C:`;
+- a backslash (`\\`), NUL, or empty path components (`//`);
+- `.` or `..` path components (the source root may be `"."` to mean its task-file directory, but other dot components are rejected).
+
+`source.root` is relative to the **task file's directory** when `taskFile` is supplied. `inputs[].path`, `filePolicy.allowed[].pattern`, and `filePolicy.forbidden[]` are relative to the resolved source root. Thus for `tasks/foo/task.json` and `source.root: "../../project"`, an input `src/a.js` means `../../project/src/a.js` from the task file directory. The path is resolved and must remain within that source root when files or the tree are verified.
+
+For direct programmatic validation, `sourceRoot` may be supplied. It must be the already resolved source-root directory and must equal the resolution of `source.root` if `taskFile` is also supplied. `taskFile` takes precedence for resolving `source.root`; `sourceRoot` is then a consistency check. `readTaskManifest(file)` always passes the manifest file as `taskFile`.
+
+A path is never resolved relative to the process working directory merely because the manifest omits `taskFile`. This avoids making a manifest's meaning depend on the caller's current directory.
+
+## Source and file verification
+
+`source.revision` is the producer's immutable source revision identifier (for example, a commit or checkout label). The v1 helper treats it as an opaque non-empty string; it does not invoke Git.
+
+`source.treeSha256` binds a deterministic filesystem-tree description. `computeTreeSha256(root)` walks the complete tree read-only, sorts names by their UTF-8 bytes, and hashes canonical JSON entries. Entries bind path, kind, mode, and regular-file bytes; security snapshots include `.git/**` rather than applying reporting excludes. Symlinks and hardlinks are rejected by default, matching the manifest policy. The tree helper can explicitly opt into them for independent tooling, but a v1 manifest cannot: `allowSymlinks` and `allowHardlinks` must remain false.
+
+- `validateTaskManifest(manifest, { verifyFiles: true, taskFile, sourceRoot })` reads each input and compares its byte digest. It rejects missing files, non-regular files, symlinks, hardlinks, and files outside the source root.
+- `validateTaskManifest(manifest, { verifyTree: true, taskFile, sourceRoot })` computes and compares `source.treeSha256` and applies the same link policy to every tree entry.
+- These checks are opt-in because the pure shape/identity validation does not need filesystem access. All checks are read-only.
+
+## Resource and patch gates
+
+The implementation applies finite bounds in addition to non-negative/integer checks:
+
+- `execution.timeoutMs`: `1..86400000` (24 hours);
+- `execution.maxOutputBytes`: `1..1073741824` (1 GiB);
+- `filePolicy.maxChangedFiles`: `0..1000000`;
+- `filePolicy.maxPatchBytes`: `0..1073741824` (1 GiB).
+
+The task requests offline candidate/grader execution. Only unified diffs with zero fuzz and no binary patch content are accepted. The portable v1 runner enforces patch and filesystem postconditions, rechecks immutable task/grader/tool bindings after untrusted stages, and runs candidate extraction code in a killable child worker. It does **not** claim OS-level filesystem, network, or process isolation; TaskRun records those capabilities as false. In particular, “hidden grader” means omitted from the agent prompt and disposable candidate workspace, not cryptographically unreadable to a malicious local process on an unsandboxed host. A remote AI provider is an external control-plane dependency and is reported separately from candidate execution.
+
+## API
+
+```js
+const {
+  validateTaskManifest,
+  computeTaskId,
+  readTaskManifest,
+} = require('../scripts/lib/agent-task-manifest.js');
+
+const result = validateTaskManifest(manifest, {
+  taskFile: '/absolute/path/to/task.json',
+  sourceRoot: '/absolute/path/to/source',
+  verifyFiles: true,
+  verifyTree: true,
+});
+// { valid, issues: [{ path, message }], expectedTaskId, sourceRoot, ... }
+
+const taskId = computeTaskId(manifest);
+const loaded = readTaskManifest('/absolute/path/to/task.json'); // throws on invalid JSON/manifest
+```
+
+`readTaskManifest` parses one JSON file and returns the parsed manifest. It never rewrites, normalizes, or updates it. Invalid input throws an error with code `INVALID_AGENT_TASK_MANIFEST` and structured `issues`; unreadable or malformed JSON throws `AGENT_TASK_MANIFEST_READ_ERROR`.
diff --git a/references/data-rules-guide.md b/references/data-rules-guide.md
index 096702d..eb48ddb 100644
--- a/references/data-rules-guide.md
+++ b/references/data-rules-guide.md
@@ -6,8 +6,10 @@ rules from the pack + engine + assets. Two artifacts, both living in `lib/data/`
 - `data-rules.json` — structured rules (machine-executable / machine-searchable)
 - `DATA-GUIDE.md` — human contributor guide generated from the rules
 
-Validate any rules file with: `node scripts/sg-data-pack rules <libDir> [--strict]`
-(hard-rule failures exit 1; soft failures are warnings unless --strict).
+Validate any rules file with: `node scripts/sg-data-pack rules <libDir> [--strict] [--rule <id>]`
+(hard-rule failures exit 1; soft failures are warnings unless --strict). `--rule <id>` selects one
+known rule after the complete rules document has been structurally validated; unknown or repeated
+options/ids are usage errors (exit 2).
 
 ## data-rules.json Format (rulesVersion 1.0)
 
@@ -29,7 +31,7 @@ Validate any rules file with: `node scripts/sg-data-pack rules <libDir> [--stric
     {
       "id": "<lib-prefix>-<kebab-case>",     // e.g. sdd-hero-big-exclusive
       "level": "hard | soft",
-      "subject": "anchor path, e.g. entities.*.avatar / stages.*.entities / assets.*",
+      "subject": "human locator string, e.g. entities.*.avatar / stages.*.entities / assets.*",
       "rule": "the rule text (concrete, actionable; no vague words like 'try to' / 'appropriate')",
       "rationale": "why — cite rendering logic or data evidence",
       "evidence": "measured evidence, e.g. '15/15 avatars are .png; 5 sampled at 160px width'",
@@ -42,12 +44,18 @@ Validate any rules file with: `node scripts/sg-data-pack rules <libDir> [--stric
 }
 ```
 
-## check Expression Convention (hard requirement)
+## subject, scope, and check conventions (hard requirement)
 
-- `check` is a **JS expression string**, evaluated with pack sections in scope:
+- `subject` is an **unparsed human locator string**. It tells a contributor where to look (for
+  example `entities.*.avatar` or `stages.*.entities`); the evaluator does not resolve it,
+  interpret wildcards, or use it to select records.
+- `check` is a **JavaScript expression string**, evaluated with pack sections in scope:
   `entities / relations / stages / contents / domain / assets / aliases / relationTypes /
-   attributeTypes / kindNameFields / meta / sameAs / provenance / pack`
-- Must evaluate to a truthy/falsy value. If you cannot write an executable expression, use `null`.
+   heroRelTypes / attributeTypes / attributeSources / kindNameFields / meta / sameAs /
+   provenance / derivations / pack`.
+  This scope must stay synchronized with the executor whenever a pack root becomes available
+  to rules. In particular, `heroRelTypes`, `attributeSources`, and `derivations` are supported.
+- The expression must evaluate to a truthy/falsy value. If you cannot write an executable expression, use `null`.
 - **Pseudo-DSL is forbidden** (`all(entities.*, e -> ...)` does not run). Write real JS:
   `Object.values(entities).every(e => ...)`
 - After writing, **evaluate every check against the real data.json with node — all must pass**.
diff --git a/references/data-surface-consumer-profile.md b/references/data-surface-consumer-profile.md
new file mode 100644
index 0000000..b4ba0d8
--- /dev/null
+++ b/references/data-surface-consumer-profile.md
@@ -0,0 +1,17 @@
+# Data Surface consumer profile
+
+This file is a **local consumer profile**, not the upstream Data Surface Manifest schema. The `ui-dismantler` producer contract remains authoritative. The profile records the minimum boundary checks performed by `sg-data-pack`; it must not be copied upstream or used to generate a Data Pack.
+
+## Import boundary
+
+The importer accepts a Manifest with `schemaVersion: "1.0"`, `kind: "data-surface-manifest"`, producer identity hashes, library metadata, surfaces, unresolved/review state, and metrics. A surface describes an interface evidence boundary: owner, source, shape, fields, consumers, injection, references, unresolved notices, and optional evidence.
+
+`surface.reviewRequired`, when supplied, is strictly a JSON boolean. The top-level `reviewRequired` is required and is also strictly boolean. Raw static business values are rejected.
+
+## Data Pack separation
+
+No Data Pack v1.3 root section may appear in a handoff. This includes `meta`, `kindNameFields`, `sameAs`, `provenance`, `entities`, `aliases`, `relationTypes`, `heroRelTypes`, `relations`, `stages`, `attributeTypes`, `attributeSources`, `contents`, `domain`, `assets`, and `derivations`; the legacy `adapters` field is rejected as well. This is a consumer-side boundary guard, not a replacement for the producer schema.
+
+## Evidence and digest
+
+The importer preserves each surface's evidence in the audit report. `source.digest` is SHA-256 over the complete Manifest after recursively sorting object keys while retaining array order. Therefore any evidence, review, unresolved, metric, identity, owner, or field change changes the digest; object key ordering alone does not.
diff --git a/references/data-surface-manifest-import.md b/references/data-surface-manifest-import.md
index effacfa..6f2623c 100644
--- a/references/data-surface-manifest-import.md
+++ b/references/data-surface-manifest-import.md
@@ -1,6 +1,6 @@
 # Data Surface Manifest import
 
-`ui-dismantler` owns the Data Surface Manifest contract. `sg-data-pack` consumes it read-only as a component-data handoff; it does not copy the contract schema or reinterpret a Manifest as a Data Pack.
+`ui-dismantler` owns the Data Surface Manifest contract. `sg-data-pack` consumes it read-only as a component-data handoff; it does not copy the contract schema or reinterpret a Manifest as a Data Pack. The local [consumer profile](data-surface-consumer-profile.md) describes only the checks this importer needs and is **not** an authoritative upstream schema. When the profile and the producer contract differ, the `ui-dismantler` contract is authoritative and this consumer must be updated deliberately.
 
 ```bash
 node scripts/sg-data-pack data-surface-import <manifest.json> \
@@ -17,6 +17,8 @@ The importer accepts only interface evidence:
 - injection and reference boundaries;
 - unresolved and review state.
 
-It rejects raw static values and top-level Data Pack fields such as `entities`, `aliases`, `relations`, `stages`, `contents`, or `adapters`.
+It rejects raw static values and every Data Pack v1.3-only root section (`meta`, `kindNameFields`, `sameAs`, `provenance`, `entities`, `aliases`, relation registries/edges, stages, attribute registries/sources, `contents`, `domain`, `assets`, and `derivations`), plus the legacy `adapters` field. `surface.reviewRequired`, when present, must be an actual JSON boolean; strings and numeric stand-ins are invalid.
 
-Import output is a `data-surface-import-report` with an explicit `dataPackGenerationAllowed` gate. Business entity modeling starts only after the report is `ready`; a review-required report remains evidence, not a generation input.
+Import output is a `data-surface-import-report` with an explicit `dataPackGenerationAllowed` gate. Business entity modeling starts only after the report is `ready`; a review-required report remains evidence, not a generation input. Each surface's `evidence` is preserved, and `source.digest` is the SHA-256 of the complete canonical Manifest (recursively key-sorted JSON), not a projection of selected identity or metrics fields.
+
+The CLI rejects unknown or repeated options. `--out` may not resolve to the input Manifest through an identical canonical path, symlink, or inode/hardlink, and report replacement uses a same-directory temporary file followed by an atomic rename.
diff --git a/references/engine-integration.md b/references/engine-integration.md
index 159c32c..5d70a63 100644
--- a/references/engine-integration.md
+++ b/references/engine-integration.md
@@ -5,7 +5,11 @@ must be byte-identical when `options.data` is absent**.
 Technique: convert the pack into the legacy options shape, reusing the existing
 `(options && options.x) || defaults` paths.
 
-## Standard Patch (3 spots)
+## Integration Shell (3 spots)
+
+The injection shell is universal; the body of `__fromPack` is an adapter for the library's legacy
+shape. The first example below is the **entity-graph adapter**, not a mandatory Data Pack shape.
+Plain collections and DOM JSON-script pages should use the dedicated adapters later in this guide.
 
 ### ① Insert at the top of the engine IIFE (before mount)
 
@@ -98,6 +102,68 @@ var heroRel = (options && options.heroRel) || { ... };
 global.MyLib = { mount: mount, create: create, __fromPack: __fromPack };
 ```
 
+## Pattern C: DOM JSON-script adapter
+
+When the legacy data is the whole options payload in a DOM JSON script, preserve that parse path as
+the no-pack fallback and make the injected path additive:
+
+```js
+function __fromPack(pack) {
+  // Rebuild the exact legacy JSON object. Keep this adapter library-specific.
+  return {
+    items: Object.keys(pack.entities || {}).map(function (id) {
+      var entity = pack.entities[id];
+      return { id: id, label: entity.label, image: entity.image };
+    }),
+    categories: (pack.domain && pack.domain.categories) || []
+  };
+}
+
+function __resolveDataOptions(options) {
+  if (!options || !options.data) return options;
+  if (typeof SGDataLoader !== 'undefined') SGDataLoader.assertValid(options.data);
+  var legacyOptions = __fromPack(options.data);
+  var merged = {};
+  Object.keys(options).forEach(function (key) { if (key !== 'data') merged[key] = options[key]; });
+  Object.keys(legacyOptions).forEach(function (key) { merged[key] = legacyOptions[key]; });
+  return merged;
+}
+
+function readDomDefaults() {
+  var element = document.getElementById('sg-data');
+  if (!element || !element.textContent) throw new Error('Missing #sg-data JSON defaults');
+  return JSON.parse(element.textContent);
+}
+
+function mount(root, options) {
+  options = __resolveDataOptions(options);
+  var data = options && options.items ? options : readDomDefaults();
+  // Original rendering logic continues unchanged and consumes `data`.
+}
+```
+
+The extraction equivalence mapping compares the sliced JSON object with `__fromPack(pack)`. It does
+**not** execute `mount`, parse the live DOM, collect browser errors, or compare pixels. Those are
+separate runtime/visual assurances and remain `NOT_ASSESSED` until evidence is supplied.
+
+## Plain collection adapter
+
+A collection library does not need graph-shaped variables:
+
+```js
+function __fromPack(pack) {
+  return {
+    cards: Object.keys(pack.entities || {}).map(function (id) {
+      var entity = pack.entities[id];
+      return { key: id, title: entity.title, summary: entity.summary };
+    })
+  };
+}
+```
+
+Return the exact legacy collection names consumed by the engine. Do not manufacture `chars`,
+`allEdges`, or `storyModules` unless those are real engine inputs.
+
 ## Variants
 
 | Scenario | Approach |
@@ -113,7 +179,7 @@ global.MyLib = { mount: mount, create: create, __fromPack: __fromPack };
 
 1. **Zero rendering-logic changes** — all edits live at the data entry point
 2. **Byte-identical behavior without options.data** — `__resolveDataOptions` is a pass-through
-3. **Equivalence is a hard gate** — `__fromPack(pack)` deep-equals the embedded defaults; never skip it
+3. **Configured equivalence is a hard gate** — every extracted literal is mapped or explicitly ignored with evidence; mapped `__fromPack(pack)` fields deep-equal the embedded defaults
 4. **No silent data anomalies** — dangling refs/duplicates in source data are reported, never filtered away
 5. The loader must be copied to `lib/src/sg-data-loader.js` (`node scripts/sg-data-pack loader` prints its path)
 
diff --git a/references/extraction-config.md b/references/extraction-config.md
index 0999054..b92ffd5 100644
--- a/references/extraction-config.md
+++ b/references/extraction-config.md
@@ -1,9 +1,13 @@
 # Extraction Config Guide
 
 A config is a CommonJS module that tells the CLI where the defaults live in the engine, how to
-convert them into a spec-compliant pack, and how to verify losslessness.
+convert them into a spec-compliant pack, and how to verify the configured equivalence surface.
 Template: `assets/extract.config.template.js`.
 
+`extract` is a source-to-pack bootstrap operation. Its baseline is the configured engine/HTML literals,
+not an existing `lib/data/data.json`. Use `--compare-existing` to compare the fresh in-memory pack with
+the current output. A divergent existing pack is never overwritten unless `--force` is explicit.
+
 ## Full Field Reference
 
 ```js
@@ -13,8 +17,9 @@ module.exports = {
   engineFile: 'lib/src/my-lib.js',       // engine file (relative to libDir)
   globalName: 'MyLibrary',               // engine global name (read after requiring the engine)
   schemaVersion: '1.3',                  // optional, default 1.3
+  assetDir: 'lib/assets',                // optional physical asset root, relative to libDir
 
-  literals: [                            // default-data literal slicing (losslessness baseline)
+  literals: [                            // default-data literal slicing (equivalence baseline)
     // JS literal: pattern matches up to and including `||` or `=`; acorn parses the expression from there
     { key: 'chars', pattern: /var chars = \(options && options\.chars\) \|\|/, ctx: { IMG: '../assets/' } },
     // JSON embedded in HTML: `file` targets another file; with json:true, reads to the next </script>
@@ -25,9 +30,11 @@ module.exports = {
 
   buildPack(defaults) { /* defaults.<literal key> -> pack */ },
 
-  equivalence: [                         // losslessness check: fromPack(pack)[from] vs defaults[lit] (deep-equal)
+  equivalence: [                         // fromPack(pack)[from] vs defaults[lit] (deep-equal)
     { lit: 'chars', from: 'chars' }
   ],
+  // Every literal must be mapped or explicitly ignored with evidence:
+  // equivalenceIgnore: [{ lit: 'rendererDefaults', reason: 'Renderer-only; covered by visual regression VR-1' }],
   sortKeys: { chars: (x, y) => 0 },      // optional: sort arrays before comparing (order-insensitive)
   domainChecks(pack) { return { errors: [], warnings: [] }; },  // optional: library-level domain validation
   domainSchema: { type: 'object' }       // optional: domain extension written into data.schema.json
@@ -42,7 +49,11 @@ module.exports = {
   into a cooked string), then extract with regex inside buildPack. In minified files, comma-chained
   declarations make acorn overrun — split the declarations into separate statements first
 - The equivalence test `require`s the engine file: the engine must be an IIFE/UMD that only defines
-  functions on load and never touches the DOM (all sg-* engines satisfy this)
+  functions on load and never touches the DOM. This is a trusted-code requirement, not a sandbox.
+- `assetDir` controls the physical filesystem root. `meta.assetBase` remains the logical prefix used
+  to resolve bare asset references into manifest keys; the two settings are intentionally separate.
+- Equivalence only proves the declared mappings. Renderer constants and actual DOM mount/visual behavior
+  require runtime or visual evidence and must not be described as passed by this check.
 
 ## buildPack Conversion Patterns
 
diff --git a/references/grader-contract.md b/references/grader-contract.md
new file mode 100644
index 0000000..18a046d
--- /dev/null
+++ b/references/grader-contract.md
@@ -0,0 +1,17 @@
+# Task-specific GraderSpec and GradeReport v1.0
+
+A grader is a trusted, task-bound contract outside the agent workspace. `AgentTaskManifest.graders[]` binds both the grader spec bytes and the complete grader directory tree by SHA-256, including hidden assertions and visual references. Replacing expected results after task creation invalidates the task. After the agent exits, the runner rehashes the original bundle, copies it into a per-trial private staging directory, and rehashes both original and staged trees before and after grading.
+
+“Hidden” is an evaluation-disclosure property: grader bytes are absent from the prompt and candidate workspace. Without an OS filesystem sandbox it is not a secrecy guarantee against a malicious process that probes arbitrary host paths; this limitation is recorded in TaskRun.
+
+Supported checks are:
+
+- `data-pack-contract`: `SGDataLoader` errors and optional strict warnings;
+- `library-rules`: trusted library rules, optionally selected by rule id;
+- `extract-equivalence`: configured literal/fromPack equivalence and complete coverage;
+- `command`: shell-free argv with bounded cwd, timeout and output;
+- `runtime-evidence` and `visual-evidence`: strict evidence consumers.
+
+Every check declares `id`, `type`, positive `weight`, and whether it is `required`. Results distinguish `passed`, `failed`, `not-assessed`, `invalid`, and `infra-error`. A required non-passed check fails the verdict; `not-assessed` never earns score. Candidate command timeouts, malformed evidence, candidate browser failures, and candidate extraction worker exits are failures that remain in the AI denominator. `infra-error` is reserved for preflight/dependency failures such as a missing browser or explicitly declared provider/grader infrastructure exit code. If a trial observes both candidate failure and infra error, candidate failure takes precedence for aggregation. Command evidence includes argv, exit/signal/timeout, duration, bounded stdout/stderr and their SHA-256.
+
+The grader receives `{workspace}`, `{grader}`, `{artifacts}`, `{toolRoot}`, `{treeSha256}`, and `{taskId}` token substitutions. `{grader}` and `{toolRoot}` refer to per-trial verified staging copies. It cannot change the accepted patch: candidate tree digest is fixed before grading and post-grader tree comparison rejects any candidate mutation. `extract-equivalence` uses a trusted supervisor process plus a worker-thread subject: the result travels over a private transferred `MessagePort` with a random token, candidate stdout/stderr are not result channels, and the trusted wrapper must return exactly one authenticated result with exit 0. Timeout, `process.exit`, forged stdout markers, or malformed worker output cannot terminate the parent TaskRun or earn a pass.
diff --git a/references/patch-execution-contract.md b/references/patch-execution-contract.md
new file mode 100644
index 0000000..13a0187
--- /dev/null
+++ b/references/patch-execution-contract.md
@@ -0,0 +1,29 @@
+# Patch execution and PatchAudit v1.0
+
+`sg-data-pack task run` never asks an agent to modify the source library. It copies the exact
+content-addressed source tree into a disposable workspace and gives the agent one output capability:
+a unified diff artifact.
+
+The runner then:
+
+1. validates the task, input, source tree, grader spec and grader tree digests;
+2. snapshots source and workspace trees;
+3. runs the agent with a bounded shell-free argv command;
+4. rejects direct source/workspace writes and undeclared artifact files;
+5. parses the diff and rejects absolute/traversal paths, binary patches, renames, mode changes, symlinks, submodules, duplicate entries and unsupported operations; add/delete patches must declare modes, v1 adds are fixed to `100644`, delete mode must match the baseline, and postflight independently rejects actual mode drift;
+6. enforces `allowed`/`forbidden` paths before apply, with deny precedence;
+7. runs exact `git apply --check` and `git apply` with no fuzz;
+8. snapshots the candidate and rechecks the actual tree diff against file policy;
+9. after agent execution, rehashes the task, source, grader, external integrity inputs, and tool tree;
+10. copies graders and tool scripts into per-trial digest-verified private staging directories, then rehashes original and staged trees before/after grading;
+11. runs candidate extraction/equivalence code in a bounded child worker rather than the parent runner;
+12. fails closed if the final source tree differs or any post-agent immutable binding drifts;
+13. writes a SHA-256-bound `patch-audit.json` and TaskRun artifacts.
+
+`PatchAudit` records task/patch/tree digests, declared and actual operations, policy decisions,
+apply command evidence and capability limits. Any rejected patch leaves the disposable workspace at
+its original tree or the whole workspace is discarded.
+
+## Trust boundary
+
+The v1 runner provides strong postcondition and content-integrity enforcement. It does **not** claim a portable OS sandbox: `osSandbox`, `networkIsolation`, and `processIsolation` are recorded as false unless a future platform runner can enforce them. A local process can address host paths outside its cwd; `allowedRoot` bounds command cwd, not filesystem syscalls. Therefore private staging and post-stage rehashing detect drift but do not make grader bytes secret from a malicious local agent. An external AI provider may need network access even when candidate code execution is intended to be offline. Capability absence must remain visible in TaskRun and must not be reworded as isolation.
diff --git a/references/run-report-contract.md b/references/run-report-contract.md
index d6e91f7..e43f658 100644
--- a/references/run-report-contract.md
+++ b/references/run-report-contract.md
@@ -36,7 +36,7 @@ The default terminal and `REPORT.md` output answer these questions in order:
 4. **剩余风险** — warnings, unassessed capabilities, derivation impacts, no-check rules, and known library boundaries;
 5. **下一步** — prioritized owner, command, and done-when condition.
 
-`NOT_ASSESSED` is never treated as a pass. Runtime DOM mount, visual regression, and live production crawl remain `not-assessed` unless a future evidence collector is connected.
+`NOT_ASSESSED` is never treated as a pass. Library Evolution Report v1 does not execute browsers, so runtime DOM mount, visual regression, and live production crawl remain `not-assessed` here. Agent TaskRun has separate RuntimeEvidence/VisualEvidence collectors; those task artifacts are not silently projected into this older report contract.
 
 ## Outcomes and exit codes
 
diff --git a/references/runtime-visual-evidence-contract.md b/references/runtime-visual-evidence-contract.md
new file mode 100644
index 0000000..4e94868
--- /dev/null
+++ b/references/runtime-visual-evidence-contract.md
@@ -0,0 +1,37 @@
+# Runtime and visual evidence contract v1.0
+
+Runtime and visual checks are evidence producers, not booleans copied from an external exit code.
+`sg-data-pack` validates the evidence shape, binds every local artifact by SHA-256, and recomputes
+threshold results. Missing measurements or missing artifacts produce `not-assessed`, never `passed`.
+
+## RuntimeEvidence
+
+A `runtime-evidence` object binds `subjectTreeSha256`, producer name/version, environment and one
+scenario. `assertions` contain stable ids and `passed|failed`; console errors, page errors and network
+failures are independent failure sources. At least one assertion is required for an assessed result.
+Artifacts use paths relative to the evidence file and include `sha256:<64 lowercase hex>`. Paths are mandatory; duplicate ids/paths, symlink or hardlink components, missing files, and digest mismatches make the evidence non-passing. Runtime evidence requires at least one verified artifact and one assertion for an assessed result.
+
+`evidenceId` is `runtime:<sha256>` over canonical evidence with `evidenceId` omitted.
+
+## VisualEvidence
+
+A `visual-evidence` object binds reference/candidate tree digests, visual configuration digest,
+producer and thresholds. Each scenario contains a viewport, measured pixel-diff ratio, computed-style
+score, coverage, stability failures and three artifact references: reference, candidate and diff.
+
+The consumer recomputes:
+
+- `pixelDiffRatio <= maxPixelDiffRatio`;
+- `computedStyleScore >= minComputedStyleScore`;
+- `coverage >= minCoverage`;
+- `stabilityFailures === 0`;
+- all three distinct screenshot/diff references resolve to verified image artifacts;
+- all artifact paths exist, contain no symlink/hardlink escape, and match their SHA-256.
+
+The benchmark browser producer preflights browser, Pillow, reference render, and reference self-comparison before subject execution; those dependency failures are infrastructure errors. Candidate render/hang/comparison failures exit as candidate failures. Coverage comes from rendered card count, stability comes from a second candidate screenshot, and console/page/network failures come from page instrumentation rather than hardcoded empty arrays.
+
+`evidenceId` is `visual:<sha256>` over canonical evidence with `evidenceId` omitted. A producer's own
+`passed` field, if present, is not authoritative.
+
+The canonical ui-dismantler quality profile remains documented in `visual-regression.md`. This
+contract is its auditable handoff format; it does not make sg-data-pack a browser implementation.
diff --git a/references/task-run-contract.md b/references/task-run-contract.md
new file mode 100644
index 0000000..26b036b
--- /dev/null
+++ b/references/task-run-contract.md
@@ -0,0 +1,24 @@
+# Agent TaskRun v1.0
+
+`TaskRun` is the auditable result of one AgentTaskManifest execution. It is separate from Library
+Evolution `RunReport v1.0`: the latter explains a Data Pack state; TaskRun records an agent,
+patch-policy decision, graders and runtime/visual evidence.
+
+A TaskRun binds:
+
+- task manifest bytes, taskId, revision and source contract tree digest;
+- independent runner snapshots before/final and `sourceUnchanged`;
+- complete source/candidate snapshots including `.git/**`, before/after untrusted stages and at finalization;
+- digest-verified private staging copies of grader and tool trees plus original/staged integrity checks;
+- any post-agent task/grader/tool/candidate/source integrity drift as a non-passing policy violation;
+- provider/model metadata, argv, duration, exit/signal/timeout, stdout/stderr digests;
+- agent patch bytes and PatchAudit;
+- candidate tree digest and every GradeReport;
+- every prompt, patch, audit, DOM, screenshot, diff and evidence artifact by SHA-256;
+- `secondaryErrors` for post-grade integrity/artifact problems that must not erase an already observed candidate failure;
+- explicit capabilities and missing isolation guarantees.
+
+Verdicts are `passed`, `agent-failed`, `patch-invalid`, `policy-violation`, `grader-failed`, `input-error`, or `infra-error`. Provider authentication/unavailability and trusted dependency preflight failures are infrastructure failures. Candidate/subject timeout, malformed evidence, browser failure after subject execution, and post-agent integrity drift are completed non-passes and remain in the AI denominator. `termination.processExitCode` uses 0 for pass, 1 for completed non-pass, 2 for invalid input, and 3 for infrastructure failure.
+
+TaskRun reports can prove what happened in one disposable workspace. They do not authorize promotion
+of the patch into the source library; promotion is a separate reviewed operation.
diff --git a/research/agent-eval/PROMPT-TO-ARTIFACT.md b/research/agent-eval/PROMPT-TO-ARTIFACT.md
new file mode 100644
index 0000000..970b22b
--- /dev/null
+++ b/research/agent-eval/PROMPT-TO-ARTIFACT.md
@@ -0,0 +1,40 @@
+# Prompt-to-artifact completion audit
+
+This checklist maps the requested next-stage capability to concrete implementation and executed evidence.
+
+| Requirement | Implementation | Executed evidence | Status |
+|---|---|---|---|
+| Agent task manifest | `scripts/lib/agent-task.schema.json`, `scripts/lib/agent-task-manifest.js`, `scripts/sg-pack-task.js` | Three valid content-addressed manifests under `tasks/*/task.json`; full source/input/grader/tree verification in `audit-results.js` | Complete |
+| AI patch execution | `scripts/lib/sg-task-runner.js`, `scripts/lib/sg-patch-executor.js` | 15 real-AI TaskRuns under `results/claude/trials/`; each keeps prompt, patch where produced, PatchAudit, source before/final digests and termination | Complete |
+| Task-specific grader | `scripts/lib/sg-grader.js`, `scripts/lib/sg-grader.schema.json` | Complete hidden expected candidates for all three tasks; Pattern C GradeReport has 5 checks and score 8/8 in `results/claude/trials/pattern-c-runtime-r04/grade-task-grader.json` | Complete |
+| Allowed/forbidden enforcement | Manifest file policy, parser preflight, exact apply, postflight tree diff, mode gate | `results/policy-negative/patch-audit.json` rejects `.git/config`; tests reject direct `.git` mutation, traversal, binary, rename, hardlink/symlink, executable add and actual mode drift | Complete |
+| Runtime evidence | `scripts/lib/sg-runtime-evidence.js`; staged headless-Chrome producer | `results/claude/trials/pattern-c-runtime-r04/runtime-evidence.json`, verified DOM/log artifacts, 4 passed assertions, zero console/page/network failures | Complete for one real-AI trial; corpus rate 1/4 valid required trials |
+| Visual evidence | `scripts/lib/sg-visual-evidence.js`; Chrome + Pillow producer | `results/claude/trials/pattern-c-runtime-r04/visual-evidence.json`, reference/candidate/diff screenshots, second-run stability, pixel/style/coverage gates | Complete for one real-AI trial; corpus rate 1/4 valid required trials |
+| Success-rate experiment | `scripts/lib/sg-experiment.js`, `scripts/sg-pack-experiment.js`, `experiment.schema.json` | Scripted 15/15 control and Claude 15-trial report under `results/`; Wilson CI, stage denominators, provider model/tokens/cost and failure taxonomy | Complete |
+| Auditable | SHA-256 content IDs; verified grader/tool staging; immutable-input checks; worker supervisor; raw/relocated reports | `audit-results.js` verifies 30 TaskRuns, 188 artifacts, all content IDs, relocation audits, evidence, negative control and executed tooling tree | Complete |
+| Regressible | Contract, security, adversarial and integration tests | Final `node --test tests/*.test.js`: 188/188 pass; `git diff --check`: pass | Complete |
+| No overstated claim | Capability flags and contracts explicitly deny unavailable isolation; strict claim levels | Scripted: `harness-only`; real AI: `ai-static-contract-only`; runtime/visual subset 1/4, not represented as fully demonstrated | Complete |
+
+## Real AI conclusion
+
+The final real-provider experiment measured 15 trials: 14 valid, 1 infrastructure timeout, 7 passes and 7 valid patch failures. Valid pass rate was 50.0% with Wilson 95% interval 26.8%–73.2%. The actual provider-reported model was `MiniMax-M3[1M]` despite the declared `sonnet` alias.
+
+This is initial, limited evidence that an AI can use the contracts for the benchmark's static component-library data tasks. It is **not** evidence that the runtime/visual Pattern C task is reliably solved: only 1 of 4 valid required trials passed runtime and visual gates. It is also not evidence of arbitrary production-library autonomy.
+
+## Explicit limitations
+
+- No OS sandbox, filesystem syscall isolation, network isolation, process isolation, or malicious-agent grader secrecy is claimed.
+- “Hidden grader” means absent from prompt and candidate workspace. Per-trial verified staging and rehashing detect drift but do not make host paths unreadable to an unsandboxed malicious process.
+- The benchmark is three small synthetic tasks, not a production-library sample.
+- Provider timeout is reported as infrastructure and was not retried.
+- Exact patch application rejects malformed hunk context; seven valid AI trials failed at this stage.
+
+## Reproduction
+
+```bash
+node --test tests/*.test.js
+node research/agent-eval/audit-results.js
+node research/agent-eval/run-policy-negative.js /tmp/sg-policy-negative
+```
+
+The exact tooling used for the saved experiments is preserved under `results/executed-tooling/` and bound by `execution-bundle.json`. Raw execution reports and deterministic relocation audits are retained next to the self-contained ExperimentReports.
diff --git a/research/agent-eval/README.md b/research/agent-eval/README.md
new file mode 100644
index 0000000..3620687
--- /dev/null
+++ b/research/agent-eval/README.md
@@ -0,0 +1,75 @@
+# Agent task evaluation benchmark
+
+This directory contains the reproducible synthetic benchmark used to test whether an agent can make a correct, auditable component-library change under the sg-data-pack contracts.
+
+## Corpus
+
+The frozen corpus contains three tasks, each repeated five times by the experiment specs:
+
+1. `field-update`: change one existing entity field and preserve every unrelated value;
+2. `alias-relation`: add one alias and one registered relation without changing entities;
+3. `pattern-c-runtime`: extend a Pattern C DOM JSON gallery, compile the browser data entry, and pass real runtime and visual checks.
+
+Each task binds source/input bytes, full source tree including modes, allow/deny file policy, patch limits, complete grader directory, required evidence scenarios, and execution limits through `taskId`. Complete expected candidates and browser references are in the grader bundle, not in the agent prompt or candidate workspace.
+
+“Hidden” does not mean secret from a malicious local process on an unsandboxed host. The portable runner records `osSandbox`, `filesystemIsolation`, `networkIsolation`, `processIsolation`, and `maliciousAgentGraderSecrecy` as false. It instead rehashes immutable inputs and runs graders/tools from verified per-trial staging copies after agent execution.
+
+## Rebuild frozen identities
+
+After intentionally changing a task, source fixture, grader, reference, provider adapter, or experiment definition:
+
+```bash
+node research/agent-eval/build-fixtures.js
+node scripts/sg-data-pack task validate research/agent-eval/tasks/field-update/task.json
+node scripts/sg-data-pack task validate research/agent-eval/tasks/alias-relation/task.json
+node scripts/sg-data-pack task validate research/agent-eval/tasks/pattern-c-runtime/task.json
+```
+
+Never regenerate IDs merely to hide unexplained drift. Review the changed bytes first.
+
+## Run the harness control
+
+```bash
+rm -rf /tmp/sg-agent-scripted
+node scripts/sg-data-pack experiment \
+  research/agent-eval/experiment-scripted.json \
+  --out /tmp/sg-agent-scripted
+```
+
+The scripted provider is a deterministic positive control. Its only valid claim level is `harness-only`; 100% scripted success is not AI evidence.
+
+## Run a real provider
+
+```bash
+rm -rf /tmp/sg-agent-claude
+node scripts/sg-data-pack experiment \
+  research/agent-eval/experiment-claude.json \
+  --out /tmp/sg-agent-claude
+```
+
+The provider adapter bytes are content-bound by the ExperimentSpec and the actual provider/model/token/cost metadata is retained when reported by the CLI. Authentication, provider unavailability, and trusted dependency preflight failures are reported as infrastructure errors. Candidate patch, policy, grader, timeout, runtime, visual, or post-agent integrity failures remain in the valid AI denominator.
+
+## Interpret results
+
+Always report:
+
+- total, valid, invalid, and infrastructure trial counts;
+- valid pass rate and Wilson 95% interval;
+- agent completion, patch apply, policy, grader, runtime, and visual stage counts;
+- actual provider-reported model names and usage/cost;
+- failure taxonomy and every TaskRun artifact path;
+- the explicit `claimLevel` and missing sandbox capabilities.
+
+`ai-task-contract-with-runtime-visual-subset` is evidence only for this small synthetic task corpus. It is not evidence of arbitrary production-library autonomy. `ai-static-contract-only` means at least one AI trial passed but the declared browser subset did not pass completely. `ai-task-contract-not-demonstrated` means no valid AI trial passed.
+
+## Audit artifacts
+
+An experiment output is self-contained below its output directory:
+
+- `experiment.json` and `EXPERIMENT.md`;
+- `trials/<trial-id>/task-run.json`;
+- agent prompt and patch;
+- PatchAudit and GradeReport;
+- runtime/visual evidence, DOM, browser logs, screenshots, and diffs where required.
+
+Recompute every listed artifact SHA-256 before publishing a result. Do not replace missing real-provider evidence with scripted or mocked output.
diff --git a/research/agent-eval/audit-results.js b/research/agent-eval/audit-results.js
new file mode 100644
index 0000000..fb6c0ec
--- /dev/null
+++ b/research/agent-eval/audit-results.js
@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const ROOT = path.resolve(__dirname, '../..');
+const { contentId, sha256Bytes, stableJson } = require(path.join(ROOT, 'scripts/lib/sg-evidence-utils.js'));
+const { validateExperimentSpec, aggregate } = require(path.join(ROOT, 'scripts/lib/sg-experiment.js'));
+const { validateTaskManifest } = require(path.join(ROOT, 'scripts/lib/agent-task-manifest.js'));
+const { readRuntimeEvidence } = require(path.join(ROOT, 'scripts/lib/sg-runtime-evidence.js'));
+const { readVisualEvidence } = require(path.join(ROOT, 'scripts/lib/sg-visual-evidence.js'));
+const { snapshotTree } = require(path.join(ROOT, 'scripts/lib/sg-tree-snapshot.js'));
+
+function assert(condition, message) { if (!condition) throw new Error(message); }
+function equal(left, right, message) { assert(stableJson(left) === stableJson(right), message); }
+
+for (const task of ['field-update', 'alias-relation', 'pattern-c-runtime']) {
+  const file = path.join(__dirname, 'tasks', task, 'task.json');
+  const manifest = JSON.parse(fs.readFileSync(file, 'utf8'));
+  const result = validateTaskManifest(manifest, { taskFile: file, verifyFiles: true, verifyTree: true });
+  assert(result.valid, `${task} manifest: ${JSON.stringify(result.issues)}`);
+}
+
+let taskRuns = 0;
+let artifacts = 0;
+for (const name of ['scripted', 'claude']) {
+  const resultRoot = path.join(__dirname, 'results', name);
+  const reportFile = path.join(resultRoot, 'experiment.json');
+  const rawFile = path.join(resultRoot, 'experiment.raw.json');
+  const report = JSON.parse(fs.readFileSync(reportFile, 'utf8'));
+  const raw = JSON.parse(fs.readFileSync(rawFile, 'utf8'));
+  const specFile = path.join(__dirname, name === 'scripted' ? 'experiment-scripted.json' : 'experiment-claude.json');
+  const specBytes = fs.readFileSync(specFile);
+  const spec = JSON.parse(specBytes);
+  const validation = validateExperimentSpec(spec);
+  assert(validation.valid, `${name} spec: ${validation.errors.join('; ')}`);
+  assert(report.resultId === contentId('experiment-result', report, ['resultId']), `${name} relocated resultId`);
+  assert(raw.resultId === contentId('experiment-result', raw, ['resultId']), `${name} raw resultId`);
+  assert(report.specSha256 === sha256Bytes(specBytes), `${name} spec digest`);
+  assert(report.taskSetSha256 === sha256Bytes(stableJson(spec.tasks)), `${name} task-set digest`);
+  equal(report.summary, aggregate(report.trials, spec.agent.kind), `${name} aggregate`);
+  equal(report.summary, raw.summary, `${name} summary changed during relocation`);
+  const audit = JSON.parse(fs.readFileSync(path.join(resultRoot, 'relocation-audit.json'), 'utf8'));
+  assert(audit.auditId === contentId('relocation-audit', audit, ['auditId']), `${name} relocation auditId`);
+  assert(audit.raw.resultId === raw.resultId && audit.relocated.resultId === report.resultId, `${name} relocation ids`);
+  assert(audit.raw.sha256 === sha256Bytes(fs.readFileSync(rawFile)), `${name} raw relocation digest`);
+  assert(audit.relocated.sha256 === sha256Bytes(fs.readFileSync(reportFile)), `${name} relocated digest`);
+  for (const trial of report.trials) {
+    if (!trial.runId) continue;
+    assert(trial.artifactPath === `trials/${trial.trialId}/task-run.json`, `${trial.trialId} non-portable artifactPath`);
+    const runFile = path.join(resultRoot, trial.artifactPath);
+    const run = JSON.parse(fs.readFileSync(runFile, 'utf8'));
+    taskRuns += 1;
+    assert(run.runId === trial.runId && run.runId === contentId('task-run', run, ['runId']), `${trial.trialId} runId`);
+    assert(run.task.sourceUnchanged, `${trial.trialId} source drift`);
+    for (const artifact of run.artifacts) {
+      const file = path.resolve(path.dirname(runFile), artifact.path);
+      const relative = path.relative(path.dirname(runFile), file);
+      assert(relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative), `${trial.trialId} artifact escape`);
+      assert(sha256Bytes(fs.readFileSync(file)) === artifact.sha256, `${trial.trialId} artifact ${artifact.path}`);
+      artifacts += 1;
+    }
+    if (run.patch) assert(run.patch.auditId === contentId('patch-audit', run.patch, ['auditId']), `${trial.trialId} patch auditId`);
+    for (const grade of run.grades) assert(grade.gradeId === contentId('grade', grade, ['gradeId']), `${trial.trialId} gradeId`);
+    const runtimeFile = path.join(path.dirname(runFile), 'runtime-evidence.json');
+    if (fs.existsSync(runtimeFile)) assert(readRuntimeEvidence(runtimeFile).validation.status === 'passed', `${trial.trialId} runtime evidence`);
+    const visualFile = path.join(path.dirname(runFile), 'visual-evidence.json');
+    if (fs.existsSync(visualFile)) assert(readVisualEvidence(visualFile).validation.status === 'passed', `${trial.trialId} visual evidence`);
+  }
+  console.log(`${name}: ${report.summary.passed}/${report.summary.validTrials} valid passes; ${report.summary.claimLevel}`);
+}
+
+const policy = JSON.parse(fs.readFileSync(path.join(__dirname, 'results', 'policy-negative', 'result.json'), 'utf8'));
+assert(policy.verdict === 'policy-violation' && policy.sourceUnchanged, 'policy negative control');
+const tooling = JSON.parse(fs.readFileSync(path.join(__dirname, 'results', 'executed-tooling', 'execution-bundle.json'), 'utf8'));
+const toolingTree = 'sha256:' + snapshotTree(path.join(__dirname, 'results', 'executed-tooling', 'scripts'), { errorOnSpecialFile: true, exclude: false }).treeSha256;
+assert(tooling.scriptsTreeSha256 === toolingTree, 'executed tooling tree digest');
+console.log(`verified ${taskRuns} TaskRuns, ${artifacts} artifacts, relocation audits, evidence, policy control, and executed tooling`);
diff --git a/research/agent-eval/build-fixtures.js b/research/agent-eval/build-fixtures.js
new file mode 100644
index 0000000..33c361d
--- /dev/null
+++ b/research/agent-eval/build-fixtures.js
@@ -0,0 +1,94 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const ROOT = path.resolve(__dirname, '../..');
+const { computeTaskId, computeTreeSha256, sha256 } = require(path.join(ROOT, 'scripts/lib/agent-task-manifest.js'));
+const { contentId, sha256Bytes } = require(path.join(ROOT, 'scripts/lib/sg-evidence-utils.js'));
+
+const tasksRoot = path.join(__dirname, 'tasks');
+const taskDefinitions = [
+  {
+    id: 'field-update',
+    instructions: 'In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.',
+    inputs: ['lib/data/data.json'],
+    allowed: [{ pattern: 'lib/data/data.json', operations: ['modify'] }],
+    grader: 'grader/spec.json',
+    evidence: { runtime: [], visual: [] },
+  },
+  {
+    id: 'alias-relation',
+    instructions: 'In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.',
+    inputs: ['lib/data/data.json'],
+    allowed: [{ pattern: 'lib/data/data.json', operations: ['modify'] }],
+    grader: 'grader/spec.json',
+    evidence: { runtime: [], visual: [] },
+  },
+  {
+    id: 'pattern-c-runtime',
+    instructions: 'Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.',
+    inputs: ['lib/data/data.json', 'lib/data/data.js', 'lib/src/cards.js', 'lib/examples/index.html'],
+    allowed: [
+      { pattern: 'lib/data/data.json', operations: ['modify'] },
+      { pattern: 'lib/data/data.js', operations: ['modify'] },
+    ],
+    grader: 'grader/spec.json',
+    evidence: { runtime: ['pattern-c-gallery'], visual: ['pattern-c-gallery-desktop'] },
+  },
+];
+
+for (const definition of taskDefinitions) {
+  const directory = path.join(tasksRoot, definition.id);
+  const source = path.join(directory, 'source');
+  const instructions = { text: definition.instructions, sha256: sha256(definition.instructions) };
+  const graderFile = path.join(directory, definition.grader);
+  const graderDir = path.dirname(graderFile);
+  const manifest = {
+    taskVersion: '1.0', taskId: null, instructions,
+    source: { root: 'source', revision: `${definition.id}-fixture-v1`, treeSha256: computeTreeSha256(source) },
+    inputs: definition.inputs.map((relative, index) => ({ id: `input-${index + 1}`, path: relative, role: index === 0 ? 'canonical-data' : 'integration-input', sha256: sha256(fs.readFileSync(path.join(source, relative))) })),
+    filePolicy: {
+      allowed: definition.allowed,
+      forbidden: ['.git/**', 'lib/src/**', 'lib/examples/**'],
+      denyPrecedence: true, allowSymlinks: false, allowHardlinks: false,
+      maxChangedFiles: definition.allowed.length, maxPatchBytes: 262144,
+    },
+    patchPolicy: { format: 'unified-diff', fuzz: 0, allowBinary: false },
+    graders: [{ id: 'task-grader', spec: definition.grader, sha256: sha256(fs.readFileSync(graderFile)), treeSha256: computeTreeSha256(graderDir), weight: 1 }],
+    evidence: definition.evidence,
+    execution: { timeoutMs: 480000, network: 'off', maxOutputBytes: 4194304 },
+  };
+  manifest.taskId = computeTaskId(manifest);
+  fs.writeFileSync(path.join(directory, 'task.json'), JSON.stringify(manifest, null, 2) + '\n');
+}
+
+function experiment(kind, provider, model, executable) {
+  const spec = {
+    experimentVersion: '1.0', experimentId: null,
+    title: `${provider} agent task benchmark`,
+    agent: {
+      kind, provider, model,
+      argv: ['{node}', '{adapter}', '{workspace}', '{patch}', '{prompt}'],
+      adapter: { path: `providers/${executable}`, sha256: sha256Bytes(fs.readFileSync(path.join(__dirname, 'providers', executable))) },
+      ...(kind === 'ai' ? { infraExitCodes: [3] } : {}),
+    },
+    tasks: taskDefinitions.map((task) => {
+      const relative = `tasks/${task.id}/task.json`;
+      const file = path.join(__dirname, relative);
+      const bytes = fs.readFileSync(file);
+      return { id: task.id, manifest: relative, taskId: JSON.parse(bytes).taskId, manifestSha256: sha256Bytes(bytes) };
+    }),
+    repetitions: 5,
+    seed: 'fixed-task-order-v1',
+  };
+  experimentId(spec);
+  return spec;
+}
+function experimentId(spec) {
+  const material = { ...spec }; delete material.experimentId;
+  spec.experimentId = contentId('experiment', material, []);
+}
+fs.writeFileSync(path.join(__dirname, 'experiment-scripted.json'), JSON.stringify(experiment('scripted', 'deterministic-fixture', 'scripted-v1', 'scripted-patch-agent.js'), null, 2) + '\n');
+fs.writeFileSync(path.join(__dirname, 'experiment-codex.json'), JSON.stringify(experiment('ai', 'codex-cli-0.139.0', 'gpt-5.5 (provider-reported)', 'codex-patch-agent.js'), null, 2) + '\n');
+fs.writeFileSync(path.join(__dirname, 'experiment-claude.json'), JSON.stringify(experiment('ai', 'claude-code-2.1.185', 'sonnet alias (provider metadata recorded)', 'claude-patch-agent.js'), null, 2) + '\n');
+console.log('Agent evaluation fixtures regenerated.');
diff --git a/research/agent-eval/experiment-claude.json b/research/agent-eval/experiment-claude.json
new file mode 100644
index 0000000..66e29f6
--- /dev/null
+++ b/research/agent-eval/experiment-claude.json
@@ -0,0 +1,46 @@
+{
+  "experimentVersion": "1.0",
+  "experimentId": "experiment:20c81f58da37a1b7f17b7239e57dd9d7036ebce72529827e387f7ba48d536de3",
+  "title": "claude-code-2.1.185 agent task benchmark",
+  "agent": {
+    "kind": "ai",
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "{node}",
+      "{adapter}",
+      "{workspace}",
+      "{patch}",
+      "{prompt}"
+    ],
+    "adapter": {
+      "path": "providers/claude-patch-agent.js",
+      "sha256": "sha256:81bb58c7df706063d66686fdd2d888a1e3143e57e60d631ace40bc28218a27e0"
+    },
+    "infraExitCodes": [
+      3
+    ]
+  },
+  "tasks": [
+    {
+      "id": "field-update",
+      "manifest": "tasks/field-update/task.json",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "manifestSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a"
+    },
+    {
+      "id": "alias-relation",
+      "manifest": "tasks/alias-relation/task.json",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "manifestSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630"
+    },
+    {
+      "id": "pattern-c-runtime",
+      "manifest": "tasks/pattern-c-runtime/task.json",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "manifestSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7"
+    }
+  ],
+  "repetitions": 5,
+  "seed": "fixed-task-order-v1"
+}
diff --git a/research/agent-eval/experiment-codex.json b/research/agent-eval/experiment-codex.json
new file mode 100644
index 0000000..9473091
--- /dev/null
+++ b/research/agent-eval/experiment-codex.json
@@ -0,0 +1,46 @@
+{
+  "experimentVersion": "1.0",
+  "experimentId": "experiment:352bdabeddb1a9ce24430e6c482249da01a4c22e0bdc7bf66c36d6449a399f62",
+  "title": "codex-cli-0.139.0 agent task benchmark",
+  "agent": {
+    "kind": "ai",
+    "provider": "codex-cli-0.139.0",
+    "model": "gpt-5.5 (provider-reported)",
+    "argv": [
+      "{node}",
+      "{adapter}",
+      "{workspace}",
+      "{patch}",
+      "{prompt}"
+    ],
+    "adapter": {
+      "path": "providers/codex-patch-agent.js",
+      "sha256": "sha256:03539068e04f8e82cf0757a670e8e799e8860aaa9f6abe7a912df2b8ef12559e"
+    },
+    "infraExitCodes": [
+      3
+    ]
+  },
+  "tasks": [
+    {
+      "id": "field-update",
+      "manifest": "tasks/field-update/task.json",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "manifestSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a"
+    },
+    {
+      "id": "alias-relation",
+      "manifest": "tasks/alias-relation/task.json",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "manifestSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630"
+    },
+    {
+      "id": "pattern-c-runtime",
+      "manifest": "tasks/pattern-c-runtime/task.json",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "manifestSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7"
+    }
+  ],
+  "repetitions": 5,
+  "seed": "fixed-task-order-v1"
+}
diff --git a/research/agent-eval/experiment-scripted.json b/research/agent-eval/experiment-scripted.json
new file mode 100644
index 0000000..cf2139b
--- /dev/null
+++ b/research/agent-eval/experiment-scripted.json
@@ -0,0 +1,43 @@
+{
+  "experimentVersion": "1.0",
+  "experimentId": "experiment:c914c326de4a45b64ab26744732c39e2d77885280e35269d009e233bc560cf3b",
+  "title": "deterministic-fixture agent task benchmark",
+  "agent": {
+    "kind": "scripted",
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "{node}",
+      "{adapter}",
+      "{workspace}",
+      "{patch}",
+      "{prompt}"
+    ],
+    "adapter": {
+      "path": "providers/scripted-patch-agent.js",
+      "sha256": "sha256:b67eeeb225c65f2e3f1aa55f1cc0818b9efece0c428a316b40a776157c5fd7b2"
+    }
+  },
+  "tasks": [
+    {
+      "id": "field-update",
+      "manifest": "tasks/field-update/task.json",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "manifestSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a"
+    },
+    {
+      "id": "alias-relation",
+      "manifest": "tasks/alias-relation/task.json",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "manifestSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630"
+    },
+    {
+      "id": "pattern-c-runtime",
+      "manifest": "tasks/pattern-c-runtime/task.json",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "manifestSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7"
+    }
+  ],
+  "repetitions": 5,
+  "seed": "fixed-task-order-v1"
+}
diff --git a/research/agent-eval/providers/claude-patch-agent.js b/research/agent-eval/providers/claude-patch-agent.js
new file mode 100644
index 0000000..001bee7
--- /dev/null
+++ b/research/agent-eval/providers/claude-patch-agent.js
@@ -0,0 +1,74 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+
+const [, , workspace, patchFile, promptFile] = process.argv;
+if (!workspace || !patchFile || !promptFile) {
+  console.error('Usage: claude-patch-agent <workspace> <patch-file> <prompt-file>');
+  process.exit(2);
+}
+
+function collectTextFiles(root) {
+  const files = [];
+  let bytes = 0;
+  function visit(directory) {
+    for (const name of fs.readdirSync(directory).sort()) {
+      if (name === '.git') continue;
+      const absolute = path.join(directory, name);
+      const stat = fs.lstatSync(absolute);
+      if (stat.isSymbolicLink() || !stat.isFile() && !stat.isDirectory()) throw new Error(`unsupported source entry: ${absolute}`);
+      if (stat.isDirectory()) visit(absolute);
+      else {
+        const content = fs.readFileSync(absolute);
+        if (content.includes(0)) throw new Error(`binary source is not supported by this provider: ${absolute}`);
+        bytes += content.length;
+        if (bytes > 1024 * 1024) throw new Error('source context exceeds 1 MiB');
+        files.push({ path: path.relative(root, absolute).split(path.sep).join('/'), content: content.toString('utf8') });
+      }
+    }
+  }
+  visit(root);
+  return files;
+}
+
+try {
+  const task = fs.readFileSync(promptFile, 'utf8');
+  const files = collectTextFiles(workspace);
+  const source = files.map((file) => `--- SOURCE FILE: ${file.path} ---\n${file.content}\n--- END SOURCE FILE ---`).join('\n\n');
+  const prompt = `${task}\n\nYou are participating in an audited patch-only evaluation. The complete source snapshot is included below. You have no tools and must not request any. Produce one exact unified diff against these source bytes. Use diff --git, --- a/path, +++ b/path headers and zero-fuzz context. Preserve all unrelated bytes and values. Do not use Markdown fences, commentary, prose, commands, binary patches, renames, symlinks, or mode changes. Your response must begin with diff --git and contain only the patch.\n\n${source}`;
+  const result = spawnSync('claude', [
+    '-p', '--safe-mode', '--tools', '', '--no-session-persistence',
+    '--model', 'sonnet', '--output-format', 'json', prompt,
+  ], { encoding: 'utf8', maxBuffer: 8 * 1024 * 1024, timeout: 300000 });
+  if (result.error) throw result.error;
+  if (result.status !== 0) {
+    if (result.stderr) process.stderr.write(result.stderr);
+    process.exit(3);
+  }
+  const response = JSON.parse(result.stdout);
+  if (response.is_error || response.subtype !== 'success' || typeof response.result !== 'string') {
+    console.error(response.api_error_status || response.subtype || 'Claude provider failed');
+    process.exit(3);
+  }
+  let patch = response.result.trim();
+  const start = patch.indexOf('diff --git ');
+  if (start > 0) patch = patch.slice(start);
+  if (patch.startsWith('```')) patch = patch.replace(/^```(?:diff)?\s*/, '').replace(/\s*```$/, '');
+  fs.writeFileSync(patchFile, patch.trimEnd() + '\n');
+  const metadata = {
+    provider: 'claude-code',
+    declaredModel: 'sonnet',
+    modelUsage: response.modelUsage || {},
+    usage: response.usage || {},
+    totalCostUsd: response.total_cost_usd === undefined ? null : response.total_cost_usd,
+    durationApiMs: response.duration_api_ms || null,
+    stopReason: response.stop_reason || null,
+    permissionDenials: response.permission_denials || [],
+  };
+  process.stdout.write(JSON.stringify(metadata) + '\n');
+} catch (error) {
+  console.error(error.stack || error.message);
+  process.exit(3);
+}
diff --git a/research/agent-eval/providers/codex-patch-agent.js b/research/agent-eval/providers/codex-patch-agent.js
new file mode 100644
index 0000000..afc5854
--- /dev/null
+++ b/research/agent-eval/providers/codex-patch-agent.js
@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const { spawnSync } = require('node:child_process');
+
+const [, , workspace, patchFile, promptFile] = process.argv;
+if (!workspace || !patchFile || !promptFile) {
+  console.error('Usage: codex-patch-agent <workspace> <patch-file> <prompt-file>');
+  process.exit(2);
+}
+const task = fs.readFileSync(promptFile, 'utf8');
+const prompt = `${task}\n\nYou are participating in an audited patch-only evaluation. Inspect the workspace, but do not modify it. Produce one exact unified diff against the current files. Use diff --git, --- a/path, +++ b/path headers and zero-fuzz context. Do not use Markdown fences, commentary, prose, commands, binary patches, renames, symlinks, or mode changes. The final response must begin with diff --git and contain only the patch.`;
+const result = spawnSync('codex', [
+  'exec', '--ephemeral', '--ignore-user-config', '--ignore-rules',
+  '--sandbox', 'read-only', '--skip-git-repo-check', '-C', workspace,
+  '--color', 'never', '-o', patchFile, '-'
+], { input: prompt, encoding: 'utf8', maxBuffer: 4 * 1024 * 1024, timeout: 300000 });
+if (result.stdout) process.stdout.write(result.stdout);
+if (result.stderr) process.stderr.write(result.stderr);
+if (result.error) {
+  console.error(result.error.message);
+  process.exit(3);
+}
+if (result.status !== 0) process.exit(3);
+let patch = fs.readFileSync(patchFile, 'utf8').trim();
+const start = patch.indexOf('diff --git ');
+if (start > 0) patch = patch.slice(start);
+if (patch.startsWith('```')) patch = patch.replace(/^```(?:diff)?\s*/, '').replace(/\s*```$/, '');
+fs.writeFileSync(patchFile, patch.trimEnd() + '\n');
diff --git a/research/agent-eval/providers/scripted-patch-agent.js b/research/agent-eval/providers/scripted-patch-agent.js
new file mode 100644
index 0000000..76b0022
--- /dev/null
+++ b/research/agent-eval/providers/scripted-patch-agent.js
@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+
+const [, , workspace, patchFile, promptFile] = process.argv;
+const prompt = fs.readFileSync(promptFile, 'utf8');
+const changes = [];
+function updateJson(relative, mutate) {
+  const file = path.join(workspace, relative);
+  const before = fs.readFileSync(file, 'utf8');
+  const value = JSON.parse(before);
+  mutate(value);
+  changes.push({ relative, before, after: JSON.stringify(value, null, 2) + '\n' });
+}
+if (prompt.includes('summary-new')) {
+  updateJson('lib/data/data.json', (pack) => { pack.entities.alice.summary = 'summary-new'; });
+} else if (prompt.includes('Alicia') && prompt.includes('friend')) {
+  updateJson('lib/data/data.json', (pack) => {
+    pack.aliases.Alicia = 'alice';
+    pack.relations.push({ id: 'alice-bob-friend', a: 'alice', b: 'bob', type: 'friend', label: 'Friend' });
+  });
+} else if (prompt.includes('Gamma Card')) {
+  updateJson('lib/data/data.json', (pack) => {
+    pack.entities.gamma = { kind: 'card', title: 'Gamma Card', color: '#8b5cf6' };
+    pack.aliases['Gamma Card'] = 'gamma';
+    pack.stages.find((stage) => stage.key === 'gallery').entities.push('gamma');
+    pack.domain.cardOrder.push('gamma');
+  });
+  const data = JSON.parse(changes[0].after);
+  const relative = 'lib/data/data.js';
+  changes.push({ relative, before: fs.readFileSync(path.join(workspace, relative), 'utf8'), after: 'globalThis.SG_DATA_PACK = ' + JSON.stringify(data) + ';\n' });
+} else {
+  console.error('scripted agent does not recognize this task');
+  process.exit(1);
+}
+function fullFileDiff(change) {
+  const before = change.before.trimEnd().split('\n');
+  const after = change.after.trimEnd().split('\n');
+  return [
+    `diff --git a/${change.relative} b/${change.relative}`,
+    `--- a/${change.relative}`,
+    `+++ b/${change.relative}`,
+    `@@ -1,${before.length} +1,${after.length} @@`,
+    ...before.map((line) => '-' + line),
+    ...after.map((line) => '+' + line),
+  ].join('\n');
+}
+fs.writeFileSync(patchFile, changes.map(fullFileDiff).join('\n') + '\n');
diff --git a/research/agent-eval/relocate-results.js b/research/agent-eval/relocate-results.js
new file mode 100644
index 0000000..42abc69
--- /dev/null
+++ b/research/agent-eval/relocate-results.js
@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const ROOT = path.resolve(__dirname, '../..');
+const { contentId, sha256Bytes } = require(path.join(ROOT, 'scripts/lib/sg-evidence-utils.js'));
+const { renderExperiment } = require(path.join(ROOT, 'scripts/lib/sg-experiment.js'));
+
+const directory = path.resolve(process.argv[2] || '');
+if (!process.argv[2] || !fs.existsSync(path.join(directory, 'experiment.json'))) {
+  console.error('Usage: relocate-results <experiment-result-directory>');
+  process.exit(2);
+}
+const reportFile = path.join(directory, 'experiment.json');
+const rawFile = path.join(directory, 'experiment.raw.json');
+const rawMarkdown = path.join(directory, 'EXPERIMENT.raw.md');
+const auditFile = path.join(directory, 'relocation-audit.json');
+if (fs.existsSync(rawFile) || fs.existsSync(rawMarkdown) || fs.existsSync(auditFile)) {
+  console.error('Relocation outputs already exist; refusing to overwrite: ' + directory);
+  process.exit(2);
+}
+const rawBytes = fs.readFileSync(reportFile);
+const rawReport = JSON.parse(rawBytes);
+if (rawReport.resultId !== contentId('experiment-result', rawReport, ['resultId'])) throw new Error('raw ExperimentReport resultId is invalid');
+const relocated = JSON.parse(rawBytes);
+const transformations = [];
+for (const trial of relocated.trials) {
+  if (!trial.runId) continue;
+  const expected = `trials/${trial.trialId}/task-run.json`;
+  const runFile = path.join(directory, expected);
+  if (!fs.existsSync(runFile)) throw new Error(`missing TaskRun for ${trial.trialId}: ${runFile}`);
+  const run = JSON.parse(fs.readFileSync(runFile, 'utf8'));
+  if (run.runId !== trial.runId) throw new Error(`TaskRun id mismatch for ${trial.trialId}`);
+  if (trial.artifactPath !== expected) transformations.push({ trialId: trial.trialId, from: trial.artifactPath, to: expected });
+  trial.artifactPath = expected;
+}
+if (!transformations.length) throw new Error('ExperimentReport is already self-contained; no relocation needed');
+relocated.resultId = contentId('experiment-result', relocated, ['resultId']);
+const relocatedBytes = Buffer.from(JSON.stringify(relocated, null, 2) + '\n');
+const audit = {
+  auditVersion: '1.0', auditId: null, kind: 'experiment-relocation',
+  reason: 'Canonicalize trial TaskRun references after copying an experiment produced through a symlinked output-root spelling.',
+  experimentId: relocated.experimentId,
+  raw: { resultId: rawReport.resultId, sha256: sha256Bytes(rawBytes), file: 'experiment.raw.json' },
+  relocated: { resultId: relocated.resultId, sha256: sha256Bytes(relocatedBytes), file: 'experiment.json' },
+  transformations,
+  semanticFieldsUnchanged: ['experimentId', 'specSha256', 'taskSetSha256', 'agent', 'seed', 'repetitions', 'summary', 'trial verdicts', 'runIds'],
+};
+audit.auditId = contentId('relocation-audit', audit, ['auditId']);
+fs.renameSync(reportFile, rawFile);
+const markdownFile = path.join(directory, 'EXPERIMENT.md');
+if (fs.existsSync(markdownFile)) fs.renameSync(markdownFile, rawMarkdown);
+fs.writeFileSync(reportFile, relocatedBytes);
+fs.writeFileSync(markdownFile, renderExperiment(relocated));
+fs.writeFileSync(auditFile, JSON.stringify(audit, null, 2) + '\n');
+console.log(`Relocated ${transformations.length} TaskRun references: ${relocated.resultId}`);
diff --git a/research/agent-eval/results/README.md b/research/agent-eval/results/README.md
new file mode 100644
index 0000000..5fc29d8
--- /dev/null
+++ b/research/agent-eval/results/README.md
@@ -0,0 +1,65 @@
+# Final agent evaluation results
+
+These are the complete final audit bundles produced after the hardened runner, grader, evidence, denominator, and integrity reviews. They are committed as evidence, not as generated examples.
+
+## Deterministic harness control
+
+- Directory: [`scripted/`](scripted/)
+- Experiment: `experiment:c914c326de4a45b64ab26744732c39e2d77885280e35269d009e233bc560cf3b`
+- Self-contained result: `experiment-result:118e0cb1259834a153aa0bf69c0818810a5dbdc240806b167224e1c399cda2f2`
+- Raw execution result: `experiment-result:ef44e721234db91d12ca3154dab1daa9156e463195ada83d30e757cedff296e8`
+- Spec digest: `sha256:d7bf7564fa4283c928ffe7930b4cbaeac2d91f6ca14f994f5ebd1533967d62c2`
+- Trials: 15 total, 15 valid, 0 infrastructure errors
+- Passed: 15/15
+- Runtime subset: 5/5
+- Visual subset: 5/5
+- Wilson 95% interval: 79.6%–100.0%
+- Claim level: `harness-only`
+- Recomputed audit: 15 TaskRuns and 125 listed artifact digests
+
+This control proves only that the harness accepts deterministic correct patches and produces complete evidence. It is not AI capability evidence.
+
+## Real AI experiment
+
+- Directory: [`claude/`](claude/)
+- Experiment: `experiment:20c81f58da37a1b7f17b7239e57dd9d7036ebce72529827e387f7ba48d536de3`
+- Self-contained result: `experiment-result:43c9a914a08639bd2adbe306d81cddef9dfe863ae8eaa5205c7e3cf22c8e1581`
+- Raw execution result: `experiment-result:56bbca6f13b5ea63f767f6ef4edcb2588959dfa59cb409e66c26981af559de91`
+- Spec digest: `sha256:5dc9c394f2375420f7bf15f2cf4bd9a5e60e6db78887a3f01e3f2a7782486629`
+- Declared provider: `claude-code-2.1.185`, `sonnet` alias
+- Provider-reported actual model: `MiniMax-M3[1M]`
+- Trials: 15 total, 14 valid, 1 infrastructure error
+- Passed: 7/14 valid trials (50.0%)
+- Wilson 95% interval: 26.8%–73.2%
+- Failure taxonomy: 7 passed, 7 patch-invalid, 1 provider timeout infrastructure error
+- Runtime subset: 1/4 valid required trials
+- Visual subset: 1/4 valid required trials
+- Provider usage: 22,223 input tokens; 94,361 output tokens; 1,792 cache-read input tokens
+- Provider-reported cost: $2.471036
+- Claim level: `ai-static-contract-only`
+- Recomputed audit: 15 TaskRuns and 63 listed artifact digests
+
+The four valid Pattern C trials stay in the runtime/visual denominator even when a patch fails before evidence collection. One passed the complete Data Pack, hidden candidate, browser producer, runtime, and visual gates. Three produced patches that failed exact zero-fuzz application. A fifth Pattern C trial hit the frozen provider timeout and is reported separately as infrastructure rather than retried.
+
+The measured AI therefore showed initial, limited success on the static task contract, but the complete runtime/visual component-modification subset was **not** reliably demonstrated. This result does not support a claim of arbitrary production-library autonomy.
+
+## Integrity and limitations
+
+Every saved TaskRun records source immutability, patch policy, grader results, capabilities, and relative artifact digests. The audit recomputed every listed artifact SHA-256 after copying these bundles into the repository.
+
+The portable runner does not provide an OS filesystem sandbox, network isolation, process isolation, or malicious-agent grader secrecy. Hidden grader bytes are absent from the prompt and candidate workspace, then copied into per-trial digest-verified staging after agent execution; original and staged bindings are rechecked. These controls detect drift but do not make arbitrary host paths unreadable to a malicious local process.
+
+## Revalidation
+
+```bash
+node --test tests/*.test.js
+node scripts/sg-data-pack task validate research/agent-eval/tasks/field-update/task.json
+node scripts/sg-data-pack task validate research/agent-eval/tasks/alias-relation/task.json
+node scripts/sg-data-pack task validate research/agent-eval/tasks/pattern-c-runtime/task.json
+node scripts/sg-data-pack evidence runtime \
+  research/agent-eval/results/claude/trials/pattern-c-runtime-r04/runtime-evidence.json
+node scripts/sg-data-pack evidence visual \
+  research/agent-eval/results/claude/trials/pattern-c-runtime-r04/visual-evidence.json
+```
+
+See each directory's `experiment.json`, `EXPERIMENT.md`, and `trials/*/task-run.json` for the complete machine-readable evidence.
diff --git a/research/agent-eval/results/claude/EXPERIMENT.md b/research/agent-eval/results/claude/EXPERIMENT.md
new file mode 100644
index 0000000..15906b7
--- /dev/null
+++ b/research/agent-eval/results/claude/EXPERIMENT.md
@@ -0,0 +1,34 @@
+# Agent success-rate experiment
+
+- Experiment: `experiment:20c81f58da37a1b7f17b7239e57dd9d7036ebce72529827e387f7ba48d536de3`
+- Agent: claude-code-2.1.185 / sonnet alias (provider metadata recorded) (ai)
+- Trials: 15; valid 14; infra 1
+- Pass rate: **50.0%** (Wilson 95% 26.8%–73.2%)
+- Claim level: **ai-static-contract-only**
+- Actual model(s): MiniMax-M3[1M]
+- Tokens: input 22223; output 94361; cache read 1792
+- Recorded provider cost: $2.471036
+
+## Failure taxonomy
+
+- infra-error: 1
+- passed: 7
+- patch-invalid: 7
+
+## Trials
+
+- field-update-r01: patch-invalid; patch=rejected; grades=none
+- field-update-r02: patch-invalid; patch=rejected; grades=none
+- field-update-r03: passed; patch=applied; grades=passed
+- field-update-r04: passed; patch=applied; grades=passed
+- field-update-r05: passed; patch=applied; grades=passed
+- alias-relation-r01: passed; patch=applied; grades=passed
+- alias-relation-r02: passed; patch=applied; grades=passed
+- alias-relation-r03: patch-invalid; patch=rejected; grades=none
+- alias-relation-r04: patch-invalid; patch=rejected; grades=none
+- alias-relation-r05: passed; patch=applied; grades=passed
+- pattern-c-runtime-r01: patch-invalid; patch=rejected; grades=none
+- pattern-c-runtime-r02: infra-error; patch=none; grades=none
+- pattern-c-runtime-r03: patch-invalid; patch=rejected; grades=none
+- pattern-c-runtime-r04: passed; patch=applied; grades=passed
+- pattern-c-runtime-r05: patch-invalid; patch=rejected; grades=none
diff --git a/research/agent-eval/results/claude/EXPERIMENT.raw.md b/research/agent-eval/results/claude/EXPERIMENT.raw.md
new file mode 100644
index 0000000..15906b7
--- /dev/null
+++ b/research/agent-eval/results/claude/EXPERIMENT.raw.md
@@ -0,0 +1,34 @@
+# Agent success-rate experiment
+
+- Experiment: `experiment:20c81f58da37a1b7f17b7239e57dd9d7036ebce72529827e387f7ba48d536de3`
+- Agent: claude-code-2.1.185 / sonnet alias (provider metadata recorded) (ai)
+- Trials: 15; valid 14; infra 1
+- Pass rate: **50.0%** (Wilson 95% 26.8%–73.2%)
+- Claim level: **ai-static-contract-only**
+- Actual model(s): MiniMax-M3[1M]
+- Tokens: input 22223; output 94361; cache read 1792
+- Recorded provider cost: $2.471036
+
+## Failure taxonomy
+
+- infra-error: 1
+- passed: 7
+- patch-invalid: 7
+
+## Trials
+
+- field-update-r01: patch-invalid; patch=rejected; grades=none
+- field-update-r02: patch-invalid; patch=rejected; grades=none
+- field-update-r03: passed; patch=applied; grades=passed
+- field-update-r04: passed; patch=applied; grades=passed
+- field-update-r05: passed; patch=applied; grades=passed
+- alias-relation-r01: passed; patch=applied; grades=passed
+- alias-relation-r02: passed; patch=applied; grades=passed
+- alias-relation-r03: patch-invalid; patch=rejected; grades=none
+- alias-relation-r04: patch-invalid; patch=rejected; grades=none
+- alias-relation-r05: passed; patch=applied; grades=passed
+- pattern-c-runtime-r01: patch-invalid; patch=rejected; grades=none
+- pattern-c-runtime-r02: infra-error; patch=none; grades=none
+- pattern-c-runtime-r03: patch-invalid; patch=rejected; grades=none
+- pattern-c-runtime-r04: passed; patch=applied; grades=passed
+- pattern-c-runtime-r05: patch-invalid; patch=rejected; grades=none
diff --git a/research/agent-eval/results/claude/experiment.json b/research/agent-eval/results/claude/experiment.json
new file mode 100644
index 0000000..a58545a
--- /dev/null
+++ b/research/agent-eval/results/claude/experiment.json
@@ -0,0 +1,866 @@
+{
+  "reportVersion": "1.0",
+  "resultId": "experiment-result:43c9a914a08639bd2adbe306d81cddef9dfe863ae8eaa5205c7e3cf22c8e1581",
+  "experimentId": "experiment:20c81f58da37a1b7f17b7239e57dd9d7036ebce72529827e387f7ba48d536de3",
+  "specSha256": "sha256:5dc9c394f2375420f7bf15f2cf4bd9a5e60e6db78887a3f01e3f2a7782486629",
+  "seed": "fixed-task-order-v1",
+  "agent": {
+    "kind": "ai",
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)"
+  },
+  "taskSetSha256": "sha256:f47d3569a2df49c15aa0d82c8125ea2e4c1efcce3d7de4d2b6333f6967ca6ea7",
+  "repetitions": 5,
+  "summary": {
+    "totalTrials": 15,
+    "validTrials": 14,
+    "invalidTrials": 0,
+    "infraErrors": 1,
+    "passed": 7,
+    "passRate": 0.5,
+    "confidence95": {
+      "lower": 0.26799202452413634,
+      "upper": 0.7320079754758637
+    },
+    "verdicts": {
+      "infra-error": 1,
+      "passed": 7,
+      "patch-invalid": 7
+    },
+    "stages": {
+      "agentCompleted": {
+        "passed": 14,
+        "total": 14
+      },
+      "patchApplied": {
+        "passed": 7,
+        "total": 14
+      },
+      "policyCompliant": {
+        "passed": 7,
+        "total": 14
+      },
+      "graderPassed": {
+        "passed": 7,
+        "total": 14
+      },
+      "runtimePassed": {
+        "passed": 1,
+        "total": 4
+      },
+      "visualPassed": {
+        "passed": 1,
+        "total": 4
+      }
+    },
+    "provider": {
+      "actualModels": [
+        "MiniMax-M3[1M]"
+      ],
+      "usage": {
+        "inputTokens": 22223,
+        "outputTokens": 94361,
+        "cacheReadInputTokens": 1792,
+        "totalCostUsd": 2.4710360000000002
+      }
+    },
+    "durationMs": {
+      "mean": 74086.59953592857,
+      "median": 54848.1158125
+    },
+    "claimLevel": "ai-static-contract-only"
+  },
+  "trials": [
+    {
+      "trialId": "field-update-r01",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:eda458f8bd0740b373639a702e700e17e55e8fb73e2dda8c5b0b187a3de0fe7c",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1205,
+            "outputTokens": 135,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.009463999999999998,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1205,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 135,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.009463999999999998,
+        "durationApiMs": 2651,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 3909.933917,
+      "artifactPath": "trials/field-update-r01/task-run.json"
+    },
+    {
+      "trialId": "field-update-r02",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:309918a0fb60925f85b679ec333015c77b33eec76d0030b7dcdb9624b5ea525b",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1205,
+            "outputTokens": 167,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.010263999999999999,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1205,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 167,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.010263999999999999,
+        "durationApiMs": 2453,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 2826.63475,
+      "artifactPath": "trials/field-update-r02/task-run.json"
+    },
+    {
+      "trialId": "field-update-r03",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:6ebe4b699f124bdb070f4ec2b44f8a2533dcc0b2951ced11677219ab27cb3233",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1204,
+            "outputTokens": 1163,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.035159,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1204,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 1163,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.035159,
+        "durationApiMs": 20145,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 20638.498834,
+      "artifactPath": "trials/field-update-r03/task-run.json"
+    },
+    {
+      "trialId": "field-update-r04",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:73c5544c5dc6f6c78c4320e2888567420ae338d827a2a39e9b86f17b1c4c2f33",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1204,
+            "outputTokens": 162,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.010133999999999999,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1204,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 162,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.010133999999999999,
+        "durationApiMs": 2291,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 2758.782,
+      "artifactPath": "trials/field-update-r04/task-run.json"
+    },
+    {
+      "trialId": "field-update-r05",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:528e87fb2aa72f2ccadb88f732444149a30535c80fc1eff8692c2f6c251a9873",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1205,
+            "outputTokens": 2639,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.07206399999999999,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1205,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 2639,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.07206399999999999,
+        "durationApiMs": 34735,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 35221.021209,
+      "artifactPath": "trials/field-update-r05/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r01",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:4c5cfca83f5d0e68b86925e1b1181f829d019ef54b4e752caf20582406f68f7f",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1286,
+            "outputTokens": 9456,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.24289400000000003,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1286,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 9456,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.24289400000000003,
+        "durationApiMs": 64470,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 65048.181125,
+      "artifactPath": "trials/alias-relation-r01/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r02",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:5752bc64b30328c65d022760d19df872a2d7d570418d6ae3b5edf0ed31b41608",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1284,
+            "outputTokens": 6789,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.176209,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1284,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 6789,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.176209,
+        "durationApiMs": 43993,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 44648.0505,
+      "artifactPath": "trials/alias-relation-r02/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r03",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:f198854b1a316d4f255f970c87ed2763e7938159828a18d060c647a0abcfecad",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1285,
+            "outputTokens": 454,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.017839,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1285,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 454,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.017839,
+        "durationApiMs": 8821,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 9842.414625,
+      "artifactPath": "trials/alias-relation-r03/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r04",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:6c4a7a66037f3e6a9cf0029744d4fc930e1cb95a7da420acd8e1a6552b622d09",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1286,
+            "outputTokens": 5806,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.151644,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1286,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 5806,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.151644,
+        "durationApiMs": 72771,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 73767.052167,
+      "artifactPath": "trials/alias-relation-r04/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r05",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:9c06d2f4dcd88ef9c0894e318e07d4e61331b53315b665487b9bb4a441fa921b",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1285,
+            "outputTokens": 9192,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.236289,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1285,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 9192,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.236289,
+        "durationApiMs": 105475,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 105986.162542,
+      "artifactPath": "trials/alias-relation-r05/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r01",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:d7c57685e7c52ac0c0cf5b5479eacc353a887873f09b066aea87e26baf9c5495",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 2443,
+            "outputTokens": 19966,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.511429,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 2443,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 19966,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.511429,
+        "durationApiMs": 231215,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 231612.691334,
+      "artifactPath": "trials/pattern-c-runtime-r01/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r02",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:1e758add780932a28d4a8805f1027723d18ea577ceef2b37205920c827061b04",
+      "verdict": "infra-error",
+      "agentExitCode": 3,
+      "patchStatus": null,
+      "gradeVerdicts": [],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 300087.777416,
+      "artifactPath": "trials/pattern-c-runtime-r02/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r03",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:495af23afb9d35b3d74f0547b57ef22f80e85b980877159bc46e3e6db566f3f1",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 2444,
+            "outputTokens": 9733,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.25560900000000003,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 2444,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 9733,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.25560900000000003,
+        "durationApiMs": 100259,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 100649.2315,
+      "artifactPath": "trials/pattern-c-runtime-r03/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r04",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:d760c86dff6d4d960aca95fe2473ce10baaa537bc94534635abc413a1aab1310",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 2443,
+            "outputTokens": 11854,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.308629,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 2443,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 11854,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.308629,
+        "durationApiMs": 126661,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 140822.51575,
+      "artifactPath": "trials/pattern-c-runtime-r04/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r05",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:07e9c45767c9629be80216750400fa6df478397e9d3bca19e06fe327616100a7",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 2444,
+            "outputTokens": 16845,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.433409,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 2444,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 16845,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.433409,
+        "durationApiMs": 198830,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 199481.22325,
+      "artifactPath": "trials/pattern-c-runtime-r05/task-run.json"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/claude/experiment.raw.json b/research/agent-eval/results/claude/experiment.raw.json
new file mode 100644
index 0000000..8f4122b
--- /dev/null
+++ b/research/agent-eval/results/claude/experiment.raw.json
@@ -0,0 +1,866 @@
+{
+  "reportVersion": "1.0",
+  "resultId": "experiment-result:56bbca6f13b5ea63f767f6ef4edcb2588959dfa59cb409e66c26981af559de91",
+  "experimentId": "experiment:20c81f58da37a1b7f17b7239e57dd9d7036ebce72529827e387f7ba48d536de3",
+  "specSha256": "sha256:5dc9c394f2375420f7bf15f2cf4bd9a5e60e6db78887a3f01e3f2a7782486629",
+  "seed": "fixed-task-order-v1",
+  "agent": {
+    "kind": "ai",
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)"
+  },
+  "taskSetSha256": "sha256:f47d3569a2df49c15aa0d82c8125ea2e4c1efcce3d7de4d2b6333f6967ca6ea7",
+  "repetitions": 5,
+  "summary": {
+    "totalTrials": 15,
+    "validTrials": 14,
+    "invalidTrials": 0,
+    "infraErrors": 1,
+    "passed": 7,
+    "passRate": 0.5,
+    "confidence95": {
+      "lower": 0.26799202452413634,
+      "upper": 0.7320079754758637
+    },
+    "verdicts": {
+      "infra-error": 1,
+      "passed": 7,
+      "patch-invalid": 7
+    },
+    "stages": {
+      "agentCompleted": {
+        "passed": 14,
+        "total": 14
+      },
+      "patchApplied": {
+        "passed": 7,
+        "total": 14
+      },
+      "policyCompliant": {
+        "passed": 7,
+        "total": 14
+      },
+      "graderPassed": {
+        "passed": 7,
+        "total": 14
+      },
+      "runtimePassed": {
+        "passed": 1,
+        "total": 4
+      },
+      "visualPassed": {
+        "passed": 1,
+        "total": 4
+      }
+    },
+    "provider": {
+      "actualModels": [
+        "MiniMax-M3[1M]"
+      ],
+      "usage": {
+        "inputTokens": 22223,
+        "outputTokens": 94361,
+        "cacheReadInputTokens": 1792,
+        "totalCostUsd": 2.4710360000000002
+      }
+    },
+    "durationMs": {
+      "mean": 74086.59953592857,
+      "median": 54848.1158125
+    },
+    "claimLevel": "ai-static-contract-only"
+  },
+  "trials": [
+    {
+      "trialId": "field-update-r01",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:eda458f8bd0740b373639a702e700e17e55e8fb73e2dda8c5b0b187a3de0fe7c",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1205,
+            "outputTokens": 135,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.009463999999999998,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1205,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 135,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.009463999999999998,
+        "durationApiMs": 2651,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 3909.933917,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r01/task-run.json"
+    },
+    {
+      "trialId": "field-update-r02",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:309918a0fb60925f85b679ec333015c77b33eec76d0030b7dcdb9624b5ea525b",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1205,
+            "outputTokens": 167,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.010263999999999999,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1205,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 167,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.010263999999999999,
+        "durationApiMs": 2453,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 2826.63475,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r02/task-run.json"
+    },
+    {
+      "trialId": "field-update-r03",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:6ebe4b699f124bdb070f4ec2b44f8a2533dcc0b2951ced11677219ab27cb3233",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1204,
+            "outputTokens": 1163,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.035159,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1204,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 1163,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.035159,
+        "durationApiMs": 20145,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 20638.498834,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r03/task-run.json"
+    },
+    {
+      "trialId": "field-update-r04",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:73c5544c5dc6f6c78c4320e2888567420ae338d827a2a39e9b86f17b1c4c2f33",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1204,
+            "outputTokens": 162,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.010133999999999999,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1204,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 162,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.010133999999999999,
+        "durationApiMs": 2291,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 2758.782,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r04/task-run.json"
+    },
+    {
+      "trialId": "field-update-r05",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:528e87fb2aa72f2ccadb88f732444149a30535c80fc1eff8692c2f6c251a9873",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1205,
+            "outputTokens": 2639,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.07206399999999999,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1205,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 2639,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.07206399999999999,
+        "durationApiMs": 34735,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 35221.021209,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r05/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r01",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:4c5cfca83f5d0e68b86925e1b1181f829d019ef54b4e752caf20582406f68f7f",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1286,
+            "outputTokens": 9456,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.24289400000000003,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1286,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 9456,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.24289400000000003,
+        "durationApiMs": 64470,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 65048.181125,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r01/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r02",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:5752bc64b30328c65d022760d19df872a2d7d570418d6ae3b5edf0ed31b41608",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1284,
+            "outputTokens": 6789,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.176209,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1284,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 6789,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.176209,
+        "durationApiMs": 43993,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 44648.0505,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r02/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r03",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:f198854b1a316d4f255f970c87ed2763e7938159828a18d060c647a0abcfecad",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1285,
+            "outputTokens": 454,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.017839,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1285,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 454,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.017839,
+        "durationApiMs": 8821,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 9842.414625,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r03/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r04",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:6c4a7a66037f3e6a9cf0029744d4fc930e1cb95a7da420acd8e1a6552b622d09",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1286,
+            "outputTokens": 5806,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.151644,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1286,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 5806,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.151644,
+        "durationApiMs": 72771,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 73767.052167,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r04/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r05",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:9c06d2f4dcd88ef9c0894e318e07d4e61331b53315b665487b9bb4a441fa921b",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 1285,
+            "outputTokens": 9192,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.236289,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 1285,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 9192,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.236289,
+        "durationApiMs": 105475,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 105986.162542,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r05/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r01",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:d7c57685e7c52ac0c0cf5b5479eacc353a887873f09b066aea87e26baf9c5495",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 2443,
+            "outputTokens": 19966,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.511429,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 2443,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 19966,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.511429,
+        "durationApiMs": 231215,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 231612.691334,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r01/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r02",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:1e758add780932a28d4a8805f1027723d18ea577ceef2b37205920c827061b04",
+      "verdict": "infra-error",
+      "agentExitCode": 3,
+      "patchStatus": null,
+      "gradeVerdicts": [],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 300087.777416,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r02/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r03",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:495af23afb9d35b3d74f0547b57ef22f80e85b980877159bc46e3e6db566f3f1",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 2444,
+            "outputTokens": 9733,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.25560900000000003,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 2444,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 9733,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.25560900000000003,
+        "durationApiMs": 100259,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 100649.2315,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r03/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r04",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:d760c86dff6d4d960aca95fe2473ce10baaa537bc94534635abc413a1aab1310",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 2443,
+            "outputTokens": 11854,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.308629,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 2443,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 11854,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.308629,
+        "durationApiMs": 126661,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 140822.51575,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r04/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r05",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:07e9c45767c9629be80216750400fa6df478397e9d3bca19e06fe327616100a7",
+      "verdict": "patch-invalid",
+      "agentExitCode": 0,
+      "patchStatus": "rejected",
+      "gradeVerdicts": [],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": {
+        "provider": "claude-code",
+        "declaredModel": "sonnet",
+        "modelUsage": {
+          "MiniMax-M3[1M]": {
+            "inputTokens": 2444,
+            "outputTokens": 16845,
+            "cacheReadInputTokens": 128,
+            "cacheCreationInputTokens": 0,
+            "webSearchRequests": 0,
+            "costUSD": 0.433409,
+            "contextWindow": 1000000,
+            "maxOutputTokens": 32000
+          }
+        },
+        "usage": {
+          "input_tokens": 2444,
+          "cache_creation_input_tokens": 0,
+          "cache_read_input_tokens": 128,
+          "output_tokens": 16845,
+          "server_tool_use": {
+            "web_search_requests": 0,
+            "web_fetch_requests": 0
+          },
+          "service_tier": "standard",
+          "cache_creation": {
+            "ephemeral_1h_input_tokens": 0,
+            "ephemeral_5m_input_tokens": 0
+          },
+          "inference_geo": "",
+          "iterations": [],
+          "speed": "standard"
+        },
+        "totalCostUsd": 0.433409,
+        "durationApiMs": 198830,
+        "stopReason": "end_turn",
+        "permissionDenials": []
+      },
+      "durationMs": 199481.22325,
+      "artifactPath": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r05/task-run.json"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/claude/relocation-audit.json b/research/agent-eval/results/claude/relocation-audit.json
new file mode 100644
index 0000000..4b0be3b
--- /dev/null
+++ b/research/agent-eval/results/claude/relocation-audit.json
@@ -0,0 +1,105 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "relocation-audit:15adcf52d9ccaa7fc9fa97407a2436e931891a56029cadf2aaa8e299d3721731",
+  "kind": "experiment-relocation",
+  "reason": "Canonicalize trial TaskRun references after copying an experiment produced through a symlinked output-root spelling.",
+  "experimentId": "experiment:20c81f58da37a1b7f17b7239e57dd9d7036ebce72529827e387f7ba48d536de3",
+  "raw": {
+    "resultId": "experiment-result:56bbca6f13b5ea63f767f6ef4edcb2588959dfa59cb409e66c26981af559de91",
+    "sha256": "sha256:cdc25ee69647fa93529b4d1b02de72cc912dbf5953461fe78ea16563766e74c4",
+    "file": "experiment.raw.json"
+  },
+  "relocated": {
+    "resultId": "experiment-result:43c9a914a08639bd2adbe306d81cddef9dfe863ae8eaa5205c7e3cf22c8e1581",
+    "sha256": "sha256:c1b84ad911e99ae38c1961e88711a64c26c0f2bb76423f3a21f9e80bae83a3e8",
+    "file": "experiment.json"
+  },
+  "transformations": [
+    {
+      "trialId": "field-update-r01",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r01/task-run.json",
+      "to": "trials/field-update-r01/task-run.json"
+    },
+    {
+      "trialId": "field-update-r02",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r02/task-run.json",
+      "to": "trials/field-update-r02/task-run.json"
+    },
+    {
+      "trialId": "field-update-r03",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r03/task-run.json",
+      "to": "trials/field-update-r03/task-run.json"
+    },
+    {
+      "trialId": "field-update-r04",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r04/task-run.json",
+      "to": "trials/field-update-r04/task-run.json"
+    },
+    {
+      "trialId": "field-update-r05",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/field-update-r05/task-run.json",
+      "to": "trials/field-update-r05/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r01",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r01/task-run.json",
+      "to": "trials/alias-relation-r01/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r02",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r02/task-run.json",
+      "to": "trials/alias-relation-r02/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r03",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r03/task-run.json",
+      "to": "trials/alias-relation-r03/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r04",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r04/task-run.json",
+      "to": "trials/alias-relation-r04/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r05",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/alias-relation-r05/task-run.json",
+      "to": "trials/alias-relation-r05/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r01",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r01/task-run.json",
+      "to": "trials/pattern-c-runtime-r01/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r02",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r02/task-run.json",
+      "to": "trials/pattern-c-runtime-r02/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r03",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r03/task-run.json",
+      "to": "trials/pattern-c-runtime-r03/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r04",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r04/task-run.json",
+      "to": "trials/pattern-c-runtime-r04/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r05",
+      "from": "../../private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r05/task-run.json",
+      "to": "trials/pattern-c-runtime-r05/task-run.json"
+    }
+  ],
+  "semanticFieldsUnchanged": [
+    "experimentId",
+    "specSha256",
+    "taskSetSha256",
+    "agent",
+    "seed",
+    "repetitions",
+    "summary",
+    "trial verdicts",
+    "runIds"
+  ]
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r01/TASK.md b/research/agent-eval/results/claude/trials/alias-relation-r01/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r01/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r01/agent.patch b/research/agent-eval/results/claude/trials/alias-relation-r01/agent.patch
new file mode 100644
index 0000000..4cf438b
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r01/agent.patch
@@ -0,0 +1,26 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -16,6 +16,7 @@
+   },
+   "aliases": {
+     "Alice": "alice",
++    "Alicia": "alice",
+     "Bob": "bob"
+   },
+   "relationTypes": {
+@@ -23,5 +23,13 @@
+       "label": "Friend"
+     }
+   },
+-  "relations": [],
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
+   "stages": [
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r01/grade-task-grader.json b/research/agent-eval/results/claude/trials/alias-relation-r01/grade-task-grader.json
new file mode 100644
index 0000000..27a3753
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r01/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:48758757945eece3abe919926dea1c4a6c86124970b81753fd524d3ec8645061",
+  "graderId": "agent-alias-relation-grader",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "treeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/workspace",
+          "alias-relation"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 30.828667,
+        "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "alias-relation: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r01/patch-audit.json b/research/agent-eval/results/claude/trials/alias-relation-r01/patch-audit.json
new file mode 100644
index 0000000..7e6d24b
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r01/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:9f2b9556ce9916bba43f00d4ee4cd64e18faca5f88dace4e5bccc9cffb65411d",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "applied",
+  "patchSha256": "sha256:2045a256902a6b7cd61330dd30a15767cc32bdf4f0fdea243ed7fe4a97c1f517",
+  "patchBytes": 489,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 2,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+        "size": 586,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "41b5ca0d459b453de00b5d66ef8578e23bffad35792a069ee460eebd4282366e",
+        "size": 742,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573969869-70a183d32ae7d.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 23.527167,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573969869-70a183d32ae7d.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 18.968208,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r01/task-run.json b/research/agent-eval/results/claude/trials/alias-relation-r01/task-run.json
new file mode 100644
index 0000000..8930b88
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r01/task-run.json
@@ -0,0 +1,298 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:4c5cfca83f5d0e68b86925e1b1181f829d019ef54b4e752caf20582406f68f7f",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r01"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r01/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r01/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 64885.879875,
+    "stdoutSha256": "sha256:5f065e3e6ebd7e789adfd88e524d6352de434248d48d26960cfee6b73644b221",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1286,\"outputTokens\":9456,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.24289400000000003,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1286,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":9456,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.24289400000000003,\"durationApiMs\":64470,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1286,
+          "outputTokens": 9456,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.24289400000000003,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1286,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 9456,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.24289400000000003,
+      "durationApiMs": 64470,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:9f2b9556ce9916bba43f00d4ee4cd64e18faca5f88dace4e5bccc9cffb65411d",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "applied",
+    "patchSha256": "sha256:2045a256902a6b7cd61330dd30a15767cc32bdf4f0fdea243ed7fe4a97c1f517",
+    "patchBytes": 489,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 2,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+          "size": 586,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "41b5ca0d459b453de00b5d66ef8578e23bffad35792a069ee460eebd4282366e",
+          "size": 742,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573969869-70a183d32ae7d.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 23.527167,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573969869-70a183d32ae7d.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 18.968208,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:48758757945eece3abe919926dea1c4a6c86124970b81753fd524d3ec8645061",
+      "graderId": "agent-alias-relation-grader",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "treeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-6FnmI7/workspace",
+              "alias-relation"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 30.828667,
+            "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "alias-relation: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 489,
+      "sha256": "sha256:2045a256902a6b7cd61330dd30a15767cc32bdf4f0fdea243ed7fe4a97c1f517"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1938,
+      "sha256": "sha256:af694ed2e5d45f345d7fc8b3360afb9733e4cc73b2589dde103e50cf11e7d9ef"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3227,
+      "sha256": "sha256:e22e027e60a7c218cbf776c65ba16fc9a49abba8cc833e78b922d2378bd7e2ec"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r02/TASK.md b/research/agent-eval/results/claude/trials/alias-relation-r02/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r02/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r02/agent.patch b/research/agent-eval/results/claude/trials/alias-relation-r02/agent.patch
new file mode 100644
index 0000000..15c5fad
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r02/agent.patch
@@ -0,0 +1,25 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -17,11 +17,20 @@
+   "aliases": {
+     "Alice": "alice",
++    "Alicia": "alice",
+     "Bob": "bob"
+   },
+   "relationTypes": {
+     "friend": {
+       "label": "Friend"
+     }
+   },
+-  "relations": [],
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
+   "stages": [
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r02/grade-task-grader.json b/research/agent-eval/results/claude/trials/alias-relation-r02/grade-task-grader.json
new file mode 100644
index 0000000..6005dfe
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r02/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:f5d1306ffae35d88e0886ec637631a974746321808bbc08870217785add2c655",
+  "graderId": "agent-alias-relation-grader",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "treeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/workspace",
+          "alias-relation"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 47.74475,
+        "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "alias-relation: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r02/patch-audit.json b/research/agent-eval/results/claude/trials/alias-relation-r02/patch-audit.json
new file mode 100644
index 0000000..02863ec
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r02/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:8a01a50d0fd78a7c20e595a0045d9cfbc3d84a4564860b56bce17033b1f2518b",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "applied",
+  "patchSha256": "sha256:f356bf37dc269359f3417f4e4c8ee02f7c4dbdf132dd14035f29cb70367a4bf3",
+  "patchBytes": 483,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+        "size": 586,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "41b5ca0d459b453de00b5d66ef8578e23bffad35792a069ee460eebd4282366e",
+        "size": 742,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574014402-e529a66f77301.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 75.279291,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574014402-e529a66f77301.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 48.46525,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r02/task-run.json b/research/agent-eval/results/claude/trials/alias-relation-r02/task-run.json
new file mode 100644
index 0000000..435e0fd
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r02/task-run.json
@@ -0,0 +1,298 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:5752bc64b30328c65d022760d19df872a2d7d570418d6ae3b5edf0ed31b41608",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r02"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r02/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r02/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 44366.553833,
+    "stdoutSha256": "sha256:a90f2d43f8ac3d4ac39ee02cd226a29bba024a1825e8f05467af3753c08da534",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1284,\"outputTokens\":6789,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.176209,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1284,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":6789,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.176209,\"durationApiMs\":43993,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1284,
+          "outputTokens": 6789,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.176209,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1284,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 6789,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.176209,
+      "durationApiMs": 43993,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:8a01a50d0fd78a7c20e595a0045d9cfbc3d84a4564860b56bce17033b1f2518b",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "applied",
+    "patchSha256": "sha256:f356bf37dc269359f3417f4e4c8ee02f7c4dbdf132dd14035f29cb70367a4bf3",
+    "patchBytes": 483,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+          "size": 586,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "41b5ca0d459b453de00b5d66ef8578e23bffad35792a069ee460eebd4282366e",
+          "size": 742,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574014402-e529a66f77301.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 75.279291,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574014402-e529a66f77301.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 48.46525,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:f5d1306ffae35d88e0886ec637631a974746321808bbc08870217785add2c655",
+      "graderId": "agent-alias-relation-grader",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "treeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-W2etOX/workspace",
+              "alias-relation"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 47.74475,
+            "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "alias-relation: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 483,
+      "sha256": "sha256:f356bf37dc269359f3417f4e4c8ee02f7c4dbdf132dd14035f29cb70367a4bf3"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1937,
+      "sha256": "sha256:eacbd965ce8936d17ae7bcab153c035da3f2ade0a2b8faded800be1b2d0e3d3b"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3226,
+      "sha256": "sha256:8bf927a7163a8941e67e65b549c2aaaf978bcad9232812122250aa2d08e6f015"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r03/TASK.md b/research/agent-eval/results/claude/trials/alias-relation-r03/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r03/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r03/agent.patch b/research/agent-eval/results/claude/trials/alias-relation-r03/agent.patch
new file mode 100644
index 0000000..ff7eccf
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r03/agent.patch
@@ -0,0 +1,26 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -11,11 +11,12 @@
+   },
+   "aliases": {
+     "Alice": "alice",
++    "Alicia": "alice",
+     "Bob": "bob"
+   },
+   "relationTypes": {
+     "friend": {
+       "label": "Friend"
+     }
+   },
+-  "relations": [],
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
+   "stages": [
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r03/patch-audit.json b/research/agent-eval/results/claude/trials/alias-relation-r03/patch-audit.json
new file mode 100644
index 0000000..61366d0
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r03/patch-audit.json
@@ -0,0 +1,87 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:3d130ebe764c4a36cf67102e04a369f1e56cce7141353b97109c3706b04d87d7",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "rejected",
+  "patchSha256": "sha256:5d251043d5b64a4c55b9677c59c4d99f0d343140a638738fe3f27741f1195e9c",
+  "patchBytes": 489,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": null,
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": null,
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574024447-85bba020679ec.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-omgCH1/workspace",
+      "exitCode": 1,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 33.42575,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:8e43234eaee96c9af409afb02af9666486ade6b792af89b79edf8a553711bc25",
+      "error": null
+    },
+    "apply": null
+  },
+  "failure": {
+    "kind": "patch-invalid",
+    "name": "PatchError",
+    "message": "git apply --check rejected the patch",
+    "details": {
+      "checkRun": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574024447-85bba020679ec.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-omgCH1/workspace",
+        "status": 1,
+        "exitCode": 1,
+        "exit": 1,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 33.42575,
+        "duration": 33.42575,
+        "stdout": "",
+        "stderr": "error: patch failed: lib/data/data.json:11\nerror: lib/data/data.json: patch does not apply\n",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "truncated": false
+      }
+    }
+  },
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r03/task-run.json b/research/agent-eval/results/claude/trials/alias-relation-r03/task-run.json
new file mode 100644
index 0000000..6c2b95e
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r03/task-run.json
@@ -0,0 +1,211 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:f198854b1a316d4f255f970c87ed2763e7938159828a18d060c647a0abcfecad",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r03"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-omgCH1/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r03/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r03/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-omgCH1/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 9756.787833,
+    "stdoutSha256": "sha256:098f72c2bbfbb00bd46948c47302c3b8ea6823c748f35998091cfaf6c609d9a2",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1285,\"outputTokens\":454,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.017839,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1285,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":454,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.017839,\"durationApiMs\":8821,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1285,
+          "outputTokens": 454,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.017839,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1285,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 454,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.017839,
+      "durationApiMs": 8821,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:3d130ebe764c4a36cf67102e04a369f1e56cce7141353b97109c3706b04d87d7",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "rejected",
+    "patchSha256": "sha256:5d251043d5b64a4c55b9677c59c4d99f0d343140a638738fe3f27741f1195e9c",
+    "patchBytes": 489,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": null,
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": null,
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574024447-85bba020679ec.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-omgCH1/workspace",
+        "exitCode": 1,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 33.42575,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:8e43234eaee96c9af409afb02af9666486ade6b792af89b79edf8a553711bc25",
+        "error": null
+      },
+      "apply": null
+    },
+    "failure": {
+      "kind": "patch-invalid",
+      "name": "PatchError",
+      "message": "git apply --check rejected the patch",
+      "details": {
+        "checkRun": {
+          "argv": [
+            "git",
+            "apply",
+            "--check",
+            "--whitespace=error-all",
+            "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574024447-85bba020679ec.diff"
+          ],
+          "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-omgCH1/workspace",
+          "status": 1,
+          "exitCode": 1,
+          "exit": 1,
+          "signal": null,
+          "timedOut": false,
+          "durationMs": 33.42575,
+          "duration": 33.42575,
+          "stdout": "",
+          "stderr": "error: patch failed: lib/data/data.json:11\nerror: lib/data/data.json: patch does not apply\n",
+          "stdoutTruncated": false,
+          "stderrTruncated": false,
+          "truncated": false
+        }
+      }
+    },
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 489,
+      "sha256": "sha256:5d251043d5b64a4c55b9677c59c4d99f0d343140a638738fe3f27741f1195e9c"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 2709,
+      "sha256": "sha256:e70b0f179c783daca4003ccd3c44b89aa7818108c6e0423d21a35d99f5db3ab6"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "patch-invalid",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 1,
+    "semanticVerdict": "patch-invalid",
+    "message": "git apply --check rejected the patch"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r04/TASK.md b/research/agent-eval/results/claude/trials/alias-relation-r04/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r04/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r04/agent.patch b/research/agent-eval/results/claude/trials/alias-relation-r04/agent.patch
new file mode 100644
index 0000000..4d09982
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r04/agent.patch
@@ -0,0 +1,31 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -15,9 +15,10 @@
+     }
+   },
+   "aliases": {
+     "Alice": "alice",
++    "Alicia": "alice",
+     "Bob": "bob"
+   },
+   "relationTypes": {
+     "friend": {
+       "label": "Friend"
+@@ -23,7 +24,15 @@
+       "label": "Friend"
+     }
+   },
+-  "relations": [],
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
+   "stages": [
+     {
+       "key": "main",
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r04/patch-audit.json b/research/agent-eval/results/claude/trials/alias-relation-r04/patch-audit.json
new file mode 100644
index 0000000..9bdc173
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r04/patch-audit.json
@@ -0,0 +1,87 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:58962824b347846848ef207ee264a07b7235d9a41d4bc8c0886b9b8df02978a2",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "rejected",
+  "patchSha256": "sha256:fa5264e9c6a06ab351e3cbf709e1cd592bba6137f5bee92b6e41f71715deff1a",
+  "patchBytes": 568,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": null,
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 2,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": null,
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574098232-2bf4dc96cdd56.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-2eg6Tq/workspace",
+      "exitCode": 1,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 20.418917,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:48aa97bfde5200caeb85320f2011a37ecad6246ce3b5d6db6f757d676e115ad2",
+      "error": null
+    },
+    "apply": null
+  },
+  "failure": {
+    "kind": "patch-invalid",
+    "name": "PatchError",
+    "message": "git apply --check rejected the patch",
+    "details": {
+      "checkRun": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574098232-2bf4dc96cdd56.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-2eg6Tq/workspace",
+        "status": 1,
+        "exitCode": 1,
+        "exit": 1,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 20.418917,
+        "duration": 20.418917,
+        "stdout": "",
+        "stderr": "error: patch failed: lib/data/data.json:23\nerror: lib/data/data.json: patch does not apply\n",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "truncated": false
+      }
+    }
+  },
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r04/task-run.json b/research/agent-eval/results/claude/trials/alias-relation-r04/task-run.json
new file mode 100644
index 0000000..15da105
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r04/task-run.json
@@ -0,0 +1,211 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:6c4a7a66037f3e6a9cf0029744d4fc930e1cb95a7da420acd8e1a6552b622d09",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r04"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-2eg6Tq/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r04/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r04/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-2eg6Tq/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 73701.680542,
+    "stdoutSha256": "sha256:199c2c187c96b09b5e70697152d66d1335a92ceea3f7a9b4d677bf9e26c63339",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1286,\"outputTokens\":5806,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.151644,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1286,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":5806,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.151644,\"durationApiMs\":72771,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1286,
+          "outputTokens": 5806,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.151644,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1286,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 5806,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.151644,
+      "durationApiMs": 72771,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:58962824b347846848ef207ee264a07b7235d9a41d4bc8c0886b9b8df02978a2",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "rejected",
+    "patchSha256": "sha256:fa5264e9c6a06ab351e3cbf709e1cd592bba6137f5bee92b6e41f71715deff1a",
+    "patchBytes": 568,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": null,
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 2,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": null,
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574098232-2bf4dc96cdd56.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-2eg6Tq/workspace",
+        "exitCode": 1,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 20.418917,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:48aa97bfde5200caeb85320f2011a37ecad6246ce3b5d6db6f757d676e115ad2",
+        "error": null
+      },
+      "apply": null
+    },
+    "failure": {
+      "kind": "patch-invalid",
+      "name": "PatchError",
+      "message": "git apply --check rejected the patch",
+      "details": {
+        "checkRun": {
+          "argv": [
+            "git",
+            "apply",
+            "--check",
+            "--whitespace=error-all",
+            "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574098232-2bf4dc96cdd56.diff"
+          ],
+          "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-2eg6Tq/workspace",
+          "status": 1,
+          "exitCode": 1,
+          "exit": 1,
+          "signal": null,
+          "timedOut": false,
+          "durationMs": 20.418917,
+          "duration": 20.418917,
+          "stdout": "",
+          "stderr": "error: patch failed: lib/data/data.json:23\nerror: lib/data/data.json: patch does not apply\n",
+          "stdoutTruncated": false,
+          "stderrTruncated": false,
+          "truncated": false
+        }
+      }
+    },
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 568,
+      "sha256": "sha256:fa5264e9c6a06ab351e3cbf709e1cd592bba6137f5bee92b6e41f71715deff1a"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 2712,
+      "sha256": "sha256:1b31172ae68116732dc082343edfc9421d3af9e811492161c637f4e36b96080f"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "patch-invalid",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 1,
+    "semanticVerdict": "patch-invalid",
+    "message": "git apply --check rejected the patch"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r05/TASK.md b/research/agent-eval/results/claude/trials/alias-relation-r05/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r05/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r05/agent.patch b/research/agent-eval/results/claude/trials/alias-relation-r05/agent.patch
new file mode 100644
index 0000000..02de8fd
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r05/agent.patch
@@ -0,0 +1,29 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -15,7 +15,8 @@
+     }
+   },
+   "aliases": {
+     "Alice": "alice",
++    "Alicia": "alice",
+     "Bob": "bob"
+   },
+   "relationTypes": {
+@@ -23,7 +24,15 @@
+       "label": "Friend"
+     }
+   },
+-  "relations": [],
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
+   "stages": [
+     {
+       "key": "main",
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r05/grade-task-grader.json b/research/agent-eval/results/claude/trials/alias-relation-r05/grade-task-grader.json
new file mode 100644
index 0000000..bb0c340
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r05/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:123a7cb648054d988999f93754d90d13fc90faecf90da4a7e2c07cf168a4f70c",
+  "graderId": "agent-alias-relation-grader",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "treeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/workspace",
+          "alias-relation"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 30.407375,
+        "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "alias-relation: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r05/patch-audit.json b/research/agent-eval/results/claude/trials/alias-relation-r05/patch-audit.json
new file mode 100644
index 0000000..f2a41e1
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r05/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:83ef939bf7d18de346035e9515ca83d6422ac6d4e41d920a97878422a7249610",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "applied",
+  "patchSha256": "sha256:747f47bb2d06693339aa25fd1bbecafe07858afa3997c3f882e0a4eb58d6ff88",
+  "patchBytes": 525,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 2,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+        "size": 586,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "41b5ca0d459b453de00b5d66ef8578e23bffad35792a069ee460eebd4282366e",
+        "size": 742,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574204129-3ae3332958316.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 26.777375,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574204129-3ae3332958316.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 14.642125,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/alias-relation-r05/task-run.json b/research/agent-eval/results/claude/trials/alias-relation-r05/task-run.json
new file mode 100644
index 0000000..231a7d5
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/alias-relation-r05/task-run.json
@@ -0,0 +1,298 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:9c06d2f4dcd88ef9c0894e318e07d4e61331b53315b665487b9bb4a441fa921b",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r05"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r05/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/alias-relation-r05/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 105836.185208,
+    "stdoutSha256": "sha256:45844b49a4ea873a8b7713e4e17c35a212e4920a461ede6132deede722b35f52",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1285,\"outputTokens\":9192,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.236289,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1285,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":9192,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.236289,\"durationApiMs\":105475,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1285,
+          "outputTokens": 9192,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.236289,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1285,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 9192,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.236289,
+      "durationApiMs": 105475,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:83ef939bf7d18de346035e9515ca83d6422ac6d4e41d920a97878422a7249610",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "applied",
+    "patchSha256": "sha256:747f47bb2d06693339aa25fd1bbecafe07858afa3997c3f882e0a4eb58d6ff88",
+    "patchBytes": 525,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 2,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+          "size": 586,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "41b5ca0d459b453de00b5d66ef8578e23bffad35792a069ee460eebd4282366e",
+          "size": 742,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574204129-3ae3332958316.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 26.777375,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574204129-3ae3332958316.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.642125,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:123a7cb648054d988999f93754d90d13fc90faecf90da4a7e2c07cf168a4f70c",
+      "graderId": "agent-alias-relation-grader",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "treeSha256": "sha256:cfb2b07547916e565b567b263a219e91d34738cdfce5ceeb5957ca974260102d",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-EkLU1A/workspace",
+              "alias-relation"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 30.407375,
+            "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "alias-relation: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 525,
+      "sha256": "sha256:747f47bb2d06693339aa25fd1bbecafe07858afa3997c3f882e0a4eb58d6ff88"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1938,
+      "sha256": "sha256:a8f6a64d8ffdadeca391ea33d0714af070641418a62811dc7880430434670515"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3227,
+      "sha256": "sha256:15b7c1092b97afa5ce5502c82f97c7677100fa76f9f96979e3d1de751344bbdd"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r01/TASK.md b/research/agent-eval/results/claude/trials/field-update-r01/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r01/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/field-update-r01/agent.patch b/research/agent-eval/results/claude/trials/field-update-r01/agent.patch
new file mode 100644
index 0000000..9aad4ae
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r01/agent.patch
@@ -0,0 +1,8 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -8,7 +8,7 @@
+       "kind": "person",
+       "name": "Alice",
+       "summary": "summary-old"
+-      "summary": "summary-new"
diff --git a/research/agent-eval/results/claude/trials/field-update-r01/patch-audit.json b/research/agent-eval/results/claude/trials/field-update-r01/patch-audit.json
new file mode 100644
index 0000000..0302c75
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r01/patch-audit.json
@@ -0,0 +1,87 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:1a9a7582d7b0bb67b887c5473ca55af0908657d6bb17eb8665dfb13cf5542153",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "rejected",
+  "patchSha256": "sha256:4206f16fb681c139719b49e6d94abbadf93959839702dc360bce26aa058ff61f",
+  "patchBytes": 232,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": null,
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": null,
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573843472-ce2fa6682c38e.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-jm9X14/workspace",
+      "exitCode": 128,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 14.504417,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:97e03fbd499c7f04af57d26fa8bda99067c2d301e271adc5f1462c40cd89bba3",
+      "error": null
+    },
+    "apply": null
+  },
+  "failure": {
+    "kind": "patch-invalid",
+    "name": "PatchError",
+    "message": "git apply --check rejected the patch",
+    "details": {
+      "checkRun": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573843472-ce2fa6682c38e.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-jm9X14/workspace",
+        "status": 128,
+        "exitCode": 128,
+        "exit": 128,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.504417,
+        "duration": 14.504417,
+        "stdout": "",
+        "stderr": "error: corrupt patch at line 9\n",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "truncated": false
+      }
+    }
+  },
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r01/task-run.json b/research/agent-eval/results/claude/trials/field-update-r01/task-run.json
new file mode 100644
index 0000000..b587cd0
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r01/task-run.json
@@ -0,0 +1,211 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:eda458f8bd0740b373639a702e700e17e55e8fb73e2dda8c5b0b187a3de0fe7c",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r01"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-jm9X14/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r01/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r01/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-jm9X14/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 3840.298,
+    "stdoutSha256": "sha256:a364c42cc6397efb63db1521e33ada563734cc4f4c33600fa8a7689090d4076e",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1205,\"outputTokens\":135,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.009463999999999998,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1205,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":135,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.009463999999999998,\"durationApiMs\":2651,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1205,
+          "outputTokens": 135,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.009463999999999998,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1205,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 135,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.009463999999999998,
+      "durationApiMs": 2651,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:1a9a7582d7b0bb67b887c5473ca55af0908657d6bb17eb8665dfb13cf5542153",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "rejected",
+    "patchSha256": "sha256:4206f16fb681c139719b49e6d94abbadf93959839702dc360bce26aa058ff61f",
+    "patchBytes": 232,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": null,
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": null,
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573843472-ce2fa6682c38e.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-jm9X14/workspace",
+        "exitCode": 128,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.504417,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:97e03fbd499c7f04af57d26fa8bda99067c2d301e271adc5f1462c40cd89bba3",
+        "error": null
+      },
+      "apply": null
+    },
+    "failure": {
+      "kind": "patch-invalid",
+      "name": "PatchError",
+      "message": "git apply --check rejected the patch",
+      "details": {
+        "checkRun": {
+          "argv": [
+            "git",
+            "apply",
+            "--check",
+            "--whitespace=error-all",
+            "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573843472-ce2fa6682c38e.diff"
+          ],
+          "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-jm9X14/workspace",
+          "status": 128,
+          "exitCode": 128,
+          "exit": 128,
+          "signal": null,
+          "timedOut": false,
+          "durationMs": 14.504417,
+          "duration": 14.504417,
+          "stdout": "",
+          "stderr": "error: corrupt patch at line 9\n",
+          "stdoutTruncated": false,
+          "stderrTruncated": false,
+          "truncated": false
+        }
+      }
+    },
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 232,
+      "sha256": "sha256:4206f16fb681c139719b49e6d94abbadf93959839702dc360bce26aa058ff61f"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 2659,
+      "sha256": "sha256:6db3ee7991dbedd397d84346be1518c7b24b2c600f6d1bee00a953f0025d84cc"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "patch-invalid",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 1,
+    "semanticVerdict": "patch-invalid",
+    "message": "git apply --check rejected the patch"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r02/TASK.md b/research/agent-eval/results/claude/trials/field-update-r02/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r02/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/field-update-r02/agent.patch b/research/agent-eval/results/claude/trials/field-update-r02/agent.patch
new file mode 100644
index 0000000..f477cef
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r02/agent.patch
@@ -0,0 +1,11 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -11,7 +11,7 @@
+       "kind": "person",
+       "name": "Alice",
+-      "summary": "summary-old"
++      "summary": "summary-new"
+     }
+   },
+   "aliases": {
diff --git a/research/agent-eval/results/claude/trials/field-update-r02/patch-audit.json b/research/agent-eval/results/claude/trials/field-update-r02/patch-audit.json
new file mode 100644
index 0000000..a54a60b
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r02/patch-audit.json
@@ -0,0 +1,87 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:cf9968dd9d7faa59142cf473b9195d1e61e72b1ea00b42cf2d3767993c8ce3d6",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "rejected",
+  "patchSha256": "sha256:fee82b559e7b8e1ab73aed52cd41db243dd6d345d8bff06296242260baf2c882",
+  "patchBytes": 263,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": null,
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": null,
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573846312-e650bd822cd15.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-j3ZSMo/workspace",
+      "exitCode": 128,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 14.829958,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:a605710393416cbb2aeaaf05e61e89ae5bd80941edf6faff1444c7d98e996285",
+      "error": null
+    },
+    "apply": null
+  },
+  "failure": {
+    "kind": "patch-invalid",
+    "name": "PatchError",
+    "message": "git apply --check rejected the patch",
+    "details": {
+      "checkRun": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573846312-e650bd822cd15.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-j3ZSMo/workspace",
+        "status": 128,
+        "exitCode": 128,
+        "exit": 128,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.829958,
+        "duration": 14.829958,
+        "stdout": "",
+        "stderr": "error: corrupt patch at line 12\n",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "truncated": false
+      }
+    }
+  },
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r02/task-run.json b/research/agent-eval/results/claude/trials/field-update-r02/task-run.json
new file mode 100644
index 0000000..6300bac
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r02/task-run.json
@@ -0,0 +1,211 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:309918a0fb60925f85b679ec333015c77b33eec76d0030b7dcdb9624b5ea525b",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r02"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-j3ZSMo/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r02/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r02/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-j3ZSMo/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 2788.293459,
+    "stdoutSha256": "sha256:debaf11137c9c8e5b17bfec14924d1f095c95e5979552694a6386c1481f9a1ac",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1205,\"outputTokens\":167,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.010263999999999999,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1205,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":167,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.010263999999999999,\"durationApiMs\":2453,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1205,
+          "outputTokens": 167,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.010263999999999999,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1205,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 167,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.010263999999999999,
+      "durationApiMs": 2453,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:cf9968dd9d7faa59142cf473b9195d1e61e72b1ea00b42cf2d3767993c8ce3d6",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "rejected",
+    "patchSha256": "sha256:fee82b559e7b8e1ab73aed52cd41db243dd6d345d8bff06296242260baf2c882",
+    "patchBytes": 263,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": null,
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": null,
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573846312-e650bd822cd15.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-j3ZSMo/workspace",
+        "exitCode": 128,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.829958,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:a605710393416cbb2aeaaf05e61e89ae5bd80941edf6faff1444c7d98e996285",
+        "error": null
+      },
+      "apply": null
+    },
+    "failure": {
+      "kind": "patch-invalid",
+      "name": "PatchError",
+      "message": "git apply --check rejected the patch",
+      "details": {
+        "checkRun": {
+          "argv": [
+            "git",
+            "apply",
+            "--check",
+            "--whitespace=error-all",
+            "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573846312-e650bd822cd15.diff"
+          ],
+          "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-j3ZSMo/workspace",
+          "status": 128,
+          "exitCode": 128,
+          "exit": 128,
+          "signal": null,
+          "timedOut": false,
+          "durationMs": 14.829958,
+          "duration": 14.829958,
+          "stdout": "",
+          "stderr": "error: corrupt patch at line 12\n",
+          "stdoutTruncated": false,
+          "stderrTruncated": false,
+          "truncated": false
+        }
+      }
+    },
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 263,
+      "sha256": "sha256:fee82b559e7b8e1ab73aed52cd41db243dd6d345d8bff06296242260baf2c882"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 2660,
+      "sha256": "sha256:c99a0a726c360e331267def9b9695dbbfaa6dd17c82617cfaa553537e426f63a"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "patch-invalid",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 1,
+    "semanticVerdict": "patch-invalid",
+    "message": "git apply --check rejected the patch"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r03/TASK.md b/research/agent-eval/results/claude/trials/field-update-r03/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r03/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/field-update-r03/agent.patch b/research/agent-eval/results/claude/trials/field-update-r03/agent.patch
new file mode 100644
index 0000000..cd53c71
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r03/agent.patch
@@ -0,0 +1,13 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -8,7 +8,7 @@
+   "entities": {
+     "alice": {
+       "kind": "person",
+       "name": "Alice",
+-      "summary": "summary-old"
++      "summary": "summary-new"
+     }
+   },
+   "aliases": {
diff --git a/research/agent-eval/results/claude/trials/field-update-r03/grade-task-grader.json b/research/agent-eval/results/claude/trials/field-update-r03/grade-task-grader.json
new file mode 100644
index 0000000..1fab7d5
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r03/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:f98d2e3cb95ac4032d756cf88cb8054e1c54666d11b6df5e3a2b0bc38e663da0",
+  "graderId": "agent-field-update-grader",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/workspace",
+          "field-update"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 27.675458,
+        "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "field-update: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r03/patch-audit.json b/research/agent-eval/results/claude/trials/field-update-r03/patch-audit.json
new file mode 100644
index 0000000..891165e
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r03/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:09832a40ffce2003ad79ca8e833c13ee10356010cc518b65662997d1148ee2af",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "applied",
+  "patchSha256": "sha256:67185c0bfc28b4d9f52efb2c3187b57cf4829ab84b2c854dd36a46531aadfd03",
+  "patchBytes": 294,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+        "size": 399,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+        "size": 399,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573866872-eb5ad7864bb0d.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 14.961333,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573866872-eb5ad7864bb0d.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 14.602291,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r03/task-run.json b/research/agent-eval/results/claude/trials/field-update-r03/task-run.json
new file mode 100644
index 0000000..c96a1c8
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r03/task-run.json
@@ -0,0 +1,298 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:6ebe4b699f124bdb070f4ec2b44f8a2533dcc0b2951ced11677219ab27cb3233",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r03"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r03/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r03/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 20519.502583,
+    "stdoutSha256": "sha256:6a599900952686cd82ee9a71f32079bbdceddb8b98255b1f5f39032edb5879cd",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1204,\"outputTokens\":1163,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.035159,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1204,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":1163,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.035159,\"durationApiMs\":20145,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1204,
+          "outputTokens": 1163,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.035159,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1204,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 1163,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.035159,
+      "durationApiMs": 20145,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:09832a40ffce2003ad79ca8e833c13ee10356010cc518b65662997d1148ee2af",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "applied",
+    "patchSha256": "sha256:67185c0bfc28b4d9f52efb2c3187b57cf4829ab84b2c854dd36a46531aadfd03",
+    "patchBytes": 294,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+          "size": 399,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+          "size": 399,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573866872-eb5ad7864bb0d.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.961333,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573866872-eb5ad7864bb0d.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.602291,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:f98d2e3cb95ac4032d756cf88cb8054e1c54666d11b6df5e3a2b0bc38e663da0",
+      "graderId": "agent-field-update-grader",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-i9bvKe/workspace",
+              "field-update"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 27.675458,
+            "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "field-update: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 294,
+      "sha256": "sha256:67185c0bfc28b4d9f52efb2c3187b57cf4829ab84b2c854dd36a46531aadfd03"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1932,
+      "sha256": "sha256:346f5bc3c35e3a1577b15d1847a600e8b73bd4f21ba61e96a3a37e62c8257a51"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3227,
+      "sha256": "sha256:440dad5f8e9bcd9fa24bdad68d4fd5c5d40f1e27aa81199ff3e0ec7721b98cdf"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r04/TASK.md b/research/agent-eval/results/claude/trials/field-update-r04/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r04/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/field-update-r04/agent.patch b/research/agent-eval/results/claude/trials/field-update-r04/agent.patch
new file mode 100644
index 0000000..73247f7
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r04/agent.patch
@@ -0,0 +1,12 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -10,7 +10,7 @@
+     "alice": {
+       "kind": "person",
+       "name": "Alice",
+-      "summary": "summary-old"
++      "summary": "summary-new"
+     }
+   },
+   "aliases": {
diff --git a/research/agent-eval/results/claude/trials/field-update-r04/grade-task-grader.json b/research/agent-eval/results/claude/trials/field-update-r04/grade-task-grader.json
new file mode 100644
index 0000000..85ebfb9
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r04/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:0e788c1c0db07b25ab5e5145a2e69a76cefffa2eb587d872690645909258b450",
+  "graderId": "agent-field-update-grader",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/workspace",
+          "field-update"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 29.967209,
+        "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "field-update: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r04/patch-audit.json b/research/agent-eval/results/claude/trials/field-update-r04/patch-audit.json
new file mode 100644
index 0000000..1c3cad4
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r04/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:56145345d02a45ebeb1e7cb0acb509c86264b91d34cace47fc3512305dd3af77",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "applied",
+  "patchSha256": "sha256:cbd9ba5c768e56ebf6ed8780c11d7563daa7cffff8c7ba241dca1f5766f05410",
+  "patchBytes": 279,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+        "size": 399,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+        "size": 399,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573869620-3b07686c1a09a.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 21.3615,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573869620-3b07686c1a09a.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 18.145375,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r04/task-run.json b/research/agent-eval/results/claude/trials/field-update-r04/task-run.json
new file mode 100644
index 0000000..28293c3
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r04/task-run.json
@@ -0,0 +1,298 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:73c5544c5dc6f6c78c4320e2888567420ae338d827a2a39e9b86f17b1c4c2f33",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r04"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r04/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r04/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 2629.936958,
+    "stdoutSha256": "sha256:9616d959fc25a261214dfa8291672bce8a0dcdd62f24dc6ac442018c07832fd9",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1204,\"outputTokens\":162,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.010133999999999999,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1204,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":162,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.010133999999999999,\"durationApiMs\":2291,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1204,
+          "outputTokens": 162,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.010133999999999999,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1204,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 162,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.010133999999999999,
+      "durationApiMs": 2291,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:56145345d02a45ebeb1e7cb0acb509c86264b91d34cace47fc3512305dd3af77",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "applied",
+    "patchSha256": "sha256:cbd9ba5c768e56ebf6ed8780c11d7563daa7cffff8c7ba241dca1f5766f05410",
+    "patchBytes": 279,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+          "size": 399,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+          "size": 399,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573869620-3b07686c1a09a.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 21.3615,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573869620-3b07686c1a09a.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 18.145375,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:0e788c1c0db07b25ab5e5145a2e69a76cefffa2eb587d872690645909258b450",
+      "graderId": "agent-field-update-grader",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yLObSy/workspace",
+              "field-update"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 29.967209,
+            "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "field-update: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 279,
+      "sha256": "sha256:cbd9ba5c768e56ebf6ed8780c11d7563daa7cffff8c7ba241dca1f5766f05410"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1932,
+      "sha256": "sha256:f07b2949edd8df3077b00fd9d95a4925f1796f73df17042e400b0c43605cb21f"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3225,
+      "sha256": "sha256:e688c2da94eee5595ad0b01e0e474d2de997f8d326bfe917ba642540a76bc851"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r05/TASK.md b/research/agent-eval/results/claude/trials/field-update-r05/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r05/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/field-update-r05/agent.patch b/research/agent-eval/results/claude/trials/field-update-r05/agent.patch
new file mode 100644
index 0000000..b7ba36e
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r05/agent.patch
@@ -0,0 +1,12 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -8,7 +8,7 @@
+     "alice": {
+       "kind": "person",
+       "name": "Alice",
+-      "summary": "summary-old"
++      "summary": "summary-new"
+     }
+   },
+   "aliases": {
diff --git a/research/agent-eval/results/claude/trials/field-update-r05/grade-task-grader.json b/research/agent-eval/results/claude/trials/field-update-r05/grade-task-grader.json
new file mode 100644
index 0000000..78834e1
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r05/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:a6f4b3fc7af28f082c443a5a75990ef242790b295e5de8fd0c38de92149221f1",
+  "graderId": "agent-field-update-grader",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/workspace",
+          "field-update"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 33.318292,
+        "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "field-update: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r05/patch-audit.json b/research/agent-eval/results/claude/trials/field-update-r05/patch-audit.json
new file mode 100644
index 0000000..d26186f
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r05/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:c8ffb51ba506b374e828e6fc2e065e4c4ccb233b304d8f7059d2d8c79d601ed0",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "applied",
+  "patchSha256": "sha256:8c5deb62c08c076632076d2296e1390fb414f0e18edf78255f777d1903671adc",
+  "patchBytes": 277,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+        "size": 399,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+        "size": 399,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573904842-a233d4e4dc065.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 20.609917,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573904842-a233d4e4dc065.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.667833,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/field-update-r05/task-run.json b/research/agent-eval/results/claude/trials/field-update-r05/task-run.json
new file mode 100644
index 0000000..426ea10
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/field-update-r05/task-run.json
@@ -0,0 +1,298 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:528e87fb2aa72f2ccadb88f732444149a30535c80fc1eff8692c2f6c251a9873",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r05"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r05/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/field-update-r05/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 35078.472834,
+    "stdoutSha256": "sha256:8a65c268225575cbfd1dfafdc5309a3b954e4b9406168da8da54e857e46cf201",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":1205,\"outputTokens\":2639,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.07206399999999999,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":1205,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":2639,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.07206399999999999,\"durationApiMs\":34735,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 1205,
+          "outputTokens": 2639,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.07206399999999999,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 1205,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 2639,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.07206399999999999,
+      "durationApiMs": 34735,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:c8ffb51ba506b374e828e6fc2e065e4c4ccb233b304d8f7059d2d8c79d601ed0",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "applied",
+    "patchSha256": "sha256:8c5deb62c08c076632076d2296e1390fb414f0e18edf78255f777d1903671adc",
+    "patchBytes": 277,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+          "size": 399,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+          "size": 399,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573904842-a233d4e4dc065.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 20.609917,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785573904842-a233d4e4dc065.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.667833,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:a6f4b3fc7af28f082c443a5a75990ef242790b295e5de8fd0c38de92149221f1",
+      "graderId": "agent-field-update-grader",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Ow65e1/workspace",
+              "field-update"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 33.318292,
+            "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "field-update: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 277,
+      "sha256": "sha256:8c5deb62c08c076632076d2296e1390fb414f0e18edf78255f777d1903671adc"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1932,
+      "sha256": "sha256:c7fee02d646c840e756f8dd0941d1f5aad23e05c9d5bb94cabdf3a4a212bfbbe"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3227,
+      "sha256": "sha256:8472a72ad7f70be9e7486bbce2118e48ce8a74be6adae0ff130a69438d4395a9"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/TASK.md b/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/agent.patch b/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/agent.patch
new file mode 100644
index 0000000..fdba129
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/agent.patch
@@ -0,0 +1,49 @@
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1,1 +1,1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -16,6 +16,11 @@
+     "beta": {
+       "kind": "card",
+       "title": "Beta Card",
+       "color": "#059669"
+-    }
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
+     }
+   },
+   "aliases": {
+@@ -22,4 +27,5 @@
+   "aliases": {
+     "Alpha Card": "alpha",
+-    "Beta Card": "beta"
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
+   },
+   "stages": [
+     {
+@@ -30,4 +36,5 @@
+       "entities": [
+         "alpha",
+-        "beta"
++        "beta",
++        "gamma"
+       ]
+     }
+   ],
+@@ -37,4 +44,5 @@
+     "cardOrder": [
+       "alpha",
+-      "beta"
++      "beta",
++      "gamma"
+     ]
+   },
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/patch-audit.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/patch-audit.json
new file mode 100644
index 0000000..78bc7bf
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/patch-audit.json
@@ -0,0 +1,99 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:7d65facd435834371e9a0a14897f625ff8b9b3c4d0e51f464cf0ae3d016c659b",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "rejected",
+  "patchSha256": "sha256:770dcba500dd445b1ee43e2717686d3ef2fbd57756a26d347f9c4104a2b991c3",
+  "patchBytes": 2461,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": null,
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 4,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": null,
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574435828-e4a2bdeb6ab5a.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-T3JOxv/workspace",
+      "exitCode": 128,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 21.056834,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:8eb5fb3f1054381643c3673f6e5fa294934f64c17fbd0817aab44c6b4aacb205",
+      "error": null
+    },
+    "apply": null
+  },
+  "failure": {
+    "kind": "patch-invalid",
+    "name": "PatchError",
+    "message": "git apply --check rejected the patch",
+    "details": {
+      "checkRun": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574435828-e4a2bdeb6ab5a.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-T3JOxv/workspace",
+        "status": 128,
+        "exitCode": 128,
+        "exit": 128,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 21.056834,
+        "duration": 21.056834,
+        "stdout": "",
+        "stderr": "error: corrupt patch at line 24\n",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "truncated": false
+      }
+    }
+  },
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/task-run.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/task-run.json
new file mode 100644
index 0000000..96d3fee
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r01/task-run.json
@@ -0,0 +1,223 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:d7c57685e7c52ac0c0cf5b5479eacc353a887873f09b066aea87e26baf9c5495",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r01"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-T3JOxv/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r01/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r01/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-T3JOxv/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 231543.67,
+    "stdoutSha256": "sha256:6c00198a6a0ef0c816deb24640f3124967218fb8d682e8cef6d6b1a8f2d9de09",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":2443,\"outputTokens\":19966,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.511429,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":2443,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":19966,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.511429,\"durationApiMs\":231215,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 2443,
+          "outputTokens": 19966,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.511429,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 2443,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 19966,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.511429,
+      "durationApiMs": 231215,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:7d65facd435834371e9a0a14897f625ff8b9b3c4d0e51f464cf0ae3d016c659b",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "rejected",
+    "patchSha256": "sha256:770dcba500dd445b1ee43e2717686d3ef2fbd57756a26d347f9c4104a2b991c3",
+    "patchBytes": 2461,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": null,
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 4,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": null,
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574435828-e4a2bdeb6ab5a.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-T3JOxv/workspace",
+        "exitCode": 128,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 21.056834,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:8eb5fb3f1054381643c3673f6e5fa294934f64c17fbd0817aab44c6b4aacb205",
+        "error": null
+      },
+      "apply": null
+    },
+    "failure": {
+      "kind": "patch-invalid",
+      "name": "PatchError",
+      "message": "git apply --check rejected the patch",
+      "details": {
+        "checkRun": {
+          "argv": [
+            "git",
+            "apply",
+            "--check",
+            "--whitespace=error-all",
+            "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574435828-e4a2bdeb6ab5a.diff"
+          ],
+          "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-T3JOxv/workspace",
+          "status": 128,
+          "exitCode": 128,
+          "exit": 128,
+          "signal": null,
+          "timedOut": false,
+          "durationMs": 21.056834,
+          "duration": 21.056834,
+          "stdout": "",
+          "stderr": "error: corrupt patch at line 24\n",
+          "stdoutTruncated": false,
+          "stderrTruncated": false,
+          "truncated": false
+        }
+      }
+    },
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 2461,
+      "sha256": "sha256:770dcba500dd445b1ee43e2717686d3ef2fbd57756a26d347f9c4104a2b991c3"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 2915,
+      "sha256": "sha256:0cb4a082fe4af344ddebcb1253adadc46b85f545bbb4a60b1e882d97140bdefc"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    }
+  ],
+  "verdict": "patch-invalid",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 1,
+    "semanticVerdict": "patch-invalid",
+    "message": "git apply --check rejected the patch"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r02/TASK.md b/research/agent-eval/results/claude/trials/pattern-c-runtime-r02/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r02/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r02/task-run.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r02/task-run.json
new file mode 100644
index 0000000..5d4f237
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r02/task-run.json
@@ -0,0 +1,74 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:1e758add780932a28d4a8805f1027723d18ea577ceef2b37205920c827061b04",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r02"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-M2v46R/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r02/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r02/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-M2v46R/workspace",
+    "exitCode": 3,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 300049.4625,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:84c3787d7bf666ffee1ef31f289ba12d19f9551653d0082863d107d4b37668f9",
+    "stdout": "",
+    "stderr": "Error: spawnSync claude ETIMEDOUT\n    at Object.spawnSync (node:internal/child_process:1120:20)\n    at spawnSync (node:child_process:902:24)\n    at Object.<anonymous> (/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js:41:18)\n    at Module._compile (node:internal/modules/cjs/loader:1781:14)\n    at Object..js (node:internal/modules/cjs/loader:1913:10)\n    at Module.load (node:internal/modules/cjs/loader:1505:32)\n    at Function._load (node:internal/modules/cjs/loader:1309:12)\n    at wrapModuleLoad (node:internal/modules/cjs/loader:254:19)\n    at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:171:5)\n    at node:internal/main/run_main_module:36:49\n",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": null,
+  "grades": [],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    }
+  ],
+  "verdict": "infra-error",
+  "termination": {
+    "kind": "infrastructure-error",
+    "processExitCode": 3,
+    "semanticVerdict": "infra-error",
+    "message": "agent command failed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/TASK.md b/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/agent.patch b/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/agent.patch
new file mode 100644
index 0000000..ecb0051
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/agent.patch
@@ -0,0 +1,44 @@
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1,1 +1,1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -17,7 +17,12 @@
+       "kind": "card",
+       "title": "Beta Card",
+       "color": "#059669"
+-    }
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
++    }
+   },
+   "aliases": {
+     "Alpha Card": "alpha",
+@@ -22,4 +22,5 @@
+   "aliases": {
+     "Alpha Card": "alpha",
+-    "Beta Card": "beta"
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
+   },
+@@ -30,4 +30,5 @@
+       "entities": [
+         "alpha",
+-        "beta"
++        "beta",
++        "gamma"
+       ]
+@@ -37,4 +37,5 @@
+     "cardOrder": [
+       "alpha",
+-      "beta"
++      "beta",
++      "gamma"
+     ]
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/patch-audit.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/patch-audit.json
new file mode 100644
index 0000000..24ceb3b
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/patch-audit.json
@@ -0,0 +1,99 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:91cac30579863ebb581b53be329ced063ca6ebcfb49a3205e1823d7779b788a4",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "rejected",
+  "patchSha256": "sha256:00f856066a26111dbb0dc23afa0d89710e9d54a1cd69a43cbb8d138d7e583f6e",
+  "patchBytes": 2433,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": null,
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 4,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": null,
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574836572-a1cd82ff18c64.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-8VTQr7/workspace",
+      "exitCode": 1,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 19.206875,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:054b15b4694a5d12e4cb51eb6b5d31e7b015408f2415eafe5e3a654029592696",
+      "error": null
+    },
+    "apply": null
+  },
+  "failure": {
+    "kind": "patch-invalid",
+    "name": "PatchError",
+    "message": "git apply --check rejected the patch",
+    "details": {
+      "checkRun": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574836572-a1cd82ff18c64.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-8VTQr7/workspace",
+        "status": 1,
+        "exitCode": 1,
+        "exit": 1,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 19.206875,
+        "duration": 19.206875,
+        "stdout": "",
+        "stderr": "error: patch failed: lib/data/data.json:22\nerror: lib/data/data.json: patch does not apply\n",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "truncated": false
+      }
+    }
+  },
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/task-run.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/task-run.json
new file mode 100644
index 0000000..9a86b04
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r03/task-run.json
@@ -0,0 +1,223 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:495af23afb9d35b3d74f0547b57ef22f80e85b980877159bc46e3e6db566f3f1",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r03"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-8VTQr7/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r03/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r03/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-8VTQr7/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 100588.355334,
+    "stdoutSha256": "sha256:2ae23305d145989abcb4da3b58b64a9b58e442964f372afb92af0ea32d233a00",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":2444,\"outputTokens\":9733,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.25560900000000003,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":2444,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":9733,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.25560900000000003,\"durationApiMs\":100259,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 2444,
+          "outputTokens": 9733,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.25560900000000003,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 2444,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 9733,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.25560900000000003,
+      "durationApiMs": 100259,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:91cac30579863ebb581b53be329ced063ca6ebcfb49a3205e1823d7779b788a4",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "rejected",
+    "patchSha256": "sha256:00f856066a26111dbb0dc23afa0d89710e9d54a1cd69a43cbb8d138d7e583f6e",
+    "patchBytes": 2433,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": null,
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 4,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": null,
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574836572-a1cd82ff18c64.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-8VTQr7/workspace",
+        "exitCode": 1,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 19.206875,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:054b15b4694a5d12e4cb51eb6b5d31e7b015408f2415eafe5e3a654029592696",
+        "error": null
+      },
+      "apply": null
+    },
+    "failure": {
+      "kind": "patch-invalid",
+      "name": "PatchError",
+      "message": "git apply --check rejected the patch",
+      "details": {
+        "checkRun": {
+          "argv": [
+            "git",
+            "apply",
+            "--check",
+            "--whitespace=error-all",
+            "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574836572-a1cd82ff18c64.diff"
+          ],
+          "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-8VTQr7/workspace",
+          "status": 1,
+          "exitCode": 1,
+          "exit": 1,
+          "signal": null,
+          "timedOut": false,
+          "durationMs": 19.206875,
+          "duration": 19.206875,
+          "stdout": "",
+          "stderr": "error: patch failed: lib/data/data.json:22\nerror: lib/data/data.json: patch does not apply\n",
+          "stdoutTruncated": false,
+          "stderrTruncated": false,
+          "truncated": false
+        }
+      }
+    },
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 2433,
+      "sha256": "sha256:00f856066a26111dbb0dc23afa0d89710e9d54a1cd69a43cbb8d138d7e583f6e"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 2967,
+      "sha256": "sha256:7127ed9c936434ee71a1eebddf449b10281b89292f11b389c283c06e309abef0"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    }
+  ],
+  "verdict": "patch-invalid",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 1,
+    "semanticVerdict": "patch-invalid",
+    "message": "git apply --check rejected the patch"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/TASK.md b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/agent.patch b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/agent.patch
new file mode 100644
index 0000000..f51759e
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/agent.patch
@@ -0,0 +1,50 @@
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1,1 +1,1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -14,27 +14,35 @@
+       "color": "#2563eb"
+     },
+     "beta": {
+       "kind": "card",
+       "title": "Beta Card",
+       "color": "#059669"
+-    }
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
++    }
+   },
+   "aliases": {
+     "Alpha Card": "alpha",
+-    "Beta Card": "beta"
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
+   },
+   "stages": [
+     {
+       "key": "gallery",
+       "name": "Gallery",
+       "entities": [
+         "alpha",
+-        "beta"
++        "beta",
++        "gamma"
+       ]
+     }
+   ],
+   "domain": {
+     "cardOrder": [
+       "alpha",
+-      "beta"
++      "beta",
++      "gamma"
+     ]
+   },
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate-stability.dom.html b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate-stability.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate-stability.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate-stability.png b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate-stability.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate-stability.png differ
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate.dom.html b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate.png b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/candidate.png differ
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/grade-task-grader.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/grade-task-grader.json
new file mode 100644
index 0000000..a7a64c4
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/grade-task-grader.json
@@ -0,0 +1,153 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:c78beeeac5f60005832e9564d1a61dde325ec209d89872bb463dd53faa673e7e",
+  "graderId": "agent-pattern-c-grader",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "verdict": "passed",
+  "score": 8,
+  "maximumScore": 8,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+          "pattern-c"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 29.076083,
+        "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "pattern-c: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "browser-producer",
+      "type": "command",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/trusted-graders/task-grader/browser-evidence.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+          "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r04",
+          "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+          "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/trusted-tools"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 13661.467541,
+        "stdoutSha256": "sha256:158a8b1e9f61502cf43484af3ae2c816dbc0acc8e44b755e05d9e1cd50896553",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "{\"runtime\":\"runtime:3cf2716ed67e4776e7fb5a1eb7ba9dcf68df327a1163d112a1defd0509c1d993\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "runtime-mount",
+      "type": "runtime-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery",
+        "file": "runtime-evidence.json",
+        "evidenceId": "runtime:3cf2716ed67e4776e7fb5a1eb7ba9dcf68df327a1163d112a1defd0509c1d993",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "summary": {
+            "assertions": 4,
+            "passed": 4,
+            "failed": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "visual-regression",
+      "type": "visual-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery-desktop",
+        "file": "visual-evidence.json",
+        "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "scenarios": [
+            {
+              "id": "pattern-c-gallery-desktop",
+              "status": "passed",
+              "errors": []
+            }
+          ],
+          "summary": {
+            "total": 1,
+            "passed": 1,
+            "failed": 0,
+            "notAssessed": 0
+          }
+        }
+      }
+    }
+  ],
+  "summary": {
+    "total": 5,
+    "passed": 5,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/patch-audit.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/patch-audit.json
new file mode 100644
index 0000000..1ecc717
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/patch-audit.json
@@ -0,0 +1,138 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:71797791c1925890fd330ecbb26f2d483cf7a0e34a103fc8a6867a4039510185",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "applied",
+  "patchSha256": "sha256:fbd1f3cf9582212db5f48c34217ddf4a7fd31144cce8cd8659daf512ba67636d",
+  "patchBytes": 2492,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+        "size": 743,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+        "size": 843,
+        "target": null
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+        "size": 1079,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+        "size": 1236,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574963625-2400b6c2df569.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 34.301417,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574963625-2400b6c2df569.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.816708,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/reference.dom.html b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/reference.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/reference.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/reference.png b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/reference.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/reference.png differ
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/runtime-evidence.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/runtime-evidence.json
new file mode 100644
index 0000000..0fd4b9a
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/runtime-evidence.json
@@ -0,0 +1,54 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "runtime-evidence",
+  "evidenceId": "runtime:3cf2716ed67e4776e7fb5a1eb7ba9dcf68df327a1163d112a1defd0509c1d993",
+  "scenarioId": "pattern-c-gallery",
+  "subjectTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "producer": {
+    "name": "headless-chrome-pattern-c",
+    "version": "1.2.0"
+  },
+  "environment": {
+    "browser": "Google Chrome 151.0.7922.71",
+    "platform": "darwin",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670"
+  },
+  "assertions": [
+    {
+      "id": "error-collector",
+      "status": "passed"
+    },
+    {
+      "id": "mount-status",
+      "status": "passed",
+      "actual": "passed"
+    },
+    {
+      "id": "card-count",
+      "status": "passed",
+      "actual": 3,
+      "expected": 3
+    },
+    {
+      "id": "gamma-visible",
+      "status": "passed"
+    }
+  ],
+  "consoleErrors": [],
+  "pageErrors": [],
+  "networkFailures": [],
+  "artifacts": [
+    {
+      "id": "candidate-dom",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "candidate-browser-log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "sha256": "sha256:8d2174e4152b3d97fe4e6008b008f23a0eebd64c42b7599bba791ff61cc35e54"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/stability-diff.png b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/stability-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/stability-diff.png differ
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/task-run.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/task-run.json
new file mode 100644
index 0000000..3addcb4
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/task-run.json
@@ -0,0 +1,513 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:d760c86dff6d4d960aca95fe2473ce10baaa537bc94534635abc413a1aab1310",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r04"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r04/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r04/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 126989.818792,
+    "stdoutSha256": "sha256:7306018546f493d1aa3f24f637eaa3bf2b6a9eb5054d0de37bc2270229c68074",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":2443,\"outputTokens\":11854,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.308629,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":2443,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":11854,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.308629,\"durationApiMs\":126661,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 2443,
+          "outputTokens": 11854,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.308629,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 2443,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 11854,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.308629,
+      "durationApiMs": 126661,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:71797791c1925890fd330ecbb26f2d483cf7a0e34a103fc8a6867a4039510185",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "applied",
+    "patchSha256": "sha256:fbd1f3cf9582212db5f48c34217ddf4a7fd31144cce8cd8659daf512ba67636d",
+    "patchBytes": 2492,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+          "size": 743,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+          "size": 843,
+          "target": null
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+          "size": 1079,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+          "size": 1236,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574963625-2400b6c2df569.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 34.301417,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785574963625-2400b6c2df569.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.816708,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:c78beeeac5f60005832e9564d1a61dde325ec209d89872bb463dd53faa673e7e",
+      "graderId": "agent-pattern-c-grader",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+      "verdict": "passed",
+      "score": 8,
+      "maximumScore": 8,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+              "pattern-c"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 29.076083,
+            "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "pattern-c: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "browser-producer",
+          "type": "command",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/trusted-graders/task-grader/browser-evidence.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/workspace",
+              "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r04",
+              "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+              "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-O4TaVb/trusted-tools"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 13661.467541,
+            "stdoutSha256": "sha256:158a8b1e9f61502cf43484af3ae2c816dbc0acc8e44b755e05d9e1cd50896553",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "{\"runtime\":\"runtime:3cf2716ed67e4776e7fb5a1eb7ba9dcf68df327a1163d112a1defd0509c1d993\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "runtime-mount",
+          "type": "runtime-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery",
+            "file": "runtime-evidence.json",
+            "evidenceId": "runtime:3cf2716ed67e4776e7fb5a1eb7ba9dcf68df327a1163d112a1defd0509c1d993",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "summary": {
+                "assertions": 4,
+                "passed": 4,
+                "failed": 0
+              }
+            }
+          }
+        },
+        {
+          "id": "visual-regression",
+          "type": "visual-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery-desktop",
+            "file": "visual-evidence.json",
+            "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "scenarios": [
+                {
+                  "id": "pattern-c-gallery-desktop",
+                  "status": "passed",
+                  "errors": []
+                }
+              ],
+              "summary": {
+                "total": 1,
+                "passed": 1,
+                "failed": 0,
+                "notAssessed": 0
+              }
+            }
+          }
+        }
+      ],
+      "summary": {
+        "total": 5,
+        "passed": 5,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 2492,
+      "sha256": "sha256:fbd1f3cf9582212db5f48c34217ddf4a7fd31144cce8cd8659daf512ba67636d"
+    },
+    {
+      "id": "generated-candidate-stability.chrome.log",
+      "path": "candidate-stability.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 552,
+      "sha256": "sha256:d434687df41aa7918b3c7a5a0e54e7f4620f864ecb40b817344a12a52e48c98d"
+    },
+    {
+      "id": "generated-candidate-stability.dom.html",
+      "path": "candidate-stability.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate-stability.png",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-candidate.chrome.log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 1983,
+      "sha256": "sha256:8d2174e4152b3d97fe4e6008b008f23a0eebd64c42b7599bba791ff61cc35e54"
+    },
+    {
+      "id": "generated-candidate.dom.html",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate.png",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 4934,
+      "sha256": "sha256:add2a1269eaea164680339d1b800b5cd70ecd25794bc15b3e58653d5caac58af"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 4167,
+      "sha256": "sha256:883a11b398c21227df3a88ba2839f13c8670cbcda5f190a84f33b66443246dde"
+    },
+    {
+      "id": "generated-reference.chrome.log",
+      "path": "reference.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 255,
+      "sha256": "sha256:c89dec168c7f15c1ddbf83a170a0bdc525a15edb97d943a75a519f28d0829831"
+    },
+    {
+      "id": "generated-reference.dom.html",
+      "path": "reference.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-reference.png",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-runtime-evidence.json",
+      "path": "runtime-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 1411,
+      "sha256": "sha256:7706dd7d5df7cc1e03858040aca532e0db5b537f90cb7008d1ee7cc25291c948"
+    },
+    {
+      "id": "generated-stability-diff.png",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    },
+    {
+      "id": "generated-visual-diff.png",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "generated-visual-evidence.json",
+      "path": "visual-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 2101,
+      "sha256": "sha256:4a873f05810c949bd2357d3d90872e5238a9a49f2424d35d15858e4faecdf902"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/visual-diff.png b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/visual-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/visual-diff.png differ
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/visual-evidence.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/visual-evidence.json
new file mode 100644
index 0000000..a6bee82
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r04/visual-evidence.json
@@ -0,0 +1,65 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "visual-evidence",
+  "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+  "referenceTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "candidateTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "configurationSha256": "sha256:a6a063638a9b86f8d9c89b8dede46bc2069caf1067400f293fdf3ff6c185a41e",
+  "producer": {
+    "name": "headless-chrome-pillow",
+    "version": "1.2.0"
+  },
+  "thresholds": {
+    "maxPixelDiffRatio": 0.02,
+    "minComputedStyleScore": 0.98,
+    "minCoverage": 1
+  },
+  "scenarios": [
+    {
+      "id": "pattern-c-gallery-desktop",
+      "viewport": {
+        "width": 1100,
+        "height": 720
+      },
+      "pixelDiffRatio": 0,
+      "computedStyleScore": 1,
+      "coverage": 1,
+      "stabilityFailures": 0,
+      "referenceArtifact": "reference-screenshot",
+      "candidateArtifact": "candidate-screenshot",
+      "diffArtifact": "diff-screenshot"
+    }
+  ],
+  "artifacts": [
+    {
+      "id": "reference-screenshot",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "candidate-screenshot",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "diff-screenshot",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "candidate-stability-screenshot",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "stability-diff-screenshot",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/TASK.md b/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/agent.patch b/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/agent.patch
new file mode 100644
index 0000000..caf6e45
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/agent.patch
@@ -0,0 +1,51 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -14,8 +14,13 @@
+       "color": "#2563eb"
+     },
+     "beta": {
+       "kind": "card",
+       "title": "Beta Card",
+       "color": "#059669"
+-    }
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
++    }
+   },
+   "aliases": {
+@@ -22,5 +27,6 @@
+   "aliases": {
+     "Alpha Card": "alpha",
+-    "Beta Card": "beta"
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
+   },
+   "stages": [
+@@ -28,6 +34,7 @@
+       "key": "gallery",
+       "name": "Gallery",
+       "entities": [
+         "alpha",
+-        "beta"
++        "beta",
++        "gamma"
+       ]
+@@ -36,6 +43,7 @@
+   "domain": {
+     "cardOrder": [
+       "alpha",
+-      "beta"
++      "beta",
++      "gamma"
+     ]
+   },
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1 +1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/patch-audit.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/patch-audit.json
new file mode 100644
index 0000000..0fd5870
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/patch-audit.json
@@ -0,0 +1,99 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:3596347f157a38d17316843de64d66c921dfb4a34e364eb2279d7dfa4baea45c",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "rejected",
+  "patchSha256": "sha256:2649706bf415a7b28cf09ce7075f9d6d3017a869cf66e8015c13dda437d174e8",
+  "patchBytes": 2537,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": null,
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 4,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    }
+  ],
+  "actualOperations": [],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": null,
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785575176925-f9951cf8b0d45.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-mzh4Hq/workspace",
+      "exitCode": 128,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 26.0165,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:62ccebd4d1a58360a0ab84d7032ef868076a6b813b79dd5f2292710f327e0bcb",
+      "error": null
+    },
+    "apply": null
+  },
+  "failure": {
+    "kind": "patch-invalid",
+    "name": "PatchError",
+    "message": "git apply --check rejected the patch",
+    "details": {
+      "checkRun": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785575176925-f9951cf8b0d45.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-mzh4Hq/workspace",
+        "status": 128,
+        "exitCode": 128,
+        "exit": 128,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 26.0165,
+        "duration": 26.0165,
+        "stdout": "",
+        "stderr": "error: patch fragment without header at line 20: @@ -22,5 +27,6 @@\n",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "truncated": false
+      }
+    }
+  },
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/task-run.json b/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/task-run.json
new file mode 100644
index 0000000..330d1f2
--- /dev/null
+++ b/research/agent-eval/results/claude/trials/pattern-c-runtime-r05/task-run.json
@@ -0,0 +1,223 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:07e9c45767c9629be80216750400fa6df478397e9d3bca19e06fe327616100a7",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r05"
+  },
+  "agent": {
+    "provider": "claude-code-2.1.185",
+    "model": "sonnet alias (provider metadata recorded)",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/claude-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-mzh4Hq/workspace",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r05/agent.patch",
+      "/private/tmp/sg-agent-claude-final-release/trials/pattern-c-runtime-r05/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-mzh4Hq/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 199414.87625,
+    "stdoutSha256": "sha256:77c5d7c684ddcaa577d51271c8e482339575c3081e15bda51cf3fe163ad3b4c5",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "{\"provider\":\"claude-code\",\"declaredModel\":\"sonnet\",\"modelUsage\":{\"MiniMax-M3[1M]\":{\"inputTokens\":2444,\"outputTokens\":16845,\"cacheReadInputTokens\":128,\"cacheCreationInputTokens\":0,\"webSearchRequests\":0,\"costUSD\":0.433409,\"contextWindow\":1000000,\"maxOutputTokens\":32000}},\"usage\":{\"input_tokens\":2444,\"cache_creation_input_tokens\":0,\"cache_read_input_tokens\":128,\"output_tokens\":16845,\"server_tool_use\":{\"web_search_requests\":0,\"web_fetch_requests\":0},\"service_tier\":\"standard\",\"cache_creation\":{\"ephemeral_1h_input_tokens\":0,\"ephemeral_5m_input_tokens\":0},\"inference_geo\":\"\",\"iterations\":[],\"speed\":\"standard\"},\"totalCostUsd\":0.433409,\"durationApiMs\":198830,\"stopReason\":\"end_turn\",\"permissionDenials\":[]}\n",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": {
+      "provider": "claude-code",
+      "declaredModel": "sonnet",
+      "modelUsage": {
+        "MiniMax-M3[1M]": {
+          "inputTokens": 2444,
+          "outputTokens": 16845,
+          "cacheReadInputTokens": 128,
+          "cacheCreationInputTokens": 0,
+          "webSearchRequests": 0,
+          "costUSD": 0.433409,
+          "contextWindow": 1000000,
+          "maxOutputTokens": 32000
+        }
+      },
+      "usage": {
+        "input_tokens": 2444,
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 128,
+        "output_tokens": 16845,
+        "server_tool_use": {
+          "web_search_requests": 0,
+          "web_fetch_requests": 0
+        },
+        "service_tier": "standard",
+        "cache_creation": {
+          "ephemeral_1h_input_tokens": 0,
+          "ephemeral_5m_input_tokens": 0
+        },
+        "inference_geo": "",
+        "iterations": [],
+        "speed": "standard"
+      },
+      "totalCostUsd": 0.433409,
+      "durationApiMs": 198830,
+      "stopReason": "end_turn",
+      "permissionDenials": []
+    }
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:3596347f157a38d17316843de64d66c921dfb4a34e364eb2279d7dfa4baea45c",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "rejected",
+    "patchSha256": "sha256:2649706bf415a7b28cf09ce7075f9d6d3017a869cf66e8015c13dda437d174e8",
+    "patchBytes": 2537,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": null,
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 4,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      }
+    ],
+    "actualOperations": [],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": null,
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785575176925-f9951cf8b0d45.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-mzh4Hq/workspace",
+        "exitCode": 128,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 26.0165,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:62ccebd4d1a58360a0ab84d7032ef868076a6b813b79dd5f2292710f327e0bcb",
+        "error": null
+      },
+      "apply": null
+    },
+    "failure": {
+      "kind": "patch-invalid",
+      "name": "PatchError",
+      "message": "git apply --check rejected the patch",
+      "details": {
+        "checkRun": {
+          "argv": [
+            "git",
+            "apply",
+            "--check",
+            "--whitespace=error-all",
+            "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-83564-1785575176925-f9951cf8b0d45.diff"
+          ],
+          "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-mzh4Hq/workspace",
+          "status": 128,
+          "exitCode": 128,
+          "exit": 128,
+          "signal": null,
+          "timedOut": false,
+          "durationMs": 26.0165,
+          "duration": 26.0165,
+          "stdout": "",
+          "stderr": "error: patch fragment without header at line 20: @@ -22,5 +27,6 @@\n",
+          "stdoutTruncated": false,
+          "stderrTruncated": false,
+          "truncated": false
+        }
+      }
+    },
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 2537,
+      "sha256": "sha256:2649706bf415a7b28cf09ce7075f9d6d3017a869cf66e8015c13dda437d174e8"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 2944,
+      "sha256": "sha256:35032c8e0365fd89860318ae676e064da3375c6494dd87f9f8c8e6183e940cb6"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    }
+  ],
+  "verdict": "patch-invalid",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 1,
+    "semanticVerdict": "patch-invalid",
+    "message": "git apply --check rejected the patch"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/executed-tooling/execution-bundle.json b/research/agent-eval/results/executed-tooling/execution-bundle.json
new file mode 100644
index 0000000..02792e8
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/execution-bundle.json
@@ -0,0 +1,17 @@
+{
+  "bundleVersion": "1.0",
+  "kind": "executed-tooling",
+  "scriptsTreeSha256": "sha256:76864eb0e641bbe39bbd2694b0102985c23382150307e5710c558b26d2138283",
+  "source": "scripts/",
+  "usedBy": [
+    "scripted/experiment.raw.json",
+    "claude/experiment.raw.json"
+  ],
+  "capabilities": {
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/agent-task-manifest.js b/research/agent-eval/results/executed-tooling/scripts/lib/agent-task-manifest.js
new file mode 100644
index 0000000..3aa428f
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/agent-task-manifest.js
@@ -0,0 +1,608 @@
+'use strict';
+
+/**
+ * Read-only AgentTaskManifest v1 contract helpers.
+ *
+ * This module intentionally does not depend on the path-policy package. It is a
+ * small, self-contained boundary for validating an already materialized task
+ * description and (optionally) checking the files it names.
+ */
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+
+const TASK_VERSION = '1.0';
+const DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;
+const TOP_LEVEL_FIELDS = [
+  'taskVersion', 'taskId', 'instructions', 'source', 'inputs',
+  'filePolicy', 'patchPolicy', 'graders', 'evidence', 'execution',
+];
+const INSTRUCTION_FIELDS = ['text', 'sha256'];
+const SOURCE_FIELDS = ['root', 'revision', 'treeSha256'];
+const INPUT_FIELDS = ['id', 'path', 'role', 'sha256'];
+const FILE_POLICY_FIELDS = [
+  'allowed', 'forbidden', 'denyPrecedence', 'allowSymlinks',
+  'allowHardlinks', 'maxChangedFiles', 'maxPatchBytes',
+];
+const ALLOWED_FIELDS = ['pattern', 'operations'];
+const PATCH_POLICY_FIELDS = ['format', 'fuzz', 'allowBinary'];
+const GRADER_FIELDS = ['id', 'spec', 'weight', 'sha256', 'treeSha256'];
+const EVIDENCE_FIELDS = ['runtime', 'visual'];
+const EXECUTION_FIELDS = ['timeoutMs', 'network', 'maxOutputBytes'];
+
+// Bounds are deliberately finite so an otherwise valid JSON number cannot
+// disable a runner's resource gate through an unbounded integer.
+const RESOURCE_LIMITS = Object.freeze({
+  timeoutMs: 24 * 60 * 60 * 1000,
+  maxOutputBytes: 1024 * 1024 * 1024,
+  maxChangedFiles: 1000000,
+  maxPatchBytes: 1024 * 1024 * 1024,
+});
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function hasOwn(value, key) {
+  return Object.prototype.hasOwnProperty.call(value, key);
+}
+
+function ownKeys(value) {
+  return isObject(value) ? Object.keys(value) : [];
+}
+
+function issue(issues, pathName, message) {
+  issues.push({ path: pathName, message });
+}
+
+function checkExactKeys(value, allowed, pathName, issues) {
+  if (!isObject(value)) return;
+  const allowedSet = new Set(allowed);
+  for (const key of Object.keys(value)) {
+    if (!allowedSet.has(key)) issue(issues, `${pathName}.${key}`, 'unknown field');
+  }
+}
+
+function requireObject(value, pathName, issues) {
+  if (!isObject(value)) {
+    issue(issues, pathName, 'must be an object');
+    return false;
+  }
+  return true;
+}
+
+function requireArray(value, pathName, issues) {
+  if (!Array.isArray(value)) {
+    issue(issues, pathName, 'must be an array');
+    return false;
+  }
+  return true;
+}
+
+function requireString(value, pathName, issues, options = {}) {
+  if (typeof value !== 'string' || (options.nonEmpty !== false && value.length === 0)) {
+    issue(issues, pathName, options.message || (options.nonEmpty === false ? 'must be a string' : 'must be a non-empty string'));
+    return false;
+  }
+  if (value.includes('\0')) issue(issues, pathName, 'must not contain NUL');
+  return true;
+}
+
+function requireDigest(value, pathName, issues) {
+  if (typeof value !== 'string' || !DIGEST_PATTERN.test(value)) {
+    issue(issues, pathName, 'must be a sha256:<64 lowercase hex> digest');
+    return false;
+  }
+  return true;
+}
+
+/**
+ * Canonical JSON sorts object keys recursively and preserves array order.
+ * JSON.stringify supplies the stable compact UTF-8 material that is hashed.
+ */
+function canonicalize(value) {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (isObject(value)) {
+    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonicalize(value[key])]));
+  }
+  return value;
+}
+
+function canonicalJson(value) {
+  return JSON.stringify(canonicalize(value));
+}
+
+function sha256(value) {
+  const bytes = Buffer.isBuffer(value) ? value : Buffer.from(String(value), 'utf8');
+  return `sha256:${crypto.createHash('sha256').update(bytes).digest('hex')}`;
+}
+
+function withoutTaskId(manifest) {
+  if (!isObject(manifest)) return manifest;
+  const material = { ...manifest };
+  delete material.taskId;
+  return material;
+}
+
+function computeTaskId(manifest) {
+  if (!isObject(manifest)) throw new TypeError('manifest must be an object');
+  return sha256(canonicalJson(withoutTaskId(manifest)));
+}
+
+function validateSafeRelativePath(value, pathName, issues, options = {}) {
+  if (!requireString(value, pathName, issues)) return false;
+  if (value.includes('\\')) issue(issues, pathName, 'must use POSIX separators and must not contain backslash');
+  if (options.allowGlob !== true && /[*?{}\[\]]/.test(value)) issue(issues, pathName, 'must be a concrete path, not a glob pattern');
+  if (path.posix.isAbsolute(value) || /^\/+/.test(value) || /^[A-Za-z]:/.test(value)) {
+    issue(issues, pathName, 'must be a relative path');
+  }
+  const segments = value.split('/');
+  if (segments.some((segment) => segment === '..')) issue(issues, pathName, 'must not contain .. path segments');
+  if (segments.some((segment) => segment === '')) issue(issues, pathName, 'must not contain empty path segments');
+  const dotSegments = segments.filter((segment) => segment === '.');
+  if (dotSegments.length && !(options.allowDot === 'self' && value === '.')) {
+    issue(issues, pathName, 'must not contain . path segments');
+  }
+  return true;
+}
+
+function checkDuplicateStrings(values, pathName, issues) {
+  const seen = new Map();
+  values.forEach((value, index) => {
+    if (typeof value !== 'string') return;
+    if (seen.has(value)) issue(issues, `${pathName}[${index}]`, `duplicate value; first occurrence is ${pathName}[${seen.get(value)}]`);
+    else seen.set(value, index);
+  });
+}
+
+function checkDuplicateIds(items, pathName, issues) {
+  const seen = new Map();
+  items.forEach((item, index) => {
+    if (!isObject(item) || typeof item.id !== 'string') return;
+    if (seen.has(item.id)) issue(issues, `${pathName}[${index}].id`, `duplicate id; first occurrence is ${pathName}[${seen.get(item.id)}].id`);
+    else seen.set(item.id, index);
+  });
+}
+
+function validateInstructions(value, issues) {
+  if (!requireObject(value, 'instructions', issues)) return;
+  checkExactKeys(value, INSTRUCTION_FIELDS, 'instructions', issues);
+  requireString(value.text, 'instructions.text', issues);
+  requireDigest(value.sha256, 'instructions.sha256', issues);
+  if (typeof value.text === 'string' && typeof value.sha256 === 'string' && DIGEST_PATTERN.test(value.sha256)) {
+    const expected = sha256(Buffer.from(value.text, 'utf8'));
+    if (expected !== value.sha256) issue(issues, 'instructions.sha256', `digest does not match instructions.text (expected ${expected})`);
+  }
+}
+
+function validateSource(value, issues) {
+  if (!requireObject(value, 'source', issues)) return;
+  checkExactKeys(value, SOURCE_FIELDS, 'source', issues);
+  validateSafeRelativePath(value.root, 'source.root', issues, { allowDot: 'self' });
+  requireString(value.revision, 'source.revision', issues);
+  requireDigest(value.treeSha256, 'source.treeSha256', issues);
+}
+
+function validateInputs(value, issues) {
+  if (!requireArray(value, 'inputs', issues)) return;
+  checkDuplicateIds(value, 'inputs', issues);
+  value.forEach((input, index) => {
+    const base = `inputs[${index}]`;
+    if (!requireObject(input, base, issues)) return;
+    checkExactKeys(input, INPUT_FIELDS, base, issues);
+    requireString(input.id, `${base}.id`, issues);
+    validateSafeRelativePath(input.path, `${base}.path`, issues);
+    requireString(input.role, `${base}.role`, issues);
+    requireDigest(input.sha256, `${base}.sha256`, issues);
+  });
+}
+
+function validateFilePolicy(value, issues) {
+  if (!requireObject(value, 'filePolicy', issues)) return;
+  checkExactKeys(value, FILE_POLICY_FIELDS, 'filePolicy', issues);
+  if (!requireArray(value.allowed, 'filePolicy.allowed', issues)) return;
+  if (!requireArray(value.forbidden, 'filePolicy.forbidden', issues)) return;
+  if (value.denyPrecedence !== true) issue(issues, 'filePolicy.denyPrecedence', 'must be true');
+  if (value.allowSymlinks !== false) issue(issues, 'filePolicy.allowSymlinks', 'must be false');
+  if (value.allowHardlinks !== false) issue(issues, 'filePolicy.allowHardlinks', 'must be false');
+  validateResourceInteger(value.maxChangedFiles, 'filePolicy.maxChangedFiles', RESOURCE_LIMITS.maxChangedFiles, issues);
+  validateResourceInteger(value.maxPatchBytes, 'filePolicy.maxPatchBytes', RESOURCE_LIMITS.maxPatchBytes, issues);
+
+  const patterns = [];
+  value.allowed.forEach((rule, index) => {
+    const base = `filePolicy.allowed[${index}]`;
+    if (!requireObject(rule, base, issues)) return;
+    checkExactKeys(rule, ALLOWED_FIELDS, base, issues);
+    validateSafeRelativePath(rule.pattern, `${base}.pattern`, issues, { allowDot: true, allowGlob: true });
+    if (!requireArray(rule.operations, `${base}.operations`, issues)) return;
+    if (rule.operations.length === 0) issue(issues, `${base}.operations`, 'must contain at least one operation');
+    checkDuplicateStrings(rule.operations, `${base}.operations`, issues);
+    rule.operations.forEach((operation, operationIndex) => {
+      if (!['add', 'modify', 'delete'].includes(operation)) issue(issues, `${base}.operations[${operationIndex}]`, 'must be add, modify, or delete');
+    });
+    if (typeof rule.pattern === 'string') patterns.push({ pattern: rule.pattern, index });
+  });
+  const seenPatterns = new Map();
+  patterns.forEach(({ pattern, index }) => {
+    if (seenPatterns.has(pattern)) issue(issues, `filePolicy.allowed[${index}].pattern`, `duplicate pattern; first occurrence is ${seenPatterns.get(pattern).path}`);
+    else seenPatterns.set(pattern, { path: `filePolicy.allowed[${index}].pattern`, index });
+  });
+  checkDuplicateStrings(value.forbidden, 'filePolicy.forbidden', issues);
+  value.forbidden.forEach((pattern, index) => {
+    validateSafeRelativePath(pattern, `filePolicy.forbidden[${index}]`, issues, { allowDot: true, allowGlob: true });
+    if (typeof pattern === 'string' && seenPatterns.has(pattern)) {
+      issue(issues, `filePolicy.forbidden[${index}]`, `duplicate pattern; first occurrence is ${seenPatterns.get(pattern).path}`);
+    } else if (typeof pattern === 'string') {
+      seenPatterns.set(pattern, { path: `filePolicy.forbidden[${index}]`, index });
+    }
+  });
+}
+
+function validatePatchPolicy(value, issues) {
+  if (!requireObject(value, 'patchPolicy', issues)) return;
+  checkExactKeys(value, PATCH_POLICY_FIELDS, 'patchPolicy', issues);
+  if (value.format !== 'unified-diff') issue(issues, 'patchPolicy.format', 'must be unified-diff');
+  if (value.fuzz !== 0) issue(issues, 'patchPolicy.fuzz', 'must be 0');
+  if (value.allowBinary !== false) issue(issues, 'patchPolicy.allowBinary', 'must be false');
+}
+
+function validateGraders(value, issues) {
+  if (!requireArray(value, 'graders', issues)) return;
+  checkDuplicateIds(value, 'graders', issues);
+  value.forEach((grader, index) => {
+    const base = `graders[${index}]`;
+    if (!requireObject(grader, base, issues)) return;
+    checkExactKeys(grader, GRADER_FIELDS, base, issues);
+    requireString(grader.id, `${base}.id`, issues);
+    if (!hasOwn(grader, 'spec') || grader.spec === undefined || grader.spec === null) issue(issues, `${base}.spec`, 'is required and must not be null');
+    if (typeof grader.spec === 'string') validateSafeRelativePath(grader.spec, `${base}.spec`, issues);
+    else issue(issues, `${base}.spec`, 'must be a relative path to a grader spec');
+    requireDigest(grader.sha256, `${base}.sha256`, issues);
+    requireDigest(grader.treeSha256, `${base}.treeSha256`, issues);
+    if (typeof grader.weight !== 'number' || !Number.isFinite(grader.weight) || grader.weight <= 0) issue(issues, `${base}.weight`, 'must be a finite number greater than 0');
+  });
+}
+
+function validateEvidence(value, issues) {
+  if (!requireObject(value, 'evidence', issues)) return;
+  checkExactKeys(value, EVIDENCE_FIELDS, 'evidence', issues);
+  for (const kind of EVIDENCE_FIELDS) {
+    if (!requireArray(value[kind], `evidence.${kind}`, issues)) continue;
+    checkDuplicateStrings(value[kind], `evidence.${kind}`, issues);
+    value[kind].forEach((scenarioId, index) => requireString(scenarioId, `evidence.${kind}[${index}]`, issues));
+  }
+}
+
+function validateResourceInteger(value, pathName, maximum, issues) {
+  if (!Number.isSafeInteger(value) || value < 0 || value > maximum) {
+    issue(issues, pathName, `must be an integer from 0 to ${maximum}`);
+  }
+}
+
+function validateExecution(value, issues) {
+  if (!requireObject(value, 'execution', issues)) return;
+  checkExactKeys(value, EXECUTION_FIELDS, 'execution', issues);
+  if (!Number.isSafeInteger(value.timeoutMs) || value.timeoutMs < 1 || value.timeoutMs > RESOURCE_LIMITS.timeoutMs) {
+    issue(issues, 'execution.timeoutMs', `must be an integer from 1 to ${RESOURCE_LIMITS.timeoutMs}`);
+  }
+  if (value.network !== 'off') issue(issues, 'execution.network', 'must be off');
+  if (!Number.isSafeInteger(value.maxOutputBytes) || value.maxOutputBytes < 1 || value.maxOutputBytes > RESOURCE_LIMITS.maxOutputBytes) {
+    issue(issues, 'execution.maxOutputBytes', `must be an integer from 1 to ${RESOURCE_LIMITS.maxOutputBytes}`);
+  }
+}
+
+function resolveTaskFile(taskFile) {
+  if (typeof taskFile !== 'string' || taskFile.length === 0) return null;
+  return path.resolve(taskFile);
+}
+
+function resolveSourceRoot(manifest, options = {}) {
+  if (!isObject(manifest) || !isObject(manifest.source) || typeof manifest.source.root !== 'string') return null;
+  const taskFile = resolveTaskFile(options.taskFile);
+  if (taskFile) return path.resolve(path.dirname(taskFile), manifest.source.root);
+  if (typeof options.sourceRoot === 'string' && options.sourceRoot.length > 0) return path.resolve(options.sourceRoot);
+  return null;
+}
+
+function isWithinRoot(root, target) {
+  const relative = path.relative(root, target);
+  return relative === '' || (relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative));
+}
+
+function lstatPathParts(root, relativePath) {
+  const parts = relativePath.split('/');
+  const result = [];
+  let current = root;
+  for (const part of parts) {
+    current = path.join(current, part);
+    result.push({ path: current, stat: fs.lstatSync(current) });
+  }
+  return result;
+}
+
+function verifyGraderFiles(manifest, taskFile, issues) {
+  if (!taskFile) {
+    issue(issues, '$options.taskFile', 'is required to verify grader files');
+    return;
+  }
+  const taskDir = path.dirname(taskFile);
+  const requiredEvidence = { runtime: new Set(), visual: new Set() };
+  for (const [index, grader] of manifest.graders.entries()) {
+    if (!isObject(grader) || typeof grader.spec !== 'string') continue;
+    const specFile = path.resolve(taskDir, ...grader.spec.split('/'));
+    if (!isWithinRoot(taskDir, specFile)) {
+      issue(issues, `graders[${index}].spec`, 'resolves outside task directory');
+      continue;
+    }
+    try {
+      const stat = fs.lstatSync(specFile);
+      if (!stat.isFile() || stat.isSymbolicLink()) throw new Error('must be a regular non-symlink file');
+      if (stat.nlink > 1) throw new Error('hardlinks are not allowed');
+      const bytes = fs.readFileSync(specFile);
+      const actual = sha256(bytes);
+      if (actual !== grader.sha256) issue(issues, `graders[${index}].sha256`, `digest is stale (actual ${actual})`);
+      const actualTree = computeTreeSha256(path.dirname(specFile));
+      if (actualTree !== grader.treeSha256) issue(issues, `graders[${index}].treeSha256`, `digest is stale (actual ${actualTree})`);
+      const spec = JSON.parse(bytes.toString('utf8'));
+      for (const check of Array.isArray(spec.checks) ? spec.checks : []) {
+        const match = /^(runtime|visual)-evidence$/.exec(check && check.type);
+        if (match && check.required === true && typeof check.scenarioId === 'string' && check.scenarioId) requiredEvidence[match[1]].add(check.scenarioId);
+      }
+    } catch (error) {
+      issue(issues, `graders[${index}].spec`, `cannot verify grader: ${error.message}`);
+    }
+  }
+  for (const kind of ['runtime', 'visual']) {
+    const declared = new Set(manifest.evidence && Array.isArray(manifest.evidence[kind]) ? manifest.evidence[kind] : []);
+    for (const scenarioId of declared) if (!requiredEvidence[kind].has(scenarioId)) issue(issues, `evidence.${kind}`, `declared scenario has no required grader check: ${scenarioId}`);
+    for (const scenarioId of requiredEvidence[kind]) if (!declared.has(scenarioId)) issue(issues, `evidence.${kind}`, `required grader scenario is not declared: ${scenarioId}`);
+  }
+}
+
+function verifyInputFiles(manifest, sourceRoot, issues) {
+  if (!sourceRoot) {
+    issue(issues, '$options.sourceRoot', 'is required when verifyFiles is true');
+    return;
+  }
+  if (!Array.isArray(manifest.inputs)) return;
+  if (!isObject(manifest.filePolicy)) return;
+  let rootStat;
+  try {
+    rootStat = fs.lstatSync(sourceRoot);
+  } catch (error) {
+    issue(issues, 'source.root', `cannot read source root: ${error.message}`);
+    return;
+  }
+  if (rootStat.isSymbolicLink() && manifest.filePolicy.allowSymlinks === false) {
+    issue(issues, 'source.root', 'symlinks are not allowed');
+    return;
+  }
+  if (!rootStat.isDirectory()) {
+    issue(issues, 'source.root', 'must resolve to a directory');
+    return;
+  }
+  for (const [index, input] of manifest.inputs.entries()) {
+    if (!isObject(input) || typeof input.path !== 'string') continue;
+    const inputPath = path.resolve(sourceRoot, ...input.path.split('/'));
+    if (!isWithinRoot(sourceRoot, inputPath)) {
+      issue(issues, `inputs[${index}].path`, 'resolves outside source root');
+      continue;
+    }
+    let parts;
+    try {
+      parts = lstatPathParts(sourceRoot, input.path);
+    } catch (error) {
+      issue(issues, `inputs[${index}].path`, `cannot read input: ${error.message}`);
+      continue;
+    }
+    const symlink = parts.find((part) => part.stat.isSymbolicLink());
+    if (symlink && manifest.filePolicy.allowSymlinks === false) {
+      issue(issues, `inputs[${index}].path`, 'symlinks are not allowed');
+      continue;
+    }
+    const stat = parts[parts.length - 1].stat;
+    if (!stat.isFile()) {
+      issue(issues, `inputs[${index}].path`, 'must resolve to a regular file');
+      continue;
+    }
+    if (manifest.filePolicy.allowHardlinks === false && stat.nlink > 1) {
+      issue(issues, `inputs[${index}].path`, 'hardlinks are not allowed');
+      continue;
+    }
+    let bytes;
+    try {
+      bytes = fs.readFileSync(inputPath);
+    } catch (error) {
+      issue(issues, `inputs[${index}].path`, `cannot read input: ${error.message}`);
+      continue;
+    }
+    const actual = sha256(bytes);
+    if (actual !== input.sha256) issue(issues, `inputs[${index}].sha256`, `digest is stale (actual ${actual})`);
+  }
+}
+
+function collectTreeEntries(root, relative, manifest, entries, issues) {
+  let directoryEntries;
+  try {
+    directoryEntries = fs.readdirSync(path.join(root, relative), { withFileTypes: true });
+  } catch (error) {
+    issue(issues, 'source.treeSha256', `cannot read source tree: ${error.message}`);
+    return;
+  }
+  directoryEntries.sort((a, b) => Buffer.from(a.name).compare(Buffer.from(b.name)));
+  for (const directoryEntry of directoryEntries) {
+    const childRelative = relative ? `${relative}/${directoryEntry.name}` : directoryEntry.name;
+    const childPath = path.join(root, childRelative);
+    let stat;
+    try {
+      stat = fs.lstatSync(childPath);
+    } catch (error) {
+      issue(issues, 'source.treeSha256', `cannot stat ${childRelative}: ${error.message}`);
+      continue;
+    }
+    if (stat.isSymbolicLink()) {
+      if (manifest.filePolicy.allowSymlinks === false) issue(issues, `source.treeSha256`, `symlinks are not allowed: ${childRelative}`);
+      else {
+        let target;
+        try { target = fs.readlinkSync(childPath); } catch (error) { target = `<unreadable:${error.message}>`; }
+        entries.push({ path: childRelative, type: 'symlink', mode: stat.mode & 0o7777, target });
+      }
+      continue;
+    }
+    if (stat.isDirectory()) {
+      entries.push({ path: childRelative, type: 'directory', mode: stat.mode & 0o7777 });
+      collectTreeEntries(root, childRelative, manifest, entries, issues);
+      continue;
+    }
+    if (stat.isFile()) {
+      if (manifest.filePolicy.allowHardlinks === false && stat.nlink > 1) issue(issues, 'source.treeSha256', `hardlinks are not allowed: ${childRelative}`);
+      try {
+        entries.push({ path: childRelative, type: 'file', mode: stat.mode & 0o7777, sha256: sha256(fs.readFileSync(childPath)) });
+      } catch (error) {
+        issue(issues, 'source.treeSha256', `cannot read ${childRelative}: ${error.message}`);
+      }
+      continue;
+    }
+    issue(issues, 'source.treeSha256', `unsupported filesystem entry: ${childRelative}`);
+  }
+}
+
+function computeTreeSha256(sourceRoot, options = {}) {
+  const root = path.resolve(sourceRoot);
+  let rootStat;
+  try {
+    rootStat = fs.lstatSync(root);
+  } catch (error) {
+    const readError = new Error(`cannot read source tree root: ${error.message}`);
+    readError.code = 'TREE_DIGEST_ERROR';
+    throw readError;
+  }
+  if (rootStat.isSymbolicLink() && options.allowSymlinks !== true) {
+    const linkError = new Error(`source tree root is a symlink: ${root}`);
+    linkError.code = 'TREE_DIGEST_ERROR';
+    throw linkError;
+  }
+  if (!rootStat.isDirectory()) {
+    const directoryError = new Error(`source tree root must be a directory: ${root}`);
+    directoryError.code = 'TREE_DIGEST_ERROR';
+    throw directoryError;
+  }
+  const entries = [];
+  const manifest = { filePolicy: {
+    allowSymlinks: options.allowSymlinks === true,
+    allowHardlinks: options.allowHardlinks === true,
+  } };
+  const issues = [];
+  collectTreeEntries(root, '', manifest, entries, issues);
+  if (issues.length) {
+    const error = new Error(`cannot compute source tree digest: ${issues.map((item) => item.message).join('; ')}`);
+    error.code = 'TREE_DIGEST_ERROR';
+    error.issues = issues;
+    throw error;
+  }
+  return sha256(canonicalJson(entries));
+}
+
+function validateTaskManifest(manifest, options = {}) {
+  const issues = [];
+  if (!isObject(manifest)) return { valid: false, issues: [{ path: '$', message: 'manifest must be an object' }] };
+  checkExactKeys(manifest, TOP_LEVEL_FIELDS, '$', issues);
+  for (const field of TOP_LEVEL_FIELDS) {
+    if (!hasOwn(manifest, field)) issue(issues, field, 'is required');
+  }
+  if (manifest.taskVersion !== TASK_VERSION) issue(issues, 'taskVersion', 'must be 1.0');
+  requireDigest(manifest.taskId, 'taskId', issues);
+  validateInstructions(manifest.instructions, issues);
+  validateSource(manifest.source, issues);
+  validateInputs(manifest.inputs, issues);
+  validateFilePolicy(manifest.filePolicy, issues);
+  validatePatchPolicy(manifest.patchPolicy, issues);
+  validateGraders(manifest.graders, issues);
+  validateEvidence(manifest.evidence, issues);
+  validateExecution(manifest.execution, issues);
+
+  let expectedTaskId;
+  try {
+    expectedTaskId = computeTaskId(manifest);
+    if (typeof manifest.taskId === 'string' && DIGEST_PATTERN.test(manifest.taskId) && manifest.taskId !== expectedTaskId) {
+      issue(issues, 'taskId', `does not match canonical manifest material (expected ${expectedTaskId})`);
+    }
+  } catch (error) {
+    issue(issues, 'taskId', `cannot compute taskId: ${error.message}`);
+  }
+
+  const taskFile = resolveTaskFile(options.taskFile);
+  const resolvedSourceRoot = resolveSourceRoot(manifest, options);
+  if (options.sourceRoot !== undefined) {
+    if (typeof options.sourceRoot !== 'string' || options.sourceRoot.length === 0) issue(issues, '$options.sourceRoot', 'must be a non-empty path');
+    else if (resolvedSourceRoot && path.resolve(options.sourceRoot) !== resolvedSourceRoot) issue(issues, '$options.sourceRoot', `does not match source.root resolution (${resolvedSourceRoot})`);
+  }
+  if (options.verifyFiles === true) {
+    verifyInputFiles(manifest, resolvedSourceRoot, issues);
+    verifyGraderFiles(manifest, taskFile, issues);
+  }
+  if (options.verifyTree === true) {
+    if (!resolvedSourceRoot) issue(issues, '$options.sourceRoot', 'or taskFile is required when verifyTree is true');
+    else {
+      try {
+        const actual = computeTreeSha256(resolvedSourceRoot, {
+          allowSymlinks: manifest.filePolicy && manifest.filePolicy.allowSymlinks === true,
+          allowHardlinks: manifest.filePolicy && manifest.filePolicy.allowHardlinks === true,
+        });
+        if (actual !== manifest.source.treeSha256) issue(issues, 'source.treeSha256', `digest is stale (actual ${actual})`);
+      } catch (error) {
+        issue(issues, 'source.treeSha256', error.message);
+      }
+    }
+  }
+
+  return {
+    valid: issues.length === 0,
+    issues,
+    taskId: manifest.taskId,
+    expectedTaskId,
+    taskFile,
+    sourceRoot: resolvedSourceRoot,
+  };
+}
+
+function invalidManifestError(result, file) {
+  const error = new Error(`invalid AgentTaskManifest${file ? ` ${file}` : ''}: ${result.issues.map((item) => `${item.path}: ${item.message}`).join('; ')}`);
+  error.code = 'INVALID_AGENT_TASK_MANIFEST';
+  error.issues = result.issues;
+  error.validation = result;
+  return error;
+}
+
+function readTaskManifest(file, options = {}) {
+  if (typeof file !== 'string' || file.length === 0) throw new TypeError('manifest file path is required');
+  const taskFile = path.resolve(file);
+  let manifest;
+  try {
+    manifest = JSON.parse(fs.readFileSync(taskFile, 'utf8'));
+  } catch (error) {
+    const readError = new Error(`cannot read AgentTaskManifest ${taskFile}: ${error.message}`);
+    readError.code = 'AGENT_TASK_MANIFEST_READ_ERROR';
+    readError.cause = error;
+    throw readError;
+  }
+  const result = validateTaskManifest(manifest, { ...options, taskFile });
+  if (!result.valid) throw invalidManifestError(result, taskFile);
+  return manifest;
+}
+
+module.exports = {
+  TASK_VERSION,
+  DIGEST_PATTERN,
+  TOP_LEVEL_FIELDS,
+  RESOURCE_LIMITS,
+  canonicalize,
+  canonicalJson,
+  stableJson: canonicalJson,
+  sha256,
+  computeTaskId,
+  computeTreeSha256,
+  resolveSourceRoot,
+  validateTaskManifest,
+  readTaskManifest,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/agent-task.schema.json b/research/agent-eval/results/executed-tooling/scripts/lib/agent-task.schema.json
new file mode 100644
index 0000000..97558c0
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/agent-task.schema.json
@@ -0,0 +1,181 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/agent-task.schema.json",
+  "title": "AgentTaskManifest v1",
+  "description": "Declarative, content-addressed task contract for an agent execution.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "taskVersion",
+    "taskId",
+    "instructions",
+    "source",
+    "inputs",
+    "filePolicy",
+    "patchPolicy",
+    "graders",
+    "evidence",
+    "execution"
+  ],
+  "properties": {
+    "taskVersion": { "const": "1.0" },
+    "taskId": { "$ref": "#/$defs/digest" },
+    "instructions": { "$ref": "#/$defs/instructions" },
+    "source": { "$ref": "#/$defs/source" },
+    "inputs": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/input" },
+      "uniqueItems": true
+    },
+    "filePolicy": { "$ref": "#/$defs/filePolicy" },
+    "patchPolicy": { "$ref": "#/$defs/patchPolicy" },
+    "graders": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/grader" },
+      "uniqueItems": true
+    },
+    "evidence": { "$ref": "#/$defs/evidence" },
+    "execution": { "$ref": "#/$defs/execution" }
+  },
+  "$defs": {
+    "digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*\\u0000)(?!.*[*?{}\\[\\]])(?!.*(?:^|/)\\.\\.?(?:/|$))(?!.*//).+"
+    },
+    "relativePattern": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*\\u0000)(?!.*(?:^|/)\\.\\.?(?:/|$))(?!.*//).+"
+    },
+    "relativeRoot": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?:\\.|(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*\\u0000)(?!.*[*?{}\\[\\]])(?!.*(?:^|/)\\.\\.?(?:/|$))(?!.*//).+)$"
+    },
+    "instructions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["text", "sha256"],
+      "properties": {
+        "text": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["root", "revision", "treeSha256"],
+      "properties": {
+        "root": { "$ref": "#/$defs/relativeRoot" },
+        "revision": { "type": "string", "minLength": 1 },
+        "treeSha256": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "input": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "path", "role", "sha256"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "path": { "$ref": "#/$defs/relativePath" },
+        "role": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "filePolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "allowed",
+        "forbidden",
+        "denyPrecedence",
+        "allowSymlinks",
+        "allowHardlinks",
+        "maxChangedFiles",
+        "maxPatchBytes"
+      ],
+      "properties": {
+        "allowed": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/allowedRule" },
+          "uniqueItems": true
+        },
+        "forbidden": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/relativePattern" },
+          "uniqueItems": true
+        },
+        "denyPrecedence": { "const": true },
+        "allowSymlinks": { "const": false },
+        "allowHardlinks": { "const": false },
+        "maxChangedFiles": { "$ref": "#/$defs/nonNegativeBoundedInteger" },
+        "maxPatchBytes": { "$ref": "#/$defs/nonNegativeBoundedInteger" }
+      }
+    },
+    "allowedRule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["pattern", "operations"],
+      "properties": {
+        "pattern": { "$ref": "#/$defs/relativePattern" },
+        "operations": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "enum": ["add", "modify", "delete"] },
+          "uniqueItems": true
+        }
+      }
+    },
+    "patchPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["format", "fuzz", "allowBinary"],
+      "properties": {
+        "format": { "const": "unified-diff" },
+        "fuzz": { "const": 0 },
+        "allowBinary": { "const": false }
+      }
+    },
+    "grader": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "spec", "sha256", "treeSha256", "weight"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "spec": { "$ref": "#/$defs/relativePath" },
+        "sha256": { "$ref": "#/$defs/digest" },
+        "treeSha256": { "$ref": "#/$defs/digest" },
+        "weight": { "type": "number", "exclusiveMinimum": 0, "maximum": 1000000 }
+      }
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runtime", "visual"],
+      "properties": {
+        "runtime": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+        "visual": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
+      }
+    },
+    "execution": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["timeoutMs", "network", "maxOutputBytes"],
+      "properties": {
+        "timeoutMs": { "type": "integer", "minimum": 1, "maximum": 86400000 },
+        "network": { "const": "off" },
+        "maxOutputBytes": { "type": "integer", "minimum": 1, "maximum": 1073741824 }
+      }
+    },
+    "nonNegativeBoundedInteger": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 1073741824
+    }
+  }
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/data-pack.schema.json b/research/agent-eval/results/executed-tooling/scripts/lib/data-pack.schema.json
new file mode 100644
index 0000000..4e78c60
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/data-pack.schema.json
@@ -0,0 +1,554 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/data-pack.schema.json",
+  "title": "SG Data Pack v1.3 — Unified Data Contract for Component Libraries",
+  "description": "The single entry point for business data of all sg-* component libraries. Globally unique entities, id references, stages that reference rather than duplicate. Runtime validation is performed by sg-data-loader.js (rules E1-E16/W1-W8 correspond one-to-one with the rules below); this file is the formal contract. v1.1 added: relations.scope, attributeTypes/attributeSources, contents, assets hash, meta.assetBase, kindNameFields. v1.2 added: sameAs (entity identity), provenance (record-level provenance as a parallel section that never invades entity bodies — zero engine changes), meta.confidenceThreshold, W6 fuzzy duplicate detection. v1.3 added: derivations contract (kind/source/consumers/note/alsoTouches/affects, E16-validated), E11 domain asset coverage, contextual alias {id,context} runtime resolution, E12 scope canonicalization, provenance W7/W8 warnings.",
+  "type": "object",
+  "required": [
+    "schemaVersion",
+    "meta",
+    "entities"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "schemaVersion": {
+      "enum": [
+        "1.0",
+        "1.1",
+        "1.2",
+        "1.3"
+      ]
+    },
+    "meta": {
+      "type": "object",
+      "required": [
+        "id",
+        "title"
+      ],
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Library identifier, matching the directory name"
+        },
+        "title": {
+          "type": "string",
+          "minLength": 1
+        },
+        "hero": {
+          "type": "string",
+          "description": "Core entity id (graph center / protagonist); must exist in entities"
+        },
+        "source": {
+          "type": "string",
+          "description": "Data source (crawl-source annotation)"
+        },
+        "fetchedAt": {
+          "type": "string",
+          "description": "Fetch date, YYYY-MM-DD"
+        },
+        "generatedBy": {
+          "type": "string",
+          "description": "Extraction-script path (@generated marker)"
+        },
+        "assetBase": {
+          "type": "string",
+          "description": "Resolution prefix for bare-filename assets (e.g. '../assets/'); once declared, 'x.png' in the data resolves and registers as assetBase+'x.png'"
+        },
+        "confidenceThreshold": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1,
+          "description": "(v1.2) Low-confidence warning threshold; default 0.7"
+        },
+        "recrawlFieldMap": {
+          "type": "object",
+          "description": "(v1.3) Optional crawled-field -> entity-field mapping used by recrawl-skeleton for like-for-like cross-checks (e.g. {\"birthDate\":\"birth\"}). Without it, recrawl does not guess field correspondences.",
+          "additionalProperties": {
+            "type": "string",
+            "minLength": 1
+          }
+        }
+      },
+      "additionalProperties": true
+    },
+    "kindNameFields": {
+      "type": "object",
+      "description": "kind -> name-field mapping (e.g. {work: 'title'}); kinds not declared here default to the name field",
+      "additionalProperties": {
+        "type": "string"
+      }
+    },
+    "sameAs": {
+      "type": "array",
+      "description": "(v1.2) Entity-identity declarations: [[idA, idB], ...] means two entities refer to the same real-world subject (e.g. Ying Zheng ↔ Qin Shi Huang). Once declared, W6 no longer flags the pair; downstream dedup/aggregation relies on this.",
+      "items": {
+        "type": "array",
+        "prefixItems": [
+          {
+            "type": "string"
+          },
+          {
+            "type": "string"
+          }
+        ],
+        "minItems": 2,
+        "maxItems": 2
+      }
+    },
+    "provenance": {
+      "type": "object",
+      "description": "(v1.2) Record-level provenance (parallel-section design: never embedded into entities/relations/contents bodies, so engines need no changes). Each group's keys point at the corresponding records; confidence below meta.confidenceThreshold triggers a W5 low-confidence warning.",
+      "properties": {
+        "entities": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/provEntry"
+          }
+        },
+        "relations": {
+          "type": "object",
+          "description": "Key format: 'a::b' (entity-id pair)",
+          "additionalProperties": {
+            "$ref": "#/$defs/provEntry"
+          }
+        },
+        "contents": {
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/$defs/provEntry"
+          }
+        }
+      },
+      "additionalProperties": false
+    },
+    "entities": {
+      "type": "object",
+      "minProperties": 1,
+      "description": "Global entity table. Keys are safe stable ids (semantic slugs); values preserve all business fields of the entity. Referencing by name or array index is forbidden. The formal schema requires kind; runtime E3 additionally requires the display field selected by kindNameFields[kind], defaulting to name, because that cross-field lookup is not expressed by this generic schema.",
+      "propertyNames": {
+        "pattern": "^(?!__proto__$|prototype$|constructor$)[a-z][a-z0-9_-]*$"
+      },
+      "patternProperties": {
+        "^(?!__proto__$|prototype$|constructor$)[a-z][a-z0-9_-]*$": {
+          "type": "object",
+          "required": [
+            "kind"
+          ],
+          "properties": {
+            "name": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Default display field (may be Chinese; for display only, never a reference key). Runtime E3 requires this unless kindNameFields maps the entity kind to another non-empty string field."
+            },
+            "kind": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Entity kind: person / work / term / event / ..."
+            }
+          },
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": false
+    },
+    "aliases": {
+      "type": "object",
+      "description": "Crawled name / variant spelling -> canonical id. The normalization entry point on the data-production side; resolvable at runtime via SGDataLoader.resolveId. Values may be a plain id string or a {id, context} object for same-name disambiguation (E9 reserved context).",
+      "propertyNames": {
+        "not": { "enum": ["__proto__", "prototype", "constructor"] }
+      },
+      "additionalProperties": {
+        "oneOf": [
+          { "type": "string", "minLength": 1, "description": "Canonical entity id" },
+          {
+            "type": "object",
+            "required": ["id"],
+            "properties": {
+              "id": { "type": "string", "minLength": 1, "description": "Canonical entity id" },
+              "context": { "type": "string", "description": "Disambiguation context (e.g. 'cast', 'crew')" }
+            },
+            "additionalProperties": true
+          }
+        ]
+      }
+    },
+    "relationTypes": {
+      "type": "object",
+      "description": "Relationship-type registry (enum + display attributes). Every relations[].type must be registered here.",
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "label"
+        ],
+        "properties": {
+          "label": {
+            "type": "string",
+            "minLength": 1
+          },
+          "color": {
+            "type": "string",
+            "description": "Color value or CSS variable reference"
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    "heroRelTypes": {
+      "type": "object",
+      "description": "(optional, Plan-B dual registry) Relationship-type registry for the hero-radial dimension (person -> core). When overlay.rel / heroRel and relations[].type are semantically different dimensions, register them separately here and in relationTypes, with library-level rules forbidding cross-dimension use (e.g. qinshihuang: overlay.rel in {ruler, family, enemy})",
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "label"
+        ],
+        "properties": {
+          "label": {
+            "type": "string",
+            "minLength": 1
+          },
+          "color": {
+            "type": "string"
+          },
+          "dimension": {
+            "type": "string",
+            "enum": [
+              "hero-radial",
+              "pairwise",
+              "both"
+            ]
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    "relations": {
+      "type": "array",
+      "description": "Master edge list; each edge is stored exactly once. Stages reference edges via {a,b} optionally disambiguated by id/type; duplication is forbidden. When multiple edges share the same (a,b) pair (relationship evolves across stages), scope, type, or a stable relation.id must make references resolvable.",
+      "items": {
+        "type": "object",
+        "required": [
+          "a",
+          "b",
+          "type"
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "minLength": 1,
+            "description": "(v1.3) Optional stable id for this master edge. When present, it is the preferred key for provenance and stage relation refs; duplicates are rejected (E12)."
+          },
+          "a": {
+            "type": "string",
+            "description": "Entity id (or a crawled name from aliases, normalized during validation)"
+          },
+          "b": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string",
+            "description": "Must be registered in relationTypes"
+          },
+          "label": {
+            "type": "string"
+          },
+          "scope": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "minItems": 1,
+            "description": "(v1.1) This edge is only active in the listed stages (values are stages[].key). Without scope, the edge is active in all stages"
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    "stages": {
+      "type": "array",
+      "description": "Stage/scene/event views. Carry only id references and stage-specific overlays; embedding entity fields is forbidden.",
+      "items": {
+        "type": "object",
+        "required": [
+          "key",
+          "name",
+          "entities"
+        ],
+        "properties": {
+          "key": {
+            "type": "string",
+            "minLength": 1
+          },
+          "name": {
+            "type": "string",
+            "minLength": 1
+          },
+          "desc": {
+            "type": "string"
+          },
+          "descMobile": {
+            "type": "string"
+          },
+          "entities": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "Subset of entity ids for this stage"
+          },
+          "layout": {
+            "type": "object",
+            "description": "Normalized coordinates keyed by entity id",
+            "additionalProperties": {
+              "type": "array",
+              "prefixItems": [
+                {
+                  "type": "number",
+                  "minimum": 0,
+                  "maximum": 1
+                },
+                {
+                  "type": "number",
+                  "minimum": 0,
+                  "maximum": 1
+                }
+              ],
+              "minItems": 2,
+              "maxItems": 2
+            }
+          },
+          "relations": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": [
+                "a",
+                "b"
+              ],
+              "properties": {
+                "a": {
+                  "type": "string"
+                },
+                "b": {
+                  "type": "string"
+                },
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "(v1.3) Optional: resolve this ref to the master edge whose relation.id matches."
+                },
+                "type": {
+                  "type": "string",
+                  "description": "(v1.3) Optional: disambiguate by edge type when multiple edges share (a,b)."
+                }
+              },
+              "additionalProperties": false
+            },
+            "description": "{a,b} keys referencing master relations; type/label come from the master edge"
+          },
+          "overlay": {
+            "type": "object",
+            "description": "Stage-specific information (persona/description overrides), keyed by entity id",
+            "additionalProperties": {
+              "type": "object"
+            }
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    "attributeTypes": {
+      "type": "object",
+      "description": "(v1.1) Attribute-label registry (symmetric to relationTypes). Labels in the attribute-pair collections declared by attributeSources must be registered here.",
+      "additionalProperties": {
+        "type": "object",
+        "properties": {
+          "label": {
+            "type": "string"
+          },
+          "description": {
+            "type": "string"
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    "attributeSources": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      },
+      "description": "(v1.1) Path declarations of attribute-pair collections; supports 'entities.*.<field>' and 'domain.<path>'. Every [label, value, ...] pair or {label, ...} object in the declared collections has its label checked by E10"
+    },
+    "contents": {
+      "type": "object",
+      "description": "(v1.1) Long-form content data layer: prose/timeline lifted out of template HTML. body is a restricted HTML subset; highlights declare in-text entity/annotation references (checked by E13 — a wrong entity name in prose is caught).",
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "kind"
+        ],
+        "properties": {
+          "kind": {
+            "type": "string",
+            "description": "Content kind: timeline-item / article-section / ..."
+          },
+          "title": {
+            "type": "string"
+          },
+          "body": {
+            "type": "string",
+            "description": "Restricted-HTML-subset string"
+          },
+          "bodyFormat": {
+            "type": "string",
+            "enum": [
+              "html-subset",
+              "text"
+            ]
+          },
+          "highlights": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": [
+                "ref"
+              ],
+              "properties": {
+                "text": {
+                  "type": "string"
+                },
+                "ref": {
+                  "type": "string",
+                  "description": "Entity id / alias / domain.notes annotation key"
+                }
+              },
+              "additionalProperties": true
+            }
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    "domain": {
+      "type": "object",
+      "description": "Library-specific data collections (works/questions/cast/notes, etc.), constrained by each library's own data.schema.json"
+    },
+    "assets": {
+      "type": "object",
+      "description": "Asset manifest; keys are asset paths as they appear in the data",
+      "additionalProperties": {
+        "type": "object",
+        "properties": {
+          "sourceUrl": {
+            "type": "string"
+          },
+          "hash": {
+            "type": "string"
+          },
+          "exists": {
+            "type": "boolean"
+          },
+          "bytes": {
+            "type": "integer"
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    "derivations": {
+      "type": "object",
+      "description": "v1.3 派生契约：声明哪些呈现是从 pack 数据派生的、怎么派生、谁消费。文档化契约（非可执行代码），只建模非平凡派生（重复/排序/重建/消解/投影）。",
+      "additionalProperties": {
+        "type": "object",
+        "required": [
+          "kind",
+          "source",
+          "consumers",
+          "note"
+        ],
+        "properties": {
+          "kind": {
+            "enum": [
+              "repeat",
+              "insertion-order",
+              "lookup-rebuild",
+              "scope-resolution",
+              "projection",
+              "reference-only"
+            ],
+            "description": "派生类型：repeat=集合重复渲染；insertion-order=键插入序即呈现序；lookup-rebuild=按字段反查重建；scope-resolution=方向/作用域消解；projection=字段直投但有重组；reference-only=仅存引用运行时重建"
+          },
+          "source": {
+            "type": "string",
+            "description": "派生源的 pack 内路径（如 domain.carouselTrack.entityIds / contents / entities.*.name）"
+          },
+          "consumers": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "消费方标识：引擎函数名或组件文件"
+          },
+          "affects": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "（可选）受影响的呈现区域/选择器"
+          },
+          "note": {
+            "type": "string",
+            "description": "人读说明：派生怎么工作、变更时的影响面"
+          },
+          "alsoTouches": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            },
+            "description": "（可选）次级影响源：除 source 外，变更这些路径也会影响此派生。用于 source 描述组合关系、但实体字段变更也影响呈现的情况（如 carouselTrack.source=domain.carouselTrack.entityIds，但 milestone.title 变更也影响渲染）。"
+          }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "provEntry": {
+      "type": "object",
+      "properties": {
+        "origin": {
+          "type": "string",
+          "description": "Data origin: engine-embedded-defaults / example-json-contract / template-html-contents / crawl:<source> etc."
+        },
+        "sourceUrl": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "Original HTTP(S) source URL (mandatory for crawl pipelines); runtime E15 validates protocol and hostname"
+        },
+        "fetchedAt": {
+          "type": "string",
+          "description": "Fetch date, YYYY-MM-DD"
+        },
+        "confidence": {
+          "type": "number",
+          "minimum": 0,
+          "maximum": 1,
+          "description": "Confidence; baseline data (original case page) is 1.0, crawled data gets actual values from the pipeline"
+        },
+        "note": {
+          "type": "string"
+        },
+        "fieldOrigins": {
+          "type": "object",
+          "description": "Optional field-level provenance for direct entity fields; keys are entity field names and values use the same provenance entry contract.",
+          "additionalProperties": {
+            "$ref": "#/$defs/provEntry"
+          }
+        }
+      },
+      "additionalProperties": true
+    }
+  }
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/experiment.schema.json b/research/agent-eval/results/executed-tooling/scripts/lib/experiment.schema.json
new file mode 100644
index 0000000..9146ecf
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/experiment.schema.json
@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/contracts/agent-experiment-v1.json",
+  "title": "SG Agent ExperimentSpec v1.0",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["experimentVersion", "experimentId", "title", "agent", "tasks", "repetitions", "seed"],
+  "properties": {
+    "experimentVersion": { "const": "1.0" },
+    "experimentId": { "type": "string", "pattern": "^experiment:[0-9a-f]{64}$" },
+    "title": { "type": "string", "minLength": 1 },
+    "agent": {
+      "type": "object", "additionalProperties": false,
+      "required": ["kind", "provider", "model", "argv", "adapter"],
+      "properties": {
+        "kind": { "enum": ["scripted", "ai"] },
+        "provider": { "type": "string", "minLength": 1 },
+        "model": { "type": "string", "minLength": 1 },
+          "argv": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+          "adapter": { "type": "object", "additionalProperties": false, "required": ["path", "sha256"], "properties": { "path": { "type": "string", "minLength": 1 }, "sha256": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" } } },
+          "infraExitCodes": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "integer", "minimum": 1, "maximum": 255 } }
+
+      }
+    },
+    "tasks": {
+      "type": "array", "minItems": 1,
+      "items": { "type": "object", "additionalProperties": false, "required": ["id", "manifest", "taskId", "manifestSha256"], "properties": { "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,63}$" }, "manifest": { "type": "string", "minLength": 1 }, "taskId": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "manifestSha256": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" } } }
+    },
+    "repetitions": { "type": "integer", "minimum": 1, "maximum": 100 },
+    "seed": { "type": ["integer", "string"] }
+  }
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/run-report.schema.json b/research/agent-eval/results/executed-tooling/scripts/lib/run-report.schema.json
new file mode 100644
index 0000000..9907e9c
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/run-report.schema.json
@@ -0,0 +1,97 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/run-report.schema.json",
+  "title": "SG Data Pack Run Report v1.0",
+  "type": "object",
+  "required": [
+    "reportVersion",
+    "run",
+    "inputs",
+    "summary",
+    "inventory",
+    "findings",
+    "changes",
+    "assurances",
+    "coverage",
+    "risks",
+    "nextSteps",
+    "operations",
+    "impacts",
+    "artifacts",
+    "raw"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "reportVersion": { "const": "1.0" },
+    "run": {
+      "type": "object",
+      "required": ["id", "command", "exitCode", "libId", "mode", "outcome", "maturity"],
+      "additionalProperties": false,
+      "properties": {
+        "id": { "type": "string", "pattern": "^sha256:" },
+        "command": { "type": "string", "minLength": 1 },
+        "exitCode": { "type": "integer", "enum": [0, 1, 2] },
+        "libId": { "type": "string" },
+        "mode": { "enum": ["pack", "integration", "evolution", "review", "candidate"] },
+        "outcome": { "enum": ["ready", "issues-found", "review-required", "blocked", "input-error"] },
+        "maturity": { "enum": ["UNASSESSED", "ASSESSED", "DATA-VALID"] }
+      }
+    },
+    "inputs": { "type": "object", "additionalProperties": true },
+    "summary": {
+      "type": "object",
+      "required": ["findings", "errors", "warnings", "open", "resolved", "notAssessed", "changes", "nextSteps"],
+      "additionalProperties": false,
+      "properties": {
+        "findings": { "type": "integer", "minimum": 0 },
+        "errors": { "type": "integer", "minimum": 0 },
+        "warnings": { "type": "integer", "minimum": 0 },
+        "open": { "type": "integer", "minimum": 0 },
+        "resolved": { "type": "integer", "minimum": 0 },
+        "notAssessed": { "type": "integer", "minimum": 0 },
+        "changes": { "type": "integer", "minimum": 0 },
+        "nextSteps": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "inventory": { "type": "object", "additionalProperties": true },
+    "findings": { "type": "array", "items": { "$ref": "#/$defs/finding" } },
+    "changes": { "type": "array", "items": { "type": "object", "additionalProperties": true } },
+    "assurances": { "type": "array", "items": { "$ref": "#/$defs/assurance" } },
+    "coverage": { "type": "array", "items": { "$ref": "#/$defs/assurance" } },
+    "risks": { "type": "array", "items": { "type": "object", "additionalProperties": true } },
+    "nextSteps": { "type": "array", "items": { "type": "object", "additionalProperties": true } },
+    "operations": { "type": "array", "items": { "type": "object", "additionalProperties": true } },
+    "impacts": { "type": "array", "items": { "type": "object", "additionalProperties": true } },
+    "artifacts": { "type": "array", "items": { "type": "object", "additionalProperties": true } },
+    "raw": { "type": "object", "additionalProperties": true }
+  },
+  "$defs": {
+    "finding": {
+      "type": "object",
+      "required": ["id", "code", "severity", "status", "category", "phase", "title", "message", "blocking"],
+      "additionalProperties": true,
+      "properties": {
+        "id": { "type": "string" },
+        "code": { "type": "string" },
+        "severity": { "enum": ["error", "warning", "info"] },
+        "status": { "enum": ["open", "resolved", "review-required", "accepted-risk", "not-assessed"] },
+        "category": { "type": "string" },
+        "phase": { "type": "string" },
+        "title": { "type": "string" },
+        "message": { "type": "string" },
+        "blocking": { "type": "boolean" }
+      }
+    },
+    "assurance": {
+      "type": "object",
+      "required": ["id", "title", "status", "blocking"],
+      "additionalProperties": true,
+      "properties": {
+        "id": { "type": "string" },
+        "title": { "type": "string" },
+        "status": { "enum": ["passed", "failed", "not-assessed", "not-applicable", "review-required"] },
+        "blocking": { "type": "boolean" }
+      }
+    }
+  }
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-command-runner.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-command-runner.js
new file mode 100644
index 0000000..ecc49d7
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-command-runner.js
@@ -0,0 +1,159 @@
+'use strict';
+
+/* Synchronous, shell-free command execution with bounded inputs and outputs. */
+const fs = require('node:fs');
+const { spawnSync } = require('node:child_process');
+const { assertWithinRoot, canonicalPath } = require('./sg-path-policy.js');
+
+const DEFAULT_TIMEOUT = 30_000;
+const DEFAULT_MAX_BUFFER = 1024 * 1024;
+const DEFAULT_ENV_ALLOWLIST = [
+  'PATH',
+  'HOME',
+  'TMPDIR',
+  'TMP',
+  'TEMP',
+  'LANG',
+  'LC_ALL',
+  'LC_CTYPE',
+  'SYSTEMROOT',
+  'SystemRoot',
+  'COMSPEC',
+  'ComSpec',
+  'PATHEXT',
+];
+const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+
+function assertArgv(argv) {
+  if (!Array.isArray(argv) || argv.length === 0) {
+    throw new TypeError('argv must be a non-empty array');
+  }
+  for (const argument of argv) {
+    if (typeof argument !== 'string') throw new TypeError('every argv item must be a string');
+    if (argument.includes('\0')) throw new TypeError('argv items must not contain null bytes');
+  }
+  if (argv[0].length === 0) throw new TypeError('argv[0] must name a command');
+}
+
+function normalizeAllowlist(value) {
+  if (value === undefined) return DEFAULT_ENV_ALLOWLIST;
+  if (value instanceof Set) value = [...value];
+  if (!Array.isArray(value) || value.some((name) => typeof name !== 'string' || !ENV_NAME.test(name))) {
+    throw new TypeError('envAllowlist must be an array or Set of environment variable names');
+  }
+  return value;
+}
+
+function allowedEnvironment(options = {}) {
+  const allowlist = normalizeAllowlist(options.envAllowlist === undefined ? options.allowedEnv : options.envAllowlist);
+  const supplied = options.env === undefined ? {} : options.env;
+  if (!supplied || typeof supplied !== 'object' || Array.isArray(supplied)) throw new TypeError('env must be an object');
+  const source = { ...process.env, ...supplied };
+  const output = Object.create(null);
+  for (const name of allowlist) {
+    if (!Object.prototype.hasOwnProperty.call(source, name) || source[name] === undefined) continue;
+    const value = source[name];
+    if (typeof value !== 'string' && typeof value !== 'number' && typeof value !== 'boolean') {
+      throw new TypeError(`environment variable ${name} must be a string, number, or boolean`);
+    }
+    const text = String(value);
+    if (text.includes('\0')) throw new TypeError(`environment variable ${name} must not contain null bytes`);
+    output[name] = text;
+  }
+  return output;
+}
+
+function positiveInteger(value, fallback, name) {
+  if (value === undefined) return fallback;
+  if (!Number.isSafeInteger(value) || value <= 0) throw new TypeError(`${name} must be a positive safe integer`);
+  return value;
+}
+
+function outputBuffer(value) {
+  if (Buffer.isBuffer(value)) return value;
+  if (value === null || value === undefined) return Buffer.alloc(0);
+  return Buffer.from(String(value));
+}
+
+function boundedText(value, maxBuffer) {
+  const bytes = outputBuffer(value);
+  const truncated = bytes.length > maxBuffer;
+  return {
+    text: bytes.subarray(0, maxBuffer).toString('utf8'),
+    truncated,
+  };
+}
+
+function structuredError(error) {
+  if (!error) return undefined;
+  return {
+    name: error.name,
+    code: error.code || null,
+    message: error.message,
+    errno: error.errno === undefined ? null : error.errno,
+    syscall: error.syscall || null,
+    path: error.path || null,
+  };
+}
+
+function runCommand(input, legacyOptions = {}) {
+  const objectForm = !Array.isArray(input) && input !== null && typeof input === 'object';
+  const argv = objectForm ? input.argv : input;
+  const options = objectForm ? input : legacyOptions;
+  assertArgv(argv);
+  if (!options || typeof options !== 'object' || Array.isArray(options)) throw new TypeError('options must be an object');
+  const allowedRoot = canonicalPath(options.allowedRoot || options.root || process.cwd(), { mustExist: true });
+  const cwd = assertWithinRoot(allowedRoot, options.cwd || allowedRoot, { mustExist: true });
+  if (!fs.statSync(cwd).isDirectory()) throw new TypeError(`cwd must be a directory: ${cwd}`);
+  const timeout = positiveInteger(options.timeoutMs === undefined ? options.timeout : options.timeoutMs, DEFAULT_TIMEOUT, 'timeoutMs');
+  const maxBuffer = positiveInteger(options.maxOutputBytes === undefined ? options.maxBuffer : options.maxOutputBytes, DEFAULT_MAX_BUFFER, 'maxOutputBytes');
+  const env = allowedEnvironment(options);
+  const started = process.hrtime.bigint();
+  const result = spawnSync(argv[0], argv.slice(1), {
+    cwd,
+    env,
+    input: options.input,
+    encoding: null,
+    timeout,
+    maxBuffer,
+    killSignal: options.killSignal || 'SIGTERM',
+    windowsHide: true,
+    shell: false,
+  });
+  const durationMs = Number(process.hrtime.bigint() - started) / 1e6;
+  const stdout = boundedText(result.stdout, maxBuffer);
+  const stderr = boundedText(result.stderr, maxBuffer);
+  const errorCode = result.error && result.error.code;
+  const timedOut = errorCode === 'ETIMEDOUT';
+  const outputLimitReached = errorCode === 'ENOBUFS';
+  const stdoutTruncated = stdout.truncated;
+  const stderrTruncated = stderr.truncated;
+
+  return {
+    argv: [...argv],
+    cwd,
+    status: result.status,
+    exitCode: result.status,
+    exit: result.status,
+    signal: result.signal,
+    timedOut,
+    durationMs,
+    duration: durationMs,
+    stdout: stdout.text,
+    stderr: stderr.text,
+    stdoutTruncated,
+    stderrTruncated,
+    truncated: outputLimitReached || stdoutTruncated || stderrTruncated,
+    error: structuredError(result.error),
+  };
+}
+
+module.exports = {
+  DEFAULT_TIMEOUT,
+  DEFAULT_MAX_BUFFER,
+  DEFAULT_ENV_ALLOWLIST,
+  allowedEnvironment,
+  buildAllowedEnv: allowedEnvironment,
+  runCommand,
+  run: runCommand,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-data-loader.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-data-loader.js
new file mode 100644
index 0000000..9465244
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-data-loader.js
@@ -0,0 +1,677 @@
+/*
+ * sg-data-loader.js — SG Data Pack runtime validator (zero-dependency UMD) v1.3
+ *
+ * Responsibilities:
+ *   1. validate(pack)  -> { errors: [], warnings: [] }  structural Data Pack validation
+ *   2. assertValid(pack) -> throws an aggregated error on failure (called by engines on mount — fails loudly, never silently)
+ *   3. resolveAlias(pack, name) / resolveId(pack, idOrName)  alias normalization (crawled name -> canonical id)
+ *
+ * Validation rules (mirrors data-pack.schema.json):
+ *   E1  schemaVersion must be "1.0", "1.1", "1.2", or "1.3"
+ *   E2  meta.id / meta.title must be non-empty strings
+ *   E3  entities must be an object; each entity needs a name (or the kind's nameField) and a kind
+ *   E4  alias targets must exist in entities; alias keys must not collide with entity ids
+ *   E5  relations[].a/b must exist in entities after alias normalization (dangling ref = error)
+ *   E6  relations[].type must be registered in relationTypes (illegal enum = error)
+ *   E7  references in stages[].entities/layout/overlay/relations must exist
+ *   E8  layout coordinates must be within [0,1]
+ *   E9  (reserved: alias disambiguation context)
+ *   E10 attribute-pair labels in attributeSources collections must be registered in attributeTypes (v1.1)
+ *   E11 local assets referenced by entities/contents/domain must be registered in the assets manifest (v1.1)
+ *   E12 relation ids/scopes must be valid; ambiguous stage edge refs must resolve via id/type/scope (v1.1)
+ *   E13 contents[].highlights[].ref must resolve to an entity/alias or domain.notes key (v1.1)
+ *   E14 both sides of a sameAs pair must exist (v1.2)
+ *   E15 provenance keys must point at existing entities/relations/contents (v1.2)
+ *   E16 derivations entries: valid kind enum + source path resolvable within the pack (v1.3)
+ *   W1  entity never referenced by any stage/relation
+ *   W2  asset marked exists:false
+ *   W3  relation missing label
+ *   W4  local asset exists but lacks a hash (incomplete provenance)
+ *   W5  provenance confidence below threshold (default 0.7, tunable via meta.confidenceThreshold) (v1.2)
+ *   W6  entity names collide after normalization without a sameAs declaration (suspected duplicate, v1.2)
+ *   W7  provenance entry missing origin (v1.3)
+ *   W8  crawl provenance entry missing sourceUrl (v1.3)
+ */
+(function (global) {
+  'use strict';
+
+  var SCHEMA_VERSIONS = ['1.0', '1.1', '1.2', '1.3'];
+  var IMG_EXT = /\.(png|jpe?g|webp|gif|svg)$/i;
+
+  function isObj(v) { return v !== null && typeof v === 'object' && !Array.isArray(v); }
+
+  function isHttpUrl(v) {
+    if (typeof v !== 'string' || /[\u0000-\u001f\u007f]/.test(v)) return false;
+    try {
+      var u = new URL(v);
+      return (u.protocol === 'http:' || u.protocol === 'https:') && !!u.hostname;
+    } catch (_) {
+      return false;
+    }
+  }
+
+  function resolveAlias(pack, name) {
+    if (pack && isObj(pack.aliases) && Object.prototype.hasOwnProperty.call(pack.aliases, name)) {
+      return pack.aliases[name];
+    }
+    return null;
+  }
+
+  /* Select one authoritative display field/value for an entity. E3, W1, and
+   * W6 must agree on this lookup: kindNameFields[kind], otherwise "name".
+   * Deliberately do not fall back to legacy name/title fields, because doing
+   * so can validate or compare a value that the entity kind does not display. */
+  function entityDisplay(pack, entity) {
+    var nameFields = pack && isObj(pack.kindNameFields) ? pack.kindNameFields : {};
+    var configured = isObj(entity) && typeof entity.kind === 'string' &&
+      Object.prototype.hasOwnProperty.call(nameFields, entity.kind)
+      ? nameFields[entity.kind]
+      : undefined;
+    var field = typeof configured === 'string' && configured ? configured : 'name';
+    return { field: field, value: isObj(entity) ? entity[field] : undefined };
+  }
+
+  /* crawled name / alias / canonical id -> canonical id; null when unresolvable.
+   * Handles the {id, context} disambiguation form: resolveAlias may return an
+   * object (E4 validates it), so we unpack .id here before the entity lookup. */
+  function resolveId(pack, idOrName) {
+    if (!pack || !isObj(pack.entities)) return null;
+    if (Object.prototype.hasOwnProperty.call(pack.entities, idOrName)) return idOrName;
+    var via = resolveAlias(pack, idOrName);
+    if (isObj(via)) via = via.id;
+    if (via && Object.prototype.hasOwnProperty.call(pack.entities, via)) return via;
+    return null;
+  }
+
+  function relationIdentity(pack, relation) {
+    if (relation && typeof relation.id === 'string' && relation.id) return relation.id;
+    var a = resolveId(pack, relation && relation.a) || (relation && relation.a);
+    var b = resolveId(pack, relation && relation.b) || (relation && relation.b);
+    var scope = Array.isArray(relation && relation.scope) ? relation.scope.slice().sort().join('|') : '*';
+    return a + '::' + b + '::' + (relation && relation.type) + '::scope=' + scope;
+  }
+
+  /* contents highlight ref: entity/alias, or a domain.notes annotation key */
+  function resolveContentRef(pack, ref) {
+    if (resolveId(pack, ref)) return ref;
+    if (isObj(pack.domain) && isObj(pack.domain.notes) &&
+        Object.prototype.hasOwnProperty.call(pack.domain.notes, ref)) return ref;
+    return null;
+  }
+
+  /* Resolve attributeSources paths: supports "entities.*.relations" and "domain.facts" forms */
+  function resolveAttrSource(pack, pathExpr) {
+    var out = [];
+    var m;
+    if ((m = /^entities\.\*\.(\w+)$/.exec(pathExpr))) {
+      var field = m[1];
+      Object.keys(pack.entities || {}).forEach(function (id) {
+        var v = pack.entities[id][field];
+        if (Array.isArray(v)) out.push({ at: 'entities.' + id + '.' + field, pairs: v });
+      });
+    } else if ((m = /^domain\.(\w+(?:\.\w+)*)$/.exec(pathExpr))) {
+      var segs = m[1].split('.');
+      var v = pack.domain;
+      for (var i = 0; i < segs.length && v !== undefined; i++) v = v[segs[i]];
+      if (Array.isArray(v)) out.push({ at: 'domain.' + segs.join('.'), pairs: v });
+      else if (isObj(v)) Object.keys(v).forEach(function (k) {
+        if (Array.isArray(v[k])) out.push({ at: 'domain.' + segs.join('.') + '.' + k, pairs: v[k] });
+      });
+    }
+    return out;
+  }
+
+  /* Collect all local asset references in entities/contents/domain (value-shape heuristic).
+   * domain is free-form but commonly carries asset paths (e.g. domain.works[*].img),
+   * so it must be covered by E11 just like entities and contents. */
+  function collectAssetRefs(pack) {
+    var refs = [];
+    function walk(v) {
+      if (typeof v === 'string') {
+        if (IMG_EXT.test(v) && !/^https?:\/\//i.test(v) && !/^data:/.test(v)) refs.push(v);
+      } else if (Array.isArray(v)) v.forEach(walk);
+      else if (isObj(v)) Object.keys(v).forEach(function (k) { walk(v[k]); });
+    }
+    walk(pack.entities || {});
+    walk(pack.contents || {});
+    walk(pack.domain || {});
+    return refs;
+  }
+
+  function validate(pack) {
+    var errors = [];
+    var warnings = [];
+
+    if (!isObj(pack)) {
+      return { errors: ['pack must be an object'], warnings: warnings };
+    }
+
+    /* E1 */
+    if (SCHEMA_VERSIONS.indexOf(pack.schemaVersion) === -1) {
+      errors.push('E1: schemaVersion must be ' + SCHEMA_VERSIONS.map(function (s) { return '"' + s + '"'; }).join(' or ') +
+        ', got ' + JSON.stringify(pack.schemaVersion));
+    }
+
+    /* E2 */
+    if (!isObj(pack.meta) || typeof pack.meta.id !== 'string' || !pack.meta.id) {
+      errors.push('E2: meta.id must be a non-empty string');
+    }
+    if (!isObj(pack.meta) || typeof pack.meta.title !== 'string' || !pack.meta.title) {
+      errors.push('E2: meta.title must be a non-empty string');
+    }
+    if (isObj(pack.meta) && pack.meta.confidenceThreshold !== undefined &&
+        (typeof pack.meta.confidenceThreshold !== 'number' || !isFinite(pack.meta.confidenceThreshold) ||
+         pack.meta.confidenceThreshold < 0 || pack.meta.confidenceThreshold > 1)) {
+      errors.push('E2: meta.confidenceThreshold must be a number between 0 and 1');
+    }
+
+    /* E3 */
+    var entities = pack.entities;
+    if (!isObj(entities) || Object.keys(entities).length === 0) {
+      errors.push('E3: entities must be a non-empty object');
+      entities = {};
+    }
+    Object.keys(entities).forEach(function (id) {
+      var e = entities[id];
+      if (!/^[a-z][a-z0-9_-]*$/.test(id) || id === '__proto__' || id === 'prototype' || id === 'constructor') {
+        errors.push('E3: entities.' + id + ' must use a safe stable slug id');
+      }
+      if (!isObj(e)) { errors.push('E3: entities.' + id + ' must be an object'); return; }
+      var display = entityDisplay(pack, e);
+      if (typeof display.value !== 'string' || !display.value) {
+        errors.push('E3: entities.' + id + '.' + display.field + ' must be a non-empty string' + (display.field !== 'name' ? ' (nameField of kind:' + e.kind + ')' : ''));
+      }
+      if (typeof e.kind !== 'string' || !e.kind) errors.push('E3: entities.' + id + '.kind must be a non-empty string');
+    });
+
+    /* E4 */
+    var aliases = pack.aliases || {};
+    if (!isObj(aliases)) {
+      errors.push('E4: aliases must be an object');
+      aliases = {};
+    }
+    Object.keys(aliases).forEach(function (alias) {
+      if (alias === '__proto__' || alias === 'prototype' || alias === 'constructor') {
+        errors.push('E4: alias "' + alias + '" is a reserved object key');
+      }
+      if (Object.prototype.hasOwnProperty.call(entities, alias)) {
+        errors.push('E4: alias "' + alias + '" collides with an entity id');
+      }
+      var target = aliases[alias];
+      if (isObj(target)) target = target.id; // {id, context} disambiguation form (E9 reserved)
+      if (!Object.prototype.hasOwnProperty.call(entities, target)) {
+        errors.push('E4: alias "' + alias + '" points to non-existent entity "' + target + '"');
+      }
+    });
+
+    /* relationTypes registry */
+    var relationTypes = {};
+    if (pack.relationTypes !== undefined && !isObj(pack.relationTypes)) {
+      errors.push('E6: relationTypes must be an object');
+    } else if (isObj(pack.relationTypes)) {
+      relationTypes = pack.relationTypes;
+      Object.keys(relationTypes).forEach(function (type) {
+        var entry = relationTypes[type];
+        if (!isObj(entry)) {
+          errors.push('E6: relationTypes.' + type + ' must be an object');
+        } else if (typeof entry.label !== 'string' || !entry.label) {
+          errors.push('E6: relationTypes.' + type + '.label must be a non-empty string');
+        }
+      });
+    }
+
+    /* stages pre-scan (E12 needs the stage-key set) */
+    var stages = Array.isArray(pack.stages) ? pack.stages : [];
+    if (pack.stages !== undefined && !Array.isArray(pack.stages)) {
+      errors.push('E7: stages must be an array');
+    }
+    var stageKeys = Object.create(null);
+    stages.forEach(function (s) { if (isObj(s) && typeof s.key === 'string') stageKeys[s.key] = true; });
+
+    /* E5/E6/E12/W3 */
+    var relations = Array.isArray(pack.relations) ? pack.relations : [];
+    if (pack.relations !== undefined && !Array.isArray(pack.relations)) {
+      errors.push('E5: relations must be an array');
+    }
+    var referenced = Object.create(null);
+    var relationIds = Object.create(null);
+    var anonymousRelationIds = Object.create(null);
+    relations.forEach(function (r, i) {
+      if (!isObj(r)) { errors.push('E5: relations[' + i + '] must be an object'); return; }
+      if (r.id !== undefined) {
+        if (typeof r.id !== 'string' || !r.id) errors.push('E12: relations[' + i + '].id must be a non-empty string when present');
+        else if (relationIds[r.id]) errors.push('E12: relations[' + i + '].id "' + r.id + '" is duplicated');
+        else relationIds[r.id] = true;
+      } else {
+        var anonymousIdentity = relationIdentity(pack, r);
+        if (anonymousRelationIds[anonymousIdentity] !== undefined) {
+          errors.push('E12: relations[' + i + '] duplicated master relation identity "' + anonymousIdentity + '" (first declared at relations[' + anonymousRelationIds[anonymousIdentity] + '])');
+        } else {
+          anonymousRelationIds[anonymousIdentity] = i;
+        }
+      }
+      ['a', 'b'].forEach(function (end) {
+        var id = resolveId(pack, r[end]);
+        if (!id) errors.push('E5: relations[' + i + '].' + end + ' dangling reference "' + r[end] + '"');
+        else referenced[id] = true;
+      });
+      if (typeof r.type !== 'string' || !Object.prototype.hasOwnProperty.call(relationTypes, r.type)) {
+        errors.push('E6: relations[' + i + '].type "' + r.type + '" is not registered in relationTypes');
+      }
+      if (r.label === undefined || r.label === '') {
+        warnings.push('W3: relations[' + i + '] (' + r.a + ' -> ' + r.b + ') missing label');
+      }
+      /* E12: scope stage keys must exist */
+      if (r.scope !== undefined) {
+        if (!Array.isArray(r.scope) || !r.scope.length) {
+          errors.push('E12: relations[' + i + '].scope must be a non-empty array of stage keys');
+        } else r.scope.forEach(function (k) {
+          if (!stageKeys[k]) errors.push('E12: relations[' + i + '].scope references non-existent stage "' + k + '"');
+        });
+      }
+    });
+
+    /* E7/E8 + E12 reference-disambiguation */
+    stages.forEach(function (s, i) {
+      if (!isObj(s)) { errors.push('E7: stages[' + i + '] must be an object'); return; }
+      if (typeof s.key !== 'string' || !s.key) errors.push('E7: stages[' + i + '].key must be a non-empty string');
+      else {
+        var dup = stages.some(function (o, j) { return j !== i && isObj(o) && o.key === s.key; });
+        if (dup) errors.push('E7: stages[' + i + '].key "' + s.key + '" is duplicated');
+      }
+      if (typeof s.name !== 'string' || !s.name) errors.push('E7: stages[' + i + '].name must be a non-empty string');
+
+      var memberSet = Object.create(null);
+      (Array.isArray(s.entities) ? s.entities : []).forEach(function (id) {
+        var rid = resolveId(pack, id);
+        if (!rid) errors.push('E7: stages[' + i + '].entities dangling reference "' + id + '"');
+        else { memberSet[rid] = true; referenced[rid] = true; }
+      });
+
+      if (s.layout !== undefined) {
+        if (!isObj(s.layout)) errors.push('E7: stages[' + i + '].layout must be an object');
+        else Object.keys(s.layout).forEach(function (id) {
+          var rid = resolveId(pack, id);
+          if (!rid) { errors.push('E7: stages[' + i + '].layout dangling reference "' + id + '"'); return; }
+          if (!Object.prototype.hasOwnProperty.call(memberSet, rid)) errors.push('E7: stages[' + i + '].layout."' + id + '" is not in this stage\'s entities');
+          var xy = s.layout[id];
+          if (!Array.isArray(xy) || xy.length !== 2 || typeof xy[0] !== 'number' || typeof xy[1] !== 'number') {
+            errors.push('E8: stages[' + i + '].layout."' + id + '" must be a numeric [x, y] pair');
+          } else if (xy[0] < 0 || xy[0] > 1 || xy[1] < 0 || xy[1] > 1) {
+            errors.push('E8: stages[' + i + '].layout."' + id + '" coordinates out of range [' + xy + '] (must be within [0,1])');
+          }
+        });
+      }
+
+      if (s.relations !== undefined) {
+        if (!Array.isArray(s.relations)) errors.push('E7: stages[' + i + '].relations must be an array');
+        else s.relations.forEach(function (ref, j) {
+          if (!isObj(ref)) { errors.push('E7: stages[' + i + '].relations[' + j + '] must be an {a,b} reference'); return; }
+          var at = 'stages[' + i + '].relations[' + j + ']';
+          var okA = resolveId(pack, ref.a), okB = resolveId(pack, ref.b);
+          if (!okA) errors.push('E7: ' + at + '.a dangling reference "' + ref.a + '"');
+          if (!okB) errors.push('E7: ' + at + '.b dangling reference "' + ref.b + '"');
+          if (!okA || !okB) return;
+          /* E12: a stage ref must resolve to exactly one active master edge.
+           * Endpoints are canonicalized via resolveId; explicit id/type constraints always
+           * match, and scoped edges are active only in their declared stages. */
+          var ra = okA, rb = okB;
+          var endpointCands = relations.filter(function (r) {
+            return isObj(r) && resolveId(pack, r.a) === ra && resolveId(pack, r.b) === rb;
+          });
+          var cands = endpointCands;
+          var validRefId = true;
+          if (ref.id !== undefined) {
+            if (typeof ref.id !== 'string' || !ref.id) {
+              errors.push('E12: ' + at + '.id must be a non-empty string when present');
+              validRefId = false;
+              cands = [];
+            } else {
+              cands = cands.filter(function (r) { return r.id === ref.id; });
+            }
+          }
+          if (ref.type !== undefined) {
+            if (typeof ref.type !== 'string' || !ref.type) {
+              errors.push('E12: ' + at + '.type must be a non-empty string when present');
+              cands = [];
+            } else {
+              cands = cands.filter(function (r) { return r.type === ref.type; });
+            }
+          }
+          cands = cands.filter(function (r) {
+            return !Array.isArray(r.scope) || r.scope.indexOf(s.key) !== -1;
+          });
+          if (cands.length > 1) {
+            var scoped = cands.filter(function (r) { return Array.isArray(r.scope); });
+            if (scoped.length === 1) cands = scoped;
+          }
+          if (endpointCands.length === 0) {
+            errors.push('E7: ' + at + ' {' + ref.a + ',' + ref.b + '} does not exist in master relations');
+          } else if (cands.length === 0 && validRefId) {
+            errors.push('E12: ' + at + ' {' + ref.a + ',' + ref.b + '} matches no active master edge for the declared id/type/scope (stage "' + s.key + '")');
+          } else if (cands.length > 1) {
+            errors.push('E12: ' + at + ' {' + ref.a + ',' + ref.b + '} matches ' + cands.length +
+              ' active master edges and cannot be resolved via id/type/scope (stage "' + s.key + '")');
+          }
+        });
+      }
+
+      if (s.overlay !== undefined) {
+        if (!isObj(s.overlay)) errors.push('E7: stages[' + i + '].overlay must be an object');
+        else Object.keys(s.overlay).forEach(function (id) {
+          if (!resolveId(pack, id)) errors.push('E7: stages[' + i + '].overlay dangling reference "' + id + '"');
+        });
+      }
+    });
+
+    /* E10: attributeTypes / attributeSources */
+    if (pack.attributeTypes !== undefined && !isObj(pack.attributeTypes)) {
+      errors.push('E10: attributeTypes must be an object');
+    }
+    if (pack.attributeSources !== undefined) {
+      if (!Array.isArray(pack.attributeSources)) {
+        errors.push('E10: attributeSources must be an array of path strings');
+      } else if (!isObj(pack.attributeTypes) || Object.keys(pack.attributeTypes).length === 0) {
+        errors.push('E10: attributeSources declared but attributeTypes is empty');
+      } else {
+        pack.attributeSources.forEach(function (pathExpr) {
+          var sources = resolveAttrSource(pack, pathExpr);
+          if (!sources.length) {
+            warnings.push('E10: attributeSources path "' + pathExpr + '" matched no attribute-pair collection');
+            return;
+          }
+          sources.forEach(function (src) {
+            src.pairs.forEach(function (pair, i) {
+              var label = Array.isArray(pair) ? pair[0] : (isObj(pair) ? pair.label : undefined);
+              if (typeof label !== 'string' || !Object.prototype.hasOwnProperty.call(pack.attributeTypes, label)) {
+                errors.push('E10: ' + src.at + '[' + i + '] attribute label ' + JSON.stringify(label) + ' is not registered in attributeTypes');
+              }
+            });
+          });
+        });
+      }
+    }
+
+    /* E11: local asset references must be registered in the assets manifest */
+    if (pack.assets !== undefined && !isObj(pack.assets)) {
+      errors.push('assets must be an object');
+    }
+    var assets = isObj(pack.assets) ? pack.assets : {};
+    var assetBase = (isObj(pack.meta) && typeof pack.meta.assetBase === 'string') ? pack.meta.assetBase : '';
+    collectAssetRefs(pack).forEach(function (v) {
+      var key = assetBase && v.indexOf('assets/') === -1 ? assetBase + v : v;
+      if (!Object.prototype.hasOwnProperty.call(assets, key)) {
+        errors.push('E11: asset reference "' + v + '" (resolved as "' + key + '") is not registered in the assets manifest');
+      }
+    });
+
+    /* E13: contents highlight refs */
+    if (pack.contents !== undefined) {
+      if (!isObj(pack.contents)) {
+        errors.push('E13: contents must be an object');
+      } else Object.keys(pack.contents).forEach(function (cid) {
+        var c = pack.contents[cid];
+        if (!isObj(c)) { errors.push('E13: contents.' + cid + ' must be an object'); return; }
+        if (typeof c.kind !== 'string' || !c.kind) errors.push('E13: contents.' + cid + '.kind must be a non-empty string');
+        if (c.body !== undefined && typeof c.body !== 'string') errors.push('E13: contents.' + cid + '.body must be a string');
+        if (c.highlights !== undefined) {
+          if (!Array.isArray(c.highlights)) errors.push('E13: contents.' + cid + '.highlights must be an array');
+          else c.highlights.forEach(function (h, i) {
+            if (!isObj(h) || typeof h.ref !== 'string') {
+              errors.push('E13: contents.' + cid + '.highlights[' + i + '] must contain a ref string');
+              return;
+            }
+            if (!resolveContentRef(pack, h.ref)) {
+              errors.push('E13: contents.' + cid + '.highlights[' + i + '].ref "' + h.ref + '" cannot be resolved (not an entity/alias/annotation key)');
+            }
+          });
+        }
+      });
+    }
+
+    /* W1 */
+    Object.keys(entities).forEach(function (id) {
+      var selected = entityDisplay(pack, entities[id]);
+      var display = typeof selected.value === 'string' && selected.value ? selected.value : id;
+      if (!referenced[id]) warnings.push('W1: entity "' + id + '" (' + display + ') is not referenced by any relation/stage');
+    });
+
+    /* E14: sameAs entity-identity pairs (v1.2) */
+    var sameAsPairs = [];
+    if (pack.sameAs !== undefined) {
+      if (!Array.isArray(pack.sameAs)) {
+        errors.push('E14: sameAs must be an array of [idA, idB] pairs');
+      } else pack.sameAs.forEach(function (pair, i) {
+        if (!Array.isArray(pair) || pair.length !== 2) {
+          errors.push('E14: sameAs[' + i + '] must be a two-element [idA, idB] array');
+          return;
+        }
+        pair.forEach(function (id) {
+          if (!resolveId(pack, id)) errors.push('E14: sameAs[' + i + '] references non-existent entity "' + id + '"');
+        });
+        if (pair[0] === pair[1]) errors.push('E14: sameAs[' + i + '] has the same entity on both sides');
+        sameAsPairs.push(pair);
+      });
+    }
+
+    /* E15/W5: provenance record-level provenance (v1.2) */
+    if (pack.provenance !== undefined) {
+      if (!isObj(pack.provenance)) {
+        errors.push('E15: provenance must be an object');
+      } else {
+        var threshold = (isObj(pack.meta) && typeof pack.meta.confidenceThreshold === 'number' &&
+          isFinite(pack.meta.confidenceThreshold) && pack.meta.confidenceThreshold >= 0 && pack.meta.confidenceThreshold <= 1)
+          ? pack.meta.confidenceThreshold : 0.7;
+        var checkProv = function (group, exists, describe) {
+          var g = pack.provenance[group];
+          if (g === undefined) return;
+          if (!isObj(g)) { errors.push('E15: provenance.' + group + ' must be an object'); return; }
+          Object.keys(g).forEach(function (key) {
+            if (!exists(key)) { errors.push('E15: provenance.' + group + '."' + key + '" ' + describe); return; }
+            var p = g[key];
+            if (!isObj(p)) {
+              errors.push('E15: ' + group + '."' + key + '" must be a provenance object');
+              return;
+            }
+            if (typeof p.origin !== 'string' || !p.origin) {
+              warnings.push('W7: ' + group + '."' + key + '" missing origin (provenance should record where the data came from)');
+            }
+            if (p.confidence !== undefined &&
+                (typeof p.confidence !== 'number' || !isFinite(p.confidence) || p.confidence < 0 || p.confidence > 1)) {
+              errors.push('E15: ' + group + '."' + key + '" confidence must be a finite number between 0 and 1');
+            } else if (typeof p.confidence === 'number' && p.confidence < threshold) {
+              warnings.push('W5: ' + group + '."' + key + '" confidence=' + p.confidence + ' is below threshold ' + threshold + ' (low-confidence data; manual review advised)');
+            }
+            if (typeof p.origin === 'string' && p.origin.indexOf('crawl:') === 0 &&
+                (p.sourceUrl === undefined || p.sourceUrl === null || p.sourceUrl === '')) {
+              warnings.push('W8: ' + group + '."' + key + '" origin is crawl:* but sourceUrl is missing');
+            } else if (p.sourceUrl !== undefined && p.sourceUrl !== null && p.sourceUrl !== '' && !isHttpUrl(p.sourceUrl)) {
+              errors.push('E15: ' + group + '."' + key + '" sourceUrl must be a valid HTTP(S) URL');
+            }
+            if (group === 'entities' && isObj(p)) {
+              if (p.fieldOrigins !== undefined && !isObj(p.fieldOrigins)) {
+                errors.push('E15: provenance.entities."' + key + '".fieldOrigins must be an object');
+              } else if (isObj(p.fieldOrigins)) {
+                Object.keys(p.fieldOrigins).forEach(function (field) {
+                  if (!isObj(entities[key]) || !Object.prototype.hasOwnProperty.call(entities[key], field)) {
+                    errors.push('E15: provenance.entities."' + key + '".fieldOrigins."' + field + '" points to a non-existent entity field');
+                    return;
+                  }
+                  var fp = p.fieldOrigins[field];
+                  if (!isObj(fp)) {
+                    errors.push('E15: entities."' + key + '".fieldOrigins."' + field + '" must be a provenance object');
+                    return;
+                  }
+                  if (typeof fp.origin !== 'string' || !fp.origin) {
+                    warnings.push('W7: entities."' + key + '".fieldOrigins."' + field + '" missing origin (provenance should record where the data came from)');
+                  }
+                  if (fp.confidence !== undefined &&
+                      (typeof fp.confidence !== 'number' || !isFinite(fp.confidence) || fp.confidence < 0 || fp.confidence > 1)) {
+                    errors.push('E15: entities."' + key + '".fieldOrigins."' + field + '" confidence must be a finite number between 0 and 1');
+                  } else if (typeof fp.confidence === 'number' && fp.confidence < threshold) {
+                    warnings.push('W5: entities."' + key + '".fieldOrigins."' + field + '" confidence=' + fp.confidence + ' is below threshold ' + threshold + ' (low-confidence data; manual review advised)');
+                  }
+                  if (typeof fp.origin === 'string' && fp.origin.indexOf('crawl:') === 0 &&
+                      (fp.sourceUrl === undefined || fp.sourceUrl === null || fp.sourceUrl === '')) {
+                    warnings.push('W8: entities."' + key + '".fieldOrigins."' + field + '" origin is crawl:* but sourceUrl is missing');
+                  } else if (fp.sourceUrl !== undefined && fp.sourceUrl !== null && fp.sourceUrl !== '' && !isHttpUrl(fp.sourceUrl)) {
+                    errors.push('E15: entities."' + key + '".fieldOrigins."' + field + '" sourceUrl must be a valid HTTP(S) URL');
+                  }
+                });
+              }
+            }
+          });
+        };
+        checkProv('entities', function (id) { return Object.prototype.hasOwnProperty.call(entities, id); }, 'points to a non-existent entity');
+        checkProv('relations', function (key) {
+          if (relations.some(function (r) { return isObj(r) && (relationIdentity(pack, r) === key || r.id === key); })) return true;
+          // v1.2 compatibility: a::b is accepted only when it identifies one
+          // canonical pair unambiguously. New packs should use relation.id or
+          // the full a::b::type::scope=<...> identity.
+          var pairMatches = relations.filter(function (r) {
+            if (!isObj(r)) return false;
+            var a = resolveId(pack, r.a) || r.a;
+            var b = resolveId(pack, r.b) || r.b;
+            return (a + '::' + b) === key || (r.a + '::' + r.b) === key;
+          });
+          return pairMatches.length === 1;
+        }, 'points to a non-existent or ambiguous relation (use relation.id or a::b::type::scope=<...>)');
+        checkProv('contents', function (key) {
+          return isObj(pack.contents) && Object.prototype.hasOwnProperty.call(pack.contents, key);
+        }, 'points to a non-existent contents entry');
+
+      }
+    }
+
+    /* E16: derivations declaration consistency (v1.3) */
+    if (pack.derivations !== undefined) {
+      var DERIV_KINDS = ['repeat', 'insertion-order', 'lookup-rebuild', 'scope-resolution', 'projection', 'reference-only'];
+      var resolvePath = function (expr) {
+        // dotted path with optional '*' wildcard: walk pack sections
+        var segs = String(expr).split('.');
+        var roots = Object.create(null);
+        ['entities', 'aliases', 'relationTypes', 'heroRelTypes', 'relations', 'stages', 'attributeTypes', 'attributeSources', 'contents', 'domain', 'assets', 'kindNameFields', 'sameAs', 'provenance', 'derivations', 'meta'].forEach(function (root) { roots[root] = true; });
+        if (!Object.prototype.hasOwnProperty.call(roots, segs[0])) return { rootOk: false, resolved: false };
+        var nodes = [pack];
+        for (var i = 0; i < segs.length; i++) {
+          var next = [];
+          for (var j = 0; j < nodes.length; j++) {
+            var node = nodes[j];
+            if (!isObj(node) && !Array.isArray(node)) continue;
+            if (segs[i] === '*') {
+              Object.keys(node).forEach(function (k) { next.push(node[k]); });
+            } else if (Object.prototype.hasOwnProperty.call(node, segs[i])) {
+              next.push(node[segs[i]]);
+            }
+          }
+          nodes = next;
+          if (!nodes.length) return { rootOk: true, resolved: false };
+        }
+        return { rootOk: true, resolved: nodes.length > 0 };
+      };
+      if (!isObj(pack.derivations)) {
+        errors.push('E16: derivations must be an object');
+      } else {
+        Object.keys(pack.derivations).forEach(function (dk) {
+          var d = pack.derivations[dk];
+          var at = 'derivations.' + dk;
+          if (!isObj(d)) { errors.push('E16: ' + at + ' must be an object'); return; }
+          if (DERIV_KINDS.indexOf(d.kind) === -1) {
+            errors.push('E16: ' + at + '.kind ' + JSON.stringify(d.kind) + ' is not a valid derivation kind (' + DERIV_KINDS.join('/') + ')');
+          }
+          if (typeof d.source !== 'string' || !d.source) {
+            errors.push('E16: ' + at + '.source must be a non-empty pack path string');
+          } else {
+            var r = resolvePath(d.source);
+            if (!r.rootOk) errors.push('E16: ' + at + '.source "' + d.source + '" has an invalid root section');
+            else if (!r.resolved) warnings.push('E16: ' + at + '.source "' + d.source + '" resolves to nothing in this pack');
+          }
+          if (!Array.isArray(d.consumers) || !d.consumers.length || d.consumers.some(function (c) { return typeof c !== 'string' || !c; })) {
+            errors.push('E16: ' + at + '.consumers must be a non-empty array of strings');
+          }
+          if (typeof d.note !== 'string' || !d.note) {
+            errors.push('E16: ' + at + '.note must be a non-empty string');
+          }
+          /* alsoTouches is a secondary pack-source path and is resolved like
+           * source. affects, by contrast, names selectors/regions and is only
+           * required to be an array of non-empty strings. */
+          if (d.alsoTouches !== undefined) {
+            if (!Array.isArray(d.alsoTouches) || d.alsoTouches.some(function (x) { return typeof x !== 'string' || !x; })) {
+              errors.push('E16: ' + at + '.alsoTouches must be an array of non-empty pack path strings');
+            } else d.alsoTouches.forEach(function (expr) {
+              var rr = resolvePath(expr);
+              if (!rr.rootOk) errors.push('E16: ' + at + '.alsoTouches "' + expr + '" has an invalid root section');
+              else if (!rr.resolved) warnings.push('E16: ' + at + '.alsoTouches "' + expr + '" resolves to nothing in this pack');
+            });
+          }
+          if (d.affects !== undefined && (!Array.isArray(d.affects) || d.affects.some(function (x) { return typeof x !== 'string' || !x; }))) {
+            errors.push('E16: ' + at + '.affects must be an array of non-empty selector/region strings');
+          }
+        });
+      }
+    }
+
+    /* W6: entity names collide after normalization without sameAs (v1.2) */
+    var normName = function (s) {
+      return String(s == null ? '' : s).replace(/[\s·・（）()《》〈〉\-—_]+/g, '').toLowerCase();
+    };
+    var byNorm = Object.create(null);
+    Object.keys(entities).forEach(function (id) {
+      var e = entities[id];
+      if (!isObj(e)) return;
+      var selected = entityDisplay(pack, e);
+      var n = normName(selected.value || '');
+      if (!n) return;
+      if (!byNorm[n]) byNorm[n] = [];
+      byNorm[n].push(id);
+    });
+    Object.keys(byNorm).forEach(function (n) {
+      var ids = byNorm[n];
+      if (ids.length < 2) return;
+      for (var i = 0; i < ids.length; i++) for (var j = i + 1; j < ids.length; j++) {
+        var linked = sameAsPairs.some(function (p) {
+          return (p[0] === ids[i] && p[1] === ids[j]) || (p[0] === ids[j] && p[1] === ids[i]);
+        });
+        if (!linked) {
+          warnings.push('W6: entities "' + ids[i] + '" and "' + ids[j] + '" have identical normalized names (' + n + '); suspected duplicates — declare sameAs if they are the same subject');
+        }
+      }
+    });
+
+    /* W2/W4 */
+    Object.keys(assets).forEach(function (p) {
+      var a = assets[p];
+      if (isObj(a) && a.exists === false) warnings.push('W2: missing asset ' + p);
+      if (isObj(a) && a.exists === true && !a.hash && !/^https?:\/\//i.test(p)) {
+        warnings.push('W4: asset missing hash (incomplete provenance) ' + p);
+      }
+    });
+
+    /* domain is free-form, governed by library-level domainChecks/schema */
+    if (pack.domain !== undefined && !isObj(pack.domain)) {
+      errors.push('domain must be an object');
+    }
+
+    return { errors: errors, warnings: warnings };
+  }
+
+  function assertValid(pack) {
+    var r = validate(pack);
+    if (r.errors.length) {
+      var id = (pack && pack.meta && pack.meta.id) || '(unknown)';
+      throw new Error('[SGDataLoader] Data Pack "' + id + '" validation failed (' + r.errors.length + ' error(s)):\n - ' + r.errors.join('\n - '));
+    }
+    return r;
+  }
+
+  global.SGDataLoader = {
+    SCHEMA_VERSIONS: SCHEMA_VERSIONS,
+    validate: validate,
+    assertValid: assertValid,
+    resolveAlias: resolveAlias,
+    resolveId: resolveId,
+    entityDisplay: entityDisplay,
+    resolveContentRef: resolveContentRef,
+    relationIdentity: relationIdentity
+  };
+})(typeof window !== 'undefined' ? window : globalThis);
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-data-surface-import.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-data-surface-import.js
new file mode 100644
index 0000000..82f369d
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-data-surface-import.js
@@ -0,0 +1,143 @@
+'use strict';
+
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+
+const HASH_PATTERN = /^[a-f0-9]{64}$/;
+/* Every root field declared by the Data Pack v1.3 contract is forbidden in a
+ * Data Surface handoff. Keep the legacy adapters entry too: accepting it would
+ * let an older Data Pack-shaped payload bypass the handoff boundary. */
+const DATA_PACK_FIELDS = [
+  'meta', 'kindNameFields', 'sameAs', 'provenance',
+  'entities', 'aliases', 'relationTypes', 'heroRelTypes', 'relations', 'stages',
+  'attributeTypes', 'attributeSources', 'contents', 'domain', 'assets', 'derivations',
+  'adapters',
+];
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function issue(issues, path, message) {
+  issues.push({ path, message });
+}
+
+function validateSurface(surface, index, issues) {
+  const path = `surfaces[${index}]`;
+  if (!isObject(surface)) {
+    issue(issues, path, 'surface must be an object');
+    return;
+  }
+  if (typeof surface.id !== 'string' || !surface.id) issue(issues, `${path}.id`, 'surface id is required');
+  if (!isObject(surface.owner) || typeof surface.owner.componentFile !== 'string') issue(issues, `${path}.owner`, 'component owner is required');
+  if (!isObject(surface.source)) issue(issues, `${path}.source`, 'source description is required');
+  if (isObject(surface.source?.static) && Object.prototype.hasOwnProperty.call(surface.source.static, 'value')) {
+    issue(issues, `${path}.source.static.value`, 'raw business values are not allowed in a Data Surface Manifest');
+  }
+  if (!isObject(surface.shape)) issue(issues, `${path}.shape`, 'shape is required');
+  if (!Array.isArray(surface.fields)) issue(issues, `${path}.fields`, 'fields must be an array');
+  if (!Array.isArray(surface.consumers)) issue(issues, `${path}.consumers`, 'consumers must be an array');
+  if (!Array.isArray(surface.references)) issue(issues, `${path}.references`, 'references must be an array');
+  if (!Array.isArray(surface.unresolved)) issue(issues, `${path}.unresolved`, 'unresolved must be an array');
+  if (Object.prototype.hasOwnProperty.call(surface, 'reviewRequired') && typeof surface.reviewRequired !== 'boolean') {
+    issue(issues, `${path}.reviewRequired`, 'reviewRequired must be a boolean when present');
+  }
+}
+
+function validateDataSurfaceManifest(manifest) {
+  const issues = [];
+  if (!isObject(manifest)) return { valid: false, issues: [{ path: '$', message: 'manifest must be an object' }] };
+  for (const field of DATA_PACK_FIELDS) {
+    if (Object.prototype.hasOwnProperty.call(manifest, field)) issue(issues, field, `Data Pack field ${field} must not be present in the handoff manifest`);
+  }
+  if (manifest.schemaVersion !== '1.0') issue(issues, 'schemaVersion', 'schemaVersion must be 1.0');
+  if (manifest.kind !== 'data-surface-manifest') issue(issues, 'kind', 'kind must be data-surface-manifest');
+  if (!isObject(manifest.identity)) issue(issues, 'identity', 'identity is required');
+  else {
+    if (manifest.identity.contractVersion !== '1.0') issue(issues, 'identity.contractVersion', 'contractVersion must be 1.0');
+    if (typeof manifest.identity.sourceRoot !== 'string' || !manifest.identity.sourceRoot) issue(issues, 'identity.sourceRoot', 'sourceRoot is required');
+    for (const field of ['sourceHash', 'fixtureHash', 'configurationHash']) {
+      if (!HASH_PATTERN.test(manifest.identity[field] || '')) issue(issues, `identity.${field}`, `${field} must be a SHA-256 digest`);
+    }
+  }
+  if (!isObject(manifest.library)) issue(issues, 'library', 'library description is required');
+  if (!Array.isArray(manifest.surfaces)) issue(issues, 'surfaces', 'surfaces must be an array');
+  else manifest.surfaces.forEach((surface, index) => validateSurface(surface, index, issues));
+  if (!Array.isArray(manifest.unresolved)) issue(issues, 'unresolved', 'unresolved must be an array');
+  if (!isObject(manifest.metrics)) issue(issues, 'metrics', 'metrics are required');
+  else if (Array.isArray(manifest.surfaces) && manifest.metrics.surfaces !== manifest.surfaces.length) issue(issues, 'metrics.surfaces', 'surface count does not match');
+  if (typeof manifest.reviewRequired !== 'boolean') issue(issues, 'reviewRequired', 'reviewRequired must be a boolean');
+  return { valid: issues.length === 0, issues };
+}
+
+function canonicalize(value) {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (isObject(value)) return Object.fromEntries(Object.keys(value).sort().map(key => [key, canonicalize(value[key])]));
+  return value;
+}
+
+function hashCanonical(value) {
+  return crypto.createHash('sha256').update(JSON.stringify(canonicalize(value))).digest('hex');
+}
+
+function importDataSurfaceManifest(manifest, options = {}) {
+  const validation = validateDataSurfaceManifest(manifest);
+  if (!validation.valid) {
+    const error = new Error(`invalid Data Surface Manifest: ${validation.issues.map(item => `${item.path}: ${item.message}`).join('; ')}`);
+    error.code = 'INVALID_DATA_SURFACE_MANIFEST';
+    error.issues = validation.issues;
+    throw error;
+  }
+  const surfaceBlockers = manifest.surfaces
+    .filter(surface => surface.reviewRequired || surface.unresolved.length > 0)
+    .map(surface => `surface ${surface.id} requires review`);
+  const blockers = [
+    ...(manifest.reviewRequired ? ['manifest reviewRequired=true'] : []),
+    ...(manifest.unresolved.length ? [`manifest has ${manifest.unresolved.length} unresolved evidence records`] : []),
+    ...surfaceBlockers,
+  ];
+  const reviewRequired = blockers.length > 0;
+  const report = {
+    schemaVersion: '1.0',
+    kind: 'data-surface-import-report',
+    status: reviewRequired ? 'review-required' : 'ready',
+    source: {
+      kind: manifest.kind,
+      identity: manifest.identity,
+      digest: hashCanonical(manifest),
+    },
+    library: manifest.library,
+    surfaces: manifest.surfaces.map(surface => ({
+      id: surface.id,
+      owner: surface.owner,
+      source: surface.source,
+      shape: surface.shape,
+      fields: surface.fields,
+      consumers: surface.consumers,
+      injection: surface.injection,
+      references: surface.references,
+      evidence: surface.evidence,
+      reviewRequired: surface.reviewRequired,
+      unresolved: surface.unresolved,
+    })),
+    unresolved: manifest.unresolved,
+    review: manifest.review || { blockers: manifest.unresolved, policyNotices: [] },
+    metrics: manifest.metrics,
+    blockers,
+    reviewRequired,
+    dataPackGenerationAllowed: !reviewRequired,
+  };
+  if (reviewRequired && options.requireReady) {
+    const error = new Error(`Data Surface Manifest requires review: ${blockers.join('; ')}`);
+    error.code = 'DATA_SURFACE_REVIEW_REQUIRED';
+    error.report = report;
+    throw error;
+  }
+  return report;
+}
+
+function readDataSurfaceManifest(file, options) {
+  return importDataSurfaceManifest(JSON.parse(fs.readFileSync(file, 'utf8')), options);
+}
+
+module.exports = { DATA_PACK_FIELDS, validateDataSurfaceManifest, importDataSurfaceManifest, readDataSurfaceManifest };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-evidence-utils.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-evidence-utils.js
new file mode 100644
index 0000000..eac0da3
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-evidence-utils.js
@@ -0,0 +1,96 @@
+'use strict';
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+
+function stableValue(value) {
+  if (Array.isArray(value)) return value.map(stableValue);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, stableValue(value[key])]));
+}
+
+function stableJson(value) {
+  return JSON.stringify(stableValue(value));
+}
+
+function sha256Bytes(value) {
+  return 'sha256:' + crypto.createHash('sha256').update(value).digest('hex');
+}
+
+function contentId(prefix, value, omitted = []) {
+  const copy = { ...value };
+  for (const key of omitted) delete copy[key];
+  return `${prefix}:${sha256Bytes(stableJson(copy)).slice(7)}`;
+}
+
+function isDigest(value) {
+  return typeof value === 'string' && /^sha256:[0-9a-f]{64}$/.test(value);
+}
+
+function safeRelative(value, label = 'path') {
+  if (typeof value !== 'string' || !value || /[\u0000-\u001f\u007f]/.test(value)) throw new Error(`${label} must be a non-empty safe relative path`);
+  if (path.isAbsolute(value) || /^[A-Za-z]:[\\/]/.test(value)) throw new Error(`${label} must be relative`);
+  const normalized = value.replace(/\\/g, '/');
+  if (normalized.split('/').includes('..')) throw new Error(`${label} must not escape its root`);
+  return normalized.replace(/^\.\//, '');
+}
+
+function verifyArtifacts(artifacts, baseDir, errors) {
+  const verifiedIds = new Set();
+  const ids = new Set();
+  const paths = new Set();
+  let root = null;
+  if ((artifacts || []).length && !baseDir) errors.push('artifact verification baseDir is required');
+  else if (baseDir) {
+    try { root = fs.realpathSync(baseDir); }
+    catch (error) { errors.push(`artifact verification root cannot be resolved: ${error.message}`); }
+  }
+  for (const artifact of artifacts || []) {
+    if (!artifact || typeof artifact !== 'object' || Array.isArray(artifact)) {
+      errors.push('artifact must be an object');
+      continue;
+    }
+    const id = typeof artifact.id === 'string' && artifact.id ? artifact.id : null;
+    if (!id) errors.push('artifact.id must be a non-empty string');
+    else if (ids.has(id)) errors.push(`artifact id is duplicated: ${id}`);
+    else ids.add(id);
+    if (!isDigest(artifact.sha256)) errors.push(`artifact ${id || '<unknown>'} sha256 is required`);
+    let relative;
+    try { relative = safeRelative(artifact.path, `artifact ${id || '<unknown>'} path`); }
+    catch (error) { errors.push(error.message); continue; }
+    if (paths.has(relative)) {
+      errors.push(`artifact path is duplicated: ${relative}`);
+      continue;
+    }
+    paths.add(relative);
+    if (!root || !id || !isDigest(artifact.sha256)) continue;
+    const file = path.resolve(root, relative);
+    const fromRoot = path.relative(root, file);
+    if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) {
+      errors.push(`artifact ${id} escapes evidence root`);
+      continue;
+    }
+    try {
+      let current = root;
+      for (const segment of relative.split('/')) {
+        current = path.join(current, segment);
+        const stat = fs.lstatSync(current);
+        if (stat.isSymbolicLink()) throw new Error('path must not contain symlinks');
+      }
+      const stat = fs.lstatSync(file);
+      if (!stat.isFile()) throw new Error('must be a regular file');
+      if (stat.nlink > 1) throw new Error('hardlinks are not allowed');
+      const canonicalFile = fs.realpathSync(file);
+      const canonicalRelative = path.relative(root, canonicalFile);
+      if (canonicalRelative === '..' || canonicalRelative.startsWith(`..${path.sep}`) || path.isAbsolute(canonicalRelative)) throw new Error('resolves outside evidence root');
+      const actual = sha256Bytes(fs.readFileSync(file));
+      if (actual !== artifact.sha256) throw new Error('digest mismatch');
+      verifiedIds.add(id);
+    } catch (error) {
+      errors.push(`artifact ${id} cannot be verified: ${error.message}`);
+    }
+  }
+  return verifiedIds;
+}
+
+module.exports = { stableValue, stableJson, sha256Bytes, contentId, isDigest, safeRelative, verifyArtifacts };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-experiment.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-experiment.js
new file mode 100644
index 0000000..a6f51fa
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-experiment.js
@@ -0,0 +1,234 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { runTask, writeAtomic } = require('./sg-task-runner.js');
+const { readTaskManifest } = require('./agent-task-manifest.js');
+const { contentId, stableJson, sha256Bytes, safeRelative, isDigest } = require('./sg-evidence-utils.js');
+
+function wilson(successes, total, z = 1.959963984540054) {
+  if (!Number.isInteger(successes) || !Number.isInteger(total) || total < 0 || successes < 0 || successes > total) throw new Error('invalid Wilson interval counts');
+  if (total === 0) return { lower: null, upper: null };
+  const p = successes / total;
+  const denominator = 1 + z * z / total;
+  const center = (p + z * z / (2 * total)) / denominator;
+  const margin = z * Math.sqrt((p * (1 - p) + z * z / (4 * total)) / total) / denominator;
+  return { lower: Math.max(0, center - margin), upper: Math.min(1, center + margin) };
+}
+
+function validateExperimentSpec(spec) {
+  const errors = [];
+  if (!spec || typeof spec !== 'object' || Array.isArray(spec)) return { valid: false, errors: ['experiment spec must be an object'] };
+  const allowed = new Set(['experimentVersion', 'experimentId', 'title', 'agent', 'tasks', 'repetitions', 'seed']);
+  for (const key of Object.keys(spec)) if (!allowed.has(key)) errors.push(`unknown experiment field: ${key}`);
+  if (spec.experimentVersion !== '1.0') errors.push('experimentVersion must be 1.0');
+  if (typeof spec.title !== 'string' || !spec.title) errors.push('title is required');
+  if (!spec.agent || typeof spec.agent !== 'object' || Array.isArray(spec.agent)) errors.push('agent must be an object');
+  else {
+    for (const key of Object.keys(spec.agent)) if (!['kind', 'provider', 'model', 'argv', 'adapter', 'infraExitCodes'].includes(key)) errors.push(`unknown agent field: ${key}`);
+    if (!['scripted', 'ai'].includes(spec.agent.kind)) errors.push('agent.kind must be scripted or ai');
+    for (const field of ['provider', 'model']) if (typeof spec.agent[field] !== 'string' || !spec.agent[field]) errors.push(`agent.${field} is required`);
+    if (!Array.isArray(spec.agent.argv) || !spec.agent.argv.length || spec.agent.argv.some((item) => typeof item !== 'string' || item.includes('\0'))) errors.push('agent.argv must be a non-empty safe string array');
+    else if (!spec.agent.argv.some((item) => item.includes('{adapter}'))) errors.push('agent.argv must invoke the content-bound {adapter}');
+    if (!spec.agent.adapter || typeof spec.agent.adapter !== 'object' || Array.isArray(spec.agent.adapter)) errors.push('agent.adapter is required');
+    else {
+      for (const key of Object.keys(spec.agent.adapter)) if (!['path', 'sha256'].includes(key)) errors.push(`unknown agent.adapter field: ${key}`);
+      try { safeRelative(spec.agent.adapter.path, 'agent.adapter.path'); } catch (error) { errors.push(error.message); }
+      if (!isDigest(spec.agent.adapter.sha256)) errors.push('agent.adapter.sha256 must be sha256:<hex>');
+    }
+    if (spec.agent.infraExitCodes !== undefined && (!Array.isArray(spec.agent.infraExitCodes) || !spec.agent.infraExitCodes.length || spec.agent.infraExitCodes.some((item) => !Number.isInteger(item) || item < 1 || item > 255) || new Set(spec.agent.infraExitCodes).size !== spec.agent.infraExitCodes.length)) errors.push('agent.infraExitCodes must be a non-empty array of unique exit codes from 1 to 255');
+  }
+  if (!Array.isArray(spec.tasks) || !spec.tasks.length) errors.push('tasks must be a non-empty array');
+  const ids = new Set();
+  for (const [index, task] of (spec.tasks || []).entries()) {
+    if (!task || typeof task !== 'object' || Array.isArray(task)) { errors.push(`tasks[${index}] must be an object`); continue; }
+    for (const key of Object.keys(task)) if (!['id', 'manifest', 'taskId', 'manifestSha256'].includes(key)) errors.push(`tasks[${index}] unknown field: ${key}`);
+    if (typeof task.id !== 'string' || !/^[a-z][a-z0-9-]{1,63}$/.test(task.id)) errors.push(`tasks[${index}].id must be a stable slug`);
+    else if (ids.has(task.id)) errors.push(`duplicate task id: ${task.id}`); else ids.add(task.id);
+    try { safeRelative(task.manifest, `tasks[${index}].manifest`); } catch (error) { errors.push(error.message); }
+    if (!isDigest(task.taskId)) errors.push(`tasks[${index}].taskId must be sha256:<hex>`);
+    if (!isDigest(task.manifestSha256)) errors.push(`tasks[${index}].manifestSha256 must be sha256:<hex>`);
+  }
+  if (!Number.isInteger(spec.repetitions) || spec.repetitions < 1 || spec.repetitions > 100) errors.push('repetitions must be 1..100');
+  if (!['string', 'number'].includes(typeof spec.seed) || typeof spec.seed === 'number' && !Number.isSafeInteger(spec.seed)) errors.push('seed must be a string or safe integer');
+  const material = { ...spec }; delete material.experimentId;
+  const expectedId = contentId('experiment', material, []);
+  if (spec.experimentId !== expectedId) errors.push(`experimentId mismatch (expected ${expectedId})`);
+  return { valid: errors.length === 0, errors, expectedId };
+}
+
+function aggregate(trials, agentKind) {
+  const valid = trials.filter((trial) => !['input-error', 'infra-error'].includes(trial.verdict));
+  const passed = valid.filter((trial) => trial.verdict === 'passed').length;
+  const durations = valid.map((trial) => trial.durationMs).sort((a, b) => a - b);
+  const counts = Object.fromEntries([...new Set(trials.map((trial) => trial.verdict))].sort().map((key) => [key, trials.filter((trial) => trial.verdict === key).length]));
+  const stage = (predicate) => ({ passed: valid.filter(predicate).length, total: valid.length });
+  const evidenceStage = (field, requirementField) => {
+    const required = valid.filter((trial) => trial[requirementField] > 0);
+    return {
+      passed: required.filter((trial) => trial[field].length === trial[requirementField] && trial[field].every((value) => value === 'passed')).length,
+      total: required.length,
+    };
+  };
+  const providerMetadata = trials.map((trial) => trial.providerMetadata).filter(Boolean);
+  const actualModels = [...new Set(providerMetadata.flatMap((metadata) => Object.keys(metadata.modelUsage || {})))].sort();
+  const usage = providerMetadata.reduce((sum, metadata) => ({
+    inputTokens: sum.inputTokens + Number(metadata.usage && metadata.usage.input_tokens || 0),
+    outputTokens: sum.outputTokens + Number(metadata.usage && metadata.usage.output_tokens || 0),
+    cacheReadInputTokens: sum.cacheReadInputTokens + Number(metadata.usage && metadata.usage.cache_read_input_tokens || 0),
+    totalCostUsd: sum.totalCostUsd + Number(metadata.totalCostUsd || 0),
+  }), { inputTokens: 0, outputTokens: 0, cacheReadInputTokens: 0, totalCostUsd: 0 });
+  const runtimeStage = evidenceStage('runtimeStatuses', 'runtimeRequired');
+  const visualStage = evidenceStage('visualStatuses', 'visualRequired');
+  return {
+    totalTrials: trials.length,
+    validTrials: valid.length,
+    invalidTrials: trials.filter((trial) => trial.verdict === 'input-error').length,
+    infraErrors: trials.filter((trial) => trial.verdict === 'infra-error').length,
+    passed,
+    passRate: valid.length ? passed / valid.length : null,
+    confidence95: wilson(passed, valid.length),
+    verdicts: counts,
+    stages: {
+      agentCompleted: stage((trial) => trial.agentExitCode === 0),
+      patchApplied: stage((trial) => trial.patchStatus === 'applied'),
+      policyCompliant: stage((trial) => trial.patchStatus === 'applied' && trial.verdict !== 'policy-violation'),
+      graderPassed: stage((trial) => trial.gradeVerdicts.length > 0 && trial.gradeVerdicts.every((value) => value === 'passed')),
+      runtimePassed: runtimeStage,
+      visualPassed: visualStage,
+    },
+    provider: { actualModels, usage },
+    durationMs: {
+      mean: durations.length ? durations.reduce((sum, value) => sum + value, 0) / durations.length : null,
+      median: durations.length ? durations.length % 2 ? durations[Math.floor(durations.length / 2)] : (durations[durations.length / 2 - 1] + durations[durations.length / 2]) / 2 : null,
+    },
+    claimLevel: agentKind === 'scripted'
+      ? 'harness-only'
+      : passed === 0
+        ? 'ai-task-contract-not-demonstrated'
+        : runtimeStage.total > 0 && runtimeStage.passed === runtimeStage.total && visualStage.total > 0 && visualStage.passed === visualStage.total
+          ? 'ai-task-contract-with-runtime-visual-subset'
+          : 'ai-static-contract-only',
+  };
+}
+
+function renderExperiment(report) {
+  const p = report.summary.passRate === null ? 'N/A' : `${(report.summary.passRate * 100).toFixed(1)}%`;
+  return `# Agent success-rate experiment\n\n- Experiment: \`${report.experimentId}\`\n- Agent: ${report.agent.provider || 'unknown'} / ${report.agent.model || 'unknown'} (${report.agent.kind})\n- Trials: ${report.summary.totalTrials}; valid ${report.summary.validTrials}; infra ${report.summary.infraErrors}\n- Pass rate: **${p}** (Wilson 95% ${report.summary.confidence95.lower === null ? 'N/A' : `${(report.summary.confidence95.lower * 100).toFixed(1)}%–${(report.summary.confidence95.upper * 100).toFixed(1)}%`})\n- Claim level: **${report.summary.claimLevel}**\n- Actual model(s): ${report.summary.provider.actualModels.join(', ') || 'not reported'}\n- Tokens: input ${report.summary.provider.usage.inputTokens}; output ${report.summary.provider.usage.outputTokens}; cache read ${report.summary.provider.usage.cacheReadInputTokens}\n- Recorded provider cost: $${report.summary.provider.usage.totalCostUsd.toFixed(6)}\n\n## Failure taxonomy\n\n${Object.entries(report.summary.verdicts).map(([key, value]) => `- ${key}: ${value}`).join('\n') || '- none'}\n\n## Trials\n\n${report.trials.map((trial) => `- ${trial.trialId}: ${trial.verdict}; patch=${trial.patchStatus || 'none'}; grades=${trial.gradeVerdicts.join(',') || 'none'}`).join('\n')}\n`;
+}
+
+function runExperiment({ specFile, outputRoot } = {}) {
+  const absoluteSpec = path.resolve(specFile);
+  const specBytes = fs.readFileSync(absoluteSpec);
+  const specSha256 = sha256Bytes(specBytes);
+  const spec = JSON.parse(specBytes);
+  const validation = validateExperimentSpec(spec);
+  if (!validation.valid) throw new Error('invalid ExperimentSpec: ' + validation.errors.join('; '));
+  const base = path.dirname(absoluteSpec);
+  const adapterFile = path.resolve(base, safeRelative(spec.agent.adapter.path, 'agent.adapter.path'));
+  const adapterRelative = path.relative(base, adapterFile);
+  if (adapterRelative === '..' || adapterRelative.startsWith(`..${path.sep}`) || path.isAbsolute(adapterRelative)) throw new Error('agent adapter escapes experiment directory');
+  let adapterBytes;
+  try {
+    const stat = fs.lstatSync(adapterFile);
+    if (!stat.isFile() || stat.isSymbolicLink()) throw new Error('must be a regular non-symlink file');
+    adapterBytes = fs.readFileSync(adapterFile);
+  } catch (error) { throw new Error('agent adapter cannot be verified: ' + error.message); }
+  const actualAdapterSha256 = sha256Bytes(adapterBytes);
+  if (actualAdapterSha256 !== spec.agent.adapter.sha256) throw new Error(`agent adapter digest mismatch: expected ${spec.agent.adapter.sha256}, received ${actualAdapterSha256}`);
+  const root = path.resolve(outputRoot);
+  if (fs.existsSync(root) && fs.readdirSync(root).length) throw new Error('experiment output root must be empty');
+  fs.mkdirSync(root, { recursive: true });
+  const agentArgv = spec.agent.argv.map((argument) => argument.split('{experimentDir}').join(base).split('{adapter}').join(adapterFile).split('{node}').join(process.execPath));
+  const taskDefinitions = spec.tasks.map((task) => {
+    const manifestFile = path.resolve(base, task.manifest);
+    try {
+      const manifestBytes = fs.readFileSync(manifestFile);
+      const manifest = readTaskManifest(manifestFile);
+      const inputErrors = [];
+      const manifestSha256 = sha256Bytes(manifestBytes);
+      if (task.taskId !== manifest.taskId) inputErrors.push(`taskId mismatch: expected ${task.taskId}, received ${manifest.taskId}`);
+      if (task.manifestSha256 !== manifestSha256) inputErrors.push(`manifest digest mismatch: expected ${task.manifestSha256}, received ${manifestSha256}`);
+      return {
+        ...task,
+        manifestFile,
+        runtimeRequired: manifest.evidence.runtime.length,
+        visualRequired: manifest.evidence.visual.length,
+        inputError: inputErrors.length ? inputErrors.join('; ') : null,
+      };
+    } catch (error) {
+      return { ...task, manifestFile, runtimeRequired: 0, visualRequired: 0, inputError: error.message };
+    }
+  });
+  const trials = [];
+  for (const task of taskDefinitions) {
+    for (let repetition = 1; repetition <= spec.repetitions; repetition += 1) {
+      const trialId = `${task.id}-r${String(repetition).padStart(2, '0')}`;
+      const trialRoot = path.join(root, 'trials', trialId);
+      const started = process.hrtime.bigint();
+      try {
+        if (task.inputError) {
+          const error = new Error(task.inputError);
+          error.kind = 'input-error';
+          throw error;
+        }
+        const currentSpecSha256 = sha256Bytes(fs.readFileSync(absoluteSpec));
+        const currentAdapterSha256 = sha256Bytes(fs.readFileSync(adapterFile));
+        const currentManifestBytes = fs.readFileSync(task.manifestFile);
+        let currentManifest;
+        try { currentManifest = JSON.parse(currentManifestBytes); }
+        catch (parseError) { currentManifest = null; }
+        const perTrialInputErrors = [];
+        if (currentSpecSha256 !== specSha256) perTrialInputErrors.push(`experiment spec digest mismatch: expected ${specSha256}, received ${currentSpecSha256}`);
+        if (currentAdapterSha256 !== spec.agent.adapter.sha256) perTrialInputErrors.push(`agent adapter digest mismatch: expected ${spec.agent.adapter.sha256}, received ${currentAdapterSha256}`);
+        const currentManifestSha256 = sha256Bytes(currentManifestBytes);
+        if (currentManifestSha256 !== task.manifestSha256) perTrialInputErrors.push(`task manifest digest mismatch: expected ${task.manifestSha256}, received ${currentManifestSha256}`);
+        if (!currentManifest || currentManifest.taskId !== task.taskId) perTrialInputErrors.push(`taskId mismatch: expected ${task.taskId}, received ${currentManifest && currentManifest.taskId}`);
+        if (perTrialInputErrors.length) {
+          const error = new Error(perTrialInputErrors.join('; '));
+          error.kind = 'input-error';
+          throw error;
+        }
+        const result = runTask({
+          taskFile: task.manifestFile,
+          agentArgv,
+          artifactRoot: trialRoot,
+          agent: { provider: spec.agent.provider, model: spec.agent.model, infraExitCodes: spec.agent.infraExitCodes || [] },
+          trialId,
+          integrityInputs: [
+            { id: 'experiment-spec', file: absoluteSpec, sha256: specSha256 },
+            { id: 'agent-adapter', file: adapterFile, sha256: spec.agent.adapter.sha256 },
+          ],
+        });
+        const report = result.report;
+        const results = report.grades.flatMap((grade) => grade.results);
+        trials.push({
+          trialId, taskSlug: task.id, taskId: task.taskId, runId: report.runId, verdict: report.verdict,
+          agentExitCode: report.agent.exitCode, patchStatus: report.patch && report.patch.status,
+          gradeVerdicts: report.grades.map((grade) => grade.verdict),
+          runtimeRequired: task.runtimeRequired,
+          visualRequired: task.visualRequired,
+          runtimeStatuses: results.filter((item) => item.type === 'runtime-evidence').map((item) => item.status),
+          visualStatuses: results.filter((item) => item.type === 'visual-evidence').map((item) => item.status),
+          providerMetadata: report.agent.providerMetadata || null,
+          durationMs: Number(process.hrtime.bigint() - started) / 1e6,
+          artifactPath: path.relative(root, result.runFile).split(path.sep).join('/'),
+        });
+      } catch (error) {
+        trials.push({ trialId, taskSlug: task.id, taskId: task.taskId, runId: null, verdict: error.kind === 'input-error' ? 'input-error' : 'infra-error', agentExitCode: null, patchStatus: null, gradeVerdicts: [], runtimeRequired: task.runtimeRequired, visualRequired: task.visualRequired, runtimeStatuses: [], visualStatuses: [], providerMetadata: null, durationMs: Number(process.hrtime.bigint() - started) / 1e6, error: error.message, artifactPath: null });
+      }
+    }
+  }
+  const report = {
+    reportVersion: '1.0', resultId: null, experimentId: spec.experimentId,
+    specSha256, seed: spec.seed,
+    agent: { kind: spec.agent.kind, provider: spec.agent.provider, model: spec.agent.model },
+    taskSetSha256: sha256Bytes(stableJson(spec.tasks)), repetitions: spec.repetitions,
+    summary: aggregate(trials, spec.agent.kind), trials,
+  };
+  report.resultId = contentId('experiment-result', report, ['resultId']);
+  writeAtomic(path.join(root, 'experiment.json'), Buffer.from(JSON.stringify(report, null, 2) + '\n'));
+  writeAtomic(path.join(root, 'EXPERIMENT.md'), Buffer.from(renderExperiment(report)));
+  return report;
+}
+
+module.exports = { wilson, validateExperimentSpec, aggregate, renderExperiment, runExperiment };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-extraction-subject.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-extraction-subject.js
new file mode 100644
index 0000000..b12204d
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-extraction-subject.js
@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+'use strict';
+const { parentPort } = require('node:worker_threads');
+const { runExtraction } = require('./sg-pack-extract-core.js');
+
+parentPort.once('message', (message) => {
+  const port = message && message.port;
+  const token = message && message.token;
+  if (!port || typeof token !== 'string' || !message.configPath || !message.workspaceRoot) process.exit(1);
+  const send = port.postMessage.bind(port);
+  const close = port.close.bind(port);
+  parentPort.close();
+  try {
+    const extraction = runExtraction(message.configPath, { expectedLibDir: message.workspaceRoot });
+    send({
+      token,
+      result: {
+        ok: true,
+        validation: extraction.validation,
+        equivalence: extraction.equivalence,
+        consumedFiles: extraction.consumedFiles,
+        inventory: extraction.inventory,
+      },
+    });
+    close();
+  } catch (error) {
+    send({ token, result: { ok: false, kind: error.kind || 'gate', message: error.message } });
+    close();
+  }
+});
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-extraction-worker.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-extraction-worker.js
new file mode 100644
index 0000000..3351197
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-extraction-worker.js
@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+'use strict';
+const crypto = require('node:crypto');
+const path = require('node:path');
+const { MessageChannel, Worker } = require('node:worker_threads');
+
+const [, , configPath, workspaceRoot] = process.argv;
+if (!configPath || !workspaceRoot) {
+  process.stderr.write('extraction supervisor requires config path and workspace root\n');
+  process.exit(1);
+}
+
+const token = crypto.randomBytes(32).toString('hex');
+const channel = new MessageChannel();
+const worker = new Worker(path.join(__dirname, 'sg-extraction-subject.js'), { stdout: true, stderr: true });
+let message = null;
+let protocolError = null;
+let subjectStdoutBytes = 0;
+let subjectStderrBytes = 0;
+worker.stdout.on('data', (chunk) => { subjectStdoutBytes += chunk.length; });
+worker.stderr.on('data', (chunk) => { subjectStderrBytes += chunk.length; });
+channel.port1.on('message', (value) => {
+  if (message !== null) {
+    protocolError = 'subject sent more than one result';
+    return;
+  }
+  if (!value || value.token !== token || !value.result || typeof value.result !== 'object') {
+    protocolError = 'subject returned an invalid authenticated result';
+    return;
+  }
+  message = value.result;
+});
+worker.once('error', (error) => { protocolError = 'subject worker error: ' + error.message; });
+worker.once('exit', (exitCode) => {
+  channel.port1.close();
+  const protocolOk = exitCode === 0 && protocolError === null && message !== null;
+  process.stdout.write(JSON.stringify({
+    supervisorVersion: '1.0',
+    protocolOk,
+    workerExitCode: exitCode,
+    protocolError: protocolOk ? null : protocolError || 'subject exited without an authenticated trusted-wrapper result',
+    subjectStdoutBytes,
+    subjectStderrBytes,
+    result: protocolOk ? message : null,
+  }) + '\n');
+  process.exit(protocolOk ? 0 : 1);
+});
+worker.postMessage({ token, configPath, workspaceRoot, port: channel.port2 }, [channel.port2]);
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-grader.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-grader.js
new file mode 100644
index 0000000..3b1bfe8
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-grader.js
@@ -0,0 +1,264 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { runCommand } = require('./sg-command-runner.js');
+const { executeRules } = require('./sg-pack-rules-core.js');
+const { readRuntimeEvidence } = require('./sg-runtime-evidence.js');
+const { readVisualEvidence } = require('./sg-visual-evidence.js');
+const { contentId, sha256Bytes, safeRelative } = require('./sg-evidence-utils.js');
+require('./sg-data-loader.js');
+
+const CHECK_TYPES = new Set(['data-pack-contract', 'library-rules', 'extract-equivalence', 'command', 'runtime-evidence', 'visual-evidence']);
+const CHECK_FIELDS = new Set(['id', 'type', 'weight', 'required', 'path', 'scenarioId', 'rulesPath', 'dataPath', 'configPath', 'argv', 'cwd', 'expectedExit', 'infraExitCodes', 'timeoutMs', 'maxOutputBytes', 'strict', 'ruleIds']);
+
+function isObject(value) { return value && typeof value === 'object' && !Array.isArray(value); }
+function readJson(file) { return JSON.parse(fs.readFileSync(file, 'utf8')); }
+function resolveInRoot(root, value, label) {
+  const relative = safeRelative(value, label);
+  const file = path.resolve(root, relative);
+  const fromRoot = path.relative(root, file);
+  if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) throw new Error(`${label} escapes workspace`);
+  return file;
+}
+
+function validateGraderSpec(spec) {
+  const errors = [];
+  if (!isObject(spec)) return { valid: false, errors: ['grader spec must be an object'] };
+  for (const field of Object.keys(spec)) if (!['graderVersion', 'graderId', 'title', 'checks'].includes(field)) errors.push(`unknown grader field: ${field}`);
+  if (spec.graderVersion !== '1.0') errors.push('graderVersion must be 1.0');
+  if (typeof spec.graderId !== 'string' || !/^[a-z][a-z0-9-]{1,63}$/.test(spec.graderId)) errors.push('graderId must be a stable slug');
+  if (!Array.isArray(spec.checks) || !spec.checks.length) errors.push('checks must be a non-empty array');
+  const ids = new Set();
+  for (const [index, check] of (spec.checks || []).entries()) {
+    if (!isObject(check)) { errors.push(`checks[${index}] must be an object`); continue; }
+    for (const field of Object.keys(check)) if (!CHECK_FIELDS.has(field)) errors.push(`checks[${index}] unknown field: ${field}`);
+    if (typeof check.id !== 'string' || !/^[a-z][a-z0-9-]{1,63}$/.test(check.id)) errors.push(`checks[${index}].id must be a stable slug`);
+    else if (ids.has(check.id)) errors.push(`duplicate check id: ${check.id}`); else ids.add(check.id);
+    if (!CHECK_TYPES.has(check.type)) errors.push(`checks[${index}].type is unsupported`);
+    if (typeof check.weight !== 'number' || !Number.isFinite(check.weight) || check.weight <= 0) errors.push(`checks[${index}].weight must be greater than 0`);
+    if (typeof check.required !== 'boolean') errors.push(`checks[${index}].required must be boolean`);
+    if (check.type === 'command' && (!Array.isArray(check.argv) || !check.argv.length || check.argv.some((item) => typeof item !== 'string'))) errors.push(`checks[${index}].argv must be a non-empty string array`);
+    if (check.infraExitCodes !== undefined && (check.type !== 'command' || !Array.isArray(check.infraExitCodes) || !check.infraExitCodes.length || check.infraExitCodes.some((item) => !Number.isInteger(item) || item < 1 || item > 255) || new Set(check.infraExitCodes).size !== check.infraExitCodes.length)) errors.push(`checks[${index}].infraExitCodes must be a non-empty array of unique exit codes from 1 to 255 for a command check`);
+    if (['runtime-evidence', 'visual-evidence'].includes(check.type) && (typeof check.scenarioId !== 'string' || !check.scenarioId)) errors.push(`checks[${index}].scenarioId is required for evidence checks`);
+    if (check.scenarioId !== undefined && !['runtime-evidence', 'visual-evidence'].includes(check.type)) errors.push(`checks[${index}].scenarioId is only valid for evidence checks`);
+    const requiredPaths = check.type === 'library-rules' ? ['rulesPath', 'dataPath'] : check.type === 'extract-equivalence' ? ['configPath'] : ['data-pack-contract', 'runtime-evidence', 'visual-evidence'].includes(check.type) ? ['path'] : [];
+    for (const field of requiredPaths) {
+      try { safeRelative(check[field], `checks[${index}].${field}`); } catch (error) { errors.push(error.message); }
+    }
+    if (check.cwd !== undefined) { try { safeRelative(check.cwd, `checks[${index}].cwd`); } catch (error) { errors.push(error.message); } }
+  }
+  return { valid: errors.length === 0, errors };
+}
+
+function baseResult(check) {
+  return { id: check.id, type: check.type, required: check.required, weight: check.weight, status: 'infra-error', score: 0, findings: [], evidence: {} };
+}
+
+function gradePackContract(check, root) {
+  const result = baseResult(check);
+  try {
+    const pack = readJson(resolveInRoot(root, check.path, `${check.id}.path`));
+    const validation = globalThis.SGDataLoader.validate(pack);
+    const failed = validation.errors.length > 0 || (check.strict && validation.warnings.length > 0);
+    result.status = failed ? 'failed' : 'passed';
+    result.score = failed ? 0 : check.weight;
+    result.evidence = { errors: validation.errors, warnings: validation.warnings, strict: Boolean(check.strict) };
+  } catch (error) {
+    result.status = 'invalid';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function gradeRules(check, root) {
+  const result = baseResult(check);
+  try {
+    const rules = readJson(resolveInRoot(root, check.rulesPath, `${check.id}.rulesPath`));
+    const pack = readJson(resolveInRoot(root, check.dataPath, `${check.id}.dataPath`));
+    const execution = executeRules(rules, pack, { ruleIds: check.ruleIds });
+    if (execution.structuralErrors.length || (execution.selectionErrors || []).length || (execution.unknownRuleIds || []).length) result.status = 'invalid';
+    else if (!execution.results.length || execution.results.every((item) => item.status === 'no-check')) result.status = 'not-assessed';
+    else {
+      const failed = execution.counts.hardFail > 0 || execution.counts.errors > 0 || (check.strict && execution.counts.softFail > 0);
+      result.status = failed ? 'failed' : 'passed';
+    }
+    result.score = result.status === 'passed' ? check.weight : 0;
+    result.evidence = execution;
+  } catch (error) {
+    result.status = 'invalid';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function gradeExtraction(check, root, options) {
+  const result = baseResult(check);
+  try {
+    const configPath = resolveInRoot(root, check.configPath, `${check.id}.configPath`);
+    const run = runCommand({
+      argv: [process.execPath, path.join(options.toolRoot, 'scripts', 'lib', 'sg-extraction-worker.js'), configPath, root],
+      cwd: root,
+      allowedRoot: root,
+      timeoutMs: check.timeoutMs || options.timeoutMs || 120000,
+      maxOutputBytes: check.maxOutputBytes || options.maxOutputBytes || 1048576,
+      env: options.env || {},
+      envAllowlist: options.envAllowlist,
+    });
+    let supervisor = null;
+    try { supervisor = JSON.parse(run.stdout.trim()); }
+    catch (_) { supervisor = null; }
+    const workerResult = supervisor && supervisor.protocolOk === true && supervisor.result && typeof supervisor.result === 'object'
+      ? supervisor.result
+      : null;
+    result.evidence = {
+      exitCode: run.exitCode, signal: run.signal, timedOut: run.timedOut, durationMs: run.durationMs,
+      stdoutSha256: sha256Bytes(run.stdout), stderrSha256: sha256Bytes(run.stderr),
+      stdout: run.stdout, stderr: run.stderr, stdoutTruncated: run.stdoutTruncated, stderrTruncated: run.stderrTruncated,
+      error: run.error || null, supervisor, worker: workerResult,
+    };
+    if (run.error && !run.timedOut && run.exitCode === null) result.status = 'infra-error';
+    else if (run.timedOut || !workerResult || workerResult.ok !== true) {
+      result.status = workerResult && workerResult.kind === 'input' ? 'invalid' : 'failed';
+      if (workerResult && workerResult.message) result.findings.push(workerResult.message);
+      else result.findings.push(run.timedOut ? 'candidate extraction worker timed out' : 'candidate extraction worker did not return a valid result');
+    } else {
+      const failed = workerResult.validation.errors.length > 0 || workerResult.equivalence.diffs.length > 0 || !workerResult.equivalence.coverage.complete;
+      result.status = failed ? 'failed' : 'passed';
+      result.evidence.validation = workerResult.validation;
+      result.evidence.equivalence = workerResult.equivalence;
+      result.evidence.consumedFiles = workerResult.consumedFiles;
+    }
+    result.score = result.status === 'passed' ? check.weight : 0;
+  } catch (error) {
+    result.status = 'invalid';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function commandArgv(argv, root, options) {
+  const replacements = {
+    '{node}': process.execPath,
+    '{workspace}': root,
+    '{artifacts}': options.artifactRoot || '',
+    '{treeSha256}': options.treeSha256 || '',
+    '{taskId}': options.taskId || '',
+    '{grader}': options.graderRoot || '',
+    '{toolRoot}': options.toolRoot || path.resolve(__dirname, '..', '..'),
+  };
+  return argv.map((argument) => Object.entries(replacements).reduce((value, [token, replacement]) => value.split(token).join(replacement), argument));
+}
+
+function gradeCommand(check, root, options) {
+  const result = baseResult(check);
+  try {
+    const cwd = check.cwd ? resolveInRoot(root, check.cwd, `${check.id}.cwd`) : root;
+    const run = runCommand({
+      argv: commandArgv(check.argv, root, options),
+      cwd,
+      allowedRoot: root,
+      timeoutMs: check.timeoutMs || options.timeoutMs || 120000,
+      maxOutputBytes: check.maxOutputBytes || options.maxOutputBytes || 1048576,
+      env: options.env || {},
+      envAllowlist: options.envAllowlist,
+    });
+    const expectedExit = check.expectedExit === undefined ? 0 : check.expectedExit;
+    const infraExitCodes = new Set(check.infraExitCodes || []);
+    if (run.error && !run.timedOut && run.exitCode === null || infraExitCodes.has(run.exitCode)) result.status = 'infra-error';
+    else result.status = run.exitCode === expectedExit && !run.timedOut ? 'passed' : 'failed';
+    result.score = result.status === 'passed' ? check.weight : 0;
+    result.evidence = {
+      argv: run.argv, cwd: path.relative(root, run.cwd) || '.', exitCode: run.exitCode, signal: run.signal,
+      timedOut: run.timedOut, durationMs: run.durationMs,
+      stdoutSha256: sha256Bytes(run.stdout), stderrSha256: sha256Bytes(run.stderr),
+      stdout: run.stdout, stderr: run.stderr,
+      stdoutTruncated: run.stdoutTruncated, stderrTruncated: run.stderrTruncated, error: run.error || null,
+    };
+  } catch (error) {
+    result.status = 'invalid';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function gradeEvidence(check, root, kind, options) {
+  const result = baseResult(check);
+  try {
+    const evidenceRoot = options.artifactRoot ? fs.realpathSync(path.resolve(options.artifactRoot)) : root;
+    const file = resolveInRoot(evidenceRoot, check.path, `${check.id}.path`);
+    const loaded = kind === 'runtime' ? readRuntimeEvidence(file) : readVisualEvidence(file);
+    const expectedTree = options.treeSha256;
+    const boundTree = kind === 'runtime' ? loaded.evidence.subjectTreeSha256 : loaded.evidence.candidateTreeSha256;
+    if (expectedTree && boundTree !== expectedTree) {
+      loaded.validation.errors.push(`evidence tree digest mismatch: expected ${expectedTree}, received ${boundTree}`);
+      loaded.validation.valid = false;
+      loaded.validation.status = 'not-assessed';
+    }
+    const scenarioMatched = kind === 'runtime'
+      ? loaded.evidence.scenarioId === check.scenarioId
+      : Array.isArray(loaded.evidence.scenarios) && loaded.evidence.scenarios.some((scenario) => scenario && scenario.id === check.scenarioId);
+    if (!scenarioMatched) {
+      loaded.validation.errors.push(`evidence does not contain required scenario: ${check.scenarioId}`);
+      loaded.validation.valid = false;
+      loaded.validation.status = 'not-assessed';
+    }
+    result.status = loaded.validation.valid ? loaded.validation.status : 'failed';
+    result.score = result.status === 'passed' ? check.weight : 0;
+    result.evidence = { scenarioId: check.scenarioId, file: path.relative(evidenceRoot, file), evidenceId: loaded.evidence.evidenceId, validation: loaded.validation };
+  } catch (error) {
+    result.status = error.code === 'ENOENT' ? 'not-assessed' : 'failed';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function gradeWorkspace({ spec, workspaceRoot, graderRoot = null, artifactRoot = null, toolRoot = path.resolve(__dirname, '..', '..'), taskId = null, treeSha256 = null, timeoutMs, maxOutputBytes, env, envAllowlist } = {}) {
+  const validation = validateGraderSpec(spec);
+  if (!validation.valid) {
+    const error = new Error('Invalid GraderSpec: ' + validation.errors.join('; '));
+    error.code = 'INVALID_GRADER_SPEC';
+    error.errors = validation.errors;
+    throw error;
+  }
+  const root = fs.realpathSync(path.resolve(workspaceRoot));
+  const options = { timeoutMs, maxOutputBytes, env, envAllowlist, graderRoot, artifactRoot, toolRoot, taskId, treeSha256 };
+  const results = spec.checks.map((check) => {
+    if (check.type === 'data-pack-contract') return gradePackContract(check, root);
+    if (check.type === 'library-rules') return gradeRules(check, root);
+    if (check.type === 'extract-equivalence') return gradeExtraction(check, root, options);
+    if (check.type === 'command') return gradeCommand(check, root, options);
+    if (check.type === 'runtime-evidence') return gradeEvidence(check, root, 'runtime', options);
+    return gradeEvidence(check, root, 'visual', options);
+  });
+  const requiredIncomplete = results.some((item) => item.required && item.status !== 'passed');
+  const infraError = results.some((item) => item.status === 'infra-error');
+  const failed = results.some((item) => ['failed', 'invalid'].includes(item.status));
+  const requiredNotAssessed = results.some((item) => item.required && item.status === 'not-assessed');
+  const candidateFailure = failed || requiredNotAssessed;
+  const score = results.reduce((sum, item) => sum + item.score, 0);
+  const maximumScore = results.reduce((sum, item) => sum + item.weight, 0);
+  const report = {
+    gradeVersion: '1.0',
+    gradeId: null,
+    graderId: spec.graderId,
+    taskId,
+    treeSha256,
+    verdict: candidateFailure ? 'failed' : infraError ? 'infra-error' : requiredIncomplete ? 'failed' : 'passed',
+    score,
+    maximumScore,
+    results,
+    summary: {
+      total: results.length,
+      passed: results.filter((item) => item.status === 'passed').length,
+      failed: results.filter((item) => item.status === 'failed').length,
+      notAssessed: results.filter((item) => item.status === 'not-assessed').length,
+      invalid: results.filter((item) => item.status === 'invalid').length,
+      infraErrors: results.filter((item) => item.status === 'infra-error').length,
+      requiredIncomplete: results.filter((item) => item.required && item.status !== 'passed').length,
+    },
+  };
+  report.gradeId = contentId('grade', report, ['gradeId']);
+  return report;
+}
+
+module.exports = { validateGraderSpec, gradeWorkspace };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-grader.schema.json b/research/agent-eval/results/executed-tooling/scripts/lib/sg-grader.schema.json
new file mode 100644
index 0000000..bffa1b0
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-grader.schema.json
@@ -0,0 +1,41 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/contracts/grader-spec-v1.json",
+  "title": "SG Task Grader Spec v1.0",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["graderVersion", "graderId", "checks"],
+  "properties": {
+    "graderVersion": { "const": "1.0" },
+    "graderId": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,63}$" },
+    "title": { "type": "string", "minLength": 1 },
+    "checks": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "type", "weight", "required"],
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,63}$" },
+          "type": { "enum": ["data-pack-contract", "library-rules", "extract-equivalence", "command", "runtime-evidence", "visual-evidence"] },
+          "weight": { "type": "number", "exclusiveMinimum": 0 },
+          "required": { "type": "boolean" },
+          "path": { "type": "string", "minLength": 1 },
+          "scenarioId": { "type": "string", "minLength": 1 },
+          "rulesPath": { "type": "string", "minLength": 1 },
+          "dataPath": { "type": "string", "minLength": 1 },
+          "configPath": { "type": "string", "minLength": 1 },
+          "argv": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+          "cwd": { "type": "string", "minLength": 1 },
+          "expectedExit": { "type": "integer", "minimum": 0, "maximum": 255 },
+          "infraExitCodes": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "integer", "minimum": 1, "maximum": 255 } },
+          "timeoutMs": { "type": "integer", "minimum": 1, "maximum": 600000 },
+          "maxOutputBytes": { "type": "integer", "minimum": 1024, "maximum": 16777216 },
+          "strict": { "type": "boolean" },
+          "ruleIds": { "type": "array", "items": { "type": "string", "minLength": 1 } }
+        }
+      }
+    }
+  }
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-candidate.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-candidate.js
new file mode 100644
index 0000000..140d5e0
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-candidate.js
@@ -0,0 +1,428 @@
+'use strict';
+
+/*
+ * Pure Review Decisions -> Candidate Pack builder.
+ * File I/O, output paths, and process exit codes belong to sg-pack-candidate.js.
+ */
+const { sha256, buildCandidateReview, verifyCandidateReview } = require('./sg-recrawl-review.js');
+const { buildDiff } = require('./sg-pack-diff.js');
+require('./sg-data-loader.js');
+
+const loader = globalThis.SGDataLoader;
+const SUPPORTED_ACTIONS = new Set(['apply', 'keep', 'map-alias', 'reject']);
+const RESERVED_FIELDS = new Set(['kind', '__proto__', 'prototype', 'constructor']);
+const RESERVED_KEYS = new Set(['__proto__', 'prototype', 'constructor']);
+
+class CandidateError extends Error {
+  constructor(message, exitCode = 2) {
+    super(message);
+    this.name = 'CandidateError';
+    this.exitCode = exitCode;
+  }
+}
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function deepClone(value) {
+  return JSON.parse(JSON.stringify(value));
+}
+
+function hasOwn(object, key) {
+  return Object.prototype.hasOwnProperty.call(object, key);
+}
+
+function sameValue(a, b) {
+  return JSON.stringify(a) === JSON.stringify(b);
+}
+
+function requireString(value, label) {
+  if (typeof value !== 'string' || !value.trim()) throw new CandidateError(`${label} must be a non-empty string`);
+  return value;
+}
+
+function validateConfidence(value, label) {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0 || value > 1) {
+    throw new CandidateError(`${label} must be a number between 0 and 1`);
+  }
+}
+
+function pathText(section, id, field) {
+  return `${section}.${id}.${field}`;
+}
+
+function validateReportShape(report) {
+  if (!isObject(report)) throw new CandidateError('review report must be an object');
+  const review = report.candidateReview;
+  if (!isObject(review)) throw new CandidateError('review report is missing candidateReview');
+  if (!Array.isArray(review.observations) || !Array.isArray(review.reviewItems)) {
+    throw new CandidateError('candidateReview observations and reviewItems must be arrays');
+  }
+  if (new Set(review.reviewItems.map((item) => item && item.itemId)).size !== review.reviewItems.length) {
+    throw new CandidateError('candidate review contains duplicate review item ids');
+  }
+  const allItemMap = new Map();
+  const reviewItemMap = new Map();
+  const observationMap = new Map();
+  for (const observation of review.observations) {
+    if (!isObject(observation) || typeof observation.recordId !== 'string') throw new CandidateError('candidate observation has an invalid recordId');
+    if (observationMap.has(observation.recordId)) throw new CandidateError(`duplicate candidate observation: ${observation.recordId}`);
+    observationMap.set(observation.recordId, observation);
+    if (observation.resolution && observation.resolution.status === 'hit') {
+      if (!Array.isArray(observation.checks)) throw new CandidateError(`${observation.recordId}.checks must be an array`);
+      for (const check of observation.checks) {
+        if (!isObject(check) || typeof check.itemId !== 'string') throw new CandidateError(`${observation.recordId} has an invalid field check`);
+        if (allItemMap.has(check.itemId)) throw new CandidateError(`duplicate candidate check: ${check.itemId}`);
+        allItemMap.set(check.itemId, { type: 'field', observation, check });
+      }
+    }
+    if (observation.resolution && observation.resolution.status === 'miss') {
+      const identityId = `${observation.recordId}:identity`;
+      if (allItemMap.has(identityId)) throw new CandidateError(`duplicate candidate identity: ${identityId}`);
+      allItemMap.set(identityId, { type: 'identity', observation });
+    }
+  }
+  for (const item of review.reviewItems) {
+    if (!isObject(item) || typeof item.itemId !== 'string') throw new CandidateError('candidate review item has an invalid itemId');
+    if (!allItemMap.has(item.itemId)) throw new CandidateError(`review item does not resolve to an observation: ${item.itemId}`);
+    const source = allItemMap.get(item.itemId);
+    if (source.type === 'field' && source.check.classification !== item.classification) {
+      throw new CandidateError(`review item classification mismatch: ${item.itemId}`);
+    }
+    if (source.type === 'identity' && item.classification !== 'miss') {
+      throw new CandidateError(`identity review item must be classified as miss: ${item.itemId}`);
+    }
+    reviewItemMap.set(item.itemId, source);
+  }
+  for (const [itemId, source] of allItemMap) {
+    const requiresReview = source.type === 'identity' ||
+      (source.type === 'field' && ['gap', 'conflict', 'unsupported'].includes(source.check.classification));
+    if (requiresReview && !reviewItemMap.has(itemId)) {
+      throw new CandidateError(`candidate review omitted required item: ${itemId}`);
+    }
+  }
+  return { review, itemMap: reviewItemMap, allItemMap, observationMap };
+}
+
+function validateDecisions(decisions, reviewId, itemMap) {
+  if (!isObject(decisions) || decisions.decisionsVersion !== '1.0') {
+    throw new CandidateError('review decisions must use decisionsVersion "1.0"');
+  }
+  if (decisions.reportId !== reviewId) throw new CandidateError('review decisions reportId does not match candidate review report');
+  requireString(decisions.reviewedBy, 'reviewedBy');
+  requireString(decisions.reviewedAt, 'reviewedAt');
+  if (!Array.isArray(decisions.decisions)) throw new CandidateError('review decisions must contain a decisions array');
+  const seen = new Set();
+  for (const decision of decisions.decisions) {
+    if (!isObject(decision)) throw new CandidateError('each review decision must be an object');
+    requireString(decision.itemId, 'decision.itemId');
+    if (seen.has(decision.itemId)) throw new CandidateError(`duplicate decision for review item: ${decision.itemId}`);
+    seen.add(decision.itemId);
+    if (!itemMap.has(decision.itemId)) throw new CandidateError(`decision references unknown review item: ${decision.itemId}`);
+    requireString(decision.action, `decision ${decision.itemId}.action`);
+    if (!SUPPORTED_ACTIONS.has(decision.action)) throw new CandidateError(`unsupported decision action: ${decision.action}`);
+  }
+  const expected = [...itemMap.keys()];
+  const missing = expected.filter((itemId) => !seen.has(itemId));
+  const extra = [...seen].filter((itemId) => !itemMap.has(itemId));
+  if (missing.length || extra.length) {
+    throw new CandidateError(
+      `review decisions are incomplete (missing: ${missing.join(', ') || 'none'}; extra: ${extra.join(', ') || 'none'})`,
+      1,
+    );
+  }
+  return decisions;
+}
+
+function checkCurrentBaseline(entity, check, entityId) {
+  const exists = hasOwn(entity, check.baselineField);
+  const current = exists ? entity[check.baselineField] : undefined;
+  if (exists !== Boolean(check.baselineExists) || !sameValue(current, check.baseline)) {
+    throw new CandidateError(`stale entity field at ${pathText('entities', entityId, check.baselineField)}`, 1);
+  }
+}
+
+function displayField(pack, entity) {
+  const fields = pack.kindNameFields;
+  return isObject(fields) && hasOwn(fields, entity.kind) && fields[entity.kind] ? fields[entity.kind] : 'name';
+}
+
+function validateAliasTarget(pack, entityId) {
+  if (typeof entityId !== 'string' || !hasOwn(pack.entities || {}, entityId)) {
+    throw new CandidateError(`map-alias target must be an existing entity: ${entityId}`);
+  }
+}
+
+function aliasValue(target, context) {
+  if (context === undefined) return target;
+  if (typeof context !== 'string' || !context.trim()) throw new CandidateError('alias context must be a non-empty string');
+  return { id: target, context };
+}
+
+function applyAlias(pack, observation, decision, audit) {
+  const alias = observation.crawledName;
+  const target = decision.entityId;
+  validateAliasTarget(pack, target);
+  if (RESERVED_KEYS.has(alias)) throw new CandidateError(`reserved alias key is not allowed: ${alias}`);
+  if (hasOwn(pack.entities, alias)) throw new CandidateError(`alias collides with entity id: ${alias}`);
+  if (hasOwn(pack.aliases || {}, alias)) {
+    const current = pack.aliases[alias];
+    const currentId = isObject(current) ? current.id : current;
+    if (currentId !== target) throw new CandidateError(`existing alias points to a different entity: ${alias}`);
+    const requested = aliasValue(target, decision.context);
+    if (decision.context !== undefined && !sameValue(current, requested)) {
+      throw new CandidateError(`existing alias has different reviewed context: ${alias}`);
+    }
+    audit.result = 'noop-already-applied';
+    audit.before = current;
+    audit.after = current;
+    return;
+  }
+  if (!isObject(pack.aliases)) pack.aliases = {};
+  const next = aliasValue(target, decision.context);
+  pack.aliases[alias] = next;
+  audit.result = 'applied';
+  audit.before = null;
+  audit.after = next;
+}
+
+function mergeFieldOrigin(entityProvenance, check, decision, context) {
+  if (!isObject(entityProvenance)) entityProvenance = {};
+  if (!isObject(entityProvenance.fieldOrigins)) entityProvenance.fieldOrigins = {};
+  const field = check.baselineField;
+  const origin = {
+    origin: context.review.origin,
+    sourceUrl: context.review.sourceUrl,
+    fetchedAt: context.review.fetchedAt,
+    confidence: decision.confidence,
+    note: decision.note || `Applied reviewed crawl field ${check.crawledField}`,
+    reportId: context.review.reportId,
+    recordId: context.observation.recordId,
+    itemId: check.itemId,
+    reviewedBy: context.decisions.reviewedBy,
+    reviewedAt: context.decisions.reviewedAt,
+  };
+  entityProvenance.fieldOrigins[field] = origin;
+  return entityProvenance;
+}
+
+function applyField(pack, observation, check, decision, context, audit) {
+  const entityId = observation.resolution.entityId;
+  const entity = pack.entities[entityId];
+  if (!entity) throw new CandidateError(`field decision references missing entity: ${entityId}`);
+  if (decision.action === 'keep') {
+    audit.result = 'kept-baseline';
+    audit.before = check.baseline;
+    audit.after = check.baseline;
+    return;
+  }
+  if (check.classification === 'unsupported') {
+    throw new CandidateError(`unsupported review item may only use keep: ${check.itemId}`);
+  }
+  if (!['gap', 'conflict'].includes(check.classification)) {
+    throw new CandidateError(`apply is not valid for ${check.classification}: ${check.itemId}`);
+  }
+  validateConfidence(decision.confidence, `decision ${decision.itemId}.confidence`);
+  const field = check.baselineField;
+  if (RESERVED_FIELDS.has(field) || field === displayField(pack, entity)) {
+    throw new CandidateError(`cannot update reserved or display entity field: ${field}`);
+  }
+  if (field.includes('.') || field.includes('[') || field.includes(']')) {
+    throw new CandidateError(`nested entity field updates are not supported: ${field}`);
+  }
+  if (typeof check.crawled !== 'string' || !check.crawled) {
+    throw new CandidateError(`applied crawl value must be a non-empty string: ${check.itemId}`);
+  }
+  const before = hasOwn(entity, field) ? entity[field] : undefined;
+  if (before === check.crawled) {
+    audit.result = 'noop-already-applied';
+    audit.before = before;
+    audit.after = before;
+    return;
+  }
+  entity[field] = check.crawled;
+  audit.result = 'applied';
+  audit.before = before;
+  audit.after = check.crawled;
+  if (!isObject(pack.provenance)) pack.provenance = {};
+  if (!isObject(pack.provenance.entities)) pack.provenance.entities = {};
+  let entityProvenance = pack.provenance.entities[entityId];
+  if (!entityProvenance) {
+    entityProvenance = {
+      origin: 'baseline-untracked',
+      sourceUrl: null,
+      fetchedAt: context.review.fetchedAt,
+      confidence: 1,
+      note: 'Baseline record had no provenance; reviewed crawl evidence is recorded per field in fieldOrigins.',
+    };
+  }
+  pack.provenance.entities[entityId] = mergeFieldOrigin(entityProvenance, check, decision, context);
+  audit.provenance = pack.provenance.entities[entityId].fieldOrigins[field];
+}
+
+function validateFieldOperations(baselinePack, itemMap, decisions) {
+  const writes = new Map();
+  const decisionsByItem = new Map(decisions.decisions.map((decision) => [decision.itemId, decision]));
+  for (const [itemId, source] of itemMap) {
+    if (source.type !== 'field') continue;
+    const entityId = source.observation.resolution.entityId;
+    const entity = baselinePack.entities && baselinePack.entities[entityId];
+    if (!entity) throw new CandidateError(`field review item references missing entity: ${entityId}`, 1);
+    checkCurrentBaseline(entity, source.check, entityId);
+    const decision = decisionsByItem.get(itemId);
+    if (!decision || decision.action !== 'apply') continue;
+    const key = `${entityId}\u0000${source.check.baselineField}`;
+    const value = source.check.crawled;
+    const current = writes.get(key);
+    if (current && current.value !== value) {
+      throw new CandidateError(`conflicting reviewed values for entities.${entityId}.${source.check.baselineField}`);
+    }
+    writes.set(key, { value, itemId });
+  }
+}
+
+function validateAllowedSections(before, after) {
+  const allowed = new Set(['aliases', 'entities', 'provenance']);
+  const keys = new Set([...Object.keys(before), ...Object.keys(after)]);
+  for (const key of keys) {
+    if (allowed.has(key)) continue;
+    if (!sameValue(before[key], after[key])) throw new CandidateError(`candidate changed unsupported section: ${key}`, 1);
+  }
+  const beforeAliases = before.aliases || {};
+  const afterAliases = after.aliases || {};
+  for (const key of Object.keys(beforeAliases)) {
+    if (!sameValue(beforeAliases[key], afterAliases[key])) throw new CandidateError(`candidate rewrote existing alias: ${key}`, 1);
+  }
+  const beforeEntities = before.entities || {};
+  const afterEntities = after.entities || {};
+  for (const id of Object.keys(beforeEntities)) {
+    if (!hasOwn(afterEntities, id)) throw new CandidateError(`candidate removed entity: ${id}`, 1);
+    const fields = new Set([...Object.keys(beforeEntities[id]), ...Object.keys(afterEntities[id])]);
+    for (const field of fields) {
+      if (field === 'kind' || field === 'name') {
+        if (!sameValue(beforeEntities[id][field], afterEntities[id][field])) throw new CandidateError(`candidate changed protected entity field: entities.${id}.${field}`, 1);
+      }
+    }
+  }
+  for (const id of Object.keys(afterEntities)) {
+    if (!hasOwn(beforeEntities, id)) throw new CandidateError(`candidate added entity: ${id}`, 1);
+  }
+}
+
+function buildCandidate({ baselinePack, baselineBytes, report, decisions, decisionsBytes, strict = false, recordsBytes, rawRecords }) {
+  if (!isObject(baselinePack)) throw new CandidateError('baseline Data Pack must be an object', 2);
+  const baselineValidation = loader.validate(baselinePack);
+  if (baselineValidation.errors.length) throw new CandidateError(`baseline Data Pack is invalid: ${baselineValidation.errors.join('; ')}`, 1);
+  let candidateReview;
+  try {
+    candidateReview = verifyCandidateReview(report, baselineBytes, recordsBytes);
+  } catch (error) {
+    throw new CandidateError(error.message, 2);
+  }
+  let rebuiltReview;
+  try {
+    rebuiltReview = buildCandidateReview({
+      pack: baselinePack,
+      rawRecords,
+      baselineBytes,
+      recordsBytes,
+      origin: candidateReview.origin,
+      sourceUrl: candidateReview.sourceUrl,
+      fetchedAt: candidateReview.fetchedAt,
+    });
+  } catch (error) {
+    throw new CandidateError(`candidate review cannot be reproduced: ${error.message}`, 2);
+  }
+  if (!sameValue(rebuiltReview, candidateReview)) {
+    throw new CandidateError('candidate review does not match a fresh cross-check of baseline and records', 2);
+  }
+  const reportContext = validateReportShape(report);
+  validateDecisions(decisions, candidateReview.reportId, reportContext.itemMap);
+  validateFieldOperations(baselinePack, reportContext.itemMap, decisions);
+
+  const candidate = deepClone(baselinePack);
+  const auditOperations = [];
+  const context = { review: candidateReview, decisions };
+  const decisionsByItem = new Map(decisions.decisions.map((decision) => [decision.itemId, decision]));
+  for (const itemId of reportContext.itemMap.keys()) {
+    const decision = decisionsByItem.get(itemId);
+    const source = reportContext.itemMap.get(decision.itemId);
+    const audit = {
+      decisionId: decision.itemId,
+      itemId: decision.itemId,
+      action: decision.action,
+      target: null,
+      result: null,
+      before: null,
+      after: null,
+      note: decision.note || null,
+    };
+    if (source.type === 'identity') {
+      audit.target = `aliases.${source.observation.crawledName}`;
+      if (decision.action === 'map-alias') {
+        if (source.observation.rawFields && Object.keys(source.observation.rawFields).length) {
+          // Identity approval must not silently turn un-cross-checked fields into entity writes.
+          audit.note = audit.note || 'Identity mapped; business fields require a follow-up recrawl review.';
+        }
+        applyAlias(candidate, source.observation, decision, audit);
+      } else if (decision.action === 'reject') {
+        audit.result = 'rejected';
+      } else {
+        throw new CandidateError(`identity review item requires map-alias or reject: ${decision.itemId}`);
+      }
+    } else {
+      const check = source.check;
+      audit.target = pathText('entities', source.observation.resolution.entityId, check.baselineField);
+      if (decision.action === 'map-alias' || decision.action === 'reject') {
+        throw new CandidateError(`field review item cannot use ${decision.action}: ${decision.itemId}`);
+      }
+      applyField(candidate, source.observation, check, decision, { ...context, observation: source.observation }, audit);
+    }
+    auditOperations.push(audit);
+  }
+
+  validateAllowedSections(baselinePack, candidate);
+  const validation = loader.validate(candidate);
+  if (validation.errors.length) throw new CandidateError(`candidate Data Pack is invalid: ${validation.errors.join('; ')}`, 1);
+  if (strict && validation.warnings.length) throw new CandidateError(`strict candidate validation failed: ${validation.warnings.join('; ')}`, 1);
+
+  const candidateBytes = Buffer.from(JSON.stringify(candidate, null, 2) + '\n', 'utf8');
+  const diff = buildDiff(baselinePack, candidate, { old: 'baseline', new: 'candidate' });
+  const audit = {
+    auditVersion: '1.0',
+    status: 'valid',
+    inputs: {
+      baselineSha256: sha256(baselineBytes),
+      recordsSha256: sha256(recordsBytes),
+      reportId: candidateReview.reportId,
+      decisionsSha256: sha256(decisionsBytes),
+      candidateSha256: sha256(candidateBytes),
+    },
+    review: {
+      reviewedBy: decisions.reviewedBy,
+      reviewedAt: decisions.reviewedAt,
+    },
+    operations: auditOperations,
+    unresolved: [],
+    validation: {
+      errors: validation.errors,
+      warnings: validation.warnings,
+    },
+    diff: {
+      entities: diff.entities,
+      aliases: diff.aliases,
+      provenance: diff.provenance,
+      total: diff.total,
+    },
+    derivationsImpacted: diff.derivationsImpacted,
+  };
+  return { candidate, candidateBytes, audit, auditBytes: Buffer.from(JSON.stringify(audit, null, 2) + '\n', 'utf8') };
+}
+
+module.exports = {
+  CandidateError,
+  buildCandidate,
+  validateReportShape,
+  validateDecisions,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-diff.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-diff.js
new file mode 100644
index 0000000..0ac8c9a
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-diff.js
@@ -0,0 +1,249 @@
+'use strict';
+
+/* Pure structural diff and derivation-impact helpers. */
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function changedPaths(a, b, prefix = '') {
+  const out = [];
+  if (JSON.stringify(a) === JSON.stringify(b)) return out;
+  if (!isObject(a) || !isObject(b)) {
+    out.push(prefix || '(value)');
+    return out;
+  }
+  const keys = new Set([...Object.keys(a), ...Object.keys(b)]);
+  for (const key of keys) {
+    const current = prefix ? `${prefix}.${key}` : key;
+    if (!Object.prototype.hasOwnProperty.call(a, key)) out.push(`${current} (added)`);
+    else if (!Object.prototype.hasOwnProperty.call(b, key)) out.push(`${current} (removed)`);
+    else if (JSON.stringify(a[key]) !== JSON.stringify(b[key])) {
+      if (isObject(a[key]) && isObject(b[key])) out.push(...changedPaths(a[key], b[key], current));
+      else out.push(current);
+    }
+  }
+  return out;
+}
+
+function diffRecordMap(oldMap, newMap) {
+  const oldValue = oldMap || {};
+  const newValue = newMap || {};
+  const oldKeys = Object.keys(oldValue);
+  const newKeys = Object.keys(newValue);
+  const has = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+  const added = newKeys.filter((key) => !has(oldValue, key));
+  const removed = oldKeys.filter((key) => !has(newValue, key));
+  const changed = [];
+  for (const key of newKeys) {
+    if (!Object.prototype.hasOwnProperty.call(oldValue, key)) continue;
+    const fields = changedPaths(oldValue[key], newValue[key]);
+    if (fields.length) changed.push({ id: key, fields });
+  }
+  return { added, removed, changed };
+}
+
+function relationKey(relation) {
+  if (relation && typeof relation.id === 'string' && relation.id) return `id:${relation.id}`;
+  const scope = Array.isArray(relation && relation.scope) ? [...new Set(relation.scope)].sort().join('|') : '*';
+  return `${relation && relation.a}::${relation && relation.b}::${relation && relation.type}::scope=${scope}`;
+}
+
+function recordMapWithOccurrences(records, keyOf) {
+  const out = new Map();
+  const seen = new Map();
+  for (const record of records || []) {
+    const base = keyOf(record);
+    const occurrence = (seen.get(base) || 0) + 1;
+    seen.set(base, occurrence);
+    out.set(occurrence === 1 ? base : `${base}#${occurrence}`, record);
+  }
+  return out;
+}
+
+function diffRelations(oldRelations, newRelations) {
+  const oldMap = recordMapWithOccurrences(oldRelations, relationKey);
+  const newMap = recordMapWithOccurrences(newRelations, relationKey);
+  const added = [...newMap.keys()].filter((key) => !oldMap.has(key));
+  const removed = [...oldMap.keys()].filter((key) => !newMap.has(key));
+  const changed = [];
+  for (const key of newMap.keys()) {
+    if (!oldMap.has(key)) continue;
+    const fields = changedPaths(oldMap.get(key), newMap.get(key));
+    if (fields.length) changed.push({ id: key, fields });
+  }
+  return { added, removed, changed };
+}
+
+function stageMap(stages) {
+  const out = Object.create(null);
+  const seen = Object.create(null);
+  (stages || []).forEach((stage, index) => {
+    const base = stage && (stage.key || stage.id) || `#${index}`;
+    seen[base] = (seen[base] || 0) + 1;
+    const key = seen[base] === 1 ? base : `${base}#${seen[base]}`;
+    out[key] = stage;
+  });
+  return out;
+}
+
+function stageOrder(stages) {
+  return (stages || []).map((stage, index) => stage && (stage.key || stage.id) || `#${index}`);
+}
+
+function stageOrderChanged(oldStages, newStages) {
+  const oldOrder = stageOrder(oldStages);
+  const newOrder = stageOrder(newStages);
+  if (oldOrder.length !== newOrder.length) return false;
+  if (JSON.stringify([...oldOrder].sort()) !== JSON.stringify([...newOrder].sort())) return false;
+  return oldOrder.some((key, index) => key !== newOrder[index]);
+}
+
+function diffPairs(oldPairs, newPairs) {
+  const normalize = (pairs) => new Set((pairs || []).map((pair) => JSON.stringify([...pair].sort())));
+  const oldSet = normalize(oldPairs);
+  const newSet = normalize(newPairs);
+  return {
+    added: [...newSet].filter((value) => !oldSet.has(value)),
+    removed: [...oldSet].filter((value) => !newSet.has(value)),
+  };
+}
+
+function count(section) {
+  return (section.added ? section.added.length : 0) +
+    (section.removed ? section.removed.length : 0) +
+    (section.changed ? section.changed.length : 0);
+}
+
+function matchSegments(sourceSegments, changedSegments) {
+  if (changedSegments.length < sourceSegments.length) {
+    for (let index = 0; index < changedSegments.length; index += 1) {
+      if (sourceSegments[index] !== '*' && sourceSegments[index] !== changedSegments[index]) return false;
+    }
+    return true;
+  }
+  for (let index = 0; index < sourceSegments.length; index += 1) {
+    if (sourceSegments[index] !== '*' && sourceSegments[index] !== changedSegments[index]) return false;
+  }
+  return true;
+}
+
+function sourceMatches(sourcePath, section, id, field) {
+  const segments = String(sourcePath || '').split('.');
+  if (segments[0] !== section) return false;
+  if (segments.length === 1) return true;
+  const changed = [];
+  if (id !== undefined && id !== null) changed.push(String(id));
+  if (field) changed.push(...String(field).split('.'));
+  return matchSegments(segments.slice(1), changed);
+}
+
+function impactedDerivations(pack, section, id, field) {
+  const hits = [];
+  for (const [name, derivation] of Object.entries((pack && pack.derivations) || {})) {
+    const sources = [derivation.source].concat(derivation.alsoTouches || []);
+    if (sources.some((source) => sourceMatches(source, section, id, field))) hits.push({ name, ...derivation });
+  }
+  return hits;
+}
+
+function collectImpacts(pack, report, oldPack, newPack) {
+  const impacts = new Map();
+  const add = (derivation, trigger) => {
+    if (!impacts.has(derivation.name)) {
+      impacts.set(derivation.name, {
+        name: derivation.name,
+        kind: derivation.kind,
+        note: derivation.note,
+        consumers: derivation.consumers,
+        triggers: new Set(),
+      });
+    }
+    impacts.get(derivation.name).triggers.add(trigger);
+  };
+  const feedRecordSection = (section, label) => {
+    for (const id of report[section].added) {
+      for (const derivation of impactedDerivations(pack, section, id)) add(derivation, `+${label} ${id}`);
+    }
+    for (const id of report[section].removed) {
+      for (const derivation of impactedDerivations(pack, section, id)) add(derivation, `-${label} ${id}`);
+    }
+    for (const change of report[section].changed) {
+      const fields = change.fields.map((field) => field.replace(/ \(added\)| \(removed\)/g, ''));
+      for (const field of [...new Set(fields)]) {
+        for (const derivation of impactedDerivations(pack, section, change.id, field)) {
+          add(derivation, `~${label} ${change.id}.${field}`);
+        }
+      }
+    }
+  };
+
+  feedRecordSection('entities', 'entity');
+  feedRecordSection('aliases', 'alias');
+  if (count(report.relations)) for (const derivation of impactedDerivations(pack, 'relations')) add(derivation, 'relations changed');
+  feedRecordSection('contents', 'content');
+  if (count(report.stages) || report.stages.orderChanged) {
+    for (const derivation of impactedDerivations(pack, 'stages')) add(derivation, report.stages.orderChanged ? 'stages order changed' : 'stages changed');
+  }
+
+  const oldDomain = oldPack.domain || {};
+  const newDomain = newPack.domain || {};
+  if (JSON.stringify(oldDomain) !== JSON.stringify(newDomain)) {
+    const paths = changedPaths(oldDomain, newDomain).map((field) => field.replace(/ \(added\)| \(removed\)/g, ''));
+    for (const field of paths) {
+      for (const derivation of impactedDerivations(pack, 'domain', undefined, field)) add(derivation, `~domain.${field}`);
+    }
+  }
+
+  for (const change of report.derivations.changed) {
+    add({ name: change.id, kind: 'meta', note: 'derivation definition changed', consumers: [] }, `~derivation ${change.id}`);
+  }
+  for (const section of ['assets', 'provenance', 'attributeTypes', 'relationTypes', 'heroRelTypes', 'kindNameFields', 'meta']) {
+    if (count(report[section])) {
+      for (const derivation of impactedDerivations(pack, section)) add(derivation, `${section} changed`);
+    }
+  }
+  return [...impacts.values()].map((impact) => ({ ...impact, triggers: [...impact.triggers] }));
+}
+
+function buildDiff(oldPack, newPack, labels = {}) {
+  const report = {
+    old: labels.old || 'old',
+    new: labels.new || 'new',
+    entities: diffRecordMap(oldPack.entities, newPack.entities),
+    relations: diffRelations(oldPack.relations, newPack.relations),
+    aliases: diffRecordMap(oldPack.aliases, newPack.aliases),
+    contents: diffRecordMap(oldPack.contents, newPack.contents),
+    stages: diffRecordMap(stageMap(oldPack.stages), stageMap(newPack.stages)),
+    sameAs: diffPairs(oldPack.sameAs, newPack.sameAs),
+    derivations: diffRecordMap(oldPack.derivations, newPack.derivations),
+    assets: diffRecordMap(oldPack.assets, newPack.assets),
+    provenance: diffRecordMap(oldPack.provenance, newPack.provenance),
+    attributeTypes: diffRecordMap(oldPack.attributeTypes, newPack.attributeTypes),
+    relationTypes: diffRecordMap(oldPack.relationTypes, newPack.relationTypes),
+    heroRelTypes: diffRecordMap(oldPack.heroRelTypes, newPack.heroRelTypes),
+    kindNameFields: diffRecordMap(oldPack.kindNameFields, newPack.kindNameFields),
+    domain: diffRecordMap(oldPack.domain, newPack.domain),
+    meta: diffRecordMap(isObject(oldPack.meta) ? oldPack.meta : {}, isObject(newPack.meta) ? newPack.meta : {}),
+  };
+  const orderChanged = stageOrderChanged(oldPack.stages, newPack.stages);
+  if (orderChanged) report.stages.orderChanged = true;
+  report.derivationsImpacted = collectImpacts(newPack, report, oldPack, newPack);
+  report.total = count(report.entities) + count(report.relations) + count(report.aliases) +
+    count(report.contents) + count(report.stages) + (orderChanged ? 1 : 0) + report.sameAs.added.length + report.sameAs.removed.length +
+    count(report.derivations) + count(report.assets) + count(report.provenance) +
+    count(report.attributeTypes) + count(report.relationTypes) + count(report.heroRelTypes) +
+    count(report.kindNameFields) + count(report.domain) + count(report.meta);
+  return report;
+}
+
+module.exports = {
+  isObject,
+  changedPaths,
+  diffRecordMap,
+  diffRelations,
+  diffPairs,
+  count,
+  sourceMatches,
+  impactedDerivations,
+  buildDiff,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-extract-core.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-extract-core.js
new file mode 100644
index 0000000..7286dbd
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-extract-core.js
@@ -0,0 +1,334 @@
+'use strict';
+
+/* Read-only extraction/equivalence collector used by product reports. */
+class ExtractionError extends Error {
+  constructor(message, kind = 'gate') {
+    super(message);
+    this.name = 'ExtractionError';
+    this.kind = kind;
+  }
+}
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const acorn = require('../vendor/acorn.js');
+require('./sg-data-loader.js');
+
+function sha1File(file) {
+  return 'sha1:' + crypto.createHash('sha1').update(fs.readFileSync(file)).digest('hex');
+}
+
+function sha256Bytes(bytes) {
+  return 'sha256:' + crypto.createHash('sha256').update(bytes).digest('hex');
+}
+
+function sha256File(file) {
+  return sha256Bytes(fs.readFileSync(file));
+}
+
+function sliceLiteral(source, spec, libDir) {
+  const match = spec.pattern.exec(source);
+  if (!match) throw new Error(`Failed to locate literal "${spec.key}": pattern did not match`);
+  const start = match.index + match[0].length;
+  if (spec.json) {
+    const end = source.indexOf('</script>', start);
+    if (end === -1) throw new Error(`Literal "${spec.key}": closing </script> tag not found`);
+    return JSON.parse(source.slice(start, end).trim());
+  }
+  const node = acorn.parseExpressionAt(source, start, { ecmaVersion: 'latest' });
+  const literalSource = source.slice(node.start, node.end);
+  const context = spec.ctx || {};
+  const fn = new Function(...Object.keys(context), 'return (' + literalSource + ');');
+  return fn(...Object.values(context));
+}
+
+function sliceLiterals(engineSource, specs, libDir, consumedFiles) {
+  const out = {};
+  const cache = { __engine__: engineSource };
+  for (const spec of specs || []) {
+    let source = engineSource;
+    if (spec.file) {
+      if (!cache[spec.file]) {
+        const literalFile = path.resolve(libDir, spec.file);
+        const literalBytes = fs.readFileSync(literalFile);
+        if (consumedFiles) consumedFiles[literalFile] = sha256Bytes(literalBytes);
+        cache[spec.file] = literalBytes.toString('utf8');
+      }
+      source = cache[spec.file];
+    }
+    out[spec.key] = sliceLiteral(source, spec, libDir);
+  }
+  return out;
+}
+
+function deepEqual(left, right, pathName = '$', diffs = []) {
+  if (left === right) return diffs;
+  if (typeof left !== typeof right) {
+    diffs.push(`${pathName}: type mismatch ${typeof left} vs ${typeof right}`);
+    return diffs;
+  }
+  if (left === null || right === null || typeof left !== 'object') {
+    if (left !== right) diffs.push(`${pathName}: ${JSON.stringify(left)} !== ${JSON.stringify(right)}`);
+    return diffs;
+  }
+  if (Array.isArray(left) !== Array.isArray(right)) {
+    diffs.push(`${pathName}: array/object mismatch`);
+    return diffs;
+  }
+  if (Array.isArray(left)) {
+    if (left.length !== right.length) diffs.push(`${pathName}: array length ${left.length} vs ${right.length}`);
+    const length = Math.max(left.length, right.length);
+    for (let i = 0; i < length; i += 1) {
+      if (i < left.length && i < right.length) deepEqual(left[i], right[i], `${pathName}[${i}]`, diffs);
+    }
+    return diffs;
+  }
+  const leftKeys = Object.keys(left);
+  const rightKeys = Object.keys(right);
+  for (const key of leftKeys) if (!Object.prototype.hasOwnProperty.call(right, key)) diffs.push(`${pathName}.${key}: missing on right`);
+  for (const key of rightKeys) if (!Object.prototype.hasOwnProperty.call(left, key)) diffs.push(`${pathName}.${key}: missing on left`);
+  for (const key of leftKeys) if (Object.prototype.hasOwnProperty.call(right, key)) deepEqual(left[key], right[key], `${pathName}.${key}`, diffs);
+  return diffs;
+}
+
+function resolveAssetRoot(libDir, assetDir = 'lib/assets') {
+  if (typeof assetDir !== 'string' || !assetDir || /[\u0000-\u001f\u007f]/.test(assetDir)) throw new Error(`Unsafe assetDir: ${assetDir}`);
+  if (path.isAbsolute(assetDir) || /^[A-Za-z]:[\\/]/.test(assetDir)) throw new Error('Extraction config assetDir must be relative to libDir');
+  const libraryRoot = path.resolve(libDir);
+  const root = path.resolve(libraryRoot, assetDir);
+  const relative = path.relative(libraryRoot, root);
+  if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) throw new Error(`Extraction config assetDir escapes libDir: ${assetDir}`);
+  return root;
+}
+
+function assetRelativePath(assetPath, assetBase = '') {
+  const normalized = assetPath.replace(/\\/g, '/');
+  const normalizedBase = typeof assetBase === 'string' ? assetBase.replace(/\\/g, '/') : '';
+  if (normalizedBase && normalized.startsWith(normalizedBase)) return normalized.slice(normalizedBase.length);
+  return normalized.replace(/^(\.\.\/)?assets\//, '');
+}
+
+function localAssetPath(libDir, assetPath, assetDir = 'lib/assets', assetBase = '') {
+  if (typeof assetPath !== 'string' || !assetPath || /[\u0000-\u001f\u007f]/.test(assetPath)) throw new Error(`Unsafe asset path: ${assetPath}`);
+  const root = resolveAssetRoot(libDir, assetDir);
+  const relative = assetRelativePath(assetPath, assetBase);
+  if (!relative || path.isAbsolute(relative) || /^[A-Za-z]:[\\/]/.test(relative)) throw new Error(`Asset path must be relative: ${assetPath}`);
+  const absolute = path.resolve(root, relative);
+  const fromRoot = path.relative(root, absolute);
+  if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) throw new Error(`Asset path escapes assetDir ${assetDir}: ${assetPath}`);
+  if (!fs.existsSync(root)) return absolute;
+  if (fs.lstatSync(root).isSymbolicLink()) throw new Error('Asset root must not be a symlink');
+  let current = root;
+  for (const segment of relative.split(/[\\/]/)) {
+    current = path.join(current, segment);
+    if (fs.existsSync(current) && fs.lstatSync(current).isSymbolicLink()) throw new Error(`Asset path contains a symlink: ${assetPath}`);
+  }
+  return absolute;
+}
+
+function collectAssets(pack, libDir, consumedFiles, assetDir = 'lib/assets') {
+  const found = Object.create(null);
+  const assetBase = pack.meta && typeof pack.meta.assetBase === 'string' ? pack.meta.assetBase : '';
+  const walk = (value) => {
+    if (typeof value === 'string') {
+      if (/^(https?:|data:)/i.test(value)) return;
+      const match = /(\.\.\/)?assets\/[^\s"'`)]*/.exec(value);
+      if (match && /\.(png|jpe?g|webp|gif|svg)$/i.test(match[0])) found[match[0]] = true;
+      else if (assetBase && /\.(png|jpe?g|webp|gif|svg)$/i.test(value)) found[assetBase + value] = true;
+    } else if (Array.isArray(value)) value.forEach(walk);
+    else if (value && typeof value === 'object') Object.values(value).forEach(walk);
+  };
+  walk(pack);
+  for (const assetPath of Object.keys(pack.assets || {})) {
+    if (!/^(https?:|data:)/i.test(assetPath)) found[assetPath] = true;
+  }
+  const assets = {};
+  for (const assetPath of Object.keys(found)) {
+    const absolute = localAssetPath(libDir, assetPath, assetDir, assetBase);
+    try {
+      const stat = fs.statSync(absolute);
+      if (consumedFiles) consumedFiles[path.resolve(absolute)] = sha256File(absolute);
+      assets[assetPath] = { exists: true, bytes: stat.size, hash: sha1File(absolute) };
+    } catch (_) {
+      assets[assetPath] = { exists: false };
+    }
+  }
+  return assets;
+}
+
+function equivalenceCoverage(config) {
+  const extracted = (config.literals || []).map((item) => item.key);
+  const mapped = (config.equivalence || []).map((item) => item.lit);
+  const ignored = (config.equivalenceIgnore || []).map((item) => item.lit);
+  return {
+    extracted,
+    mapped,
+    ignored,
+    unmapped: extracted.filter((key) => !mapped.includes(key) && !ignored.includes(key)),
+    complete: extracted.every((key) => mapped.includes(key) || ignored.includes(key)),
+  };
+}
+
+function runEquivalence(config, defaults, pack) {
+  global.window = globalThis;
+  const enginePath = path.resolve(config.libDir, config.engineFile);
+  delete require.cache[require.resolve(enginePath)];
+  require(enginePath);
+  const library = globalThis[config.globalName];
+  if (!library || typeof library.__fromPack !== 'function') throw new Error(`Engine does not export __fromPack (${config.globalName}); complete the engine patch first`);
+  const restored = library.__fromPack(pack);
+  if (!restored || typeof restored !== 'object' || Array.isArray(restored)) throw new Error('__fromPack(pack) must return an object for equivalence checks');
+  const diffs = [];
+  for (const mapping of config.equivalence || []) {
+    if (!Object.prototype.hasOwnProperty.call(defaults, mapping.lit)) throw new Error(`Equivalence literal does not exist: ${mapping.lit}`);
+    if (!Object.prototype.hasOwnProperty.call(restored, mapping.from)) throw new Error(`__fromPack(pack) did not return equivalence field: ${mapping.from}`);
+    let left = defaults[mapping.lit];
+    let right = restored[mapping.from];
+    const sorter = config.sortKeys && config.sortKeys[mapping.lit];
+    if (sorter) {
+      if (!Array.isArray(left) || !Array.isArray(right)) throw new Error(`sortKeys.${mapping.lit} requires arrays on both sides`);
+      left = left.slice().sort(sorter);
+      right = right.slice().sort(sorter);
+    }
+    deepEqual(left, right, `$.${mapping.lit}`, diffs);
+  }
+  return { comparisons: (config.equivalence || []).length, diffs, coverage: equivalenceCoverage(config) };
+}
+
+function validateRelativeConfigPath(value, field) {
+  if (typeof value !== 'string' || !value.trim()) throw new Error(`Extraction config ${field} must be a non-empty string`);
+  if (/[\u0000-\u001f\u007f]/.test(value) || path.isAbsolute(value) || /^[A-Za-z]:[\\/]/.test(value)) throw new Error(`Extraction config ${field} must be a safe path relative to libDir`);
+  const normalized = value.replace(/\\/g, '/');
+  if (normalized.split('/').includes('..')) throw new Error(`Extraction config ${field} must not escape libDir`);
+}
+
+function validateExtractionConfig(config) {
+  if (!config || typeof config !== 'object') throw new Error('Extraction config must export an object');
+  for (const field of ['libId', 'libDir', 'engineFile', 'globalName']) {
+    if (typeof config[field] !== 'string' || !config[field].trim()) throw new Error(`Extraction config ${field} must be a non-empty string`);
+  }
+  validateRelativeConfigPath(config.engineFile, 'engineFile');
+  if (config.assetDir !== undefined) validateRelativeConfigPath(config.assetDir, 'assetDir');
+  if (!Array.isArray(config.literals) || !config.literals.length) throw new Error('Extraction config literals must be a non-empty array');
+  const literalKeys = new Set();
+  for (const [index, literal] of config.literals.entries()) {
+    if (!literal || typeof literal !== 'object') throw new Error(`Extraction config literals[${index}] must be an object`);
+    if (typeof literal.key !== 'string' || !literal.key.trim()) throw new Error(`Extraction config literals[${index}].key must be a non-empty string`);
+    if (literalKeys.has(literal.key)) throw new Error(`Extraction config literal key is duplicated: ${literal.key}`);
+    literalKeys.add(literal.key);
+    if (!(literal.pattern instanceof RegExp)) throw new Error(`Extraction config literal ${literal.key} pattern must be a RegExp`);
+    if (literal.file !== undefined) validateRelativeConfigPath(literal.file, `literal ${literal.key} file`);
+  }
+  if (typeof config.buildPack !== 'function') throw new Error('Extraction config buildPack must be a function');
+  if (!Array.isArray(config.equivalence)) throw new Error('Extraction config equivalence must be an array');
+  if (config.equivalenceIgnore !== undefined && !Array.isArray(config.equivalenceIgnore)) throw new Error('Extraction config equivalenceIgnore must be an array');
+  const accounted = new Set();
+  for (const [index, mapping] of config.equivalence.entries()) {
+    if (!mapping || typeof mapping !== 'object') throw new Error(`Extraction config equivalence[${index}] must be an object`);
+    for (const field of ['lit', 'from']) if (typeof mapping[field] !== 'string' || !mapping[field].trim()) throw new Error(`Extraction config equivalence[${index}].${field} must be a non-empty string`);
+    if (!literalKeys.has(mapping.lit)) throw new Error(`Extraction config equivalence references unknown literal: ${mapping.lit}`);
+    if (accounted.has(mapping.lit)) throw new Error(`Extraction config literal has duplicate equivalence coverage: ${mapping.lit}`);
+    accounted.add(mapping.lit);
+  }
+  for (const [index, ignored] of (config.equivalenceIgnore || []).entries()) {
+    if (!ignored || typeof ignored !== 'object') throw new Error(`Extraction config equivalenceIgnore[${index}] must be an object`);
+    if (typeof ignored.lit !== 'string' || !ignored.lit.trim()) throw new Error(`Extraction config equivalenceIgnore[${index}].lit must be a non-empty string`);
+    if (typeof ignored.reason !== 'string' || !ignored.reason.trim()) throw new Error(`Extraction config equivalenceIgnore[${index}].reason must be a non-empty string`);
+    if (!literalKeys.has(ignored.lit)) throw new Error(`Extraction config equivalenceIgnore references unknown literal: ${ignored.lit}`);
+    if (accounted.has(ignored.lit)) throw new Error(`Extraction config literal has duplicate equivalence coverage: ${ignored.lit}`);
+    accounted.add(ignored.lit);
+  }
+  const missing = [...literalKeys].filter((key) => !accounted.has(key));
+  if (missing.length) throw new Error(`Extraction config literals lack equivalence coverage: ${missing.join(', ')}; map them or use equivalenceIgnore with a reason`);
+  return config;
+}
+
+function runExtractionUnsafe(configPath, options = {}) {
+  const modulesBefore = new Set(Object.keys(require.cache));
+  const absoluteConfig = path.resolve(configPath);
+  const consumedFiles = {};
+  consumedFiles[absoluteConfig] = sha256File(absoluteConfig);
+  delete require.cache[require.resolve(absoluteConfig)];
+  let config;
+  try {
+    config = validateExtractionConfig(require(absoluteConfig));
+  } catch (error) {
+    throw new ExtractionError(error.message, 'input');
+  }
+  if (options.expectedLibDir) {
+    const configuredLibDir = fs.realpathSync(path.resolve(config.libDir));
+    const expectedLibDir = fs.realpathSync(path.resolve(options.expectedLibDir));
+    if (configuredLibDir !== expectedLibDir) {
+      throw new ExtractionError(`Extraction config libDir does not match report library: ${config.libDir}`, 'input');
+    }
+  }
+  if (options.expectedLibId && config.libId !== options.expectedLibId) {
+    throw new ExtractionError(`Extraction config libId does not match Data Pack meta.id: ${config.libId}`, 'input');
+  }
+  const enginePath = path.resolve(config.libDir, config.engineFile);
+  const engineBytes = fs.readFileSync(enginePath);
+  consumedFiles[enginePath] = sha256Bytes(engineBytes);
+  const engineSource = engineBytes.toString('utf8');
+  const defaults = sliceLiterals(engineSource, config.literals, config.libDir, consumedFiles);
+  const pack = config.buildPack(defaults);
+  if (!pack || typeof pack !== 'object' || Array.isArray(pack)) throw new Error('Extraction config buildPack must return an object');
+  pack.schemaVersion = config.schemaVersion || '1.3';
+  pack.meta = Object.assign({ id: config.libId, generatedBy: 'sg-data-pack: ' + path.basename(absoluteConfig) }, config.meta || {}, pack.meta || {});
+  const declaredAssets = pack.assets && typeof pack.assets === 'object' && !Array.isArray(pack.assets) ? pack.assets : {};
+  const scannedAssets = collectAssets(pack, config.libDir, consumedFiles, config.assetDir || 'lib/assets');
+  pack.assets = Object.fromEntries([...new Set([...Object.keys(declaredAssets), ...Object.keys(scannedAssets)])].map((assetPath) => [
+    assetPath,
+    /^(https?:|data:)/i.test(assetPath)
+      ? declaredAssets[assetPath]
+      : Object.assign({}, declaredAssets[assetPath] || {}, scannedAssets[assetPath] || { exists: false }),
+  ]));
+  const validation = globalThis.SGDataLoader.validate(pack);
+  const domain = typeof config.domainChecks === 'function' ? (config.domainChecks(pack) || {}) : {};
+  const domainErrors = Array.isArray(domain) ? domain : domain.errors || [];
+  const domainWarnings = Array.isArray(domain) ? [] : domain.warnings || [];
+  validation.errors.push(...domainErrors.map((item) => '[domain] ' + item));
+  validation.warnings.push(...domainWarnings.map((item) => '[domain] ' + item));
+  let equivalence = { comparisons: 0, diffs: [], coverage: equivalenceCoverage(config) };
+  if (!validation.errors.length) equivalence = runEquivalence(config, defaults, pack);
+  for (const moduleFile of Object.keys(require.cache)) {
+    if (modulesBefore.has(moduleFile) || !fs.existsSync(moduleFile) || !fs.statSync(moduleFile).isFile()) continue;
+    consumedFiles[path.resolve(moduleFile)] = sha256File(moduleFile);
+  }
+  return {
+    configPath: absoluteConfig,
+    config,
+    defaults,
+    pack,
+    validation,
+    equivalence,
+    consumedFiles,
+    inventory: {
+      literals: Object.fromEntries(Object.entries(defaults).map(([key, value]) => [key, Array.isArray(value) ? value.length : Object.keys(value || {}).length])),
+      assets: Object.keys(pack.assets || {}).length,
+    },
+  };
+}
+
+function runExtraction(configPath, options = {}) {
+  try {
+    return runExtractionUnsafe(configPath, options);
+  } catch (error) {
+    if (error instanceof ExtractionError) throw error;
+    const inputLike = error && ['ENOENT', 'EACCES', 'EISDIR', 'MODULE_NOT_FOUND', 'SyntaxError'].includes(error.code || error.name);
+    throw new ExtractionError(error.message, inputLike ? 'input' : 'gate');
+  }
+}
+
+module.exports = {
+  ExtractionError,
+  sliceLiteral,
+  sliceLiterals,
+  deepEqual,
+  resolveAssetRoot,
+  localAssetPath,
+  collectAssets,
+  equivalenceCoverage,
+  runEquivalence,
+  validateExtractionConfig,
+  runExtraction,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-extract-report-worker.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-extract-report-worker.js
new file mode 100644
index 0000000..1eacfef
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-extract-report-worker.js
@@ -0,0 +1,30 @@
+'use strict';
+
+/* Execute untrusted extraction config/engine code away from report stdout. */
+const fs = require('node:fs');
+const { runExtraction } = require('./sg-pack-extract-core.js');
+
+const [, , configPath, expectedLibDir, expectedLibId] = process.argv;
+let payload;
+try {
+  const result = runExtraction(configPath, { expectedLibDir, expectedLibId });
+  payload = {
+    ok: true,
+    result: {
+      inventory: result.inventory,
+      validation: result.validation,
+      equivalence: result.equivalence,
+      consumedFiles: result.consumedFiles,
+    },
+  };
+} catch (error) {
+  payload = {
+    ok: false,
+    error: {
+      name: error.name,
+      message: error.message,
+      kind: error.kind || 'gate',
+    },
+  };
+}
+fs.writeFileSync(3, JSON.stringify(payload));
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-inspect.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-inspect.js
new file mode 100644
index 0000000..099e9e3
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-inspect.js
@@ -0,0 +1,159 @@
+'use strict';
+
+/* Read-only Data Pack inventory, validation, and local asset integrity collector. */
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+require('./sg-data-loader.js');
+
+const loader = globalThis.SGDataLoader;
+
+function sha256Bytes(bytes) {
+  return 'sha256:' + crypto.createHash('sha256').update(bytes).digest('hex');
+}
+
+function sha1File(file) {
+  return 'sha1:' + crypto.createHash('sha1').update(fs.readFileSync(file)).digest('hex');
+}
+
+function sha256File(file) {
+  return 'sha256:' + crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+}
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function countObject(value) {
+  return isObject(value) ? Object.keys(value).length : 0;
+}
+
+function packInventory(pack) {
+  return {
+    entities: countObject(pack.entities),
+    aliases: countObject(pack.aliases),
+    relationTypes: countObject(pack.relationTypes),
+    heroRelTypes: countObject(pack.heroRelTypes),
+    relations: Array.isArray(pack.relations) ? pack.relations.length : 0,
+    stages: Array.isArray(pack.stages) ? pack.stages.length : 0,
+    contents: countObject(pack.contents),
+    domainKeys: countObject(pack.domain),
+    assets: countObject(pack.assets),
+    sameAs: Array.isArray(pack.sameAs) ? pack.sameAs.length : 0,
+    provenanceEntities: countObject(pack.provenance && pack.provenance.entities),
+    derivations: countObject(pack.derivations),
+  };
+}
+
+function readPack(file) {
+  const bytes = fs.readFileSync(file);
+  return { bytes, digest: sha256Bytes(bytes), pack: JSON.parse(bytes.toString('utf8')) };
+}
+
+function assetFilePath(dataFile, assetKey, assetRoot, assetBase = '') {
+  if (typeof assetKey !== 'string' || !assetKey || /[\u0000-\u001f\u007f]/.test(assetKey)) {
+    throw new Error('unsafe asset path');
+  }
+  const root = assetRoot
+    ? path.resolve(assetRoot)
+    : path.resolve(path.dirname(dataFile), '..', 'assets');
+  const normalizedKey = assetKey.replace(/\\/g, '/');
+  const normalizedBase = typeof assetBase === 'string' ? assetBase.replace(/\\/g, '/') : '';
+  const relative = normalizedBase && normalizedKey.startsWith(normalizedBase)
+    ? normalizedKey.slice(normalizedBase.length)
+    : normalizedKey.replace(/^(\.\.\/)?assets\//, '');
+  if (path.isAbsolute(relative) || /^[A-Za-z]:[\\/]/.test(relative)) throw new Error('asset path must be relative');
+  const resolved = path.resolve(root, relative);
+  const fromRoot = path.relative(root, resolved);
+  if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) {
+    throw new Error('asset path escapes the asset root');
+  }
+  const rootStat = fs.lstatSync(root);
+  if (rootStat.isSymbolicLink()) throw new Error('asset root must not be a symlink');
+  let current = root;
+  for (const segment of relative.split(path.sep)) {
+    current = path.join(current, segment);
+    if (fs.existsSync(current) && fs.lstatSync(current).isSymbolicLink()) throw new Error('asset path contains a symlink component');
+  }
+  const physicalRoot = fs.realpathSync(root);
+  const physicalFile = fs.realpathSync(resolved);
+  const physicalRelative = path.relative(physicalRoot, physicalFile);
+  if (physicalRelative === '..' || physicalRelative.startsWith(`..${path.sep}`) || path.isAbsolute(physicalRelative)) {
+    throw new Error('asset symlink escapes the asset root');
+  }
+  return physicalFile;
+}
+
+function inspectAssets(pack, dataFile, options = {}) {
+  const consumedFiles = options.consumedFiles || null;
+  const checked = [];
+  const missing = [];
+  const mismatches = [];
+  const skipped = [];
+  if (!options.verifyHash) {
+    return {
+      enabled: false,
+      checked,
+      missing,
+      mismatches,
+      skipped: Object.keys(isObject(pack.assets) ? pack.assets : {}).map((assetKey) => ({ path: assetKey, reason: 'verification-not-requested' })),
+      summary: { checked: 0, passed: 0, missing: 0, mismatches: 0, skipped: Object.keys(isObject(pack.assets) ? pack.assets : {}).length },
+    };
+  }
+  const assets = isObject(pack.assets) ? pack.assets : {};
+  for (const [assetKey, manifest] of Object.entries(assets)) {
+    if (!manifest || !manifest.hash) {
+      skipped.push({ path: assetKey, reason: 'missing-manifest-hash' });
+      continue;
+    }
+    if (/^(https?:|data:)/i.test(assetKey)) {
+      skipped.push({ path: assetKey, reason: 'remote-or-data-uri' });
+      continue;
+    }
+    let file = null;
+    try {
+      file = assetFilePath(dataFile, assetKey, options.assetRoot, pack.meta && pack.meta.assetBase);
+      if (consumedFiles) consumedFiles[file] = sha256File(file);
+      const actualHash = sha1File(file);
+      const item = { path: assetKey, file, expected: manifest.hash, actual: actualHash, status: actualHash === manifest.hash ? 'passed' : 'mismatch' };
+      checked.push(item);
+      if (actualHash !== manifest.hash) mismatches.push(item);
+    } catch (error) {
+      const item = { path: assetKey, file, expected: manifest.hash, status: 'missing', error: error.message };
+      missing.push(item);
+    }
+  }
+  return {
+    enabled: Boolean(options.verifyHash),
+    checked,
+    missing,
+    mismatches,
+    skipped,
+    summary: {
+      checked: checked.length,
+      passed: checked.filter((item) => item.status === 'passed').length,
+      missing: missing.length,
+      mismatches: mismatches.length,
+      skipped: skipped.length,
+    },
+  };
+}
+
+function inspectPack({ dataFile, verifyHash = false, assetRoot } = {}) {
+  if (!dataFile) throw new Error('dataFile is required');
+  const loaded = readPack(dataFile);
+  const validation = loader.validate(loaded.pack);
+  const consumedFiles = { [path.resolve(dataFile)]: loaded.digest };
+  const assets = inspectAssets(loaded.pack, dataFile, { verifyHash, assetRoot, consumedFiles });
+  return {
+    dataFile: path.resolve(dataFile),
+    digest: loaded.digest,
+    pack: loaded.pack,
+    inventory: packInventory(loaded.pack),
+    validation,
+    assets,
+    consumedFiles,
+  };
+}
+
+module.exports = { sha256Bytes, packInventory, readPack, assetFilePath, inspectAssets, inspectPack };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-rules-core.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-rules-core.js
new file mode 100644
index 0000000..3787fdc
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-pack-rules-core.js
@@ -0,0 +1,140 @@
+'use strict';
+
+/* Structured, reusable data-rules evaluator. The legacy CLI renders this result. */
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function validateRulesDocument(rulesDoc) {
+  const errors = [];
+  if (!isObject(rulesDoc)) return ['rules document must be an object'];
+  if (rulesDoc.rulesVersion !== '1.0') errors.push('rulesVersion must be "1.0"');
+  if (typeof rulesDoc.libId !== 'string' || !rulesDoc.libId) errors.push('libId must be a non-empty string');
+  if (!isObject(rulesDoc.profile)) errors.push('profile is required');
+  if (!Array.isArray(rulesDoc.rules) || !rulesDoc.rules.length) errors.push('rules must be a non-empty array');
+  const ids = new Set();
+  (Array.isArray(rulesDoc.rules) ? rulesDoc.rules : []).forEach((rule, index) => {
+    const at = `rules[${index}]`;
+    if (!isObject(rule)) {
+      errors.push(`${at} must be an object`);
+      return;
+    }
+    for (const field of ['id', 'level', 'subject', 'rule', 'source']) {
+      if (typeof rule[field] !== 'string' || !rule[field]) errors.push(`${at}.${field} must be a non-empty string`);
+    }
+    if (rule.level && !['hard', 'soft'].includes(rule.level)) errors.push(`${at}.level must be "hard" or "soft"`);
+    if (rule.source && !['observed', 'extracted', 'human'].includes(rule.source)) errors.push(`${at}.source must be observed/extracted/human`);
+    if (rule.check !== undefined && rule.check !== null && typeof rule.check !== 'string') errors.push(`${at}.check must be a JS expression string or null`);
+    if (rule.id) {
+      if (ids.has(rule.id)) errors.push(`${at}.id "${rule.id}" is duplicated`);
+      ids.add(rule.id);
+    }
+  });
+  return errors;
+}
+
+function emptyCounts() {
+  return { total: 0, passed: 0, failed: 0, errors: 0, noCheck: 0, hardFail: 0, softFail: 0 };
+}
+
+function executeRules(rulesDoc, pack, options = {}) {
+  /* Validate the complete document before applying a selection. A malformed
+   * unselected rule must never disappear behind --rule. */
+  const structuralErrors = validateRulesDocument(rulesDoc);
+  if (structuralErrors.length) {
+    return {
+      libId: rulesDoc && rulesDoc.libId,
+      structuralErrors,
+      unknownRuleIds: [],
+      results: [],
+      counts: emptyCounts(),
+      passed: false,
+    };
+  }
+  const requestedRuleIds = options.ruleIds === undefined ? null : options.ruleIds;
+  if (requestedRuleIds !== null && (!Array.isArray(requestedRuleIds) || requestedRuleIds.some(id => typeof id !== 'string' || !id))) {
+    return {
+      libId: rulesDoc.libId,
+      profile: rulesDoc.profile,
+      structuralErrors: [],
+      selectionErrors: ['ruleIds must be an array of non-empty strings'],
+      unknownRuleIds: [],
+      results: [],
+      counts: emptyCounts(),
+      passed: false,
+    };
+  }
+  const requestedSet = requestedRuleIds === null ? null : new Set(requestedRuleIds);
+  const knownIds = new Set(rulesDoc.rules.map(rule => rule.id));
+  const unknownRuleIds = requestedRuleIds === null ? [] : [...requestedSet].filter(id => !knownIds.has(id));
+  if (unknownRuleIds.length) {
+    return {
+      libId: rulesDoc.libId,
+      profile: rulesDoc.profile,
+      structuralErrors: [],
+      selectionErrors: [],
+      unknownRuleIds,
+      results: [],
+      counts: emptyCounts(),
+      passed: false,
+    };
+  }
+  const selectedRules = requestedSet === null ? rulesDoc.rules : rulesDoc.rules.filter(rule => requestedSet.has(rule.id));
+  pack = pack || {};
+  const scope = {
+    entities: pack.entities || {}, relations: pack.relations || [], stages: pack.stages || [],
+    contents: pack.contents || {}, domain: pack.domain || {}, assets: pack.assets || {},
+    aliases: pack.aliases || {}, relationTypes: pack.relationTypes || {}, heroRelTypes: pack.heroRelTypes || {},
+    attributeTypes: pack.attributeTypes || {}, attributeSources: pack.attributeSources || [],
+    kindNameFields: pack.kindNameFields || {}, meta: pack.meta || {}, sameAs: pack.sameAs || [],
+    provenance: pack.provenance || {}, derivations: pack.derivations || {}, pack,
+  };
+  const keys = Object.keys(scope);
+  const results = [];
+  for (const rule of selectedRules) {
+    const base = {
+      id: rule.id,
+      level: rule.level,
+      subject: rule.subject,
+      rule: rule.rule,
+      rationale: rule.rationale || null,
+      evidence: rule.evidence || null,
+      source: rule.source,
+      repairHint: rule.repairHint || null,
+      coveredBy: rule.coveredBy === undefined ? null : rule.coveredBy,
+    };
+    if (!rule.check) {
+      results.push({ ...base, status: 'no-check', passed: null });
+      continue;
+    }
+    try {
+      const fn = new Function(...keys, '"use strict"; return (' + rule.check + ');');
+      const passed = Boolean(fn(...keys.map((key) => scope[key])));
+      results.push({ ...base, status: passed ? 'passed' : 'failed', passed });
+    } catch (error) {
+      results.push({ ...base, status: 'error', passed: false, exception: { name: error.name, message: error.message } });
+    }
+  }
+  const counts = {
+    total: results.length,
+    passed: results.filter((item) => item.status === 'passed').length,
+    failed: results.filter((item) => item.status === 'failed').length,
+    errors: results.filter((item) => item.status === 'error').length,
+    noCheck: results.filter((item) => item.status === 'no-check').length,
+    hardFail: results.filter((item) => item.passed === false && item.level === 'hard').length,
+    softFail: results.filter((item) => item.passed === false && item.level === 'soft').length,
+  };
+  return {
+    libId: rulesDoc.libId,
+    profile: rulesDoc.profile,
+    structuralErrors: [],
+    selectionErrors: [],
+    unknownRuleIds: [],
+    results,
+    counts,
+    passed: counts.hardFail === 0 && counts.errors === 0,
+  };
+}
+
+module.exports = { validateRulesDocument, executeRules };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-patch-executor.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-patch-executor.js
new file mode 100644
index 0000000..eee7a52
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-patch-executor.js
@@ -0,0 +1,255 @@
+'use strict';
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { runCommand } = require('./sg-command-runner.js');
+const { safeRelativePath, matchesGlob, assertNoSymlinkComponents } = require('./sg-path-policy.js');
+const { snapshotTree, diffTrees } = require('./sg-tree-snapshot.js');
+const { sha256Bytes, contentId } = require('./sg-evidence-utils.js');
+
+class PatchError extends Error {
+  constructor(message, kind = 'patch-invalid', details = null) {
+    super(message);
+    this.name = 'PatchError';
+    this.kind = kind;
+    this.details = details;
+  }
+}
+
+function stripPatchPrefix(value) {
+  if (value === '/dev/null') return null;
+  const withoutTimestamp = value.split('\t')[0].trim();
+  return withoutTimestamp.replace(/^[ab]\//, '');
+}
+
+function gitFileMode(statMode) {
+  return '100' + (statMode & 0o777).toString(8).padStart(3, '0');
+}
+
+function parseModeHeaders(lines, from, to) {
+  const modes = {};
+  for (let index = from; index < to; index += 1) {
+    const match = /^(new file mode|deleted file mode) ([0-7]{6})$/.exec(lines[index]);
+    if (!match) continue;
+    const field = match[1] === 'new file mode' ? 'newFileMode' : 'deletedFileMode';
+    if (modes[field]) throw new PatchError(`duplicate ${match[1]} header at line ${index + 1}`);
+    modes[field] = match[2];
+  }
+  if (modes.newFileMode && modes.newFileMode !== '100644') throw new PatchError(`new file mode ${modes.newFileMode} is not supported`, 'policy-not-supported');
+  return modes;
+}
+
+function parseUnifiedDiff(bytes) {
+  const text = Buffer.isBuffer(bytes) ? bytes.toString('utf8') : String(bytes);
+  if (text.includes('\0')) throw new PatchError('patch contains a NUL byte');
+  if (/^(GIT binary patch|Binary files .* differ)$/m.test(text)) throw new PatchError('binary patches are not supported', 'policy-not-supported');
+  if (/^(rename from|rename to|old mode|new mode|new file mode 160000|deleted file mode 160000)/m.test(text)) throw new PatchError('renames, mode changes, and submodules are not supported', 'policy-not-supported');
+  if (!text.startsWith('diff --git ')) throw new PatchError('patch must begin with a diff --git header');
+  const lines = text.split(/\r?\n/);
+  const operations = [];
+  let pendingGit = null;
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (line.startsWith('diff --git ')) {
+      const match = /^diff --git a\/(.+) b\/(.+)$/.exec(line);
+      if (!match) throw new PatchError(`unsupported diff header at line ${index + 1}`);
+      pendingGit = { oldPath: match[1], newPath: match[2], line: index + 1 };
+      continue;
+    }
+    if (!line.startsWith('--- ')) continue;
+    if (index + 1 >= lines.length || !lines[index + 1].startsWith('+++ ')) throw new PatchError(`missing +++ header after line ${index + 1}`);
+    if (!pendingGit) throw new PatchError(`file header is missing its diff --git header at line ${index + 1}`);
+    const modes = parseModeHeaders(lines, pendingGit.line, index);
+    const oldPath = stripPatchPrefix(line.slice(4));
+    const newPath = stripPatchPrefix(lines[index + 1].slice(4));
+    if (!oldPath && !newPath) throw new PatchError(`invalid /dev/null pair at line ${index + 1}`);
+    if (oldPath && newPath && oldPath !== newPath) throw new PatchError('renames are not supported', 'policy-not-supported', { oldPath, newPath });
+    const target = safeRelativePath(newPath || oldPath);
+    if (pendingGit) {
+      if (safeRelativePath(pendingGit.oldPath) !== (oldPath || target) || safeRelativePath(pendingGit.newPath) !== (newPath || target)) {
+        throw new PatchError(`diff --git and file headers disagree near line ${index + 1}`);
+      }
+    }
+    const operation = oldPath === null ? 'add' : newPath === null ? 'delete' : 'modify';
+    if (operation === 'add' && modes.deletedFileMode) throw new PatchError(`add entry has a deleted file mode header: ${target}`);
+    if (operation === 'delete' && modes.newFileMode) throw new PatchError(`delete entry has a new file mode header: ${target}`);
+    if (operation === 'modify' && (modes.newFileMode || modes.deletedFileMode)) throw new PatchError(`modify entry must not contain add/delete mode headers: ${target}`);
+    let hunks = 0;
+    let cursor = index + 2;
+    while (cursor < lines.length && !lines[cursor].startsWith('diff --git ') && !lines[cursor].startsWith('--- ')) {
+      if (lines[cursor].startsWith('@@ ')) hunks += 1;
+      cursor += 1;
+    }
+    if (hunks === 0) throw new PatchError(`patch entry has no hunks: ${target}`);
+    operations.push({ operation, path: target, oldPath, newPath, hunks, modes, headerLine: index + 1 });
+    pendingGit = null;
+  }
+  if (!operations.length) throw new PatchError('patch contains no unified diff file entries');
+  const seen = new Set();
+  for (const operation of operations) {
+    if (seen.has(operation.path)) throw new PatchError(`patch contains duplicate file entries: ${operation.path}`);
+    seen.add(operation.path);
+  }
+  return { text, operations };
+}
+
+function policyForPath(filePolicy, operation, relativePath) {
+  const forbidden = (filePolicy.forbidden || []).find((pattern) => matchesGlob(relativePath, pattern));
+  if (forbidden) return { allowed: false, reason: `forbidden by ${forbidden}`, deniedBy: forbidden, allowedBy: null };
+  const allowed = (filePolicy.allowed || []).find((entry) => entry.operations.includes(operation) && matchesGlob(relativePath, entry.pattern));
+  if (!allowed) return { allowed: false, reason: `no allowed ${operation} rule matches ${relativePath}`, deniedBy: null, allowedBy: null };
+  return { allowed: true, reason: null, deniedBy: null, allowedBy: allowed.pattern };
+}
+
+function validatePatchPolicy(parsed, patchBytes, manifest, workspaceRoot) {
+  const violations = [];
+  if (patchBytes.length > manifest.filePolicy.maxPatchBytes) violations.push(`patch bytes ${patchBytes.length} exceed maxPatchBytes ${manifest.filePolicy.maxPatchBytes}`);
+  if (parsed.operations.length > manifest.filePolicy.maxChangedFiles) violations.push(`patch changes ${parsed.operations.length} files; maxChangedFiles is ${manifest.filePolicy.maxChangedFiles}`);
+  for (const operation of parsed.operations) {
+    const policy = policyForPath(manifest.filePolicy, operation.operation, operation.path);
+    if (operation.operation === 'add' && operation.modes.newFileMode !== '100644') violations.push(`add ${operation.path} must declare new file mode 100644`);
+    if (operation.operation === 'delete' && !operation.modes.deletedFileMode) violations.push(`delete ${operation.path} must declare its deleted file mode`);
+    operation.policy = policy;
+    if (!policy.allowed) violations.push(`${operation.operation} ${operation.path}: ${policy.reason}`);
+    const target = path.resolve(workspaceRoot, operation.path);
+    try { assertNoSymlinkComponents(target, { root: workspaceRoot }); }
+    catch (error) { violations.push(`${operation.path}: ${error.message}`); }
+    if (operation.operation === 'add' && fs.existsSync(target)) violations.push(`add target already exists: ${operation.path}`);
+    if (operation.operation !== 'add' && !fs.existsSync(target)) violations.push(`${operation.operation} target does not exist: ${operation.path}`);
+    if (fs.existsSync(target)) {
+      const stat = fs.lstatSync(target);
+      if (!stat.isFile() || stat.isSymbolicLink()) violations.push(`patch target must be a regular non-symlink file: ${operation.path}`);
+      if (manifest.filePolicy.allowHardlinks === false && stat.nlink > 1) violations.push(`hardlinked patch target is forbidden: ${operation.path}`);
+      if (operation.operation === 'delete' && operation.modes.deletedFileMode && gitFileMode(stat.mode) !== operation.modes.deletedFileMode) violations.push(`delete mode for ${operation.path} does not match baseline: expected ${gitFileMode(stat.mode)}, received ${operation.modes.deletedFileMode}`);
+    }
+  }
+  return { allowed: violations.length === 0, violations, operations: parsed.operations };
+}
+
+function validateAppliedDiff(diff, manifest) {
+  const violations = [];
+  const operations = [];
+  for (const change of diff.changes) {
+    const structuralEntry = change.after || change.before;
+    if (structuralEntry && structuralEntry.kind === 'directory' && ['add', 'delete'].includes(change.change)) continue;
+    const operation = change.change;
+    if (!['add', 'modify', 'delete'].includes(operation)) {
+      violations.push(`${operation} is not supported for ${change.path}`);
+      operations.push({ operation, path: change.path, allowed: false, reason: 'operation not supported' });
+      continue;
+    }
+    const entry = operation === 'delete' ? change.before : change.after;
+    if (entry && entry.kind !== 'file') violations.push(`${operation} produced non-regular entry: ${change.path}`);
+    if (operation === 'add' && entry && entry.mode !== 0o644) violations.push(`add produced unsupported mode ${entry.mode.toString(8)}: ${change.path}`);
+    if (operation === 'modify' && change.before && change.after && change.before.mode !== change.after.mode) violations.push(`modify changed file mode: ${change.path}`);
+    const policy = policyForPath(manifest.filePolicy, operation, change.path);
+    operations.push({ operation, path: change.path, allowed: policy.allowed, reason: policy.reason, before: change.before || null, after: change.after || null });
+    if (!policy.allowed) violations.push(`${operation} ${change.path}: ${policy.reason}`);
+  }
+  if (operations.length > manifest.filePolicy.maxChangedFiles) violations.push(`actual tree changes ${operations.length} files; maxChangedFiles is ${manifest.filePolicy.maxChangedFiles}`);
+  return { allowed: violations.length === 0, violations, operations };
+}
+
+function capturePatchTargets(root, operations) {
+  const originals = new Map();
+  for (const operation of operations) {
+    const target = path.join(root, operation.path);
+    if (!fs.existsSync(target)) originals.set(operation.path, { existed: false });
+    else {
+      const stat = fs.lstatSync(target);
+      originals.set(operation.path, { existed: true, bytes: fs.readFileSync(target), mode: stat.mode & 0o7777 });
+    }
+  }
+  return originals;
+}
+
+function restorePatchTargets(root, originals) {
+  const errors = [];
+  for (const [relative, original] of originals.entries()) {
+    const target = path.join(root, relative);
+    try {
+      if (!original.existed) fs.rmSync(target, { recursive: true, force: true });
+      else {
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(target, original.bytes, { mode: original.mode });
+        fs.chmodSync(target, original.mode);
+      }
+    } catch (error) { errors.push(`${relative}: ${error.message}`); }
+  }
+  if (errors.length) throw new Error('patch rollback incomplete: ' + errors.join('; '));
+}
+
+function applyPatch({ manifest, workspaceRoot, patchBytes, taskId = manifest && manifest.taskId, timeoutMs = 120000 } = {}) {
+  if (!manifest || !manifest.filePolicy || !manifest.patchPolicy) throw new PatchError('validated task manifest is required', 'input-error');
+  if (manifest.patchPolicy.format !== 'unified-diff' || manifest.patchPolicy.fuzz !== 0 || manifest.patchPolicy.allowBinary !== false) throw new PatchError('unsupported patch policy', 'policy-not-supported');
+  const root = fs.realpathSync(path.resolve(workspaceRoot));
+  const bytes = Buffer.isBuffer(patchBytes) ? patchBytes : Buffer.from(String(patchBytes || ''), 'utf8');
+  const before = snapshotTree(root, { errorOnSpecialFile: true, exclude: false });
+  let parsed;
+  let preflight;
+  try {
+    parsed = parseUnifiedDiff(bytes);
+    preflight = validatePatchPolicy(parsed, bytes, manifest, root);
+    if (!preflight.allowed) throw new PatchError('patch violates file policy', 'policy-violation', preflight.violations);
+  } catch (error) {
+    const audit = buildAudit({ taskId, bytes, before, parsed, preflight, status: 'rejected', failure: error });
+    error.audit = audit;
+    throw error;
+  }
+  const originals = capturePatchTargets(root, parsed.operations);
+  const patchFile = path.join(os.tmpdir(), `sg-agent-patch-${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.diff`);
+  fs.writeFileSync(patchFile, bytes, { mode: 0o600, flag: 'wx' });
+  let checkRun;
+  let applyRun;
+  try {
+    checkRun = runCommand({ argv: ['git', 'apply', '--check', '--whitespace=error-all', patchFile], cwd: root, allowedRoot: root, timeoutMs, maxOutputBytes: 1048576 });
+    if (checkRun.error || checkRun.exitCode !== 0) throw new PatchError('git apply --check rejected the patch', 'patch-invalid', { checkRun });
+    applyRun = runCommand({ argv: ['git', 'apply', '--whitespace=error-all', patchFile], cwd: root, allowedRoot: root, timeoutMs, maxOutputBytes: 1048576 });
+    if (applyRun.error || applyRun.exitCode !== 0) throw new PatchError('git apply failed after a successful check', 'infra-error', { applyRun });
+    const after = snapshotTree(root, { errorOnSpecialFile: true, exclude: false });
+    const diff = diffTrees(before, after, { detectRenames: true });
+    const postflight = validateAppliedDiff(diff, manifest);
+    const declared = parsed.operations.map((item) => `${item.operation}:${item.path}`).sort();
+    const actual = postflight.operations.map((item) => `${item.operation}:${item.path}`).sort();
+    if (JSON.stringify(declared) !== JSON.stringify(actual)) postflight.violations.push(`declared patch operations do not match actual tree changes; declared=${declared.join(',')} actual=${actual.join(',')}`);
+    postflight.allowed = postflight.violations.length === 0;
+    if (!postflight.allowed) throw new PatchError('applied patch violates postflight file policy', 'policy-violation', postflight.violations);
+    const audit = buildAudit({ taskId, bytes, before, after, parsed, preflight, postflight, checkRun, applyRun, status: 'applied' });
+    return { audit, before, after, diff, parsed };
+  } catch (error) {
+    const current = snapshotTree(root, { errorOnSpecialFile: true, exclude: false });
+    if (current.treeSha256 !== before.treeSha256) restorePatchTargets(root, originals);
+    const restored = snapshotTree(root, { errorOnSpecialFile: true, exclude: false });
+    if (restored.treeSha256 !== before.treeSha256) throw new PatchError('patch rollback did not restore the workspace tree', 'infra-error', { before: before.treeSha256, restored: restored.treeSha256 });
+    const audit = buildAudit({ taskId, bytes, before, parsed, preflight, checkRun, applyRun, status: 'rejected', failure: error });
+    error.audit = audit;
+    throw error;
+  } finally {
+    try { fs.unlinkSync(patchFile); } catch (_) { /* already absent */ }
+  }
+}
+
+function summarizeRun(run) {
+  if (!run) return null;
+  return { argv: run.argv, cwd: run.cwd, exitCode: run.exitCode, signal: run.signal, timedOut: run.timedOut, durationMs: run.durationMs, stdoutSha256: sha256Bytes(run.stdout || ''), stderrSha256: sha256Bytes(run.stderr || ''), error: run.error || null };
+}
+
+function buildAudit({ taskId, bytes, before, after = null, parsed = null, preflight = null, postflight = null, checkRun = null, applyRun = null, status, failure = null }) {
+  const audit = {
+    auditVersion: '1.0', auditId: null, kind: 'patch-audit', taskId,
+    status, patchSha256: sha256Bytes(bytes), patchBytes: bytes.length,
+    beforeTreeSha256: 'sha256:' + before.treeSha256,
+    afterTreeSha256: after ? 'sha256:' + after.treeSha256 : null,
+    declaredOperations: parsed ? parsed.operations.map((item) => ({ operation: item.operation, path: item.path, hunks: item.hunks, modes: item.modes, policy: item.policy || null })) : [],
+    actualOperations: postflight ? postflight.operations : [],
+    preflight: preflight ? { allowed: preflight.allowed, violations: preflight.violations } : null,
+    postflight: postflight ? { allowed: postflight.allowed, violations: postflight.violations } : null,
+    commands: { check: summarizeRun(checkRun), apply: summarizeRun(applyRun) },
+    failure: failure ? { kind: failure.kind || 'infra-error', name: failure.name, message: failure.message, details: failure.details || null } : null,
+    capabilities: { osSandbox: false, networkIsolation: false, processIsolation: false, sourceTreeVerifiedByRunner: true, disposableWorkspace: true },
+  };
+  audit.auditId = contentId('patch-audit', audit, ['auditId']);
+  return audit;
+}
+
+module.exports = { PatchError, parseUnifiedDiff, policyForPath, validatePatchPolicy, validateAppliedDiff, applyPatch, buildAudit };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-path-policy.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-path-policy.js
new file mode 100644
index 0000000..78b738e
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-path-policy.js
@@ -0,0 +1,311 @@
+'use strict';
+
+/*
+ * Small, dependency-free filesystem policy primitives used by repository tools.
+ * All paths are treated as untrusted input until they have passed the relevant
+ * checks below. The module deliberately does not create, remove, or mutate
+ * files.
+ */
+const fs = require('node:fs');
+const path = require('node:path');
+
+const CONTROL_PATH = /[\u0000-\u001f\u007f]/;
+const WINDOWS_ABSOLUTE = /^[A-Za-z]:/;
+
+function pathError(code, message, details) {
+  const error = new Error(message);
+  error.code = code;
+  if (details !== undefined) error.details = details;
+  return error;
+}
+
+function assertPathString(value, name = 'path') {
+  if (typeof value !== 'string' || value.length === 0) {
+    throw pathError('INVALID_PATH', `${name} must be a non-empty string`);
+  }
+  if (CONTROL_PATH.test(value)) {
+    throw pathError('INVALID_PATH', `${name} contains a control character`);
+  }
+}
+
+function canonicalPath(value, options = {}) {
+  assertPathString(value);
+  const absolute = path.resolve(value);
+  const mustExist = options.mustExist === true;
+  try {
+    return fs.realpathSync.native(absolute);
+  } catch (error) {
+    if (mustExist || (error && error.code !== 'ENOENT' && error.code !== 'ENOTDIR')) throw error;
+
+    // realpathSync cannot resolve a path which does not exist yet. Resolve the
+    // nearest existing ancestor, then append the non-existent suffix. This
+    // still canonicalizes symlinked parents and makes containment checks safe
+    // for output paths.
+    const suffix = [];
+    let current = absolute;
+    while (true) {
+      try {
+        const physical = fs.realpathSync.native(current);
+        return path.join(physical, ...suffix.reverse());
+      } catch (ancestorError) {
+        if (ancestorError && (ancestorError.code === 'ENOENT' || ancestorError.code === 'ENOTDIR')) {
+          const parent = path.dirname(current);
+          if (parent === current) throw ancestorError;
+          suffix.push(path.basename(current));
+          current = parent;
+          continue;
+        }
+        throw ancestorError;
+      }
+    }
+  }
+}
+
+function sameFile(left, right, options = {}) {
+  const leftPath = canonicalPath(left, options);
+  const rightPath = canonicalPath(right, options);
+  try {
+    // canonical paths cover symlink aliases; device/inode also covers hard
+    // links, which are the other common meaning of “same file”. A missing
+    // path is not a file, even when both arguments spell the same path.
+    const leftStat = fs.statSync(leftPath);
+    const rightStat = fs.statSync(rightPath);
+    return leftPath === rightPath || (leftStat.dev === rightStat.dev && leftStat.ino === rightStat.ino);
+  } catch (error) {
+    if (options.mustExist) throw error;
+    return false;
+  }
+}
+
+function safeRelativePath(value, options = {}) {
+  if (value === '' && options.allowEmpty) return '';
+  assertPathString(value, 'relative path');
+  if (path.isAbsolute(value) || WINDOWS_ABSOLUTE.test(value) || value.startsWith('\\')) {
+    throw pathError('UNSAFE_RELATIVE_PATH', `path must be relative: ${value}`);
+  }
+  // Treat both separators as separators. This prevents a Windows-style
+  // traversal from becoming a harmless filename when checked on POSIX.
+  const pieces = value.replace(/\\/g, '/').split('/');
+  if (pieces.some((piece) => piece === '..')) {
+    throw pathError('UNSAFE_RELATIVE_PATH', `path contains a parent traversal: ${value}`);
+  }
+  if (pieces.length === 1 && pieces[0] === '.' && options.allowEmpty) return '';
+  if (pieces.some((piece) => piece === '' || piece === '.')) {
+    throw pathError('UNSAFE_RELATIVE_PATH', `path contains an empty or dot segment: ${value}`);
+  }
+  return pieces.join('/');
+}
+
+function isSafeRelativePath(value, options) {
+  try {
+    safeRelativePath(value, options);
+    return true;
+  } catch (_) {
+    return false;
+  }
+}
+
+function isWithinRoot(root, target, options = {}) {
+  const physicalRoot = canonicalPath(root, options);
+  const physicalTarget = canonicalPath(target, options);
+  const relative = path.relative(physicalRoot, physicalTarget);
+  if (relative === '') return options.allowRoot !== false;
+  return relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
+}
+
+function assertWithinRoot(root, target, options = {}) {
+  if (!isWithinRoot(root, target, options)) {
+    throw pathError('PATH_OUTSIDE_ROOT', `path is outside allowed root: ${target}`, {
+      root: canonicalPath(root, options),
+      target: canonicalPath(target, options),
+    });
+  }
+  return canonicalPath(target, options);
+}
+
+function existingPathComponents(value) {
+  assertPathString(value);
+  const absolute = path.resolve(value);
+  const components = [];
+  let current = absolute;
+  while (true) {
+    components.push(current);
+    const parent = path.dirname(current);
+    if (parent === current) break;
+    current = parent;
+  }
+  return components.reverse();
+}
+
+function symlinkComponent(value, options = {}) {
+  const components = existingPathComponents(value);
+  let startIndex = 0;
+  if (options.root) {
+    const root = path.resolve(options.root);
+    const rootIndex = components.indexOf(root);
+    if (rootIndex !== -1) startIndex = rootIndex;
+  }
+  if (options.root && options.includeRoot === false) startIndex += 1;
+  for (let index = startIndex; index < components.length; index += 1) {
+    const component = components[index];
+    try {
+      if (fs.lstatSync(component).isSymbolicLink()) return component;
+    } catch (error) {
+      if (error.code !== 'ENOENT' && error.code !== 'ENOTDIR') throw error;
+    }
+  }
+  return null;
+}
+
+function hasSymlinkComponent(value, options) {
+  return symlinkComponent(value, options) !== null;
+}
+
+function assertNoSymlinkComponents(value, options) {
+  const component = symlinkComponent(value, options);
+  if (component) {
+    throw pathError('SYMLINK_COMPONENT', `path contains a symlink component: ${value}`, { component });
+  }
+  return true;
+}
+
+function globPatternRegex(pattern) {
+  assertPathString(pattern, 'glob pattern');
+  const normalized = pattern.replace(/\\/g, '/');
+  let source = '^';
+  for (let index = 0; index < normalized.length; index += 1) {
+    const character = normalized[index];
+    if (character === '*' && normalized[index + 1] === '*') {
+      if (normalized[index + 2] === '/') {
+        source += '(?:.*/)?';
+        index += 2;
+      } else if (index + 2 === normalized.length || normalized[index + 2] !== '/') {
+        // A trailing globstar also matches the directory itself, as common
+        // ignore-file glob syntax does (foo/** matches foo and foo/child).
+        if (index > 0 && normalized[index - 1] === '/') {
+          source = source.slice(0, -1) + '(?:/.*)?';
+        } else {
+          source += '.*';
+        }
+        index += 1;
+      } else {
+        source += '.*';
+        index += 1;
+      }
+    } else if (character === '*') {
+      source += '[^/]*';
+    } else if (character === '?') {
+      // '?' is intentionally literal: the policy contract only has * and **.
+      source += '\\?';
+    } else {
+      source += character.replace(/[.+^${}()|[\\]\\\\]/g, '\\\\$&');
+    }
+  }
+  return new RegExp(`${source}$`);
+}
+
+function matchesGlob(value, pattern) {
+  const relative = safeRelativePath(value, { allowEmpty: true });
+  return globPatternRegex(pattern).test(relative);
+}
+
+function asPatterns(value) {
+  if (value === undefined || value === null) return [];
+  if (typeof value === 'string') return [value];
+  if (!Array.isArray(value) || value.some((item) => typeof item !== 'string')) {
+    throw pathError('INVALID_GLOB_POLICY', 'allow/deny patterns must be strings or arrays of strings');
+  }
+  return value;
+}
+
+function evaluateGlobPolicy(value, policy = {}) {
+  const relative = safeRelativePath(value, { allowEmpty: true });
+  const deny = asPatterns(policy.deny || policy.denied);
+  const allow = asPatterns(policy.allow || policy.allowed);
+  const deniedBy = deny.find((pattern) => matchesGlob(relative || '.', pattern));
+  if (deniedBy !== undefined) return { allowed: false, path: relative, deniedBy, allowedBy: null };
+  if (allow.length === 0) return { allowed: true, path: relative, deniedBy: null, allowedBy: null };
+  const allowedBy = allow.find((pattern) => matchesGlob(relative || '.', pattern));
+  return { allowed: allowedBy !== undefined, path: relative, deniedBy: null, allowedBy: allowedBy || null };
+}
+
+function isPathAllowed(value, policy) {
+  return evaluateGlobPolicy(value, policy).allowed;
+}
+
+function operationPolicy(config = {}) {
+  const root = config.root || config.allowedRoot || null;
+  const operations = config.operations || config.operation || {};
+
+  function check(operation, target, options = {}) {
+    const selected = operations[operation] || config[operation] || config;
+    const selectedRoot = options.root || root;
+    let relative = target;
+    let canonicalTarget = null;
+    if (selectedRoot) {
+      canonicalTarget = assertWithinRoot(selectedRoot, target, {
+        allowRoot: options.allowRoot,
+        mustExist: options.mustExist,
+      });
+      relative = path.relative(canonicalPath(selectedRoot), canonicalTarget).split(path.sep).join('/');
+    }
+    const globResult = evaluateGlobPolicy(relative, selected || {});
+    return {
+      ...globResult,
+      operation,
+      target,
+      canonicalTarget,
+      root: selectedRoot,
+    };
+  }
+
+  function assert(operation, target, options = {}) {
+    const result = check(operation, target, options);
+    if (!result.allowed) {
+      const reason = result.deniedBy ? `denied by ${result.deniedBy}` : 'not included by allow policy';
+      throw pathError('OPERATION_NOT_ALLOWED', `${operation} is not allowed for ${target}: ${reason}`, result);
+    }
+    return result;
+  }
+
+  return {
+    check,
+    evaluate: check,
+    isAllowed: (operation, target, options) => check(operation, target, options).allowed,
+    assert,
+    assertAllowed: assert,
+  };
+}
+
+function checkOperation(operation, target, config) {
+  return operationPolicy(config).check(operation, target);
+}
+
+function assertOperationAllowed(operation, target, config) {
+  return operationPolicy(config).assert(operation, target);
+}
+
+module.exports = {
+  canonicalPath,
+  sameFile,
+  safeRelativePath,
+  assertSafeRelativePath: safeRelativePath,
+  isSafeRelativePath,
+  isWithinRoot,
+  isPathWithinRoot: isWithinRoot,
+  assertWithinRoot,
+  symlinkComponent,
+  hasSymlinkComponent,
+  hasSymlinkComponents: hasSymlinkComponent,
+  assertNoSymlinkComponent: assertNoSymlinkComponents,
+  assertNoSymlinkComponents,
+  matchesGlob,
+  globMatch: matchesGlob,
+  evaluateGlobPolicy,
+  isPathAllowed,
+  pathAllowed: isPathAllowed,
+  operationPolicy,
+  createOperationPolicy: operationPolicy,
+  checkOperation,
+  assertOperationAllowed,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-recrawl-review.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-recrawl-review.js
new file mode 100644
index 0000000..5164754
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-recrawl-review.js
@@ -0,0 +1,388 @@
+'use strict';
+
+/*
+ * Pure helpers shared by recrawl-skeleton and candidate-pack.
+ * No filesystem, process, or clock access belongs in this module.
+ */
+const crypto = require('node:crypto');
+require('./sg-data-loader.js');
+
+const OBSERVATION_VERSION = '1.0';
+const REVIEWABLE = new Set(['gap', 'conflict', 'unsupported']);
+const OBSERVATION_META_FIELDS = new Set(['sourceUrl', 'origin', 'fetchedAt', 'confidence']);
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function sha256(value) {
+  const bytes = Buffer.isBuffer(value) ? value : Buffer.from(String(value), 'utf8');
+  return 'sha256:' + crypto.createHash('sha256').update(bytes).digest('hex');
+}
+
+function stableJson(value) {
+  return JSON.stringify(value);
+}
+
+function normalizeRecords(rawRecords) {
+  if (!Array.isArray(rawRecords)) throw new Error('records.json must contain an array of names or record objects');
+  return rawRecords.map((record, inputIndex) => {
+    if (typeof record === 'string') {
+      if (!record.trim()) throw new Error(`records[${inputIndex}] must contain a non-empty name`);
+      return {
+        inputIndex,
+        crawledName: record.trim(),
+        fields: {},
+        raw: record,
+      };
+    }
+    if (!isObject(record)) throw new Error(`records[${inputIndex}] must be a string or object`);
+    const { crawledName, name, ...fields } = record;
+    const resolvedName = crawledName || name;
+    if (typeof resolvedName !== 'string' || !resolvedName.trim()) {
+      throw new Error(`records[${inputIndex}] must contain crawledName or name`);
+    }
+    return {
+      inputIndex,
+      crawledName: resolvedName.trim(),
+      fields,
+      raw: record,
+    };
+  });
+}
+
+function resolveResolution(pack, name) {
+  if (isObject(pack.entities) && Object.prototype.hasOwnProperty.call(pack.entities, name)) {
+    return { status: 'hit', entityId: name, via: 'id' };
+  }
+  const alias = isObject(pack.aliases) ? pack.aliases[name] : undefined;
+  if (alias === undefined) return { status: 'miss', via: 'none' };
+  const entityId = isObject(alias) ? alias.id : alias;
+  if (entityId && isObject(pack.entities) && Object.prototype.hasOwnProperty.call(pack.entities, entityId)) {
+    const resolution = { status: 'hit', entityId, via: 'alias' };
+    if (isObject(alias) && alias.context !== undefined) resolution.aliasContext = alias.context;
+    return resolution;
+  }
+  return { status: 'miss', via: 'invalid-alias' };
+}
+
+function normalizeName(value) {
+  return String(value).toLowerCase().normalize('NFD').replace(/[\u0300-\u036f]/g, '').replace(/[\s·・\-_.'"()（）]+/g, '');
+}
+
+function levenshtein(a, b) {
+  const m = a.length;
+  const n = b.length;
+  if (!m) return n;
+  if (!n) return m;
+  const dp = new Uint16Array(n + 1);
+  for (let j = 0; j <= n; j += 1) dp[j] = j;
+  for (let i = 1; i <= m; i += 1) {
+    let previous = dp[0];
+    dp[0] = i;
+    for (let j = 1; j <= n; j += 1) {
+      const saved = dp[j];
+      dp[j] = Math.min(
+        dp[j] + 1,
+        dp[j - 1] + 1,
+        previous + (a[i - 1] === b[j - 1] ? 0 : 1),
+      );
+      previous = saved;
+    }
+  }
+  return dp[n];
+}
+
+function pairScore(a, b) {
+  const left = normalizeName(a);
+  const right = normalizeName(b);
+  if (!left || !right) return 0;
+  if (left === right) return 1;
+  if (left.startsWith(right) || right.startsWith(left)) {
+    return 0.6 + 0.35 * (Math.min(left.length, right.length) / Math.max(left.length, right.length));
+  }
+  if (left.includes(right) || right.includes(left)) {
+    return Math.min(left.length, right.length) / Math.max(left.length, right.length) * 0.95;
+  }
+  return 1 - levenshtein(left, right) / Math.max(left.length, right.length);
+}
+
+function similarity(a, b) {
+  const full = pairScore(a, b);
+  const leftTokens = String(a).split(/[\s·・\-_]+/).filter(Boolean);
+  const rightTokens = String(b).split(/[\s·・\-_]+/).filter(Boolean);
+  let best = 0;
+  for (const left of leftTokens) for (const right of rightTokens) best = Math.max(best, pairScore(left, right));
+  return Math.max(full, best * 0.9);
+}
+
+function mappedField(pack, field) {
+  const fieldMap = pack.meta && pack.meta.recrawlFieldMap;
+  if (isObject(fieldMap) && Object.prototype.hasOwnProperty.call(fieldMap, field) && typeof fieldMap[field] === 'string' && fieldMap[field]) {
+    return fieldMap[field];
+  }
+  return field;
+}
+
+function nameField(pack, id, entity) {
+  const fields = pack.kindNameFields;
+  const field = isObject(fields) && Object.prototype.hasOwnProperty.call(fields, entity.kind) ? fields[entity.kind] : null;
+  return (typeof field === 'string' && entity[field]) || entity.name || id;
+}
+
+function buildSurfaces(pack) {
+  const surfaces = [];
+  for (const [id, entity] of Object.entries(pack.entities || {})) {
+    surfaces.push({ id, text: id, via: 'id' });
+    const display = nameField(pack, id, entity);
+    if (display && display !== id) surfaces.push({ id, text: display, via: 'name' });
+  }
+  for (const [alias, target] of Object.entries(pack.aliases || {})) {
+    const id = target && typeof target === 'object' ? target.id : target;
+    if (id && (pack.entities || {})[id]) surfaces.push({ id, text: alias, via: 'alias' });
+  }
+  return surfaces;
+}
+
+function candidatesFor(pack, name, topN = 3, stable = true) {
+  const scored = new Map();
+  for (const surface of buildSurfaces(pack)) {
+    const score = similarity(name, surface.text);
+    const current = scored.get(surface.id);
+    if (!current || score > current.score || (stable && score === current.score && surface.text < current.text)) {
+      scored.set(surface.id, { score, via: surface.via, text: surface.text });
+    }
+  }
+  return [...scored.entries()]
+    .map(([id, value]) => ({ id, score: +value.score.toFixed(3), matchedOn: `${value.via}:"${value.text}"`, _text: value.text }))
+    .filter((candidate) => candidate.score >= 0.5)
+    .sort((a, b) => stable
+      ? (b.score - a.score || a.id.localeCompare(b.id) || a._text.localeCompare(b._text))
+      : b.score - a.score)
+    .slice(0, topN)
+    .map(({ _text, ...candidate }) => candidate);
+}
+
+function isCalendarDate(value) {
+  if (!/^\d{4}-\d{2}-\d{2}$/.test(value || '')) return false;
+  const date = new Date(`${value}T00:00:00Z`);
+  return date.toISOString().slice(0, 10) === value;
+}
+
+function isHttpUrl(value) {
+  if (typeof value !== 'string' || /[\u0000-\u001f\u007f]/.test(value)) return false;
+  try {
+    const url = new URL(value);
+    return (url.protocol === 'http:' || url.protocol === 'https:') && Boolean(url.hostname);
+  } catch (_) {
+    return false;
+  }
+}
+
+function isEmptyBaseline(value) {
+  return value === undefined || value === null || value === '' || value === '待定';
+}
+
+function isIgnoredField(field) {
+  return field === 'crawledName' || field === 'name';
+}
+
+function legacyCrossCheck(pack, id, fields) {
+  const entity = pack.entities && pack.entities[id];
+  if (!entity) return { status: 'no-baseline' };
+  const result = { agree: [], conflict: [], gap: [] };
+  for (const [field, crawled] of Object.entries(fields)) {
+    if (isIgnoredField(field) || crawled === undefined || crawled === null || crawled === '') continue;
+    const baselineField = mappedField(pack, field);
+    const hasBaseline = Object.prototype.hasOwnProperty.call(entity, baselineField);
+    const baseline = hasBaseline ? entity[baselineField] : undefined;
+    if (isEmptyBaseline(baseline)) {
+      result.gap.push({ field, baselineField, baseline, crawled });
+    } else {
+      const baselineNormalized = String(baseline).replace(/ 饰$/, '').trim();
+      const crawledNormalized = String(crawled).replace(/ 饰$/, '').trim();
+      if (baselineNormalized === crawledNormalized) result.agree.push(field);
+      else result.conflict.push({ field, baselineField, baseline, crawled });
+    }
+  }
+  return result;
+}
+
+function checkValue(pack, id, field, crawled) {
+  const entity = pack.entities[id];
+  const baselineField = mappedField(pack, field);
+  const baselineExists = Object.prototype.hasOwnProperty.call(entity, baselineField);
+  const baseline = baselineExists ? entity[baselineField] : undefined;
+  const base = {
+    crawledField: field,
+    baselineField,
+    baselineExists,
+    baseline,
+    crawled,
+  };
+  if (OBSERVATION_META_FIELDS.has(field)) return { ...base, classification: 'unsupported', reason: 'crawl metadata is provenance, not an entity field' };
+  if (field.includes('.') || field.includes('[') || field.includes(']')) {
+    return { ...base, classification: 'unsupported', reason: 'nested field paths are not supported' };
+  }
+  if (field === '__proto__' || field === 'prototype' || field === 'constructor') {
+    return { ...base, classification: 'unsupported', reason: 'reserved object key' };
+  }
+  if (typeof crawled !== 'string' || crawled === '') {
+    return { ...base, classification: 'unsupported', reason: 'only non-empty string observations are supported' };
+  }
+  if (typeof baseline !== 'undefined' && baseline !== null && typeof baseline !== 'string') {
+    return { ...base, classification: 'unsupported', reason: 'baseline field is not a string' };
+  }
+  if (isEmptyBaseline(baseline)) return { ...base, classification: 'gap' };
+  const baselineNormalized = baseline.replace(/ 饰$/, '').trim();
+  const crawledNormalized = crawled.replace(/ 饰$/, '').trim();
+  return {
+    ...base,
+    classification: baselineNormalized === crawledNormalized ? 'agree' : 'conflict',
+  };
+}
+
+function recordId(record) {
+  const material = stableJson({ inputIndex: record.inputIndex, crawledName: record.crawledName, fields: record.fields });
+  return `r${String(record.inputIndex).padStart(6, '0')}-${sha256(material).slice(7, 19)}`;
+}
+
+function itemId(record, suffix) {
+  return `${recordId(record)}:${suffix}`;
+}
+
+function buildLegacyProjection(pack, rawRecords) {
+  const records = normalizeRecords(rawRecords);
+  const hits = [];
+  const misses = [];
+  for (const record of records) {
+    const resolution = resolveResolution(pack, record.crawledName);
+    if (resolution.status === 'hit') {
+      hits.push({
+        crawledName: record.crawledName,
+        id: resolution.entityId,
+        crossCheck: legacyCrossCheck(pack, resolution.entityId, record.fields),
+      });
+    } else {
+      misses.push({ crawledName: record.crawledName, candidates: candidatesFor(pack, record.crawledName, 3, false) });
+    }
+  }
+  return {
+    summary: { total: records.length, hits: hits.length, misses: misses.length },
+    hits,
+    misses,
+    autoMergeable: hits.filter((hit) => hit.crossCheck.gap && hit.crossCheck.gap.length).map((hit) => ({
+      id: hit.id,
+      crawledName: hit.crawledName,
+      gaps: hit.crossCheck.gap,
+    })),
+    needsHumanReview: hits.filter((hit) => hit.crossCheck.conflict && hit.crossCheck.conflict.length).map((hit) => ({
+      id: hit.id,
+      crawledName: hit.crawledName,
+      conflicts: hit.crossCheck.conflict,
+    })),
+  };
+}
+
+function buildCandidateReview({ pack, rawRecords, baselineBytes, recordsBytes, origin, sourceUrl, fetchedAt }) {
+  if (typeof origin !== 'string' || !/^crawl:[^\s]+$/.test(origin.trim())) {
+    throw new Error('candidate-ready mode requires --origin crawl:<source>');
+  }
+  if (!isHttpUrl(sourceUrl)) throw new Error('candidate-ready mode requires an HTTP(S) --source URL with a hostname');
+  if (!isCalendarDate(fetchedAt)) throw new Error('candidate-ready mode requires a real --fetchedAt YYYY-MM-DD date');
+  const records = normalizeRecords(rawRecords);
+  const observations = [];
+  const reviewItems = [];
+  for (const record of records) {
+    const resolution = resolveResolution(pack, record.crawledName);
+    const observation = {
+      recordId: recordId(record),
+      inputIndex: record.inputIndex,
+      crawledName: record.crawledName,
+      rawFields: record.fields,
+      resolution,
+      checks: [],
+    };
+    if (resolution.status === 'hit') {
+      const legacy = legacyCrossCheck(pack, resolution.entityId, record.fields);
+      observation.checks = Object.entries(record.fields)
+        .filter(([field]) => !isIgnoredField(field) && !OBSERVATION_META_FIELDS.has(field))
+        .map(([field, value]) => ({
+          itemId: itemId(record, `field:${field}`),
+          ...checkValue(pack, resolution.entityId, field, value),
+        }));
+      // Keep the legacy calculation as the compatibility source of truth for its projection.
+      observation.legacyCrossCheck = legacy;
+      for (const check of observation.checks) {
+        if (REVIEWABLE.has(check.classification)) {
+          reviewItems.push({
+            itemId: check.itemId,
+            kind: 'field',
+            recordId: observation.recordId,
+            inputIndex: record.inputIndex,
+            entityId: resolution.entityId,
+            classification: check.classification,
+            crawledField: check.crawledField,
+            baselineField: check.baselineField,
+            reason: check.reason,
+          });
+        }
+      }
+    } else {
+      observation.candidates = candidatesFor(pack, record.crawledName);
+      observation.checks = [];
+      reviewItems.push({
+        itemId: itemId(record, 'identity'),
+        kind: 'identity',
+        recordId: observation.recordId,
+        inputIndex: record.inputIndex,
+        crawledName: record.crawledName,
+        classification: 'miss',
+      });
+    }
+    observations.push(observation);
+  }
+  const candidateReview = {
+    version: OBSERVATION_VERSION,
+    baselineSha256: sha256(baselineBytes),
+    recordsSha256: sha256(recordsBytes),
+    origin: origin.trim(),
+    sourceUrl,
+    fetchedAt,
+    observations,
+    reviewItems,
+  };
+  candidateReview.reportId = sha256(stableJson(candidateReview));
+  return candidateReview;
+}
+
+function verifyCandidateReview(report, baselineBytes, recordsBytes) {
+  const candidateReview = report && report.candidateReview;
+  if (!isObject(candidateReview) || candidateReview.version !== OBSERVATION_VERSION) {
+    throw new Error('report is not candidate-ready; rerun recrawl-skeleton with --candidate-ready');
+  }
+  if (candidateReview.baselineSha256 !== sha256(baselineBytes)) throw new Error('baseline SHA-256 does not match candidate review report');
+  if (recordsBytes !== undefined && candidateReview.recordsSha256 !== sha256(recordsBytes)) {
+    throw new Error('records SHA-256 does not match candidate review report');
+  }
+  const { reportId, ...withoutId } = candidateReview;
+  if (reportId !== sha256(stableJson(withoutId))) throw new Error('candidate review reportId does not match report contents');
+  return candidateReview;
+}
+
+module.exports = {
+  OBSERVATION_VERSION,
+  OBSERVATION_META_FIELDS,
+  sha256,
+  stableJson,
+  normalizeRecords,
+  resolveResolution,
+  candidatesFor,
+  legacyCrossCheck,
+  checkValue,
+  recordId,
+  itemId,
+  buildLegacyProjection,
+  buildCandidateReview,
+  verifyCandidateReview,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-report-renderer.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-report-renderer.js
new file mode 100644
index 0000000..1d6aa99
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-report-renderer.js
@@ -0,0 +1,166 @@
+'use strict';
+
+/* Render a RunReport; never performs checks or filesystem writes. */
+
+function statusMark(status) {
+  return { passed: '✓', failed: '✖', 'not-assessed': '○', 'not-applicable': '—', 'review-required': '!' }[status] || '•';
+}
+
+function outcomeLabel(outcome) {
+  return {
+    ready: 'DATA-VALID',
+    'issues-found': 'ISSUES-FOUND',
+    'review-required': 'REVIEW-REQUIRED',
+    blocked: 'BLOCKED',
+    'input-error': 'INPUT-ERROR',
+  }[outcome] || String(outcome || 'UNKNOWN').toUpperCase();
+}
+
+function short(value, max = 240) {
+  const text = typeof value === 'string' ? value : JSON.stringify(value);
+  if (!text) return '';
+  return text.length > max ? text.slice(0, max - 1) + '…' : text;
+}
+
+function renderJson(report) {
+  return JSON.stringify(report, null, 2) + '\n';
+}
+
+function renderTerminalSummary(report, options = {}) {
+  const lines = [];
+  lines.push(`SG Data Pack — ${report.run.libId}`);
+  lines.push(`状态：${outcomeLabel(report.run.outcome)}  | 成熟度：${report.run.maturity}`);
+  lines.push(`摘要：${report.summary.findings} findings / ${report.summary.changes} changes / ${report.summary.notAssessed} 项未评估`);
+  lines.push('');
+
+  const section = (title, entries, formatter, emptyText) => {
+    lines.push(title);
+    if (!entries.length) lines.push(`  ${emptyText}`);
+    else entries.slice(0, options.limit || 20).forEach((entry, index) => lines.push(formatter(entry, index)));
+    if (entries.length > (options.limit || 20)) lines.push(`  … 其余 ${entries.length - (options.limit || 20)} 项见完整报告`);
+    lines.push('');
+  };
+
+  section('发现的问题', report.findings.filter((item) => ['open', 'review-required'].includes(item.status)), (item) => {
+    const subject = item.subject ? ` [${item.subject}]` : '';
+    const hint = item.repairHint ? `；建议：${short(item.repairHint, 150)}` : '';
+    return `  ${item.severity === 'error' ? '✖' : item.status === 'review-required' ? '!' : '⚠'} ${item.code}${subject}：${short(item.message)}${hint}`;
+  }, '未发现开放问题');
+
+  section('已修改 / 已完善', report.changes, (item) => {
+    const subject = item.subject ? ` [${item.subject}]` : '';
+    const transition = item.before !== null || item.after !== null
+      ? `：${short(item.before, 100)} → ${short(item.after, 100)}`
+      : '';
+    return `  • ${item.title || item.id}${subject}${transition}`;
+  }, '本次没有可比较的变更');
+
+  section('验证范围', report.assurances, (item) => {
+    const evidence = item.evidence ? ` — ${short(item.evidence, 160)}` : '';
+    return `  ${statusMark(item.status)} ${item.title}${evidence}`;
+  }, '没有验证项');
+
+  section('剩余风险', report.risks, (item) => {
+    const reason = item.reason || item.message || item.title || '';
+    return `  ⚠ ${item.title || item.id}：${short(reason)}`;
+  }, '没有额外风险记录');
+
+  section('下一步', report.nextSteps, (item, index) => {
+    const command = item.command ? `\n     命令：${item.command}` : '';
+    const doneWhen = item.doneWhen ? `\n     完成条件：${item.doneWhen}` : '';
+    return `  ${index + 1}. [${item.priority || 'P2'}] ${item.title}${command}${doneWhen}`;
+  }, '没有自动生成的下一步');
+
+  if (report.operations.length) {
+    lines.push(`审核操作：${report.operations.length} 项；derivation 影响：${report.impacts.length} 项`);
+    lines.push('');
+  }
+  if (options.reportPath) lines.push(`完整报告：${options.reportPath}`);
+  return lines.join('\n') + '\n';
+}
+
+function renderMarkdown(report, options = {}) {
+  const lines = [];
+  lines.push(`# SG Data Pack 报告：${report.run.libId}`);
+  lines.push('');
+  lines.push(`- **状态**：${outcomeLabel(report.run.outcome)}`);
+  lines.push(`- **成熟度**：${report.run.maturity}`);
+  lines.push(`- **Run ID**：\`${report.run.id}\``);
+  lines.push('');
+
+  lines.push('## 执行摘要');
+  lines.push('');
+  lines.push(`发现 **${report.summary.findings}** 项，变更 **${report.summary.changes}** 项，开放问题 **${report.summary.open}** 项，未评估 **${report.summary.notAssessed}** 项。`);
+  lines.push('');
+
+  lines.push('## 数据概况');
+  lines.push('');
+  lines.push('| 数据集合 | 数量 |');
+  lines.push('|---|---:|');
+  const inventoryLabels = {
+    entities: 'Entities', aliases: 'Aliases', relationTypes: 'Relation types', heroRelTypes: 'Hero relation types',
+    relations: 'Relations', stages: 'Stages', contents: 'Contents', domainKeys: 'Domain keys', assets: 'Assets',
+    sameAs: 'sameAs pairs', provenanceEntities: 'Entity provenance', derivations: 'Derivations',
+  };
+  Object.entries(inventoryLabels).forEach(([key, label]) => lines.push(`| ${label} | ${report.inventory[key] === undefined ? 0 : report.inventory[key]} |`));
+  lines.push('');
+
+  const mdList = (heading, entries, render, empty) => {
+    lines.push(`## ${heading}`);
+    lines.push('');
+    if (!entries.length) lines.push(`> ${empty}`);
+    else entries.forEach((entry, index) => lines.push(render(entry, index)));
+    lines.push('');
+  };
+  mdList('发现的问题', report.findings.filter((item) => ['open', 'review-required'].includes(item.status)), (item) => {
+    const subject = item.subject ? `（${item.subject}）` : '';
+    const hint = item.repairHint ? `\n  - 修复建议：${item.repairHint}` : '';
+    return `- [ ] **${item.code}** ${item.title}${subject}：${item.message}${hint}`;
+  }, '未发现开放问题。');
+
+  const resolvedFindings = report.findings.filter((item) => item.status === 'resolved');
+  if (resolvedFindings.length) {
+    lines.push('## 已解决问题');
+    lines.push('');
+    resolvedFindings.forEach((item) => lines.push(`- [x] **${item.code}** ${item.title}：${item.message}`));
+    lines.push('');
+  }
+
+  mdList('已修改 / 已完善', report.changes, (item) => {
+    const subject = item.subject ? `（${item.subject}）` : '';
+    const beforeAfter = item.before !== null || item.after !== null ? `：\`${short(item.before, 160)}\` → \`${short(item.after, 160)}\`` : '';
+    return `- **${item.title || item.id}**${subject}${beforeAfter}`;
+  }, '本次没有可比较的变更。');
+
+  mdList('验证与保证范围', report.assurances, (item) => {
+    const evidence = item.evidence ? ` — ${item.evidence}` : '';
+    return `- ${statusMark(item.status)} **${item.title}**${evidence}`;
+  }, '没有验证项。');
+
+  mdList('剩余风险', report.risks, (item) => `- **${item.title || item.id}**：${item.reason || item.message || ''}`, '没有额外风险记录。');
+
+  mdList('下一步开发动作', report.nextSteps, (item, index) => {
+    const details = [item.owner && `owner: ${item.owner}`, item.command && `命令: \`${item.command}\``, item.doneWhen && `完成条件: ${item.doneWhen}`].filter(Boolean).join('；');
+    return `${index + 1}. **[${item.priority || 'P2'}] ${item.title}**${details ? ` — ${details}` : ''}`;
+  }, '没有自动生成的下一步。');
+
+  if (report.operations.length) {
+    lines.push('## 审核操作');
+    lines.push('');
+    lines.push(`共 ${report.operations.length} 项操作，详见 audit 输入或 JSON report。`);
+    lines.push('');
+  }
+  if (report.impacts.length) {
+    lines.push('## Derivation 影响');
+    lines.push('');
+    report.impacts.forEach((item) => lines.push(`- **${item.name || item.id}**：${(item.triggers || []).join(', ')}`));
+    lines.push('');
+  }
+  if (options.generatedBy) {
+    lines.push(`_Generated by sg-data-pack report; ${options.generatedBy}_`);
+    lines.push('');
+  }
+  return lines.join('\n');
+}
+
+module.exports = { renderJson, renderTerminalSummary, renderMarkdown, outcomeLabel };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-run-report.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-run-report.js
new file mode 100644
index 0000000..0ced1e5
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-run-report.js
@@ -0,0 +1,239 @@
+'use strict';
+
+/* Pure RunReport v1.0 builder. It deliberately performs no filesystem or process I/O. */
+const crypto = require('node:crypto');
+
+const REPORT_VERSION = '1.0';
+const OUTCOMES = new Set(['ready', 'issues-found', 'review-required', 'blocked', 'input-error']);
+const MATURITIES = ['UNASSESSED', 'ASSESSED', 'DATA-VALID'];
+
+function stableValue(value) {
+  if (Array.isArray(value)) return value.map(stableValue);
+  if (value && typeof value === 'object') {
+    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, stableValue(value[key])]));
+  }
+  return value;
+}
+
+function stableJson(value) {
+  return JSON.stringify(stableValue(value));
+}
+
+function sha256(value) {
+  const bytes = Buffer.isBuffer(value) ? value : Buffer.from(String(value), 'utf8');
+  return 'sha256:' + crypto.createHash('sha256').update(bytes).digest('hex');
+}
+
+function asArray(value) {
+  return Array.isArray(value) ? value : [];
+}
+
+function countBy(items, key, value) {
+  return items.filter((item) => item && item[key] === value).length;
+}
+
+function normalizeMessage(value) {
+  if (typeof value === 'string') return { message: value, raw: value };
+  if (value instanceof Error) return { message: value.message, raw: { name: value.name, message: value.message } };
+  return { message: String(value), raw: value };
+}
+
+function diagnosticFinding({ value, phase, category = 'contract', severity = 'error', status = 'open', blocking = severity === 'error', code, title, subject, evidence, expected, actual, repairHint }) {
+  const normalized = normalizeMessage(value);
+  const parsedCode = code || (/^(E\d+|W\d+):/.exec(normalized.message) || [])[1] || 'TOOL_DIAGNOSTIC';
+  const shortMessage = normalized.message.replace(/^(E\d+|W\d+):\s*/, '');
+  return {
+    code: parsedCode,
+    severity,
+    status,
+    category,
+    phase,
+    title: title || (parsedCode === 'TOOL_DIAGNOSTIC' ? '工具诊断' : parsedCode),
+    subject: subject || null,
+    message: shortMessage,
+    evidence: evidence || null,
+    expected: expected === undefined ? null : expected,
+    actual: actual === undefined ? null : actual,
+    repairHint: repairHint || null,
+    blocking: Boolean(blocking),
+    raw: normalized.raw,
+    needsNormalization: parsedCode === 'TOOL_DIAGNOSTIC',
+  };
+}
+
+function withFindingIds(findings) {
+  const counts = new Map();
+  return findings.map((finding) => {
+    const base = String(finding.code || 'TOOL_DIAGNOSTIC').replace(/[^A-Za-z0-9_-]+/g, '-');
+    const index = (counts.get(base) || 0) + 1;
+    counts.set(base, index);
+    return { id: `F-${base}-${index}`, ...finding };
+  });
+}
+
+function assurance(id, title, status, options = {}) {
+  return {
+    id,
+    title,
+    status,
+    evidence: options.evidence || null,
+    details: options.details || null,
+    blocking: options.blocking === undefined ? status === 'failed' : Boolean(options.blocking),
+  };
+}
+
+function change({ id, section, kind, title, subject, before, after, fields, evidence }) {
+  return {
+    id,
+    section,
+    kind: kind || 'updated',
+    title: title || `${section} ${kind || 'updated'}`,
+    subject: subject || null,
+    before: before === undefined ? null : before,
+    after: after === undefined ? null : after,
+    fields: fields || [],
+    evidence: evidence || null,
+  };
+}
+
+function inventory(pack) {
+  const countObject = (value) => value && typeof value === 'object' && !Array.isArray(value) ? Object.keys(value).length : 0;
+  return {
+    entities: countObject(pack.entities),
+    aliases: countObject(pack.aliases),
+    relationTypes: countObject(pack.relationTypes),
+    heroRelTypes: countObject(pack.heroRelTypes),
+    relations: asArray(pack.relations).length,
+    stages: asArray(pack.stages).length,
+    contents: countObject(pack.contents),
+    domainKeys: countObject(pack.domain),
+    assets: countObject(pack.assets),
+    sameAs: asArray(pack.sameAs).length,
+    provenanceEntities: countObject(pack.provenance && pack.provenance.entities),
+    derivations: countObject(pack.derivations),
+  };
+}
+
+function deriveMaturity(report) {
+  if (!report.assurances.length) return 'UNASSESSED';
+  const contract = report.assurances.find((item) => item.id === 'data-pack-contract');
+  if (contract && contract.status === 'passed') return 'DATA-VALID';
+  if (report.assurances.some((item) => item.status === 'passed')) return 'ASSESSED';
+  return 'UNASSESSED';
+}
+
+function deriveOutcome(report) {
+  if (report.inputError) return 'input-error';
+  if (report.findings.some((item) => item.blocking && item.status === 'open')) return 'blocked';
+  if (report.findings.some((item) => item.status === 'review-required')) return 'review-required';
+  if (report.findings.some((item) => item.severity === 'warning' && item.status === 'open')) return 'issues-found';
+  if (report.assurances.some((item) => item.status === 'failed')) return 'blocked';
+  return 'ready';
+}
+
+function buildSummary(report) {
+  return {
+    findings: report.findings.length,
+    errors: countBy(report.findings, 'severity', 'error'),
+    warnings: countBy(report.findings, 'severity', 'warning'),
+    open: report.findings.filter((item) => ['open', 'review-required'].includes(item.status)).length,
+    resolved: countBy(report.findings, 'status', 'resolved'),
+    notAssessed: report.assurances.filter((item) => item.status === 'not-assessed').length,
+    changes: report.changes.length,
+    nextSteps: report.nextSteps.length,
+  };
+}
+
+function buildRunId({ libId, mode, inputs, inventory: packInventory }) {
+  return sha256(stableJson({ libId, mode, inputs, inventory: packInventory }));
+}
+
+function exitCodeForOutcome(outcome) {
+  if (outcome === 'input-error') return 2;
+  if (['blocked', 'review-required'].includes(outcome)) return 1;
+  return 0;
+}
+
+function buildNextSteps(report) {
+  const steps = [];
+  const add = (id, priority, owner, title, reason, command, doneWhen, blocking = false) => {
+    if (!steps.some((step) => step.id === id)) steps.push({ id, priority, owner, title, reason, command, doneWhen, blocking });
+  };
+  if (report.findings.some((item) => item.status === 'review-required')) {
+    add('review-open-items', 'P0', 'reviewer', '处理待人工复核项', '存在 gap、conflict、unsupported 或 identity miss。', 'node "$SK" candidate ...', '每个 review item 都有明确 decision，Candidate audit 状态为 valid。', true);
+  }
+  if (report.findings.some((item) => item.severity === 'error' && item.status === 'open')) {
+    add('fix-blocking-findings', 'P0', 'component-developer', '修复阻断性数据问题', 'Data Pack contract 或规则存在阻断 finding。', 'node "$SK" validate <data.json> --strict --verify-hash', 'errors 为 0，且 strict validation 通过。', true);
+  }
+  if (report.assurances.some((item) => item.id === 'extract-equivalence' && item.status === 'not-assessed')) {
+    add('run-equivalence', 'P1', 'component-developer', '运行引擎等价性校验', '当前报告没有 extract config，尚未证明 __fromPack 无损还原默认数据。', 'node "$SK" extract <extract.config.js> --check', '所有 deep comparisons passed。');
+  }
+  if (report.assurances.some((item) => item.id === 'runtime-mount' && item.status === 'not-assessed')) {
+    add('add-runtime-mount', 'P1', 'component-developer', '补充 runtime mount 回归', '当前只验证数据合同，没有验证真实 DOM mount。', '运行组件库 runtime mount test', '页面可 mount，控制台无 Data Pack 错误。');
+  }
+  if (report.assurances.some((item) => item.id === 'visual-regression' && item.status === 'not-assessed')) {
+    add('add-visual-regression', 'P2', 'component-developer', '补充视觉回归', '当前没有截图或浏览器视觉证据。', '运行 visual regression 测试', '关键场景截图 diff 通过。');
+  }
+  if (report.impacts.length) {
+    add('review-derivation-impact', 'P1', 'component-developer', '复核 derivation 影响面', '数据变化会影响引擎 consumer 或展示区域。', 'node "$SK" diff <old.json> <new.json> --json', '每个 impacted derivation 都完成相应回归。');
+  }
+  return steps;
+}
+
+function buildReport(input = {}) {
+  const pack = input.pack || {};
+  const libId = input.libId || (pack.meta && pack.meta.id) || 'unknown-library';
+  const mode = input.mode || 'pack';
+  const rawFindings = asArray(input.findings);
+  const findings = withFindingIds(rawFindings);
+  const report = {
+    reportVersion: REPORT_VERSION,
+    run: {
+      id: null,
+      command: input.command || 'report',
+      exitCode: null,
+      libId,
+      mode,
+      outcome: 'ready',
+      maturity: 'UNASSESSED',
+    },
+    inputs: input.inputs || {},
+    summary: null,
+    inventory: input.inventory || inventory(pack),
+    findings,
+    changes: asArray(input.changes),
+    assurances: asArray(input.assurances),
+    coverage: asArray(input.coverage && input.coverage.length ? input.coverage : input.assurances),
+    risks: asArray(input.risks),
+    nextSteps: [],
+    operations: asArray(input.operations),
+    impacts: asArray(input.impacts),
+    artifacts: asArray(input.artifacts),
+    raw: input.raw || {},
+    inputError: Boolean(input.inputError),
+  };
+  report.nextSteps = asArray(input.nextSteps).concat(buildNextSteps(report));
+  report.summary = buildSummary(report);
+  report.run.maturity = deriveMaturity(report);
+  report.run.outcome = deriveOutcome(report);
+  report.run.exitCode = exitCodeForOutcome(report.run.outcome);
+  report.run.id = buildRunId({ libId, mode, inputs: report.inputs, inventory: report.inventory });
+  delete report.inputError;
+  return report;
+}
+
+module.exports = {
+  REPORT_VERSION,
+  OUTCOMES,
+  MATURITIES,
+  sha256,
+  stableJson,
+  diagnosticFinding,
+  withFindingIds,
+  assurance,
+  change,
+  inventory,
+  buildSummary,
+  exitCodeForOutcome,
+  buildReport,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-runtime-evidence.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-runtime-evidence.js
new file mode 100644
index 0000000..301fa75
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-runtime-evidence.js
@@ -0,0 +1,52 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { contentId, isDigest, verifyArtifacts } = require('./sg-evidence-utils.js');
+
+function validateRuntimeEvidence(evidence, options = {}) {
+  const errors = [];
+  if (!evidence || typeof evidence !== 'object' || Array.isArray(evidence)) return { valid: false, errors: ['runtime evidence must be an object'], status: 'not-assessed' };
+  if (evidence.evidenceVersion !== '1.0') errors.push('runtime evidenceVersion must be 1.0');
+  if (evidence.kind !== 'runtime-evidence') errors.push('runtime kind must be runtime-evidence');
+  if (typeof evidence.scenarioId !== 'string' || !evidence.scenarioId) errors.push('runtime scenarioId is required');
+  if (!isDigest(evidence.subjectTreeSha256)) errors.push('runtime subjectTreeSha256 must be sha256:<hex>');
+  if (!evidence.producer || typeof evidence.producer !== 'object' || typeof evidence.producer.name !== 'string' || typeof evidence.producer.version !== 'string') errors.push('runtime producer name/version are required');
+  if (!evidence.environment || typeof evidence.environment !== 'object') errors.push('runtime environment is required');
+  if (!Array.isArray(evidence.assertions)) errors.push('runtime assertions must be an array');
+  if (!Array.isArray(evidence.consoleErrors)) errors.push('runtime consoleErrors must be an array');
+  if (!Array.isArray(evidence.pageErrors)) errors.push('runtime pageErrors must be an array');
+  if (!Array.isArray(evidence.networkFailures)) errors.push('runtime networkFailures must be an array');
+  if (!Array.isArray(evidence.artifacts) || !evidence.artifacts.length) errors.push('runtime artifacts must be a non-empty array');
+  const assertionIds = new Set();
+  for (const [index, assertion] of (evidence.assertions || []).entries()) {
+    if (!assertion || typeof assertion !== 'object' || typeof assertion.id !== 'string' || !assertion.id || !['passed', 'failed'].includes(assertion.status)) errors.push(`runtime assertions[${index}] must have id and passed|failed status`);
+    else if (assertionIds.has(assertion.id)) errors.push(`runtime assertion id is duplicated: ${assertion.id}`);
+    else assertionIds.add(assertion.id);
+  }
+  verifyArtifacts(evidence.artifacts, options.baseDir, errors);
+  const expectedId = contentId('runtime', evidence, ['evidenceId']);
+  if (evidence.evidenceId !== expectedId) errors.push(`runtime evidenceId mismatch (expected ${expectedId})`);
+  const failures = (evidence.assertions || []).filter((item) => item.status === 'failed').length
+    + (evidence.consoleErrors || []).length
+    + (evidence.pageErrors || []).length
+    + (evidence.networkFailures || []).length;
+  const complete = errors.length === 0 && (evidence.assertions || []).length > 0;
+  return {
+    valid: errors.length === 0,
+    errors,
+    status: !complete ? 'not-assessed' : failures ? 'failed' : 'passed',
+    summary: {
+      assertions: (evidence.assertions || []).length,
+      passed: (evidence.assertions || []).filter((item) => item.status === 'passed').length,
+      failed: failures,
+    },
+  };
+}
+
+function readRuntimeEvidence(file) {
+  const evidence = JSON.parse(fs.readFileSync(file, 'utf8'));
+  const validation = validateRuntimeEvidence(evidence, { baseDir: path.dirname(path.resolve(file)) });
+  return { evidence, validation };
+}
+
+module.exports = { validateRuntimeEvidence, readRuntimeEvidence };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-task-runner.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-task-runner.js
new file mode 100644
index 0000000..8c578f6
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-task-runner.js
@@ -0,0 +1,477 @@
+'use strict';
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { readTaskManifest, validateTaskManifest, resolveSourceRoot, computeTreeSha256, sha256: taskSha256 } = require('./agent-task-manifest.js');
+const { runCommand } = require('./sg-command-runner.js');
+const { snapshotTree } = require('./sg-tree-snapshot.js');
+const { applyPatch, PatchError } = require('./sg-patch-executor.js');
+const { gradeWorkspace, validateGraderSpec } = require('./sg-grader.js');
+const { sha256Bytes, contentId, safeRelative } = require('./sg-evidence-utils.js');
+const { canonicalPath } = require('./sg-path-policy.js');
+
+function ensureOutsideSource(sourceRoot, artifactRoot) {
+  const source = fs.realpathSync(sourceRoot);
+  const output = path.resolve(artifactRoot);
+  const relative = path.relative(source, output);
+  if (relative === '' || (relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative))) throw new Error('artifact root must be outside source root');
+}
+
+function writeAtomic(file, bytes) {
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const temp = path.join(path.dirname(file), `.${path.basename(file)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`);
+  let fd;
+  try {
+    fd = fs.openSync(temp, 'wx', 0o600);
+    fs.writeFileSync(fd, bytes);
+    fs.fsyncSync(fd);
+    fs.closeSync(fd); fd = undefined;
+    fs.renameSync(temp, file);
+  } catch (error) {
+    if (fd !== undefined) fs.closeSync(fd);
+    try { fs.unlinkSync(temp); } catch (_) { /* absent */ }
+    throw error;
+  }
+}
+
+function artifact(root, id, file, mediaType) {
+  const bytes = fs.readFileSync(file);
+  return { id, path: path.relative(root, file).split(path.sep).join('/'), mediaType, bytes: bytes.length, sha256: sha256Bytes(bytes) };
+}
+
+function mediaTypeFor(file) {
+  if (file.endsWith('.json')) return 'application/json';
+  if (file.endsWith('.png')) return 'image/png';
+  if (file.endsWith('.html')) return 'text/html';
+  if (file.endsWith('.diff') || file.endsWith('.patch')) return 'text/x-diff';
+  if (file.endsWith('.md')) return 'text/markdown';
+  return 'text/plain';
+}
+
+function collectOutputArtifacts(root, current) {
+  const known = new Set(current.map((item) => item.path));
+  const files = [];
+  const unsupported = [];
+  function walk(directory) {
+    for (const name of fs.readdirSync(directory).sort()) {
+      const file = path.join(directory, name);
+      const relative = path.relative(root, file).split(path.sep).join('/');
+      const stat = fs.lstatSync(file);
+      if (stat.isSymbolicLink()) unsupported.push(`${relative}: symlink`);
+      else if (stat.isDirectory()) walk(file);
+      else if (stat.isFile() && stat.nlink > 1) unsupported.push(`${relative}: hardlink`);
+      else if (stat.isFile()) files.push(file);
+      else unsupported.push(`${relative}: unsupported filesystem entry`);
+    }
+  }
+  walk(root);
+  for (const file of files) {
+    const relative = path.relative(root, file).split(path.sep).join('/');
+    if (relative === 'task-run.json' || known.has(relative)) continue;
+    const id = 'generated-' + relative.replace(/[^A-Za-z0-9._-]+/g, '-');
+    current.push(artifact(root, id, file, mediaTypeFor(file)));
+    known.add(relative);
+  }
+  current.sort((left, right) => left.path.localeCompare(right.path));
+  return unsupported;
+}
+
+function replaceTokens(argv, values) {
+  return argv.map((argument) => Object.entries(values).reduce((value, [token, replacement]) => value.split(token).join(replacement), argument));
+}
+
+function agentResult(run) {
+  return {
+    provider: null, model: null, argv: run.argv, cwd: run.cwd,
+    exitCode: run.exitCode, signal: run.signal, timedOut: run.timedOut, durationMs: run.durationMs,
+    stdoutSha256: sha256Bytes(run.stdout || ''), stderrSha256: sha256Bytes(run.stderr || ''),
+    stdout: run.stdout, stderr: run.stderr,
+    stdoutTruncated: run.stdoutTruncated, stderrTruncated: run.stderrTruncated, error: run.error || null,
+  };
+}
+
+function loadGraderSpec(reference, taskDir) {
+  if (reference && typeof reference === 'object' && !Array.isArray(reference)) return { spec: reference, root: taskDir };
+  const relative = safeRelative(reference, 'grader spec path');
+  const file = path.resolve(taskDir, relative);
+  const fromRoot = path.relative(taskDir, file);
+  if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) throw new Error('grader spec escapes task directory');
+  return { spec: JSON.parse(fs.readFileSync(file, 'utf8')), root: path.dirname(file), file };
+}
+
+function buildRun(report) {
+  const material = { ...report };
+  delete material.runId;
+  report.runId = contentId('task-run', material, []);
+  return report;
+}
+
+function verifyFileBinding(binding) {
+  try {
+    const stat = fs.lstatSync(binding.file);
+    if (!stat.isFile() || stat.isSymbolicLink()) throw new Error('must be a regular non-symlink file');
+    if (stat.nlink > 1) throw new Error('hardlinks are not allowed');
+    const actual = taskSha256(fs.readFileSync(binding.file));
+    return actual === binding.sha256 ? null : `digest mismatch: expected ${binding.sha256}, received ${actual}`;
+  } catch (error) { return error.message; }
+}
+
+function integrityIssues({ absoluteTask, taskFileSha256, loadedGraders, externalBindings }) {
+  const issues = [];
+  const taskIssue = verifyFileBinding({ file: absoluteTask, sha256: taskFileSha256 });
+  if (taskIssue) issues.push(`task manifest: ${taskIssue}`);
+  for (const loaded of loadedGraders) {
+    const specIssue = verifyFileBinding({ file: loaded.file, sha256: loaded.reference.sha256 });
+    if (specIssue) issues.push(`grader ${loaded.reference.id} spec: ${specIssue}`);
+    try {
+      const actualTree = computeTreeSha256(loaded.root);
+      if (actualTree !== loaded.reference.treeSha256) issues.push(`grader ${loaded.reference.id} tree digest mismatch: expected ${loaded.reference.treeSha256}, received ${actualTree}`);
+    } catch (error) { issues.push(`grader ${loaded.reference.id} tree: ${error.message}`); }
+  }
+  for (const binding of externalBindings) {
+    const bindingIssue = verifyFileBinding(binding);
+    if (bindingIssue) issues.push(`${binding.id}: ${bindingIssue}`);
+  }
+  return issues;
+}
+
+function captureTrustedTools() {
+  const originalScriptsRoot = path.resolve(__dirname, '..');
+  const original = snapshotTree(originalScriptsRoot, { errorOnSpecialFile: true, exclude: false });
+  return { originalScriptsRoot, originalTreeSha256: original.treeSha256 };
+}
+
+function stageTrustedTools(parent, captured) {
+  const current = snapshotTree(captured.originalScriptsRoot, { errorOnSpecialFile: true, exclude: false });
+  if (current.treeSha256 !== captured.originalTreeSha256) throw new Error('original tool scripts changed before staging');
+  const toolRoot = path.join(parent, 'trusted-tools');
+  const scriptsRoot = path.join(toolRoot, 'scripts');
+  fs.mkdirSync(toolRoot, { recursive: true });
+  fs.cpSync(captured.originalScriptsRoot, scriptsRoot, { recursive: true, dereference: false, verbatimSymlinks: true });
+  const staged = snapshotTree(scriptsRoot, { errorOnSpecialFile: true, exclude: false });
+  if (staged.treeSha256 !== captured.originalTreeSha256) throw new Error('staged tool scripts tree digest mismatch');
+  return { ...captured, toolRoot, scriptsRoot, stagedTreeSha256: staged.treeSha256 };
+}
+
+function verifyTrustedTools(tools) {
+  const issues = [];
+  try {
+    const original = snapshotTree(tools.originalScriptsRoot, { errorOnSpecialFile: true, exclude: false });
+    if (original.treeSha256 !== tools.originalTreeSha256) issues.push(`original tool scripts changed: expected ${tools.originalTreeSha256}, received ${original.treeSha256}`);
+  } catch (error) { issues.push('original tool scripts: ' + error.message); }
+  if (tools.scriptsRoot) {
+    try {
+      const staged = snapshotTree(tools.scriptsRoot, { errorOnSpecialFile: true, exclude: false });
+      if (staged.treeSha256 !== tools.stagedTreeSha256) issues.push(`staged tool scripts changed: expected ${tools.stagedTreeSha256}, received ${staged.treeSha256}`);
+    } catch (error) { issues.push('staged tool scripts: ' + error.message); }
+  }
+  return issues;
+}
+
+function stageGraders(loadedGraders, parent) {
+  const stagingRoot = path.join(parent, 'trusted-graders');
+  fs.mkdirSync(stagingRoot, { recursive: true });
+  return loadedGraders.map((loaded) => {
+    const root = path.join(stagingRoot, loaded.reference.id);
+    fs.cpSync(loaded.root, root, { recursive: true, dereference: false, verbatimSymlinks: true });
+    const treeSha256 = computeTreeSha256(root);
+    if (treeSha256 !== loaded.reference.treeSha256) throw new Error(`staged grader ${loaded.reference.id} tree digest mismatch`);
+    const relativeSpec = path.relative(loaded.root, loaded.file);
+    const file = path.join(root, relativeSpec);
+    const specIssue = verifyFileBinding({ file, sha256: loaded.reference.sha256 });
+    if (specIssue) throw new Error(`staged grader ${loaded.reference.id} spec ${specIssue}`);
+    const spec = JSON.parse(fs.readFileSync(file, 'utf8'));
+    const validation = validateGraderSpec(spec);
+    if (!validation.valid) throw new Error(`staged grader ${loaded.reference.id} is invalid: ${validation.errors.join('; ')}`);
+    return { reference: loaded.reference, root, file, spec };
+  });
+}
+
+function runTask({ taskFile, agentArgv, artifactRoot, agent = {}, keepWorkspace = false, trialId = null, integrityInputs = [] } = {}) {
+  if (!taskFile || !Array.isArray(agentArgv) || !agentArgv.length || !artifactRoot) throw new Error('taskFile, non-empty agentArgv, and artifactRoot are required');
+  if (!Array.isArray(integrityInputs) || integrityInputs.some((binding) => !binding || typeof binding.id !== 'string' || typeof binding.file !== 'string' || typeof binding.sha256 !== 'string')) throw new TypeError('integrityInputs must contain id, file, and sha256 bindings');
+  const initialExternalIssues = integrityInputs.map((binding) => ({ binding, issue: verifyFileBinding(binding) })).filter((item) => item.issue);
+  if (initialExternalIssues.length) {
+    const error = new Error('task integrity input validation failed: ' + initialExternalIssues.map((item) => `${item.binding.id}: ${item.issue}`).join('; '));
+    error.kind = 'input-error';
+    throw error;
+  }
+  const infraExitCodes = agent.infraExitCodes === undefined ? [] : agent.infraExitCodes;
+  if (!Array.isArray(infraExitCodes) || infraExitCodes.some((value) => !Number.isInteger(value) || value < 1 || value > 255) || new Set(infraExitCodes).size !== infraExitCodes.length) throw new TypeError('agent.infraExitCodes must contain unique exit codes from 1 to 255');
+  const absoluteTask = path.resolve(taskFile);
+  const taskDir = path.dirname(absoluteTask);
+  const taskFileSha256 = taskSha256(fs.readFileSync(absoluteTask));
+  const manifest = readTaskManifest(absoluteTask);
+  const validation = validateTaskManifest(manifest, { taskFile: absoluteTask, verifyFiles: true, verifyTree: true });
+  if (!validation.valid) {
+    const error = new Error('task input validation failed: ' + validation.issues.map((item) => `${item.path}: ${item.message}`).join('; '));
+    error.kind = 'input-error';
+    throw error;
+  }
+  const loadedGraders = manifest.graders.map((reference) => {
+    const loaded = loadGraderSpec(reference.spec, taskDir);
+    if (!loaded.file || taskSha256(fs.readFileSync(loaded.file)) !== reference.sha256) {
+      const error = new Error(`grader ${reference.id} spec digest mismatch`);
+      error.kind = 'input-error';
+      throw error;
+    }
+    if (computeTreeSha256(loaded.root) !== reference.treeSha256) {
+      const error = new Error(`grader ${reference.id} tree digest mismatch`);
+      error.kind = 'input-error';
+      throw error;
+    }
+    const graderValidation = validateGraderSpec(loaded.spec);
+    if (!graderValidation.valid) {
+      const error = new Error(`grader ${reference.id} is invalid: ${graderValidation.errors.join('; ')}`);
+      error.kind = 'input-error';
+      throw error;
+    }
+    return { reference, ...loaded };
+  });
+  const trustedToolsCapture = captureTrustedTools();
+  const sourceRoot = resolveSourceRoot(manifest, { taskFile: absoluteTask });
+  const requestedOutputRoot = path.resolve(artifactRoot);
+  if (fs.existsSync(requestedOutputRoot) && fs.lstatSync(requestedOutputRoot).isSymbolicLink()) throw new Error('artifact root must not be a symlink');
+  const outputRoot = canonicalPath(requestedOutputRoot);
+  ensureOutsideSource(sourceRoot, outputRoot);
+  if (fs.existsSync(outputRoot) && fs.readdirSync(outputRoot).length) throw new Error('artifact root must not already contain files');
+  fs.mkdirSync(outputRoot, { recursive: true });
+  const sourceBefore = snapshotTree(sourceRoot, { errorOnSpecialFile: true, exclude: false });
+  const workspaceParent = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-agent-task-'));
+  const workspaceRoot = path.join(workspaceParent, 'workspace');
+  try {
+    fs.cpSync(sourceRoot, workspaceRoot, { recursive: true, dereference: false, verbatimSymlinks: true });
+    const workspaceBeforeAgent = snapshotTree(workspaceRoot, { errorOnSpecialFile: true, exclude: false });
+  const patchPath = path.join(outputRoot, 'agent.patch');
+  const promptPath = path.join(outputRoot, 'TASK.md');
+  writeAtomic(promptPath, Buffer.from(manifest.instructions.text + '\n', 'utf8'));
+  const promptSha256 = sha256Bytes(fs.readFileSync(promptPath));
+  const values = { '{workspace}': workspaceRoot, '{patch}': patchPath, '{prompt}': promptPath, '{taskId}': manifest.taskId, '{artifacts}': outputRoot };
+  const argv = replaceTokens(agentArgv, values);
+  const agentRun = runCommand({ argv, cwd: workspaceRoot, allowedRoot: workspaceParent, timeoutMs: manifest.execution.timeoutMs, maxOutputBytes: manifest.execution.maxOutputBytes, env: {}, envAllowlist: ['PATH', 'HOME', 'TMPDIR', 'TMP', 'TEMP', 'LANG', 'LC_ALL', 'LC_CTYPE'] });
+  const agentAudit = agentResult(agentRun);
+  agentAudit.provider = agent.provider || null;
+  agentAudit.model = agent.model || null;
+  try { agentAudit.providerMetadata = agentRun.stdout.trim() ? JSON.parse(agentRun.stdout.trim().split('\n').pop()) : null; }
+  catch (_) { agentAudit.providerMetadata = null; }
+  let workspaceAfterAgent = null;
+  let sourceAfterAgent = null;
+  let verdict = 'passed';
+  let patchAudit = null;
+  const grades = [];
+  const secondaryErrors = [];
+  let termination = { kind: 'completed', processExitCode: 0, semanticVerdict: 'passed' };
+  const artifactList = [artifact(outputRoot, 'task-prompt', promptPath, 'text/markdown')];
+
+  try {
+    try {
+      workspaceAfterAgent = snapshotTree(workspaceRoot, { errorOnSpecialFile: true, exclude: false });
+      sourceAfterAgent = snapshotTree(sourceRoot, { errorOnSpecialFile: true, exclude: false });
+    } catch (snapshotError) {
+      const error = new Error('agent created an unsupported filesystem entry: ' + snapshotError.message);
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (!fs.existsSync(promptPath) || fs.lstatSync(promptPath).isSymbolicLink() || !fs.lstatSync(promptPath).isFile() || fs.lstatSync(promptPath).nlink > 1 || sha256Bytes(fs.readFileSync(promptPath)) !== promptSha256) {
+      const error = new Error('agent modified the immutable task prompt artifact');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    const agentArtifactNames = fs.readdirSync(outputRoot).sort();
+    if (agentArtifactNames.some((name) => !['TASK.md', 'agent.patch'].includes(name))) {
+      const error = new Error('agent wrote undeclared files into the artifact root: ' + agentArtifactNames.filter((name) => !['TASK.md', 'agent.patch'].includes(name)).join(', '));
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (sourceAfterAgent.treeSha256 !== sourceBefore.treeSha256) {
+      const error = new Error('agent modified the source root outside the disposable workspace');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (workspaceAfterAgent.treeSha256 !== workspaceBeforeAgent.treeSha256) {
+      const error = new Error('agent modified the workspace directly; it must emit only a patch');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    const postAgentIntegrityIssues = [
+      ...integrityIssues({ absoluteTask, taskFileSha256, loadedGraders, externalBindings: integrityInputs }),
+      ...verifyTrustedTools(trustedToolsCapture),
+    ];
+    if (postAgentIntegrityIssues.length) {
+      const error = new Error('immutable task inputs changed during agent execution: ' + postAgentIntegrityIssues.join('; '));
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (agentRun.error || agentRun.exitCode !== 0) {
+      const error = new Error(agentRun.timedOut ? 'agent command timed out' : 'agent command failed');
+      error.kind = agentRun.timedOut || agentRun.error || new Set(agent.infraExitCodes || []).has(agentRun.exitCode) ? 'infra-error' : 'agent-failed';
+      throw error;
+    }
+    if (!fs.existsSync(patchPath)) {
+      const error = new Error('agent did not produce the required unified diff');
+      error.kind = 'agent-failed';
+      throw error;
+    }
+    if (fs.lstatSync(patchPath).isSymbolicLink() || !fs.lstatSync(patchPath).isFile() || fs.lstatSync(patchPath).nlink > 1) {
+      const error = new Error('agent.patch must be a regular non-symlink, non-hardlinked file');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    const patchBytes = fs.readFileSync(patchPath);
+    artifactList.push(artifact(outputRoot, 'agent-patch', patchPath, 'text/x-diff'));
+    const applied = applyPatch({ manifest, workspaceRoot, patchBytes, taskId: manifest.taskId, timeoutMs: manifest.execution.timeoutMs });
+    patchAudit = applied.audit;
+    const patchAuditPath = path.join(outputRoot, 'patch-audit.json');
+    writeAtomic(patchAuditPath, Buffer.from(JSON.stringify(patchAudit, null, 2) + '\n'));
+    artifactList.push(artifact(outputRoot, 'patch-audit', patchAuditPath, 'application/json'));
+    const candidateTreeSha256 = 'sha256:' + applied.after.treeSha256;
+    let trustedTools;
+    let stagedGraders;
+    try {
+      trustedTools = stageTrustedTools(workspaceParent, trustedToolsCapture);
+      stagedGraders = stageGraders(loadedGraders, workspaceParent);
+    } catch (stagingError) {
+      const error = new Error('trusted grader staging failed: ' + stagingError.message);
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    for (const loadedGrader of stagedGraders) {
+      const { reference } = loadedGrader;
+      const preGradeToolIssues = verifyTrustedTools(trustedTools);
+      if (preGradeToolIssues.length) {
+        const error = new Error('trusted tool integrity failed before grading: ' + preGradeToolIssues.join('; '));
+        error.kind = 'policy-violation';
+        throw error;
+      }
+      if (computeTreeSha256(loadedGrader.root) !== reference.treeSha256) {
+        const error = new Error(`staged grader ${reference.id} changed before invocation`);
+        error.kind = 'policy-violation';
+        throw error;
+      }
+      const grade = gradeWorkspace({ spec: loadedGrader.spec, graderRoot: loadedGrader.root, workspaceRoot, artifactRoot: outputRoot, toolRoot: trustedTools.toolRoot, taskId: manifest.taskId, treeSha256: candidateTreeSha256, timeoutMs: manifest.execution.timeoutMs, maxOutputBytes: manifest.execution.maxOutputBytes });
+      grade.manifestWeight = reference.weight;
+      grade.gradeId = contentId('grade', grade, ['gradeId']);
+      grades.push(grade);
+      const gradeFile = path.join(outputRoot, `grade-${reference.id}.json`);
+      writeAtomic(gradeFile, Buffer.from(JSON.stringify(grade, null, 2) + '\n'));
+      artifactList.push(artifact(outputRoot, `grade-${reference.id}`, gradeFile, 'application/json'));
+      const postGradeToolIssues = verifyTrustedTools(trustedTools);
+      if (postGradeToolIssues.length) {
+        const error = new Error('trusted tool integrity failed during grading: ' + postGradeToolIssues.join('; '));
+        error.kind = 'policy-violation';
+        throw error;
+      }
+      if (computeTreeSha256(loadedGrader.root) !== reference.treeSha256) {
+        const error = new Error(`staged grader ${reference.id} changed during invocation`);
+        error.kind = 'policy-violation';
+        throw error;
+      }
+    }
+    const postGraderIntegrityIssues = integrityIssues({ absoluteTask, taskFileSha256, loadedGraders, externalBindings: integrityInputs });
+    if (postGraderIntegrityIssues.length) {
+      const error = new Error('immutable task inputs changed during grading: ' + postGraderIntegrityIssues.join('; '));
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    let workspaceAfterGraders;
+    try {
+      workspaceAfterGraders = snapshotTree(workspaceRoot, { errorOnSpecialFile: true, exclude: false });
+    } catch (snapshotError) {
+      const error = new Error('grader created an unsupported filesystem entry: ' + snapshotError.message);
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (workspaceAfterGraders.treeSha256 !== applied.after.treeSha256) {
+      const error = new Error('grader modified the immutable candidate workspace');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (!grades.length || grades.some((grade) => grade.verdict === 'failed')) {
+      verdict = 'grader-failed';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict };
+    } else if (grades.some((grade) => grade.verdict === 'infra-error')) {
+      verdict = 'infra-error';
+      termination = { kind: 'infrastructure-error', processExitCode: 3, semanticVerdict: verdict, message: 'one or more grader checks had an infrastructure error' };
+    }
+  } catch (error) {
+    if (error.audit) {
+      patchAudit = error.audit;
+      const patchAuditPath = path.join(outputRoot, 'patch-audit.json');
+      writeAtomic(patchAuditPath, Buffer.from(JSON.stringify(patchAudit, null, 2) + '\n'));
+      artifactList.push(artifact(outputRoot, 'patch-audit', patchAuditPath, 'application/json'));
+    }
+    const candidateFailureObserved = grades.some((grade) => grade.verdict === 'failed');
+    if (candidateFailureObserved) {
+      secondaryErrors.push({ kind: error.kind || 'post-grade-error', message: error.message });
+      verdict = 'grader-failed';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message: 'candidate failure observed; additional post-grade error: ' + error.message };
+    } else {
+      verdict = error.kind === 'policy-not-supported' ? 'patch-invalid' : error.kind || (error instanceof PatchError ? 'patch-invalid' : 'infra-error');
+      if (!['agent-failed', 'patch-invalid', 'policy-violation', 'input-error', 'infra-error'].includes(verdict)) verdict = 'patch-invalid';
+      termination = { kind: verdict === 'infra-error' ? 'infrastructure-error' : 'completed', processExitCode: verdict === 'infra-error' ? 3 : verdict === 'input-error' ? 2 : 1, semanticVerdict: verdict, message: error.message };
+    }
+  }
+
+  const unsupportedArtifacts = collectOutputArtifacts(outputRoot, artifactList);
+  if (unsupportedArtifacts.length && verdict !== 'policy-violation') {
+    const message = 'trusted grader output contains unsupported artifacts: ' + unsupportedArtifacts.join(', ');
+    if (grades.some((grade) => grade.verdict === 'failed') || verdict === 'grader-failed') {
+      secondaryErrors.push({ kind: 'unsupported-artifact', message });
+      verdict = 'grader-failed';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message: 'candidate failure observed; additional post-grade error: ' + message };
+    } else {
+      verdict = 'policy-violation';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message };
+    }
+  }
+  let sourceFinal = null;
+  let sourceFinalError = null;
+  try { sourceFinal = snapshotTree(sourceRoot, { errorOnSpecialFile: true, exclude: false }); }
+  catch (error) { sourceFinalError = error.message; }
+  const preserveCandidateFailure = (kind, message) => {
+    if (grades.some((grade) => grade.verdict === 'failed') || verdict === 'grader-failed') {
+      secondaryErrors.push({ kind, message });
+      verdict = 'grader-failed';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message: 'candidate failure observed; additional final integrity error: ' + message };
+    } else {
+      verdict = 'policy-violation';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message };
+    }
+  };
+  if (!sourceFinal) preserveCandidateFailure('source-snapshot', 'source root final snapshot failed: ' + sourceFinalError);
+  else if (sourceFinal.treeSha256 !== sourceBefore.treeSha256) preserveCandidateFailure('source-drift', 'source root changed during task execution');
+  const finalIntegrityIssues = integrityIssues({ absoluteTask, taskFileSha256, loadedGraders, externalBindings: integrityInputs });
+  if (finalIntegrityIssues.length) preserveCandidateFailure('immutable-input-drift', 'immutable task inputs changed during task execution: ' + finalIntegrityIssues.join('; '));
+  const report = buildRun({
+    runVersion: '1.0', runId: null,
+    task: {
+      taskId: manifest.taskId,
+      taskFileSha256,
+      sourceRevision: manifest.source.revision,
+      contractTreeSha256: manifest.source.treeSha256,
+      runnerSnapshotBeforeSha256: 'sha256:' + sourceBefore.treeSha256,
+      runnerSnapshotFinalSha256: sourceFinal ? 'sha256:' + sourceFinal.treeSha256 : null,
+      sourceUnchanged: Boolean(sourceFinal && sourceBefore.treeSha256 === sourceFinal.treeSha256),
+      sourceFinalError,
+      trialId,
+    },
+    agent: agentAudit,
+    patch: patchAudit,
+    grades,
+    secondaryErrors,
+    artifacts: artifactList,
+    verdict,
+    termination,
+    capabilities: { sourceCopy: true, disposableWorkspace: true, completeSecuritySnapshots: true, postAgentSourceTreeCheck: true, postPatchTreePolicy: true, postGraderTreeCheck: true, verifiedGraderStaging: true, verifiedToolStaging: true, candidateExtractionWorker: true, osSandbox: false, filesystemIsolation: false, networkIsolation: false, processIsolation: false, maliciousAgentGraderSecrecy: false },
+  });
+  const runFile = path.join(outputRoot, 'task-run.json');
+  writeAtomic(runFile, Buffer.from(JSON.stringify(report, null, 2) + '\n'));
+    if (keepWorkspace) report.workspaceRoot = workspaceRoot;
+    return { report, runFile, workspaceRoot: keepWorkspace ? workspaceRoot : null };
+  } finally {
+    if (!keepWorkspace) fs.rmSync(workspaceParent, { recursive: true, force: true });
+  }
+}
+
+module.exports = { runTask, loadGraderSpec, writeAtomic };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-tree-snapshot.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-tree-snapshot.js
new file mode 100644
index 0000000..b8ee46f
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-tree-snapshot.js
@@ -0,0 +1,231 @@
+'use strict';
+
+/* Deterministic, read-only filesystem tree snapshots and diffs. */
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+const { canonicalPath, matchesGlob } = require('./sg-path-policy.js');
+
+const DEFAULT_EXCLUDES = ['.git', '**/.git', '.git/**', '**/.git/**'];
+
+function compareNames(left, right) {
+  return left === right ? 0 : (left < right ? -1 : 1);
+}
+
+function sha256(value) {
+  return crypto.createHash('sha256').update(value).digest('hex');
+}
+
+function entryMode(stat) {
+  return stat.mode & 0o7777;
+}
+
+function normalizePatterns(value) {
+  if (value === false || value === null) return [];
+  if (value === undefined) return DEFAULT_EXCLUDES;
+  if (typeof value === 'string') return [value];
+  if (!Array.isArray(value) || value.some((pattern) => typeof pattern !== 'string')) {
+    throw new TypeError('exclude must be a string, an array of strings, false, or null');
+  }
+  return value;
+}
+
+function isExcluded(relativePath, patterns) {
+  return patterns.some((pattern) => matchesGlob(relativePath, pattern));
+}
+
+function snapshotEntry(absolutePath, relativePath, stat) {
+  const base = {
+    path: relativePath,
+    relativePath,
+    kind: null,
+    mode: entryMode(stat),
+    sha256: null,
+    size: 0,
+    target: null,
+  };
+  if (stat.isFile()) {
+    const bytes = fs.readFileSync(absolutePath);
+    return { ...base, kind: 'file', sha256: sha256(bytes), size: bytes.length };
+  }
+  if (stat.isDirectory()) return { ...base, kind: 'directory' };
+  if (stat.isSymbolicLink()) {
+    const target = fs.readlinkSync(absolutePath);
+    const bytes = Buffer.from(target);
+    return { ...base, kind: 'symlink', sha256: sha256(bytes), size: bytes.length, target };
+  }
+  return null;
+}
+
+function treeHash(entries) {
+  if (!Array.isArray(entries)) throw new TypeError('entries must be an array');
+  const normalized = entries.map((entry) => ({
+    ...entry,
+    path: entry.path === undefined ? entry.relativePath : entry.path,
+  }));
+  if (normalized.some((entry) => typeof entry.path !== 'string')) throw new TypeError('snapshot entry path must be a string');
+  const ordered = normalized.sort((left, right) => compareNames(left.path, right.path));
+  return sha256(Buffer.from(ordered.map((entry) => JSON.stringify([
+    entry.path,
+    entry.kind,
+    entry.mode,
+    entry.sha256,
+    entry.size,
+    entry.target,
+  ])).join('\n')));
+}
+
+function treeSha256(value, options = {}) {
+  return typeof value === 'string' ? snapshotTree(value, options).treeSha256 : treeHash(snapshotEntries(value));
+}
+
+function snapshotTree(root, options = {}) {
+  const physicalRoot = canonicalPath(root, { mustExist: true });
+  const rootStat = fs.lstatSync(physicalRoot);
+  if (!rootStat.isDirectory()) throw new TypeError(`snapshot root must be a directory: ${root}`);
+  const exclude = normalizePatterns(options.exclude);
+  const entries = [];
+
+  function visit(directory, prefix) {
+    const names = fs.readdirSync(directory).sort(compareNames);
+    for (const name of names) {
+      const relativePath = prefix ? `${prefix}/${name}` : name;
+      if (isExcluded(relativePath, exclude)) continue;
+      const absolutePath = path.join(directory, name);
+      const stat = fs.lstatSync(absolutePath);
+      const entry = snapshotEntry(absolutePath, relativePath, stat);
+      if (!entry) {
+        if (options.errorOnSpecialFile) throw new Error(`unsupported filesystem entry: ${relativePath}`);
+        continue;
+      }
+      entries.push(entry);
+      if (entry.kind === 'directory') visit(absolutePath, relativePath);
+    }
+  }
+
+  visit(physicalRoot, '');
+  return {
+    root: physicalRoot,
+    entries,
+    treeSha256: treeHash(entries),
+  };
+}
+
+function snapshotEntries(value) {
+  if (Array.isArray(value)) return value;
+  if (value && Array.isArray(value.entries)) return value.entries;
+  throw new TypeError('snapshot must be an entry array or an object with entries');
+}
+
+function indexEntries(snapshot) {
+  const out = new Map();
+  for (const entry of snapshotEntries(snapshot)) {
+    if (!entry || typeof (entry.path === undefined ? entry.relativePath : entry.path) !== 'string') throw new TypeError('snapshot entry path must be a string');
+    const relativePath = entry.path === undefined ? entry.relativePath : entry.path;
+    if (out.has(relativePath)) throw new Error(`duplicate snapshot entry: ${relativePath}`);
+    out.set(relativePath, entry);
+  }
+  return out;
+}
+
+function contentSignature(entry) {
+  return JSON.stringify([entry.kind, entry.sha256, entry.size, entry.target]);
+}
+
+function renameSignature(entry) {
+  if (entry.kind === 'directory') return null;
+  return JSON.stringify([entry.kind, entry.sha256, entry.size, entry.target]);
+}
+
+function diffTrees(before, after, options = {}) {
+  const beforeMap = indexEntries(before);
+  const afterMap = indexEntries(after);
+  let added = [...afterMap.keys()].filter((entryPath) => !beforeMap.has(entryPath)).sort();
+  let deleted = [...beforeMap.keys()].filter((entryPath) => !afterMap.has(entryPath)).sort();
+  const modified = [];
+  const modeChanged = [];
+  const typeChanged = [];
+  const renamed = [];
+
+  for (const entryPath of [...afterMap.keys()].filter((name) => beforeMap.has(name)).sort()) {
+    const oldEntry = beforeMap.get(entryPath);
+    const newEntry = afterMap.get(entryPath);
+    if (oldEntry.kind !== newEntry.kind) {
+      typeChanged.push({ path: entryPath, before: oldEntry, after: newEntry });
+    } else if (contentSignature(oldEntry) !== contentSignature(newEntry)) {
+      modified.push({ path: entryPath, before: oldEntry, after: newEntry, modeChanged: oldEntry.mode !== newEntry.mode });
+    } else if (oldEntry.mode !== newEntry.mode) {
+      modeChanged.push({ path: entryPath, before: oldEntry, after: newEntry });
+    }
+  }
+
+  if (options.detectRenames || options.renames) {
+    const available = new Map();
+    for (const entryPath of added) {
+      const signature = renameSignature(afterMap.get(entryPath));
+      if (signature === null) continue;
+      if (!available.has(signature)) available.set(signature, []);
+      available.get(signature).push(entryPath);
+    }
+    const renamedFrom = new Set();
+    const renamedTo = new Set();
+    for (const from of deleted) {
+      const oldEntry = beforeMap.get(from);
+      const signature = renameSignature(oldEntry);
+      const candidates = signature === null ? null : available.get(signature);
+      if (!candidates || candidates.length === 0) continue;
+      const to = candidates.shift();
+      const newEntry = afterMap.get(to);
+      renamed.push({
+        from,
+        to,
+        kind: newEntry.kind,
+        sha256: newEntry.sha256,
+        modeChanged: oldEntry.mode !== newEntry.mode,
+        before: oldEntry,
+        after: newEntry,
+      });
+      renamedFrom.add(from);
+      renamedTo.add(to);
+    }
+    deleted = deleted.filter((entryPath) => !renamedFrom.has(entryPath));
+    added = added.filter((entryPath) => !renamedTo.has(entryPath));
+  }
+
+  const addChanges = added.map((entryPath) => ({ change: 'add', path: entryPath, after: afterMap.get(entryPath) }));
+  const modifyChanges = modified.map((change) => ({ change: 'modify', ...change }));
+  const deleteChanges = deleted.map((entryPath) => ({ change: 'delete', path: entryPath, before: beforeMap.get(entryPath) }));
+  const modeChanges = modeChanged.map((change) => ({ change: 'mode', ...change }));
+  const typeChanges = typeChanged.map((change) => ({ change: 'type', ...change }));
+  const renameChanges = renamed.map((change) => ({ change: 'rename', path: change.to, ...change }));
+  const changes = [...addChanges, ...modifyChanges, ...deleteChanges, ...modeChanges, ...typeChanges, ...renameChanges]
+    .sort((left, right) => (left.path || left.from).localeCompare(right.path || right.from) || left.change.localeCompare(right.change));
+
+  return {
+    added: addChanges,
+    modified: modifyChanges,
+    deleted: deleteChanges,
+    modeChanged: modeChanges,
+    typeChanged: typeChanges,
+    renamed: renameChanges,
+    add: addChanges,
+    modify: modifyChanges,
+    delete: deleteChanges,
+    mode: modeChanges,
+    type: typeChanges,
+    renames: renameChanges,
+    changes,
+    changed: changes.length > 0,
+  };
+}
+
+module.exports = {
+  DEFAULT_EXCLUDES,
+  sha256,
+  treeHash,
+  treeSha256,
+  snapshotTree,
+  createTreeSnapshot: snapshotTree,
+  diffTrees,
+  diffTreeSnapshots: diffTrees,
+};
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/sg-visual-evidence.js b/research/agent-eval/results/executed-tooling/scripts/lib/sg-visual-evidence.js
new file mode 100644
index 0000000..987e181
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/sg-visual-evidence.js
@@ -0,0 +1,74 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { contentId, isDigest, verifyArtifacts } = require('./sg-evidence-utils.js');
+
+function validateVisualEvidence(evidence, options = {}) {
+  const errors = [];
+  if (!evidence || typeof evidence !== 'object' || Array.isArray(evidence)) return { valid: false, errors: ['visual evidence must be an object'], status: 'not-assessed' };
+  if (evidence.evidenceVersion !== '1.0') errors.push('visual evidenceVersion must be 1.0');
+  if (evidence.kind !== 'visual-evidence') errors.push('visual kind must be visual-evidence');
+  for (const field of ['referenceTreeSha256', 'candidateTreeSha256', 'configurationSha256']) if (!isDigest(evidence[field])) errors.push(`visual ${field} must be sha256:<hex>`);
+  if (!evidence.producer || typeof evidence.producer.name !== 'string' || typeof evidence.producer.version !== 'string') errors.push('visual producer name/version are required');
+  if (!evidence.thresholds || typeof evidence.thresholds !== 'object') errors.push('visual thresholds are required');
+  else {
+    if (typeof evidence.thresholds.maxPixelDiffRatio !== 'number' || evidence.thresholds.maxPixelDiffRatio < 0 || evidence.thresholds.maxPixelDiffRatio > 1) errors.push('visual maxPixelDiffRatio must be between 0 and 1');
+    if (typeof evidence.thresholds.minComputedStyleScore !== 'number' || evidence.thresholds.minComputedStyleScore < 0 || evidence.thresholds.minComputedStyleScore > 1) errors.push('visual minComputedStyleScore must be between 0 and 1');
+    if (typeof evidence.thresholds.minCoverage !== 'number' || evidence.thresholds.minCoverage < 0 || evidence.thresholds.minCoverage > 1) errors.push('visual minCoverage must be between 0 and 1');
+  }
+  if (!Array.isArray(evidence.scenarios) || !evidence.scenarios.length) errors.push('visual scenarios must be a non-empty array');
+  if (!Array.isArray(evidence.artifacts) || !evidence.artifacts.length) errors.push('visual artifacts must be a non-empty array');
+  const artifactIds = verifyArtifacts(evidence.artifacts, options.baseDir, errors);
+  const artifactById = new Map((evidence.artifacts || []).filter((item) => item && typeof item.id === 'string').map((item) => [item.id, item]));
+  const scenarioIds = new Set();
+  const scenarioResults = [];
+  for (const [index, scenario] of (evidence.scenarios || []).entries()) {
+    const scenarioErrors = [];
+    if (!scenario || typeof scenario !== 'object' || typeof scenario.id !== 'string' || !scenario.id) scenarioErrors.push(`scenarios[${index}].id is required`);
+    else if (scenarioIds.has(scenario.id)) scenarioErrors.push(`scenarios[${index}].id is duplicated`);
+    else scenarioIds.add(scenario.id);
+    if (!scenario || !scenario.viewport || !Number.isInteger(scenario.viewport.width) || scenario.viewport.width <= 0 || !Number.isInteger(scenario.viewport.height) || scenario.viewport.height <= 0) scenarioErrors.push(`scenarios[${index}].viewport width/height must be positive integers`);
+    for (const field of ['pixelDiffRatio', 'computedStyleScore', 'coverage']) if (!scenario || typeof scenario[field] !== 'number' || !Number.isFinite(scenario[field]) || scenario[field] < 0 || scenario[field] > 1) scenarioErrors.push(`scenarios[${index}].${field} must be a finite number between 0 and 1`);
+    if (!scenario || !Number.isInteger(scenario.stabilityFailures) || scenario.stabilityFailures < 0) scenarioErrors.push(`scenarios[${index}].stabilityFailures must be a non-negative integer`);
+    const refs = [];
+    for (const field of ['referenceArtifact', 'candidateArtifact', 'diffArtifact']) {
+      const id = scenario && scenario[field];
+      const artifact = artifactById.get(id);
+      if (typeof id !== 'string' || !artifactIds.has(id)) scenarioErrors.push(`scenarios[${index}].${field} must reference a verified artifact`);
+      else if (typeof artifact.mediaType !== 'string' || !artifact.mediaType.startsWith('image/')) scenarioErrors.push(`scenarios[${index}].${field} must reference an image artifact`);
+      refs.push(id);
+    }
+    if (new Set(refs).size !== refs.length) scenarioErrors.push(`scenarios[${index}] reference, candidate, and diff artifacts must be distinct`);
+    const thresholdFailed = scenario && evidence.thresholds && (
+      scenario.pixelDiffRatio > evidence.thresholds.maxPixelDiffRatio
+      || scenario.computedStyleScore < evidence.thresholds.minComputedStyleScore
+      || scenario.coverage < evidence.thresholds.minCoverage
+      || Number(scenario.stabilityFailures || 0) > 0
+    );
+    errors.push(...scenarioErrors);
+    scenarioResults.push({ id: scenario && scenario.id || `scenario-${index + 1}`, status: scenarioErrors.length ? 'not-assessed' : thresholdFailed ? 'failed' : 'passed', errors: scenarioErrors });
+  }
+  const expectedId = contentId('visual', evidence, ['evidenceId']);
+  if (evidence.evidenceId !== expectedId) errors.push(`visual evidenceId mismatch (expected ${expectedId})`);
+  const complete = errors.length === 0 && scenarioResults.length > 0 && scenarioResults.every((item) => item.status !== 'not-assessed');
+  return {
+    valid: errors.length === 0,
+    errors,
+    status: !complete ? 'not-assessed' : scenarioResults.some((item) => item.status === 'failed') ? 'failed' : 'passed',
+    scenarios: scenarioResults,
+    summary: {
+      total: scenarioResults.length,
+      passed: scenarioResults.filter((item) => item.status === 'passed').length,
+      failed: scenarioResults.filter((item) => item.status === 'failed').length,
+      notAssessed: scenarioResults.filter((item) => item.status === 'not-assessed').length,
+    },
+  };
+}
+
+function readVisualEvidence(file) {
+  const evidence = JSON.parse(fs.readFileSync(file, 'utf8'));
+  const validation = validateVisualEvidence(evidence, { baseDir: path.dirname(path.resolve(file)) });
+  return { evidence, validation };
+}
+
+module.exports = { validateVisualEvidence, readVisualEvidence };
diff --git a/research/agent-eval/results/executed-tooling/scripts/lib/task-run.schema.json b/research/agent-eval/results/executed-tooling/scripts/lib/task-run.schema.json
new file mode 100644
index 0000000..22cde09
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/lib/task-run.schema.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/contracts/task-run-v1.json",
+  "title": "SG Agent TaskRun v1.0",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["runVersion", "runId", "task", "agent", "patch", "grades", "secondaryErrors", "artifacts", "verdict", "termination", "capabilities"],
+  "properties": {
+    "runVersion": { "const": "1.0" },
+    "runId": { "type": "string", "pattern": "^task-run:[0-9a-f]{64}$" },
+    "task": { "type": "object" },
+    "agent": { "type": "object" },
+    "patch": { "type": ["object", "null"] },
+    "grades": { "type": "array" },
+    "secondaryErrors": { "type": "array" },
+    "artifacts": { "type": "array" },
+    "verdict": { "enum": ["passed", "agent-failed", "patch-invalid", "policy-violation", "grader-failed", "input-error", "infra-error"] },
+    "termination": { "type": "object" },
+    "capabilities": { "type": "object" }
+  }
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-data-pack b/research/agent-eval/results/executed-tooling/scripts/sg-data-pack
new file mode 100755
index 0000000..da41a74
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-data-pack
@@ -0,0 +1,124 @@
+#!/usr/bin/env node
+/*
+ * sg-data-pack — component-library data-layer normalization CLI
+ *
+ * Usage:
+ *   sg-data-pack extract <path/to/config.js> [--check]   Extract embedded data into a Data Pack, then validate + equivalence-test
+ *   sg-data-pack compile <data.json> [--domain-schema fragment.json] [--check]  Generate reviewed data.js/schema without erasing custom domain constraints
+ *   sg-data-pack validate <data.json> [--strict] [--verify-hash]   Standalone Data Pack validation
+ *   sg-data-pack rules <libDir | data-rules.json> [--strict]       Execute library-level data rules
+ *   sg-data-pack diff <old.json> <new.json> [--json]               Structural diff between two Data Packs
+ *   sg-data-pack templatize <instances.json> [--out dir] [--prefix n]  Derive item template from repeated HTML instances
+ *   sg-data-pack alias-candidates <data.json> <names.json|txt> [--json] [--top n]  Rank alias candidates for crawled names
+ *   sg-data-pack types <data.json> [--out file.d.ts] [--name N]   Generate TypeScript declarations from a pack
+ *   sg-data-pack recrawl-skeleton <data.json> <records.json> [--out dir]  Recrawl normalization pipeline (alias hits/misses + cross-check + review report)
+ *   sg-data-pack data-surface-import <manifest.json> [--out report.json] [--allow-review-required]  Read a ui-dismantler Data Surface Manifest without generating a Data Pack
+ *   sg-data-pack candidate <baseline.json> <review-report.json> <decisions.json> --records records.json --out candidate.json  Apply explicit Review Decisions
+ *   sg-data-pack report <libDir> [options]                 Generate a unified Library Evolution Report
+ *   sg-data-pack task <validate|inspect|run> <task.json>    Validate or execute an Agent Task Manifest
+ *   sg-data-pack grade <grader.json> <workspace>            Execute a task-specific grader
+ *   sg-data-pack evidence <runtime|visual> <evidence.json>  Validate runtime or visual evidence
+ *   sg-data-pack experiment <experiment.json> --out <dir>   Run a success-rate experiment
+ *   sg-data-pack schema                                  Print the contract-schema path
+ *   sg-data-pack loader                                  Print the runtime-validator path (copy into a library's lib/src/)
+ */
+'use strict';
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const [, , cmd, ...rest] = process.argv;
+const here = __dirname;
+
+function run(script, args) {
+  const r = spawnSync(process.execPath, [path.join(here, script), ...args], { stdio: 'inherit' });
+  process.exit(r.status === null ? 1 : r.status);
+}
+
+function printHelp() {
+  console.log(`sg-data-pack — component-library data-layer normalization CLI
+
+Usage:
+  sg-data-pack extract <config.js> [--check] [--compare-existing] [--force]  Bootstrap from source literals + equivalence-test
+  sg-data-pack compile <data.json> [--domain-schema fragment.json] [--check]  Generate data.js/schema and preserve explicit domain constraints
+  sg-data-pack validate <data.json> [--strict] [--verify-hash] [--asset-root dir]  Validate a Data Pack
+  sg-data-pack rules <libDir | data-rules.json> [--strict]   Execute library-level rules
+  sg-data-pack diff <old.json> <new.json> [--json]            Structural diff + derivation impact
+  sg-data-pack templatize <instances.json> [--out dir]       Derive a byte-exact repeated-item template
+  sg-data-pack alias-candidates <pack.json> <names> [--json] Rank crawl-name alias candidates
+  sg-data-pack types <data.json> [--out file] [--name N]     Generate TypeScript declarations
+  sg-data-pack recrawl-skeleton <pack.json> <records.json>   Build a crawl review report
+  sg-data-pack data-surface-import <manifest.json> [--out report.json] [--allow-review-required]  Read a ui-dismantler Data Surface Manifest
+  sg-data-pack candidate <baseline.json> <report.json> <decisions.json> --records <records.json> --out <candidate.json>  Apply explicit Review Decisions
+  sg-data-pack report <libDir> [--config config.js] [--baseline old.json] [--review review-report.json] [--audit candidate-audit.json] [--strict] [--verify-hash] [--out dir] [--json]
+  sg-data-pack task <validate|inspect|run> <task.json>        Validate or execute an Agent Task Manifest
+  sg-data-pack grade <grader.json> <workspace> [--artifacts dir] [--tree sha256:...] [--json]
+  sg-data-pack evidence <runtime|visual> <evidence.json> [--json]
+  sg-data-pack experiment <experiment.json> --out <dir> [--json]
+  sg-data-pack schema                                        Print the contract-schema path
+  sg-data-pack loader                                        Print the runtime-validator path`);
+}
+
+switch (cmd) {
+  case 'extract':
+    run('sg-pack-extract.js', rest);
+    break;
+  case 'compile':
+    run('sg-pack-compile.js', rest);
+    break;
+  case 'validate':
+    run('sg-pack-validate.js', rest);
+    break;
+  case 'rules':
+    run('sg-pack-rules.js', rest);
+    break;
+  case 'diff':
+    run('sg-pack-diff.js', rest);
+    break;
+  case 'templatize':
+    run('sg-pack-templatize.js', rest);
+    break;
+  case 'alias-candidates':
+    run('sg-pack-alias-candidates.js', rest);
+    break;
+  case 'types':
+    run('sg-pack-types.js', rest);
+    break;
+  case 'recrawl-skeleton':
+    run('sg-pack-recrawl-skeleton.js', rest);
+    break;
+  case 'data-surface-import':
+    run('sg-pack-data-surface.js', rest);
+    break;
+  case 'candidate':
+    run('sg-pack-candidate.js', rest);
+    break;
+  case 'report':
+    run('sg-pack-report.js', rest);
+    break;
+  case 'task':
+    run('sg-pack-task.js', rest);
+    break;
+  case 'grade':
+    run('sg-pack-grade.js', rest);
+    break;
+  case 'evidence':
+    run('sg-pack-evidence.js', rest);
+    break;
+  case 'experiment':
+    run('sg-pack-experiment.js', rest);
+    break;
+  case 'schema':
+    console.log(path.join(here, 'lib', 'data-pack.schema.json'));
+    break;
+  case 'loader':
+    console.log(path.join(here, 'lib', 'sg-data-loader.js'));
+    break;
+  case 'help':
+  case '--help':
+  case '-h':
+    printHelp();
+    break;
+  default:
+    printHelp();
+    process.exit(cmd ? 2 : 0);
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-alias-candidates.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-alias-candidates.js
new file mode 100644
index 0000000..d38c274
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-alias-candidates.js
@@ -0,0 +1,136 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-alias-candidates.js — alias candidate generator for crawl normalization.
+ *
+ * Input: a Data Pack + a list of crawled names (JSON array or newline text).
+ * For each name: report HIT (resolves to a stable id via aliases) or MISS with
+ * candidate ids ranked by similarity (normalized Levenshtein over entity ids,
+ * entity display names per kindNameFields/name, and existing alias keys).
+ *
+ * Usage:
+ *   sg-data-pack alias-candidates <data.json> <names.json|names.txt> [--json] [--top <n>]
+ *
+ * Exit: 0 = all names hit, 1 = misses found (review candidates and extend aliases),
+ *       2 = usage/io error.
+ *
+ * Workflow: run after a crawl, before writing any reference. Extend the pack's
+ * aliases with confirmed mappings only — candidates are suggestions, not truth.
+ */
+'use strict';
+const fs = require('fs');
+
+const [, , packPath, namesPath, ...rest] = process.argv;
+if (!packPath || !namesPath) {
+  console.error('Usage: sg-data-pack alias-candidates <data.json> <names.json|names.txt> [--json] [--top <n>]');
+  process.exit(2);
+}
+const asJson = rest.includes('--json');
+const topN = (() => { const i = rest.indexOf('--top'); return i >= 0 ? parseInt(rest[i + 1], 10) : 3; })();
+
+function load(p) {
+  try { return fs.readFileSync(p, 'utf8'); } catch (e) { console.error(`Cannot read ${p}: ${e.message}`); process.exit(2); }
+}
+const pack = JSON.parse(load(packPath));
+const raw = load(namesPath).trim();
+const names = raw.startsWith('[') ? JSON.parse(raw) : raw.split('\n').map((s) => s.trim()).filter(Boolean);
+
+/* ---------- similarity ---------- */
+function normalize(s) {
+  return String(s).toLowerCase()
+    .normalize('NFD').replace(/[̀-ͯ]/g, '')   // strip accents (Rosé -> rose)
+    .replace(/[\s·・\-_.'"()（）]+/g, '');                      // strip separators
+}
+function lev(a, b) {
+  const m = a.length, n = b.length;
+  if (!m) return n; if (!n) return m;
+  const dp = new Uint16Array(n + 1);
+  for (let j = 0; j <= n; j++) dp[j] = j;
+  for (let i = 1; i <= m; i++) {
+    let prev = dp[0]; dp[0] = i;
+    for (let j = 1; j <= n; j++) {
+      const t = dp[j];
+      dp[j] = Math.min(dp[j] + 1, dp[j - 1] + 1, prev + (a[i - 1] === b[j - 1] ? 0 : 1));
+      prev = t;
+    }
+  }
+  return dp[n];
+}
+function pairScore(a, b) {
+  const na = normalize(a), nb = normalize(b);
+  if (!na || !nb) return 0;
+  if (na === nb) return 1;
+  // prefix match (Roseanne ⊃ Rosé, 程兵 ⊃ 程) — strong signal for name variants
+  if (na.startsWith(nb) || nb.startsWith(na)) {
+    return 0.6 + 0.35 * (Math.min(na.length, nb.length) / Math.max(na.length, nb.length));
+  }
+  if (na.includes(nb) || nb.includes(na)) return Math.min(na.length, nb.length) / Math.max(na.length, nb.length) * 0.95;
+  return 1 - lev(na, nb) / Math.max(na.length, nb.length);
+}
+function similarity(a, b) {
+  const full = pairScore(a, b);
+  // token-level: multi-word names match on their strongest token pair
+  const ta = String(a).split(/[\s·・\-_]+/).filter(Boolean);
+  const tb = String(b).split(/[\s·・\-_]+/).filter(Boolean);
+  let best = 0;
+  for (const x of ta) for (const y of tb) best = Math.max(best, pairScore(x, y));
+  return Math.max(full, best * 0.9);
+}
+
+/* ---------- candidate surface ---------- */
+const nameField = (id, e) => {
+  const knf = (pack.kindNameFields || {})[e.kind];
+  return (knf && e[knf]) || e.name || id;
+};
+const surface = []; // [{id, text, via}]
+for (const [id, e] of Object.entries(pack.entities || {})) {
+  surface.push({ id, text: id, via: 'id' });
+  const dn = nameField(id, e);
+  if (dn && dn !== id) surface.push({ id, text: dn, via: 'name' });
+}
+for (const [alias, target] of Object.entries(pack.aliases || {})) {
+  const id = target && typeof target === 'object' ? target.id : target;
+  if (id && (pack.entities || {})[id]) surface.push({ id, text: alias, via: 'alias' });
+}
+
+const resolve = (name) => {
+  if ((pack.entities || {})[name]) return name;
+  let via = (pack.aliases || {})[name];
+  if (via && typeof via === 'object') via = via.id;
+  return via && (pack.entities || {})[via] ? via : null;
+};
+
+/* ---------- run ---------- */
+const results = [];
+let misses = 0;
+for (const name of names) {
+  const hit = resolve(name);
+  if (hit) { results.push({ name, status: 'hit', id: hit }); continue; }
+  misses++;
+  const scored = new Map(); // id -> best {score, via, text}
+  for (const s of surface) {
+    const sc = similarity(name, s.text);
+    const cur = scored.get(s.id);
+    if (!cur || sc > cur.score) scored.set(s.id, { score: sc, via: s.via, text: s.text });
+  }
+  const candidates = [...scored.entries()]
+    .map(([id, v]) => ({ id, score: +v.score.toFixed(3), matchedOn: `${v.via}:"${v.text}"` }))
+    .filter((c) => c.score >= 0.5)
+    .sort((a, b) => b.score - a.score)
+    .slice(0, topN);
+  results.push({ name, status: 'miss', candidates });
+}
+
+if (asJson) {
+  console.log(JSON.stringify(results, null, 2));
+} else {
+  for (const r of results) {
+    if (r.status === 'hit') console.log(`HIT   ${r.name} -> ${r.id}`);
+    else {
+      console.log(`MISS  ${r.name}`);
+      for (const c of r.candidates) console.log(`        ${c.score}  ${c.id}  (${c.matchedOn})`);
+      if (!r.candidates.length) console.log('        (no candidates above 0.50 — likely a genuinely new entity)');
+    }
+  }
+  console.log(`\n${names.length} names: ${names.length - misses} hit, ${misses} miss`);
+}
+process.exit(misses ? 1 : 0);
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-candidate.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-candidate.js
new file mode 100644
index 0000000..07b9d72
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-candidate.js
@@ -0,0 +1,242 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-candidate.js — apply explicit Review Decisions to a Data Pack.
+ *
+ * Usage:
+ *   sg-data-pack candidate <baseline.json> <review-report.json> <review-decisions.json>
+ *     --out <candidate.json> --records <records.json> [--audit <audit.json>] [--strict] [--force]
+ *
+ * Exit code: 0 = candidate written; 1 = review/data gate failed; 2 = usage/input error.
+ */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const os = require('node:os');
+const crypto = require('node:crypto');
+const { buildCandidate, CandidateError } = require('./lib/sg-pack-candidate.js');
+
+const [, , baselinePath, reportPath, decisionsPath, ...flags] = process.argv;
+if (!baselinePath || !reportPath || !decisionsPath) {
+  console.error('Usage: sg-data-pack candidate <baseline.json> <review-report.json> <review-decisions.json> --out <candidate.json> --records <records.json> [--audit <audit.json>] [--strict] [--force]');
+  process.exit(2);
+}
+
+function flag(name) {
+  const index = flags.indexOf(name);
+  if (index < 0) return null;
+  if (index + 1 >= flags.length || flags[index + 1].startsWith('--')) {
+    console.error(`${name} requires a value`);
+    process.exit(2);
+  }
+  return flags[index + 1];
+}
+
+const outPath = flag('--out');
+const auditPath = flag('--audit') || (outPath ? `${outPath}.audit.json` : null);
+const recordsPath = flag('--records');
+const strict = flags.includes('--strict');
+const force = flags.includes('--force');
+if (!outPath) {
+  console.error('candidate requires --out <candidate.json>');
+  process.exit(2);
+}
+if (!recordsPath) {
+  console.error('candidate requires --records <records.json> to bind the review report to its crawl input');
+  process.exit(2);
+}
+
+function resolve(file) { return path.resolve(file); }
+function canonicalPath(file) {
+  let absolute = resolve(file);
+  const missing = [];
+  while (!fs.existsSync(absolute)) {
+    const parent = path.dirname(absolute);
+    if (parent === absolute) break;
+    missing.unshift(path.basename(absolute));
+    absolute = parent;
+  }
+  try { absolute = fs.realpathSync(absolute); } catch (_) { /* checked below by input reads */ }
+  return path.join(absolute, ...missing);
+}
+function sameFile(left, right) {
+  const canonicalLeft = canonicalPath(left);
+  const canonicalRight = canonicalPath(right);
+  const caseInsensitiveFs = process.platform === 'darwin' || process.platform === 'win32';
+  if (canonicalLeft === canonicalRight || (caseInsensitiveFs && canonicalLeft.toLowerCase() === canonicalRight.toLowerCase())) return true;
+  try {
+    const a = fs.statSync(left);
+    const b = fs.statSync(right);
+    return a.dev === b.dev && a.ino === b.ino;
+  } catch (_) {
+    return false;
+  }
+}
+const inputPaths = [baselinePath, reportPath, decisionsPath, recordsPath].filter(Boolean).map(resolve);
+const outputPaths = [outPath, auditPath].map(resolve);
+if (sameFile(outputPaths[0], outputPaths[1])) {
+  console.error('candidate and audit output paths must be different');
+  process.exit(2);
+}
+if (outputPaths.some((output) => inputPaths.some((input) => sameFile(output, input)))) {
+  console.error('candidate output paths must not overwrite an input file');
+  process.exit(2);
+}
+
+function acquireOutputLock(paths) {
+  const caseInsensitiveFs = process.platform === 'darwin' || process.platform === 'win32';
+  const lockPaths = [...new Set(paths.map((file) => {
+    const canonical = canonicalPath(file);
+    return caseInsensitiveFs ? canonical.toLowerCase() : canonical;
+  }))]
+    .sort()
+    .map((target) => path.join(
+      os.tmpdir(),
+      'sg-data-pack-candidate-' + crypto.createHash('sha256').update(target).digest('hex') + '.lock',
+    ));
+  const acquired = [];
+  const release = () => {
+    for (const lockPath of acquired.splice(0)) {
+      try { fs.unlinkSync(lockPath); } catch (_) { /* already released */ }
+    }
+  };
+  try {
+    for (const lockPath of lockPaths) {
+      let acquiredOne = false;
+      for (let attempt = 0; attempt < 2 && !acquiredOne; attempt += 1) {
+        try {
+          let fd;
+          try {
+            fd = fs.openSync(lockPath, 'wx', 0o600);
+            fs.writeFileSync(fd, String(process.pid));
+          } finally {
+            if (fd !== undefined) fs.closeSync(fd);
+          }
+          acquired.push(lockPath);
+          acquiredOne = true;
+        } catch (error) {
+          if (error.code !== 'EEXIST') throw error;
+          let owner = null;
+          try { owner = Number(fs.readFileSync(lockPath, 'utf8')); } catch (_) { /* raced with cleanup */ }
+          if (!owner) throw new Error('candidate output is locked by another process');
+          try {
+            process.kill(owner, 0);
+            throw new Error('candidate output is locked by process ' + owner);
+          } catch (probeError) {
+            if (probeError.message.indexOf('locked by process') !== -1 || probeError.code !== 'ESRCH') throw probeError;
+            try { fs.unlinkSync(lockPath); } catch (_) { throw new Error('candidate output is locked by another process'); }
+          }
+        }
+      }
+      if (!acquiredOne) throw new Error('candidate output lock could not be acquired');
+    }
+    let released = false;
+    return () => { if (!released) { released = true; release(); } };
+  } catch (error) {
+    release();
+    throw error;
+  }
+}
+let releaseOutputLock;
+try { releaseOutputLock = acquireOutputLock(outputPaths); }
+catch (error) { console.error('candidate: ' + error.message); process.exit(2); }
+process.on('exit', () => { if (releaseOutputLock) releaseOutputLock(); });
+
+if (!force && outputPaths.some((file) => fs.existsSync(file))) {
+  console.error('candidate output already exists; use --force to replace it');
+  process.exit(2);
+}
+
+function readBytes(file, label) {
+  try { return fs.readFileSync(file); }
+  catch (error) { throw new CandidateError(`${label}: ${error.message}`, 2); }
+}
+function parse(bytes, label) {
+  try { return JSON.parse(bytes.toString('utf8')); }
+  catch (error) { throw new CandidateError(`${label}: ${error.message}`, 2); }
+}
+
+let result;
+try {
+  const baselineBytes = readBytes(baselinePath, 'Cannot read baseline Data Pack');
+  const reportBytes = readBytes(reportPath, 'Cannot read review report');
+  const decisionsBytes = readBytes(decisionsPath, 'Cannot read review decisions');
+  const recordsBytes = recordsPath ? readBytes(recordsPath, 'Cannot read records') : undefined;
+  const baselinePack = parse(baselineBytes, 'Invalid baseline Data Pack');
+  const report = parse(reportBytes, 'Invalid review report');
+  const decisions = parse(decisionsBytes, 'Invalid review decisions');
+  const rawRecords = parse(recordsBytes, 'Invalid records');
+  if (!report.candidateReview || !report.candidateReview.reportId) {
+    throw new CandidateError('review report is not candidate-ready; rerun recrawl-skeleton with --candidate-ready', 2);
+  }
+  result = buildCandidate({
+    baselinePack,
+    baselineBytes,
+    report,
+    decisions,
+    decisionsBytes,
+    strict,
+    recordsBytes,
+    rawRecords,
+  });
+} catch (error) {
+  const exitCode = error instanceof CandidateError && error.exitCode ? error.exitCode : 2;
+  console.error(`candidate: ${error.message}`);
+  process.exit(exitCode);
+}
+
+function atomicWritePair(firstPath, firstBytes, secondPath, secondBytes) {
+  const tempPaths = [firstPath, secondPath].map((file) => path.join(
+    path.dirname(file),
+    `.${path.basename(file)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`,
+  ));
+  const backups = [];
+  const installed = [];
+  const writeTemp = (file, bytes) => {
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    let fd;
+    try {
+      fd = fs.openSync(file, 'wx', 0o600);
+      fs.writeFileSync(fd, bytes);
+      fs.fsyncSync(fd);
+    } finally {
+      if (fd !== undefined) fs.closeSync(fd);
+    }
+  };
+  const cleanupTemps = () => tempPaths.forEach((file) => { try { fs.unlinkSync(file); } catch (_) { /* absent */ } });
+  const cleanupInstalled = () => installed.forEach((file) => { try { fs.unlinkSync(file); } catch (_) { /* absent */ } });
+  try {
+    writeTemp(tempPaths[0], firstBytes);
+    writeTemp(tempPaths[1], secondBytes);
+    for (const file of [firstPath, secondPath]) {
+      if (!fs.existsSync(file)) continue;
+      const backup = `${file}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.bak`;
+      fs.renameSync(file, backup);
+      backups.push({ file, backup });
+    }
+    fs.renameSync(tempPaths[0], firstPath);
+    installed.push(firstPath);
+    fs.renameSync(tempPaths[1], secondPath);
+    installed.push(secondPath);
+    for (const { backup } of backups) { try { fs.unlinkSync(backup); } catch (_) { /* best effort cleanup */ } }
+  } catch (error) {
+    cleanupTemps();
+    cleanupInstalled();
+    const rollbackErrors = [];
+    for (const { file, backup } of backups) {
+      try { if (fs.existsSync(file)) fs.unlinkSync(file); } catch (rollbackError) { rollbackErrors.push(`${file}: ${rollbackError.message}`); }
+      try { if (fs.existsSync(backup)) fs.renameSync(backup, file); } catch (rollbackError) { rollbackErrors.push(`${file}: ${rollbackError.message}`); }
+    }
+    if (rollbackErrors.length) throw new Error(`${error.message}; rollback incomplete: ${rollbackErrors.join('; ')}`);
+    throw error;
+  }
+}
+
+try {
+  atomicWritePair(outPath, result.candidateBytes, auditPath, result.auditBytes);
+} catch (error) {
+  console.error('candidate: could not write outputs: ' + error.message);
+  process.exit(2);
+}
+
+console.log(`candidate: wrote ${outPath}`);
+console.log(`audit: wrote ${auditPath}`);
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-compile.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-compile.js
new file mode 100644
index 0000000..51e3811
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-compile.js
@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { sameFile } = require('./lib/sg-path-policy.js');
+require('./lib/sg-data-loader.js');
+
+function usage() {
+  console.error('Usage: sg-data-pack compile <data.json> [--domain-schema <fragment.json>] [--check]');
+  process.exit(2);
+}
+
+const argv = process.argv.slice(2);
+const fileArg = argv.shift();
+if (!fileArg || fileArg.startsWith('--')) usage();
+let checkOnly = false;
+let domainSchemaArg = null;
+while (argv.length) {
+  const argument = argv.shift();
+  if (argument === '--check' && !checkOnly) checkOnly = true;
+  else if (argument === '--domain-schema' && domainSchemaArg === null && argv.length && !argv[0].startsWith('--')) domainSchemaArg = argv.shift();
+  else usage();
+}
+
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])]));
+}
+function equivalent(left, right) { return JSON.stringify(canonical(left)) === JSON.stringify(canonical(right)); }
+function readRegularJson(file, label) {
+  const stat = fs.lstatSync(file);
+  if (!stat.isFile() || stat.isSymbolicLink()) throw new Error(`${label} must be a regular non-symlink file`);
+  return JSON.parse(fs.readFileSync(file, 'utf8'));
+}
+
+const file = path.resolve(fileArg);
+const directory = path.dirname(file);
+const dataJs = path.join(directory, 'data.js');
+const schemaFile = path.join(directory, 'data.schema.json');
+const domainSchemaFile = domainSchemaArg === null ? null : path.resolve(domainSchemaArg);
+if (sameFile(file, dataJs) || sameFile(file, schemaFile) || sameFile(dataJs, schemaFile)
+  || domainSchemaFile && [file, dataJs, schemaFile].some((candidate) => sameFile(domainSchemaFile, candidate))) {
+  console.error('compile input and output paths must be distinct');
+  process.exit(2);
+}
+try {
+  const pack = readRegularJson(file, 'data.json');
+  const validation = globalThis.SGDataLoader.validate(pack);
+  if (validation.errors.length) throw new Error('Data Pack is invalid: ' + validation.errors.join('; '));
+  const schema = JSON.parse(fs.readFileSync(path.join(__dirname, 'lib', 'data-pack.schema.json'), 'utf8'));
+  const baseDomainSchema = schema.properties.domain;
+  if (domainSchemaFile) {
+    const fragment = readRegularJson(domainSchemaFile, 'domain schema fragment');
+    if (typeof fragment !== 'boolean' && (!fragment || typeof fragment !== 'object' || Array.isArray(fragment))) throw new Error('domain schema fragment must be a JSON object or boolean schema');
+    schema.properties.domain = fragment;
+  } else if (fs.existsSync(schemaFile)) {
+    const existing = readRegularJson(schemaFile, 'existing data.schema.json');
+    const hasExistingDomain = existing && existing.properties && Object.prototype.hasOwnProperty.call(existing.properties, 'domain');
+    const existingDomain = hasExistingDomain ? existing.properties.domain : undefined;
+    if (hasExistingDomain && !equivalent(existingDomain, baseDomainSchema)) {
+      throw new Error(`existing data.schema.json contains a custom domain schema; rerun with --domain-schema <fragment.json> to preserve it (${schemaFile})`);
+    }
+  }
+  schema.$id = `https://sg.local/${pack.meta.id}/data.schema.json`;
+  schema.title = `SG Data Pack ${pack.schemaVersion} — ${pack.meta.id} data contract`;
+  const outputs = [
+    { file: dataJs, bytes: Buffer.from('// @generated from reviewed data.json by sg-data-pack compile\n' + 'globalThis.SG_DATA_PACK = ' + JSON.stringify(pack) + ';\n') },
+    { file: schemaFile, bytes: Buffer.from(JSON.stringify(schema, null, 2) + '\n') },
+  ];
+  for (const output of outputs) if (fs.existsSync(output.file) && fs.lstatSync(output.file).isSymbolicLink()) throw new Error('compile output must not be a symlink: ' + output.file);
+  if (checkOnly) {
+    const drift = outputs.filter((output) => !fs.existsSync(output.file) || !fs.readFileSync(output.file).equals(output.bytes));
+    if (drift.length) {
+      drift.forEach((output) => console.error('compile output drift: ' + output.file));
+      process.exit(1);
+    }
+    console.log('✔ Compiled outputs match reviewed data.json');
+    process.exit(0);
+  }
+  const staged = outputs.map((output) => ({ ...output, temp: path.join(directory, `.${path.basename(output.file)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`), backup: null }));
+  try {
+    for (const output of staged) { fs.writeFileSync(output.temp, output.bytes, { flag: 'wx', mode: 0o600 }); }
+    for (const output of staged) if (fs.existsSync(output.file)) { output.backup = `${output.file}.${process.pid}.bak`; fs.renameSync(output.file, output.backup); }
+    for (const output of staged) fs.renameSync(output.temp, output.file);
+    for (const output of staged) if (output.backup) fs.unlinkSync(output.backup);
+  } catch (error) {
+    for (const output of staged) { try { fs.rmSync(output.temp, { force: true }); } catch (_) { /* absent */ } }
+    for (const output of staged) {
+      try { if (output.backup) { fs.rmSync(output.file, { force: true }); fs.renameSync(output.backup, output.file); } } catch (_) { /* reported below */ }
+    }
+    throw error;
+  }
+  outputs.forEach((output) => console.log('compiled: ' + output.file));
+} catch (error) {
+  console.error('compile: ' + error.message);
+  process.exit(error instanceof SyntaxError || error.code === 'ENOENT' ? 2 : 1);
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-data-surface.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-data-surface.js
new file mode 100755
index 0000000..64d1c75
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-data-surface.js
@@ -0,0 +1,119 @@
+#!/usr/bin/env node
+'use strict';
+
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+const { readDataSurfaceManifest } = require('./lib/sg-data-surface-import.js');
+
+function usage() {
+  return 'Usage: sg-data-pack data-surface-import <manifest.json> [--out report.json] [--allow-review-required]';
+}
+
+function parseArgs(argv) {
+  let file = null;
+  let out = null;
+  let allowReviewRequired = false;
+  const seen = new Set();
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === '--out') {
+      if (seen.has(arg)) throw new Error('duplicate option: --out');
+      seen.add(arg);
+      if (i + 1 >= argv.length || argv[i + 1].startsWith('--')) throw new Error('--out requires a value');
+      out = argv[++i];
+      continue;
+    }
+    if (arg === '--allow-review-required') {
+      if (seen.has(arg)) throw new Error('duplicate option: --allow-review-required');
+      seen.add(arg);
+      allowReviewRequired = true;
+      continue;
+    }
+    if (arg.startsWith('-')) throw new Error('unknown option: ' + arg);
+    if (file !== null) throw new Error('unexpected positional argument: ' + arg);
+    file = arg;
+  }
+  if (!file) throw new Error('manifest path is required');
+  return { file, out, allowReviewRequired };
+}
+
+function canonicalPath(file) {
+  let absolute = path.resolve(file);
+  const missing = [];
+  while (!fs.existsSync(absolute)) {
+    const parent = path.dirname(absolute);
+    if (parent === absolute) break;
+    missing.unshift(path.basename(absolute));
+    absolute = parent;
+  }
+  try { absolute = fs.realpathSync(absolute); } catch (_) { /* input reads report the concrete error */ }
+  return path.join(absolute, ...missing);
+}
+
+function sameFile(left, right) {
+  const canonicalLeft = canonicalPath(left);
+  const canonicalRight = canonicalPath(right);
+  const caseInsensitiveFs = process.platform === 'darwin' || process.platform === 'win32';
+  if (canonicalLeft === canonicalRight || (caseInsensitiveFs && canonicalLeft.toLowerCase() === canonicalRight.toLowerCase())) return true;
+  try {
+    const a = fs.statSync(left);
+    const b = fs.statSync(right);
+    return a.dev === b.dev && a.ino === b.ino;
+  } catch (_) {
+    return false;
+  }
+}
+
+function atomicWrite(file, bytes) {
+  const absolute = path.resolve(file);
+  const directory = path.dirname(absolute);
+  fs.mkdirSync(directory, { recursive: true });
+  const temporary = path.join(directory, `.${path.basename(absolute)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`);
+  let fd;
+  try {
+    fd = fs.openSync(temporary, 'wx', 0o600);
+    fs.writeFileSync(fd, bytes);
+    fs.fsyncSync(fd);
+    fs.closeSync(fd);
+    fd = undefined;
+    fs.renameSync(temporary, absolute);
+    try {
+      const dirFd = fs.openSync(directory, 'r');
+      try { fs.fsyncSync(dirFd); } finally { fs.closeSync(dirFd); }
+    } catch (_) { /* directory fsync is not available on every platform */ }
+  } finally {
+    if (fd !== undefined) fs.closeSync(fd);
+    try { fs.unlinkSync(temporary); } catch (_) { /* renamed or already removed */ }
+  }
+}
+
+let options;
+try {
+  options = parseArgs(process.argv.slice(2));
+} catch (error) {
+  console.error(error.message);
+  console.error(usage());
+  process.exit(2);
+}
+
+const inputPath = path.resolve(options.file);
+const outputPath = options.out ? path.resolve(options.out) : null;
+if (outputPath && sameFile(inputPath, outputPath)) {
+  console.error('--out must not be the same file as the input manifest (including symlink or hardlink aliases)');
+  process.exit(2);
+}
+
+try {
+  const report = readDataSurfaceManifest(inputPath, { requireReady: false });
+  const serialized = JSON.stringify(report, null, 2) + '\n';
+  if (outputPath) atomicWrite(outputPath, serialized);
+  else process.stdout.write(serialized);
+  if (report.reviewRequired && !options.allowReviewRequired) {
+    console.error(`Data Surface import blocked: ${report.blockers.join('; ')}`);
+    process.exit(1);
+  }
+} catch (error) {
+  console.error(error.message);
+  process.exit(2);
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-diff.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-diff.js
new file mode 100644
index 0000000..7308f01
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-diff.js
@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-diff.js — structural diff between two Data Packs (data.json).
+ *
+ * Usage:
+ *   sg-data-pack diff <old.json> <new.json>            Human-readable report
+ *   sg-data-pack diff <old.json> <new.json> --json     Machine-readable report
+ *
+ * Reports added/removed/changed entities, relations, aliases, contents, stages,
+ * sameAs links, and all v1.3 sections. Exit code: 0 = identical, 1 = differences,
+ * 2 = usage or input error.
+ */
+'use strict';
+const fs = require('node:fs');
+const { buildDiff, count } = require('./lib/sg-pack-diff.js');
+
+const [, , oldPath, newPath, ...flags] = process.argv;
+if (!oldPath || !newPath) {
+  console.error('Usage: sg-data-pack diff <old.json> <new.json> [--json]');
+  process.exit(2);
+}
+const asJson = flags.includes('--json');
+
+function load(file) {
+  try {
+    return JSON.parse(fs.readFileSync(file, 'utf8'));
+  } catch (error) {
+    console.error(`Cannot read ${file}: ${error.message}`);
+    process.exit(2);
+  }
+}
+
+const report = buildDiff(load(oldPath), load(newPath), { old: oldPath, new: newPath });
+
+if (asJson) {
+  const { total, ...jsonReport } = report;
+  console.log(JSON.stringify(jsonReport, null, 2));
+} else {
+  const formatList = (label, section, showFields) => {
+    if (!count(section)) return;
+    console.log(`\n[${label}] +${section.added.length} -${section.removed.length} ~${section.changed.length}`);
+    if (section.added.length) console.log('  added:   ' + section.added.join(', '));
+    if (section.removed.length) console.log('  removed: ' + section.removed.join(', '));
+    for (const change of section.changed.slice(0, showFields ? 50 : 10)) {
+      console.log(`  changed: ${change.id}`);
+      if (showFields) for (const field of change.fields.slice(0, 8)) console.log(`           .${field}`);
+    }
+  };
+  console.log(`sg-data-pack diff\n  old: ${oldPath}\n  new: ${newPath}`);
+  formatList('entities', report.entities, true);
+  formatList('relations', report.relations, true);
+  formatList('aliases', report.aliases, false);
+  formatList('contents', report.contents, true);
+  formatList('stages', report.stages, true);
+  if (report.stages.orderChanged) console.log('  order:   changed');
+  if (report.sameAs.added.length || report.sameAs.removed.length) {
+    console.log(`\n[sameAs] +${report.sameAs.added.length} -${report.sameAs.removed.length}`);
+    report.sameAs.added.forEach((value) => console.log('  added:   ' + value));
+    report.sameAs.removed.forEach((value) => console.log('  removed: ' + value));
+  }
+  formatList('derivations', report.derivations, true);
+  formatList('assets', report.assets, true);
+  formatList('provenance', report.provenance, false);
+  formatList('attributeTypes', report.attributeTypes, true);
+  formatList('relationTypes', report.relationTypes, true);
+  formatList('heroRelTypes', report.heroRelTypes, true);
+  formatList('kindNameFields', report.kindNameFields, true);
+  formatList('domain', report.domain, true);
+  formatList('meta', report.meta, true);
+  console.log(report.total ? `\n${report.total} difference(s) found.` : '\nNo structural differences.');
+  if (report.derivationsImpacted.length) {
+    console.log('\n⚠ derivations impact (blast radius):');
+    for (const derivation of report.derivationsImpacted) {
+      console.log(`  • ${derivation.name} (${derivation.kind})  <- ${derivation.triggers.join(', ')}`);
+      if (derivation.note) console.log(`      ${derivation.note}`);
+    }
+  }
+}
+process.exit(report.total ? 1 : 0);
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-evidence.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-evidence.js
new file mode 100644
index 0000000..f4d7907
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-evidence.js
@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+'use strict';
+const path = require('node:path');
+const { readRuntimeEvidence } = require('./lib/sg-runtime-evidence.js');
+const { readVisualEvidence } = require('./lib/sg-visual-evidence.js');
+
+const [, , kind, fileArg, ...args] = process.argv;
+if (!['runtime', 'visual'].includes(kind) || !fileArg || args.some((item) => item !== '--json') || args.filter((item) => item === '--json').length > 1) {
+  console.error('Usage: sg-data-pack evidence <runtime|visual> <evidence.json> [--json]');
+  process.exit(2);
+}
+try {
+  const loaded = kind === 'runtime' ? readRuntimeEvidence(path.resolve(fileArg)) : readVisualEvidence(path.resolve(fileArg));
+  if (args.includes('--json')) process.stdout.write(JSON.stringify(loaded, null, 2) + '\n');
+  else {
+    console.log(`${kind} evidence: ${loaded.validation.status}`);
+    loaded.validation.errors.forEach((error) => console.error('  ' + error));
+  }
+  process.exit(loaded.validation.status === 'passed' ? 0 : loaded.validation.status === 'failed' || loaded.validation.status === 'not-assessed' ? 1 : 2);
+} catch (error) { console.error(`${kind} evidence: ${error.message}`); process.exit(2); }
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-experiment.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-experiment.js
new file mode 100644
index 0000000..69d8d89
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-experiment.js
@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+'use strict';
+const path = require('node:path');
+const { runExperiment } = require('./lib/sg-experiment.js');
+
+const [, , specArg, ...args] = process.argv;
+if (!specArg || specArg.startsWith('--')) { console.error('Usage: sg-data-pack experiment <experiment.json> --out <dir> [--json]'); process.exit(2); }
+let out = null;
+let json = false;
+for (let index = 0; index < args.length; index += 1) {
+  const name = args[index];
+  if (name === '--json') { if (json) { console.error('Duplicate option: --json'); process.exit(2); } json = true; continue; }
+  if (name !== '--out') { console.error('Unknown option: ' + name); process.exit(2); }
+  if (out) { console.error('Duplicate option: --out'); process.exit(2); }
+  out = args[index + 1];
+  if (!out || out.startsWith('--')) { console.error('--out requires a value'); process.exit(2); }
+  index += 1;
+}
+if (!out) { console.error('experiment requires --out <dir>'); process.exit(2); }
+try {
+  const report = runExperiment({ specFile: path.resolve(specArg), outputRoot: path.resolve(out) });
+  if (json) process.stdout.write(JSON.stringify(report, null, 2) + '\n');
+  else {
+    console.log(`Experiment ${report.experimentId}`);
+    console.log(`pass rate: ${report.summary.passRate === null ? 'N/A' : (report.summary.passRate * 100).toFixed(1) + '%'} (${report.summary.passed}/${report.summary.validTrials})`);
+    console.log(`claim level: ${report.summary.claimLevel}`);
+    console.log(`report: ${path.resolve(out, 'EXPERIMENT.md')}`);
+  }
+  process.exit(report.summary.infraErrors || report.summary.invalidTrials ? 3 : report.summary.passed === report.summary.validTrials ? 0 : 1);
+} catch (error) { console.error('experiment: ' + error.message); process.exit(2); }
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-extract.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-extract.js
new file mode 100644
index 0000000..677f65d
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-extract.js
@@ -0,0 +1,200 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-extract.js — SG Data Pack extraction / validation / equivalence testing
+ *
+ * Usage:
+ *   node sg-pack-extract.js <path/to/config.js>
+ *   node sg-pack-extract.js <path/to/config.js> --check
+ *
+ * The shared core defaults generated packs with: config.schemaVersion || '1.3'.
+ */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { runExtraction, deepEqual } = require('./lib/sg-pack-extract-core.js');
+
+const [name, ...args] = process.argv.slice(2);
+const allowedFlags = new Set(['--check', '--compare-existing', '--check-output', '--force']);
+const seen = new Set();
+if (!name || name.startsWith('--')) {
+  console.error('Usage: node sg-pack-extract.js <path/to/config.js> [--check] [--compare-existing|--check-output] [--force]');
+  process.exit(2);
+}
+for (const flag of args) {
+  if (!allowedFlags.has(flag)) {
+    console.error('Unknown option: ' + flag);
+    process.exit(2);
+  }
+  if (seen.has(flag)) {
+    console.error('Duplicate option: ' + flag);
+    process.exit(2);
+  }
+  seen.add(flag);
+}
+if (seen.has('--compare-existing') && seen.has('--check-output')) {
+  console.error('--compare-existing and --check-output are aliases; use only one');
+  process.exit(2);
+}
+const compareExisting = seen.has('--compare-existing') || seen.has('--check-output');
+const checkOnly = seen.has('--check') || compareExisting;
+const force = seen.has('--force');
+if (force && checkOnly) {
+  console.error('--force is only valid when writing extract outputs');
+  process.exit(2);
+}
+const configPath = path.resolve(process.cwd(), name.endsWith('.js') ? name : name + '.config.js');
+if (!fs.existsSync(configPath)) {
+  console.error('Config file not found: ' + configPath);
+  process.exit(2);
+}
+
+let extraction;
+try {
+  extraction = runExtraction(configPath);
+} catch (error) {
+  console.error('Extraction failed: ' + error.message);
+  process.exit(error.kind === 'input' ? 2 : 1);
+}
+const { config, defaults, pack, validation, equivalence } = extraction;
+
+console.log('== [' + config.libId + '] 1/4 Slicing engine default-data literals');
+for (const spec of config.literals) {
+  const value = defaults[spec.key];
+  const count = Array.isArray(value) ? value.length : Object.keys(value || {}).length;
+  console.log('   - ' + spec.key + ': ' + count + ' entries');
+}
+
+console.log('== 2/4 Building spec-compliant Data Pack');
+const missing = Object.entries(pack.assets || {}).filter(([, asset]) => !asset.exists);
+console.log('   - entities: ' + Object.keys(pack.entities || {}).length +
+  ', relations: ' + (pack.relations || []).length +
+  ', stages: ' + (pack.stages || []).length +
+  ', assets: ' + Object.keys(pack.assets || {}).length + (missing.length ? ' (missing ' + missing.length + ')' : ''));
+
+console.log('== 3/4 SGDataLoader validation' + (config.domainChecks ? ' + domain library-level checks' : ''));
+validation.errors.forEach((error) => console.error('   [ERROR] ' + error));
+validation.warnings.forEach((warning) => console.warn('   [warn]  ' + warning));
+if (validation.errors.length) {
+  console.error('Validation failed; aborting.');
+  process.exit(1);
+}
+
+console.log('== 4/4 Equivalence test (fromPack(pack) vs engine defaults)');
+if (equivalence.diffs.length) {
+  equivalence.diffs.slice(0, 20).forEach((diff) => console.error('   [DIFF] ' + diff));
+  console.error('Equivalence test failed: ' + equivalence.diffs.length + ' differences; aborting.');
+  process.exit(1);
+}
+const coverage = equivalence.coverage || { extracted: [], mapped: [], ignored: [], unmapped: [], complete: false };
+console.log('   - all ' + equivalence.comparisons + ' deep comparisons passed; configured equivalence surface is lossless');
+console.log('   - coverage: ' + coverage.mapped.length + ' mapped, ' + coverage.ignored.length + ' explicitly ignored, ' + coverage.unmapped.length + ' unmapped');
+
+const dataDir = path.join(config.libDir, 'lib', 'data');
+const dataPath = path.join(dataDir, 'data.json');
+let existingDiffs = null;
+if (compareExisting) {
+  if (!fs.existsSync(dataPath)) {
+    console.log('== Existing output drift: NOT_ASSESSED (data.json does not exist)');
+  } else {
+    try {
+      const existing = JSON.parse(fs.readFileSync(dataPath, 'utf8'));
+      existingDiffs = deepEqual(existing, pack, '$', []);
+    } catch (error) {
+      console.error('Existing data.json cannot be compared: ' + error.message);
+      process.exit(2);
+    }
+    if (existingDiffs.length) {
+      existingDiffs.slice(0, 20).forEach((diff) => console.error('   [OUTPUT-DRIFT] ' + diff));
+      console.error('Existing output drift detected: ' + existingDiffs.length + ' differences');
+      process.exit(1);
+    }
+    console.log('== Existing output drift: passed (data.json matches the fresh in-memory pack)');
+  }
+}
+
+function assertOutputPathSafe(directory, files) {
+  if (fs.existsSync(directory) && fs.lstatSync(directory).isSymbolicLink()) throw new Error('data output directory must not be a symlink');
+  for (const file of files) {
+    if (fs.existsSync(file) && fs.lstatSync(file).isSymbolicLink()) throw new Error('extract output must not be a symlink: ' + file);
+  }
+}
+
+function atomicWriteSet(outputs) {
+  const temporary = outputs.map(({ file, bytes }) => ({
+    file,
+    bytes,
+    temp: path.join(path.dirname(file), `.${path.basename(file)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`),
+    backup: null,
+  }));
+  const installed = [];
+  try {
+    for (const output of temporary) {
+      let fd;
+      try {
+        fd = fs.openSync(output.temp, 'wx', 0o600);
+        fs.writeFileSync(fd, output.bytes);
+        fs.fsyncSync(fd);
+      } finally {
+        if (fd !== undefined) fs.closeSync(fd);
+      }
+    }
+    for (const output of temporary) {
+      if (!fs.existsSync(output.file)) continue;
+      output.backup = `${output.file}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.bak`;
+      fs.renameSync(output.file, output.backup);
+    }
+    for (const output of temporary) {
+      fs.renameSync(output.temp, output.file);
+      installed.push(output.file);
+    }
+    for (const output of temporary) if (output.backup) fs.unlinkSync(output.backup);
+  } catch (error) {
+    for (const output of temporary) { try { if (fs.existsSync(output.temp)) fs.unlinkSync(output.temp); } catch (_) { /* absent */ } }
+    for (const file of installed) { try { if (fs.existsSync(file)) fs.unlinkSync(file); } catch (_) { /* absent */ } }
+    const rollbackErrors = [];
+    for (const output of temporary) {
+      if (!output.backup) continue;
+      try { if (fs.existsSync(output.backup)) fs.renameSync(output.backup, output.file); } catch (rollbackError) { rollbackErrors.push(rollbackError.message); }
+    }
+    if (rollbackErrors.length) throw new Error(error.message + '; rollback incomplete: ' + rollbackErrors.join('; '));
+    throw error;
+  }
+}
+
+if (!checkOnly) {
+  fs.mkdirSync(dataDir, { recursive: true });
+  const json = JSON.stringify(pack, null, 2) + '\n';
+  if (fs.existsSync(dataPath)) {
+    let existing;
+    try { existing = JSON.parse(fs.readFileSync(dataPath, 'utf8')); }
+    catch (error) { console.error('Existing data.json cannot be safely replaced: ' + error.message); process.exit(2); }
+    const diffs = deepEqual(existing, pack, '$', []);
+    if (diffs.length && !force) {
+      diffs.slice(0, 20).forEach((diff) => console.error('   [OUTPUT-DRIFT] ' + diff));
+      console.error('Refusing to overwrite an existing divergent data.json; review the drift or rerun with --force');
+      process.exit(1);
+    }
+  }
+
+  const schema = JSON.parse(fs.readFileSync(path.join(__dirname, 'lib', 'data-pack.schema.json'), 'utf8'));
+  schema.$id = 'https://sg.local/' + config.libId + '/data.schema.json';
+  schema.title = 'SG Data Pack v1.3 — ' + config.libId + ' data contract';
+  if (config.domainSchema) schema.properties.domain = config.domainSchema;
+  const outputs = [
+    { file: dataPath, bytes: json },
+    { file: path.join(dataDir, 'data.js'), bytes: '// @generated by sg-data-pack — do not edit by hand; regenerate from the reviewed Data Pack source\n' + 'globalThis.SG_DATA_PACK = ' + JSON.stringify(pack) + ';\n' },
+    { file: path.join(dataDir, 'data.schema.json'), bytes: JSON.stringify(schema, null, 2) + '\n' },
+  ];
+  try {
+    assertOutputPathSafe(dataDir, outputs.map((item) => item.file));
+    atomicWriteSet(outputs);
+  } catch (error) {
+    console.error('Could not install extract outputs: ' + error.message);
+    process.exit(2);
+  }
+
+  console.log('Written:');
+  outputs.forEach((output) => console.log('   - ' + output.file));
+}
+console.log('✔ [' + config.libId + '] done');
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-grade.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-grade.js
new file mode 100644
index 0000000..61d682a
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-grade.js
@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { gradeWorkspace } = require('./lib/sg-grader.js');
+
+const [, , specArg, workspaceArg, ...args] = process.argv;
+const usage = 'Usage: sg-data-pack grade <grader.json> <workspace> [--artifacts dir] [--task-id id] [--tree sha256:...] [--out grade.json] [--json]';
+if (!specArg || !workspaceArg || specArg.startsWith('--') || workspaceArg.startsWith('--')) { console.error(usage); process.exit(2); }
+const values = new Set(['--artifacts', '--task-id', '--tree', '--out']);
+const booleans = new Set(['--json']);
+const options = {};
+for (let index = 0; index < args.length; index += 1) {
+  const name = args[index];
+  if (booleans.has(name)) { if (options[name]) { console.error(`Duplicate option: ${name}`); process.exit(2); } options[name] = true; continue; }
+  if (!values.has(name)) { console.error(`Unknown option: ${name}`); process.exit(2); }
+  const value = args[index + 1];
+  if (!value || value.startsWith('--')) { console.error(`${name} requires a value`); process.exit(2); }
+  if (options[name]) { console.error(`Duplicate option: ${name}`); process.exit(2); }
+  options[name] = value; index += 1;
+}
+try {
+  const spec = JSON.parse(fs.readFileSync(path.resolve(specArg), 'utf8'));
+  const report = gradeWorkspace({
+    spec, workspaceRoot: path.resolve(workspaceArg),
+    artifactRoot: options['--artifacts'] ? path.resolve(options['--artifacts']) : null,
+    taskId: options['--task-id'] || null, treeSha256: options['--tree'] || null,
+  });
+  const serialized = JSON.stringify(report, null, 2) + '\n';
+  if (options['--out']) fs.writeFileSync(path.resolve(options['--out']), serialized);
+  if (options['--json'] || !options['--out']) process.stdout.write(serialized);
+  else console.log(`grade: ${report.verdict} (${report.score}/${report.maximumScore})`);
+  process.exit(report.verdict === 'passed' ? 0 : 1);
+} catch (error) { console.error('grade: ' + error.message); process.exit(error.code === 'INVALID_GRADER_SPEC' ? 2 : 3); }
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-recrawl-skeleton.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-recrawl-skeleton.js
new file mode 100644
index 0000000..1dc26b0
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-recrawl-skeleton.js
@@ -0,0 +1,141 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-recrawl-skeleton.js - one-command recrawl normalization pipeline.
+ *
+ * Input:  an existing Data Pack (baseline) + a list of crawled records (JSON
+ *         array of {crawledName, ...fields} or newline-separated names).
+ * Output: a recrawl review skeleton:
+ *   - hits:    names that resolve via existing aliases (auto-confirmed)
+ *   - misses:  names with ranked alias candidates (awaiting confirmation)
+ *   - crossCheck: for hits, compares crawled fields vs baseline (agree/conflict/gap)
+ *   - review-report.json: agree / autoMergeable / needsHumanReview split
+ *
+ * Usage:
+ *   sg-data-pack recrawl-skeleton <data.json> <records.json> [--out <dir>] [--source <url>] [--fetchedAt <date>] [--candidate-ready --origin <origin>]
+ *
+ * Exit: 0 = skeleton written, 1 = misses found (review needed), 2 = usage error.
+ *
+ * After review: extend pack.aliases with confirmed mappings, then run the gate.
+ */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const review = require('./lib/sg-recrawl-review.js');
+
+const [, , packPath, recordsPath, ...rest] = process.argv;
+if (!packPath || !recordsPath) {
+  console.error('Usage: sg-data-pack recrawl-skeleton <data.json> <records.json> [--out <dir>] [--source <url>] [--fetchedAt <date>]');
+  process.exit(2);
+}
+
+function flag(name) {
+  const index = rest.indexOf(name);
+  if (index < 0) return null;
+  if (index + 1 >= rest.length || rest[index + 1].startsWith('--')) {
+    console.error(`${name} requires a value`);
+    process.exit(2);
+  }
+  return rest[index + 1];
+}
+
+const outDir = flag('--out') || '.';
+const source = flag('--source') || '(unspecified)';
+const origin = flag('--origin');
+const fetchedAt = flag('--fetchedAt') || new Date().toISOString().slice(0, 10);
+const candidateReady = rest.includes('--candidate-ready');
+
+function loadJson(file, label) {
+  try { return JSON.parse(fs.readFileSync(file, 'utf8')); }
+  catch (error) { console.error(label + ': ' + error.message); process.exit(2); }
+}
+
+let packBytes;
+let recordsBytes;
+try {
+  packBytes = fs.readFileSync(packPath);
+  recordsBytes = fs.readFileSync(recordsPath);
+} catch (error) {
+  console.error('Cannot read recrawl input: ' + error.message);
+  process.exit(2);
+}
+const pack = loadJson(packPath, 'Invalid data.json');
+const rawRecords = loadJson(recordsPath, 'Invalid records.json');
+let records;
+try {
+  records = review.normalizeRecords(rawRecords);
+} catch (error) {
+  console.error('Invalid records.json: ' + error.message);
+  process.exit(2);
+}
+
+const legacy = review.buildLegacyProjection(pack, rawRecords);
+const { summary, hits, misses, autoMergeable, needsHumanReview } = legacy;
+const report = {
+  source,
+  fetchedAt,
+  baseline: packPath,
+  summary,
+  hits,
+  misses,
+  autoMergeable,
+  needsHumanReview,
+};
+
+if (candidateReady) {
+  try {
+    report.candidateReview = review.buildCandidateReview({
+      pack,
+      rawRecords,
+      baselineBytes: packBytes,
+      recordsBytes,
+      origin,
+      sourceUrl: source,
+      fetchedAt,
+    });
+  } catch (error) {
+    console.error('Invalid candidate-ready options: ' + error.message);
+    process.exit(2);
+  }
+}
+
+function atomicWrite(file, content) {
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const temp = path.join(
+    path.dirname(file),
+    `.${path.basename(file)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`,
+  );
+  let fd;
+  try {
+    fd = fs.openSync(temp, 'wx');
+    fs.writeFileSync(fd, content, 'utf8');
+    fs.fsyncSync(fd);
+    fs.closeSync(fd);
+    fd = undefined;
+    fs.renameSync(temp, file);
+  } finally {
+    if (fd !== undefined) fs.closeSync(fd);
+    try { fs.unlinkSync(temp); } catch (_) { /* already renamed or never created */ }
+  }
+}
+
+const reportPath = path.join(outDir, 'review-report.json');
+try {
+  atomicWrite(reportPath, JSON.stringify(report, null, 2) + '\n');
+} catch (error) {
+  console.error('Could not write review report: ' + error.message);
+  process.exit(2);
+}
+
+console.log(`recrawl-skeleton: ${records.length} records -> ${hits.length} hits, ${misses.length} misses`);
+console.log(`  cross-check: ${report.autoMergeable.length} auto-mergeable (gap fill), ${report.needsHumanReview.length} needs human review (conflict)`);
+if (misses.length) {
+  console.log('\nmisses (extend pack.aliases after confirmation):');
+  for (const miss of misses) {
+    console.log(`  ${miss.crawledName}`);
+    for (const candidate of miss.candidates) console.log(`      ${candidate.score}  ${candidate.id}  (${candidate.matchedOn})`);
+    if (!miss.candidates.length) console.log('      (no candidates - likely a genuinely new entity)');
+  }
+}
+console.log(`\nwrote ${reportPath}`);
+process.exit(misses.length ? 1 : 0);
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-report.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-report.js
new file mode 100644
index 0000000..627b513
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-report.js
@@ -0,0 +1,729 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-report.js — unified user-facing Library Evolution Report.
+ *
+ * Usage:
+ *   sg-data-pack report <libDir> [--config config.js] [--baseline old.json]
+ *     [--review review-report.json] [--audit candidate-audit.json]
+ *     [--strict] [--verify-hash] [--asset-root dir] [--out report-dir] [--json]
+ */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { spawnSync } = require('node:child_process');
+const { buildReport, diagnosticFinding, assurance, change, sha256 } = require('./lib/sg-run-report.js');
+const { inspectPack } = require('./lib/sg-pack-inspect.js');
+const { executeRules } = require('./lib/sg-pack-rules-core.js');
+const { buildDiff } = require('./lib/sg-pack-diff.js');
+const { ExtractionError } = require('./lib/sg-pack-extract-core.js');
+const { validateReportShape } = require('./lib/sg-pack-candidate.js');
+require('./lib/sg-data-loader.js');
+const loader = globalThis.SGDataLoader;
+const { sha256: reviewSha256, stableJson: reviewStableJson } = require('./lib/sg-recrawl-review.js');
+const { renderJson, renderTerminalSummary, renderMarkdown } = require('./lib/sg-report-renderer.js');
+
+const [, , libDirArg, ...args] = process.argv;
+const usage = 'Usage: sg-data-pack report <libDir> [--config config.js] [--baseline old.json] [--review review-report.json] [--audit candidate-audit.json] [--strict] [--verify-hash] [--asset-root dir] [--out report-dir] [--json]';
+if (!libDirArg || libDirArg.startsWith('--')) {
+  console.error(usage);
+  process.exit(2);
+}
+
+const valueFlags = new Set(['--config', '--baseline', '--review', '--audit', '--asset-root', '--out']);
+const booleanFlags = new Set(['--strict', '--verify-hash', '--json']);
+const options = {};
+for (let index = 0; index < args.length; index += 1) {
+  const name = args[index];
+  if (booleanFlags.has(name)) {
+    if (Object.prototype.hasOwnProperty.call(options, name)) {
+      console.error(`Duplicate option: ${name}`);
+      process.exit(2);
+    }
+    options[name] = true;
+    continue;
+  }
+  if (!valueFlags.has(name)) {
+    console.error(`Unknown option: ${name}`);
+    process.exit(2);
+  }
+  if (Object.prototype.hasOwnProperty.call(options, name)) {
+    console.error(`Duplicate option: ${name}`);
+    process.exit(2);
+  }
+  const value = args[index + 1];
+  if (!value || value.startsWith('--')) {
+    console.error(`${name} requires a value`);
+    process.exit(2);
+  }
+  options[name] = value;
+  index += 1;
+}
+
+const libDir = path.resolve(libDirArg);
+const configPath = options['--config'] ? path.resolve(options['--config']) : null;
+const baselinePath = options['--baseline'] ? path.resolve(options['--baseline']) : null;
+const reviewPath = options['--review'] ? path.resolve(options['--review']) : null;
+const auditPath = options['--audit'] ? path.resolve(options['--audit']) : null;
+const outDir = options['--out'] ? path.resolve(options['--out']) : null;
+const assetRoot = options['--asset-root'] ? path.resolve(options['--asset-root']) : null;
+const strict = Boolean(options['--strict']);
+const verifyHash = Boolean(options['--verify-hash']);
+const asJson = Boolean(options['--json']);
+const dataFile = path.join(libDir, 'lib', 'data', 'data.json');
+const rulesFile = path.join(libDir, 'lib', 'data', 'data-rules.json');
+const guideFile = path.join(libDir, 'lib', 'data', 'DATA-GUIDE.md');
+
+function canonicalPath(file) {
+  let absolute = path.resolve(file);
+  const missing = [];
+  while (!fs.existsSync(absolute)) {
+    const parent = path.dirname(absolute);
+    if (parent === absolute) break;
+    missing.unshift(path.basename(absolute));
+    absolute = parent;
+  }
+  try { absolute = fs.realpathSync(absolute); } catch (_) { /* input reads report the concrete error */ }
+  return path.join(absolute, ...missing);
+}
+
+function sameFile(left, right) {
+  const a = canonicalPath(left);
+  const b = canonicalPath(right);
+  const insensitive = process.platform === 'darwin' || process.platform === 'win32';
+  if (a === b || (insensitive && a.toLowerCase() === b.toLowerCase())) return true;
+  try {
+    const leftStat = fs.statSync(left);
+    const rightStat = fs.statSync(right);
+    return leftStat.dev === rightStat.dev && leftStat.ino === rightStat.ino;
+  } catch (_) {
+    return false;
+  }
+}
+
+if (outDir) {
+  const outputs = [path.join(outDir, 'report.json'), path.join(outDir, 'REPORT.md')];
+  const inputs = [dataFile, rulesFile, guideFile, configPath, baselinePath, reviewPath, auditPath].filter(Boolean);
+  const libraryRoot = canonicalPath(libDir);
+  const outputRoot = canonicalPath(outDir);
+  const relativeLibraryOutput = path.relative(libraryRoot, outputRoot);
+  const insideLibrary = relativeLibraryOutput === '' || (!relativeLibraryOutput.startsWith('..' + path.sep) && relativeLibraryOutput !== '..' && !path.isAbsolute(relativeLibraryOutput));
+  if (insideLibrary) {
+    const suggestion = path.join(path.dirname(libraryRoot), path.basename(libraryRoot) + '-report');
+    console.error(`Report output is inside the source library:\n  source: ${libraryRoot}\n  output: ${outputRoot}\nUse a sibling directory, for example:\n  --out ${suggestion}`);
+    process.exit(2);
+  }
+  if (sameFile(outputs[0], outputs[1])) {
+    console.error(`Report outputs resolve to the same file:\n  ${canonicalPath(outputs[0])}\n  ${canonicalPath(outputs[1])}`);
+    process.exit(2);
+  }
+  const collision = outputs.find((output) => inputs.some((input) => sameFile(output, input)));
+  if (collision) {
+    console.error(`Report output must not overwrite a consumed input:\n  output: ${canonicalPath(collision)}`);
+    process.exit(2);
+  }
+}
+
+function safeRelative(file) {
+  return path.relative(process.cwd(), path.resolve(file)) || path.basename(file);
+}
+
+function readInput(file, label) {
+  let bytes;
+  try {
+    bytes = fs.readFileSync(file);
+  } catch (error) {
+    throw new Error(`${label} cannot be read: ${error.message}`);
+  }
+  try {
+    return { value: JSON.parse(bytes.toString('utf8')), bytes, digest: sha256(bytes) };
+  } catch (error) {
+    throw new Error(`${label} is not valid JSON: ${error.message}`);
+  }
+}
+
+function digestFile(file, label) {
+  try {
+    return sha256(fs.readFileSync(file));
+  } catch (error) {
+    throw new Error(`${label} cannot be read: ${error.message}`);
+  }
+}
+
+function recordConsumed(inputs, file, digest) {
+  if (!inputs.consumedFiles) inputs.consumedFiles = {};
+  inputs.consumedFiles[canonicalPath(file)] = digest;
+}
+
+function runExtractionIsolated(configPath, expectedLibDir, expectedLibId) {
+  const result = spawnSync(process.execPath, [
+    path.join(__dirname, 'lib', 'sg-pack-extract-report-worker.js'),
+    configPath,
+    expectedLibDir,
+    expectedLibId || '',
+  ], {
+    encoding: 'utf8',
+    stdio: ['ignore', 'pipe', 'pipe', 'pipe'],
+    maxBuffer: 32 * 1024 * 1024,
+  });
+  if (result.error) throw new ExtractionError(result.error.message, 'input');
+  if (result.stdout) process.stderr.write(result.stdout);
+  if (result.stderr) process.stderr.write(result.stderr);
+  const payloadText = result.output && result.output[3] ? String(result.output[3]) : '';
+  if (!payloadText) throw new ExtractionError('extraction worker returned no structured result', 'gate');
+  let payload;
+  try { payload = JSON.parse(payloadText); }
+  catch (error) { throw new ExtractionError(`extraction worker returned invalid result: ${error.message}`, 'gate'); }
+  if (!payload.ok) throw new ExtractionError(payload.error.message, payload.error.kind || 'gate');
+  return payload.result;
+}
+
+function addValidationFindings(findings, validation, phase, strictMode) {
+  for (const error of validation.errors || []) {
+    findings.push(diagnosticFinding({ value: error, phase, severity: 'error', category: 'contract', blocking: true }));
+  }
+  for (const warning of validation.warnings || []) {
+    findings.push(diagnosticFinding({ value: warning, phase, severity: 'warning', category: 'contract', blocking: strictMode }));
+  }
+}
+
+function addAssetFindings(findings, assets) {
+  for (const item of assets.mismatches || []) {
+    findings.push(diagnosticFinding({
+      value: `asset hash mismatch: ${item.path}`,
+      code: 'ASSET_HASH_MISMATCH', phase: 'validate', category: 'asset', severity: 'error', blocking: true,
+      title: '资源文件与清单 hash 不一致', subject: item.path, expected: item.expected, actual: item.actual, evidence: item,
+      repairHint: '确认文件来源后重新生成资产清单；不要在未复核内容的情况下只改 hash。',
+    }));
+  }
+  for (const item of assets.missing || []) {
+    findings.push(diagnosticFinding({
+      value: `asset verification failed: ${item.path} (${item.error})`,
+      code: 'ASSET_UNREADABLE', phase: 'validate', category: 'asset', severity: 'error', blocking: true,
+      title: '资源文件无法校验', subject: item.path, expected: item.expected, evidence: item,
+      repairHint: '修正 assets 路径或补齐文件，再重新运行 --verify-hash。',
+    }));
+  }
+}
+
+function findingCode(classification) {
+  return {
+    conflict: 'RECRAWL_CONFLICT', gap: 'RECRAWL_GAP', miss: 'RECRAWL_MISS', unsupported: 'RECRAWL_UNSUPPORTED',
+  }[classification] || 'RECRAWL_REVIEW';
+}
+
+function addReviewFinding(findings, risks, item, resolved) {
+  const classification = item.classification || 'review';
+  const itemId = item.itemId || `legacy:${classification}:${item.index}`;
+  const status = resolved.has(itemId) ? 'resolved' : 'review-required';
+  findings.push(diagnosticFinding({
+    value: `${classification} requires an explicit review decision`,
+    code: findingCode(classification), phase: 'review', category: classification === 'miss' ? 'identity' : 'review',
+    severity: 'warning', status, blocking: status === 'review-required',
+    title: status === 'resolved' ? `${classification} 已完成人工复核` : `${classification} 待人工复核`,
+    subject: itemId, evidence: item,
+  }));
+  if (status !== 'resolved') {
+    risks.push({
+      id: `risk-${itemId}`, severity: 'high', status: 'open', title: `${classification} review item`,
+      reason: `review item ${itemId} 尚未被有效 Candidate audit 覆盖。`, itemId,
+    });
+  }
+  return status;
+}
+
+function validateCandidateReview(review) {
+  if (!review || typeof review !== 'object' || review.version !== '1.0') throw new Error('candidateReview.version must be "1.0"');
+  if (!Array.isArray(review.observations) || !Array.isArray(review.reviewItems)) throw new Error('candidateReview observations and reviewItems must be arrays');
+  if (typeof review.reportId !== 'string') throw new Error('candidateReview.reportId is required');
+  for (const field of ['baselineSha256', 'recordsSha256']) {
+    if (typeof review[field] !== 'string' || !/^sha256:[0-9a-f]{64}$/.test(review[field])) throw new Error(`candidateReview.${field} must be a SHA-256 digest`);
+  }
+  const { reportId, ...withoutId } = review;
+  if (reportId !== reviewSha256(reviewStableJson(withoutId))) throw new Error('candidateReview.reportId does not match report contents');
+  const ids = review.reviewItems.map((item) => item && item.itemId);
+  if (ids.some((id) => typeof id !== 'string' || !id) || new Set(ids).size !== ids.length) throw new Error('candidateReview contains invalid or duplicate itemId values');
+  try { validateReportShape({ candidateReview: review }); }
+  catch (error) { throw new Error(`candidateReview shape is invalid: ${error.message}`); }
+  return review;
+}
+
+function collectReview(report, resolved, findings, risks) {
+  let items;
+  if (report.candidateReview) {
+    const review = validateCandidateReview(report.candidateReview);
+    items = review.reviewItems;
+  } else {
+    if (!Array.isArray(report.misses) || !Array.isArray(report.autoMergeable) || !Array.isArray(report.needsHumanReview)) {
+      throw new Error('review report must contain candidateReview or the legacy misses/autoMergeable/needsHumanReview arrays');
+    }
+    items = [];
+    report.misses.forEach((entry, index) => items.push({ itemId: `legacy:miss:${index}`, index, kind: 'identity', classification: 'miss', ...entry }));
+    report.autoMergeable.forEach((entry, recordIndex) => (entry.gaps || []).forEach((gap, fieldIndex) => items.push({ itemId: `legacy:gap:${recordIndex}:${fieldIndex}`, index: `${recordIndex}:${fieldIndex}`, kind: 'field', classification: 'gap', entityId: entry.id, ...gap })));
+    report.needsHumanReview.forEach((entry, recordIndex) => (entry.conflicts || []).forEach((conflict, fieldIndex) => items.push({ itemId: `legacy:conflict:${recordIndex}:${fieldIndex}`, index: `${recordIndex}:${fieldIndex}`, kind: 'field', classification: 'conflict', entityId: entry.id, ...conflict })));
+  }
+  const statuses = items.map((item) => addReviewFinding(findings, risks, item, resolved));
+  const open = statuses.filter((status) => status === 'review-required').length;
+  const classifications = items.reduce((counts, item) => {
+    counts[item.classification] = (counts[item.classification] || 0) + 1;
+    return counts;
+  }, {});
+  return {
+    assurance: assurance('crawl-review', 'Crawl review', open ? 'review-required' : 'passed', {
+      blocking: Boolean(open), evidence: `${items.length} review items / ${open} unresolved`, details: classifications,
+    }),
+    total: items.length,
+    open,
+    reportId: report.candidateReview && report.candidateReview.reportId,
+    baselineSha256: report.candidateReview && report.candidateReview.baselineSha256,
+  };
+}
+
+function validateAudit(audit, strictMode, expected = {}) {
+  if (!audit || typeof audit !== 'object' || audit.auditVersion !== '1.0') throw new Error('candidate audit must use auditVersion "1.0"');
+  if (!audit.inputs || typeof audit.inputs !== 'object') throw new Error('candidate audit inputs are required');
+  for (const field of ['baselineSha256', 'recordsSha256', 'reportId', 'decisionsSha256', 'candidateSha256']) {
+    if (typeof audit.inputs[field] !== 'string' || !/^sha256:[0-9a-f]{64}$/.test(audit.inputs[field])) throw new Error(`candidate audit inputs.${field} must be a SHA-256 digest`);
+  }
+  if (expected.candidateSha256 && audit.inputs.candidateSha256 !== expected.candidateSha256) throw new Error('candidate audit candidateSha256 does not match current Data Pack');
+  if (expected.baselineSha256 && audit.inputs.baselineSha256 !== expected.baselineSha256) throw new Error('candidate audit baselineSha256 does not match reviewed baseline');
+  if (expected.reportId && audit.inputs.reportId !== expected.reportId) throw new Error('candidate audit reportId does not match supplied review report');
+  if (!audit.validation || !Array.isArray(audit.validation.errors) || !Array.isArray(audit.validation.warnings)) throw new Error('candidate audit validation errors/warnings must be arrays');
+  if (!Array.isArray(audit.operations) || !Array.isArray(audit.unresolved) || !Array.isArray(audit.derivationsImpacted)) throw new Error('candidate audit operations/unresolved/derivationsImpacted must be arrays');
+  const allowedResults = new Set(['applied', 'noop-already-applied', 'kept-baseline', 'rejected']);
+  const operationIds = new Set();
+  for (const operation of audit.operations) {
+    if (!operation || typeof operation.itemId !== 'string' || !operation.itemId || !allowedResults.has(operation.result)) throw new Error('candidate audit contains an invalid operation');
+    if (operationIds.has(operation.itemId)) throw new Error(`candidate audit contains a duplicate operation: ${operation.itemId}`);
+    operationIds.add(operation.itemId);
+  }
+  const unresolvedIds = new Set();
+  for (const unresolved of audit.unresolved) {
+    const itemId = typeof unresolved === 'string' ? unresolved : unresolved && unresolved.itemId;
+    if (typeof itemId !== 'string' || !itemId) throw new Error('candidate audit contains an invalid unresolved item');
+    if (unresolvedIds.has(itemId) || operationIds.has(itemId)) throw new Error(`candidate audit item appears more than once: ${itemId}`);
+    unresolvedIds.add(itemId);
+  }
+  if (expected.itemIds) {
+    const expectedIds = new Set(expected.itemIds);
+    const observedIds = new Set([...operationIds, ...unresolvedIds]);
+    if (expectedIds.size !== observedIds.size || [...expectedIds].some((itemId) => !observedIds.has(itemId))) {
+      throw new Error('candidate audit operations/unresolved do not exactly cover review items');
+    }
+  }
+  const failed = audit.status !== 'valid' || audit.validation.errors.length > 0 || unresolvedIds.size > 0 || (strictMode && audit.validation.warnings.length > 0);
+  return { failed, resolved: new Set(failed ? [] : operationIds) };
+}
+
+function stageMap(stages) {
+  return Object.fromEntries((stages || []).map((stage, index) => [stage && (stage.key || stage.id) || `#${index}`, stage]));
+}
+
+function pairMap(pairs) {
+  return Object.fromEntries((pairs || []).map((pair) => [JSON.stringify([...pair].sort()), pair]));
+}
+
+function relationKey(relation) {
+  if (relation && relation.id) return `id:${relation.id}`;
+  const scope = Array.isArray(relation && relation.scope) ? [...new Set(relation.scope)].sort().join('|') : '*';
+  return `${relation && relation.a}::${relation && relation.b}::${relation && relation.type}::scope=${scope}`;
+}
+
+function relationMap(relations) {
+  const map = {};
+  const seen = {};
+  for (const relation of relations || []) {
+    const base = relationKey(relation);
+    seen[base] = (seen[base] || 0) + 1;
+    map[seen[base] === 1 ? base : `${base}#${seen[base]}`] = relation;
+  }
+  return map;
+}
+
+function sectionMap(pack, section) {
+  if (section === 'relations') return relationMap(pack.relations);
+  if (section === 'stages') return stageMap(pack.stages);
+  if (section === 'sameAs') return pairMap(pack.sameAs);
+  return pack[section] && typeof pack[section] === 'object' && !Array.isArray(pack[section]) ? pack[section] : {};
+}
+
+function collectChanges(diff, oldPack, newPack) {
+  const changes = [];
+  for (const [section, sectionDiff] of Object.entries(diff)) {
+    if (!sectionDiff || typeof sectionDiff !== 'object' || !Array.isArray(sectionDiff.added)) continue;
+    const beforeMap = sectionMap(oldPack, section);
+    const afterMap = sectionMap(newPack, section);
+    for (const id of sectionDiff.added) changes.push(change({ id: `add-${section}-${id}`, section, kind: 'added', title: `新增 ${section} 记录`, subject: id, after: afterMap[id] === undefined ? id : afterMap[id] }));
+    for (const id of sectionDiff.removed) changes.push(change({ id: `remove-${section}-${id}`, section, kind: 'removed', title: `移除 ${section} 记录`, subject: id, before: beforeMap[id] === undefined ? id : beforeMap[id] }));
+    for (const item of sectionDiff.changed || []) changes.push(change({ id: `change-${section}-${item.id}`, section, kind: 'updated', title: `更新 ${section} 记录`, subject: item.id, before: beforeMap[item.id], after: afterMap[item.id], fields: item.fields }));
+  }
+  if (diff.stages && diff.stages.orderChanged) {
+    changes.push(change({
+      id: 'reorder-stages', section: 'stages', kind: 'reordered', title: '调整 stage 顺序', subject: 'stages',
+      before: (oldPack.stages || []).map((stage, index) => stage && (stage.key || stage.id) || `#${index}`),
+      after: (newPack.stages || []).map((stage, index) => stage && (stage.key || stage.id) || `#${index}`),
+    }));
+  }
+  return changes;
+}
+
+function reportMode() {
+  if (auditPath) return 'candidate';
+  if (reviewPath) return 'review';
+  if (baselinePath) return 'evolution';
+  if (configPath) return 'integration';
+  return 'pack';
+}
+
+function collectReport() {
+  const findings = [];
+  const changes = [];
+  const assurances = [];
+  const risks = [];
+  const operations = [];
+  const impacts = [];
+  const artifacts = [];
+  const raw = {};
+  const inputs = { strict, verifyHash };
+  let pack = {};
+  let packInspection = null;
+  let libId = path.basename(libDir);
+  let inputError = false;
+  let baselineInput = null;
+  let reviewInput = null;
+  let auditInput = null;
+  let auditState = { failed: false, resolved: new Set() };
+
+  try {
+    if (!fs.existsSync(libDir) || !fs.statSync(libDir).isDirectory()) throw new Error(`library directory not found: ${libDir}`);
+    packInspection = inspectPack({ dataFile, verifyHash, assetRoot });
+    pack = packInspection.pack;
+    libId = pack && pack.meta && pack.meta.id || libId;
+    inputs.dataFile = safeRelative(dataFile);
+    inputs.dataSha256 = packInspection.digest;
+    if (assetRoot) inputs.assetRoot = safeRelative(assetRoot);
+    inputs.consumedFiles = Object.fromEntries(Object.entries(packInspection.consumedFiles || {}).map(([file, digest]) => [canonicalPath(file), digest]));
+    raw.validation = packInspection.validation;
+    raw.assets = packInspection.assets;
+    addValidationFindings(findings, packInspection.validation, 'validate', strict);
+    addAssetFindings(findings, packInspection.assets);
+    const contractFailed = packInspection.validation.errors.length > 0 || (strict && packInspection.validation.warnings.length > 0);
+    assurances.push(assurance('data-pack-contract', 'Data Pack contract', contractFailed ? 'failed' : 'passed', {
+      evidence: `SGDataLoader; ${packInspection.validation.errors.length} errors / ${packInspection.validation.warnings.length} warnings${strict ? ' (strict)' : ''}`,
+      details: { errors: packInspection.validation.errors.length, warnings: packInspection.validation.warnings.length, strict }, blocking: contractFailed,
+    }));
+    const missingManifestHashes = packInspection.assets.skipped.filter((item) => item.reason === 'missing-manifest-hash');
+    const assetFailed = verifyHash && (packInspection.assets.mismatches.length > 0 || packInspection.assets.missing.length > 0);
+    const assetUnassessed = verifyHash && missingManifestHashes.length > 0;
+    if (assetUnassessed) {
+      risks.push({ id: 'risk-asset-manifest-hash', severity: 'medium', status: 'open', title: '部分资源没有 manifest hash', reason: `${missingManifestHashes.length} 个资源没有可比对的 SHA-1，完整资源完整性未评估。`, assets: missingManifestHashes });
+    }
+    assurances.push(assurance('asset-integrity', 'Asset integrity', !verifyHash ? 'not-assessed' : assetFailed ? 'failed' : assetUnassessed ? 'not-assessed' : 'passed', {
+      evidence: verifyHash ? `${packInspection.assets.summary.checked} files checked` : 'verify hash not requested',
+      details: packInspection.assets.summary, blocking: assetFailed,
+    }));
+    artifacts.push({ id: 'data-json', type: 'input', path: safeRelative(dataFile), digest: packInspection.digest });
+  } catch (error) {
+    inputError = true;
+    findings.push(diagnosticFinding({ value: error, phase: 'validate', category: 'contract', severity: 'error', blocking: true, code: 'INPUT_ERROR', title: '无法读取 Data Pack' }));
+    assurances.push(assurance('data-pack-contract', 'Data Pack contract', 'failed', { blocking: true, evidence: error.message }));
+    assurances.push(assurance('asset-integrity', 'Asset integrity', 'not-assessed', { blocking: false, evidence: 'Data Pack input unavailable' }));
+  }
+
+  if (baselinePath) {
+    try {
+      baselineInput = readInput(baselinePath, 'baseline Data Pack');
+      const baselineValidation = loader.validate(baselineInput.value);
+      if (baselineValidation.errors.length || (strict && baselineValidation.warnings.length)) {
+        throw new Error(`baseline Data Pack is invalid: ${[...baselineValidation.errors, ...(strict ? baselineValidation.warnings : [])].join('; ')}`);
+      }
+      if (packInspection && baselineInput.value.meta.id !== pack.meta.id) {
+        throw new Error(`baseline meta.id does not match current Data Pack: ${baselineInput.value.meta.id}`);
+      }
+      inputs.baseline = safeRelative(baselinePath);
+      inputs.baselineSha256 = baselineInput.digest;
+      recordConsumed(inputs, baselinePath, baselineInput.digest);
+      artifacts.push({ id: 'baseline-data', type: 'input', path: safeRelative(baselinePath), digest: baselineInput.digest });
+    } catch (error) {
+      baselineInput = null;
+      inputError = true;
+      findings.push(diagnosticFinding({ value: error, phase: 'diff', category: 'contract', severity: 'error', blocking: true, code: 'DIFF_INPUT_ERROR', title: '无法读取 baseline Data Pack' }));
+    }
+  }
+  if (reviewPath) {
+    try {
+      reviewInput = readInput(reviewPath, 'review report');
+      inputs.review = safeRelative(reviewPath);
+      inputs.reviewSha256 = reviewInput.digest;
+      recordConsumed(inputs, reviewPath, reviewInput.digest);
+      artifacts.push({ id: 'review-report', type: 'input', path: safeRelative(reviewPath), digest: reviewInput.digest });
+    } catch (error) {
+      reviewInput = null;
+      inputError = true;
+      findings.push(diagnosticFinding({ value: error, phase: 'review', category: 'review', severity: 'error', blocking: true, code: 'REVIEW_INPUT_ERROR', title: '无法读取 review report' }));
+    }
+  }
+  if (auditPath) {
+    try {
+      auditInput = readInput(auditPath, 'candidate audit');
+      auditState = validateAudit(auditInput.value, strict, {
+        candidateSha256: packInspection && packInspection.digest,
+        baselineSha256: baselineInput && baselineInput.digest,
+        reportId: reviewInput && reviewInput.value && reviewInput.value.candidateReview && reviewInput.value.candidateReview.reportId,
+        itemIds: reviewInput && reviewInput.value && reviewInput.value.candidateReview && reviewInput.value.candidateReview.reviewItems
+          ? reviewInput.value.candidateReview.reviewItems.map((item) => item.itemId)
+          : null,
+      });
+      inputs.audit = safeRelative(auditPath);
+      inputs.auditSha256 = auditInput.digest;
+      recordConsumed(inputs, auditPath, auditInput.digest);
+      artifacts.push({ id: 'candidate-audit', type: 'input', path: safeRelative(auditPath), digest: auditInput.digest });
+    } catch (error) {
+      auditInput = null;
+      inputError = true;
+      findings.push(diagnosticFinding({ value: error, phase: 'candidate', category: 'review', severity: 'error', blocking: true, code: 'AUDIT_INPUT_ERROR', title: '无法读取 Candidate audit' }));
+    }
+  }
+
+  if (packInspection && fs.existsSync(rulesFile)) {
+    try {
+      const rulesInput = readInput(rulesFile, 'data-rules.json');
+      inputs.rules = safeRelative(rulesFile);
+      inputs.rulesSha256 = rulesInput.digest;
+      recordConsumed(inputs, rulesFile, rulesInput.digest);
+      artifacts.push({ id: 'data-rules', type: 'input', path: safeRelative(rulesFile), digest: rulesInput.digest });
+      const rulesResult = executeRules(rulesInput.value, pack);
+      raw.rules = rulesResult;
+      for (const error of rulesResult.structuralErrors) findings.push(diagnosticFinding({ value: error, phase: 'rules', category: 'rule', severity: 'error', blocking: true, code: 'RULES_STRUCTURE', title: '规则文件结构错误' }));
+      for (const result of rulesResult.results) {
+        if (result.status === 'failed' || result.status === 'error') {
+          const isBlocking = result.level === 'hard' || result.status === 'error' || strict;
+          findings.push(diagnosticFinding({
+            value: result.exception ? result.exception.message : result.rule, phase: 'rules', category: 'rule',
+            severity: result.level === 'hard' || result.status === 'error' ? 'error' : 'warning', blocking: isBlocking,
+            code: result.id, title: result.status === 'error' ? '规则执行错误' : '库级规则未通过', subject: result.subject,
+            evidence: result.evidence, repairHint: result.repairHint,
+          }));
+        }
+        if (result.status === 'no-check') risks.push({ id: `risk-rule-${result.id}`, severity: 'medium', status: 'open', title: `规则 ${result.id} 没有 executable check`, reason: '规则只能作为文档提示，不能被自动验证。' });
+      }
+      for (const [index, note] of ((rulesResult.profile && rulesResult.profile.dataShapeNotes) || []).entries()) {
+        risks.push({ id: `risk-library-boundary-${index + 1}`, severity: 'low', status: 'monitored', title: '组件库开发边界', reason: note, source: 'data-rules.json profile.dataShapeNotes' });
+      }
+      const rulesFailed = rulesResult.structuralErrors.length > 0 || rulesResult.counts.hardFail > 0 || rulesResult.counts.errors > 0 || (strict && rulesResult.counts.softFail > 0);
+      assurances.push(assurance('library-rules', 'Library rules', rulesFailed ? 'failed' : 'passed', {
+        evidence: `${rulesResult.counts.passed}/${rulesResult.counts.total} executable rules passed`, details: rulesResult.counts, blocking: rulesFailed,
+      }));
+    } catch (error) {
+      inputError = true;
+      findings.push(diagnosticFinding({ value: error, phase: 'rules', category: 'rule', severity: 'error', blocking: true, code: 'RULES_INPUT_ERROR', title: '无法读取 library rules' }));
+      assurances.push(assurance('library-rules', 'Library rules', 'failed', { blocking: true, evidence: error.message }));
+    }
+  } else {
+    assurances.push(assurance('library-rules', 'Library rules', 'not-assessed', { blocking: false, evidence: packInspection ? 'data-rules.json not found' : 'Data Pack input unavailable' }));
+    risks.push({ id: 'risk-no-rules', severity: 'medium', status: 'open', title: 'Library rules 未评估', reason: packInspection ? '组件库特定约束没有被自动评估。' : 'Data Pack 输入不可用。' });
+  }
+
+  if (fs.existsSync(guideFile)) {
+    try {
+      const digest = digestFile(guideFile, 'DATA-GUIDE.md');
+      inputs.dataGuide = safeRelative(guideFile);
+      inputs.dataGuideSha256 = digest;
+      recordConsumed(inputs, guideFile, digest);
+      artifacts.push({ id: 'data-guide', type: 'input', path: safeRelative(guideFile), digest });
+    } catch (error) {
+      inputError = true;
+      findings.push(diagnosticFinding({ value: error, phase: 'coverage', category: 'contract', severity: 'error', blocking: true, code: 'GUIDE_INPUT_ERROR', title: '无法读取 DATA-GUIDE' }));
+    }
+  }
+
+  if (configPath) {
+    try {
+      const configDigest = digestFile(configPath, 'extract config');
+      inputs.config = safeRelative(configPath);
+      inputs.configSha256 = configDigest;
+      recordConsumed(inputs, configPath, configDigest);
+      artifacts.push({ id: 'extract-config', type: 'input', path: safeRelative(configPath), digest: configDigest });
+      const extraction = runExtractionIsolated(configPath, libDir, libId);
+      const extractionFiles = Object.fromEntries(Object.entries(extraction.consumedFiles || {}).sort(([left], [right]) => left.localeCompare(right)));
+      inputs.consumedFiles = Object.fromEntries(Object.entries({ ...inputs.consumedFiles, ...extractionFiles }).sort(([left], [right]) => left.localeCompare(right)));
+      inputs.extractionFiles = extractionFiles;
+      raw.extraction = { inventory: extraction.inventory, validation: extraction.validation, equivalence: extraction.equivalence, consumedFiles: extraction.consumedFiles };
+      addValidationFindings(findings, extraction.validation, 'extract', strict);
+      if (extraction.equivalence.diffs.length) findings.push(diagnosticFinding({
+        value: `__fromPack equivalence has ${extraction.equivalence.diffs.length} differences`, phase: 'extract', category: 'equivalence', severity: 'error', blocking: true,
+        code: 'EQUIVALENCE', title: '引擎数据无法无损还原', evidence: extraction.equivalence.diffs,
+      }));
+      const extractionFailed = extraction.validation.errors.length > 0 || extraction.equivalence.diffs.length > 0 || (strict && extraction.validation.warnings.length > 0);
+      assurances.push(assurance('extract-equivalence', 'Extract / deep equivalence', extractionFailed ? 'failed' : 'passed', {
+        evidence: `${extraction.equivalence.comparisons} deep comparisons`, details: { diffs: extraction.equivalence.diffs.length, warnings: extraction.validation.warnings.length }, blocking: extractionFailed,
+      }));
+    } catch (error) {
+      const isInputError = !(error instanceof ExtractionError) || error.kind === 'input';
+      if (isInputError) inputError = true;
+      findings.push(diagnosticFinding({
+        value: error, phase: 'extract', category: 'equivalence', severity: 'error', blocking: true,
+        code: isInputError ? 'EXTRACT_INPUT_ERROR' : 'EQUIVALENCE_RUNTIME_ERROR',
+        title: isInputError ? 'extract 配置或输入无效' : 'extract/equivalence 执行失败',
+      }));
+      assurances.push(assurance('extract-equivalence', 'Extract / deep equivalence', 'failed', { blocking: true, evidence: error.message }));
+    }
+  } else {
+    assurances.push(assurance('extract-equivalence', 'Extract / deep equivalence', 'not-assessed', { blocking: false, evidence: 'extract config not provided' }));
+  }
+
+  if (baselineInput && packInspection) {
+    try {
+      const diff = buildDiff(baselineInput.value, pack, { old: baselinePath, new: dataFile });
+      raw.diff = diff;
+      changes.push(...collectChanges(diff, baselineInput.value, pack));
+      impacts.push(...(diff.derivationsImpacted || []));
+      assurances.push(assurance('baseline-diff', 'Baseline diff', 'passed', { evidence: `${diff.total} structural differences`, details: { total: diff.total }, blocking: false }));
+    } catch (error) {
+      inputError = true;
+      findings.push(diagnosticFinding({ value: error, phase: 'diff', category: 'contract', severity: 'error', blocking: true, code: 'DIFF_INPUT_ERROR', title: '无法生成 baseline diff' }));
+      assurances.push(assurance('baseline-diff', 'Baseline diff', 'failed', { blocking: true, evidence: error.message }));
+    }
+  } else {
+    assurances.push(assurance('baseline-diff', 'Baseline diff', baselinePath ? 'failed' : 'not-assessed', { blocking: Boolean(baselinePath), evidence: baselinePath ? 'baseline or current Data Pack input unavailable' : 'baseline not provided' }));
+  }
+
+  let auditValid = false;
+  if (auditInput) {
+    const audit = auditInput.value;
+    raw.audit = audit;
+    operations.push(...audit.operations);
+    impacts.push(...audit.derivationsImpacted);
+    for (const operation of audit.operations) {
+      changes.push(change({
+        id: `operation-${operation.itemId}`, section: 'candidate', kind: operation.result, title: `Candidate ${operation.result}`,
+        subject: operation.target, before: operation.before, after: operation.after, evidence: operation.provenance || operation.note,
+      }));
+    }
+    for (const error of audit.validation.errors) findings.push(diagnosticFinding({ value: error, phase: 'candidate', category: 'contract', severity: 'error', blocking: true, code: 'CANDIDATE_VALIDATION', title: 'Candidate validation 未通过' }));
+    for (const warning of audit.validation.warnings) findings.push(diagnosticFinding({ value: warning, phase: 'candidate', category: 'contract', severity: 'warning', blocking: strict, code: 'CANDIDATE_WARNING', title: 'Candidate validation warning' }));
+    auditValid = !auditState.failed;
+    assurances.push(assurance('candidate-audit', 'Candidate audit', auditValid ? 'passed' : 'failed', {
+      evidence: `${audit.operations.length} operations / ${audit.unresolved.length} unresolved`, details: audit.validation, blocking: !auditValid,
+    }));
+  } else {
+    assurances.push(assurance('candidate-audit', 'Candidate audit', auditPath ? 'failed' : 'not-assessed', { blocking: Boolean(auditPath), evidence: auditPath ? 'candidate audit input unavailable' : 'candidate audit not provided' }));
+  }
+
+  if (reviewInput) {
+    try {
+      const reviewResult = collectReview(reviewInput.value, auditState.resolved, findings, risks);
+      if (auditInput && reviewResult.reportId && auditInput.value.inputs.reportId !== reviewResult.reportId) {
+        throw new Error('candidate audit reportId does not match the supplied review report');
+      }
+      const expectedReviewBaseline = baselineInput
+        ? baselineInput.digest
+        : auditInput
+          ? auditInput.value.inputs.baselineSha256
+          : packInspection && packInspection.digest;
+      if (reviewResult.baselineSha256 && expectedReviewBaseline && reviewResult.baselineSha256 !== expectedReviewBaseline) {
+        throw new Error('candidateReview baselineSha256 does not match the reviewed Data Pack bytes');
+      }
+      raw.review = reviewInput.value;
+      raw.reviewSummary = { total: reviewResult.total, unresolved: reviewResult.open };
+      assurances.push(reviewResult.assurance);
+    } catch (error) {
+      inputError = true;
+      findings.push(diagnosticFinding({ value: error, phase: 'review', category: 'review', severity: 'error', blocking: true, code: 'REVIEW_INPUT_ERROR', title: 'review report 与输入不一致' }));
+      assurances.push(assurance('crawl-review', 'Crawl review', 'failed', { blocking: true, evidence: error.message }));
+    }
+  } else {
+    assurances.push(assurance('crawl-review', 'Crawl review', reviewPath ? 'failed' : 'not-assessed', { blocking: Boolean(reviewPath), evidence: reviewPath ? 'review report input unavailable' : 'review report not provided' }));
+  }
+
+  assurances.push(assurance('runtime-mount', 'Runtime DOM mount', 'not-assessed', { blocking: false, evidence: 'browser/runtime mount test not connected to report collector' }));
+  assurances.push(assurance('visual-regression', 'Visual regression', 'not-assessed', { blocking: false, evidence: 'visual regression test not connected to report collector' }));
+  assurances.push(assurance('production-crawl', 'Production crawl', 'not-assessed', { blocking: false, evidence: reviewInput ? 'supplied crawl review artifact consumed; live production crawl was not re-run' : 'report only consumes supplied crawl artifacts' }));
+
+  for (const finding of findings) {
+    if (finding.severity === 'warning' && finding.status === 'open') {
+      risks.push({ id: `risk-finding-${risks.length + 1}`, severity: finding.blocking ? 'high' : 'medium', status: 'open', title: finding.title, reason: finding.message, code: finding.code, subject: finding.subject });
+    }
+  }
+  for (const item of assurances.filter((entry) => entry.status === 'not-assessed')) {
+    risks.push({ id: `risk-${item.id}`, severity: 'medium', status: 'open', title: `${item.title} 未评估`, reason: item.evidence || '没有对应证据生产器。' });
+  }
+  for (const impact of impacts) {
+    risks.push({ id: `risk-derivation-${impact.name}`, severity: 'medium', status: 'open', title: `Derivation ${impact.name} 受到影响`, reason: (impact.triggers || []).join(', '), consumers: impact.consumers || [] });
+  }
+
+  if (outDir) {
+    artifacts.push({ id: 'report-json', type: 'output', path: safeRelative(path.join(outDir, 'report.json')), digest: null });
+    artifacts.push({ id: 'report-markdown', type: 'output', path: safeRelative(path.join(outDir, 'REPORT.md')), digest: null });
+  }
+  return buildReport({
+    command: 'report', libId, mode: reportMode(), pack, inputError, inputs,
+    findings, changes, assurances, coverage: assurances, risks, operations, impacts, artifacts, raw,
+  });
+}
+
+function writeReportOutputs(directory, report) {
+  fs.mkdirSync(directory, { recursive: true });
+  const nonce = `${process.pid}.${crypto.randomBytes(6).toString('hex')}`;
+  const outputs = [
+    { target: path.join(directory, 'report.json'), content: renderJson(report) },
+    { target: path.join(directory, 'REPORT.md'), content: renderMarkdown(report) },
+  ].map((entry) => ({ ...entry, temp: `${entry.target}.${nonce}.tmp`, backup: `${entry.target}.${nonce}.bak` }));
+  const installed = [];
+  const backedUp = [];
+  try {
+    for (const output of outputs) fs.writeFileSync(output.temp, output.content, { encoding: 'utf8', flag: 'wx' });
+    for (const output of outputs) {
+      if (fs.existsSync(output.target)) {
+        fs.renameSync(output.target, output.backup);
+        backedUp.push(output);
+      }
+    }
+    for (const output of outputs) {
+      fs.renameSync(output.temp, output.target);
+      installed.push(output);
+    }
+    for (const output of backedUp) {
+      try { fs.unlinkSync(output.backup); } catch (_) { /* a leftover backup is safer than losing the original */ }
+    }
+  } catch (error) {
+    for (const output of installed) {
+      try { fs.unlinkSync(output.target); } catch (_) { /* not installed */ }
+    }
+    for (const output of backedUp.reverse()) {
+      try { fs.renameSync(output.backup, output.target); } catch (_) { /* preserve original error */ }
+    }
+    throw error;
+  } finally {
+    for (const output of outputs) {
+      try { fs.unlinkSync(output.temp); } catch (_) { /* renamed or never created */ }
+      try { fs.unlinkSync(output.backup); } catch (_) { /* restored or never created */ }
+    }
+  }
+}
+
+let report;
+let outputWriteError = false;
+try {
+  report = collectReport();
+} catch (error) {
+  report = buildReport({
+    command: 'report', libId: path.basename(libDir), mode: reportMode(), inputError: true,
+    findings: [diagnosticFinding({ value: error, phase: 'report', category: 'contract', severity: 'error', blocking: true, code: 'REPORT_INPUT_ERROR', title: '报告生成失败' })],
+    assurances: [], inputs: { strict, verifyHash },
+  });
+}
+
+if (outDir && report.run.outcome !== 'input-error') {
+  try {
+    writeReportOutputs(outDir, report);
+  } catch (error) {
+    outputWriteError = true;
+    console.error('report: could not write report outputs: ' + error.message);
+  }
+}
+
+const reportPath = outDir && report.run.outcome !== 'input-error' ? safeRelative(path.join(outDir, 'REPORT.md')) : null;
+if (asJson) process.stdout.write(renderJson(report));
+else process.stdout.write(renderTerminalSummary(report, { reportPath }));
+process.exitCode = outputWriteError ? 2 : report.run.exitCode;
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-rules.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-rules.js
new file mode 100644
index 0000000..11863fe
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-rules.js
@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-rules.js — library-level data-rules executor
+ *
+ * Usage:
+ *   node sg-pack-rules.js <libDir | data-rules.json> [--strict] [--rule <id>]
+ */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { executeRules } = require('./lib/sg-pack-rules-core.js');
+
+const usage = 'Usage: node sg-pack-rules.js <libDir | data-rules.json> [--strict] [--rule <id>]';
+
+function parseArgs(argv) {
+  let input = null;
+  let strict = false;
+  let ruleId = null;
+  const seen = new Set();
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === '--strict') {
+      if (seen.has(arg)) throw new Error('duplicate option: --strict');
+      seen.add(arg);
+      strict = true;
+      continue;
+    }
+    if (arg === '--rule') {
+      if (seen.has(arg)) throw new Error('duplicate option: --rule');
+      seen.add(arg);
+      if (i + 1 >= argv.length || argv[i + 1].startsWith('--')) throw new Error('--rule requires an id');
+      ruleId = argv[++i];
+      continue;
+    }
+    if (arg.startsWith('-')) throw new Error('unknown option: ' + arg);
+    if (input !== null) throw new Error('unexpected positional argument: ' + arg);
+    input = arg;
+  }
+  if (!input) throw new Error('library or rules path is required');
+  return { input, strict, ruleId };
+}
+
+let options;
+try {
+  options = parseArgs(process.argv.slice(2));
+} catch (error) {
+  console.error(error.message);
+  console.error(usage);
+  process.exit(2);
+}
+
+let rulesFile;
+let dataFile;
+if (fs.existsSync(options.input) && fs.statSync(options.input).isDirectory()) {
+  rulesFile = path.join(options.input, 'lib', 'data', 'data-rules.json');
+  dataFile = path.join(options.input, 'lib', 'data', 'data.json');
+} else {
+  rulesFile = path.resolve(process.cwd(), options.input);
+  dataFile = path.join(path.dirname(rulesFile), 'data.json');
+}
+for (const file of [rulesFile, dataFile]) {
+  if (!fs.existsSync(file)) {
+    console.error('File not found: ' + file);
+    process.exit(2);
+  }
+}
+
+let rulesDoc;
+let pack;
+try { rulesDoc = JSON.parse(fs.readFileSync(rulesFile, 'utf8')); }
+catch (error) { console.error('data-rules.json parse failed: ' + error.message); process.exit(1); }
+try { pack = JSON.parse(fs.readFileSync(dataFile, 'utf8')); }
+catch (error) { console.error('data.json parse failed: ' + error.message); process.exit(1); }
+
+const ruleIds = options.ruleId === null ? undefined : [options.ruleId];
+const result = executeRules(rulesDoc, pack, { ruleIds });
+if (result.structuralErrors.length) {
+  result.structuralErrors.forEach((error) => console.error('[STRUCT] ' + error));
+  console.error('✖ Rules-file structural check failed: ' + result.structuralErrors.length + ' error(s)');
+  process.exit(1);
+}
+if (result.selectionErrors && result.selectionErrors.length) {
+  result.selectionErrors.forEach((error) => console.error('[SELECT] ' + error));
+  process.exit(2);
+}
+if (result.unknownRuleIds.length) {
+  console.error('Unknown rule id: ' + result.unknownRuleIds.join(', '));
+  process.exit(2);
+}
+
+for (const item of result.results) {
+  if (item.status === 'passed' || item.status === 'no-check') continue;
+  if (item.status === 'error') {
+    console.error('[ERROR] ' + item.id + ' (' + item.level + '): check threw — ' + item.exception.message);
+    continue;
+  }
+  const hint = (item.subject ? '\n         → subject: ' + item.subject : '') +
+    (item.repairHint ? '\n         → repair: ' + item.repairHint : '');
+  if (item.level === 'hard') console.error('[FAIL]  ' + item.id + ' (hard): ' + item.rule + hint);
+  else console.warn('[softfail] ' + item.id + ' (soft): ' + item.rule + hint);
+}
+
+const counts = result.counts;
+console.log('── ' + result.libId + ' ──────────────────');
+console.log('rules: ' + counts.total + ' | passed: ' + counts.passed + ' | hard-fail: ' + counts.hardFail + ' | soft-fail: ' + counts.softFail + ' | exec-error: ' + counts.errors + ' | no-check: ' + counts.noCheck);
+if (counts.hardFail || counts.errors) {
+  console.error('✖ Rules check failed');
+  process.exit(1);
+}
+if (options.strict && counts.softFail) {
+  console.error('✖ Strict mode: ' + counts.softFail + ' soft failure(s)');
+  process.exit(1);
+}
+console.log('✔ Rules check passed');
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-task.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-task.js
new file mode 100644
index 0000000..0ae47a6
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-task.js
@@ -0,0 +1,87 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { validateTaskManifest, readTaskManifest } = require('./lib/agent-task-manifest.js');
+const { runTask } = require('./lib/sg-task-runner.js');
+
+const [, , action, taskArg, ...args] = process.argv;
+const usage = [
+  'Usage:',
+  '  sg-data-pack task validate <task.json> [--shape-only] [--json]',
+  '  sg-data-pack task inspect <task.json> [--json]',
+  '  sg-data-pack task run <task.json> --agent-command <exe> [--agent-arg <arg>]... --artifacts <dir> [--provider name] [--model name] [--json]',
+].join('\n');
+if (!action || !taskArg || !['validate', 'inspect', 'run'].includes(action)) { console.error(usage); process.exit(2); }
+
+function parse(allowedValue, allowedBoolean, repeatable = new Set()) {
+  const options = {};
+  for (let index = 0; index < args.length; index += 1) {
+    const name = args[index];
+    if (allowedBoolean.has(name)) {
+      if (Object.prototype.hasOwnProperty.call(options, name)) throw new Error(`Duplicate option: ${name}`);
+      options[name] = true;
+      continue;
+    }
+    if (!allowedValue.has(name)) throw new Error(`Unknown option: ${name}`);
+    const value = args[index + 1];
+    if (!value || value.startsWith('--')) throw new Error(`${name} requires a value`);
+    if (repeatable.has(name)) {
+      if (!options[name]) options[name] = [];
+      options[name].push(value);
+    } else {
+      if (Object.prototype.hasOwnProperty.call(options, name)) throw new Error(`Duplicate option: ${name}`);
+      options[name] = value;
+    }
+    index += 1;
+  }
+  return options;
+}
+
+let options;
+try {
+  options = action === 'run'
+    ? parse(new Set(['--agent-command', '--agent-arg', '--artifacts', '--provider', '--model']), new Set(['--json', '--keep-workspace']), new Set(['--agent-arg']))
+    : parse(new Set(), new Set(['--json', '--shape-only']));
+} catch (error) { console.error(error.message); process.exit(2); }
+const taskFile = path.resolve(taskArg);
+
+try {
+  if (action === 'validate' || action === 'inspect') {
+    const manifest = JSON.parse(fs.readFileSync(taskFile, 'utf8'));
+    const validation = validateTaskManifest(manifest, {
+      taskFile,
+      verifyFiles: !options['--shape-only'],
+      verifyTree: !options['--shape-only'],
+    });
+    if (options['--json']) process.stdout.write(JSON.stringify({ manifest: action === 'inspect' ? manifest : undefined, validation }, null, 2) + '\n');
+    else {
+      console.log(`Agent task ${manifest.taskId || '<missing>'}: ${validation.valid ? 'valid' : 'invalid'}`);
+      console.log(`source: ${validation.sourceRoot || 'not resolved'}`);
+      validation.issues.forEach((item) => console.error(`  ${item.path}: ${item.message}`));
+    }
+    process.exit(validation.valid ? 0 : 2);
+  }
+  if (!options['--agent-command'] || !options['--artifacts']) throw new Error('task run requires --agent-command and --artifacts');
+  readTaskManifest(taskFile);
+  const agentArgv = [options['--agent-command'], ...(options['--agent-arg'] || [])];
+  const result = runTask({
+    taskFile,
+    agentArgv,
+    artifactRoot: path.resolve(options['--artifacts']),
+    agent: { provider: options['--provider'] || null, model: options['--model'] || null },
+    keepWorkspace: Boolean(options['--keep-workspace']),
+  });
+  if (options['--json']) process.stdout.write(JSON.stringify(result.report, null, 2) + '\n');
+  else {
+    console.log(`TaskRun ${result.report.runId}`);
+    console.log(`verdict: ${result.report.verdict}`);
+    console.log(`patch: ${result.report.patch ? result.report.patch.status : 'not produced'}`);
+    result.report.grades.forEach((grade) => console.log(`grade ${grade.graderId}: ${grade.verdict} (${grade.score}/${grade.maximumScore})`));
+    console.log(`report: ${result.runFile}`);
+  }
+  process.exit(result.report.termination.processExitCode);
+} catch (error) {
+  console.error(`task ${action}: ${error.message}`);
+  process.exit(error.kind === 'input-error' || error.code && /MANIFEST/.test(error.code) ? 2 : 3);
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-templatize.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-templatize.js
new file mode 100644
index 0000000..70ee223
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-templatize.js
@@ -0,0 +1,167 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-templatize.js — auto-derive an item template from N repeated HTML
+ * instances via multi-way token alignment (LCS diff of instance[0] vs each other).
+ *
+ * Generalized from the diegovz stage-2 parameterizer. Use it for collection-type
+ * pages (card lists, timelines, leaderboards): the output is a byte-exact
+ * template + per-instance slot values, ready to be mapped to semantic fields.
+ *
+ * Usage:
+ *   sg-data-pack templatize <instances.json> [--out <dir>] [--prefix <name>]
+ *
+ * Input JSON: an array of HTML strings (the repeated item instances, in order),
+ * e.g. extracted from the page with any DOM tool you like.
+ *
+ * Output (with --out, otherwise report only):
+ *   <prefix>-template.txt   HTML template with @@FIELD:f<n>@@ slots
+ *   <prefix>-values.json    { slotCount, instances: [[slotValue, ...] x N] }
+ *
+ * Guarantees: fill(template, values[i]) === instances[i] for every i (byte-exact),
+ * verified before exit. Exit 1 if verification fails.
+ *
+ * Next steps after running (manual, see references/data-rules-guide.md):
+ *   1. name the slots semantically (title/period/url/eid...) from the value samples
+ *   2. write the item renderer (template + slot builders) into the library
+ *   3. extract slot values into Data Pack entities
+ */
+'use strict';
+const fs = require('fs');
+const path = require('path');
+
+const [, , input, ...rest] = process.argv;
+if (!input) {
+  console.error('Usage: sg-data-pack templatize <instances.json> [--out <dir>] [--prefix <name>]');
+  process.exit(2);
+}
+const flag = (n) => { const i = rest.indexOf(n); return i >= 0 ? rest[i + 1] : null; };
+const outDir = flag('--out');
+const prefix = flag('--prefix') || 'item';
+
+let instances;
+try {
+  instances = JSON.parse(fs.readFileSync(input, 'utf8'));
+} catch (e) {
+  console.error(`Cannot read ${input}: ${e.message}`);
+  process.exit(2);
+}
+if (!Array.isArray(instances) || instances.length < 2 || instances.some((x) => typeof x !== 'string')) {
+  console.error('Input must be a JSON array of >=2 HTML strings.');
+  process.exit(2);
+}
+
+/* ---------- tokenize: tags | newline+indent | text runs (lossless join) ---------- */
+function tokenize(s) {
+  return s.match(/<[^>]*>|\n[^\S\n]*|[^<\n]+|\n/g) || [];
+}
+
+/* ---------- LCS alignment ---------- */
+function align(base, inst) {
+  const n = base.length, m = inst.length;
+  const dp = new Uint32Array((n + 1) * (m + 1));
+  const W = m + 1;
+  for (let i = n - 1; i >= 0; i--) {
+    for (let j = m - 1; j >= 0; j--) {
+      dp[i * W + j] = base[i] === inst[j]
+        ? dp[(i + 1) * W + j + 1] + 1
+        : Math.max(dp[(i + 1) * W + j], dp[i * W + j + 1]);
+    }
+  }
+  const matched = new Map();
+  let i = 0, j = 0;
+  while (i < n && j < m) {
+    if (base[i] === inst[j]) { matched.set(i, j); i++; j++; }
+    else if (dp[(i + 1) * W + j] >= dp[i * W + j + 1]) i++;
+    else j++;
+  }
+  return { matched, instLen: m };
+}
+
+/* ---------- derive template across all instances ---------- */
+function deriveTemplate(instances) {
+  const base = tokenize(instances[0]);
+  const others = instances.slice(1).map(tokenize);
+  const aligns = others.map((t) => align(base, t));
+  const n = base.length;
+
+  // stable[i]: matched in every instance AND no insertion immediately before it
+  const stable = new Array(n).fill(true);
+  for (const { matched } of aligns) {
+    for (let i = 0; i < n; i++) if (!matched.has(i)) stable[i] = false;
+    let prevI = -1;
+    for (const [b, ii] of [...matched.entries()].sort((a, b2) => a[0] - b2[0])) {
+      if (prevI !== -1 && ii !== prevI + 1) stable[b] = false; // insertion before b
+      prevI = ii;
+    }
+  }
+
+  const segments = [];
+  let cur = null;
+  for (let i = 0; i < n; i++) {
+    if (stable[i]) {
+      if (!cur || cur.type !== 'static') { cur = { type: 'static', text: '' }; segments.push(cur); }
+      cur.text += base[i];
+    } else {
+      if (!cur || cur.type !== 'slot') { cur = { type: 'slot', id: segments.filter((s) => s.type === 'slot').length, baseStart: i, baseEnd: i }; segments.push(cur); }
+      cur.baseEnd = i + 1;
+    }
+  }
+
+  // per-instance slot values — boundaries via STATIC tokens only
+  const perInstance = [];
+  const allTok = [base, ...others];
+  const allAlign = [{ matched: new Map(base.map((_, i) => [i, i])), instLen: n }, ...aligns];
+  for (let k = 0; k < instances.length; k++) {
+    const { matched, instLen } = allAlign[k];
+    const tok = allTok[k];
+    const values = [];
+    for (const seg of segments) {
+      if (seg.type !== 'slot') continue;
+      let start = 0;
+      for (let b = seg.baseStart - 1; b >= 0; b--) if (stable[b] && matched.has(b)) { start = matched.get(b) + 1; break; }
+      let end = instLen;
+      for (let b = seg.baseEnd; b < n; b++) if (stable[b] && matched.has(b)) { end = matched.get(b); break; }
+      values[seg.id] = tok.slice(start, end).join('');
+    }
+    perInstance.push(values);
+  }
+
+  const slotCount = segments.filter((s) => s.type === 'slot').length;
+  const template = segments.map((s) => (s.type === 'static' ? s.text : `@@FIELD:f${s.id}@@`)).join('');
+  return { template, slotCount, perInstance };
+}
+
+function fillTemplate(template, values) {
+  return template.replace(/@@FIELD:f(\d+)@@/g, (m, i) => values[+i]);
+}
+
+/* ---------- run ---------- */
+const { template, slotCount, perInstance } = deriveTemplate(instances);
+
+let ok = true;
+for (let i = 0; i < instances.length; i++) {
+  if (fillTemplate(template, perInstance[i]) !== instances[i]) { ok = false; console.error(`verify FAIL at instance ${i}`); break; }
+}
+
+const staticBytes = template.replace(/@@FIELD:f\d+@@/g, '').length;
+const slotBytes = perInstance.flat().join('').length;
+console.log(`instances: ${instances.length}`);
+console.log(`slots: ${slotCount}`);
+console.log(`template: ${template.length}b (static ${staticBytes}b), values: ${slotBytes}b`);
+console.log(`byte-exact verification: ${ok ? 'OK' : 'FAILED'}`);
+if (!ok) process.exit(1);
+
+// slot value samples to aid semantic naming
+console.log('\nslot samples (up to 2 distinct values each):');
+for (let s = 0; s < slotCount; s++) {
+  const uniq = [...new Set(perInstance.map((v) => v[s]))];
+  const samples = uniq.slice(0, 2).map((x) => (x.length > 70 ? x.slice(0, 70) + `…(${x.length}b)` : x));
+  console.log(`  f${s} (${uniq.length} distinct): ${JSON.stringify(samples)}`);
+}
+
+if (outDir) {
+  fs.mkdirSync(outDir, { recursive: true });
+  fs.writeFileSync(path.join(outDir, `${prefix}-template.txt`), template);
+  fs.writeFileSync(path.join(outDir, `${prefix}-values.json`), JSON.stringify({ slotCount, instances: perInstance }, null, 2));
+  console.log(`\nwrote ${prefix}-template.txt + ${prefix}-values.json to ${outDir}`);
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-types.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-types.js
new file mode 100644
index 0000000..1001589
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-types.js
@@ -0,0 +1,196 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-types.js — generate TypeScript declarations from a Data Pack.
+ *
+ * Two layers:
+ *   1. contract layer: DataPack base interfaces (from the universal contract)
+ *   2. library layer:  per-kind entity interfaces inferred from the actual
+ *      data.json (field unions, optional markers, literal enums, id unions)
+ *
+ * Usage:
+ *   sg-data-pack types <data.json> [--out lib/src/data-types.d.ts] [--name <PackName>]
+ *
+ * Default <PackName> is derived from meta.id (diegovz-home-0722-ts -> DiegovzHome0722Ts
+ * is ugly, so prefer passing --name, e.g. --name Diegovz).
+ *
+ * Engines can then opt into checking WITHOUT a build step:
+ *   // @ts-check
+ *   /** @type {import('./data-types').DiegovzPack} *\/ (pack)
+ *
+ * Inference rules:
+ *   - entities grouped by kind; fields = union across the group
+ *   - field optional (?) when absent in any member of the group
+ *   - string fields with <=8 distinct short values and full coverage -> literal union
+ *   - arrays: homogeneous element literal union where possible, else unknown[]
+ *   - nested objects: inline interface when consistent shape, else Record<string, unknown>
+ */
+'use strict';
+const fs = require('fs');
+const path = require('path');
+
+const [, , packPath, ...rest] = process.argv;
+if (!packPath) {
+  console.error('Usage: sg-data-pack types <data.json> [--out <file.d.ts>] [--name <PackName>]');
+  process.exit(2);
+}
+const flag = (n) => {
+  const i = rest.indexOf(n);
+  if (i < 0) return null;
+  const value = rest[i + 1];
+  if (!value || value.startsWith('--')) {
+    console.error(`${n} requires a value`);
+    process.exit(2);
+  }
+  return value;
+};
+const pack = JSON.parse(fs.readFileSync(packPath, 'utf8'));
+const explicitName = flag('--name');
+if (explicitName && !/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(explicitName)) {
+  console.error(`--name must be a valid TypeScript identifier, got ${JSON.stringify(explicitName)}`);
+  process.exit(2);
+}
+const libName = explicitName || (() => {
+  const id = (pack.meta && pack.meta.id) || 'Library';
+  const derived = id.replace(/(^|[-_])(\w)/g, (m, p, c) => c.toUpperCase()).replace(/[^A-Za-z0-9_$]/g, '');
+  if (!derived) return 'Library';
+  return /^[A-Za-z_$]/.test(derived) ? derived : `Pack${derived}`;
+})();
+const outPath = flag('--out');
+
+const ENUM_MAX = 8;
+
+/* ---------- type inference ---------- */
+function pascal(s) {
+  // split on - _ and any non-alphanumeric, capitalize each part, join
+  return String(s).split(/[^A-Za-z0-9]+/).filter(Boolean).map((p) => p.charAt(0).toUpperCase() + p.slice(1)).join('');
+}
+function tsLit(s) { return JSON.stringify(s); }
+
+function inferValueType(values, depth) {
+  const types = new Set(values.map((v) => (Array.isArray(v) ? 'array' : v === null ? 'null' : typeof v)));
+  if (types.size > 1) return 'unknown';
+  const t = [...types][0];
+  if (t === 'string') {
+    const uniq = [...new Set(values)];
+    if (uniq.length <= ENUM_MAX && uniq.every((s) => s.length <= 40)) {
+      return uniq.map(tsLit).join(' | ');
+    }
+    return 'string';
+  }
+  if (t === 'number') return 'number';
+  if (t === 'boolean') return 'boolean';
+  if (t === 'array') {
+    const elems = values.flat();
+    if (!elems.length) return 'unknown[]';
+    const et = inferValueType(elems, depth + 1);
+    return et.includes('\n') ? 'unknown[]' : `(${et})[]`.replace(/^\((string|number|boolean)\)\[\]$/, '$1[]');
+  }
+  if (t === 'object' && depth === 0) {
+    // inline interface if all members share a consistent key set
+    const keySets = values.map((v) => Object.keys(v).sort().join(''));
+    if (new Set(keySets).size === 1) {
+      const keys = Object.keys(values[0]);
+      const fields = keys.map((k) => `    ${JSON.stringify(k)}: ${inferValueType(values.map((v) => v[k]), depth + 1)};`).join('\n');
+      return `{\n${fields}\n  }`;
+    }
+    return 'Record<string, unknown>';
+  }
+  return 'unknown';
+}
+
+/* ---------- entity inference ---------- */
+const byKind = new Map();
+for (const [id, e] of Object.entries(pack.entities || {})) {
+  const k = e.kind || 'unknown';
+  if (!byKind.has(k)) byKind.set(k, []);
+  byKind.get(k).push([id, e]);
+}
+
+const kindInterfaces = [];
+for (const [kind, members] of [...byKind.entries()].sort()) {
+  const iname = `${libName}${pascal(kind)}Entity`;
+  const fields = new Map(); // field -> {values, coverage}
+  for (const [, e] of members) {
+    for (const [f, v] of Object.entries(e)) {
+      if (f === 'kind') continue;
+      if (!fields.has(f)) fields.set(f, []);
+      fields.get(f).push(v);
+    }
+  }
+  const lines = [`export interface ${iname} {`, `  kind: ${tsLit(kind)};`];
+  for (const [f, vals] of [...fields.entries()].sort()) {
+    const optional = vals.length < members.length ? '?' : '';
+    lines.push(`  ${JSON.stringify(f)}${optional}: ${inferValueType(vals, 0)};`);
+  }
+  lines.push('}');
+  kindInterfaces.push({ kind, iname, code: lines.join('\n') });
+}
+
+const entityUnion = kindInterfaces.map((k) => k.iname).join(' | ') || 'never';
+const idUnion = Object.keys(pack.entities || {}).map(tsLit).join(' | ') || 'never';
+
+/* ---------- emit ---------- */
+const out = `/* Auto-generated from data.json by sg-data-pack types (${libName}).
+ * Do not edit — regenerate: sg-data-pack types lib/data/data.json --name ${libName} */
+
+/* ---------- contract layer (universal Data Pack sections) ---------- */
+export interface SgRelation { id?: string; a: string; b: string; type: string; label?: string; scope?: string[]; }
+export interface SgProvenanceEntry {
+  origin?: string;
+  sourceUrl?: string | null;
+  fetchedAt?: string;
+  confidence?: number;
+  note?: string;
+  fieldOrigins?: Record<string, SgProvenanceEntry>;
+  [k: string]: unknown;
+}
+export interface SgAssetEntry { exists?: boolean; bytes?: number; hash?: string; sourceUrl?: string; }
+export interface SgDerivation {
+  kind: 'repeat' | 'insertion-order' | 'lookup-rebuild' | 'scope-resolution' | 'projection' | 'reference-only';
+  source: string;
+  consumers: string[];
+  affects?: string[];
+  alsoTouches?: string[];
+  note: string;
+}
+
+/* ---------- library layer (inferred from data) ---------- */
+${kindInterfaces.map((k) => k.code).join('\n\n')}
+
+export type ${libName}Entity = ${entityUnion};
+export type ${libName}EntityId = ${idUnion};
+
+export interface ${libName}Pack {
+  schemaVersion: '1.0' | '1.1' | '1.2' | '1.3';
+  meta: { id: string; title: string; [k: string]: unknown };
+  entities: Record<string, ${libName}Entity>;
+  aliases?: Record<string, string | { id: string; context?: string; [k: string]: unknown }>;
+  relationTypes?: Record<string, { label: string; color?: string; [k: string]: unknown }>;
+  heroRelTypes?: Record<string, { label: string; color?: string; dimension?: 'hero-radial' | 'pairwise' | 'both'; [k: string]: unknown }>;
+  relations?: SgRelation[];
+  stages?: Array<Record<string, unknown>>;
+  contents?: Record<string, Record<string, unknown>>;
+  domain?: Record<string, unknown>;
+  assets?: Record<string, SgAssetEntry>;
+  attributeTypes?: Record<string, { label?: string; description?: string; [k: string]: unknown }>;
+  attributeSources?: string[];
+  kindNameFields?: Record<string, string>;
+  sameAs?: Array<[string, string]>;
+  derivations?: Record<string, SgDerivation>;
+  provenance?: {
+    entities?: Record<string, SgProvenanceEntry>;
+    relations?: Record<string, SgProvenanceEntry>;
+    contents?: Record<string, SgProvenanceEntry>;
+  };
+}
+`;
+
+if (outPath) {
+  fs.mkdirSync(path.dirname(outPath), { recursive: true });
+  fs.writeFileSync(outPath, out);
+  console.log(`wrote ${outPath}`);
+  console.log(`kinds: ${kindInterfaces.length} (${kindInterfaces.map((k) => k.kind).join(', ')})`);
+  console.log(`entities: ${Object.keys(pack.entities || {}).length}, ids as literal union: ${idUnion === 'never' ? 'no' : 'yes'}`);
+} else {
+  process.stdout.write(out);
+}
diff --git a/research/agent-eval/results/executed-tooling/scripts/sg-pack-validate.js b/research/agent-eval/results/executed-tooling/scripts/sg-pack-validate.js
new file mode 100644
index 0000000..59a060e
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/sg-pack-validate.js
@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+/*
+ * sg-pack-validate.js — standalone Data Pack validation CLI
+ * Usage: node sg-pack-validate.js <path/to/data.json> [--strict] [--verify-hash] [--asset-root <dir>]
+ *   --strict:      warnings also fail (exit 1)
+ *   --verify-hash: recompute sha1 of local assets and compare against the manifest
+ *   --asset-root:  physical asset directory override (defaults to <lib>/lib/assets)
+ */
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { inspectAssets } = require('./lib/sg-pack-inspect.js');
+
+require(path.join(__dirname, 'lib', 'sg-data-loader.js'));
+
+const [file, ...args] = process.argv.slice(2);
+const usage = 'Usage: node sg-pack-validate.js <data.json> [--strict] [--verify-hash] [--asset-root <dir>]';
+if (!file || file.startsWith('--')) { console.error(usage); process.exit(2); }
+const options = {};
+for (let index = 0; index < args.length; index += 1) {
+  const name = args[index];
+  if (!['--strict', '--verify-hash', '--asset-root'].includes(name)) {
+    console.error('Unknown option: ' + name);
+    process.exit(2);
+  }
+  if (Object.prototype.hasOwnProperty.call(options, name)) {
+    console.error('Duplicate option: ' + name);
+    process.exit(2);
+  }
+  if (name === '--asset-root') {
+    const value = args[index + 1];
+    if (!value || value.startsWith('--')) { console.error('--asset-root requires a value'); process.exit(2); }
+    options[name] = path.resolve(value);
+    index += 1;
+  } else options[name] = true;
+}
+const strict = Boolean(options['--strict']);
+const verifyHash = Boolean(options['--verify-hash']);
+
+let pack;
+try {
+  pack = JSON.parse(fs.readFileSync(file, 'utf8'));
+} catch (error) {
+  console.error('JSON parse failed: ' + error.message);
+  process.exit(1);
+}
+
+const result = globalThis.SGDataLoader.validate(pack);
+if (verifyHash) {
+  const assets = inspectAssets(pack, path.resolve(file), { verifyHash: true, assetRoot: options['--asset-root'] });
+  for (const item of assets.mismatches) {
+    result.errors.push('hash mismatch: ' + item.path + ' (manifest ' + item.expected.slice(0, 14) + '… vs actual ' + item.actual.slice(0, 14) + '…)');
+  }
+  for (const item of assets.missing) result.errors.push('hash check failed (file unreadable or unsafe): ' + item.path + (item.error ? ' (' + item.error + ')' : ''));
+}
+
+result.errors.forEach((error) => console.error('[ERROR] ' + error));
+result.warnings.forEach((warning) => console.warn('[warn]  ' + warning));
+
+if (result.errors.length) { console.error('✖ Validation failed: ' + result.errors.length + ' error(s)'); process.exit(1); }
+if (strict && result.warnings.length) { console.error('✖ Strict mode: ' + result.warnings.length + ' warning(s)'); process.exit(1); }
+console.log('✔ Validation passed (' + result.warnings.length + ' warning(s))');
diff --git a/research/agent-eval/results/executed-tooling/scripts/vendor/acorn.js b/research/agent-eval/results/executed-tooling/scripts/vendor/acorn.js
new file mode 100644
index 0000000..d7eba90
--- /dev/null
+++ b/research/agent-eval/results/executed-tooling/scripts/vendor/acorn.js
@@ -0,0 +1,6333 @@
+(function (global, factory) {
+  typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
+  typeof define === 'function' && define.amd ? define(['exports'], factory) :
+  (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.acorn = {}));
+})(this, (function (exports) { 'use strict';
+
+  // This file was generated. Do not modify manually!
+  var astralIdentifierCodes = [509, 0, 227, 0, 150, 4, 294, 9, 1368, 2, 2, 1, 6, 3, 41, 2, 5, 0, 166, 1, 574, 3, 9, 9, 7, 9, 32, 4, 318, 1, 78, 5, 71, 10, 50, 3, 123, 2, 54, 14, 32, 10, 3, 1, 11, 3, 46, 10, 8, 0, 46, 9, 7, 2, 37, 13, 2, 9, 6, 1, 45, 0, 13, 2, 49, 13, 9, 3, 2, 11, 83, 11, 7, 0, 3, 0, 158, 11, 6, 9, 7, 3, 56, 1, 2, 6, 3, 1, 3, 2, 10, 0, 11, 1, 3, 6, 4, 4, 68, 8, 2, 0, 3, 0, 2, 3, 2, 4, 2, 0, 15, 1, 83, 17, 10, 9, 5, 0, 82, 19, 13, 9, 214, 6, 3, 8, 28, 1, 83, 16, 16, 9, 82, 12, 9, 9, 7, 19, 58, 14, 5, 9, 243, 14, 166, 9, 71, 5, 2, 1, 3, 3, 2, 0, 2, 1, 13, 9, 120, 6, 3, 6, 4, 0, 29, 9, 41, 6, 2, 3, 9, 0, 10, 10, 47, 15, 199, 7, 137, 9, 54, 7, 2, 7, 17, 9, 57, 21, 2, 13, 123, 5, 4, 0, 2, 1, 2, 6, 2, 0, 9, 9, 49, 4, 2, 1, 2, 4, 9, 9, 55, 9, 266, 3, 10, 1, 2, 0, 49, 6, 4, 4, 14, 10, 5350, 0, 7, 14, 11465, 27, 2343, 9, 87, 9, 39, 4, 60, 6, 26, 9, 535, 9, 470, 0, 2, 54, 8, 3, 82, 0, 12, 1, 19628, 1, 4178, 9, 519, 45, 3, 22, 543, 4, 4, 5, 9, 7, 3, 6, 31, 3, 149, 2, 1418, 49, 513, 54, 5, 49, 9, 0, 15, 0, 23, 4, 2, 14, 1361, 6, 2, 16, 3, 6, 2, 1, 2, 4, 101, 0, 161, 6, 10, 9, 357, 0, 62, 13, 499, 13, 245, 1, 2, 9, 233, 0, 3, 0, 8, 1, 6, 0, 475, 6, 110, 6, 6, 9, 4759, 9, 787719, 239];
+
+  // This file was generated. Do not modify manually!
+  var astralIdentifierStartCodes = [0, 11, 2, 25, 2, 18, 2, 1, 2, 14, 3, 13, 35, 122, 70, 52, 268, 28, 4, 48, 48, 31, 14, 29, 6, 37, 11, 29, 3, 35, 5, 7, 2, 4, 43, 157, 19, 35, 5, 35, 5, 39, 9, 51, 13, 10, 2, 14, 2, 6, 2, 1, 2, 10, 2, 14, 2, 6, 2, 1, 4, 51, 13, 310, 10, 21, 11, 7, 25, 5, 2, 41, 2, 8, 70, 5, 3, 0, 2, 43, 2, 1, 4, 0, 3, 22, 11, 22, 10, 30, 66, 18, 2, 1, 11, 21, 11, 25, 7, 25, 39, 55, 7, 1, 65, 0, 16, 3, 2, 2, 2, 28, 43, 28, 4, 28, 36, 7, 2, 27, 28, 53, 11, 21, 11, 18, 14, 17, 111, 72, 56, 50, 14, 50, 14, 35, 39, 27, 10, 22, 251, 41, 7, 1, 17, 5, 57, 28, 11, 0, 9, 21, 43, 17, 47, 20, 28, 22, 13, 52, 58, 1, 3, 0, 14, 44, 33, 24, 27, 35, 30, 0, 3, 0, 9, 34, 4, 0, 13, 47, 15, 3, 22, 0, 2, 0, 36, 17, 2, 24, 20, 1, 64, 6, 2, 0, 2, 3, 2, 14, 2, 9, 8, 46, 39, 7, 3, 1, 3, 21, 2, 6, 2, 1, 2, 4, 4, 0, 19, 0, 13, 4, 31, 9, 2, 0, 3, 0, 2, 37, 2, 0, 26, 0, 2, 0, 45, 52, 19, 3, 21, 2, 31, 47, 21, 1, 2, 0, 185, 46, 42, 3, 37, 47, 21, 0, 60, 42, 14, 0, 72, 26, 38, 6, 186, 43, 117, 63, 32, 7, 3, 0, 3, 7, 2, 1, 2, 23, 16, 0, 2, 0, 95, 7, 3, 38, 17, 0, 2, 0, 29, 0, 11, 39, 8, 0, 22, 0, 12, 45, 20, 0, 19, 72, 200, 32, 32, 8, 2, 36, 18, 0, 50, 29, 113, 6, 2, 1, 2, 37, 22, 0, 26, 5, 2, 1, 2, 31, 15, 0, 24, 43, 261, 18, 16, 0, 2, 12, 2, 33, 125, 0, 80, 921, 103, 110, 18, 195, 2637, 96, 16, 1071, 18, 5, 26, 3994, 6, 582, 6842, 29, 1763, 568, 8, 30, 18, 78, 18, 29, 19, 47, 17, 3, 32, 20, 6, 18, 433, 44, 212, 63, 33, 24, 3, 24, 45, 74, 6, 0, 67, 12, 65, 1, 2, 0, 15, 4, 10, 7381, 42, 31, 98, 114, 8702, 3, 2, 6, 2, 1, 2, 290, 16, 0, 30, 2, 3, 0, 15, 3, 9, 395, 2309, 106, 6, 12, 4, 8, 8, 9, 5991, 84, 2, 70, 2, 1, 3, 0, 3, 1, 3, 3, 2, 11, 2, 0, 2, 6, 2, 64, 2, 3, 3, 7, 2, 6, 2, 27, 2, 3, 2, 4, 2, 0, 4, 6, 2, 339, 3, 24, 2, 24, 2, 30, 2, 24, 2, 30, 2, 24, 2, 30, 2, 24, 2, 30, 2, 24, 2, 7, 1845, 30, 7, 5, 262, 61, 147, 44, 11, 6, 17, 0, 322, 29, 19, 43, 485, 27, 229, 29, 3, 0, 208, 30, 2, 2, 2, 1, 2, 6, 3, 4, 10, 1, 225, 6, 2, 3, 2, 1, 2, 14, 2, 196, 60, 67, 8, 0, 1205, 3, 2, 26, 2, 1, 2, 0, 3, 0, 2, 9, 2, 3, 2, 0, 2, 0, 7, 0, 5, 0, 2, 0, 2, 0, 2, 2, 2, 1, 2, 0, 3, 0, 2, 0, 2, 0, 2, 0, 2, 0, 2, 1, 2, 0, 3, 3, 2, 6, 2, 3, 2, 3, 2, 0, 2, 9, 2, 16, 6, 2, 2, 4, 2, 16, 4421, 42719, 33, 4381, 3, 5773, 3, 7472, 16, 621, 2467, 541, 1507, 4938, 6, 8489];
+
+  // This file was generated. Do not modify manually!
+  var nonASCIIidentifierChars = "\u200c\u200d\xb7\u0300-\u036f\u0387\u0483-\u0487\u0591-\u05bd\u05bf\u05c1\u05c2\u05c4\u05c5\u05c7\u0610-\u061a\u064b-\u0669\u0670\u06d6-\u06dc\u06df-\u06e4\u06e7\u06e8\u06ea-\u06ed\u06f0-\u06f9\u0711\u0730-\u074a\u07a6-\u07b0\u07c0-\u07c9\u07eb-\u07f3\u07fd\u0816-\u0819\u081b-\u0823\u0825-\u0827\u0829-\u082d\u0859-\u085b\u0897-\u089f\u08ca-\u08e1\u08e3-\u0903\u093a-\u093c\u093e-\u094f\u0951-\u0957\u0962\u0963\u0966-\u096f\u0981-\u0983\u09bc\u09be-\u09c4\u09c7\u09c8\u09cb-\u09cd\u09d7\u09e2\u09e3\u09e6-\u09ef\u09fe\u0a01-\u0a03\u0a3c\u0a3e-\u0a42\u0a47\u0a48\u0a4b-\u0a4d\u0a51\u0a66-\u0a71\u0a75\u0a81-\u0a83\u0abc\u0abe-\u0ac5\u0ac7-\u0ac9\u0acb-\u0acd\u0ae2\u0ae3\u0ae6-\u0aef\u0afa-\u0aff\u0b01-\u0b03\u0b3c\u0b3e-\u0b44\u0b47\u0b48\u0b4b-\u0b4d\u0b55-\u0b57\u0b62\u0b63\u0b66-\u0b6f\u0b82\u0bbe-\u0bc2\u0bc6-\u0bc8\u0bca-\u0bcd\u0bd7\u0be6-\u0bef\u0c00-\u0c04\u0c3c\u0c3e-\u0c44\u0c46-\u0c48\u0c4a-\u0c4d\u0c55\u0c56\u0c62\u0c63\u0c66-\u0c6f\u0c81-\u0c83\u0cbc\u0cbe-\u0cc4\u0cc6-\u0cc8\u0cca-\u0ccd\u0cd5\u0cd6\u0ce2\u0ce3\u0ce6-\u0cef\u0cf3\u0d00-\u0d03\u0d3b\u0d3c\u0d3e-\u0d44\u0d46-\u0d48\u0d4a-\u0d4d\u0d57\u0d62\u0d63\u0d66-\u0d6f\u0d81-\u0d83\u0dca\u0dcf-\u0dd4\u0dd6\u0dd8-\u0ddf\u0de6-\u0def\u0df2\u0df3\u0e31\u0e34-\u0e3a\u0e47-\u0e4e\u0e50-\u0e59\u0eb1\u0eb4-\u0ebc\u0ec8-\u0ece\u0ed0-\u0ed9\u0f18\u0f19\u0f20-\u0f29\u0f35\u0f37\u0f39\u0f3e\u0f3f\u0f71-\u0f84\u0f86\u0f87\u0f8d-\u0f97\u0f99-\u0fbc\u0fc6\u102b-\u103e\u1040-\u1049\u1056-\u1059\u105e-\u1060\u1062-\u1064\u1067-\u106d\u1071-\u1074\u1082-\u108d\u108f-\u109d\u135d-\u135f\u1369-\u1371\u1712-\u1715\u1732-\u1734\u1752\u1753\u1772\u1773\u17b4-\u17d3\u17dd\u17e0-\u17e9\u180b-\u180d\u180f-\u1819\u18a9\u1920-\u192b\u1930-\u193b\u1946-\u194f\u19d0-\u19da\u1a17-\u1a1b\u1a55-\u1a5e\u1a60-\u1a7c\u1a7f-\u1a89\u1a90-\u1a99\u1ab0-\u1abd\u1abf-\u1add\u1ae0-\u1aeb\u1b00-\u1b04\u1b34-\u1b44\u1b50-\u1b59\u1b6b-\u1b73\u1b80-\u1b82\u1ba1-\u1bad\u1bb0-\u1bb9\u1be6-\u1bf3\u1c24-\u1c37\u1c40-\u1c49\u1c50-\u1c59\u1cd0-\u1cd2\u1cd4-\u1ce8\u1ced\u1cf4\u1cf7-\u1cf9\u1dc0-\u1dff\u200c\u200d\u203f\u2040\u2054\u20d0-\u20dc\u20e1\u20e5-\u20f0\u2cef-\u2cf1\u2d7f\u2de0-\u2dff\u302a-\u302f\u3099\u309a\u30fb\ua620-\ua629\ua66f\ua674-\ua67d\ua69e\ua69f\ua6f0\ua6f1\ua802\ua806\ua80b\ua823-\ua827\ua82c\ua880\ua881\ua8b4-\ua8c5\ua8d0-\ua8d9\ua8e0-\ua8f1\ua8ff-\ua909\ua926-\ua92d\ua947-\ua953\ua980-\ua983\ua9b3-\ua9c0\ua9d0-\ua9d9\ua9e5\ua9f0-\ua9f9\uaa29-\uaa36\uaa43\uaa4c\uaa4d\uaa50-\uaa59\uaa7b-\uaa7d\uaab0\uaab2-\uaab4\uaab7\uaab8\uaabe\uaabf\uaac1\uaaeb-\uaaef\uaaf5\uaaf6\uabe3-\uabea\uabec\uabed\uabf0-\uabf9\ufb1e\ufe00-\ufe0f\ufe20-\ufe2f\ufe33\ufe34\ufe4d-\ufe4f\uff10-\uff19\uff3f\uff65";
+
+  // This file was generated. Do not modify manually!
+  var nonASCIIidentifierStartChars = "\xaa\xb5\xba\xc0-\xd6\xd8-\xf6\xf8-\u02c1\u02c6-\u02d1\u02e0-\u02e4\u02ec\u02ee\u0370-\u0374\u0376\u0377\u037a-\u037d\u037f\u0386\u0388-\u038a\u038c\u038e-\u03a1\u03a3-\u03f5\u03f7-\u0481\u048a-\u052f\u0531-\u0556\u0559\u0560-\u0588\u05d0-\u05ea\u05ef-\u05f2\u0620-\u064a\u066e\u066f\u0671-\u06d3\u06d5\u06e5\u06e6\u06ee\u06ef\u06fa-\u06fc\u06ff\u0710\u0712-\u072f\u074d-\u07a5\u07b1\u07ca-\u07ea\u07f4\u07f5\u07fa\u0800-\u0815\u081a\u0824\u0828\u0840-\u0858\u0860-\u086a\u0870-\u0887\u0889-\u088f\u08a0-\u08c9\u0904-\u0939\u093d\u0950\u0958-\u0961\u0971-\u0980\u0985-\u098c\u098f\u0990\u0993-\u09a8\u09aa-\u09b0\u09b2\u09b6-\u09b9\u09bd\u09ce\u09dc\u09dd\u09df-\u09e1\u09f0\u09f1\u09fc\u0a05-\u0a0a\u0a0f\u0a10\u0a13-\u0a28\u0a2a-\u0a30\u0a32\u0a33\u0a35\u0a36\u0a38\u0a39\u0a59-\u0a5c\u0a5e\u0a72-\u0a74\u0a85-\u0a8d\u0a8f-\u0a91\u0a93-\u0aa8\u0aaa-\u0ab0\u0ab2\u0ab3\u0ab5-\u0ab9\u0abd\u0ad0\u0ae0\u0ae1\u0af9\u0b05-\u0b0c\u0b0f\u0b10\u0b13-\u0b28\u0b2a-\u0b30\u0b32\u0b33\u0b35-\u0b39\u0b3d\u0b5c\u0b5d\u0b5f-\u0b61\u0b71\u0b83\u0b85-\u0b8a\u0b8e-\u0b90\u0b92-\u0b95\u0b99\u0b9a\u0b9c\u0b9e\u0b9f\u0ba3\u0ba4\u0ba8-\u0baa\u0bae-\u0bb9\u0bd0\u0c05-\u0c0c\u0c0e-\u0c10\u0c12-\u0c28\u0c2a-\u0c39\u0c3d\u0c58-\u0c5a\u0c5c\u0c5d\u0c60\u0c61\u0c80\u0c85-\u0c8c\u0c8e-\u0c90\u0c92-\u0ca8\u0caa-\u0cb3\u0cb5-\u0cb9\u0cbd\u0cdc-\u0cde\u0ce0\u0ce1\u0cf1\u0cf2\u0d04-\u0d0c\u0d0e-\u0d10\u0d12-\u0d3a\u0d3d\u0d4e\u0d54-\u0d56\u0d5f-\u0d61\u0d7a-\u0d7f\u0d85-\u0d96\u0d9a-\u0db1\u0db3-\u0dbb\u0dbd\u0dc0-\u0dc6\u0e01-\u0e30\u0e32\u0e33\u0e40-\u0e46\u0e81\u0e82\u0e84\u0e86-\u0e8a\u0e8c-\u0ea3\u0ea5\u0ea7-\u0eb0\u0eb2\u0eb3\u0ebd\u0ec0-\u0ec4\u0ec6\u0edc-\u0edf\u0f00\u0f40-\u0f47\u0f49-\u0f6c\u0f88-\u0f8c\u1000-\u102a\u103f\u1050-\u1055\u105a-\u105d\u1061\u1065\u1066\u106e-\u1070\u1075-\u1081\u108e\u10a0-\u10c5\u10c7\u10cd\u10d0-\u10fa\u10fc-\u1248\u124a-\u124d\u1250-\u1256\u1258\u125a-\u125d\u1260-\u1288\u128a-\u128d\u1290-\u12b0\u12b2-\u12b5\u12b8-\u12be\u12c0\u12c2-\u12c5\u12c8-\u12d6\u12d8-\u1310\u1312-\u1315\u1318-\u135a\u1380-\u138f\u13a0-\u13f5\u13f8-\u13fd\u1401-\u166c\u166f-\u167f\u1681-\u169a\u16a0-\u16ea\u16ee-\u16f8\u1700-\u1711\u171f-\u1731\u1740-\u1751\u1760-\u176c\u176e-\u1770\u1780-\u17b3\u17d7\u17dc\u1820-\u1878\u1880-\u18a8\u18aa\u18b0-\u18f5\u1900-\u191e\u1950-\u196d\u1970-\u1974\u1980-\u19ab\u19b0-\u19c9\u1a00-\u1a16\u1a20-\u1a54\u1aa7\u1b05-\u1b33\u1b45-\u1b4c\u1b83-\u1ba0\u1bae\u1baf\u1bba-\u1be5\u1c00-\u1c23\u1c4d-\u1c4f\u1c5a-\u1c7d\u1c80-\u1c8a\u1c90-\u1cba\u1cbd-\u1cbf\u1ce9-\u1cec\u1cee-\u1cf3\u1cf5\u1cf6\u1cfa\u1d00-\u1dbf\u1e00-\u1f15\u1f18-\u1f1d\u1f20-\u1f45\u1f48-\u1f4d\u1f50-\u1f57\u1f59\u1f5b\u1f5d\u1f5f-\u1f7d\u1f80-\u1fb4\u1fb6-\u1fbc\u1fbe\u1fc2-\u1fc4\u1fc6-\u1fcc\u1fd0-\u1fd3\u1fd6-\u1fdb\u1fe0-\u1fec\u1ff2-\u1ff4\u1ff6-\u1ffc\u2071\u207f\u2090-\u209c\u2102\u2107\u210a-\u2113\u2115\u2118-\u211d\u2124\u2126\u2128\u212a-\u2139\u213c-\u213f\u2145-\u2149\u214e\u2160-\u2188\u2c00-\u2ce4\u2ceb-\u2cee\u2cf2\u2cf3\u2d00-\u2d25\u2d27\u2d2d\u2d30-\u2d67\u2d6f\u2d80-\u2d96\u2da0-\u2da6\u2da8-\u2dae\u2db0-\u2db6\u2db8-\u2dbe\u2dc0-\u2dc6\u2dc8-\u2dce\u2dd0-\u2dd6\u2dd8-\u2dde\u3005-\u3007\u3021-\u3029\u3031-\u3035\u3038-\u303c\u3041-\u3096\u309b-\u309f\u30a1-\u30fa\u30fc-\u30ff\u3105-\u312f\u3131-\u318e\u31a0-\u31bf\u31f0-\u31ff\u3400-\u4dbf\u4e00-\ua48c\ua4d0-\ua4fd\ua500-\ua60c\ua610-\ua61f\ua62a\ua62b\ua640-\ua66e\ua67f-\ua69d\ua6a0-\ua6ef\ua717-\ua71f\ua722-\ua788\ua78b-\ua7dc\ua7f1-\ua801\ua803-\ua805\ua807-\ua80a\ua80c-\ua822\ua840-\ua873\ua882-\ua8b3\ua8f2-\ua8f7\ua8fb\ua8fd\ua8fe\ua90a-\ua925\ua930-\ua946\ua960-\ua97c\ua984-\ua9b2\ua9cf\ua9e0-\ua9e4\ua9e6-\ua9ef\ua9fa-\ua9fe\uaa00-\uaa28\uaa40-\uaa42\uaa44-\uaa4b\uaa60-\uaa76\uaa7a\uaa7e-\uaaaf\uaab1\uaab5\uaab6\uaab9-\uaabd\uaac0\uaac2\uaadb-\uaadd\uaae0-\uaaea\uaaf2-\uaaf4\uab01-\uab06\uab09-\uab0e\uab11-\uab16\uab20-\uab26\uab28-\uab2e\uab30-\uab5a\uab5c-\uab69\uab70-\uabe2\uac00-\ud7a3\ud7b0-\ud7c6\ud7cb-\ud7fb\uf900-\ufa6d\ufa70-\ufad9\ufb00-\ufb06\ufb13-\ufb17\ufb1d\ufb1f-\ufb28\ufb2a-\ufb36\ufb38-\ufb3c\ufb3e\ufb40\ufb41\ufb43\ufb44\ufb46-\ufbb1\ufbd3-\ufd3d\ufd50-\ufd8f\ufd92-\ufdc7\ufdf0-\ufdfb\ufe70-\ufe74\ufe76-\ufefc\uff21-\uff3a\uff41-\uff5a\uff66-\uffbe\uffc2-\uffc7\uffca-\uffcf\uffd2-\uffd7\uffda-\uffdc";
+
+  // These are a run-length and offset encoded representation of the
+  // >0xffff code points that are a valid part of identifiers. The
+  // offset starts at 0x10000, and each pair of numbers represents an
+  // offset to the next range, and then a size of the range.
+
+  // Reserved word lists for various dialects of the language
+
+  var reservedWords = {
+    3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super synchronized throws transient volatile",
+    5: "class enum extends super const export import",
+    6: "enum",
+    strict: "implements interface let package private protected public static yield",
+    strictBind: "eval arguments"
+  };
+
+  // And the keywords
+
+  var ecma5AndLessKeywords = "break case catch continue debugger default do else finally for function if return switch throw try var while with null true false instanceof typeof void delete new in this";
+
+  var keywords$1 = {
+    5: ecma5AndLessKeywords,
+    "5module": ecma5AndLessKeywords + " export import",
+    6: ecma5AndLessKeywords + " const class extends export import super"
+  };
+
+  var keywordRelationalOperator = /^in(stanceof)?$/;
+
+  // ## Character categories
+
+  var nonASCIIidentifierStart = new RegExp("[" + nonASCIIidentifierStartChars + "]");
+  var nonASCIIidentifier = new RegExp("[" + nonASCIIidentifierStartChars + nonASCIIidentifierChars + "]");
+
+  // This has a complexity linear to the value of the code. The
+  // assumption is that looking up astral identifier characters is
+  // rare.
+  function isInAstralSet(code, set) {
+    var pos = 0x10000;
+    for (var i = 0; i < set.length; i += 2) {
+      pos += set[i];
+      if (pos > code) { return false }
+      pos += set[i + 1];
+      if (pos >= code) { return true }
+    }
+    return false
+  }
+
+  // Test whether a given character code starts an identifier.
+
+  function isIdentifierStart(code, astral) {
+    if (code < 65) { return code === 36 }
+    if (code < 91) { return true }
+    if (code < 97) { return code === 95 }
+    if (code < 123) { return true }
+    if (code <= 0xffff) { return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)) }
+    if (astral === false) { return false }
+    return isInAstralSet(code, astralIdentifierStartCodes)
+  }
+
+  // Test whether a given character is part of an identifier.
+
+  function isIdentifierChar(code, astral) {
+    if (code < 48) { return code === 36 }
+    if (code < 58) { return true }
+    if (code < 65) { return false }
+    if (code < 91) { return true }
+    if (code < 97) { return code === 95 }
+    if (code < 123) { return true }
+    if (code <= 0xffff) { return code >= 0xaa && nonASCIIidentifier.test(String.fromCharCode(code)) }
+    if (astral === false) { return false }
+    return isInAstralSet(code, astralIdentifierStartCodes) || isInAstralSet(code, astralIdentifierCodes)
+  }
+
+  // ## Token types
+
+  // The assignment of fine-grained, information-carrying type objects
+  // allows the tokenizer to store the information it has about a
+  // token in a way that is very cheap for the parser to look up.
+
+  // All token type variables start with an underscore, to make them
+  // easy to recognize.
+
+  // The `beforeExpr` property is used to disambiguate between regular
+  // expressions and divisions. It is set on all token types that can
+  // be followed by an expression (thus, a slash after them would be a
+  // regular expression).
+  //
+  // The `startsExpr` property is used to check if the token ends a
+  // `yield` expression. It is set on all token types that either can
+  // directly start an expression (like a quotation mark) or can
+  // continue an expression (like the body of a string).
+  //
+  // `isLoop` marks a keyword as starting a loop, which is important
+  // to know when parsing a label, in order to allow or disallow
+  // continue jumps to that label.
+
+  var TokenType = function TokenType(label, conf) {
+    if ( conf === void 0 ) conf = {};
+
+    this.label = label;
+    this.keyword = conf.keyword;
+    this.beforeExpr = !!conf.beforeExpr;
+    this.startsExpr = !!conf.startsExpr;
+    this.isLoop = !!conf.isLoop;
+    this.isAssign = !!conf.isAssign;
+    this.prefix = !!conf.prefix;
+    this.postfix = !!conf.postfix;
+    this.binop = conf.binop || null;
+    this.updateContext = null;
+  };
+
+  function binop(name, prec) {
+    return new TokenType(name, {beforeExpr: true, binop: prec})
+  }
+  var beforeExpr = {beforeExpr: true}, startsExpr = {startsExpr: true};
+
+  // Map keyword names to token types.
+
+  var keywords = {};
+
+  // Succinct definitions of keyword token types
+  function kw(name, options) {
+    if ( options === void 0 ) options = {};
+
+    options.keyword = name;
+    return keywords[name] = new TokenType(name, options)
+  }
+
+  var types$1 = {
+    num: new TokenType("num", startsExpr),
+    regexp: new TokenType("regexp", startsExpr),
+    string: new TokenType("string", startsExpr),
+    name: new TokenType("name", startsExpr),
+    privateId: new TokenType("privateId", startsExpr),
+    eof: new TokenType("eof"),
+
+    // Punctuation token types.
+    bracketL: new TokenType("[", {beforeExpr: true, startsExpr: true}),
+    bracketR: new TokenType("]"),
+    braceL: new TokenType("{", {beforeExpr: true, startsExpr: true}),
+    braceR: new TokenType("}"),
+    parenL: new TokenType("(", {beforeExpr: true, startsExpr: true}),
+    parenR: new TokenType(")"),
+    comma: new TokenType(",", beforeExpr),
+    semi: new TokenType(";", beforeExpr),
+    colon: new TokenType(":", beforeExpr),
+    dot: new TokenType("."),
+    question: new TokenType("?", beforeExpr),
+    questionDot: new TokenType("?."),
+    arrow: new TokenType("=>", beforeExpr),
+    template: new TokenType("template"),
+    invalidTemplate: new TokenType("invalidTemplate"),
+    ellipsis: new TokenType("...", beforeExpr),
+    backQuote: new TokenType("`", startsExpr),
+    dollarBraceL: new TokenType("${", {beforeExpr: true, startsExpr: true}),
+
+    // Operators. These carry several kinds of properties to help the
+    // parser use them properly (the presence of these properties is
+    // what categorizes them as operators).
+    //
+    // `binop`, when present, specifies that this operator is a binary
+    // operator, and will refer to its precedence.
+    //
+    // `prefix` and `postfix` mark the operator as a prefix or postfix
+    // unary operator.
+    //
+    // `isAssign` marks all of `=`, `+=`, `-=` etcetera, which act as
+    // binary operators with a very low precedence, that should result
+    // in AssignmentExpression nodes.
+
+    eq: new TokenType("=", {beforeExpr: true, isAssign: true}),
+    assign: new TokenType("_=", {beforeExpr: true, isAssign: true}),
+    incDec: new TokenType("++/--", {prefix: true, postfix: true, startsExpr: true}),
+    prefix: new TokenType("!/~", {beforeExpr: true, prefix: true, startsExpr: true}),
+    logicalOR: binop("||", 1),
+    logicalAND: binop("&&", 2),
+    bitwiseOR: binop("|", 3),
+    bitwiseXOR: binop("^", 4),
+    bitwiseAND: binop("&", 5),
+    equality: binop("==/!=/===/!==", 6),
+    relational: binop("</>/<=/>=", 7),
+    bitShift: binop("<</>>/>>>", 8),
+    plusMin: new TokenType("+/-", {beforeExpr: true, binop: 9, prefix: true, startsExpr: true}),
+    modulo: binop("%", 10),
+    star: binop("*", 10),
+    slash: binop("/", 10),
+    starstar: new TokenType("**", {beforeExpr: true}),
+    coalesce: binop("??", 1),
+
+    // Keyword token types.
+    _break: kw("break"),
+    _case: kw("case", beforeExpr),
+    _catch: kw("catch"),
+    _continue: kw("continue"),
+    _debugger: kw("debugger"),
+    _default: kw("default", beforeExpr),
+    _do: kw("do", {isLoop: true, beforeExpr: true}),
+    _else: kw("else", beforeExpr),
+    _finally: kw("finally"),
+    _for: kw("for", {isLoop: true}),
+    _function: kw("function", startsExpr),
+    _if: kw("if"),
+    _return: kw("return", beforeExpr),
+    _switch: kw("switch"),
+    _throw: kw("throw", beforeExpr),
+    _try: kw("try"),
+    _var: kw("var"),
+    _const: kw("const"),
+    _while: kw("while", {isLoop: true}),
+    _with: kw("with"),
+    _new: kw("new", {beforeExpr: true, startsExpr: true}),
+    _this: kw("this", startsExpr),
+    _super: kw("super", startsExpr),
+    _class: kw("class", startsExpr),
+    _extends: kw("extends", beforeExpr),
+    _export: kw("export"),
+    _import: kw("import", startsExpr),
+    _null: kw("null", startsExpr),
+    _true: kw("true", startsExpr),
+    _false: kw("false", startsExpr),
+    _in: kw("in", {beforeExpr: true, binop: 7}),
+    _instanceof: kw("instanceof", {beforeExpr: true, binop: 7}),
+    _typeof: kw("typeof", {beforeExpr: true, prefix: true, startsExpr: true}),
+    _void: kw("void", {beforeExpr: true, prefix: true, startsExpr: true}),
+    _delete: kw("delete", {beforeExpr: true, prefix: true, startsExpr: true})
+  };
+
+  // Matches a whole line break (where CRLF is considered a single
+  // line break). Used to count lines.
+
+  var lineBreak = /\r\n?|\n|\u2028|\u2029/;
+  var lineBreakG = new RegExp(lineBreak.source, "g");
+
+  function isNewLine(code) {
+    return code === 10 || code === 13 || code === 0x2028 || code === 0x2029
+  }
+
+  function nextLineBreak(code, from, end) {
+    if ( end === void 0 ) end = code.length;
+
+    for (var i = from; i < end; i++) {
+      var next = code.charCodeAt(i);
+      if (isNewLine(next))
+        { return i < end - 1 && next === 13 && code.charCodeAt(i + 1) === 10 ? i + 2 : i + 1 }
+    }
+    return -1
+  }
+
+  var nonASCIIwhitespace = /[\u1680\u2000-\u200a\u202f\u205f\u3000\ufeff]/;
+
+  var skipWhiteSpace = /(?:\s|\/\/.*|\/\*[^]*?\*\/)*/g;
+
+  var ref = Object.prototype;
+  var hasOwnProperty = ref.hasOwnProperty;
+  var toString = ref.toString;
+
+  var hasOwn = Object.hasOwn || (function (obj, propName) { return (
+    hasOwnProperty.call(obj, propName)
+  ); });
+
+  var isArray = Array.isArray || (function (obj) { return (
+    toString.call(obj) === "[object Array]"
+  ); });
+
+  var regexpCache = Object.create(null);
+
+  function wordsRegexp(words) {
+    return regexpCache[words] || (regexpCache[words] = new RegExp("^(?:" + words.replace(/ /g, "|") + ")$"))
+  }
+
+  function codePointToString(code) {
+    // UTF-16 Decoding
+    if (code <= 0xFFFF) { return String.fromCharCode(code) }
+    code -= 0x10000;
+    return String.fromCharCode((code >> 10) + 0xD800, (code & 1023) + 0xDC00)
+  }
+
+  var loneSurrogate = /(?:[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF])/;
+
+  // These are used when `options.locations` is on, for the
+  // `startLoc` and `endLoc` properties.
+
+  var Position = function Position(line, col) {
+    this.line = line;
+    this.column = col;
+  };
+
+  Position.prototype.offset = function offset (n) {
+    return new Position(this.line, this.column + n)
+  };
+
+  var SourceLocation = function SourceLocation(p, start, end) {
+    this.start = start;
+    this.end = end;
+    if (p.sourceFile !== null) { this.source = p.sourceFile; }
+  };
+
+  // The `getLineInfo` function is mostly useful when the
+  // `locations` option is off (for performance reasons) and you
+  // want to find the line/column position for a given character
+  // offset. `input` should be the code string that the offset refers
+  // into.
+
+  function getLineInfo(input, offset) {
+    for (var line = 1, cur = 0;;) {
+      var nextBreak = nextLineBreak(input, cur, offset);
+      if (nextBreak < 0) { return new Position(line, offset - cur) }
+      ++line;
+      cur = nextBreak;
+    }
+  }
+
+  // A second argument must be given to configure the parser process.
+  // These options are recognized (only `ecmaVersion` is required):
+
+  var defaultOptions = {
+    // `ecmaVersion` indicates the ECMAScript version to parse. Must be
+    // either 3, 5, 6 (or 2015), 7 (2016), 8 (2017), 9 (2018), 10
+    // (2019), 11 (2020), 12 (2021), 13 (2022), 14 (2023), or `"latest"`
+    // (the latest version the library supports). This influences
+    // support for strict mode, the set of reserved words, and support
+    // for new syntax features.
+    ecmaVersion: null,
+    // `sourceType` indicates the mode the code should be parsed in.
+    // Can be either `"script"`, `"module"` or `"commonjs"`. This influences global
+    // strict mode and parsing of `import` and `export` declarations.
+    sourceType: "script",
+    // When set to true, enable strict parsing mode even if `sourceType`
+    // is `"script"`.
+    strict: false,
+    // `onInsertedSemicolon` can be a callback that will be called when
+    // a semicolon is automatically inserted. It will be passed the
+    // position of the inserted semicolon as an offset, and if
+    // `locations` is enabled, it is given the location as a `{line,
+    // column}` object as second argument.
+    onInsertedSemicolon: null,
+    // `onTrailingComma` is similar to `onInsertedSemicolon`, but for
+    // trailing commas.
+    onTrailingComma: null,
+    // By default, reserved words are only enforced if ecmaVersion >= 5.
+    // Set `allowReserved` to a boolean value to explicitly turn this on
+    // an off. When this option has the value "never", reserved words
+    // and keywords can also not be used as property names.
+    allowReserved: null,
+    // When enabled, a return at the top level is not considered an
+    // error.
+    allowReturnOutsideFunction: false,
+    // When enabled, import/export statements are not constrained to
+    // appearing at the top of the program, and an import.meta expression
+    // in a script isn't considered an error.
+    allowImportExportEverywhere: false,
+    // By default, await identifiers are allowed to appear at the top-level scope only if ecmaVersion >= 2022.
+    // When enabled, await identifiers are allowed to appear at the top-level scope,
+    // but they are still not allowed in non-async functions.
+    allowAwaitOutsideFunction: null,
+    // When enabled, super identifiers are not constrained to
+    // appearing in methods and do not raise an error when they appear elsewhere.
+    allowSuperOutsideMethod: null,
+    // When enabled, hashbang directive in the beginning of file is
+    // allowed and treated as a line comment. Enabled by default when
+    // `ecmaVersion` >= 2023.
+    allowHashBang: false,
+    // By default, the parser will verify that private properties are
+    // only used in places where they are valid and have been declared.
+    // Set this to false to turn such checks off.
+    checkPrivateFields: true,
+    // When `locations` is on, `loc` properties holding objects with
+    // `start` and `end` properties in `{line, column}` form (with
+    // line being 1-based and column 0-based) will be attached to the
+    // nodes.
+    locations: false,
+    // A function can be passed as `onToken` option, which will
+    // cause Acorn to call that function with object in the same
+    // format as tokens returned from `tokenizer().getToken()`. Note
+    // that you are not allowed to call the parser from the
+    // callback—that will corrupt its internal state.
+    onToken: null,
+    // A function can be passed as `onComment` option, which will
+    // cause Acorn to call that function with `(block, text, start,
+    // end)` parameters whenever a comment is skipped. `block` is a
+    // boolean indicating whether this is a block (`/* */`) comment,
+    // `text` is the content of the comment, and `start` and `end` are
+    // character offsets that denote the start and end of the comment.
+    // When the `locations` option is on, two more parameters are
+    // passed, the full `{line, column}` locations of the start and
+    // end of the comments. Note that you are not allowed to call the
+    // parser from the callback—that will corrupt its internal state.
+    // When this option has an array as value, objects representing the
+    // comments are pushed to it.
+    onComment: null,
+    // Nodes have their start and end characters offsets recorded in
+    // `start` and `end` properties (directly on the node, rather than
+    // the `loc` object, which holds line/column data. To also add a
+    // [semi-standardized][range] `range` property holding a `[start,
+    // end]` array with the same numbers, set the `ranges` option to
+    // `true`.
+    //
+    // [range]: https://bugzilla.mozilla.org/show_bug.cgi?id=745678
+    ranges: false,
+    // It is possible to parse multiple files into a single AST by
+    // passing the tree produced by parsing the first file as
+    // `program` option in subsequent parses. This will add the
+    // toplevel forms of the parsed file to the `Program` (top) node
+    // of an existing parse tree.
+    program: null,
+    // When `locations` is on, you can pass this to record the source
+    // file in every node's `loc` object.
+    sourceFile: null,
+    // This value, if given, is stored in every node, whether
+    // `locations` is on or off.
+    directSourceFile: null,
+    // When enabled, parenthesized expressions are represented by
+    // (non-standard) ParenthesizedExpression nodes
+    preserveParens: false
+  };
+
+  // Interpret and default an options object
+
+  var warnedAboutEcmaVersion = false;
+
+  function getOptions(opts) {
+    var options = {};
+
+    for (var opt in defaultOptions)
+      { options[opt] = opts && hasOwn(opts, opt) ? opts[opt] : defaultOptions[opt]; }
+
+    if (options.ecmaVersion === "latest") {
+      options.ecmaVersion = 1e8;
+    } else if (options.ecmaVersion == null) {
+      if (!warnedAboutEcmaVersion && typeof console === "object" && console.warn) {
+        warnedAboutEcmaVersion = true;
+        console.warn("Since Acorn 8.0.0, options.ecmaVersion is required.\nDefaulting to 2020, but this will stop working in the future.");
+      }
+      options.ecmaVersion = 11;
+    } else if (options.ecmaVersion >= 2015) {
+      options.ecmaVersion -= 2009;
+    }
+
+    if (options.allowReserved == null)
+      { options.allowReserved = options.ecmaVersion < 5; }
+
+    if (!opts || opts.allowHashBang == null)
+      { options.allowHashBang = options.ecmaVersion >= 14; }
+
+    if (isArray(options.onToken)) {
+      var tokens = options.onToken;
+      options.onToken = function (token) { return tokens.push(token); };
+    }
+    if (isArray(options.onComment))
+      { options.onComment = pushComment(options, options.onComment); }
+
+    if (options.sourceType === "commonjs" && options.allowAwaitOutsideFunction)
+      { throw new Error("Cannot use allowAwaitOutsideFunction with sourceType: commonjs") }
+
+    return options
+  }
+
+  function pushComment(options, array) {
+    return function(block, text, start, end, startLoc, endLoc) {
+      var comment = {
+        type: block ? "Block" : "Line",
+        value: text,
+        start: start,
+        end: end
+      };
+      if (options.locations)
+        { comment.loc = new SourceLocation(this, startLoc, endLoc); }
+      if (options.ranges)
+        { comment.range = [start, end]; }
+      array.push(comment);
+    }
+  }
+
+  // Each scope gets a bitset that may contain these flags
+  var
+      SCOPE_TOP = 1,
+      SCOPE_FUNCTION = 2,
+      SCOPE_ASYNC = 4,
+      SCOPE_GENERATOR = 8,
+      SCOPE_ARROW = 16,
+      SCOPE_SIMPLE_CATCH = 32,
+      SCOPE_SUPER = 64,
+      SCOPE_DIRECT_SUPER = 128,
+      SCOPE_CLASS_STATIC_BLOCK = 256,
+      SCOPE_CLASS_FIELD_INIT = 512,
+      SCOPE_SWITCH = 1024,
+      SCOPE_VAR = SCOPE_TOP | SCOPE_FUNCTION | SCOPE_CLASS_STATIC_BLOCK;
+
+  function functionFlags(async, generator) {
+    return SCOPE_FUNCTION | (async ? SCOPE_ASYNC : 0) | (generator ? SCOPE_GENERATOR : 0)
+  }
+
+  // Used in checkLVal* and declareName to determine the type of a binding
+  var
+      BIND_NONE = 0, // Not a binding
+      BIND_VAR = 1, // Var-style binding
+      BIND_LEXICAL = 2, // Let- or const-style binding
+      BIND_FUNCTION = 3, // Function declaration
+      BIND_SIMPLE_CATCH = 4, // Simple (identifier pattern) catch binding
+      BIND_OUTSIDE = 5; // Special case for function names as bound inside the function
+
+  var Parser = function Parser(options, input, startPos) {
+    this.options = options = getOptions(options);
+    this.sourceFile = options.sourceFile;
+    this.keywords = wordsRegexp(keywords$1[options.ecmaVersion >= 6 ? 6 : options.sourceType === "module" ? "5module" : 5]);
+    var reserved = "";
+    if (options.allowReserved !== true) {
+      reserved = reservedWords[options.ecmaVersion >= 6 ? 6 : options.ecmaVersion === 5 ? 5 : 3];
+      if (options.sourceType === "module") { reserved += " await"; }
+    }
+    this.reservedWords = wordsRegexp(reserved);
+    var reservedStrict = (reserved ? reserved + " " : "") + reservedWords.strict;
+    this.reservedWordsStrict = wordsRegexp(reservedStrict);
+    this.reservedWordsStrictBind = wordsRegexp(reservedStrict + " " + reservedWords.strictBind);
+    this.input = String(input);
+
+    // Used to signal to callers of `readWord1` whether the word
+    // contained any escape sequences. This is needed because words with
+    // escape sequences must not be interpreted as keywords.
+    this.containsEsc = false;
+
+    // Set up token state
+
+    // The current position of the tokenizer in the input.
+    if (startPos) {
+      this.pos = startPos;
+      this.lineStart = this.input.lastIndexOf("\n", startPos - 1) + 1;
+      this.curLine = this.input.slice(0, this.lineStart).split(lineBreak).length;
+    } else {
+      this.pos = this.lineStart = 0;
+      this.curLine = 1;
+    }
+
+    // Properties of the current token:
+    // Its type
+    this.type = types$1.eof;
+    // For tokens that include more information than their type, the value
+    this.value = null;
+    // Its start and end offset
+    this.start = this.end = this.pos;
+    // And, if locations are used, the {line, column} object
+    // corresponding to those offsets
+    this.startLoc = this.endLoc = this.curPosition();
+
+    // Position information for the previous token
+    this.lastTokEndLoc = this.lastTokStartLoc = null;
+    this.lastTokStart = this.lastTokEnd = this.pos;
+
+    // The context stack is used to superficially track syntactic
+    // context to predict whether a regular expression is allowed in a
+    // given position.
+    this.context = this.initialContext();
+    this.exprAllowed = true;
+
+    // Figure out if it's a module code.
+    this.inModule = options.sourceType === "module";
+    this.strict = this.inModule || options.strict === true || this.strictDirective(this.pos);
+
+    // Used to signify the start of a potential arrow function
+    this.potentialArrowAt = -1;
+    this.potentialArrowInForAwait = false;
+
+    // Positions to delayed-check that yield/await does not exist in default parameters.
+    this.yieldPos = this.awaitPos = this.awaitIdentPos = 0;
+    // Labels in scope.
+    this.labels = [];
+    // Thus-far undefined exports.
+    this.undefinedExports = Object.create(null);
+
+    // If enabled, skip leading hashbang line.
+    if (this.pos === 0 && options.allowHashBang && this.input.slice(0, 2) === "#!")
+      { this.skipLineComment(2); }
+
+    // Scope tracking for duplicate variable names (see scope.js)
+    this.scopeStack = [];
+    this.enterScope(
+      this.options.sourceType === "commonjs"
+        // In commonjs, the top-level scope behaves like a function scope
+        ? SCOPE_FUNCTION
+        : SCOPE_TOP
+    );
+
+    // For RegExp validation
+    this.regexpState = null;
+
+    // The stack of private names.
+    // Each element has two properties: 'declared' and 'used'.
+    // When it exited from the outermost class definition, all used private names must be declared.
+    this.privateNameStack = [];
+  };
+
+  var prototypeAccessors = { inFunction: { configurable: true },inGenerator: { configurable: true },inAsync: { configurable: true },canAwait: { configurable: true },allowReturn: { configurable: true },allowSuper: { configurable: true },allowDirectSuper: { configurable: true },treatFunctionsAsVar: { configurable: true },allowNewDotTarget: { configurable: true },allowUsing: { configurable: true },inClassStaticBlock: { configurable: true } };
+
+  Parser.prototype.parse = function parse () {
+      var this$1$1 = this;
+
+    var node = this.options.program || this.startNode();
+    this.nextToken();
+    return this.catchStackOverflow(function () { return this$1$1.parseTopLevel(node); })
+  };
+
+  prototypeAccessors.inFunction.get = function () { return (this.currentVarScope().flags & SCOPE_FUNCTION) > 0 };
+
+  prototypeAccessors.inGenerator.get = function () { return (this.currentVarScope().flags & SCOPE_GENERATOR) > 0 };
+
+  prototypeAccessors.inAsync.get = function () { return (this.currentVarScope().flags & SCOPE_ASYNC) > 0 };
+
+  prototypeAccessors.canAwait.get = function () {
+    for (var i = this.scopeStack.length - 1; i >= 0; i--) {
+      var ref = this.scopeStack[i];
+        var flags = ref.flags;
+      if (flags & (SCOPE_CLASS_STATIC_BLOCK | SCOPE_CLASS_FIELD_INIT)) { return false }
+      if (flags & SCOPE_FUNCTION) { return (flags & SCOPE_ASYNC) > 0 }
+    }
+    return (this.inModule && this.options.ecmaVersion >= 13) || this.options.allowAwaitOutsideFunction
+  };
+
+  prototypeAccessors.allowReturn.get = function () {
+    if (this.inFunction) { return true }
+    if (this.options.allowReturnOutsideFunction && this.currentVarScope().flags & SCOPE_TOP) { return true }
+    return false
+  };
+
+  prototypeAccessors.allowSuper.get = function () {
+    var ref = this.currentThisScope();
+      var flags = ref.flags;
+    return (flags & SCOPE_SUPER) > 0 || this.options.allowSuperOutsideMethod
+  };
+
+  prototypeAccessors.allowDirectSuper.get = function () { return (this.currentThisScope().flags & SCOPE_DIRECT_SUPER) > 0 };
+
+  prototypeAccessors.treatFunctionsAsVar.get = function () { return this.treatFunctionsAsVarInScope(this.currentScope()) };
+
+  prototypeAccessors.allowNewDotTarget.get = function () {
+    for (var i = this.scopeStack.length - 1; i >= 0; i--) {
+      var ref = this.scopeStack[i];
+        var flags = ref.flags;
+      if (flags & (SCOPE_CLASS_STATIC_BLOCK | SCOPE_CLASS_FIELD_INIT) ||
+          ((flags & SCOPE_FUNCTION) && !(flags & SCOPE_ARROW))) { return true }
+    }
+    return false
+  };
+
+  prototypeAccessors.allowUsing.get = function () {
+    var ref = this.currentScope();
+      var flags = ref.flags;
+    if (flags & SCOPE_SWITCH) { return false }
+    if (!this.inModule && flags & SCOPE_TOP) { return false }
+    return true
+  };
+
+  prototypeAccessors.inClassStaticBlock.get = function () {
+    return (this.currentVarScope().flags & SCOPE_CLASS_STATIC_BLOCK) > 0
+  };
+
+  Parser.extend = function extend () {
+      var plugins = [], len = arguments.length;
+      while ( len-- ) plugins[ len ] = arguments[ len ];
+
+    var cls = this;
+    for (var i = 0; i < plugins.length; i++) { cls = plugins[i](cls); }
+    return cls
+  };
+
+  Parser.parse = function parse (input, options) {
+    return new this(options, input).parse()
+  };
+
+  Parser.parseExpressionAt = function parseExpressionAt (input, pos, options) {
+    var parser = new this(options, input, pos);
+    parser.nextToken();
+    return parser.parseExpression()
+  };
+
+  Parser.tokenizer = function tokenizer (input, options) {
+    return new this(options, input)
+  };
+
+  Object.defineProperties( Parser.prototype, prototypeAccessors );
+
+  var pp$9 = Parser.prototype;
+
+  // ## Parser utilities
+
+  var literal = /^(?:'((?:\\[^]|[^'\\])*?)'|"((?:\\[^]|[^"\\])*?)")/;
+  pp$9.strictDirective = function(start) {
+    if (this.options.ecmaVersion < 5) { return false }
+    for (;;) {
+      // Try to find string literal.
+      skipWhiteSpace.lastIndex = start;
+      start += skipWhiteSpace.exec(this.input)[0].length;
+      var match = literal.exec(this.input.slice(start));
+      if (!match) { return false }
+      if ((match[1] || match[2]) === "use strict") {
+        skipWhiteSpace.lastIndex = start + match[0].length;
+        var spaceAfter = skipWhiteSpace.exec(this.input), end = spaceAfter.index + spaceAfter[0].length;
+        var next = this.input.charAt(end);
+        return next === ";" || next === "}" ||
+          (lineBreak.test(spaceAfter[0]) &&
+           !(/[(`.[+\-/*%<>=,?^&]/.test(next) || next === "!" && this.input.charAt(end + 1) === "="))
+      }
+      start += match[0].length;
+
+      // Skip semicolon, if any.
+      skipWhiteSpace.lastIndex = start;
+      start += skipWhiteSpace.exec(this.input)[0].length;
+      if (this.input[start] === ";")
+        { start++; }
+    }
+  };
+
+  // Predicate that tests whether the next token is of the given
+  // type, and if yes, consumes it as a side effect.
+
+  pp$9.eat = function(type) {
+    if (this.type === type) {
+      this.next();
+      return true
+    } else {
+      return false
+    }
+  };
+
+  // Tests whether parsed token is a contextual keyword.
+
+  pp$9.isContextual = function(name) {
+    return this.type === types$1.name && this.value === name && !this.containsEsc
+  };
+
+  // Consumes contextual keyword if possible.
+
+  pp$9.eatContextual = function(name) {
+    if (!this.isContextual(name)) { return false }
+    this.next();
+    return true
+  };
+
+  pp$9.catchStackOverflow = function(f) {
+    try {
+      return f()
+    } catch (e) {
+      if (e instanceof Error && (/\bstack\b.*\b(exceeded|overflow)\b/i.test(e.message) || /\btoo much recursion\b/i.test(e.message)))
+        { this.raise(this.start, "Not enough stack space to parse input"); }
+      else
+        { throw e }
+    }
+  };
+
+  // Asserts that following token is given contextual keyword.
+
+  pp$9.expectContextual = function(name) {
+    if (!this.eatContextual(name)) { this.unexpected(); }
+  };
+
+  // Test whether a semicolon can be inserted at the current position.
+
+  pp$9.canInsertSemicolon = function() {
+    return this.type === types$1.eof ||
+      this.type === types$1.braceR ||
+      lineBreak.test(this.input.slice(this.lastTokEnd, this.start))
+  };
+
+  pp$9.insertSemicolon = function() {
+    if (this.canInsertSemicolon()) {
+      if (this.options.onInsertedSemicolon)
+        { this.options.onInsertedSemicolon(this.lastTokEnd, this.lastTokEndLoc); }
+      return true
+    }
+  };
+
+  // Consume a semicolon, or, failing that, see if we are allowed to
+  // pretend that there is a semicolon at this position.
+
+  pp$9.semicolon = function() {
+    if (!this.eat(types$1.semi) && !this.insertSemicolon()) { this.unexpected(); }
+  };
+
+  pp$9.afterTrailingComma = function(tokType, notNext) {
+    if (this.type === tokType) {
+      if (this.options.onTrailingComma)
+        { this.options.onTrailingComma(this.lastTokStart, this.lastTokStartLoc); }
+      if (!notNext)
+        { this.next(); }
+      return true
+    }
+  };
+
+  // Expect a token of a given type. If found, consume it, otherwise,
+  // raise an unexpected token error.
+
+  pp$9.expect = function(type) {
+    this.eat(type) || this.unexpected();
+  };
+
+  // Raise an unexpected token error.
+
+  pp$9.unexpected = function(pos) {
+    this.raise(pos != null ? pos : this.start, "Unexpected token");
+  };
+
+  var DestructuringErrors = function DestructuringErrors() {
+    this.shorthandAssign =
+    this.trailingComma =
+    this.parenthesizedAssign =
+    this.parenthesizedBind =
+    this.doubleProto =
+      -1;
+  };
+
+  pp$9.checkPatternErrors = function(refDestructuringErrors, isAssign) {
+    if (!refDestructuringErrors) { return }
+    if (refDestructuringErrors.trailingComma > -1)
+      { this.raiseRecoverable(refDestructuringErrors.trailingComma, "Comma is not permitted after the rest element"); }
+    var parens = isAssign ? refDestructuringErrors.parenthesizedAssign : refDestructuringErrors.parenthesizedBind;
+    if (parens > -1) { this.raiseRecoverable(parens, isAssign ? "Assigning to rvalue" : "Parenthesized pattern"); }
+  };
+
+  pp$9.checkExpressionErrors = function(refDestructuringErrors, andThrow) {
+    if (!refDestructuringErrors) { return false }
+    var shorthandAssign = refDestructuringErrors.shorthandAssign;
+    var doubleProto = refDestructuringErrors.doubleProto;
+    if (!andThrow) { return shorthandAssign >= 0 || doubleProto >= 0 }
+    if (shorthandAssign >= 0)
+      { this.raise(shorthandAssign, "Shorthand property assignments are valid only in destructuring patterns"); }
+    if (doubleProto >= 0)
+      { this.raiseRecoverable(doubleProto, "Redefinition of __proto__ property"); }
+  };
+
+  pp$9.checkYieldAwaitInDefaultParams = function() {
+    if (this.yieldPos && (!this.awaitPos || this.yieldPos < this.awaitPos))
+      { this.raise(this.yieldPos, "Yield expression cannot be a default value"); }
+    if (this.awaitPos)
+      { this.raise(this.awaitPos, "Await expression cannot be a default value"); }
+  };
+
+  pp$9.isSimpleAssignTarget = function(expr) {
+    if (expr.type === "ParenthesizedExpression")
+      { return this.isSimpleAssignTarget(expr.expression) }
+    return expr.type === "Identifier" || expr.type === "MemberExpression"
+  };
+
+  var pp$8 = Parser.prototype;
+
+  // ### Statement parsing
+
+  // Parse a program. Initializes the parser, reads any number of
+  // statements, and wraps them in a Program node.  Optionally takes a
+  // `program` argument.  If present, the statements will be appended
+  // to its body instead of creating a new node.
+
+  pp$8.parseTopLevel = function(node) {
+    var exports$1 = Object.create(null);
+    if (!node.body) { node.body = []; }
+    while (this.type !== types$1.eof) {
+      var stmt = this.parseStatement(null, true, exports$1);
+      node.body.push(stmt);
+    }
+    if (this.inModule)
+      { for (var i = 0, list = Object.keys(this.undefinedExports); i < list.length; i += 1)
+        {
+          var name = list[i];
+
+          this.raiseRecoverable(this.undefinedExports[name].start, ("Export '" + name + "' is not defined"));
+        } }
+    this.adaptDirectivePrologue(node.body);
+    this.next();
+    node.sourceType = this.options.sourceType === "commonjs" ? "script" : this.options.sourceType;
+    return this.finishNode(node, "Program")
+  };
+
+  var loopLabel = {kind: "loop"}, switchLabel = {kind: "switch"};
+
+  pp$8.isLet = function(context) {
+    if (this.options.ecmaVersion < 6 || !this.isContextual("let")) { return false }
+    skipWhiteSpace.lastIndex = this.pos;
+    var skip = skipWhiteSpace.exec(this.input);
+    var next = this.pos + skip[0].length, nextCh = this.fullCharCodeAt(next);
+    // For ambiguous cases, determine if a LexicalDeclaration (or only a
+    // Statement) is allowed here. If context is not empty then only a Statement
+    // is allowed. However, `let [` is an explicit negative lookahead for
+    // ExpressionStatement, so special-case it first.
+    if (nextCh === 91 || nextCh === 92) { return true } // '[', '\'
+    if (context) { return false }
+
+    if (nextCh === 123) { return true } // '{'
+    if (isIdentifierStart(nextCh)) {
+      var start = next;
+      do { next += nextCh <= 0xffff ? 1 : 2; }
+      while (isIdentifierChar(nextCh = this.fullCharCodeAt(next)))
+      if (nextCh === 92) { return true }
+      var ident = this.input.slice(start, next);
+      if (!keywordRelationalOperator.test(ident)) { return true }
+    }
+    return false
+  };
+
+  // check 'async [no LineTerminator here] function'
+  // - 'async /*foo*/ function' is OK.
+  // - 'async /*\n*/ function' is invalid.
+  pp$8.isAsyncFunction = function() {
+    if (this.options.ecmaVersion < 8 || !this.isContextual("async"))
+      { return false }
+
+    skipWhiteSpace.lastIndex = this.pos;
+    var skip = skipWhiteSpace.exec(this.input);
+    var next = this.pos + skip[0].length, after;
+    return !lineBreak.test(this.input.slice(this.pos, next)) &&
+      this.input.slice(next, next + 8) === "function" &&
+      (next + 8 === this.input.length ||
+       !(isIdentifierChar(after = this.fullCharCodeAt(next + 8)) || after === 92 /* '\' */))
+  };
+
+  pp$8.isUsingKeyword = function(isAwaitUsing, isFor) {
+    if (this.options.ecmaVersion < 17 || !this.isContextual(isAwaitUsing ? "await" : "using"))
+      { return false }
+
+    skipWhiteSpace.lastIndex = this.pos;
+    var skip = skipWhiteSpace.exec(this.input);
+    var next = this.pos + skip[0].length;
+
+    if (lineBreak.test(this.input.slice(this.pos, next))) { return false }
+
+    if (isAwaitUsing) {
+      var usingEndPos = next + 5 /* using */, after;
+      if (this.input.slice(next, usingEndPos) !== "using" ||
+        usingEndPos === this.input.length ||
+        isIdentifierChar(after = this.fullCharCodeAt(usingEndPos)) ||
+        after === 92 /* '\' */
+      ) { return false }
+
+      skipWhiteSpace.lastIndex = usingEndPos;
+      var skipAfterUsing = skipWhiteSpace.exec(this.input);
+      next = usingEndPos + skipAfterUsing[0].length;
+      if (skipAfterUsing && lineBreak.test(this.input.slice(usingEndPos, next))) { return false }
+    }
+
+    var ch = this.fullCharCodeAt(next);
+    if (!isIdentifierStart(ch) && ch !== 92 /* '\' */) { return false }
+    var idStart = next;
+    do { next += ch <= 0xffff ? 1 : 2; }
+    while (isIdentifierChar(ch = this.fullCharCodeAt(next)))
+    if (ch === 92) { return true }
+    var id = this.input.slice(idStart, next);
+    if (keywordRelationalOperator.test(id)) { return false }
+    if (isFor && !isAwaitUsing && id === "of") {
+      // Look ahead for using declaration with initializer, i.e., `for (using of = ...)`
+      skipWhiteSpace.lastIndex = next;
+      var skipAfterOf = skipWhiteSpace.exec(this.input);
+      next = next + skipAfterOf[0].length;
+      if (this.input.charCodeAt(next) !== 61 /* '=' */ ||
+        // Check for ==, === and => operators
+        (ch = this.input.charCodeAt(next + 1)) === 61 /* '=' */ || ch === 62 /* '>' */) {
+        return false
+      }
+    }
+    return true
+  };
+
+  pp$8.isAwaitUsing = function(isFor) {
+    return this.isUsingKeyword(true, isFor)
+  };
+
+  pp$8.isUsing = function(isFor) {
+    return this.isUsingKeyword(false, isFor)
+  };
+
+  // Parse a single statement.
+  //
+  // If expecting a statement and finding a slash operator, parse a
+  // regular expression literal. This is to handle cases like
+  // `if (foo) /blah/.exec(foo)`, where looking at the previous token
+  // does not help.
+
+  pp$8.parseStatement = function(context, topLevel, exports$1) {
+    var starttype = this.type, node = this.startNode(), kind;
+
+    if (this.isLet(context)) {
+      starttype = types$1._var;
+      kind = "let";
+    }
+
+    // Most types of statements are recognized by the keyword they
+    // start with. Many are trivial to parse, some require a bit of
+    // complexity.
+
+    switch (starttype) {
+    case types$1._break: case types$1._continue: return this.parseBreakContinueStatement(node, starttype.keyword)
+    case types$1._debugger: return this.parseDebuggerStatement(node)
+    case types$1._do: return this.parseDoStatement(node)
+    case types$1._for: return this.parseForStatement(node)
+    case types$1._function:
+      // Function as sole body of either an if statement or a labeled statement
+      // works, but not when it is part of a labeled statement that is the sole
+      // body of an if statement.
+      if ((context && (this.strict || context !== "if" && context !== "label")) && this.options.ecmaVersion >= 6) { this.unexpected(); }
+      return this.parseFunctionStatement(node, false, !context)
+    case types$1._class:
+      if (context) { this.unexpected(); }
+      return this.parseClass(node, true)
+    case types$1._if: return this.parseIfStatement(node)
+    case types$1._return: return this.parseReturnStatement(node)
+    case types$1._switch: return this.parseSwitchStatement(node)
+    case types$1._throw: return this.parseThrowStatement(node)
+    case types$1._try: return this.parseTryStatement(node)
+    case types$1._const: case types$1._var:
+      kind = kind || this.value;
+      if (context && kind !== "var") { this.unexpected(); }
+      return this.parseVarStatement(node, kind)
+    case types$1._while: return this.parseWhileStatement(node)
+    case types$1._with: return this.parseWithStatement(node)
+    case types$1.braceL: return this.parseBlock(true, node)
+    case types$1.semi: return this.parseEmptyStatement(node)
+    case types$1._export:
+    case types$1._import:
+      if (this.options.ecmaVersion > 10 && starttype === types$1._import) {
+        skipWhiteSpace.lastIndex = this.pos;
+        var skip = skipWhiteSpace.exec(this.input);
+        var next = this.pos + skip[0].length, nextCh = this.input.charCodeAt(next);
+        if (nextCh === 40 || nextCh === 46) // '(' or '.'
+          { return this.parseExpressionStatement(node, this.parseExpression()) }
+      }
+
+      if (!this.options.allowImportExportEverywhere) {
+        if (!topLevel)
+          { this.raise(this.start, "'import' and 'export' may only appear at the top level"); }
+        if (!this.inModule)
+          { this.raise(this.start, "'import' and 'export' may appear only with 'sourceType: module'"); }
+      }
+      return starttype === types$1._import ? this.parseImport(node) : this.parseExport(node, exports$1)
+
+      // If the statement does not start with a statement keyword or a
+      // brace, it's an ExpressionStatement or LabeledStatement. We
+      // simply start parsing an expression, and afterwards, if the
+      // next token is a colon and the expression was a simple
+      // Identifier node, we switch to interpreting it as a label.
+    default:
+      if (this.isAsyncFunction()) {
+        if (context) { this.unexpected(); }
+        this.next();
+        return this.parseFunctionStatement(node, true, !context)
+      }
+
+      var usingKind = this.isAwaitUsing(false) ? "await using" : this.isUsing(false) ? "using" : null;
+      if (usingKind) {
+        if (!this.allowUsing) {
+          this.raise(this.start, "Using declaration cannot appear in the top level when source type is `script` or in the bare case statement");
+        }
+        if (context) {
+          // Cases like `for (;;) using x = ...;`, `if (true) await using x = ...;`, etc. are not allowed.
+          this.raise(this.start, "Using declaration is not allowed in single-statement positions");
+        }
+        if (usingKind === "await using") {
+          if (!this.canAwait) {
+            this.raise(this.start, "Await using cannot appear outside of async function");
+          }
+          this.next();
+        }
+        this.next();
+        this.parseVar(node, false, usingKind);
+        this.semicolon();
+        return this.finishNode(node, "VariableDeclaration")
+      }
+
+      var maybeName = this.value, expr = this.parseExpression();
+      if (starttype === types$1.name && expr.type === "Identifier" && this.eat(types$1.colon))
+        { return this.parseLabeledStatement(node, maybeName, expr, context) }
+      else { return this.parseExpressionStatement(node, expr) }
+    }
+  };
+
+  pp$8.parseBreakContinueStatement = function(node, keyword) {
+    var isBreak = keyword === "break";
+    this.next();
+    if (this.eat(types$1.semi) || this.insertSemicolon()) { node.label = null; }
+    else if (this.type !== types$1.name) { this.unexpected(); }
+    else {
+      node.label = this.parseIdent();
+      this.semicolon();
+    }
+
+    // Verify that there is an actual destination to break or
+    // continue to.
+    var i = 0;
+    for (; i < this.labels.length; ++i) {
+      var lab = this.labels[i];
+      if (node.label == null || lab.name === node.label.name) {
+        if (lab.kind != null && (isBreak || lab.kind === "loop")) { break }
+        if (node.label && isBreak) { break }
+      }
+    }
+    if (i === this.labels.length) { this.raise(node.start, "Unsyntactic " + keyword); }
+    return this.finishNode(node, isBreak ? "BreakStatement" : "ContinueStatement")
+  };
+
+  pp$8.parseDebuggerStatement = function(node) {
+    this.next();
+    this.semicolon();
+    return this.finishNode(node, "DebuggerStatement")
+  };
+
+  pp$8.parseDoStatement = function(node) {
+    this.next();
+    this.labels.push(loopLabel);
+    node.body = this.parseStatement("do");
+    this.labels.pop();
+    this.expect(types$1._while);
+    node.test = this.parseParenExpression();
+    if (this.options.ecmaVersion >= 6)
+      { this.eat(types$1.semi); }
+    else
+      { this.semicolon(); }
+    return this.finishNode(node, "DoWhileStatement")
+  };
+
+  // Disambiguating between a `for` and a `for`/`in` or `for`/`of`
+  // loop is non-trivial. Basically, we have to parse the init `var`
+  // statement or expression, disallowing the `in` operator (see
+  // the second parameter to `parseExpression`), and then check
+  // whether the next token is `in` or `of`. When there is no init
+  // part (semicolon immediately after the opening parenthesis), it
+  // is a regular `for` loop.
+
+  pp$8.parseForStatement = function(node) {
+    this.next();
+    var awaitAt = (this.options.ecmaVersion >= 9 && this.canAwait && this.eatContextual("await")) ? this.lastTokStart : -1;
+    this.labels.push(loopLabel);
+    this.enterScope(0);
+    this.expect(types$1.parenL);
+    if (this.type === types$1.semi) {
+      if (awaitAt > -1) { this.unexpected(awaitAt); }
+      return this.parseFor(node, null)
+    }
+    var isLet = this.isLet();
+    if (this.type === types$1._var || this.type === types$1._const || isLet) {
+      var init$1 = this.startNode(), kind = isLet ? "let" : this.value;
+      this.next();
+      this.parseVar(init$1, true, kind);
+      this.finishNode(init$1, "VariableDeclaration");
+      return this.parseForAfterInit(node, init$1, awaitAt)
+    }
+    var startsWithLet = this.isContextual("let"), isForOf = false;
+
+    var usingKind = this.isUsing(true) ? "using" : this.isAwaitUsing(true) ? "await using" : null;
+    if (usingKind) {
+      var init$2 = this.startNode();
+      this.next();
+      if (usingKind === "await using") {
+        if (!this.canAwait) {
+          this.raise(this.start, "Await using cannot appear outside of async function");
+        }
+        this.next();
+      }
+      this.parseVar(init$2, true, usingKind);
+      this.finishNode(init$2, "VariableDeclaration");
+      return this.parseForAfterInit(node, init$2, awaitAt)
+    }
+    var containsEsc = this.containsEsc;
+    var refDestructuringErrors = new DestructuringErrors;
+    var initPos = this.start;
+    var init = awaitAt > -1
+      ? this.parseExprSubscripts(refDestructuringErrors, "await")
+      : this.parseExpression(true, refDestructuringErrors);
+    if (this.type === types$1._in || (isForOf = this.options.ecmaVersion >= 6 && this.isContextual("of"))) {
+      if (awaitAt > -1) { // implies `ecmaVersion >= 9` (see declaration of awaitAt)
+        if (this.type === types$1._in) { this.unexpected(awaitAt); }
+        node.await = true;
+      } else if (isForOf && this.options.ecmaVersion >= 8) {
+        if (init.start === initPos && !containsEsc && init.type === "Identifier" && init.name === "async") { this.unexpected(); }
+        else if (this.options.ecmaVersion >= 9) { node.await = false; }
+      }
+      if (startsWithLet && isForOf) { this.raise(init.start, "The left-hand side of a for-of loop may not start with 'let'."); }
+      this.toAssignable(init, false, refDestructuringErrors);
+      this.checkLValPattern(init);
+      return this.parseForIn(node, init)
+    } else {
+      this.checkExpressionErrors(refDestructuringErrors, true);
+    }
+    if (awaitAt > -1) { this.unexpected(awaitAt); }
+    return this.parseFor(node, init)
+  };
+
+  // Helper method to parse for loop after variable initialization
+  pp$8.parseForAfterInit = function(node, init, awaitAt) {
+    if ((this.type === types$1._in || (this.options.ecmaVersion >= 6 && this.isContextual("of"))) && init.declarations.length === 1) {
+      if (this.type === types$1._in) {
+        if ((init.kind === "using" || init.kind === "await using") && !init.declarations[0].init) {
+          this.raise(this.start, "Using declaration is not allowed in for-in loops");
+        }
+        if (this.options.ecmaVersion >= 9 && awaitAt > -1) { this.unexpected(awaitAt); }
+      } else if (this.options.ecmaVersion >= 9) { node.await = awaitAt > -1; }
+      return this.parseForIn(node, init)
+    }
+    if (awaitAt > -1) { this.unexpected(awaitAt); }
+    return this.parseFor(node, init)
+  };
+
+  pp$8.parseFunctionStatement = function(node, isAsync, declarationPosition) {
+    this.next();
+    return this.parseFunction(node, FUNC_STATEMENT | (declarationPosition ? 0 : FUNC_HANGING_STATEMENT), false, isAsync)
+  };
+
+  pp$8.parseIfStatement = function(node) {
+    this.next();
+    node.test = this.parseParenExpression();
+    // allow function declarations in branches, but only in non-strict mode
+    node.consequent = this.parseStatement("if");
+    node.alternate = this.eat(types$1._else) ? this.parseStatement("if") : null;
+    return this.finishNode(node, "IfStatement")
+  };
+
+  pp$8.parseReturnStatement = function(node) {
+    if (!this.allowReturn)
+      { this.raise(this.start, "'return' outside of function"); }
+    this.next();
+
+    // In `return` (and `break`/`continue`), the keywords with
+    // optional arguments, we eagerly look for a semicolon or the
+    // possibility to insert one.
+
+    if (this.eat(types$1.semi) || this.insertSemicolon()) { node.argument = null; }
+    else { node.argument = this.parseExpression(); this.semicolon(); }
+    return this.finishNode(node, "ReturnStatement")
+  };
+
+  pp$8.parseSwitchStatement = function(node) {
+    this.next();
+    node.discriminant = this.parseParenExpression();
+    node.cases = [];
+    this.expect(types$1.braceL);
+    this.labels.push(switchLabel);
+    this.enterScope(SCOPE_SWITCH);
+
+    // Statements under must be grouped (by label) in SwitchCase
+    // nodes. `cur` is used to keep the node that we are currently
+    // adding statements to.
+
+    var cur;
+    for (var sawDefault = false; this.type !== types$1.braceR;) {
+      if (this.type === types$1._case || this.type === types$1._default) {
+        var isCase = this.type === types$1._case;
+        if (cur) { this.finishNode(cur, "SwitchCase"); }
+        node.cases.push(cur = this.startNode());
+        cur.consequent = [];
+        this.next();
+        if (isCase) {
+          cur.test = this.parseExpression();
+        } else {
+          if (sawDefault) { this.raiseRecoverable(this.lastTokStart, "Multiple default clauses"); }
+          sawDefault = true;
+          cur.test = null;
+        }
+        this.expect(types$1.colon);
+      } else {
+        if (!cur) { this.unexpected(); }
+        cur.consequent.push(this.parseStatement(null));
+      }
+    }
+    this.exitScope();
+    if (cur) { this.finishNode(cur, "SwitchCase"); }
+    this.next(); // Closing brace
+    this.labels.pop();
+    return this.finishNode(node, "SwitchStatement")
+  };
+
+  pp$8.parseThrowStatement = function(node) {
+    this.next();
+    if (lineBreak.test(this.input.slice(this.lastTokEnd, this.start)))
+      { this.raise(this.lastTokEnd, "Illegal newline after throw"); }
+    node.argument = this.parseExpression();
+    this.semicolon();
+    return this.finishNode(node, "ThrowStatement")
+  };
+
+  // Reused empty array added for node fields that are always empty.
+
+  var empty$1 = [];
+
+  pp$8.parseCatchClauseParam = function() {
+    var param = this.parseBindingAtom();
+    var simple = param.type === "Identifier";
+    this.enterScope(simple ? SCOPE_SIMPLE_CATCH : 0);
+    this.checkLValPattern(param, simple ? BIND_SIMPLE_CATCH : BIND_LEXICAL);
+    this.expect(types$1.parenR);
+
+    return param
+  };
+
+  pp$8.parseTryStatement = function(node) {
+    this.next();
+    node.block = this.parseBlock();
+    node.handler = null;
+    if (this.type === types$1._catch) {
+      var clause = this.startNode();
+      this.next();
+      if (this.eat(types$1.parenL)) {
+        clause.param = this.parseCatchClauseParam();
+      } else {
+        if (this.options.ecmaVersion < 10) { this.unexpected(); }
+        clause.param = null;
+        this.enterScope(0);
+      }
+      clause.body = this.parseBlock(false);
+      this.exitScope();
+      node.handler = this.finishNode(clause, "CatchClause");
+    }
+    node.finalizer = this.eat(types$1._finally) ? this.parseBlock() : null;
+    if (!node.handler && !node.finalizer)
+      { this.raise(node.start, "Missing catch or finally clause"); }
+    return this.finishNode(node, "TryStatement")
+  };
+
+  pp$8.parseVarStatement = function(node, kind, allowMissingInitializer) {
+    this.next();
+    this.parseVar(node, false, kind, allowMissingInitializer);
+    this.semicolon();
+    return this.finishNode(node, "VariableDeclaration")
+  };
+
+  pp$8.parseWhileStatement = function(node) {
+    this.next();
+    node.test = this.parseParenExpression();
+    this.labels.push(loopLabel);
+    node.body = this.parseStatement("while");
+    this.labels.pop();
+    return this.finishNode(node, "WhileStatement")
+  };
+
+  pp$8.parseWithStatement = function(node) {
+    if (this.strict) { this.raise(this.start, "'with' in strict mode"); }
+    this.next();
+    node.object = this.parseParenExpression();
+    node.body = this.parseStatement("with");
+    return this.finishNode(node, "WithStatement")
+  };
+
+  pp$8.parseEmptyStatement = function(node) {
+    this.next();
+    return this.finishNode(node, "EmptyStatement")
+  };
+
+  pp$8.parseLabeledStatement = function(node, maybeName, expr, context) {
+    for (var i$1 = 0, list = this.labels; i$1 < list.length; i$1 += 1)
+      {
+      var label = list[i$1];
+
+      if (label.name === maybeName)
+        { this.raise(expr.start, "Label '" + maybeName + "' is already declared");
+    } }
+    var kind = this.type.isLoop ? "loop" : this.type === types$1._switch ? "switch" : null;
+    for (var i = this.labels.length - 1; i >= 0; i--) {
+      var label$1 = this.labels[i];
+      if (label$1.statementStart === node.start) {
+        // Update information about previous labels on this node
+        label$1.statementStart = this.start;
+        label$1.kind = kind;
+      } else { break }
+    }
+    this.labels.push({name: maybeName, kind: kind, statementStart: this.start});
+    node.body = this.parseStatement(context ? context.indexOf("label") === -1 ? context + "label" : context : "label");
+    this.labels.pop();
+    node.label = expr;
+    return this.finishNode(node, "LabeledStatement")
+  };
+
+  pp$8.parseExpressionStatement = function(node, expr) {
+    node.expression = expr;
+    this.semicolon();
+    return this.finishNode(node, "ExpressionStatement")
+  };
+
+  // Parse a semicolon-enclosed block of statements, handling `"use
+  // strict"` declarations when `allowStrict` is true (used for
+  // function bodies).
+
+  pp$8.parseBlock = function(createNewLexicalScope, node, exitStrict) {
+    if ( createNewLexicalScope === void 0 ) createNewLexicalScope = true;
+    if ( node === void 0 ) node = this.startNode();
+
+    node.body = [];
+    this.expect(types$1.braceL);
+    if (createNewLexicalScope) { this.enterScope(0); }
+    while (this.type !== types$1.braceR) {
+      var stmt = this.parseStatement(null);
+      node.body.push(stmt);
+    }
+    if (exitStrict) { this.strict = false; }
+    this.next();
+    if (createNewLexicalScope) { this.exitScope(); }
+    return this.finishNode(node, "BlockStatement")
+  };
+
+  // Parse a regular `for` loop. The disambiguation code in
+  // `parseStatement` will already have parsed the init statement or
+  // expression.
+
+  pp$8.parseFor = function(node, init) {
+    node.init = init;
+    this.expect(types$1.semi);
+    node.test = this.type === types$1.semi ? null : this.parseExpression();
+    this.expect(types$1.semi);
+    node.update = this.type === types$1.parenR ? null : this.parseExpression();
+    this.expect(types$1.parenR);
+    node.body = this.parseStatement("for");
+    this.exitScope();
+    this.labels.pop();
+    return this.finishNode(node, "ForStatement")
+  };
+
+  // Parse a `for`/`in` and `for`/`of` loop, which are almost
+  // same from parser's perspective.
+
+  pp$8.parseForIn = function(node, init) {
+    var isForIn = this.type === types$1._in;
+    this.next();
+
+    if (
+      init.type === "VariableDeclaration" &&
+      init.declarations[0].init != null &&
+      (
+        !isForIn ||
+        this.options.ecmaVersion < 8 ||
+        this.strict ||
+        init.kind !== "var" ||
+        init.declarations[0].id.type !== "Identifier"
+      )
+    ) {
+      this.raise(
+        init.start,
+        ((isForIn ? "for-in" : "for-of") + " loop variable declaration may not have an initializer")
+      );
+    }
+    node.left = init;
+    node.right = isForIn ? this.parseExpression() : this.parseMaybeAssign();
+    this.expect(types$1.parenR);
+    node.body = this.parseStatement("for");
+    this.exitScope();
+    this.labels.pop();
+    return this.finishNode(node, isForIn ? "ForInStatement" : "ForOfStatement")
+  };
+
+  // Parse a list of variable declarations.
+
+  pp$8.parseVar = function(node, isFor, kind, allowMissingInitializer) {
+    node.declarations = [];
+    node.kind = kind;
+    for (;;) {
+      var decl = this.startNode();
+      this.parseVarId(decl, kind);
+      if (this.eat(types$1.eq)) {
+        decl.init = this.parseMaybeAssign(isFor);
+      } else if (!allowMissingInitializer && kind === "const" && !(this.type === types$1._in || (this.options.ecmaVersion >= 6 && this.isContextual("of")))) {
+        this.unexpected();
+      } else if (!allowMissingInitializer && (kind === "using" || kind === "await using") && this.options.ecmaVersion >= 17 && this.type !== types$1._in && !this.isContextual("of")) {
+        this.raise(this.lastTokEnd, ("Missing initializer in " + kind + " declaration"));
+      } else if (!allowMissingInitializer && decl.id.type !== "Identifier" && !(isFor && (this.type === types$1._in || this.isContextual("of")))) {
+        this.raise(this.lastTokEnd, "Complex binding patterns require an initialization value");
+      } else {
+        decl.init = null;
+      }
+      node.declarations.push(this.finishNode(decl, "VariableDeclarator"));
+      if (!this.eat(types$1.comma)) { break }
+    }
+    return node
+  };
+
+  pp$8.parseVarId = function(decl, kind) {
+    decl.id = kind === "using" || kind === "await using"
+      ? this.parseIdent()
+      : this.parseBindingAtom();
+
+    this.checkLValPattern(decl.id, kind === "var" ? BIND_VAR : BIND_LEXICAL, false);
+  };
+
+  var FUNC_STATEMENT = 1, FUNC_HANGING_STATEMENT = 2, FUNC_NULLABLE_ID = 4;
+
+  // Parse a function declaration or literal (depending on the
+  // `statement & FUNC_STATEMENT`).
+
+  // Remove `allowExpressionBody` for 7.0.0, as it is only called with false
+  pp$8.parseFunction = function(node, statement, allowExpressionBody, isAsync, forInit) {
+    this.initFunction(node);
+    if (this.options.ecmaVersion >= 9 || this.options.ecmaVersion >= 6 && !isAsync) {
+      if (this.type === types$1.star && (statement & FUNC_HANGING_STATEMENT))
+        { this.unexpected(); }
+      node.generator = this.eat(types$1.star);
+    }
+    if (this.options.ecmaVersion >= 8)
+      { node.async = !!isAsync; }
+
+    if (statement & FUNC_STATEMENT) {
+      node.id = (statement & FUNC_NULLABLE_ID) && this.type !== types$1.name ? null : this.parseIdent();
+      if (node.id && !(statement & FUNC_HANGING_STATEMENT))
+        // If it is a regular function declaration in sloppy mode, then it is
+        // subject to Annex B semantics (BIND_FUNCTION). Otherwise, the binding
+        // mode depends on properties of the current scope (see
+        // treatFunctionsAsVar).
+        { this.checkLValSimple(node.id, (this.strict || node.generator || node.async) ? this.treatFunctionsAsVar ? BIND_VAR : BIND_LEXICAL : BIND_FUNCTION); }
+    }
+
+    var oldYieldPos = this.yieldPos, oldAwaitPos = this.awaitPos, oldAwaitIdentPos = this.awaitIdentPos;
+    this.yieldPos = 0;
+    this.awaitPos = 0;
+    this.awaitIdentPos = 0;
+    this.enterScope(functionFlags(node.async, node.generator));
+
+    if (!(statement & FUNC_STATEMENT))
+      { node.id = this.type === types$1.name ? this.parseIdent() : null; }
+
+    this.parseFunctionParams(node);
+    this.parseFunctionBody(node, allowExpressionBody, false, forInit);
+
+    this.yieldPos = oldYieldPos;
+    this.awaitPos = oldAwaitPos;
+    this.awaitIdentPos = oldAwaitIdentPos;
+    return this.finishNode(node, (statement & FUNC_STATEMENT) ? "FunctionDeclaration" : "FunctionExpression")
+  };
+
+  pp$8.parseFunctionParams = function(node) {
+    this.expect(types$1.parenL);
+    node.params = this.parseBindingList(types$1.parenR, false, this.options.ecmaVersion >= 8);
+    this.checkYieldAwaitInDefaultParams();
+  };
+
+  // Parse a class declaration or literal (depending on the
+  // `isStatement` parameter).
+
+  pp$8.parseClass = function(node, isStatement) {
+    this.next();
+
+    // ecma-262 14.6 Class Definitions
+    // A class definition is always strict mode code.
+    var oldStrict = this.strict;
+    this.strict = true;
+
+    this.parseClassId(node, isStatement);
+    this.parseClassSuper(node);
+    var privateNameMap = this.enterClassBody();
+    var classBody = this.startNode();
+    var hadConstructor = false;
+    classBody.body = [];
+    this.expect(types$1.braceL);
+    while (this.type !== types$1.braceR) {
+      var element = this.parseClassElement(node.superClass !== null);
+      if (element) {
+        classBody.body.push(element);
+        if (element.type === "MethodDefinition" && element.kind === "constructor") {
+          if (hadConstructor) { this.raiseRecoverable(element.start, "Duplicate constructor in the same class"); }
+          hadConstructor = true;
+        } else if (element.key && element.key.type === "PrivateIdentifier" && isPrivateNameConflicted(privateNameMap, element)) {
+          this.raiseRecoverable(element.key.start, ("Identifier '#" + (element.key.name) + "' has already been declared"));
+        }
+      }
+    }
+    this.strict = oldStrict;
+    this.next();
+    node.body = this.finishNode(classBody, "ClassBody");
+    this.exitClassBody();
+    return this.finishNode(node, isStatement ? "ClassDeclaration" : "ClassExpression")
+  };
+
+  pp$8.parseClassElement = function(constructorAllowsSuper) {
+    if (this.eat(types$1.semi)) { return null }
+
+    var ecmaVersion = this.options.ecmaVersion;
+    var node = this.startNode();
+    var keyName = "";
+    var isGenerator = false;
+    var isAsync = false;
+    var kind = "method";
+    var isStatic = false;
+
+    if (this.eatContextual("static")) {
+      // Parse static init block
+      if (ecmaVersion >= 13 && this.eat(types$1.braceL)) {
+        this.parseClassStaticBlock(node);
+        return node
+      }
+      if (this.isClassElementNameStart() || this.type === types$1.star) {
+        isStatic = true;
+      } else {
+        keyName = "static";
+      }
+    }
+    node.static = isStatic;
+    if (!keyName && ecmaVersion >= 8 && this.eatContextual("async")) {
+      if ((this.isClassElementNameStart() || this.type === types$1.star) && !this.canInsertSemicolon()) {
+        isAsync = true;
+      } else {
+        keyName = "async";
+      }
+    }
+    if (!keyName && (ecmaVersion >= 9 || !isAsync) && this.eat(types$1.star)) {
+      isGenerator = true;
+    }
+    if (!keyName && !isAsync && !isGenerator) {
+      var lastValue = this.value;
+      if (this.eatContextual("get") || this.eatContextual("set")) {
+        if (this.isClassElementNameStart()) {
+          kind = lastValue;
+        } else {
+          keyName = lastValue;
+        }
+      }
+    }
+
+    // Parse element name
+    if (keyName) {
+      // 'async', 'get', 'set', or 'static' were not a keyword contextually.
+      // The last token is any of those. Make it the element name.
+      node.computed = false;
+      node.key = this.startNodeAt(this.lastTokStart, this.lastTokStartLoc);
+      node.key.name = keyName;
+      this.finishNode(node.key, "Identifier");
+    } else {
+      this.parseClassElementName(node);
+    }
+
+    // Parse element value
+    if (ecmaVersion < 13 || this.type === types$1.parenL || kind !== "method" || isGenerator || isAsync) {
+      var isConstructor = !node.static && checkKeyName(node, "constructor");
+      var allowsDirectSuper = isConstructor && constructorAllowsSuper;
+      // Couldn't move this check into the 'parseClassMethod' method for backward compatibility.
+      if (isConstructor && kind !== "method") { this.raise(node.key.start, "Constructor can't have get/set modifier"); }
+      node.kind = isConstructor ? "constructor" : kind;
+      this.parseClassMethod(node, isGenerator, isAsync, allowsDirectSuper);
+    } else {
+      this.parseClassField(node);
+    }
+
+    return node
+  };
+
+  pp$8.isClassElementNameStart = function() {
+    return (
+      this.type === types$1.name ||
+      this.type === types$1.privateId ||
+      this.type === types$1.num ||
+      this.type === types$1.string ||
+      this.type === types$1.bracketL ||
+      this.type.keyword
+    )
+  };
+
+  pp$8.parseClassElementName = function(element) {
+    if (this.type === types$1.privateId) {
+      if (this.value === "constructor") {
+        this.raise(this.start, "Classes can't have an element named '#constructor'");
+      }
+      element.computed = false;
+      element.key = this.parsePrivateIdent();
+    } else {
+      this.parsePropertyName(element);
+    }
+  };
+
+  pp$8.parseClassMethod = function(method, isGenerator, isAsync, allowsDirectSuper) {
+    // Check key and flags
+    var key = method.key;
+    if (method.kind === "constructor") {
+      if (isGenerator) { this.raise(key.start, "Constructor can't be a generator"); }
+      if (isAsync) { this.raise(key.start, "Constructor can't be an async method"); }
+    } else if (method.static && checkKeyName(method, "prototype")) {
+      this.raise(key.start, "Classes may not have a static property named prototype");
+    }
+
+    // Parse value
+    var value = method.value = this.parseMethod(isGenerator, isAsync, allowsDirectSuper);
+
+    // Check value
+    if (method.kind === "get" && value.params.length !== 0)
+      { this.raiseRecoverable(value.start, "getter should have no params"); }
+    if (method.kind === "set" && value.params.length !== 1)
+      { this.raiseRecoverable(value.start, "setter should have exactly one param"); }
+    if (method.kind === "set" && value.params[0].type === "RestElement")
+      { this.raiseRecoverable(value.params[0].start, "Setter cannot use rest params"); }
+
+    return this.finishNode(method, "MethodDefinition")
+  };
+
+  pp$8.parseClassField = function(field) {
+    if (checkKeyName(field, "constructor")) {
+      this.raise(field.key.start, "Classes can't have a field named 'constructor'");
+    } else if (field.static && checkKeyName(field, "prototype")) {
+      this.raise(field.key.start, "Classes can't have a static field named 'prototype'");
+    }
+
+    if (this.eat(types$1.eq)) {
+      // To raise SyntaxError if 'arguments' exists in the initializer.
+      this.enterScope(SCOPE_CLASS_FIELD_INIT | SCOPE_SUPER);
+      field.value = this.parseMaybeAssign();
+      this.exitScope();
+    } else {
+      field.value = null;
+    }
+    this.semicolon();
+
+    return this.finishNode(field, "PropertyDefinition")
+  };
+
+  pp$8.parseClassStaticBlock = function(node) {
+    node.body = [];
+
+    var oldLabels = this.labels;
+    this.labels = [];
+    this.enterScope(SCOPE_CLASS_STATIC_BLOCK | SCOPE_SUPER);
+    while (this.type !== types$1.braceR) {
+      var stmt = this.parseStatement(null);
+      node.body.push(stmt);
+    }
+    this.next();
+    this.exitScope();
+    this.labels = oldLabels;
+
+    return this.finishNode(node, "StaticBlock")
+  };
+
+  pp$8.parseClassId = function(node, isStatement) {
+    if (this.type === types$1.name) {
+      node.id = this.parseIdent();
+      if (isStatement)
+        { this.checkLValSimple(node.id, BIND_LEXICAL, false); }
+    } else {
+      if (isStatement === true)
+        { this.unexpected(); }
+      node.id = null;
+    }
+  };
+
+  pp$8.parseClassSuper = function(node) {
+    node.superClass = this.eat(types$1._extends) ? this.parseExprSubscripts(null, false) : null;
+  };
+
+  pp$8.enterClassBody = function() {
+    var element = {declared: Object.create(null), used: []};
+    this.privateNameStack.push(element);
+    return element.declared
+  };
+
+  pp$8.exitClassBody = function() {
+    var ref = this.privateNameStack.pop();
+    var declared = ref.declared;
+    var used = ref.used;
+    if (!this.options.checkPrivateFields) { return }
+    var len = this.privateNameStack.length;
+    var parent = len === 0 ? null : this.privateNameStack[len - 1];
+    for (var i = 0; i < used.length; ++i) {
+      var id = used[i];
+      if (!hasOwn(declared, id.name)) {
+        if (parent) {
+          parent.used.push(id);
+        } else {
+          this.raiseRecoverable(id.start, ("Private field '#" + (id.name) + "' must be declared in an enclosing class"));
+        }
+      }
+    }
+  };
+
+  function isPrivateNameConflicted(privateNameMap, element) {
+    var name = element.key.name;
+    var curr = privateNameMap[name];
+
+    var next = "true";
+    if (element.type === "MethodDefinition" && (element.kind === "get" || element.kind === "set")) {
+      next = (element.static ? "s" : "i") + element.kind;
+    }
+
+    // `class { get #a(){}; static set #a(_){} }` is also conflict.
+    if (
+      curr === "iget" && next === "iset" ||
+      curr === "iset" && next === "iget" ||
+      curr === "sget" && next === "sset" ||
+      curr === "sset" && next === "sget"
+    ) {
+      privateNameMap[name] = "true";
+      return false
+    } else if (!curr) {
+      privateNameMap[name] = next;
+      return false
+    } else {
+      return true
+    }
+  }
+
+  function checkKeyName(node, name) {
+    var computed = node.computed;
+    var key = node.key;
+    return !computed && (
+      key.type === "Identifier" && key.name === name ||
+      key.type === "Literal" && key.value === name
+    )
+  }
+
+  // Parses module export declaration.
+
+  pp$8.parseExportAllDeclaration = function(node, exports$1) {
+    if (this.options.ecmaVersion >= 11) {
+      if (this.eatContextual("as")) {
+        node.exported = this.parseModuleExportName();
+        this.checkExport(exports$1, node.exported, this.lastTokStart);
+      } else {
+        node.exported = null;
+      }
+    }
+    this.expectContextual("from");
+    if (this.type !== types$1.string) { this.unexpected(); }
+    node.source = this.parseExprAtom();
+    if (this.options.ecmaVersion >= 16)
+      { node.attributes = this.parseWithClause(); }
+    this.semicolon();
+    return this.finishNode(node, "ExportAllDeclaration")
+  };
+
+  pp$8.parseExport = function(node, exports$1) {
+    this.next();
+    // export * from '...'
+    if (this.eat(types$1.star)) {
+      return this.parseExportAllDeclaration(node, exports$1)
+    }
+    if (this.eat(types$1._default)) { // export default ...
+      this.checkExport(exports$1, "default", this.lastTokStart);
+      node.declaration = this.parseExportDefaultDeclaration();
+      return this.finishNode(node, "ExportDefaultDeclaration")
+    }
+    // export var|const|let|function|class ...
+    if (this.shouldParseExportStatement()) {
+      node.declaration = this.parseExportDeclaration(node);
+      if (node.declaration.type === "VariableDeclaration")
+        { this.checkVariableExport(exports$1, node.declaration.declarations); }
+      else
+        { this.checkExport(exports$1, node.declaration.id, node.declaration.id.start); }
+      node.specifiers = [];
+      node.source = null;
+      if (this.options.ecmaVersion >= 16)
+        { node.attributes = []; }
+    } else { // export { x, y as z } [from '...']
+      node.declaration = null;
+      node.specifiers = this.parseExportSpecifiers(exports$1);
+      if (this.eatContextual("from")) {
+        if (this.type !== types$1.string) { this.unexpected(); }
+        node.source = this.parseExprAtom();
+        if (this.options.ecmaVersion >= 16)
+          { node.attributes = this.parseWithClause(); }
+      } else {
+        for (var i = 0, list = node.specifiers; i < list.length; i += 1) {
+          // check for keywords used as local names
+          var spec = list[i];
+
+          this.checkUnreserved(spec.local);
+          // check if export is defined
+          this.checkLocalExport(spec.local);
+
+          if (spec.local.type === "Literal") {
+            this.raise(spec.local.start, "A string literal cannot be used as an exported binding without `from`.");
+          }
+        }
+
+        node.source = null;
+        if (this.options.ecmaVersion >= 16)
+          { node.attributes = []; }
+      }
+      this.semicolon();
+    }
+    return this.finishNode(node, "ExportNamedDeclaration")
+  };
+
+  pp$8.parseExportDeclaration = function(node) {
+    return this.parseStatement(null)
+  };
+
+  pp$8.parseExportDefaultDeclaration = function() {
+    var isAsync;
+    if (this.type === types$1._function || (isAsync = this.isAsyncFunction())) {
+      var fNode = this.startNode();
+      this.next();
+      if (isAsync) { this.next(); }
+      return this.parseFunction(fNode, FUNC_STATEMENT | FUNC_NULLABLE_ID, false, isAsync)
+    } else if (this.type === types$1._class) {
+      var cNode = this.startNode();
+      return this.parseClass(cNode, "nullableID")
+    } else {
+      var declaration = this.parseMaybeAssign();
+      this.semicolon();
+      return declaration
+    }
+  };
+
+  pp$8.checkExport = function(exports$1, name, pos) {
+    if (!exports$1) { return }
+    if (typeof name !== "string")
+      { name = name.type === "Identifier" ? name.name : name.value; }
+    if (hasOwn(exports$1, name))
+      { this.raiseRecoverable(pos, "Duplicate export '" + name + "'"); }
+    exports$1[name] = true;
+  };
+
+  pp$8.checkPatternExport = function(exports$1, pat) {
+    var type = pat.type;
+    if (type === "Identifier")
+      { this.checkExport(exports$1, pat, pat.start); }
+    else if (type === "ObjectPattern")
+      { for (var i = 0, list = pat.properties; i < list.length; i += 1)
+        {
+          var prop = list[i];
+
+          this.checkPatternExport(exports$1, prop);
+        } }
+    else if (type === "ArrayPattern")
+      { for (var i$1 = 0, list$1 = pat.elements; i$1 < list$1.length; i$1 += 1) {
+        var elt = list$1[i$1];
+
+          if (elt) { this.checkPatternExport(exports$1, elt); }
+      } }
+    else if (type === "Property")
+      { this.checkPatternExport(exports$1, pat.value); }
+    else if (type === "AssignmentPattern")
+      { this.checkPatternExport(exports$1, pat.left); }
+    else if (type === "RestElement")
+      { this.checkPatternExport(exports$1, pat.argument); }
+  };
+
+  pp$8.checkVariableExport = function(exports$1, decls) {
+    if (!exports$1) { return }
+    for (var i = 0, list = decls; i < list.length; i += 1)
+      {
+      var decl = list[i];
+
+      this.checkPatternExport(exports$1, decl.id);
+    }
+  };
+
+  pp$8.shouldParseExportStatement = function() {
+    return this.type.keyword === "var" ||
+      this.type.keyword === "const" ||
+      this.type.keyword === "class" ||
+      this.type.keyword === "function" ||
+      this.isLet() ||
+      this.isAsyncFunction()
+  };
+
+  // Parses a comma-separated list of module exports.
+
+  pp$8.parseExportSpecifier = function(exports$1) {
+    var node = this.startNode();
+    node.local = this.parseModuleExportName();
+
+    node.exported = this.eatContextual("as") ? this.parseModuleExportName() : node.local;
+    this.checkExport(
+      exports$1,
+      node.exported,
+      node.exported.start
+    );
+
+    return this.finishNode(node, "ExportSpecifier")
+  };
+
+  pp$8.parseExportSpecifiers = function(exports$1) {
+    var nodes = [], first = true;
+    // export { x, y as z } [from '...']
+    this.expect(types$1.braceL);
+    while (!this.eat(types$1.braceR)) {
+      if (!first) {
+        this.expect(types$1.comma);
+        if (this.afterTrailingComma(types$1.braceR)) { break }
+      } else { first = false; }
+
+      nodes.push(this.parseExportSpecifier(exports$1));
+    }
+    return nodes
+  };
+
+  // Parses import declaration.
+
+  pp$8.parseImport = function(node) {
+    this.next();
+
+    // import '...'
+    if (this.type === types$1.string) {
+      node.specifiers = empty$1;
+      node.source = this.parseExprAtom();
+    } else {
+      node.specifiers = this.parseImportSpecifiers();
+      this.expectContextual("from");
+      node.source = this.type === types$1.string ? this.parseExprAtom() : this.unexpected();
+    }
+    if (this.options.ecmaVersion >= 16)
+      { node.attributes = this.parseWithClause(); }
+    this.semicolon();
+    return this.finishNode(node, "ImportDeclaration")
+  };
+
+  // Parses a comma-separated list of module imports.
+
+  pp$8.parseImportSpecifier = function() {
+    var node = this.startNode();
+    node.imported = this.parseModuleExportName();
+
+    if (this.eatContextual("as")) {
+      node.local = this.parseIdent();
+    } else {
+      this.checkUnreserved(node.imported);
+      node.local = node.imported;
+    }
+    this.checkLValSimple(node.local, BIND_LEXICAL);
+
+    return this.finishNode(node, "ImportSpecifier")
+  };
+
+  pp$8.parseImportDefaultSpecifier = function() {
+    // import defaultObj, { x, y as z } from '...'
+    var node = this.startNode();
+    node.local = this.parseIdent();
+    this.checkLValSimple(node.local, BIND_LEXICAL);
+    return this.finishNode(node, "ImportDefaultSpecifier")
+  };
+
+  pp$8.parseImportNamespaceSpecifier = function() {
+    var node = this.startNode();
+    this.next();
+    this.expectContextual("as");
+    node.local = this.parseIdent();
+    this.checkLValSimple(node.local, BIND_LEXICAL);
+    return this.finishNode(node, "ImportNamespaceSpecifier")
+  };
+
+  pp$8.parseImportSpecifiers = function() {
+    var nodes = [], first = true;
+    if (this.type === types$1.name) {
+      nodes.push(this.parseImportDefaultSpecifier());
+      if (!this.eat(types$1.comma)) { return nodes }
+    }
+    if (this.type === types$1.star) {
+      nodes.push(this.parseImportNamespaceSpecifier());
+      return nodes
+    }
+    this.expect(types$1.braceL);
+    while (!this.eat(types$1.braceR)) {
+      if (!first) {
+        this.expect(types$1.comma);
+        if (this.afterTrailingComma(types$1.braceR)) { break }
+      } else { first = false; }
+
+      nodes.push(this.parseImportSpecifier());
+    }
+    return nodes
+  };
+
+  pp$8.parseWithClause = function() {
+    var nodes = [];
+    if (!this.eat(types$1._with)) {
+      return nodes
+    }
+    this.expect(types$1.braceL);
+    var attributeKeys = {};
+    var first = true;
+    while (!this.eat(types$1.braceR)) {
+      if (!first) {
+        this.expect(types$1.comma);
+        if (this.afterTrailingComma(types$1.braceR)) { break }
+      } else { first = false; }
+
+      var attr = this.parseImportAttribute();
+      var keyName = attr.key.type === "Identifier" ? attr.key.name : attr.key.value;
+      if (hasOwn(attributeKeys, keyName))
+        { this.raiseRecoverable(attr.key.start, "Duplicate attribute key '" + keyName + "'"); }
+      attributeKeys[keyName] = true;
+      nodes.push(attr);
+    }
+    return nodes
+  };
+
+  pp$8.parseImportAttribute = function() {
+    var node = this.startNode();
+    node.key = this.type === types$1.string ? this.parseExprAtom() : this.parseIdent(this.options.allowReserved !== "never");
+    this.expect(types$1.colon);
+    if (this.type !== types$1.string) {
+      this.unexpected();
+    }
+    node.value = this.parseExprAtom();
+    return this.finishNode(node, "ImportAttribute")
+  };
+
+  pp$8.parseModuleExportName = function() {
+    if (this.options.ecmaVersion >= 13 && this.type === types$1.string) {
+      var stringLiteral = this.parseLiteral(this.value);
+      if (loneSurrogate.test(stringLiteral.value)) {
+        this.raise(stringLiteral.start, "An export name cannot include a lone surrogate.");
+      }
+      return stringLiteral
+    }
+    return this.parseIdent(true)
+  };
+
+  // Set `ExpressionStatement#directive` property for directive prologues.
+  pp$8.adaptDirectivePrologue = function(statements) {
+    for (var i = 0; i < statements.length && this.isDirectiveCandidate(statements[i]); ++i) {
+      statements[i].directive = statements[i].expression.raw.slice(1, -1);
+    }
+  };
+  pp$8.isDirectiveCandidate = function(statement) {
+    return (
+      this.options.ecmaVersion >= 5 &&
+      statement.type === "ExpressionStatement" &&
+      statement.expression.type === "Literal" &&
+      typeof statement.expression.value === "string" &&
+      // Reject parenthesized strings.
+      (this.input[statement.start] === "\"" || this.input[statement.start] === "'")
+    )
+  };
+
+  var pp$7 = Parser.prototype;
+
+  // Convert existing expression atom to assignable pattern
+  // if possible.
+
+  pp$7.toAssignable = function(node, isBinding, refDestructuringErrors) {
+    if (this.options.ecmaVersion >= 6 && node) {
+      switch (node.type) {
+      case "Identifier":
+        if (this.inAsync && node.name === "await")
+          { this.raise(node.start, "Cannot use 'await' as identifier inside an async function"); }
+        break
+
+      case "ObjectPattern":
+      case "ArrayPattern":
+      case "AssignmentPattern":
+      case "RestElement":
+        break
+
+      case "ObjectExpression":
+        node.type = "ObjectPattern";
+        if (refDestructuringErrors) { this.checkPatternErrors(refDestructuringErrors, true); }
+        for (var i = 0, list = node.properties; i < list.length; i += 1) {
+          var prop = list[i];
+
+        this.toAssignable(prop, isBinding);
+          // Early error:
+          //   AssignmentRestProperty[Yield, Await] :
+          //     `...` DestructuringAssignmentTarget[Yield, Await]
+          //
+          //   It is a Syntax Error if |DestructuringAssignmentTarget| is an |ArrayLiteral| or an |ObjectLiteral|.
+          if (
+            prop.type === "RestElement" &&
+            (prop.argument.type === "ArrayPattern" || prop.argument.type === "ObjectPattern")
+          ) {
+            this.raise(prop.argument.start, "Unexpected token");
+          }
+        }
+        break
+
+      case "Property":
+        // AssignmentProperty has type === "Property"
+        if (node.kind !== "init") { this.raise(node.key.start, "Object pattern can't contain getter or setter"); }
+        this.toAssignable(node.value, isBinding);
+        break
+
+      case "ArrayExpression":
+        node.type = "ArrayPattern";
+        if (refDestructuringErrors) { this.checkPatternErrors(refDestructuringErrors, true); }
+        this.toAssignableList(node.elements, isBinding);
+        break
+
+      case "SpreadElement":
+        node.type = "RestElement";
+        this.toAssignable(node.argument, isBinding);
+        if (node.argument.type === "AssignmentPattern")
+          { this.raise(node.argument.start, "Rest elements cannot have a default value"); }
+        break
+
+      case "AssignmentExpression":
+        if (node.operator !== "=") { this.raise(node.left.end, "Only '=' operator can be used for specifying default value."); }
+        node.type = "AssignmentPattern";
+        delete node.operator;
+        this.toAssignable(node.left, isBinding);
+        break
+
+      case "ParenthesizedExpression":
+        this.toAssignable(node.expression, isBinding, refDestructuringErrors);
+        break
+
+      case "ChainExpression":
+        this.raiseRecoverable(node.start, "Optional chaining cannot appear in left-hand side");
+        break
+
+      case "MemberExpression":
+        if (!isBinding) { break }
+
+      default:
+        this.raise(node.start, "Assigning to rvalue");
+      }
+    } else if (refDestructuringErrors) { this.checkPatternErrors(refDestructuringErrors, true); }
+    return node
+  };
+
+  // Convert list of expression atoms to binding list.
+
+  pp$7.toAssignableList = function(exprList, isBinding) {
+    var end = exprList.length;
+    for (var i = 0; i < end; i++) {
+      var elt = exprList[i];
+      if (elt) { this.toAssignable(elt, isBinding); }
+    }
+    if (end) {
+      var last = exprList[end - 1];
+      if (this.options.ecmaVersion === 6 && isBinding && last && last.type === "RestElement" && last.argument.type !== "Identifier")
+        { this.unexpected(last.argument.start); }
+    }
+    return exprList
+  };
+
+  // Parses spread element.
+
+  pp$7.parseSpread = function(refDestructuringErrors) {
+    var node = this.startNode();
+    this.next();
+    node.argument = this.parseMaybeAssign(false, refDestructuringErrors);
+    return this.finishNode(node, "SpreadElement")
+  };
+
+  pp$7.parseRestBinding = function() {
+    var node = this.startNode();
+    this.next();
+
+    // RestElement inside of a function parameter must be an identifier
+    if (this.options.ecmaVersion === 6 && this.type !== types$1.name)
+      { this.unexpected(); }
+
+    node.argument = this.parseBindingAtom();
+
+    return this.finishNode(node, "RestElement")
+  };
+
+  // Parses lvalue (assignable) atom.
+
+  pp$7.parseBindingAtom = function() {
+    if (this.options.ecmaVersion >= 6) {
+      switch (this.type) {
+      case types$1.bracketL:
+        var node = this.startNode();
+        this.next();
+        node.elements = this.parseBindingList(types$1.bracketR, true, true);
+        return this.finishNode(node, "ArrayPattern")
+
+      case types$1.braceL:
+        return this.parseObj(true)
+      }
+    }
+    return this.parseIdent()
+  };
+
+  pp$7.parseBindingList = function(close, allowEmpty, allowTrailingComma, allowModifiers) {
+    var elts = [], first = true;
+    while (!this.eat(close)) {
+      if (first) { first = false; }
+      else { this.expect(types$1.comma); }
+      if (allowEmpty && this.type === types$1.comma) {
+        elts.push(null);
+      } else if (allowTrailingComma && this.afterTrailingComma(close)) {
+        break
+      } else if (this.type === types$1.ellipsis) {
+        var rest = this.parseRestBinding();
+        this.parseBindingListItem(rest);
+        elts.push(rest);
+        if (this.type === types$1.comma) { this.raiseRecoverable(this.start, "Comma is not permitted after the rest element"); }
+        this.expect(close);
+        break
+      } else {
+        elts.push(this.parseAssignableListItem(allowModifiers));
+      }
+    }
+    return elts
+  };
+
+  pp$7.parseAssignableListItem = function(allowModifiers) {
+    var elem = this.parseMaybeDefault(this.start, this.startLoc);
+    this.parseBindingListItem(elem);
+    return elem
+  };
+
+  pp$7.parseBindingListItem = function(param) {
+    return param
+  };
+
+  // Parses assignment pattern around given atom if possible.
+
+  pp$7.parseMaybeDefault = function(startPos, startLoc, left) {
+    left = left || this.parseBindingAtom();
+    if (this.options.ecmaVersion < 6 || !this.eat(types$1.eq)) { return left }
+    var node = this.startNodeAt(startPos, startLoc);
+    node.left = left;
+    node.right = this.parseMaybeAssign();
+    return this.finishNode(node, "AssignmentPattern")
+  };
+
+  // The following three functions all verify that a node is an lvalue —
+  // something that can be bound, or assigned to. In order to do so, they perform
+  // a variety of checks:
+  //
+  // - Check that none of the bound/assigned-to identifiers are reserved words.
+  // - Record name declarations for bindings in the appropriate scope.
+  // - Check duplicate argument names, if checkClashes is set.
+  //
+  // If a complex binding pattern is encountered (e.g., object and array
+  // destructuring), the entire pattern is recursively checked.
+  //
+  // There are three versions of checkLVal*() appropriate for different
+  // circumstances:
+  //
+  // - checkLValSimple() shall be used if the syntactic construct supports
+  //   nothing other than identifiers and member expressions. Parenthesized
+  //   expressions are also correctly handled. This is generally appropriate for
+  //   constructs for which the spec says
+  //
+  //   > It is a Syntax Error if AssignmentTargetType of [the production] is not
+  //   > simple.
+  //
+  //   It is also appropriate for checking if an identifier is valid and not
+  //   defined elsewhere, like import declarations or function/class identifiers.
+  //
+  //   Examples where this is used include:
+  //     a += …;
+  //     import a from '…';
+  //   where a is the node to be checked.
+  //
+  // - checkLValPattern() shall be used if the syntactic construct supports
+  //   anything checkLValSimple() supports, as well as object and array
+  //   destructuring patterns. This is generally appropriate for constructs for
+  //   which the spec says
+  //
+  //   > It is a Syntax Error if [the production] is neither an ObjectLiteral nor
+  //   > an ArrayLiteral and AssignmentTargetType of [the production] is not
+  //   > simple.
+  //
+  //   Examples where this is used include:
+  //     (a = …);
+  //     const a = …;
+  //     try { … } catch (a) { … }
+  //   where a is the node to be checked.
+  //
+  // - checkLValInnerPattern() shall be used if the syntactic construct supports
+  //   anything checkLValPattern() supports, as well as default assignment
+  //   patterns, rest elements, and other constructs that may appear within an
+  //   object or array destructuring pattern.
+  //
+  //   As a special case, function parameters also use checkLValInnerPattern(),
+  //   as they also support defaults and rest constructs.
+  //
+  // These functions deliberately support both assignment and binding constructs,
+  // as the logic for both is exceedingly similar. If the node is the target of
+  // an assignment, then bindingType should be set to BIND_NONE. Otherwise, it
+  // should be set to the appropriate BIND_* constant, like BIND_VAR or
+  // BIND_LEXICAL.
+  //
+  // If the function is called with a non-BIND_NONE bindingType, then
+  // additionally a checkClashes object may be specified to allow checking for
+  // duplicate argument names. checkClashes is ignored if the provided construct
+  // is an assignment (i.e., bindingType is BIND_NONE).
+
+  pp$7.checkLValSimple = function(expr, bindingType, checkClashes) {
+    if ( bindingType === void 0 ) bindingType = BIND_NONE;
+
+    var isBind = bindingType !== BIND_NONE;
+
+    switch (expr.type) {
+    case "Identifier":
+      if (this.strict && this.reservedWordsStrictBind.test(expr.name))
+        { this.raiseRecoverable(expr.start, (isBind ? "Binding " : "Assigning to ") + expr.name + " in strict mode"); }
+      if (isBind) {
+        if (bindingType === BIND_LEXICAL && expr.name === "let")
+          { this.raiseRecoverable(expr.start, "let is disallowed as a lexically bound name"); }
+        if (checkClashes) {
+          if (hasOwn(checkClashes, expr.name))
+            { this.raiseRecoverable(expr.start, "Argument name clash"); }
+          checkClashes[expr.name] = true;
+        }
+        if (bindingType !== BIND_OUTSIDE) { this.declareName(expr.name, bindingType, expr.start); }
+      }
+      break
+
+    case "ChainExpression":
+      this.raiseRecoverable(expr.start, "Optional chaining cannot appear in left-hand side");
+      break
+
+    case "MemberExpression":
+      if (isBind) { this.raiseRecoverable(expr.start, "Binding member expression"); }
+      break
+
+    case "ParenthesizedExpression":
+      if (isBind) { this.raiseRecoverable(expr.start, "Binding parenthesized expression"); }
+      return this.checkLValSimple(expr.expression, bindingType, checkClashes)
+
+    default:
+      this.raise(expr.start, (isBind ? "Binding" : "Assigning to") + " rvalue");
+    }
+  };
+
+  pp$7.checkLValPattern = function(expr, bindingType, checkClashes) {
+    if ( bindingType === void 0 ) bindingType = BIND_NONE;
+
+    switch (expr.type) {
+    case "ObjectPattern":
+      for (var i = 0, list = expr.properties; i < list.length; i += 1) {
+        var prop = list[i];
+
+      this.checkLValInnerPattern(prop, bindingType, checkClashes);
+      }
+      break
+
+    case "ArrayPattern":
+      for (var i$1 = 0, list$1 = expr.elements; i$1 < list$1.length; i$1 += 1) {
+        var elem = list$1[i$1];
+
+      if (elem) { this.checkLValInnerPattern(elem, bindingType, checkClashes); }
+      }
+      break
+
+    default:
+      this.checkLValSimple(expr, bindingType, checkClashes);
+    }
+  };
+
+  pp$7.checkLValInnerPattern = function(expr, bindingType, checkClashes) {
+    if ( bindingType === void 0 ) bindingType = BIND_NONE;
+
+    switch (expr.type) {
+    case "Property":
+      // AssignmentProperty has type === "Property"
+      this.checkLValInnerPattern(expr.value, bindingType, checkClashes);
+      break
+
+    case "AssignmentPattern":
+      this.checkLValPattern(expr.left, bindingType, checkClashes);
+      break
+
+    case "RestElement":
+      this.checkLValPattern(expr.argument, bindingType, checkClashes);
+      break
+
+    default:
+      this.checkLValPattern(expr, bindingType, checkClashes);
+    }
+  };
+
+  // The algorithm used to determine whether a regexp can appear at a
+  // given point in the program is loosely based on sweet.js' approach.
+  // See https://github.com/mozilla/sweet.js/wiki/design
+
+
+  var TokContext = function TokContext(token, isExpr, preserveSpace, override, generator) {
+    this.token = token;
+    this.isExpr = !!isExpr;
+    this.preserveSpace = !!preserveSpace;
+    this.override = override;
+    this.generator = !!generator;
+  };
+
+  var types = {
+    b_stat: new TokContext("{", false),
+    b_expr: new TokContext("{", true),
+    b_tmpl: new TokContext("${", false),
+    p_stat: new TokContext("(", false),
+    p_expr: new TokContext("(", true),
+    q_tmpl: new TokContext("`", true, true, function (p) { return p.tryReadTemplateToken(); }),
+    f_stat: new TokContext("function", false),
+    f_expr: new TokContext("function", true),
+    f_expr_gen: new TokContext("function", true, false, null, true),
+    f_gen: new TokContext("function", false, false, null, true)
+  };
+
+  var pp$6 = Parser.prototype;
+
+  pp$6.initialContext = function() {
+    return [types.b_stat]
+  };
+
+  pp$6.curContext = function() {
+    return this.context[this.context.length - 1]
+  };
+
+  pp$6.braceIsBlock = function(prevType) {
+    var parent = this.curContext();
+    if (parent === types.f_expr || parent === types.f_stat)
+      { return true }
+    if (prevType === types$1.colon && (parent === types.b_stat || parent === types.b_expr))
+      { return !parent.isExpr }
+
+    // The check for `tt.name && exprAllowed` detects whether we are
+    // after a `yield` or `of` construct. See the `updateContext` for
+    // `tt.name`.
+    if (prevType === types$1._return || prevType === types$1.name && this.exprAllowed)
+      { return lineBreak.test(this.input.slice(this.lastTokEnd, this.start)) }
+    if (prevType === types$1._else || prevType === types$1.semi || prevType === types$1.eof || prevType === types$1.parenR || prevType === types$1.arrow)
+      { return true }
+    if (prevType === types$1.braceL)
+      { return parent === types.b_stat }
+    if (prevType === types$1._var || prevType === types$1._const || prevType === types$1.name)
+      { return false }
+    return !this.exprAllowed
+  };
+
+  pp$6.inGeneratorContext = function() {
+    for (var i = this.context.length - 1; i >= 1; i--) {
+      var context = this.context[i];
+      if (context.token === "function")
+        { return context.generator }
+    }
+    return false
+  };
+
+  pp$6.updateContext = function(prevType) {
+    var update, type = this.type;
+    if (type.keyword && prevType === types$1.dot)
+      { this.exprAllowed = false; }
+    else if (update = type.updateContext)
+      { update.call(this, prevType); }
+    else
+      { this.exprAllowed = type.beforeExpr; }
+  };
+
+  // Used to handle edge cases when token context could not be inferred correctly during tokenization phase
+
+  pp$6.overrideContext = function(tokenCtx) {
+    if (this.curContext() !== tokenCtx) {
+      this.context[this.context.length - 1] = tokenCtx;
+    }
+  };
+
+  // Token-specific context update code
+
+  types$1.parenR.updateContext = types$1.braceR.updateContext = function() {
+    if (this.context.length === 1) {
+      this.exprAllowed = true;
+      return
+    }
+    var out = this.context.pop();
+    if (out === types.b_stat && this.curContext().token === "function") {
+      out = this.context.pop();
+    }
+    this.exprAllowed = !out.isExpr;
+  };
+
+  types$1.braceL.updateContext = function(prevType) {
+    this.context.push(this.braceIsBlock(prevType) ? types.b_stat : types.b_expr);
+    this.exprAllowed = true;
+  };
+
+  types$1.dollarBraceL.updateContext = function() {
+    this.context.push(types.b_tmpl);
+    this.exprAllowed = true;
+  };
+
+  types$1.parenL.updateContext = function(prevType) {
+    var statementParens = prevType === types$1._if || prevType === types$1._for || prevType === types$1._with || prevType === types$1._while;
+    this.context.push(statementParens ? types.p_stat : types.p_expr);
+    this.exprAllowed = true;
+  };
+
+  types$1.incDec.updateContext = function() {
+    // tokExprAllowed stays unchanged
+  };
+
+  types$1._function.updateContext = types$1._class.updateContext = function(prevType) {
+    if (prevType.beforeExpr && prevType !== types$1._else &&
+        !(prevType === types$1.semi && this.curContext() !== types.p_stat) &&
+        !(prevType === types$1._return && lineBreak.test(this.input.slice(this.lastTokEnd, this.start))) &&
+        !((prevType === types$1.colon || prevType === types$1.braceL) && this.curContext() === types.b_stat))
+      { this.context.push(types.f_expr); }
+    else
+      { this.context.push(types.f_stat); }
+    this.exprAllowed = false;
+  };
+
+  types$1.colon.updateContext = function() {
+    if (this.curContext().token === "function") { this.context.pop(); }
+    this.exprAllowed = true;
+  };
+
+  types$1.backQuote.updateContext = function() {
+    if (this.curContext() === types.q_tmpl)
+      { this.context.pop(); }
+    else
+      { this.context.push(types.q_tmpl); }
+    this.exprAllowed = false;
+  };
+
+  types$1.star.updateContext = function(prevType) {
+    if (prevType === types$1._function) {
+      var index = this.context.length - 1;
+      if (this.context[index] === types.f_expr)
+        { this.context[index] = types.f_expr_gen; }
+      else
+        { this.context[index] = types.f_gen; }
+    }
+    this.exprAllowed = true;
+  };
+
+  types$1.name.updateContext = function(prevType) {
+    var allowed = false;
+    if (this.options.ecmaVersion >= 6 && prevType !== types$1.dot) {
+      if (this.value === "of" && !this.exprAllowed ||
+          this.value === "yield" && this.inGeneratorContext())
+        { allowed = true; }
+    }
+    this.exprAllowed = allowed;
+  };
+
+  // A recursive descent parser operates by defining functions for all
+  // syntactic elements, and recursively calling those, each function
+  // advancing the input stream and returning an AST node. Precedence
+  // of constructs (for example, the fact that `!x[1]` means `!(x[1])`
+  // instead of `(!x)[1]` is handled by the fact that the parser
+  // function that parses unary prefix operators is called first, and
+  // in turn calls the function that parses `[]` subscripts — that
+  // way, it'll receive the node for `x[1]` already parsed, and wraps
+  // *that* in the unary operator node.
+  //
+  // Acorn uses an [operator precedence parser][opp] to handle binary
+  // operator precedence, because it is much more compact than using
+  // the technique outlined above, which uses different, nesting
+  // functions to specify precedence, for all of the ten binary
+  // precedence levels that JavaScript defines.
+  //
+  // [opp]: http://en.wikipedia.org/wiki/Operator-precedence_parser
+
+
+  var pp$5 = Parser.prototype;
+
+  // Check if property name clashes with already added.
+  // Object/class getters and setters are not allowed to clash —
+  // either with each other or with an init property — and in
+  // strict mode, init properties are also not allowed to be repeated.
+
+  pp$5.checkPropClash = function(prop, propHash, refDestructuringErrors) {
+    if (this.options.ecmaVersion >= 9 && prop.type === "SpreadElement")
+      { return }
+    if (this.options.ecmaVersion >= 6 && (prop.computed || prop.method || prop.shorthand))
+      { return }
+    var key = prop.key;
+    var name;
+    switch (key.type) {
+    case "Identifier": name = key.name; break
+    case "Literal": name = String(key.value); break
+    default: return
+    }
+    var kind = prop.kind;
+    if (this.options.ecmaVersion >= 6) {
+      if (name === "__proto__" && kind === "init") {
+        if (propHash.proto) {
+          if (refDestructuringErrors) {
+            if (refDestructuringErrors.doubleProto < 0) {
+              refDestructuringErrors.doubleProto = key.start;
+            }
+          } else {
+            this.raiseRecoverable(key.start, "Redefinition of __proto__ property");
+          }
+        }
+        propHash.proto = true;
+      }
+      return
+    }
+    name = "$" + name;
+    var other = propHash[name];
+    if (other) {
+      var redefinition;
+      if (kind === "init") {
+        redefinition = this.strict && other.init || other.get || other.set;
+      } else {
+        redefinition = other.init || other[kind];
+      }
+      if (redefinition)
+        { this.raiseRecoverable(key.start, "Redefinition of property"); }
+    } else {
+      other = propHash[name] = {
+        init: false,
+        get: false,
+        set: false
+      };
+    }
+    other[kind] = true;
+  };
+
+  // ### Expression parsing
+
+  // These nest, from the most general expression type at the top to
+  // 'atomic', nondivisible expression types at the bottom. Most of
+  // the functions will simply let the function(s) below them parse,
+  // and, *if* the syntactic construct they handle is present, wrap
+  // the AST node that the inner parser gave them in another node.
+
+  // Parse a full expression. The optional arguments are used to
+  // forbid the `in` operator (in for loops initalization expressions)
+  // and provide reference for storing '=' operator inside shorthand
+  // property assignment in contexts where both object expression
+  // and object pattern might appear (so it's possible to raise
+  // delayed syntax error at correct position).
+
+  pp$5.parseExpression = function(forInit, refDestructuringErrors) {
+    var this$1$1 = this;
+
+    return this.catchStackOverflow(function () {
+      var startPos = this$1$1.start, startLoc = this$1$1.startLoc;
+      var expr = this$1$1.parseMaybeAssign(forInit, refDestructuringErrors);
+      if (this$1$1.type === types$1.comma) {
+        var node = this$1$1.startNodeAt(startPos, startLoc);
+        node.expressions = [expr];
+        while (this$1$1.eat(types$1.comma)) { node.expressions.push(this$1$1.parseMaybeAssign(forInit, refDestructuringErrors)); }
+        return this$1$1.finishNode(node, "SequenceExpression")
+      }
+      return expr
+    })
+  };
+
+  // Parse an assignment expression. This includes applications of
+  // operators like `+=`.
+
+  pp$5.parseMaybeAssign = function(forInit, refDestructuringErrors, afterLeftParse) {
+    if (this.isContextual("yield")) {
+      if (this.inGenerator) { return this.parseYield(forInit) }
+      // The tokenizer will assume an expression is allowed after
+      // `yield`, but this isn't that kind of yield
+      else { this.exprAllowed = false; }
+    }
+
+    var ownDestructuringErrors = false, oldParenAssign = -1, oldTrailingComma = -1, oldDoubleProto = -1;
+    if (refDestructuringErrors) {
+      oldParenAssign = refDestructuringErrors.parenthesizedAssign;
+      oldTrailingComma = refDestructuringErrors.trailingComma;
+      oldDoubleProto = refDestructuringErrors.doubleProto;
+      refDestructuringErrors.parenthesizedAssign = refDestructuringErrors.trailingComma = -1;
+    } else {
+      refDestructuringErrors = new DestructuringErrors;
+      ownDestructuringErrors = true;
+    }
+
+    var startPos = this.start, startLoc = this.startLoc;
+    if (this.type === types$1.parenL || this.type === types$1.name) {
+      this.potentialArrowAt = this.start;
+      this.potentialArrowInForAwait = forInit === "await";
+    }
+    var left = this.parseMaybeConditional(forInit, refDestructuringErrors);
+    if (afterLeftParse) { left = afterLeftParse.call(this, left, startPos, startLoc); }
+    if (this.type.isAssign) {
+      var node = this.startNodeAt(startPos, startLoc);
+      node.operator = this.value;
+      if (this.type === types$1.eq)
+        { left = this.toAssignable(left, false, refDestructuringErrors); }
+      if (!ownDestructuringErrors) {
+        refDestructuringErrors.parenthesizedAssign = refDestructuringErrors.trailingComma = refDestructuringErrors.doubleProto = -1;
+      }
+      if (refDestructuringErrors.shorthandAssign >= left.start)
+        { refDestructuringErrors.shorthandAssign = -1; } // reset because shorthand default was used correctly
+      if (this.type === types$1.eq)
+        { this.checkLValPattern(left); }
+      else
+        { this.checkLValSimple(left); }
+      node.left = left;
+      this.next();
+      node.right = this.parseMaybeAssign(forInit);
+      if (oldDoubleProto > -1) { refDestructuringErrors.doubleProto = oldDoubleProto; }
+      return this.finishNode(node, "AssignmentExpression")
+    } else {
+      if (ownDestructuringErrors) { this.checkExpressionErrors(refDestructuringErrors, true); }
+    }
+    if (oldParenAssign > -1) { refDestructuringErrors.parenthesizedAssign = oldParenAssign; }
+    if (oldTrailingComma > -1) { refDestructuringErrors.trailingComma = oldTrailingComma; }
+    return left
+  };
+
+  // Parse a ternary conditional (`?:`) operator.
+
+  pp$5.parseMaybeConditional = function(forInit, refDestructuringErrors) {
+    var startPos = this.start, startLoc = this.startLoc;
+    var expr = this.parseExprOps(forInit, refDestructuringErrors);
+    if (this.checkExpressionErrors(refDestructuringErrors)) { return expr }
+    if (!(expr.type === "ArrowFunctionExpression" && expr.start === startPos) && this.eat(types$1.question)) {
+      var node = this.startNodeAt(startPos, startLoc);
+      node.test = expr;
+      node.consequent = this.parseMaybeAssign();
+      this.expect(types$1.colon);
+      node.alternate = this.parseMaybeAssign(forInit);
+      return this.finishNode(node, "ConditionalExpression")
+    }
+    return expr
+  };
+
+  // Start the precedence parser.
+
+  pp$5.parseExprOps = function(forInit, refDestructuringErrors) {
+    var startPos = this.start, startLoc = this.startLoc;
+    var expr = this.parseMaybeUnary(refDestructuringErrors, false, false, forInit);
+    if (this.checkExpressionErrors(refDestructuringErrors)) { return expr }
+    return expr.start === startPos && expr.type === "ArrowFunctionExpression" ? expr : this.parseExprOp(expr, startPos, startLoc, -1, forInit)
+  };
+
+  // Parse binary operators with the operator precedence parsing
+  // algorithm. `left` is the left-hand side of the operator.
+  // `minPrec` provides context that allows the function to stop and
+  // defer further parser to one of its callers when it encounters an
+  // operator that has a lower precedence than the set it is parsing.
+
+  pp$5.parseExprOp = function(left, leftStartPos, leftStartLoc, minPrec, forInit) {
+    var prec = this.type.binop;
+    if (prec != null && (!forInit || this.type !== types$1._in)) {
+      if (prec > minPrec) {
+        var logical = this.type === types$1.logicalOR || this.type === types$1.logicalAND;
+        var coalesce = this.type === types$1.coalesce;
+        if (coalesce) {
+          // Handle the precedence of `tt.coalesce` as equal to the range of logical expressions.
+          // In other words, `node.right` shouldn't contain logical expressions in order to check the mixed error.
+          prec = types$1.logicalAND.binop;
+        }
+        var op = this.value;
+        this.next();
+        var startPos = this.start, startLoc = this.startLoc;
+        var right = this.parseExprOp(this.parseMaybeUnary(null, false, false, forInit), startPos, startLoc, prec, forInit);
+        var node = this.buildBinary(leftStartPos, leftStartLoc, left, right, op, logical || coalesce);
+        if ((logical && this.type === types$1.coalesce) || (coalesce && (this.type === types$1.logicalOR || this.type === types$1.logicalAND))) {
+          this.raiseRecoverable(this.start, "Logical expressions and coalesce expressions cannot be mixed. Wrap either by parentheses");
+        }
+        return this.parseExprOp(node, leftStartPos, leftStartLoc, minPrec, forInit)
+      }
+    }
+    return left
+  };
+
+  pp$5.buildBinary = function(startPos, startLoc, left, right, op, logical) {
+    if (right.type === "PrivateIdentifier") { this.raise(right.start, "Private identifier can only be left side of binary expression"); }
+    var node = this.startNodeAt(startPos, startLoc);
+    node.left = left;
+    node.operator = op;
+    node.right = right;
+    return this.finishNode(node, logical ? "LogicalExpression" : "BinaryExpression")
+  };
+
+  // Parse unary operators, both prefix and postfix.
+
+  pp$5.parseMaybeUnary = function(refDestructuringErrors, sawUnary, incDec, forInit) {
+    var startPos = this.start, startLoc = this.startLoc, expr;
+    if (this.isContextual("await") && this.canAwait) {
+      expr = this.parseAwait(forInit);
+      sawUnary = true;
+    } else if (this.type.prefix) {
+      var node = this.startNode(), update = this.type === types$1.incDec;
+      node.operator = this.value;
+      node.prefix = true;
+      this.next();
+      node.argument = this.parseMaybeUnary(null, true, update, forInit);
+      this.checkExpressionErrors(refDestructuringErrors, true);
+      if (update) { this.checkLValSimple(node.argument); }
+      else if (this.strict && node.operator === "delete" && isLocalVariableAccess(node.argument))
+        { this.raiseRecoverable(node.start, "Deleting local variable in strict mode"); }
+      else if (node.operator === "delete" && isPrivateFieldAccess(node.argument))
+        { this.raiseRecoverable(node.start, "Private fields can not be deleted"); }
+      else { sawUnary = true; }
+      expr = this.finishNode(node, update ? "UpdateExpression" : "UnaryExpression");
+    } else if (!sawUnary && this.type === types$1.privateId) {
+      if ((forInit || this.privateNameStack.length === 0) && this.options.checkPrivateFields) { this.unexpected(); }
+      expr = this.parsePrivateIdent();
+      // only could be private fields in 'in', such as #x in obj
+      if (this.type !== types$1._in) { this.unexpected(); }
+    } else {
+      expr = this.parseExprSubscripts(refDestructuringErrors, forInit);
+      if (this.checkExpressionErrors(refDestructuringErrors)) { return expr }
+      while (this.type.postfix && !this.canInsertSemicolon()) {
+        var node$1 = this.startNodeAt(startPos, startLoc);
+        node$1.operator = this.value;
+        node$1.prefix = false;
+        node$1.argument = expr;
+        this.checkLValSimple(expr);
+        this.next();
+        expr = this.finishNode(node$1, "UpdateExpression");
+      }
+    }
+
+    if (!incDec && this.eat(types$1.starstar)) {
+      if (sawUnary)
+        { this.unexpected(this.lastTokStart); }
+      else
+        { return this.buildBinary(startPos, startLoc, expr, this.parseMaybeUnary(null, false, false, forInit), "**", false) }
+    } else {
+      return expr
+    }
+  };
+
+  function isLocalVariableAccess(node) {
+    return (
+      node.type === "Identifier" ||
+      node.type === "ParenthesizedExpression" && isLocalVariableAccess(node.expression)
+    )
+  }
+
+  function isPrivateFieldAccess(node) {
+    return (
+      node.type === "MemberExpression" && node.property.type === "PrivateIdentifier" ||
+      node.type === "ChainExpression" && isPrivateFieldAccess(node.expression) ||
+      node.type === "ParenthesizedExpression" && isPrivateFieldAccess(node.expression)
+    )
+  }
+
+  // Parse call, dot, and `[]`-subscript expressions.
+
+  pp$5.parseExprSubscripts = function(refDestructuringErrors, forInit) {
+    var startPos = this.start, startLoc = this.startLoc;
+    var expr = this.parseExprAtom(refDestructuringErrors, forInit);
+    if (expr.type === "ArrowFunctionExpression" && this.input.slice(this.lastTokStart, this.lastTokEnd) !== ")")
+      { return expr }
+    var result = this.parseSubscripts(expr, startPos, startLoc, false, forInit);
+    if (refDestructuringErrors && result.type === "MemberExpression") {
+      if (refDestructuringErrors.parenthesizedAssign >= result.start) { refDestructuringErrors.parenthesizedAssign = -1; }
+      if (refDestructuringErrors.parenthesizedBind >= result.start) { refDestructuringErrors.parenthesizedBind = -1; }
+      if (refDestructuringErrors.trailingComma >= result.start) { refDestructuringErrors.trailingComma = -1; }
+    }
+    return result
+  };
+
+  pp$5.parseSubscripts = function(base, startPos, startLoc, noCalls, forInit) {
+    var maybeAsyncArrow = this.options.ecmaVersion >= 8 && base.type === "Identifier" && base.name === "async" &&
+        this.lastTokEnd === base.end && !this.canInsertSemicolon() && base.end - base.start === 5 &&
+        this.potentialArrowAt === base.start;
+    var optionalChained = false;
+
+    while (true) {
+      var element = this.parseSubscript(base, startPos, startLoc, noCalls, maybeAsyncArrow, optionalChained, forInit);
+
+      if (element.optional) { optionalChained = true; }
+      if (element === base || element.type === "ArrowFunctionExpression") {
+        if (optionalChained) {
+          var chainNode = this.startNodeAt(startPos, startLoc);
+          chainNode.expression = element;
+          element = this.finishNode(chainNode, "ChainExpression");
+        }
+        return element
+      }
+
+      base = element;
+    }
+  };
+
+  pp$5.shouldParseAsyncArrow = function() {
+    return !this.canInsertSemicolon() && this.eat(types$1.arrow)
+  };
+
+  pp$5.parseSubscriptAsyncArrow = function(startPos, startLoc, exprList, forInit) {
+    return this.parseArrowExpression(this.startNodeAt(startPos, startLoc), exprList, true, forInit)
+  };
+
+  pp$5.parseSubscript = function(base, startPos, startLoc, noCalls, maybeAsyncArrow, optionalChained, forInit) {
+    var optionalSupported = this.options.ecmaVersion >= 11;
+    var optional = optionalSupported && this.eat(types$1.questionDot);
+    if (noCalls && optional) { this.raise(this.lastTokStart, "Optional chaining cannot appear in the callee of new expressions"); }
+
+    var computed = this.eat(types$1.bracketL);
+    if (computed || (optional && this.type !== types$1.parenL && this.type !== types$1.backQuote) || this.eat(types$1.dot)) {
+      var node = this.startNodeAt(startPos, startLoc);
+      node.object = base;
+      if (computed) {
+        node.property = this.parseExpression();
+        this.expect(types$1.bracketR);
+      } else if (this.type === types$1.privateId && base.type !== "Super") {
+        node.property = this.parsePrivateIdent();
+      } else {
+        node.property = this.parseIdent(this.options.allowReserved !== "never");
+      }
+      node.computed = !!computed;
+      if (optionalSupported) {
+        node.optional = optional;
+      }
+      base = this.finishNode(node, "MemberExpression");
+    } else if (!noCalls && this.eat(types$1.parenL)) {
+      var refDestructuringErrors = new DestructuringErrors, oldYieldPos = this.yieldPos, oldAwaitPos = this.awaitPos, oldAwaitIdentPos = this.awaitIdentPos;
+      this.yieldPos = 0;
+      this.awaitPos = 0;
+      this.awaitIdentPos = 0;
+      var exprList = this.parseExprList(types$1.parenR, this.options.ecmaVersion >= 8, false, refDestructuringErrors);
+      if (maybeAsyncArrow && !optional && this.shouldParseAsyncArrow()) {
+        this.checkPatternErrors(refDestructuringErrors, false);
+        this.checkYieldAwaitInDefaultParams();
+        if (this.awaitIdentPos > 0)
+          { this.raise(this.awaitIdentPos, "Cannot use 'await' as identifier inside an async function"); }
+        this.yieldPos = oldYieldPos;
+        this.awaitPos = oldAwaitPos;
+        this.awaitIdentPos = oldAwaitIdentPos;
+        return this.parseSubscriptAsyncArrow(startPos, startLoc, exprList, forInit)
+      }
+      this.checkExpressionErrors(refDestructuringErrors, true);
+      this.yieldPos = oldYieldPos || this.yieldPos;
+      this.awaitPos = oldAwaitPos || this.awaitPos;
+      this.awaitIdentPos = oldAwaitIdentPos || this.awaitIdentPos;
+      var node$1 = this.startNodeAt(startPos, startLoc);
+      node$1.callee = base;
+      node$1.arguments = exprList;
+      if (optionalSupported) {
+        node$1.optional = optional;
+      }
+      base = this.finishNode(node$1, "CallExpression");
+    } else if (this.type === types$1.backQuote) {
+      if (optional || optionalChained) {
+        this.raise(this.start, "Optional chaining cannot appear in the tag of tagged template expressions");
+      }
+      var node$2 = this.startNodeAt(startPos, startLoc);
+      node$2.tag = base;
+      node$2.quasi = this.parseTemplate({isTagged: true});
+      base = this.finishNode(node$2, "TaggedTemplateExpression");
+    }
+    return base
+  };
+
+  // Parse an atomic expression — either a single token that is an
+  // expression, an expression started by a keyword like `function` or
+  // `new`, or an expression wrapped in punctuation like `()`, `[]`,
+  // or `{}`.
+
+  pp$5.parseExprAtom = function(refDestructuringErrors, forInit, forNew) {
+    // If a division operator appears in an expression position, the
+    // tokenizer got confused, and we force it to read a regexp instead.
+    if (this.type === types$1.slash) { this.readRegexp(); }
+
+    var node, canBeArrow = this.potentialArrowAt === this.start;
+    switch (this.type) {
+    case types$1._super:
+      if (!this.allowSuper)
+        { this.raise(this.start, "'super' keyword outside a method"); }
+      node = this.startNode();
+      this.next();
+      if (this.type === types$1.parenL && !this.allowDirectSuper)
+        { this.raise(node.start, "super() call outside constructor of a subclass"); }
+      // The `super` keyword can appear at below:
+      // SuperProperty:
+      //     super [ Expression ]
+      //     super . IdentifierName
+      // SuperCall:
+      //     super ( Arguments )
+      if (this.type !== types$1.dot && this.type !== types$1.bracketL && this.type !== types$1.parenL)
+        { this.unexpected(); }
+      return this.finishNode(node, "Super")
+
+    case types$1._this:
+      node = this.startNode();
+      this.next();
+      return this.finishNode(node, "ThisExpression")
+
+    case types$1.name:
+      var startPos = this.start, startLoc = this.startLoc, containsEsc = this.containsEsc;
+      var id = this.parseIdent(false);
+      if (this.options.ecmaVersion >= 8 && !containsEsc && id.name === "async" && !this.canInsertSemicolon() && this.eat(types$1._function)) {
+        this.overrideContext(types.f_expr);
+        return this.parseFunction(this.startNodeAt(startPos, startLoc), 0, false, true, forInit)
+      }
+      if (canBeArrow && !this.canInsertSemicolon()) {
+        if (this.eat(types$1.arrow))
+          { return this.parseArrowExpression(this.startNodeAt(startPos, startLoc), [id], false, forInit) }
+        if (this.options.ecmaVersion >= 8 && id.name === "async" && this.type === types$1.name && !containsEsc &&
+            (!this.potentialArrowInForAwait || this.value !== "of" || this.containsEsc)) {
+          id = this.parseIdent(false);
+          if (this.canInsertSemicolon() || !this.eat(types$1.arrow))
+            { this.unexpected(); }
+          return this.parseArrowExpression(this.startNodeAt(startPos, startLoc), [id], true, forInit)
+        }
+      }
+      return id
+
+    case types$1.regexp:
+      var value = this.value;
+      node = this.parseLiteral(value.value);
+      node.regex = {pattern: value.pattern, flags: value.flags};
+      return node
+
+    case types$1.num: case types$1.string:
+      return this.parseLiteral(this.value)
+
+    case types$1._null: case types$1._true: case types$1._false:
+      node = this.startNode();
+      node.value = this.type === types$1._null ? null : this.type === types$1._true;
+      node.raw = this.type.keyword;
+      this.next();
+      return this.finishNode(node, "Literal")
+
+    case types$1.parenL:
+      var start = this.start, expr = this.parseParenAndDistinguishExpression(canBeArrow, forInit);
+      if (refDestructuringErrors) {
+        if (refDestructuringErrors.parenthesizedAssign < 0 && !this.isSimpleAssignTarget(expr))
+          { refDestructuringErrors.parenthesizedAssign = start; }
+        if (refDestructuringErrors.parenthesizedBind < 0)
+          { refDestructuringErrors.parenthesizedBind = start; }
+      }
+      return expr
+
+    case types$1.bracketL:
+      node = this.startNode();
+      this.next();
+      node.elements = this.parseExprList(types$1.bracketR, true, true, refDestructuringErrors);
+      return this.finishNode(node, "ArrayExpression")
+
+    case types$1.braceL:
+      this.overrideContext(types.b_expr);
+      return this.parseObj(false, refDestructuringErrors)
+
+    case types$1._function:
+      node = this.startNode();
+      this.next();
+      return this.parseFunction(node, 0)
+
+    case types$1._class:
+      return this.parseClass(this.startNode(), false)
+
+    case types$1._new:
+      return this.parseNew()
+
+    case types$1.backQuote:
+      return this.parseTemplate()
+
+    case types$1._import:
+      if (this.options.ecmaVersion >= 11) {
+        return this.parseExprImport(forNew)
+      } else {
+        return this.unexpected()
+      }
+
+    default:
+      return this.parseExprAtomDefault()
+    }
+  };
+
+  pp$5.parseExprAtomDefault = function() {
+    this.unexpected();
+  };
+
+  pp$5.parseExprImport = function(forNew) {
+    var node = this.startNode();
+
+    // Consume `import` as an identifier for `import.meta`.
+    // Because `this.parseIdent(true)` doesn't check escape sequences, it needs the check of `this.containsEsc`.
+    if (this.containsEsc) { this.raiseRecoverable(this.start, "Escape sequence in keyword import"); }
+    this.next();
+
+    if (this.type === types$1.parenL && !forNew) {
+      return this.parseDynamicImport(node)
+    } else if (this.type === types$1.dot) {
+      var meta = this.startNodeAt(node.start, node.loc && node.loc.start);
+      meta.name = "import";
+      node.meta = this.finishNode(meta, "Identifier");
+      return this.parseImportMeta(node)
+    } else {
+      this.unexpected();
+    }
+  };
+
+  pp$5.parseDynamicImport = function(node) {
+    this.next(); // skip `(`
+
+    // Parse node.source.
+    node.source = this.parseMaybeAssign();
+
+    if (this.options.ecmaVersion >= 16) {
+      if (!this.eat(types$1.parenR)) {
+        this.expect(types$1.comma);
+        if (!this.afterTrailingComma(types$1.parenR)) {
+          node.options = this.parseMaybeAssign();
+          if (!this.eat(types$1.parenR)) {
+            this.expect(types$1.comma);
+            if (!this.afterTrailingComma(types$1.parenR)) {
+              this.unexpected();
+            }
+          }
+        } else {
+          node.options = null;
+        }
+      } else {
+        node.options = null;
+      }
+    } else {
+      // Verify ending.
+      if (!this.eat(types$1.parenR)) {
+        var errorPos = this.start;
+        if (this.eat(types$1.comma) && this.eat(types$1.parenR)) {
+          this.raiseRecoverable(errorPos, "Trailing comma is not allowed in import()");
+        } else {
+          this.unexpected(errorPos);
+        }
+      }
+    }
+
+    return this.finishNode(node, "ImportExpression")
+  };
+
+  pp$5.parseImportMeta = function(node) {
+    this.next(); // skip `.`
+
+    var containsEsc = this.containsEsc;
+    node.property = this.parseIdent(true);
+
+    if (node.property.name !== "meta")
+      { this.raiseRecoverable(node.property.start, "The only valid meta property for import is 'import.meta'"); }
+    if (containsEsc)
+      { this.raiseRecoverable(node.start, "'import.meta' must not contain escaped characters"); }
+    if (this.options.sourceType !== "module" && !this.options.allowImportExportEverywhere)
+      { this.raiseRecoverable(node.start, "Cannot use 'import.meta' outside a module"); }
+
+    return this.finishNode(node, "MetaProperty")
+  };
+
+  pp$5.parseLiteral = function(value) {
+    var node = this.startNode();
+    node.value = value;
+    node.raw = this.input.slice(this.start, this.end);
+    if (node.raw.charCodeAt(node.raw.length - 1) === 110)
+      { node.bigint = node.value != null ? node.value.toString() : node.raw.slice(0, -1).replace(/_/g, ""); }
+    this.next();
+    return this.finishNode(node, "Literal")
+  };
+
+  pp$5.parseParenExpression = function() {
+    this.expect(types$1.parenL);
+    var val = this.parseExpression();
+    this.expect(types$1.parenR);
+    return val
+  };
+
+  pp$5.shouldParseArrow = function(exprList) {
+    return !this.canInsertSemicolon()
+  };
+
+  pp$5.parseParenAndDistinguishExpression = function(canBeArrow, forInit) {
+    var startPos = this.start, startLoc = this.startLoc, val, allowTrailingComma = this.options.ecmaVersion >= 8;
+    if (this.options.ecmaVersion >= 6) {
+      this.next();
+
+      var innerStartPos = this.start, innerStartLoc = this.startLoc;
+      var exprList = [], first = true, lastIsComma = false;
+      var refDestructuringErrors = new DestructuringErrors, oldYieldPos = this.yieldPos, oldAwaitPos = this.awaitPos, spreadStart;
+      this.yieldPos = 0;
+      this.awaitPos = 0;
+      // Do not save awaitIdentPos to allow checking awaits nested in parameters
+      while (this.type !== types$1.parenR) {
+        first ? first = false : this.expect(types$1.comma);
+        if (allowTrailingComma && this.afterTrailingComma(types$1.parenR, true)) {
+          lastIsComma = true;
+          break
+        } else if (this.type === types$1.ellipsis) {
+          spreadStart = this.start;
+          exprList.push(this.parseParenItem(this.parseRestBinding()));
+          if (this.type === types$1.comma) {
+            this.raiseRecoverable(
+              this.start,
+              "Comma is not permitted after the rest element"
+            );
+          }
+          break
+        } else {
+          exprList.push(this.parseMaybeAssign(false, refDestructuringErrors, this.parseParenItem));
+        }
+      }
+      var innerEndPos = this.lastTokEnd, innerEndLoc = this.lastTokEndLoc;
+      this.expect(types$1.parenR);
+
+      if (canBeArrow && this.shouldParseArrow(exprList) && this.eat(types$1.arrow)) {
+        this.checkPatternErrors(refDestructuringErrors, false);
+        this.checkYieldAwaitInDefaultParams();
+        this.yieldPos = oldYieldPos;
+        this.awaitPos = oldAwaitPos;
+        return this.parseParenArrowList(startPos, startLoc, exprList, forInit)
+      }
+
+      if (!exprList.length || lastIsComma) { this.unexpected(this.lastTokStart); }
+      if (spreadStart) { this.unexpected(spreadStart); }
+      this.checkExpressionErrors(refDestructuringErrors, true);
+      this.yieldPos = oldYieldPos || this.yieldPos;
+      this.awaitPos = oldAwaitPos || this.awaitPos;
+
+      if (exprList.length > 1) {
+        val = this.startNodeAt(innerStartPos, innerStartLoc);
+        val.expressions = exprList;
+        this.finishNodeAt(val, "SequenceExpression", innerEndPos, innerEndLoc);
+      } else {
+        val = exprList[0];
+      }
+    } else {
+      val = this.parseParenExpression();
+    }
+
+    if (this.options.preserveParens) {
+      var par = this.startNodeAt(startPos, startLoc);
+      par.expression = val;
+      return this.finishNode(par, "ParenthesizedExpression")
+    } else {
+      return val
+    }
+  };
+
+  pp$5.parseParenItem = function(item) {
+    return item
+  };
+
+  pp$5.parseParenArrowList = function(startPos, startLoc, exprList, forInit) {
+    return this.parseArrowExpression(this.startNodeAt(startPos, startLoc), exprList, false, forInit)
+  };
+
+  // New's precedence is slightly tricky. It must allow its argument to
+  // be a `[]` or dot subscript expression, but not a call — at least,
+  // not without wrapping it in parentheses. Thus, it uses the noCalls
+  // argument to parseSubscripts to prevent it from consuming the
+  // argument list.
+
+  var empty = [];
+
+  pp$5.parseNew = function() {
+    if (this.containsEsc) { this.raiseRecoverable(this.start, "Escape sequence in keyword new"); }
+    var node = this.startNode();
+    this.next();
+    if (this.options.ecmaVersion >= 6 && this.type === types$1.dot) {
+      var meta = this.startNodeAt(node.start, node.loc && node.loc.start);
+      meta.name = "new";
+      node.meta = this.finishNode(meta, "Identifier");
+      this.next();
+      var containsEsc = this.containsEsc;
+      node.property = this.parseIdent(true);
+      if (node.property.name !== "target")
+        { this.raiseRecoverable(node.property.start, "The only valid meta property for new is 'new.target'"); }
+      if (containsEsc)
+        { this.raiseRecoverable(node.start, "'new.target' must not contain escaped characters"); }
+      if (!this.allowNewDotTarget)
+        { this.raiseRecoverable(node.start, "'new.target' can only be used in functions and class static block"); }
+      return this.finishNode(node, "MetaProperty")
+    }
+    var startPos = this.start, startLoc = this.startLoc;
+    node.callee = this.parseSubscripts(this.parseExprAtom(null, false, true), startPos, startLoc, true, false);
+    if (node.callee.type === "Super")
+      { this.raiseRecoverable(startPos, "Invalid use of 'super'"); }
+    if (this.eat(types$1.parenL)) { node.arguments = this.parseExprList(types$1.parenR, this.options.ecmaVersion >= 8, false); }
+    else { node.arguments = empty; }
+    return this.finishNode(node, "NewExpression")
+  };
+
+  // Parse template expression.
+
+  pp$5.parseTemplateElement = function(ref) {
+    var isTagged = ref.isTagged;
+
+    var elem = this.startNode();
+    if (this.type === types$1.invalidTemplate) {
+      if (!isTagged) {
+        this.raiseRecoverable(this.start, "Bad escape sequence in untagged template literal");
+      }
+      elem.value = {
+        raw: this.value.replace(/\r\n?/g, "\n"),
+        cooked: null
+      };
+    } else {
+      elem.value = {
+        raw: this.input.slice(this.start, this.end).replace(/\r\n?/g, "\n"),
+        cooked: this.value
+      };
+    }
+    this.next();
+    elem.tail = this.type === types$1.backQuote;
+    return this.finishNode(elem, "TemplateElement")
+  };
+
+  pp$5.parseTemplate = function(ref) {
+    if ( ref === void 0 ) ref = {};
+    var isTagged = ref.isTagged; if ( isTagged === void 0 ) isTagged = false;
+
+    var node = this.startNode();
+    this.next();
+    node.expressions = [];
+    var curElt = this.parseTemplateElement({isTagged: isTagged});
+    node.quasis = [curElt];
+    while (!curElt.tail) {
+      if (this.type === types$1.eof) { this.raise(this.pos, "Unterminated template literal"); }
+      this.expect(types$1.dollarBraceL);
+      node.expressions.push(this.parseExpression());
+      this.expect(types$1.braceR);
+      node.quasis.push(curElt = this.parseTemplateElement({isTagged: isTagged}));
+    }
+    this.next();
+    return this.finishNode(node, "TemplateLiteral")
+  };
+
+  pp$5.isAsyncProp = function(prop) {
+    return !prop.computed && prop.key.type === "Identifier" && prop.key.name === "async" &&
+      (this.type === types$1.name || this.type === types$1.num || this.type === types$1.string || this.type === types$1.bracketL || this.type.keyword || (this.options.ecmaVersion >= 9 && this.type === types$1.star)) &&
+      !lineBreak.test(this.input.slice(this.lastTokEnd, this.start))
+  };
+
+  // Parse an object literal or binding pattern.
+
+  pp$5.parseObj = function(isPattern, refDestructuringErrors) {
+    var node = this.startNode(), first = true, propHash = {};
+    node.properties = [];
+    this.next();
+    while (!this.eat(types$1.braceR)) {
+      if (!first) {
+        this.expect(types$1.comma);
+        if (this.options.ecmaVersion >= 5 && this.afterTrailingComma(types$1.braceR)) { break }
+      } else { first = false; }
+
+      var prop = this.parseProperty(isPattern, refDestructuringErrors);
+      if (!isPattern) { this.checkPropClash(prop, propHash, refDestructuringErrors); }
+      node.properties.push(prop);
+    }
+    return this.finishNode(node, isPattern ? "ObjectPattern" : "ObjectExpression")
+  };
+
+  pp$5.parseProperty = function(isPattern, refDestructuringErrors) {
+    var prop = this.startNode(), isGenerator, isAsync, startPos, startLoc;
+    if (this.options.ecmaVersion >= 9 && this.eat(types$1.ellipsis)) {
+      if (isPattern) {
+        prop.argument = this.parseIdent(false);
+        if (this.type === types$1.comma) {
+          this.raiseRecoverable(this.start, "Comma is not permitted after the rest element");
+        }
+        return this.finishNode(prop, "RestElement")
+      }
+      // Parse argument.
+      prop.argument = this.parseMaybeAssign(false, refDestructuringErrors);
+      // To disallow trailing comma via `this.toAssignable()`.
+      if (this.type === types$1.comma && refDestructuringErrors && refDestructuringErrors.trailingComma < 0) {
+        refDestructuringErrors.trailingComma = this.start;
+      }
+      // Finish
+      return this.finishNode(prop, "SpreadElement")
+    }
+    if (this.options.ecmaVersion >= 6) {
+      prop.method = false;
+      prop.shorthand = false;
+      if (isPattern || refDestructuringErrors) {
+        startPos = this.start;
+        startLoc = this.startLoc;
+      }
+      if (!isPattern)
+        { isGenerator = this.eat(types$1.star); }
+    }
+    var containsEsc = this.containsEsc;
+    this.parsePropertyName(prop);
+    if (!isPattern && !containsEsc && this.options.ecmaVersion >= 8 && !isGenerator && this.isAsyncProp(prop)) {
+      isAsync = true;
+      isGenerator = this.options.ecmaVersion >= 9 && this.eat(types$1.star);
+      this.parsePropertyName(prop);
+    } else {
+      isAsync = false;
+    }
+    this.parsePropertyValue(prop, isPattern, isGenerator, isAsync, startPos, startLoc, refDestructuringErrors, containsEsc);
+    return this.finishNode(prop, "Property")
+  };
+
+  pp$5.parseGetterSetter = function(prop) {
+    var kind = prop.key.name;
+    this.parsePropertyName(prop);
+    prop.value = this.parseMethod(false);
+    prop.kind = kind;
+    var paramCount = prop.kind === "get" ? 0 : 1;
+    if (prop.value.params.length !== paramCount) {
+      var start = prop.value.start;
+      if (prop.kind === "get")
+        { this.raiseRecoverable(start, "getter should have no params"); }
+      else
+        { this.raiseRecoverable(start, "setter should have exactly one param"); }
+    } else {
+      if (prop.kind === "set" && prop.value.params[0].type === "RestElement")
+        { this.raiseRecoverable(prop.value.params[0].start, "Setter cannot use rest params"); }
+    }
+  };
+
+  pp$5.parsePropertyValue = function(prop, isPattern, isGenerator, isAsync, startPos, startLoc, refDestructuringErrors, containsEsc) {
+    if ((isGenerator || isAsync) && this.type === types$1.colon)
+      { this.unexpected(); }
+
+    if (this.eat(types$1.colon)) {
+      prop.value = isPattern ? this.parseMaybeDefault(this.start, this.startLoc) : this.parseMaybeAssign(false, refDestructuringErrors);
+      prop.kind = "init";
+    } else if (this.options.ecmaVersion >= 6 && this.type === types$1.parenL) {
+      if (isPattern) { this.unexpected(); }
+      prop.method = true;
+      prop.value = this.parseMethod(isGenerator, isAsync);
+      prop.kind = "init";
+    } else if (!isPattern && !containsEsc &&
+               this.options.ecmaVersion >= 5 && !prop.computed && prop.key.type === "Identifier" &&
+               (prop.key.name === "get" || prop.key.name === "set") &&
+               (this.type !== types$1.comma && this.type !== types$1.braceR && this.type !== types$1.eq)) {
+      if (isGenerator || isAsync) { this.unexpected(); }
+      this.parseGetterSetter(prop);
+    } else if (this.options.ecmaVersion >= 6 && !prop.computed && prop.key.type === "Identifier") {
+      if (isGenerator || isAsync) { this.unexpected(); }
+      this.checkUnreserved(prop.key);
+      if (prop.key.name === "await" && !this.awaitIdentPos)
+        { this.awaitIdentPos = startPos; }
+      if (isPattern) {
+        prop.value = this.parseMaybeDefault(startPos, startLoc, this.copyNode(prop.key));
+      } else if (this.type === types$1.eq && refDestructuringErrors) {
+        if (refDestructuringErrors.shorthandAssign < 0)
+          { refDestructuringErrors.shorthandAssign = this.start; }
+        prop.value = this.parseMaybeDefault(startPos, startLoc, this.copyNode(prop.key));
+      } else {
+        prop.value = this.copyNode(prop.key);
+      }
+      prop.kind = "init";
+      prop.shorthand = true;
+    } else { this.unexpected(); }
+  };
+
+  pp$5.parsePropertyName = function(prop) {
+    if (this.options.ecmaVersion >= 6) {
+      if (this.eat(types$1.bracketL)) {
+        prop.computed = true;
+        prop.key = this.parseMaybeAssign();
+        this.expect(types$1.bracketR);
+        return prop.key
+      } else {
+        prop.computed = false;
+      }
+    }
+    return prop.key = this.type === types$1.num || this.type === types$1.string ? this.parseExprAtom() : this.parseIdent(this.options.allowReserved !== "never")
+  };
+
+  // Initialize empty function node.
+
+  pp$5.initFunction = function(node) {
+    node.id = null;
+    if (this.options.ecmaVersion >= 6) { node.generator = node.expression = false; }
+    if (this.options.ecmaVersion >= 8) { node.async = false; }
+  };
+
+  // Parse object or class method.
+
+  pp$5.parseMethod = function(isGenerator, isAsync, allowDirectSuper) {
+    var node = this.startNode(), oldYieldPos = this.yieldPos, oldAwaitPos = this.awaitPos, oldAwaitIdentPos = this.awaitIdentPos;
+
+    this.initFunction(node);
+    if (this.options.ecmaVersion >= 6)
+      { node.generator = isGenerator; }
+    if (this.options.ecmaVersion >= 8)
+      { node.async = !!isAsync; }
+
+    this.yieldPos = 0;
+    this.awaitPos = 0;
+    this.awaitIdentPos = 0;
+    this.enterScope(functionFlags(isAsync, node.generator) | SCOPE_SUPER | (allowDirectSuper ? SCOPE_DIRECT_SUPER : 0));
+
+    this.expect(types$1.parenL);
+    node.params = this.parseBindingList(types$1.parenR, false, this.options.ecmaVersion >= 8);
+    this.checkYieldAwaitInDefaultParams();
+    this.parseFunctionBody(node, false, true, false);
+
+    this.yieldPos = oldYieldPos;
+    this.awaitPos = oldAwaitPos;
+    this.awaitIdentPos = oldAwaitIdentPos;
+    return this.finishNode(node, "FunctionExpression")
+  };
+
+  // Parse arrow function expression with given parameters.
+
+  pp$5.parseArrowExpression = function(node, params, isAsync, forInit) {
+    var oldYieldPos = this.yieldPos, oldAwaitPos = this.awaitPos, oldAwaitIdentPos = this.awaitIdentPos;
+
+    this.enterScope(functionFlags(isAsync, false) | SCOPE_ARROW);
+    this.initFunction(node);
+    if (this.options.ecmaVersion >= 8) { node.async = !!isAsync; }
+
+    this.yieldPos = 0;
+    this.awaitPos = 0;
+    this.awaitIdentPos = 0;
+
+    node.params = this.toAssignableList(params, true);
+    this.parseFunctionBody(node, true, false, forInit);
+
+    this.yieldPos = oldYieldPos;
+    this.awaitPos = oldAwaitPos;
+    this.awaitIdentPos = oldAwaitIdentPos;
+    return this.finishNode(node, "ArrowFunctionExpression")
+  };
+
+  // Parse function body and check parameters.
+
+  pp$5.parseFunctionBody = function(node, isArrowFunction, isMethod, forInit) {
+    var isExpression = isArrowFunction && this.type !== types$1.braceL;
+    var oldStrict = this.strict, useStrict = false;
+
+    if (isExpression) {
+      node.body = this.parseMaybeAssign(forInit);
+      node.expression = true;
+      this.checkParams(node, false);
+    } else {
+      var nonSimple = this.options.ecmaVersion >= 7 && !this.isSimpleParamList(node.params);
+      if (!oldStrict || nonSimple) {
+        useStrict = this.strictDirective(this.end);
+        // If this is a strict mode function, verify that argument names
+        // are not repeated, and it does not try to bind the words `eval`
+        // or `arguments`.
+        if (useStrict && nonSimple)
+          { this.raiseRecoverable(node.start, "Illegal 'use strict' directive in function with non-simple parameter list"); }
+      }
+      // Start a new scope with regard to labels and the `inFunction`
+      // flag (restore them to their old value afterwards).
+      var oldLabels = this.labels;
+      this.labels = [];
+      if (useStrict) { this.strict = true; }
+
+      // Add the params to varDeclaredNames to ensure that an error is thrown
+      // if a let/const declaration in the function clashes with one of the params.
+      this.checkParams(node, !oldStrict && !useStrict && !isArrowFunction && !isMethod && this.isSimpleParamList(node.params));
+      // Ensure the function name isn't a forbidden identifier in strict mode, e.g. 'eval'
+      if (this.strict && node.id) { this.checkLValSimple(node.id, BIND_OUTSIDE); }
+      node.body = this.parseBlock(false, undefined, useStrict && !oldStrict);
+      node.expression = false;
+      this.adaptDirectivePrologue(node.body.body);
+      this.labels = oldLabels;
+    }
+    this.exitScope();
+  };
+
+  pp$5.isSimpleParamList = function(params) {
+    for (var i = 0, list = params; i < list.length; i += 1)
+      {
+      var param = list[i];
+
+      if (param.type !== "Identifier") { return false
+    } }
+    return true
+  };
+
+  // Checks function params for various disallowed patterns such as using "eval"
+  // or "arguments" and duplicate parameters.
+
+  pp$5.checkParams = function(node, allowDuplicates) {
+    var nameHash = Object.create(null);
+    for (var i = 0, list = node.params; i < list.length; i += 1)
+      {
+      var param = list[i];
+
+      this.checkLValInnerPattern(param, BIND_VAR, allowDuplicates ? null : nameHash);
+    }
+  };
+
+  // Parses a comma-separated list of expressions, and returns them as
+  // an array. `close` is the token type that ends the list, and
+  // `allowEmpty` can be turned on to allow subsequent commas with
+  // nothing in between them to be parsed as `null` (which is needed
+  // for array literals).
+
+  pp$5.parseExprList = function(close, allowTrailingComma, allowEmpty, refDestructuringErrors) {
+    var elts = [], first = true;
+    while (!this.eat(close)) {
+      if (!first) {
+        this.expect(types$1.comma);
+        if (allowTrailingComma && this.afterTrailingComma(close)) { break }
+      } else { first = false; }
+
+      var elt = (void 0);
+      if (allowEmpty && this.type === types$1.comma)
+        { elt = null; }
+      else if (this.type === types$1.ellipsis) {
+        elt = this.parseSpread(refDestructuringErrors);
+        if (refDestructuringErrors && this.type === types$1.comma && refDestructuringErrors.trailingComma < 0)
+          { refDestructuringErrors.trailingComma = this.start; }
+      } else {
+        elt = this.parseMaybeAssign(false, refDestructuringErrors);
+      }
+      elts.push(elt);
+    }
+    return elts
+  };
+
+  pp$5.checkUnreserved = function(ref) {
+    var start = ref.start;
+    var end = ref.end;
+    var name = ref.name;
+
+    if (this.inGenerator && name === "yield")
+      { this.raiseRecoverable(start, "Cannot use 'yield' as identifier inside a generator"); }
+    if (this.inAsync && name === "await")
+      { this.raiseRecoverable(start, "Cannot use 'await' as identifier inside an async function"); }
+    if (!(this.currentThisScope().flags & SCOPE_VAR) && name === "arguments")
+      { this.raiseRecoverable(start, "Cannot use 'arguments' in class field initializer"); }
+    if (this.inClassStaticBlock && (name === "arguments" || name === "await"))
+      { this.raise(start, ("Cannot use " + name + " in class static initialization block")); }
+    if (this.keywords.test(name))
+      { this.raise(start, ("Unexpected keyword '" + name + "'")); }
+    if (this.options.ecmaVersion < 6 &&
+      this.input.slice(start, end).indexOf("\\") !== -1) { return }
+    var re = this.strict ? this.reservedWordsStrict : this.reservedWords;
+    if (re.test(name)) {
+      if (!this.inAsync && name === "await")
+        { this.raiseRecoverable(start, "Cannot use keyword 'await' outside an async function"); }
+      this.raiseRecoverable(start, ("The keyword '" + name + "' is reserved"));
+    }
+  };
+
+  // Parse the next token as an identifier. If `liberal` is true (used
+  // when parsing properties), it will also convert keywords into
+  // identifiers.
+
+  pp$5.parseIdent = function(liberal) {
+    var node = this.parseIdentNode();
+    this.next(!!liberal);
+    this.finishNode(node, "Identifier");
+    if (!liberal) {
+      this.checkUnreserved(node);
+      if (node.name === "await" && !this.awaitIdentPos)
+        { this.awaitIdentPos = node.start; }
+    }
+    return node
+  };
+
+  pp$5.parseIdentNode = function() {
+    var node = this.startNode();
+    if (this.type === types$1.name) {
+      node.name = this.value;
+    } else if (this.type.keyword) {
+      node.name = this.type.keyword;
+
+      // To fix https://github.com/acornjs/acorn/issues/575
+      // `class` and `function` keywords push new context into this.context.
+      // But there is no chance to pop the context if the keyword is consumed as an identifier such as a property name.
+      // If the previous token is a dot, this does not apply because the context-managing code already ignored the keyword
+      if ((node.name === "class" || node.name === "function") &&
+        (this.lastTokEnd !== this.lastTokStart + 1 || this.input.charCodeAt(this.lastTokStart) !== 46)) {
+        this.context.pop();
+      }
+      this.type = types$1.name;
+    } else {
+      this.unexpected();
+    }
+    return node
+  };
+
+  pp$5.parsePrivateIdent = function() {
+    var node = this.startNode();
+    if (this.type === types$1.privateId) {
+      node.name = this.value;
+    } else {
+      this.unexpected();
+    }
+    this.next();
+    this.finishNode(node, "PrivateIdentifier");
+
+    // For validating existence
+    if (this.options.checkPrivateFields) {
+      if (this.privateNameStack.length === 0) {
+        this.raise(node.start, ("Private field '#" + (node.name) + "' must be declared in an enclosing class"));
+      } else {
+        this.privateNameStack[this.privateNameStack.length - 1].used.push(node);
+      }
+    }
+
+    return node
+  };
+
+  // Parses yield expression inside generator.
+
+  pp$5.parseYield = function(forInit) {
+    if (!this.yieldPos) { this.yieldPos = this.start; }
+
+    var node = this.startNode();
+    this.next();
+    if (this.type === types$1.semi || this.canInsertSemicolon() || (this.type !== types$1.star && !this.type.startsExpr)) {
+      node.delegate = false;
+      node.argument = null;
+    } else {
+      node.delegate = this.eat(types$1.star);
+      node.argument = this.parseMaybeAssign(forInit);
+    }
+    return this.finishNode(node, "YieldExpression")
+  };
+
+  pp$5.parseAwait = function(forInit) {
+    if (!this.awaitPos) { this.awaitPos = this.start; }
+
+    var node = this.startNode();
+    this.next();
+    node.argument = this.parseMaybeUnary(null, true, false, forInit);
+    return this.finishNode(node, "AwaitExpression")
+  };
+
+  var pp$4 = Parser.prototype;
+
+  // This function is used to raise exceptions on parse errors. It
+  // takes an offset integer (into the current `input`) to indicate
+  // the location of the error, attaches the position to the end
+  // of the error message, and then raises a `SyntaxError` with that
+  // message.
+
+  pp$4.raise = function(pos, message) {
+    var loc = getLineInfo(this.input, pos);
+    message += " (" + loc.line + ":" + loc.column + ")";
+    if (this.sourceFile) {
+      message += " in " + this.sourceFile;
+    }
+    var err = new SyntaxError(message);
+    err.pos = pos; err.loc = loc; err.raisedAt = this.pos;
+    throw err
+  };
+
+  pp$4.raiseRecoverable = pp$4.raise;
+
+  pp$4.curPosition = function() {
+    if (this.options.locations) {
+      return new Position(this.curLine, this.pos - this.lineStart)
+    }
+  };
+
+  var pp$3 = Parser.prototype;
+
+  var Scope = function Scope(flags) {
+    this.flags = flags;
+    // A list of var-declared names in the current lexical scope
+    this.var = [];
+    // A list of lexically-declared names in the current lexical scope
+    this.lexical = [];
+    // A list of lexically-declared FunctionDeclaration names in the current lexical scope
+    this.functions = [];
+  };
+
+  // The functions in this module keep track of declared variables in the current scope in order to detect duplicate variable names.
+
+  pp$3.enterScope = function(flags) {
+    this.scopeStack.push(new Scope(flags));
+  };
+
+  pp$3.exitScope = function() {
+    this.scopeStack.pop();
+  };
+
+  // The spec says:
+  // > At the top level of a function, or script, function declarations are
+  // > treated like var declarations rather than like lexical declarations.
+  pp$3.treatFunctionsAsVarInScope = function(scope) {
+    return (scope.flags & SCOPE_FUNCTION) || !this.inModule && (scope.flags & SCOPE_TOP)
+  };
+
+  pp$3.declareName = function(name, bindingType, pos) {
+    var redeclared = false;
+    if (bindingType === BIND_LEXICAL) {
+      var scope = this.currentScope();
+      redeclared = scope.lexical.indexOf(name) > -1 || scope.functions.indexOf(name) > -1 || scope.var.indexOf(name) > -1;
+      scope.lexical.push(name);
+      if (this.inModule && (scope.flags & SCOPE_TOP))
+        { delete this.undefinedExports[name]; }
+    } else if (bindingType === BIND_SIMPLE_CATCH) {
+      var scope$1 = this.currentScope();
+      scope$1.lexical.push(name);
+    } else if (bindingType === BIND_FUNCTION) {
+      var scope$2 = this.currentScope();
+      if (this.treatFunctionsAsVar)
+        { redeclared = scope$2.lexical.indexOf(name) > -1; }
+      else
+        { redeclared = scope$2.lexical.indexOf(name) > -1 || scope$2.var.indexOf(name) > -1; }
+      scope$2.functions.push(name);
+    } else {
+      for (var i = this.scopeStack.length - 1; i >= 0; --i) {
+        var scope$3 = this.scopeStack[i];
+        if (scope$3.lexical.indexOf(name) > -1 && !((scope$3.flags & SCOPE_SIMPLE_CATCH) && scope$3.lexical[0] === name) ||
+            !this.treatFunctionsAsVarInScope(scope$3) && scope$3.functions.indexOf(name) > -1) {
+          redeclared = true;
+          break
+        }
+        scope$3.var.push(name);
+        if (this.inModule && (scope$3.flags & SCOPE_TOP))
+          { delete this.undefinedExports[name]; }
+        if (scope$3.flags & SCOPE_VAR) { break }
+      }
+    }
+    if (redeclared) { this.raiseRecoverable(pos, ("Identifier '" + name + "' has already been declared")); }
+  };
+
+  pp$3.checkLocalExport = function(id) {
+    // scope.functions must be empty as Module code is always strict.
+    if (this.scopeStack[0].lexical.indexOf(id.name) === -1 &&
+        this.scopeStack[0].var.indexOf(id.name) === -1) {
+      this.undefinedExports[id.name] = id;
+    }
+  };
+
+  pp$3.currentScope = function() {
+    return this.scopeStack[this.scopeStack.length - 1]
+  };
+
+  pp$3.currentVarScope = function() {
+    for (var i = this.scopeStack.length - 1;; i--) {
+      var scope = this.scopeStack[i];
+      if (scope.flags & (SCOPE_VAR | SCOPE_CLASS_FIELD_INIT | SCOPE_CLASS_STATIC_BLOCK)) { return scope }
+    }
+  };
+
+  // Could be useful for `this`, `new.target`, `super()`, `super.property`, and `super[property]`.
+  pp$3.currentThisScope = function() {
+    for (var i = this.scopeStack.length - 1;; i--) {
+      var scope = this.scopeStack[i];
+      if (scope.flags & (SCOPE_VAR | SCOPE_CLASS_FIELD_INIT | SCOPE_CLASS_STATIC_BLOCK) &&
+          !(scope.flags & SCOPE_ARROW)) { return scope }
+    }
+  };
+
+  var Node = function Node(parser, pos, loc) {
+    this.type = "";
+    this.start = pos;
+    this.end = 0;
+    if (parser.options.locations)
+      { this.loc = new SourceLocation(parser, loc); }
+    if (parser.options.directSourceFile)
+      { this.sourceFile = parser.options.directSourceFile; }
+    if (parser.options.ranges)
+      { this.range = [pos, 0]; }
+  };
+
+  // Start an AST node, attaching a start offset.
+
+  var pp$2 = Parser.prototype;
+
+  pp$2.startNode = function() {
+    return new Node(this, this.start, this.startLoc)
+  };
+
+  pp$2.startNodeAt = function(pos, loc) {
+    return new Node(this, pos, loc)
+  };
+
+  // Finish an AST node, adding `type` and `end` properties.
+
+  function finishNodeAt(node, type, pos, loc) {
+    node.type = type;
+    node.end = pos;
+    if (this.options.locations)
+      { node.loc.end = loc; }
+    if (this.options.ranges)
+      { node.range[1] = pos; }
+    return node
+  }
+
+  pp$2.finishNode = function(node, type) {
+    return finishNodeAt.call(this, node, type, this.lastTokEnd, this.lastTokEndLoc)
+  };
+
+  // Finish node at given position
+
+  pp$2.finishNodeAt = function(node, type, pos, loc) {
+    return finishNodeAt.call(this, node, type, pos, loc)
+  };
+
+  pp$2.copyNode = function(node) {
+    var newNode = new Node(this, node.start, this.startLoc);
+    for (var prop in node) { newNode[prop] = node[prop]; }
+    return newNode
+  };
+
+  // This file was generated by "bin/generate-unicode-script-values.js". Do not modify manually!
+  var scriptValuesAddedInUnicode = "Berf Beria_Erfe Gara Garay Gukh Gurung_Khema Hrkt Katakana_Or_Hiragana Kawi Kirat_Rai Krai Nag_Mundari Nagm Ol_Onal Onao Sidetic Sidt Sunu Sunuwar Tai_Yo Tayo Todhri Todr Tolong_Siki Tols Tulu_Tigalari Tutg Unknown Zzzz";
+
+  // This file contains Unicode properties extracted from the ECMAScript specification.
+  // The lists are extracted like so:
+  // $$('#table-binary-unicode-properties > figure > table > tbody > tr > td:nth-child(1) code').map(el => el.innerText)
+
+  // #table-binary-unicode-properties
+  var ecma9BinaryProperties = "ASCII ASCII_Hex_Digit AHex Alphabetic Alpha Any Assigned Bidi_Control Bidi_C Bidi_Mirrored Bidi_M Case_Ignorable CI Cased Changes_When_Casefolded CWCF Changes_When_Casemapped CWCM Changes_When_Lowercased CWL Changes_When_NFKC_Casefolded CWKCF Changes_When_Titlecased CWT Changes_When_Uppercased CWU Dash Default_Ignorable_Code_Point DI Deprecated Dep Diacritic Dia Emoji Emoji_Component Emoji_Modifier Emoji_Modifier_Base Emoji_Presentation Extender Ext Grapheme_Base Gr_Base Grapheme_Extend Gr_Ext Hex_Digit Hex IDS_Binary_Operator IDSB IDS_Trinary_Operator IDST ID_Continue IDC ID_Start IDS Ideographic Ideo Join_Control Join_C Logical_Order_Exception LOE Lowercase Lower Math Noncharacter_Code_Point NChar Pattern_Syntax Pat_Syn Pattern_White_Space Pat_WS Quotation_Mark QMark Radical Regional_Indicator RI Sentence_Terminal STerm Soft_Dotted SD Terminal_Punctuation Term Unified_Ideograph UIdeo Uppercase Upper Variation_Selector VS White_Space space XID_Continue XIDC XID_Start XIDS";
+  var ecma10BinaryProperties = ecma9BinaryProperties + " Extended_Pictographic";
+  var ecma11BinaryProperties = ecma10BinaryProperties;
+  var ecma12BinaryProperties = ecma11BinaryProperties + " EBase EComp EMod EPres ExtPict";
+  var ecma13BinaryProperties = ecma12BinaryProperties;
+  var ecma14BinaryProperties = ecma13BinaryProperties;
+
+  var unicodeBinaryProperties = {
+    9: ecma9BinaryProperties,
+    10: ecma10BinaryProperties,
+    11: ecma11BinaryProperties,
+    12: ecma12BinaryProperties,
+    13: ecma13BinaryProperties,
+    14: ecma14BinaryProperties
+  };
+
+  // #table-binary-unicode-properties-of-strings
+  var ecma14BinaryPropertiesOfStrings = "Basic_Emoji Emoji_Keycap_Sequence RGI_Emoji_Modifier_Sequence RGI_Emoji_Flag_Sequence RGI_Emoji_Tag_Sequence RGI_Emoji_ZWJ_Sequence RGI_Emoji";
+
+  var unicodeBinaryPropertiesOfStrings = {
+    9: "",
+    10: "",
+    11: "",
+    12: "",
+    13: "",
+    14: ecma14BinaryPropertiesOfStrings
+  };
+
+  // #table-unicode-general-category-values
+  var unicodeGeneralCategoryValues = "Cased_Letter LC Close_Punctuation Pe Connector_Punctuation Pc Control Cc cntrl Currency_Symbol Sc Dash_Punctuation Pd Decimal_Number Nd digit Enclosing_Mark Me Final_Punctuation Pf Format Cf Initial_Punctuation Pi Letter L Letter_Number Nl Line_Separator Zl Lowercase_Letter Ll Mark M Combining_Mark Math_Symbol Sm Modifier_Letter Lm Modifier_Symbol Sk Nonspacing_Mark Mn Number N Open_Punctuation Ps Other C Other_Letter Lo Other_Number No Other_Punctuation Po Other_Symbol So Paragraph_Separator Zp Private_Use Co Punctuation P punct Separator Z Space_Separator Zs Spacing_Mark Mc Surrogate Cs Symbol S Titlecase_Letter Lt Unassigned Cn Uppercase_Letter Lu";
+
+  // #table-unicode-script-values
+  var ecma9ScriptValues = "Adlam Adlm Ahom Anatolian_Hieroglyphs Hluw Arabic Arab Armenian Armn Avestan Avst Balinese Bali Bamum Bamu Bassa_Vah Bass Batak Batk Bengali Beng Bhaiksuki Bhks Bopomofo Bopo Brahmi Brah Braille Brai Buginese Bugi Buhid Buhd Canadian_Aboriginal Cans Carian Cari Caucasian_Albanian Aghb Chakma Cakm Cham Cham Cherokee Cher Common Zyyy Coptic Copt Qaac Cuneiform Xsux Cypriot Cprt Cyrillic Cyrl Deseret Dsrt Devanagari Deva Duployan Dupl Egyptian_Hieroglyphs Egyp Elbasan Elba Ethiopic Ethi Georgian Geor Glagolitic Glag Gothic Goth Grantha Gran Greek Grek Gujarati Gujr Gurmukhi Guru Han Hani Hangul Hang Hanunoo Hano Hatran Hatr Hebrew Hebr Hiragana Hira Imperial_Aramaic Armi Inherited Zinh Qaai Inscriptional_Pahlavi Phli Inscriptional_Parthian Prti Javanese Java Kaithi Kthi Kannada Knda Katakana Kana Kayah_Li Kali Kharoshthi Khar Khmer Khmr Khojki Khoj Khudawadi Sind Lao Laoo Latin Latn Lepcha Lepc Limbu Limb Linear_A Lina Linear_B Linb Lisu Lisu Lycian Lyci Lydian Lydi Mahajani Mahj Malayalam Mlym Mandaic Mand Manichaean Mani Marchen Marc Masaram_Gondi Gonm Meetei_Mayek Mtei Mende_Kikakui Mend Meroitic_Cursive Merc Meroitic_Hieroglyphs Mero Miao Plrd Modi Mongolian Mong Mro Mroo Multani Mult Myanmar Mymr Nabataean Nbat New_Tai_Lue Talu Newa Newa Nko Nkoo Nushu Nshu Ogham Ogam Ol_Chiki Olck Old_Hungarian Hung Old_Italic Ital Old_North_Arabian Narb Old_Permic Perm Old_Persian Xpeo Old_South_Arabian Sarb Old_Turkic Orkh Oriya Orya Osage Osge Osmanya Osma Pahawh_Hmong Hmng Palmyrene Palm Pau_Cin_Hau Pauc Phags_Pa Phag Phoenician Phnx Psalter_Pahlavi Phlp Rejang Rjng Runic Runr Samaritan Samr Saurashtra Saur Sharada Shrd Shavian Shaw Siddham Sidd SignWriting Sgnw Sinhala Sinh Sora_Sompeng Sora Soyombo Soyo Sundanese Sund Syloti_Nagri Sylo Syriac Syrc Tagalog Tglg Tagbanwa Tagb Tai_Le Tale Tai_Tham Lana Tai_Viet Tavt Takri Takr Tamil Taml Tangut Tang Telugu Telu Thaana Thaa Thai Thai Tibetan Tibt Tifinagh Tfng Tirhuta Tirh Ugaritic Ugar Vai Vaii Warang_Citi Wara Yi Yiii Zanabazar_Square Zanb";
+  var ecma10ScriptValues = ecma9ScriptValues + " Dogra Dogr Gunjala_Gondi Gong Hanifi_Rohingya Rohg Makasar Maka Medefaidrin Medf Old_Sogdian Sogo Sogdian Sogd";
+  var ecma11ScriptValues = ecma10ScriptValues + " Elymaic Elym Nandinagari Nand Nyiakeng_Puachue_Hmong Hmnp Wancho Wcho";
+  var ecma12ScriptValues = ecma11ScriptValues + " Chorasmian Chrs Diak Dives_Akuru Khitan_Small_Script Kits Yezi Yezidi";
+  var ecma13ScriptValues = ecma12ScriptValues + " Cypro_Minoan Cpmn Old_Uyghur Ougr Tangsa Tnsa Toto Vithkuqi Vith";
+  var ecma14ScriptValues = ecma13ScriptValues + " " + scriptValuesAddedInUnicode;
+
+  var unicodeScriptValues = {
+    9: ecma9ScriptValues,
+    10: ecma10ScriptValues,
+    11: ecma11ScriptValues,
+    12: ecma12ScriptValues,
+    13: ecma13ScriptValues,
+    14: ecma14ScriptValues
+  };
+
+  var data = {};
+  function buildUnicodeData(ecmaVersion) {
+    var d = data[ecmaVersion] = {
+      binary: wordsRegexp(unicodeBinaryProperties[ecmaVersion] + " " + unicodeGeneralCategoryValues),
+      binaryOfStrings: wordsRegexp(unicodeBinaryPropertiesOfStrings[ecmaVersion]),
+      nonBinary: {
+        General_Category: wordsRegexp(unicodeGeneralCategoryValues),
+        Script: wordsRegexp(unicodeScriptValues[ecmaVersion])
+      }
+    };
+    d.nonBinary.Script_Extensions = d.nonBinary.Script;
+
+    d.nonBinary.gc = d.nonBinary.General_Category;
+    d.nonBinary.sc = d.nonBinary.Script;
+    d.nonBinary.scx = d.nonBinary.Script_Extensions;
+  }
+
+  for (var i = 0, list = [9, 10, 11, 12, 13, 14]; i < list.length; i += 1) {
+    var ecmaVersion = list[i];
+
+    buildUnicodeData(ecmaVersion);
+  }
+
+  var pp$1 = Parser.prototype;
+
+  // Track disjunction structure to determine whether a duplicate
+  // capture group name is allowed because it is in a separate branch.
+  var BranchID = function BranchID(parent, base) {
+    // Parent disjunction branch
+    this.parent = parent;
+    // Identifies this set of sibling branches
+    this.base = base || this;
+  };
+
+  BranchID.prototype.separatedFrom = function separatedFrom (alt) {
+    // A branch is separate from another branch if they or any of
+    // their parents are siblings in a given disjunction
+    for (var self = this; self; self = self.parent) {
+      for (var other = alt; other; other = other.parent) {
+        if (self.base === other.base && self !== other) { return true }
+      }
+    }
+    return false
+  };
+
+  BranchID.prototype.sibling = function sibling () {
+    return new BranchID(this.parent, this.base)
+  };
+
+  var RegExpValidationState = function RegExpValidationState(parser) {
+    this.parser = parser;
+    this.validFlags = "gim" + (parser.options.ecmaVersion >= 6 ? "uy" : "") + (parser.options.ecmaVersion >= 9 ? "s" : "") + (parser.options.ecmaVersion >= 13 ? "d" : "") + (parser.options.ecmaVersion >= 15 ? "v" : "");
+    this.unicodeProperties = data[parser.options.ecmaVersion >= 14 ? 14 : parser.options.ecmaVersion];
+    this.source = "";
+    this.flags = "";
+    this.start = 0;
+    this.switchU = false;
+    this.switchV = false;
+    this.switchN = false;
+    this.pos = 0;
+    this.lastIntValue = 0;
+    this.lastStringValue = "";
+    this.lastAssertionIsQuantifiable = false;
+    this.numCapturingParens = 0;
+    this.maxBackReference = 0;
+    this.groupNames = Object.create(null);
+    this.backReferenceNames = [];
+    this.branchID = null;
+  };
+
+  RegExpValidationState.prototype.reset = function reset (start, pattern, flags) {
+    var unicodeSets = flags.indexOf("v") !== -1;
+    var unicode = flags.indexOf("u") !== -1;
+    this.start = start | 0;
+    this.source = pattern + "";
+    this.flags = flags;
+    if (unicodeSets && this.parser.options.ecmaVersion >= 15) {
+      this.switchU = true;
+      this.switchV = true;
+      this.switchN = true;
+    } else {
+      this.switchU = unicode && this.parser.options.ecmaVersion >= 6;
+      this.switchV = false;
+      this.switchN = unicode && this.parser.options.ecmaVersion >= 9;
+    }
+  };
+
+  RegExpValidationState.prototype.raise = function raise (message) {
+    this.parser.raiseRecoverable(this.start, ("Invalid regular expression: /" + (this.source) + "/: " + message));
+  };
+
+  // If u flag is given, this returns the code point at the index (it combines a surrogate pair).
+  // Otherwise, this returns the code unit of the index (can be a part of a surrogate pair).
+  RegExpValidationState.prototype.at = function at (i, forceU) {
+      if ( forceU === void 0 ) forceU = false;
+
+    var s = this.source;
+    var l = s.length;
+    if (i >= l) {
+      return -1
+    }
+    var c = s.charCodeAt(i);
+    if (!(forceU || this.switchU) || c <= 0xD7FF || c >= 0xE000 || i + 1 >= l) {
+      return c
+    }
+    var next = s.charCodeAt(i + 1);
+    return next >= 0xDC00 && next <= 0xDFFF ? (c << 10) + next - 0x35FDC00 : c
+  };
+
+  RegExpValidationState.prototype.nextIndex = function nextIndex (i, forceU) {
+      if ( forceU === void 0 ) forceU = false;
+
+    var s = this.source;
+    var l = s.length;
+    if (i >= l) {
+      return l
+    }
+    var c = s.charCodeAt(i), next;
+    if (!(forceU || this.switchU) || c <= 0xD7FF || c >= 0xE000 || i + 1 >= l ||
+        (next = s.charCodeAt(i + 1)) < 0xDC00 || next > 0xDFFF) {
+      return i + 1
+    }
+    return i + 2
+  };
+
+  RegExpValidationState.prototype.current = function current (forceU) {
+      if ( forceU === void 0 ) forceU = false;
+
+    return this.at(this.pos, forceU)
+  };
+
+  RegExpValidationState.prototype.lookahead = function lookahead (forceU) {
+      if ( forceU === void 0 ) forceU = false;
+
+    return this.at(this.nextIndex(this.pos, forceU), forceU)
+  };
+
+  RegExpValidationState.prototype.advance = function advance (forceU) {
+      if ( forceU === void 0 ) forceU = false;
+
+    this.pos = this.nextIndex(this.pos, forceU);
+  };
+
+  RegExpValidationState.prototype.eat = function eat (ch, forceU) {
+      if ( forceU === void 0 ) forceU = false;
+
+    if (this.current(forceU) === ch) {
+      this.advance(forceU);
+      return true
+    }
+    return false
+  };
+
+  RegExpValidationState.prototype.eatChars = function eatChars (chs, forceU) {
+      if ( forceU === void 0 ) forceU = false;
+
+    var pos = this.pos;
+    for (var i = 0, list = chs; i < list.length; i += 1) {
+      var ch = list[i];
+
+        var current = this.at(pos, forceU);
+      if (current === -1 || current !== ch) {
+        return false
+      }
+      pos = this.nextIndex(pos, forceU);
+    }
+    this.pos = pos;
+    return true
+  };
+
+  /**
+   * Validate the flags part of a given RegExpLiteral.
+   *
+   * @param {RegExpValidationState} state The state to validate RegExp.
+   * @returns {void}
+   */
+  pp$1.validateRegExpFlags = function(state) {
+    var validFlags = state.validFlags;
+    var flags = state.flags;
+
+    var u = false;
+    var v = false;
+
+    for (var i = 0; i < flags.length; i++) {
+      var flag = flags.charAt(i);
+      if (validFlags.indexOf(flag) === -1) {
+        this.raise(state.start, "Invalid regular expression flag");
+      }
+      if (flags.indexOf(flag, i + 1) > -1) {
+        this.raise(state.start, "Duplicate regular expression flag");
+      }
+      if (flag === "u") { u = true; }
+      if (flag === "v") { v = true; }
+    }
+    if (this.options.ecmaVersion >= 15 && u && v) {
+      this.raise(state.start, "Invalid regular expression flag");
+    }
+  };
+
+  function hasProp(obj) {
+    for (var _ in obj) { return true }
+    return false
+  }
+
+  /**
+   * Validate the pattern part of a given RegExpLiteral.
+   *
+   * @param {RegExpValidationState} state The state to validate RegExp.
+   * @returns {void}
+   */
+  pp$1.validateRegExpPattern = function(state) {
+    this.regexp_pattern(state);
+
+    // The goal symbol for the parse is |Pattern[~U, ~N]|. If the result of
+    // parsing contains a |GroupName|, reparse with the goal symbol
+    // |Pattern[~U, +N]| and use this result instead. Throw a *SyntaxError*
+    // exception if _P_ did not conform to the grammar, if any elements of _P_
+    // were not matched by the parse, or if any Early Error conditions exist.
+    if (!state.switchN && this.options.ecmaVersion >= 9 && hasProp(state.groupNames)) {
+      state.switchN = true;
+      this.regexp_pattern(state);
+    }
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-Pattern
+  pp$1.regexp_pattern = function(state) {
+    state.pos = 0;
+    state.lastIntValue = 0;
+    state.lastStringValue = "";
+    state.lastAssertionIsQuantifiable = false;
+    state.numCapturingParens = 0;
+    state.maxBackReference = 0;
+    state.groupNames = Object.create(null);
+    state.backReferenceNames.length = 0;
+    state.branchID = null;
+
+    this.regexp_disjunction(state);
+
+    if (state.pos !== state.source.length) {
+      // Make the same messages as V8.
+      if (state.eat(0x29 /* ) */)) {
+        state.raise("Unmatched ')'");
+      }
+      if (state.eat(0x5D /* ] */) || state.eat(0x7D /* } */)) {
+        state.raise("Lone quantifier brackets");
+      }
+    }
+    if (state.maxBackReference > state.numCapturingParens) {
+      state.raise("Invalid escape");
+    }
+    for (var i = 0, list = state.backReferenceNames; i < list.length; i += 1) {
+      var name = list[i];
+
+      if (!state.groupNames[name]) {
+        state.raise("Invalid named capture referenced");
+      }
+    }
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-Disjunction
+  pp$1.regexp_disjunction = function(state) {
+    var trackDisjunction = this.options.ecmaVersion >= 16;
+    if (trackDisjunction) { state.branchID = new BranchID(state.branchID, null); }
+    this.regexp_alternative(state);
+    while (state.eat(0x7C /* | */)) {
+      if (trackDisjunction) { state.branchID = state.branchID.sibling(); }
+      this.regexp_alternative(state);
+    }
+    if (trackDisjunction) { state.branchID = state.branchID.parent; }
+
+    // Make the same message as V8.
+    if (this.regexp_eatQuantifier(state, true)) {
+      state.raise("Nothing to repeat");
+    }
+    if (state.eat(0x7B /* { */)) {
+      state.raise("Lone quantifier brackets");
+    }
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-Alternative
+  pp$1.regexp_alternative = function(state) {
+    while (state.pos < state.source.length && this.regexp_eatTerm(state)) {}
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Term
+  pp$1.regexp_eatTerm = function(state) {
+    if (this.regexp_eatAssertion(state)) {
+      // Handle `QuantifiableAssertion Quantifier` alternative.
+      // `state.lastAssertionIsQuantifiable` is true if the last eaten Assertion
+      // is a QuantifiableAssertion.
+      if (state.lastAssertionIsQuantifiable && this.regexp_eatQuantifier(state)) {
+        // Make the same message as V8.
+        if (state.switchU) {
+          state.raise("Invalid quantifier");
+        }
+      }
+      return true
+    }
+
+    if (state.switchU ? this.regexp_eatAtom(state) : this.regexp_eatExtendedAtom(state)) {
+      this.regexp_eatQuantifier(state);
+      return true
+    }
+
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-Assertion
+  pp$1.regexp_eatAssertion = function(state) {
+    var start = state.pos;
+    state.lastAssertionIsQuantifiable = false;
+
+    // ^, $
+    if (state.eat(0x5E /* ^ */) || state.eat(0x24 /* $ */)) {
+      return true
+    }
+
+    // \b \B
+    if (state.eat(0x5C /* \ */)) {
+      if (state.eat(0x42 /* B */) || state.eat(0x62 /* b */)) {
+        return true
+      }
+      state.pos = start;
+    }
+
+    // Lookahead / Lookbehind
+    if (state.eat(0x28 /* ( */) && state.eat(0x3F /* ? */)) {
+      var lookbehind = false;
+      if (this.options.ecmaVersion >= 9) {
+        lookbehind = state.eat(0x3C /* < */);
+      }
+      if (state.eat(0x3D /* = */) || state.eat(0x21 /* ! */)) {
+        this.regexp_disjunction(state);
+        if (!state.eat(0x29 /* ) */)) {
+          state.raise("Unterminated group");
+        }
+        state.lastAssertionIsQuantifiable = !lookbehind;
+        return true
+      }
+    }
+
+    state.pos = start;
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-Quantifier
+  pp$1.regexp_eatQuantifier = function(state, noError) {
+    if ( noError === void 0 ) noError = false;
+
+    if (this.regexp_eatQuantifierPrefix(state, noError)) {
+      state.eat(0x3F /* ? */);
+      return true
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-QuantifierPrefix
+  pp$1.regexp_eatQuantifierPrefix = function(state, noError) {
+    return (
+      state.eat(0x2A /* * */) ||
+      state.eat(0x2B /* + */) ||
+      state.eat(0x3F /* ? */) ||
+      this.regexp_eatBracedQuantifier(state, noError)
+    )
+  };
+  pp$1.regexp_eatBracedQuantifier = function(state, noError) {
+    var start = state.pos;
+    if (state.eat(0x7B /* { */)) {
+      var min = 0, max = -1;
+      if (this.regexp_eatDecimalDigits(state)) {
+        min = state.lastIntValue;
+        if (state.eat(0x2C /* , */) && this.regexp_eatDecimalDigits(state)) {
+          max = state.lastIntValue;
+        }
+        if (state.eat(0x7D /* } */)) {
+          // SyntaxError in https://www.ecma-international.org/ecma-262/8.0/#sec-term
+          if (max !== -1 && max < min && !noError) {
+            state.raise("numbers out of order in {} quantifier");
+          }
+          return true
+        }
+      }
+      if (state.switchU && !noError) {
+        state.raise("Incomplete quantifier");
+      }
+      state.pos = start;
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-Atom
+  pp$1.regexp_eatAtom = function(state) {
+    return (
+      this.regexp_eatPatternCharacters(state) ||
+      state.eat(0x2E /* . */) ||
+      this.regexp_eatReverseSolidusAtomEscape(state) ||
+      this.regexp_eatCharacterClass(state) ||
+      this.regexp_eatUncapturingGroup(state) ||
+      this.regexp_eatCapturingGroup(state)
+    )
+  };
+  pp$1.regexp_eatReverseSolidusAtomEscape = function(state) {
+    var start = state.pos;
+    if (state.eat(0x5C /* \ */)) {
+      if (this.regexp_eatAtomEscape(state)) {
+        return true
+      }
+      state.pos = start;
+    }
+    return false
+  };
+  pp$1.regexp_eatUncapturingGroup = function(state) {
+    var start = state.pos;
+    if (state.eat(0x28 /* ( */)) {
+      if (state.eat(0x3F /* ? */)) {
+        if (this.options.ecmaVersion >= 16) {
+          var addModifiers = this.regexp_eatModifiers(state);
+          var hasHyphen = state.eat(0x2D /* - */);
+          if (addModifiers || hasHyphen) {
+            for (var i = 0; i < addModifiers.length; i++) {
+              var modifier = addModifiers.charAt(i);
+              if (addModifiers.indexOf(modifier, i + 1) > -1) {
+                state.raise("Duplicate regular expression modifiers");
+              }
+            }
+            if (hasHyphen) {
+              var removeModifiers = this.regexp_eatModifiers(state);
+              if (!addModifiers && !removeModifiers && state.current() === 0x3A /* : */) {
+                state.raise("Invalid regular expression modifiers");
+              }
+              for (var i$1 = 0; i$1 < removeModifiers.length; i$1++) {
+                var modifier$1 = removeModifiers.charAt(i$1);
+                if (
+                  removeModifiers.indexOf(modifier$1, i$1 + 1) > -1 ||
+                  addModifiers.indexOf(modifier$1) > -1
+                ) {
+                  state.raise("Duplicate regular expression modifiers");
+                }
+              }
+            }
+          }
+        }
+        if (state.eat(0x3A /* : */)) {
+          this.regexp_disjunction(state);
+          if (state.eat(0x29 /* ) */)) {
+            return true
+          }
+          state.raise("Unterminated group");
+        }
+      }
+      state.pos = start;
+    }
+    return false
+  };
+  pp$1.regexp_eatCapturingGroup = function(state) {
+    if (state.eat(0x28 /* ( */)) {
+      if (this.options.ecmaVersion >= 9) {
+        this.regexp_groupSpecifier(state);
+      } else if (state.current() === 0x3F /* ? */) {
+        state.raise("Invalid group");
+      }
+      this.regexp_disjunction(state);
+      if (state.eat(0x29 /* ) */)) {
+        state.numCapturingParens += 1;
+        return true
+      }
+      state.raise("Unterminated group");
+    }
+    return false
+  };
+  // RegularExpressionModifiers ::
+  //   [empty]
+  //   RegularExpressionModifiers RegularExpressionModifier
+  pp$1.regexp_eatModifiers = function(state) {
+    var modifiers = "";
+    var ch = 0;
+    while ((ch = state.current()) !== -1 && isRegularExpressionModifier(ch)) {
+      modifiers += codePointToString(ch);
+      state.advance();
+    }
+    return modifiers
+  };
+  // RegularExpressionModifier :: one of
+  //   `i` `m` `s`
+  function isRegularExpressionModifier(ch) {
+    return ch === 0x69 /* i */ || ch === 0x6d /* m */ || ch === 0x73 /* s */
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedAtom
+  pp$1.regexp_eatExtendedAtom = function(state) {
+    return (
+      state.eat(0x2E /* . */) ||
+      this.regexp_eatReverseSolidusAtomEscape(state) ||
+      this.regexp_eatCharacterClass(state) ||
+      this.regexp_eatUncapturingGroup(state) ||
+      this.regexp_eatCapturingGroup(state) ||
+      this.regexp_eatInvalidBracedQuantifier(state) ||
+      this.regexp_eatExtendedPatternCharacter(state)
+    )
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-InvalidBracedQuantifier
+  pp$1.regexp_eatInvalidBracedQuantifier = function(state) {
+    if (this.regexp_eatBracedQuantifier(state, true)) {
+      state.raise("Nothing to repeat");
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-SyntaxCharacter
+  pp$1.regexp_eatSyntaxCharacter = function(state) {
+    var ch = state.current();
+    if (isSyntaxCharacter(ch)) {
+      state.lastIntValue = ch;
+      state.advance();
+      return true
+    }
+    return false
+  };
+  function isSyntaxCharacter(ch) {
+    return (
+      ch === 0x24 /* $ */ ||
+      ch >= 0x28 /* ( */ && ch <= 0x2B /* + */ ||
+      ch === 0x2E /* . */ ||
+      ch === 0x3F /* ? */ ||
+      ch >= 0x5B /* [ */ && ch <= 0x5E /* ^ */ ||
+      ch >= 0x7B /* { */ && ch <= 0x7D /* } */
+    )
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-PatternCharacter
+  // But eat eager.
+  pp$1.regexp_eatPatternCharacters = function(state) {
+    var start = state.pos;
+    var ch = 0;
+    while ((ch = state.current()) !== -1 && !isSyntaxCharacter(ch)) {
+      state.advance();
+    }
+    return state.pos !== start
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ExtendedPatternCharacter
+  pp$1.regexp_eatExtendedPatternCharacter = function(state) {
+    var ch = state.current();
+    if (
+      ch !== -1 &&
+      ch !== 0x24 /* $ */ &&
+      !(ch >= 0x28 /* ( */ && ch <= 0x2B /* + */) &&
+      ch !== 0x2E /* . */ &&
+      ch !== 0x3F /* ? */ &&
+      ch !== 0x5B /* [ */ &&
+      ch !== 0x5E /* ^ */ &&
+      ch !== 0x7C /* | */
+    ) {
+      state.advance();
+      return true
+    }
+    return false
+  };
+
+  // GroupSpecifier ::
+  //   [empty]
+  //   `?` GroupName
+  pp$1.regexp_groupSpecifier = function(state) {
+    if (state.eat(0x3F /* ? */)) {
+      if (!this.regexp_eatGroupName(state)) { state.raise("Invalid group"); }
+      var trackDisjunction = this.options.ecmaVersion >= 16;
+      var known = state.groupNames[state.lastStringValue];
+      if (known) {
+        if (trackDisjunction) {
+          for (var i = 0, list = known; i < list.length; i += 1) {
+            var altID = list[i];
+
+            if (!altID.separatedFrom(state.branchID))
+              { state.raise("Duplicate capture group name"); }
+          }
+        } else {
+          state.raise("Duplicate capture group name");
+        }
+      }
+      if (trackDisjunction) {
+        (known || (state.groupNames[state.lastStringValue] = [])).push(state.branchID);
+      } else {
+        state.groupNames[state.lastStringValue] = true;
+      }
+    }
+  };
+
+  // GroupName ::
+  //   `<` RegExpIdentifierName `>`
+  // Note: this updates `state.lastStringValue` property with the eaten name.
+  pp$1.regexp_eatGroupName = function(state) {
+    state.lastStringValue = "";
+    if (state.eat(0x3C /* < */)) {
+      if (this.regexp_eatRegExpIdentifierName(state) && state.eat(0x3E /* > */)) {
+        return true
+      }
+      state.raise("Invalid capture group name");
+    }
+    return false
+  };
+
+  // RegExpIdentifierName ::
+  //   RegExpIdentifierStart
+  //   RegExpIdentifierName RegExpIdentifierPart
+  // Note: this updates `state.lastStringValue` property with the eaten name.
+  pp$1.regexp_eatRegExpIdentifierName = function(state) {
+    state.lastStringValue = "";
+    if (this.regexp_eatRegExpIdentifierStart(state)) {
+      state.lastStringValue += codePointToString(state.lastIntValue);
+      while (this.regexp_eatRegExpIdentifierPart(state)) {
+        state.lastStringValue += codePointToString(state.lastIntValue);
+      }
+      return true
+    }
+    return false
+  };
+
+  // RegExpIdentifierStart ::
+  //   UnicodeIDStart
+  //   `$`
+  //   `_`
+  //   `\` RegExpUnicodeEscapeSequence[+U]
+  pp$1.regexp_eatRegExpIdentifierStart = function(state) {
+    var start = state.pos;
+    var forceU = this.options.ecmaVersion >= 11;
+    var ch = state.current(forceU);
+    state.advance(forceU);
+
+    if (ch === 0x5C /* \ */ && this.regexp_eatRegExpUnicodeEscapeSequence(state, forceU)) {
+      ch = state.lastIntValue;
+    }
+    if (isRegExpIdentifierStart(ch)) {
+      state.lastIntValue = ch;
+      return true
+    }
+
+    state.pos = start;
+    return false
+  };
+  function isRegExpIdentifierStart(ch) {
+    return isIdentifierStart(ch, true) || ch === 0x24 /* $ */ || ch === 0x5F /* _ */
+  }
+
+  // RegExpIdentifierPart ::
+  //   UnicodeIDContinue
+  //   `$`
+  //   `_`
+  //   `\` RegExpUnicodeEscapeSequence[+U]
+  //   <ZWNJ>
+  //   <ZWJ>
+  pp$1.regexp_eatRegExpIdentifierPart = function(state) {
+    var start = state.pos;
+    var forceU = this.options.ecmaVersion >= 11;
+    var ch = state.current(forceU);
+    state.advance(forceU);
+
+    if (ch === 0x5C /* \ */ && this.regexp_eatRegExpUnicodeEscapeSequence(state, forceU)) {
+      ch = state.lastIntValue;
+    }
+    if (isRegExpIdentifierPart(ch)) {
+      state.lastIntValue = ch;
+      return true
+    }
+
+    state.pos = start;
+    return false
+  };
+  function isRegExpIdentifierPart(ch) {
+    return isIdentifierChar(ch, true) || ch === 0x24 /* $ */ || ch === 0x5F /* _ */ || ch === 0x200C /* <ZWNJ> */ || ch === 0x200D /* <ZWJ> */
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-AtomEscape
+  pp$1.regexp_eatAtomEscape = function(state) {
+    if (
+      this.regexp_eatBackReference(state) ||
+      this.regexp_eatCharacterClassEscape(state) ||
+      this.regexp_eatCharacterEscape(state) ||
+      (state.switchN && this.regexp_eatKGroupName(state))
+    ) {
+      return true
+    }
+    if (state.switchU) {
+      // Make the same message as V8.
+      if (state.current() === 0x63 /* c */) {
+        state.raise("Invalid unicode escape");
+      }
+      state.raise("Invalid escape");
+    }
+    return false
+  };
+  pp$1.regexp_eatBackReference = function(state) {
+    var start = state.pos;
+    if (this.regexp_eatDecimalEscape(state)) {
+      var n = state.lastIntValue;
+      if (state.switchU) {
+        // For SyntaxError in https://www.ecma-international.org/ecma-262/8.0/#sec-atomescape
+        if (n > state.maxBackReference) {
+          state.maxBackReference = n;
+        }
+        return true
+      }
+      if (n <= state.numCapturingParens) {
+        return true
+      }
+      state.pos = start;
+    }
+    return false
+  };
+  pp$1.regexp_eatKGroupName = function(state) {
+    if (state.eat(0x6B /* k */)) {
+      if (this.regexp_eatGroupName(state)) {
+        state.backReferenceNames.push(state.lastStringValue);
+        return true
+      }
+      state.raise("Invalid named reference");
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-CharacterEscape
+  pp$1.regexp_eatCharacterEscape = function(state) {
+    return (
+      this.regexp_eatControlEscape(state) ||
+      this.regexp_eatCControlLetter(state) ||
+      this.regexp_eatZero(state) ||
+      this.regexp_eatHexEscapeSequence(state) ||
+      this.regexp_eatRegExpUnicodeEscapeSequence(state, false) ||
+      (!state.switchU && this.regexp_eatLegacyOctalEscapeSequence(state)) ||
+      this.regexp_eatIdentityEscape(state)
+    )
+  };
+  pp$1.regexp_eatCControlLetter = function(state) {
+    var start = state.pos;
+    if (state.eat(0x63 /* c */)) {
+      if (this.regexp_eatControlLetter(state)) {
+        return true
+      }
+      state.pos = start;
+    }
+    return false
+  };
+  pp$1.regexp_eatZero = function(state) {
+    if (state.current() === 0x30 /* 0 */ && !isDecimalDigit(state.lookahead())) {
+      state.lastIntValue = 0;
+      state.advance();
+      return true
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-ControlEscape
+  pp$1.regexp_eatControlEscape = function(state) {
+    var ch = state.current();
+    if (ch === 0x74 /* t */) {
+      state.lastIntValue = 0x09; /* \t */
+      state.advance();
+      return true
+    }
+    if (ch === 0x6E /* n */) {
+      state.lastIntValue = 0x0A; /* \n */
+      state.advance();
+      return true
+    }
+    if (ch === 0x76 /* v */) {
+      state.lastIntValue = 0x0B; /* \v */
+      state.advance();
+      return true
+    }
+    if (ch === 0x66 /* f */) {
+      state.lastIntValue = 0x0C; /* \f */
+      state.advance();
+      return true
+    }
+    if (ch === 0x72 /* r */) {
+      state.lastIntValue = 0x0D; /* \r */
+      state.advance();
+      return true
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-ControlLetter
+  pp$1.regexp_eatControlLetter = function(state) {
+    var ch = state.current();
+    if (isControlLetter(ch)) {
+      state.lastIntValue = ch % 0x20;
+      state.advance();
+      return true
+    }
+    return false
+  };
+  function isControlLetter(ch) {
+    return (
+      (ch >= 0x41 /* A */ && ch <= 0x5A /* Z */) ||
+      (ch >= 0x61 /* a */ && ch <= 0x7A /* z */)
+    )
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-RegExpUnicodeEscapeSequence
+  pp$1.regexp_eatRegExpUnicodeEscapeSequence = function(state, forceU) {
+    if ( forceU === void 0 ) forceU = false;
+
+    var start = state.pos;
+    var switchU = forceU || state.switchU;
+
+    if (state.eat(0x75 /* u */)) {
+      if (this.regexp_eatFixedHexDigits(state, 4)) {
+        var lead = state.lastIntValue;
+        if (switchU && lead >= 0xD800 && lead <= 0xDBFF) {
+          var leadSurrogateEnd = state.pos;
+          if (state.eat(0x5C /* \ */) && state.eat(0x75 /* u */) && this.regexp_eatFixedHexDigits(state, 4)) {
+            var trail = state.lastIntValue;
+            if (trail >= 0xDC00 && trail <= 0xDFFF) {
+              state.lastIntValue = (lead - 0xD800) * 0x400 + (trail - 0xDC00) + 0x10000;
+              return true
+            }
+          }
+          state.pos = leadSurrogateEnd;
+          state.lastIntValue = lead;
+        }
+        return true
+      }
+      if (
+        switchU &&
+        state.eat(0x7B /* { */) &&
+        this.regexp_eatHexDigits(state) &&
+        state.eat(0x7D /* } */) &&
+        isValidUnicode(state.lastIntValue)
+      ) {
+        return true
+      }
+      if (switchU) {
+        state.raise("Invalid unicode escape");
+      }
+      state.pos = start;
+    }
+
+    return false
+  };
+  function isValidUnicode(ch) {
+    return ch >= 0 && ch <= 0x10FFFF
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-IdentityEscape
+  pp$1.regexp_eatIdentityEscape = function(state) {
+    if (state.switchU) {
+      if (this.regexp_eatSyntaxCharacter(state)) {
+        return true
+      }
+      if (state.eat(0x2F /* / */)) {
+        state.lastIntValue = 0x2F; /* / */
+        return true
+      }
+      return false
+    }
+
+    var ch = state.current();
+    if (ch !== 0x63 /* c */ && (!state.switchN || ch !== 0x6B /* k */)) {
+      state.lastIntValue = ch;
+      state.advance();
+      return true
+    }
+
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalEscape
+  pp$1.regexp_eatDecimalEscape = function(state) {
+    state.lastIntValue = 0;
+    var ch = state.current();
+    if (ch >= 0x31 /* 1 */ && ch <= 0x39 /* 9 */) {
+      do {
+        state.lastIntValue = 10 * state.lastIntValue + (ch - 0x30 /* 0 */);
+        state.advance();
+      } while ((ch = state.current()) >= 0x30 /* 0 */ && ch <= 0x39 /* 9 */)
+      return true
+    }
+    return false
+  };
+
+  // Return values used by character set parsing methods, needed to
+  // forbid negation of sets that can match strings.
+  var CharSetNone = 0; // Nothing parsed
+  var CharSetOk = 1; // Construct parsed, cannot contain strings
+  var CharSetString = 2; // Construct parsed, can contain strings
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClassEscape
+  pp$1.regexp_eatCharacterClassEscape = function(state) {
+    var ch = state.current();
+
+    if (isCharacterClassEscape(ch)) {
+      state.lastIntValue = -1;
+      state.advance();
+      return CharSetOk
+    }
+
+    var negate = false;
+    if (
+      state.switchU &&
+      this.options.ecmaVersion >= 9 &&
+      ((negate = ch === 0x50 /* P */) || ch === 0x70 /* p */)
+    ) {
+      state.lastIntValue = -1;
+      state.advance();
+      var result;
+      if (
+        state.eat(0x7B /* { */) &&
+        (result = this.regexp_eatUnicodePropertyValueExpression(state)) &&
+        state.eat(0x7D /* } */)
+      ) {
+        if (negate && result === CharSetString) { state.raise("Invalid property name"); }
+        return result
+      }
+      state.raise("Invalid property name");
+    }
+
+    return CharSetNone
+  };
+
+  function isCharacterClassEscape(ch) {
+    return (
+      ch === 0x64 /* d */ ||
+      ch === 0x44 /* D */ ||
+      ch === 0x73 /* s */ ||
+      ch === 0x53 /* S */ ||
+      ch === 0x77 /* w */ ||
+      ch === 0x57 /* W */
+    )
+  }
+
+  // UnicodePropertyValueExpression ::
+  //   UnicodePropertyName `=` UnicodePropertyValue
+  //   LoneUnicodePropertyNameOrValue
+  pp$1.regexp_eatUnicodePropertyValueExpression = function(state) {
+    var start = state.pos;
+
+    // UnicodePropertyName `=` UnicodePropertyValue
+    if (this.regexp_eatUnicodePropertyName(state) && state.eat(0x3D /* = */)) {
+      var name = state.lastStringValue;
+      if (this.regexp_eatUnicodePropertyValue(state)) {
+        var value = state.lastStringValue;
+        this.regexp_validateUnicodePropertyNameAndValue(state, name, value);
+        return CharSetOk
+      }
+    }
+    state.pos = start;
+
+    // LoneUnicodePropertyNameOrValue
+    if (this.regexp_eatLoneUnicodePropertyNameOrValue(state)) {
+      var nameOrValue = state.lastStringValue;
+      return this.regexp_validateUnicodePropertyNameOrValue(state, nameOrValue)
+    }
+    return CharSetNone
+  };
+
+  pp$1.regexp_validateUnicodePropertyNameAndValue = function(state, name, value) {
+    if (!hasOwn(state.unicodeProperties.nonBinary, name))
+      { state.raise("Invalid property name"); }
+    if (!state.unicodeProperties.nonBinary[name].test(value))
+      { state.raise("Invalid property value"); }
+  };
+
+  pp$1.regexp_validateUnicodePropertyNameOrValue = function(state, nameOrValue) {
+    if (state.unicodeProperties.binary.test(nameOrValue)) { return CharSetOk }
+    if (state.switchV && state.unicodeProperties.binaryOfStrings.test(nameOrValue)) { return CharSetString }
+    state.raise("Invalid property name");
+  };
+
+  // UnicodePropertyName ::
+  //   UnicodePropertyNameCharacters
+  pp$1.regexp_eatUnicodePropertyName = function(state) {
+    var ch = 0;
+    state.lastStringValue = "";
+    while (isUnicodePropertyNameCharacter(ch = state.current())) {
+      state.lastStringValue += codePointToString(ch);
+      state.advance();
+    }
+    return state.lastStringValue !== ""
+  };
+
+  function isUnicodePropertyNameCharacter(ch) {
+    return isControlLetter(ch) || ch === 0x5F /* _ */
+  }
+
+  // UnicodePropertyValue ::
+  //   UnicodePropertyValueCharacters
+  pp$1.regexp_eatUnicodePropertyValue = function(state) {
+    var ch = 0;
+    state.lastStringValue = "";
+    while (isUnicodePropertyValueCharacter(ch = state.current())) {
+      state.lastStringValue += codePointToString(ch);
+      state.advance();
+    }
+    return state.lastStringValue !== ""
+  };
+  function isUnicodePropertyValueCharacter(ch) {
+    return isUnicodePropertyNameCharacter(ch) || isDecimalDigit(ch)
+  }
+
+  // LoneUnicodePropertyNameOrValue ::
+  //   UnicodePropertyValueCharacters
+  pp$1.regexp_eatLoneUnicodePropertyNameOrValue = function(state) {
+    return this.regexp_eatUnicodePropertyValue(state)
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-CharacterClass
+  pp$1.regexp_eatCharacterClass = function(state) {
+    if (state.eat(0x5B /* [ */)) {
+      var negate = state.eat(0x5E /* ^ */);
+      var result = this.regexp_classContents(state);
+      if (!state.eat(0x5D /* ] */))
+        { state.raise("Unterminated character class"); }
+      if (negate && result === CharSetString)
+        { state.raise("Negated character class may contain strings"); }
+      return true
+    }
+    return false
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassContents
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-ClassRanges
+  pp$1.regexp_classContents = function(state) {
+    if (state.current() === 0x5D /* ] */) { return CharSetOk }
+    if (state.switchV) { return this.regexp_classSetExpression(state) }
+    this.regexp_nonEmptyClassRanges(state);
+    return CharSetOk
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRanges
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-NonemptyClassRangesNoDash
+  pp$1.regexp_nonEmptyClassRanges = function(state) {
+    while (this.regexp_eatClassAtom(state)) {
+      var left = state.lastIntValue;
+      if (state.eat(0x2D /* - */) && this.regexp_eatClassAtom(state)) {
+        var right = state.lastIntValue;
+        if (state.switchU && (left === -1 || right === -1)) {
+          state.raise("Invalid character class");
+        }
+        if (left !== -1 && right !== -1 && left > right) {
+          state.raise("Range out of order in character class");
+        }
+      }
+    }
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtom
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-ClassAtomNoDash
+  pp$1.regexp_eatClassAtom = function(state) {
+    var start = state.pos;
+
+    if (state.eat(0x5C /* \ */)) {
+      if (this.regexp_eatClassEscape(state)) {
+        return true
+      }
+      if (state.switchU) {
+        // Make the same message as V8.
+        var ch$1 = state.current();
+        if (ch$1 === 0x63 /* c */ || isOctalDigit(ch$1)) {
+          state.raise("Invalid class escape");
+        }
+        state.raise("Invalid escape");
+      }
+      state.pos = start;
+    }
+
+    var ch = state.current();
+    if (ch !== 0x5D /* ] */) {
+      state.lastIntValue = ch;
+      state.advance();
+      return true
+    }
+
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassEscape
+  pp$1.regexp_eatClassEscape = function(state) {
+    var start = state.pos;
+
+    if (state.eat(0x62 /* b */)) {
+      state.lastIntValue = 0x08; /* <BS> */
+      return true
+    }
+
+    if (state.switchU && state.eat(0x2D /* - */)) {
+      state.lastIntValue = 0x2D; /* - */
+      return true
+    }
+
+    if (!state.switchU && state.eat(0x63 /* c */)) {
+      if (this.regexp_eatClassControlLetter(state)) {
+        return true
+      }
+      state.pos = start;
+    }
+
+    return (
+      this.regexp_eatCharacterClassEscape(state) ||
+      this.regexp_eatCharacterEscape(state)
+    )
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassSetExpression
+  // https://tc39.es/ecma262/#prod-ClassUnion
+  // https://tc39.es/ecma262/#prod-ClassIntersection
+  // https://tc39.es/ecma262/#prod-ClassSubtraction
+  pp$1.regexp_classSetExpression = function(state) {
+    var result = CharSetOk, subResult;
+    if (this.regexp_eatClassSetRange(state)) ; else if (subResult = this.regexp_eatClassSetOperand(state)) {
+      if (subResult === CharSetString) { result = CharSetString; }
+      // https://tc39.es/ecma262/#prod-ClassIntersection
+      var start = state.pos;
+      while (state.eatChars([0x26, 0x26] /* && */)) {
+        if (
+          state.current() !== 0x26 /* & */ &&
+          (subResult = this.regexp_eatClassSetOperand(state))
+        ) {
+          if (subResult !== CharSetString) { result = CharSetOk; }
+          continue
+        }
+        state.raise("Invalid character in character class");
+      }
+      if (start !== state.pos) { return result }
+      // https://tc39.es/ecma262/#prod-ClassSubtraction
+      while (state.eatChars([0x2D, 0x2D] /* -- */)) {
+        if (this.regexp_eatClassSetOperand(state)) { continue }
+        state.raise("Invalid character in character class");
+      }
+      if (start !== state.pos) { return result }
+    } else {
+      state.raise("Invalid character in character class");
+    }
+    // https://tc39.es/ecma262/#prod-ClassUnion
+    for (;;) {
+      if (this.regexp_eatClassSetRange(state)) { continue }
+      subResult = this.regexp_eatClassSetOperand(state);
+      if (!subResult) { return result }
+      if (subResult === CharSetString) { result = CharSetString; }
+    }
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassSetRange
+  pp$1.regexp_eatClassSetRange = function(state) {
+    var start = state.pos;
+    if (this.regexp_eatClassSetCharacter(state)) {
+      var left = state.lastIntValue;
+      if (state.eat(0x2D /* - */) && this.regexp_eatClassSetCharacter(state)) {
+        var right = state.lastIntValue;
+        if (left !== -1 && right !== -1 && left > right) {
+          state.raise("Range out of order in character class");
+        }
+        return true
+      }
+      state.pos = start;
+    }
+    return false
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassSetOperand
+  pp$1.regexp_eatClassSetOperand = function(state) {
+    if (this.regexp_eatClassSetCharacter(state)) { return CharSetOk }
+    return this.regexp_eatClassStringDisjunction(state) || this.regexp_eatNestedClass(state)
+  };
+
+  // https://tc39.es/ecma262/#prod-NestedClass
+  pp$1.regexp_eatNestedClass = function(state) {
+    var start = state.pos;
+    if (state.eat(0x5B /* [ */)) {
+      var negate = state.eat(0x5E /* ^ */);
+      var result = this.regexp_classContents(state);
+      if (state.eat(0x5D /* ] */)) {
+        if (negate && result === CharSetString) {
+          state.raise("Negated character class may contain strings");
+        }
+        return result
+      }
+      state.pos = start;
+    }
+    if (state.eat(0x5C /* \ */)) {
+      var result$1 = this.regexp_eatCharacterClassEscape(state);
+      if (result$1) {
+        return result$1
+      }
+      state.pos = start;
+    }
+    return null
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassStringDisjunction
+  pp$1.regexp_eatClassStringDisjunction = function(state) {
+    var start = state.pos;
+    if (state.eatChars([0x5C, 0x71] /* \q */)) {
+      if (state.eat(0x7B /* { */)) {
+        var result = this.regexp_classStringDisjunctionContents(state);
+        if (state.eat(0x7D /* } */)) {
+          return result
+        }
+      } else {
+        // Make the same message as V8.
+        state.raise("Invalid escape");
+      }
+      state.pos = start;
+    }
+    return null
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassStringDisjunctionContents
+  pp$1.regexp_classStringDisjunctionContents = function(state) {
+    var result = this.regexp_classString(state);
+    while (state.eat(0x7C /* | */)) {
+      if (this.regexp_classString(state) === CharSetString) { result = CharSetString; }
+    }
+    return result
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassString
+  // https://tc39.es/ecma262/#prod-NonEmptyClassString
+  pp$1.regexp_classString = function(state) {
+    var count = 0;
+    while (this.regexp_eatClassSetCharacter(state)) { count++; }
+    return count === 1 ? CharSetOk : CharSetString
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassSetCharacter
+  pp$1.regexp_eatClassSetCharacter = function(state) {
+    var start = state.pos;
+    if (state.eat(0x5C /* \ */)) {
+      if (
+        this.regexp_eatCharacterEscape(state) ||
+        this.regexp_eatClassSetReservedPunctuator(state)
+      ) {
+        return true
+      }
+      if (state.eat(0x62 /* b */)) {
+        state.lastIntValue = 0x08; /* <BS> */
+        return true
+      }
+      state.pos = start;
+      return false
+    }
+    var ch = state.current();
+    if (ch < 0 || ch === state.lookahead() && isClassSetReservedDoublePunctuatorCharacter(ch)) { return false }
+    if (isClassSetSyntaxCharacter(ch)) { return false }
+    state.advance();
+    state.lastIntValue = ch;
+    return true
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassSetReservedDoublePunctuator
+  function isClassSetReservedDoublePunctuatorCharacter(ch) {
+    return (
+      ch === 0x21 /* ! */ ||
+      ch >= 0x23 /* # */ && ch <= 0x26 /* & */ ||
+      ch >= 0x2A /* * */ && ch <= 0x2C /* , */ ||
+      ch === 0x2E /* . */ ||
+      ch >= 0x3A /* : */ && ch <= 0x40 /* @ */ ||
+      ch === 0x5E /* ^ */ ||
+      ch === 0x60 /* ` */ ||
+      ch === 0x7E /* ~ */
+    )
+  }
+
+  // https://tc39.es/ecma262/#prod-ClassSetSyntaxCharacter
+  function isClassSetSyntaxCharacter(ch) {
+    return (
+      ch === 0x28 /* ( */ ||
+      ch === 0x29 /* ) */ ||
+      ch === 0x2D /* - */ ||
+      ch === 0x2F /* / */ ||
+      ch >= 0x5B /* [ */ && ch <= 0x5D /* ] */ ||
+      ch >= 0x7B /* { */ && ch <= 0x7D /* } */
+    )
+  }
+
+  // https://tc39.es/ecma262/#prod-ClassSetReservedPunctuator
+  pp$1.regexp_eatClassSetReservedPunctuator = function(state) {
+    var ch = state.current();
+    if (isClassSetReservedPunctuator(ch)) {
+      state.lastIntValue = ch;
+      state.advance();
+      return true
+    }
+    return false
+  };
+
+  // https://tc39.es/ecma262/#prod-ClassSetReservedPunctuator
+  function isClassSetReservedPunctuator(ch) {
+    return (
+      ch === 0x21 /* ! */ ||
+      ch === 0x23 /* # */ ||
+      ch === 0x25 /* % */ ||
+      ch === 0x26 /* & */ ||
+      ch === 0x2C /* , */ ||
+      ch === 0x2D /* - */ ||
+      ch >= 0x3A /* : */ && ch <= 0x3E /* > */ ||
+      ch === 0x40 /* @ */ ||
+      ch === 0x60 /* ` */ ||
+      ch === 0x7E /* ~ */
+    )
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-ClassControlLetter
+  pp$1.regexp_eatClassControlLetter = function(state) {
+    var ch = state.current();
+    if (isDecimalDigit(ch) || ch === 0x5F /* _ */) {
+      state.lastIntValue = ch % 0x20;
+      state.advance();
+      return true
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-HexEscapeSequence
+  pp$1.regexp_eatHexEscapeSequence = function(state) {
+    var start = state.pos;
+    if (state.eat(0x78 /* x */)) {
+      if (this.regexp_eatFixedHexDigits(state, 2)) {
+        return true
+      }
+      if (state.switchU) {
+        state.raise("Invalid escape");
+      }
+      state.pos = start;
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-DecimalDigits
+  pp$1.regexp_eatDecimalDigits = function(state) {
+    var start = state.pos;
+    var ch = 0;
+    state.lastIntValue = 0;
+    while (isDecimalDigit(ch = state.current())) {
+      state.lastIntValue = 10 * state.lastIntValue + (ch - 0x30 /* 0 */);
+      state.advance();
+    }
+    return state.pos !== start
+  };
+  function isDecimalDigit(ch) {
+    return ch >= 0x30 /* 0 */ && ch <= 0x39 /* 9 */
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigits
+  pp$1.regexp_eatHexDigits = function(state) {
+    var start = state.pos;
+    var ch = 0;
+    state.lastIntValue = 0;
+    while (isHexDigit(ch = state.current())) {
+      state.lastIntValue = 16 * state.lastIntValue + hexToInt(ch);
+      state.advance();
+    }
+    return state.pos !== start
+  };
+  function isHexDigit(ch) {
+    return (
+      (ch >= 0x30 /* 0 */ && ch <= 0x39 /* 9 */) ||
+      (ch >= 0x41 /* A */ && ch <= 0x46 /* F */) ||
+      (ch >= 0x61 /* a */ && ch <= 0x66 /* f */)
+    )
+  }
+  function hexToInt(ch) {
+    if (ch >= 0x41 /* A */ && ch <= 0x46 /* F */) {
+      return 10 + (ch - 0x41 /* A */)
+    }
+    if (ch >= 0x61 /* a */ && ch <= 0x66 /* f */) {
+      return 10 + (ch - 0x61 /* a */)
+    }
+    return ch - 0x30 /* 0 */
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-annexB-LegacyOctalEscapeSequence
+  // Allows only 0-377(octal) i.e. 0-255(decimal).
+  pp$1.regexp_eatLegacyOctalEscapeSequence = function(state) {
+    if (this.regexp_eatOctalDigit(state)) {
+      var n1 = state.lastIntValue;
+      if (this.regexp_eatOctalDigit(state)) {
+        var n2 = state.lastIntValue;
+        if (n1 <= 3 && this.regexp_eatOctalDigit(state)) {
+          state.lastIntValue = n1 * 64 + n2 * 8 + state.lastIntValue;
+        } else {
+          state.lastIntValue = n1 * 8 + n2;
+        }
+      } else {
+        state.lastIntValue = n1;
+      }
+      return true
+    }
+    return false
+  };
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-OctalDigit
+  pp$1.regexp_eatOctalDigit = function(state) {
+    var ch = state.current();
+    if (isOctalDigit(ch)) {
+      state.lastIntValue = ch - 0x30; /* 0 */
+      state.advance();
+      return true
+    }
+    state.lastIntValue = 0;
+    return false
+  };
+  function isOctalDigit(ch) {
+    return ch >= 0x30 /* 0 */ && ch <= 0x37 /* 7 */
+  }
+
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-Hex4Digits
+  // https://www.ecma-international.org/ecma-262/8.0/#prod-HexDigit
+  // And HexDigit HexDigit in https://www.ecma-international.org/ecma-262/8.0/#prod-HexEscapeSequence
+  pp$1.regexp_eatFixedHexDigits = function(state, length) {
+    var start = state.pos;
+    state.lastIntValue = 0;
+    for (var i = 0; i < length; ++i) {
+      var ch = state.current();
+      if (!isHexDigit(ch)) {
+        state.pos = start;
+        return false
+      }
+      state.lastIntValue = 16 * state.lastIntValue + hexToInt(ch);
+      state.advance();
+    }
+    return true
+  };
+
+  // Object type used to represent tokens. Note that normally, tokens
+  // simply exist as properties on the parser object. This is only
+  // used for the onToken callback and the external tokenizer.
+
+  var Token = function Token(p) {
+    this.type = p.type;
+    this.value = p.value;
+    this.start = p.start;
+    this.end = p.end;
+    if (p.options.locations)
+      { this.loc = new SourceLocation(p, p.startLoc, p.endLoc); }
+    if (p.options.ranges)
+      { this.range = [p.start, p.end]; }
+  };
+
+  // ## Tokenizer
+
+  var pp = Parser.prototype;
+
+  // Move to the next token
+
+  pp.next = function(ignoreEscapeSequenceInKeyword) {
+    if (!ignoreEscapeSequenceInKeyword && this.type.keyword && this.containsEsc)
+      { this.raiseRecoverable(this.start, "Escape sequence in keyword " + this.type.keyword); }
+    if (this.options.onToken)
+      { this.options.onToken(new Token(this)); }
+
+    this.lastTokEnd = this.end;
+    this.lastTokStart = this.start;
+    this.lastTokEndLoc = this.endLoc;
+    this.lastTokStartLoc = this.startLoc;
+    this.nextToken();
+  };
+
+  pp.getToken = function() {
+    this.next();
+    return new Token(this)
+  };
+
+  // If we're in an ES6 environment, make parsers iterable
+  if (typeof Symbol !== "undefined")
+    { pp[Symbol.iterator] = function() {
+      var this$1$1 = this;
+
+      return {
+        next: function () {
+          var token = this$1$1.getToken();
+          return {
+            done: token.type === types$1.eof,
+            value: token
+          }
+        }
+      }
+    }; }
+
+  // Toggle strict mode. Re-reads the next number or string to please
+  // pedantic tests (`"use strict"; 010;` should fail).
+
+  // Read a single token, updating the parser object's token-related
+  // properties.
+
+  pp.nextToken = function() {
+    var curContext = this.curContext();
+    if (!curContext || !curContext.preserveSpace) { this.skipSpace(); }
+
+    this.start = this.pos;
+    if (this.options.locations) { this.startLoc = this.curPosition(); }
+    if (this.pos >= this.input.length) { return this.finishToken(types$1.eof) }
+
+    if (curContext.override) { return curContext.override(this) }
+    else { this.readToken(this.fullCharCodeAtPos()); }
+  };
+
+  pp.readToken = function(code) {
+    // Identifier or keyword. '\uXXXX' sequences are allowed in
+    // identifiers, so '\' also dispatches to that.
+    if (isIdentifierStart(code, this.options.ecmaVersion >= 6) || code === 92 /* '\' */)
+      { return this.readWord() }
+
+    return this.getTokenFromCode(code)
+  };
+
+  pp.fullCharCodeAt = function(pos) {
+    var code = this.input.charCodeAt(pos);
+    if (code <= 0xd7ff || code >= 0xdc00) { return code }
+    var next = this.input.charCodeAt(pos + 1);
+    return next <= 0xdbff || next >= 0xe000 ? code : (code << 10) + next - 0x35fdc00
+  };
+
+  pp.fullCharCodeAtPos = function() {
+    return this.fullCharCodeAt(this.pos)
+  };
+
+  pp.skipBlockComment = function() {
+    var startLoc = this.options.onComment && this.curPosition();
+    var start = this.pos, end = this.input.indexOf("*/", this.pos += 2);
+    if (end === -1) { this.raise(this.pos - 2, "Unterminated comment"); }
+    this.pos = end + 2;
+    if (this.options.locations) {
+      for (var nextBreak = (void 0), pos = start; (nextBreak = nextLineBreak(this.input, pos, this.pos)) > -1;) {
+        ++this.curLine;
+        pos = this.lineStart = nextBreak;
+      }
+    }
+    if (this.options.onComment)
+      { this.options.onComment(true, this.input.slice(start + 2, end), start, this.pos,
+                             startLoc, this.curPosition()); }
+  };
+
+  pp.skipLineComment = function(startSkip) {
+    var start = this.pos;
+    var startLoc = this.options.onComment && this.curPosition();
+    var ch = this.input.charCodeAt(this.pos += startSkip);
+    while (this.pos < this.input.length && !isNewLine(ch)) {
+      ch = this.input.charCodeAt(++this.pos);
+    }
+    if (this.options.onComment)
+      { this.options.onComment(false, this.input.slice(start + startSkip, this.pos), start, this.pos,
+                             startLoc, this.curPosition()); }
+  };
+
+  // Called at the start of the parse and after every token. Skips
+  // whitespace and comments, and.
+
+  pp.skipSpace = function() {
+    loop: while (this.pos < this.input.length) {
+      var ch = this.input.charCodeAt(this.pos);
+      switch (ch) {
+      case 32: case 160: // ' '
+        ++this.pos;
+        break
+      case 13:
+        if (this.input.charCodeAt(this.pos + 1) === 10) {
+          ++this.pos;
+        }
+      case 10: case 8232: case 8233:
+        ++this.pos;
+        if (this.options.locations) {
+          ++this.curLine;
+          this.lineStart = this.pos;
+        }
+        break
+      case 47: // '/'
+        switch (this.input.charCodeAt(this.pos + 1)) {
+        case 42: // '*'
+          this.skipBlockComment();
+          break
+        case 47:
+          this.skipLineComment(2);
+          break
+        default:
+          break loop
+        }
+        break
+      default:
+        if (ch > 8 && ch < 14 || ch >= 5760 && nonASCIIwhitespace.test(String.fromCharCode(ch))) {
+          ++this.pos;
+        } else {
+          break loop
+        }
+      }
+    }
+  };
+
+  // Called at the end of every token. Sets `end`, `val`, and
+  // maintains `context` and `exprAllowed`, and skips the space after
+  // the token, so that the next one's `start` will point at the
+  // right position.
+
+  pp.finishToken = function(type, val) {
+    this.end = this.pos;
+    if (this.options.locations) { this.endLoc = this.curPosition(); }
+    var prevType = this.type;
+    this.type = type;
+    this.value = val;
+
+    this.updateContext(prevType);
+  };
+
+  // ### Token reading
+
+  // This is the function that is called to fetch the next token. It
+  // is somewhat obscure, because it works in character codes rather
+  // than characters, and because operator parsing has been inlined
+  // into it.
+  //
+  // All in the name of speed.
+  //
+  pp.readToken_dot = function() {
+    var next = this.input.charCodeAt(this.pos + 1);
+    if (next >= 48 && next <= 57) { return this.readNumber(true) }
+    var next2 = this.input.charCodeAt(this.pos + 2);
+    if (this.options.ecmaVersion >= 6 && next === 46 && next2 === 46) { // 46 = dot '.'
+      this.pos += 3;
+      return this.finishToken(types$1.ellipsis)
+    } else {
+      ++this.pos;
+      return this.finishToken(types$1.dot)
+    }
+  };
+
+  pp.readToken_slash = function() { // '/'
+    var next = this.input.charCodeAt(this.pos + 1);
+    if (this.exprAllowed) { ++this.pos; return this.readRegexp() }
+    if (next === 61) { return this.finishOp(types$1.assign, 2) }
+    return this.finishOp(types$1.slash, 1)
+  };
+
+  pp.readToken_mult_modulo_exp = function(code) { // '%*'
+    var next = this.input.charCodeAt(this.pos + 1);
+    var size = 1;
+    var tokentype = code === 42 ? types$1.star : types$1.modulo;
+
+    // exponentiation operator ** and **=
+    if (this.options.ecmaVersion >= 7 && code === 42 && next === 42) {
+      ++size;
+      tokentype = types$1.starstar;
+      next = this.input.charCodeAt(this.pos + 2);
+    }
+
+    if (next === 61) { return this.finishOp(types$1.assign, size + 1) }
+    return this.finishOp(tokentype, size)
+  };
+
+  pp.readToken_pipe_amp = function(code) { // '|&'
+    var next = this.input.charCodeAt(this.pos + 1);
+    if (next === code) {
+      if (this.options.ecmaVersion >= 12) {
+        var next2 = this.input.charCodeAt(this.pos + 2);
+        if (next2 === 61) { return this.finishOp(types$1.assign, 3) }
+      }
+      return this.finishOp(code === 124 ? types$1.logicalOR : types$1.logicalAND, 2)
+    }
+    if (next === 61) { return this.finishOp(types$1.assign, 2) }
+    return this.finishOp(code === 124 ? types$1.bitwiseOR : types$1.bitwiseAND, 1)
+  };
+
+  pp.readToken_caret = function() { // '^'
+    var next = this.input.charCodeAt(this.pos + 1);
+    if (next === 61) { return this.finishOp(types$1.assign, 2) }
+    return this.finishOp(types$1.bitwiseXOR, 1)
+  };
+
+  pp.readToken_plus_min = function(code) { // '+-'
+    var next = this.input.charCodeAt(this.pos + 1);
+    if (next === code) {
+      if (next === 45 && !this.inModule && this.input.charCodeAt(this.pos + 2) === 62 &&
+          (this.lastTokEnd === 0 || lineBreak.test(this.input.slice(this.lastTokEnd, this.pos)))) {
+        // A `-->` line comment
+        this.skipLineComment(3);
+        this.skipSpace();
+        return this.nextToken()
+      }
+      return this.finishOp(types$1.incDec, 2)
+    }
+    if (next === 61) { return this.finishOp(types$1.assign, 2) }
+    return this.finishOp(types$1.plusMin, 1)
+  };
+
+  pp.readToken_lt_gt = function(code) { // '<>'
+    var next = this.input.charCodeAt(this.pos + 1);
+    var size = 1;
+    if (next === code) {
+      size = code === 62 && this.input.charCodeAt(this.pos + 2) === 62 ? 3 : 2;
+      if (this.input.charCodeAt(this.pos + size) === 61) { return this.finishOp(types$1.assign, size + 1) }
+      return this.finishOp(types$1.bitShift, size)
+    }
+    if (next === 33 && code === 60 && !this.inModule && this.input.charCodeAt(this.pos + 2) === 45 &&
+        this.input.charCodeAt(this.pos + 3) === 45) {
+      // `<!--`, an XML-style comment that should be interpreted as a line comment
+      this.skipLineComment(4);
+      this.skipSpace();
+      return this.nextToken()
+    }
+    if (next === 61) { size = 2; }
+    return this.finishOp(types$1.relational, size)
+  };
+
+  pp.readToken_eq_excl = function(code) { // '=!'
+    var next = this.input.charCodeAt(this.pos + 1);
+    if (next === 61) { return this.finishOp(types$1.equality, this.input.charCodeAt(this.pos + 2) === 61 ? 3 : 2) }
+    if (code === 61 && next === 62 && this.options.ecmaVersion >= 6) { // '=>'
+      this.pos += 2;
+      return this.finishToken(types$1.arrow)
+    }
+    return this.finishOp(code === 61 ? types$1.eq : types$1.prefix, 1)
+  };
+
+  pp.readToken_question = function() { // '?'
+    var ecmaVersion = this.options.ecmaVersion;
+    if (ecmaVersion >= 11) {
+      var next = this.input.charCodeAt(this.pos + 1);
+      if (next === 46) {
+        var next2 = this.input.charCodeAt(this.pos + 2);
+        if (next2 < 48 || next2 > 57) { return this.finishOp(types$1.questionDot, 2) }
+      }
+      if (next === 63) {
+        if (ecmaVersion >= 12) {
+          var next2$1 = this.input.charCodeAt(this.pos + 2);
+          if (next2$1 === 61) { return this.finishOp(types$1.assign, 3) }
+        }
+        return this.finishOp(types$1.coalesce, 2)
+      }
+    }
+    return this.finishOp(types$1.question, 1)
+  };
+
+  pp.readToken_numberSign = function() { // '#'
+    var ecmaVersion = this.options.ecmaVersion;
+    var code = 35; // '#'
+    if (ecmaVersion >= 13) {
+      ++this.pos;
+      code = this.fullCharCodeAtPos();
+      if (isIdentifierStart(code, true) || code === 92 /* '\' */) {
+        return this.finishToken(types$1.privateId, this.readWord1())
+      }
+    }
+
+    this.raise(this.pos, "Unexpected character '" + codePointToString(code) + "'");
+  };
+
+  pp.getTokenFromCode = function(code) {
+    switch (code) {
+    // The interpretation of a dot depends on whether it is followed
+    // by a digit or another two dots.
+    case 46: // '.'
+      return this.readToken_dot()
+
+    // Punctuation tokens.
+    case 40: ++this.pos; return this.finishToken(types$1.parenL)
+    case 41: ++this.pos; return this.finishToken(types$1.parenR)
+    case 59: ++this.pos; return this.finishToken(types$1.semi)
+    case 44: ++this.pos; return this.finishToken(types$1.comma)
+    case 91: ++this.pos; return this.finishToken(types$1.bracketL)
+    case 93: ++this.pos; return this.finishToken(types$1.bracketR)
+    case 123: ++this.pos; return this.finishToken(types$1.braceL)
+    case 125: ++this.pos; return this.finishToken(types$1.braceR)
+    case 58: ++this.pos; return this.finishToken(types$1.colon)
+
+    case 96: // '`'
+      if (this.options.ecmaVersion < 6) { break }
+      ++this.pos;
+      return this.finishToken(types$1.backQuote)
+
+    case 48: // '0'
+      var next = this.input.charCodeAt(this.pos + 1);
+      if (next === 120 || next === 88) { return this.readRadixNumber(16) } // '0x', '0X' - hex number
+      if (this.options.ecmaVersion >= 6) {
+        if (next === 111 || next === 79) { return this.readRadixNumber(8) } // '0o', '0O' - octal number
+        if (next === 98 || next === 66) { return this.readRadixNumber(2) } // '0b', '0B' - binary number
+      }
+
+    // Anything else beginning with a digit is an integer, octal
+    // number, or float.
+    case 49: case 50: case 51: case 52: case 53: case 54: case 55: case 56: case 57: // 1-9
+      return this.readNumber(false)
+
+    // Quotes produce strings.
+    case 34: case 39: // '"', "'"
+      return this.readString(code)
+
+    // Operators are parsed inline in tiny state machines. '=' (61) is
+    // often referred to. `finishOp` simply skips the amount of
+    // characters it is given as second argument, and returns a token
+    // of the type given by its first argument.
+    case 47: // '/'
+      return this.readToken_slash()
+
+    case 37: case 42: // '%*'
+      return this.readToken_mult_modulo_exp(code)
+
+    case 124: case 38: // '|&'
+      return this.readToken_pipe_amp(code)
+
+    case 94: // '^'
+      return this.readToken_caret()
+
+    case 43: case 45: // '+-'
+      return this.readToken_plus_min(code)
+
+    case 60: case 62: // '<>'
+      return this.readToken_lt_gt(code)
+
+    case 61: case 33: // '=!'
+      return this.readToken_eq_excl(code)
+
+    case 63: // '?'
+      return this.readToken_question()
+
+    case 126: // '~'
+      return this.finishOp(types$1.prefix, 1)
+
+    case 35: // '#'
+      return this.readToken_numberSign()
+    }
+
+    this.raise(this.pos, "Unexpected character '" + codePointToString(code) + "'");
+  };
+
+  pp.finishOp = function(type, size) {
+    var str = this.input.slice(this.pos, this.pos + size);
+    this.pos += size;
+    return this.finishToken(type, str)
+  };
+
+  pp.readRegexp = function() {
+    var escaped, inClass, start = this.pos;
+    for (;;) {
+      if (this.pos >= this.input.length) { this.raise(start, "Unterminated regular expression"); }
+      var ch = this.input.charAt(this.pos);
+      if (lineBreak.test(ch)) { this.raise(start, "Unterminated regular expression"); }
+      if (!escaped) {
+        if (ch === "[") { inClass = true; }
+        else if (ch === "]" && inClass) { inClass = false; }
+        else if (ch === "/" && !inClass) { break }
+        escaped = ch === "\\";
+      } else { escaped = false; }
+      ++this.pos;
+    }
+    var pattern = this.input.slice(start, this.pos);
+    ++this.pos;
+    var flagsStart = this.pos;
+    var flags = this.readWord1();
+    if (this.containsEsc) { this.unexpected(flagsStart); }
+
+    // Validate pattern
+    var state = this.regexpState || (this.regexpState = new RegExpValidationState(this));
+    state.reset(start, pattern, flags);
+    this.validateRegExpFlags(state);
+    this.validateRegExpPattern(state);
+
+    // Create Literal#value property value.
+    var value = null;
+    try {
+      value = new RegExp(pattern, flags);
+    } catch (e) {
+      // ESTree requires null if it failed to instantiate RegExp object.
+      // https://github.com/estree/estree/blob/a27003adf4fd7bfad44de9cef372a2eacd527b1c/es5.md#regexpliteral
+    }
+
+    return this.finishToken(types$1.regexp, {pattern: pattern, flags: flags, value: value})
+  };
+
+  // Read an integer in the given radix. Return null if zero digits
+  // were read, the integer value otherwise. When `len` is given, this
+  // will return `null` unless the integer has exactly `len` digits.
+
+  pp.readInt = function(radix, len, maybeLegacyOctalNumericLiteral) {
+    // `len` is used for character escape sequences. In that case, disallow separators.
+    var allowSeparators = this.options.ecmaVersion >= 12 && len === undefined;
+
+    // `maybeLegacyOctalNumericLiteral` is true if it doesn't have prefix (0x,0o,0b)
+    // and isn't fraction part nor exponent part. In that case, if the first digit
+    // is zero then disallow separators.
+    var isLegacyOctalNumericLiteral = maybeLegacyOctalNumericLiteral && this.input.charCodeAt(this.pos) === 48;
+
+    var start = this.pos, total = 0, lastCode = 0;
+    for (var i = 0, e = len == null ? Infinity : len; i < e; ++i, ++this.pos) {
+      var code = this.input.charCodeAt(this.pos), val = (void 0);
+
+      if (allowSeparators && code === 95) {
+        if (isLegacyOctalNumericLiteral) { this.raiseRecoverable(this.pos, "Numeric separator is not allowed in legacy octal numeric literals"); }
+        if (lastCode === 95) { this.raiseRecoverable(this.pos, "Numeric separator must be exactly one underscore"); }
+        if (i === 0) { this.raiseRecoverable(this.pos, "Numeric separator is not allowed at the first of digits"); }
+        lastCode = code;
+        continue
+      }
+
+      if (code >= 97) { val = code - 97 + 10; } // a
+      else if (code >= 65) { val = code - 65 + 10; } // A
+      else if (code >= 48 && code <= 57) { val = code - 48; } // 0-9
+      else { val = Infinity; }
+      if (val >= radix) { break }
+      lastCode = code;
+      total = total * radix + val;
+    }
+
+    if (allowSeparators && lastCode === 95) { this.raiseRecoverable(this.pos - 1, "Numeric separator is not allowed at the last of digits"); }
+    if (this.pos === start || len != null && this.pos - start !== len) { return null }
+
+    return total
+  };
+
+  function stringToNumber(str, isLegacyOctalNumericLiteral) {
+    if (isLegacyOctalNumericLiteral) {
+      return parseInt(str, 8)
+    }
+
+    // `parseFloat(value)` stops parsing at the first numeric separator then returns a wrong value.
+    return parseFloat(str.replace(/_/g, ""))
+  }
+
+  function stringToBigInt(str) {
+    if (typeof BigInt !== "function") {
+      return null
+    }
+
+    // `BigInt(value)` throws syntax error if the string contains numeric separators.
+    return BigInt(str.replace(/_/g, ""))
+  }
+
+  pp.readRadixNumber = function(radix) {
+    var start = this.pos;
+    this.pos += 2; // 0x
+    var val = this.readInt(radix);
+    if (val == null) { this.raise(this.start + 2, "Expected number in radix " + radix); }
+    if (this.options.ecmaVersion >= 11 && this.input.charCodeAt(this.pos) === 110) {
+      val = stringToBigInt(this.input.slice(start, this.pos));
+      ++this.pos;
+    } else if (isIdentifierStart(this.fullCharCodeAtPos())) { this.raise(this.pos, "Identifier directly after number"); }
+    return this.finishToken(types$1.num, val)
+  };
+
+  // Read an integer, octal integer, or floating-point number.
+
+  pp.readNumber = function(startsWithDot) {
+    var start = this.pos;
+    if (!startsWithDot && this.readInt(10, undefined, true) === null) { this.raise(start, "Invalid number"); }
+    var octal = this.pos - start >= 2 && this.input.charCodeAt(start) === 48;
+    if (octal && this.strict) { this.raise(start, "Invalid number"); }
+    var next = this.input.charCodeAt(this.pos);
+    if (!octal && !startsWithDot && this.options.ecmaVersion >= 11 && next === 110) {
+      var val$1 = stringToBigInt(this.input.slice(start, this.pos));
+      ++this.pos;
+      if (isIdentifierStart(this.fullCharCodeAtPos())) { this.raise(this.pos, "Identifier directly after number"); }
+      return this.finishToken(types$1.num, val$1)
+    }
+    if (octal && /[89]/.test(this.input.slice(start, this.pos))) { octal = false; }
+    if (next === 46 && !octal) { // '.'
+      ++this.pos;
+      this.readInt(10);
+      next = this.input.charCodeAt(this.pos);
+    }
+    if ((next === 69 || next === 101) && !octal) { // 'eE'
+      next = this.input.charCodeAt(++this.pos);
+      if (next === 43 || next === 45) { ++this.pos; } // '+-'
+      if (this.readInt(10) === null) { this.raise(start, "Invalid number"); }
+    }
+    if (isIdentifierStart(this.fullCharCodeAtPos())) { this.raise(this.pos, "Identifier directly after number"); }
+
+    var val = stringToNumber(this.input.slice(start, this.pos), octal);
+    return this.finishToken(types$1.num, val)
+  };
+
+  // Read a string value, interpreting backslash-escapes.
+
+  pp.readCodePoint = function() {
+    var ch = this.input.charCodeAt(this.pos), code;
+
+    if (ch === 123) { // '{'
+      if (this.options.ecmaVersion < 6) { this.unexpected(); }
+      var codePos = ++this.pos;
+      code = this.readHexChar(this.input.indexOf("}", this.pos) - this.pos);
+      ++this.pos;
+      if (code > 0x10FFFF) { this.invalidStringToken(codePos, "Code point out of bounds"); }
+    } else {
+      code = this.readHexChar(4);
+    }
+    return code
+  };
+
+  pp.readString = function(quote) {
+    var out = "", chunkStart = ++this.pos;
+    for (;;) {
+      if (this.pos >= this.input.length) { this.raise(this.start, "Unterminated string constant"); }
+      var ch = this.input.charCodeAt(this.pos);
+      if (ch === quote) { break }
+      if (ch === 92) { // '\'
+        out += this.input.slice(chunkStart, this.pos);
+        out += this.readEscapedChar(false);
+        chunkStart = this.pos;
+      } else if (ch === 0x2028 || ch === 0x2029) {
+        if (this.options.ecmaVersion < 10) { this.raise(this.start, "Unterminated string constant"); }
+        ++this.pos;
+        if (this.options.locations) {
+          this.curLine++;
+          this.lineStart = this.pos;
+        }
+      } else {
+        if (isNewLine(ch)) { this.raise(this.start, "Unterminated string constant"); }
+        ++this.pos;
+      }
+    }
+    out += this.input.slice(chunkStart, this.pos++);
+    return this.finishToken(types$1.string, out)
+  };
+
+  // Reads template string tokens.
+
+  var INVALID_TEMPLATE_ESCAPE_ERROR = {};
+
+  pp.tryReadTemplateToken = function() {
+    this.inTemplateElement = true;
+    try {
+      this.readTmplToken();
+    } catch (err) {
+      if (err === INVALID_TEMPLATE_ESCAPE_ERROR) {
+        this.readInvalidTemplateToken();
+      } else {
+        throw err
+      }
+    }
+
+    this.inTemplateElement = false;
+  };
+
+  pp.invalidStringToken = function(position, message) {
+    if (this.inTemplateElement && this.options.ecmaVersion >= 9) {
+      throw INVALID_TEMPLATE_ESCAPE_ERROR
+    } else {
+      this.raise(position, message);
+    }
+  };
+
+  pp.readTmplToken = function() {
+    var out = "", chunkStart = this.pos;
+    for (;;) {
+      if (this.pos >= this.input.length) { this.raise(this.start, "Unterminated template"); }
+      var ch = this.input.charCodeAt(this.pos);
+      if (ch === 96 || ch === 36 && this.input.charCodeAt(this.pos + 1) === 123) { // '`', '${'
+        if (this.pos === this.start && (this.type === types$1.template || this.type === types$1.invalidTemplate)) {
+          if (ch === 36) {
+            this.pos += 2;
+            return this.finishToken(types$1.dollarBraceL)
+          } else {
+            ++this.pos;
+            return this.finishToken(types$1.backQuote)
+          }
+        }
+        out += this.input.slice(chunkStart, this.pos);
+        return this.finishToken(types$1.template, out)
+      }
+      if (ch === 92) { // '\'
+        out += this.input.slice(chunkStart, this.pos);
+        out += this.readEscapedChar(true);
+        chunkStart = this.pos;
+      } else if (isNewLine(ch)) {
+        out += this.input.slice(chunkStart, this.pos);
+        ++this.pos;
+        switch (ch) {
+        case 13:
+          if (this.input.charCodeAt(this.pos) === 10) { ++this.pos; }
+        case 10:
+          out += "\n";
+          break
+        default:
+          out += String.fromCharCode(ch);
+          break
+        }
+        if (this.options.locations) {
+          ++this.curLine;
+          this.lineStart = this.pos;
+        }
+        chunkStart = this.pos;
+      } else {
+        ++this.pos;
+      }
+    }
+  };
+
+  // Reads a template token to search for the end, without validating any escape sequences
+  pp.readInvalidTemplateToken = function() {
+    for (; this.pos < this.input.length; this.pos++) {
+      switch (this.input[this.pos]) {
+      case "\\":
+        ++this.pos;
+        break
+
+      case "$":
+        if (this.input[this.pos + 1] !== "{") { break }
+        // fall through
+      case "`":
+        return this.finishToken(types$1.invalidTemplate, this.input.slice(this.start, this.pos))
+
+      case "\r":
+        if (this.input[this.pos + 1] === "\n") { ++this.pos; }
+        // fall through
+      case "\n": case "\u2028": case "\u2029":
+        ++this.curLine;
+        this.lineStart = this.pos + 1;
+        break
+      }
+    }
+    this.raise(this.start, "Unterminated template");
+  };
+
+  // Used to read escaped characters
+
+  pp.readEscapedChar = function(inTemplate) {
+    var ch = this.input.charCodeAt(++this.pos);
+    ++this.pos;
+    switch (ch) {
+    case 110: return "\n" // 'n' -> '\n'
+    case 114: return "\r" // 'r' -> '\r'
+    case 120: return String.fromCharCode(this.readHexChar(2)) // 'x'
+    case 117: return codePointToString(this.readCodePoint()) // 'u'
+    case 116: return "\t" // 't' -> '\t'
+    case 98: return "\b" // 'b' -> '\b'
+    case 118: return "\u000b" // 'v' -> '\u000b'
+    case 102: return "\f" // 'f' -> '\f'
+    case 13: if (this.input.charCodeAt(this.pos) === 10) { ++this.pos; } // '\r\n'
+    case 10: // ' \n'
+      if (this.options.locations) { this.lineStart = this.pos; ++this.curLine; }
+      return ""
+    case 56:
+    case 57:
+      if (this.strict) {
+        this.invalidStringToken(
+          this.pos - 1,
+          "Invalid escape sequence"
+        );
+      }
+      if (inTemplate) {
+        var codePos = this.pos - 1;
+
+        this.invalidStringToken(
+          codePos,
+          "Invalid escape sequence in template string"
+        );
+      }
+    default:
+      if (ch >= 48 && ch <= 55) {
+        var octalStr = this.input.substr(this.pos - 1, 3).match(/^[0-7]+/)[0];
+        var octal = parseInt(octalStr, 8);
+        if (octal > 255) {
+          octalStr = octalStr.slice(0, -1);
+          octal = parseInt(octalStr, 8);
+        }
+        this.pos += octalStr.length - 1;
+        ch = this.input.charCodeAt(this.pos);
+        if ((octalStr !== "0" || ch === 56 || ch === 57) && (this.strict || inTemplate)) {
+          this.invalidStringToken(
+            this.pos - 1 - octalStr.length,
+            inTemplate
+              ? "Octal literal in template string"
+              : "Octal literal in strict mode"
+          );
+        }
+        return String.fromCharCode(octal)
+      }
+      if (isNewLine(ch)) {
+        // Unicode new line characters after \ get removed from output in both
+        // template literals and strings
+        if (this.options.locations) { this.lineStart = this.pos; ++this.curLine; }
+        return ""
+      }
+      return String.fromCharCode(ch)
+    }
+  };
+
+  // Used to read character escape sequences ('\x', '\u', '\U').
+
+  pp.readHexChar = function(len) {
+    var codePos = this.pos;
+    var n = this.readInt(16, len);
+    if (n === null) { this.invalidStringToken(codePos, "Bad character escape sequence"); }
+    return n
+  };
+
+  // Read an identifier, and return it as a string. Sets `this.containsEsc`
+  // to whether the word contained a '\u' escape.
+  //
+  // Incrementally adds only escaped chars, adding other chunks as-is
+  // as a micro-optimization.
+
+  pp.readWord1 = function() {
+    this.containsEsc = false;
+    var word = "", first = true, chunkStart = this.pos;
+    var astral = this.options.ecmaVersion >= 6;
+    while (this.pos < this.input.length) {
+      var ch = this.fullCharCodeAtPos();
+      if (isIdentifierChar(ch, astral)) {
+        this.pos += ch <= 0xffff ? 1 : 2;
+      } else if (ch === 92) { // "\"
+        this.containsEsc = true;
+        word += this.input.slice(chunkStart, this.pos);
+        var escStart = this.pos;
+        if (this.input.charCodeAt(++this.pos) !== 117) // "u"
+          { this.invalidStringToken(this.pos, "Expecting Unicode escape sequence \\uXXXX"); }
+        ++this.pos;
+        var esc = this.readCodePoint();
+        if (!(first ? isIdentifierStart : isIdentifierChar)(esc, astral))
+          { this.invalidStringToken(escStart, "Invalid Unicode escape"); }
+        word += codePointToString(esc);
+        chunkStart = this.pos;
+      } else {
+        break
+      }
+      first = false;
+    }
+    return word + this.input.slice(chunkStart, this.pos)
+  };
+
+  // Read an identifier or keyword token. Will check for reserved
+  // words when necessary.
+
+  pp.readWord = function() {
+    var word = this.readWord1();
+    var type = types$1.name;
+    if (this.keywords.test(word)) {
+      type = keywords[word];
+    }
+    return this.finishToken(type, word)
+  };
+
+  // Acorn is a tiny, fast JavaScript parser written in JavaScript.
+  //
+  // Acorn was written by Marijn Haverbeke, Ingvar Stepanyan, and
+  // various contributors and released under an MIT license.
+  //
+  // Git repositories for Acorn are available at
+  //
+  //     http://marijnhaverbeke.nl/git/acorn
+  //     https://github.com/acornjs/acorn.git
+  //
+  // Please use the [github bug tracker][ghbt] to report issues.
+  //
+  // [ghbt]: https://github.com/acornjs/acorn/issues
+
+
+  var version = "8.17.0";
+
+  Parser.acorn = {
+    Parser: Parser,
+    version: version,
+    defaultOptions: defaultOptions,
+    Position: Position,
+    SourceLocation: SourceLocation,
+    getLineInfo: getLineInfo,
+    Node: Node,
+    TokenType: TokenType,
+    tokTypes: types$1,
+    keywordTypes: keywords,
+    TokContext: TokContext,
+    tokContexts: types,
+    isIdentifierChar: isIdentifierChar,
+    isIdentifierStart: isIdentifierStart,
+    Token: Token,
+    isNewLine: isNewLine,
+    lineBreak: lineBreak,
+    lineBreakG: lineBreakG,
+    nonASCIIwhitespace: nonASCIIwhitespace
+  };
+
+  // The main exported interface (under `self.acorn` when in the
+  // browser) is a `parse` function that takes a code string and returns
+  // an abstract syntax tree as specified by the [ESTree spec][estree].
+  //
+  // [estree]: https://github.com/estree/estree
+
+  function parse(input, options) {
+    return Parser.parse(input, options)
+  }
+
+  // This function tries to parse a single expression at a given
+  // offset in a string. Useful for parsing mixed-language formats
+  // that embed JavaScript expressions.
+
+  function parseExpressionAt(input, pos, options) {
+    return Parser.parseExpressionAt(input, pos, options)
+  }
+
+  // Acorn is organized as a tokenizer and a recursive-descent parser.
+  // The `tokenizer` export provides an interface to the tokenizer.
+
+  function tokenizer(input, options) {
+    return Parser.tokenizer(input, options)
+  }
+
+  exports.Node = Node;
+  exports.Parser = Parser;
+  exports.Position = Position;
+  exports.SourceLocation = SourceLocation;
+  exports.TokContext = TokContext;
+  exports.Token = Token;
+  exports.TokenType = TokenType;
+  exports.defaultOptions = defaultOptions;
+  exports.getLineInfo = getLineInfo;
+  exports.isIdentifierChar = isIdentifierChar;
+  exports.isIdentifierStart = isIdentifierStart;
+  exports.isNewLine = isNewLine;
+  exports.keywordTypes = keywords;
+  exports.lineBreak = lineBreak;
+  exports.lineBreakG = lineBreakG;
+  exports.nonASCIIwhitespace = nonASCIIwhitespace;
+  exports.parse = parse;
+  exports.parseExpressionAt = parseExpressionAt;
+  exports.tokContexts = types;
+  exports.tokTypes = types$1;
+  exports.tokenizer = tokenizer;
+  exports.version = version;
+
+}));
diff --git a/research/agent-eval/results/policy-negative/forbidden.patch b/research/agent-eval/results/policy-negative/forbidden.patch
new file mode 100644
index 0000000..1464701
--- /dev/null
+++ b/research/agent-eval/results/policy-negative/forbidden.patch
@@ -0,0 +1,6 @@
+diff --git a/.git/config b/.git/config
+new file mode 100644
+--- /dev/null
++++ b/.git/config
+@@ -0,0 +1 @@
++[forbidden]
diff --git a/research/agent-eval/results/policy-negative/patch-audit.json b/research/agent-eval/results/policy-negative/patch-audit.json
new file mode 100644
index 0000000..45ea776
--- /dev/null
+++ b/research/agent-eval/results/policy-negative/patch-audit.json
@@ -0,0 +1,54 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:291908859af0ec4fb13dbe01ffe25b2bbf2fcc30295b0dd6de3f1546d7e25993",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "rejected",
+  "patchSha256": "sha256:02b47b841673309c63ff596de48a07cc9bfcfa373dfd58ec91bb7876097d32d3",
+  "patchBytes": 119,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": null,
+  "declaredOperations": [
+    {
+      "operation": "add",
+      "path": ".git/config",
+      "hunks": 1,
+      "modes": {
+        "newFileMode": "100644"
+      },
+      "policy": {
+        "allowed": false,
+        "reason": "forbidden by .git/**",
+        "deniedBy": ".git/**",
+        "allowedBy": null
+      }
+    }
+  ],
+  "actualOperations": [],
+  "preflight": {
+    "allowed": false,
+    "violations": [
+      "add .git/config: forbidden by .git/**"
+    ]
+  },
+  "postflight": null,
+  "commands": {
+    "check": null,
+    "apply": null
+  },
+  "failure": {
+    "kind": "policy-violation",
+    "name": "PatchError",
+    "message": "patch violates file policy",
+    "details": [
+      "add .git/config: forbidden by .git/**"
+    ]
+  },
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/policy-negative/result.json b/research/agent-eval/results/policy-negative/result.json
new file mode 100644
index 0000000..79a4059
--- /dev/null
+++ b/research/agent-eval/results/policy-negative/result.json
@@ -0,0 +1,12 @@
+{
+  "resultVersion": "1.0",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "verdict": "policy-violation",
+  "message": "patch violates file policy",
+  "auditId": "patch-audit:291908859af0ec4fb13dbe01ffe25b2bbf2fcc30295b0dd6de3f1546d7e25993",
+  "patchSha256": "sha256:02b47b841673309c63ff596de48a07cc9bfcfa373dfd58ec91bb7876097d32d3",
+  "violations": [
+    "add .git/config: forbidden by .git/**"
+  ],
+  "sourceUnchanged": true
+}
diff --git a/research/agent-eval/results/scripted/EXPERIMENT.md b/research/agent-eval/results/scripted/EXPERIMENT.md
new file mode 100644
index 0000000..0cf5eaa
--- /dev/null
+++ b/research/agent-eval/results/scripted/EXPERIMENT.md
@@ -0,0 +1,32 @@
+# Agent success-rate experiment
+
+- Experiment: `experiment:c914c326de4a45b64ab26744732c39e2d77885280e35269d009e233bc560cf3b`
+- Agent: deterministic-fixture / scripted-v1 (scripted)
+- Trials: 15; valid 15; infra 0
+- Pass rate: **100.0%** (Wilson 95% 79.6%–100.0%)
+- Claim level: **harness-only**
+- Actual model(s): not reported
+- Tokens: input 0; output 0; cache read 0
+- Recorded provider cost: $0.000000
+
+## Failure taxonomy
+
+- passed: 15
+
+## Trials
+
+- field-update-r01: passed; patch=applied; grades=passed
+- field-update-r02: passed; patch=applied; grades=passed
+- field-update-r03: passed; patch=applied; grades=passed
+- field-update-r04: passed; patch=applied; grades=passed
+- field-update-r05: passed; patch=applied; grades=passed
+- alias-relation-r01: passed; patch=applied; grades=passed
+- alias-relation-r02: passed; patch=applied; grades=passed
+- alias-relation-r03: passed; patch=applied; grades=passed
+- alias-relation-r04: passed; patch=applied; grades=passed
+- alias-relation-r05: passed; patch=applied; grades=passed
+- pattern-c-runtime-r01: passed; patch=applied; grades=passed
+- pattern-c-runtime-r02: passed; patch=applied; grades=passed
+- pattern-c-runtime-r03: passed; patch=applied; grades=passed
+- pattern-c-runtime-r04: passed; patch=applied; grades=passed
+- pattern-c-runtime-r05: passed; patch=applied; grades=passed
diff --git a/research/agent-eval/results/scripted/EXPERIMENT.raw.md b/research/agent-eval/results/scripted/EXPERIMENT.raw.md
new file mode 100644
index 0000000..0cf5eaa
--- /dev/null
+++ b/research/agent-eval/results/scripted/EXPERIMENT.raw.md
@@ -0,0 +1,32 @@
+# Agent success-rate experiment
+
+- Experiment: `experiment:c914c326de4a45b64ab26744732c39e2d77885280e35269d009e233bc560cf3b`
+- Agent: deterministic-fixture / scripted-v1 (scripted)
+- Trials: 15; valid 15; infra 0
+- Pass rate: **100.0%** (Wilson 95% 79.6%–100.0%)
+- Claim level: **harness-only**
+- Actual model(s): not reported
+- Tokens: input 0; output 0; cache read 0
+- Recorded provider cost: $0.000000
+
+## Failure taxonomy
+
+- passed: 15
+
+## Trials
+
+- field-update-r01: passed; patch=applied; grades=passed
+- field-update-r02: passed; patch=applied; grades=passed
+- field-update-r03: passed; patch=applied; grades=passed
+- field-update-r04: passed; patch=applied; grades=passed
+- field-update-r05: passed; patch=applied; grades=passed
+- alias-relation-r01: passed; patch=applied; grades=passed
+- alias-relation-r02: passed; patch=applied; grades=passed
+- alias-relation-r03: passed; patch=applied; grades=passed
+- alias-relation-r04: passed; patch=applied; grades=passed
+- alias-relation-r05: passed; patch=applied; grades=passed
+- pattern-c-runtime-r01: passed; patch=applied; grades=passed
+- pattern-c-runtime-r02: passed; patch=applied; grades=passed
+- pattern-c-runtime-r03: passed; patch=applied; grades=passed
+- pattern-c-runtime-r04: passed; patch=applied; grades=passed
+- pattern-c-runtime-r05: passed; patch=applied; grades=passed
diff --git a/research/agent-eval/results/scripted/experiment.json b/research/agent-eval/results/scripted/experiment.json
new file mode 100644
index 0000000..6ac88c4
--- /dev/null
+++ b/research/agent-eval/results/scripted/experiment.json
@@ -0,0 +1,376 @@
+{
+  "reportVersion": "1.0",
+  "resultId": "experiment-result:118e0cb1259834a153aa0bf69c0818810a5dbdc240806b167224e1c399cda2f2",
+  "experimentId": "experiment:c914c326de4a45b64ab26744732c39e2d77885280e35269d009e233bc560cf3b",
+  "specSha256": "sha256:d7bf7564fa4283c928ffe7930b4cbaeac2d91f6ca14f994f5ebd1533967d62c2",
+  "seed": "fixed-task-order-v1",
+  "agent": {
+    "kind": "scripted",
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1"
+  },
+  "taskSetSha256": "sha256:f47d3569a2df49c15aa0d82c8125ea2e4c1efcce3d7de4d2b6333f6967ca6ea7",
+  "repetitions": 5,
+  "summary": {
+    "totalTrials": 15,
+    "validTrials": 15,
+    "invalidTrials": 0,
+    "infraErrors": 0,
+    "passed": 15,
+    "passRate": 1,
+    "confidence95": {
+      "lower": 0.7961166989641515,
+      "upper": 1
+    },
+    "verdicts": {
+      "passed": 15
+    },
+    "stages": {
+      "agentCompleted": {
+        "passed": 15,
+        "total": 15
+      },
+      "patchApplied": {
+        "passed": 15,
+        "total": 15
+      },
+      "policyCompliant": {
+        "passed": 15,
+        "total": 15
+      },
+      "graderPassed": {
+        "passed": 15,
+        "total": 15
+      },
+      "runtimePassed": {
+        "passed": 5,
+        "total": 5
+      },
+      "visualPassed": {
+        "passed": 5,
+        "total": 5
+      }
+    },
+    "provider": {
+      "actualModels": [],
+      "usage": {
+        "inputTokens": 0,
+        "outputTokens": 0,
+        "cacheReadInputTokens": 0,
+        "totalCostUsd": 0
+      }
+    },
+    "durationMs": {
+      "mean": 4809.651158333333,
+      "median": 149.003167
+    },
+    "claimLevel": "harness-only"
+  },
+  "trials": [
+    {
+      "trialId": "field-update-r01",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:a20c9e911b0ae8f51e29aefcfcb4e6e4c2d6f0246eb175cba2d32bb361799750",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 184.151833,
+      "artifactPath": "trials/field-update-r01/task-run.json"
+    },
+    {
+      "trialId": "field-update-r02",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:89368c64a1817b63bd000583abdf2cda7fa4ff60b7203cf7c3693adcd2bb0887",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 142.220292,
+      "artifactPath": "trials/field-update-r02/task-run.json"
+    },
+    {
+      "trialId": "field-update-r03",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:5f5c6f361856b91756fffeddbc25a0fc36d08fdaaa115554ee25612e1885ad82",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 143.814,
+      "artifactPath": "trials/field-update-r03/task-run.json"
+    },
+    {
+      "trialId": "field-update-r04",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:f4ec184511bca5f7e3047e32a41c6e3ac7eba4d3334521211450e034e72f93c2",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 139.635209,
+      "artifactPath": "trials/field-update-r04/task-run.json"
+    },
+    {
+      "trialId": "field-update-r05",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:d91a816ac0f7c801c78d00dde786a7d3f9ac0e74f320210b6e9bb588aa82eb89",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 143.597625,
+      "artifactPath": "trials/field-update-r05/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r01",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:3f918c2b577c2aed80fcfa91a910a413ca87761bff8a510f192c5e005ea4e578",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 149.003167,
+      "artifactPath": "trials/alias-relation-r01/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r02",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:686c12eb1614013f31befae59bdb5405acf0b4df6792b27c5e9a4d79d0f37536",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 142.01675,
+      "artifactPath": "trials/alias-relation-r02/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r03",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:78ca17960d17a371f02064bb50ed580efbce3f1be6fb3db215c733dc4e6dc3fd",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 141.600208,
+      "artifactPath": "trials/alias-relation-r03/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r04",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:427708a2b76b75740276d244b9c644e53cd2a5d583af0ffd467f5694025ed7f3",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 139.519292,
+      "artifactPath": "trials/alias-relation-r04/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r05",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:b0e9bc3308199c93aa0ecf3f1c0dd6356900be925ff7859cd052ed9f3b3e978b",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 164.696833,
+      "artifactPath": "trials/alias-relation-r05/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r01",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:cff1d5ef6d7878a868d6b1926170ca0b86a400e1a6ac42a313674df4b1e3d12c",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 14895.812417,
+      "artifactPath": "trials/pattern-c-runtime-r01/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r02",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:ede9b03b19180a591922ff9a7dc696fd54bfe31cedb7dd77c81b72381fd55250",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 13904.781833,
+      "artifactPath": "trials/pattern-c-runtime-r02/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r03",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:26b4217e2b6c4ee90889a995a5113555d4678ed2626d6420be76a14e8f643048",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 13993.146375,
+      "artifactPath": "trials/pattern-c-runtime-r03/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r04",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:5c1c68839904edc34e3ef1fcd3504d7a831217deec745502fc2974f5bab5dc94",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 13966.9465,
+      "artifactPath": "trials/pattern-c-runtime-r04/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r05",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:79b70d6c1693358899430f03611b9b838e45970cbcef1cf5df414d83347589a2",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 13893.825041,
+      "artifactPath": "trials/pattern-c-runtime-r05/task-run.json"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/experiment.raw.json b/research/agent-eval/results/scripted/experiment.raw.json
new file mode 100644
index 0000000..876cb14
--- /dev/null
+++ b/research/agent-eval/results/scripted/experiment.raw.json
@@ -0,0 +1,376 @@
+{
+  "reportVersion": "1.0",
+  "resultId": "experiment-result:ef44e721234db91d12ca3154dab1daa9156e463195ada83d30e757cedff296e8",
+  "experimentId": "experiment:c914c326de4a45b64ab26744732c39e2d77885280e35269d009e233bc560cf3b",
+  "specSha256": "sha256:d7bf7564fa4283c928ffe7930b4cbaeac2d91f6ca14f994f5ebd1533967d62c2",
+  "seed": "fixed-task-order-v1",
+  "agent": {
+    "kind": "scripted",
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1"
+  },
+  "taskSetSha256": "sha256:f47d3569a2df49c15aa0d82c8125ea2e4c1efcce3d7de4d2b6333f6967ca6ea7",
+  "repetitions": 5,
+  "summary": {
+    "totalTrials": 15,
+    "validTrials": 15,
+    "invalidTrials": 0,
+    "infraErrors": 0,
+    "passed": 15,
+    "passRate": 1,
+    "confidence95": {
+      "lower": 0.7961166989641515,
+      "upper": 1
+    },
+    "verdicts": {
+      "passed": 15
+    },
+    "stages": {
+      "agentCompleted": {
+        "passed": 15,
+        "total": 15
+      },
+      "patchApplied": {
+        "passed": 15,
+        "total": 15
+      },
+      "policyCompliant": {
+        "passed": 15,
+        "total": 15
+      },
+      "graderPassed": {
+        "passed": 15,
+        "total": 15
+      },
+      "runtimePassed": {
+        "passed": 5,
+        "total": 5
+      },
+      "visualPassed": {
+        "passed": 5,
+        "total": 5
+      }
+    },
+    "provider": {
+      "actualModels": [],
+      "usage": {
+        "inputTokens": 0,
+        "outputTokens": 0,
+        "cacheReadInputTokens": 0,
+        "totalCostUsd": 0
+      }
+    },
+    "durationMs": {
+      "mean": 4809.651158333333,
+      "median": 149.003167
+    },
+    "claimLevel": "harness-only"
+  },
+  "trials": [
+    {
+      "trialId": "field-update-r01",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:a20c9e911b0ae8f51e29aefcfcb4e6e4c2d6f0246eb175cba2d32bb361799750",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 184.151833,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r01/task-run.json"
+    },
+    {
+      "trialId": "field-update-r02",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:89368c64a1817b63bd000583abdf2cda7fa4ff60b7203cf7c3693adcd2bb0887",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 142.220292,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r02/task-run.json"
+    },
+    {
+      "trialId": "field-update-r03",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:5f5c6f361856b91756fffeddbc25a0fc36d08fdaaa115554ee25612e1885ad82",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 143.814,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r03/task-run.json"
+    },
+    {
+      "trialId": "field-update-r04",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:f4ec184511bca5f7e3047e32a41c6e3ac7eba4d3334521211450e034e72f93c2",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 139.635209,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r04/task-run.json"
+    },
+    {
+      "trialId": "field-update-r05",
+      "taskSlug": "field-update",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "runId": "task-run:d91a816ac0f7c801c78d00dde786a7d3f9ac0e74f320210b6e9bb588aa82eb89",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 143.597625,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r05/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r01",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:3f918c2b577c2aed80fcfa91a910a413ca87761bff8a510f192c5e005ea4e578",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 149.003167,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r01/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r02",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:686c12eb1614013f31befae59bdb5405acf0b4df6792b27c5e9a4d79d0f37536",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 142.01675,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r02/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r03",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:78ca17960d17a371f02064bb50ed580efbce3f1be6fb3db215c733dc4e6dc3fd",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 141.600208,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r03/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r04",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:427708a2b76b75740276d244b9c644e53cd2a5d583af0ffd467f5694025ed7f3",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 139.519292,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r04/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r05",
+      "taskSlug": "alias-relation",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "runId": "task-run:b0e9bc3308199c93aa0ecf3f1c0dd6356900be925ff7859cd052ed9f3b3e978b",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 0,
+      "visualRequired": 0,
+      "runtimeStatuses": [],
+      "visualStatuses": [],
+      "providerMetadata": null,
+      "durationMs": 164.696833,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r05/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r01",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:cff1d5ef6d7878a868d6b1926170ca0b86a400e1a6ac42a313674df4b1e3d12c",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 14895.812417,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r01/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r02",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:ede9b03b19180a591922ff9a7dc696fd54bfe31cedb7dd77c81b72381fd55250",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 13904.781833,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r02/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r03",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:26b4217e2b6c4ee90889a995a5113555d4678ed2626d6420be76a14e8f643048",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 13993.146375,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r03/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r04",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:5c1c68839904edc34e3ef1fcd3504d7a831217deec745502fc2974f5bab5dc94",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 13966.9465,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r04/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r05",
+      "taskSlug": "pattern-c-runtime",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "runId": "task-run:79b70d6c1693358899430f03611b9b838e45970cbcef1cf5df414d83347589a2",
+      "verdict": "passed",
+      "agentExitCode": 0,
+      "patchStatus": "applied",
+      "gradeVerdicts": [
+        "passed"
+      ],
+      "runtimeRequired": 1,
+      "visualRequired": 1,
+      "runtimeStatuses": [
+        "passed"
+      ],
+      "visualStatuses": [
+        "passed"
+      ],
+      "providerMetadata": null,
+      "durationMs": 13893.825041,
+      "artifactPath": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r05/task-run.json"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/relocation-audit.json b/research/agent-eval/results/scripted/relocation-audit.json
new file mode 100644
index 0000000..5eb4656
--- /dev/null
+++ b/research/agent-eval/results/scripted/relocation-audit.json
@@ -0,0 +1,105 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "relocation-audit:ba782325d35dbd0ba32b40600bd6e806d1f336793a6beec9b2eb6f9984accdf1",
+  "kind": "experiment-relocation",
+  "reason": "Canonicalize trial TaskRun references after copying an experiment produced through a symlinked output-root spelling.",
+  "experimentId": "experiment:c914c326de4a45b64ab26744732c39e2d77885280e35269d009e233bc560cf3b",
+  "raw": {
+    "resultId": "experiment-result:ef44e721234db91d12ca3154dab1daa9156e463195ada83d30e757cedff296e8",
+    "sha256": "sha256:fd7e5617537eb54025f169f5a21768d14fbc182a6f18871ac52155c6cfe4c71a",
+    "file": "experiment.raw.json"
+  },
+  "relocated": {
+    "resultId": "experiment-result:118e0cb1259834a153aa0bf69c0818810a5dbdc240806b167224e1c399cda2f2",
+    "sha256": "sha256:605b1e6ab67385d70b68211e33d74d191a2a4863accaf41b96e202ff9920052e",
+    "file": "experiment.json"
+  },
+  "transformations": [
+    {
+      "trialId": "field-update-r01",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r01/task-run.json",
+      "to": "trials/field-update-r01/task-run.json"
+    },
+    {
+      "trialId": "field-update-r02",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r02/task-run.json",
+      "to": "trials/field-update-r02/task-run.json"
+    },
+    {
+      "trialId": "field-update-r03",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r03/task-run.json",
+      "to": "trials/field-update-r03/task-run.json"
+    },
+    {
+      "trialId": "field-update-r04",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r04/task-run.json",
+      "to": "trials/field-update-r04/task-run.json"
+    },
+    {
+      "trialId": "field-update-r05",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/field-update-r05/task-run.json",
+      "to": "trials/field-update-r05/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r01",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r01/task-run.json",
+      "to": "trials/alias-relation-r01/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r02",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r02/task-run.json",
+      "to": "trials/alias-relation-r02/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r03",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r03/task-run.json",
+      "to": "trials/alias-relation-r03/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r04",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r04/task-run.json",
+      "to": "trials/alias-relation-r04/task-run.json"
+    },
+    {
+      "trialId": "alias-relation-r05",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r05/task-run.json",
+      "to": "trials/alias-relation-r05/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r01",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r01/task-run.json",
+      "to": "trials/pattern-c-runtime-r01/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r02",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r02/task-run.json",
+      "to": "trials/pattern-c-runtime-r02/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r03",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r03/task-run.json",
+      "to": "trials/pattern-c-runtime-r03/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r04",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r04/task-run.json",
+      "to": "trials/pattern-c-runtime-r04/task-run.json"
+    },
+    {
+      "trialId": "pattern-c-runtime-r05",
+      "from": "../../private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r05/task-run.json",
+      "to": "trials/pattern-c-runtime-r05/task-run.json"
+    }
+  ],
+  "semanticFieldsUnchanged": [
+    "experimentId",
+    "specSha256",
+    "taskSetSha256",
+    "agent",
+    "seed",
+    "repetitions",
+    "summary",
+    "trial verdicts",
+    "runIds"
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r01/TASK.md b/research/agent-eval/results/scripted/trials/alias-relation-r01/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r01/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r01/agent.patch b/research/agent-eval/results/scripted/trials/alias-relation-r01/agent.patch
new file mode 100644
index 0000000..63b3498
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r01/agent.patch
@@ -0,0 +1,89 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,38 +1,47 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-alias-relation",
+-    "title": "Agent alias and relation fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice"
+-    },
+-    "bob": {
+-      "kind": "person",
+-      "name": "Bob"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice",
+-    "Bob": "bob"
+-  },
+-  "relationTypes": {
+-    "friend": {
+-      "label": "Friend"
+-    }
+-  },
+-  "relations": [],
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice",
+-        "bob"
+-      ],
+-      "relations": []
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-alias-relation",
++    "title": "Agent alias and relation fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice"
++    },
++    "bob": {
++      "kind": "person",
++      "name": "Bob"
++    }
++  },
++  "aliases": {
++    "Alice": "alice",
++    "Bob": "bob",
++    "Alicia": "alice"
++  },
++  "relationTypes": {
++    "friend": {
++      "label": "Friend"
++    }
++  },
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice",
++        "bob"
++      ],
++      "relations": []
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r01/grade-task-grader.json b/research/agent-eval/results/scripted/trials/alias-relation-r01/grade-task-grader.json
new file mode 100644
index 0000000..8a12a4c
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r01/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:de3460d0a27d9d8dacb4d334c764851f053273e7289529dcfdc8936f12a5b8db",
+  "graderId": "agent-alias-relation-grader",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/workspace",
+          "alias-relation"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 30.075458,
+        "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "alias-relation: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r01/patch-audit.json b/research/agent-eval/results/scripted/trials/alias-relation-r01/patch-audit.json
new file mode 100644
index 0000000..30653c6
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r01/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:4a06d74f09f92fa4965f8eb4a376044dc8394c626273ac809f5dc845fedef630",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "applied",
+  "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+  "patchBytes": 1534,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+        "size": 586,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+        "size": 742,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721971-42a8f19ea75c9.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 14.939625,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721971-42a8f19ea75c9.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 20.078334,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r01/task-run.json b/research/agent-eval/results/scripted/trials/alias-relation-r01/task-run.json
new file mode 100644
index 0000000..c59b6a2
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r01/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:3f918c2b577c2aed80fcfa91a910a413ca87761bff8a510f192c5e005ea4e578",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r01"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r01/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r01/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 27.985,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:4a06d74f09f92fa4965f8eb4a376044dc8394c626273ac809f5dc845fedef630",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "applied",
+    "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+    "patchBytes": 1534,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+          "size": 586,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+          "size": 742,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721971-42a8f19ea75c9.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.939625,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721971-42a8f19ea75c9.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 20.078334,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:de3460d0a27d9d8dacb4d334c764851f053273e7289529dcfdc8936f12a5b8db",
+      "graderId": "agent-alias-relation-grader",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-zokJtU/workspace",
+              "alias-relation"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 30.075458,
+            "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "alias-relation: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 1534,
+      "sha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1938,
+      "sha256": "sha256:02086ab0357d555ab1825e546641c9b7e8035b5d0f12c0c07075cffadebdf6ce"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3228,
+      "sha256": "sha256:c0be5c7ac09aefa863734638f00de765edc50223623b414bcce6c96972457eb4"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r02/TASK.md b/research/agent-eval/results/scripted/trials/alias-relation-r02/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r02/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r02/agent.patch b/research/agent-eval/results/scripted/trials/alias-relation-r02/agent.patch
new file mode 100644
index 0000000..63b3498
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r02/agent.patch
@@ -0,0 +1,89 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,38 +1,47 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-alias-relation",
+-    "title": "Agent alias and relation fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice"
+-    },
+-    "bob": {
+-      "kind": "person",
+-      "name": "Bob"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice",
+-    "Bob": "bob"
+-  },
+-  "relationTypes": {
+-    "friend": {
+-      "label": "Friend"
+-    }
+-  },
+-  "relations": [],
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice",
+-        "bob"
+-      ],
+-      "relations": []
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-alias-relation",
++    "title": "Agent alias and relation fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice"
++    },
++    "bob": {
++      "kind": "person",
++      "name": "Bob"
++    }
++  },
++  "aliases": {
++    "Alice": "alice",
++    "Bob": "bob",
++    "Alicia": "alice"
++  },
++  "relationTypes": {
++    "friend": {
++      "label": "Friend"
++    }
++  },
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice",
++        "bob"
++      ],
++      "relations": []
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r02/grade-task-grader.json b/research/agent-eval/results/scripted/trials/alias-relation-r02/grade-task-grader.json
new file mode 100644
index 0000000..656cf27
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r02/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:c4abcb730da7da3c264a6e1c2d779617340f78807eaecdf273750eebc5a8ebb5",
+  "graderId": "agent-alias-relation-grader",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/workspace",
+          "alias-relation"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 29.67,
+        "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "alias-relation: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r02/patch-audit.json b/research/agent-eval/results/scripted/trials/alias-relation-r02/patch-audit.json
new file mode 100644
index 0000000..7a11dab
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r02/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:6f2cf68eaeb800c48a53c3de63ac6b0b70b29d73a89e0ca34c852424028f1206",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "applied",
+  "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+  "patchBytes": 1534,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+        "size": 586,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+        "size": 742,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722118-c4dc0507d2ed1.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 14.766208,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722118-c4dc0507d2ed1.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.25775,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r02/task-run.json b/research/agent-eval/results/scripted/trials/alias-relation-r02/task-run.json
new file mode 100644
index 0000000..14237a8
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r02/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:686c12eb1614013f31befae59bdb5405acf0b4df6792b27c5e9a4d79d0f37536",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r02"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r02/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r02/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 28.06,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:6f2cf68eaeb800c48a53c3de63ac6b0b70b29d73a89e0ca34c852424028f1206",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "applied",
+    "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+    "patchBytes": 1534,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+          "size": 586,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+          "size": 742,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722118-c4dc0507d2ed1.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.766208,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722118-c4dc0507d2ed1.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.25775,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:c4abcb730da7da3c264a6e1c2d779617340f78807eaecdf273750eebc5a8ebb5",
+      "graderId": "agent-alias-relation-grader",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-CzEwSt/workspace",
+              "alias-relation"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 29.67,
+            "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "alias-relation: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 1534,
+      "sha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1934,
+      "sha256": "sha256:bf478bc7d3e449e80b5650858456a59186e376a1690c5568ce5bf80b62541b3f"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3227,
+      "sha256": "sha256:a3d09e301469e57655cbe6d712889ccb268fbae21979d545bcea2aa8ff7df4ad"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r03/TASK.md b/research/agent-eval/results/scripted/trials/alias-relation-r03/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r03/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r03/agent.patch b/research/agent-eval/results/scripted/trials/alias-relation-r03/agent.patch
new file mode 100644
index 0000000..63b3498
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r03/agent.patch
@@ -0,0 +1,89 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,38 +1,47 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-alias-relation",
+-    "title": "Agent alias and relation fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice"
+-    },
+-    "bob": {
+-      "kind": "person",
+-      "name": "Bob"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice",
+-    "Bob": "bob"
+-  },
+-  "relationTypes": {
+-    "friend": {
+-      "label": "Friend"
+-    }
+-  },
+-  "relations": [],
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice",
+-        "bob"
+-      ],
+-      "relations": []
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-alias-relation",
++    "title": "Agent alias and relation fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice"
++    },
++    "bob": {
++      "kind": "person",
++      "name": "Bob"
++    }
++  },
++  "aliases": {
++    "Alice": "alice",
++    "Bob": "bob",
++    "Alicia": "alice"
++  },
++  "relationTypes": {
++    "friend": {
++      "label": "Friend"
++    }
++  },
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice",
++        "bob"
++      ],
++      "relations": []
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r03/grade-task-grader.json b/research/agent-eval/results/scripted/trials/alias-relation-r03/grade-task-grader.json
new file mode 100644
index 0000000..7ea9418
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r03/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:ab1bcc0bfa28889cb71ad14295fc3ae26c29cf5cb22c548704ba432fe3c17e9d",
+  "graderId": "agent-alias-relation-grader",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/workspace",
+          "alias-relation"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 30.160083,
+        "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "alias-relation: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r03/patch-audit.json b/research/agent-eval/results/scripted/trials/alias-relation-r03/patch-audit.json
new file mode 100644
index 0000000..05986e5
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r03/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:4abfc30a1fed3d5242ff9f1d1efecf3568c1b9f6864bab31c3e2600040d51a36",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "applied",
+  "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+  "patchBytes": 1534,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+        "size": 586,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+        "size": 742,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722264-3cb48b758079c.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.595791,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722264-3cb48b758079c.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.371416,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r03/task-run.json b/research/agent-eval/results/scripted/trials/alias-relation-r03/task-run.json
new file mode 100644
index 0000000..50c994f
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r03/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:78ca17960d17a371f02064bb50ed580efbce3f1be6fb3db215c733dc4e6dc3fd",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r03"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r03/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r03/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 29.32775,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:4abfc30a1fed3d5242ff9f1d1efecf3568c1b9f6864bab31c3e2600040d51a36",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "applied",
+    "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+    "patchBytes": 1534,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+          "size": 586,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+          "size": 742,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722264-3cb48b758079c.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.595791,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722264-3cb48b758079c.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.371416,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:ab1bcc0bfa28889cb71ad14295fc3ae26c29cf5cb22c548704ba432fe3c17e9d",
+      "graderId": "agent-alias-relation-grader",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-VK94PY/workspace",
+              "alias-relation"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 30.160083,
+            "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "alias-relation: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 1534,
+      "sha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1938,
+      "sha256": "sha256:208b2c013df847e17c706c4ce93099dbf1022a2bfd6243fb96a8aad78cf94b08"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3228,
+      "sha256": "sha256:961bec3219726e0c45c683344913586371926d3edaf954f4bdcd940fd73de267"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r04/TASK.md b/research/agent-eval/results/scripted/trials/alias-relation-r04/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r04/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r04/agent.patch b/research/agent-eval/results/scripted/trials/alias-relation-r04/agent.patch
new file mode 100644
index 0000000..63b3498
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r04/agent.patch
@@ -0,0 +1,89 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,38 +1,47 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-alias-relation",
+-    "title": "Agent alias and relation fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice"
+-    },
+-    "bob": {
+-      "kind": "person",
+-      "name": "Bob"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice",
+-    "Bob": "bob"
+-  },
+-  "relationTypes": {
+-    "friend": {
+-      "label": "Friend"
+-    }
+-  },
+-  "relations": [],
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice",
+-        "bob"
+-      ],
+-      "relations": []
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-alias-relation",
++    "title": "Agent alias and relation fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice"
++    },
++    "bob": {
++      "kind": "person",
++      "name": "Bob"
++    }
++  },
++  "aliases": {
++    "Alice": "alice",
++    "Bob": "bob",
++    "Alicia": "alice"
++  },
++  "relationTypes": {
++    "friend": {
++      "label": "Friend"
++    }
++  },
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice",
++        "bob"
++      ],
++      "relations": []
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r04/grade-task-grader.json b/research/agent-eval/results/scripted/trials/alias-relation-r04/grade-task-grader.json
new file mode 100644
index 0000000..4ac3f24
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r04/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:b05c5aa6bbbd71b33c840bd40378038290e46f143c7932fa30b46db06d0f4e51",
+  "graderId": "agent-alias-relation-grader",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/workspace",
+          "alias-relation"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 29.989666,
+        "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "alias-relation: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r04/patch-audit.json b/research/agent-eval/results/scripted/trials/alias-relation-r04/patch-audit.json
new file mode 100644
index 0000000..5b978fb
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r04/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:6a6cf803578441d69182d65c87f6ef12a653efe6e1a87bb007edc21179fe7415",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "applied",
+  "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+  "patchBytes": 1534,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+        "size": 586,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+        "size": 742,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722404-7d213b0a93928.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.450042,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722404-7d213b0a93928.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.333542,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r04/task-run.json b/research/agent-eval/results/scripted/trials/alias-relation-r04/task-run.json
new file mode 100644
index 0000000..faa5295
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r04/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:427708a2b76b75740276d244b9c644e53cd2a5d583af0ffd467f5694025ed7f3",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r04"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r04/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r04/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 28.302,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:6a6cf803578441d69182d65c87f6ef12a653efe6e1a87bb007edc21179fe7415",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "applied",
+    "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+    "patchBytes": 1534,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+          "size": 586,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+          "size": 742,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722404-7d213b0a93928.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.450042,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722404-7d213b0a93928.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.333542,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:b05c5aa6bbbd71b33c840bd40378038290e46f143c7932fa30b46db06d0f4e51",
+      "graderId": "agent-alias-relation-grader",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-ZH6WVc/workspace",
+              "alias-relation"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 29.989666,
+            "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "alias-relation: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 1534,
+      "sha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1938,
+      "sha256": "sha256:fe3eda1771a25e773370756f3210e573d7c99e785eb6768548b6446547a1910d"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3228,
+      "sha256": "sha256:d89dac9f4dab218df4018a5e6992edea4fbe63800d3685c1c6daed4bf60abe74"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r05/TASK.md b/research/agent-eval/results/scripted/trials/alias-relation-r05/TASK.md
new file mode 100644
index 0000000..f4381c1
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r05/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r05/agent.patch b/research/agent-eval/results/scripted/trials/alias-relation-r05/agent.patch
new file mode 100644
index 0000000..63b3498
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r05/agent.patch
@@ -0,0 +1,89 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,38 +1,47 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-alias-relation",
+-    "title": "Agent alias and relation fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice"
+-    },
+-    "bob": {
+-      "kind": "person",
+-      "name": "Bob"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice",
+-    "Bob": "bob"
+-  },
+-  "relationTypes": {
+-    "friend": {
+-      "label": "Friend"
+-    }
+-  },
+-  "relations": [],
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice",
+-        "bob"
+-      ],
+-      "relations": []
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-alias-relation",
++    "title": "Agent alias and relation fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice"
++    },
++    "bob": {
++      "kind": "person",
++      "name": "Bob"
++    }
++  },
++  "aliases": {
++    "Alice": "alice",
++    "Bob": "bob",
++    "Alicia": "alice"
++  },
++  "relationTypes": {
++    "friend": {
++      "label": "Friend"
++    }
++  },
++  "relations": [
++    {
++      "id": "alice-bob-friend",
++      "a": "alice",
++      "b": "bob",
++      "type": "friend",
++      "label": "Friend"
++    }
++  ],
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice",
++        "bob"
++      ],
++      "relations": []
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r05/grade-task-grader.json b/research/agent-eval/results/scripted/trials/alias-relation-r05/grade-task-grader.json
new file mode 100644
index 0000000..e3b8ecc
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r05/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:f7cd4854b68c44e82ef42d68f95888269812c29c51d5335d80c03d257f236a1c",
+  "graderId": "agent-alias-relation-grader",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/workspace",
+          "alias-relation"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 44.430292,
+        "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "alias-relation: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r05/patch-audit.json b/research/agent-eval/results/scripted/trials/alias-relation-r05/patch-audit.json
new file mode 100644
index 0000000..56484d2
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r05/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:438fa5a7760bf67107d146a84e0594ef4f4cdf1fed8d8f6dacb5d173fb8804ef",
+  "kind": "patch-audit",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "status": "applied",
+  "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+  "patchBytes": 1534,
+  "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+  "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+        "size": 586,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+        "size": 742,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722547-240d68cb31f0c.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 19.349166,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722547-240d68cb31f0c.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 16.682917,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/alias-relation-r05/task-run.json b/research/agent-eval/results/scripted/trials/alias-relation-r05/task-run.json
new file mode 100644
index 0000000..26be1d3
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/alias-relation-r05/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:b0e9bc3308199c93aa0ecf3f1c0dd6356900be925ff7859cd052ed9f3b3e978b",
+  "task": {
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "taskFileSha256": "sha256:ac33ff5e0049324b56141ea0687442ed5e344fb6305390f8257b02f2cd17a630",
+    "sourceRevision": "alias-relation-fixture-v1",
+    "contractTreeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53",
+    "runnerSnapshotBeforeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "runnerSnapshotFinalSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "alias-relation-r05"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r05/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/alias-relation-r05/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 31.565208,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:438fa5a7760bf67107d146a84e0594ef4f4cdf1fed8d8f6dacb5d173fb8804ef",
+    "kind": "patch-audit",
+    "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+    "status": "applied",
+    "patchSha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054",
+    "patchBytes": 1534,
+    "beforeTreeSha256": "sha256:6243526415fa11e029c8205e3ee3ddb2f0cb824e7e561c733480c3c8ecabb6c5",
+    "afterTreeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db",
+          "size": 586,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "bb91d39a32f25c9410a70d06d5314a43bcba7bcf2f97fa9603d4122e29524970",
+          "size": 742,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722547-240d68cb31f0c.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 19.349166,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722547-240d68cb31f0c.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 16.682917,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:f7cd4854b68c44e82ef42d68f95888269812c29c51d5335d80c03d257f236a1c",
+      "graderId": "agent-alias-relation-grader",
+      "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+      "treeSha256": "sha256:d15e90de86ac2a539d31318731e8ccb186e2e26e6ae3dc53511c4f66a29afbfa",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-gEJ4jO/workspace",
+              "alias-relation"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 44.430292,
+            "stdoutSha256": "sha256:4a3966d3a5a5052d2f32c8dc8a3aed53e4834383504caa9459c2442b66a0aded",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "alias-relation: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 1534,
+      "sha256": "sha256:e79768f491710194954343186bd483148a3bfde7ae977df68fc6bd28efcb3054"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1938,
+      "sha256": "sha256:2d955766d67d74e1384fcf4e5fd90813e00085b2ef12988c7617b276de6336e7"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3228,
+      "sha256": "sha256:00fe9e730874970e35e17df5140123bf38ade119b9552c04d53023234288166d"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 265,
+      "sha256": "sha256:a48c9c13252c885c6d147c5a877a8848442d2f66289648a6a48540ec686b8f9e"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r01/TASK.md b/research/agent-eval/results/scripted/trials/field-update-r01/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r01/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/field-update-r01/agent.patch b/research/agent-eval/results/scripted/trials/field-update-r01/agent.patch
new file mode 100644
index 0000000..4ce6f4c
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r01/agent.patch
@@ -0,0 +1,56 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,26 +1,26 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-field-update",
+-    "title": "Agent field update fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice",
+-      "summary": "summary-old"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice"
+-  },
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice"
+-      ]
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-field-update",
++    "title": "Agent field update fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice",
++      "summary": "summary-new"
++    }
++  },
++  "aliases": {
++    "Alice": "alice"
++  },
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice"
++      ]
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r01/grade-task-grader.json b/research/agent-eval/results/scripted/trials/field-update-r01/grade-task-grader.json
new file mode 100644
index 0000000..396d0ed
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r01/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:e72eee9cd7a7185ea0e5480f3b9e1e8045b5dd04209a7c49804cf3663241fc7f",
+  "graderId": "agent-field-update-grader",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/workspace",
+          "field-update"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 33.311,
+        "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "field-update: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r01/patch-audit.json b/research/agent-eval/results/scripted/trials/field-update-r01/patch-audit.json
new file mode 100644
index 0000000..a8960d0
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r01/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:1326b1ec4ce3e6e49f6b8bdd277e64f01cf76d54d8d7301876985994335befa4",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "applied",
+  "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+  "patchBytes": 971,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+        "size": 399,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+        "size": 399,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721233-dddd125def0cb.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 23.227417,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721233-dddd125def0cb.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 16.054875,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r01/task-run.json b/research/agent-eval/results/scripted/trials/field-update-r01/task-run.json
new file mode 100644
index 0000000..38d1c08
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r01/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:a20c9e911b0ae8f51e29aefcfcb4e6e4c2d6f0246eb175cba2d32bb361799750",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r01"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r01/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r01/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 31.500666,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:1326b1ec4ce3e6e49f6b8bdd277e64f01cf76d54d8d7301876985994335befa4",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "applied",
+    "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+    "patchBytes": 971,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+          "size": 399,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+          "size": 399,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721233-dddd125def0cb.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 23.227417,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721233-dddd125def0cb.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 16.054875,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:e72eee9cd7a7185ea0e5480f3b9e1e8045b5dd04209a7c49804cf3663241fc7f",
+      "graderId": "agent-field-update-grader",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-Qr0SIO/workspace",
+              "field-update"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 33.311,
+            "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "field-update: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 971,
+      "sha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1929,
+      "sha256": "sha256:afeadc419f9d9b6feb3c5486f561f97391afabfe020a763fd738f6b14c1299f6"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3227,
+      "sha256": "sha256:71d177fc65806e781896f41b2f6cb73f2f2e5cef2c53124605bd16686bd6d850"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r02/TASK.md b/research/agent-eval/results/scripted/trials/field-update-r02/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r02/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/field-update-r02/agent.patch b/research/agent-eval/results/scripted/trials/field-update-r02/agent.patch
new file mode 100644
index 0000000..4ce6f4c
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r02/agent.patch
@@ -0,0 +1,56 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,26 +1,26 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-field-update",
+-    "title": "Agent field update fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice",
+-      "summary": "summary-old"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice"
+-  },
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice"
+-      ]
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-field-update",
++    "title": "Agent field update fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice",
++      "summary": "summary-new"
++    }
++  },
++  "aliases": {
++    "Alice": "alice"
++  },
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice"
++      ]
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r02/grade-task-grader.json b/research/agent-eval/results/scripted/trials/field-update-r02/grade-task-grader.json
new file mode 100644
index 0000000..10d4f51
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r02/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:c50bc9010fa8a36b23a8a79b48a8128d8ed6556b20241205455c8c257a79ebe8",
+  "graderId": "agent-field-update-grader",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/workspace",
+          "field-update"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 29.11125,
+        "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "field-update: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r02/patch-audit.json b/research/agent-eval/results/scripted/trials/field-update-r02/patch-audit.json
new file mode 100644
index 0000000..84dc822
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r02/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:8a15d4e4414ef51e50879f4b4c062eff988d0068c3b803a57d9af4d3aae0338f",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "applied",
+  "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+  "patchBytes": 971,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+        "size": 399,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+        "size": 399,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721401-91b8821c905b4.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 16.386875,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721401-91b8821c905b4.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.905875,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r02/task-run.json b/research/agent-eval/results/scripted/trials/field-update-r02/task-run.json
new file mode 100644
index 0000000..2b0367f
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r02/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:89368c64a1817b63bd000583abdf2cda7fa4ff60b7203cf7c3693adcd2bb0887",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r02"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r02/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r02/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 27.067958,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:8a15d4e4414ef51e50879f4b4c062eff988d0068c3b803a57d9af4d3aae0338f",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "applied",
+    "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+    "patchBytes": 971,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+          "size": 399,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+          "size": 399,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721401-91b8821c905b4.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 16.386875,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721401-91b8821c905b4.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.905875,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:c50bc9010fa8a36b23a8a79b48a8128d8ed6556b20241205455c8c257a79ebe8",
+      "graderId": "agent-field-update-grader",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-sAAbYB/workspace",
+              "field-update"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 29.11125,
+            "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "field-update: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 971,
+      "sha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1931,
+      "sha256": "sha256:41cc86dc05b903edc315ccdf80e79a3b90447c707ea385c482b574ba4b511370"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3227,
+      "sha256": "sha256:7c9b643ede917c4c3ed68dff290b2accceb70be60b655a8081a40d266362a445"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r03/TASK.md b/research/agent-eval/results/scripted/trials/field-update-r03/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r03/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/field-update-r03/agent.patch b/research/agent-eval/results/scripted/trials/field-update-r03/agent.patch
new file mode 100644
index 0000000..4ce6f4c
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r03/agent.patch
@@ -0,0 +1,56 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,26 +1,26 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-field-update",
+-    "title": "Agent field update fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice",
+-      "summary": "summary-old"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice"
+-  },
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice"
+-      ]
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-field-update",
++    "title": "Agent field update fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice",
++      "summary": "summary-new"
++    }
++  },
++  "aliases": {
++    "Alice": "alice"
++  },
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice"
++      ]
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r03/grade-task-grader.json b/research/agent-eval/results/scripted/trials/field-update-r03/grade-task-grader.json
new file mode 100644
index 0000000..0a74241
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r03/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:f38535b3d6be2681bb9c37cb8372d5074c593945f4e36966302c6823aca21c9f",
+  "graderId": "agent-field-update-grader",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/workspace",
+          "field-update"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 31.790042,
+        "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "field-update: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r03/patch-audit.json b/research/agent-eval/results/scripted/trials/field-update-r03/patch-audit.json
new file mode 100644
index 0000000..ab6df2a
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r03/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:fd0260a0e16498f1d351669f00779fc63425bcb67ba94e83100190ec85105163",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "applied",
+  "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+  "patchBytes": 971,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+        "size": 399,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+        "size": 399,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721546-41c4181b435c9.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.62525,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721546-41c4181b435c9.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.63475,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r03/task-run.json b/research/agent-eval/results/scripted/trials/field-update-r03/task-run.json
new file mode 100644
index 0000000..01a9406
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r03/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:5f5c6f361856b91756fffeddbc25a0fc36d08fdaaa115554ee25612e1885ad82",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r03"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r03/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r03/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 28.683541,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:fd0260a0e16498f1d351669f00779fc63425bcb67ba94e83100190ec85105163",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "applied",
+    "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+    "patchBytes": 971,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+          "size": 399,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+          "size": 399,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721546-41c4181b435c9.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.62525,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721546-41c4181b435c9.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.63475,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:f38535b3d6be2681bb9c37cb8372d5074c593945f4e36966302c6823aca21c9f",
+      "graderId": "agent-field-update-grader",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-LcYVa2/workspace",
+              "field-update"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 31.790042,
+            "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "field-update: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 971,
+      "sha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1932,
+      "sha256": "sha256:acb1738c3c40dfafdede51ea7ccae6805d58b39caf774fe7382207d8a477acc2"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3225,
+      "sha256": "sha256:2c794ae4d1703ce59c5e0cb7c562057893be7c2b76f8912deb349943c90d8048"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r04/TASK.md b/research/agent-eval/results/scripted/trials/field-update-r04/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r04/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/field-update-r04/agent.patch b/research/agent-eval/results/scripted/trials/field-update-r04/agent.patch
new file mode 100644
index 0000000..4ce6f4c
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r04/agent.patch
@@ -0,0 +1,56 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,26 +1,26 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-field-update",
+-    "title": "Agent field update fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice",
+-      "summary": "summary-old"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice"
+-  },
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice"
+-      ]
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-field-update",
++    "title": "Agent field update fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice",
++      "summary": "summary-new"
++    }
++  },
++  "aliases": {
++    "Alice": "alice"
++  },
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice"
++      ]
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r04/grade-task-grader.json b/research/agent-eval/results/scripted/trials/field-update-r04/grade-task-grader.json
new file mode 100644
index 0000000..2981cc7
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r04/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:124c4ec5239e13e4d86180b20f97b5272c88fed18f6324b3925769acf5fe71e8",
+  "graderId": "agent-field-update-grader",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/workspace",
+          "field-update"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 28.0965,
+        "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "field-update: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r04/patch-audit.json b/research/agent-eval/results/scripted/trials/field-update-r04/patch-audit.json
new file mode 100644
index 0000000..b55e703
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r04/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:d5ba256dd215317d15c98a0a5220c714e4e48321d7f80049a1b67068206b890f",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "applied",
+  "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+  "patchBytes": 971,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+        "size": 399,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+        "size": 399,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721690-8866b8b034953.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.89175,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721690-8866b8b034953.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.574125,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r04/task-run.json b/research/agent-eval/results/scripted/trials/field-update-r04/task-run.json
new file mode 100644
index 0000000..6ac93f4
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r04/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:f4ec184511bca5f7e3047e32a41c6e3ac7eba4d3334521211450e034e72f93c2",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r04"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r04/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r04/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 30.376333,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:d5ba256dd215317d15c98a0a5220c714e4e48321d7f80049a1b67068206b890f",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "applied",
+    "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+    "patchBytes": 971,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+          "size": 399,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+          "size": 399,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721690-8866b8b034953.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.89175,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721690-8866b8b034953.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.574125,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:124c4ec5239e13e4d86180b20f97b5272c88fed18f6324b3925769acf5fe71e8",
+      "graderId": "agent-field-update-grader",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-5QYiTg/workspace",
+              "field-update"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 28.0965,
+            "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "field-update: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 971,
+      "sha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1930,
+      "sha256": "sha256:8887c01358919f1a1a71d8b055645116cad77ac978590d1962ca654ac4b6f1c6"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3226,
+      "sha256": "sha256:a65e8adad9191ff5dc043a673a76dc18a0ca9d0ba1022e2bb6ddc521c1702540"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r05/TASK.md b/research/agent-eval/results/scripted/trials/field-update-r05/TASK.md
new file mode 100644
index 0000000..163fbf2
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r05/TASK.md
@@ -0,0 +1 @@
+In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/field-update-r05/agent.patch b/research/agent-eval/results/scripted/trials/field-update-r05/agent.patch
new file mode 100644
index 0000000..4ce6f4c
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r05/agent.patch
@@ -0,0 +1,56 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,26 +1,26 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-field-update",
+-    "title": "Agent field update fixture"
+-  },
+-  "entities": {
+-    "alice": {
+-      "kind": "person",
+-      "name": "Alice",
+-      "summary": "summary-old"
+-    }
+-  },
+-  "aliases": {
+-    "Alice": "alice"
+-  },
+-  "stages": [
+-    {
+-      "key": "main",
+-      "name": "Main",
+-      "entities": [
+-        "alice"
+-      ]
+-    }
+-  ]
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-field-update",
++    "title": "Agent field update fixture"
++  },
++  "entities": {
++    "alice": {
++      "kind": "person",
++      "name": "Alice",
++      "summary": "summary-new"
++    }
++  },
++  "aliases": {
++    "Alice": "alice"
++  },
++  "stages": [
++    {
++      "key": "main",
++      "name": "Main",
++      "entities": [
++        "alice"
++      ]
++    }
++  ]
++}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r05/grade-task-grader.json b/research/agent-eval/results/scripted/trials/field-update-r05/grade-task-grader.json
new file mode 100644
index 0000000..2871394
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r05/grade-task-grader.json
@@ -0,0 +1,65 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:689e8fb92899c58c5b4e287f8196ac77cb259de892001c0572701261e765ee22",
+  "graderId": "agent-field-update-grader",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "verdict": "passed",
+  "score": 3,
+  "maximumScore": 3,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/workspace",
+          "field-update"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 30.454125,
+        "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "field-update: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    }
+  ],
+  "summary": {
+    "total": 2,
+    "passed": 2,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r05/patch-audit.json b/research/agent-eval/results/scripted/trials/field-update-r05/patch-audit.json
new file mode 100644
index 0000000..dd97f5c
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r05/patch-audit.json
@@ -0,0 +1,102 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:90a8bfd32b5381e15b0f90b8505c4327d04154f96fc4e4693ba502483e85c3a2",
+  "kind": "patch-audit",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "status": "applied",
+  "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+  "patchBytes": 971,
+  "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+  "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+        "size": 399,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+        "size": 399,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721828-059da1987ecb8.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 16.900792,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721828-059da1987ecb8.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.336917,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/field-update-r05/task-run.json b/research/agent-eval/results/scripted/trials/field-update-r05/task-run.json
new file mode 100644
index 0000000..4a478e1
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/field-update-r05/task-run.json
@@ -0,0 +1,261 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:d91a816ac0f7c801c78d00dde786a7d3f9ac0e74f320210b6e9bb588aa82eb89",
+  "task": {
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "taskFileSha256": "sha256:27b37bf28fd1fcd4e0d160caef426afbaf27f9a4258e3e92b7795609b249798a",
+    "sourceRevision": "field-update-fixture-v1",
+    "contractTreeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a",
+    "runnerSnapshotBeforeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "runnerSnapshotFinalSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "field-update-r05"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r05/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/field-update-r05/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 28.287417,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:90a8bfd32b5381e15b0f90b8505c4327d04154f96fc4e4693ba502483e85c3a2",
+    "kind": "patch-audit",
+    "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+    "status": "applied",
+    "patchSha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6",
+    "patchBytes": 971,
+    "beforeTreeSha256": "sha256:793d34d30db2b23ad60b518e1ef2ba63af8a1731be03baa813eb0a5730bbf76e",
+    "afterTreeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e",
+          "size": 399,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "7df813f5c953407911e67c0d882560331cdde9c29bf4cc968340f278ebbc72e8",
+          "size": 399,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721828-059da1987ecb8.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 16.900792,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573721828-059da1987ecb8.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.336917,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:689e8fb92899c58c5b4e287f8196ac77cb259de892001c0572701261e765ee22",
+      "graderId": "agent-field-update-grader",
+      "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+      "treeSha256": "sha256:f3b2df0c863b76dd11986b60ba95f484f23b791b9e6b191efb87c353ec0ca6f7",
+      "verdict": "passed",
+      "score": 3,
+      "maximumScore": 3,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-JjKZKb/workspace",
+              "field-update"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 30.454125,
+            "stdoutSha256": "sha256:fb2d6d6ccc2c7839e527f75052fa856b3e0b5c9aff34f424bd69337e5380f1c0",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "field-update: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        }
+      ],
+      "summary": {
+        "total": 2,
+        "passed": 2,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 971,
+      "sha256": "sha256:17e5e6cdeed397b4680ba61619254f982c85eaee59d0c5c79eb1d5de949a7cb6"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 1932,
+      "sha256": "sha256:6bfb4c3822a75f436162da7cdfbd523493a9036c72e1373c293d7e963133371d"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 3227,
+      "sha256": "sha256:1b33f57724a136b2c98d1cd7fe77d8baac2a48ce92646071763bccabb7120a3e"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 187,
+      "sha256": "sha256:21f3f361c74972d195f556886659d9f83a5f002e17ea3ad0dd8bc004a46d7e62"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/TASK.md b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/agent.patch b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/agent.patch
new file mode 100644
index 0000000..3c13399
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/agent.patch
@@ -0,0 +1,138 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,60 +1,68 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-pattern-c",
+-    "title": "Pattern C runtime fixture"
+-  },
+-  "kindNameFields": {
+-    "card": "title"
+-  },
+-  "entities": {
+-    "alpha": {
+-      "kind": "card",
+-      "title": "Alpha Card",
+-      "color": "#2563eb"
+-    },
+-    "beta": {
+-      "kind": "card",
+-      "title": "Beta Card",
+-      "color": "#059669"
+-    }
+-  },
+-  "aliases": {
+-    "Alpha Card": "alpha",
+-    "Beta Card": "beta"
+-  },
+-  "stages": [
+-    {
+-      "key": "gallery",
+-      "name": "Gallery",
+-      "entities": [
+-        "alpha",
+-        "beta"
+-      ]
+-    }
+-  ],
+-  "domain": {
+-    "cardOrder": [
+-      "alpha",
+-      "beta"
+-    ]
+-  },
+-  "derivations": {
+-    "cardGallery": {
+-      "kind": "projection",
+-      "source": "domain.cardOrder",
+-      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
+-      "alsoTouches": [
+-        "entities.*.title",
+-        "entities.*.color"
+-      ],
+-      "consumers": [
+-        "__fromPack",
+-        "#mount .card"
+-      ],
+-      "affects": [
+-        "#mount .card"
+-      ]
+-    }
+-  }
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-pattern-c",
++    "title": "Pattern C runtime fixture"
++  },
++  "kindNameFields": {
++    "card": "title"
++  },
++  "entities": {
++    "alpha": {
++      "kind": "card",
++      "title": "Alpha Card",
++      "color": "#2563eb"
++    },
++    "beta": {
++      "kind": "card",
++      "title": "Beta Card",
++      "color": "#059669"
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
++    }
++  },
++  "aliases": {
++    "Alpha Card": "alpha",
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
++  },
++  "stages": [
++    {
++      "key": "gallery",
++      "name": "Gallery",
++      "entities": [
++        "alpha",
++        "beta",
++        "gamma"
++      ]
++    }
++  ],
++  "domain": {
++    "cardOrder": [
++      "alpha",
++      "beta",
++      "gamma"
++    ]
++  },
++  "derivations": {
++    "cardGallery": {
++      "kind": "projection",
++      "source": "domain.cardOrder",
++      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
++      "alsoTouches": [
++        "entities.*.title",
++        "entities.*.color"
++      ],
++      "consumers": [
++        "__fromPack",
++        "#mount .card"
++      ],
++      "affects": [
++        "#mount .card"
++      ]
++    }
++  }
++}
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1,1 +1,1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate-stability.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate-stability.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate-stability.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate-stability.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate-stability.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate-stability.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/candidate.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/grade-task-grader.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/grade-task-grader.json
new file mode 100644
index 0000000..121f7a2
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/grade-task-grader.json
@@ -0,0 +1,153 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:a75485d503fd8edab6d588abf9c0b7c2e6fc4f319215dff34706531b3f929958",
+  "graderId": "agent-pattern-c-grader",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "verdict": "passed",
+  "score": 8,
+  "maximumScore": 8,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+          "pattern-c"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 33.188042,
+        "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "pattern-c: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "browser-producer",
+      "type": "command",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/trusted-graders/task-grader/browser-evidence.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+          "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r01",
+          "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+          "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/trusted-tools"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14711.43375,
+        "stdoutSha256": "sha256:af6bc0b45d5c2e159977bef70f932bb427f715f9d5d3ba9be4d17108c464314c",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "{\"runtime\":\"runtime:bf8c9420fd9c0abe13794e82c8e35527e0128049fe59c4d1270c241330c99a03\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "runtime-mount",
+      "type": "runtime-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery",
+        "file": "runtime-evidence.json",
+        "evidenceId": "runtime:bf8c9420fd9c0abe13794e82c8e35527e0128049fe59c4d1270c241330c99a03",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "summary": {
+            "assertions": 4,
+            "passed": 4,
+            "failed": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "visual-regression",
+      "type": "visual-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery-desktop",
+        "file": "visual-evidence.json",
+        "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "scenarios": [
+            {
+              "id": "pattern-c-gallery-desktop",
+              "status": "passed",
+              "errors": []
+            }
+          ],
+          "summary": {
+            "total": 1,
+            "passed": 1,
+            "failed": 0,
+            "notAssessed": 0
+          }
+        }
+      }
+    }
+  ],
+  "summary": {
+    "total": 5,
+    "passed": 5,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/patch-audit.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/patch-audit.json
new file mode 100644
index 0000000..2a0b9bc
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/patch-audit.json
@@ -0,0 +1,138 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:5de7fe3d828cbc0f4e2d5ba8c9d45c3b75907cbd6539e418312d1cc18fc3d113",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "applied",
+  "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+  "patchBytes": 4263,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+        "size": 743,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+        "size": 843,
+        "target": null
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+        "size": 1079,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+        "size": 1236,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722712-381974c26a173.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 17.3855,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722712-381974c26a173.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 17.476042,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/reference.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/reference.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/reference.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/reference.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/reference.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/reference.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/runtime-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/runtime-evidence.json
new file mode 100644
index 0000000..6549305
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/runtime-evidence.json
@@ -0,0 +1,54 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "runtime-evidence",
+  "evidenceId": "runtime:bf8c9420fd9c0abe13794e82c8e35527e0128049fe59c4d1270c241330c99a03",
+  "scenarioId": "pattern-c-gallery",
+  "subjectTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "producer": {
+    "name": "headless-chrome-pattern-c",
+    "version": "1.2.0"
+  },
+  "environment": {
+    "browser": "Google Chrome 151.0.7922.71",
+    "platform": "darwin",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670"
+  },
+  "assertions": [
+    {
+      "id": "error-collector",
+      "status": "passed"
+    },
+    {
+      "id": "mount-status",
+      "status": "passed",
+      "actual": "passed"
+    },
+    {
+      "id": "card-count",
+      "status": "passed",
+      "actual": 3,
+      "expected": 3
+    },
+    {
+      "id": "gamma-visible",
+      "status": "passed"
+    }
+  ],
+  "consoleErrors": [],
+  "pageErrors": [],
+  "networkFailures": [],
+  "artifacts": [
+    {
+      "id": "candidate-dom",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "candidate-browser-log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "sha256": "sha256:5ad0b8e8eec8fcaf2991e484a6bc12f1aa2e846280ab75bef83ad50723c9d427"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/stability-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/stability-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/stability-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/task-run.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/task-run.json
new file mode 100644
index 0000000..0f246ed
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/task-run.json
@@ -0,0 +1,476 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:cff1d5ef6d7878a868d6b1926170ca0b86a400e1a6ac42a313674df4b1e3d12c",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r01"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r01/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r01/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 31.283458,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:5de7fe3d828cbc0f4e2d5ba8c9d45c3b75907cbd6539e418312d1cc18fc3d113",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "applied",
+    "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+    "patchBytes": 4263,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+          "size": 743,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+          "size": 843,
+          "target": null
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+          "size": 1079,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+          "size": 1236,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722712-381974c26a173.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 17.3855,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573722712-381974c26a173.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 17.476042,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:a75485d503fd8edab6d588abf9c0b7c2e6fc4f319215dff34706531b3f929958",
+      "graderId": "agent-pattern-c-grader",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+      "verdict": "passed",
+      "score": 8,
+      "maximumScore": 8,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+              "pattern-c"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 33.188042,
+            "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "pattern-c: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "browser-producer",
+          "type": "command",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/trusted-graders/task-grader/browser-evidence.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/workspace",
+              "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r01",
+              "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+              "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-u8p6NJ/trusted-tools"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 14711.43375,
+            "stdoutSha256": "sha256:af6bc0b45d5c2e159977bef70f932bb427f715f9d5d3ba9be4d17108c464314c",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "{\"runtime\":\"runtime:bf8c9420fd9c0abe13794e82c8e35527e0128049fe59c4d1270c241330c99a03\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "runtime-mount",
+          "type": "runtime-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery",
+            "file": "runtime-evidence.json",
+            "evidenceId": "runtime:bf8c9420fd9c0abe13794e82c8e35527e0128049fe59c4d1270c241330c99a03",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "summary": {
+                "assertions": 4,
+                "passed": 4,
+                "failed": 0
+              }
+            }
+          }
+        },
+        {
+          "id": "visual-regression",
+          "type": "visual-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery-desktop",
+            "file": "visual-evidence.json",
+            "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "scenarios": [
+                {
+                  "id": "pattern-c-gallery-desktop",
+                  "status": "passed",
+                  "errors": []
+                }
+              ],
+              "summary": {
+                "total": 1,
+                "passed": 1,
+                "failed": 0,
+                "notAssessed": 0
+              }
+            }
+          }
+        }
+      ],
+      "summary": {
+        "total": 5,
+        "passed": 5,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 4263,
+      "sha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9"
+    },
+    {
+      "id": "generated-candidate-stability.chrome.log",
+      "path": "candidate-stability.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 267,
+      "sha256": "sha256:b9d235bf4fa8c685da7d7d2c51725b19a91519507af0359f69011ed061f69439"
+    },
+    {
+      "id": "generated-candidate-stability.dom.html",
+      "path": "candidate-stability.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate-stability.png",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-candidate.chrome.log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:5ad0b8e8eec8fcaf2991e484a6bc12f1aa2e846280ab75bef83ad50723c9d427"
+    },
+    {
+      "id": "generated-candidate.dom.html",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate.png",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 4935,
+      "sha256": "sha256:a463e2062567ef2820d61fbe0afd5e2f154398ad6908188af4ffa4eaca22087d"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 4165,
+      "sha256": "sha256:3184cc01e9cd4d89c2d88987b2eef1b46a0c95ed5a6e17f19fa6560143255854"
+    },
+    {
+      "id": "generated-reference.chrome.log",
+      "path": "reference.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:07e5a5fbc3d11484f058d02a1f87a89b4e50556e622871d635e4e52e56c595b4"
+    },
+    {
+      "id": "generated-reference.dom.html",
+      "path": "reference.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-reference.png",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-runtime-evidence.json",
+      "path": "runtime-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 1411,
+      "sha256": "sha256:d13baaa254a02c147b7d2b3e937200b9ac41facdd8c33967e1ac268461224501"
+    },
+    {
+      "id": "generated-stability-diff.png",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    },
+    {
+      "id": "generated-visual-diff.png",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "generated-visual-evidence.json",
+      "path": "visual-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 2101,
+      "sha256": "sha256:4a873f05810c949bd2357d3d90872e5238a9a49f2424d35d15858e4faecdf902"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/visual-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/visual-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/visual-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/visual-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/visual-evidence.json
new file mode 100644
index 0000000..a6bee82
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r01/visual-evidence.json
@@ -0,0 +1,65 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "visual-evidence",
+  "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+  "referenceTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "candidateTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "configurationSha256": "sha256:a6a063638a9b86f8d9c89b8dede46bc2069caf1067400f293fdf3ff6c185a41e",
+  "producer": {
+    "name": "headless-chrome-pillow",
+    "version": "1.2.0"
+  },
+  "thresholds": {
+    "maxPixelDiffRatio": 0.02,
+    "minComputedStyleScore": 0.98,
+    "minCoverage": 1
+  },
+  "scenarios": [
+    {
+      "id": "pattern-c-gallery-desktop",
+      "viewport": {
+        "width": 1100,
+        "height": 720
+      },
+      "pixelDiffRatio": 0,
+      "computedStyleScore": 1,
+      "coverage": 1,
+      "stabilityFailures": 0,
+      "referenceArtifact": "reference-screenshot",
+      "candidateArtifact": "candidate-screenshot",
+      "diffArtifact": "diff-screenshot"
+    }
+  ],
+  "artifacts": [
+    {
+      "id": "reference-screenshot",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "candidate-screenshot",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "diff-screenshot",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "candidate-stability-screenshot",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "stability-diff-screenshot",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/TASK.md b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/agent.patch b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/agent.patch
new file mode 100644
index 0000000..3c13399
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/agent.patch
@@ -0,0 +1,138 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,60 +1,68 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-pattern-c",
+-    "title": "Pattern C runtime fixture"
+-  },
+-  "kindNameFields": {
+-    "card": "title"
+-  },
+-  "entities": {
+-    "alpha": {
+-      "kind": "card",
+-      "title": "Alpha Card",
+-      "color": "#2563eb"
+-    },
+-    "beta": {
+-      "kind": "card",
+-      "title": "Beta Card",
+-      "color": "#059669"
+-    }
+-  },
+-  "aliases": {
+-    "Alpha Card": "alpha",
+-    "Beta Card": "beta"
+-  },
+-  "stages": [
+-    {
+-      "key": "gallery",
+-      "name": "Gallery",
+-      "entities": [
+-        "alpha",
+-        "beta"
+-      ]
+-    }
+-  ],
+-  "domain": {
+-    "cardOrder": [
+-      "alpha",
+-      "beta"
+-    ]
+-  },
+-  "derivations": {
+-    "cardGallery": {
+-      "kind": "projection",
+-      "source": "domain.cardOrder",
+-      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
+-      "alsoTouches": [
+-        "entities.*.title",
+-        "entities.*.color"
+-      ],
+-      "consumers": [
+-        "__fromPack",
+-        "#mount .card"
+-      ],
+-      "affects": [
+-        "#mount .card"
+-      ]
+-    }
+-  }
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-pattern-c",
++    "title": "Pattern C runtime fixture"
++  },
++  "kindNameFields": {
++    "card": "title"
++  },
++  "entities": {
++    "alpha": {
++      "kind": "card",
++      "title": "Alpha Card",
++      "color": "#2563eb"
++    },
++    "beta": {
++      "kind": "card",
++      "title": "Beta Card",
++      "color": "#059669"
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
++    }
++  },
++  "aliases": {
++    "Alpha Card": "alpha",
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
++  },
++  "stages": [
++    {
++      "key": "gallery",
++      "name": "Gallery",
++      "entities": [
++        "alpha",
++        "beta",
++        "gamma"
++      ]
++    }
++  ],
++  "domain": {
++    "cardOrder": [
++      "alpha",
++      "beta",
++      "gamma"
++    ]
++  },
++  "derivations": {
++    "cardGallery": {
++      "kind": "projection",
++      "source": "domain.cardOrder",
++      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
++      "alsoTouches": [
++        "entities.*.title",
++        "entities.*.color"
++      ],
++      "consumers": [
++        "__fromPack",
++        "#mount .card"
++      ],
++      "affects": [
++        "#mount .card"
++      ]
++    }
++  }
++}
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1,1 +1,1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate-stability.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate-stability.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate-stability.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate-stability.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate-stability.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate-stability.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/candidate.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/grade-task-grader.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/grade-task-grader.json
new file mode 100644
index 0000000..452bd13
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/grade-task-grader.json
@@ -0,0 +1,153 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:7743862088b3eeb86f72c537e3e8f361ab7317de16c02cb9c63ecfb30d50863e",
+  "graderId": "agent-pattern-c-grader",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "verdict": "passed",
+  "score": 8,
+  "maximumScore": 8,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+          "pattern-c"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 30.477208,
+        "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "pattern-c: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "browser-producer",
+      "type": "command",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/trusted-graders/task-grader/browser-evidence.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+          "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r02",
+          "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+          "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/trusted-tools"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 13738.082833,
+        "stdoutSha256": "sha256:44bab48262744942813bfdc897490cc305a87e3b597a2d2366dac54eb17b4bc5",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "{\"runtime\":\"runtime:33b0efb9521aaee93d7ea0861f330a8010a8d21c389af676d723ab319decbb77\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "runtime-mount",
+      "type": "runtime-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery",
+        "file": "runtime-evidence.json",
+        "evidenceId": "runtime:33b0efb9521aaee93d7ea0861f330a8010a8d21c389af676d723ab319decbb77",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "summary": {
+            "assertions": 4,
+            "passed": 4,
+            "failed": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "visual-regression",
+      "type": "visual-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery-desktop",
+        "file": "visual-evidence.json",
+        "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "scenarios": [
+            {
+              "id": "pattern-c-gallery-desktop",
+              "status": "passed",
+              "errors": []
+            }
+          ],
+          "summary": {
+            "total": 1,
+            "passed": 1,
+            "failed": 0,
+            "notAssessed": 0
+          }
+        }
+      }
+    }
+  ],
+  "summary": {
+    "total": 5,
+    "passed": 5,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/patch-audit.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/patch-audit.json
new file mode 100644
index 0000000..31c5281
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/patch-audit.json
@@ -0,0 +1,138 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:5b52b0c2bafc1a190c3162294dcc7f29f983751386ccfc8269fb49bd2c466765",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "applied",
+  "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+  "patchBytes": 4263,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+        "size": 743,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+        "size": 843,
+        "target": null
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+        "size": 1079,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+        "size": 1236,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573737607-02a40c3d603c6.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 18.528167,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573737607-02a40c3d603c6.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.677167,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/reference.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/reference.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/reference.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/reference.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/reference.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/reference.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/runtime-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/runtime-evidence.json
new file mode 100644
index 0000000..b7fac59
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/runtime-evidence.json
@@ -0,0 +1,54 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "runtime-evidence",
+  "evidenceId": "runtime:33b0efb9521aaee93d7ea0861f330a8010a8d21c389af676d723ab319decbb77",
+  "scenarioId": "pattern-c-gallery",
+  "subjectTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "producer": {
+    "name": "headless-chrome-pattern-c",
+    "version": "1.2.0"
+  },
+  "environment": {
+    "browser": "Google Chrome 151.0.7922.71",
+    "platform": "darwin",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670"
+  },
+  "assertions": [
+    {
+      "id": "error-collector",
+      "status": "passed"
+    },
+    {
+      "id": "mount-status",
+      "status": "passed",
+      "actual": "passed"
+    },
+    {
+      "id": "card-count",
+      "status": "passed",
+      "actual": 3,
+      "expected": 3
+    },
+    {
+      "id": "gamma-visible",
+      "status": "passed"
+    }
+  ],
+  "consoleErrors": [],
+  "pageErrors": [],
+  "networkFailures": [],
+  "artifacts": [
+    {
+      "id": "candidate-dom",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "candidate-browser-log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "sha256": "sha256:4acf52d45108aa92057b18da7fd2c999bce2e46fcf0e38983b5af16e47c487e0"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/stability-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/stability-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/stability-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/task-run.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/task-run.json
new file mode 100644
index 0000000..e78a1d9
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/task-run.json
@@ -0,0 +1,476 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:ede9b03b19180a591922ff9a7dc696fd54bfe31cedb7dd77c81b72381fd55250",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r02"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r02/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r02/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 28.413959,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:5b52b0c2bafc1a190c3162294dcc7f29f983751386ccfc8269fb49bd2c466765",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "applied",
+    "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+    "patchBytes": 4263,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+          "size": 743,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+          "size": 843,
+          "target": null
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+          "size": 1079,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+          "size": 1236,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573737607-02a40c3d603c6.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 18.528167,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573737607-02a40c3d603c6.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.677167,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:7743862088b3eeb86f72c537e3e8f361ab7317de16c02cb9c63ecfb30d50863e",
+      "graderId": "agent-pattern-c-grader",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+      "verdict": "passed",
+      "score": 8,
+      "maximumScore": 8,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+              "pattern-c"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 30.477208,
+            "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "pattern-c: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "browser-producer",
+          "type": "command",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/trusted-graders/task-grader/browser-evidence.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/workspace",
+              "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r02",
+              "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+              "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-d7WYMG/trusted-tools"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 13738.082833,
+            "stdoutSha256": "sha256:44bab48262744942813bfdc897490cc305a87e3b597a2d2366dac54eb17b4bc5",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "{\"runtime\":\"runtime:33b0efb9521aaee93d7ea0861f330a8010a8d21c389af676d723ab319decbb77\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "runtime-mount",
+          "type": "runtime-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery",
+            "file": "runtime-evidence.json",
+            "evidenceId": "runtime:33b0efb9521aaee93d7ea0861f330a8010a8d21c389af676d723ab319decbb77",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "summary": {
+                "assertions": 4,
+                "passed": 4,
+                "failed": 0
+              }
+            }
+          }
+        },
+        {
+          "id": "visual-regression",
+          "type": "visual-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery-desktop",
+            "file": "visual-evidence.json",
+            "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "scenarios": [
+                {
+                  "id": "pattern-c-gallery-desktop",
+                  "status": "passed",
+                  "errors": []
+                }
+              ],
+              "summary": {
+                "total": 1,
+                "passed": 1,
+                "failed": 0,
+                "notAssessed": 0
+              }
+            }
+          }
+        }
+      ],
+      "summary": {
+        "total": 5,
+        "passed": 5,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 4263,
+      "sha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9"
+    },
+    {
+      "id": "generated-candidate-stability.chrome.log",
+      "path": "candidate-stability.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 267,
+      "sha256": "sha256:da085c29ec3dc468b624d7256c09b7bb20014f4aed7c94611d81e983b3a953a6"
+    },
+    {
+      "id": "generated-candidate-stability.dom.html",
+      "path": "candidate-stability.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate-stability.png",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-candidate.chrome.log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 1553,
+      "sha256": "sha256:4acf52d45108aa92057b18da7fd2c999bce2e46fcf0e38983b5af16e47c487e0"
+    },
+    {
+      "id": "generated-candidate.dom.html",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate.png",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 4936,
+      "sha256": "sha256:cafab5b39915e65f82c17c5fdbaa4b9c187a343d8925abe3f28b0d7bb34b9e41"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 4167,
+      "sha256": "sha256:d661ec548bbff8d9f3ac85964d33b60194246a2005daf9fc473bfc5ec71c1701"
+    },
+    {
+      "id": "generated-reference.chrome.log",
+      "path": "reference.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:b33b940c57de58eec2dd37bf7858cab61387664d11f917e89309be33005a377d"
+    },
+    {
+      "id": "generated-reference.dom.html",
+      "path": "reference.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-reference.png",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-runtime-evidence.json",
+      "path": "runtime-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 1411,
+      "sha256": "sha256:18445f4911ebfb0a0bd24570f3b75391662e6e4f74a3c95d239df453c297c9d0"
+    },
+    {
+      "id": "generated-stability-diff.png",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    },
+    {
+      "id": "generated-visual-diff.png",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "generated-visual-evidence.json",
+      "path": "visual-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 2101,
+      "sha256": "sha256:4a873f05810c949bd2357d3d90872e5238a9a49f2424d35d15858e4faecdf902"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/visual-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/visual-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/visual-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/visual-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/visual-evidence.json
new file mode 100644
index 0000000..a6bee82
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r02/visual-evidence.json
@@ -0,0 +1,65 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "visual-evidence",
+  "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+  "referenceTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "candidateTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "configurationSha256": "sha256:a6a063638a9b86f8d9c89b8dede46bc2069caf1067400f293fdf3ff6c185a41e",
+  "producer": {
+    "name": "headless-chrome-pillow",
+    "version": "1.2.0"
+  },
+  "thresholds": {
+    "maxPixelDiffRatio": 0.02,
+    "minComputedStyleScore": 0.98,
+    "minCoverage": 1
+  },
+  "scenarios": [
+    {
+      "id": "pattern-c-gallery-desktop",
+      "viewport": {
+        "width": 1100,
+        "height": 720
+      },
+      "pixelDiffRatio": 0,
+      "computedStyleScore": 1,
+      "coverage": 1,
+      "stabilityFailures": 0,
+      "referenceArtifact": "reference-screenshot",
+      "candidateArtifact": "candidate-screenshot",
+      "diffArtifact": "diff-screenshot"
+    }
+  ],
+  "artifacts": [
+    {
+      "id": "reference-screenshot",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "candidate-screenshot",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "diff-screenshot",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "candidate-stability-screenshot",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "stability-diff-screenshot",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/TASK.md b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/agent.patch b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/agent.patch
new file mode 100644
index 0000000..3c13399
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/agent.patch
@@ -0,0 +1,138 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,60 +1,68 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-pattern-c",
+-    "title": "Pattern C runtime fixture"
+-  },
+-  "kindNameFields": {
+-    "card": "title"
+-  },
+-  "entities": {
+-    "alpha": {
+-      "kind": "card",
+-      "title": "Alpha Card",
+-      "color": "#2563eb"
+-    },
+-    "beta": {
+-      "kind": "card",
+-      "title": "Beta Card",
+-      "color": "#059669"
+-    }
+-  },
+-  "aliases": {
+-    "Alpha Card": "alpha",
+-    "Beta Card": "beta"
+-  },
+-  "stages": [
+-    {
+-      "key": "gallery",
+-      "name": "Gallery",
+-      "entities": [
+-        "alpha",
+-        "beta"
+-      ]
+-    }
+-  ],
+-  "domain": {
+-    "cardOrder": [
+-      "alpha",
+-      "beta"
+-    ]
+-  },
+-  "derivations": {
+-    "cardGallery": {
+-      "kind": "projection",
+-      "source": "domain.cardOrder",
+-      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
+-      "alsoTouches": [
+-        "entities.*.title",
+-        "entities.*.color"
+-      ],
+-      "consumers": [
+-        "__fromPack",
+-        "#mount .card"
+-      ],
+-      "affects": [
+-        "#mount .card"
+-      ]
+-    }
+-  }
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-pattern-c",
++    "title": "Pattern C runtime fixture"
++  },
++  "kindNameFields": {
++    "card": "title"
++  },
++  "entities": {
++    "alpha": {
++      "kind": "card",
++      "title": "Alpha Card",
++      "color": "#2563eb"
++    },
++    "beta": {
++      "kind": "card",
++      "title": "Beta Card",
++      "color": "#059669"
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
++    }
++  },
++  "aliases": {
++    "Alpha Card": "alpha",
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
++  },
++  "stages": [
++    {
++      "key": "gallery",
++      "name": "Gallery",
++      "entities": [
++        "alpha",
++        "beta",
++        "gamma"
++      ]
++    }
++  ],
++  "domain": {
++    "cardOrder": [
++      "alpha",
++      "beta",
++      "gamma"
++    ]
++  },
++  "derivations": {
++    "cardGallery": {
++      "kind": "projection",
++      "source": "domain.cardOrder",
++      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
++      "alsoTouches": [
++        "entities.*.title",
++        "entities.*.color"
++      ],
++      "consumers": [
++        "__fromPack",
++        "#mount .card"
++      ],
++      "affects": [
++        "#mount .card"
++      ]
++    }
++  }
++}
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1,1 +1,1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate-stability.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate-stability.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate-stability.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate-stability.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate-stability.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate-stability.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/candidate.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/grade-task-grader.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/grade-task-grader.json
new file mode 100644
index 0000000..c58ccc6
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/grade-task-grader.json
@@ -0,0 +1,153 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:31d4693be8d9f057737c41a1b45578aa5746b144043e3b656f8a27fea5d4b4df",
+  "graderId": "agent-pattern-c-grader",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "verdict": "passed",
+  "score": 8,
+  "maximumScore": 8,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+          "pattern-c"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 30.858875,
+        "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "pattern-c: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "browser-producer",
+      "type": "command",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/trusted-graders/task-grader/browser-evidence.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+          "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r03",
+          "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+          "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/trusted-tools"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 13821.886125,
+        "stdoutSha256": "sha256:175226371514b41a5cf49d938ef472511318466cb0138c977a8e3d822edb576f",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "{\"runtime\":\"runtime:b3d9b31dc9b5fca1018557c35e4fe9d373061a3ec6bd1af82026bc67075b12d4\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "runtime-mount",
+      "type": "runtime-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery",
+        "file": "runtime-evidence.json",
+        "evidenceId": "runtime:b3d9b31dc9b5fca1018557c35e4fe9d373061a3ec6bd1af82026bc67075b12d4",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "summary": {
+            "assertions": 4,
+            "passed": 4,
+            "failed": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "visual-regression",
+      "type": "visual-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery-desktop",
+        "file": "visual-evidence.json",
+        "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "scenarios": [
+            {
+              "id": "pattern-c-gallery-desktop",
+              "status": "passed",
+              "errors": []
+            }
+          ],
+          "summary": {
+            "total": 1,
+            "passed": 1,
+            "failed": 0,
+            "notAssessed": 0
+          }
+        }
+      }
+    }
+  ],
+  "summary": {
+    "total": 5,
+    "passed": 5,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/patch-audit.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/patch-audit.json
new file mode 100644
index 0000000..63c5bd8
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/patch-audit.json
@@ -0,0 +1,138 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:d61e850daff6fd8215b7639f8abf68bb5ae85cfd844d9febeec576cb16e36728",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "applied",
+  "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+  "patchBytes": 4263,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+        "size": 743,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+        "size": 843,
+        "target": null
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+        "size": 1079,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+        "size": 1236,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573751514-ddbc99ce03f8d.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 16.91,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573751514-ddbc99ce03f8d.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.36,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/reference.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/reference.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/reference.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/reference.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/reference.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/reference.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/runtime-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/runtime-evidence.json
new file mode 100644
index 0000000..522fe24
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/runtime-evidence.json
@@ -0,0 +1,54 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "runtime-evidence",
+  "evidenceId": "runtime:b3d9b31dc9b5fca1018557c35e4fe9d373061a3ec6bd1af82026bc67075b12d4",
+  "scenarioId": "pattern-c-gallery",
+  "subjectTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "producer": {
+    "name": "headless-chrome-pattern-c",
+    "version": "1.2.0"
+  },
+  "environment": {
+    "browser": "Google Chrome 151.0.7922.71",
+    "platform": "darwin",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670"
+  },
+  "assertions": [
+    {
+      "id": "error-collector",
+      "status": "passed"
+    },
+    {
+      "id": "mount-status",
+      "status": "passed",
+      "actual": "passed"
+    },
+    {
+      "id": "card-count",
+      "status": "passed",
+      "actual": 3,
+      "expected": 3
+    },
+    {
+      "id": "gamma-visible",
+      "status": "passed"
+    }
+  ],
+  "consoleErrors": [],
+  "pageErrors": [],
+  "networkFailures": [],
+  "artifacts": [
+    {
+      "id": "candidate-dom",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "candidate-browser-log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "sha256": "sha256:2d0f203ed970e982db61c83bf6701974472469a15d60256465acfc94f77b8cf8"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/stability-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/stability-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/stability-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/task-run.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/task-run.json
new file mode 100644
index 0000000..9415ad6
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/task-run.json
@@ -0,0 +1,476 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:26b4217e2b6c4ee90889a995a5113555d4678ed2626d6420be76a14e8f643048",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r03"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r03/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r03/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 32.224291,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:d61e850daff6fd8215b7639f8abf68bb5ae85cfd844d9febeec576cb16e36728",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "applied",
+    "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+    "patchBytes": 4263,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+          "size": 743,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+          "size": 843,
+          "target": null
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+          "size": 1079,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+          "size": 1236,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573751514-ddbc99ce03f8d.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 16.91,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573751514-ddbc99ce03f8d.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.36,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:31d4693be8d9f057737c41a1b45578aa5746b144043e3b656f8a27fea5d4b4df",
+      "graderId": "agent-pattern-c-grader",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+      "verdict": "passed",
+      "score": 8,
+      "maximumScore": 8,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+              "pattern-c"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 30.858875,
+            "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "pattern-c: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "browser-producer",
+          "type": "command",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/trusted-graders/task-grader/browser-evidence.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/workspace",
+              "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r03",
+              "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+              "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-04P5Oh/trusted-tools"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 13821.886125,
+            "stdoutSha256": "sha256:175226371514b41a5cf49d938ef472511318466cb0138c977a8e3d822edb576f",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "{\"runtime\":\"runtime:b3d9b31dc9b5fca1018557c35e4fe9d373061a3ec6bd1af82026bc67075b12d4\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "runtime-mount",
+          "type": "runtime-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery",
+            "file": "runtime-evidence.json",
+            "evidenceId": "runtime:b3d9b31dc9b5fca1018557c35e4fe9d373061a3ec6bd1af82026bc67075b12d4",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "summary": {
+                "assertions": 4,
+                "passed": 4,
+                "failed": 0
+              }
+            }
+          }
+        },
+        {
+          "id": "visual-regression",
+          "type": "visual-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery-desktop",
+            "file": "visual-evidence.json",
+            "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "scenarios": [
+                {
+                  "id": "pattern-c-gallery-desktop",
+                  "status": "passed",
+                  "errors": []
+                }
+              ],
+              "summary": {
+                "total": 1,
+                "passed": 1,
+                "failed": 0,
+                "notAssessed": 0
+              }
+            }
+          }
+        }
+      ],
+      "summary": {
+        "total": 5,
+        "passed": 5,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 4263,
+      "sha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9"
+    },
+    {
+      "id": "generated-candidate-stability.chrome.log",
+      "path": "candidate-stability.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 267,
+      "sha256": "sha256:315e295fd5c2d5faeb8b784c51cb7252cb4630bb5b0fe8f4f46f7ba82ba9fca0"
+    },
+    {
+      "id": "generated-candidate-stability.dom.html",
+      "path": "candidate-stability.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate-stability.png",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-candidate.chrome.log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:2d0f203ed970e982db61c83bf6701974472469a15d60256465acfc94f77b8cf8"
+    },
+    {
+      "id": "generated-candidate.dom.html",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate.png",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 4936,
+      "sha256": "sha256:e0067180648284b4eec64f9f27bd5822837aad587fcf40ac8b915d9ff8321e9d"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 4159,
+      "sha256": "sha256:6da6c70bc44a217e656fde37024a5a98e83b18a130f12af18fc22cade48f6c88"
+    },
+    {
+      "id": "generated-reference.chrome.log",
+      "path": "reference.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:a8fa1d6e676b8d43d01a8da1ffff937b637ed253d5ad16674c88839defabd1da"
+    },
+    {
+      "id": "generated-reference.dom.html",
+      "path": "reference.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-reference.png",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-runtime-evidence.json",
+      "path": "runtime-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 1411,
+      "sha256": "sha256:00f92d252961cd638ec3db9b1ff9405f419a17a4422535194b29bb783c724d48"
+    },
+    {
+      "id": "generated-stability-diff.png",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    },
+    {
+      "id": "generated-visual-diff.png",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "generated-visual-evidence.json",
+      "path": "visual-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 2101,
+      "sha256": "sha256:4a873f05810c949bd2357d3d90872e5238a9a49f2424d35d15858e4faecdf902"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/visual-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/visual-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/visual-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/visual-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/visual-evidence.json
new file mode 100644
index 0000000..a6bee82
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r03/visual-evidence.json
@@ -0,0 +1,65 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "visual-evidence",
+  "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+  "referenceTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "candidateTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "configurationSha256": "sha256:a6a063638a9b86f8d9c89b8dede46bc2069caf1067400f293fdf3ff6c185a41e",
+  "producer": {
+    "name": "headless-chrome-pillow",
+    "version": "1.2.0"
+  },
+  "thresholds": {
+    "maxPixelDiffRatio": 0.02,
+    "minComputedStyleScore": 0.98,
+    "minCoverage": 1
+  },
+  "scenarios": [
+    {
+      "id": "pattern-c-gallery-desktop",
+      "viewport": {
+        "width": 1100,
+        "height": 720
+      },
+      "pixelDiffRatio": 0,
+      "computedStyleScore": 1,
+      "coverage": 1,
+      "stabilityFailures": 0,
+      "referenceArtifact": "reference-screenshot",
+      "candidateArtifact": "candidate-screenshot",
+      "diffArtifact": "diff-screenshot"
+    }
+  ],
+  "artifacts": [
+    {
+      "id": "reference-screenshot",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "candidate-screenshot",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "diff-screenshot",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "candidate-stability-screenshot",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "stability-diff-screenshot",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/TASK.md b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/agent.patch b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/agent.patch
new file mode 100644
index 0000000..3c13399
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/agent.patch
@@ -0,0 +1,138 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,60 +1,68 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-pattern-c",
+-    "title": "Pattern C runtime fixture"
+-  },
+-  "kindNameFields": {
+-    "card": "title"
+-  },
+-  "entities": {
+-    "alpha": {
+-      "kind": "card",
+-      "title": "Alpha Card",
+-      "color": "#2563eb"
+-    },
+-    "beta": {
+-      "kind": "card",
+-      "title": "Beta Card",
+-      "color": "#059669"
+-    }
+-  },
+-  "aliases": {
+-    "Alpha Card": "alpha",
+-    "Beta Card": "beta"
+-  },
+-  "stages": [
+-    {
+-      "key": "gallery",
+-      "name": "Gallery",
+-      "entities": [
+-        "alpha",
+-        "beta"
+-      ]
+-    }
+-  ],
+-  "domain": {
+-    "cardOrder": [
+-      "alpha",
+-      "beta"
+-    ]
+-  },
+-  "derivations": {
+-    "cardGallery": {
+-      "kind": "projection",
+-      "source": "domain.cardOrder",
+-      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
+-      "alsoTouches": [
+-        "entities.*.title",
+-        "entities.*.color"
+-      ],
+-      "consumers": [
+-        "__fromPack",
+-        "#mount .card"
+-      ],
+-      "affects": [
+-        "#mount .card"
+-      ]
+-    }
+-  }
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-pattern-c",
++    "title": "Pattern C runtime fixture"
++  },
++  "kindNameFields": {
++    "card": "title"
++  },
++  "entities": {
++    "alpha": {
++      "kind": "card",
++      "title": "Alpha Card",
++      "color": "#2563eb"
++    },
++    "beta": {
++      "kind": "card",
++      "title": "Beta Card",
++      "color": "#059669"
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
++    }
++  },
++  "aliases": {
++    "Alpha Card": "alpha",
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
++  },
++  "stages": [
++    {
++      "key": "gallery",
++      "name": "Gallery",
++      "entities": [
++        "alpha",
++        "beta",
++        "gamma"
++      ]
++    }
++  ],
++  "domain": {
++    "cardOrder": [
++      "alpha",
++      "beta",
++      "gamma"
++    ]
++  },
++  "derivations": {
++    "cardGallery": {
++      "kind": "projection",
++      "source": "domain.cardOrder",
++      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
++      "alsoTouches": [
++        "entities.*.title",
++        "entities.*.color"
++      ],
++      "consumers": [
++        "__fromPack",
++        "#mount .card"
++      ],
++      "affects": [
++        "#mount .card"
++      ]
++    }
++  }
++}
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1,1 +1,1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate-stability.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate-stability.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate-stability.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate-stability.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate-stability.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate-stability.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/candidate.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/grade-task-grader.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/grade-task-grader.json
new file mode 100644
index 0000000..7b450fb
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/grade-task-grader.json
@@ -0,0 +1,153 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:e0430c07230d0796c40ba9492fbacfc420084105a477689a53f5d1e63d99aa33",
+  "graderId": "agent-pattern-c-grader",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "verdict": "passed",
+  "score": 8,
+  "maximumScore": 8,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+          "pattern-c"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 28.897709,
+        "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "pattern-c: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "browser-producer",
+      "type": "command",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/trusted-graders/task-grader/browser-evidence.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+          "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r04",
+          "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+          "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/trusted-tools"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 13804.986625,
+        "stdoutSha256": "sha256:a0ceb59f74d219b4175dc3a2fdcbdd36bfe416f996194c9f65879f20fb15ac17",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "{\"runtime\":\"runtime:4e6931ce38037653f2a8230dd7c4fb7f0407acc5c63954f531480e21891caba1\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "runtime-mount",
+      "type": "runtime-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery",
+        "file": "runtime-evidence.json",
+        "evidenceId": "runtime:4e6931ce38037653f2a8230dd7c4fb7f0407acc5c63954f531480e21891caba1",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "summary": {
+            "assertions": 4,
+            "passed": 4,
+            "failed": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "visual-regression",
+      "type": "visual-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery-desktop",
+        "file": "visual-evidence.json",
+        "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "scenarios": [
+            {
+              "id": "pattern-c-gallery-desktop",
+              "status": "passed",
+              "errors": []
+            }
+          ],
+          "summary": {
+            "total": 1,
+            "passed": 1,
+            "failed": 0,
+            "notAssessed": 0
+          }
+        }
+      }
+    }
+  ],
+  "summary": {
+    "total": 5,
+    "passed": 5,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/patch-audit.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/patch-audit.json
new file mode 100644
index 0000000..71c4d2f
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/patch-audit.json
@@ -0,0 +1,138 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:66058fa94133b4289667449669ac76b9d14436751d16613b8df1daaceb2d9ff9",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "applied",
+  "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+  "patchBytes": 4263,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+        "size": 743,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+        "size": 843,
+        "target": null
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+        "size": 1079,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+        "size": 1236,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573765502-466b9932e6c6f.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 16.200375,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573765502-466b9932e6c6f.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 14.950875,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/reference.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/reference.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/reference.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/reference.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/reference.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/reference.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/runtime-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/runtime-evidence.json
new file mode 100644
index 0000000..9904219
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/runtime-evidence.json
@@ -0,0 +1,54 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "runtime-evidence",
+  "evidenceId": "runtime:4e6931ce38037653f2a8230dd7c4fb7f0407acc5c63954f531480e21891caba1",
+  "scenarioId": "pattern-c-gallery",
+  "subjectTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "producer": {
+    "name": "headless-chrome-pattern-c",
+    "version": "1.2.0"
+  },
+  "environment": {
+    "browser": "Google Chrome 151.0.7922.71",
+    "platform": "darwin",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670"
+  },
+  "assertions": [
+    {
+      "id": "error-collector",
+      "status": "passed"
+    },
+    {
+      "id": "mount-status",
+      "status": "passed",
+      "actual": "passed"
+    },
+    {
+      "id": "card-count",
+      "status": "passed",
+      "actual": 3,
+      "expected": 3
+    },
+    {
+      "id": "gamma-visible",
+      "status": "passed"
+    }
+  ],
+  "consoleErrors": [],
+  "pageErrors": [],
+  "networkFailures": [],
+  "artifacts": [
+    {
+      "id": "candidate-dom",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "candidate-browser-log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "sha256": "sha256:304f5516547bc906d69007baae2e640c07a12cc704fc551bec70b4f1f4fb9b96"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/stability-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/stability-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/stability-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/task-run.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/task-run.json
new file mode 100644
index 0000000..4f100a5
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/task-run.json
@@ -0,0 +1,476 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:5c1c68839904edc34e3ef1fcd3504d7a831217deec745502fc2974f5bab5dc94",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r04"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r04/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r04/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 27.060542,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:66058fa94133b4289667449669ac76b9d14436751d16613b8df1daaceb2d9ff9",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "applied",
+    "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+    "patchBytes": 4263,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+          "size": 743,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+          "size": 843,
+          "target": null
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+          "size": 1079,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+          "size": 1236,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573765502-466b9932e6c6f.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 16.200375,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573765502-466b9932e6c6f.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 14.950875,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:e0430c07230d0796c40ba9492fbacfc420084105a477689a53f5d1e63d99aa33",
+      "graderId": "agent-pattern-c-grader",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+      "verdict": "passed",
+      "score": 8,
+      "maximumScore": 8,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+              "pattern-c"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 28.897709,
+            "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "pattern-c: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "browser-producer",
+          "type": "command",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/trusted-graders/task-grader/browser-evidence.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/workspace",
+              "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r04",
+              "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+              "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-yeS8zz/trusted-tools"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 13804.986625,
+            "stdoutSha256": "sha256:a0ceb59f74d219b4175dc3a2fdcbdd36bfe416f996194c9f65879f20fb15ac17",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "{\"runtime\":\"runtime:4e6931ce38037653f2a8230dd7c4fb7f0407acc5c63954f531480e21891caba1\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "runtime-mount",
+          "type": "runtime-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery",
+            "file": "runtime-evidence.json",
+            "evidenceId": "runtime:4e6931ce38037653f2a8230dd7c4fb7f0407acc5c63954f531480e21891caba1",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "summary": {
+                "assertions": 4,
+                "passed": 4,
+                "failed": 0
+              }
+            }
+          }
+        },
+        {
+          "id": "visual-regression",
+          "type": "visual-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery-desktop",
+            "file": "visual-evidence.json",
+            "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "scenarios": [
+                {
+                  "id": "pattern-c-gallery-desktop",
+                  "status": "passed",
+                  "errors": []
+                }
+              ],
+              "summary": {
+                "total": 1,
+                "passed": 1,
+                "failed": 0,
+                "notAssessed": 0
+              }
+            }
+          }
+        }
+      ],
+      "summary": {
+        "total": 5,
+        "passed": 5,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 4263,
+      "sha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9"
+    },
+    {
+      "id": "generated-candidate-stability.chrome.log",
+      "path": "candidate-stability.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 267,
+      "sha256": "sha256:67bb7b551e83b1b9c395aaec955c85340d3866c1e9aecb927966373f32f396eb"
+    },
+    {
+      "id": "generated-candidate-stability.dom.html",
+      "path": "candidate-stability.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate-stability.png",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-candidate.chrome.log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:304f5516547bc906d69007baae2e640c07a12cc704fc551bec70b4f1f4fb9b96"
+    },
+    {
+      "id": "generated-candidate.dom.html",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate.png",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 4936,
+      "sha256": "sha256:e568c0b8cc7c691d9a5b731dc2311bd6651ab2903c685b976d6837452380346e"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 4167,
+      "sha256": "sha256:0f68c7eee49e9d7227cb4220813c5fff50a8fa7f9511a7af313632e2a03c3b3c"
+    },
+    {
+      "id": "generated-reference.chrome.log",
+      "path": "reference.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:263cdc99cfaaa1b84e52e2f380fc68ea40207a2a294bff1c52c5bc29be49292b"
+    },
+    {
+      "id": "generated-reference.dom.html",
+      "path": "reference.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-reference.png",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-runtime-evidence.json",
+      "path": "runtime-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 1411,
+      "sha256": "sha256:b94d0a1e8fd0db1fbc3a5a719aab9b2ad09424c6132bfa3abbba820e0683b92f"
+    },
+    {
+      "id": "generated-stability-diff.png",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    },
+    {
+      "id": "generated-visual-diff.png",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "generated-visual-evidence.json",
+      "path": "visual-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 2101,
+      "sha256": "sha256:4a873f05810c949bd2357d3d90872e5238a9a49f2424d35d15858e4faecdf902"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/visual-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/visual-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/visual-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/visual-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/visual-evidence.json
new file mode 100644
index 0000000..a6bee82
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r04/visual-evidence.json
@@ -0,0 +1,65 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "visual-evidence",
+  "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+  "referenceTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "candidateTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "configurationSha256": "sha256:a6a063638a9b86f8d9c89b8dede46bc2069caf1067400f293fdf3ff6c185a41e",
+  "producer": {
+    "name": "headless-chrome-pillow",
+    "version": "1.2.0"
+  },
+  "thresholds": {
+    "maxPixelDiffRatio": 0.02,
+    "minComputedStyleScore": 0.98,
+    "minCoverage": 1
+  },
+  "scenarios": [
+    {
+      "id": "pattern-c-gallery-desktop",
+      "viewport": {
+        "width": 1100,
+        "height": 720
+      },
+      "pixelDiffRatio": 0,
+      "computedStyleScore": 1,
+      "coverage": 1,
+      "stabilityFailures": 0,
+      "referenceArtifact": "reference-screenshot",
+      "candidateArtifact": "candidate-screenshot",
+      "diffArtifact": "diff-screenshot"
+    }
+  ],
+  "artifacts": [
+    {
+      "id": "reference-screenshot",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "candidate-screenshot",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "diff-screenshot",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "candidate-stability-screenshot",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "stability-diff-screenshot",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/TASK.md b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/TASK.md
new file mode 100644
index 0000000..ea3c5f0
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/TASK.md
@@ -0,0 +1 @@
+Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/agent.patch b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/agent.patch
new file mode 100644
index 0000000..3c13399
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/agent.patch
@@ -0,0 +1,138 @@
+diff --git a/lib/data/data.json b/lib/data/data.json
+--- a/lib/data/data.json
++++ b/lib/data/data.json
+@@ -1,60 +1,68 @@
+-{
+-  "schemaVersion": "1.3",
+-  "meta": {
+-    "id": "agent-pattern-c",
+-    "title": "Pattern C runtime fixture"
+-  },
+-  "kindNameFields": {
+-    "card": "title"
+-  },
+-  "entities": {
+-    "alpha": {
+-      "kind": "card",
+-      "title": "Alpha Card",
+-      "color": "#2563eb"
+-    },
+-    "beta": {
+-      "kind": "card",
+-      "title": "Beta Card",
+-      "color": "#059669"
+-    }
+-  },
+-  "aliases": {
+-    "Alpha Card": "alpha",
+-    "Beta Card": "beta"
+-  },
+-  "stages": [
+-    {
+-      "key": "gallery",
+-      "name": "Gallery",
+-      "entities": [
+-        "alpha",
+-        "beta"
+-      ]
+-    }
+-  ],
+-  "domain": {
+-    "cardOrder": [
+-      "alpha",
+-      "beta"
+-    ]
+-  },
+-  "derivations": {
+-    "cardGallery": {
+-      "kind": "projection",
+-      "source": "domain.cardOrder",
+-      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
+-      "alsoTouches": [
+-        "entities.*.title",
+-        "entities.*.color"
+-      ],
+-      "consumers": [
+-        "__fromPack",
+-        "#mount .card"
+-      ],
+-      "affects": [
+-        "#mount .card"
+-      ]
+-    }
+-  }
+-}
++{
++  "schemaVersion": "1.3",
++  "meta": {
++    "id": "agent-pattern-c",
++    "title": "Pattern C runtime fixture"
++  },
++  "kindNameFields": {
++    "card": "title"
++  },
++  "entities": {
++    "alpha": {
++      "kind": "card",
++      "title": "Alpha Card",
++      "color": "#2563eb"
++    },
++    "beta": {
++      "kind": "card",
++      "title": "Beta Card",
++      "color": "#059669"
++    },
++    "gamma": {
++      "kind": "card",
++      "title": "Gamma Card",
++      "color": "#8b5cf6"
++    }
++  },
++  "aliases": {
++    "Alpha Card": "alpha",
++    "Beta Card": "beta",
++    "Gamma Card": "gamma"
++  },
++  "stages": [
++    {
++      "key": "gallery",
++      "name": "Gallery",
++      "entities": [
++        "alpha",
++        "beta",
++        "gamma"
++      ]
++    }
++  ],
++  "domain": {
++    "cardOrder": [
++      "alpha",
++      "beta",
++      "gamma"
++    ]
++  },
++  "derivations": {
++    "cardGallery": {
++      "kind": "projection",
++      "source": "domain.cardOrder",
++      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
++      "alsoTouches": [
++        "entities.*.title",
++        "entities.*.color"
++      ],
++      "consumers": [
++        "__fromPack",
++        "#mount .card"
++      ],
++      "affects": [
++        "#mount .card"
++      ]
++    }
++  }
++}
+diff --git a/lib/data/data.js b/lib/data/data.js
+--- a/lib/data/data.js
++++ b/lib/data/data.js
+@@ -1,1 +1,1 @@
+-globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
++globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate-stability.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate-stability.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate-stability.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate-stability.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate-stability.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate-stability.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/candidate.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/grade-task-grader.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/grade-task-grader.json
new file mode 100644
index 0000000..27c108d
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/grade-task-grader.json
@@ -0,0 +1,153 @@
+{
+  "gradeVersion": "1.0",
+  "gradeId": "grade:f690ad48b3b2aff4c90d4c09212e7713f865858478e9b78ccb2ebe1408b172a8",
+  "graderId": "agent-pattern-c-grader",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "verdict": "passed",
+  "score": 8,
+  "maximumScore": 8,
+  "results": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "errors": [],
+        "warnings": [],
+        "strict": true
+      }
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/trusted-graders/task-grader/assert-task.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+          "pattern-c"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 29.643542,
+        "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "pattern-c: complete hidden candidate passed\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "browser-producer",
+      "type": "command",
+      "required": true,
+      "weight": 1,
+      "status": "passed",
+      "score": 1,
+      "findings": [],
+      "evidence": {
+        "argv": [
+          "/Users/tangyaoyue/.hermes/node/bin/node",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/trusted-graders/task-grader/browser-evidence.js",
+          "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+          "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r05",
+          "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+          "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/trusted-tools"
+        ],
+        "cwd": ".",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 13729.809417,
+        "stdoutSha256": "sha256:6539e43ed109b31107b3da3a0a7ff39ac6f851baa034f0f2e5dcedde62118a40",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stdout": "{\"runtime\":\"runtime:296f75cd8932bcff8505929faaef21b80cd6bd64ebda3bc8463ec3cc294c9084\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+        "stderr": "",
+        "stdoutTruncated": false,
+        "stderrTruncated": false,
+        "error": null
+      }
+    },
+    {
+      "id": "runtime-mount",
+      "type": "runtime-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery",
+        "file": "runtime-evidence.json",
+        "evidenceId": "runtime:296f75cd8932bcff8505929faaef21b80cd6bd64ebda3bc8463ec3cc294c9084",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "summary": {
+            "assertions": 4,
+            "passed": 4,
+            "failed": 0
+          }
+        }
+      }
+    },
+    {
+      "id": "visual-regression",
+      "type": "visual-evidence",
+      "required": true,
+      "weight": 2,
+      "status": "passed",
+      "score": 2,
+      "findings": [],
+      "evidence": {
+        "scenarioId": "pattern-c-gallery-desktop",
+        "file": "visual-evidence.json",
+        "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+        "validation": {
+          "valid": true,
+          "errors": [],
+          "status": "passed",
+          "scenarios": [
+            {
+              "id": "pattern-c-gallery-desktop",
+              "status": "passed",
+              "errors": []
+            }
+          ],
+          "summary": {
+            "total": 1,
+            "passed": 1,
+            "failed": 0,
+            "notAssessed": 0
+          }
+        }
+      }
+    }
+  ],
+  "summary": {
+    "total": 5,
+    "passed": 5,
+    "failed": 0,
+    "notAssessed": 0,
+    "invalid": 0,
+    "infraErrors": 0,
+    "requiredIncomplete": 0
+  },
+  "manifestWeight": 1
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/patch-audit.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/patch-audit.json
new file mode 100644
index 0000000..917abee
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/patch-audit.json
@@ -0,0 +1,138 @@
+{
+  "auditVersion": "1.0",
+  "auditId": "patch-audit:433185ca83599b9bf81be35281dafddc67c1549de4914b1c2c72bfa85557191f",
+  "kind": "patch-audit",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "status": "applied",
+  "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+  "patchBytes": 4263,
+  "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+  "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "declaredOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.json"
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "hunks": 1,
+      "modes": {},
+      "policy": {
+        "allowed": true,
+        "reason": null,
+        "deniedBy": null,
+        "allowedBy": "lib/data/data.js"
+      }
+    }
+  ],
+  "actualOperations": [
+    {
+      "operation": "modify",
+      "path": "lib/data/data.js",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+        "size": 743,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.js",
+        "relativePath": "lib/data/data.js",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+        "size": 843,
+        "target": null
+      }
+    },
+    {
+      "operation": "modify",
+      "path": "lib/data/data.json",
+      "allowed": true,
+      "reason": null,
+      "before": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+        "size": 1079,
+        "target": null
+      },
+      "after": {
+        "path": "lib/data/data.json",
+        "relativePath": "lib/data/data.json",
+        "kind": "file",
+        "mode": 420,
+        "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+        "size": 1236,
+        "target": null
+      }
+    }
+  ],
+  "preflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "postflight": {
+    "allowed": true,
+    "violations": []
+  },
+  "commands": {
+    "check": {
+      "argv": [
+        "git",
+        "apply",
+        "--check",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573779471-da7c6083565b.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.568833,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    },
+    "apply": {
+      "argv": [
+        "git",
+        "apply",
+        "--whitespace=error-all",
+        "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573779471-da7c6083565b.diff"
+      ],
+      "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+      "exitCode": 0,
+      "signal": null,
+      "timedOut": false,
+      "durationMs": 15.540792,
+      "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+      "error": null
+    }
+  },
+  "failure": null,
+  "capabilities": {
+    "osSandbox": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "sourceTreeVerifiedByRunner": true,
+    "disposableWorkspace": true
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/reference.dom.html b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/reference.dom.html
new file mode 100644
index 0000000..d707565
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/reference.dom.html
@@ -0,0 +1,9 @@
+<!DOCTYPE html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body data-console-errors="%5B%5D" data-page-errors="%5B%5D" data-network-failures="%5B%5D" data-runtime-status="passed" data-computed-style-score="1"><main id="mount"><div class="grid"><article class="card" data-card-id="alpha" style="--accent:#2563eb"><span>Alpha Card</span></article><article class="card" data-card-id="beta" style="--accent:#059669"><span>Beta Card</span></article><article class="card" data-card-id="gamma" style="--accent:#8b5cf6"><span>Gamma Card</span></article></div></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+
+</body></html>
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/reference.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/reference.png
new file mode 100644
index 0000000..682cc3c
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/reference.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/runtime-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/runtime-evidence.json
new file mode 100644
index 0000000..387f001
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/runtime-evidence.json
@@ -0,0 +1,54 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "runtime-evidence",
+  "evidenceId": "runtime:296f75cd8932bcff8505929faaef21b80cd6bd64ebda3bc8463ec3cc294c9084",
+  "scenarioId": "pattern-c-gallery",
+  "subjectTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "producer": {
+    "name": "headless-chrome-pattern-c",
+    "version": "1.2.0"
+  },
+  "environment": {
+    "browser": "Google Chrome 151.0.7922.71",
+    "platform": "darwin",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670"
+  },
+  "assertions": [
+    {
+      "id": "error-collector",
+      "status": "passed"
+    },
+    {
+      "id": "mount-status",
+      "status": "passed",
+      "actual": "passed"
+    },
+    {
+      "id": "card-count",
+      "status": "passed",
+      "actual": 3,
+      "expected": 3
+    },
+    {
+      "id": "gamma-visible",
+      "status": "passed"
+    }
+  ],
+  "consoleErrors": [],
+  "pageErrors": [],
+  "networkFailures": [],
+  "artifacts": [
+    {
+      "id": "candidate-dom",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "candidate-browser-log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "sha256": "sha256:7992145a20e7b136e6284323aeffca280bb543df7bafd6cf31a3d0e594f98241"
+    }
+  ]
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/stability-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/stability-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/stability-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/task-run.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/task-run.json
new file mode 100644
index 0000000..58df3d9
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/task-run.json
@@ -0,0 +1,476 @@
+{
+  "runVersion": "1.0",
+  "runId": "task-run:79b70d6c1693358899430f03611b9b838e45970cbcef1cf5df414d83347589a2",
+  "task": {
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "taskFileSha256": "sha256:9220e12596b83dbc1619f4859c54d2c3847b733b700818a50fb97aa88df3f8c7",
+    "sourceRevision": "pattern-c-runtime-fixture-v1",
+    "contractTreeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c",
+    "runnerSnapshotBeforeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "runnerSnapshotFinalSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "sourceUnchanged": true,
+    "sourceFinalError": null,
+    "trialId": "pattern-c-runtime-r05"
+  },
+  "agent": {
+    "provider": "deterministic-fixture",
+    "model": "scripted-v1",
+    "argv": [
+      "/Users/tangyaoyue/.hermes/node/bin/node",
+      "/Users/tangyaoyue/DEV/sg-data-pack/research/agent-eval/providers/scripted-patch-agent.js",
+      "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r05/agent.patch",
+      "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r05/TASK.md"
+    ],
+    "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+    "exitCode": 0,
+    "signal": null,
+    "timedOut": false,
+    "durationMs": 28.50725,
+    "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+    "stdout": "",
+    "stderr": "",
+    "stdoutTruncated": false,
+    "stderrTruncated": false,
+    "error": null,
+    "providerMetadata": null
+  },
+  "patch": {
+    "auditVersion": "1.0",
+    "auditId": "patch-audit:433185ca83599b9bf81be35281dafddc67c1549de4914b1c2c72bfa85557191f",
+    "kind": "patch-audit",
+    "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+    "status": "applied",
+    "patchSha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9",
+    "patchBytes": 4263,
+    "beforeTreeSha256": "sha256:2f5a60bc694ee969c17914c85b53df4960565372eb274588e287a2715478b865",
+    "afterTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+    "declaredOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.json"
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "hunks": 1,
+        "modes": {},
+        "policy": {
+          "allowed": true,
+          "reason": null,
+          "deniedBy": null,
+          "allowedBy": "lib/data/data.js"
+        }
+      }
+    ],
+    "actualOperations": [
+      {
+        "operation": "modify",
+        "path": "lib/data/data.js",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9",
+          "size": 743,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.js",
+          "relativePath": "lib/data/data.js",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "e286223efbf752e0acffdb10ff5c18ecd0853831b44762cf39c1a7bbbd5c511c",
+          "size": 843,
+          "target": null
+        }
+      },
+      {
+        "operation": "modify",
+        "path": "lib/data/data.json",
+        "allowed": true,
+        "reason": null,
+        "before": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814",
+          "size": 1079,
+          "target": null
+        },
+        "after": {
+          "path": "lib/data/data.json",
+          "relativePath": "lib/data/data.json",
+          "kind": "file",
+          "mode": 420,
+          "sha256": "44a4a32b20a0795ec3bde9ee5a5464bb951b34fa49db0184bbc73ef6fe01b094",
+          "size": 1236,
+          "target": null
+        }
+      }
+    ],
+    "preflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "postflight": {
+      "allowed": true,
+      "violations": []
+    },
+    "commands": {
+      "check": {
+        "argv": [
+          "git",
+          "apply",
+          "--check",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573779471-da7c6083565b.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.568833,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      },
+      "apply": {
+        "argv": [
+          "git",
+          "apply",
+          "--whitespace=error-all",
+          "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-patch-81453-1785573779471-da7c6083565b.diff"
+        ],
+        "cwd": "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+        "exitCode": 0,
+        "signal": null,
+        "timedOut": false,
+        "durationMs": 15.540792,
+        "stdoutSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "error": null
+      }
+    },
+    "failure": null,
+    "capabilities": {
+      "osSandbox": false,
+      "networkIsolation": false,
+      "processIsolation": false,
+      "sourceTreeVerifiedByRunner": true,
+      "disposableWorkspace": true
+    }
+  },
+  "grades": [
+    {
+      "gradeVersion": "1.0",
+      "gradeId": "grade:f690ad48b3b2aff4c90d4c09212e7713f865858478e9b78ccb2ebe1408b172a8",
+      "graderId": "agent-pattern-c-grader",
+      "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+      "treeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+      "verdict": "passed",
+      "score": 8,
+      "maximumScore": 8,
+      "results": [
+        {
+          "id": "data-pack-contract",
+          "type": "data-pack-contract",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "errors": [],
+            "warnings": [],
+            "strict": true
+          }
+        },
+        {
+          "id": "hidden-property",
+          "type": "command",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/trusted-graders/task-grader/assert-task.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+              "pattern-c"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 29.643542,
+            "stdoutSha256": "sha256:14aa7fc7ee2174870b13c88f2eefc39873ff15b29013e54803fc3b21cf099c88",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "pattern-c: complete hidden candidate passed\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "browser-producer",
+          "type": "command",
+          "required": true,
+          "weight": 1,
+          "status": "passed",
+          "score": 1,
+          "findings": [],
+          "evidence": {
+            "argv": [
+              "/Users/tangyaoyue/.hermes/node/bin/node",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/trusted-graders/task-grader/browser-evidence.js",
+              "/private/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/workspace",
+              "/private/tmp/sg-agent-scripted-final-release/trials/pattern-c-runtime-r05",
+              "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+              "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+              "/var/folders/r0/2xc529t10dz2lk4749f0rh540000gn/T/sg-agent-task-TAlDuq/trusted-tools"
+            ],
+            "cwd": ".",
+            "exitCode": 0,
+            "signal": null,
+            "timedOut": false,
+            "durationMs": 13729.809417,
+            "stdoutSha256": "sha256:6539e43ed109b31107b3da3a0a7ff39ac6f851baa034f0f2e5dcedde62118a40",
+            "stderrSha256": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+            "stdout": "{\"runtime\":\"runtime:296f75cd8932bcff8505929faaef21b80cd6bd64ebda3bc8463ec3cc294c9084\",\"visual\":\"visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f\",\"pixelDiffRatio\":0,\"stabilityDiffRatio\":0}\n",
+            "stderr": "",
+            "stdoutTruncated": false,
+            "stderrTruncated": false,
+            "error": null
+          }
+        },
+        {
+          "id": "runtime-mount",
+          "type": "runtime-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery",
+            "file": "runtime-evidence.json",
+            "evidenceId": "runtime:296f75cd8932bcff8505929faaef21b80cd6bd64ebda3bc8463ec3cc294c9084",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "summary": {
+                "assertions": 4,
+                "passed": 4,
+                "failed": 0
+              }
+            }
+          }
+        },
+        {
+          "id": "visual-regression",
+          "type": "visual-evidence",
+          "required": true,
+          "weight": 2,
+          "status": "passed",
+          "score": 2,
+          "findings": [],
+          "evidence": {
+            "scenarioId": "pattern-c-gallery-desktop",
+            "file": "visual-evidence.json",
+            "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+            "validation": {
+              "valid": true,
+              "errors": [],
+              "status": "passed",
+              "scenarios": [
+                {
+                  "id": "pattern-c-gallery-desktop",
+                  "status": "passed",
+                  "errors": []
+                }
+              ],
+              "summary": {
+                "total": 1,
+                "passed": 1,
+                "failed": 0,
+                "notAssessed": 0
+              }
+            }
+          }
+        }
+      ],
+      "summary": {
+        "total": 5,
+        "passed": 5,
+        "failed": 0,
+        "notAssessed": 0,
+        "invalid": 0,
+        "infraErrors": 0,
+        "requiredIncomplete": 0
+      },
+      "manifestWeight": 1
+    }
+  ],
+  "secondaryErrors": [],
+  "artifacts": [
+    {
+      "id": "agent-patch",
+      "path": "agent.patch",
+      "mediaType": "text/x-diff",
+      "bytes": 4263,
+      "sha256": "sha256:7ae5caddebd3ebea4f8ac3634f6afcc9c5d9355c701e025ec5b723881c1d4cf9"
+    },
+    {
+      "id": "generated-candidate-stability.chrome.log",
+      "path": "candidate-stability.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 267,
+      "sha256": "sha256:f8570a660c9d42a7a6b106470a2fc8fdd8276947243eb93ffc62c92d58a45a8d"
+    },
+    {
+      "id": "generated-candidate-stability.dom.html",
+      "path": "candidate-stability.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate-stability.png",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-candidate.chrome.log",
+      "path": "candidate.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:7992145a20e7b136e6284323aeffca280bb543df7bafd6cf31a3d0e594f98241"
+    },
+    {
+      "id": "generated-candidate.dom.html",
+      "path": "candidate.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-candidate.png",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "grade-task-grader",
+      "path": "grade-task-grader.json",
+      "mediaType": "application/json",
+      "bytes": 4936,
+      "sha256": "sha256:753cf586d3edc720e85154a08872868b03e49a0b2f3ad5efe4e4f60842fc0dd3"
+    },
+    {
+      "id": "patch-audit",
+      "path": "patch-audit.json",
+      "mediaType": "application/json",
+      "bytes": 4165,
+      "sha256": "sha256:37af1d29b46e98173573d161c1a9abd041f0d6b9a5e515498665efdbbe3a4fd5"
+    },
+    {
+      "id": "generated-reference.chrome.log",
+      "path": "reference.chrome.log",
+      "mediaType": "text/plain",
+      "bytes": 257,
+      "sha256": "sha256:566f983c52f6c4ae3ec361cbb28a9f3e6c0f5484e8108eb5739a624b0cab2a6f"
+    },
+    {
+      "id": "generated-reference.dom.html",
+      "path": "reference.dom.html",
+      "mediaType": "text/html",
+      "bytes": 2108,
+      "sha256": "sha256:19aeed698f2408742b66ca6d4cc7b63ef9dd6abe55458a7e55d49b95c5c1d9a3"
+    },
+    {
+      "id": "generated-reference.png",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "bytes": 91725,
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "generated-runtime-evidence.json",
+      "path": "runtime-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 1411,
+      "sha256": "sha256:837c496ac2d0c50155bf7a3c1c2ddb161398bc60f5ae4295caaa3064ed95f0d1"
+    },
+    {
+      "id": "generated-stability-diff.png",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "task-prompt",
+      "path": "TASK.md",
+      "mediaType": "text/markdown",
+      "bytes": 368,
+      "sha256": "sha256:8d6d410df008eb20405838885369f435267b07b38267305d013cd4661c971d29"
+    },
+    {
+      "id": "generated-visual-diff.png",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "bytes": 3150,
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "generated-visual-evidence.json",
+      "path": "visual-evidence.json",
+      "mediaType": "application/json",
+      "bytes": 2101,
+      "sha256": "sha256:4a873f05810c949bd2357d3d90872e5238a9a49f2424d35d15858e4faecdf902"
+    }
+  ],
+  "verdict": "passed",
+  "termination": {
+    "kind": "completed",
+    "processExitCode": 0,
+    "semanticVerdict": "passed"
+  },
+  "capabilities": {
+    "sourceCopy": true,
+    "disposableWorkspace": true,
+    "completeSecuritySnapshots": true,
+    "postAgentSourceTreeCheck": true,
+    "postPatchTreePolicy": true,
+    "postGraderTreeCheck": true,
+    "verifiedGraderStaging": true,
+    "verifiedToolStaging": true,
+    "candidateExtractionWorker": true,
+    "osSandbox": false,
+    "filesystemIsolation": false,
+    "networkIsolation": false,
+    "processIsolation": false,
+    "maliciousAgentGraderSecrecy": false
+  }
+}
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/visual-diff.png b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/visual-diff.png
new file mode 100644
index 0000000..cfd7137
Binary files /dev/null and b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/visual-diff.png differ
diff --git a/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/visual-evidence.json b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/visual-evidence.json
new file mode 100644
index 0000000..a6bee82
--- /dev/null
+++ b/research/agent-eval/results/scripted/trials/pattern-c-runtime-r05/visual-evidence.json
@@ -0,0 +1,65 @@
+{
+  "evidenceVersion": "1.0",
+  "kind": "visual-evidence",
+  "evidenceId": "visual:b3d9ffed355ba9dda006f8c7b3962445098fec0479e09b6a39ddfde0e64a010f",
+  "referenceTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "candidateTreeSha256": "sha256:b48495ceef97ecc05c4a6f85ab102ff5a3858110275202b3fae365252af113db",
+  "configurationSha256": "sha256:a6a063638a9b86f8d9c89b8dede46bc2069caf1067400f293fdf3ff6c185a41e",
+  "producer": {
+    "name": "headless-chrome-pillow",
+    "version": "1.2.0"
+  },
+  "thresholds": {
+    "maxPixelDiffRatio": 0.02,
+    "minComputedStyleScore": 0.98,
+    "minCoverage": 1
+  },
+  "scenarios": [
+    {
+      "id": "pattern-c-gallery-desktop",
+      "viewport": {
+        "width": 1100,
+        "height": 720
+      },
+      "pixelDiffRatio": 0,
+      "computedStyleScore": 1,
+      "coverage": 1,
+      "stabilityFailures": 0,
+      "referenceArtifact": "reference-screenshot",
+      "candidateArtifact": "candidate-screenshot",
+      "diffArtifact": "diff-screenshot"
+    }
+  ],
+  "artifacts": [
+    {
+      "id": "reference-screenshot",
+      "path": "reference.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "candidate-screenshot",
+      "path": "candidate.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "diff-screenshot",
+      "path": "visual-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    },
+    {
+      "id": "candidate-stability-screenshot",
+      "path": "candidate-stability.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:369ad75f907e2fea0a06e5182a03c3d1d4f6570b531958dabf10396c2e2cd3ea"
+    },
+    {
+      "id": "stability-diff-screenshot",
+      "path": "stability-diff.png",
+      "mediaType": "image/png",
+      "sha256": "sha256:aef339735a9bff865bfe7912b73ab3c2ee6f41c2aa4482ed0cf006381a82b775"
+    }
+  ]
+}
diff --git a/research/agent-eval/run-policy-negative.js b/research/agent-eval/run-policy-negative.js
new file mode 100644
index 0000000..5298e4f
--- /dev/null
+++ b/research/agent-eval/run-policy-negative.js
@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { applyPatch } = require('../../scripts/lib/sg-patch-executor.js');
+
+const root = __dirname;
+const taskDir = path.join(root, 'tasks', 'field-update');
+const manifest = JSON.parse(fs.readFileSync(path.join(taskDir, 'task.json'), 'utf8'));
+const outputRoot = path.resolve(process.argv[2] || path.join(root, 'results', 'policy-negative'));
+if (fs.existsSync(outputRoot) && fs.readdirSync(outputRoot).length) {
+  console.error('policy-negative output must be empty: ' + outputRoot);
+  process.exit(2);
+}
+fs.mkdirSync(outputRoot, { recursive: true });
+const parent = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-policy-negative-'));
+const workspace = path.join(parent, 'workspace');
+const patch = Buffer.from([
+  'diff --git a/.git/config b/.git/config',
+  'new file mode 100644',
+  '--- /dev/null',
+  '+++ b/.git/config',
+  '@@ -0,0 +1 @@',
+  '+[forbidden]',
+  '',
+].join('\n'));
+try {
+  fs.cpSync(path.join(taskDir, manifest.source.root), workspace, { recursive: true, dereference: false, verbatimSymlinks: true });
+  let rejection;
+  try {
+    applyPatch({ manifest, workspaceRoot: workspace, patchBytes: patch, taskId: manifest.taskId });
+    throw new Error('forbidden patch unexpectedly applied');
+  } catch (error) {
+    if (error.message === 'forbidden patch unexpectedly applied') throw error;
+    if (error.kind !== 'policy-violation' || !error.audit || error.audit.status !== 'rejected') throw error;
+    const violations = error.audit.preflight && error.audit.preflight.violations || [];
+    if (!violations.some((item) => item.includes('forbidden by .git/**'))) throw new Error('expected .git/** denial was not recorded');
+    rejection = error;
+  }
+  fs.writeFileSync(path.join(outputRoot, 'forbidden.patch'), patch);
+  fs.writeFileSync(path.join(outputRoot, 'patch-audit.json'), JSON.stringify(rejection.audit, null, 2) + '\n');
+  fs.writeFileSync(path.join(outputRoot, 'result.json'), JSON.stringify({
+    resultVersion: '1.0',
+    taskId: manifest.taskId,
+    verdict: rejection.kind,
+    message: rejection.message,
+    auditId: rejection.audit.auditId,
+    patchSha256: rejection.audit.patchSha256,
+    violations: rejection.audit.preflight.violations,
+    sourceUnchanged: !fs.existsSync(path.join(workspace, '.git')),
+  }, null, 2) + '\n');
+  console.log('Policy negative control passed: ' + outputRoot);
+} finally {
+  fs.rmSync(parent, { recursive: true, force: true });
+}
diff --git a/research/agent-eval/tasks/alias-relation/grader/assert-task.js b/research/agent-eval/tasks/alias-relation/grader/assert-task.js
new file mode 100644
index 0000000..3c0b27b
--- /dev/null
+++ b/research/agent-eval/tasks/alias-relation/grader/assert-task.js
@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const [, , workspace, task] = process.argv;
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])]));
+}
+function equivalent(left, right) { return JSON.stringify(canonical(left)) === JSON.stringify(canonical(right)); }
+if (!workspace || !['field-update', 'alias-relation', 'pattern-c'].includes(task)) {
+  console.error('hidden grader received invalid trusted arguments');
+  process.exit(3);
+}
+let expected;
+try {
+  expected = JSON.parse(fs.readFileSync(path.join(__dirname, 'expected-data.json'), 'utf8'));
+} catch (error) {
+  console.error('hidden expected candidate is unavailable: ' + error.message);
+  process.exit(3);
+}
+try {
+  const candidate = JSON.parse(fs.readFileSync(path.join(workspace, 'lib/data/data.json'), 'utf8'));
+  if (!equivalent(candidate, expected)) throw new Error('candidate data.json differs from the complete hidden expected candidate');
+  if (task === 'pattern-c') {
+    const script = fs.readFileSync(path.join(workspace, 'lib/data/data.js'), 'utf8');
+    const match = /^\s*(?:\/\/[^\n]*\n\s*)?globalThis\.SG_DATA_PACK\s*=\s*([\s\S]*);\s*$/.exec(script);
+    if (!match) throw new Error('data.js must contain only a generated SG_DATA_PACK JSON assignment');
+    const mirrored = JSON.parse(match[1]);
+    if (!equivalent(mirrored, expected)) throw new Error('data.js does not exactly mirror the complete expected data.json');
+  }
+  console.log(task + ': complete hidden candidate passed');
+} catch (error) {
+  console.error(error.message);
+  process.exit(1);
+}
diff --git a/research/agent-eval/tasks/alias-relation/grader/expected-data.json b/research/agent-eval/tasks/alias-relation/grader/expected-data.json
new file mode 100644
index 0000000..b322375
--- /dev/null
+++ b/research/agent-eval/tasks/alias-relation/grader/expected-data.json
@@ -0,0 +1,47 @@
+{
+  "schemaVersion": "1.3",
+  "meta": {
+    "id": "agent-alias-relation",
+    "title": "Agent alias and relation fixture"
+  },
+  "entities": {
+    "alice": {
+      "kind": "person",
+      "name": "Alice"
+    },
+    "bob": {
+      "kind": "person",
+      "name": "Bob"
+    }
+  },
+  "aliases": {
+    "Alice": "alice",
+    "Bob": "bob",
+    "Alicia": "alice"
+  },
+  "relationTypes": {
+    "friend": {
+      "label": "Friend"
+    }
+  },
+  "relations": [
+    {
+      "id": "alice-bob-friend",
+      "a": "alice",
+      "b": "bob",
+      "type": "friend",
+      "label": "Friend"
+    }
+  ],
+  "stages": [
+    {
+      "key": "main",
+      "name": "Main",
+      "entities": [
+        "alice",
+        "bob"
+      ],
+      "relations": []
+    }
+  ]
+}
diff --git a/research/agent-eval/tasks/alias-relation/grader/spec.json b/research/agent-eval/tasks/alias-relation/grader/spec.json
new file mode 100644
index 0000000..97c271b
--- /dev/null
+++ b/research/agent-eval/tasks/alias-relation/grader/spec.json
@@ -0,0 +1,31 @@
+{
+  "graderVersion": "1.0",
+  "graderId": "agent-alias-relation-grader",
+  "title": "Alias and relation contract grader",
+  "checks": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "weight": 1,
+      "required": true,
+      "path": "lib/data/data.json",
+      "strict": true
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "weight": 2,
+      "required": true,
+      "argv": [
+        "{node}",
+        "{grader}/assert-task.js",
+        "{workspace}",
+        "alias-relation"
+      ],
+      "expectedExit": 0,
+      "infraExitCodes": [
+        3
+      ]
+    }
+  ]
+}
diff --git a/research/agent-eval/tasks/alias-relation/source/lib/data/data.json b/research/agent-eval/tasks/alias-relation/source/lib/data/data.json
new file mode 100644
index 0000000..07f85cf
--- /dev/null
+++ b/research/agent-eval/tasks/alias-relation/source/lib/data/data.json
@@ -0,0 +1,38 @@
+{
+  "schemaVersion": "1.3",
+  "meta": {
+    "id": "agent-alias-relation",
+    "title": "Agent alias and relation fixture"
+  },
+  "entities": {
+    "alice": {
+      "kind": "person",
+      "name": "Alice"
+    },
+    "bob": {
+      "kind": "person",
+      "name": "Bob"
+    }
+  },
+  "aliases": {
+    "Alice": "alice",
+    "Bob": "bob"
+  },
+  "relationTypes": {
+    "friend": {
+      "label": "Friend"
+    }
+  },
+  "relations": [],
+  "stages": [
+    {
+      "key": "main",
+      "name": "Main",
+      "entities": [
+        "alice",
+        "bob"
+      ],
+      "relations": []
+    }
+  ]
+}
diff --git a/research/agent-eval/tasks/alias-relation/task.json b/research/agent-eval/tasks/alias-relation/task.json
new file mode 100644
index 0000000..a3127ef
--- /dev/null
+++ b/research/agent-eval/tasks/alias-relation/task.json
@@ -0,0 +1,64 @@
+{
+  "taskVersion": "1.0",
+  "taskId": "sha256:295709a674170fcf6188e9ae793fbd2f42e8f57c95287f3fc27a0e5556f1e118",
+  "instructions": {
+    "text": "In lib/data/data.json, add alias Alicia that resolves to existing entity alice. Also add exactly one master relation with id alice-bob-friend, a alice, b bob, type friend, and label Friend. Do not create entities or modify existing names. Emit a unified diff only.",
+    "sha256": "sha256:086dfc6654ce4bfad81490cee2d902148cf6b95841772b23e174f51bdd4da26a"
+  },
+  "source": {
+    "root": "source",
+    "revision": "alias-relation-fixture-v1",
+    "treeSha256": "sha256:fffbe5c6cd3b100ea754dfc73b72bb75adae0ccd8ca789fb18c00ed68b2cfc53"
+  },
+  "inputs": [
+    {
+      "id": "input-1",
+      "path": "lib/data/data.json",
+      "role": "canonical-data",
+      "sha256": "sha256:0dd120528e6773e0dfc3a76bf4740870ba17fd32da59aae1b1abf7895ef676db"
+    }
+  ],
+  "filePolicy": {
+    "allowed": [
+      {
+        "pattern": "lib/data/data.json",
+        "operations": [
+          "modify"
+        ]
+      }
+    ],
+    "forbidden": [
+      ".git/**",
+      "lib/src/**",
+      "lib/examples/**"
+    ],
+    "denyPrecedence": true,
+    "allowSymlinks": false,
+    "allowHardlinks": false,
+    "maxChangedFiles": 1,
+    "maxPatchBytes": 262144
+  },
+  "patchPolicy": {
+    "format": "unified-diff",
+    "fuzz": 0,
+    "allowBinary": false
+  },
+  "graders": [
+    {
+      "id": "task-grader",
+      "spec": "grader/spec.json",
+      "sha256": "sha256:7385304cdc24160558f86af78778649418bdde41d33210a6faf5839ea021b8bf",
+      "treeSha256": "sha256:0ee2a51027d36d291b07592f36b41343ace51df8b3027e6fb5523c6b3b4011aa",
+      "weight": 1
+    }
+  ],
+  "evidence": {
+    "runtime": [],
+    "visual": []
+  },
+  "execution": {
+    "timeoutMs": 480000,
+    "network": "off",
+    "maxOutputBytes": 4194304
+  }
+}
diff --git a/research/agent-eval/tasks/field-update/grader/assert-task.js b/research/agent-eval/tasks/field-update/grader/assert-task.js
new file mode 100644
index 0000000..3c0b27b
--- /dev/null
+++ b/research/agent-eval/tasks/field-update/grader/assert-task.js
@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const [, , workspace, task] = process.argv;
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])]));
+}
+function equivalent(left, right) { return JSON.stringify(canonical(left)) === JSON.stringify(canonical(right)); }
+if (!workspace || !['field-update', 'alias-relation', 'pattern-c'].includes(task)) {
+  console.error('hidden grader received invalid trusted arguments');
+  process.exit(3);
+}
+let expected;
+try {
+  expected = JSON.parse(fs.readFileSync(path.join(__dirname, 'expected-data.json'), 'utf8'));
+} catch (error) {
+  console.error('hidden expected candidate is unavailable: ' + error.message);
+  process.exit(3);
+}
+try {
+  const candidate = JSON.parse(fs.readFileSync(path.join(workspace, 'lib/data/data.json'), 'utf8'));
+  if (!equivalent(candidate, expected)) throw new Error('candidate data.json differs from the complete hidden expected candidate');
+  if (task === 'pattern-c') {
+    const script = fs.readFileSync(path.join(workspace, 'lib/data/data.js'), 'utf8');
+    const match = /^\s*(?:\/\/[^\n]*\n\s*)?globalThis\.SG_DATA_PACK\s*=\s*([\s\S]*);\s*$/.exec(script);
+    if (!match) throw new Error('data.js must contain only a generated SG_DATA_PACK JSON assignment');
+    const mirrored = JSON.parse(match[1]);
+    if (!equivalent(mirrored, expected)) throw new Error('data.js does not exactly mirror the complete expected data.json');
+  }
+  console.log(task + ': complete hidden candidate passed');
+} catch (error) {
+  console.error(error.message);
+  process.exit(1);
+}
diff --git a/research/agent-eval/tasks/field-update/grader/expected-data.json b/research/agent-eval/tasks/field-update/grader/expected-data.json
new file mode 100644
index 0000000..05ee536
--- /dev/null
+++ b/research/agent-eval/tasks/field-update/grader/expected-data.json
@@ -0,0 +1,26 @@
+{
+  "schemaVersion": "1.3",
+  "meta": {
+    "id": "agent-field-update",
+    "title": "Agent field update fixture"
+  },
+  "entities": {
+    "alice": {
+      "kind": "person",
+      "name": "Alice",
+      "summary": "summary-new"
+    }
+  },
+  "aliases": {
+    "Alice": "alice"
+  },
+  "stages": [
+    {
+      "key": "main",
+      "name": "Main",
+      "entities": [
+        "alice"
+      ]
+    }
+  ]
+}
diff --git a/research/agent-eval/tasks/field-update/grader/spec.json b/research/agent-eval/tasks/field-update/grader/spec.json
new file mode 100644
index 0000000..a4d8dd0
--- /dev/null
+++ b/research/agent-eval/tasks/field-update/grader/spec.json
@@ -0,0 +1,31 @@
+{
+  "graderVersion": "1.0",
+  "graderId": "agent-field-update-grader",
+  "title": "Field update contract and hidden property grader",
+  "checks": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "weight": 1,
+      "required": true,
+      "path": "lib/data/data.json",
+      "strict": true
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "weight": 2,
+      "required": true,
+      "argv": [
+        "{node}",
+        "{grader}/assert-task.js",
+        "{workspace}",
+        "field-update"
+      ],
+      "expectedExit": 0,
+      "infraExitCodes": [
+        3
+      ]
+    }
+  ]
+}
diff --git a/research/agent-eval/tasks/field-update/source/lib/data/data.json b/research/agent-eval/tasks/field-update/source/lib/data/data.json
new file mode 100644
index 0000000..f63e817
--- /dev/null
+++ b/research/agent-eval/tasks/field-update/source/lib/data/data.json
@@ -0,0 +1,26 @@
+{
+  "schemaVersion": "1.3",
+  "meta": {
+    "id": "agent-field-update",
+    "title": "Agent field update fixture"
+  },
+  "entities": {
+    "alice": {
+      "kind": "person",
+      "name": "Alice",
+      "summary": "summary-old"
+    }
+  },
+  "aliases": {
+    "Alice": "alice"
+  },
+  "stages": [
+    {
+      "key": "main",
+      "name": "Main",
+      "entities": [
+        "alice"
+      ]
+    }
+  ]
+}
diff --git a/research/agent-eval/tasks/field-update/task.json b/research/agent-eval/tasks/field-update/task.json
new file mode 100644
index 0000000..9e99a23
--- /dev/null
+++ b/research/agent-eval/tasks/field-update/task.json
@@ -0,0 +1,64 @@
+{
+  "taskVersion": "1.0",
+  "taskId": "sha256:618930ecee265100be229a2d2efa73e733f70c7131e00b0ed7a4bbb8ba75a18f",
+  "instructions": {
+    "text": "In lib/data/data.json, change only entities.alice.summary from summary-old to exactly summary-new. Preserve the valid Data Pack shape and every unrelated value. Emit a unified diff only.",
+    "sha256": "sha256:382f7cbdcf80e3c8dd094b94705d1b076f12f655c30c691593e887eb7bb86d58"
+  },
+  "source": {
+    "root": "source",
+    "revision": "field-update-fixture-v1",
+    "treeSha256": "sha256:5f3c536db01e9f4c2c1dbaabf9216bb532afc6f067ea18a7d13d89255105b35a"
+  },
+  "inputs": [
+    {
+      "id": "input-1",
+      "path": "lib/data/data.json",
+      "role": "canonical-data",
+      "sha256": "sha256:4af3f1f6eb137aed5e32146530a068601252760103e63e400f1ba89aadb5bd5e"
+    }
+  ],
+  "filePolicy": {
+    "allowed": [
+      {
+        "pattern": "lib/data/data.json",
+        "operations": [
+          "modify"
+        ]
+      }
+    ],
+    "forbidden": [
+      ".git/**",
+      "lib/src/**",
+      "lib/examples/**"
+    ],
+    "denyPrecedence": true,
+    "allowSymlinks": false,
+    "allowHardlinks": false,
+    "maxChangedFiles": 1,
+    "maxPatchBytes": 262144
+  },
+  "patchPolicy": {
+    "format": "unified-diff",
+    "fuzz": 0,
+    "allowBinary": false
+  },
+  "graders": [
+    {
+      "id": "task-grader",
+      "spec": "grader/spec.json",
+      "sha256": "sha256:35f684c1d0930525680da04d37f6e45124dc1cf974bdbdec6f69cfd14ce0d747",
+      "treeSha256": "sha256:8dd56f9c268b1fef1c3b31176150817e278993fc87759b73be7ffaae0d20ee44",
+      "weight": 1
+    }
+  ],
+  "evidence": {
+    "runtime": [],
+    "visual": []
+  },
+  "execution": {
+    "timeoutMs": 480000,
+    "network": "off",
+    "maxOutputBytes": 4194304
+  }
+}
diff --git a/research/agent-eval/tasks/pattern-c-runtime/grader/assert-task.js b/research/agent-eval/tasks/pattern-c-runtime/grader/assert-task.js
new file mode 100644
index 0000000..3c0b27b
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/grader/assert-task.js
@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const [, , workspace, task] = process.argv;
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])]));
+}
+function equivalent(left, right) { return JSON.stringify(canonical(left)) === JSON.stringify(canonical(right)); }
+if (!workspace || !['field-update', 'alias-relation', 'pattern-c'].includes(task)) {
+  console.error('hidden grader received invalid trusted arguments');
+  process.exit(3);
+}
+let expected;
+try {
+  expected = JSON.parse(fs.readFileSync(path.join(__dirname, 'expected-data.json'), 'utf8'));
+} catch (error) {
+  console.error('hidden expected candidate is unavailable: ' + error.message);
+  process.exit(3);
+}
+try {
+  const candidate = JSON.parse(fs.readFileSync(path.join(workspace, 'lib/data/data.json'), 'utf8'));
+  if (!equivalent(candidate, expected)) throw new Error('candidate data.json differs from the complete hidden expected candidate');
+  if (task === 'pattern-c') {
+    const script = fs.readFileSync(path.join(workspace, 'lib/data/data.js'), 'utf8');
+    const match = /^\s*(?:\/\/[^\n]*\n\s*)?globalThis\.SG_DATA_PACK\s*=\s*([\s\S]*);\s*$/.exec(script);
+    if (!match) throw new Error('data.js must contain only a generated SG_DATA_PACK JSON assignment');
+    const mirrored = JSON.parse(match[1]);
+    if (!equivalent(mirrored, expected)) throw new Error('data.js does not exactly mirror the complete expected data.json');
+  }
+  console.log(task + ': complete hidden candidate passed');
+} catch (error) {
+  console.error(error.message);
+  process.exit(1);
+}
diff --git a/research/agent-eval/tasks/pattern-c-runtime/grader/browser-evidence.js b/research/agent-eval/tasks/pattern-c-runtime/grader/browser-evidence.js
new file mode 100644
index 0000000..d9e0d7b
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/grader/browser-evidence.js
@@ -0,0 +1,188 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { pathToFileURL } = require('node:url');
+const { spawnSync } = require('node:child_process');
+
+const [, , workspace, artifacts, candidateTreeSha256, taskId, toolRoot] = process.argv;
+if (!workspace || !artifacts || !candidateTreeSha256 || !taskId || !toolRoot) {
+  console.error('Usage: browser-evidence <workspace> <artifacts> <candidate-tree-sha256> <task-id> <tool-root>');
+  process.exit(3);
+}
+let sha256Bytes;
+let contentId;
+let stableJson;
+let snapshotTree;
+try {
+  ({ sha256Bytes, contentId, stableJson } = require(path.join(toolRoot, 'scripts/lib/sg-evidence-utils.js')));
+  ({ snapshotTree } = require(path.join(toolRoot, 'scripts/lib/sg-tree-snapshot.js')));
+  fs.mkdirSync(artifacts, { recursive: true });
+} catch (error) {
+  console.error('Browser producer setup failed: ' + (error.stack || error.message));
+  process.exit(3);
+}
+const reference = path.join(__dirname, 'pattern-c-reference');
+
+function findChrome() {
+  const candidates = [
+    '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+    '/Applications/Chromium.app/Contents/MacOS/Chromium',
+    'google-chrome',
+    'google-chrome-stable',
+    'chromium',
+    'chromium-browser',
+  ];
+  for (const candidate of candidates) {
+    if (path.isAbsolute(candidate) && !fs.existsSync(candidate)) continue;
+    const probe = spawnSync(candidate, ['--version'], { encoding: 'utf8', timeout: 5000 });
+    if (!probe.error && probe.status === 0) return { executable: candidate, version: (probe.stdout || probe.stderr).trim() };
+  }
+  throw new Error('No supported Chrome or Chromium executable is available');
+}
+
+function verifyPillow() {
+  const probe = spawnSync('python3', ['-c', 'from PIL import Image, ImageChops'], { encoding: 'utf8', timeout: 5000 });
+  if (probe.error || probe.status !== 0) throw new Error('Python Pillow is unavailable: ' + (probe.stderr || probe.error));
+}
+
+function runChrome(chrome, root, label) {
+  const html = path.join(root, 'lib/examples/index.html');
+  const screenshot = path.join(artifacts, `${label}.png`);
+  const common = [
+    '--headless=new', '--disable-gpu', '--hide-scrollbars', '--allow-file-access-from-files',
+    '--no-first-run', '--no-default-browser-check', '--disable-background-networking',
+    '--disable-component-update', '--disable-sync', '--metrics-recording-only',
+    '--window-size=1100,720', '--force-device-scale-factor=1',
+    '--run-all-compositor-stages-before-draw', '--virtual-time-budget=1000',
+  ];
+  const imageRun = spawnSync(chrome, [...common, `--screenshot=${screenshot}`, pathToFileURL(html).href], { encoding: 'utf8', maxBuffer: 4 << 20, timeout: 30000 });
+  const domRun = spawnSync(chrome, [...common, '--dump-dom', pathToFileURL(html).href], { encoding: 'utf8', maxBuffer: 4 << 20, timeout: 30000 });
+  if (imageRun.error || domRun.error || imageRun.status !== 0 || domRun.status !== 0 || !fs.existsSync(screenshot)) {
+    throw new Error(`Chrome ${label} failed: ${imageRun.stderr || domRun.stderr || imageRun.error || domRun.error}`);
+  }
+  const domFile = path.join(artifacts, `${label}.dom.html`);
+  const logFile = path.join(artifacts, `${label}.chrome.log`);
+  fs.writeFileSync(domFile, domRun.stdout);
+  fs.writeFileSync(logFile, [imageRun.stderr, domRun.stderr].filter(Boolean).join('\n'));
+  return { screenshot, domFile, logFile, dom: domRun.stdout };
+}
+
+function compareImages(left, right, output) {
+  const comparison = spawnSync('python3', ['-c', [
+    'from PIL import Image, ImageChops',
+    'import json,sys',
+    'a=Image.open(sys.argv[1]).convert("RGBA")',
+    'b=Image.open(sys.argv[2]).convert("RGBA")',
+    'assert a.size==b.size',
+    'd=ImageChops.difference(a,b)',
+    'd.save(sys.argv[3])',
+    'changed=sum(1 for p in d.getdata() if p != (0,0,0,0))',
+    'print(json.dumps({"changed":changed,"total":a.width*a.height,"ratio":changed/(a.width*a.height)}))',
+  ].join(';'), left, right, output], { encoding: 'utf8', timeout: 30000 });
+  if (comparison.error || comparison.status !== 0) throw new Error('Pillow comparison failed: ' + (comparison.stderr || comparison.error));
+  return JSON.parse(comparison.stdout);
+}
+
+function attribute(dom, name) {
+  const match = new RegExp(`${name}="([^"]*)"`).exec(dom);
+  return match ? match[1] : null;
+}
+function errorArray(dom, name) {
+  const value = attribute(dom, name);
+  if (value === null) return null;
+  try {
+    const parsed = JSON.parse(decodeURIComponent(value));
+    return Array.isArray(parsed) ? parsed.map(String) : null;
+  } catch (_) {
+    return null;
+  }
+}
+function artifact(id, file, mediaType) {
+  const bytes = fs.readFileSync(file);
+  return { id, path: path.basename(file), mediaType, sha256: sha256Bytes(bytes) };
+}
+
+let browser;
+let referenceRun;
+try {
+  browser = findChrome();
+  verifyPillow();
+  referenceRun = runChrome(browser.executable, reference, 'reference');
+  const preflightDiff = path.join(artifacts, 'reference-preflight-diff.png');
+  const preflightMetric = compareImages(referenceRun.screenshot, referenceRun.screenshot, preflightDiff);
+  fs.rmSync(preflightDiff, { force: true });
+  if (preflightMetric.changed !== 0) throw new Error('reference image self-comparison is unstable');
+} catch (error) {
+  console.error('Browser producer infrastructure failed: ' + (error.stack || error.message));
+  process.exit(3);
+}
+
+try {
+  const candidateRun = runChrome(browser.executable, workspace, 'candidate');
+  const stabilityRun = runChrome(browser.executable, workspace, 'candidate-stability');
+  const diffFile = path.join(artifacts, 'visual-diff.png');
+  const stabilityDiffFile = path.join(artifacts, 'stability-diff.png');
+  const metric = compareImages(referenceRun.screenshot, candidateRun.screenshot, diffFile);
+  const stability = compareImages(candidateRun.screenshot, stabilityRun.screenshot, stabilityDiffFile);
+  const status = attribute(candidateRun.dom, 'data-runtime-status');
+  const styleScore = Number(attribute(candidateRun.dom, 'data-computed-style-score'));
+  const consoleErrors = errorArray(candidateRun.dom, 'data-console-errors');
+  const pageErrors = errorArray(candidateRun.dom, 'data-page-errors');
+  const networkFailures = errorArray(candidateRun.dom, 'data-network-failures');
+  const collectorReady = consoleErrors !== null && pageErrors !== null && networkFailures !== null;
+  const cardCount = (candidateRun.dom.match(/class="card"/g) || []).length;
+  const runtimeArtifacts = [
+    artifact('candidate-dom', candidateRun.domFile, 'text/html'),
+    artifact('candidate-browser-log', candidateRun.logFile, 'text/plain'),
+  ];
+  const runtime = {
+    evidenceVersion: '1.0', kind: 'runtime-evidence', evidenceId: null,
+    scenarioId: 'pattern-c-gallery', subjectTreeSha256: candidateTreeSha256,
+    producer: { name: 'headless-chrome-pattern-c', version: '1.2.0' },
+    environment: { browser: browser.version, platform: process.platform, taskId },
+    assertions: [
+      { id: 'error-collector', status: collectorReady ? 'passed' : 'failed' },
+      { id: 'mount-status', status: status === 'passed' ? 'passed' : 'failed', actual: status },
+      { id: 'card-count', status: cardCount === 3 ? 'passed' : 'failed', actual: cardCount, expected: 3 },
+      { id: 'gamma-visible', status: candidateRun.dom.includes('Gamma Card') ? 'passed' : 'failed' },
+    ],
+    consoleErrors: consoleErrors || ['browser error collector was not available'],
+    pageErrors: pageErrors || [],
+    networkFailures: networkFailures || [],
+    artifacts: runtimeArtifacts,
+  };
+  runtime.evidenceId = contentId('runtime', runtime, ['evidenceId']);
+  fs.writeFileSync(path.join(artifacts, 'runtime-evidence.json'), JSON.stringify(runtime, null, 2) + '\n');
+
+  const visualArtifacts = [
+    artifact('reference-screenshot', referenceRun.screenshot, 'image/png'),
+    artifact('candidate-screenshot', candidateRun.screenshot, 'image/png'),
+    artifact('diff-screenshot', diffFile, 'image/png'),
+    artifact('candidate-stability-screenshot', stabilityRun.screenshot, 'image/png'),
+    artifact('stability-diff-screenshot', stabilityDiffFile, 'image/png'),
+  ];
+  const thresholds = { maxPixelDiffRatio: 0.02, minComputedStyleScore: 0.98, minCoverage: 1 };
+  const visual = {
+    evidenceVersion: '1.0', kind: 'visual-evidence', evidenceId: null,
+    referenceTreeSha256: 'sha256:' + snapshotTree(reference, { errorOnSpecialFile: true, exclude: false }).treeSha256,
+    candidateTreeSha256,
+    configurationSha256: sha256Bytes(stableJson({ viewport: [1100, 720], thresholds, stabilityRuns: 2 })),
+    producer: { name: 'headless-chrome-pillow', version: '1.2.0' }, thresholds,
+    scenarios: [{
+      id: 'pattern-c-gallery-desktop', viewport: { width: 1100, height: 720 },
+      pixelDiffRatio: metric.ratio,
+      computedStyleScore: Number.isFinite(styleScore) ? styleScore : 0,
+      coverage: Math.min(cardCount / 3, 1),
+      stabilityFailures: stability.changed === 0 ? 0 : 1,
+      referenceArtifact: 'reference-screenshot', candidateArtifact: 'candidate-screenshot', diffArtifact: 'diff-screenshot',
+    }],
+    artifacts: visualArtifacts,
+  };
+  visual.evidenceId = contentId('visual', visual, ['evidenceId']);
+  fs.writeFileSync(path.join(artifacts, 'visual-evidence.json'), JSON.stringify(visual, null, 2) + '\n');
+  process.stdout.write(JSON.stringify({ runtime: runtime.evidenceId, visual: visual.evidenceId, pixelDiffRatio: metric.ratio, stabilityDiffRatio: stability.ratio }) + '\n');
+} catch (error) {
+  console.error('Candidate browser assessment failed: ' + (error.stack || error.message));
+  process.exit(1);
+}
diff --git a/research/agent-eval/tasks/pattern-c-runtime/grader/expected-data.json b/research/agent-eval/tasks/pattern-c-runtime/grader/expected-data.json
new file mode 100644
index 0000000..9394942
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/grader/expected-data.json
@@ -0,0 +1,68 @@
+{
+  "schemaVersion": "1.3",
+  "meta": {
+    "id": "agent-pattern-c",
+    "title": "Pattern C runtime fixture"
+  },
+  "kindNameFields": {
+    "card": "title"
+  },
+  "entities": {
+    "alpha": {
+      "kind": "card",
+      "title": "Alpha Card",
+      "color": "#2563eb"
+    },
+    "beta": {
+      "kind": "card",
+      "title": "Beta Card",
+      "color": "#059669"
+    },
+    "gamma": {
+      "kind": "card",
+      "title": "Gamma Card",
+      "color": "#8b5cf6"
+    }
+  },
+  "aliases": {
+    "Alpha Card": "alpha",
+    "Beta Card": "beta",
+    "Gamma Card": "gamma"
+  },
+  "stages": [
+    {
+      "key": "gallery",
+      "name": "Gallery",
+      "entities": [
+        "alpha",
+        "beta",
+        "gamma"
+      ]
+    }
+  ],
+  "domain": {
+    "cardOrder": [
+      "alpha",
+      "beta",
+      "gamma"
+    ]
+  },
+  "derivations": {
+    "cardGallery": {
+      "kind": "projection",
+      "source": "domain.cardOrder",
+      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
+      "alsoTouches": [
+        "entities.*.title",
+        "entities.*.color"
+      ],
+      "consumers": [
+        "__fromPack",
+        "#mount .card"
+      ],
+      "affects": [
+        "#mount .card"
+      ]
+    }
+  }
+}
diff --git a/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/data/data.js b/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/data/data.js
new file mode 100644
index 0000000..885ac0d
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/data/data.js
@@ -0,0 +1 @@
+globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"},"gamma":{"kind":"card","title":"Gamma Card","color":"#8b5cf6"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta","Gamma Card":"gamma"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta","gamma"]}],"domain":{"cardOrder":["alpha","beta","gamma"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
diff --git a/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/data/data.json b/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/data/data.json
new file mode 100644
index 0000000..9394942
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/data/data.json
@@ -0,0 +1,68 @@
+{
+  "schemaVersion": "1.3",
+  "meta": {
+    "id": "agent-pattern-c",
+    "title": "Pattern C runtime fixture"
+  },
+  "kindNameFields": {
+    "card": "title"
+  },
+  "entities": {
+    "alpha": {
+      "kind": "card",
+      "title": "Alpha Card",
+      "color": "#2563eb"
+    },
+    "beta": {
+      "kind": "card",
+      "title": "Beta Card",
+      "color": "#059669"
+    },
+    "gamma": {
+      "kind": "card",
+      "title": "Gamma Card",
+      "color": "#8b5cf6"
+    }
+  },
+  "aliases": {
+    "Alpha Card": "alpha",
+    "Beta Card": "beta",
+    "Gamma Card": "gamma"
+  },
+  "stages": [
+    {
+      "key": "gallery",
+      "name": "Gallery",
+      "entities": [
+        "alpha",
+        "beta",
+        "gamma"
+      ]
+    }
+  ],
+  "domain": {
+    "cardOrder": [
+      "alpha",
+      "beta",
+      "gamma"
+    ]
+  },
+  "derivations": {
+    "cardGallery": {
+      "kind": "projection",
+      "source": "domain.cardOrder",
+      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
+      "alsoTouches": [
+        "entities.*.title",
+        "entities.*.color"
+      ],
+      "consumers": [
+        "__fromPack",
+        "#mount .card"
+      ],
+      "affects": [
+        "#mount .card"
+      ]
+    }
+  }
+}
diff --git a/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/examples/index.html b/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/examples/index.html
new file mode 100644
index 0000000..3b72001
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/examples/index.html
@@ -0,0 +1,8 @@
+<!doctype html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body><main id="mount"></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+</body></html>
diff --git a/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/src/cards.js b/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/src/cards.js
new file mode 100644
index 0000000..46fedf9
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/grader/pattern-c-reference/lib/src/cards.js
@@ -0,0 +1,26 @@
+(function (global) {
+  'use strict';
+  function __fromPack(pack) {
+    var order = pack.domain && pack.domain.cardOrder || [];
+    return {
+      cards: order.map(function (id) {
+        var entity = pack.entities[id];
+        if (!entity) throw new Error('Missing card entity: ' + id);
+        return { id: id, title: entity.title, color: entity.color };
+      })
+    };
+  }
+  function mount(root, options) {
+    var data = options && options.data ? __fromPack(options.data) : { cards: [] };
+    root.innerHTML = '<div class="grid">' + data.cards.map(function (card) {
+      return '<article class="card" data-card-id="' + card.id + '" style="--accent:' + card.color + '"><span>' + card.title + '</span></article>';
+    }).join('') + '</div>';
+    var expected = ['Alpha Card', 'Beta Card', 'Gamma Card'];
+    var actual = Array.prototype.map.call(root.querySelectorAll('.card span'), function (item) { return item.textContent; });
+    document.body.dataset.runtimeStatus = JSON.stringify(actual) === JSON.stringify(expected) ? 'passed' : 'failed';
+    var first = root.querySelector('.card');
+    var style = first ? getComputedStyle(first) : null;
+    document.body.dataset.computedStyleScore = style && style.display === 'flex' && style.borderRadius === '14px' ? '1' : '0';
+  }
+  global.PatternCCards = { mount: mount, __fromPack: __fromPack };
+}(globalThis));
diff --git a/research/agent-eval/tasks/pattern-c-runtime/grader/spec.json b/research/agent-eval/tasks/pattern-c-runtime/grader/spec.json
new file mode 100644
index 0000000..03f937c
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/grader/spec.json
@@ -0,0 +1,68 @@
+{
+  "graderVersion": "1.0",
+  "graderId": "agent-pattern-c-grader",
+  "title": "Pattern C contract, mount, and visual grader",
+  "checks": [
+    {
+      "id": "data-pack-contract",
+      "type": "data-pack-contract",
+      "weight": 1,
+      "required": true,
+      "path": "lib/data/data.json",
+      "strict": true
+    },
+    {
+      "id": "hidden-property",
+      "type": "command",
+      "weight": 2,
+      "required": true,
+      "argv": [
+        "{node}",
+        "{grader}/assert-task.js",
+        "{workspace}",
+        "pattern-c"
+      ],
+      "expectedExit": 0,
+      "infraExitCodes": [
+        3
+      ]
+    },
+    {
+      "id": "browser-producer",
+      "type": "command",
+      "weight": 1,
+      "required": true,
+      "argv": [
+        "{node}",
+        "{grader}/browser-evidence.js",
+        "{workspace}",
+        "{artifacts}",
+        "{treeSha256}",
+        "{taskId}",
+        "{toolRoot}"
+      ],
+      "expectedExit": 0,
+      "timeoutMs": 120000,
+      "maxOutputBytes": 1048576,
+      "infraExitCodes": [
+        3
+      ]
+    },
+    {
+      "id": "runtime-mount",
+      "type": "runtime-evidence",
+      "weight": 2,
+      "required": true,
+      "path": "runtime-evidence.json",
+      "scenarioId": "pattern-c-gallery"
+    },
+    {
+      "id": "visual-regression",
+      "type": "visual-evidence",
+      "weight": 2,
+      "required": true,
+      "path": "visual-evidence.json",
+      "scenarioId": "pattern-c-gallery-desktop"
+    }
+  ]
+}
diff --git a/research/agent-eval/tasks/pattern-c-runtime/source/lib/data/data.js b/research/agent-eval/tasks/pattern-c-runtime/source/lib/data/data.js
new file mode 100644
index 0000000..45fd3de
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/source/lib/data/data.js
@@ -0,0 +1 @@
+globalThis.SG_DATA_PACK = {"schemaVersion":"1.3","meta":{"id":"agent-pattern-c","title":"Pattern C runtime fixture"},"kindNameFields":{"card":"title"},"entities":{"alpha":{"kind":"card","title":"Alpha Card","color":"#2563eb"},"beta":{"kind":"card","title":"Beta Card","color":"#059669"}},"aliases":{"Alpha Card":"alpha","Beta Card":"beta"},"stages":[{"key":"gallery","name":"Gallery","entities":["alpha","beta"]}],"domain":{"cardOrder":["alpha","beta"]},"derivations":{"cardGallery":{"kind":"projection","source":"domain.cardOrder","note":"Projects canonical card entities into the Pattern C gallery options shape.","alsoTouches":["entities.*.title","entities.*.color"],"consumers":["__fromPack","#mount .card"],"affects":["#mount .card"]}}};
diff --git a/research/agent-eval/tasks/pattern-c-runtime/source/lib/data/data.json b/research/agent-eval/tasks/pattern-c-runtime/source/lib/data/data.json
new file mode 100644
index 0000000..71ec43a
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/source/lib/data/data.json
@@ -0,0 +1,60 @@
+{
+  "schemaVersion": "1.3",
+  "meta": {
+    "id": "agent-pattern-c",
+    "title": "Pattern C runtime fixture"
+  },
+  "kindNameFields": {
+    "card": "title"
+  },
+  "entities": {
+    "alpha": {
+      "kind": "card",
+      "title": "Alpha Card",
+      "color": "#2563eb"
+    },
+    "beta": {
+      "kind": "card",
+      "title": "Beta Card",
+      "color": "#059669"
+    }
+  },
+  "aliases": {
+    "Alpha Card": "alpha",
+    "Beta Card": "beta"
+  },
+  "stages": [
+    {
+      "key": "gallery",
+      "name": "Gallery",
+      "entities": [
+        "alpha",
+        "beta"
+      ]
+    }
+  ],
+  "domain": {
+    "cardOrder": [
+      "alpha",
+      "beta"
+    ]
+  },
+  "derivations": {
+    "cardGallery": {
+      "kind": "projection",
+      "source": "domain.cardOrder",
+      "note": "Projects canonical card entities into the Pattern C gallery options shape.",
+      "alsoTouches": [
+        "entities.*.title",
+        "entities.*.color"
+      ],
+      "consumers": [
+        "__fromPack",
+        "#mount .card"
+      ],
+      "affects": [
+        "#mount .card"
+      ]
+    }
+  }
+}
diff --git a/research/agent-eval/tasks/pattern-c-runtime/source/lib/examples/index.html b/research/agent-eval/tasks/pattern-c-runtime/source/lib/examples/index.html
new file mode 100644
index 0000000..3b72001
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/source/lib/examples/index.html
@@ -0,0 +1,8 @@
+<!doctype html>
+<html><head><meta charset="utf-8"><style>
+*{box-sizing:border-box}body{margin:0;background:#f8fafc;color:#0f172a;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}#mount{width:960px;min-height:600px;padding:64px}.grid{display:grid;grid-template-columns:repeat(3,1fr);gap:24px}.card{height:180px;display:flex;align-items:flex-end;padding:24px;border-radius:14px;background:linear-gradient(145deg,var(--accent),#111827);color:white;font-size:22px;font-weight:700;box-shadow:0 18px 45px rgba(15,23,42,.18)}
+</style></head><body><main id="mount"></main>
+<script>(function(){var e={console:[],page:[],network:[]};function sync(){document.body.dataset.consoleErrors=encodeURIComponent(JSON.stringify(e.console));document.body.dataset.pageErrors=encodeURIComponent(JSON.stringify(e.page));document.body.dataset.networkFailures=encodeURIComponent(JSON.stringify(e.network));}var original=console.error;console.error=function(){e.console.push(Array.prototype.join.call(arguments,' '));sync();return original.apply(console,arguments);};addEventListener('error',function(event){var target=event.target;if(target&&target!==window&&(target.src||target.href))e.network.push(String(target.src||target.href));else e.page.push(String(event.message||event.error||'page error'));sync();},true);addEventListener('unhandledrejection',function(event){e.page.push(String(event.reason||'unhandled rejection'));sync();});sync();}());</script>
+<script src="../data/data.js"></script><script src="../src/cards.js"></script>
+<script>PatternCCards.mount(document.getElementById('mount'),{data:SG_DATA_PACK});</script>
+</body></html>
diff --git a/research/agent-eval/tasks/pattern-c-runtime/source/lib/src/cards.js b/research/agent-eval/tasks/pattern-c-runtime/source/lib/src/cards.js
new file mode 100644
index 0000000..46fedf9
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/source/lib/src/cards.js
@@ -0,0 +1,26 @@
+(function (global) {
+  'use strict';
+  function __fromPack(pack) {
+    var order = pack.domain && pack.domain.cardOrder || [];
+    return {
+      cards: order.map(function (id) {
+        var entity = pack.entities[id];
+        if (!entity) throw new Error('Missing card entity: ' + id);
+        return { id: id, title: entity.title, color: entity.color };
+      })
+    };
+  }
+  function mount(root, options) {
+    var data = options && options.data ? __fromPack(options.data) : { cards: [] };
+    root.innerHTML = '<div class="grid">' + data.cards.map(function (card) {
+      return '<article class="card" data-card-id="' + card.id + '" style="--accent:' + card.color + '"><span>' + card.title + '</span></article>';
+    }).join('') + '</div>';
+    var expected = ['Alpha Card', 'Beta Card', 'Gamma Card'];
+    var actual = Array.prototype.map.call(root.querySelectorAll('.card span'), function (item) { return item.textContent; });
+    document.body.dataset.runtimeStatus = JSON.stringify(actual) === JSON.stringify(expected) ? 'passed' : 'failed';
+    var first = root.querySelector('.card');
+    var style = first ? getComputedStyle(first) : null;
+    document.body.dataset.computedStyleScore = style && style.display === 'flex' && style.borderRadius === '14px' ? '1' : '0';
+  }
+  global.PatternCCards = { mount: mount, __fromPack: __fromPack };
+}(globalThis));
diff --git a/research/agent-eval/tasks/pattern-c-runtime/task.json b/research/agent-eval/tasks/pattern-c-runtime/task.json
new file mode 100644
index 0000000..d8ddd14
--- /dev/null
+++ b/research/agent-eval/tasks/pattern-c-runtime/task.json
@@ -0,0 +1,92 @@
+{
+  "taskVersion": "1.0",
+  "taskId": "sha256:3c621ced615d86b4b1c9e8ea644b1045fd762b71675f5c82acc54737f9182670",
+  "instructions": {
+    "text": "Extend the Pattern C card gallery with a third card. In lib/data/data.json add entity gamma with kind card, title Gamma Card, and color #8b5cf6; add alias Gamma Card -> gamma; append gamma to the gallery stage entities and domain.cardOrder. Update lib/data/data.js so SG_DATA_PACK exactly mirrors data.json. Do not modify the engine or HTML. Emit a unified diff only.",
+    "sha256": "sha256:b524ebb365df08d17a6957b4965d23315142a94f9760deedd1bf9878fbd2e291"
+  },
+  "source": {
+    "root": "source",
+    "revision": "pattern-c-runtime-fixture-v1",
+    "treeSha256": "sha256:0e1e4d837256995597bcf684eb3a2c613df90918e21bfdf7e8f3998a8f5e554c"
+  },
+  "inputs": [
+    {
+      "id": "input-1",
+      "path": "lib/data/data.json",
+      "role": "canonical-data",
+      "sha256": "sha256:c63bb685fd7d6ebdb624eee3a04edd4258fe7ba5ab7594b3302cc05adc29d814"
+    },
+    {
+      "id": "input-2",
+      "path": "lib/data/data.js",
+      "role": "integration-input",
+      "sha256": "sha256:088f58c2e5beb40627f2c6f5c8439d13166593fe055b92e8592d1497561d73e9"
+    },
+    {
+      "id": "input-3",
+      "path": "lib/src/cards.js",
+      "role": "integration-input",
+      "sha256": "sha256:4ea82923e95c60867bf064f7c1010046c9dfa85fc873721433e5fd82dd2cd7ee"
+    },
+    {
+      "id": "input-4",
+      "path": "lib/examples/index.html",
+      "role": "integration-input",
+      "sha256": "sha256:aa7470c5f04ead7fa392a57306f137f1b4583101e101bfb13032b6239ebe1ab3"
+    }
+  ],
+  "filePolicy": {
+    "allowed": [
+      {
+        "pattern": "lib/data/data.json",
+        "operations": [
+          "modify"
+        ]
+      },
+      {
+        "pattern": "lib/data/data.js",
+        "operations": [
+          "modify"
+        ]
+      }
+    ],
+    "forbidden": [
+      ".git/**",
+      "lib/src/**",
+      "lib/examples/**"
+    ],
+    "denyPrecedence": true,
+    "allowSymlinks": false,
+    "allowHardlinks": false,
+    "maxChangedFiles": 2,
+    "maxPatchBytes": 262144
+  },
+  "patchPolicy": {
+    "format": "unified-diff",
+    "fuzz": 0,
+    "allowBinary": false
+  },
+  "graders": [
+    {
+      "id": "task-grader",
+      "spec": "grader/spec.json",
+      "sha256": "sha256:0dc9af71563e5e011a435eadfc5bcb85fa8e4461d03caae4fca867846fbc0b8c",
+      "treeSha256": "sha256:98fc41ee2bacf9423b006b43957153db45bbedbf1ca833493de886601eaffdce",
+      "weight": 1
+    }
+  ],
+  "evidence": {
+    "runtime": [
+      "pattern-c-gallery"
+    ],
+    "visual": [
+      "pattern-c-gallery-desktop"
+    ]
+  },
+  "execution": {
+    "timeoutMs": 480000,
+    "network": "off",
+    "maxOutputBytes": 4194304
+  }
+}
diff --git a/scripts/lib/agent-task-manifest.js b/scripts/lib/agent-task-manifest.js
new file mode 100644
index 0000000..3aa428f
--- /dev/null
+++ b/scripts/lib/agent-task-manifest.js
@@ -0,0 +1,608 @@
+'use strict';
+
+/**
+ * Read-only AgentTaskManifest v1 contract helpers.
+ *
+ * This module intentionally does not depend on the path-policy package. It is a
+ * small, self-contained boundary for validating an already materialized task
+ * description and (optionally) checking the files it names.
+ */
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+
+const TASK_VERSION = '1.0';
+const DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;
+const TOP_LEVEL_FIELDS = [
+  'taskVersion', 'taskId', 'instructions', 'source', 'inputs',
+  'filePolicy', 'patchPolicy', 'graders', 'evidence', 'execution',
+];
+const INSTRUCTION_FIELDS = ['text', 'sha256'];
+const SOURCE_FIELDS = ['root', 'revision', 'treeSha256'];
+const INPUT_FIELDS = ['id', 'path', 'role', 'sha256'];
+const FILE_POLICY_FIELDS = [
+  'allowed', 'forbidden', 'denyPrecedence', 'allowSymlinks',
+  'allowHardlinks', 'maxChangedFiles', 'maxPatchBytes',
+];
+const ALLOWED_FIELDS = ['pattern', 'operations'];
+const PATCH_POLICY_FIELDS = ['format', 'fuzz', 'allowBinary'];
+const GRADER_FIELDS = ['id', 'spec', 'weight', 'sha256', 'treeSha256'];
+const EVIDENCE_FIELDS = ['runtime', 'visual'];
+const EXECUTION_FIELDS = ['timeoutMs', 'network', 'maxOutputBytes'];
+
+// Bounds are deliberately finite so an otherwise valid JSON number cannot
+// disable a runner's resource gate through an unbounded integer.
+const RESOURCE_LIMITS = Object.freeze({
+  timeoutMs: 24 * 60 * 60 * 1000,
+  maxOutputBytes: 1024 * 1024 * 1024,
+  maxChangedFiles: 1000000,
+  maxPatchBytes: 1024 * 1024 * 1024,
+});
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function hasOwn(value, key) {
+  return Object.prototype.hasOwnProperty.call(value, key);
+}
+
+function ownKeys(value) {
+  return isObject(value) ? Object.keys(value) : [];
+}
+
+function issue(issues, pathName, message) {
+  issues.push({ path: pathName, message });
+}
+
+function checkExactKeys(value, allowed, pathName, issues) {
+  if (!isObject(value)) return;
+  const allowedSet = new Set(allowed);
+  for (const key of Object.keys(value)) {
+    if (!allowedSet.has(key)) issue(issues, `${pathName}.${key}`, 'unknown field');
+  }
+}
+
+function requireObject(value, pathName, issues) {
+  if (!isObject(value)) {
+    issue(issues, pathName, 'must be an object');
+    return false;
+  }
+  return true;
+}
+
+function requireArray(value, pathName, issues) {
+  if (!Array.isArray(value)) {
+    issue(issues, pathName, 'must be an array');
+    return false;
+  }
+  return true;
+}
+
+function requireString(value, pathName, issues, options = {}) {
+  if (typeof value !== 'string' || (options.nonEmpty !== false && value.length === 0)) {
+    issue(issues, pathName, options.message || (options.nonEmpty === false ? 'must be a string' : 'must be a non-empty string'));
+    return false;
+  }
+  if (value.includes('\0')) issue(issues, pathName, 'must not contain NUL');
+  return true;
+}
+
+function requireDigest(value, pathName, issues) {
+  if (typeof value !== 'string' || !DIGEST_PATTERN.test(value)) {
+    issue(issues, pathName, 'must be a sha256:<64 lowercase hex> digest');
+    return false;
+  }
+  return true;
+}
+
+/**
+ * Canonical JSON sorts object keys recursively and preserves array order.
+ * JSON.stringify supplies the stable compact UTF-8 material that is hashed.
+ */
+function canonicalize(value) {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (isObject(value)) {
+    return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonicalize(value[key])]));
+  }
+  return value;
+}
+
+function canonicalJson(value) {
+  return JSON.stringify(canonicalize(value));
+}
+
+function sha256(value) {
+  const bytes = Buffer.isBuffer(value) ? value : Buffer.from(String(value), 'utf8');
+  return `sha256:${crypto.createHash('sha256').update(bytes).digest('hex')}`;
+}
+
+function withoutTaskId(manifest) {
+  if (!isObject(manifest)) return manifest;
+  const material = { ...manifest };
+  delete material.taskId;
+  return material;
+}
+
+function computeTaskId(manifest) {
+  if (!isObject(manifest)) throw new TypeError('manifest must be an object');
+  return sha256(canonicalJson(withoutTaskId(manifest)));
+}
+
+function validateSafeRelativePath(value, pathName, issues, options = {}) {
+  if (!requireString(value, pathName, issues)) return false;
+  if (value.includes('\\')) issue(issues, pathName, 'must use POSIX separators and must not contain backslash');
+  if (options.allowGlob !== true && /[*?{}\[\]]/.test(value)) issue(issues, pathName, 'must be a concrete path, not a glob pattern');
+  if (path.posix.isAbsolute(value) || /^\/+/.test(value) || /^[A-Za-z]:/.test(value)) {
+    issue(issues, pathName, 'must be a relative path');
+  }
+  const segments = value.split('/');
+  if (segments.some((segment) => segment === '..')) issue(issues, pathName, 'must not contain .. path segments');
+  if (segments.some((segment) => segment === '')) issue(issues, pathName, 'must not contain empty path segments');
+  const dotSegments = segments.filter((segment) => segment === '.');
+  if (dotSegments.length && !(options.allowDot === 'self' && value === '.')) {
+    issue(issues, pathName, 'must not contain . path segments');
+  }
+  return true;
+}
+
+function checkDuplicateStrings(values, pathName, issues) {
+  const seen = new Map();
+  values.forEach((value, index) => {
+    if (typeof value !== 'string') return;
+    if (seen.has(value)) issue(issues, `${pathName}[${index}]`, `duplicate value; first occurrence is ${pathName}[${seen.get(value)}]`);
+    else seen.set(value, index);
+  });
+}
+
+function checkDuplicateIds(items, pathName, issues) {
+  const seen = new Map();
+  items.forEach((item, index) => {
+    if (!isObject(item) || typeof item.id !== 'string') return;
+    if (seen.has(item.id)) issue(issues, `${pathName}[${index}].id`, `duplicate id; first occurrence is ${pathName}[${seen.get(item.id)}].id`);
+    else seen.set(item.id, index);
+  });
+}
+
+function validateInstructions(value, issues) {
+  if (!requireObject(value, 'instructions', issues)) return;
+  checkExactKeys(value, INSTRUCTION_FIELDS, 'instructions', issues);
+  requireString(value.text, 'instructions.text', issues);
+  requireDigest(value.sha256, 'instructions.sha256', issues);
+  if (typeof value.text === 'string' && typeof value.sha256 === 'string' && DIGEST_PATTERN.test(value.sha256)) {
+    const expected = sha256(Buffer.from(value.text, 'utf8'));
+    if (expected !== value.sha256) issue(issues, 'instructions.sha256', `digest does not match instructions.text (expected ${expected})`);
+  }
+}
+
+function validateSource(value, issues) {
+  if (!requireObject(value, 'source', issues)) return;
+  checkExactKeys(value, SOURCE_FIELDS, 'source', issues);
+  validateSafeRelativePath(value.root, 'source.root', issues, { allowDot: 'self' });
+  requireString(value.revision, 'source.revision', issues);
+  requireDigest(value.treeSha256, 'source.treeSha256', issues);
+}
+
+function validateInputs(value, issues) {
+  if (!requireArray(value, 'inputs', issues)) return;
+  checkDuplicateIds(value, 'inputs', issues);
+  value.forEach((input, index) => {
+    const base = `inputs[${index}]`;
+    if (!requireObject(input, base, issues)) return;
+    checkExactKeys(input, INPUT_FIELDS, base, issues);
+    requireString(input.id, `${base}.id`, issues);
+    validateSafeRelativePath(input.path, `${base}.path`, issues);
+    requireString(input.role, `${base}.role`, issues);
+    requireDigest(input.sha256, `${base}.sha256`, issues);
+  });
+}
+
+function validateFilePolicy(value, issues) {
+  if (!requireObject(value, 'filePolicy', issues)) return;
+  checkExactKeys(value, FILE_POLICY_FIELDS, 'filePolicy', issues);
+  if (!requireArray(value.allowed, 'filePolicy.allowed', issues)) return;
+  if (!requireArray(value.forbidden, 'filePolicy.forbidden', issues)) return;
+  if (value.denyPrecedence !== true) issue(issues, 'filePolicy.denyPrecedence', 'must be true');
+  if (value.allowSymlinks !== false) issue(issues, 'filePolicy.allowSymlinks', 'must be false');
+  if (value.allowHardlinks !== false) issue(issues, 'filePolicy.allowHardlinks', 'must be false');
+  validateResourceInteger(value.maxChangedFiles, 'filePolicy.maxChangedFiles', RESOURCE_LIMITS.maxChangedFiles, issues);
+  validateResourceInteger(value.maxPatchBytes, 'filePolicy.maxPatchBytes', RESOURCE_LIMITS.maxPatchBytes, issues);
+
+  const patterns = [];
+  value.allowed.forEach((rule, index) => {
+    const base = `filePolicy.allowed[${index}]`;
+    if (!requireObject(rule, base, issues)) return;
+    checkExactKeys(rule, ALLOWED_FIELDS, base, issues);
+    validateSafeRelativePath(rule.pattern, `${base}.pattern`, issues, { allowDot: true, allowGlob: true });
+    if (!requireArray(rule.operations, `${base}.operations`, issues)) return;
+    if (rule.operations.length === 0) issue(issues, `${base}.operations`, 'must contain at least one operation');
+    checkDuplicateStrings(rule.operations, `${base}.operations`, issues);
+    rule.operations.forEach((operation, operationIndex) => {
+      if (!['add', 'modify', 'delete'].includes(operation)) issue(issues, `${base}.operations[${operationIndex}]`, 'must be add, modify, or delete');
+    });
+    if (typeof rule.pattern === 'string') patterns.push({ pattern: rule.pattern, index });
+  });
+  const seenPatterns = new Map();
+  patterns.forEach(({ pattern, index }) => {
+    if (seenPatterns.has(pattern)) issue(issues, `filePolicy.allowed[${index}].pattern`, `duplicate pattern; first occurrence is ${seenPatterns.get(pattern).path}`);
+    else seenPatterns.set(pattern, { path: `filePolicy.allowed[${index}].pattern`, index });
+  });
+  checkDuplicateStrings(value.forbidden, 'filePolicy.forbidden', issues);
+  value.forbidden.forEach((pattern, index) => {
+    validateSafeRelativePath(pattern, `filePolicy.forbidden[${index}]`, issues, { allowDot: true, allowGlob: true });
+    if (typeof pattern === 'string' && seenPatterns.has(pattern)) {
+      issue(issues, `filePolicy.forbidden[${index}]`, `duplicate pattern; first occurrence is ${seenPatterns.get(pattern).path}`);
+    } else if (typeof pattern === 'string') {
+      seenPatterns.set(pattern, { path: `filePolicy.forbidden[${index}]`, index });
+    }
+  });
+}
+
+function validatePatchPolicy(value, issues) {
+  if (!requireObject(value, 'patchPolicy', issues)) return;
+  checkExactKeys(value, PATCH_POLICY_FIELDS, 'patchPolicy', issues);
+  if (value.format !== 'unified-diff') issue(issues, 'patchPolicy.format', 'must be unified-diff');
+  if (value.fuzz !== 0) issue(issues, 'patchPolicy.fuzz', 'must be 0');
+  if (value.allowBinary !== false) issue(issues, 'patchPolicy.allowBinary', 'must be false');
+}
+
+function validateGraders(value, issues) {
+  if (!requireArray(value, 'graders', issues)) return;
+  checkDuplicateIds(value, 'graders', issues);
+  value.forEach((grader, index) => {
+    const base = `graders[${index}]`;
+    if (!requireObject(grader, base, issues)) return;
+    checkExactKeys(grader, GRADER_FIELDS, base, issues);
+    requireString(grader.id, `${base}.id`, issues);
+    if (!hasOwn(grader, 'spec') || grader.spec === undefined || grader.spec === null) issue(issues, `${base}.spec`, 'is required and must not be null');
+    if (typeof grader.spec === 'string') validateSafeRelativePath(grader.spec, `${base}.spec`, issues);
+    else issue(issues, `${base}.spec`, 'must be a relative path to a grader spec');
+    requireDigest(grader.sha256, `${base}.sha256`, issues);
+    requireDigest(grader.treeSha256, `${base}.treeSha256`, issues);
+    if (typeof grader.weight !== 'number' || !Number.isFinite(grader.weight) || grader.weight <= 0) issue(issues, `${base}.weight`, 'must be a finite number greater than 0');
+  });
+}
+
+function validateEvidence(value, issues) {
+  if (!requireObject(value, 'evidence', issues)) return;
+  checkExactKeys(value, EVIDENCE_FIELDS, 'evidence', issues);
+  for (const kind of EVIDENCE_FIELDS) {
+    if (!requireArray(value[kind], `evidence.${kind}`, issues)) continue;
+    checkDuplicateStrings(value[kind], `evidence.${kind}`, issues);
+    value[kind].forEach((scenarioId, index) => requireString(scenarioId, `evidence.${kind}[${index}]`, issues));
+  }
+}
+
+function validateResourceInteger(value, pathName, maximum, issues) {
+  if (!Number.isSafeInteger(value) || value < 0 || value > maximum) {
+    issue(issues, pathName, `must be an integer from 0 to ${maximum}`);
+  }
+}
+
+function validateExecution(value, issues) {
+  if (!requireObject(value, 'execution', issues)) return;
+  checkExactKeys(value, EXECUTION_FIELDS, 'execution', issues);
+  if (!Number.isSafeInteger(value.timeoutMs) || value.timeoutMs < 1 || value.timeoutMs > RESOURCE_LIMITS.timeoutMs) {
+    issue(issues, 'execution.timeoutMs', `must be an integer from 1 to ${RESOURCE_LIMITS.timeoutMs}`);
+  }
+  if (value.network !== 'off') issue(issues, 'execution.network', 'must be off');
+  if (!Number.isSafeInteger(value.maxOutputBytes) || value.maxOutputBytes < 1 || value.maxOutputBytes > RESOURCE_LIMITS.maxOutputBytes) {
+    issue(issues, 'execution.maxOutputBytes', `must be an integer from 1 to ${RESOURCE_LIMITS.maxOutputBytes}`);
+  }
+}
+
+function resolveTaskFile(taskFile) {
+  if (typeof taskFile !== 'string' || taskFile.length === 0) return null;
+  return path.resolve(taskFile);
+}
+
+function resolveSourceRoot(manifest, options = {}) {
+  if (!isObject(manifest) || !isObject(manifest.source) || typeof manifest.source.root !== 'string') return null;
+  const taskFile = resolveTaskFile(options.taskFile);
+  if (taskFile) return path.resolve(path.dirname(taskFile), manifest.source.root);
+  if (typeof options.sourceRoot === 'string' && options.sourceRoot.length > 0) return path.resolve(options.sourceRoot);
+  return null;
+}
+
+function isWithinRoot(root, target) {
+  const relative = path.relative(root, target);
+  return relative === '' || (relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative));
+}
+
+function lstatPathParts(root, relativePath) {
+  const parts = relativePath.split('/');
+  const result = [];
+  let current = root;
+  for (const part of parts) {
+    current = path.join(current, part);
+    result.push({ path: current, stat: fs.lstatSync(current) });
+  }
+  return result;
+}
+
+function verifyGraderFiles(manifest, taskFile, issues) {
+  if (!taskFile) {
+    issue(issues, '$options.taskFile', 'is required to verify grader files');
+    return;
+  }
+  const taskDir = path.dirname(taskFile);
+  const requiredEvidence = { runtime: new Set(), visual: new Set() };
+  for (const [index, grader] of manifest.graders.entries()) {
+    if (!isObject(grader) || typeof grader.spec !== 'string') continue;
+    const specFile = path.resolve(taskDir, ...grader.spec.split('/'));
+    if (!isWithinRoot(taskDir, specFile)) {
+      issue(issues, `graders[${index}].spec`, 'resolves outside task directory');
+      continue;
+    }
+    try {
+      const stat = fs.lstatSync(specFile);
+      if (!stat.isFile() || stat.isSymbolicLink()) throw new Error('must be a regular non-symlink file');
+      if (stat.nlink > 1) throw new Error('hardlinks are not allowed');
+      const bytes = fs.readFileSync(specFile);
+      const actual = sha256(bytes);
+      if (actual !== grader.sha256) issue(issues, `graders[${index}].sha256`, `digest is stale (actual ${actual})`);
+      const actualTree = computeTreeSha256(path.dirname(specFile));
+      if (actualTree !== grader.treeSha256) issue(issues, `graders[${index}].treeSha256`, `digest is stale (actual ${actualTree})`);
+      const spec = JSON.parse(bytes.toString('utf8'));
+      for (const check of Array.isArray(spec.checks) ? spec.checks : []) {
+        const match = /^(runtime|visual)-evidence$/.exec(check && check.type);
+        if (match && check.required === true && typeof check.scenarioId === 'string' && check.scenarioId) requiredEvidence[match[1]].add(check.scenarioId);
+      }
+    } catch (error) {
+      issue(issues, `graders[${index}].spec`, `cannot verify grader: ${error.message}`);
+    }
+  }
+  for (const kind of ['runtime', 'visual']) {
+    const declared = new Set(manifest.evidence && Array.isArray(manifest.evidence[kind]) ? manifest.evidence[kind] : []);
+    for (const scenarioId of declared) if (!requiredEvidence[kind].has(scenarioId)) issue(issues, `evidence.${kind}`, `declared scenario has no required grader check: ${scenarioId}`);
+    for (const scenarioId of requiredEvidence[kind]) if (!declared.has(scenarioId)) issue(issues, `evidence.${kind}`, `required grader scenario is not declared: ${scenarioId}`);
+  }
+}
+
+function verifyInputFiles(manifest, sourceRoot, issues) {
+  if (!sourceRoot) {
+    issue(issues, '$options.sourceRoot', 'is required when verifyFiles is true');
+    return;
+  }
+  if (!Array.isArray(manifest.inputs)) return;
+  if (!isObject(manifest.filePolicy)) return;
+  let rootStat;
+  try {
+    rootStat = fs.lstatSync(sourceRoot);
+  } catch (error) {
+    issue(issues, 'source.root', `cannot read source root: ${error.message}`);
+    return;
+  }
+  if (rootStat.isSymbolicLink() && manifest.filePolicy.allowSymlinks === false) {
+    issue(issues, 'source.root', 'symlinks are not allowed');
+    return;
+  }
+  if (!rootStat.isDirectory()) {
+    issue(issues, 'source.root', 'must resolve to a directory');
+    return;
+  }
+  for (const [index, input] of manifest.inputs.entries()) {
+    if (!isObject(input) || typeof input.path !== 'string') continue;
+    const inputPath = path.resolve(sourceRoot, ...input.path.split('/'));
+    if (!isWithinRoot(sourceRoot, inputPath)) {
+      issue(issues, `inputs[${index}].path`, 'resolves outside source root');
+      continue;
+    }
+    let parts;
+    try {
+      parts = lstatPathParts(sourceRoot, input.path);
+    } catch (error) {
+      issue(issues, `inputs[${index}].path`, `cannot read input: ${error.message}`);
+      continue;
+    }
+    const symlink = parts.find((part) => part.stat.isSymbolicLink());
+    if (symlink && manifest.filePolicy.allowSymlinks === false) {
+      issue(issues, `inputs[${index}].path`, 'symlinks are not allowed');
+      continue;
+    }
+    const stat = parts[parts.length - 1].stat;
+    if (!stat.isFile()) {
+      issue(issues, `inputs[${index}].path`, 'must resolve to a regular file');
+      continue;
+    }
+    if (manifest.filePolicy.allowHardlinks === false && stat.nlink > 1) {
+      issue(issues, `inputs[${index}].path`, 'hardlinks are not allowed');
+      continue;
+    }
+    let bytes;
+    try {
+      bytes = fs.readFileSync(inputPath);
+    } catch (error) {
+      issue(issues, `inputs[${index}].path`, `cannot read input: ${error.message}`);
+      continue;
+    }
+    const actual = sha256(bytes);
+    if (actual !== input.sha256) issue(issues, `inputs[${index}].sha256`, `digest is stale (actual ${actual})`);
+  }
+}
+
+function collectTreeEntries(root, relative, manifest, entries, issues) {
+  let directoryEntries;
+  try {
+    directoryEntries = fs.readdirSync(path.join(root, relative), { withFileTypes: true });
+  } catch (error) {
+    issue(issues, 'source.treeSha256', `cannot read source tree: ${error.message}`);
+    return;
+  }
+  directoryEntries.sort((a, b) => Buffer.from(a.name).compare(Buffer.from(b.name)));
+  for (const directoryEntry of directoryEntries) {
+    const childRelative = relative ? `${relative}/${directoryEntry.name}` : directoryEntry.name;
+    const childPath = path.join(root, childRelative);
+    let stat;
+    try {
+      stat = fs.lstatSync(childPath);
+    } catch (error) {
+      issue(issues, 'source.treeSha256', `cannot stat ${childRelative}: ${error.message}`);
+      continue;
+    }
+    if (stat.isSymbolicLink()) {
+      if (manifest.filePolicy.allowSymlinks === false) issue(issues, `source.treeSha256`, `symlinks are not allowed: ${childRelative}`);
+      else {
+        let target;
+        try { target = fs.readlinkSync(childPath); } catch (error) { target = `<unreadable:${error.message}>`; }
+        entries.push({ path: childRelative, type: 'symlink', mode: stat.mode & 0o7777, target });
+      }
+      continue;
+    }
+    if (stat.isDirectory()) {
+      entries.push({ path: childRelative, type: 'directory', mode: stat.mode & 0o7777 });
+      collectTreeEntries(root, childRelative, manifest, entries, issues);
+      continue;
+    }
+    if (stat.isFile()) {
+      if (manifest.filePolicy.allowHardlinks === false && stat.nlink > 1) issue(issues, 'source.treeSha256', `hardlinks are not allowed: ${childRelative}`);
+      try {
+        entries.push({ path: childRelative, type: 'file', mode: stat.mode & 0o7777, sha256: sha256(fs.readFileSync(childPath)) });
+      } catch (error) {
+        issue(issues, 'source.treeSha256', `cannot read ${childRelative}: ${error.message}`);
+      }
+      continue;
+    }
+    issue(issues, 'source.treeSha256', `unsupported filesystem entry: ${childRelative}`);
+  }
+}
+
+function computeTreeSha256(sourceRoot, options = {}) {
+  const root = path.resolve(sourceRoot);
+  let rootStat;
+  try {
+    rootStat = fs.lstatSync(root);
+  } catch (error) {
+    const readError = new Error(`cannot read source tree root: ${error.message}`);
+    readError.code = 'TREE_DIGEST_ERROR';
+    throw readError;
+  }
+  if (rootStat.isSymbolicLink() && options.allowSymlinks !== true) {
+    const linkError = new Error(`source tree root is a symlink: ${root}`);
+    linkError.code = 'TREE_DIGEST_ERROR';
+    throw linkError;
+  }
+  if (!rootStat.isDirectory()) {
+    const directoryError = new Error(`source tree root must be a directory: ${root}`);
+    directoryError.code = 'TREE_DIGEST_ERROR';
+    throw directoryError;
+  }
+  const entries = [];
+  const manifest = { filePolicy: {
+    allowSymlinks: options.allowSymlinks === true,
+    allowHardlinks: options.allowHardlinks === true,
+  } };
+  const issues = [];
+  collectTreeEntries(root, '', manifest, entries, issues);
+  if (issues.length) {
+    const error = new Error(`cannot compute source tree digest: ${issues.map((item) => item.message).join('; ')}`);
+    error.code = 'TREE_DIGEST_ERROR';
+    error.issues = issues;
+    throw error;
+  }
+  return sha256(canonicalJson(entries));
+}
+
+function validateTaskManifest(manifest, options = {}) {
+  const issues = [];
+  if (!isObject(manifest)) return { valid: false, issues: [{ path: '$', message: 'manifest must be an object' }] };
+  checkExactKeys(manifest, TOP_LEVEL_FIELDS, '$', issues);
+  for (const field of TOP_LEVEL_FIELDS) {
+    if (!hasOwn(manifest, field)) issue(issues, field, 'is required');
+  }
+  if (manifest.taskVersion !== TASK_VERSION) issue(issues, 'taskVersion', 'must be 1.0');
+  requireDigest(manifest.taskId, 'taskId', issues);
+  validateInstructions(manifest.instructions, issues);
+  validateSource(manifest.source, issues);
+  validateInputs(manifest.inputs, issues);
+  validateFilePolicy(manifest.filePolicy, issues);
+  validatePatchPolicy(manifest.patchPolicy, issues);
+  validateGraders(manifest.graders, issues);
+  validateEvidence(manifest.evidence, issues);
+  validateExecution(manifest.execution, issues);
+
+  let expectedTaskId;
+  try {
+    expectedTaskId = computeTaskId(manifest);
+    if (typeof manifest.taskId === 'string' && DIGEST_PATTERN.test(manifest.taskId) && manifest.taskId !== expectedTaskId) {
+      issue(issues, 'taskId', `does not match canonical manifest material (expected ${expectedTaskId})`);
+    }
+  } catch (error) {
+    issue(issues, 'taskId', `cannot compute taskId: ${error.message}`);
+  }
+
+  const taskFile = resolveTaskFile(options.taskFile);
+  const resolvedSourceRoot = resolveSourceRoot(manifest, options);
+  if (options.sourceRoot !== undefined) {
+    if (typeof options.sourceRoot !== 'string' || options.sourceRoot.length === 0) issue(issues, '$options.sourceRoot', 'must be a non-empty path');
+    else if (resolvedSourceRoot && path.resolve(options.sourceRoot) !== resolvedSourceRoot) issue(issues, '$options.sourceRoot', `does not match source.root resolution (${resolvedSourceRoot})`);
+  }
+  if (options.verifyFiles === true) {
+    verifyInputFiles(manifest, resolvedSourceRoot, issues);
+    verifyGraderFiles(manifest, taskFile, issues);
+  }
+  if (options.verifyTree === true) {
+    if (!resolvedSourceRoot) issue(issues, '$options.sourceRoot', 'or taskFile is required when verifyTree is true');
+    else {
+      try {
+        const actual = computeTreeSha256(resolvedSourceRoot, {
+          allowSymlinks: manifest.filePolicy && manifest.filePolicy.allowSymlinks === true,
+          allowHardlinks: manifest.filePolicy && manifest.filePolicy.allowHardlinks === true,
+        });
+        if (actual !== manifest.source.treeSha256) issue(issues, 'source.treeSha256', `digest is stale (actual ${actual})`);
+      } catch (error) {
+        issue(issues, 'source.treeSha256', error.message);
+      }
+    }
+  }
+
+  return {
+    valid: issues.length === 0,
+    issues,
+    taskId: manifest.taskId,
+    expectedTaskId,
+    taskFile,
+    sourceRoot: resolvedSourceRoot,
+  };
+}
+
+function invalidManifestError(result, file) {
+  const error = new Error(`invalid AgentTaskManifest${file ? ` ${file}` : ''}: ${result.issues.map((item) => `${item.path}: ${item.message}`).join('; ')}`);
+  error.code = 'INVALID_AGENT_TASK_MANIFEST';
+  error.issues = result.issues;
+  error.validation = result;
+  return error;
+}
+
+function readTaskManifest(file, options = {}) {
+  if (typeof file !== 'string' || file.length === 0) throw new TypeError('manifest file path is required');
+  const taskFile = path.resolve(file);
+  let manifest;
+  try {
+    manifest = JSON.parse(fs.readFileSync(taskFile, 'utf8'));
+  } catch (error) {
+    const readError = new Error(`cannot read AgentTaskManifest ${taskFile}: ${error.message}`);
+    readError.code = 'AGENT_TASK_MANIFEST_READ_ERROR';
+    readError.cause = error;
+    throw readError;
+  }
+  const result = validateTaskManifest(manifest, { ...options, taskFile });
+  if (!result.valid) throw invalidManifestError(result, taskFile);
+  return manifest;
+}
+
+module.exports = {
+  TASK_VERSION,
+  DIGEST_PATTERN,
+  TOP_LEVEL_FIELDS,
+  RESOURCE_LIMITS,
+  canonicalize,
+  canonicalJson,
+  stableJson: canonicalJson,
+  sha256,
+  computeTaskId,
+  computeTreeSha256,
+  resolveSourceRoot,
+  validateTaskManifest,
+  readTaskManifest,
+};
diff --git a/scripts/lib/agent-task.schema.json b/scripts/lib/agent-task.schema.json
new file mode 100644
index 0000000..97558c0
--- /dev/null
+++ b/scripts/lib/agent-task.schema.json
@@ -0,0 +1,181 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/agent-task.schema.json",
+  "title": "AgentTaskManifest v1",
+  "description": "Declarative, content-addressed task contract for an agent execution.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "taskVersion",
+    "taskId",
+    "instructions",
+    "source",
+    "inputs",
+    "filePolicy",
+    "patchPolicy",
+    "graders",
+    "evidence",
+    "execution"
+  ],
+  "properties": {
+    "taskVersion": { "const": "1.0" },
+    "taskId": { "$ref": "#/$defs/digest" },
+    "instructions": { "$ref": "#/$defs/instructions" },
+    "source": { "$ref": "#/$defs/source" },
+    "inputs": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/input" },
+      "uniqueItems": true
+    },
+    "filePolicy": { "$ref": "#/$defs/filePolicy" },
+    "patchPolicy": { "$ref": "#/$defs/patchPolicy" },
+    "graders": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/grader" },
+      "uniqueItems": true
+    },
+    "evidence": { "$ref": "#/$defs/evidence" },
+    "execution": { "$ref": "#/$defs/execution" }
+  },
+  "$defs": {
+    "digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "relativePath": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*\\u0000)(?!.*[*?{}\\[\\]])(?!.*(?:^|/)\\.\\.?(?:/|$))(?!.*//).+"
+    },
+    "relativePattern": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*\\u0000)(?!.*(?:^|/)\\.\\.?(?:/|$))(?!.*//).+"
+    },
+    "relativeRoot": {
+      "type": "string",
+      "minLength": 1,
+      "pattern": "^(?:\\.|(?!/)(?![A-Za-z]:)(?!.*\\\\)(?!.*\\u0000)(?!.*[*?{}\\[\\]])(?!.*(?:^|/)\\.\\.?(?:/|$))(?!.*//).+)$"
+    },
+    "instructions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["text", "sha256"],
+      "properties": {
+        "text": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["root", "revision", "treeSha256"],
+      "properties": {
+        "root": { "$ref": "#/$defs/relativeRoot" },
+        "revision": { "type": "string", "minLength": 1 },
+        "treeSha256": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "input": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "path", "role", "sha256"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "path": { "$ref": "#/$defs/relativePath" },
+        "role": { "type": "string", "minLength": 1 },
+        "sha256": { "$ref": "#/$defs/digest" }
+      }
+    },
+    "filePolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "allowed",
+        "forbidden",
+        "denyPrecedence",
+        "allowSymlinks",
+        "allowHardlinks",
+        "maxChangedFiles",
+        "maxPatchBytes"
+      ],
+      "properties": {
+        "allowed": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/allowedRule" },
+          "uniqueItems": true
+        },
+        "forbidden": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/relativePattern" },
+          "uniqueItems": true
+        },
+        "denyPrecedence": { "const": true },
+        "allowSymlinks": { "const": false },
+        "allowHardlinks": { "const": false },
+        "maxChangedFiles": { "$ref": "#/$defs/nonNegativeBoundedInteger" },
+        "maxPatchBytes": { "$ref": "#/$defs/nonNegativeBoundedInteger" }
+      }
+    },
+    "allowedRule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["pattern", "operations"],
+      "properties": {
+        "pattern": { "$ref": "#/$defs/relativePattern" },
+        "operations": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "enum": ["add", "modify", "delete"] },
+          "uniqueItems": true
+        }
+      }
+    },
+    "patchPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["format", "fuzz", "allowBinary"],
+      "properties": {
+        "format": { "const": "unified-diff" },
+        "fuzz": { "const": 0 },
+        "allowBinary": { "const": false }
+      }
+    },
+    "grader": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "spec", "sha256", "treeSha256", "weight"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "spec": { "$ref": "#/$defs/relativePath" },
+        "sha256": { "$ref": "#/$defs/digest" },
+        "treeSha256": { "$ref": "#/$defs/digest" },
+        "weight": { "type": "number", "exclusiveMinimum": 0, "maximum": 1000000 }
+      }
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["runtime", "visual"],
+      "properties": {
+        "runtime": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+        "visual": { "type": "array", "uniqueItems": true, "items": { "type": "string", "minLength": 1 } }
+      }
+    },
+    "execution": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["timeoutMs", "network", "maxOutputBytes"],
+      "properties": {
+        "timeoutMs": { "type": "integer", "minimum": 1, "maximum": 86400000 },
+        "network": { "const": "off" },
+        "maxOutputBytes": { "type": "integer", "minimum": 1, "maximum": 1073741824 }
+      }
+    },
+    "nonNegativeBoundedInteger": {
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 1073741824
+    }
+  }
+}
diff --git a/scripts/lib/experiment.schema.json b/scripts/lib/experiment.schema.json
new file mode 100644
index 0000000..9146ecf
--- /dev/null
+++ b/scripts/lib/experiment.schema.json
@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/contracts/agent-experiment-v1.json",
+  "title": "SG Agent ExperimentSpec v1.0",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["experimentVersion", "experimentId", "title", "agent", "tasks", "repetitions", "seed"],
+  "properties": {
+    "experimentVersion": { "const": "1.0" },
+    "experimentId": { "type": "string", "pattern": "^experiment:[0-9a-f]{64}$" },
+    "title": { "type": "string", "minLength": 1 },
+    "agent": {
+      "type": "object", "additionalProperties": false,
+      "required": ["kind", "provider", "model", "argv", "adapter"],
+      "properties": {
+        "kind": { "enum": ["scripted", "ai"] },
+        "provider": { "type": "string", "minLength": 1 },
+        "model": { "type": "string", "minLength": 1 },
+          "argv": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+          "adapter": { "type": "object", "additionalProperties": false, "required": ["path", "sha256"], "properties": { "path": { "type": "string", "minLength": 1 }, "sha256": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" } } },
+          "infraExitCodes": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "integer", "minimum": 1, "maximum": 255 } }
+
+      }
+    },
+    "tasks": {
+      "type": "array", "minItems": 1,
+      "items": { "type": "object", "additionalProperties": false, "required": ["id", "manifest", "taskId", "manifestSha256"], "properties": { "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,63}$" }, "manifest": { "type": "string", "minLength": 1 }, "taskId": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "manifestSha256": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" } } }
+    },
+    "repetitions": { "type": "integer", "minimum": 1, "maximum": 100 },
+    "seed": { "type": ["integer", "string"] }
+  }
+}
diff --git a/scripts/lib/sg-command-runner.js b/scripts/lib/sg-command-runner.js
new file mode 100644
index 0000000..ecc49d7
--- /dev/null
+++ b/scripts/lib/sg-command-runner.js
@@ -0,0 +1,159 @@
+'use strict';
+
+/* Synchronous, shell-free command execution with bounded inputs and outputs. */
+const fs = require('node:fs');
+const { spawnSync } = require('node:child_process');
+const { assertWithinRoot, canonicalPath } = require('./sg-path-policy.js');
+
+const DEFAULT_TIMEOUT = 30_000;
+const DEFAULT_MAX_BUFFER = 1024 * 1024;
+const DEFAULT_ENV_ALLOWLIST = [
+  'PATH',
+  'HOME',
+  'TMPDIR',
+  'TMP',
+  'TEMP',
+  'LANG',
+  'LC_ALL',
+  'LC_CTYPE',
+  'SYSTEMROOT',
+  'SystemRoot',
+  'COMSPEC',
+  'ComSpec',
+  'PATHEXT',
+];
+const ENV_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+
+function assertArgv(argv) {
+  if (!Array.isArray(argv) || argv.length === 0) {
+    throw new TypeError('argv must be a non-empty array');
+  }
+  for (const argument of argv) {
+    if (typeof argument !== 'string') throw new TypeError('every argv item must be a string');
+    if (argument.includes('\0')) throw new TypeError('argv items must not contain null bytes');
+  }
+  if (argv[0].length === 0) throw new TypeError('argv[0] must name a command');
+}
+
+function normalizeAllowlist(value) {
+  if (value === undefined) return DEFAULT_ENV_ALLOWLIST;
+  if (value instanceof Set) value = [...value];
+  if (!Array.isArray(value) || value.some((name) => typeof name !== 'string' || !ENV_NAME.test(name))) {
+    throw new TypeError('envAllowlist must be an array or Set of environment variable names');
+  }
+  return value;
+}
+
+function allowedEnvironment(options = {}) {
+  const allowlist = normalizeAllowlist(options.envAllowlist === undefined ? options.allowedEnv : options.envAllowlist);
+  const supplied = options.env === undefined ? {} : options.env;
+  if (!supplied || typeof supplied !== 'object' || Array.isArray(supplied)) throw new TypeError('env must be an object');
+  const source = { ...process.env, ...supplied };
+  const output = Object.create(null);
+  for (const name of allowlist) {
+    if (!Object.prototype.hasOwnProperty.call(source, name) || source[name] === undefined) continue;
+    const value = source[name];
+    if (typeof value !== 'string' && typeof value !== 'number' && typeof value !== 'boolean') {
+      throw new TypeError(`environment variable ${name} must be a string, number, or boolean`);
+    }
+    const text = String(value);
+    if (text.includes('\0')) throw new TypeError(`environment variable ${name} must not contain null bytes`);
+    output[name] = text;
+  }
+  return output;
+}
+
+function positiveInteger(value, fallback, name) {
+  if (value === undefined) return fallback;
+  if (!Number.isSafeInteger(value) || value <= 0) throw new TypeError(`${name} must be a positive safe integer`);
+  return value;
+}
+
+function outputBuffer(value) {
+  if (Buffer.isBuffer(value)) return value;
+  if (value === null || value === undefined) return Buffer.alloc(0);
+  return Buffer.from(String(value));
+}
+
+function boundedText(value, maxBuffer) {
+  const bytes = outputBuffer(value);
+  const truncated = bytes.length > maxBuffer;
+  return {
+    text: bytes.subarray(0, maxBuffer).toString('utf8'),
+    truncated,
+  };
+}
+
+function structuredError(error) {
+  if (!error) return undefined;
+  return {
+    name: error.name,
+    code: error.code || null,
+    message: error.message,
+    errno: error.errno === undefined ? null : error.errno,
+    syscall: error.syscall || null,
+    path: error.path || null,
+  };
+}
+
+function runCommand(input, legacyOptions = {}) {
+  const objectForm = !Array.isArray(input) && input !== null && typeof input === 'object';
+  const argv = objectForm ? input.argv : input;
+  const options = objectForm ? input : legacyOptions;
+  assertArgv(argv);
+  if (!options || typeof options !== 'object' || Array.isArray(options)) throw new TypeError('options must be an object');
+  const allowedRoot = canonicalPath(options.allowedRoot || options.root || process.cwd(), { mustExist: true });
+  const cwd = assertWithinRoot(allowedRoot, options.cwd || allowedRoot, { mustExist: true });
+  if (!fs.statSync(cwd).isDirectory()) throw new TypeError(`cwd must be a directory: ${cwd}`);
+  const timeout = positiveInteger(options.timeoutMs === undefined ? options.timeout : options.timeoutMs, DEFAULT_TIMEOUT, 'timeoutMs');
+  const maxBuffer = positiveInteger(options.maxOutputBytes === undefined ? options.maxBuffer : options.maxOutputBytes, DEFAULT_MAX_BUFFER, 'maxOutputBytes');
+  const env = allowedEnvironment(options);
+  const started = process.hrtime.bigint();
+  const result = spawnSync(argv[0], argv.slice(1), {
+    cwd,
+    env,
+    input: options.input,
+    encoding: null,
+    timeout,
+    maxBuffer,
+    killSignal: options.killSignal || 'SIGTERM',
+    windowsHide: true,
+    shell: false,
+  });
+  const durationMs = Number(process.hrtime.bigint() - started) / 1e6;
+  const stdout = boundedText(result.stdout, maxBuffer);
+  const stderr = boundedText(result.stderr, maxBuffer);
+  const errorCode = result.error && result.error.code;
+  const timedOut = errorCode === 'ETIMEDOUT';
+  const outputLimitReached = errorCode === 'ENOBUFS';
+  const stdoutTruncated = stdout.truncated;
+  const stderrTruncated = stderr.truncated;
+
+  return {
+    argv: [...argv],
+    cwd,
+    status: result.status,
+    exitCode: result.status,
+    exit: result.status,
+    signal: result.signal,
+    timedOut,
+    durationMs,
+    duration: durationMs,
+    stdout: stdout.text,
+    stderr: stderr.text,
+    stdoutTruncated,
+    stderrTruncated,
+    truncated: outputLimitReached || stdoutTruncated || stderrTruncated,
+    error: structuredError(result.error),
+  };
+}
+
+module.exports = {
+  DEFAULT_TIMEOUT,
+  DEFAULT_MAX_BUFFER,
+  DEFAULT_ENV_ALLOWLIST,
+  allowedEnvironment,
+  buildAllowedEnv: allowedEnvironment,
+  runCommand,
+  run: runCommand,
+};
diff --git a/scripts/lib/sg-data-loader.js b/scripts/lib/sg-data-loader.js
index c5d8fac..9465244 100644
--- a/scripts/lib/sg-data-loader.js
+++ b/scripts/lib/sg-data-loader.js
@@ -57,6 +57,20 @@
     return null;
   }
 
+  /* Select one authoritative display field/value for an entity. E3, W1, and
+   * W6 must agree on this lookup: kindNameFields[kind], otherwise "name".
+   * Deliberately do not fall back to legacy name/title fields, because doing
+   * so can validate or compare a value that the entity kind does not display. */
+  function entityDisplay(pack, entity) {
+    var nameFields = pack && isObj(pack.kindNameFields) ? pack.kindNameFields : {};
+    var configured = isObj(entity) && typeof entity.kind === 'string' &&
+      Object.prototype.hasOwnProperty.call(nameFields, entity.kind)
+      ? nameFields[entity.kind]
+      : undefined;
+    var field = typeof configured === 'string' && configured ? configured : 'name';
+    return { field: field, value: isObj(entity) ? entity[field] : undefined };
+  }
+
   /* crawled name / alias / canonical id -> canonical id; null when unresolvable.
    * Handles the {id, context} disambiguation form: resolveAlias may return an
    * object (E4 validates it), so we unpack .id here before the entity lookup. */
@@ -157,16 +171,15 @@
       errors.push('E3: entities must be a non-empty object');
       entities = {};
     }
-    var nameFields = isObj(pack.kindNameFields) ? pack.kindNameFields : {};
     Object.keys(entities).forEach(function (id) {
       var e = entities[id];
       if (!/^[a-z][a-z0-9_-]*$/.test(id) || id === '__proto__' || id === 'prototype' || id === 'constructor') {
         errors.push('E3: entities.' + id + ' must use a safe stable slug id');
       }
       if (!isObj(e)) { errors.push('E3: entities.' + id + ' must be an object'); return; }
-      var nf = Object.prototype.hasOwnProperty.call(nameFields, e.kind) && nameFields[e.kind] ? nameFields[e.kind] : 'name';
-      if (typeof e[nf] !== 'string' || !e[nf]) {
-        errors.push('E3: entities.' + id + '.' + nf + ' must be a non-empty string' + (nf !== 'name' ? ' (nameField of kind:' + e.kind + ')' : ''));
+      var display = entityDisplay(pack, e);
+      if (typeof display.value !== 'string' || !display.value) {
+        errors.push('E3: entities.' + id + '.' + display.field + ' must be a non-empty string' + (display.field !== 'name' ? ' (nameField of kind:' + e.kind + ')' : ''));
       }
       if (typeof e.kind !== 'string' || !e.kind) errors.push('E3: entities.' + id + '.kind must be a non-empty string');
     });
@@ -418,8 +431,8 @@
 
     /* W1 */
     Object.keys(entities).forEach(function (id) {
-      var entity = entities[id];
-      var display = isObj(entity) ? (entity.name || entity.title || id) : id;
+      var selected = entityDisplay(pack, entities[id]);
+      var display = typeof selected.value === 'string' && selected.value ? selected.value : id;
       if (!referenced[id]) warnings.push('W1: entity "' + id + '" (' + display + ') is not referenced by any relation/stage');
     });
 
@@ -606,7 +619,8 @@
     Object.keys(entities).forEach(function (id) {
       var e = entities[id];
       if (!isObj(e)) return;
-      var n = normName(e.name || e.title || '');
+      var selected = entityDisplay(pack, e);
+      var n = normName(selected.value || '');
       if (!n) return;
       if (!byNorm[n]) byNorm[n] = [];
       byNorm[n].push(id);
@@ -656,6 +670,7 @@
     assertValid: assertValid,
     resolveAlias: resolveAlias,
     resolveId: resolveId,
+    entityDisplay: entityDisplay,
     resolveContentRef: resolveContentRef,
     relationIdentity: relationIdentity
   };
diff --git a/scripts/lib/sg-data-surface-import.js b/scripts/lib/sg-data-surface-import.js
index 3098b09..82f369d 100644
--- a/scripts/lib/sg-data-surface-import.js
+++ b/scripts/lib/sg-data-surface-import.js
@@ -4,7 +4,15 @@ const crypto = require('node:crypto');
 const fs = require('node:fs');
 
 const HASH_PATTERN = /^[a-f0-9]{64}$/;
-const DATA_PACK_FIELDS = ['entities', 'aliases', 'relations', 'stages', 'contents', 'adapters'];
+/* Every root field declared by the Data Pack v1.3 contract is forbidden in a
+ * Data Surface handoff. Keep the legacy adapters entry too: accepting it would
+ * let an older Data Pack-shaped payload bypass the handoff boundary. */
+const DATA_PACK_FIELDS = [
+  'meta', 'kindNameFields', 'sameAs', 'provenance',
+  'entities', 'aliases', 'relationTypes', 'heroRelTypes', 'relations', 'stages',
+  'attributeTypes', 'attributeSources', 'contents', 'domain', 'assets', 'derivations',
+  'adapters',
+];
 
 function isObject(value) {
   return value !== null && typeof value === 'object' && !Array.isArray(value);
@@ -31,6 +39,9 @@ function validateSurface(surface, index, issues) {
   if (!Array.isArray(surface.consumers)) issue(issues, `${path}.consumers`, 'consumers must be an array');
   if (!Array.isArray(surface.references)) issue(issues, `${path}.references`, 'references must be an array');
   if (!Array.isArray(surface.unresolved)) issue(issues, `${path}.unresolved`, 'unresolved must be an array');
+  if (Object.prototype.hasOwnProperty.call(surface, 'reviewRequired') && typeof surface.reviewRequired !== 'boolean') {
+    issue(issues, `${path}.reviewRequired`, 'reviewRequired must be a boolean when present');
+  }
 }
 
 function validateDataSurfaceManifest(manifest) {
@@ -93,7 +104,7 @@ function importDataSurfaceManifest(manifest, options = {}) {
     source: {
       kind: manifest.kind,
       identity: manifest.identity,
-      digest: hashCanonical({ identity: manifest.identity, metrics: manifest.metrics, surfaces: manifest.surfaces.map(surface => surface.id) }),
+      digest: hashCanonical(manifest),
     },
     library: manifest.library,
     surfaces: manifest.surfaces.map(surface => ({
@@ -105,6 +116,7 @@ function importDataSurfaceManifest(manifest, options = {}) {
       consumers: surface.consumers,
       injection: surface.injection,
       references: surface.references,
+      evidence: surface.evidence,
       reviewRequired: surface.reviewRequired,
       unresolved: surface.unresolved,
     })),
diff --git a/scripts/lib/sg-evidence-utils.js b/scripts/lib/sg-evidence-utils.js
new file mode 100644
index 0000000..eac0da3
--- /dev/null
+++ b/scripts/lib/sg-evidence-utils.js
@@ -0,0 +1,96 @@
+'use strict';
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+
+function stableValue(value) {
+  if (Array.isArray(value)) return value.map(stableValue);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, stableValue(value[key])]));
+}
+
+function stableJson(value) {
+  return JSON.stringify(stableValue(value));
+}
+
+function sha256Bytes(value) {
+  return 'sha256:' + crypto.createHash('sha256').update(value).digest('hex');
+}
+
+function contentId(prefix, value, omitted = []) {
+  const copy = { ...value };
+  for (const key of omitted) delete copy[key];
+  return `${prefix}:${sha256Bytes(stableJson(copy)).slice(7)}`;
+}
+
+function isDigest(value) {
+  return typeof value === 'string' && /^sha256:[0-9a-f]{64}$/.test(value);
+}
+
+function safeRelative(value, label = 'path') {
+  if (typeof value !== 'string' || !value || /[\u0000-\u001f\u007f]/.test(value)) throw new Error(`${label} must be a non-empty safe relative path`);
+  if (path.isAbsolute(value) || /^[A-Za-z]:[\\/]/.test(value)) throw new Error(`${label} must be relative`);
+  const normalized = value.replace(/\\/g, '/');
+  if (normalized.split('/').includes('..')) throw new Error(`${label} must not escape its root`);
+  return normalized.replace(/^\.\//, '');
+}
+
+function verifyArtifacts(artifacts, baseDir, errors) {
+  const verifiedIds = new Set();
+  const ids = new Set();
+  const paths = new Set();
+  let root = null;
+  if ((artifacts || []).length && !baseDir) errors.push('artifact verification baseDir is required');
+  else if (baseDir) {
+    try { root = fs.realpathSync(baseDir); }
+    catch (error) { errors.push(`artifact verification root cannot be resolved: ${error.message}`); }
+  }
+  for (const artifact of artifacts || []) {
+    if (!artifact || typeof artifact !== 'object' || Array.isArray(artifact)) {
+      errors.push('artifact must be an object');
+      continue;
+    }
+    const id = typeof artifact.id === 'string' && artifact.id ? artifact.id : null;
+    if (!id) errors.push('artifact.id must be a non-empty string');
+    else if (ids.has(id)) errors.push(`artifact id is duplicated: ${id}`);
+    else ids.add(id);
+    if (!isDigest(artifact.sha256)) errors.push(`artifact ${id || '<unknown>'} sha256 is required`);
+    let relative;
+    try { relative = safeRelative(artifact.path, `artifact ${id || '<unknown>'} path`); }
+    catch (error) { errors.push(error.message); continue; }
+    if (paths.has(relative)) {
+      errors.push(`artifact path is duplicated: ${relative}`);
+      continue;
+    }
+    paths.add(relative);
+    if (!root || !id || !isDigest(artifact.sha256)) continue;
+    const file = path.resolve(root, relative);
+    const fromRoot = path.relative(root, file);
+    if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) {
+      errors.push(`artifact ${id} escapes evidence root`);
+      continue;
+    }
+    try {
+      let current = root;
+      for (const segment of relative.split('/')) {
+        current = path.join(current, segment);
+        const stat = fs.lstatSync(current);
+        if (stat.isSymbolicLink()) throw new Error('path must not contain symlinks');
+      }
+      const stat = fs.lstatSync(file);
+      if (!stat.isFile()) throw new Error('must be a regular file');
+      if (stat.nlink > 1) throw new Error('hardlinks are not allowed');
+      const canonicalFile = fs.realpathSync(file);
+      const canonicalRelative = path.relative(root, canonicalFile);
+      if (canonicalRelative === '..' || canonicalRelative.startsWith(`..${path.sep}`) || path.isAbsolute(canonicalRelative)) throw new Error('resolves outside evidence root');
+      const actual = sha256Bytes(fs.readFileSync(file));
+      if (actual !== artifact.sha256) throw new Error('digest mismatch');
+      verifiedIds.add(id);
+    } catch (error) {
+      errors.push(`artifact ${id} cannot be verified: ${error.message}`);
+    }
+  }
+  return verifiedIds;
+}
+
+module.exports = { stableValue, stableJson, sha256Bytes, contentId, isDigest, safeRelative, verifyArtifacts };
diff --git a/scripts/lib/sg-experiment.js b/scripts/lib/sg-experiment.js
new file mode 100644
index 0000000..5dd2073
--- /dev/null
+++ b/scripts/lib/sg-experiment.js
@@ -0,0 +1,237 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { runTask, writeAtomic } = require('./sg-task-runner.js');
+const { readTaskManifest } = require('./agent-task-manifest.js');
+const { canonicalPath } = require('./sg-path-policy.js');
+const { contentId, stableJson, sha256Bytes, safeRelative, isDigest } = require('./sg-evidence-utils.js');
+
+function wilson(successes, total, z = 1.959963984540054) {
+  if (!Number.isInteger(successes) || !Number.isInteger(total) || total < 0 || successes < 0 || successes > total) throw new Error('invalid Wilson interval counts');
+  if (total === 0) return { lower: null, upper: null };
+  const p = successes / total;
+  const denominator = 1 + z * z / total;
+  const center = (p + z * z / (2 * total)) / denominator;
+  const margin = z * Math.sqrt((p * (1 - p) + z * z / (4 * total)) / total) / denominator;
+  return { lower: Math.max(0, center - margin), upper: Math.min(1, center + margin) };
+}
+
+function validateExperimentSpec(spec) {
+  const errors = [];
+  if (!spec || typeof spec !== 'object' || Array.isArray(spec)) return { valid: false, errors: ['experiment spec must be an object'] };
+  const allowed = new Set(['experimentVersion', 'experimentId', 'title', 'agent', 'tasks', 'repetitions', 'seed']);
+  for (const key of Object.keys(spec)) if (!allowed.has(key)) errors.push(`unknown experiment field: ${key}`);
+  if (spec.experimentVersion !== '1.0') errors.push('experimentVersion must be 1.0');
+  if (typeof spec.title !== 'string' || !spec.title) errors.push('title is required');
+  if (!spec.agent || typeof spec.agent !== 'object' || Array.isArray(spec.agent)) errors.push('agent must be an object');
+  else {
+    for (const key of Object.keys(spec.agent)) if (!['kind', 'provider', 'model', 'argv', 'adapter', 'infraExitCodes'].includes(key)) errors.push(`unknown agent field: ${key}`);
+    if (!['scripted', 'ai'].includes(spec.agent.kind)) errors.push('agent.kind must be scripted or ai');
+    for (const field of ['provider', 'model']) if (typeof spec.agent[field] !== 'string' || !spec.agent[field]) errors.push(`agent.${field} is required`);
+    if (!Array.isArray(spec.agent.argv) || !spec.agent.argv.length || spec.agent.argv.some((item) => typeof item !== 'string' || item.includes('\0'))) errors.push('agent.argv must be a non-empty safe string array');
+    else if (!spec.agent.argv.some((item) => item.includes('{adapter}'))) errors.push('agent.argv must invoke the content-bound {adapter}');
+    if (!spec.agent.adapter || typeof spec.agent.adapter !== 'object' || Array.isArray(spec.agent.adapter)) errors.push('agent.adapter is required');
+    else {
+      for (const key of Object.keys(spec.agent.adapter)) if (!['path', 'sha256'].includes(key)) errors.push(`unknown agent.adapter field: ${key}`);
+      try { safeRelative(spec.agent.adapter.path, 'agent.adapter.path'); } catch (error) { errors.push(error.message); }
+      if (!isDigest(spec.agent.adapter.sha256)) errors.push('agent.adapter.sha256 must be sha256:<hex>');
+    }
+    if (spec.agent.infraExitCodes !== undefined && (!Array.isArray(spec.agent.infraExitCodes) || !spec.agent.infraExitCodes.length || spec.agent.infraExitCodes.some((item) => !Number.isInteger(item) || item < 1 || item > 255) || new Set(spec.agent.infraExitCodes).size !== spec.agent.infraExitCodes.length)) errors.push('agent.infraExitCodes must be a non-empty array of unique exit codes from 1 to 255');
+  }
+  if (!Array.isArray(spec.tasks) || !spec.tasks.length) errors.push('tasks must be a non-empty array');
+  const ids = new Set();
+  for (const [index, task] of (spec.tasks || []).entries()) {
+    if (!task || typeof task !== 'object' || Array.isArray(task)) { errors.push(`tasks[${index}] must be an object`); continue; }
+    for (const key of Object.keys(task)) if (!['id', 'manifest', 'taskId', 'manifestSha256'].includes(key)) errors.push(`tasks[${index}] unknown field: ${key}`);
+    if (typeof task.id !== 'string' || !/^[a-z][a-z0-9-]{1,63}$/.test(task.id)) errors.push(`tasks[${index}].id must be a stable slug`);
+    else if (ids.has(task.id)) errors.push(`duplicate task id: ${task.id}`); else ids.add(task.id);
+    try { safeRelative(task.manifest, `tasks[${index}].manifest`); } catch (error) { errors.push(error.message); }
+    if (!isDigest(task.taskId)) errors.push(`tasks[${index}].taskId must be sha256:<hex>`);
+    if (!isDigest(task.manifestSha256)) errors.push(`tasks[${index}].manifestSha256 must be sha256:<hex>`);
+  }
+  if (!Number.isInteger(spec.repetitions) || spec.repetitions < 1 || spec.repetitions > 100) errors.push('repetitions must be 1..100');
+  if (!['string', 'number'].includes(typeof spec.seed) || typeof spec.seed === 'number' && !Number.isSafeInteger(spec.seed)) errors.push('seed must be a string or safe integer');
+  const material = { ...spec }; delete material.experimentId;
+  const expectedId = contentId('experiment', material, []);
+  if (spec.experimentId !== expectedId) errors.push(`experimentId mismatch (expected ${expectedId})`);
+  return { valid: errors.length === 0, errors, expectedId };
+}
+
+function aggregate(trials, agentKind) {
+  const valid = trials.filter((trial) => !['input-error', 'infra-error'].includes(trial.verdict));
+  const passed = valid.filter((trial) => trial.verdict === 'passed').length;
+  const durations = valid.map((trial) => trial.durationMs).sort((a, b) => a - b);
+  const counts = Object.fromEntries([...new Set(trials.map((trial) => trial.verdict))].sort().map((key) => [key, trials.filter((trial) => trial.verdict === key).length]));
+  const stage = (predicate) => ({ passed: valid.filter(predicate).length, total: valid.length });
+  const evidenceStage = (field, requirementField) => {
+    const required = valid.filter((trial) => trial[requirementField] > 0);
+    return {
+      passed: required.filter((trial) => trial[field].length === trial[requirementField] && trial[field].every((value) => value === 'passed')).length,
+      total: required.length,
+    };
+  };
+  const providerMetadata = trials.map((trial) => trial.providerMetadata).filter(Boolean);
+  const actualModels = [...new Set(providerMetadata.flatMap((metadata) => Object.keys(metadata.modelUsage || {})))].sort();
+  const usage = providerMetadata.reduce((sum, metadata) => ({
+    inputTokens: sum.inputTokens + Number(metadata.usage && metadata.usage.input_tokens || 0),
+    outputTokens: sum.outputTokens + Number(metadata.usage && metadata.usage.output_tokens || 0),
+    cacheReadInputTokens: sum.cacheReadInputTokens + Number(metadata.usage && metadata.usage.cache_read_input_tokens || 0),
+    totalCostUsd: sum.totalCostUsd + Number(metadata.totalCostUsd || 0),
+  }), { inputTokens: 0, outputTokens: 0, cacheReadInputTokens: 0, totalCostUsd: 0 });
+  const runtimeStage = evidenceStage('runtimeStatuses', 'runtimeRequired');
+  const visualStage = evidenceStage('visualStatuses', 'visualRequired');
+  return {
+    totalTrials: trials.length,
+    validTrials: valid.length,
+    invalidTrials: trials.filter((trial) => trial.verdict === 'input-error').length,
+    infraErrors: trials.filter((trial) => trial.verdict === 'infra-error').length,
+    passed,
+    passRate: valid.length ? passed / valid.length : null,
+    confidence95: wilson(passed, valid.length),
+    verdicts: counts,
+    stages: {
+      agentCompleted: stage((trial) => trial.agentExitCode === 0),
+      patchApplied: stage((trial) => trial.patchStatus === 'applied'),
+      policyCompliant: stage((trial) => trial.patchStatus === 'applied' && trial.verdict !== 'policy-violation'),
+      graderPassed: stage((trial) => trial.gradeVerdicts.length > 0 && trial.gradeVerdicts.every((value) => value === 'passed')),
+      runtimePassed: runtimeStage,
+      visualPassed: visualStage,
+    },
+    provider: { actualModels, usage },
+    durationMs: {
+      mean: durations.length ? durations.reduce((sum, value) => sum + value, 0) / durations.length : null,
+      median: durations.length ? durations.length % 2 ? durations[Math.floor(durations.length / 2)] : (durations[durations.length / 2 - 1] + durations[durations.length / 2]) / 2 : null,
+    },
+    claimLevel: agentKind === 'scripted'
+      ? 'harness-only'
+      : passed === 0
+        ? 'ai-task-contract-not-demonstrated'
+        : runtimeStage.total > 0 && runtimeStage.passed === runtimeStage.total && visualStage.total > 0 && visualStage.passed === visualStage.total
+          ? 'ai-task-contract-with-runtime-visual-subset'
+          : 'ai-static-contract-only',
+  };
+}
+
+function renderExperiment(report) {
+  const p = report.summary.passRate === null ? 'N/A' : `${(report.summary.passRate * 100).toFixed(1)}%`;
+  return `# Agent success-rate experiment\n\n- Experiment: \`${report.experimentId}\`\n- Agent: ${report.agent.provider || 'unknown'} / ${report.agent.model || 'unknown'} (${report.agent.kind})\n- Trials: ${report.summary.totalTrials}; valid ${report.summary.validTrials}; infra ${report.summary.infraErrors}\n- Pass rate: **${p}** (Wilson 95% ${report.summary.confidence95.lower === null ? 'N/A' : `${(report.summary.confidence95.lower * 100).toFixed(1)}%–${(report.summary.confidence95.upper * 100).toFixed(1)}%`})\n- Claim level: **${report.summary.claimLevel}**\n- Actual model(s): ${report.summary.provider.actualModels.join(', ') || 'not reported'}\n- Tokens: input ${report.summary.provider.usage.inputTokens}; output ${report.summary.provider.usage.outputTokens}; cache read ${report.summary.provider.usage.cacheReadInputTokens}\n- Recorded provider cost: $${report.summary.provider.usage.totalCostUsd.toFixed(6)}\n\n## Failure taxonomy\n\n${Object.entries(report.summary.verdicts).map(([key, value]) => `- ${key}: ${value}`).join('\n') || '- none'}\n\n## Trials\n\n${report.trials.map((trial) => `- ${trial.trialId}: ${trial.verdict}; patch=${trial.patchStatus || 'none'}; grades=${trial.gradeVerdicts.join(',') || 'none'}`).join('\n')}\n`;
+}
+
+function runExperiment({ specFile, outputRoot } = {}) {
+  const absoluteSpec = path.resolve(specFile);
+  const specBytes = fs.readFileSync(absoluteSpec);
+  const specSha256 = sha256Bytes(specBytes);
+  const spec = JSON.parse(specBytes);
+  const validation = validateExperimentSpec(spec);
+  if (!validation.valid) throw new Error('invalid ExperimentSpec: ' + validation.errors.join('; '));
+  const base = path.dirname(absoluteSpec);
+  const adapterFile = path.resolve(base, safeRelative(spec.agent.adapter.path, 'agent.adapter.path'));
+  const adapterRelative = path.relative(base, adapterFile);
+  if (adapterRelative === '..' || adapterRelative.startsWith(`..${path.sep}`) || path.isAbsolute(adapterRelative)) throw new Error('agent adapter escapes experiment directory');
+  let adapterBytes;
+  try {
+    const stat = fs.lstatSync(adapterFile);
+    if (!stat.isFile() || stat.isSymbolicLink()) throw new Error('must be a regular non-symlink file');
+    adapterBytes = fs.readFileSync(adapterFile);
+  } catch (error) { throw new Error('agent adapter cannot be verified: ' + error.message); }
+  const actualAdapterSha256 = sha256Bytes(adapterBytes);
+  if (actualAdapterSha256 !== spec.agent.adapter.sha256) throw new Error(`agent adapter digest mismatch: expected ${spec.agent.adapter.sha256}, received ${actualAdapterSha256}`);
+  const requestedRoot = path.resolve(outputRoot);
+  if (fs.existsSync(requestedRoot) && fs.lstatSync(requestedRoot).isSymbolicLink()) throw new Error('experiment output root must not be a symlink');
+  if (fs.existsSync(requestedRoot) && fs.readdirSync(requestedRoot).length) throw new Error('experiment output root must be empty');
+  fs.mkdirSync(requestedRoot, { recursive: true });
+  const root = canonicalPath(requestedRoot, { mustExist: true });
+  const agentArgv = spec.agent.argv.map((argument) => argument.split('{experimentDir}').join(base).split('{adapter}').join(adapterFile).split('{node}').join(process.execPath));
+  const taskDefinitions = spec.tasks.map((task) => {
+    const manifestFile = path.resolve(base, task.manifest);
+    try {
+      const manifestBytes = fs.readFileSync(manifestFile);
+      const manifest = readTaskManifest(manifestFile);
+      const inputErrors = [];
+      const manifestSha256 = sha256Bytes(manifestBytes);
+      if (task.taskId !== manifest.taskId) inputErrors.push(`taskId mismatch: expected ${task.taskId}, received ${manifest.taskId}`);
+      if (task.manifestSha256 !== manifestSha256) inputErrors.push(`manifest digest mismatch: expected ${task.manifestSha256}, received ${manifestSha256}`);
+      return {
+        ...task,
+        manifestFile,
+        runtimeRequired: manifest.evidence.runtime.length,
+        visualRequired: manifest.evidence.visual.length,
+        inputError: inputErrors.length ? inputErrors.join('; ') : null,
+      };
+    } catch (error) {
+      return { ...task, manifestFile, runtimeRequired: 0, visualRequired: 0, inputError: error.message };
+    }
+  });
+  const trials = [];
+  for (const task of taskDefinitions) {
+    for (let repetition = 1; repetition <= spec.repetitions; repetition += 1) {
+      const trialId = `${task.id}-r${String(repetition).padStart(2, '0')}`;
+      const trialRoot = path.join(root, 'trials', trialId);
+      const started = process.hrtime.bigint();
+      try {
+        if (task.inputError) {
+          const error = new Error(task.inputError);
+          error.kind = 'input-error';
+          throw error;
+        }
+        const currentSpecSha256 = sha256Bytes(fs.readFileSync(absoluteSpec));
+        const currentAdapterSha256 = sha256Bytes(fs.readFileSync(adapterFile));
+        const currentManifestBytes = fs.readFileSync(task.manifestFile);
+        let currentManifest;
+        try { currentManifest = JSON.parse(currentManifestBytes); }
+        catch (parseError) { currentManifest = null; }
+        const perTrialInputErrors = [];
+        if (currentSpecSha256 !== specSha256) perTrialInputErrors.push(`experiment spec digest mismatch: expected ${specSha256}, received ${currentSpecSha256}`);
+        if (currentAdapterSha256 !== spec.agent.adapter.sha256) perTrialInputErrors.push(`agent adapter digest mismatch: expected ${spec.agent.adapter.sha256}, received ${currentAdapterSha256}`);
+        const currentManifestSha256 = sha256Bytes(currentManifestBytes);
+        if (currentManifestSha256 !== task.manifestSha256) perTrialInputErrors.push(`task manifest digest mismatch: expected ${task.manifestSha256}, received ${currentManifestSha256}`);
+        if (!currentManifest || currentManifest.taskId !== task.taskId) perTrialInputErrors.push(`taskId mismatch: expected ${task.taskId}, received ${currentManifest && currentManifest.taskId}`);
+        if (perTrialInputErrors.length) {
+          const error = new Error(perTrialInputErrors.join('; '));
+          error.kind = 'input-error';
+          throw error;
+        }
+        const result = runTask({
+          taskFile: task.manifestFile,
+          agentArgv,
+          artifactRoot: trialRoot,
+          agent: { provider: spec.agent.provider, model: spec.agent.model, infraExitCodes: spec.agent.infraExitCodes || [] },
+          trialId,
+          integrityInputs: [
+            { id: 'experiment-spec', file: absoluteSpec, sha256: specSha256 },
+            { id: 'agent-adapter', file: adapterFile, sha256: spec.agent.adapter.sha256 },
+          ],
+        });
+        const report = result.report;
+        const results = report.grades.flatMap((grade) => grade.results);
+        trials.push({
+          trialId, taskSlug: task.id, taskId: task.taskId, runId: report.runId, verdict: report.verdict,
+          agentExitCode: report.agent.exitCode, patchStatus: report.patch && report.patch.status,
+          gradeVerdicts: report.grades.map((grade) => grade.verdict),
+          runtimeRequired: task.runtimeRequired,
+          visualRequired: task.visualRequired,
+          runtimeStatuses: results.filter((item) => item.type === 'runtime-evidence').map((item) => item.status),
+          visualStatuses: results.filter((item) => item.type === 'visual-evidence').map((item) => item.status),
+          providerMetadata: report.agent.providerMetadata || null,
+          durationMs: Number(process.hrtime.bigint() - started) / 1e6,
+          artifactPath: path.relative(root, result.runFile).split(path.sep).join('/'),
+        });
+      } catch (error) {
+        trials.push({ trialId, taskSlug: task.id, taskId: task.taskId, runId: null, verdict: error.kind === 'input-error' ? 'input-error' : 'infra-error', agentExitCode: null, patchStatus: null, gradeVerdicts: [], runtimeRequired: task.runtimeRequired, visualRequired: task.visualRequired, runtimeStatuses: [], visualStatuses: [], providerMetadata: null, durationMs: Number(process.hrtime.bigint() - started) / 1e6, error: error.message, artifactPath: null });
+      }
+    }
+  }
+  const report = {
+    reportVersion: '1.0', resultId: null, experimentId: spec.experimentId,
+    specSha256, seed: spec.seed,
+    agent: { kind: spec.agent.kind, provider: spec.agent.provider, model: spec.agent.model },
+    taskSetSha256: sha256Bytes(stableJson(spec.tasks)), repetitions: spec.repetitions,
+    summary: aggregate(trials, spec.agent.kind), trials,
+  };
+  report.resultId = contentId('experiment-result', report, ['resultId']);
+  writeAtomic(path.join(root, 'experiment.json'), Buffer.from(JSON.stringify(report, null, 2) + '\n'));
+  writeAtomic(path.join(root, 'EXPERIMENT.md'), Buffer.from(renderExperiment(report)));
+  return report;
+}
+
+module.exports = { wilson, validateExperimentSpec, aggregate, renderExperiment, runExperiment };
diff --git a/scripts/lib/sg-extraction-subject.js b/scripts/lib/sg-extraction-subject.js
new file mode 100644
index 0000000..b12204d
--- /dev/null
+++ b/scripts/lib/sg-extraction-subject.js
@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+'use strict';
+const { parentPort } = require('node:worker_threads');
+const { runExtraction } = require('./sg-pack-extract-core.js');
+
+parentPort.once('message', (message) => {
+  const port = message && message.port;
+  const token = message && message.token;
+  if (!port || typeof token !== 'string' || !message.configPath || !message.workspaceRoot) process.exit(1);
+  const send = port.postMessage.bind(port);
+  const close = port.close.bind(port);
+  parentPort.close();
+  try {
+    const extraction = runExtraction(message.configPath, { expectedLibDir: message.workspaceRoot });
+    send({
+      token,
+      result: {
+        ok: true,
+        validation: extraction.validation,
+        equivalence: extraction.equivalence,
+        consumedFiles: extraction.consumedFiles,
+        inventory: extraction.inventory,
+      },
+    });
+    close();
+  } catch (error) {
+    send({ token, result: { ok: false, kind: error.kind || 'gate', message: error.message } });
+    close();
+  }
+});
diff --git a/scripts/lib/sg-extraction-worker.js b/scripts/lib/sg-extraction-worker.js
new file mode 100644
index 0000000..3351197
--- /dev/null
+++ b/scripts/lib/sg-extraction-worker.js
@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+'use strict';
+const crypto = require('node:crypto');
+const path = require('node:path');
+const { MessageChannel, Worker } = require('node:worker_threads');
+
+const [, , configPath, workspaceRoot] = process.argv;
+if (!configPath || !workspaceRoot) {
+  process.stderr.write('extraction supervisor requires config path and workspace root\n');
+  process.exit(1);
+}
+
+const token = crypto.randomBytes(32).toString('hex');
+const channel = new MessageChannel();
+const worker = new Worker(path.join(__dirname, 'sg-extraction-subject.js'), { stdout: true, stderr: true });
+let message = null;
+let protocolError = null;
+let subjectStdoutBytes = 0;
+let subjectStderrBytes = 0;
+worker.stdout.on('data', (chunk) => { subjectStdoutBytes += chunk.length; });
+worker.stderr.on('data', (chunk) => { subjectStderrBytes += chunk.length; });
+channel.port1.on('message', (value) => {
+  if (message !== null) {
+    protocolError = 'subject sent more than one result';
+    return;
+  }
+  if (!value || value.token !== token || !value.result || typeof value.result !== 'object') {
+    protocolError = 'subject returned an invalid authenticated result';
+    return;
+  }
+  message = value.result;
+});
+worker.once('error', (error) => { protocolError = 'subject worker error: ' + error.message; });
+worker.once('exit', (exitCode) => {
+  channel.port1.close();
+  const protocolOk = exitCode === 0 && protocolError === null && message !== null;
+  process.stdout.write(JSON.stringify({
+    supervisorVersion: '1.0',
+    protocolOk,
+    workerExitCode: exitCode,
+    protocolError: protocolOk ? null : protocolError || 'subject exited without an authenticated trusted-wrapper result',
+    subjectStdoutBytes,
+    subjectStderrBytes,
+    result: protocolOk ? message : null,
+  }) + '\n');
+  process.exit(protocolOk ? 0 : 1);
+});
+worker.postMessage({ token, configPath, workspaceRoot, port: channel.port2 }, [channel.port2]);
diff --git a/scripts/lib/sg-grader.js b/scripts/lib/sg-grader.js
new file mode 100644
index 0000000..3b1bfe8
--- /dev/null
+++ b/scripts/lib/sg-grader.js
@@ -0,0 +1,264 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { runCommand } = require('./sg-command-runner.js');
+const { executeRules } = require('./sg-pack-rules-core.js');
+const { readRuntimeEvidence } = require('./sg-runtime-evidence.js');
+const { readVisualEvidence } = require('./sg-visual-evidence.js');
+const { contentId, sha256Bytes, safeRelative } = require('./sg-evidence-utils.js');
+require('./sg-data-loader.js');
+
+const CHECK_TYPES = new Set(['data-pack-contract', 'library-rules', 'extract-equivalence', 'command', 'runtime-evidence', 'visual-evidence']);
+const CHECK_FIELDS = new Set(['id', 'type', 'weight', 'required', 'path', 'scenarioId', 'rulesPath', 'dataPath', 'configPath', 'argv', 'cwd', 'expectedExit', 'infraExitCodes', 'timeoutMs', 'maxOutputBytes', 'strict', 'ruleIds']);
+
+function isObject(value) { return value && typeof value === 'object' && !Array.isArray(value); }
+function readJson(file) { return JSON.parse(fs.readFileSync(file, 'utf8')); }
+function resolveInRoot(root, value, label) {
+  const relative = safeRelative(value, label);
+  const file = path.resolve(root, relative);
+  const fromRoot = path.relative(root, file);
+  if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) throw new Error(`${label} escapes workspace`);
+  return file;
+}
+
+function validateGraderSpec(spec) {
+  const errors = [];
+  if (!isObject(spec)) return { valid: false, errors: ['grader spec must be an object'] };
+  for (const field of Object.keys(spec)) if (!['graderVersion', 'graderId', 'title', 'checks'].includes(field)) errors.push(`unknown grader field: ${field}`);
+  if (spec.graderVersion !== '1.0') errors.push('graderVersion must be 1.0');
+  if (typeof spec.graderId !== 'string' || !/^[a-z][a-z0-9-]{1,63}$/.test(spec.graderId)) errors.push('graderId must be a stable slug');
+  if (!Array.isArray(spec.checks) || !spec.checks.length) errors.push('checks must be a non-empty array');
+  const ids = new Set();
+  for (const [index, check] of (spec.checks || []).entries()) {
+    if (!isObject(check)) { errors.push(`checks[${index}] must be an object`); continue; }
+    for (const field of Object.keys(check)) if (!CHECK_FIELDS.has(field)) errors.push(`checks[${index}] unknown field: ${field}`);
+    if (typeof check.id !== 'string' || !/^[a-z][a-z0-9-]{1,63}$/.test(check.id)) errors.push(`checks[${index}].id must be a stable slug`);
+    else if (ids.has(check.id)) errors.push(`duplicate check id: ${check.id}`); else ids.add(check.id);
+    if (!CHECK_TYPES.has(check.type)) errors.push(`checks[${index}].type is unsupported`);
+    if (typeof check.weight !== 'number' || !Number.isFinite(check.weight) || check.weight <= 0) errors.push(`checks[${index}].weight must be greater than 0`);
+    if (typeof check.required !== 'boolean') errors.push(`checks[${index}].required must be boolean`);
+    if (check.type === 'command' && (!Array.isArray(check.argv) || !check.argv.length || check.argv.some((item) => typeof item !== 'string'))) errors.push(`checks[${index}].argv must be a non-empty string array`);
+    if (check.infraExitCodes !== undefined && (check.type !== 'command' || !Array.isArray(check.infraExitCodes) || !check.infraExitCodes.length || check.infraExitCodes.some((item) => !Number.isInteger(item) || item < 1 || item > 255) || new Set(check.infraExitCodes).size !== check.infraExitCodes.length)) errors.push(`checks[${index}].infraExitCodes must be a non-empty array of unique exit codes from 1 to 255 for a command check`);
+    if (['runtime-evidence', 'visual-evidence'].includes(check.type) && (typeof check.scenarioId !== 'string' || !check.scenarioId)) errors.push(`checks[${index}].scenarioId is required for evidence checks`);
+    if (check.scenarioId !== undefined && !['runtime-evidence', 'visual-evidence'].includes(check.type)) errors.push(`checks[${index}].scenarioId is only valid for evidence checks`);
+    const requiredPaths = check.type === 'library-rules' ? ['rulesPath', 'dataPath'] : check.type === 'extract-equivalence' ? ['configPath'] : ['data-pack-contract', 'runtime-evidence', 'visual-evidence'].includes(check.type) ? ['path'] : [];
+    for (const field of requiredPaths) {
+      try { safeRelative(check[field], `checks[${index}].${field}`); } catch (error) { errors.push(error.message); }
+    }
+    if (check.cwd !== undefined) { try { safeRelative(check.cwd, `checks[${index}].cwd`); } catch (error) { errors.push(error.message); } }
+  }
+  return { valid: errors.length === 0, errors };
+}
+
+function baseResult(check) {
+  return { id: check.id, type: check.type, required: check.required, weight: check.weight, status: 'infra-error', score: 0, findings: [], evidence: {} };
+}
+
+function gradePackContract(check, root) {
+  const result = baseResult(check);
+  try {
+    const pack = readJson(resolveInRoot(root, check.path, `${check.id}.path`));
+    const validation = globalThis.SGDataLoader.validate(pack);
+    const failed = validation.errors.length > 0 || (check.strict && validation.warnings.length > 0);
+    result.status = failed ? 'failed' : 'passed';
+    result.score = failed ? 0 : check.weight;
+    result.evidence = { errors: validation.errors, warnings: validation.warnings, strict: Boolean(check.strict) };
+  } catch (error) {
+    result.status = 'invalid';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function gradeRules(check, root) {
+  const result = baseResult(check);
+  try {
+    const rules = readJson(resolveInRoot(root, check.rulesPath, `${check.id}.rulesPath`));
+    const pack = readJson(resolveInRoot(root, check.dataPath, `${check.id}.dataPath`));
+    const execution = executeRules(rules, pack, { ruleIds: check.ruleIds });
+    if (execution.structuralErrors.length || (execution.selectionErrors || []).length || (execution.unknownRuleIds || []).length) result.status = 'invalid';
+    else if (!execution.results.length || execution.results.every((item) => item.status === 'no-check')) result.status = 'not-assessed';
+    else {
+      const failed = execution.counts.hardFail > 0 || execution.counts.errors > 0 || (check.strict && execution.counts.softFail > 0);
+      result.status = failed ? 'failed' : 'passed';
+    }
+    result.score = result.status === 'passed' ? check.weight : 0;
+    result.evidence = execution;
+  } catch (error) {
+    result.status = 'invalid';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function gradeExtraction(check, root, options) {
+  const result = baseResult(check);
+  try {
+    const configPath = resolveInRoot(root, check.configPath, `${check.id}.configPath`);
+    const run = runCommand({
+      argv: [process.execPath, path.join(options.toolRoot, 'scripts', 'lib', 'sg-extraction-worker.js'), configPath, root],
+      cwd: root,
+      allowedRoot: root,
+      timeoutMs: check.timeoutMs || options.timeoutMs || 120000,
+      maxOutputBytes: check.maxOutputBytes || options.maxOutputBytes || 1048576,
+      env: options.env || {},
+      envAllowlist: options.envAllowlist,
+    });
+    let supervisor = null;
+    try { supervisor = JSON.parse(run.stdout.trim()); }
+    catch (_) { supervisor = null; }
+    const workerResult = supervisor && supervisor.protocolOk === true && supervisor.result && typeof supervisor.result === 'object'
+      ? supervisor.result
+      : null;
+    result.evidence = {
+      exitCode: run.exitCode, signal: run.signal, timedOut: run.timedOut, durationMs: run.durationMs,
+      stdoutSha256: sha256Bytes(run.stdout), stderrSha256: sha256Bytes(run.stderr),
+      stdout: run.stdout, stderr: run.stderr, stdoutTruncated: run.stdoutTruncated, stderrTruncated: run.stderrTruncated,
+      error: run.error || null, supervisor, worker: workerResult,
+    };
+    if (run.error && !run.timedOut && run.exitCode === null) result.status = 'infra-error';
+    else if (run.timedOut || !workerResult || workerResult.ok !== true) {
+      result.status = workerResult && workerResult.kind === 'input' ? 'invalid' : 'failed';
+      if (workerResult && workerResult.message) result.findings.push(workerResult.message);
+      else result.findings.push(run.timedOut ? 'candidate extraction worker timed out' : 'candidate extraction worker did not return a valid result');
+    } else {
+      const failed = workerResult.validation.errors.length > 0 || workerResult.equivalence.diffs.length > 0 || !workerResult.equivalence.coverage.complete;
+      result.status = failed ? 'failed' : 'passed';
+      result.evidence.validation = workerResult.validation;
+      result.evidence.equivalence = workerResult.equivalence;
+      result.evidence.consumedFiles = workerResult.consumedFiles;
+    }
+    result.score = result.status === 'passed' ? check.weight : 0;
+  } catch (error) {
+    result.status = 'invalid';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function commandArgv(argv, root, options) {
+  const replacements = {
+    '{node}': process.execPath,
+    '{workspace}': root,
+    '{artifacts}': options.artifactRoot || '',
+    '{treeSha256}': options.treeSha256 || '',
+    '{taskId}': options.taskId || '',
+    '{grader}': options.graderRoot || '',
+    '{toolRoot}': options.toolRoot || path.resolve(__dirname, '..', '..'),
+  };
+  return argv.map((argument) => Object.entries(replacements).reduce((value, [token, replacement]) => value.split(token).join(replacement), argument));
+}
+
+function gradeCommand(check, root, options) {
+  const result = baseResult(check);
+  try {
+    const cwd = check.cwd ? resolveInRoot(root, check.cwd, `${check.id}.cwd`) : root;
+    const run = runCommand({
+      argv: commandArgv(check.argv, root, options),
+      cwd,
+      allowedRoot: root,
+      timeoutMs: check.timeoutMs || options.timeoutMs || 120000,
+      maxOutputBytes: check.maxOutputBytes || options.maxOutputBytes || 1048576,
+      env: options.env || {},
+      envAllowlist: options.envAllowlist,
+    });
+    const expectedExit = check.expectedExit === undefined ? 0 : check.expectedExit;
+    const infraExitCodes = new Set(check.infraExitCodes || []);
+    if (run.error && !run.timedOut && run.exitCode === null || infraExitCodes.has(run.exitCode)) result.status = 'infra-error';
+    else result.status = run.exitCode === expectedExit && !run.timedOut ? 'passed' : 'failed';
+    result.score = result.status === 'passed' ? check.weight : 0;
+    result.evidence = {
+      argv: run.argv, cwd: path.relative(root, run.cwd) || '.', exitCode: run.exitCode, signal: run.signal,
+      timedOut: run.timedOut, durationMs: run.durationMs,
+      stdoutSha256: sha256Bytes(run.stdout), stderrSha256: sha256Bytes(run.stderr),
+      stdout: run.stdout, stderr: run.stderr,
+      stdoutTruncated: run.stdoutTruncated, stderrTruncated: run.stderrTruncated, error: run.error || null,
+    };
+  } catch (error) {
+    result.status = 'invalid';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function gradeEvidence(check, root, kind, options) {
+  const result = baseResult(check);
+  try {
+    const evidenceRoot = options.artifactRoot ? fs.realpathSync(path.resolve(options.artifactRoot)) : root;
+    const file = resolveInRoot(evidenceRoot, check.path, `${check.id}.path`);
+    const loaded = kind === 'runtime' ? readRuntimeEvidence(file) : readVisualEvidence(file);
+    const expectedTree = options.treeSha256;
+    const boundTree = kind === 'runtime' ? loaded.evidence.subjectTreeSha256 : loaded.evidence.candidateTreeSha256;
+    if (expectedTree && boundTree !== expectedTree) {
+      loaded.validation.errors.push(`evidence tree digest mismatch: expected ${expectedTree}, received ${boundTree}`);
+      loaded.validation.valid = false;
+      loaded.validation.status = 'not-assessed';
+    }
+    const scenarioMatched = kind === 'runtime'
+      ? loaded.evidence.scenarioId === check.scenarioId
+      : Array.isArray(loaded.evidence.scenarios) && loaded.evidence.scenarios.some((scenario) => scenario && scenario.id === check.scenarioId);
+    if (!scenarioMatched) {
+      loaded.validation.errors.push(`evidence does not contain required scenario: ${check.scenarioId}`);
+      loaded.validation.valid = false;
+      loaded.validation.status = 'not-assessed';
+    }
+    result.status = loaded.validation.valid ? loaded.validation.status : 'failed';
+    result.score = result.status === 'passed' ? check.weight : 0;
+    result.evidence = { scenarioId: check.scenarioId, file: path.relative(evidenceRoot, file), evidenceId: loaded.evidence.evidenceId, validation: loaded.validation };
+  } catch (error) {
+    result.status = error.code === 'ENOENT' ? 'not-assessed' : 'failed';
+    result.findings.push(error.message);
+  }
+  return result;
+}
+
+function gradeWorkspace({ spec, workspaceRoot, graderRoot = null, artifactRoot = null, toolRoot = path.resolve(__dirname, '..', '..'), taskId = null, treeSha256 = null, timeoutMs, maxOutputBytes, env, envAllowlist } = {}) {
+  const validation = validateGraderSpec(spec);
+  if (!validation.valid) {
+    const error = new Error('Invalid GraderSpec: ' + validation.errors.join('; '));
+    error.code = 'INVALID_GRADER_SPEC';
+    error.errors = validation.errors;
+    throw error;
+  }
+  const root = fs.realpathSync(path.resolve(workspaceRoot));
+  const options = { timeoutMs, maxOutputBytes, env, envAllowlist, graderRoot, artifactRoot, toolRoot, taskId, treeSha256 };
+  const results = spec.checks.map((check) => {
+    if (check.type === 'data-pack-contract') return gradePackContract(check, root);
+    if (check.type === 'library-rules') return gradeRules(check, root);
+    if (check.type === 'extract-equivalence') return gradeExtraction(check, root, options);
+    if (check.type === 'command') return gradeCommand(check, root, options);
+    if (check.type === 'runtime-evidence') return gradeEvidence(check, root, 'runtime', options);
+    return gradeEvidence(check, root, 'visual', options);
+  });
+  const requiredIncomplete = results.some((item) => item.required && item.status !== 'passed');
+  const infraError = results.some((item) => item.status === 'infra-error');
+  const failed = results.some((item) => ['failed', 'invalid'].includes(item.status));
+  const requiredNotAssessed = results.some((item) => item.required && item.status === 'not-assessed');
+  const candidateFailure = failed || requiredNotAssessed;
+  const score = results.reduce((sum, item) => sum + item.score, 0);
+  const maximumScore = results.reduce((sum, item) => sum + item.weight, 0);
+  const report = {
+    gradeVersion: '1.0',
+    gradeId: null,
+    graderId: spec.graderId,
+    taskId,
+    treeSha256,
+    verdict: candidateFailure ? 'failed' : infraError ? 'infra-error' : requiredIncomplete ? 'failed' : 'passed',
+    score,
+    maximumScore,
+    results,
+    summary: {
+      total: results.length,
+      passed: results.filter((item) => item.status === 'passed').length,
+      failed: results.filter((item) => item.status === 'failed').length,
+      notAssessed: results.filter((item) => item.status === 'not-assessed').length,
+      invalid: results.filter((item) => item.status === 'invalid').length,
+      infraErrors: results.filter((item) => item.status === 'infra-error').length,
+      requiredIncomplete: results.filter((item) => item.required && item.status !== 'passed').length,
+    },
+  };
+  report.gradeId = contentId('grade', report, ['gradeId']);
+  return report;
+}
+
+module.exports = { validateGraderSpec, gradeWorkspace };
diff --git a/scripts/lib/sg-grader.schema.json b/scripts/lib/sg-grader.schema.json
new file mode 100644
index 0000000..bffa1b0
--- /dev/null
+++ b/scripts/lib/sg-grader.schema.json
@@ -0,0 +1,41 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/contracts/grader-spec-v1.json",
+  "title": "SG Task Grader Spec v1.0",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["graderVersion", "graderId", "checks"],
+  "properties": {
+    "graderVersion": { "const": "1.0" },
+    "graderId": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,63}$" },
+    "title": { "type": "string", "minLength": 1 },
+    "checks": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "type", "weight", "required"],
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,63}$" },
+          "type": { "enum": ["data-pack-contract", "library-rules", "extract-equivalence", "command", "runtime-evidence", "visual-evidence"] },
+          "weight": { "type": "number", "exclusiveMinimum": 0 },
+          "required": { "type": "boolean" },
+          "path": { "type": "string", "minLength": 1 },
+          "scenarioId": { "type": "string", "minLength": 1 },
+          "rulesPath": { "type": "string", "minLength": 1 },
+          "dataPath": { "type": "string", "minLength": 1 },
+          "configPath": { "type": "string", "minLength": 1 },
+          "argv": { "type": "array", "minItems": 1, "items": { "type": "string" } },
+          "cwd": { "type": "string", "minLength": 1 },
+          "expectedExit": { "type": "integer", "minimum": 0, "maximum": 255 },
+          "infraExitCodes": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "integer", "minimum": 1, "maximum": 255 } },
+          "timeoutMs": { "type": "integer", "minimum": 1, "maximum": 600000 },
+          "maxOutputBytes": { "type": "integer", "minimum": 1024, "maximum": 16777216 },
+          "strict": { "type": "boolean" },
+          "ruleIds": { "type": "array", "items": { "type": "string", "minLength": 1 } }
+        }
+      }
+    }
+  }
+}
diff --git a/scripts/lib/sg-pack-extract-core.js b/scripts/lib/sg-pack-extract-core.js
index 39b524b..7286dbd 100644
--- a/scripts/lib/sg-pack-extract-core.js
+++ b/scripts/lib/sg-pack-extract-core.js
@@ -91,25 +91,42 @@ function deepEqual(left, right, pathName = '$', diffs = []) {
   return diffs;
 }
 
-function localAssetPath(libDir, assetPath) {
+function resolveAssetRoot(libDir, assetDir = 'lib/assets') {
+  if (typeof assetDir !== 'string' || !assetDir || /[\u0000-\u001f\u007f]/.test(assetDir)) throw new Error(`Unsafe assetDir: ${assetDir}`);
+  if (path.isAbsolute(assetDir) || /^[A-Za-z]:[\\/]/.test(assetDir)) throw new Error('Extraction config assetDir must be relative to libDir');
+  const libraryRoot = path.resolve(libDir);
+  const root = path.resolve(libraryRoot, assetDir);
+  const relative = path.relative(libraryRoot, root);
+  if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) throw new Error(`Extraction config assetDir escapes libDir: ${assetDir}`);
+  return root;
+}
+
+function assetRelativePath(assetPath, assetBase = '') {
+  const normalized = assetPath.replace(/\\/g, '/');
+  const normalizedBase = typeof assetBase === 'string' ? assetBase.replace(/\\/g, '/') : '';
+  if (normalizedBase && normalized.startsWith(normalizedBase)) return normalized.slice(normalizedBase.length);
+  return normalized.replace(/^(\.\.\/)?assets\//, '');
+}
+
+function localAssetPath(libDir, assetPath, assetDir = 'lib/assets', assetBase = '') {
   if (typeof assetPath !== 'string' || !assetPath || /[\u0000-\u001f\u007f]/.test(assetPath)) throw new Error(`Unsafe asset path: ${assetPath}`);
-  const root = path.resolve(libDir, 'lib', 'assets');
-  const relative = assetPath.replace(/^(\.\.\/)?assets\//, '');
-  if (path.isAbsolute(relative) || /^[A-Za-z]:[\\/]/.test(relative)) throw new Error(`Asset path must be relative: ${assetPath}`);
+  const root = resolveAssetRoot(libDir, assetDir);
+  const relative = assetRelativePath(assetPath, assetBase);
+  if (!relative || path.isAbsolute(relative) || /^[A-Za-z]:[\\/]/.test(relative)) throw new Error(`Asset path must be relative: ${assetPath}`);
   const absolute = path.resolve(root, relative);
   const fromRoot = path.relative(root, absolute);
-  if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) throw new Error(`Asset path escapes lib/assets: ${assetPath}`);
+  if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) throw new Error(`Asset path escapes assetDir ${assetDir}: ${assetPath}`);
   if (!fs.existsSync(root)) return absolute;
   if (fs.lstatSync(root).isSymbolicLink()) throw new Error('Asset root must not be a symlink');
   let current = root;
-  for (const segment of relative.split(path.sep)) {
+  for (const segment of relative.split(/[\\/]/)) {
     current = path.join(current, segment);
     if (fs.existsSync(current) && fs.lstatSync(current).isSymbolicLink()) throw new Error(`Asset path contains a symlink: ${assetPath}`);
   }
   return absolute;
 }
 
-function collectAssets(pack, libDir, consumedFiles) {
+function collectAssets(pack, libDir, consumedFiles, assetDir = 'lib/assets') {
   const found = Object.create(null);
   const assetBase = pack.meta && typeof pack.meta.assetBase === 'string' ? pack.meta.assetBase : '';
   const walk = (value) => {
@@ -122,9 +139,12 @@ function collectAssets(pack, libDir, consumedFiles) {
     else if (value && typeof value === 'object') Object.values(value).forEach(walk);
   };
   walk(pack);
+  for (const assetPath of Object.keys(pack.assets || {})) {
+    if (!/^(https?:|data:)/i.test(assetPath)) found[assetPath] = true;
+  }
   const assets = {};
   for (const assetPath of Object.keys(found)) {
-    const absolute = localAssetPath(libDir, assetPath);
+    const absolute = localAssetPath(libDir, assetPath, assetDir, assetBase);
     try {
       const stat = fs.statSync(absolute);
       if (consumedFiles) consumedFiles[path.resolve(absolute)] = sha256File(absolute);
@@ -136,6 +156,19 @@ function collectAssets(pack, libDir, consumedFiles) {
   return assets;
 }
 
+function equivalenceCoverage(config) {
+  const extracted = (config.literals || []).map((item) => item.key);
+  const mapped = (config.equivalence || []).map((item) => item.lit);
+  const ignored = (config.equivalenceIgnore || []).map((item) => item.lit);
+  return {
+    extracted,
+    mapped,
+    ignored,
+    unmapped: extracted.filter((key) => !mapped.includes(key) && !ignored.includes(key)),
+    complete: extracted.every((key) => mapped.includes(key) || ignored.includes(key)),
+  };
+}
+
 function runEquivalence(config, defaults, pack) {
   global.window = globalThis;
   const enginePath = path.resolve(config.libDir, config.engineFile);
@@ -144,18 +177,29 @@ function runEquivalence(config, defaults, pack) {
   const library = globalThis[config.globalName];
   if (!library || typeof library.__fromPack !== 'function') throw new Error(`Engine does not export __fromPack (${config.globalName}); complete the engine patch first`);
   const restored = library.__fromPack(pack);
+  if (!restored || typeof restored !== 'object' || Array.isArray(restored)) throw new Error('__fromPack(pack) must return an object for equivalence checks');
   const diffs = [];
   for (const mapping of config.equivalence || []) {
+    if (!Object.prototype.hasOwnProperty.call(defaults, mapping.lit)) throw new Error(`Equivalence literal does not exist: ${mapping.lit}`);
+    if (!Object.prototype.hasOwnProperty.call(restored, mapping.from)) throw new Error(`__fromPack(pack) did not return equivalence field: ${mapping.from}`);
     let left = defaults[mapping.lit];
     let right = restored[mapping.from];
     const sorter = config.sortKeys && config.sortKeys[mapping.lit];
     if (sorter) {
+      if (!Array.isArray(left) || !Array.isArray(right)) throw new Error(`sortKeys.${mapping.lit} requires arrays on both sides`);
       left = left.slice().sort(sorter);
       right = right.slice().sort(sorter);
     }
     deepEqual(left, right, `$.${mapping.lit}`, diffs);
   }
-  return { comparisons: (config.equivalence || []).length, diffs };
+  return { comparisons: (config.equivalence || []).length, diffs, coverage: equivalenceCoverage(config) };
+}
+
+function validateRelativeConfigPath(value, field) {
+  if (typeof value !== 'string' || !value.trim()) throw new Error(`Extraction config ${field} must be a non-empty string`);
+  if (/[\u0000-\u001f\u007f]/.test(value) || path.isAbsolute(value) || /^[A-Za-z]:[\\/]/.test(value)) throw new Error(`Extraction config ${field} must be a safe path relative to libDir`);
+  const normalized = value.replace(/\\/g, '/');
+  if (normalized.split('/').includes('..')) throw new Error(`Extraction config ${field} must not escape libDir`);
 }
 
 function validateExtractionConfig(config) {
@@ -163,9 +207,39 @@ function validateExtractionConfig(config) {
   for (const field of ['libId', 'libDir', 'engineFile', 'globalName']) {
     if (typeof config[field] !== 'string' || !config[field].trim()) throw new Error(`Extraction config ${field} must be a non-empty string`);
   }
+  validateRelativeConfigPath(config.engineFile, 'engineFile');
+  if (config.assetDir !== undefined) validateRelativeConfigPath(config.assetDir, 'assetDir');
   if (!Array.isArray(config.literals) || !config.literals.length) throw new Error('Extraction config literals must be a non-empty array');
+  const literalKeys = new Set();
+  for (const [index, literal] of config.literals.entries()) {
+    if (!literal || typeof literal !== 'object') throw new Error(`Extraction config literals[${index}] must be an object`);
+    if (typeof literal.key !== 'string' || !literal.key.trim()) throw new Error(`Extraction config literals[${index}].key must be a non-empty string`);
+    if (literalKeys.has(literal.key)) throw new Error(`Extraction config literal key is duplicated: ${literal.key}`);
+    literalKeys.add(literal.key);
+    if (!(literal.pattern instanceof RegExp)) throw new Error(`Extraction config literal ${literal.key} pattern must be a RegExp`);
+    if (literal.file !== undefined) validateRelativeConfigPath(literal.file, `literal ${literal.key} file`);
+  }
   if (typeof config.buildPack !== 'function') throw new Error('Extraction config buildPack must be a function');
-  if (!Array.isArray(config.equivalence) || !config.equivalence.length) throw new Error('Extraction config equivalence must be a non-empty array');
+  if (!Array.isArray(config.equivalence)) throw new Error('Extraction config equivalence must be an array');
+  if (config.equivalenceIgnore !== undefined && !Array.isArray(config.equivalenceIgnore)) throw new Error('Extraction config equivalenceIgnore must be an array');
+  const accounted = new Set();
+  for (const [index, mapping] of config.equivalence.entries()) {
+    if (!mapping || typeof mapping !== 'object') throw new Error(`Extraction config equivalence[${index}] must be an object`);
+    for (const field of ['lit', 'from']) if (typeof mapping[field] !== 'string' || !mapping[field].trim()) throw new Error(`Extraction config equivalence[${index}].${field} must be a non-empty string`);
+    if (!literalKeys.has(mapping.lit)) throw new Error(`Extraction config equivalence references unknown literal: ${mapping.lit}`);
+    if (accounted.has(mapping.lit)) throw new Error(`Extraction config literal has duplicate equivalence coverage: ${mapping.lit}`);
+    accounted.add(mapping.lit);
+  }
+  for (const [index, ignored] of (config.equivalenceIgnore || []).entries()) {
+    if (!ignored || typeof ignored !== 'object') throw new Error(`Extraction config equivalenceIgnore[${index}] must be an object`);
+    if (typeof ignored.lit !== 'string' || !ignored.lit.trim()) throw new Error(`Extraction config equivalenceIgnore[${index}].lit must be a non-empty string`);
+    if (typeof ignored.reason !== 'string' || !ignored.reason.trim()) throw new Error(`Extraction config equivalenceIgnore[${index}].reason must be a non-empty string`);
+    if (!literalKeys.has(ignored.lit)) throw new Error(`Extraction config equivalenceIgnore references unknown literal: ${ignored.lit}`);
+    if (accounted.has(ignored.lit)) throw new Error(`Extraction config literal has duplicate equivalence coverage: ${ignored.lit}`);
+    accounted.add(ignored.lit);
+  }
+  const missing = [...literalKeys].filter((key) => !accounted.has(key));
+  if (missing.length) throw new Error(`Extraction config literals lack equivalence coverage: ${missing.join(', ')}; map them or use equivalenceIgnore with a reason`);
   return config;
 }
 
@@ -197,16 +271,24 @@ function runExtractionUnsafe(configPath, options = {}) {
   const engineSource = engineBytes.toString('utf8');
   const defaults = sliceLiterals(engineSource, config.literals, config.libDir, consumedFiles);
   const pack = config.buildPack(defaults);
+  if (!pack || typeof pack !== 'object' || Array.isArray(pack)) throw new Error('Extraction config buildPack must return an object');
   pack.schemaVersion = config.schemaVersion || '1.3';
   pack.meta = Object.assign({ id: config.libId, generatedBy: 'sg-data-pack: ' + path.basename(absoluteConfig) }, config.meta || {}, pack.meta || {});
-  pack.assets = Object.assign(collectAssets(pack, config.libDir, consumedFiles), pack.assets || {});
+  const declaredAssets = pack.assets && typeof pack.assets === 'object' && !Array.isArray(pack.assets) ? pack.assets : {};
+  const scannedAssets = collectAssets(pack, config.libDir, consumedFiles, config.assetDir || 'lib/assets');
+  pack.assets = Object.fromEntries([...new Set([...Object.keys(declaredAssets), ...Object.keys(scannedAssets)])].map((assetPath) => [
+    assetPath,
+    /^(https?:|data:)/i.test(assetPath)
+      ? declaredAssets[assetPath]
+      : Object.assign({}, declaredAssets[assetPath] || {}, scannedAssets[assetPath] || { exists: false }),
+  ]));
   const validation = globalThis.SGDataLoader.validate(pack);
   const domain = typeof config.domainChecks === 'function' ? (config.domainChecks(pack) || {}) : {};
   const domainErrors = Array.isArray(domain) ? domain : domain.errors || [];
   const domainWarnings = Array.isArray(domain) ? [] : domain.warnings || [];
   validation.errors.push(...domainErrors.map((item) => '[domain] ' + item));
   validation.warnings.push(...domainWarnings.map((item) => '[domain] ' + item));
-  let equivalence = { comparisons: 0, diffs: [] };
+  let equivalence = { comparisons: 0, diffs: [], coverage: equivalenceCoverage(config) };
   if (!validation.errors.length) equivalence = runEquivalence(config, defaults, pack);
   for (const moduleFile of Object.keys(require.cache)) {
     if (modulesBefore.has(moduleFile) || !fs.existsSync(moduleFile) || !fs.statSync(moduleFile).isFile()) continue;
@@ -237,4 +319,16 @@ function runExtraction(configPath, options = {}) {
   }
 }
 
-module.exports = { ExtractionError, sliceLiteral, sliceLiterals, deepEqual, collectAssets, runEquivalence, validateExtractionConfig, runExtraction };
+module.exports = {
+  ExtractionError,
+  sliceLiteral,
+  sliceLiterals,
+  deepEqual,
+  resolveAssetRoot,
+  localAssetPath,
+  collectAssets,
+  equivalenceCoverage,
+  runEquivalence,
+  validateExtractionConfig,
+  runExtraction,
+};
diff --git a/scripts/lib/sg-pack-inspect.js b/scripts/lib/sg-pack-inspect.js
index 5268e31..099e9e3 100644
--- a/scripts/lib/sg-pack-inspect.js
+++ b/scripts/lib/sg-pack-inspect.js
@@ -50,14 +50,18 @@ function readPack(file) {
   return { bytes, digest: sha256Bytes(bytes), pack: JSON.parse(bytes.toString('utf8')) };
 }
 
-function assetFilePath(dataFile, assetKey, assetRoot) {
+function assetFilePath(dataFile, assetKey, assetRoot, assetBase = '') {
   if (typeof assetKey !== 'string' || !assetKey || /[\u0000-\u001f\u007f]/.test(assetKey)) {
     throw new Error('unsafe asset path');
   }
   const root = assetRoot
     ? path.resolve(assetRoot)
     : path.resolve(path.dirname(dataFile), '..', 'assets');
-  const relative = assetKey.replace(/^(\.\.\/)?assets\//, '');
+  const normalizedKey = assetKey.replace(/\\/g, '/');
+  const normalizedBase = typeof assetBase === 'string' ? assetBase.replace(/\\/g, '/') : '';
+  const relative = normalizedBase && normalizedKey.startsWith(normalizedBase)
+    ? normalizedKey.slice(normalizedBase.length)
+    : normalizedKey.replace(/^(\.\.\/)?assets\//, '');
   if (path.isAbsolute(relative) || /^[A-Za-z]:[\\/]/.test(relative)) throw new Error('asset path must be relative');
   const resolved = path.resolve(root, relative);
   const fromRoot = path.relative(root, resolved);
@@ -108,7 +112,7 @@ function inspectAssets(pack, dataFile, options = {}) {
     }
     let file = null;
     try {
-      file = assetFilePath(dataFile, assetKey, options.assetRoot);
+      file = assetFilePath(dataFile, assetKey, options.assetRoot, pack.meta && pack.meta.assetBase);
       if (consumedFiles) consumedFiles[file] = sha256File(file);
       const actualHash = sha1File(file);
       const item = { path: assetKey, file, expected: manifest.hash, actual: actualHash, status: actualHash === manifest.hash ? 'passed' : 'mismatch' };
@@ -152,4 +156,4 @@ function inspectPack({ dataFile, verifyHash = false, assetRoot } = {}) {
   };
 }
 
-module.exports = { sha256Bytes, packInventory, readPack, inspectAssets, inspectPack };
+module.exports = { sha256Bytes, packInventory, readPack, assetFilePath, inspectAssets, inspectPack };
diff --git a/scripts/lib/sg-pack-rules-core.js b/scripts/lib/sg-pack-rules-core.js
index d23a604..3787fdc 100644
--- a/scripts/lib/sg-pack-rules-core.js
+++ b/scripts/lib/sg-pack-rules-core.js
@@ -34,17 +34,54 @@ function validateRulesDocument(rulesDoc) {
   return errors;
 }
 
-function executeRules(rulesDoc, pack) {
+function emptyCounts() {
+  return { total: 0, passed: 0, failed: 0, errors: 0, noCheck: 0, hardFail: 0, softFail: 0 };
+}
+
+function executeRules(rulesDoc, pack, options = {}) {
+  /* Validate the complete document before applying a selection. A malformed
+   * unselected rule must never disappear behind --rule. */
   const structuralErrors = validateRulesDocument(rulesDoc);
   if (structuralErrors.length) {
     return {
       libId: rulesDoc && rulesDoc.libId,
       structuralErrors,
+      unknownRuleIds: [],
+      results: [],
+      counts: emptyCounts(),
+      passed: false,
+    };
+  }
+  const requestedRuleIds = options.ruleIds === undefined ? null : options.ruleIds;
+  if (requestedRuleIds !== null && (!Array.isArray(requestedRuleIds) || requestedRuleIds.some(id => typeof id !== 'string' || !id))) {
+    return {
+      libId: rulesDoc.libId,
+      profile: rulesDoc.profile,
+      structuralErrors: [],
+      selectionErrors: ['ruleIds must be an array of non-empty strings'],
+      unknownRuleIds: [],
+      results: [],
+      counts: emptyCounts(),
+      passed: false,
+    };
+  }
+  const requestedSet = requestedRuleIds === null ? null : new Set(requestedRuleIds);
+  const knownIds = new Set(rulesDoc.rules.map(rule => rule.id));
+  const unknownRuleIds = requestedRuleIds === null ? [] : [...requestedSet].filter(id => !knownIds.has(id));
+  if (unknownRuleIds.length) {
+    return {
+      libId: rulesDoc.libId,
+      profile: rulesDoc.profile,
+      structuralErrors: [],
+      selectionErrors: [],
+      unknownRuleIds,
       results: [],
-      counts: { total: 0, passed: 0, failed: 0, errors: 0, noCheck: 0, hardFail: 0, softFail: 0 },
+      counts: emptyCounts(),
       passed: false,
     };
   }
+  const selectedRules = requestedSet === null ? rulesDoc.rules : rulesDoc.rules.filter(rule => requestedSet.has(rule.id));
+  pack = pack || {};
   const scope = {
     entities: pack.entities || {}, relations: pack.relations || [], stages: pack.stages || [],
     contents: pack.contents || {}, domain: pack.domain || {}, assets: pack.assets || {},
@@ -55,7 +92,7 @@ function executeRules(rulesDoc, pack) {
   };
   const keys = Object.keys(scope);
   const results = [];
-  for (const rule of rulesDoc.rules) {
+  for (const rule of selectedRules) {
     const base = {
       id: rule.id,
       level: rule.level,
@@ -92,6 +129,8 @@ function executeRules(rulesDoc, pack) {
     libId: rulesDoc.libId,
     profile: rulesDoc.profile,
     structuralErrors: [],
+    selectionErrors: [],
+    unknownRuleIds: [],
     results,
     counts,
     passed: counts.hardFail === 0 && counts.errors === 0,
diff --git a/scripts/lib/sg-patch-executor.js b/scripts/lib/sg-patch-executor.js
new file mode 100644
index 0000000..eee7a52
--- /dev/null
+++ b/scripts/lib/sg-patch-executor.js
@@ -0,0 +1,255 @@
+'use strict';
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { runCommand } = require('./sg-command-runner.js');
+const { safeRelativePath, matchesGlob, assertNoSymlinkComponents } = require('./sg-path-policy.js');
+const { snapshotTree, diffTrees } = require('./sg-tree-snapshot.js');
+const { sha256Bytes, contentId } = require('./sg-evidence-utils.js');
+
+class PatchError extends Error {
+  constructor(message, kind = 'patch-invalid', details = null) {
+    super(message);
+    this.name = 'PatchError';
+    this.kind = kind;
+    this.details = details;
+  }
+}
+
+function stripPatchPrefix(value) {
+  if (value === '/dev/null') return null;
+  const withoutTimestamp = value.split('\t')[0].trim();
+  return withoutTimestamp.replace(/^[ab]\//, '');
+}
+
+function gitFileMode(statMode) {
+  return '100' + (statMode & 0o777).toString(8).padStart(3, '0');
+}
+
+function parseModeHeaders(lines, from, to) {
+  const modes = {};
+  for (let index = from; index < to; index += 1) {
+    const match = /^(new file mode|deleted file mode) ([0-7]{6})$/.exec(lines[index]);
+    if (!match) continue;
+    const field = match[1] === 'new file mode' ? 'newFileMode' : 'deletedFileMode';
+    if (modes[field]) throw new PatchError(`duplicate ${match[1]} header at line ${index + 1}`);
+    modes[field] = match[2];
+  }
+  if (modes.newFileMode && modes.newFileMode !== '100644') throw new PatchError(`new file mode ${modes.newFileMode} is not supported`, 'policy-not-supported');
+  return modes;
+}
+
+function parseUnifiedDiff(bytes) {
+  const text = Buffer.isBuffer(bytes) ? bytes.toString('utf8') : String(bytes);
+  if (text.includes('\0')) throw new PatchError('patch contains a NUL byte');
+  if (/^(GIT binary patch|Binary files .* differ)$/m.test(text)) throw new PatchError('binary patches are not supported', 'policy-not-supported');
+  if (/^(rename from|rename to|old mode|new mode|new file mode 160000|deleted file mode 160000)/m.test(text)) throw new PatchError('renames, mode changes, and submodules are not supported', 'policy-not-supported');
+  if (!text.startsWith('diff --git ')) throw new PatchError('patch must begin with a diff --git header');
+  const lines = text.split(/\r?\n/);
+  const operations = [];
+  let pendingGit = null;
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (line.startsWith('diff --git ')) {
+      const match = /^diff --git a\/(.+) b\/(.+)$/.exec(line);
+      if (!match) throw new PatchError(`unsupported diff header at line ${index + 1}`);
+      pendingGit = { oldPath: match[1], newPath: match[2], line: index + 1 };
+      continue;
+    }
+    if (!line.startsWith('--- ')) continue;
+    if (index + 1 >= lines.length || !lines[index + 1].startsWith('+++ ')) throw new PatchError(`missing +++ header after line ${index + 1}`);
+    if (!pendingGit) throw new PatchError(`file header is missing its diff --git header at line ${index + 1}`);
+    const modes = parseModeHeaders(lines, pendingGit.line, index);
+    const oldPath = stripPatchPrefix(line.slice(4));
+    const newPath = stripPatchPrefix(lines[index + 1].slice(4));
+    if (!oldPath && !newPath) throw new PatchError(`invalid /dev/null pair at line ${index + 1}`);
+    if (oldPath && newPath && oldPath !== newPath) throw new PatchError('renames are not supported', 'policy-not-supported', { oldPath, newPath });
+    const target = safeRelativePath(newPath || oldPath);
+    if (pendingGit) {
+      if (safeRelativePath(pendingGit.oldPath) !== (oldPath || target) || safeRelativePath(pendingGit.newPath) !== (newPath || target)) {
+        throw new PatchError(`diff --git and file headers disagree near line ${index + 1}`);
+      }
+    }
+    const operation = oldPath === null ? 'add' : newPath === null ? 'delete' : 'modify';
+    if (operation === 'add' && modes.deletedFileMode) throw new PatchError(`add entry has a deleted file mode header: ${target}`);
+    if (operation === 'delete' && modes.newFileMode) throw new PatchError(`delete entry has a new file mode header: ${target}`);
+    if (operation === 'modify' && (modes.newFileMode || modes.deletedFileMode)) throw new PatchError(`modify entry must not contain add/delete mode headers: ${target}`);
+    let hunks = 0;
+    let cursor = index + 2;
+    while (cursor < lines.length && !lines[cursor].startsWith('diff --git ') && !lines[cursor].startsWith('--- ')) {
+      if (lines[cursor].startsWith('@@ ')) hunks += 1;
+      cursor += 1;
+    }
+    if (hunks === 0) throw new PatchError(`patch entry has no hunks: ${target}`);
+    operations.push({ operation, path: target, oldPath, newPath, hunks, modes, headerLine: index + 1 });
+    pendingGit = null;
+  }
+  if (!operations.length) throw new PatchError('patch contains no unified diff file entries');
+  const seen = new Set();
+  for (const operation of operations) {
+    if (seen.has(operation.path)) throw new PatchError(`patch contains duplicate file entries: ${operation.path}`);
+    seen.add(operation.path);
+  }
+  return { text, operations };
+}
+
+function policyForPath(filePolicy, operation, relativePath) {
+  const forbidden = (filePolicy.forbidden || []).find((pattern) => matchesGlob(relativePath, pattern));
+  if (forbidden) return { allowed: false, reason: `forbidden by ${forbidden}`, deniedBy: forbidden, allowedBy: null };
+  const allowed = (filePolicy.allowed || []).find((entry) => entry.operations.includes(operation) && matchesGlob(relativePath, entry.pattern));
+  if (!allowed) return { allowed: false, reason: `no allowed ${operation} rule matches ${relativePath}`, deniedBy: null, allowedBy: null };
+  return { allowed: true, reason: null, deniedBy: null, allowedBy: allowed.pattern };
+}
+
+function validatePatchPolicy(parsed, patchBytes, manifest, workspaceRoot) {
+  const violations = [];
+  if (patchBytes.length > manifest.filePolicy.maxPatchBytes) violations.push(`patch bytes ${patchBytes.length} exceed maxPatchBytes ${manifest.filePolicy.maxPatchBytes}`);
+  if (parsed.operations.length > manifest.filePolicy.maxChangedFiles) violations.push(`patch changes ${parsed.operations.length} files; maxChangedFiles is ${manifest.filePolicy.maxChangedFiles}`);
+  for (const operation of parsed.operations) {
+    const policy = policyForPath(manifest.filePolicy, operation.operation, operation.path);
+    if (operation.operation === 'add' && operation.modes.newFileMode !== '100644') violations.push(`add ${operation.path} must declare new file mode 100644`);
+    if (operation.operation === 'delete' && !operation.modes.deletedFileMode) violations.push(`delete ${operation.path} must declare its deleted file mode`);
+    operation.policy = policy;
+    if (!policy.allowed) violations.push(`${operation.operation} ${operation.path}: ${policy.reason}`);
+    const target = path.resolve(workspaceRoot, operation.path);
+    try { assertNoSymlinkComponents(target, { root: workspaceRoot }); }
+    catch (error) { violations.push(`${operation.path}: ${error.message}`); }
+    if (operation.operation === 'add' && fs.existsSync(target)) violations.push(`add target already exists: ${operation.path}`);
+    if (operation.operation !== 'add' && !fs.existsSync(target)) violations.push(`${operation.operation} target does not exist: ${operation.path}`);
+    if (fs.existsSync(target)) {
+      const stat = fs.lstatSync(target);
+      if (!stat.isFile() || stat.isSymbolicLink()) violations.push(`patch target must be a regular non-symlink file: ${operation.path}`);
+      if (manifest.filePolicy.allowHardlinks === false && stat.nlink > 1) violations.push(`hardlinked patch target is forbidden: ${operation.path}`);
+      if (operation.operation === 'delete' && operation.modes.deletedFileMode && gitFileMode(stat.mode) !== operation.modes.deletedFileMode) violations.push(`delete mode for ${operation.path} does not match baseline: expected ${gitFileMode(stat.mode)}, received ${operation.modes.deletedFileMode}`);
+    }
+  }
+  return { allowed: violations.length === 0, violations, operations: parsed.operations };
+}
+
+function validateAppliedDiff(diff, manifest) {
+  const violations = [];
+  const operations = [];
+  for (const change of diff.changes) {
+    const structuralEntry = change.after || change.before;
+    if (structuralEntry && structuralEntry.kind === 'directory' && ['add', 'delete'].includes(change.change)) continue;
+    const operation = change.change;
+    if (!['add', 'modify', 'delete'].includes(operation)) {
+      violations.push(`${operation} is not supported for ${change.path}`);
+      operations.push({ operation, path: change.path, allowed: false, reason: 'operation not supported' });
+      continue;
+    }
+    const entry = operation === 'delete' ? change.before : change.after;
+    if (entry && entry.kind !== 'file') violations.push(`${operation} produced non-regular entry: ${change.path}`);
+    if (operation === 'add' && entry && entry.mode !== 0o644) violations.push(`add produced unsupported mode ${entry.mode.toString(8)}: ${change.path}`);
+    if (operation === 'modify' && change.before && change.after && change.before.mode !== change.after.mode) violations.push(`modify changed file mode: ${change.path}`);
+    const policy = policyForPath(manifest.filePolicy, operation, change.path);
+    operations.push({ operation, path: change.path, allowed: policy.allowed, reason: policy.reason, before: change.before || null, after: change.after || null });
+    if (!policy.allowed) violations.push(`${operation} ${change.path}: ${policy.reason}`);
+  }
+  if (operations.length > manifest.filePolicy.maxChangedFiles) violations.push(`actual tree changes ${operations.length} files; maxChangedFiles is ${manifest.filePolicy.maxChangedFiles}`);
+  return { allowed: violations.length === 0, violations, operations };
+}
+
+function capturePatchTargets(root, operations) {
+  const originals = new Map();
+  for (const operation of operations) {
+    const target = path.join(root, operation.path);
+    if (!fs.existsSync(target)) originals.set(operation.path, { existed: false });
+    else {
+      const stat = fs.lstatSync(target);
+      originals.set(operation.path, { existed: true, bytes: fs.readFileSync(target), mode: stat.mode & 0o7777 });
+    }
+  }
+  return originals;
+}
+
+function restorePatchTargets(root, originals) {
+  const errors = [];
+  for (const [relative, original] of originals.entries()) {
+    const target = path.join(root, relative);
+    try {
+      if (!original.existed) fs.rmSync(target, { recursive: true, force: true });
+      else {
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(target, original.bytes, { mode: original.mode });
+        fs.chmodSync(target, original.mode);
+      }
+    } catch (error) { errors.push(`${relative}: ${error.message}`); }
+  }
+  if (errors.length) throw new Error('patch rollback incomplete: ' + errors.join('; '));
+}
+
+function applyPatch({ manifest, workspaceRoot, patchBytes, taskId = manifest && manifest.taskId, timeoutMs = 120000 } = {}) {
+  if (!manifest || !manifest.filePolicy || !manifest.patchPolicy) throw new PatchError('validated task manifest is required', 'input-error');
+  if (manifest.patchPolicy.format !== 'unified-diff' || manifest.patchPolicy.fuzz !== 0 || manifest.patchPolicy.allowBinary !== false) throw new PatchError('unsupported patch policy', 'policy-not-supported');
+  const root = fs.realpathSync(path.resolve(workspaceRoot));
+  const bytes = Buffer.isBuffer(patchBytes) ? patchBytes : Buffer.from(String(patchBytes || ''), 'utf8');
+  const before = snapshotTree(root, { errorOnSpecialFile: true, exclude: false });
+  let parsed;
+  let preflight;
+  try {
+    parsed = parseUnifiedDiff(bytes);
+    preflight = validatePatchPolicy(parsed, bytes, manifest, root);
+    if (!preflight.allowed) throw new PatchError('patch violates file policy', 'policy-violation', preflight.violations);
+  } catch (error) {
+    const audit = buildAudit({ taskId, bytes, before, parsed, preflight, status: 'rejected', failure: error });
+    error.audit = audit;
+    throw error;
+  }
+  const originals = capturePatchTargets(root, parsed.operations);
+  const patchFile = path.join(os.tmpdir(), `sg-agent-patch-${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.diff`);
+  fs.writeFileSync(patchFile, bytes, { mode: 0o600, flag: 'wx' });
+  let checkRun;
+  let applyRun;
+  try {
+    checkRun = runCommand({ argv: ['git', 'apply', '--check', '--whitespace=error-all', patchFile], cwd: root, allowedRoot: root, timeoutMs, maxOutputBytes: 1048576 });
+    if (checkRun.error || checkRun.exitCode !== 0) throw new PatchError('git apply --check rejected the patch', 'patch-invalid', { checkRun });
+    applyRun = runCommand({ argv: ['git', 'apply', '--whitespace=error-all', patchFile], cwd: root, allowedRoot: root, timeoutMs, maxOutputBytes: 1048576 });
+    if (applyRun.error || applyRun.exitCode !== 0) throw new PatchError('git apply failed after a successful check', 'infra-error', { applyRun });
+    const after = snapshotTree(root, { errorOnSpecialFile: true, exclude: false });
+    const diff = diffTrees(before, after, { detectRenames: true });
+    const postflight = validateAppliedDiff(diff, manifest);
+    const declared = parsed.operations.map((item) => `${item.operation}:${item.path}`).sort();
+    const actual = postflight.operations.map((item) => `${item.operation}:${item.path}`).sort();
+    if (JSON.stringify(declared) !== JSON.stringify(actual)) postflight.violations.push(`declared patch operations do not match actual tree changes; declared=${declared.join(',')} actual=${actual.join(',')}`);
+    postflight.allowed = postflight.violations.length === 0;
+    if (!postflight.allowed) throw new PatchError('applied patch violates postflight file policy', 'policy-violation', postflight.violations);
+    const audit = buildAudit({ taskId, bytes, before, after, parsed, preflight, postflight, checkRun, applyRun, status: 'applied' });
+    return { audit, before, after, diff, parsed };
+  } catch (error) {
+    const current = snapshotTree(root, { errorOnSpecialFile: true, exclude: false });
+    if (current.treeSha256 !== before.treeSha256) restorePatchTargets(root, originals);
+    const restored = snapshotTree(root, { errorOnSpecialFile: true, exclude: false });
+    if (restored.treeSha256 !== before.treeSha256) throw new PatchError('patch rollback did not restore the workspace tree', 'infra-error', { before: before.treeSha256, restored: restored.treeSha256 });
+    const audit = buildAudit({ taskId, bytes, before, parsed, preflight, checkRun, applyRun, status: 'rejected', failure: error });
+    error.audit = audit;
+    throw error;
+  } finally {
+    try { fs.unlinkSync(patchFile); } catch (_) { /* already absent */ }
+  }
+}
+
+function summarizeRun(run) {
+  if (!run) return null;
+  return { argv: run.argv, cwd: run.cwd, exitCode: run.exitCode, signal: run.signal, timedOut: run.timedOut, durationMs: run.durationMs, stdoutSha256: sha256Bytes(run.stdout || ''), stderrSha256: sha256Bytes(run.stderr || ''), error: run.error || null };
+}
+
+function buildAudit({ taskId, bytes, before, after = null, parsed = null, preflight = null, postflight = null, checkRun = null, applyRun = null, status, failure = null }) {
+  const audit = {
+    auditVersion: '1.0', auditId: null, kind: 'patch-audit', taskId,
+    status, patchSha256: sha256Bytes(bytes), patchBytes: bytes.length,
+    beforeTreeSha256: 'sha256:' + before.treeSha256,
+    afterTreeSha256: after ? 'sha256:' + after.treeSha256 : null,
+    declaredOperations: parsed ? parsed.operations.map((item) => ({ operation: item.operation, path: item.path, hunks: item.hunks, modes: item.modes, policy: item.policy || null })) : [],
+    actualOperations: postflight ? postflight.operations : [],
+    preflight: preflight ? { allowed: preflight.allowed, violations: preflight.violations } : null,
+    postflight: postflight ? { allowed: postflight.allowed, violations: postflight.violations } : null,
+    commands: { check: summarizeRun(checkRun), apply: summarizeRun(applyRun) },
+    failure: failure ? { kind: failure.kind || 'infra-error', name: failure.name, message: failure.message, details: failure.details || null } : null,
+    capabilities: { osSandbox: false, networkIsolation: false, processIsolation: false, sourceTreeVerifiedByRunner: true, disposableWorkspace: true },
+  };
+  audit.auditId = contentId('patch-audit', audit, ['auditId']);
+  return audit;
+}
+
+module.exports = { PatchError, parseUnifiedDiff, policyForPath, validatePatchPolicy, validateAppliedDiff, applyPatch, buildAudit };
diff --git a/scripts/lib/sg-path-policy.js b/scripts/lib/sg-path-policy.js
new file mode 100644
index 0000000..78b738e
--- /dev/null
+++ b/scripts/lib/sg-path-policy.js
@@ -0,0 +1,311 @@
+'use strict';
+
+/*
+ * Small, dependency-free filesystem policy primitives used by repository tools.
+ * All paths are treated as untrusted input until they have passed the relevant
+ * checks below. The module deliberately does not create, remove, or mutate
+ * files.
+ */
+const fs = require('node:fs');
+const path = require('node:path');
+
+const CONTROL_PATH = /[\u0000-\u001f\u007f]/;
+const WINDOWS_ABSOLUTE = /^[A-Za-z]:/;
+
+function pathError(code, message, details) {
+  const error = new Error(message);
+  error.code = code;
+  if (details !== undefined) error.details = details;
+  return error;
+}
+
+function assertPathString(value, name = 'path') {
+  if (typeof value !== 'string' || value.length === 0) {
+    throw pathError('INVALID_PATH', `${name} must be a non-empty string`);
+  }
+  if (CONTROL_PATH.test(value)) {
+    throw pathError('INVALID_PATH', `${name} contains a control character`);
+  }
+}
+
+function canonicalPath(value, options = {}) {
+  assertPathString(value);
+  const absolute = path.resolve(value);
+  const mustExist = options.mustExist === true;
+  try {
+    return fs.realpathSync.native(absolute);
+  } catch (error) {
+    if (mustExist || (error && error.code !== 'ENOENT' && error.code !== 'ENOTDIR')) throw error;
+
+    // realpathSync cannot resolve a path which does not exist yet. Resolve the
+    // nearest existing ancestor, then append the non-existent suffix. This
+    // still canonicalizes symlinked parents and makes containment checks safe
+    // for output paths.
+    const suffix = [];
+    let current = absolute;
+    while (true) {
+      try {
+        const physical = fs.realpathSync.native(current);
+        return path.join(physical, ...suffix.reverse());
+      } catch (ancestorError) {
+        if (ancestorError && (ancestorError.code === 'ENOENT' || ancestorError.code === 'ENOTDIR')) {
+          const parent = path.dirname(current);
+          if (parent === current) throw ancestorError;
+          suffix.push(path.basename(current));
+          current = parent;
+          continue;
+        }
+        throw ancestorError;
+      }
+    }
+  }
+}
+
+function sameFile(left, right, options = {}) {
+  const leftPath = canonicalPath(left, options);
+  const rightPath = canonicalPath(right, options);
+  try {
+    // canonical paths cover symlink aliases; device/inode also covers hard
+    // links, which are the other common meaning of “same file”. A missing
+    // path is not a file, even when both arguments spell the same path.
+    const leftStat = fs.statSync(leftPath);
+    const rightStat = fs.statSync(rightPath);
+    return leftPath === rightPath || (leftStat.dev === rightStat.dev && leftStat.ino === rightStat.ino);
+  } catch (error) {
+    if (options.mustExist) throw error;
+    return false;
+  }
+}
+
+function safeRelativePath(value, options = {}) {
+  if (value === '' && options.allowEmpty) return '';
+  assertPathString(value, 'relative path');
+  if (path.isAbsolute(value) || WINDOWS_ABSOLUTE.test(value) || value.startsWith('\\')) {
+    throw pathError('UNSAFE_RELATIVE_PATH', `path must be relative: ${value}`);
+  }
+  // Treat both separators as separators. This prevents a Windows-style
+  // traversal from becoming a harmless filename when checked on POSIX.
+  const pieces = value.replace(/\\/g, '/').split('/');
+  if (pieces.some((piece) => piece === '..')) {
+    throw pathError('UNSAFE_RELATIVE_PATH', `path contains a parent traversal: ${value}`);
+  }
+  if (pieces.length === 1 && pieces[0] === '.' && options.allowEmpty) return '';
+  if (pieces.some((piece) => piece === '' || piece === '.')) {
+    throw pathError('UNSAFE_RELATIVE_PATH', `path contains an empty or dot segment: ${value}`);
+  }
+  return pieces.join('/');
+}
+
+function isSafeRelativePath(value, options) {
+  try {
+    safeRelativePath(value, options);
+    return true;
+  } catch (_) {
+    return false;
+  }
+}
+
+function isWithinRoot(root, target, options = {}) {
+  const physicalRoot = canonicalPath(root, options);
+  const physicalTarget = canonicalPath(target, options);
+  const relative = path.relative(physicalRoot, physicalTarget);
+  if (relative === '') return options.allowRoot !== false;
+  return relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
+}
+
+function assertWithinRoot(root, target, options = {}) {
+  if (!isWithinRoot(root, target, options)) {
+    throw pathError('PATH_OUTSIDE_ROOT', `path is outside allowed root: ${target}`, {
+      root: canonicalPath(root, options),
+      target: canonicalPath(target, options),
+    });
+  }
+  return canonicalPath(target, options);
+}
+
+function existingPathComponents(value) {
+  assertPathString(value);
+  const absolute = path.resolve(value);
+  const components = [];
+  let current = absolute;
+  while (true) {
+    components.push(current);
+    const parent = path.dirname(current);
+    if (parent === current) break;
+    current = parent;
+  }
+  return components.reverse();
+}
+
+function symlinkComponent(value, options = {}) {
+  const components = existingPathComponents(value);
+  let startIndex = 0;
+  if (options.root) {
+    const root = path.resolve(options.root);
+    const rootIndex = components.indexOf(root);
+    if (rootIndex !== -1) startIndex = rootIndex;
+  }
+  if (options.root && options.includeRoot === false) startIndex += 1;
+  for (let index = startIndex; index < components.length; index += 1) {
+    const component = components[index];
+    try {
+      if (fs.lstatSync(component).isSymbolicLink()) return component;
+    } catch (error) {
+      if (error.code !== 'ENOENT' && error.code !== 'ENOTDIR') throw error;
+    }
+  }
+  return null;
+}
+
+function hasSymlinkComponent(value, options) {
+  return symlinkComponent(value, options) !== null;
+}
+
+function assertNoSymlinkComponents(value, options) {
+  const component = symlinkComponent(value, options);
+  if (component) {
+    throw pathError('SYMLINK_COMPONENT', `path contains a symlink component: ${value}`, { component });
+  }
+  return true;
+}
+
+function globPatternRegex(pattern) {
+  assertPathString(pattern, 'glob pattern');
+  const normalized = pattern.replace(/\\/g, '/');
+  let source = '^';
+  for (let index = 0; index < normalized.length; index += 1) {
+    const character = normalized[index];
+    if (character === '*' && normalized[index + 1] === '*') {
+      if (normalized[index + 2] === '/') {
+        source += '(?:.*/)?';
+        index += 2;
+      } else if (index + 2 === normalized.length || normalized[index + 2] !== '/') {
+        // A trailing globstar also matches the directory itself, as common
+        // ignore-file glob syntax does (foo/** matches foo and foo/child).
+        if (index > 0 && normalized[index - 1] === '/') {
+          source = source.slice(0, -1) + '(?:/.*)?';
+        } else {
+          source += '.*';
+        }
+        index += 1;
+      } else {
+        source += '.*';
+        index += 1;
+      }
+    } else if (character === '*') {
+      source += '[^/]*';
+    } else if (character === '?') {
+      // '?' is intentionally literal: the policy contract only has * and **.
+      source += '\\?';
+    } else {
+      source += character.replace(/[.+^${}()|[\\]\\\\]/g, '\\\\$&');
+    }
+  }
+  return new RegExp(`${source}$`);
+}
+
+function matchesGlob(value, pattern) {
+  const relative = safeRelativePath(value, { allowEmpty: true });
+  return globPatternRegex(pattern).test(relative);
+}
+
+function asPatterns(value) {
+  if (value === undefined || value === null) return [];
+  if (typeof value === 'string') return [value];
+  if (!Array.isArray(value) || value.some((item) => typeof item !== 'string')) {
+    throw pathError('INVALID_GLOB_POLICY', 'allow/deny patterns must be strings or arrays of strings');
+  }
+  return value;
+}
+
+function evaluateGlobPolicy(value, policy = {}) {
+  const relative = safeRelativePath(value, { allowEmpty: true });
+  const deny = asPatterns(policy.deny || policy.denied);
+  const allow = asPatterns(policy.allow || policy.allowed);
+  const deniedBy = deny.find((pattern) => matchesGlob(relative || '.', pattern));
+  if (deniedBy !== undefined) return { allowed: false, path: relative, deniedBy, allowedBy: null };
+  if (allow.length === 0) return { allowed: true, path: relative, deniedBy: null, allowedBy: null };
+  const allowedBy = allow.find((pattern) => matchesGlob(relative || '.', pattern));
+  return { allowed: allowedBy !== undefined, path: relative, deniedBy: null, allowedBy: allowedBy || null };
+}
+
+function isPathAllowed(value, policy) {
+  return evaluateGlobPolicy(value, policy).allowed;
+}
+
+function operationPolicy(config = {}) {
+  const root = config.root || config.allowedRoot || null;
+  const operations = config.operations || config.operation || {};
+
+  function check(operation, target, options = {}) {
+    const selected = operations[operation] || config[operation] || config;
+    const selectedRoot = options.root || root;
+    let relative = target;
+    let canonicalTarget = null;
+    if (selectedRoot) {
+      canonicalTarget = assertWithinRoot(selectedRoot, target, {
+        allowRoot: options.allowRoot,
+        mustExist: options.mustExist,
+      });
+      relative = path.relative(canonicalPath(selectedRoot), canonicalTarget).split(path.sep).join('/');
+    }
+    const globResult = evaluateGlobPolicy(relative, selected || {});
+    return {
+      ...globResult,
+      operation,
+      target,
+      canonicalTarget,
+      root: selectedRoot,
+    };
+  }
+
+  function assert(operation, target, options = {}) {
+    const result = check(operation, target, options);
+    if (!result.allowed) {
+      const reason = result.deniedBy ? `denied by ${result.deniedBy}` : 'not included by allow policy';
+      throw pathError('OPERATION_NOT_ALLOWED', `${operation} is not allowed for ${target}: ${reason}`, result);
+    }
+    return result;
+  }
+
+  return {
+    check,
+    evaluate: check,
+    isAllowed: (operation, target, options) => check(operation, target, options).allowed,
+    assert,
+    assertAllowed: assert,
+  };
+}
+
+function checkOperation(operation, target, config) {
+  return operationPolicy(config).check(operation, target);
+}
+
+function assertOperationAllowed(operation, target, config) {
+  return operationPolicy(config).assert(operation, target);
+}
+
+module.exports = {
+  canonicalPath,
+  sameFile,
+  safeRelativePath,
+  assertSafeRelativePath: safeRelativePath,
+  isSafeRelativePath,
+  isWithinRoot,
+  isPathWithinRoot: isWithinRoot,
+  assertWithinRoot,
+  symlinkComponent,
+  hasSymlinkComponent,
+  hasSymlinkComponents: hasSymlinkComponent,
+  assertNoSymlinkComponent: assertNoSymlinkComponents,
+  assertNoSymlinkComponents,
+  matchesGlob,
+  globMatch: matchesGlob,
+  evaluateGlobPolicy,
+  isPathAllowed,
+  pathAllowed: isPathAllowed,
+  operationPolicy,
+  createOperationPolicy: operationPolicy,
+  checkOperation,
+  assertOperationAllowed,
+};
diff --git a/scripts/lib/sg-runtime-evidence.js b/scripts/lib/sg-runtime-evidence.js
new file mode 100644
index 0000000..301fa75
--- /dev/null
+++ b/scripts/lib/sg-runtime-evidence.js
@@ -0,0 +1,52 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { contentId, isDigest, verifyArtifacts } = require('./sg-evidence-utils.js');
+
+function validateRuntimeEvidence(evidence, options = {}) {
+  const errors = [];
+  if (!evidence || typeof evidence !== 'object' || Array.isArray(evidence)) return { valid: false, errors: ['runtime evidence must be an object'], status: 'not-assessed' };
+  if (evidence.evidenceVersion !== '1.0') errors.push('runtime evidenceVersion must be 1.0');
+  if (evidence.kind !== 'runtime-evidence') errors.push('runtime kind must be runtime-evidence');
+  if (typeof evidence.scenarioId !== 'string' || !evidence.scenarioId) errors.push('runtime scenarioId is required');
+  if (!isDigest(evidence.subjectTreeSha256)) errors.push('runtime subjectTreeSha256 must be sha256:<hex>');
+  if (!evidence.producer || typeof evidence.producer !== 'object' || typeof evidence.producer.name !== 'string' || typeof evidence.producer.version !== 'string') errors.push('runtime producer name/version are required');
+  if (!evidence.environment || typeof evidence.environment !== 'object') errors.push('runtime environment is required');
+  if (!Array.isArray(evidence.assertions)) errors.push('runtime assertions must be an array');
+  if (!Array.isArray(evidence.consoleErrors)) errors.push('runtime consoleErrors must be an array');
+  if (!Array.isArray(evidence.pageErrors)) errors.push('runtime pageErrors must be an array');
+  if (!Array.isArray(evidence.networkFailures)) errors.push('runtime networkFailures must be an array');
+  if (!Array.isArray(evidence.artifacts) || !evidence.artifacts.length) errors.push('runtime artifacts must be a non-empty array');
+  const assertionIds = new Set();
+  for (const [index, assertion] of (evidence.assertions || []).entries()) {
+    if (!assertion || typeof assertion !== 'object' || typeof assertion.id !== 'string' || !assertion.id || !['passed', 'failed'].includes(assertion.status)) errors.push(`runtime assertions[${index}] must have id and passed|failed status`);
+    else if (assertionIds.has(assertion.id)) errors.push(`runtime assertion id is duplicated: ${assertion.id}`);
+    else assertionIds.add(assertion.id);
+  }
+  verifyArtifacts(evidence.artifacts, options.baseDir, errors);
+  const expectedId = contentId('runtime', evidence, ['evidenceId']);
+  if (evidence.evidenceId !== expectedId) errors.push(`runtime evidenceId mismatch (expected ${expectedId})`);
+  const failures = (evidence.assertions || []).filter((item) => item.status === 'failed').length
+    + (evidence.consoleErrors || []).length
+    + (evidence.pageErrors || []).length
+    + (evidence.networkFailures || []).length;
+  const complete = errors.length === 0 && (evidence.assertions || []).length > 0;
+  return {
+    valid: errors.length === 0,
+    errors,
+    status: !complete ? 'not-assessed' : failures ? 'failed' : 'passed',
+    summary: {
+      assertions: (evidence.assertions || []).length,
+      passed: (evidence.assertions || []).filter((item) => item.status === 'passed').length,
+      failed: failures,
+    },
+  };
+}
+
+function readRuntimeEvidence(file) {
+  const evidence = JSON.parse(fs.readFileSync(file, 'utf8'));
+  const validation = validateRuntimeEvidence(evidence, { baseDir: path.dirname(path.resolve(file)) });
+  return { evidence, validation };
+}
+
+module.exports = { validateRuntimeEvidence, readRuntimeEvidence };
diff --git a/scripts/lib/sg-task-runner.js b/scripts/lib/sg-task-runner.js
new file mode 100644
index 0000000..8c578f6
--- /dev/null
+++ b/scripts/lib/sg-task-runner.js
@@ -0,0 +1,477 @@
+'use strict';
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { readTaskManifest, validateTaskManifest, resolveSourceRoot, computeTreeSha256, sha256: taskSha256 } = require('./agent-task-manifest.js');
+const { runCommand } = require('./sg-command-runner.js');
+const { snapshotTree } = require('./sg-tree-snapshot.js');
+const { applyPatch, PatchError } = require('./sg-patch-executor.js');
+const { gradeWorkspace, validateGraderSpec } = require('./sg-grader.js');
+const { sha256Bytes, contentId, safeRelative } = require('./sg-evidence-utils.js');
+const { canonicalPath } = require('./sg-path-policy.js');
+
+function ensureOutsideSource(sourceRoot, artifactRoot) {
+  const source = fs.realpathSync(sourceRoot);
+  const output = path.resolve(artifactRoot);
+  const relative = path.relative(source, output);
+  if (relative === '' || (relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative))) throw new Error('artifact root must be outside source root');
+}
+
+function writeAtomic(file, bytes) {
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const temp = path.join(path.dirname(file), `.${path.basename(file)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`);
+  let fd;
+  try {
+    fd = fs.openSync(temp, 'wx', 0o600);
+    fs.writeFileSync(fd, bytes);
+    fs.fsyncSync(fd);
+    fs.closeSync(fd); fd = undefined;
+    fs.renameSync(temp, file);
+  } catch (error) {
+    if (fd !== undefined) fs.closeSync(fd);
+    try { fs.unlinkSync(temp); } catch (_) { /* absent */ }
+    throw error;
+  }
+}
+
+function artifact(root, id, file, mediaType) {
+  const bytes = fs.readFileSync(file);
+  return { id, path: path.relative(root, file).split(path.sep).join('/'), mediaType, bytes: bytes.length, sha256: sha256Bytes(bytes) };
+}
+
+function mediaTypeFor(file) {
+  if (file.endsWith('.json')) return 'application/json';
+  if (file.endsWith('.png')) return 'image/png';
+  if (file.endsWith('.html')) return 'text/html';
+  if (file.endsWith('.diff') || file.endsWith('.patch')) return 'text/x-diff';
+  if (file.endsWith('.md')) return 'text/markdown';
+  return 'text/plain';
+}
+
+function collectOutputArtifacts(root, current) {
+  const known = new Set(current.map((item) => item.path));
+  const files = [];
+  const unsupported = [];
+  function walk(directory) {
+    for (const name of fs.readdirSync(directory).sort()) {
+      const file = path.join(directory, name);
+      const relative = path.relative(root, file).split(path.sep).join('/');
+      const stat = fs.lstatSync(file);
+      if (stat.isSymbolicLink()) unsupported.push(`${relative}: symlink`);
+      else if (stat.isDirectory()) walk(file);
+      else if (stat.isFile() && stat.nlink > 1) unsupported.push(`${relative}: hardlink`);
+      else if (stat.isFile()) files.push(file);
+      else unsupported.push(`${relative}: unsupported filesystem entry`);
+    }
+  }
+  walk(root);
+  for (const file of files) {
+    const relative = path.relative(root, file).split(path.sep).join('/');
+    if (relative === 'task-run.json' || known.has(relative)) continue;
+    const id = 'generated-' + relative.replace(/[^A-Za-z0-9._-]+/g, '-');
+    current.push(artifact(root, id, file, mediaTypeFor(file)));
+    known.add(relative);
+  }
+  current.sort((left, right) => left.path.localeCompare(right.path));
+  return unsupported;
+}
+
+function replaceTokens(argv, values) {
+  return argv.map((argument) => Object.entries(values).reduce((value, [token, replacement]) => value.split(token).join(replacement), argument));
+}
+
+function agentResult(run) {
+  return {
+    provider: null, model: null, argv: run.argv, cwd: run.cwd,
+    exitCode: run.exitCode, signal: run.signal, timedOut: run.timedOut, durationMs: run.durationMs,
+    stdoutSha256: sha256Bytes(run.stdout || ''), stderrSha256: sha256Bytes(run.stderr || ''),
+    stdout: run.stdout, stderr: run.stderr,
+    stdoutTruncated: run.stdoutTruncated, stderrTruncated: run.stderrTruncated, error: run.error || null,
+  };
+}
+
+function loadGraderSpec(reference, taskDir) {
+  if (reference && typeof reference === 'object' && !Array.isArray(reference)) return { spec: reference, root: taskDir };
+  const relative = safeRelative(reference, 'grader spec path');
+  const file = path.resolve(taskDir, relative);
+  const fromRoot = path.relative(taskDir, file);
+  if (fromRoot === '..' || fromRoot.startsWith(`..${path.sep}`) || path.isAbsolute(fromRoot)) throw new Error('grader spec escapes task directory');
+  return { spec: JSON.parse(fs.readFileSync(file, 'utf8')), root: path.dirname(file), file };
+}
+
+function buildRun(report) {
+  const material = { ...report };
+  delete material.runId;
+  report.runId = contentId('task-run', material, []);
+  return report;
+}
+
+function verifyFileBinding(binding) {
+  try {
+    const stat = fs.lstatSync(binding.file);
+    if (!stat.isFile() || stat.isSymbolicLink()) throw new Error('must be a regular non-symlink file');
+    if (stat.nlink > 1) throw new Error('hardlinks are not allowed');
+    const actual = taskSha256(fs.readFileSync(binding.file));
+    return actual === binding.sha256 ? null : `digest mismatch: expected ${binding.sha256}, received ${actual}`;
+  } catch (error) { return error.message; }
+}
+
+function integrityIssues({ absoluteTask, taskFileSha256, loadedGraders, externalBindings }) {
+  const issues = [];
+  const taskIssue = verifyFileBinding({ file: absoluteTask, sha256: taskFileSha256 });
+  if (taskIssue) issues.push(`task manifest: ${taskIssue}`);
+  for (const loaded of loadedGraders) {
+    const specIssue = verifyFileBinding({ file: loaded.file, sha256: loaded.reference.sha256 });
+    if (specIssue) issues.push(`grader ${loaded.reference.id} spec: ${specIssue}`);
+    try {
+      const actualTree = computeTreeSha256(loaded.root);
+      if (actualTree !== loaded.reference.treeSha256) issues.push(`grader ${loaded.reference.id} tree digest mismatch: expected ${loaded.reference.treeSha256}, received ${actualTree}`);
+    } catch (error) { issues.push(`grader ${loaded.reference.id} tree: ${error.message}`); }
+  }
+  for (const binding of externalBindings) {
+    const bindingIssue = verifyFileBinding(binding);
+    if (bindingIssue) issues.push(`${binding.id}: ${bindingIssue}`);
+  }
+  return issues;
+}
+
+function captureTrustedTools() {
+  const originalScriptsRoot = path.resolve(__dirname, '..');
+  const original = snapshotTree(originalScriptsRoot, { errorOnSpecialFile: true, exclude: false });
+  return { originalScriptsRoot, originalTreeSha256: original.treeSha256 };
+}
+
+function stageTrustedTools(parent, captured) {
+  const current = snapshotTree(captured.originalScriptsRoot, { errorOnSpecialFile: true, exclude: false });
+  if (current.treeSha256 !== captured.originalTreeSha256) throw new Error('original tool scripts changed before staging');
+  const toolRoot = path.join(parent, 'trusted-tools');
+  const scriptsRoot = path.join(toolRoot, 'scripts');
+  fs.mkdirSync(toolRoot, { recursive: true });
+  fs.cpSync(captured.originalScriptsRoot, scriptsRoot, { recursive: true, dereference: false, verbatimSymlinks: true });
+  const staged = snapshotTree(scriptsRoot, { errorOnSpecialFile: true, exclude: false });
+  if (staged.treeSha256 !== captured.originalTreeSha256) throw new Error('staged tool scripts tree digest mismatch');
+  return { ...captured, toolRoot, scriptsRoot, stagedTreeSha256: staged.treeSha256 };
+}
+
+function verifyTrustedTools(tools) {
+  const issues = [];
+  try {
+    const original = snapshotTree(tools.originalScriptsRoot, { errorOnSpecialFile: true, exclude: false });
+    if (original.treeSha256 !== tools.originalTreeSha256) issues.push(`original tool scripts changed: expected ${tools.originalTreeSha256}, received ${original.treeSha256}`);
+  } catch (error) { issues.push('original tool scripts: ' + error.message); }
+  if (tools.scriptsRoot) {
+    try {
+      const staged = snapshotTree(tools.scriptsRoot, { errorOnSpecialFile: true, exclude: false });
+      if (staged.treeSha256 !== tools.stagedTreeSha256) issues.push(`staged tool scripts changed: expected ${tools.stagedTreeSha256}, received ${staged.treeSha256}`);
+    } catch (error) { issues.push('staged tool scripts: ' + error.message); }
+  }
+  return issues;
+}
+
+function stageGraders(loadedGraders, parent) {
+  const stagingRoot = path.join(parent, 'trusted-graders');
+  fs.mkdirSync(stagingRoot, { recursive: true });
+  return loadedGraders.map((loaded) => {
+    const root = path.join(stagingRoot, loaded.reference.id);
+    fs.cpSync(loaded.root, root, { recursive: true, dereference: false, verbatimSymlinks: true });
+    const treeSha256 = computeTreeSha256(root);
+    if (treeSha256 !== loaded.reference.treeSha256) throw new Error(`staged grader ${loaded.reference.id} tree digest mismatch`);
+    const relativeSpec = path.relative(loaded.root, loaded.file);
+    const file = path.join(root, relativeSpec);
+    const specIssue = verifyFileBinding({ file, sha256: loaded.reference.sha256 });
+    if (specIssue) throw new Error(`staged grader ${loaded.reference.id} spec ${specIssue}`);
+    const spec = JSON.parse(fs.readFileSync(file, 'utf8'));
+    const validation = validateGraderSpec(spec);
+    if (!validation.valid) throw new Error(`staged grader ${loaded.reference.id} is invalid: ${validation.errors.join('; ')}`);
+    return { reference: loaded.reference, root, file, spec };
+  });
+}
+
+function runTask({ taskFile, agentArgv, artifactRoot, agent = {}, keepWorkspace = false, trialId = null, integrityInputs = [] } = {}) {
+  if (!taskFile || !Array.isArray(agentArgv) || !agentArgv.length || !artifactRoot) throw new Error('taskFile, non-empty agentArgv, and artifactRoot are required');
+  if (!Array.isArray(integrityInputs) || integrityInputs.some((binding) => !binding || typeof binding.id !== 'string' || typeof binding.file !== 'string' || typeof binding.sha256 !== 'string')) throw new TypeError('integrityInputs must contain id, file, and sha256 bindings');
+  const initialExternalIssues = integrityInputs.map((binding) => ({ binding, issue: verifyFileBinding(binding) })).filter((item) => item.issue);
+  if (initialExternalIssues.length) {
+    const error = new Error('task integrity input validation failed: ' + initialExternalIssues.map((item) => `${item.binding.id}: ${item.issue}`).join('; '));
+    error.kind = 'input-error';
+    throw error;
+  }
+  const infraExitCodes = agent.infraExitCodes === undefined ? [] : agent.infraExitCodes;
+  if (!Array.isArray(infraExitCodes) || infraExitCodes.some((value) => !Number.isInteger(value) || value < 1 || value > 255) || new Set(infraExitCodes).size !== infraExitCodes.length) throw new TypeError('agent.infraExitCodes must contain unique exit codes from 1 to 255');
+  const absoluteTask = path.resolve(taskFile);
+  const taskDir = path.dirname(absoluteTask);
+  const taskFileSha256 = taskSha256(fs.readFileSync(absoluteTask));
+  const manifest = readTaskManifest(absoluteTask);
+  const validation = validateTaskManifest(manifest, { taskFile: absoluteTask, verifyFiles: true, verifyTree: true });
+  if (!validation.valid) {
+    const error = new Error('task input validation failed: ' + validation.issues.map((item) => `${item.path}: ${item.message}`).join('; '));
+    error.kind = 'input-error';
+    throw error;
+  }
+  const loadedGraders = manifest.graders.map((reference) => {
+    const loaded = loadGraderSpec(reference.spec, taskDir);
+    if (!loaded.file || taskSha256(fs.readFileSync(loaded.file)) !== reference.sha256) {
+      const error = new Error(`grader ${reference.id} spec digest mismatch`);
+      error.kind = 'input-error';
+      throw error;
+    }
+    if (computeTreeSha256(loaded.root) !== reference.treeSha256) {
+      const error = new Error(`grader ${reference.id} tree digest mismatch`);
+      error.kind = 'input-error';
+      throw error;
+    }
+    const graderValidation = validateGraderSpec(loaded.spec);
+    if (!graderValidation.valid) {
+      const error = new Error(`grader ${reference.id} is invalid: ${graderValidation.errors.join('; ')}`);
+      error.kind = 'input-error';
+      throw error;
+    }
+    return { reference, ...loaded };
+  });
+  const trustedToolsCapture = captureTrustedTools();
+  const sourceRoot = resolveSourceRoot(manifest, { taskFile: absoluteTask });
+  const requestedOutputRoot = path.resolve(artifactRoot);
+  if (fs.existsSync(requestedOutputRoot) && fs.lstatSync(requestedOutputRoot).isSymbolicLink()) throw new Error('artifact root must not be a symlink');
+  const outputRoot = canonicalPath(requestedOutputRoot);
+  ensureOutsideSource(sourceRoot, outputRoot);
+  if (fs.existsSync(outputRoot) && fs.readdirSync(outputRoot).length) throw new Error('artifact root must not already contain files');
+  fs.mkdirSync(outputRoot, { recursive: true });
+  const sourceBefore = snapshotTree(sourceRoot, { errorOnSpecialFile: true, exclude: false });
+  const workspaceParent = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-agent-task-'));
+  const workspaceRoot = path.join(workspaceParent, 'workspace');
+  try {
+    fs.cpSync(sourceRoot, workspaceRoot, { recursive: true, dereference: false, verbatimSymlinks: true });
+    const workspaceBeforeAgent = snapshotTree(workspaceRoot, { errorOnSpecialFile: true, exclude: false });
+  const patchPath = path.join(outputRoot, 'agent.patch');
+  const promptPath = path.join(outputRoot, 'TASK.md');
+  writeAtomic(promptPath, Buffer.from(manifest.instructions.text + '\n', 'utf8'));
+  const promptSha256 = sha256Bytes(fs.readFileSync(promptPath));
+  const values = { '{workspace}': workspaceRoot, '{patch}': patchPath, '{prompt}': promptPath, '{taskId}': manifest.taskId, '{artifacts}': outputRoot };
+  const argv = replaceTokens(agentArgv, values);
+  const agentRun = runCommand({ argv, cwd: workspaceRoot, allowedRoot: workspaceParent, timeoutMs: manifest.execution.timeoutMs, maxOutputBytes: manifest.execution.maxOutputBytes, env: {}, envAllowlist: ['PATH', 'HOME', 'TMPDIR', 'TMP', 'TEMP', 'LANG', 'LC_ALL', 'LC_CTYPE'] });
+  const agentAudit = agentResult(agentRun);
+  agentAudit.provider = agent.provider || null;
+  agentAudit.model = agent.model || null;
+  try { agentAudit.providerMetadata = agentRun.stdout.trim() ? JSON.parse(agentRun.stdout.trim().split('\n').pop()) : null; }
+  catch (_) { agentAudit.providerMetadata = null; }
+  let workspaceAfterAgent = null;
+  let sourceAfterAgent = null;
+  let verdict = 'passed';
+  let patchAudit = null;
+  const grades = [];
+  const secondaryErrors = [];
+  let termination = { kind: 'completed', processExitCode: 0, semanticVerdict: 'passed' };
+  const artifactList = [artifact(outputRoot, 'task-prompt', promptPath, 'text/markdown')];
+
+  try {
+    try {
+      workspaceAfterAgent = snapshotTree(workspaceRoot, { errorOnSpecialFile: true, exclude: false });
+      sourceAfterAgent = snapshotTree(sourceRoot, { errorOnSpecialFile: true, exclude: false });
+    } catch (snapshotError) {
+      const error = new Error('agent created an unsupported filesystem entry: ' + snapshotError.message);
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (!fs.existsSync(promptPath) || fs.lstatSync(promptPath).isSymbolicLink() || !fs.lstatSync(promptPath).isFile() || fs.lstatSync(promptPath).nlink > 1 || sha256Bytes(fs.readFileSync(promptPath)) !== promptSha256) {
+      const error = new Error('agent modified the immutable task prompt artifact');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    const agentArtifactNames = fs.readdirSync(outputRoot).sort();
+    if (agentArtifactNames.some((name) => !['TASK.md', 'agent.patch'].includes(name))) {
+      const error = new Error('agent wrote undeclared files into the artifact root: ' + agentArtifactNames.filter((name) => !['TASK.md', 'agent.patch'].includes(name)).join(', '));
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (sourceAfterAgent.treeSha256 !== sourceBefore.treeSha256) {
+      const error = new Error('agent modified the source root outside the disposable workspace');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (workspaceAfterAgent.treeSha256 !== workspaceBeforeAgent.treeSha256) {
+      const error = new Error('agent modified the workspace directly; it must emit only a patch');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    const postAgentIntegrityIssues = [
+      ...integrityIssues({ absoluteTask, taskFileSha256, loadedGraders, externalBindings: integrityInputs }),
+      ...verifyTrustedTools(trustedToolsCapture),
+    ];
+    if (postAgentIntegrityIssues.length) {
+      const error = new Error('immutable task inputs changed during agent execution: ' + postAgentIntegrityIssues.join('; '));
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (agentRun.error || agentRun.exitCode !== 0) {
+      const error = new Error(agentRun.timedOut ? 'agent command timed out' : 'agent command failed');
+      error.kind = agentRun.timedOut || agentRun.error || new Set(agent.infraExitCodes || []).has(agentRun.exitCode) ? 'infra-error' : 'agent-failed';
+      throw error;
+    }
+    if (!fs.existsSync(patchPath)) {
+      const error = new Error('agent did not produce the required unified diff');
+      error.kind = 'agent-failed';
+      throw error;
+    }
+    if (fs.lstatSync(patchPath).isSymbolicLink() || !fs.lstatSync(patchPath).isFile() || fs.lstatSync(patchPath).nlink > 1) {
+      const error = new Error('agent.patch must be a regular non-symlink, non-hardlinked file');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    const patchBytes = fs.readFileSync(patchPath);
+    artifactList.push(artifact(outputRoot, 'agent-patch', patchPath, 'text/x-diff'));
+    const applied = applyPatch({ manifest, workspaceRoot, patchBytes, taskId: manifest.taskId, timeoutMs: manifest.execution.timeoutMs });
+    patchAudit = applied.audit;
+    const patchAuditPath = path.join(outputRoot, 'patch-audit.json');
+    writeAtomic(patchAuditPath, Buffer.from(JSON.stringify(patchAudit, null, 2) + '\n'));
+    artifactList.push(artifact(outputRoot, 'patch-audit', patchAuditPath, 'application/json'));
+    const candidateTreeSha256 = 'sha256:' + applied.after.treeSha256;
+    let trustedTools;
+    let stagedGraders;
+    try {
+      trustedTools = stageTrustedTools(workspaceParent, trustedToolsCapture);
+      stagedGraders = stageGraders(loadedGraders, workspaceParent);
+    } catch (stagingError) {
+      const error = new Error('trusted grader staging failed: ' + stagingError.message);
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    for (const loadedGrader of stagedGraders) {
+      const { reference } = loadedGrader;
+      const preGradeToolIssues = verifyTrustedTools(trustedTools);
+      if (preGradeToolIssues.length) {
+        const error = new Error('trusted tool integrity failed before grading: ' + preGradeToolIssues.join('; '));
+        error.kind = 'policy-violation';
+        throw error;
+      }
+      if (computeTreeSha256(loadedGrader.root) !== reference.treeSha256) {
+        const error = new Error(`staged grader ${reference.id} changed before invocation`);
+        error.kind = 'policy-violation';
+        throw error;
+      }
+      const grade = gradeWorkspace({ spec: loadedGrader.spec, graderRoot: loadedGrader.root, workspaceRoot, artifactRoot: outputRoot, toolRoot: trustedTools.toolRoot, taskId: manifest.taskId, treeSha256: candidateTreeSha256, timeoutMs: manifest.execution.timeoutMs, maxOutputBytes: manifest.execution.maxOutputBytes });
+      grade.manifestWeight = reference.weight;
+      grade.gradeId = contentId('grade', grade, ['gradeId']);
+      grades.push(grade);
+      const gradeFile = path.join(outputRoot, `grade-${reference.id}.json`);
+      writeAtomic(gradeFile, Buffer.from(JSON.stringify(grade, null, 2) + '\n'));
+      artifactList.push(artifact(outputRoot, `grade-${reference.id}`, gradeFile, 'application/json'));
+      const postGradeToolIssues = verifyTrustedTools(trustedTools);
+      if (postGradeToolIssues.length) {
+        const error = new Error('trusted tool integrity failed during grading: ' + postGradeToolIssues.join('; '));
+        error.kind = 'policy-violation';
+        throw error;
+      }
+      if (computeTreeSha256(loadedGrader.root) !== reference.treeSha256) {
+        const error = new Error(`staged grader ${reference.id} changed during invocation`);
+        error.kind = 'policy-violation';
+        throw error;
+      }
+    }
+    const postGraderIntegrityIssues = integrityIssues({ absoluteTask, taskFileSha256, loadedGraders, externalBindings: integrityInputs });
+    if (postGraderIntegrityIssues.length) {
+      const error = new Error('immutable task inputs changed during grading: ' + postGraderIntegrityIssues.join('; '));
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    let workspaceAfterGraders;
+    try {
+      workspaceAfterGraders = snapshotTree(workspaceRoot, { errorOnSpecialFile: true, exclude: false });
+    } catch (snapshotError) {
+      const error = new Error('grader created an unsupported filesystem entry: ' + snapshotError.message);
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (workspaceAfterGraders.treeSha256 !== applied.after.treeSha256) {
+      const error = new Error('grader modified the immutable candidate workspace');
+      error.kind = 'policy-violation';
+      throw error;
+    }
+    if (!grades.length || grades.some((grade) => grade.verdict === 'failed')) {
+      verdict = 'grader-failed';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict };
+    } else if (grades.some((grade) => grade.verdict === 'infra-error')) {
+      verdict = 'infra-error';
+      termination = { kind: 'infrastructure-error', processExitCode: 3, semanticVerdict: verdict, message: 'one or more grader checks had an infrastructure error' };
+    }
+  } catch (error) {
+    if (error.audit) {
+      patchAudit = error.audit;
+      const patchAuditPath = path.join(outputRoot, 'patch-audit.json');
+      writeAtomic(patchAuditPath, Buffer.from(JSON.stringify(patchAudit, null, 2) + '\n'));
+      artifactList.push(artifact(outputRoot, 'patch-audit', patchAuditPath, 'application/json'));
+    }
+    const candidateFailureObserved = grades.some((grade) => grade.verdict === 'failed');
+    if (candidateFailureObserved) {
+      secondaryErrors.push({ kind: error.kind || 'post-grade-error', message: error.message });
+      verdict = 'grader-failed';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message: 'candidate failure observed; additional post-grade error: ' + error.message };
+    } else {
+      verdict = error.kind === 'policy-not-supported' ? 'patch-invalid' : error.kind || (error instanceof PatchError ? 'patch-invalid' : 'infra-error');
+      if (!['agent-failed', 'patch-invalid', 'policy-violation', 'input-error', 'infra-error'].includes(verdict)) verdict = 'patch-invalid';
+      termination = { kind: verdict === 'infra-error' ? 'infrastructure-error' : 'completed', processExitCode: verdict === 'infra-error' ? 3 : verdict === 'input-error' ? 2 : 1, semanticVerdict: verdict, message: error.message };
+    }
+  }
+
+  const unsupportedArtifacts = collectOutputArtifacts(outputRoot, artifactList);
+  if (unsupportedArtifacts.length && verdict !== 'policy-violation') {
+    const message = 'trusted grader output contains unsupported artifacts: ' + unsupportedArtifacts.join(', ');
+    if (grades.some((grade) => grade.verdict === 'failed') || verdict === 'grader-failed') {
+      secondaryErrors.push({ kind: 'unsupported-artifact', message });
+      verdict = 'grader-failed';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message: 'candidate failure observed; additional post-grade error: ' + message };
+    } else {
+      verdict = 'policy-violation';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message };
+    }
+  }
+  let sourceFinal = null;
+  let sourceFinalError = null;
+  try { sourceFinal = snapshotTree(sourceRoot, { errorOnSpecialFile: true, exclude: false }); }
+  catch (error) { sourceFinalError = error.message; }
+  const preserveCandidateFailure = (kind, message) => {
+    if (grades.some((grade) => grade.verdict === 'failed') || verdict === 'grader-failed') {
+      secondaryErrors.push({ kind, message });
+      verdict = 'grader-failed';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message: 'candidate failure observed; additional final integrity error: ' + message };
+    } else {
+      verdict = 'policy-violation';
+      termination = { kind: 'completed', processExitCode: 1, semanticVerdict: verdict, message };
+    }
+  };
+  if (!sourceFinal) preserveCandidateFailure('source-snapshot', 'source root final snapshot failed: ' + sourceFinalError);
+  else if (sourceFinal.treeSha256 !== sourceBefore.treeSha256) preserveCandidateFailure('source-drift', 'source root changed during task execution');
+  const finalIntegrityIssues = integrityIssues({ absoluteTask, taskFileSha256, loadedGraders, externalBindings: integrityInputs });
+  if (finalIntegrityIssues.length) preserveCandidateFailure('immutable-input-drift', 'immutable task inputs changed during task execution: ' + finalIntegrityIssues.join('; '));
+  const report = buildRun({
+    runVersion: '1.0', runId: null,
+    task: {
+      taskId: manifest.taskId,
+      taskFileSha256,
+      sourceRevision: manifest.source.revision,
+      contractTreeSha256: manifest.source.treeSha256,
+      runnerSnapshotBeforeSha256: 'sha256:' + sourceBefore.treeSha256,
+      runnerSnapshotFinalSha256: sourceFinal ? 'sha256:' + sourceFinal.treeSha256 : null,
+      sourceUnchanged: Boolean(sourceFinal && sourceBefore.treeSha256 === sourceFinal.treeSha256),
+      sourceFinalError,
+      trialId,
+    },
+    agent: agentAudit,
+    patch: patchAudit,
+    grades,
+    secondaryErrors,
+    artifacts: artifactList,
+    verdict,
+    termination,
+    capabilities: { sourceCopy: true, disposableWorkspace: true, completeSecuritySnapshots: true, postAgentSourceTreeCheck: true, postPatchTreePolicy: true, postGraderTreeCheck: true, verifiedGraderStaging: true, verifiedToolStaging: true, candidateExtractionWorker: true, osSandbox: false, filesystemIsolation: false, networkIsolation: false, processIsolation: false, maliciousAgentGraderSecrecy: false },
+  });
+  const runFile = path.join(outputRoot, 'task-run.json');
+  writeAtomic(runFile, Buffer.from(JSON.stringify(report, null, 2) + '\n'));
+    if (keepWorkspace) report.workspaceRoot = workspaceRoot;
+    return { report, runFile, workspaceRoot: keepWorkspace ? workspaceRoot : null };
+  } finally {
+    if (!keepWorkspace) fs.rmSync(workspaceParent, { recursive: true, force: true });
+  }
+}
+
+module.exports = { runTask, loadGraderSpec, writeAtomic };
diff --git a/scripts/lib/sg-tree-snapshot.js b/scripts/lib/sg-tree-snapshot.js
new file mode 100644
index 0000000..b8ee46f
--- /dev/null
+++ b/scripts/lib/sg-tree-snapshot.js
@@ -0,0 +1,231 @@
+'use strict';
+
+/* Deterministic, read-only filesystem tree snapshots and diffs. */
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const path = require('node:path');
+const { canonicalPath, matchesGlob } = require('./sg-path-policy.js');
+
+const DEFAULT_EXCLUDES = ['.git', '**/.git', '.git/**', '**/.git/**'];
+
+function compareNames(left, right) {
+  return left === right ? 0 : (left < right ? -1 : 1);
+}
+
+function sha256(value) {
+  return crypto.createHash('sha256').update(value).digest('hex');
+}
+
+function entryMode(stat) {
+  return stat.mode & 0o7777;
+}
+
+function normalizePatterns(value) {
+  if (value === false || value === null) return [];
+  if (value === undefined) return DEFAULT_EXCLUDES;
+  if (typeof value === 'string') return [value];
+  if (!Array.isArray(value) || value.some((pattern) => typeof pattern !== 'string')) {
+    throw new TypeError('exclude must be a string, an array of strings, false, or null');
+  }
+  return value;
+}
+
+function isExcluded(relativePath, patterns) {
+  return patterns.some((pattern) => matchesGlob(relativePath, pattern));
+}
+
+function snapshotEntry(absolutePath, relativePath, stat) {
+  const base = {
+    path: relativePath,
+    relativePath,
+    kind: null,
+    mode: entryMode(stat),
+    sha256: null,
+    size: 0,
+    target: null,
+  };
+  if (stat.isFile()) {
+    const bytes = fs.readFileSync(absolutePath);
+    return { ...base, kind: 'file', sha256: sha256(bytes), size: bytes.length };
+  }
+  if (stat.isDirectory()) return { ...base, kind: 'directory' };
+  if (stat.isSymbolicLink()) {
+    const target = fs.readlinkSync(absolutePath);
+    const bytes = Buffer.from(target);
+    return { ...base, kind: 'symlink', sha256: sha256(bytes), size: bytes.length, target };
+  }
+  return null;
+}
+
+function treeHash(entries) {
+  if (!Array.isArray(entries)) throw new TypeError('entries must be an array');
+  const normalized = entries.map((entry) => ({
+    ...entry,
+    path: entry.path === undefined ? entry.relativePath : entry.path,
+  }));
+  if (normalized.some((entry) => typeof entry.path !== 'string')) throw new TypeError('snapshot entry path must be a string');
+  const ordered = normalized.sort((left, right) => compareNames(left.path, right.path));
+  return sha256(Buffer.from(ordered.map((entry) => JSON.stringify([
+    entry.path,
+    entry.kind,
+    entry.mode,
+    entry.sha256,
+    entry.size,
+    entry.target,
+  ])).join('\n')));
+}
+
+function treeSha256(value, options = {}) {
+  return typeof value === 'string' ? snapshotTree(value, options).treeSha256 : treeHash(snapshotEntries(value));
+}
+
+function snapshotTree(root, options = {}) {
+  const physicalRoot = canonicalPath(root, { mustExist: true });
+  const rootStat = fs.lstatSync(physicalRoot);
+  if (!rootStat.isDirectory()) throw new TypeError(`snapshot root must be a directory: ${root}`);
+  const exclude = normalizePatterns(options.exclude);
+  const entries = [];
+
+  function visit(directory, prefix) {
+    const names = fs.readdirSync(directory).sort(compareNames);
+    for (const name of names) {
+      const relativePath = prefix ? `${prefix}/${name}` : name;
+      if (isExcluded(relativePath, exclude)) continue;
+      const absolutePath = path.join(directory, name);
+      const stat = fs.lstatSync(absolutePath);
+      const entry = snapshotEntry(absolutePath, relativePath, stat);
+      if (!entry) {
+        if (options.errorOnSpecialFile) throw new Error(`unsupported filesystem entry: ${relativePath}`);
+        continue;
+      }
+      entries.push(entry);
+      if (entry.kind === 'directory') visit(absolutePath, relativePath);
+    }
+  }
+
+  visit(physicalRoot, '');
+  return {
+    root: physicalRoot,
+    entries,
+    treeSha256: treeHash(entries),
+  };
+}
+
+function snapshotEntries(value) {
+  if (Array.isArray(value)) return value;
+  if (value && Array.isArray(value.entries)) return value.entries;
+  throw new TypeError('snapshot must be an entry array or an object with entries');
+}
+
+function indexEntries(snapshot) {
+  const out = new Map();
+  for (const entry of snapshotEntries(snapshot)) {
+    if (!entry || typeof (entry.path === undefined ? entry.relativePath : entry.path) !== 'string') throw new TypeError('snapshot entry path must be a string');
+    const relativePath = entry.path === undefined ? entry.relativePath : entry.path;
+    if (out.has(relativePath)) throw new Error(`duplicate snapshot entry: ${relativePath}`);
+    out.set(relativePath, entry);
+  }
+  return out;
+}
+
+function contentSignature(entry) {
+  return JSON.stringify([entry.kind, entry.sha256, entry.size, entry.target]);
+}
+
+function renameSignature(entry) {
+  if (entry.kind === 'directory') return null;
+  return JSON.stringify([entry.kind, entry.sha256, entry.size, entry.target]);
+}
+
+function diffTrees(before, after, options = {}) {
+  const beforeMap = indexEntries(before);
+  const afterMap = indexEntries(after);
+  let added = [...afterMap.keys()].filter((entryPath) => !beforeMap.has(entryPath)).sort();
+  let deleted = [...beforeMap.keys()].filter((entryPath) => !afterMap.has(entryPath)).sort();
+  const modified = [];
+  const modeChanged = [];
+  const typeChanged = [];
+  const renamed = [];
+
+  for (const entryPath of [...afterMap.keys()].filter((name) => beforeMap.has(name)).sort()) {
+    const oldEntry = beforeMap.get(entryPath);
+    const newEntry = afterMap.get(entryPath);
+    if (oldEntry.kind !== newEntry.kind) {
+      typeChanged.push({ path: entryPath, before: oldEntry, after: newEntry });
+    } else if (contentSignature(oldEntry) !== contentSignature(newEntry)) {
+      modified.push({ path: entryPath, before: oldEntry, after: newEntry, modeChanged: oldEntry.mode !== newEntry.mode });
+    } else if (oldEntry.mode !== newEntry.mode) {
+      modeChanged.push({ path: entryPath, before: oldEntry, after: newEntry });
+    }
+  }
+
+  if (options.detectRenames || options.renames) {
+    const available = new Map();
+    for (const entryPath of added) {
+      const signature = renameSignature(afterMap.get(entryPath));
+      if (signature === null) continue;
+      if (!available.has(signature)) available.set(signature, []);
+      available.get(signature).push(entryPath);
+    }
+    const renamedFrom = new Set();
+    const renamedTo = new Set();
+    for (const from of deleted) {
+      const oldEntry = beforeMap.get(from);
+      const signature = renameSignature(oldEntry);
+      const candidates = signature === null ? null : available.get(signature);
+      if (!candidates || candidates.length === 0) continue;
+      const to = candidates.shift();
+      const newEntry = afterMap.get(to);
+      renamed.push({
+        from,
+        to,
+        kind: newEntry.kind,
+        sha256: newEntry.sha256,
+        modeChanged: oldEntry.mode !== newEntry.mode,
+        before: oldEntry,
+        after: newEntry,
+      });
+      renamedFrom.add(from);
+      renamedTo.add(to);
+    }
+    deleted = deleted.filter((entryPath) => !renamedFrom.has(entryPath));
+    added = added.filter((entryPath) => !renamedTo.has(entryPath));
+  }
+
+  const addChanges = added.map((entryPath) => ({ change: 'add', path: entryPath, after: afterMap.get(entryPath) }));
+  const modifyChanges = modified.map((change) => ({ change: 'modify', ...change }));
+  const deleteChanges = deleted.map((entryPath) => ({ change: 'delete', path: entryPath, before: beforeMap.get(entryPath) }));
+  const modeChanges = modeChanged.map((change) => ({ change: 'mode', ...change }));
+  const typeChanges = typeChanged.map((change) => ({ change: 'type', ...change }));
+  const renameChanges = renamed.map((change) => ({ change: 'rename', path: change.to, ...change }));
+  const changes = [...addChanges, ...modifyChanges, ...deleteChanges, ...modeChanges, ...typeChanges, ...renameChanges]
+    .sort((left, right) => (left.path || left.from).localeCompare(right.path || right.from) || left.change.localeCompare(right.change));
+
+  return {
+    added: addChanges,
+    modified: modifyChanges,
+    deleted: deleteChanges,
+    modeChanged: modeChanges,
+    typeChanged: typeChanges,
+    renamed: renameChanges,
+    add: addChanges,
+    modify: modifyChanges,
+    delete: deleteChanges,
+    mode: modeChanges,
+    type: typeChanges,
+    renames: renameChanges,
+    changes,
+    changed: changes.length > 0,
+  };
+}
+
+module.exports = {
+  DEFAULT_EXCLUDES,
+  sha256,
+  treeHash,
+  treeSha256,
+  snapshotTree,
+  createTreeSnapshot: snapshotTree,
+  diffTrees,
+  diffTreeSnapshots: diffTrees,
+};
diff --git a/scripts/lib/sg-visual-evidence.js b/scripts/lib/sg-visual-evidence.js
new file mode 100644
index 0000000..987e181
--- /dev/null
+++ b/scripts/lib/sg-visual-evidence.js
@@ -0,0 +1,74 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { contentId, isDigest, verifyArtifacts } = require('./sg-evidence-utils.js');
+
+function validateVisualEvidence(evidence, options = {}) {
+  const errors = [];
+  if (!evidence || typeof evidence !== 'object' || Array.isArray(evidence)) return { valid: false, errors: ['visual evidence must be an object'], status: 'not-assessed' };
+  if (evidence.evidenceVersion !== '1.0') errors.push('visual evidenceVersion must be 1.0');
+  if (evidence.kind !== 'visual-evidence') errors.push('visual kind must be visual-evidence');
+  for (const field of ['referenceTreeSha256', 'candidateTreeSha256', 'configurationSha256']) if (!isDigest(evidence[field])) errors.push(`visual ${field} must be sha256:<hex>`);
+  if (!evidence.producer || typeof evidence.producer.name !== 'string' || typeof evidence.producer.version !== 'string') errors.push('visual producer name/version are required');
+  if (!evidence.thresholds || typeof evidence.thresholds !== 'object') errors.push('visual thresholds are required');
+  else {
+    if (typeof evidence.thresholds.maxPixelDiffRatio !== 'number' || evidence.thresholds.maxPixelDiffRatio < 0 || evidence.thresholds.maxPixelDiffRatio > 1) errors.push('visual maxPixelDiffRatio must be between 0 and 1');
+    if (typeof evidence.thresholds.minComputedStyleScore !== 'number' || evidence.thresholds.minComputedStyleScore < 0 || evidence.thresholds.minComputedStyleScore > 1) errors.push('visual minComputedStyleScore must be between 0 and 1');
+    if (typeof evidence.thresholds.minCoverage !== 'number' || evidence.thresholds.minCoverage < 0 || evidence.thresholds.minCoverage > 1) errors.push('visual minCoverage must be between 0 and 1');
+  }
+  if (!Array.isArray(evidence.scenarios) || !evidence.scenarios.length) errors.push('visual scenarios must be a non-empty array');
+  if (!Array.isArray(evidence.artifacts) || !evidence.artifacts.length) errors.push('visual artifacts must be a non-empty array');
+  const artifactIds = verifyArtifacts(evidence.artifacts, options.baseDir, errors);
+  const artifactById = new Map((evidence.artifacts || []).filter((item) => item && typeof item.id === 'string').map((item) => [item.id, item]));
+  const scenarioIds = new Set();
+  const scenarioResults = [];
+  for (const [index, scenario] of (evidence.scenarios || []).entries()) {
+    const scenarioErrors = [];
+    if (!scenario || typeof scenario !== 'object' || typeof scenario.id !== 'string' || !scenario.id) scenarioErrors.push(`scenarios[${index}].id is required`);
+    else if (scenarioIds.has(scenario.id)) scenarioErrors.push(`scenarios[${index}].id is duplicated`);
+    else scenarioIds.add(scenario.id);
+    if (!scenario || !scenario.viewport || !Number.isInteger(scenario.viewport.width) || scenario.viewport.width <= 0 || !Number.isInteger(scenario.viewport.height) || scenario.viewport.height <= 0) scenarioErrors.push(`scenarios[${index}].viewport width/height must be positive integers`);
+    for (const field of ['pixelDiffRatio', 'computedStyleScore', 'coverage']) if (!scenario || typeof scenario[field] !== 'number' || !Number.isFinite(scenario[field]) || scenario[field] < 0 || scenario[field] > 1) scenarioErrors.push(`scenarios[${index}].${field} must be a finite number between 0 and 1`);
+    if (!scenario || !Number.isInteger(scenario.stabilityFailures) || scenario.stabilityFailures < 0) scenarioErrors.push(`scenarios[${index}].stabilityFailures must be a non-negative integer`);
+    const refs = [];
+    for (const field of ['referenceArtifact', 'candidateArtifact', 'diffArtifact']) {
+      const id = scenario && scenario[field];
+      const artifact = artifactById.get(id);
+      if (typeof id !== 'string' || !artifactIds.has(id)) scenarioErrors.push(`scenarios[${index}].${field} must reference a verified artifact`);
+      else if (typeof artifact.mediaType !== 'string' || !artifact.mediaType.startsWith('image/')) scenarioErrors.push(`scenarios[${index}].${field} must reference an image artifact`);
+      refs.push(id);
+    }
+    if (new Set(refs).size !== refs.length) scenarioErrors.push(`scenarios[${index}] reference, candidate, and diff artifacts must be distinct`);
+    const thresholdFailed = scenario && evidence.thresholds && (
+      scenario.pixelDiffRatio > evidence.thresholds.maxPixelDiffRatio
+      || scenario.computedStyleScore < evidence.thresholds.minComputedStyleScore
+      || scenario.coverage < evidence.thresholds.minCoverage
+      || Number(scenario.stabilityFailures || 0) > 0
+    );
+    errors.push(...scenarioErrors);
+    scenarioResults.push({ id: scenario && scenario.id || `scenario-${index + 1}`, status: scenarioErrors.length ? 'not-assessed' : thresholdFailed ? 'failed' : 'passed', errors: scenarioErrors });
+  }
+  const expectedId = contentId('visual', evidence, ['evidenceId']);
+  if (evidence.evidenceId !== expectedId) errors.push(`visual evidenceId mismatch (expected ${expectedId})`);
+  const complete = errors.length === 0 && scenarioResults.length > 0 && scenarioResults.every((item) => item.status !== 'not-assessed');
+  return {
+    valid: errors.length === 0,
+    errors,
+    status: !complete ? 'not-assessed' : scenarioResults.some((item) => item.status === 'failed') ? 'failed' : 'passed',
+    scenarios: scenarioResults,
+    summary: {
+      total: scenarioResults.length,
+      passed: scenarioResults.filter((item) => item.status === 'passed').length,
+      failed: scenarioResults.filter((item) => item.status === 'failed').length,
+      notAssessed: scenarioResults.filter((item) => item.status === 'not-assessed').length,
+    },
+  };
+}
+
+function readVisualEvidence(file) {
+  const evidence = JSON.parse(fs.readFileSync(file, 'utf8'));
+  const validation = validateVisualEvidence(evidence, { baseDir: path.dirname(path.resolve(file)) });
+  return { evidence, validation };
+}
+
+module.exports = { validateVisualEvidence, readVisualEvidence };
diff --git a/scripts/lib/task-run.schema.json b/scripts/lib/task-run.schema.json
new file mode 100644
index 0000000..22cde09
--- /dev/null
+++ b/scripts/lib/task-run.schema.json
@@ -0,0 +1,21 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://sg.local/contracts/task-run-v1.json",
+  "title": "SG Agent TaskRun v1.0",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["runVersion", "runId", "task", "agent", "patch", "grades", "secondaryErrors", "artifacts", "verdict", "termination", "capabilities"],
+  "properties": {
+    "runVersion": { "const": "1.0" },
+    "runId": { "type": "string", "pattern": "^task-run:[0-9a-f]{64}$" },
+    "task": { "type": "object" },
+    "agent": { "type": "object" },
+    "patch": { "type": ["object", "null"] },
+    "grades": { "type": "array" },
+    "secondaryErrors": { "type": "array" },
+    "artifacts": { "type": "array" },
+    "verdict": { "enum": ["passed", "agent-failed", "patch-invalid", "policy-violation", "grader-failed", "input-error", "infra-error"] },
+    "termination": { "type": "object" },
+    "capabilities": { "type": "object" }
+  }
+}
diff --git a/scripts/sg-data-pack b/scripts/sg-data-pack
index ddff926..da41a74 100755
--- a/scripts/sg-data-pack
+++ b/scripts/sg-data-pack
@@ -4,6 +4,7 @@
  *
  * Usage:
  *   sg-data-pack extract <path/to/config.js> [--check]   Extract embedded data into a Data Pack, then validate + equivalence-test
+ *   sg-data-pack compile <data.json> [--domain-schema fragment.json] [--check]  Generate reviewed data.js/schema without erasing custom domain constraints
  *   sg-data-pack validate <data.json> [--strict] [--verify-hash]   Standalone Data Pack validation
  *   sg-data-pack rules <libDir | data-rules.json> [--strict]       Execute library-level data rules
  *   sg-data-pack diff <old.json> <new.json> [--json]               Structural diff between two Data Packs
@@ -14,6 +15,10 @@
  *   sg-data-pack data-surface-import <manifest.json> [--out report.json] [--allow-review-required]  Read a ui-dismantler Data Surface Manifest without generating a Data Pack
  *   sg-data-pack candidate <baseline.json> <review-report.json> <decisions.json> --records records.json --out candidate.json  Apply explicit Review Decisions
  *   sg-data-pack report <libDir> [options]                 Generate a unified Library Evolution Report
+ *   sg-data-pack task <validate|inspect|run> <task.json>    Validate or execute an Agent Task Manifest
+ *   sg-data-pack grade <grader.json> <workspace>            Execute a task-specific grader
+ *   sg-data-pack evidence <runtime|visual> <evidence.json>  Validate runtime or visual evidence
+ *   sg-data-pack experiment <experiment.json> --out <dir>   Run a success-rate experiment
  *   sg-data-pack schema                                  Print the contract-schema path
  *   sg-data-pack loader                                  Print the runtime-validator path (copy into a library's lib/src/)
  */
@@ -33,8 +38,9 @@ function printHelp() {
   console.log(`sg-data-pack — component-library data-layer normalization CLI
 
 Usage:
-  sg-data-pack extract <config.js> [--check]                 Extract + validate + equivalence-test
-  sg-data-pack validate <data.json> [--strict] [--verify-hash]  Validate a Data Pack
+  sg-data-pack extract <config.js> [--check] [--compare-existing] [--force]  Bootstrap from source literals + equivalence-test
+  sg-data-pack compile <data.json> [--domain-schema fragment.json] [--check]  Generate data.js/schema and preserve explicit domain constraints
+  sg-data-pack validate <data.json> [--strict] [--verify-hash] [--asset-root dir]  Validate a Data Pack
   sg-data-pack rules <libDir | data-rules.json> [--strict]   Execute library-level rules
   sg-data-pack diff <old.json> <new.json> [--json]            Structural diff + derivation impact
   sg-data-pack templatize <instances.json> [--out dir]       Derive a byte-exact repeated-item template
@@ -44,6 +50,10 @@ Usage:
   sg-data-pack data-surface-import <manifest.json> [--out report.json] [--allow-review-required]  Read a ui-dismantler Data Surface Manifest
   sg-data-pack candidate <baseline.json> <report.json> <decisions.json> --records <records.json> --out <candidate.json>  Apply explicit Review Decisions
   sg-data-pack report <libDir> [--config config.js] [--baseline old.json] [--review review-report.json] [--audit candidate-audit.json] [--strict] [--verify-hash] [--out dir] [--json]
+  sg-data-pack task <validate|inspect|run> <task.json>        Validate or execute an Agent Task Manifest
+  sg-data-pack grade <grader.json> <workspace> [--artifacts dir] [--tree sha256:...] [--json]
+  sg-data-pack evidence <runtime|visual> <evidence.json> [--json]
+  sg-data-pack experiment <experiment.json> --out <dir> [--json]
   sg-data-pack schema                                        Print the contract-schema path
   sg-data-pack loader                                        Print the runtime-validator path`);
 }
@@ -52,6 +62,9 @@ switch (cmd) {
   case 'extract':
     run('sg-pack-extract.js', rest);
     break;
+  case 'compile':
+    run('sg-pack-compile.js', rest);
+    break;
   case 'validate':
     run('sg-pack-validate.js', rest);
     break;
@@ -82,6 +95,18 @@ switch (cmd) {
   case 'report':
     run('sg-pack-report.js', rest);
     break;
+  case 'task':
+    run('sg-pack-task.js', rest);
+    break;
+  case 'grade':
+    run('sg-pack-grade.js', rest);
+    break;
+  case 'evidence':
+    run('sg-pack-evidence.js', rest);
+    break;
+  case 'experiment':
+    run('sg-pack-experiment.js', rest);
+    break;
   case 'schema':
     console.log(path.join(here, 'lib', 'data-pack.schema.json'));
     break;
diff --git a/scripts/sg-pack-compile.js b/scripts/sg-pack-compile.js
new file mode 100644
index 0000000..51e3811
--- /dev/null
+++ b/scripts/sg-pack-compile.js
@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { sameFile } = require('./lib/sg-path-policy.js');
+require('./lib/sg-data-loader.js');
+
+function usage() {
+  console.error('Usage: sg-data-pack compile <data.json> [--domain-schema <fragment.json>] [--check]');
+  process.exit(2);
+}
+
+const argv = process.argv.slice(2);
+const fileArg = argv.shift();
+if (!fileArg || fileArg.startsWith('--')) usage();
+let checkOnly = false;
+let domainSchemaArg = null;
+while (argv.length) {
+  const argument = argv.shift();
+  if (argument === '--check' && !checkOnly) checkOnly = true;
+  else if (argument === '--domain-schema' && domainSchemaArg === null && argv.length && !argv[0].startsWith('--')) domainSchemaArg = argv.shift();
+  else usage();
+}
+
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])]));
+}
+function equivalent(left, right) { return JSON.stringify(canonical(left)) === JSON.stringify(canonical(right)); }
+function readRegularJson(file, label) {
+  const stat = fs.lstatSync(file);
+  if (!stat.isFile() || stat.isSymbolicLink()) throw new Error(`${label} must be a regular non-symlink file`);
+  return JSON.parse(fs.readFileSync(file, 'utf8'));
+}
+
+const file = path.resolve(fileArg);
+const directory = path.dirname(file);
+const dataJs = path.join(directory, 'data.js');
+const schemaFile = path.join(directory, 'data.schema.json');
+const domainSchemaFile = domainSchemaArg === null ? null : path.resolve(domainSchemaArg);
+if (sameFile(file, dataJs) || sameFile(file, schemaFile) || sameFile(dataJs, schemaFile)
+  || domainSchemaFile && [file, dataJs, schemaFile].some((candidate) => sameFile(domainSchemaFile, candidate))) {
+  console.error('compile input and output paths must be distinct');
+  process.exit(2);
+}
+try {
+  const pack = readRegularJson(file, 'data.json');
+  const validation = globalThis.SGDataLoader.validate(pack);
+  if (validation.errors.length) throw new Error('Data Pack is invalid: ' + validation.errors.join('; '));
+  const schema = JSON.parse(fs.readFileSync(path.join(__dirname, 'lib', 'data-pack.schema.json'), 'utf8'));
+  const baseDomainSchema = schema.properties.domain;
+  if (domainSchemaFile) {
+    const fragment = readRegularJson(domainSchemaFile, 'domain schema fragment');
+    if (typeof fragment !== 'boolean' && (!fragment || typeof fragment !== 'object' || Array.isArray(fragment))) throw new Error('domain schema fragment must be a JSON object or boolean schema');
+    schema.properties.domain = fragment;
+  } else if (fs.existsSync(schemaFile)) {
+    const existing = readRegularJson(schemaFile, 'existing data.schema.json');
+    const hasExistingDomain = existing && existing.properties && Object.prototype.hasOwnProperty.call(existing.properties, 'domain');
+    const existingDomain = hasExistingDomain ? existing.properties.domain : undefined;
+    if (hasExistingDomain && !equivalent(existingDomain, baseDomainSchema)) {
+      throw new Error(`existing data.schema.json contains a custom domain schema; rerun with --domain-schema <fragment.json> to preserve it (${schemaFile})`);
+    }
+  }
+  schema.$id = `https://sg.local/${pack.meta.id}/data.schema.json`;
+  schema.title = `SG Data Pack ${pack.schemaVersion} — ${pack.meta.id} data contract`;
+  const outputs = [
+    { file: dataJs, bytes: Buffer.from('// @generated from reviewed data.json by sg-data-pack compile\n' + 'globalThis.SG_DATA_PACK = ' + JSON.stringify(pack) + ';\n') },
+    { file: schemaFile, bytes: Buffer.from(JSON.stringify(schema, null, 2) + '\n') },
+  ];
+  for (const output of outputs) if (fs.existsSync(output.file) && fs.lstatSync(output.file).isSymbolicLink()) throw new Error('compile output must not be a symlink: ' + output.file);
+  if (checkOnly) {
+    const drift = outputs.filter((output) => !fs.existsSync(output.file) || !fs.readFileSync(output.file).equals(output.bytes));
+    if (drift.length) {
+      drift.forEach((output) => console.error('compile output drift: ' + output.file));
+      process.exit(1);
+    }
+    console.log('✔ Compiled outputs match reviewed data.json');
+    process.exit(0);
+  }
+  const staged = outputs.map((output) => ({ ...output, temp: path.join(directory, `.${path.basename(output.file)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`), backup: null }));
+  try {
+    for (const output of staged) { fs.writeFileSync(output.temp, output.bytes, { flag: 'wx', mode: 0o600 }); }
+    for (const output of staged) if (fs.existsSync(output.file)) { output.backup = `${output.file}.${process.pid}.bak`; fs.renameSync(output.file, output.backup); }
+    for (const output of staged) fs.renameSync(output.temp, output.file);
+    for (const output of staged) if (output.backup) fs.unlinkSync(output.backup);
+  } catch (error) {
+    for (const output of staged) { try { fs.rmSync(output.temp, { force: true }); } catch (_) { /* absent */ } }
+    for (const output of staged) {
+      try { if (output.backup) { fs.rmSync(output.file, { force: true }); fs.renameSync(output.backup, output.file); } } catch (_) { /* reported below */ }
+    }
+    throw error;
+  }
+  outputs.forEach((output) => console.log('compiled: ' + output.file));
+} catch (error) {
+  console.error('compile: ' + error.message);
+  process.exit(error instanceof SyntaxError || error.code === 'ENOENT' ? 2 : 1);
+}
diff --git a/scripts/sg-pack-data-surface.js b/scripts/sg-pack-data-surface.js
index 865dab9..64d1c75 100755
--- a/scripts/sg-pack-data-surface.js
+++ b/scripts/sg-pack-data-surface.js
@@ -1,27 +1,115 @@
 #!/usr/bin/env node
 'use strict';
 
+const crypto = require('node:crypto');
 const fs = require('node:fs');
 const path = require('node:path');
 const { readDataSurfaceManifest } = require('./lib/sg-data-surface-import.js');
 
-const args = process.argv.slice(2);
-const file = args[0];
-const outIndex = args.indexOf('--out');
-const out = outIndex >= 0 ? args[outIndex + 1] : null;
-const allowReviewRequired = args.includes('--allow-review-required');
+function usage() {
+  return 'Usage: sg-data-pack data-surface-import <manifest.json> [--out report.json] [--allow-review-required]';
+}
+
+function parseArgs(argv) {
+  let file = null;
+  let out = null;
+  let allowReviewRequired = false;
+  const seen = new Set();
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === '--out') {
+      if (seen.has(arg)) throw new Error('duplicate option: --out');
+      seen.add(arg);
+      if (i + 1 >= argv.length || argv[i + 1].startsWith('--')) throw new Error('--out requires a value');
+      out = argv[++i];
+      continue;
+    }
+    if (arg === '--allow-review-required') {
+      if (seen.has(arg)) throw new Error('duplicate option: --allow-review-required');
+      seen.add(arg);
+      allowReviewRequired = true;
+      continue;
+    }
+    if (arg.startsWith('-')) throw new Error('unknown option: ' + arg);
+    if (file !== null) throw new Error('unexpected positional argument: ' + arg);
+    file = arg;
+  }
+  if (!file) throw new Error('manifest path is required');
+  return { file, out, allowReviewRequired };
+}
+
+function canonicalPath(file) {
+  let absolute = path.resolve(file);
+  const missing = [];
+  while (!fs.existsSync(absolute)) {
+    const parent = path.dirname(absolute);
+    if (parent === absolute) break;
+    missing.unshift(path.basename(absolute));
+    absolute = parent;
+  }
+  try { absolute = fs.realpathSync(absolute); } catch (_) { /* input reads report the concrete error */ }
+  return path.join(absolute, ...missing);
+}
+
+function sameFile(left, right) {
+  const canonicalLeft = canonicalPath(left);
+  const canonicalRight = canonicalPath(right);
+  const caseInsensitiveFs = process.platform === 'darwin' || process.platform === 'win32';
+  if (canonicalLeft === canonicalRight || (caseInsensitiveFs && canonicalLeft.toLowerCase() === canonicalRight.toLowerCase())) return true;
+  try {
+    const a = fs.statSync(left);
+    const b = fs.statSync(right);
+    return a.dev === b.dev && a.ino === b.ino;
+  } catch (_) {
+    return false;
+  }
+}
+
+function atomicWrite(file, bytes) {
+  const absolute = path.resolve(file);
+  const directory = path.dirname(absolute);
+  fs.mkdirSync(directory, { recursive: true });
+  const temporary = path.join(directory, `.${path.basename(absolute)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`);
+  let fd;
+  try {
+    fd = fs.openSync(temporary, 'wx', 0o600);
+    fs.writeFileSync(fd, bytes);
+    fs.fsyncSync(fd);
+    fs.closeSync(fd);
+    fd = undefined;
+    fs.renameSync(temporary, absolute);
+    try {
+      const dirFd = fs.openSync(directory, 'r');
+      try { fs.fsyncSync(dirFd); } finally { fs.closeSync(dirFd); }
+    } catch (_) { /* directory fsync is not available on every platform */ }
+  } finally {
+    if (fd !== undefined) fs.closeSync(fd);
+    try { fs.unlinkSync(temporary); } catch (_) { /* renamed or already removed */ }
+  }
+}
+
+let options;
+try {
+  options = parseArgs(process.argv.slice(2));
+} catch (error) {
+  console.error(error.message);
+  console.error(usage());
+  process.exit(2);
+}
 
-if (!file || (outIndex >= 0 && !out)) {
-  console.error('Usage: sg-data-pack data-surface-import <manifest.json> [--out report.json] [--allow-review-required]');
+const inputPath = path.resolve(options.file);
+const outputPath = options.out ? path.resolve(options.out) : null;
+if (outputPath && sameFile(inputPath, outputPath)) {
+  console.error('--out must not be the same file as the input manifest (including symlink or hardlink aliases)');
   process.exit(2);
 }
 
 try {
-  const report = readDataSurfaceManifest(path.resolve(file));
+  const report = readDataSurfaceManifest(inputPath, { requireReady: false });
   const serialized = JSON.stringify(report, null, 2) + '\n';
-  if (out) fs.writeFileSync(path.resolve(out), serialized);
+  if (outputPath) atomicWrite(outputPath, serialized);
   else process.stdout.write(serialized);
-  if (report.reviewRequired && !allowReviewRequired) {
+  if (report.reviewRequired && !options.allowReviewRequired) {
     console.error(`Data Surface import blocked: ${report.blockers.join('; ')}`);
     process.exit(1);
   }
diff --git a/scripts/sg-pack-evidence.js b/scripts/sg-pack-evidence.js
new file mode 100644
index 0000000..f4d7907
--- /dev/null
+++ b/scripts/sg-pack-evidence.js
@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+'use strict';
+const path = require('node:path');
+const { readRuntimeEvidence } = require('./lib/sg-runtime-evidence.js');
+const { readVisualEvidence } = require('./lib/sg-visual-evidence.js');
+
+const [, , kind, fileArg, ...args] = process.argv;
+if (!['runtime', 'visual'].includes(kind) || !fileArg || args.some((item) => item !== '--json') || args.filter((item) => item === '--json').length > 1) {
+  console.error('Usage: sg-data-pack evidence <runtime|visual> <evidence.json> [--json]');
+  process.exit(2);
+}
+try {
+  const loaded = kind === 'runtime' ? readRuntimeEvidence(path.resolve(fileArg)) : readVisualEvidence(path.resolve(fileArg));
+  if (args.includes('--json')) process.stdout.write(JSON.stringify(loaded, null, 2) + '\n');
+  else {
+    console.log(`${kind} evidence: ${loaded.validation.status}`);
+    loaded.validation.errors.forEach((error) => console.error('  ' + error));
+  }
+  process.exit(loaded.validation.status === 'passed' ? 0 : loaded.validation.status === 'failed' || loaded.validation.status === 'not-assessed' ? 1 : 2);
+} catch (error) { console.error(`${kind} evidence: ${error.message}`); process.exit(2); }
diff --git a/scripts/sg-pack-experiment.js b/scripts/sg-pack-experiment.js
new file mode 100644
index 0000000..69d8d89
--- /dev/null
+++ b/scripts/sg-pack-experiment.js
@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+'use strict';
+const path = require('node:path');
+const { runExperiment } = require('./lib/sg-experiment.js');
+
+const [, , specArg, ...args] = process.argv;
+if (!specArg || specArg.startsWith('--')) { console.error('Usage: sg-data-pack experiment <experiment.json> --out <dir> [--json]'); process.exit(2); }
+let out = null;
+let json = false;
+for (let index = 0; index < args.length; index += 1) {
+  const name = args[index];
+  if (name === '--json') { if (json) { console.error('Duplicate option: --json'); process.exit(2); } json = true; continue; }
+  if (name !== '--out') { console.error('Unknown option: ' + name); process.exit(2); }
+  if (out) { console.error('Duplicate option: --out'); process.exit(2); }
+  out = args[index + 1];
+  if (!out || out.startsWith('--')) { console.error('--out requires a value'); process.exit(2); }
+  index += 1;
+}
+if (!out) { console.error('experiment requires --out <dir>'); process.exit(2); }
+try {
+  const report = runExperiment({ specFile: path.resolve(specArg), outputRoot: path.resolve(out) });
+  if (json) process.stdout.write(JSON.stringify(report, null, 2) + '\n');
+  else {
+    console.log(`Experiment ${report.experimentId}`);
+    console.log(`pass rate: ${report.summary.passRate === null ? 'N/A' : (report.summary.passRate * 100).toFixed(1) + '%'} (${report.summary.passed}/${report.summary.validTrials})`);
+    console.log(`claim level: ${report.summary.claimLevel}`);
+    console.log(`report: ${path.resolve(out, 'EXPERIMENT.md')}`);
+  }
+  process.exit(report.summary.infraErrors || report.summary.invalidTrials ? 3 : report.summary.passed === report.summary.validTrials ? 0 : 1);
+} catch (error) { console.error('experiment: ' + error.message); process.exit(2); }
diff --git a/scripts/sg-pack-extract.js b/scripts/sg-pack-extract.js
index 2501b71..677f65d 100644
--- a/scripts/sg-pack-extract.js
+++ b/scripts/sg-pack-extract.js
@@ -11,12 +11,36 @@
 'use strict';
 const fs = require('node:fs');
 const path = require('node:path');
-const { runExtraction } = require('./lib/sg-pack-extract-core.js');
+const crypto = require('node:crypto');
+const { runExtraction, deepEqual } = require('./lib/sg-pack-extract-core.js');
 
-const name = process.argv[2];
-const checkOnly = process.argv.includes('--check');
-if (!name) {
-  console.error('Usage: node sg-pack-extract.js <path/to/config.js> [--check]');
+const [name, ...args] = process.argv.slice(2);
+const allowedFlags = new Set(['--check', '--compare-existing', '--check-output', '--force']);
+const seen = new Set();
+if (!name || name.startsWith('--')) {
+  console.error('Usage: node sg-pack-extract.js <path/to/config.js> [--check] [--compare-existing|--check-output] [--force]');
+  process.exit(2);
+}
+for (const flag of args) {
+  if (!allowedFlags.has(flag)) {
+    console.error('Unknown option: ' + flag);
+    process.exit(2);
+  }
+  if (seen.has(flag)) {
+    console.error('Duplicate option: ' + flag);
+    process.exit(2);
+  }
+  seen.add(flag);
+}
+if (seen.has('--compare-existing') && seen.has('--check-output')) {
+  console.error('--compare-existing and --check-output are aliases; use only one');
+  process.exit(2);
+}
+const compareExisting = seen.has('--compare-existing') || seen.has('--check-output');
+const checkOnly = seen.has('--check') || compareExisting;
+const force = seen.has('--force');
+if (force && checkOnly) {
+  console.error('--force is only valid when writing extract outputs');
   process.exit(2);
 }
 const configPath = path.resolve(process.cwd(), name.endsWith('.js') ? name : name + '.config.js');
@@ -62,26 +86,115 @@ if (equivalence.diffs.length) {
   console.error('Equivalence test failed: ' + equivalence.diffs.length + ' differences; aborting.');
   process.exit(1);
 }
-console.log('   - all ' + equivalence.comparisons + ' deep comparisons passed; data is lossless');
+const coverage = equivalence.coverage || { extracted: [], mapped: [], ignored: [], unmapped: [], complete: false };
+console.log('   - all ' + equivalence.comparisons + ' deep comparisons passed; configured equivalence surface is lossless');
+console.log('   - coverage: ' + coverage.mapped.length + ' mapped, ' + coverage.ignored.length + ' explicitly ignored, ' + coverage.unmapped.length + ' unmapped');
+
+const dataDir = path.join(config.libDir, 'lib', 'data');
+const dataPath = path.join(dataDir, 'data.json');
+let existingDiffs = null;
+if (compareExisting) {
+  if (!fs.existsSync(dataPath)) {
+    console.log('== Existing output drift: NOT_ASSESSED (data.json does not exist)');
+  } else {
+    try {
+      const existing = JSON.parse(fs.readFileSync(dataPath, 'utf8'));
+      existingDiffs = deepEqual(existing, pack, '$', []);
+    } catch (error) {
+      console.error('Existing data.json cannot be compared: ' + error.message);
+      process.exit(2);
+    }
+    if (existingDiffs.length) {
+      existingDiffs.slice(0, 20).forEach((diff) => console.error('   [OUTPUT-DRIFT] ' + diff));
+      console.error('Existing output drift detected: ' + existingDiffs.length + ' differences');
+      process.exit(1);
+    }
+    console.log('== Existing output drift: passed (data.json matches the fresh in-memory pack)');
+  }
+}
+
+function assertOutputPathSafe(directory, files) {
+  if (fs.existsSync(directory) && fs.lstatSync(directory).isSymbolicLink()) throw new Error('data output directory must not be a symlink');
+  for (const file of files) {
+    if (fs.existsSync(file) && fs.lstatSync(file).isSymbolicLink()) throw new Error('extract output must not be a symlink: ' + file);
+  }
+}
+
+function atomicWriteSet(outputs) {
+  const temporary = outputs.map(({ file, bytes }) => ({
+    file,
+    bytes,
+    temp: path.join(path.dirname(file), `.${path.basename(file)}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`),
+    backup: null,
+  }));
+  const installed = [];
+  try {
+    for (const output of temporary) {
+      let fd;
+      try {
+        fd = fs.openSync(output.temp, 'wx', 0o600);
+        fs.writeFileSync(fd, output.bytes);
+        fs.fsyncSync(fd);
+      } finally {
+        if (fd !== undefined) fs.closeSync(fd);
+      }
+    }
+    for (const output of temporary) {
+      if (!fs.existsSync(output.file)) continue;
+      output.backup = `${output.file}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.bak`;
+      fs.renameSync(output.file, output.backup);
+    }
+    for (const output of temporary) {
+      fs.renameSync(output.temp, output.file);
+      installed.push(output.file);
+    }
+    for (const output of temporary) if (output.backup) fs.unlinkSync(output.backup);
+  } catch (error) {
+    for (const output of temporary) { try { if (fs.existsSync(output.temp)) fs.unlinkSync(output.temp); } catch (_) { /* absent */ } }
+    for (const file of installed) { try { if (fs.existsSync(file)) fs.unlinkSync(file); } catch (_) { /* absent */ } }
+    const rollbackErrors = [];
+    for (const output of temporary) {
+      if (!output.backup) continue;
+      try { if (fs.existsSync(output.backup)) fs.renameSync(output.backup, output.file); } catch (rollbackError) { rollbackErrors.push(rollbackError.message); }
+    }
+    if (rollbackErrors.length) throw new Error(error.message + '; rollback incomplete: ' + rollbackErrors.join('; '));
+    throw error;
+  }
+}
 
 if (!checkOnly) {
-  const dataDir = path.join(config.libDir, 'lib', 'data');
   fs.mkdirSync(dataDir, { recursive: true });
   const json = JSON.stringify(pack, null, 2) + '\n';
-  fs.writeFileSync(path.join(dataDir, 'data.json'), json);
-  fs.writeFileSync(path.join(dataDir, 'data.js'),
-    '// @generated by sg-data-pack — do not edit by hand; modify data.json and regenerate\n' +
-    'globalThis.SG_DATA_PACK = ' + JSON.stringify(pack) + ';\n');
+  if (fs.existsSync(dataPath)) {
+    let existing;
+    try { existing = JSON.parse(fs.readFileSync(dataPath, 'utf8')); }
+    catch (error) { console.error('Existing data.json cannot be safely replaced: ' + error.message); process.exit(2); }
+    const diffs = deepEqual(existing, pack, '$', []);
+    if (diffs.length && !force) {
+      diffs.slice(0, 20).forEach((diff) => console.error('   [OUTPUT-DRIFT] ' + diff));
+      console.error('Refusing to overwrite an existing divergent data.json; review the drift or rerun with --force');
+      process.exit(1);
+    }
+  }
 
   const schema = JSON.parse(fs.readFileSync(path.join(__dirname, 'lib', 'data-pack.schema.json'), 'utf8'));
   schema.$id = 'https://sg.local/' + config.libId + '/data.schema.json';
   schema.title = 'SG Data Pack v1.3 — ' + config.libId + ' data contract';
   if (config.domainSchema) schema.properties.domain = config.domainSchema;
-  fs.writeFileSync(path.join(dataDir, 'data.schema.json'), JSON.stringify(schema, null, 2) + '\n');
+  const outputs = [
+    { file: dataPath, bytes: json },
+    { file: path.join(dataDir, 'data.js'), bytes: '// @generated by sg-data-pack — do not edit by hand; regenerate from the reviewed Data Pack source\n' + 'globalThis.SG_DATA_PACK = ' + JSON.stringify(pack) + ';\n' },
+    { file: path.join(dataDir, 'data.schema.json'), bytes: JSON.stringify(schema, null, 2) + '\n' },
+  ];
+  try {
+    assertOutputPathSafe(dataDir, outputs.map((item) => item.file));
+    atomicWriteSet(outputs);
+  } catch (error) {
+    console.error('Could not install extract outputs: ' + error.message);
+    process.exit(2);
+  }
 
   console.log('Written:');
-  console.log('   - ' + path.join(dataDir, 'data.json'));
-  console.log('   - ' + path.join(dataDir, 'data.js'));
-  console.log('   - ' + path.join(dataDir, 'data.schema.json'));
+  outputs.forEach((output) => console.log('   - ' + output.file));
 }
 console.log('✔ [' + config.libId + '] done');
diff --git a/scripts/sg-pack-grade.js b/scripts/sg-pack-grade.js
new file mode 100644
index 0000000..61d682a
--- /dev/null
+++ b/scripts/sg-pack-grade.js
@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { gradeWorkspace } = require('./lib/sg-grader.js');
+
+const [, , specArg, workspaceArg, ...args] = process.argv;
+const usage = 'Usage: sg-data-pack grade <grader.json> <workspace> [--artifacts dir] [--task-id id] [--tree sha256:...] [--out grade.json] [--json]';
+if (!specArg || !workspaceArg || specArg.startsWith('--') || workspaceArg.startsWith('--')) { console.error(usage); process.exit(2); }
+const values = new Set(['--artifacts', '--task-id', '--tree', '--out']);
+const booleans = new Set(['--json']);
+const options = {};
+for (let index = 0; index < args.length; index += 1) {
+  const name = args[index];
+  if (booleans.has(name)) { if (options[name]) { console.error(`Duplicate option: ${name}`); process.exit(2); } options[name] = true; continue; }
+  if (!values.has(name)) { console.error(`Unknown option: ${name}`); process.exit(2); }
+  const value = args[index + 1];
+  if (!value || value.startsWith('--')) { console.error(`${name} requires a value`); process.exit(2); }
+  if (options[name]) { console.error(`Duplicate option: ${name}`); process.exit(2); }
+  options[name] = value; index += 1;
+}
+try {
+  const spec = JSON.parse(fs.readFileSync(path.resolve(specArg), 'utf8'));
+  const report = gradeWorkspace({
+    spec, workspaceRoot: path.resolve(workspaceArg),
+    artifactRoot: options['--artifacts'] ? path.resolve(options['--artifacts']) : null,
+    taskId: options['--task-id'] || null, treeSha256: options['--tree'] || null,
+  });
+  const serialized = JSON.stringify(report, null, 2) + '\n';
+  if (options['--out']) fs.writeFileSync(path.resolve(options['--out']), serialized);
+  if (options['--json'] || !options['--out']) process.stdout.write(serialized);
+  else console.log(`grade: ${report.verdict} (${report.score}/${report.maximumScore})`);
+  process.exit(report.verdict === 'passed' ? 0 : 1);
+} catch (error) { console.error('grade: ' + error.message); process.exit(error.code === 'INVALID_GRADER_SPEC' ? 2 : 3); }
diff --git a/scripts/sg-pack-report.js b/scripts/sg-pack-report.js
index 6a901be..627b513 100644
--- a/scripts/sg-pack-report.js
+++ b/scripts/sg-pack-report.js
@@ -5,7 +5,7 @@
  * Usage:
  *   sg-data-pack report <libDir> [--config config.js] [--baseline old.json]
  *     [--review review-report.json] [--audit candidate-audit.json]
- *     [--strict] [--verify-hash] [--out report-dir] [--json]
+ *     [--strict] [--verify-hash] [--asset-root dir] [--out report-dir] [--json]
  */
 'use strict';
 const fs = require('node:fs');
@@ -24,13 +24,13 @@ const { sha256: reviewSha256, stableJson: reviewStableJson } = require('./lib/sg
 const { renderJson, renderTerminalSummary, renderMarkdown } = require('./lib/sg-report-renderer.js');
 
 const [, , libDirArg, ...args] = process.argv;
-const usage = 'Usage: sg-data-pack report <libDir> [--config config.js] [--baseline old.json] [--review review-report.json] [--audit candidate-audit.json] [--strict] [--verify-hash] [--out report-dir] [--json]';
+const usage = 'Usage: sg-data-pack report <libDir> [--config config.js] [--baseline old.json] [--review review-report.json] [--audit candidate-audit.json] [--strict] [--verify-hash] [--asset-root dir] [--out report-dir] [--json]';
 if (!libDirArg || libDirArg.startsWith('--')) {
   console.error(usage);
   process.exit(2);
 }
 
-const valueFlags = new Set(['--config', '--baseline', '--review', '--audit', '--out']);
+const valueFlags = new Set(['--config', '--baseline', '--review', '--audit', '--asset-root', '--out']);
 const booleanFlags = new Set(['--strict', '--verify-hash', '--json']);
 const options = {};
 for (let index = 0; index < args.length; index += 1) {
@@ -66,6 +66,7 @@ const baselinePath = options['--baseline'] ? path.resolve(options['--baseline'])
 const reviewPath = options['--review'] ? path.resolve(options['--review']) : null;
 const auditPath = options['--audit'] ? path.resolve(options['--audit']) : null;
 const outDir = options['--out'] ? path.resolve(options['--out']) : null;
+const assetRoot = options['--asset-root'] ? path.resolve(options['--asset-root']) : null;
 const strict = Boolean(options['--strict']);
 const verifyHash = Boolean(options['--verify-hash']);
 const asJson = Boolean(options['--json']);
@@ -107,8 +108,18 @@ if (outDir) {
   const outputRoot = canonicalPath(outDir);
   const relativeLibraryOutput = path.relative(libraryRoot, outputRoot);
   const insideLibrary = relativeLibraryOutput === '' || (!relativeLibraryOutput.startsWith('..' + path.sep) && relativeLibraryOutput !== '..' && !path.isAbsolute(relativeLibraryOutput));
-  if (insideLibrary || sameFile(outputs[0], outputs[1]) || outputs.some((output) => inputs.some((input) => sameFile(output, input)))) {
-    console.error('report output paths must be outside the source library and must not overwrite an input file');
+  if (insideLibrary) {
+    const suggestion = path.join(path.dirname(libraryRoot), path.basename(libraryRoot) + '-report');
+    console.error(`Report output is inside the source library:\n  source: ${libraryRoot}\n  output: ${outputRoot}\nUse a sibling directory, for example:\n  --out ${suggestion}`);
+    process.exit(2);
+  }
+  if (sameFile(outputs[0], outputs[1])) {
+    console.error(`Report outputs resolve to the same file:\n  ${canonicalPath(outputs[0])}\n  ${canonicalPath(outputs[1])}`);
+    process.exit(2);
+  }
+  const collision = outputs.find((output) => inputs.some((input) => sameFile(output, input)));
+  if (collision) {
+    console.error(`Report output must not overwrite a consumed input:\n  output: ${canonicalPath(collision)}`);
     process.exit(2);
   }
 }
@@ -385,11 +396,12 @@ function collectReport() {
 
   try {
     if (!fs.existsSync(libDir) || !fs.statSync(libDir).isDirectory()) throw new Error(`library directory not found: ${libDir}`);
-    packInspection = inspectPack({ dataFile, verifyHash });
+    packInspection = inspectPack({ dataFile, verifyHash, assetRoot });
     pack = packInspection.pack;
     libId = pack && pack.meta && pack.meta.id || libId;
     inputs.dataFile = safeRelative(dataFile);
     inputs.dataSha256 = packInspection.digest;
+    if (assetRoot) inputs.assetRoot = safeRelative(assetRoot);
     inputs.consumedFiles = Object.fromEntries(Object.entries(packInspection.consumedFiles || {}).map(([file, digest]) => [canonicalPath(file), digest]));
     raw.validation = packInspection.validation;
     raw.assets = packInspection.assets;
diff --git a/scripts/sg-pack-rules.js b/scripts/sg-pack-rules.js
index 2128290..11863fe 100644
--- a/scripts/sg-pack-rules.js
+++ b/scripts/sg-pack-rules.js
@@ -3,28 +3,59 @@
  * sg-pack-rules.js — library-level data-rules executor
  *
  * Usage:
- *   node sg-pack-rules.js <libDir> [--strict]
- *   node sg-pack-rules.js <path/to/data-rules.json> [--strict]
+ *   node sg-pack-rules.js <libDir | data-rules.json> [--strict] [--rule <id>]
  */
 'use strict';
 const fs = require('node:fs');
 const path = require('node:path');
 const { executeRules } = require('./lib/sg-pack-rules-core.js');
 
-const arg = process.argv[2];
-const strict = process.argv.includes('--strict');
-if (!arg) {
-  console.error('Usage: node sg-pack-rules.js <libDir | data-rules.json> [--strict]');
+const usage = 'Usage: node sg-pack-rules.js <libDir | data-rules.json> [--strict] [--rule <id>]';
+
+function parseArgs(argv) {
+  let input = null;
+  let strict = false;
+  let ruleId = null;
+  const seen = new Set();
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === '--strict') {
+      if (seen.has(arg)) throw new Error('duplicate option: --strict');
+      seen.add(arg);
+      strict = true;
+      continue;
+    }
+    if (arg === '--rule') {
+      if (seen.has(arg)) throw new Error('duplicate option: --rule');
+      seen.add(arg);
+      if (i + 1 >= argv.length || argv[i + 1].startsWith('--')) throw new Error('--rule requires an id');
+      ruleId = argv[++i];
+      continue;
+    }
+    if (arg.startsWith('-')) throw new Error('unknown option: ' + arg);
+    if (input !== null) throw new Error('unexpected positional argument: ' + arg);
+    input = arg;
+  }
+  if (!input) throw new Error('library or rules path is required');
+  return { input, strict, ruleId };
+}
+
+let options;
+try {
+  options = parseArgs(process.argv.slice(2));
+} catch (error) {
+  console.error(error.message);
+  console.error(usage);
   process.exit(2);
 }
 
 let rulesFile;
 let dataFile;
-if (fs.existsSync(arg) && fs.statSync(arg).isDirectory()) {
-  rulesFile = path.join(arg, 'lib', 'data', 'data-rules.json');
-  dataFile = path.join(arg, 'lib', 'data', 'data.json');
+if (fs.existsSync(options.input) && fs.statSync(options.input).isDirectory()) {
+  rulesFile = path.join(options.input, 'lib', 'data', 'data-rules.json');
+  dataFile = path.join(options.input, 'lib', 'data', 'data.json');
 } else {
-  rulesFile = path.resolve(process.cwd(), arg);
+  rulesFile = path.resolve(process.cwd(), options.input);
   dataFile = path.join(path.dirname(rulesFile), 'data.json');
 }
 for (const file of [rulesFile, dataFile]) {
@@ -41,12 +72,21 @@ catch (error) { console.error('data-rules.json parse failed: ' + error.message);
 try { pack = JSON.parse(fs.readFileSync(dataFile, 'utf8')); }
 catch (error) { console.error('data.json parse failed: ' + error.message); process.exit(1); }
 
-const result = executeRules(rulesDoc, pack);
+const ruleIds = options.ruleId === null ? undefined : [options.ruleId];
+const result = executeRules(rulesDoc, pack, { ruleIds });
 if (result.structuralErrors.length) {
   result.structuralErrors.forEach((error) => console.error('[STRUCT] ' + error));
   console.error('✖ Rules-file structural check failed: ' + result.structuralErrors.length + ' error(s)');
   process.exit(1);
 }
+if (result.selectionErrors && result.selectionErrors.length) {
+  result.selectionErrors.forEach((error) => console.error('[SELECT] ' + error));
+  process.exit(2);
+}
+if (result.unknownRuleIds.length) {
+  console.error('Unknown rule id: ' + result.unknownRuleIds.join(', '));
+  process.exit(2);
+}
 
 for (const item of result.results) {
   if (item.status === 'passed' || item.status === 'no-check') continue;
@@ -67,7 +107,7 @@ if (counts.hardFail || counts.errors) {
   console.error('✖ Rules check failed');
   process.exit(1);
 }
-if (strict && counts.softFail) {
+if (options.strict && counts.softFail) {
   console.error('✖ Strict mode: ' + counts.softFail + ' soft failure(s)');
   process.exit(1);
 }
diff --git a/scripts/sg-pack-task.js b/scripts/sg-pack-task.js
new file mode 100644
index 0000000..0ae47a6
--- /dev/null
+++ b/scripts/sg-pack-task.js
@@ -0,0 +1,87 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const { validateTaskManifest, readTaskManifest } = require('./lib/agent-task-manifest.js');
+const { runTask } = require('./lib/sg-task-runner.js');
+
+const [, , action, taskArg, ...args] = process.argv;
+const usage = [
+  'Usage:',
+  '  sg-data-pack task validate <task.json> [--shape-only] [--json]',
+  '  sg-data-pack task inspect <task.json> [--json]',
+  '  sg-data-pack task run <task.json> --agent-command <exe> [--agent-arg <arg>]... --artifacts <dir> [--provider name] [--model name] [--json]',
+].join('\n');
+if (!action || !taskArg || !['validate', 'inspect', 'run'].includes(action)) { console.error(usage); process.exit(2); }
+
+function parse(allowedValue, allowedBoolean, repeatable = new Set()) {
+  const options = {};
+  for (let index = 0; index < args.length; index += 1) {
+    const name = args[index];
+    if (allowedBoolean.has(name)) {
+      if (Object.prototype.hasOwnProperty.call(options, name)) throw new Error(`Duplicate option: ${name}`);
+      options[name] = true;
+      continue;
+    }
+    if (!allowedValue.has(name)) throw new Error(`Unknown option: ${name}`);
+    const value = args[index + 1];
+    if (!value || value.startsWith('--')) throw new Error(`${name} requires a value`);
+    if (repeatable.has(name)) {
+      if (!options[name]) options[name] = [];
+      options[name].push(value);
+    } else {
+      if (Object.prototype.hasOwnProperty.call(options, name)) throw new Error(`Duplicate option: ${name}`);
+      options[name] = value;
+    }
+    index += 1;
+  }
+  return options;
+}
+
+let options;
+try {
+  options = action === 'run'
+    ? parse(new Set(['--agent-command', '--agent-arg', '--artifacts', '--provider', '--model']), new Set(['--json', '--keep-workspace']), new Set(['--agent-arg']))
+    : parse(new Set(), new Set(['--json', '--shape-only']));
+} catch (error) { console.error(error.message); process.exit(2); }
+const taskFile = path.resolve(taskArg);
+
+try {
+  if (action === 'validate' || action === 'inspect') {
+    const manifest = JSON.parse(fs.readFileSync(taskFile, 'utf8'));
+    const validation = validateTaskManifest(manifest, {
+      taskFile,
+      verifyFiles: !options['--shape-only'],
+      verifyTree: !options['--shape-only'],
+    });
+    if (options['--json']) process.stdout.write(JSON.stringify({ manifest: action === 'inspect' ? manifest : undefined, validation }, null, 2) + '\n');
+    else {
+      console.log(`Agent task ${manifest.taskId || '<missing>'}: ${validation.valid ? 'valid' : 'invalid'}`);
+      console.log(`source: ${validation.sourceRoot || 'not resolved'}`);
+      validation.issues.forEach((item) => console.error(`  ${item.path}: ${item.message}`));
+    }
+    process.exit(validation.valid ? 0 : 2);
+  }
+  if (!options['--agent-command'] || !options['--artifacts']) throw new Error('task run requires --agent-command and --artifacts');
+  readTaskManifest(taskFile);
+  const agentArgv = [options['--agent-command'], ...(options['--agent-arg'] || [])];
+  const result = runTask({
+    taskFile,
+    agentArgv,
+    artifactRoot: path.resolve(options['--artifacts']),
+    agent: { provider: options['--provider'] || null, model: options['--model'] || null },
+    keepWorkspace: Boolean(options['--keep-workspace']),
+  });
+  if (options['--json']) process.stdout.write(JSON.stringify(result.report, null, 2) + '\n');
+  else {
+    console.log(`TaskRun ${result.report.runId}`);
+    console.log(`verdict: ${result.report.verdict}`);
+    console.log(`patch: ${result.report.patch ? result.report.patch.status : 'not produced'}`);
+    result.report.grades.forEach((grade) => console.log(`grade ${grade.graderId}: ${grade.verdict} (${grade.score}/${grade.maximumScore})`));
+    console.log(`report: ${result.runFile}`);
+  }
+  process.exit(result.report.termination.processExitCode);
+} catch (error) {
+  console.error(`task ${action}: ${error.message}`);
+  process.exit(error.kind === 'input-error' || error.code && /MANIFEST/.test(error.code) ? 2 : 3);
+}
diff --git a/scripts/sg-pack-validate.js b/scripts/sg-pack-validate.js
index 6d0ad78..59a060e 100644
--- a/scripts/sg-pack-validate.js
+++ b/scripts/sg-pack-validate.js
@@ -1,50 +1,62 @@
 #!/usr/bin/env node
 /*
  * sg-pack-validate.js — standalone Data Pack validation CLI
- * Usage: node sg-pack-validate.js <path/to/data.json> [--strict] [--verify-hash]
+ * Usage: node sg-pack-validate.js <path/to/data.json> [--strict] [--verify-hash] [--asset-root <dir>]
  *   --strict:      warnings also fail (exit 1)
  *   --verify-hash: recompute sha1 of local assets and compare against the manifest
+ *   --asset-root:  physical asset directory override (defaults to <lib>/lib/assets)
  */
 'use strict';
-const fs = require('fs');
-const path = require('path');
+const fs = require('node:fs');
+const path = require('node:path');
+const { inspectAssets } = require('./lib/sg-pack-inspect.js');
 
 require(path.join(__dirname, 'lib', 'sg-data-loader.js'));
 
-const file = process.argv[2];
-const strict = process.argv.includes('--strict');
-const verifyHash = process.argv.includes('--verify-hash');
-if (!file) { console.error('Usage: node sg-pack-validate.js <data.json> [--strict] [--verify-hash]'); process.exit(2); }
+const [file, ...args] = process.argv.slice(2);
+const usage = 'Usage: node sg-pack-validate.js <data.json> [--strict] [--verify-hash] [--asset-root <dir>]';
+if (!file || file.startsWith('--')) { console.error(usage); process.exit(2); }
+const options = {};
+for (let index = 0; index < args.length; index += 1) {
+  const name = args[index];
+  if (!['--strict', '--verify-hash', '--asset-root'].includes(name)) {
+    console.error('Unknown option: ' + name);
+    process.exit(2);
+  }
+  if (Object.prototype.hasOwnProperty.call(options, name)) {
+    console.error('Duplicate option: ' + name);
+    process.exit(2);
+  }
+  if (name === '--asset-root') {
+    const value = args[index + 1];
+    if (!value || value.startsWith('--')) { console.error('--asset-root requires a value'); process.exit(2); }
+    options[name] = path.resolve(value);
+    index += 1;
+  } else options[name] = true;
+}
+const strict = Boolean(options['--strict']);
+const verifyHash = Boolean(options['--verify-hash']);
 
 let pack;
 try {
   pack = JSON.parse(fs.readFileSync(file, 'utf8'));
-} catch (e) {
-  console.error('JSON parse failed: ' + e.message);
+} catch (error) {
+  console.error('JSON parse failed: ' + error.message);
   process.exit(1);
 }
 
-const r = globalThis.SGDataLoader.validate(pack);
-
-/* --verify-hash: recompute sha1 of local assets and compare (detects replaced/tampered files) */
-if (verifyHash && pack.assets && typeof pack.assets === 'object') {
-  const crypto = require('crypto');
-  const libBase = path.resolve(path.dirname(file), '..'); // <lib>/lib
-  for (const [p, a] of Object.entries(pack.assets)) {
-    if (!a || !a.hash || /^https?:\/\//i.test(p)) continue;
-    const abs = path.join(libBase, 'assets', p.replace(/^(\.\.\/)?assets\//, ''));
-    try {
-      const actual = 'sha1:' + crypto.createHash('sha1').update(fs.readFileSync(abs)).digest('hex');
-      if (actual !== a.hash) r.errors.push('hash mismatch: ' + p + ' (manifest ' + a.hash.slice(0, 14) + '… vs actual ' + actual.slice(0, 14) + '…)');
-    } catch (_) {
-      r.errors.push('hash check failed (file unreadable): ' + p);
-    }
+const result = globalThis.SGDataLoader.validate(pack);
+if (verifyHash) {
+  const assets = inspectAssets(pack, path.resolve(file), { verifyHash: true, assetRoot: options['--asset-root'] });
+  for (const item of assets.mismatches) {
+    result.errors.push('hash mismatch: ' + item.path + ' (manifest ' + item.expected.slice(0, 14) + '… vs actual ' + item.actual.slice(0, 14) + '…)');
   }
+  for (const item of assets.missing) result.errors.push('hash check failed (file unreadable or unsafe): ' + item.path + (item.error ? ' (' + item.error + ')' : ''));
 }
 
-r.errors.forEach(e => console.error('[ERROR] ' + e));
-r.warnings.forEach(w => console.warn('[warn]  ' + w));
+result.errors.forEach((error) => console.error('[ERROR] ' + error));
+result.warnings.forEach((warning) => console.warn('[warn]  ' + warning));
 
-if (r.errors.length) { console.error('✖ Validation failed: ' + r.errors.length + ' error(s)'); process.exit(1); }
-if (strict && r.warnings.length) { console.error('✖ Strict mode: ' + r.warnings.length + ' warning(s)'); process.exit(1); }
-console.log('✔ Validation passed (' + r.warnings.length + ' warning(s))');
+if (result.errors.length) { console.error('✖ Validation failed: ' + result.errors.length + ' error(s)'); process.exit(1); }
+if (strict && result.warnings.length) { console.error('✖ Strict mode: ' + result.warnings.length + ' warning(s)'); process.exit(1); }
+console.log('✔ Validation passed (' + result.warnings.length + ' warning(s))');
diff --git a/tests/agent-task-manifest.test.js b/tests/agent-task-manifest.test.js
new file mode 100644
index 0000000..c185dc5
--- /dev/null
+++ b/tests/agent-task-manifest.test.js
@@ -0,0 +1,180 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { test } = require('node:test');
+const {
+  canonicalJson,
+  computeTaskId,
+  computeTreeSha256,
+  readTaskManifest,
+  sha256,
+  validateTaskManifest,
+} = require('../scripts/lib/agent-task-manifest.js');
+
+const FIXTURE = path.join(__dirname, 'fixtures', 'agent-tasks', 'ready');
+const TASK_FILE = path.join(FIXTURE, 'task.json');
+
+function fixtureManifest() {
+  return JSON.parse(fs.readFileSync(TASK_FILE, 'utf8'));
+}
+
+function clone(value) {
+  return JSON.parse(JSON.stringify(value));
+}
+
+function validation(manifest, options = {}) {
+  return validateTaskManifest(manifest, { taskFile: TASK_FILE, ...options });
+}
+
+test('ready manifest is valid, read-only, and has stable canonical identity', () => {
+  const manifest = fixtureManifest();
+  const before = JSON.stringify(manifest);
+  const result = validation(manifest, { verifyFiles: true, verifyTree: true });
+  assert.equal(result.valid, true, result.issues.map((item) => `${item.path}: ${item.message}`).join('\n'));
+  assert.equal(result.taskId, computeTaskId(manifest));
+  assert.equal(result.sourceRoot, path.join(FIXTURE, 'source'));
+  assert.equal(readTaskManifest(TASK_FILE).taskId, manifest.taskId);
+  assert.equal(JSON.stringify(manifest), before);
+  assert.equal(canonicalJson({ b: { d: 2, c: 1 }, a: 0 }), '{"a":0,"b":{"c":1,"d":2}}');
+  assert.equal(computeTreeSha256(path.join(FIXTURE, 'source')), manifest.source.treeSha256);
+});
+
+test('taskId tampering is rejected and can be recomputed', () => {
+  const manifest = fixtureManifest();
+  manifest.taskId = sha256('tampered');
+  const result = validation(manifest);
+  assert.equal(result.valid, false);
+  assert.match(result.issues.find((item) => item.path === 'taskId').message, /does not match canonical/);
+  assert.equal(computeTaskId(manifest), fixtureManifest().taskId);
+});
+
+test('stale input digest is rejected when files are verified', () => {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'agent-task-stale-'));
+  try {
+    const taskFile = path.join(directory, 'task.json');
+    const source = path.join(directory, 'source');
+    fs.mkdirSync(source);
+    fs.copyFileSync(path.join(FIXTURE, 'source', 'input.txt'), path.join(source, 'input.txt'));
+    const manifest = fixtureManifest();
+    manifest.source.root = 'source';
+    manifest.source.treeSha256 = sha256('not-the-new-tree');
+    manifest.inputs[0].sha256 = sha256('not-the-file');
+    manifest.taskId = computeTaskId(manifest);
+    fs.writeFileSync(taskFile, JSON.stringify(manifest));
+    const result = validateTaskManifest(manifest, { taskFile, verifyFiles: true });
+    assert.equal(result.valid, false);
+    assert.match(result.issues.find((item) => item.path === 'inputs[0].sha256').message, /stale/);
+  } finally {
+    fs.rmSync(directory, { recursive: true, force: true });
+  }
+});
+
+test('stale grader spec or hidden grader tree is rejected when files are verified', () => {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'agent-task-grader-stale-'));
+  try {
+    fs.cpSync(FIXTURE, directory, { recursive: true });
+    const taskFile = path.join(directory, 'task.json');
+    const manifest = JSON.parse(fs.readFileSync(taskFile, 'utf8'));
+    fs.appendFileSync(path.join(directory, 'grader', 'spec.json'), '\n');
+    let result = validateTaskManifest(manifest, { taskFile, verifyFiles: true });
+    assert.equal(result.valid, false);
+    assert.ok(result.issues.some((item) => item.path === 'graders[0].sha256' && /stale/.test(item.message)));
+    fs.writeFileSync(path.join(directory, 'grader', 'spec.json'), fs.readFileSync(path.join(FIXTURE, 'grader', 'spec.json')));
+    fs.writeFileSync(path.join(directory, 'grader', 'hidden.txt'), 'changed hidden reference');
+    result = validateTaskManifest(manifest, { taskFile, verifyFiles: true });
+    assert.equal(result.valid, false);
+    assert.ok(result.issues.some((item) => item.path === 'graders[0].treeSha256' && /stale/.test(item.message)));
+  } finally {
+    fs.rmSync(directory, { recursive: true, force: true });
+  }
+});
+
+test('absolute, traversal, NUL, and backslash paths are rejected', () => {
+  const cases = [
+    ['/absolute.txt', 'must be a relative path'],
+    ['../escape.txt', 'must not contain .. path segments'],
+    ['dir/../escape.txt', 'must not contain .. path segments'],
+    ['bad\\path.txt', 'must use POSIX separators'],
+    ['bad\u0000path.txt', 'must not contain NUL'],
+  ];
+  for (const [badPath, expected] of cases) {
+    const manifest = fixtureManifest();
+    manifest.inputs[0].path = badPath;
+    manifest.taskId = computeTaskId(manifest);
+    const result = validation(manifest);
+    assert.equal(result.valid, false, badPath);
+    assert.ok(result.issues.some((item) => item.path === 'inputs[0].path' && item.message.includes(expected)), `${badPath}: ${JSON.stringify(result.issues)}`);
+  }
+});
+
+test('missing digests and duplicate ids/patterns are rejected', () => {
+  const missingDigest = fixtureManifest();
+  delete missingDigest.inputs[0].sha256;
+  missingDigest.taskId = computeTaskId(missingDigest);
+  const digestResult = validation(missingDigest);
+  assert.ok(digestResult.issues.some((item) => item.path === 'inputs[0].sha256' && item.message.includes('sha256')));
+
+  const duplicateId = fixtureManifest();
+  duplicateId.inputs.push(clone(duplicateId.inputs[0]));
+  duplicateId.taskId = computeTaskId(duplicateId);
+  const idResult = validation(duplicateId);
+  assert.ok(idResult.issues.some((item) => item.path === 'inputs[1].id' && item.message.includes('duplicate id')));
+
+  const duplicateGraderId = fixtureManifest();
+  duplicateGraderId.graders.push(clone(duplicateGraderId.graders[0]));
+  duplicateGraderId.taskId = computeTaskId(duplicateGraderId);
+  const graderIdResult = validation(duplicateGraderId);
+  assert.ok(graderIdResult.issues.some((item) => item.path === 'graders[1].id' && item.message.includes('duplicate id')));
+
+  const duplicatePattern = fixtureManifest();
+  duplicatePattern.filePolicy.allowed.push(clone(duplicatePattern.filePolicy.allowed[0]));
+  duplicatePattern.taskId = computeTaskId(duplicatePattern);
+  const patternResult = validation(duplicatePattern);
+  assert.ok(patternResult.issues.some((item) => item.path === 'filePolicy.allowed[1].pattern' && item.message.includes('duplicate pattern')));
+});
+
+test('unknown top-level fields are rejected', () => {
+  const manifest = fixtureManifest();
+  manifest.notPartOfV1 = true;
+  manifest.taskId = computeTaskId(manifest);
+  const result = validation(manifest);
+  assert.ok(result.issues.some((item) => item.path === '$.notPartOfV1' && item.message === 'unknown field'));
+  assert.equal(result.valid, false);
+});
+
+test('resource and locked-down policy bounds are enforced', () => {
+  const cases = [
+    ['execution.timeoutMs', 0],
+    ['execution.timeoutMs', 86400001],
+    ['execution.maxOutputBytes', 0],
+    ['execution.maxOutputBytes', 1073741825],
+    ['filePolicy.maxChangedFiles', -1],
+    ['filePolicy.maxPatchBytes', 1073741825],
+  ];
+  for (const [field, value] of cases) {
+    const manifest = fixtureManifest();
+    const [section, key] = field.split('.');
+    manifest[section][key] = value;
+    manifest.taskId = computeTaskId(manifest);
+    const result = validation(manifest);
+    assert.ok(result.issues.some((item) => item.path === field), `${field}: ${JSON.stringify(result.issues)}`);
+  }
+  for (const [field, value] of [
+    ['filePolicy.denyPrecedence', false],
+    ['filePolicy.allowSymlinks', true],
+    ['filePolicy.allowHardlinks', true],
+    ['patchPolicy.fuzz', 1],
+    ['patchPolicy.allowBinary', true],
+    ['execution.network', 'on'],
+  ]) {
+    const manifest = fixtureManifest();
+    const [section, key] = field.split('.');
+    manifest[section][key] = value;
+    manifest.taskId = computeTaskId(manifest);
+    const result = validation(manifest);
+    assert.ok(result.issues.some((item) => item.path === field), `${field}: ${JSON.stringify(result.issues)}`);
+  }
+});
diff --git a/tests/command-runner.test.js b/tests/command-runner.test.js
new file mode 100644
index 0000000..5aa3bb0
--- /dev/null
+++ b/tests/command-runner.test.js
@@ -0,0 +1,153 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { test } = require('node:test');
+const { runCommand } = require('../scripts/lib/sg-command-runner.js');
+
+function tempDirectory() {
+  return fs.mkdtempSync(path.join(os.tmpdir(), 'sg-command-runner-'));
+}
+
+function cleanup(directory) {
+  fs.rmSync(directory, { recursive: true, force: true });
+}
+
+test('runner executes argv without a shell and returns structured success output', () => {
+  const root = tempDirectory();
+  try {
+    const result = runCommand([process.execPath, '-e', 'process.stdout.write(process.argv[1])', 'hello world'], {
+      allowedRoot: root,
+      cwd: root,
+      envAllowlist: ['PATH'],
+    });
+    assert.equal(result.exit, 0);
+    assert.equal(result.signal, null);
+    assert.equal(result.timedOut, false);
+    assert.equal(result.stdout, 'hello world');
+    assert.equal(result.stderr, '');
+    assert.equal(result.truncated, false);
+    assert.equal(typeof result.duration, 'number');
+  } finally {
+    cleanup(root);
+  }
+});
+
+test('runner accepts the structured object API and reports compatibility fields', () => {
+  const root = tempDirectory();
+  try {
+    const result = runCommand({
+      argv: [process.execPath, '-e', 'process.stdout.write("ok")'],
+      cwd: root,
+      allowedRoot: root,
+      timeoutMs: 1000,
+      maxOutputBytes: 64,
+      envAllowlist: ['PATH'],
+    });
+    assert.deepEqual(result.argv, [process.execPath, '-e', 'process.stdout.write("ok")']);
+    assert.equal(result.cwd, fs.realpathSync(root));
+    assert.equal(result.status, 0);
+    assert.equal(result.exitCode, 0);
+    assert.equal(result.stdout, 'ok');
+    assert.equal(result.stdoutTruncated, false);
+    assert.equal(result.stderrTruncated, false);
+    assert.equal(typeof result.durationMs, 'number');
+    assert.equal(result.error, undefined);
+  } finally {
+    cleanup(root);
+  }
+});
+
+test('runner does not interpret shell metacharacters', () => {
+  const root = tempDirectory();
+  try {
+    const result = runCommand([process.execPath, '-e', 'process.stdout.write(process.argv[1])', 'a; touch created-by-shell'], {
+      allowedRoot: root,
+      cwd: root,
+    });
+    assert.equal(result.exit, 0);
+    assert.equal(result.stdout, 'a; touch created-by-shell');
+    assert.equal(fs.existsSync(path.join(root, 'created-by-shell')), false);
+  } finally {
+    cleanup(root);
+  }
+});
+
+test('runner rejects cwd outside allowed root and rejects non-array argv', () => {
+  const root = tempDirectory();
+  const outside = tempDirectory();
+  try {
+    assert.throws(() => runCommand([process.execPath, '-e', ''], { allowedRoot: root, cwd: outside }), /outside allowed root/);
+    assert.throws(() => runCommand('node', { allowedRoot: root, cwd: root }), /argv must be a non-empty array/);
+    assert.throws(() => runCommand([process.execPath, '-e', ''], { allowedRoot: root, cwd: root, envAllowlist: ['BAD-NAME'] }), /environment variable names/);
+  } finally {
+    cleanup(root);
+    cleanup(outside);
+  }
+});
+
+test('runner preserves nonzero exit status and stderr', () => {
+  const root = tempDirectory();
+  try {
+    const result = runCommand([process.execPath, '-e', 'process.stderr.write("bad"); process.exit(7)'], {
+      allowedRoot: root,
+      cwd: root,
+    });
+    assert.equal(result.exit, 7);
+    assert.equal(result.signal, null);
+    assert.equal(result.timedOut, false);
+    assert.equal(result.stderr, 'bad');
+  } finally {
+    cleanup(root);
+  }
+});
+
+test('runner reports timeout and does not hang', () => {
+  const root = tempDirectory();
+  try {
+    const result = runCommand([process.execPath, '-e', 'setTimeout(() => {}, 5000)'], {
+      allowedRoot: root,
+      cwd: root,
+      timeout: 50,
+    });
+    assert.equal(result.exit, null);
+    assert.equal(result.timedOut, true);
+    assert.equal(result.signal, 'SIGTERM');
+  } finally {
+    cleanup(root);
+  }
+});
+
+test('runner bounds output and marks truncation', () => {
+  const root = tempDirectory();
+  try {
+    const result = runCommand([process.execPath, '-e', 'process.stdout.write("x".repeat(10000))'], {
+      allowedRoot: root,
+      cwd: root,
+      maxBuffer: 128,
+    });
+    assert.equal(result.exit, null);
+    assert.equal(result.truncated, true);
+    assert.equal(Buffer.byteLength(result.stdout), 128);
+  } finally {
+    cleanup(root);
+  }
+});
+
+test('runner applies an environment allowlist', () => {
+  const root = tempDirectory();
+  try {
+    const result = runCommand([process.execPath, '-e', 'process.stdout.write(JSON.stringify({allowed:process.env.SG_ALLOWED, blocked:process.env.SG_BLOCKED}))'], {
+      allowedRoot: root,
+      cwd: root,
+      env: { SG_ALLOWED: 'yes', SG_BLOCKED: 'no' },
+      envAllowlist: ['PATH', 'SG_ALLOWED'],
+    });
+    assert.equal(result.exit, 0);
+    assert.deepEqual(JSON.parse(result.stdout), { allowed: 'yes' });
+  } finally {
+    cleanup(root);
+  }
+});
diff --git a/tests/compile-cli.test.js b/tests/compile-cli.test.js
new file mode 100644
index 0000000..3edaed5
--- /dev/null
+++ b/tests/compile-cli.test.js
@@ -0,0 +1,94 @@
+'use strict';
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+
+const ROOT = path.join(__dirname, '..');
+const CLI = path.join(ROOT, 'scripts', 'sg-data-pack');
+function run(args) { return spawnSync(process.execPath, [CLI, ...args], { cwd: ROOT, encoding: 'utf8' }); }
+function pack() {
+  return {
+    schemaVersion: '1.3', meta: { id: 'compile-fixture', title: 'Compile fixture' },
+    entities: { alice: { kind: 'person', name: 'Alice' } }, aliases: { Alice: 'alice' },
+    stages: [{ key: 'main', name: 'Main', entities: ['alice'] }],
+  };
+}
+
+test('compile derives data.js and schema from reviewed data.json and detects drift', () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-compile-'));
+  const data = path.join(root, 'data.json');
+  try {
+    fs.writeFileSync(data, JSON.stringify(pack(), null, 2) + '\n');
+    const compile = run(['compile', data]);
+    assert.equal(compile.status, 0, compile.stderr);
+    const script = fs.readFileSync(path.join(root, 'data.js'), 'utf8');
+    assert.match(script, /globalThis\.SG_DATA_PACK/);
+    assert.match(script, /"compile-fixture"/);
+    assert.equal(run(['compile', data, '--check']).status, 0);
+    fs.appendFileSync(path.join(root, 'data.js'), '// drift\n');
+    const drift = run(['compile', data, '--check']);
+    assert.equal(drift.status, 1);
+    assert.match(drift.stderr, /output drift/);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('compile refuses to erase a custom domain schema without an explicit fragment', () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-compile-domain-'));
+  const data = path.join(root, 'data.json');
+  const fragment = path.join(root, 'domain.fragment.json');
+  const schema = path.join(root, 'data.schema.json');
+  try {
+    const value = pack();
+    value.domain = { cardOrder: ['alice'] };
+    fs.writeFileSync(data, JSON.stringify(value, null, 2) + '\n');
+    fs.writeFileSync(fragment, JSON.stringify({ type: 'object', required: ['cardOrder'], properties: { cardOrder: { type: 'array', items: { type: 'string' } } }, additionalProperties: false }, null, 2) + '\n');
+    assert.equal(run(['compile', data, '--domain-schema', fragment]).status, 0);
+    const generated = JSON.parse(fs.readFileSync(schema, 'utf8'));
+    assert.deepEqual(generated.properties.domain, JSON.parse(fs.readFileSync(fragment, 'utf8')));
+
+    const rejected = run(['compile', data]);
+    assert.equal(rejected.status, 1);
+    assert.match(rejected.stderr, /custom domain schema/);
+    assert.match(rejected.stderr, /--domain-schema/);
+    assert.deepEqual(JSON.parse(fs.readFileSync(schema, 'utf8')).properties.domain, generated.properties.domain, 'failed compile must preserve the custom schema');
+    assert.equal(run(['compile', data, '--domain-schema', fragment, '--check']).status, 0);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('compile preserves boolean domain schemas', () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-compile-boolean-domain-'));
+  const data = path.join(root, 'data.json');
+  const fragment = path.join(root, 'domain.fragment.json');
+  const schema = path.join(root, 'data.schema.json');
+  try {
+    fs.writeFileSync(data, JSON.stringify(pack(), null, 2) + '\n');
+    fs.writeFileSync(fragment, 'false\n');
+    const compile = run(['compile', data, '--domain-schema', fragment]);
+    assert.equal(compile.status, 0, compile.stderr);
+    assert.equal(JSON.parse(fs.readFileSync(schema, 'utf8')).properties.domain, false);
+    const rejected = run(['compile', data]);
+    assert.equal(rejected.status, 1);
+    assert.match(rejected.stderr, /custom domain schema/);
+    assert.equal(JSON.parse(fs.readFileSync(schema, 'utf8')).properties.domain, false);
+    assert.equal(run(['compile', data, '--domain-schema', fragment, '--check']).status, 0);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('standalone asset hash verification rejects a manifest path escaping the asset root', () => {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-validate-asset-'));
+  const dataDir = path.join(root, 'lib', 'data');
+  fs.mkdirSync(dataDir, { recursive: true });
+  const value = pack();
+  value.assets = { '../../../outside.txt': { exists: true, hash: 'sha1:' + '0'.repeat(40) } };
+  const data = path.join(dataDir, 'data.json');
+  fs.writeFileSync(data, JSON.stringify(value));
+  try {
+    const result = run(['validate', data, '--verify-hash']);
+    assert.equal(result.status, 1);
+    assert.match(result.stderr, /unreadable or unsafe/);
+    assert.match(result.stderr, /escapes the asset root/);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tests/contract-consistency.test.js b/tests/contract-consistency.test.js
index 2901ff8..cfe599f 100644
--- a/tests/contract-consistency.test.js
+++ b/tests/contract-consistency.test.js
@@ -122,6 +122,27 @@ test('RunReport contract and public CLI expose the unified report command', () =
   assert.match(read('references/run-report-contract.md'), /NOT_ASSESSED/);
 });
 
+test('Agent task, grader, evidence, TaskRun, and experiment contracts are exposed consistently', () => {
+  const cli = read('scripts/sg-data-pack');
+  for (const command of ['task', 'grade', 'evidence', 'experiment', 'compile']) assert.match(cli, new RegExp(`case '${command}'`));
+  const taskSchema = readJson('scripts/lib/agent-task.schema.json');
+  assert.equal(taskSchema.properties.taskVersion.const, '1.0');
+  assert.deepEqual(taskSchema.$defs.grader.required, ['id', 'spec', 'sha256', 'treeSha256', 'weight']);
+  assert.equal(readJson('scripts/lib/task-run.schema.json').properties.runVersion.const, '1.0');
+  assert.equal(readJson('scripts/lib/experiment.schema.json').properties.experimentVersion.const, '1.0');
+  for (const rel of ['README.md', 'SKILL.md']) {
+    const source = read(rel);
+    assert.match(source, /node "\$SK" task/);
+    assert.match(source, /node "\$SK" experiment/);
+    assert.match(source, /NOT_ASSESSED|not-assessed/);
+  }
+  for (const rel of [
+    'references/agent-task-contract.md', 'references/patch-execution-contract.md',
+    'references/grader-contract.md', 'references/task-run-contract.md',
+    'references/runtime-visual-evidence-contract.md', 'references/agent-experiment-contract.md',
+  ]) assert.ok(read(rel).length > 100, `${rel} must be substantive`);
+});
+
 test('CLI help aliases print usage and exit successfully', () => {
   const cli = path.join(ROOT, 'scripts', 'sg-data-pack');
   for (const flag of ['--help', '-h', 'help']) {
diff --git a/tests/data-surface-import.test.js b/tests/data-surface-import.test.js
index 181ed7f..d00d4a2 100644
--- a/tests/data-surface-import.test.js
+++ b/tests/data-surface-import.test.js
@@ -1,15 +1,34 @@
 'use strict';
 
 const assert = require('node:assert/strict');
+const crypto = require('node:crypto');
 const fs = require('node:fs');
 const os = require('node:os');
 const path = require('node:path');
+const { spawnSync } = require('node:child_process');
 const { test } = require('node:test');
 const {
+  DATA_PACK_FIELDS,
   importDataSurfaceManifest,
   validateDataSurfaceManifest,
 } = require('../scripts/lib/sg-data-surface-import.js');
 
+const CLI = path.join(__dirname, '..', 'scripts', 'sg-data-pack');
+
+function runCli(args) {
+  return spawnSync(process.execPath, [CLI, 'data-surface-import', ...args], { encoding: 'utf8' });
+}
+
+function canonicalize(value) {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (value && typeof value === 'object') return Object.fromEntries(Object.keys(value).sort().map(key => [key, canonicalize(value[key])]));
+  return value;
+}
+
+function canonicalDigest(value) {
+  return crypto.createHash('sha256').update(JSON.stringify(canonicalize(value))).digest('hex');
+}
+
 function manifest(overrides = {}) {
   return {
     schemaVersion: '1.0',
@@ -54,6 +73,8 @@ test('Data Surface importer accepts a ready interface manifest without generatin
   assert.equal(report.status, 'ready');
   assert.equal(report.dataPackGenerationAllowed, true);
   assert.equal(report.surfaces.length, 1);
+  assert.deepEqual(report.surfaces[0].evidence, input.surfaces[0].evidence);
+  assert.equal(report.source.digest, canonicalDigest(input));
   assert.equal(report.review.policyNotices.length, 0);
   for (const key of ['entities', 'aliases', 'relations', 'stages', 'contents', 'adapters']) {
     assert.equal(Object.prototype.hasOwnProperty.call(report, key), false);
@@ -74,22 +95,89 @@ test('Data Surface importer keeps review-required manifests auditable but blocks
   assert.throws(() => importDataSurfaceManifest(input, { requireReady: true }), /requires review/);
 });
 
-test('Data Surface importer rejects Data Pack fields and raw static values', () => {
-  const forbidden = { ...manifest(), entities: [] };
-  assert.equal(validateDataSurfaceManifest(forbidden).valid, false);
+test('Data Surface importer rejects every Data Pack v1.3 root field and raw static values', () => {
+  for (const field of DATA_PACK_FIELDS) {
+    const forbidden = { ...manifest(), [field]: {} };
+    const validation = validateDataSurfaceManifest(forbidden);
+    assert.equal(validation.valid, false, `${field} must be rejected`);
+    assert.ok(validation.issues.some(issue => issue.path === field));
+  }
   const raw = manifest({ surfaces: [{ ...manifest().surfaces[0], source: { primary: 'module-static-binding', static: { binding: 'items', value: [{ name: 'raw' }] } } }] });
   assert.equal(validateDataSurfaceManifest(raw).valid, false);
 });
 
+test('Data Surface importer requires surface.reviewRequired to be boolean when present', () => {
+  const missing = manifest({ surfaces: [{ ...manifest().surfaces[0] }] });
+  delete missing.surfaces[0].reviewRequired;
+  assert.equal(validateDataSurfaceManifest(missing).valid, true);
+
+  for (const invalid of [null, 0, 'false', [], {}]) {
+    const input = manifest({ surfaces: [{ ...manifest().surfaces[0], reviewRequired: invalid }] });
+    const validation = validateDataSurfaceManifest(input);
+    assert.equal(validation.valid, false);
+    assert.ok(validation.issues.some(issue => issue.path === 'surfaces[0].reviewRequired'));
+  }
+});
+
+test('Data Surface digest binds all canonical manifest evidence', () => {
+  const first = manifest();
+  const changed = manifest({
+    surfaces: [{ ...manifest().surfaces[0], evidence: [{ source: 'changed.vue', detail: 'changed evidence', confidence: 'low' }] }],
+  });
+  assert.notEqual(importDataSurfaceManifest(first).source.digest, importDataSurfaceManifest(changed).source.digest);
+  const reordered = {
+    reviewRequired: first.reviewRequired,
+    metrics: first.metrics,
+    unresolved: first.unresolved,
+    surfaces: first.surfaces,
+    library: first.library,
+    identity: first.identity,
+    kind: first.kind,
+    schemaVersion: first.schemaVersion,
+  };
+  assert.equal(importDataSurfaceManifest(first).source.digest, importDataSurfaceManifest(reordered).source.digest);
+});
+
 test('data-surface-import CLI writes a review report and preserves the explicit gate', () => {
   const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-data-surface-import-'));
   const input = path.join(directory, 'manifest.json');
   const output = path.join(directory, 'report.json');
   fs.writeFileSync(input, JSON.stringify(manifest({ reviewRequired: true, unresolved: [{ reason: 'review' }], metrics: { surfaces: 1, apiSurfaces: 1, staticSurfaces: 0, reviewedFixtures: 1, fields: 1, references: 0, unresolved: 1 } })));
-  const result = require('node:child_process').spawnSync(process.execPath, [path.join(__dirname, '..', 'scripts', 'sg-data-pack'), 'data-surface-import', input, '--out', output, '--allow-review-required'], { encoding: 'utf8' });
+  const result = runCli([input, '--out', output, '--allow-review-required']);
   assert.equal(result.status, 0, result.stderr);
   const report = JSON.parse(fs.readFileSync(output, 'utf8'));
   assert.equal(report.status, 'review-required');
   assert.equal(report.dataPackGenerationAllowed, false);
   fs.rmSync(directory, { recursive: true, force: true });
 });
+
+test('data-surface-import CLI rejects unknown and duplicate flags', () => {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-data-surface-import-flags-'));
+  const input = path.join(directory, 'manifest.json');
+  fs.writeFileSync(input, JSON.stringify(manifest()));
+  for (const args of [[input, '--unknown'], [input, '--allow-review-required', '--allow-review-required'], [input, '--out', path.join(directory, 'a'), '--out', path.join(directory, 'b')], [input, '--out']]) {
+    const result = runCli(args);
+    assert.equal(result.status, 2, `${args.join(' ')} should be usage error`);
+  }
+  fs.rmSync(directory, { recursive: true, force: true });
+});
+
+test('data-surface-import CLI rejects --out aliases of the input and writes atomically', () => {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-data-surface-import-output-'));
+  const input = path.join(directory, 'manifest.json');
+  const output = path.join(directory, 'report.json');
+  const symlink = path.join(directory, 'manifest-symlink.json');
+  const hardlink = path.join(directory, 'manifest-hardlink.json');
+  fs.writeFileSync(input, JSON.stringify(manifest()));
+  fs.symlinkSync(input, symlink);
+  fs.linkSync(input, hardlink);
+  for (const alias of [input, symlink, hardlink]) {
+    const result = runCli([input, '--out', alias]);
+    assert.equal(result.status, 2, `output alias ${alias} must be rejected`);
+  }
+  const result = runCli([input, '--out', output]);
+  assert.equal(result.status, 0, result.stderr);
+  assert.equal(JSON.parse(fs.readFileSync(output, 'utf8')).source.digest, canonicalDigest(manifest()));
+  assert.equal(fs.readdirSync(directory).some(file => file.endsWith('.tmp')), false, 'temporary output must be cleaned');
+  fs.rmSync(directory, { recursive: true, force: true });
+});
diff --git a/tests/evidence-collector.test.js b/tests/evidence-collector.test.js
new file mode 100644
index 0000000..3cc8be8
--- /dev/null
+++ b/tests/evidence-collector.test.js
@@ -0,0 +1,115 @@
+'use strict';
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { sha256Bytes, contentId } = require('../scripts/lib/sg-evidence-utils.js');
+const { validateRuntimeEvidence } = require('../scripts/lib/sg-runtime-evidence.js');
+const { validateVisualEvidence } = require('../scripts/lib/sg-visual-evidence.js');
+
+function directory() { return fs.mkdtempSync(path.join(os.tmpdir(), 'sg-evidence-')); }
+function artifact(root, id, file, content, mediaType = 'text/plain') {
+  fs.writeFileSync(path.join(root, file), content);
+  return { id, path: file, mediaType, sha256: sha256Bytes(content) };
+}
+
+test('runtime evidence passes only with complete assertions and verified artifacts', () => {
+  const root = directory();
+  try {
+    const evidence = {
+      evidenceVersion: '1.0',
+      kind: 'runtime-evidence',
+      scenarioId: 'mount-default',
+      subjectTreeSha256: sha256Bytes('tree'),
+      producer: { name: 'fixture-runtime', version: '1.0.0' },
+      environment: { node: process.version },
+      assertions: [{ id: 'mounted', status: 'passed', message: '#mount rendered' }],
+      consoleErrors: [], pageErrors: [], networkFailures: [],
+      artifacts: [artifact(root, 'runtime-log', 'runtime.log', 'mounted\n')],
+    };
+    evidence.evidenceId = contentId('runtime', evidence, ['evidenceId']);
+    const result = validateRuntimeEvidence(evidence, { baseDir: root });
+    assert.equal(result.valid, true);
+    assert.equal(result.status, 'passed');
+    evidence.artifacts[0].sha256 = sha256Bytes('tampered');
+    assert.equal(validateRuntimeEvidence(evidence, { baseDir: root }).status, 'not-assessed');
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('runtime evidence never treats a missing assertion surface as passed', () => {
+  const root = directory();
+  try {
+    const evidence = {
+      evidenceVersion: '1.0', kind: 'runtime-evidence', scenarioId: 'missing',
+      subjectTreeSha256: sha256Bytes('tree'), producer: { name: 'fixture', version: '1' },
+      environment: {}, assertions: [], consoleErrors: [], pageErrors: [], networkFailures: [],
+      artifacts: [artifact(root, 'runtime-log', 'runtime.log', 'no assertions\n')],
+    };
+    evidence.evidenceId = contentId('runtime', evidence, ['evidenceId']);
+    const result = validateRuntimeEvidence(evidence, { baseDir: root });
+    assert.equal(result.valid, true);
+    assert.equal(result.status, 'not-assessed');
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('pathless artifacts cannot be used to pass runtime or visual evidence', () => {
+  const root = directory();
+  try {
+    const runtime = {
+      evidenceVersion: '1.0', kind: 'runtime-evidence', scenarioId: 'mount-default',
+      subjectTreeSha256: sha256Bytes('tree'), producer: { name: 'fixture', version: '1' }, environment: {},
+      assertions: [{ id: 'mounted', status: 'passed' }], consoleErrors: [], pageErrors: [], networkFailures: [],
+      artifacts: [{ id: 'runtime-log', sha256: sha256Bytes('claimed bytes'), mediaType: 'text/plain' }],
+    };
+    runtime.evidenceId = contentId('runtime', runtime, ['evidenceId']);
+    const runtimeResult = validateRuntimeEvidence(runtime, { baseDir: root });
+    assert.equal(runtimeResult.status, 'not-assessed');
+    assert.ok(runtimeResult.errors.some((error) => /path/.test(error)));
+
+    const visual = {
+      evidenceVersion: '1.0', kind: 'visual-evidence',
+      referenceTreeSha256: sha256Bytes('reference-tree'), candidateTreeSha256: sha256Bytes('candidate-tree'), configurationSha256: sha256Bytes('config'),
+      producer: { name: 'fixture', version: '1' }, thresholds: { maxPixelDiffRatio: 0, minComputedStyleScore: 1, minCoverage: 1 },
+      scenarios: [{ id: 'desktop', viewport: { width: 100, height: 100 }, pixelDiffRatio: 0, computedStyleScore: 1, coverage: 1, stabilityFailures: 0, referenceArtifact: 'reference', candidateArtifact: 'candidate', diffArtifact: 'diff' }],
+      artifacts: ['reference', 'candidate', 'diff'].map((id) => ({ id, sha256: sha256Bytes(id), mediaType: 'image/png' })),
+    };
+    visual.evidenceId = contentId('visual', visual, ['evidenceId']);
+    const visualResult = validateVisualEvidence(visual, { baseDir: root });
+    assert.equal(visualResult.status, 'not-assessed');
+    assert.ok(visualResult.errors.some((error) => /path/.test(error)));
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('visual evidence recomputes scenario gates instead of trusting a producer verdict', () => {
+  const root = directory();
+  try {
+    const artifacts = [
+      artifact(root, 'reference', 'reference.png', 'reference', 'image/png'),
+      artifact(root, 'candidate', 'candidate.png', 'candidate', 'image/png'),
+      artifact(root, 'diff', 'diff.png', 'diff', 'image/png'),
+    ];
+    const evidence = {
+      evidenceVersion: '1.0', kind: 'visual-evidence',
+      referenceTreeSha256: sha256Bytes('reference-tree'),
+      candidateTreeSha256: sha256Bytes('candidate-tree'),
+      configurationSha256: sha256Bytes('config'),
+      producer: { name: 'fixture-visual', version: '1.0.0' },
+      thresholds: { maxPixelDiffRatio: 0.02, minComputedStyleScore: 0.98, minCoverage: 1 },
+      scenarios: [{
+        id: 'desktop', viewport: { width: 1280, height: 720 },
+        pixelDiffRatio: 0.01, computedStyleScore: 0.99, coverage: 1, stabilityFailures: 0,
+        referenceArtifact: 'reference', candidateArtifact: 'candidate', diffArtifact: 'diff',
+      }],
+      artifacts,
+    };
+    evidence.evidenceId = contentId('visual', evidence, ['evidenceId']);
+    assert.equal(validateVisualEvidence(evidence, { baseDir: root }).status, 'passed');
+    evidence.scenarios[0].pixelDiffRatio = 0.03;
+    evidence.evidenceId = contentId('visual', evidence, ['evidenceId']);
+    assert.equal(validateVisualEvidence(evidence, { baseDir: root }).status, 'failed');
+    evidence.scenarios[0].diffArtifact = 'missing';
+    evidence.evidenceId = contentId('visual', evidence, ['evidenceId']);
+    assert.equal(validateVisualEvidence(evidence, { baseDir: root }).status, 'not-assessed');
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tests/experiment.test.js b/tests/experiment.test.js
new file mode 100644
index 0000000..927a71e
--- /dev/null
+++ b/tests/experiment.test.js
@@ -0,0 +1,89 @@
+'use strict';
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { contentId, sha256Bytes } = require('../scripts/lib/sg-evidence-utils.js');
+const { snapshotTree } = require('../scripts/lib/sg-tree-snapshot.js');
+const { wilson, validateExperimentSpec, aggregate, runExperiment } = require('../scripts/lib/sg-experiment.js');
+
+const ROOT = path.join(__dirname, '..');
+const TASK = path.join(ROOT, 'research', 'agent-eval', 'tasks', 'field-update');
+const AGENT = path.join(ROOT, 'research', 'agent-eval', 'providers', 'scripted-patch-agent.js');
+
+function withId(spec) {
+  const material = { ...spec }; delete material.experimentId;
+  spec.experimentId = contentId('experiment', material, []);
+  return spec;
+}
+
+test('Wilson interval and aggregate preserve denominators and harness-only claims', () => {
+  const interval = wilson(8, 10);
+  assert.ok(interval.lower < 0.8 && interval.upper > 0.8);
+  const summary = aggregate([
+    { verdict: 'passed', durationMs: 10, agentExitCode: 0, patchStatus: 'applied', gradeVerdicts: ['passed'], runtimeRequired: 0, visualRequired: 0, runtimeStatuses: [], visualStatuses: [], providerMetadata: null },
+    { verdict: 'grader-failed', durationMs: 20, agentExitCode: 0, patchStatus: 'applied', gradeVerdicts: ['failed'], runtimeRequired: 1, visualRequired: 1, runtimeStatuses: ['failed'], visualStatuses: ['not-assessed'], providerMetadata: null },
+    { verdict: 'infra-error', durationMs: 1, agentExitCode: null, patchStatus: null, gradeVerdicts: [], runtimeRequired: 1, visualRequired: 1, runtimeStatuses: [], visualStatuses: [], providerMetadata: null },
+  ], 'scripted');
+  assert.equal(summary.validTrials, 2);
+  assert.equal(summary.passRate, 0.5);
+  assert.deepEqual(summary.stages.runtimePassed, { passed: 0, total: 1 });
+  assert.equal(summary.claimLevel, 'harness-only');
+
+  const preconditionFailure = aggregate([
+    { verdict: 'patch-invalid', durationMs: 5, agentExitCode: 0, patchStatus: 'rejected', gradeVerdicts: [], runtimeRequired: 1, visualRequired: 1, runtimeStatuses: [], visualStatuses: [], providerMetadata: null },
+  ], 'ai');
+  assert.deepEqual(preconditionFailure.stages.runtimePassed, { passed: 0, total: 1 });
+  assert.deepEqual(preconditionFailure.stages.visualPassed, { passed: 0, total: 1 });
+  assert.equal(preconditionFailure.claimLevel, 'ai-task-contract-not-demonstrated');
+});
+
+test('experiment rejects stale ids and unsafe task paths', () => {
+  const spec = withId({
+    experimentVersion: '1.0', experimentId: null, title: 'fixture',
+    agent: { kind: 'scripted', provider: 'fixture', model: 'v1', argv: [process.execPath, '{adapter}'], adapter: { path: 'agent.js', sha256: 'sha256:' + 'a'.repeat(64) } },
+    tasks: [{ id: 'one', manifest: '../escape.json' }], repetitions: 1, seed: 1,
+  });
+  const result = validateExperimentSpec(spec);
+  assert.equal(result.valid, false);
+  assert.ok(result.errors.some((error) => /escape/.test(error)));
+  spec.tasks[0].manifest = 'task/task.json';
+  assert.equal(validateExperimentSpec(spec).valid, false, 'task changes make the old experimentId stale');
+});
+
+test('two experiment trials rebuild from the same immutable baseline', () => {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-experiment-test-'));
+  try {
+    const taskDir = path.join(directory, 'task');
+    fs.cpSync(TASK, taskDir, { recursive: true });
+    const agentFile = path.join(directory, 'agent.js');
+    fs.copyFileSync(AGENT, agentFile);
+    const source = path.join(taskDir, 'source');
+    const before = snapshotTree(source).treeSha256;
+    const taskFile = path.join(taskDir, 'task.json');
+    const taskManifest = JSON.parse(fs.readFileSync(taskFile, 'utf8'));
+    const spec = withId({
+      experimentVersion: '1.0', experimentId: null, title: 'repeat fixture',
+      agent: { kind: 'scripted', provider: 'fixture', model: 'v1', argv: [process.execPath, '{adapter}', '{workspace}', '{patch}', '{prompt}'], adapter: { path: 'agent.js', sha256: sha256Bytes(fs.readFileSync(agentFile)) } },
+      tasks: [{ id: 'field-update', manifest: 'task/task.json', taskId: taskManifest.taskId, manifestSha256: sha256Bytes(fs.readFileSync(taskFile)) }], repetitions: 2, seed: 'fixed',
+    });
+    const specFile = path.join(directory, 'experiment.json');
+    fs.writeFileSync(specFile, JSON.stringify(spec, null, 2));
+    const physicalOutputParent = path.join(directory, 'physical-output');
+    const outputAlias = path.join(directory, 'output-alias');
+    fs.mkdirSync(physicalOutputParent);
+    fs.symlinkSync(physicalOutputParent, outputAlias, 'dir');
+    const report = runExperiment({ specFile, outputRoot: path.join(outputAlias, 'output') });
+    assert.equal(report.summary.totalTrials, 2);
+    assert.equal(report.summary.passed, 2);
+    assert.equal(report.summary.claimLevel, 'harness-only');
+    assert.equal(snapshotTree(source).treeSha256, before);
+    assert.notEqual(report.trials[0].runId, report.trials[1].runId, 'trial id and durations keep runs independently auditable');
+    assert.equal(fs.existsSync(path.join(physicalOutputParent, 'output', 'EXPERIMENT.md')), true);
+    for (const trial of report.trials) {
+      assert.equal(trial.artifactPath, `trials/${trial.trialId}/task-run.json`);
+      assert.equal(fs.existsSync(path.join(physicalOutputParent, 'output', trial.artifactPath)), true);
+    }
+  } finally { fs.rmSync(directory, { recursive: true, force: true }); }
+});
diff --git a/tests/extract-integration.test.js b/tests/extract-integration.test.js
index 5ad75b4..dba903e 100644
--- a/tests/extract-integration.test.js
+++ b/tests/extract-integration.test.js
@@ -52,7 +52,8 @@ test('real Qinshihuang engine passes extract, strict validation, rules, types, a
     const check = run(['extract', config, '--check']);
     assertSuccessful(check, 'extract --check');
     assert.match(check.stdout, /entities: 15, relations: 11, stages: 7, assets: 21/);
-    assert.match(check.stdout, /all 1 deep comparisons passed; data is lossless/);
+    assert.match(check.stdout, /all 1 deep comparisons passed; configured equivalence surface is lossless/);
+    assert.match(check.stdout, /coverage: 1 mapped, 0 explicitly ignored, 0 unmapped/);
     assert.doesNotMatch(check.stdout + check.stderr, /\[warn\]/);
 
     const extract = run(['extract', config]);
diff --git a/tests/extract-safety.test.js b/tests/extract-safety.test.js
new file mode 100644
index 0000000..1af9394
--- /dev/null
+++ b/tests/extract-safety.test.js
@@ -0,0 +1,117 @@
+'use strict';
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const { spawnSync } = require('node:child_process');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const {
+  runEquivalence,
+  validateExtractionConfig,
+  localAssetPath,
+} = require('../scripts/lib/sg-pack-extract-core.js');
+
+const ROOT = path.join(__dirname, '..');
+const CLI = path.join(ROOT, 'scripts', 'sg-data-pack');
+const FIXTURE = path.join(ROOT, 'tests', 'fixtures', 'integration', 'qinshihuang-0716-ts');
+
+function config(overrides = {}) {
+  return {
+    libId: 'fixture',
+    libDir: '/tmp/fixture',
+    engineFile: 'lib/src/fixture.js',
+    globalName: 'FixtureLibrary',
+    literals: [{ key: 'items', pattern: /=/ }],
+    buildPack() { return {}; },
+    equivalence: [{ lit: 'items', from: 'items' }],
+    ...overrides,
+  };
+}
+
+function copyFixture() {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-extract-safety-'));
+  const libDir = path.join(dir, 'library');
+  fs.cpSync(FIXTURE, libDir, { recursive: true });
+  return { dir, libDir, configPath: path.join(libDir, 'extract.config.js') };
+}
+
+function run(args) {
+  return spawnSync(process.execPath, [CLI, ...args], { cwd: ROOT, encoding: 'utf8', maxBuffer: 1 << 24 });
+}
+
+test('extraction config requires complete and non-duplicated equivalence coverage', () => {
+  assert.throws(() => validateExtractionConfig(config({ equivalence: [] })), /lack equivalence coverage/);
+  assert.throws(() => validateExtractionConfig(config({ equivalence: [{ lit: 'missing', from: 'items' }] })), /unknown literal/);
+  assert.throws(() => validateExtractionConfig(config({ equivalence: [
+    { lit: 'items', from: 'items' },
+    { lit: 'items', from: 'copy' },
+  ] })), /duplicate equivalence coverage/);
+  assert.doesNotThrow(() => validateExtractionConfig(config({
+    equivalence: [],
+    equivalenceIgnore: [{ lit: 'items', reason: 'Renderer-only value covered by VR-1' }],
+  })));
+});
+
+test('equivalence rejects a missing restored property instead of passing undefined against undefined', () => {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-equivalence-'));
+  const engine = path.join(directory, 'engine.js');
+  fs.writeFileSync(engine, 'globalThis.EquivalenceFixture = { __fromPack: function () { return {}; } };\n');
+  try {
+    assert.throws(() => runEquivalence({
+      libDir: directory,
+      engineFile: 'engine.js',
+      globalName: 'EquivalenceFixture',
+      literals: [{ key: 'items' }],
+      equivalence: [{ lit: 'items', from: 'missing' }],
+    }, { items: undefined }, {}), /did not return equivalence field/);
+  } finally {
+    delete globalThis.EquivalenceFixture;
+    fs.rmSync(directory, { recursive: true, force: true });
+  }
+});
+
+test('extract refuses divergent existing data unless force is explicit and compare-existing detects drift', () => {
+  const fixture = copyFixture();
+  try {
+    const initial = run(['extract', fixture.configPath]);
+    assert.equal(initial.status, 0, initial.stderr);
+    const dataFile = path.join(fixture.libDir, 'lib', 'data', 'data.json');
+    const pack = JSON.parse(fs.readFileSync(dataFile, 'utf8'));
+    pack.entities.lisi.name = 'manual canonical edit';
+    fs.writeFileSync(dataFile, JSON.stringify(pack, null, 2) + '\n');
+
+    const check = run(['extract', fixture.configPath, '--check']);
+    assert.equal(check.status, 0, check.stderr);
+    assert.equal(JSON.parse(fs.readFileSync(dataFile, 'utf8')).entities.lisi.name, 'manual canonical edit');
+
+    const drift = run(['extract', fixture.configPath, '--compare-existing']);
+    assert.equal(drift.status, 1);
+    assert.match(drift.stderr, /OUTPUT-DRIFT/);
+
+    const refused = run(['extract', fixture.configPath]);
+    assert.equal(refused.status, 1);
+    assert.match(refused.stderr, /Refusing to overwrite/);
+    assert.equal(JSON.parse(fs.readFileSync(dataFile, 'utf8')).entities.lisi.name, 'manual canonical edit');
+
+    const forced = run(['extract', fixture.configPath, '--force']);
+    assert.equal(forced.status, 0, forced.stderr);
+    assert.equal(JSON.parse(fs.readFileSync(dataFile, 'utf8')).entities.lisi.name, '李斯');
+  } finally {
+    fs.rmSync(fixture.dir, { recursive: true, force: true });
+  }
+});
+
+test('asset resolver supports a configured physical root and rejects traversal', () => {
+  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-asset-root-'));
+  const root = path.join(directory, 'public', 'media');
+  fs.mkdirSync(root, { recursive: true });
+  const file = path.join(root, 'portrait.png');
+  fs.writeFileSync(file, 'png');
+  try {
+    assert.equal(localAssetPath(directory, 'assets/portrait.png', 'public/media'), file);
+    assert.throws(() => localAssetPath(directory, 'assets/../../secret.png', 'public/media'), /escapes assetDir/);
+    assert.throws(() => localAssetPath(directory, 'portrait.png', '../outside'), /escapes libDir/);
+  } finally {
+    fs.rmSync(directory, { recursive: true, force: true });
+  }
+});
diff --git a/tests/fixtures/agent-tasks/ready/grader/spec.json b/tests/fixtures/agent-tasks/ready/grader/spec.json
new file mode 100644
index 0000000..a73eef3
--- /dev/null
+++ b/tests/fixtures/agent-tasks/ready/grader/spec.json
@@ -0,0 +1,13 @@
+{
+  "graderVersion": "1.0",
+  "graderId": "fixture-grader",
+  "checks": [
+    {
+      "id": "input-present",
+      "type": "command",
+      "weight": 1,
+      "required": true,
+      "argv": ["node", "-e", "process.exit(0)"]
+    }
+  ]
+}
diff --git a/tests/fixtures/agent-tasks/ready/source/input.txt b/tests/fixtures/agent-tasks/ready/source/input.txt
new file mode 100644
index 0000000..c297574
--- /dev/null
+++ b/tests/fixtures/agent-tasks/ready/source/input.txt
@@ -0,0 +1 @@
+agent-task fixture input
diff --git a/tests/fixtures/agent-tasks/ready/task.json b/tests/fixtures/agent-tasks/ready/task.json
new file mode 100644
index 0000000..0575ff6
--- /dev/null
+++ b/tests/fixtures/agent-tasks/ready/task.json
@@ -0,0 +1,62 @@
+{
+  "taskVersion": "1.0",
+  "taskId": "sha256:81b83df41ec3d120166cbd416cb8c056be0d38a9a16da7c5447c00fe46bb68e6",
+  "instructions": {
+    "text": "Update the fixture safely.",
+    "sha256": "sha256:f252924589418ab3710e24be081500dd41ec2248a31661bfc96eee926bf218a7"
+  },
+  "source": {
+    "root": "source",
+    "revision": "fixture-revision",
+    "treeSha256": "sha256:01af4ed183d65f66a8e97a1c76c5ba9fc930cd3d2321dadd8f2ddd63370fdf22"
+  },
+  "inputs": [
+    {
+      "id": "fixture-input",
+      "path": "input.txt",
+      "role": "source",
+      "sha256": "sha256:6b75d59783a40a1229f5bd059c63daf4c95b31f22cb7a66c0b00ad69595c11d0"
+    }
+  ],
+  "filePolicy": {
+    "allowed": [
+      {
+        "pattern": "**/*.txt",
+        "operations": [
+          "modify"
+        ]
+      }
+    ],
+    "forbidden": [
+      ".git/**"
+    ],
+    "denyPrecedence": true,
+    "allowSymlinks": false,
+    "allowHardlinks": false,
+    "maxChangedFiles": 1,
+    "maxPatchBytes": 4096
+  },
+  "patchPolicy": {
+    "format": "unified-diff",
+    "fuzz": 0,
+    "allowBinary": false
+  },
+  "graders": [
+    {
+      "id": "fixture-grader",
+      "spec": "grader/spec.json",
+      "sha256": "sha256:798a17e10949cc26813ce468b646a28bd9bae0015e0eabe23b62f9e55932f208",
+      "treeSha256": "sha256:a9053f547928e501aca328ba572a84ec73d3790dc2e185d7cc266b559f067123",
+      "weight": 1
+    }
+  ],
+  "evidence": {
+    "runtime": [],
+    "visual": []
+  },
+  "execution": {
+    "timeoutMs": 30000,
+    "network": "off",
+    "maxOutputBytes": 65536
+  }
+}
diff --git a/tests/grader.test.js b/tests/grader.test.js
new file mode 100644
index 0000000..dcbb013
--- /dev/null
+++ b/tests/grader.test.js
@@ -0,0 +1,106 @@
+'use strict';
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { validateGraderSpec, gradeWorkspace } = require('../scripts/lib/sg-grader.js');
+
+function workspace() {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-grader-'));
+  fs.mkdirSync(path.join(root, 'lib', 'data'), { recursive: true });
+  fs.writeFileSync(path.join(root, 'lib', 'data', 'data.json'), JSON.stringify({
+    schemaVersion: '1.3', meta: { id: 'grader-fixture', title: 'Grader fixture' },
+    entities: { alice: { kind: 'person', name: 'Alice' } },
+    aliases: { Alice: 'alice' },
+    stages: [{ key: 'main', name: 'Main', entities: ['alice'] }],
+  }));
+  fs.writeFileSync(path.join(root, 'lib', 'data', 'rules.json'), JSON.stringify({
+    rulesVersion: '1.0', libId: 'grader-fixture', profile: {},
+    rules: [{ id: 'one-entity', level: 'hard', subject: 'entities.*', rule: 'one entity', source: 'observed', check: 'Object.keys(entities).length === 1' }],
+  }));
+  return root;
+}
+
+function spec(checks) { return { graderVersion: '1.0', graderId: 'fixture-grader', checks }; }
+
+test('grader combines Data Pack, library rules, and command checks into one scored report', () => {
+  const root = workspace();
+  try {
+    const report = gradeWorkspace({ workspaceRoot: root, taskId: 'sha256:' + 'a'.repeat(64), treeSha256: 'sha256:' + 'b'.repeat(64), spec: spec([
+      { id: 'pack-contract', type: 'data-pack-contract', weight: 2, required: true, path: 'lib/data/data.json', strict: true },
+      { id: 'library-rules', type: 'library-rules', weight: 1, required: true, rulesPath: 'lib/data/rules.json', dataPath: 'lib/data/data.json', strict: true },
+      { id: 'node-check', type: 'command', weight: 1, required: true, argv: [process.execPath, '-e', 'process.exit(0)'], expectedExit: 0 },
+    ]) });
+    assert.equal(report.verdict, 'passed');
+    assert.equal(report.score, 4);
+    assert.equal(report.maximumScore, 4);
+    assert.equal(report.summary.passed, 3);
+    assert.match(report.gradeId, /^grade:[0-9a-f]{64}$/);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('required not-assessed evidence fails the verdict without being mislabeled as a test failure', () => {
+  const root = workspace();
+  try {
+    const report = gradeWorkspace({ workspaceRoot: root, spec: spec([
+      { id: 'runtime-mount', type: 'runtime-evidence', weight: 1, required: true, path: 'artifacts/runtime.json', scenarioId: 'mount-default' },
+    ]) });
+    assert.equal(report.verdict, 'failed');
+    assert.equal(report.results[0].status, 'not-assessed');
+    assert.equal(report.summary.requiredIncomplete, 1);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('command timeout is a candidate failure and cannot leave the valid denominator', () => {
+  const root = workspace();
+  try {
+    const report = gradeWorkspace({ workspaceRoot: root, spec: spec([
+      { id: 'timeout-check', type: 'command', weight: 1, required: true, argv: [process.execPath, '-e', 'setTimeout(function(){}, 10000)'], timeoutMs: 20 },
+    ]) });
+    assert.equal(report.verdict, 'failed');
+    assert.equal(report.results[0].status, 'failed');
+    assert.equal(report.score, 0);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('candidate extraction process.exit is contained in a worker and graded as failed', () => {
+  const root = workspace();
+  try {
+    fs.writeFileSync(path.join(root, 'extract.config.js'), 'process.exit(7);\n');
+    const report = gradeWorkspace({ workspaceRoot: root, spec: spec([
+      { id: 'extract-check', type: 'extract-equivalence', weight: 1, required: true, configPath: 'extract.config.js', timeoutMs: 1000 },
+    ]) });
+    assert.equal(report.verdict, 'failed');
+    assert.equal(report.results[0].status, 'failed');
+    assert.equal(report.results[0].evidence.exitCode, 1);
+    assert.equal(report.results[0].evidence.supervisor.workerExitCode, 7);
+    assert.equal(report.results[0].evidence.supervisor.protocolOk, false);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('candidate cannot forge a passing extraction result through stdout', () => {
+  const root = workspace();
+  try {
+    const forged = { ok: true, validation: { errors: [], warnings: [] }, equivalence: { diffs: [], coverage: { complete: true } }, consumedFiles: {} };
+    fs.writeFileSync(path.join(root, 'extract.config.js'), `process.stdout.write('SG_EXTRACTION_RESULT:' + ${JSON.stringify(JSON.stringify(forged))} + '\\n'); process.exit(0);\n`);
+    const report = gradeWorkspace({ workspaceRoot: root, spec: spec([
+      { id: 'extract-check', type: 'extract-equivalence', weight: 1, required: true, configPath: 'extract.config.js', timeoutMs: 1000 },
+    ]) });
+    assert.equal(report.verdict, 'failed');
+    assert.equal(report.results[0].status, 'failed');
+    assert.equal(report.results[0].evidence.supervisor.protocolOk, false);
+    assert.equal(report.results[0].evidence.supervisor.subjectStdoutBytes > 0, true);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('grader spec rejects unknown fields, duplicate ids, and shell-string commands', () => {
+  const result = validateGraderSpec({ graderVersion: '1.0', graderId: 'fixture-grader', unknown: true, checks: [
+    { id: 'same-id', type: 'command', weight: 1, required: true, argv: 'node test.js' },
+    { id: 'same-id', type: 'unknown', weight: 1, required: true },
+  ] });
+  assert.equal(result.valid, false);
+  assert.ok(result.errors.some((error) => /unknown grader field/.test(error)));
+  assert.ok(result.errors.some((error) => /duplicate/.test(error)));
+  assert.ok(result.errors.some((error) => /argv/.test(error)));
+});
diff --git a/tests/loader.test.js b/tests/loader.test.js
index 60f6d2e..7be3617 100644
--- a/tests/loader.test.js
+++ b/tests/loader.test.js
@@ -63,6 +63,35 @@ test('E1 accepts all supported schemaVersions', () => {
   }
 });
 
+test('E3/W1/W6 use one kindNameFields display field without legacy name/title fallbacks', () => {
+  const pack = basePack({
+    kindNameFields: { work: 'title' },
+    entities: {
+      a: { kind: 'work', title: 'Same title', name: 'Different legacy name' },
+      b: { kind: 'work', title: 'Same title', name: 'Another legacy name' },
+    },
+  });
+  const result = validate(pack);
+  assert.deepEqual(result.errors, []);
+  assert.ok(hasWarning(result.warnings, 'W1: entity "a" (Same title)'));
+  assert.ok(hasWarning(result.warnings, 'W6: entities "a" and "b"'));
+
+  const legacyOnly = basePack({
+    kindNameFields: { work: 'title' },
+    entities: { a: { kind: 'work', name: 'Only legacy name' } },
+  });
+  assert.ok(hasError(errorsOf(legacyOnly), 'entities.a.title'));
+
+  const legacyCollisionOnly = basePack({
+    kindNameFields: { work: 'title' },
+    entities: {
+      a: { kind: 'work', title: 'Alpha', name: 'Same legacy name' },
+      b: { kind: 'work', title: 'Beta', name: 'Same legacy name' },
+    },
+  });
+  assert.ok(!hasWarning(warningsOf(legacyCollisionOnly), 'W6'));
+});
+
 test('E3 rejects an entity missing its name field', () => {
   assert.ok(hasError(errorsOf(basePack({ entities: { a: { kind: 'person' } } })), 'E3'));
 });
diff --git a/tests/patch-executor.test.js b/tests/patch-executor.test.js
new file mode 100644
index 0000000..cf80faf
--- /dev/null
+++ b/tests/patch-executor.test.js
@@ -0,0 +1,115 @@
+'use strict';
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { snapshotTree } = require('../scripts/lib/sg-tree-snapshot.js');
+const { parseUnifiedDiff, applyPatch } = require('../scripts/lib/sg-patch-executor.js');
+
+function workspace() {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-patch-'));
+  fs.mkdirSync(path.join(root, 'lib', 'data'), { recursive: true });
+  fs.writeFileSync(path.join(root, 'lib', 'data', 'data.json'), '{"value":"old"}\n');
+  fs.writeFileSync(path.join(root, 'README.md'), 'protected\n');
+  return root;
+}
+
+function manifest(overrides = {}) {
+  return {
+    taskId: 'sha256:' + 'a'.repeat(64),
+    filePolicy: {
+      allowed: [{ pattern: 'lib/data/data.json', operations: ['modify'] }],
+      forbidden: ['.git/**', 'README.md'],
+      allowHardlinks: false,
+      maxChangedFiles: 1,
+      maxPatchBytes: 10000,
+      ...overrides,
+    },
+    patchPolicy: { format: 'unified-diff', fuzz: 0, allowBinary: false },
+  };
+}
+
+const GOOD_PATCH = Buffer.from([
+  'diff --git a/lib/data/data.json b/lib/data/data.json',
+  '--- a/lib/data/data.json',
+  '+++ b/lib/data/data.json',
+  '@@ -1 +1 @@',
+  '-{"value":"old"}',
+  '+{"value":"new"}',
+  '',
+].join('\n'));
+
+test('patch executor applies an exact allowed patch and records before/after tree digests', () => {
+  const root = workspace();
+  try {
+    const result = applyPatch({ manifest: manifest(), workspaceRoot: root, patchBytes: GOOD_PATCH });
+    assert.equal(JSON.parse(fs.readFileSync(path.join(root, 'lib/data/data.json'), 'utf8')).value, 'new');
+    assert.equal(result.audit.status, 'applied');
+    assert.notEqual(result.audit.beforeTreeSha256, result.audit.afterTreeSha256);
+    assert.deepEqual(result.audit.actualOperations.map((item) => `${item.operation}:${item.path}`), ['modify:lib/data/data.json']);
+    assert.equal(result.audit.capabilities.osSandbox, false);
+    assert.match(result.audit.auditId, /^patch-audit:[0-9a-f]{64}$/);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('forbidden patch is rejected before apply and keeps the workspace byte-identical', () => {
+  const root = workspace();
+  const before = snapshotTree(root).treeSha256;
+  const patch = Buffer.from([
+    'diff --git a/README.md b/README.md',
+    '--- a/README.md', '+++ b/README.md', '@@ -1 +1 @@', '-protected', '+changed', '',
+  ].join('\n'));
+  try {
+    assert.throws(() => applyPatch({ manifest: manifest(), workspaceRoot: root, patchBytes: patch }), (error) => {
+      assert.equal(error.kind, 'policy-violation');
+      assert.equal(error.audit.status, 'rejected');
+      assert.ok(error.audit.preflight.violations.some((item) => /forbidden/.test(item)));
+      return true;
+    });
+    assert.equal(snapshotTree(root).treeSha256, before);
+    assert.equal(fs.readFileSync(path.join(root, 'README.md'), 'utf8'), 'protected\n');
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('stale hunk fails git apply check without changing the workspace', () => {
+  const root = workspace();
+  const before = snapshotTree(root).treeSha256;
+  const stale = Buffer.from(GOOD_PATCH.toString('utf8').replace('"old"', '"missing"'));
+  try {
+    assert.throws(() => applyPatch({ manifest: manifest(), workspaceRoot: root, patchBytes: stale }), (error) => {
+      assert.equal(error.kind, 'patch-invalid');
+      assert.equal(error.audit.commands.check.exitCode, 1);
+      return true;
+    });
+    assert.equal(snapshotTree(root).treeSha256, before);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('allowed add cannot introduce an executable file mode', () => {
+  const root = workspace();
+  const executable = Buffer.from([
+    'diff --git a/lib/data/new.sh b/lib/data/new.sh',
+    'new file mode 100755',
+    '--- /dev/null',
+    '+++ b/lib/data/new.sh',
+    '@@ -0,0 +1 @@',
+    '+echo unsafe',
+    '',
+  ].join('\n'));
+  try {
+    assert.throws(() => applyPatch({
+      manifest: manifest({ allowed: [{ pattern: 'lib/data/new.sh', operations: ['add'] }] }),
+      workspaceRoot: root,
+      patchBytes: executable,
+    }), (error) => error.kind === 'policy-not-supported' && /100755/.test(error.message));
+    assert.equal(fs.existsSync(path.join(root, 'lib', 'data', 'new.sh')), false);
+  } finally { fs.rmSync(root, { recursive: true, force: true }); }
+});
+
+test('patch parser rejects traversal, binary patches, renames, and duplicate file entries', () => {
+  assert.throws(() => parseUnifiedDiff('diff --git a/../secret b/../secret\n--- a/../secret\n+++ b/../secret\n@@ -1 +1 @@\n-a\n+b\n'), /parent traversal/);
+  assert.throws(() => parseUnifiedDiff('GIT binary patch\n'), (error) => error.kind === 'policy-not-supported');
+  assert.throws(() => parseUnifiedDiff('diff --git a/a b/b\nrename from a\nrename to b\n'), (error) => error.kind === 'policy-not-supported');
+  assert.throws(() => parseUnifiedDiff(GOOD_PATCH.toString('utf8') + GOOD_PATCH.toString('utf8')), /duplicate file entries/);
+});
diff --git a/tests/path-policy.test.js b/tests/path-policy.test.js
new file mode 100644
index 0000000..82e4ee8
--- /dev/null
+++ b/tests/path-policy.test.js
@@ -0,0 +1,131 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { test } = require('node:test');
+const policy = require('../scripts/lib/sg-path-policy.js');
+
+function tempTree() {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-path-policy-'));
+  fs.mkdirSync(path.join(root, 'inside'));
+  fs.writeFileSync(path.join(root, 'inside', 'file.txt'), 'same');
+  return root;
+}
+
+function cleanup(root) {
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+test('safeRelativePath rejects absolute paths and traversal in both separator styles', () => {
+  assert.throws(() => policy.safeRelativePath('../outside'), (error) => error.code === 'UNSAFE_RELATIVE_PATH');
+  assert.throws(() => policy.safeRelativePath('a/../../outside'), /parent traversal/);
+  assert.throws(() => policy.safeRelativePath('..\\outside'), /parent traversal/);
+  assert.throws(() => policy.safeRelativePath('/tmp/outside'), /must be relative/);
+  assert.throws(() => policy.safeRelativePath('C:\\outside'), /must be relative/);
+  assert.equal(policy.safeRelativePath('a\\b.txt'), 'a/b.txt');
+  assert.equal(policy.isSafeRelativePath('../outside'), false);
+});
+
+test('root containment canonicalizes symlink aliases and rejects escapes', (t) => {
+  const root = tempTree();
+  const outside = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-path-outside-'));
+  try {
+    fs.writeFileSync(path.join(outside, 'outside.txt'), 'outside');
+    assert.equal(policy.isWithinRoot(root, path.join(root, 'inside', 'file.txt')), true);
+    assert.equal(policy.isWithinRoot(root, path.join(outside, 'outside.txt')), false);
+    assert.throws(() => policy.assertWithinRoot(root, path.join(outside, 'outside.txt')), /outside allowed root/);
+    const alias = path.join(outside, 'root-alias');
+    try {
+      fs.symlinkSync(root, alias, 'dir');
+    } catch (error) {
+      t.skip(`symlinks unavailable: ${error.message}`);
+      return;
+    }
+    assert.equal(policy.isWithinRoot(root, path.join(alias, 'inside', 'file.txt')), true);
+    assert.equal(policy.canonicalPath(path.join(alias, 'inside', 'file.txt')), policy.canonicalPath(path.join(root, 'inside', 'file.txt')));
+  } finally {
+    cleanup(root);
+    cleanup(outside);
+  }
+});
+
+test('sameFile identifies canonical aliases and hard links, but not distinct files', (t) => {
+  const root = tempTree();
+  try {
+    const original = path.join(root, 'inside', 'file.txt');
+    const hardLink = path.join(root, 'inside', 'hard-link.txt');
+    const alias = path.join(root, 'inside', 'alias.txt');
+    fs.linkSync(original, hardLink);
+    assert.equal(policy.sameFile(original, hardLink), true);
+    try {
+      fs.symlinkSync(original, alias);
+    } catch (error) {
+      t.skip(`symlinks unavailable: ${error.message}`);
+      return;
+    }
+    assert.equal(policy.sameFile(original, alias), true);
+    assert.equal(policy.sameFile(original, path.join(root, 'inside', 'missing.txt')), false);
+  } finally {
+    cleanup(root);
+  }
+});
+
+test('symlink component checks detect a link in an existing parent', (t) => {
+  const root = tempTree();
+  const outside = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-path-link-target-'));
+  try {
+    const link = path.join(root, 'linked');
+    try {
+      fs.symlinkSync(outside, link, 'dir');
+    } catch (error) {
+      t.skip(`symlinks unavailable: ${error.message}`);
+      return;
+    }
+    assert.equal(policy.hasSymlinkComponent(path.join(link, 'new.txt'), { root }), true);
+    assert.equal(policy.symlinkComponent(path.join(link, 'new.txt'), { root }), link);
+    assert.throws(() => policy.assertNoSymlinkComponents(path.join(link, 'new.txt'), { root }), /symlink component/);
+    assert.equal(policy.hasSymlinkComponent(path.join(root, 'inside', 'file.txt'), { root }), false);
+  } finally {
+    cleanup(root);
+    cleanup(outside);
+  }
+});
+
+test('glob allow and deny policies support * and ** with deny precedence', () => {
+  assert.equal(policy.matchesGlob('src/app.js', 'src/*.js'), true);
+  assert.equal(policy.matchesGlob('src/lib/app.js', 'src/*.js'), false);
+  assert.equal(policy.matchesGlob('src/lib/app.js', 'src/**/*.js'), true);
+  assert.equal(policy.matchesGlob('src/app.js', '**/*.js'), true);
+  assert.deepEqual(policy.evaluateGlobPolicy('build/debug/app.js', {
+    allow: ['build/**'],
+    deny: ['build/debug/**'],
+  }), {
+    allowed: false,
+    path: 'build/debug/app.js',
+    deniedBy: 'build/debug/**',
+    allowedBy: null,
+  });
+  assert.equal(policy.isPathAllowed('src/app.js', { allow: ['src/**'], deny: ['**/*.map'] }), true);
+  assert.equal(policy.isPathAllowed('src/app.map', { allow: ['src/**'], deny: ['**/*.map'] }), false);
+});
+
+test('operationPolicy combines root containment with operation-specific glob rules', () => {
+  const root = tempTree();
+  try {
+    const operations = policy.operationPolicy({
+      root,
+      operations: {
+        read: { allow: ['inside/**'], deny: ['**/*.secret'] },
+        write: { allow: ['inside/**'] },
+      },
+    });
+    assert.equal(operations.isAllowed('read', path.join(root, 'inside', 'file.txt')), true);
+    assert.equal(operations.isAllowed('read', path.join(root, 'inside', 'file.secret')), false);
+    assert.throws(() => operations.assert('write', path.join(root, '..', 'outside.txt')), /outside allowed root/);
+    assert.throws(() => operations.assert('read', path.join(root, 'inside', 'file.secret')), /not allowed/);
+  } finally {
+    cleanup(root);
+  }
+});
diff --git a/tests/rules-cli.test.js b/tests/rules-cli.test.js
new file mode 100644
index 0000000..7f4282f
--- /dev/null
+++ b/tests/rules-cli.test.js
@@ -0,0 +1,67 @@
+'use strict';
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+const { test } = require('node:test');
+
+const CLI = path.join(__dirname, '..', 'scripts', 'sg-pack-rules.js');
+
+function run(directory, args = []) {
+  return spawnSync(process.execPath, [CLI, directory, ...args], { encoding: 'utf8' });
+}
+
+function fixture() {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-pack-rules-cli-'));
+  const dataDir = path.join(root, 'lib', 'data');
+  fs.mkdirSync(dataDir, { recursive: true });
+  fs.writeFileSync(path.join(dataDir, 'data.json'), JSON.stringify({ entities: { a: { name: 'A', kind: 'person' } } }));
+  fs.writeFileSync(path.join(dataDir, 'data-rules.json'), JSON.stringify({
+    rulesVersion: '1.0',
+    libId: 'cli-demo',
+    profile: {},
+    rules: [
+      { id: 'pass', level: 'hard', subject: 'pack', rule: 'passes', source: 'observed', check: 'true' },
+      { id: 'soft', level: 'soft', subject: 'pack', rule: 'softly fails', source: 'observed', check: 'false' },
+    ],
+  }));
+  return root;
+}
+
+test('rules CLI selects one rule while preserving legacy full execution and strict semantics', () => {
+  const root = fixture();
+  const selected = run(root, ['--rule', 'pass']);
+  assert.equal(selected.status, 0, selected.stderr);
+  assert.match(selected.stdout, /rules: 1 \| passed: 1/);
+
+  const full = run(root);
+  assert.equal(full.status, 0, full.stderr);
+  assert.match(full.stdout, /rules: 2 \| passed: 1 \| hard-fail: 0 \| soft-fail: 1/);
+
+  const strict = run(root, ['--strict']);
+  assert.equal(strict.status, 1);
+  assert.match(strict.stderr, /Strict mode/);
+  fs.rmSync(root, { recursive: true, force: true });
+});
+
+test('rules CLI returns exit 2 for unknown, duplicate, or malformed options and rule ids', () => {
+  const root = fixture();
+  for (const args of [['--unknown'], ['--strict', '--strict'], ['--rule', 'pass', '--rule', 'soft'], ['--rule'], ['--rule', 'missing'], ['--unexpected', 'x']]) {
+    const result = run(root, args);
+    assert.equal(result.status, 2, `${args.join(' ')} should exit 2`);
+  }
+  fs.rmSync(root, { recursive: true, force: true });
+});
+
+test('rules CLI validates the complete rules document before a selection', () => {
+  const root = fixture();
+  const rulesPath = path.join(root, 'lib', 'data', 'data-rules.json');
+  const document = JSON.parse(fs.readFileSync(rulesPath, 'utf8'));
+  document.rules[1].level = 'invalid';
+  fs.writeFileSync(rulesPath, JSON.stringify(document));
+  const result = run(root, ['--rule', 'pass']);
+  assert.equal(result.status, 1);
+  assert.match(result.stderr, /Rules-file structural check failed/);
+  fs.rmSync(root, { recursive: true, force: true });
+});
diff --git a/tests/rules-core.test.js b/tests/rules-core.test.js
index 7f6323a..bc679a5 100644
--- a/tests/rules-core.test.js
+++ b/tests/rules-core.test.js
@@ -45,3 +45,41 @@ test('rules core rejects structural violations before executing checks', () => {
   assert.equal(result.results.length, 0);
   assert.equal(result.passed, false);
 });
+
+test('rules core filters by ruleIds only after validating the complete document', () => {
+  const document = { rulesVersion: '1.0', libId: 'rules-demo', profile: {}, rules: [
+    rule({ id: 'selected', check: 'true' }),
+    rule({ id: 'not-selected', check: 'false' }),
+  ] };
+  const selected = executeRules(document, pack, { ruleIds: ['selected'] });
+  assert.deepEqual(selected.results.map(item => item.id), ['selected']);
+  assert.equal(selected.counts.total, 1);
+  assert.equal(selected.passed, true);
+
+  const malformed = { ...document, rules: [document.rules[0], { ...document.rules[1], level: 'invalid' }] };
+  const rejected = executeRules(malformed, pack, { ruleIds: ['selected'] });
+  assert.ok(rejected.structuralErrors.some(error => /rules\[1\]\.level/.test(error)));
+  assert.equal(rejected.results.length, 0);
+});
+
+test('rules core reports unknown requested rule ids without executing checks', () => {
+  const document = { rulesVersion: '1.0', libId: 'rules-demo', profile: {}, rules: [rule()] };
+  const result = executeRules(document, pack, { ruleIds: ['missing', 'demo-rule'] });
+  assert.deepEqual(result.unknownRuleIds, ['missing']);
+  assert.equal(result.counts.total, 0);
+  assert.equal(result.results.length, 0);
+  assert.equal(result.passed, false);
+});
+
+test('rules checks receive heroRelTypes, attributeSources, and derivations in scope', () => {
+  const scopedPack = {
+    ...pack,
+    heroRelTypes: { family: { label: 'Family' } },
+    attributeSources: ['entities.*.facts'],
+    derivations: { cards: { kind: 'repeat' } },
+  };
+  const document = { rulesVersion: '1.0', libId: 'rules-demo', profile: {}, rules: [rule({
+    check: 'heroRelTypes.family.label === "Family" && attributeSources[0] === "entities.*.facts" && derivations.cards.kind === "repeat"',
+  })] };
+  assert.equal(executeRules(document, scopedPack).passed, true);
+});
diff --git a/tests/task-runner.test.js b/tests/task-runner.test.js
new file mode 100644
index 0000000..c0a6c58
--- /dev/null
+++ b/tests/task-runner.test.js
@@ -0,0 +1,205 @@
+'use strict';
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const {
+  sha256,
+  computeTaskId,
+  computeTreeSha256,
+} = require('../scripts/lib/agent-task-manifest.js');
+const { snapshotTree } = require('../scripts/lib/sg-tree-snapshot.js');
+const { runTask } = require('../scripts/lib/sg-task-runner.js');
+
+function setup(options = {}) {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-task-runner-'));
+  const source = path.join(root, 'source');
+  fs.mkdirSync(path.join(source, 'lib', 'data'), { recursive: true });
+  fs.writeFileSync(path.join(source, 'lib', 'data', 'data.json'), JSON.stringify({
+    schemaVersion: '1.3', meta: { id: 'task-fixture', title: 'Task fixture' },
+    entities: { alice: { kind: 'person', name: 'Alice', summary: 'old' } },
+    aliases: { Alice: 'alice' }, stages: [{ key: 'main', name: 'Main', entities: ['alice'] }],
+  }, null, 2) + '\n');
+  const expectedSummaryArgv = options.mutatingGrader || options.failingMutatingGrader
+    ? [process.execPath, '-e', `const fs=require('fs');fs.appendFileSync('./lib/data/data.json','\\n');process.exit(${options.failingMutatingGrader ? 1 : 0})`]
+    : options.mutatingSourceGrader
+      ? [process.execPath, '-e', `require('fs').appendFileSync(${JSON.stringify(path.join(source, 'lib', 'data', 'data.json'))},'\\n')`]
+      : [process.execPath, '-e', "const p=require('./lib/data/data.json');process.exit(p.entities.alice.summary==='new'?0:1)"];
+  const grader = {
+    graderVersion: '1.0', graderId: 'task-fixture-grader', checks: [
+      { id: 'pack-contract', type: 'data-pack-contract', weight: 1, required: true, path: 'lib/data/data.json', strict: true },
+      { id: 'expected-summary', type: 'command', weight: 2, required: true, argv: expectedSummaryArgv, expectedExit: 0 },
+    ],
+  };
+
+  const graderDir = path.join(root, 'grader');
+  fs.mkdirSync(graderDir);
+  const graderFile = path.join(graderDir, 'spec.json');
+  fs.writeFileSync(graderFile, JSON.stringify(grader, null, 2));
+  const instructions = 'Change Alice summary from old to new. Modify only lib/data/data.json and emit a unified diff.';
+  const manifest = {
+    taskVersion: '1.0', taskId: null,
+    instructions: { text: instructions, sha256: sha256(instructions) },
+    source: { root: 'source', revision: 'fixture-v1', treeSha256: computeTreeSha256(source) },
+    inputs: [{ id: 'data-pack', path: 'lib/data/data.json', role: 'source', sha256: sha256(fs.readFileSync(path.join(source, 'lib/data/data.json'))) }],
+    filePolicy: {
+      allowed: [{ pattern: 'lib/data/data.json', operations: ['modify'] }], forbidden: ['.git/**'], denyPrecedence: true,
+      allowSymlinks: false, allowHardlinks: false, maxChangedFiles: 1, maxPatchBytes: 20000,
+    },
+    patchPolicy: { format: 'unified-diff', fuzz: 0, allowBinary: false },
+    graders: [{ id: 'task-grader', spec: 'grader/spec.json', sha256: sha256(fs.readFileSync(graderFile)), treeSha256: computeTreeSha256(graderDir), weight: 1 }],
+    evidence: { runtime: [], visual: [] },
+    execution: { timeoutMs: 30000, network: 'off', maxOutputBytes: 65536 },
+  };
+  manifest.taskId = computeTaskId(manifest);
+  const taskFile = path.join(root, 'task.json');
+  fs.writeFileSync(taskFile, JSON.stringify(manifest, null, 2) + '\n');
+  return { root, source, taskFile };
+}
+
+function scriptedAgent(root, directMutation = false) {
+  const file = path.join(root, directMutation ? 'mutating-agent.js' : 'patch-agent.js');
+  fs.writeFileSync(file, directMutation ? `
+const fs=require('fs'),path=require('path');
+const [workspace,patch]=process.argv.slice(2);
+const data=path.join(workspace,'lib/data/data.json');
+fs.writeFileSync(data,fs.readFileSync(data,'utf8').replace('"summary": "old"','"summary": "new"'));
+fs.writeFileSync(patch,'not used');
+` : `
+const fs=require('fs'),path=require('path');
+const workspace=process.argv[2],patch=process.argv[3];
+const source=fs.readFileSync(path.join(workspace,'lib/data/data.json'),'utf8').trimEnd().split('\\n');
+const body=[];
+for(const line of source){
+  if(line.includes('"summary": "old"')){
+    body.push('-'+line);
+    body.push('+'+line.replace('"summary": "old"','"summary": "new"'));
+  } else body.push(' '+line);
+}
+fs.writeFileSync(patch,[
+'diff --git a/lib/data/data.json b/lib/data/data.json',
+'--- a/lib/data/data.json','+++ b/lib/data/data.json',
+'@@ -1,'+source.length+' +1,'+source.length+' @@',...body,''
+].join('\\n'));
+`);
+  return file;
+}
+
+function gitMutatingAgent(root) {
+  const patchAgent = scriptedAgent(root);
+  const file = path.join(root, 'git-mutating-agent.js');
+  fs.writeFileSync(file, `
+const fs=require('fs'),path=require('path');
+const workspace=process.argv[2];
+fs.mkdirSync(path.join(workspace,'.git'),{recursive:true});
+fs.writeFileSync(path.join(workspace,'.git','config'),'forbidden direct mutation\\n');
+require(${JSON.stringify(patchAgent)});
+`);
+  return file;
+}
+
+test('task runner executes patch-only agent, enforces policy, grades candidate, and preserves source', () => {
+  const fixture = setup();
+  const before = snapshotTree(fixture.source).treeSha256;
+  try {
+    const agent = scriptedAgent(fixture.root);
+    const artifacts = path.join(fixture.root, 'artifacts');
+    const result = runTask({
+      taskFile: fixture.taskFile,
+      agentArgv: [process.execPath, agent, '{workspace}', '{patch}', '{prompt}'],
+      artifactRoot: artifacts,
+      agent: { provider: 'scripted-fixture', model: 'deterministic-v1' },
+    });
+    assert.equal(result.report.verdict, 'passed', JSON.stringify(result.report, null, 2));
+    assert.equal(result.report.patch.status, 'applied');
+    assert.equal(result.report.grades[0].verdict, 'passed');
+    assert.equal(result.report.grades[0].score, 3);
+    assert.equal(snapshotTree(fixture.source).treeSha256, before);
+    assert.equal(JSON.parse(fs.readFileSync(path.join(fixture.source, 'lib/data/data.json'), 'utf8')).entities.alice.summary, 'old');
+    assert.equal(fs.existsSync(path.join(artifacts, 'agent.patch')), true);
+    assert.equal(fs.existsSync(path.join(artifacts, 'patch-audit.json')), true);
+    assert.equal(fs.existsSync(path.join(artifacts, 'grade-task-grader.json')), true);
+    assert.equal(fs.existsSync(path.join(artifacts, 'task-run.json')), true);
+    assert.equal(result.report.capabilities.osSandbox, false);
+  } finally { fs.rmSync(fixture.root, { recursive: true, force: true }); }
+});
+
+test('task runner keeps post-agent grader mutation in the valid failure denominator', () => {
+  const fixture = setup({ mutatingGrader: true });
+  try {
+    const result = runTask({
+      taskFile: fixture.taskFile,
+      agentArgv: [process.execPath, scriptedAgent(fixture.root), '{workspace}', '{patch}', '{prompt}'],
+      artifactRoot: path.join(fixture.root, 'artifacts'),
+      agent: { provider: 'scripted-fixture', model: 'deterministic-v1' },
+    });
+    assert.equal(result.report.verdict, 'policy-violation');
+    assert.match(result.report.termination.message, /grader modified/);
+    assert.equal(result.report.patch.status, 'applied');
+  } finally { fs.rmSync(fixture.root, { recursive: true, force: true }); }
+});
+
+test('observed candidate failure survives a later workspace integrity error', () => {
+  const fixture = setup({ failingMutatingGrader: true });
+  try {
+    const result = runTask({
+      taskFile: fixture.taskFile,
+      agentArgv: [process.execPath, scriptedAgent(fixture.root), '{workspace}', '{patch}', '{prompt}'],
+      artifactRoot: path.join(fixture.root, 'artifacts'),
+      agent: { provider: 'scripted-fixture', model: 'deterministic-v1' },
+    });
+    assert.equal(result.report.verdict, 'grader-failed');
+    assert.equal(result.report.grades[0].verdict, 'failed');
+    assert.equal(result.report.secondaryErrors.length, 1);
+    assert.match(result.report.secondaryErrors[0].message, /grader modified/);
+    assert.equal(result.report.termination.processExitCode, 1);
+  } finally { fs.rmSync(fixture.root, { recursive: true, force: true }); }
+});
+
+test('final source drift cannot produce a passing TaskRun', () => {
+  const fixture = setup({ mutatingSourceGrader: true });
+  try {
+    const result = runTask({
+      taskFile: fixture.taskFile,
+      agentArgv: [process.execPath, scriptedAgent(fixture.root), '{workspace}', '{patch}', '{prompt}'],
+      artifactRoot: path.join(fixture.root, 'artifacts'),
+      agent: { provider: 'scripted-fixture', model: 'deterministic-v1' },
+    });
+    assert.equal(result.report.verdict, 'policy-violation');
+    assert.equal(result.report.task.sourceUnchanged, false);
+    assert.match(result.report.termination.message, /source root changed/);
+  } finally { fs.rmSync(fixture.root, { recursive: true, force: true }); }
+});
+
+test('task runner detects direct .git mutation in security snapshots', () => {
+  const fixture = setup();
+  try {
+    const result = runTask({
+      taskFile: fixture.taskFile,
+      agentArgv: [process.execPath, gitMutatingAgent(fixture.root), '{workspace}', '{patch}', '{prompt}'],
+      artifactRoot: path.join(fixture.root, 'artifacts'),
+      agent: { provider: 'scripted-fixture', model: 'git-mutating' },
+    });
+    assert.equal(result.report.verdict, 'policy-violation');
+    assert.match(result.report.termination.message, /modified the workspace directly/);
+  } finally { fs.rmSync(fixture.root, { recursive: true, force: true }); }
+});
+
+test('task runner rejects direct workspace mutation even when an agent also emits a patch', () => {
+  const fixture = setup();
+  const before = snapshotTree(fixture.source).treeSha256;
+  try {
+    const agent = scriptedAgent(fixture.root, true);
+    const result = runTask({
+      taskFile: fixture.taskFile,
+      agentArgv: [process.execPath, agent, '{workspace}', '{patch}'],
+      artifactRoot: path.join(fixture.root, 'artifacts'),
+      agent: { provider: 'scripted-fixture', model: 'mutating' },
+    });
+    assert.equal(result.report.verdict, 'policy-violation');
+    assert.match(result.report.termination.message, /modified the workspace directly/);
+    assert.equal(result.report.patch, null);
+    assert.equal(snapshotTree(fixture.source).treeSha256, before);
+  } finally { fs.rmSync(fixture.root, { recursive: true, force: true }); }
+});
diff --git a/tests/tree-snapshot.test.js b/tests/tree-snapshot.test.js
new file mode 100644
index 0000000..4b9be87
--- /dev/null
+++ b/tests/tree-snapshot.test.js
@@ -0,0 +1,118 @@
+'use strict';
+
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { test } = require('node:test');
+const {
+  snapshotTree,
+  treeHash,
+  diffTrees,
+} = require('../scripts/lib/sg-tree-snapshot.js');
+
+function tempTree() {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'sg-tree-snapshot-'));
+  fs.mkdirSync(path.join(root, 'src'));
+  fs.mkdirSync(path.join(root, '.git'));
+  fs.writeFileSync(path.join(root, 'src', 'app.js'), 'one');
+  fs.writeFileSync(path.join(root, 'src', 'same.txt'), 'same');
+  fs.writeFileSync(path.join(root, '.git', 'ignored'), 'not in snapshot');
+  return root;
+}
+
+function cleanup(root) {
+  fs.rmSync(root, { recursive: true, force: true });
+}
+
+function entry(snapshot, relativePath) {
+  return snapshot.entries.find((item) => item.path === relativePath);
+}
+
+test('snapshot records files, directories, symlinks and excludes .git by default', (t) => {
+  const root = tempTree();
+  try {
+    const linkPath = path.join(root, 'src', 'app-link.js');
+    try {
+      fs.symlinkSync('app.js', linkPath);
+    } catch (error) {
+      t.skip(`symlinks unavailable: ${error.message}`);
+      return;
+    }
+    const snapshot = snapshotTree(root);
+    assert.equal(snapshot.root, fs.realpathSync(root));
+    assert.equal(entry(snapshot, 'src').kind, 'directory');
+    assert.equal(entry(snapshot, 'src/app.js').kind, 'file');
+    assert.equal(entry(snapshot, 'src/app.js').size, 3);
+    assert.match(entry(snapshot, 'src/app.js').sha256, /^[a-f0-9]{64}$/);
+    assert.deepEqual({
+      kind: entry(snapshot, 'src/app-link.js').kind,
+      target: entry(snapshot, 'src/app-link.js').target,
+      size: entry(snapshot, 'src/app-link.js').size,
+    }, { kind: 'symlink', target: 'app.js', size: 6 });
+    assert.equal(entry(snapshot, '.git'), undefined);
+    assert.match(snapshot.treeSha256, /^[a-f0-9]{64}$/);
+  } finally {
+    cleanup(root);
+  }
+});
+
+test('tree hash is deterministic and configurable excludes affect the tree', () => {
+  const first = tempTree();
+  const second = tempTree();
+  try {
+    const a = snapshotTree(first);
+    const b = snapshotTree(second);
+    assert.equal(a.treeSha256, b.treeSha256);
+    assert.equal(treeHash(a.entries), a.treeSha256);
+    fs.writeFileSync(path.join(second, 'ignored.log'), 'ignored');
+    assert.notEqual(snapshotTree(second).treeSha256, a.treeSha256);
+    assert.equal(snapshotTree(second, { exclude: ['.git', '.git/**', '**/*.log'] }).treeSha256, a.treeSha256);
+    assert.equal(snapshotTree(first, { exclude: false }).entries.some((item) => item.path === '.git/ignored'), true);
+  } finally {
+    cleanup(first);
+    cleanup(second);
+  }
+});
+
+test('tree diff identifies add, modify, delete, mode and type changes', () => {
+  const before = {
+    entries: [
+      { path: 'same.txt', kind: 'file', mode: 0o644, sha256: 'same', size: 4, target: null },
+      { path: 'changed.txt', kind: 'file', mode: 0o644, sha256: 'old', size: 3, target: null },
+      { path: 'deleted.txt', kind: 'file', mode: 0o644, sha256: 'gone', size: 4, target: null },
+      { path: 'mode.txt', kind: 'file', mode: 0o644, sha256: 'mode', size: 4, target: null },
+      { path: 'type.txt', kind: 'file', mode: 0o644, sha256: 'type', size: 4, target: null },
+    ],
+  };
+  const after = {
+    entries: [
+      { path: 'same.txt', kind: 'file', mode: 0o644, sha256: 'same', size: 4, target: null },
+      { path: 'changed.txt', kind: 'file', mode: 0o644, sha256: 'new', size: 3, target: null },
+      { path: 'added.txt', kind: 'file', mode: 0o644, sha256: 'new-file', size: 8, target: null },
+      { path: 'mode.txt', kind: 'file', mode: 0o755, sha256: 'mode', size: 4, target: null },
+      { path: 'type.txt', kind: 'directory', mode: 0o755, sha256: null, size: 0, target: null },
+    ],
+  };
+  const diff = diffTrees(before, after);
+  assert.equal(diff.changed, true);
+  assert.equal(diff.added[0].path, 'added.txt');
+  assert.equal(diff.modified[0].path, 'changed.txt');
+  assert.equal(diff.deleted[0].path, 'deleted.txt');
+  assert.equal(diff.modeChanged[0].path, 'mode.txt');
+  assert.equal(diff.typeChanged[0].path, 'type.txt');
+  assert.deepEqual(diff.changes.map((change) => change.change).sort(), ['add', 'delete', 'mode', 'modify', 'type']);
+});
+
+test('tree diff optionally detects content-identical file renames', () => {
+  const before = { entries: [{ path: 'old.txt', kind: 'file', mode: 0o644, sha256: 'hash', size: 4, target: null }] };
+  const after = { entries: [{ path: 'new.txt', kind: 'file', mode: 0o644, sha256: 'hash', size: 4, target: null }] };
+  const withoutRename = diffTrees(before, after);
+  assert.equal(withoutRename.renamed.length, 0);
+  assert.equal(withoutRename.added.length, 1);
+  const withRename = diffTrees(before, after, { detectRenames: true });
+  assert.equal(withRename.renamed.length, 1);
+  assert.deepEqual({ from: withRename.renamed[0].from, to: withRename.renamed[0].to }, { from: 'old.txt', to: 'new.txt' });
+  assert.equal(withRename.added.length, 0);
+  assert.equal(withRename.deleted.length, 0);
+});