chore(m042): sync reconciled M-041 before revalidation

.github/workflows/m040-axrail-pilot.yml

@@ -0,0 +1,107 @@
+name: M-040 Axrail Connected Project Pilot
+
+on:
+  push:
+    branches:
+      - "feat/m040-*"
+    paths:
+      - "packages/project-sdk/**"
+      - "scripts/m040/**"
+      - "tests/project-sdk/**"
+      - "tests/project-integration/**"
+      - ".github/workflows/m040-axrail-pilot.yml"
+  pull_request:
+    paths:
+      - "packages/project-sdk/**"
+      - "scripts/m040/**"
+      - "tests/project-sdk/**"
+      - "tests/project-integration/**"
+      - ".github/workflows/m040-axrail-pilot.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  axrail-connected-project:
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+
+    steps:
+      - name: Checkout Cortex
+        uses: actions/checkout@v4
+        with:
+          path: cortex
+
+      - name: Checkout Axrail pilot
+        uses: actions/checkout@v4
+        with:
+          repository: Kucell/axrail
+          ref: feat/cortex-project-integration-pilot
+          path: axrail
+
+      - name: Setup Node for descriptor validation
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24.19.0"
+
+      - name: Validate Axrail connected-project descriptor
+        working-directory: cortex
+        run: |
+          node scripts/m040/validate-connected-project.js             ../axrail             --expect-project axrail             --expect-repository Kucell/axrail             | tee ../axrail-cortex-project-validation.json
+
+      - name: Verify Axrail protected authority boundary
+        working-directory: cortex
+        run: |
+          node - <<'NODE'
+          const fs = require("node:fs");
+          const result = JSON.parse(fs.readFileSync("../axrail-cortex-project-validation.json", "utf8"));
+          const required = [
+            "HarnessRuntime",
+            "ToolRuntime",
+            "Policy",
+            "Validation",
+            "Approval",
+            "TransactionRuntime",
+            "EventStore",
+            "EngineeringAdapters",
+          ];
+          for (const name of required) {
+            if (!result.protected_components.includes(name)) {
+              throw new Error("missing protected Axrail authority: " + name);
+            }
+          }
+          if (result.authoritative_domain !== "axrail" || result.authoritative_runtime !== "axrail") {
+            throw new Error("Axrail authority boundary drift");
+          }
+          if (result.cortex_role !== "governance-orchestration") {
+            throw new Error("unexpected Cortex role: " + result.cortex_role);
+          }
+          NODE
+
+      - name: Enable Axrail pnpm
+        working-directory: axrail
+        run: |
+          corepack enable
+          corepack prepare [email protected] --activate
+          pnpm --version
+
+      - name: Install Axrail workspace
+        working-directory: axrail
+        run: pnpm install --frozen-lockfile
+
+      - name: Execute declared Axrail release validation profile
+        working-directory: axrail
+        run: |
+          pnpm release:dry-run 2>&1 | tee ../axrail-release-dry-run.log
+
+      - name: Upload pilot evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: m040-axrail-connected-project-evidence
+          path: |
+            axrail-cortex-project-validation.json
+            axrail-release-dry-run.log
+          if-no-files-found: error
+          retention-days: 14

.github/workflows/m040-final-validation.yml

@@ -0,0 +1,70 @@
+name: M-040 Final Product Validation
+
+on:
+  push:
+    branches:
+      - "feat/m040-runtime-control-architecture"
+    paths:
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "packages/**"
+      - "lib/**"
+      - "scripts/m040/**"
+      - "tests/**"
+      - "docs/architecture/**"
+      - ".github/workflows/m040-final-validation.yml"
+  pull_request:
+    paths:
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "packages/**"
+      - "lib/**"
+      - "scripts/m040/**"
+      - "tests/**"
+      - "docs/architecture/**"
+      - ".github/workflows/m040-final-validation.yml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  full-regression:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24.19.0"
+
+      - name: Enable pnpm
+        run: |
+          corepack enable
+          corepack prepare [email protected] --activate
+          pnpm --version
+
+      - name: Frozen workspace install
+        run: pnpm install --frozen-lockfile
+
+      - name: Run M-040 architecture guard
+        run: pnpm guard:m040
+
+      - name: Run M-040 focused product validation
+        run: pnpm test:m040
+
+      - name: Verify root npm package can be packed
+        run: npm pack --dry-run --json > m040-pack-dry-run.json
+
+      - name: Upload final validation evidence
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: m040-final-product-validation-evidence
+          path: m040-pack-dry-run.json
+          if-no-files-found: warn
+          retention-days: 14

.github/workflows/m040-validation.yml

@@ -0,0 +1,76 @@
+name: M-040 Architecture Validation
+
+on:
+  push:
+    branches:
+      - "feat/m040-*"
+    paths:
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "packages/**"
+      - "lib/sdk/**"
+      - "lib/runtime-port/**"
+      - "lib/control-service/**"
+      - "lib/event-bridge/**"
+      - "lib/commands/management/query.js"
+      - "tests/architecture/**"
+      - "tests/protocol/**"
+      - "tests/sdk/**"
+      - "tests/runtime-port/**"
+      - "tests/runtime-paseo/**"
+      - "tests/control-service/**"
+      - "tests/event-bridge/**"
+      - "tests/extensions/**"
+      - "tests/project-sdk/**"
+      - "tests/management/management-query-cli.test.js"
+      - ".github/workflows/m040-validation.yml"
+  pull_request:
+    paths:
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "pnpm-workspace.yaml"
+      - "packages/**"
+      - "lib/sdk/**"
+      - "lib/event-bridge/**"
+      - "lib/control-service/**"
+      - "lib/runtime-port/**"
+      - "lib/commands/management/query.js"
+      - "tests/architecture/**"
+      - "tests/protocol/**"
+      - "tests/sdk/**"
+      - "tests/project-sdk/**"
+      - "tests/extensions/**"
+      - "tests/event-bridge/**"
+      - "tests/control-service/**"
+      - "tests/runtime-port/**"
+      - "tests/runtime-paseo/**"
+      - "tests/management/management-query-cli.test.js"
+      - ".github/workflows/m040-validation.yml"
+
+permissions:
+  contents: read
+
+jobs:
+  protocol-sdk:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24.19.0"
+
+      - name: Enable Corepack and pnpm
+        run: |
+          corepack enable
+          corepack prepare [email protected] --activate
+          pnpm --version
+
+      - name: Install workspace
+        run: pnpm install --frozen-lockfile
+
+      - name: Run M-040 focused validation
+        run: pnpm test:m040

docs/architecture/README.md

@@ -26,6 +26,17 @@
 - [AI-Native SDLC 闭环治理](./ai-native-sdlc-governance.md)
 - [Agent Workspace Orchestration](./agent-workspace-orchestration.md)
 - [Agent Runtime Continuity](./agent-runtime-continuity.md)
+- [Runtime, Control and Integration Ownership](./runtime-control-ownership.md)
+- [Protocol, SDK and Progressive Monorepo](./protocol-sdk-monorepo.md)
+- [Protocol Versioning and Capability Negotiation](./protocol-negotiation.md)
+- [RuntimePort v1 and Native Adapter Compatibility](./runtime-port-v1.md)
+- [Host / Runtime Topology and Capability Routing](./runtime-topology-routing.md)
+- [Control Service and Daemon Boundary](./control-service-boundary.md)
+- [CortexEvent v1 and Timeline Contract](./cortex-event-timeline.md)
+- [Extension and Permission Architecture](./extension-permission-architecture.md)
+- [External Project Integration Contract](./project-integration.md)
+- [Paseo Runtime Adapter](./paseo-runtime-adapter.md)
+- [M-040 Runtime / Project Integration Runbook](./m040-integration-runbook.md)
 - [Branch Management Design](./branch-management-design.md)
 - [Catalog Bridge](./catalog-bridge.md)
 - [Context Optimization v2](./context-optimization-v2.md)