[specter119]

Summary

• Implement the version 8 profile, dependency/exclusion, input provenance, template/copy/directory resource, baseline, filesystem-boundary, and plan-evidence paths, with CLI support for inspect, plan, apply, accept, adopt, and reverse-sync.
• Add finite-batch freshness checks, structured JSONC and nested TOML handling, explicit parent/file modes, and isolated resource acceptance fixtures with independent expected bytes.
• Extend the M6 TOML patcher to preserve inline comments and non-value bytes, and add focused regression coverage.
• Record the public contract, current implementation status, acceptance evidence, and scope limits.

Validation

• PYTHONDONTWRITEBYTECODE=1 PYTHONPATH=src python3 -B -m unittest discover -s tests — 645 tests passed.
• ruff check src tests and ruff format --check src tests — passed.
• All applicable prek hooks passed for every changed path, including ty, secret scanning, symlink validation, and Markdown formatting.
• prek run --all-files could not process an unchanged read-only .agents/skills/luwu-semantic-drift-review/SKILL.md; the same configured hooks passed on all changed paths.

Scope limits

M7 remains partial because no stable public Droid workspace-trust file schema has been verified. The application-shaped fixtures use synthetic files and do not establish compatibility with running OpenCode, Codex, or Droid runtimes. Droid workspace trust is intentionally unsupported pending schema evidence.