diff --git a/.agents/skills/benchmark-editorial/SKILL.md b/.agents/skills/benchmark-editorial/SKILL.md
index e9e6b2e55..152dc0cda 100644
--- a/.agents/skills/benchmark-editorial/SKILL.md
+++ b/.agents/skills/benchmark-editorial/SKILL.md
@@ -17,7 +17,7 @@ Treat feedback as editorial input, not publishable copy. Identify the reader pro
 
 ## Evidence and argument
 
-Read the supplied reports and relevant reference articles, including their charts, cases and methodology. Track material that could not be inspected privately; do not claim full coverage from a landing page. Study how reference articles develop their reasoning as well as how they look. Their facts are not evidence for this benchmark.
+Read the supplied reports and relevant reference articles, including their charts, cases and methodology. Track material that could not be inspected privately; do not claim full coverage from a landing page. Study how reference articles develop their reasoning as well as how they look. Their facts are not evidence for this benchmark. When reproducing a supplied reference, compare its actual opening, result charts, specimen interactions and conclusion with the delivered page. Reuse the owning presentation components where available; matching headings and factual claims alone does not establish presentation parity.
 
 For this repository, use `evaluation/current-report.json`, the normalized persisted results and the current scoring implementation. Read [benchmark-report](../benchmark-report/SKILL.md) when building or auditing them. Keep a private ledger for consequential claims: evidence, calculation, interpretation and limits. Do not rerun providers, alter scores or select better attempts to improve a narrative.
 
diff --git a/.agents/skills/benchmark-report/SKILL.md b/.agents/skills/benchmark-report/SKILL.md
index c9861c70a..5e63bc9fc 100644
--- a/.agents/skills/benchmark-report/SKILL.md
+++ b/.agents/skills/benchmark-report/SKILL.md
@@ -5,7 +5,7 @@ description: Design, run, audit, revise, and release evidence-backed benchmark r
 
 # Benchmark report
 
-Produce a report whose conclusions can be traced to frozen inputs, measured outputs, scoring rules, and an explicit result review. Optimize for a reader deciding what the benchmark means, not for preserving the author's workflow.
+Produce a report whose conclusions can be traced to frozen inputs, measured outputs, scoring rules, and the declared result-review coverage. Optimize for a reader deciding what the benchmark means, not for preserving the author's workflow.
 
 Read the repository's `AGENTS.md` first. Project rules override this general skill. Before changing a benchmark, read [evaluation design](references/evaluation-design.md). Before reviewing scores or deciding whether to rerun, read [audit and revision](references/audit-and-revision.md). Before building or publishing a report, read [report and release](references/report-and-release.md).
 
@@ -18,13 +18,15 @@ An explicitly requested diagnostic report may be delivered separately from a cer
 Public report CLIs default to English where supported and expose `--language en|zh`. Preserve the selected language on rebuild. English builds retain the matching Chinese edition; keep measured material in its source language. Historical Chinese-only renderers must disclose that limit and reject unsupported requests. Bind generated languages and the selected entry in report metadata. English navigation opens a not-generated notice when absent; never publish stale English pages. Validate each generated edition and retain route, value and evidence-link parity checks when both exist.
 
 1. Establish the decision being supported, the measured unit, cohort, versions, execution location, freshness policy, and intended deliverable. Inspect the actual dataset, runner, outputs, scorer, prior review evidence, and current report. Do not infer them from screenshots or prose.
-2. Freeze a machine-readable evaluation contract before expensive calls. It must identify the exact cases and methods, run count, timeout, concurrency policy, input and output contract, scoring provenance, reference state, and publication target when one exists. For source-dependent tasks, fail closed: verify and freeze references immediately before calls, verify the same declared scope afterward, and certify the cohort only when both checks pass. Partial or uncertified cohorts remain diagnostic evidence and cannot enter a release.
+2. Freeze a machine-readable evaluation contract before expensive calls. It must identify the exact cases and methods, run count, timeout, concurrency policy, input and output contract, scoring provenance, reference state, and publication target when one exists. Existing compiled reference answers are frozen by default. Source metadata, capture dates, and absent newer acceptance-contract fields do not imply a live-reference task. Only tasks explicitly declaring `source_verification.reference_mode: live_exact` require live checks. For those tasks, fail closed: verify and freeze references immediately before calls, verify the same declared scope afterward, and certify the cohort only when both checks pass. An unchanged compiled acceptance-contract dataset is already the benchmark input: freeze its task and rule bytes for execution, without requiring historical source-qualification raw files or re-auditing cohort admission. Qualify sources when adding tasks or changing references/acceptance rules; do not turn an ordinary version rerun into dataset reconstruction. Partial or uncertified cohorts remain diagnostic evidence and cannot enter a release.
 3. Let each method use its strongest documented route to produce the required output. Equalize the task, inputs, output contract, call budget, and scoring. Do not require identical internals. Record material asymmetries such as local versus remote execution, cold versus warm start, bundled conversion, network transit, account tier, and billable time.
 4. Preserve evidence as an append-only chain: task definition, reference, provider call, raw artifact, normalized artifact, score, review, revision, and release. Keep provider output and call identity immutable. A presentation or scoring change must not masquerade as a new provider result.
 5. Separate retrieval success, task acceptance, content quality, latency, cost, and freshness. A missing or partial reference makes the affected metric unavailable or scoped; it does not prove success or failure. Do not derive binary acceptance from an unrelated aggregate similarity score.
 6. For heterogeneous same-window latency evidence, preserve the full predeclared task-by-method matrix. Show all-call latency on that common denominator separately from successful-call latency on each method's conditional subset. Treat the all-method shared-pass intersection as a diagnostic, never as a post-outcome selector or ranking sample.
 7. At aggregate and publication boundaries, copy only explicit hash-bound evidence and public audit files. Reject symlinks and exclude worker trees, host paths, credentials, and internal run logs. Verify primary, auxiliary, delivered-file, and retained retry artifacts before release.
 8. Independent result review is opt-in: do not start it unless the user explicitly requests review. When requested without a broader scope, review machine failures only; review machine passes or every attempt only when the user explicitly asks for full review. Keep the initial verdict blind, but do not equate agreement with correctness: run the anomaly investigation in [audit and revision](references/audit-and-revision.md) for triggered results before calling the review complete. For a large independent review that is safely batchable, prefer resumable Codex CLI jobs with an exact model ID, read-only sandbox, strict output schema, non-overlapping packets, and bounded concurrency; persist each completed packet so a retry never repeats substantive review. Record the exact reviewed/total coverage, accepted unreviewed passes, reviewer, disagreements, adjudications, anomalies, and unresolved items. A review summary never replaces per-attempt evidence.
+For an explicitly requested full review, set `independent_result_review_scope: all` in the report profile and carry it into the assembled dataset comparison. The release boundary must reject failure-only review, missing attempts and accepted unreviewed passes. Reuse an existing content judgment only when the raw answer and acceptance contract are unchanged; verify each new call identity separately. For failed calls, inspect the current runtime evidence even when the answer is unchanged or empty: the same empty output can hide different failures. Changed evidence needs supplemental review, not another review of the unchanged population.
+
 9. Rerun only calls whose inputs, provider route/version, runtime contract, or source validity changed. Recompute downstream scores and reports without provider calls when only scoring, annotations, or presentation changed. Never retry merely to obtain a better result. A reference or verdict correction must identify the shared root cause and add executable positive/negative controls through the production scorer; bind those regression IDs in the revision receipt instead of patching stored verdicts.
 10. Build the public report from the frozen evidence. Every page should answer a reader question. Show task and run identifiers, the exact expected-versus-actual evidence behind a verdict, denominators and unavailable metrics, method differences, limits, concise reproduction instructions, and a compact review history.
 11. Release only after code tests, evidence integrity, report links, responsive/visual checks, secret scans, target-site checks, and deployed-output verification pass. Preserve earlier sites unless replacement was explicitly requested.
diff --git a/.agents/skills/benchmark-report/references/audit-and-revision.md b/.agents/skills/benchmark-report/references/audit-and-revision.md
index 5ad926e2e..fbd856f8e 100644
--- a/.agents/skills/benchmark-report/references/audit-and-revision.md
+++ b/.agents/skills/benchmark-report/references/audit-and-revision.md
@@ -18,7 +18,7 @@ release manifest + deployed bytes
 
 Hash and bind transitions where accidental mixing is plausible. Validate exact cardinality and uniqueness, not only totals. Treat raw outputs, timestamps, request status, method version, and call IDs as immutable measured evidence.
 
-Source-dependent calls require a fail-closed boundary: capture and freeze the declared reference scope immediately before execution, repeat the independent observation after execution, and bind both checks to the complete cohort. A process exit, partial attempt count, changed reference, or missing post-check makes the cohort diagnostic rather than publishable; never salvage its successful rows into the release matrix.
+Live exact-reference calls require a fail-closed boundary: capture and freeze the declared reference scope immediately before execution, repeat the independent observation after execution, and bind both checks to the complete cohort. A process exit, partial attempt count, changed reference, or missing post-check makes the cohort diagnostic rather than publishable; never salvage its successful rows into the release matrix.
 
 ## Independent result review
 
@@ -49,6 +49,10 @@ Use dependency impact, not convenience:
 
 Never overwrite old evidence or select a later response because it scores better. Assemble a new complete evidence view atomically, record inherited versus rerun attempts, and verify all downstream bindings.
 
+Before a cohort-wide offline recomputation, finish the paired controls and compare the known affected output family with its independent judgments. Cover equivalent serializers and adjacent invalid forms together, including visible text outside a link, image alternatives, and record ownership. Batch the shared corrections before the expensive sweep; do not rerun unchanged browser calls. Bound both worker count and queued payloads when saved outputs or logs are large.
+
+A subresource network error does not establish a main-navigation failure. Failure categories must agree with the reviewed cause and its actual stage; keep missing embedded content, unsupported direct-file conversion, empty output, and process crashes distinct. Interpretation pages show complete distributions and representative evidence. Full per-result diagnoses belong in the existing result inventory and details.
+
 ## Revision receipts
 
 A score-only revision must record old and new dataset/result hashes, changed fields, decision changes, provider call count of zero, reviewer binding, and predecessor history hash. A new provider call must receive a new call identity and must not be described as a scoring correction.
@@ -78,3 +82,4 @@ private evidence. Never rescue an empty declared body from a nonempty display
 message. Reproject retained full responses without new product calls when only
 this selection changed; missing historical envelopes require fresh calls across
 the full declared correction scope before claiming revised benchmark scores.
+Reruns of unchanged compiled acceptance-contract tasks freeze the existing executable dataset. They do not require recovering historical qualification raw files or repeating admission review. Source qualification is part of task authoring and reference/rule correction, not a prerequisite for every provider-version comparison. Preserve historical receipts without applying their evidence-file requirements to a new execution protocol.
diff --git a/.agents/skills/benchmark-report/references/evaluation-design.md b/.agents/skills/benchmark-report/references/evaluation-design.md
index ec68c72ce..ea412c7ea 100644
--- a/.agents/skills/benchmark-report/references/evaluation-design.md
+++ b/.agents/skills/benchmark-report/references/evaluation-design.md
@@ -43,3 +43,7 @@ Ground truth must be independent of the provider under test. Retain source locat
 ## Machine-readable current profile
 
 Keep one current profile that a fresh session can validate before running, scoring, rebuilding, or publishing. Include exact case IDs or their canonical digest, the ordered method/version set, run count, timeout, concurrency policy, output contract, reference state, review requirement, and release target. Fail closed on drift instead of reconstructing intent from old reports.
+
+For native-content browser comparisons, use task-appropriate official interfaces and score the returned deliverable. A final URL or HTML language tag is diagnostic unless the benchmark explicitly evaluates that metadata. Do not repair missing text using JSON DOM conversion or external PDF/DOCX parsers. The declared Chromium HTML-to-Markdown exception does not authorize document parsers. Bind native script versions, generate the interface matrix from the runner route selector, and require route validation at aggregation and publication. Keep negative controls for wrong content alongside positive controls for correct content with missing metadata.
+
+Keep browser engines distinct from execution configurations. Released and source-build variants use separate method identities in the execution registry and share the engine's native route constraints. Derive interface columns and participant counts from that registry. A strict native-mode marker selects default completion; it supplies no per-case selector or wait and must survive both dataset conversion and runner validation. Resource projection must preserve single URL values and tokenize only srcset candidates, including literal commas inside URLs. Protect these boundaries with runner, report and actual-browser controls.
diff --git a/.agents/skills/benchmark-report/references/report-and-release.md b/.agents/skills/benchmark-report/references/report-and-release.md
index 0501b5a2a..3caed87d1 100644
--- a/.agents/skills/benchmark-report/references/report-and-release.md
+++ b/.agents/skills/benchmark-report/references/report-and-release.md
@@ -12,7 +12,7 @@ Diagnostic failure analysis derives unmet requirements and expected/actual value
 
 Fresh diagnostic cohorts can supply a `webfetch_diagnostic_inputs/1` JSON file to the same build entry. It names complete saved run directories, independent whole-page browser observations and per-case reviews bound to dataset/results/observation hashes. The owner validates call and output identities and adapts these inputs to the existing model; no separate renderer is needed. Public copies may redact sensitive fields using the shared publication projector, with original/published hashes and an explicit local scope note; never alter the scored originals or present a redacted view as byte-identical. Review all requested passes as well as failures, retain access restrictions as observed limitations, and use actual requirements and source errors in interpretation specimens rather than storage metadata.
 
-For live stable-contract cohorts, invoke `scripts/run_certified_benchmark.py --diagnostic`: invariant scoring rules alone do not qualify the current source. The generic entry rejects an unqualified stable-contract cohort before external work unless this diagnostic state is explicit. `--retrieval-mode native` selects ordinary WebFetch completion for a native experiment while preserving scenario categories and every acceptance requirement; it must reject declared retrieval hints instead of dropping them. Independent whole-page auditing uses the existing browser capturer with `--observation-scope visible_page --checkpoint-dir ...`; checkpoint identities include capture inputs and observer code, so resumption cannot silently reuse observations from another protocol.
+For reruns of unchanged compiled stable-contract datasets, invoke `scripts/run_certified_benchmark.py` normally. Freeze existing task definitions and acceptance rules; do not require historical qualification raw files or repeat admission review. Source qualification belongs to adding tasks or changing references/acceptance rules. Live exact-reference cases retain pre/post reference checks. Reserve `--diagnostic` for explicitly diagnostic runs, whose outputs cannot be upgraded to certified evidence. `--retrieval-mode native` selects ordinary WebFetch completion while preserving scenario categories and every acceptance requirement; it rejects selector-guided retrieval hints instead of dropping them. Independent whole-page auditing, when requested, uses the existing browser capturer with `--observation-scope visible_page --checkpoint-dir ...`; checkpoint identities include capture inputs and observer code so observations from another protocol cannot be reused silently.
 
 For a diagnostic release, freeze the complete intended population in the track profile's `cohort_plan` (group IDs, case counts and SHA-256 of sorted case IDs joined by newlines with a trailing newline), independently of the report's selected inputs. Bind a uniform implementation when required. Pass that profile with `--profile` to both `scripts/build_report.py --diagnostic-cohorts` and `scripts/check_diagnostic_report.py` before publishing. A self-consistent subtotal is not evidence that the requested matrix is complete; reject missing groups, substituted cases and mixed implementations. Template examples without a deployment profile remain local examples, not a substitute for this release gate.
 
@@ -66,6 +66,10 @@ Never publish user prompts, assistant reasoning, plans, internal notes, conversa
 
 Write every title and paragraph for the reader, not as a reply to author feedback. Convert corrections into neutral artifact facts; never mention who requested a change, quote review conversation, or use a rebuttal-style heading when a descriptive heading works. Review history may record an objective finding and resolution, while release history records only reader-visible effects.
 
+For a fresh browser cohort, extend the maintained Web Fetch interpretation mode with `comparison.report_interpretation: {path, sha256}`. Keep its JSON prose outside Git in the evidence bundle. The `webfetch_browser_interpretation/1` schema binds the normalized task/result input hash, a title, introduction, scoring explanation, conclusions, and one explanation plus specimen case ID for every participant. The owner computes aggregate and family results, all-call and successful-call latency, observed versions, complete program-error distributions, and evidence links. A participant with failures must show a failed specimen. Historical prose bindings remain scoped to their original evidence; do not replace their hashes to reuse old conclusions. `scripts/check_report.py` verifies current-cohort numerical cells, populations, unique highlights, chapters and live result targets on both the interpretation and standalone routes, with negative controls in `tests/test_headless_report.py`.
+
+A composed cohort can use a compact current-report profile with `frozen_inputs` from `harness.web_fetch.storage.frozen_input_bindings` and an ordered per-track `case_inventory`. This binds the frozen dataset bytes and existing source/list-reference asset tree without duplicating whole datasets into a new repository folder. Both the build CLI and release checker validate these bindings and the complete provider-by-case matrix. The report package preserves original dataset bytes. These are publication-integrity checks on current inputs, not historical source-qualification requirements.
+
 ## Claims and rankings
 
 Pair every ranking with its task family, denominator, acceptance meaning, a typical input-to-output route, and limits. Keep task acceptance separate from continuous quality, latency, cost, and title/body diagnostics. Do not call conditional averages global quality or explain a correlation as a verified mechanism.
@@ -121,3 +125,5 @@ These rules apply to every public benchmark report, regardless of provider, task
 Repository adapter: `harness/reporting/presentation.py` provides track-independent checks over numeric cells marked with `data-metric`, `data-metric-direction`, and `data-sort`, and detail wrappers marked with `data-report-detail`. The current WebMainBench release gate invokes it. New or substantially rewritten tracks must integrate this checker (or equivalent semantic checks) in their own release command; adding a rule to this document is not sufficient. Existing tracks must not be claimed as covered until their gates actually invoke the checks.
 
 The local-audit variant also supports a new uniform native local measurement. Bind the exact committed case file, scorer, providers, one run, 45-second outer timeout and zero retries before calls. Preserve product-default retrieval without per-case wait/extraction hints. Validate completeness and every output/log hash before rendering through the existing report owner. Complete retained debug logs may be exposed through sanitized local report assets; do not publish raw private diagnostics or claim inherited independent review.
+
+Keep unpublished correction notes outside public release history. Schema 3 requires an explicit publication state for every release; an unmarked record fails the build. When a structured release is staged, mark it `publication_state: unpublished`; the public history selector and revision-binding gate must exclude it. Preserve its private correction receipt and measured calls.
diff --git a/.dockerignore b/.dockerignore
index 365cc8cb0..10ee128cf 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -15,3 +15,9 @@ configs
 browser_harness_eval.egg-info
 **/__pycache__
 **/*.pyc
+.env
+.env.*
+**/.env
+**/.env.*
+node_modules
+**/node_modules
diff --git a/.env.example b/.env.example
index 1507f9e05..8fc860082 100644
--- a/.env.example
+++ b/.env.example
@@ -13,6 +13,13 @@ MOLI_BINARY=moli
 # Optional compiled Darwin resolver for explicitly frozen public_doh runs.
 MOLI_NATIVE_DNS_LIBRARY=
 MOLI_PR643_BINARY=
+# Optional release/candidate comparison slots. Pin identity before calls.
+MOLI_RELEASE_BINARY=
+MOLI_RELEASE_REPORTED_VERSION=
+MOLI_RELEASE_BINARY_SHA256=
+MOLI_CANDIDATE_BINARY=
+MOLI_CANDIDATE_REPORTED_VERSION=
+MOLI_CANDIDATE_BINARY_SHA256=
 MOLI_1_1_11_BINARY=moli-1.1.11
 MOLI_1_1_7_BINARY=moli-1.1.7
 MOLI_1_0_6_BINARY=moli-1.0.6
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5a6de6306..e9df22ead 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -44,3 +44,9 @@ jobs:
           cache: npm
       - run: make setup-test
       - run: make ci
+      - name: Exercise rendered reference capture
+        run: |
+          uv sync --frozen --extra test --extra headless-eval
+          uv run --frozen --no-sync playwright install --with-deps chromium
+          export BROWSER_EVAL_TEST_BROWSER_BINARY="$(uv run --frozen --no-sync python -c 'from playwright.sync_api import sync_playwright; p = sync_playwright().start(); print(p.chromium.executable_path); p.stop()')"
+          uv run --frozen --no-sync python -m pytest tests/test_browser_observation_contracts.py -q
diff --git a/AGENTS.md b/AGENTS.md
index c1312079e..5d9c4e9bd 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -36,7 +36,7 @@ These requirements apply to **all** report tracks; browser-specific rules below
 - For benchmark design, execution, scoring, result audit, report generation or release, read `.agents/skills/benchmark-report/SKILL.md`. Use `.agents/skills/benchmark-editorial/SKILL.md` additionally only for a new or substantially rewritten standalone interpretation article, official blog or public-account article.
 - Keep one report implementation in `harness/web_fetch/report.py`. The default `scripts/build_report.py` build uses persistent measured evidence (`~/.browser-eval/evidence/current/` by default, or `WEB_FETCH_EVIDENCE_DIR`) and writes `reports/webfetch/`; the independently bound WCXB build uses `--wcxb` and writes `reports/wcxb/`. Do not create versioned report implementations, compatibility renderers or redirect builds.
 - Run repository Python only through `make` targets or `uv run --frozen python`. `.python-version`, `uv.lock`, the Makefile and CI are the runtime contract; never fall back to system Python.
-- Run every publishable provider cohort through `scripts/run_certified_benchmark.py`, which freezes references before calls and verifies them again afterward. Direct `run_benchmark.py` output and incomplete cohorts are diagnostic evidence only; never assemble or publish them.
+- Run every publishable provider cohort through `scripts/run_certified_benchmark.py`, which freezes executable task inputs. Existing compiled reference answers stay frozen; pre/post source checks require an explicit `source_verification.reference_mode: live_exact` task declaration. Missing newer acceptance-contract fields never imply a live-reference task. Rerunning an unchanged compiled dataset must not require historical source-qualification raw files or reopen cohort admission; source qualification belongs to adding tasks or changing references/acceptance rules. Direct `run_benchmark.py` output and incomplete cohorts are diagnostic evidence only; never assemble or publish them.
 - For the default Web Fetch report, treat `evaluation/current-report.json` as the matrix and publication-target authority. The independent WCXB report uses only `evaluation/wcxb/current-report.json` for its matrix and target. Browser Use and Browser Trajectory Replay have separate contracts under their own `evaluation/` namespaces; never reuse a publication target across reports or tracks. Publishing must use the relevant bound site and expected remote version; do not copy target IDs from prose, old receipts or earlier reports.
 - For the complete WebMainBench report, `evaluation/webmainbench-full/current-report.json` is the immutable baseline pre-call profile bound by its cohort certificate. Independently certified variant cohorts are registered in `evaluation/webmainbench-full/`; discover the current variant registry and each variant's profile and certificate from that directory rather than hard-coding names. The method-binding file joins the baseline and all certified variant cohorts through locked profile hashes. Their `publication_state` records frozen pre-call state. The live site, share URL, and expected remote version are bound in `evaluation/webmainbench-full/publication-target.json` together with the baseline and all variant profile hashes; update this target after publication without changing or re-certifying historical calls.
 - For the current WCXB report, the source-qualified manifest is the entire evaluation population for quality, delivery, and latency. Keep source-invalid cases outside the current manifest, scored evidence, public package, and future provider calls; preserve earlier physical calls only in private historical evidence. The dataset page owns frozen task inputs, source URLs and human reference scope; it must not show measured browser scores. The home page owns aggregate comparisons, the result analysis owns the filterable method-case inventory, and case result pages own full responses. Keep a direct link from each dataset row to a safe frozen-page preview and its human reference. Default result filters must show a nonempty, clearly labeled diagnostic population when one exists, and filtered tables must shrink rather than leave a large blank viewport.
@@ -53,8 +53,8 @@ These requirements apply to **all** report tracks; browser-specific rules below
 - Popular-site stable text must be independently observed and task-relevant. Do not freeze volatile ranks, prices, member counts or current list membership. Title diagnostics join returned entities to independent names by detail URL and never substitute for body quality, recall, freshness or task acceptance.
 - Keep pass, fail and all result filters, defaulting to fail, with failure classification. Every ranking must state its task family, denominator, acceptance meaning, typical input-to-output route and local limits. Preserve every registered provider's interface examples and adoption statistics.
 - When a current report has CPU, memory or network evidence, show the same grouped resource comparison on the home page and interpretation page. Lead with the evidence-derived winner for every metric where lower consumption has a clear meaning, mark winning cells in the tables, and state that resource leadership is separate from task pass rate. Do not label utilization or transfer rate as “better” merely because it is lower. Release checks must fail if the winner summary, grouped tables or winner markers are missing in either language.
-- Maintain `research/report-changes.json` for substantive releases and `research/provider-pricing.json` for public pricing. Release notes explain reader-visible or result-visible effects without narrating assistant workflow; prices retain verification dates, commitments, billing units and unknowns.
-- Render Web Fetch release history, including WebMainBench and the public benchmark research edition, from `research/report-changes.json`; keep Chinese and English release text together in each entry. Do not duplicate release prose or past measurements in report renderers or exact-string translation maps. Release checks compare structured records with rendered routes rather than matching fixed phrases. Browser Use and trajectory replay keep their existing structured release models.
+- Keep `research/provider-pricing.json` as a reusable product-price catalog: retain verification dates, commitments, billing units and unknowns, but do not describe one run or report there. New report release history belongs in hash-bound `report-assets/report-changes.json` beside the evidence. `research/report-changes.json` is a legacy fallback while older report owners migrate; do not add a new report's results, prose, review scope or publication URL to it.
+- Render a report's release history from its bound report asset when present; keep Chinese and English release text together in each entry. Do not duplicate release prose or past measurements in report renderers or exact-string translation maps. Release checks compare structured records with rendered routes rather than matching fixed phrases. Browser Use and trajectory replay keep their existing structured release models.
 - Use `Browser Use` for the autonomous track and `Browser Trajectory Replay` (Chinese: `轨迹重放`) for the fixed BrowserTool-action track. Their implementation roots are `harness/browser_use/` and `harness/trajectory_replay/`; do not add aliases or compatibility paths using the retired names.
 - The public WebArena human-recording replay is isolated under `harness/trajectory_replay/public_webarena/` with its own examples, tests, `evaluation/browser-use-public/current-report.json` and release script. It must not change autonomous `harness/browser_use/` or share a report target or denominator with the repository-curated replay suite.
 - Browser Trajectory Replay canonical inputs must not contain run-local snapshot refs. Compile each ref to a hash-bound stable selector while preserving the original ref action semantics; do not silently replace a DOM ref click/fill/select with BrowserTool's Playwright selector fallback because that adds different viewport, overlay and navigation-wait behavior.
diff --git a/configs/providers.headless.json b/configs/providers.headless.json
index 1aac71c17..65fc4063d 100644
--- a/configs/providers.headless.json
+++ b/configs/providers.headless.json
@@ -42,6 +42,24 @@
       "engine": "moli",
       "binary": "${MOLI_PR643_BINARY}"
     },
+    "moli-release": {
+      "type": "moli_webfetch",
+      "engine": "moli",
+      "label": "Moli release build",
+      "source_url": "https://github.com/lexmount/moli/releases",
+      "binary": "${MOLI_RELEASE_BINARY}",
+      "expected_reported_version": "${MOLI_RELEASE_REPORTED_VERSION}",
+      "expected_binary_sha256": "${MOLI_RELEASE_BINARY_SHA256}"
+    },
+    "moli-candidate": {
+      "type": "moli_webfetch",
+      "engine": "moli",
+      "label": "Moli candidate build",
+      "source_url": "https://github.com/lexmount/moli",
+      "binary": "${MOLI_CANDIDATE_BINARY}",
+      "expected_reported_version": "${MOLI_CANDIDATE_REPORTED_VERSION}",
+      "expected_binary_sha256": "${MOLI_CANDIDATE_BINARY_SHA256}"
+    },
     "moli-1.1.3": {
       "type": "headless_markdown",
       "engine": "moli",
diff --git a/evaluation/dataset-catalog.json b/evaluation/dataset-catalog.json
index f6e49728c..e047b749c 100644
--- a/evaluation/dataset-catalog.json
+++ b/evaluation/dataset-catalog.json
@@ -5,7 +5,7 @@
   "name": "Web Fetch 评测",
   "track": "web_fetch",
   "dataset": "dataset.json",
-  "dataset_sha256": "9511b16bd27cfe6c2d7913917992cec574f73a8b5b642c19283ea542f90dab81",
+  "dataset_sha256": "5f751146143dcbe9daf46f0fb2511da1147508b3c8c4cd3377a6f3cceb82264e",
   "case_count": 150,
   "coverage_plan": {
     "web": [
@@ -610,7 +610,7 @@
       "category": "public_institution",
       "track": "web",
       "task_prompt": "读取给定网页当前首屏加载完成后的整页正文；保留标题、正文、列表和表格，不要求翻页或点击展开。项目仓库页的正文目标为完整项目说明（README），不要求侧栏统计。",
-      "definition_sha256": "f9e3e58875e927521f93f67461f11c84756842464431e3cb4587d98a6317abe5",
+      "definition_sha256": "418e6f2b5bdd966d38e42f415c63ab22adf4b70e03daf66cf418b9ecfc984bcf",
       "reference_sha256": "ab62f0273ab9f9b792c99d2d021bb1fe7f6ff7fcf6af9935de7b65cc4443d2e8"
     },
     {
diff --git a/evaluation/dynamic-content-100-moli-webfetch/dataset-catalog.json b/evaluation/dynamic-content-100-moli-webfetch/dataset-catalog.json
index d9c6e8c8d..d4be6c9d8 100644
--- a/evaluation/dynamic-content-100-moli-webfetch/dataset-catalog.json
+++ b/evaluation/dynamic-content-100-moli-webfetch/dataset-catalog.json
@@ -9,7 +9,7 @@
     ]
   },
   "dataset": "dataset.json",
-  "dataset_sha256": "b32c7ad678ddef0377868f88d8fb82b0f84c09b708f67e5688317db96eab9571",
+  "dataset_sha256": "0da2bb30aaabe3ca2b93ec17b4cb88cdc1cf3ea46336bb3777fdb21c1f211b84",
   "case_count": 100,
   "cases": [
     {
@@ -119,7 +119,7 @@
       "category": "dynamic_content",
       "track": "dynamic",
       "task_prompt": "提取声明网址首次自动加载后的真实文字、列表条目、对应链接和正文。保留页面可见稳定文字；不点击、输入、滚动、翻页或使用OCR。动态成员不固定历史名单；同条目字段须对应完整。",
-      "definition_sha256": "4e9f21f4b2a39c1282197690083a275d505767249df6c14b3233c382c508dd62",
+      "definition_sha256": "bc740d6c0db8af1eabe3364600e9190ba62ceb0feed0ff589196b99bcf1a17ad",
       "reference_sha256": null
     },
     {
@@ -159,7 +159,7 @@
       "category": "dynamic_content",
       "track": "dynamic",
       "task_prompt": "提取首次自动加载完成后的目标正文；不点击、不输入、不滚动、不搜索、不翻页。",
-      "definition_sha256": "590812f60d9eebe4db53ef19036d4bcb8d39c2a5e727a5cfcac729b0d444ec1c",
+      "definition_sha256": "cfd57dd7273d49da4a9792c5802eaab43969d1cf3412f85c55f377f397861187",
       "reference_sha256": "7d03bf2e3f739f5ac451815a0bba26082210da0d995c26516c87288f813df5c9"
     },
     {
@@ -349,7 +349,7 @@
       "category": "dynamic_content",
       "track": "dynamic",
       "task_prompt": "提取首次自动加载完成后的目标正文；不点击、不输入、不滚动、不搜索、不翻页。",
-      "definition_sha256": "cfec76b111bd77e66e24efe11f74690bfd6de4b1dea4af9cff55c9ab9a4a6cf9",
+      "definition_sha256": "617fbaf8e8d8458d7457a7fc0c93ab44f97f58401fda21b0c9572faea9e39409",
       "reference_sha256": null
     },
     {
@@ -429,7 +429,7 @@
       "category": "dynamic_content",
       "track": "dynamic",
       "task_prompt": "提取声明 URL 首次自动加载完成后的目标正文；不得登录、点击、输入、搜索、滚动、翻页或接受同意墙。排除导航、广告、推荐、页脚、Cookie、登录和订阅提示。",
-      "definition_sha256": "60177d04d06bc3bcf4ca43fddde548cc03f382e541b66bb1fe37bb978ad4c819",
+      "definition_sha256": "f3dfb5832ac20c50a2246db9991fa255594a126ae0a8f4ad584e2434c269b60e",
       "reference_sha256": "9429d55770b19f44d152aaeae72630e567326e675ae712f22844b86a54817c3b"
     },
     {
@@ -659,7 +659,7 @@
       "category": "delayed_render",
       "track": "dynamic",
       "task_prompt": "读取初次自动加载完成后的 10 条记录，保留全部文字字段；不要求滚动、翻页或点击。允许渲染、解析内嵌数据或获取公开接口，不限制实现路径。",
-      "definition_sha256": "9af86098b6303bf838ae58438322b5ab38d6de51ddd8f0585c014376d64f68c0",
+      "definition_sha256": "fb358c76b50d670d547bc8a4b86839bc1cfbd6c343f289d13cfc33aa57d2fd5b",
       "reference_sha256": "1b0d230de9e4e8f91674cd3db383c68b17519c94da70b6d1dda382848fae4780"
     },
     {
@@ -719,7 +719,7 @@
       "category": "embedded_frame",
       "track": "dynamic",
       "task_prompt": "父页自动加载的 iframe 中全部 14 个龟类科名称；不进入详情，不要求图片或按钮文字。允许渲染、解析内嵌数据、加载子文档或获取公开接口，不限制实现路径。",
-      "definition_sha256": "f9d3f2e96fa994b41f30d1c0eae566ff7357476b50ecff2c3555a5533e090370",
+      "definition_sha256": "d612b823798a1e3409a30c407a1e7cb52b22e7f4cf98608ed6095c1e3d164222",
       "reference_sha256": "e4183696f6e74f9016c0668ee9809eb2fe7b03c244bfdae2231d8e1a1326f9ca"
     },
     {
diff --git a/evaluation/dynamic-content-100-moli-webfetch/source-inputs.json b/evaluation/dynamic-content-100-moli-webfetch/source-inputs.json
index 9ed46e436..9f61e28cb 100644
--- a/evaluation/dynamic-content-100-moli-webfetch/source-inputs.json
+++ b/evaluation/dynamic-content-100-moli-webfetch/source-inputs.json
@@ -1,13 +1,17 @@
 {
   "schema_version": 2,
   "kind": "frozen_reference_inputs",
-  "id": "dynamic-content-100-moli-webfetch-b32c7ad678dd-v2",
-  "dataset": "dataset.json",
-  "dataset_sha256": "b32c7ad678ddef0377868f88d8fb82b0f84c09b708f67e5688317db96eab9571",
+  "id": "dynamic-content-100-moli-webfetch-0da2bb30aaab-v5",
   "catalog": "dataset-catalog.json",
-  "catalog_sha256": "81703f392b586931624692cb42a006843a9cbf02250fd9ea36d4ecb65ee1cb6e",
+  "catalog_sha256": "ca1572aa80fc2324b2f00800a79b053cfd584d1831ffb16e6906ae0981522c6c",
+  "dataset": "dataset.json",
+  "dataset_sha256": "0da2bb30aaabe3ca2b93ec17b4cb88cdc1cf3ea46336bb3777fdb21c1f211b84",
   "files": {
-    "dataset.json": "b32c7ad678ddef0377868f88d8fb82b0f84c09b708f67e5688317db96eab9571"
+    "dataset.json": "0da2bb30aaabe3ca2b93ec17b4cb88cdc1cf3ea46336bb3777fdb21c1f211b84"
   },
-  "trees": {}
+  "trees": {
+    "sources": {
+      "dynamic-082-allocine-films/current-browser-observation.json": "717a0d1a864f561ae80c601c5733fccdfda16120e37b2ff4d0837c2718d86038"
+    }
+  }
 }
diff --git a/evaluation/native-retrieval-contracts.json b/evaluation/native-retrieval-contracts.json
new file mode 100644
index 000000000..4811fb0ed
--- /dev/null
+++ b/evaluation/native-retrieval-contracts.json
@@ -0,0 +1,73 @@
+{
+  "schema_version": 1,
+  "kind": "native_retrieval_contract_registry",
+  "contracts": {
+    "delayed-ten-records": {
+      "case_id": "dynamic-delayed",
+      "task_definition_sha256": "fb358c76b50d670d547bc8a4b86839bc1cfbd6c343f289d13cfc33aa57d2fd5b",
+      "source_authority": {
+        "path": "evaluation/sources/dynamic-delayed/render-audit.json",
+        "sha256": "cb72f36b479827c25816f1df5e2448885c0935ab61c0ad130bc145a2d466cc93",
+        "provider_output_used": false
+      },
+      "capabilities": {
+        "completion": {
+          "selector": ".quote",
+          "minimum_count": 10,
+          "minimum_text_fragments": 3
+        }
+      }
+    },
+    "iframe-fourteen-family-headings": {
+      "case_id": "dynamic-iframe",
+      "task_definition_sha256": "d612b823798a1e3409a30c407a1e7cb52b22e7f4cf98608ed6095c1e3d164222",
+      "source_authority": {
+        "path": "evaluation/sources/dynamic-iframe/initial.html.txt",
+        "sha256": "c15cf12b2fa2c6d8c25c36b598fbcaca516fc93f87409d92eb9932a3644cca77",
+        "provider_output_used": false
+      },
+      "capabilities": {
+        "include_subdocuments": true,
+        "completion": {
+          "frame_selector": "iframe",
+          "selector": "h3.family-name",
+          "minimum_count": 14
+        }
+      }
+    },
+    "iframe-list-one-hundred-items": {
+      "case_id": "dynamic-015-015-testpages-iframe-list",
+      "task_definition_sha256": "f3dfb5832ac20c50a2246db9991fa255594a126ae0a8f4ad584e2434c269b60e",
+      "source_authority": {
+        "path": "evaluation/sources/dynamic-015-015-testpages-iframe-list/mixed-session-stable-text.json",
+        "sha256": "cc1c90aec8f0550b7dc91b747abbe591e346ec4195fa75693a0c8e4ebb048800",
+        "provider_output_used": false
+      },
+      "capabilities": {
+        "include_subdocuments": true,
+        "completion": {
+          "frame_selector": "iframe",
+          "selector": "li",
+          "minimum_count": 100
+        }
+      }
+    },
+    "iframe-one-form": {
+      "case_id": "dynamic-019-selenium-dev-selenium",
+      "task_definition_sha256": "cfd57dd7273d49da4a9792c5802eaab43969d1cf3412f85c55f377f397861187",
+      "source_authority": {
+        "path": "evaluation/sources/dynamic-019-selenium-dev-selenium/mixed-session-stable-text.json",
+        "sha256": "2931d10a0dec9fd1ba467e3e8dab7f311d4e996d1d3792cdf70c6e1ff2a41020",
+        "provider_output_used": false
+      },
+      "capabilities": {
+        "include_subdocuments": true,
+        "completion": {
+          "frame_selector": "iframe",
+          "selector": "form",
+          "minimum_count": 1
+        }
+      }
+    }
+  }
+}
diff --git a/evaluation/popular-sites/dataset-catalog.json b/evaluation/popular-sites/dataset-catalog.json
index ebb27be7f..4090a6094 100644
--- a/evaluation/popular-sites/dataset-catalog.json
+++ b/evaluation/popular-sites/dataset-catalog.json
@@ -9,7 +9,7 @@
     ]
   },
   "dataset": "dataset.json",
-  "dataset_sha256": "0703badca3978cafe4f6db67fb9723f433781e1b87b4ef2af343756126e72cb5",
+  "dataset_sha256": "85544512d4cfd9459c22af1f70b1eb400844742dbf3179807662b76db2dcfc2e",
   "case_count": 100,
   "cases": [
     {
@@ -48,8 +48,8 @@
       "url": "https://yuque.com/",
       "category": "popular_site",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：画板；互动交流；文档协同；权限管理；特色卡片；目录编排；知识管理；个人免费使用；团队免费使用；组件化编辑器；专业好用的编辑器；像书一样的知识库；Edge 插件；Chrome 插件；Help Center；Security；Terms；Join us；Pricing；Support；Welfare；About Us；Download；Feedback；Homepage；Developer；Contact us；Media reports；Product information；Template Gallery；Login / Register。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "fa553521956c988b34fda49a713d4236cb74d19922a5e9ecc2a6388e904f3032",
+      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：画板；互动交流；文档协同；权限管理；特色卡片；目录编排；知识管理；个人免费使用；团队免费使用；组件化编辑器；专业好用的编辑器；像书一样的知识库；Edge 插件；Chrome 插件；Help Center；Security；Terms；Join us；Pricing；Support；Download/下载；Feedback；Developer；Contact us；Media reports；Product information；Login / Register。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
+      "definition_sha256": "54a9ac13bc98bdcad886dea102e6b82af94fc6841776b50460ddf83716defe77",
       "reference_sha256": null
     },
     {
@@ -58,8 +58,8 @@
       "url": "https://whatsapp.com/",
       "category": "global_homepage",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些独立观察中确认的稳定普通网页文字：Apps；Blog；Log In；Mobile；Tablet；Careers；Desktop；Sitemap；About us；Download；Features；Contact Us；Learn more；Need help?；What we do；Who we are；Help Center；Brand Center；For Business；Use WhatsApp；WhatsApp Web；Keep in touch；Message privately；Never miss a moment with voice and video calls；Security Advisories；Terms & Privacy Policy。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "dcfd8b1e54ea580e56fd3cf5d4f7d120ec0e84e97bce1977fd882f132a837db1",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+      "definition_sha256": "7ee2656ed20ae532286dd7c9029aa79d72602ef1b26fbae7f86a34567d0b67ea",
       "reference_sha256": null
     },
     {
@@ -68,8 +68,8 @@
       "url": "https://www.bing.com/?cc=us&setlang=en-us",
       "category": "global_homepage",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：Help；Maps；News；Legal；Images；Videos；Sign in；DISCOVER；Feedback；Shopping；Advertise；Text creator；About our ads；Image creator；Bing homepage quiz；Privacy and Cookies；Your Privacy Choices；Consumer Health Privacy。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "f8230467f8c7a831a354c342cead877524f30f562814f8b4f03af599d636e3ac",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+      "definition_sha256": "b08fe8228eb15dbc36695fd8fed6e5feaa081c755451f4e1f7f7ccb81f62e052",
       "reference_sha256": null
     },
     {
@@ -388,8 +388,8 @@
       "url": "https://figma.com/",
       "category": "popular_site",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：Blog；Plans；Events；FigJam；Log in；Status；Careers；Company；Pricing；Product；Support；Dev Mode；Newsroom；Customers；Downloads；Resources；Templates；UI design；Use cases；UX design；Developers；Enterprise；Figma Design；Figma Slides；Integrations；Prototyping；Wireframing；Contact sales；Release notes；Legal and privacy；Online whiteboard；Build with intention；Design anything you can imagine；The intelligent canvas for infinite creativity。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "2a58e240ad573f15b77a457d3f1e94ac6a2b000136f450ea0d7e97339782e107",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+      "definition_sha256": "dfa4452952722c73a8ae1315edee484c9757a35ad7552058e0e03567dd71236c",
       "reference_sha256": null
     },
     {
@@ -398,8 +398,8 @@
       "url": "https://www.deepseek.com/en/",
       "category": "global_homepage",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：More；Careers；Join Us；API Docs；Products；Research；API Pricing；DeepSeek App；DeepSeek Web；Terms of Use；Transparency；Privacy Policy；Service Status；DeepSeek Harness；Into the Unknown；Legal & Security；Use API Platform；Chat with DeepSeek；Report Security Issue。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "b2717adcdee3c3142defdb392ce3e5ec68e4ecc1c6f8046c7db9d805bce4f8d2",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+      "definition_sha256": "3fc32f903fa8c070c1b7c04dbe4a6d2b2c40f89383820b63249ea843a6380ced",
       "reference_sha256": null
     },
     {
@@ -488,8 +488,8 @@
       "url": "https://usps.com/",
       "category": "global_homepage",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：FAQs；FOIA；Send；Shop；Careers；English；Español；Receive；Sign In；Support；Business；Feedback；Newsroom；PO BOXES；PASSPORTS；PostalPro；USPS Jobs；Contact Us；FREE BOXES；Site Index；Text Scams；Email Scams；Quick Tools；USPS Stamps；Click-N-Ship；Terms of Use；Top Searches；USPS Updates；Helpful Links；International；Privacy Policy；About USPS Home；Online Services；Postal Explorer；Search USPS.com；Informed Delivery；Inspector General；Stamps & Supplies；Track a Package；Find USPS Locations；Buy Stamps。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "f142bc76021b8d4176481ed6525950608b58a57c1e5b258202d6ee2154cf1437",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+      "definition_sha256": "975309122d6870f8e1713a06e4b4232feb0988e6195d13978e08dabe6b1bb4dc",
       "reference_sha256": null
     },
     {
@@ -608,8 +608,8 @@
       "url": "https://feishu.cn/",
       "category": "popular_site",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：定价；审批；邮箱；云文档；知识库；下载飞书；产品功能；企业服务；关于飞书；加入我们；协同办公；博客中心；即时消息；友情链接；合作伙伴；多维表格；安全合规；帮助中心；应用目录；开放平台；技术支持；探索飞书；更新日志；服务协议；查看案例；管理后台；组织管理；联系我们；联系销售；营业执照；视频会议；解决方案；隐私政策；飞书人事；飞书招聘；飞书绩效；飞书项目；举报与反馈；飞书 AI；智能会议纪要；字节跳动旗下 AI 工作平台。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "314266967664c009389d3fc298b402aaa310d30eb2d737c41e1fba72cbce7078",
+      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：定价；审批；邮箱；云文档；知识库；下载飞书；产品功能；企业服务；关于飞书；加入我们；协同办公；博客中心；即时消息；友情链接；合作伙伴；多维表格；安全合规；帮助中心；应用目录；开放平台；技术支持；探索飞书；更新日志；服务协议；查看案例/了解更多客户案例；管理后台；组织管理；联系我们；联系销售；营业执照；视频会议；解决方案；隐私政策；飞书人事；飞书招聘；飞书绩效；飞书项目；举报与反馈；飞书 AI；智能会议纪要；字节跳动旗下 AI 工作平台。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
+      "definition_sha256": "b11303b1cccafbd5933c46e5f3de52c6b31e711efbc5599ca044fe73e8c469ba",
       "reference_sha256": null
     },
     {
@@ -668,8 +668,8 @@
       "url": "https://dingtalk.com/",
       "category": "popular_site",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：专业版；专属版；中国站；标准版；下载钉钉；产品功能；付费产品；企业培训；企业百科；使用手册；加入我们；合作伙伴；商业版本；客户案例；市场活动；帮助中心；廉正举报；开放平台；服务协议；法律声明；注册钉钉；管理后台；组织管理；视频会议；钉钉动态；钉钉招聘；钉钉教育；钉钉文档；钉钉项目；支持与服务；服务与学习；安全合规中心；市场商务合作；钉钉隐私政策；案例与解决方案；钉钉服务状态中心。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "21b85dbce749d9d7ecd59901a839d5fb73d9d75e47553f7f8454f69f3bb8ffce",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+      "definition_sha256": "f78521edf38c4f11ae7c58fede9238ba4e47e77673d0daffa5d5f195e2ab99df",
       "reference_sha256": null
     },
     {
@@ -698,8 +698,8 @@
       "url": "https://quark.cn/",
       "category": "popular_site",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：客户端；移动端；网页版；反馈入口；夸克网盘；校园招聘；用户协议；隐私协议；AI浏览器；iPad端；多设备体验；夸克PDF；夸克扫描王；浏览器插件；超级播放器；AI侧边栏：；PDF编辑：；搜索API；联系方式：；违法和不良信息举报；未成年人有害信息举报。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "9c01d5d31555e91efe12156819fddf266aa9e058913ec0d6575c7ef57af09618",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+      "definition_sha256": "8857d0962fa0e03e11198936e27ba4a59d55ac93d2da8744d971b0668dc91164",
       "reference_sha256": null
     },
     {
@@ -758,8 +758,8 @@
       "url": "https://douyu.com/",
       "category": "popular_site",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，保留这些三次独立观察均出现的稳定普通网页文字：首页；直播；分类；赛事；视频；鱼吧；游戏；娱乐；户外；美食；关注；历史；消息；开播；下载；帮助。同时返回至少 10 条不同的具名详情入口；每条包含有意义的名称和 HTTP(S) 链接，链接路径完整匹配 /[0-9]+。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；不固定当前条目、顺序、价格、排名或数量。",
-      "definition_sha256": "3c757be2dccc1088c78772ab40864b3ba37bf483cc6399fecf7bddc11b898f8b",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。同时返回至少 10 条不同的具名详情入口；每条包含有意义的名称和 HTTP(S) 链接，链接路径完整匹配 /[0-9]+。",
+      "definition_sha256": "c448cb3c4e2485921b0d7f073829d51e5fa9fac618d756ed617f72dff6e3dc42",
       "reference_sha256": null
     },
     {
@@ -878,8 +878,8 @@
       "url": "https://lingxing.com/",
       "category": "popular_site",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：中文；价格；咨询；演示；首页；登录；白皮书；免费试用；关于领星；加入我们；快速响应；新闻中心；服务中心；核心功能；案例中心；物流追踪；立即体验；立即试用；获取报价；解决方案；跨境资讯；全周期服务；全方位保障；全生态产品；资源与支持；亚马逊ERP；多平台ERP；海外仓WMS；财务精准管理；进销存一体管理；领星ERP。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "228d4a87238776675c1603bbe7a818868e0e3e62c64ea648086f11aeb4d1ccba",
+      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：中文；价格；咨询；演示；首页；登录；白皮书；免费试用；关于领星；加入我们；快速响应；新闻中心；服务中心；核心功能；案例中心；物流追踪；获取报价；解决方案；跨境资讯；全周期服务；全方位保障；全生态产品；资源与支持；亚马逊ERP；多平台ERP；海外仓WMS；财务精准管理；进销存一体管理；领星ERP。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
+      "definition_sha256": "527b0968907c50b171456dac149b92a962b077bc1784776ca4a80a61830ad8d6",
       "reference_sha256": null
     },
     {
@@ -1008,8 +1008,8 @@
       "url": "https://www.shopify.com/",
       "category": "popular_site",
       "track": "challenge",
-      "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：Blog；Legal；Taxes；Global；Guides；Log in；Online；Themes；Careers；Courses；Domains；Pricing；Sitemap；Support；Payments；Products；Shipping；Shop App；Shop Pay；Sidekick；Analytics；App Store；Changelog；Discounts；Ecosystem；Investors；Resources；Affiliates；Build apps；Enterprise；Free Tools；Shopify POS；Shopify.dev；Theme Store；Why Shopify；Developer Docs；Hire a Partner；Privacy Policy；Service Status；Start for free；Sustainability；Community Forum；Compare Shopify；Website Builder；Shopify Checkout；Terms of Service；What is Shopify?；Shopify Help Center。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
-      "definition_sha256": "697e494de49f481ae0834478820f03e67f68ccb1283a5b60d705a5d55b4beab4",
+      "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+      "definition_sha256": "15a609144a72478cdb24ab0e7d958c37384130f45053369864567e2413316edb",
       "reference_sha256": null
     }
   ]
diff --git a/evaluation/popular-sites/review.json b/evaluation/popular-sites/review.json
index a3bdb1bad..2622130a6 100644
--- a/evaluation/popular-sites/review.json
+++ b/evaluation/popular-sites/review.json
@@ -43,5 +43,23 @@
       "reason": "This correction addresses only the clipped heading. The retained input-area prompt and other inherited criteria were not newly certified across historical page states."
     }
   ],
-  "case_rules_sha256": "c8226b15aa6c3544817b64e98b5a81e38d5ae665836ad667e93870580dae2089"
+  "case_rules_sha256": "40530454766310cefa68972792c3ee66cab94056264dac040bad3ab46b4dfb95",
+  "reference_contract_revision": {
+    "provider_calls": 0,
+    "case_ids": [
+      "china-homepage-033-dingtalk-com",
+      "china-homepage-040-quark-cn",
+      "china-homepage-048-douyu-com",
+      "china-homepage-085-shopify-com",
+      "china-homepage-088-figma-com",
+      "global-homepage-008-whatsapp-com",
+      "global-homepage-010-bing-com",
+      "global-homepage-067-deepseek-com",
+      "global-homepage-086-usps-com"
+    ],
+    "source_qualification": "task-relevant intersection of two same-region independent first loads",
+    "provider_outputs_used_as_source": false,
+    "saved_call_url_route_runtime_changed": false,
+    "verdict_impact_bound_separately": "research/current-page-reference-contract-revision.json"
+  }
 }
diff --git a/evaluation/popular-sites/source-inputs.json b/evaluation/popular-sites/source-inputs.json
index 640950369..b165b42bb 100644
--- a/evaluation/popular-sites/source-inputs.json
+++ b/evaluation/popular-sites/source-inputs.json
@@ -1,13 +1,13 @@
 {
   "schema_version": 2,
   "kind": "frozen_reference_inputs",
-  "id": "popular-sites-0703badca397-v2",
-  "dataset": "dataset.json",
-  "dataset_sha256": "0703badca3978cafe4f6db67fb9723f433781e1b87b4ef2af343756126e72cb5",
+  "id": "popular-sites-85544512d4cf-v6",
   "catalog": "dataset-catalog.json",
-  "catalog_sha256": "cf9b31ffe8486c158579cd543ae3f0ccf969ee4a3df8817b98b679192d087406",
+  "catalog_sha256": "f2b9dfb550230cdf8dbbba544d58158ac957620c1d064173790ead70754c178d",
+  "dataset": "dataset.json",
+  "dataset_sha256": "85544512d4cfd9459c22af1f70b1eb400844742dbf3179807662b76db2dcfc2e",
   "files": {
-    "dataset.json": "0703badca3978cafe4f6db67fb9723f433781e1b87b4ef2af343756126e72cb5"
+    "dataset.json": "85544512d4cfd9459c22af1f70b1eb400844742dbf3179807662b76db2dcfc2e"
   },
   "trees": {
     "sources": {
@@ -25,6 +25,7 @@
       "challenge-10-justwatch/stable-page.txt": "1fdaee01d8cc8f0bf8f7fa82881643597555a15331463c73977d3a88948e5cfc",
       "china-homepage-008-doubao-com/evidence.json": "0a90ab08b6ccccc7fea5d649d90d76a1a96e2c93a215f711e8163372eda52698",
       "china-homepage-008-doubao-com/stable-page.txt": "76530bdcce1fb6759272e4a54593f485658cd8da00c27959284b41901fa7814a",
+      "china-homepage-012-feishu-cn/correction-observation-20261012.json": "4a1b14268f283ab5f57199c67837accc13da3d6dabc25d4990ddec85d413862b",
       "china-homepage-012-feishu-cn/evidence.json": "4e0d01e4972aedd70df3089b2f7e562ddb6fda9844c16f7a1ebf8bec13d7dfa8",
       "china-homepage-012-feishu-cn/stable-page.txt": "84297664cc2d46a139129346600d069a87a06ce7d042d42eb57d23b41fb04c40",
       "china-homepage-018-163-com/evidence.json": "6cf2d3528ec20b1b6cde576328381799aff02305c010c49416f41c0143ae0386",
@@ -37,14 +38,16 @@
       "china-homepage-028-weibo-com/stable-page.txt": "94e7e4c1a0f660f89fba469f516c4e20370ec86b06ce3d467d5456f30cf06e76",
       "china-homepage-029-360-com/evidence.json": "eddd0fd260c311f3947b20a6f229ec524af9444380e63664eb061a94d9d60e59",
       "china-homepage-029-360-com/stable-page.txt": "1e3452776fa5ce96fa9f9dd3b5ae22502564944c247a0ec26ed7d422b26ed2bb",
-      "china-homepage-033-dingtalk-com/evidence.json": "09d44b99430d84c559ff78ef33beb6562e4f46bb2255d3256ff69e3106c7a3f8",
-      "china-homepage-033-dingtalk-com/stable-page.txt": "7316417e47fb3c67eb3313d4b4248e3ee286e0c68394119546b386eb4e490e60",
+      "china-homepage-033-dingtalk-com/current-qualified-observations.json": "b124d67b50f17db6bc15b988ff9714c454c59165a5701fdcb0bbc557c0ce4bf8",
+      "china-homepage-033-dingtalk-com/evidence.json": "0c6c99e4d1a03653a48f1f061a63a9144a57f028905974bdf3f4f0da343f5b9b",
+      "china-homepage-033-dingtalk-com/stable-page.txt": "e0baff15f795c0d7ec2d6fe8575e0cca62a36bbfa4675ea48162e73aa324a5c3",
       "china-homepage-036-hao123-com/evidence.json": "a1aa8e3273f353fca54a3a1fb7587d021e25bc89315c92a2edecd7d177c8a3c0",
       "china-homepage-036-hao123-com/stable-page.txt": "dffd4da9eabd339f558f4916564f330f30aad006d80f304e905f66b0cf213f12",
       "china-homepage-039-1688-com/evidence.json": "61cb30bb5f148d5e5ec547db065731af558d2e1d969bc82901bb97d5c6052b6d",
       "china-homepage-039-1688-com/stable-page.txt": "f1449a6b781b629725722ca86dd6d5bc9145e1663dffa05974a2c98b56599d30",
-      "china-homepage-040-quark-cn/evidence.json": "1f4bcf0483c4d9939f752a95f894aa07221d51edfa2a4d5390dd7f9075c12354",
-      "china-homepage-040-quark-cn/stable-page.txt": "3206f822994495f731d6a477c4debc8211197a924657c082c3f447243ececcdc",
+      "china-homepage-040-quark-cn/current-qualified-observations.json": "4882f58b1dd814b7d4682343923e48c7dee9c3533b3908e22fdcd4e1659439c1",
+      "china-homepage-040-quark-cn/evidence.json": "47716e1234444171426adea72f57ed53ecdfec945be087b53db5bd33831ab4e6",
+      "china-homepage-040-quark-cn/stable-page.txt": "a4b50a21a1c4343176f5b622ca138200535f7818ce9b43d4c4c526ae0a2e9b09",
       "china-homepage-042-kdocs-cn/evidence.json": "92ce946484ecb71dcd2bbb067a362da610c9e98d7e4ce3e7ae9089feab7eb848",
       "china-homepage-042-kdocs-cn/stable-page.txt": "e490ca50c2664fb56cf3e4debf282fb2200e3767c3dcf3098a286987c42ecad6",
       "china-homepage-044-kimi-com/evidence.json": "a8f24f29dc974b244e5a03b2bc0ee2674d19cd5a2d3579069159b363c1393fd9",
@@ -55,8 +58,9 @@
       "china-homepage-046-wedoany-com/stable-page.txt": "d2c0e5746d11542b8f02c2ae0a255e12b7ed3e0c851b767708774c8fdc22600b",
       "china-homepage-047-qianwen-com/evidence.json": "ccf37aa501b9b650006c12839c519a1f0fbb06f62437baeb360a515c4988fe12",
       "china-homepage-047-qianwen-com/stable-page.txt": "0c4be8c605782e4e39bf4f16aab21dd75cbb5f203fb234004c5418fe4d3e3cd2",
-      "china-homepage-048-douyu-com/evidence.json": "77268705a97470660c5e894b287e1542dbe3ecc14e1e31ebf5da602a2c51c593",
-      "china-homepage-048-douyu-com/stable-page.txt": "24d412a26c0a7a0d46f4b8edad517d4b2026ed16b534b5771c4f0660eaf645f0",
+      "china-homepage-048-douyu-com/current-qualified-observations.json": "3239f658eaf00a0e9289757df24d5d575ffb015cb14108ec8033927194c2137a",
+      "china-homepage-048-douyu-com/evidence.json": "ac6f185790ed8e66b38fb868bc354e38bc0f1ffb8a85cae89a86b8bf499ad007",
+      "china-homepage-048-douyu-com/stable-page.txt": "d2dd3d0dbf5f4d72751fa360150c9ead29e8c01e82b26c2f001644e28c33febd",
       "china-homepage-050-openai-com/evidence.json": "18d36f820d5a1ce3cdfce8e160aa12db7470d879d7fb645f4d6266a704e57e94",
       "china-homepage-050-openai-com/stable-page.txt": "93bbcc875aceb84c71e7a114282e5539033ef42eecfaa88389f954aafd5a320b",
       "china-homepage-052-alipay-com/evidence.json": "f6254b37aa121c40a1ab3adeb6f5314ae87952e6ddbd68950344d0af3a05272b",
@@ -79,6 +83,7 @@
       "china-homepage-063-sina-com-cn/stable-page.txt": "6ad2e890ee0a4e0c374d896d9f82c0bf2308b6c93683dbfe6c9da664af2cd8a8",
       "china-homepage-064-gamer520-com/evidence.json": "6f0c4844c10118f1d65c13c7a0f49e5ab8915d86671f3f69b21a985096dd4202",
       "china-homepage-064-gamer520-com/stable-page.txt": "48af874737edfa5487ac28bd9880e754eb3b3bae026bbe928bd451509ebcd799",
+      "china-homepage-065-lingxing-com/correction-observation-20261012.json": "1518608faddd298bcd8afa15f3194824ef300d0e6e9c28be55216150fc14ef8c",
       "china-homepage-065-lingxing-com/evidence.json": "189ac9635512cf25f9a43f24d63a4a1992a6c0ac4afa8aefb47e0b6ad50b1bd7",
       "china-homepage-065-lingxing-com/stable-page.txt": "d8726d87e456ced66dff453ac5ce7f8a9dca69ed95af62924b133f8284c48f07",
       "china-homepage-067-alibaba-com/evidence.json": "416ba8de2d332a2d3b112aa37b6b26885e45530cfbb16494217f5dc6ac0d7e7e",
@@ -105,12 +110,15 @@
       "china-homepage-082-huawei-com/stable-page.txt": "609fb1909e70af8c0227d4428a11a3615f4766fb6edd70f4eacdbc5ab6388b6a",
       "china-homepage-083-grok-com/evidence.json": "e99f06310153bba8c9a372bd8fc9a173cca6defae75020e7387894b62b4e397d",
       "china-homepage-083-grok-com/stable-page.txt": "7af7419795e4d8c9199a413c6df023030ac3f00eb28d3c9799d1cd0cb7d2930b",
-      "china-homepage-085-shopify-com/evidence.json": "dc3096a3e99e9022b7e8dfc728ec4c5463b1b847426f2d717833424f20759ef1",
-      "china-homepage-085-shopify-com/stable-page.txt": "23e8ccf180acd0d78fafcbe06fac19e8aafe754f47bf75092932d96a557cd9cb",
+      "china-homepage-085-shopify-com/current-qualified-observations.json": "db803b5d4ce0b5628c39497f6e7750523eda54e8b40500e295b46cf26ff05d06",
+      "china-homepage-085-shopify-com/evidence.json": "fa8daffa836135c90dd5c53b5dfa404ff63667663a968eb51089d5d3a80ff5df",
+      "china-homepage-085-shopify-com/stable-page.txt": "301348f5d47149de15f6e94bfefffc14a9cb2750ef6aa0b23d98c7e1b6d217ac",
       "china-homepage-087-gamersky-com/evidence.json": "48e10145c49801329fa9a49c4b94e37c4f44f148e1100f667753f2685f216653",
       "china-homepage-087-gamersky-com/stable-page.txt": "ee53a5fad5eb1bfe0c794bfdd8df5cc25122b25249f2212ec25be1f75e1b09d3",
-      "china-homepage-088-figma-com/evidence.json": "539dcce9c42fdc307ffbb87a73464cddb3d419c756a879e97fddfb7f0d5c5aec",
-      "china-homepage-088-figma-com/stable-page.txt": "d90df27d57dac68552dc0a272ad1fa0280e7ae0e10ecb923a87beb82c00b319f",
+      "china-homepage-088-figma-com/current-qualified-observations.json": "bb868fdfb8ccaf39f6ad734207d1ec7f195e162c4598efc17bf1391c4e78cc44",
+      "china-homepage-088-figma-com/evidence.json": "65f2aa1c2218e158f803a3e6d10071c8a13a12972a9a0788a6313cc28ec2b707",
+      "china-homepage-088-figma-com/stable-page.txt": "4e6039ccd6cbe4c2d7a9fe75a8bdb6d72f7677b866e9d61bcd7a20f9d0817101",
+      "china-homepage-089-yuque-com/correction-observation-20261012.json": "390555ccd00108f6fc5dcb3d39767d3eca1b6510b72c9960d8d317e4e299807f",
       "china-homepage-089-yuque-com/evidence.json": "3d5b628c641ff70fedd166d02e5a0df21ddc187ce6a8feed1abcf52c42cd805d",
       "china-homepage-089-yuque-com/stable-page.txt": "b25d34580413cd6303983e5d4f12cbcdceaee759191b9172f8f5776a448f3809",
       "china-homepage-090-toutiao-com/evidence.json": "8da295bd282df6734a1a0fd3d9abef26da8519950298643da869fcc852f3eee6",
@@ -121,10 +129,12 @@
       "global-homepage-002-youtube-com/stable-page.txt": "d631d5da5efccfd75f3d1b5d233a12e0b2d012a3e071c5dd1195ff753a26a5ba",
       "global-homepage-005-chatgpt-com/evidence.json": "e9810f82224031b06e73dd2f8c446e30684c1b81b0be8d464e5699325b1780ed",
       "global-homepage-005-chatgpt-com/stable-page.txt": "b858ebd9b68bb0bd57eba393ce24398ca89617e5d654eeb69f83e45f554ae792",
-      "global-homepage-008-whatsapp-com/evidence.json": "49cf7e78f494e52fd463e354bf65ab6421abd3a714db3bba37ba9e4a398dfe18",
-      "global-homepage-008-whatsapp-com/stable-page.txt": "a576b8bc14483d3ca37a1d9785ddb7633bf53193b270a8d7b8acf154154ee69c",
-      "global-homepage-010-bing-com/evidence.json": "109c2c1f105cc8e4d143d079b1fcdd45b63a5ac422f1835e9e5216d4cc237ddb",
-      "global-homepage-010-bing-com/stable-page.txt": "ce637158bf39da31accbb45048be6bd203196e57aeb2e7c99440ffcb33d6ee58",
+      "global-homepage-008-whatsapp-com/current-qualified-observations.json": "3d379cb138e21709683e314d07bac7576279bfedea8796af61c4baecbaff0584",
+      "global-homepage-008-whatsapp-com/evidence.json": "5a84bb342c0d3c305212f85f0cd1963ceafe9a605a8a0f8bf3ffbc59e2a23109",
+      "global-homepage-008-whatsapp-com/stable-page.txt": "9c31244c560263a85aa50a119714d46a94cf8a1df4b5ae40dbcd62917862f736",
+      "global-homepage-010-bing-com/current-qualified-observations.json": "76782d2f51b5f1b47ccd1cdbc461515247f2041067ee3e4c49524d0e16789205",
+      "global-homepage-010-bing-com/evidence.json": "2559c3dea074a30bfc8f18f0f42c63f8cba2017bd8a488a02c1bec0e0b1204a7",
+      "global-homepage-010-bing-com/stable-page.txt": "8c0125d722106272f53fcadb131ecf4301cbec62259e1ca11fc02e01db195244",
       "global-homepage-011-wikipedia-org/evidence.json": "b74ddb43c6b9b2f2b8d42df033dd803cd6c48f54a59d1d4de1cbf3f416cdb1e2",
       "global-homepage-011-wikipedia-org/stable-page.txt": "9222ed451b4beee228a9e7e89b9a4bc721ea50d77da72e43dad3c853addf84da",
       "global-homepage-012-gemini-google-com/evidence.json": "97df3691ca324a26bcaed27ee795ef482127a3ce1282b23366c89fc932f8eb5e",
@@ -187,8 +197,9 @@
       "global-homepage-062-bbc-com/stable-page.txt": "3699ad1fb9f20bfbed633a77378aa2e9ca300dff9c31c5625bf67e812d86d482",
       "global-homepage-063-paypal-com/evidence.json": "4e08872b3f34ffa06fd3638679c65c2b5e494ceabb04191903c2fad32e29fdfa",
       "global-homepage-063-paypal-com/stable-page.txt": "b75caa76c1dec7b440d999da48ad8b36ada40d720ba159400e54219991a05dfe",
-      "global-homepage-067-deepseek-com/evidence.json": "ac6b9d1e223d9bbfdc4aa66f21ff8b96cd554e86b6f49aff4ef088f4f23adadc",
-      "global-homepage-067-deepseek-com/stable-page.txt": "233605615307da3fcf2cdc68ec872e7f69ef8c314c29a3bdaf1ea7fb2ed90ed2",
+      "global-homepage-067-deepseek-com/current-qualified-observations.json": "2ebbde4f22e3a45c6c3a771406609c6443fc884b78fcedaa02fb786095a9b093",
+      "global-homepage-067-deepseek-com/evidence.json": "286c630b63653be900e7513da5b9b12f4ed55f9a38f0cd5bd856b6a691f4244c",
+      "global-homepage-067-deepseek-com/stable-page.txt": "610313e71b04aaa781010e3f55a5a69cacdad3fad0b362f01f664e323a2234eb",
       "global-homepage-068-indeed-com/evidence.json": "28093bd02ad0fabcb84c72a45b91110341121ba4743c46f32e413051240e4aab",
       "global-homepage-068-indeed-com/stable-page.txt": "100062ef93cc1fa5a6cd361cef9a80cf5e043a1ed92f6ce47054651876dfb8b4",
       "global-homepage-072-rakuten-co-jp/evidence.json": "34e00b297f4c8fdae7b11c01ec8d709124bea0e9f7de9dad1327d65f559a2d5d",
@@ -205,8 +216,9 @@
       "global-homepage-084-qq-com/stable-page.txt": "9f2bb4267630ea8e88fa48615a0d44103794136e173cff1203b4a78d5728ce9d",
       "global-homepage-085-douyin-com/evidence.json": "8487abcc33fb10090ce9f2107181d44d82bdc142ac840ab479d6566ef0508197",
       "global-homepage-085-douyin-com/stable-page.txt": "5fc11c6c89dc547fe0bbada6f3d4107f6c936a8cc95dc3aeb9bd6087f222cdc5",
-      "global-homepage-086-usps-com/evidence.json": "8575340ba753b687210ff05565ef083f06270d46808d1fcce4111ef452b79000",
-      "global-homepage-086-usps-com/stable-page.txt": "b9d2e87bb0fd1e90f0de44ee8af80cf64f2437ce1d47170c46de888a9f44f331",
+      "global-homepage-086-usps-com/current-qualified-observations.json": "556031894e8d797f93fff54372a616cf0618f1cbd664fa7d5cf093fc0acfcd2b",
+      "global-homepage-086-usps-com/evidence.json": "9724f803aab787e981bf27852a6b42b815aa260242a9a044fbf3bed8ede38322",
+      "global-homepage-086-usps-com/stable-page.txt": "50f93f88e7308cd90fa9f727e730c00b30201b38598b1be8d184c8a6807ff444",
       "global-homepage-087-instructure-com/evidence.json": "f79426c53dda1fd78353f3c0068c3feba531c3464c241bd582d145805ae69434",
       "global-homepage-087-instructure-com/stable-page.txt": "e360081a38a406698504d6b1071bb99bf0d4e9f45fef719158d363e67e355700",
       "global-homepage-090-rutube-ru/evidence.json": "50dd43e30d5663cce790e71bf6731050c640a131448ae04872d9ad38f06eda40",
diff --git a/evaluation/publication-archives.json b/evaluation/publication-archives.json
new file mode 100644
index 000000000..554db217b
--- /dev/null
+++ b/evaluation/publication-archives.json
@@ -0,0 +1,11 @@
+{
+  "schema_version": 1,
+  "archives": [
+    {
+      "id": "webfetch-browser-native-430-2026-10-15",
+      "site_url": "https://artifact-site.lexmount.cn/v/IqGpMUYHWat-dw4n8usQttTptoPzboAo",
+      "artifact_version": "ver_b5584a3d77524f5cbced6edd93105445",
+      "profile_sha256": "4144fec0ca5a3d0cccf3c31075ac1c55c0bef2bc3ec27f4c49b40b838250b272"
+    }
+  ]
+}
diff --git a/evaluation/risk-control/README.md b/evaluation/risk-control/README.md
index ebe2f8895..861c825f5 100644
--- a/evaluation/risk-control/README.md
+++ b/evaluation/risk-control/README.md
@@ -4,7 +4,7 @@ This cohort asks whether Moli 1.1.11 can retrieve the declared content present o
 
 The scope is 100 URL cases across 74 distinct sites. The executable `dataset.json` is external and bound by `source-inputs.json`; `dataset-catalog.json` retains the inventory and definition hashes. Import approved full references using the [reference-input guide](../../docs/reference-inputs.md); they are not distributed with source.
 
-Every case requires all declared stable text from initial load, including registered navigation, buttons and sidebars. Missing any required phrase fails. Another 79 cases require complete body regions; 21 cases use 27 independent count groups for names, real links, paths, deduplication and same-record fields. Human rules, machine contracts, qualification and replacement provenance are held in `first-30-rule-review.md`, `remaining-70-rule-review.md`, `body-contracts.json`, `list-contracts.json` and `qualification/`. Qualification explains historical cohort admission; it is not a scoring input. Raw investigations remain outside Git. `run-profile.json` binds authoritative inputs, provider configuration, execution parameters and binary identity.
+Body extraction is accepted against the declared body regions and composite record contracts. The compiler marks stable text as diagnostic for the 97 cases with either contract; the remaining three cases still require every stable-text group. All 1,586 independently observed stable-text items remain available for diagnostics. There are 79 body-region cases and 23 composite cases, including 21 quantity cases with 27 independent count groups for names, real links, paths, deduplication and same-record fields. Human rules, machine contracts, qualification and replacement provenance are held in `first-30-rule-review.md`, `remaining-70-rule-review.md`, `body-contracts.json`, `list-contracts.json` and `qualification/`. Qualification explains historical cohort admission; it is not a scoring input. Raw investigations remain outside Git. `run-profile.json` binds authoritative inputs, provider configuration, execution parameters and binary identity.
 
 ## Deterministic build and validation without calls
 
@@ -13,7 +13,7 @@ uv run --frozen python scripts/build_risk_control_dataset.py --output /tmp/risk-
 uv run --frozen python scripts/run_certified_benchmark.py risk-control --env-file .env
 ```
 
-The first command rebuilds from hash-bound independent evidence under `BROWSER_EVAL_DATA_HOME` (default `~/.browser-eval`). Output must match the bound external dataset byte for byte. Supply a new output path; frozen inputs cannot be overwritten. The second command validates the profile, dataset, Moli 1.1.11 version and binary hash without provider calls.
+The first command rebuilds from hash-bound independent evidence under `BROWSER_EVAL_DATA_HOME` (default `~/.browser-eval`). The compiler emits the corrected stable-text roles. The historical profile and bound external dataset retain their original bytes; they must not be overwritten or treated as a certificate for the revised contract. Supply a new output path; frozen inputs cannot be overwritten. The second command validates the profile, dataset, Moli 1.1.11 version and binary hash without provider calls.
 
 The compiler is `harness.web_fetch.risk_control_dataset`. When installed or called from another directory, pass `--definition-dir` with an explicit copy of this directory's rules and qualification manifests. Frozen-rule hashes are still enforced.
 
@@ -25,17 +25,26 @@ uv run --frozen python scripts/run_certified_benchmark.py risk-control \
   --output "$BROWSER_EVAL_DATA_HOME/evidence/risk-control/<new-run-id>"
 ```
 
-Output must be a new directory under the data root. The certified entry point is `scripts/run_certified_benchmark.py risk-control`; direct `--execute` on the execution script is rejected. A new run under the current profile has exactly 100 logical results and no automatic retries, retaining complete hash-bound debug stderr outside Git. Historical evidence additionally contains three user-authorized calls after DNS failures: 103 physical calls in total. The final response is authoritative, all call costs remain recorded and no best-response selection is allowed.
+输出目录必须是新的，并位于数据目录下。正式入口固定为
+`scripts/run_certified_benchmark.py risk-control`；直接对执行脚本使用 `--execute` 会被拒绝。
+当前 profile 的新正式运行恰有 100 个逻辑结果，且不自动重试，并为每次调用在 Git 外保留完整、
+哈希绑定的 debug stderr。保留的历史证据另有 3 个 DNS 失败后的用户授权补调，因此保留 103 次
+物理调用；每例固定采用最后一次响应，全部调用耗时均计入，不能择优。运行前后 Moli 身份必须
+一致；profile、已编译的数据集、规则和 provider 配置也会在调用前后核验。
+普通重跑不读取历史资格原文，也不重做入选审核；修改题目、参考或规则时，才由构建器
+核验相应来源。新运行生成 `frozen-input-verification.json` 和 v2 认证回执。
+生成报告前校验 `certification.json` 对 profile、dataset、results、manifest、execution、
+冻结输入核验回执和完整日志的绑定。历史 v1 回执继续按原证据契约读取，不改写或升级。
 
 Moli identity must remain unchanged before and after calls. Each of the 100 declared references is checked before and after execution; missing, changed or incomplete scope stops certification. Report builds verify `certification.json` bindings to the profile, dataset, results, manifest, execution, reference-verification receipts and complete logs.
 
 This directory contains no measured Moli outputs, raw provider artifacts, debug logs or credentials. Use the existing report builder with complete certified evidence. Historical results lacking pre/post-call reference certification cannot be promoted by writing a receipt afterward.
 
-“Full page” means the declared stable text, body and list requirements within initial load. It does not claim every undeclared character or content revealed by interaction. Registered navigation text is as mandatory as body text.
+“Page body” means the declared body and record requirements within initial load. Missing navigation, login links or footer text cannot reject content that satisfies those requirements. Blocked-page detection, record counts, same-record fields and real links remain acceptance gates. Cases without a body or composite contract retain their stable-text gate.
 
 ## Current contract and historical results
 
-The current contract requires 1,600 stable-text items. `research/risk-control-full-page-rule-revision.json` binds prior contracts and the full-page revision, retaining all registered peripheral text without rewriting earlier receipts or provider outputs. The historical 31/100 belongs to earlier inputs and evidence and is not a score for the current contract.
+The historical full-page contract required all 1,600 stable-text items. The body-scope correction assigns their acceptance role without changing the observed text or reference content. `research/risk-control-full-page-rule-revision.json` binds prior contracts and the full-page revision, retaining all registered peripheral text without rewriting earlier receipts or provider outputs. The historical 31/100 belongs to earlier inputs and evidence and is not a score for the current contract.
 
 The current adapter obtains identity from `final_url`, status and final HTML in the same `fetch --dump json` response, then converts to Markdown within the same deadline. GET completion order in old debug logs cannot prove redirect ownership; insufficient identity evidence remains unknown. A changed call route needs new execution over the complete affected scope for formal scores and timing; old-route logs and timings cannot substitute.
 
diff --git a/evaluation/risk-control/body-contracts.json b/evaluation/risk-control/body-contracts.json
index 5133aee33..607d06089 100644
--- a/evaluation/risk-control/body-contracts.json
+++ b/evaluation/risk-control/body-contracts.json
@@ -363,6 +363,7 @@
       ]
     },
     "risk-diverse-042": {
+      "stable_text_role": "diagnostic",
       "regions": [
         {
           "lines": [
@@ -1199,6 +1200,7 @@
       ]
     },
     "risk-diverse-011": {
+      "stable_text_role": "required",
       "regions": [
         {
           "lines": [
diff --git a/evaluation/risk-control/current/dataset-catalog.json b/evaluation/risk-control/current/dataset-catalog.json
new file mode 100644
index 000000000..9152103ba
--- /dev/null
+++ b/evaluation/risk-control/current/dataset-catalog.json
@@ -0,0 +1,1011 @@
+{
+  "schema_version": 1,
+  "kind": "frozen_dataset_catalog",
+  "id": "risk-control-audited-100",
+  "name": "风控网站正文评测",
+  "dataset": "dataset.json",
+  "dataset_sha256": "165b888133e859304b035d74183dd40bf7ab609cac78bb6ae6e75b645c1de426",
+  "case_count": 100,
+  "cases": [
+    {
+      "id": "risk-diverse-002",
+      "name": "知乎：人工智能应用场景回答",
+      "url": "https://www.zhihu.com/question/282715644/answer/3629347314",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "4e591a4595a0554b7f86a0eba1c601531f7fed481500da14494036310e974f70",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-001",
+      "name": "Flipkart：Acer Aspire Lite 商品详情",
+      "url": "https://www.flipkart.com/acer-aspire-lite-amd-ryzen-3-quad-core-5400u-8-gb-256-gb-ssd-windows-11-home-al15-41-thin-light-laptop/p/itm1bc0bcb4598e7",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "119d84a124f4aaa94f60f41383c27b0b74b7a8185a003567ddbfb05b39b89d40",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-006",
+      "name": "微博热搜",
+      "url": "https://s.weibo.com/top/summary",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "65eff51f32d754895c70737b8ce336e47606a575b7826b738cbcc4e4ec763e10",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-011",
+      "name": "今日头条：关于人工智能，我们了解多少",
+      "url": "https://www.toutiao.com/article/7595028554912399898/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f899d00a5c7a6303492637698931df6c99167bc66ed6066f15ae3e14959fcd0e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-061",
+      "name": "Dribbble：web-design 搜索结果",
+      "url": "https://dribbble.com/search/web-design",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "fd97c97d7512ccec16bb9c2ac9ed18fd3c86b87ee3fb7ab306feb33cf655d67e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-101",
+      "name": "哔哩哔哩：综合热门",
+      "url": "https://www.bilibili.com/v/popular/all/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "82de10eea401cff30b9c7302a18c112063a1e0f2fc44f3121844594b1429879a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-102",
+      "name": "腾讯视频：电影频道",
+      "url": "https://v.qq.com/channel/movie",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a1a5341179ecce8397ee75b09b292ea72f5e184a936419b2e9cead7528d7e142",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-271",
+      "name": "About Sanctum repository service",
+      "url": "https://dev.sanctum.geek.nz/cgit/?p=about",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "8f7e99e10858cf25406a2fa9bbb199b50befe2dd120e0915574a59e08ab31438",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-027",
+      "name": "Linux Kernel Git",
+      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "29ff371f48f33a097d310f071ef25194d302532ca923861f7625b8d228bf0060",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-new-102",
+      "name": "DebianInstall",
+      "url": "https://wiki.debian.org/DebianInstall",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9518f4ff3218de56c9da64cc9948c8acdcebd874aa02ac7fcd5c0b5f4f42af0f",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-030",
+      "name": "Wine Bugzilla",
+      "url": "https://bugs.winehq.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "520ec13a5e8f641a324ab421e3118d3df3159dee4aa61bebca0fbbe5b85b3391",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-031",
+      "name": "Science Olympiad Student Center Wiki",
+      "url": "https://scioly.org/wiki/index.php/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f243ee8a571dc97e840eb5b5e5cb00a304bd2727987b4e659777a07224cbbe15",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-032",
+      "name": "Enlightenment Git",
+      "url": "https://git.enlightenment.org/enlightenment/enlightenment",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "75827072b43b9bb530435287df09ce05eb9aa63035d08730922df86093f7b5e8",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-033",
+      "name": "FreeCAD Forum",
+      "url": "https://forum.freecad.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "338297148e1b45116d6ef782ed93ae02bec71f5de2846ebbcdbc3c0bcdacaee3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-034",
+      "name": "ScummVM Wiki",
+      "url": "https://wiki.scummvm.org/index.php/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "09277073909b6f4e6889f83cd0773450bdbe7fb385a934140451fc34b6954be2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-036",
+      "name": "OpenWrt Wiki",
+      "url": "https://openwrt.org/start",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "efc2a8c10e8a109cbfe8df740392b423fe314037caac42fe2d1d7c1ce2fc626d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-038",
+      "name": "ArchWiki",
+      "url": "https://wiki.archlinux.org/title/Main_page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "30a2268fda5aa866597e5a75453e0e45fcbda67cca4961ab2f4278ed48e1707a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-039",
+      "name": "FreeBSD SVNweb",
+      "url": "https://svnweb.freebsd.org/base/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "4599e13e815f3c5595df7d573341e0fdd08780daf2761db24d489d3a1c5f0e01",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-040",
+      "name": "Purism GitLab：Phosh",
+      "url": "https://source.puri.sm/Librem5/phosh",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "b6ca53feac1c9ff38ff47ca7ff872cd1c5b44a199edcf138689b3157c34dda37",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-041",
+      "name": "Haiku Trac",
+      "url": "https://dev.haiku-os.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "cbff3640b4e71d5c49fcd1af6e767f93760f8133de56a7ab7f3b5f29d58c84c7",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-042",
+      "name": "Devuan Git：installer-iso",
+      "url": "https://git.devuan.org/devuan/installer-iso",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "34d554128a209a16c28b091b87ae22ee2ad63f91b62212c51a76d3fcf4887269",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-045",
+      "name": "CFA Archive",
+      "url": "https://www.cfaarchive.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "75c4ba4f48dc99fc2661f8ae3fc9fe2803b2c633ce6380d83066b9ba759b7858",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-047",
+      "name": "Proxmox Bugzilla",
+      "url": "https://bugzilla.proxmox.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "024b598aa2297dd6da4bb324f2440f76939cd003e1d8100507998cbc7c610b8d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-048",
+      "name": "ReactOS Wiki",
+      "url": "https://reactos.org/wiki/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6e297e1ffb8738d6f1057f189f88df128505dea03df8240228a40c0e160371f2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-049",
+      "name": "Arch Linux 32 Packages",
+      "url": "https://www.archlinux32.org/packages/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "36a18f11e670411c7969a26b4095de6a5b1bfe2cea37c111dbce440764e11991",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-050",
+      "name": "Slackware Git",
+      "url": "https://git.slackware.nl/current/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f77638953c120ea4628d342aa73693d91e9ed7c98a40a27991dd9e181a719223",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-051",
+      "name": "Duke Digital Repository",
+      "url": "https://repository.duke.edu/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "7c67f961f5afbd2e9f343bc5eca6f5a783ebaa63354b5832f89376d61857aefd",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-055",
+      "name": "hebis Discovery System",
+      "url": "https://tufind.hds.hebis.de/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "670c2f60030ecc27bf314eade1ac6116c2b2697803156c9483ccdfefff87444b",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-057",
+      "name": "Xe Iaso",
+      "url": "https://xeiaso.net/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "db60c0ebf6aad7b76632735d6acf208e7f3d8043399efb5488a1df686460d756",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-059",
+      "name": "Superlove",
+      "url": "https://superlove.sayitditto.net/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "5a5131232354f0e34134945124cccdf809ba7d5e23ae710683d35063d53bc4b8",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-074",
+      "name": "Ticketmaster concerts",
+      "url": "https://www.ticketmaster.com/discover/concerts",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "93a4aec34c617dda96b5f4f3e06a77a6d8dd3abb53fe2b0c2953d5f668f744ee",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-101",
+      "name": "Azur Lane Wiki",
+      "url": "https://azurlane.koumakan.jp/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "fc3104cfd5f22fd321503e226b57f54088c6c059feafb509bb703c79d438a52b",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-104",
+      "name": "Sanctum Development",
+      "url": "https://dev.sanctum.geek.nz/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "33532667a459ec873b69c0b104d8d6b3e51c6f0a41702ad4d1803901875d4a29",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-106",
+      "name": "TYPO3 Extension Repository",
+      "url": "https://extensions.typo3.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a59ca8301806bdb7172cf6ea4c21f222448e231c24855932c91a2a2b32e46524",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-113",
+      "name": "MozillaZine",
+      "url": "https://mozillazine.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "0b37f86d1c5102eb5a3d656e5454f9016a639c9f9d28810c24650120d6903eda",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-114",
+      "name": "Pluralpedia",
+      "url": "https://pluralpedia.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "c8d96f1796c4871b36eb5be85de6e81c6beb5ea7727263d6a31f6b37a6730e19",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-117",
+      "name": "RPM Fusion",
+      "url": "https://rpmfusion.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "670fb01613742e048a7a8e4a1fdda5cb00d6b05108c35f38b8a65354679c34eb",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-118",
+      "name": "SquirrelJME",
+      "url": "https://squirreljme.cc/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3ed4808cbe6fd9abb5321ec9fb889a6f9ea96fb986203d9911435cca4ff9deae",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-121",
+      "name": "Dolphin Emulator Forums",
+      "url": "https://forums.dolphin-emu.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "dc00ef5fe7fc8871581e1618ddcf7004b80c4f1fa209632019e7b05139632728",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-122",
+      "name": "Free Pascal Wiki",
+      "url": "https://wiki.freepascal.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9c7916dafe96857c32d60fabe4769fc7df4eade65fded00f3e093e340af43163",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-123",
+      "name": "Koha Community Wiki",
+      "url": "https://wiki.koha-community.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "889884b2d86f23bea6bd99b7a856fd2f43edb567fdd76ae0b591f728252296a6",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-129",
+      "name": "HydroOJ FAQs",
+      "url": "https://ws.hydrooj.com/d/faqs/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "e00b6b37cc32127897a7a48740a2a50516022c268ea7a7768b4ca184cabdf16e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-134",
+      "name": "Zillow Homes for Sale",
+      "url": "https://www.zillow.com/seattle-wa/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "478c7dc7335cf4316c7b0dfae4753cfbe9b1b72bc7953059613a4a0a43f64820",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-135",
+      "name": "Go.Compare",
+      "url": "https://www.gocompare.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "116b80a20713f4629f41da494fcec44eb945b7197719150bfa5f63b1b5f2afd3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-138",
+      "name": "D Wiki",
+      "url": "https://wiki.dlang.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "96840e0deebc9ceea29abf68ffc68f5de228864e500767f0da65d75a693597c6",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-139",
+      "name": "DSource",
+      "url": "https://dsource.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "884c24446fca078cf14d202d6f63b2c9187d5e1053b75e2a6df02ae3f4e5882d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-153",
+      "name": "LZNOIP Training",
+      "url": "https://www.lznoip.club/training/66358a5906b752f133d95f9f",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9857521a0b6a1ec9b2a80313f994346b68c942524b45ffdbf4531c7811acdad3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-158",
+      "name": "Scribus",
+      "url": "https://www.scribus.net/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f80964a03dfcee684872a0480903f799847dfdf19c0f3edcf8aaae37096e45ab",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-159",
+      "name": "HAL Open Science",
+      "url": "https://hal.science/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "8aa2129bad9a21c2eed3941ad306b37c52b9bbf20c222823803279dcb928520d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-160",
+      "name": "Observation.org",
+      "url": "https://observation.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3b8e333095bdd62ed23078e671b039448e5eb47e98289f85a4f8cee64287ee07",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-170",
+      "name": "Linkpuff Git",
+      "url": "https://git.linkpuff.me/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "4c332d88622387867e20c127f09ebc129ddbbf2f18be1948282074ca19640173",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-177",
+      "name": "Egosoft Forum",
+      "url": "https://forum.egosoft.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6544835745d971406a3c1bf03f373d87f3391f092fa04e3f241dd3b1c94c29f9",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-181",
+      "name": "Wikimedia XTools Article Info",
+      "url": "https://xtools.wmcloud.org/articleinfo/en.wikipedia.org/Artificial_intelligence",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "57ccb3ad6f18a060b7709e3d7532cd8dd7a8f31fd7ce182a3b457d2501b6a31e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-182",
+      "name": "SP Codex Wiki",
+      "url": "https://spcodex.wiki/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "39ae5b459718f20831fe1ac68f37d4c0a289080d655c746a37bc03fb2d9dfb2e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-185",
+      "name": "Lumiera API Documentation",
+      "url": "https://lumiera.org/doxy/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6e8a7188b25c90f84b21d90a96f4704f5ef0f013417d81f2cb97a8d4fe5135e7",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-192",
+      "name": "ibiblio",
+      "url": "https://ibiblio.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9606cad0f429c0662335f8ab1eae4d5a2963f24f13ae4827e5125406f22785d6",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-193",
+      "name": "Fedora Documentation",
+      "url": "https://docs.fedoraproject.org/en-US/docs/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "2db31431ffe3dc39ff463c429719777f843cc709829f0f2d07c1db2af4c00983",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-219",
+      "name": "QEMU Wiki",
+      "url": "https://wiki.qemu.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "46e5b068b86a789be248807115c6cf8effd714a1184a3eff6b62e1a5c70d922c",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-220",
+      "name": "MusicBrainz Wiki",
+      "url": "https://wiki.musicbrainz.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a354eb1a57b4b8524f3995266425641277f13d694dbc82522214b7073525804f",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-221",
+      "name": "SABRE Roads",
+      "url": "https://www.sabre-roads.org.uk/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d3a79c0deb9b67f4f56658812c83749387d264561a575e1a1e07183627bf3e6a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-222",
+      "name": "Wikibase World",
+      "url": "https://wikibase.world/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "812e2762770ad7592308b4d287ad40914a9ff4998d50e250325c386eba3dcfa2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-223",
+      "name": "Noisebridge",
+      "url": "https://www.noisebridge.net/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "bee0dabe5f58b72fdb6d98dfaa79d02ee009a4ac754630cd213a8632b12e3dfd",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-225",
+      "name": "Anton Paar Wiki",
+      "url": "https://wiki.anton-paar.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "e5ff8417c616f09baf1a777b97836fceade0f645346257a70f5a1354dec356b4",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-226",
+      "name": "Team Fortress Wiki",
+      "url": "https://wiki.teamfortress.com/wiki/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "0345be81c157a69d3146ae3f64f4a1061e81d1b386bb8f13e47f9d342ce4e572",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-011",
+      "name": "Threads：NASA 公开帖子",
+      "url": "https://www.threads.com/@nasa/post/DdEwHNClPdc?hl=zh-cn",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d0aead382084f4ad0a3242f01b0b5c2514a68e09bd90bb00b698dee103607637",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-012",
+      "name": "Goodreads：84 Charing Cross Road",
+      "url": "https://www.goodreads.com/book/show/953716.84_Charing_Cross_Road",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "7e107faed4275e67cc4de09371c2be23de120cc0f369f162a5007bb5b69f2355",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-241",
+      "name": "POWER-Z 测试仪购买方式",
+      "url": "https://www.power-z.cn/blogs/新闻/chargerlab-power-z-测试仪购买方式",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d8a0e2a125965a94112c1936b9225bb08c7428c0a8aba14694bcc3c8b66d670b",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-242",
+      "name": "TIB English homepage",
+      "url": "https://www.tib.eu/en/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "51286793c385a614bb706fa23c6ee7303c31a9ca8ab254dd2a66cf1e65b8324a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-244",
+      "name": "Sciencemadness Wiki",
+      "url": "https://www.sciencemadness.org/smwiki/index.php/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "b65f4cc85529cfd1f190195dc3f693a7fabcc9111701e6b30b0278ced9d3b726",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-245",
+      "name": "About xeno-canto",
+      "url": "https://xeno-canto.org/about/xeno-canto",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3041a5cfa0bee8f1d90a4828441c2f4debf39c60c92e3582a9be5aee6a2b96bb",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-248",
+      "name": "The Global European",
+      "url": "https://theglobaleuropean.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3aeb4f3285949ea8f07b9f9a2cc03d40a0075b1adaee20e9aad5f8a316ce2d95",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-262",
+      "name": "Hacklab public wiki",
+      "url": "https://knowledge.hacklab.to/wiki/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3b1628ec8e7b8c6f76054371cf226a9ca8447248f0393ec6d2f0af79a585b710",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-263",
+      "name": "freedesktop wiki",
+      "url": "https://www.freedesktop.org/wiki/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "956e3912d35a1f3ff9ef81c3c5f1149c8ea7753db9085f321679f4e8ceaddbe2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-267",
+      "name": "openSUSE Wiki",
+      "url": "https://en.opensuse.org/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d4cca1263e33a9d2d16c1b65472777c70ba20f9f9cbd9b1c15b8795ccdab51e5",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-268",
+      "name": "Alpine Linux Wiki",
+      "url": "https://wiki.alpinelinux.org/wiki/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "866e2946b9c8f5dd5926bcacc92e10cff875fc216876a2d0709857db39374f77",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-new-006",
+      "name": "Dribbble：TAE Web Design for Travel & Tourism",
+      "url": "https://dribbble.com/shots/16508584-TAE-Web-Design-for-Travel-Tourism",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "cbfd2e5f5527d8e48997e9700a40b11b7569f4a77d70ffffd22402871d7309c3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-199",
+      "name": "About ScummVM",
+      "url": "https://wiki.scummvm.org/index.php?title=About",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "8b0aeb87110dd66c4df883be6917e7c6a0b3290dcc7a84d88d0663dc168f94bd",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-200",
+      "name": "OpenWrt quick start",
+      "url": "https://openwrt.org/docs/guide-quick-start/start",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "80fcdc9d37936ff4663edc5626337431767c55eae1e516aac7847adcfa87a3d2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-201",
+      "name": "Arch Linux installation guide",
+      "url": "https://wiki.archlinux.org/title/Installation_guide",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "1086c03375e7d627c4b7cfbbcc1e33ea1df47542f98caddfc353402320e5d8ee",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-202",
+      "name": "Haiku Trac guide",
+      "url": "https://dev.haiku-os.org/wiki/TracGuide",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3c4ed8565dae61a808d92cc120b91ac7520080506f347c1bc6a1e28ba8eb6bb9",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-204",
+      "name": "ReactOS overview article",
+      "url": "https://reactos.org/wiki/ReactOS",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "c7ddcda583d479e4e496b80b3f7578df7cee834d94f6292c2ca8e6c11f3ed468",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-205",
+      "name": "Superlove about",
+      "url": "https://superlove.sayitditto.net/about",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "7f6d0d8ffe32b61e4c9a69f5d2f447777cda9c2db1662ae6f14f3ec286542230",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-208",
+      "name": "About Pluralpedia",
+      "url": "https://pluralpedia.org/w/Project:About",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3d376ae1c12f8ca7b3749aeebde59611b23b0b3cf6e9d88117f16554a30f6c05",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-209",
+      "name": "RPM Fusion FAQ",
+      "url": "https://rpmfusion.org/FAQ",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "064a87a20cae59ad2d80433b40febe2b52b77b46f0fd6d35c3e43e63436ed686",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-210",
+      "name": "Installing Free Pascal",
+      "url": "https://wiki.freepascal.org/Installing_the_Free_Pascal_Compiler",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "134dc199b0e024090cf15d8f45207cbcab8e789d88f94c39e2b504d0e680221a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-211",
+      "name": "Koha getting involved",
+      "url": "https://wiki.koha-community.org/wiki/Getting_involved",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9983060a609fc693a8879b2f7841f7115b7ebfdb838923d709c6c8f484c99ef1",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-212",
+      "name": "D language getting started",
+      "url": "https://wiki.dlang.org/Getting_Started",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "939ec0e69b155ab421c71a8d0db769abb23e9b6cc28f7b0eb414b187c66399c5",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-213",
+      "name": "About Scribus",
+      "url": "https://www.scribus.net/about/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d2a933d9d5376df6b1002bdaca9e4b6f0548b585552dfd4df2467bffd9998663",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-214",
+      "name": "About Observation",
+      "url": "https://observation.org/pages/about/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d3880e7d05dc5127914ff2af4db1c0475648abd842320393e6c777c6378c2514",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-215",
+      "name": "About SPCodex",
+      "url": "https://spcodex.wiki/SPCodex:About",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d1a508d18a9e2e1516bf0cb3ff78f12a7e368df27b5da11030c2c18a70744ef8",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-216",
+      "name": "Fedora beginners guide",
+      "url": "https://docs.fedoraproject.org/en-US/beginners-guide/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "69f07f2aeb03d28e5e4215a71be8f9e24ad5ce90522aab8cf5a7ad85541c76cd",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-228",
+      "name": "Linux kernel README",
+      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/about/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "c32a6ea8e233c75f035dc6ca519b4355c1913baec38d29d7477724d5bffdc284",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-230",
+      "name": "Scioly getting started",
+      "url": "https://scioly.org/wiki/Help:Getting_started",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f05d66afc127e26d9c17a6c6513e0eef5195896bbc39ca24dabbaa754494fd7e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-231",
+      "name": "FreeCAD forum FAQ",
+      "url": "https://forum.freecad.org/app.php/help/faq",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "361d8e0a7742190983185246ffd7e618df7ff31d9cc4f7a3059bf43bce14f64d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-234",
+      "name": "What are TYPO3 extensions",
+      "url": "https://extensions.typo3.org/about-extension-repository/what-are-extensions",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "07deed8cf2ea29f3c6c8d90e0167c9ff414e0eecf4a7e89b6d0e0803eee06b0f",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-236",
+      "name": "SquirrelJME user guide",
+      "url": "https://multiphasicapps.net/doc/ckout/assets/user-guide/readme.mkd",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6f0f4ba4208f9ac4691b3d19779ec1cddcd2abfcead3bf7cb088f1d10121568e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-237",
+      "name": "Dolphin FAQ",
+      "url": "https://dolphin-emu.org/docs/faq/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a8cef268823caf2a1432adce663ac39878e6bb6d36cd45d2bcd4c7abffe4d1f3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-238",
+      "name": "Egosoft forum FAQ",
+      "url": "https://forum.egosoft.com/app.php/help/faq",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "82bdfa31fc84ecafd797dc3c809f80a4a5a20f0d0779915eccc16638003b9914",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-239",
+      "name": "About ibiblio",
+      "url": "https://www.ibiblio.org/about/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "8c09ff83e5736ebd7bbf4854a6077830d94d74c2d4787e8ee754d73c061a20a9",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-250",
+      "name": "Contributing to QEMU",
+      "url": "https://wiki.qemu.org/Contribute",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f2c5c6629dfac5ba5f1b39f5e5f198038978113b02d7fa6429057d7b99d15876",
+      "reference_sha256": null
+    }
+  ]
+}
diff --git a/evaluation/risk-control/current/source-inputs.json b/evaluation/risk-control/current/source-inputs.json
new file mode 100644
index 000000000..45619d88a
--- /dev/null
+++ b/evaluation/risk-control/current/source-inputs.json
@@ -0,0 +1,13 @@
+{
+  "schema_version": 2,
+  "kind": "frozen_reference_inputs",
+  "id": "risk-control-165b888133e8-v6",
+  "dataset": "dataset.json",
+  "dataset_sha256": "165b888133e859304b035d74183dd40bf7ab609cac78bb6ae6e75b645c1de426",
+  "catalog": "dataset-catalog.json",
+  "catalog_sha256": "52ec968b2ada26e5e061ccb25cbe4a73747539e556fa88f31bece6d7fb79b3cb",
+  "files": {
+    "dataset.json": "165b888133e859304b035d74183dd40bf7ab609cac78bb6ae6e75b645c1de426"
+  },
+  "trees": {}
+}
diff --git a/evaluation/risk-control/dataset-catalog.json b/evaluation/risk-control/dataset-catalog.json
index f01df28cb..89bbf5fe0 100644
--- a/evaluation/risk-control/dataset-catalog.json
+++ b/evaluation/risk-control/dataset-catalog.json
@@ -2,9 +2,9 @@
   "schema_version": 1,
   "kind": "frozen_dataset_catalog",
   "id": "risk-control-audited-100",
-  "name": "曾观察到访问限制的100个网址",
+  "name": "风控网站正文评测",
   "dataset": "dataset.json",
-  "dataset_sha256": "d0d038bae0114be107116edd94e501996ba6cda852ac29244c089e15a3e37437",
+  "dataset_sha256": "d3f18edd2b29f8ef19eb496841f91c433d7f9adfe33c591874d963db55760d7c",
   "case_count": 100,
   "cases": [
     {
@@ -174,7 +174,7 @@
       "category": "risk_control",
       "track": "risk_control",
       "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
-      "definition_sha256": "e2f62cd594e62a8532c8619feddc73b7d1223ef57c223d58c9fd574beb6a2858",
+      "definition_sha256": "30a2268fda5aa866597e5a75453e0e45fcbda67cca4961ab2f4278ed48e1707a",
       "reference_sha256": null
     },
     {
@@ -374,7 +374,7 @@
       "category": "risk_control",
       "track": "risk_control",
       "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
-      "definition_sha256": "af3cf6a1bb67192436aa23f494bf0ef88f15d5ed260900d45e67b483cd28c455",
+      "definition_sha256": "670fb01613742e048a7a8e4a1fdda5cb00d6b05108c35f38b8a65354679c34eb",
       "reference_sha256": null
     },
     {
@@ -634,7 +634,7 @@
       "category": "risk_control",
       "track": "risk_control",
       "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
-      "definition_sha256": "a3a504844c884eec0738a4f09a4d96a4b20fcbafbd3af67b92705301a3c73ff5",
+      "definition_sha256": "e5ff8417c616f09baf1a777b97836fceade0f645346257a70f5a1354dec356b4",
       "reference_sha256": null
     },
     {
@@ -674,7 +674,7 @@
       "category": "risk_control",
       "track": "risk_control",
       "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
-      "definition_sha256": "1114f12794678c618328774b456b87df176abd8738d00f94fd8adcc3ce40f6cb",
+      "definition_sha256": "d8a0e2a125965a94112c1936b9225bb08c7428c0a8aba14694bcc3c8b66d670b",
       "reference_sha256": null
     },
     {
@@ -754,7 +754,7 @@
       "category": "risk_control",
       "track": "risk_control",
       "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
-      "definition_sha256": "24c8cfda691df49fe7a2b5a7aff11535fc7ad0a75fce13aa0c5bf5df74bb75fa",
+      "definition_sha256": "866e2946b9c8f5dd5926bcacc92e10cff875fc216876a2d0709857db39374f77",
       "reference_sha256": null
     },
     {
@@ -794,7 +794,7 @@
       "category": "risk_control",
       "track": "risk_control",
       "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
-      "definition_sha256": "4f6bcbe618aa5269babc4854ef318c2ff4530490995280ff7b6b45f245d6bdf9",
+      "definition_sha256": "1086c03375e7d627c4b7cfbbcc1e33ea1df47542f98caddfc353402320e5d8ee",
       "reference_sha256": null
     },
     {
@@ -844,7 +844,7 @@
       "category": "risk_control",
       "track": "risk_control",
       "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
-      "definition_sha256": "a57af07b4bf14172356d25b6a870b09f62c48cbef17702b16e9145e64091859b",
+      "definition_sha256": "064a87a20cae59ad2d80433b40febe2b52b77b46f0fd6d35c3e43e63436ed686",
       "reference_sha256": null
     },
     {
@@ -974,7 +974,7 @@
       "category": "risk_control",
       "track": "risk_control",
       "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
-      "definition_sha256": "d8df38c8d1867e1148a5dfadd4a3e4a4a0f46c7f0594a02ee227a41a7cd2dedf",
+      "definition_sha256": "a8cef268823caf2a1432adce663ac39878e6bb6d36cd45d2bcd4c7abffe4d1f3",
       "reference_sha256": null
     },
     {
diff --git a/evaluation/risk-control/first-30-rule-review.md b/evaluation/risk-control/first-30-rule-review.md
index cb11a6614..fe68f03c9 100644
--- a/evaluation/risk-control/first-30-rule-review.md
+++ b/evaluation/risk-control/first-30-rule-review.md
@@ -221,10 +221,10 @@
 [打开目标网页](https://wiki.archlinux.org/title/Main_page)
 
 - **网址、语言与目标：** 输入和观察最终网址相同；英文；ArchWiki 主页面介绍和主要导航内容。
-- **稳定文字：** 顶部站点导航 `Home`、`Packages`、`Forums`、`Wiki`、`GitLab`、`Security`、`AUR`、`Download`；页面与侧栏 `ArchWiki`、`Main page`、`Table of contents`、`Getting involved`、`Help`、`Contributing`、`Recent changes`、`Search`、`Appearance`；页面操作 `Read`、`View source`、`View history`；主体分别要求 `Welcome to the`、`your source for Arch Linux documentation on the web.`、`The distribution`、`Our community`、`Wiki interaction`。欢迎句中的 ArchWiki 是单独显示的链接文字，已由前面的 ArchWiki 组检查，不再把三段拼成一个稳定文字。所有文字都在独立保存的首次页面文本中，分布于顶部、侧栏、页面操作和完整主体，全部必需。
+- **稳定文字：** 顶部站点导航 `Home`、`Packages`、`Forums`、`Wiki`、`GitLab`、`Security`、`AUR`、`Download`；页面与侧栏 `ArchWiki`、`Main page`、`Table of contents`、`Getting involved`、`Help`、`Contributing`、`Search`、`Appearance`；页面操作 `Read`、`View source`、`View history`；主体分别要求 `Welcome to the`、`your source for Arch Linux documentation on the web.`、`The distribution`、`Our community`、`Wiki interaction`。欢迎句中的 ArchWiki 是单独显示的链接文字，已由前面的 ArchWiki 组检查，不再把三段拼成一个稳定文字。所有文字都在独立保存的首次页面文本中，分布于顶部、侧栏、页面操作和完整主体，全部必需。
 - **name-link：** 不采用数量列表。
 - **正文参考：** 三区为：欢迎语和 `Visit the Table of contents for a listing of article categories.`；The distribution 下 Overview、FAQ、Arch compared、Installation guide、General recommendations、List of applications 及说明；Our community 与 Wiki interaction 下各固定入口及说明。
-- **排除：** 语言数量、旧版本号、最后编辑时间、当前登录状态和外观选项的当前选中值。`Color (beta)` 及 Small/Standard/Large 等皮肤选项不冻结，因为名称和可用项可能随 MediaWiki 皮肤版本变化。3 区均需 60%，至少 2 区需 80%；只返回顶部导航、侧栏或主体其中一部分均不能通过。
+- **排除：** 语言数量、旧版本号、最后编辑时间、当前登录状态和外观选项的当前选中值。`Color (beta)` 及 Small/Standard/Large 等皮肤选项不冻结，因为名称和可用项可能随 MediaWiki 皮肤版本变化。3 区均需 60%，至少 2 区需 80%；只返回顶部导航、侧栏或主体其中一部分均不能通过；响应式导航中的 `Recent changes` 不参与通过判定。
 
 ## 18. risk-diverse-039｜FreeBSD SVNweb
 
diff --git a/evaluation/risk-control/history/v5/dataset-catalog.json b/evaluation/risk-control/history/v5/dataset-catalog.json
new file mode 100644
index 000000000..1efd6e419
--- /dev/null
+++ b/evaluation/risk-control/history/v5/dataset-catalog.json
@@ -0,0 +1,1011 @@
+{
+  "schema_version": 1,
+  "kind": "frozen_dataset_catalog",
+  "id": "risk-control-audited-100",
+  "name": "风控网站正文评测",
+  "dataset": "dataset.json",
+  "dataset_sha256": "43717c2f8d5e9d3568f84670ba4975fbd22e05468fd2353c3a13f6c48983cdae",
+  "case_count": 100,
+  "cases": [
+    {
+      "id": "risk-diverse-002",
+      "name": "知乎：人工智能应用场景回答",
+      "url": "https://www.zhihu.com/question/282715644/answer/3629347314",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "4e591a4595a0554b7f86a0eba1c601531f7fed481500da14494036310e974f70",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-001",
+      "name": "Flipkart：Acer Aspire Lite 商品详情",
+      "url": "https://www.flipkart.com/acer-aspire-lite-amd-ryzen-3-quad-core-5400u-8-gb-256-gb-ssd-windows-11-home-al15-41-thin-light-laptop/p/itm1bc0bcb4598e7",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "119d84a124f4aaa94f60f41383c27b0b74b7a8185a003567ddbfb05b39b89d40",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-006",
+      "name": "微博热搜",
+      "url": "https://s.weibo.com/top/summary",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "65eff51f32d754895c70737b8ce336e47606a575b7826b738cbcc4e4ec763e10",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-011",
+      "name": "今日头条：关于人工智能，我们了解多少",
+      "url": "https://www.toutiao.com/article/7595028554912399898/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f899d00a5c7a6303492637698931df6c99167bc66ed6066f15ae3e14959fcd0e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-061",
+      "name": "Dribbble：web-design 搜索结果",
+      "url": "https://dribbble.com/search/web-design",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "fd97c97d7512ccec16bb9c2ac9ed18fd3c86b87ee3fb7ab306feb33cf655d67e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-101",
+      "name": "哔哩哔哩：综合热门",
+      "url": "https://www.bilibili.com/v/popular/all/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "82de10eea401cff30b9c7302a18c112063a1e0f2fc44f3121844594b1429879a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-102",
+      "name": "腾讯视频：电影频道",
+      "url": "https://v.qq.com/channel/movie",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a1a5341179ecce8397ee75b09b292ea72f5e184a936419b2e9cead7528d7e142",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-271",
+      "name": "About Sanctum repository service",
+      "url": "https://dev.sanctum.geek.nz/cgit/?p=about",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "8f7e99e10858cf25406a2fa9bbb199b50befe2dd120e0915574a59e08ab31438",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-027",
+      "name": "Linux Kernel Git",
+      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "29ff371f48f33a097d310f071ef25194d302532ca923861f7625b8d228bf0060",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-new-102",
+      "name": "DebianInstall",
+      "url": "https://wiki.debian.org/DebianInstall",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9518f4ff3218de56c9da64cc9948c8acdcebd874aa02ac7fcd5c0b5f4f42af0f",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-030",
+      "name": "Wine Bugzilla",
+      "url": "https://bugs.winehq.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "520ec13a5e8f641a324ab421e3118d3df3159dee4aa61bebca0fbbe5b85b3391",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-031",
+      "name": "Science Olympiad Student Center Wiki",
+      "url": "https://scioly.org/wiki/index.php/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f243ee8a571dc97e840eb5b5e5cb00a304bd2727987b4e659777a07224cbbe15",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-032",
+      "name": "Enlightenment Git",
+      "url": "https://git.enlightenment.org/enlightenment/enlightenment",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "75827072b43b9bb530435287df09ce05eb9aa63035d08730922df86093f7b5e8",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-033",
+      "name": "FreeCAD Forum",
+      "url": "https://forum.freecad.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "338297148e1b45116d6ef782ed93ae02bec71f5de2846ebbcdbc3c0bcdacaee3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-034",
+      "name": "ScummVM Wiki",
+      "url": "https://wiki.scummvm.org/index.php/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "09277073909b6f4e6889f83cd0773450bdbe7fb385a934140451fc34b6954be2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-036",
+      "name": "OpenWrt Wiki",
+      "url": "https://openwrt.org/start",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "efc2a8c10e8a109cbfe8df740392b423fe314037caac42fe2d1d7c1ce2fc626d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-038",
+      "name": "ArchWiki",
+      "url": "https://wiki.archlinux.org/title/Main_page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "30a2268fda5aa866597e5a75453e0e45fcbda67cca4961ab2f4278ed48e1707a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-039",
+      "name": "FreeBSD SVNweb",
+      "url": "https://svnweb.freebsd.org/base/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "4599e13e815f3c5595df7d573341e0fdd08780daf2761db24d489d3a1c5f0e01",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-040",
+      "name": "Purism GitLab：Phosh",
+      "url": "https://source.puri.sm/Librem5/phosh",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "b6ca53feac1c9ff38ff47ca7ff872cd1c5b44a199edcf138689b3157c34dda37",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-041",
+      "name": "Haiku Trac",
+      "url": "https://dev.haiku-os.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "cbff3640b4e71d5c49fcd1af6e767f93760f8133de56a7ab7f3b5f29d58c84c7",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-042",
+      "name": "Devuan Git：installer-iso",
+      "url": "https://git.devuan.org/devuan/installer-iso",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6aba3f75d126638c5a852af5b0be872afbb5bf44f732d5ce4dd26a84f94ae5d6",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-045",
+      "name": "CFA Archive",
+      "url": "https://www.cfaarchive.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "75c4ba4f48dc99fc2661f8ae3fc9fe2803b2c633ce6380d83066b9ba759b7858",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-047",
+      "name": "Proxmox Bugzilla",
+      "url": "https://bugzilla.proxmox.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "024b598aa2297dd6da4bb324f2440f76939cd003e1d8100507998cbc7c610b8d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-048",
+      "name": "ReactOS Wiki",
+      "url": "https://reactos.org/wiki/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6e297e1ffb8738d6f1057f189f88df128505dea03df8240228a40c0e160371f2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-049",
+      "name": "Arch Linux 32 Packages",
+      "url": "https://www.archlinux32.org/packages/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "36a18f11e670411c7969a26b4095de6a5b1bfe2cea37c111dbce440764e11991",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-050",
+      "name": "Slackware Git",
+      "url": "https://git.slackware.nl/current/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f77638953c120ea4628d342aa73693d91e9ed7c98a40a27991dd9e181a719223",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-051",
+      "name": "Duke Digital Repository",
+      "url": "https://repository.duke.edu/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "7c67f961f5afbd2e9f343bc5eca6f5a783ebaa63354b5832f89376d61857aefd",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-055",
+      "name": "hebis Discovery System",
+      "url": "https://tufind.hds.hebis.de/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "670c2f60030ecc27bf314eade1ac6116c2b2697803156c9483ccdfefff87444b",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-057",
+      "name": "Xe Iaso",
+      "url": "https://xeiaso.net/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "db60c0ebf6aad7b76632735d6acf208e7f3d8043399efb5488a1df686460d756",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-059",
+      "name": "Superlove",
+      "url": "https://superlove.sayitditto.net/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "5a5131232354f0e34134945124cccdf809ba7d5e23ae710683d35063d53bc4b8",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-074",
+      "name": "Ticketmaster concerts",
+      "url": "https://www.ticketmaster.com/discover/concerts",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "93a4aec34c617dda96b5f4f3e06a77a6d8dd3abb53fe2b0c2953d5f668f744ee",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-101",
+      "name": "Azur Lane Wiki",
+      "url": "https://azurlane.koumakan.jp/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "fc3104cfd5f22fd321503e226b57f54088c6c059feafb509bb703c79d438a52b",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-104",
+      "name": "Sanctum Development",
+      "url": "https://dev.sanctum.geek.nz/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "33532667a459ec873b69c0b104d8d6b3e51c6f0a41702ad4d1803901875d4a29",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-106",
+      "name": "TYPO3 Extension Repository",
+      "url": "https://extensions.typo3.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a59ca8301806bdb7172cf6ea4c21f222448e231c24855932c91a2a2b32e46524",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-113",
+      "name": "MozillaZine",
+      "url": "https://mozillazine.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "0b37f86d1c5102eb5a3d656e5454f9016a639c9f9d28810c24650120d6903eda",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-114",
+      "name": "Pluralpedia",
+      "url": "https://pluralpedia.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "c8d96f1796c4871b36eb5be85de6e81c6beb5ea7727263d6a31f6b37a6730e19",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-117",
+      "name": "RPM Fusion",
+      "url": "https://rpmfusion.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "670fb01613742e048a7a8e4a1fdda5cb00d6b05108c35f38b8a65354679c34eb",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-118",
+      "name": "SquirrelJME",
+      "url": "https://squirreljme.cc/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3ed4808cbe6fd9abb5321ec9fb889a6f9ea96fb986203d9911435cca4ff9deae",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-121",
+      "name": "Dolphin Emulator Forums",
+      "url": "https://forums.dolphin-emu.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "dc00ef5fe7fc8871581e1618ddcf7004b80c4f1fa209632019e7b05139632728",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-122",
+      "name": "Free Pascal Wiki",
+      "url": "https://wiki.freepascal.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9c7916dafe96857c32d60fabe4769fc7df4eade65fded00f3e093e340af43163",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-123",
+      "name": "Koha Community Wiki",
+      "url": "https://wiki.koha-community.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "889884b2d86f23bea6bd99b7a856fd2f43edb567fdd76ae0b591f728252296a6",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-129",
+      "name": "HydroOJ FAQs",
+      "url": "https://ws.hydrooj.com/d/faqs/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "e00b6b37cc32127897a7a48740a2a50516022c268ea7a7768b4ca184cabdf16e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-134",
+      "name": "Zillow Homes for Sale",
+      "url": "https://www.zillow.com/seattle-wa/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "478c7dc7335cf4316c7b0dfae4753cfbe9b1b72bc7953059613a4a0a43f64820",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-135",
+      "name": "Go.Compare",
+      "url": "https://www.gocompare.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "116b80a20713f4629f41da494fcec44eb945b7197719150bfa5f63b1b5f2afd3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-138",
+      "name": "D Wiki",
+      "url": "https://wiki.dlang.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "96840e0deebc9ceea29abf68ffc68f5de228864e500767f0da65d75a693597c6",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-139",
+      "name": "DSource",
+      "url": "https://dsource.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "884c24446fca078cf14d202d6f63b2c9187d5e1053b75e2a6df02ae3f4e5882d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-153",
+      "name": "LZNOIP Training",
+      "url": "https://www.lznoip.club/training/66358a5906b752f133d95f9f",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9857521a0b6a1ec9b2a80313f994346b68c942524b45ffdbf4531c7811acdad3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-158",
+      "name": "Scribus",
+      "url": "https://www.scribus.net/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f80964a03dfcee684872a0480903f799847dfdf19c0f3edcf8aaae37096e45ab",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-159",
+      "name": "HAL Open Science",
+      "url": "https://hal.science/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "8aa2129bad9a21c2eed3941ad306b37c52b9bbf20c222823803279dcb928520d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-160",
+      "name": "Observation.org",
+      "url": "https://observation.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3b8e333095bdd62ed23078e671b039448e5eb47e98289f85a4f8cee64287ee07",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-170",
+      "name": "Linkpuff Git",
+      "url": "https://git.linkpuff.me/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "4c332d88622387867e20c127f09ebc129ddbbf2f18be1948282074ca19640173",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-177",
+      "name": "Egosoft Forum",
+      "url": "https://forum.egosoft.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6544835745d971406a3c1bf03f373d87f3391f092fa04e3f241dd3b1c94c29f9",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-181",
+      "name": "Wikimedia XTools Article Info",
+      "url": "https://xtools.wmcloud.org/articleinfo/en.wikipedia.org/Artificial_intelligence",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "57ccb3ad6f18a060b7709e3d7532cd8dd7a8f31fd7ce182a3b457d2501b6a31e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-182",
+      "name": "SP Codex Wiki",
+      "url": "https://spcodex.wiki/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "39ae5b459718f20831fe1ac68f37d4c0a289080d655c746a37bc03fb2d9dfb2e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-185",
+      "name": "Lumiera API Documentation",
+      "url": "https://lumiera.org/doxy/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6e8a7188b25c90f84b21d90a96f4704f5ef0f013417d81f2cb97a8d4fe5135e7",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-192",
+      "name": "ibiblio",
+      "url": "https://ibiblio.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "e5aa019d864c6248715f6183e159bed1751aeaee849d29179723b743eb27111b",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-193",
+      "name": "Fedora Documentation",
+      "url": "https://docs.fedoraproject.org/en-US/docs/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "2db31431ffe3dc39ff463c429719777f843cc709829f0f2d07c1db2af4c00983",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-219",
+      "name": "QEMU Wiki",
+      "url": "https://wiki.qemu.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "46e5b068b86a789be248807115c6cf8effd714a1184a3eff6b62e1a5c70d922c",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-220",
+      "name": "MusicBrainz Wiki",
+      "url": "https://wiki.musicbrainz.org/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a354eb1a57b4b8524f3995266425641277f13d694dbc82522214b7073525804f",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-221",
+      "name": "SABRE Roads",
+      "url": "https://www.sabre-roads.org.uk/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d3a79c0deb9b67f4f56658812c83749387d264561a575e1a1e07183627bf3e6a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-222",
+      "name": "Wikibase World",
+      "url": "https://wikibase.world/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "812e2762770ad7592308b4d287ad40914a9ff4998d50e250325c386eba3dcfa2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-223",
+      "name": "Noisebridge",
+      "url": "https://www.noisebridge.net/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "bee0dabe5f58b72fdb6d98dfaa79d02ee009a4ac754630cd213a8632b12e3dfd",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-225",
+      "name": "Anton Paar Wiki",
+      "url": "https://wiki.anton-paar.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "e5ff8417c616f09baf1a777b97836fceade0f645346257a70f5a1354dec356b4",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-226",
+      "name": "Team Fortress Wiki",
+      "url": "https://wiki.teamfortress.com/wiki/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "0345be81c157a69d3146ae3f64f4a1061e81d1b386bb8f13e47f9d342ce4e572",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-011",
+      "name": "Threads：NASA 公开帖子",
+      "url": "https://www.threads.com/@nasa/post/DdEwHNClPdc?hl=zh-cn",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a1dc25366197b23bb314d20dcb50d3ebb82c83d6403d45a46634518e8d8707b6",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-012",
+      "name": "Goodreads：84 Charing Cross Road",
+      "url": "https://www.goodreads.com/book/show/953716.84_Charing_Cross_Road",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "7e107faed4275e67cc4de09371c2be23de120cc0f369f162a5007bb5b69f2355",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-241",
+      "name": "POWER-Z 测试仪购买方式",
+      "url": "https://www.power-z.cn/blogs/新闻/chargerlab-power-z-测试仪购买方式",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d8a0e2a125965a94112c1936b9225bb08c7428c0a8aba14694bcc3c8b66d670b",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-242",
+      "name": "TIB English homepage",
+      "url": "https://www.tib.eu/en/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "51286793c385a614bb706fa23c6ee7303c31a9ca8ab254dd2a66cf1e65b8324a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-244",
+      "name": "Sciencemadness Wiki",
+      "url": "https://www.sciencemadness.org/smwiki/index.php/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "b65f4cc85529cfd1f190195dc3f693a7fabcc9111701e6b30b0278ced9d3b726",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-245",
+      "name": "About xeno-canto",
+      "url": "https://xeno-canto.org/about/xeno-canto",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3041a5cfa0bee8f1d90a4828441c2f4debf39c60c92e3582a9be5aee6a2b96bb",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-248",
+      "name": "The Global European",
+      "url": "https://theglobaleuropean.com/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3aeb4f3285949ea8f07b9f9a2cc03d40a0075b1adaee20e9aad5f8a316ce2d95",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-262",
+      "name": "Hacklab public wiki",
+      "url": "https://knowledge.hacklab.to/wiki/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3b1628ec8e7b8c6f76054371cf226a9ca8447248f0393ec6d2f0af79a585b710",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-263",
+      "name": "freedesktop wiki",
+      "url": "https://www.freedesktop.org/wiki/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "956e3912d35a1f3ff9ef81c3c5f1149c8ea7753db9085f321679f4e8ceaddbe2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-267",
+      "name": "openSUSE Wiki",
+      "url": "https://en.opensuse.org/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d4cca1263e33a9d2d16c1b65472777c70ba20f9f9cbd9b1c15b8795ccdab51e5",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-268",
+      "name": "Alpine Linux Wiki",
+      "url": "https://wiki.alpinelinux.org/wiki/Main_Page",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "866e2946b9c8f5dd5926bcacc92e10cff875fc216876a2d0709857db39374f77",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-new-006",
+      "name": "Dribbble：TAE Web Design for Travel & Tourism",
+      "url": "https://dribbble.com/shots/16508584-TAE-Web-Design-for-Travel-Tourism",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "cbfd2e5f5527d8e48997e9700a40b11b7569f4a77d70ffffd22402871d7309c3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-199",
+      "name": "About ScummVM",
+      "url": "https://wiki.scummvm.org/index.php?title=About",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "8b0aeb87110dd66c4df883be6917e7c6a0b3290dcc7a84d88d0663dc168f94bd",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-200",
+      "name": "OpenWrt quick start",
+      "url": "https://openwrt.org/docs/guide-quick-start/start",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "80fcdc9d37936ff4663edc5626337431767c55eae1e516aac7847adcfa87a3d2",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-201",
+      "name": "Arch Linux installation guide",
+      "url": "https://wiki.archlinux.org/title/Installation_guide",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "1086c03375e7d627c4b7cfbbcc1e33ea1df47542f98caddfc353402320e5d8ee",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-202",
+      "name": "Haiku Trac guide",
+      "url": "https://dev.haiku-os.org/wiki/TracGuide",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3c4ed8565dae61a808d92cc120b91ac7520080506f347c1bc6a1e28ba8eb6bb9",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-204",
+      "name": "ReactOS overview article",
+      "url": "https://reactos.org/wiki/ReactOS",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "c7ddcda583d479e4e496b80b3f7578df7cee834d94f6292c2ca8e6c11f3ed468",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-205",
+      "name": "Superlove about",
+      "url": "https://superlove.sayitditto.net/about",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "7f6d0d8ffe32b61e4c9a69f5d2f447777cda9c2db1662ae6f14f3ec286542230",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-208",
+      "name": "About Pluralpedia",
+      "url": "https://pluralpedia.org/w/Project:About",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "3d376ae1c12f8ca7b3749aeebde59611b23b0b3cf6e9d88117f16554a30f6c05",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-209",
+      "name": "RPM Fusion FAQ",
+      "url": "https://rpmfusion.org/FAQ",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "064a87a20cae59ad2d80433b40febe2b52b77b46f0fd6d35c3e43e63436ed686",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-210",
+      "name": "Installing Free Pascal",
+      "url": "https://wiki.freepascal.org/Installing_the_Free_Pascal_Compiler",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "134dc199b0e024090cf15d8f45207cbcab8e789d88f94c39e2b504d0e680221a",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-211",
+      "name": "Koha getting involved",
+      "url": "https://wiki.koha-community.org/wiki/Getting_involved",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "9983060a609fc693a8879b2f7841f7115b7ebfdb838923d709c6c8f484c99ef1",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-212",
+      "name": "D language getting started",
+      "url": "https://wiki.dlang.org/Getting_Started",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "939ec0e69b155ab421c71a8d0db769abb23e9b6cc28f7b0eb414b187c66399c5",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-213",
+      "name": "About Scribus",
+      "url": "https://www.scribus.net/about/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d2a933d9d5376df6b1002bdaca9e4b6f0548b585552dfd4df2467bffd9998663",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-214",
+      "name": "About Observation",
+      "url": "https://observation.org/pages/about/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d3880e7d05dc5127914ff2af4db1c0475648abd842320393e6c777c6378c2514",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-215",
+      "name": "About SPCodex",
+      "url": "https://spcodex.wiki/SPCodex:About",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "d1a508d18a9e2e1516bf0cb3ff78f12a7e368df27b5da11030c2c18a70744ef8",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-216",
+      "name": "Fedora beginners guide",
+      "url": "https://docs.fedoraproject.org/en-US/beginners-guide/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "69f07f2aeb03d28e5e4215a71be8f9e24ad5ce90522aab8cf5a7ad85541c76cd",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-228",
+      "name": "Linux kernel README",
+      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/about/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "c32a6ea8e233c75f035dc6ca519b4355c1913baec38d29d7477724d5bffdc284",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-230",
+      "name": "Scioly getting started",
+      "url": "https://scioly.org/wiki/Help:Getting_started",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f05d66afc127e26d9c17a6c6513e0eef5195896bbc39ca24dabbaa754494fd7e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-231",
+      "name": "FreeCAD forum FAQ",
+      "url": "https://forum.freecad.org/app.php/help/faq",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "361d8e0a7742190983185246ffd7e618df7ff31d9cc4f7a3059bf43bce14f64d",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-234",
+      "name": "What are TYPO3 extensions",
+      "url": "https://extensions.typo3.org/about-extension-repository/what-are-extensions",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "07deed8cf2ea29f3c6c8d90e0167c9ff414e0eecf4a7e89b6d0e0803eee06b0f",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-236",
+      "name": "SquirrelJME user guide",
+      "url": "https://multiphasicapps.net/doc/ckout/assets/user-guide/readme.mkd",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "6f0f4ba4208f9ac4691b3d19779ec1cddcd2abfcead3bf7cb088f1d10121568e",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-237",
+      "name": "Dolphin FAQ",
+      "url": "https://dolphin-emu.org/docs/faq/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "a8cef268823caf2a1432adce663ac39878e6bb6d36cd45d2bcd4c7abffe4d1f3",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-238",
+      "name": "Egosoft forum FAQ",
+      "url": "https://forum.egosoft.com/app.php/help/faq",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "82bdfa31fc84ecafd797dc3c809f80a4a5a20f0d0779915eccc16638003b9914",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-239",
+      "name": "About ibiblio",
+      "url": "https://www.ibiblio.org/about/",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "8c09ff83e5736ebd7bbf4854a6077830d94d74c2d4787e8ee754d73c061a20a9",
+      "reference_sha256": null
+    },
+    {
+      "id": "risk-diverse-250",
+      "name": "Contributing to QEMU",
+      "url": "https://wiki.qemu.org/Contribute",
+      "category": "risk_control",
+      "track": "risk_control",
+      "task_prompt": "提取声明网址首次自动加载出的目标正文、列表和真实链接；不点击、不输入、不滚动、不翻页、不登录，也不使用图片文字。",
+      "definition_sha256": "f2c5c6629dfac5ba5f1b39f5e5f198038978113b02d7fa6429057d7b99d15876",
+      "reference_sha256": null
+    }
+  ]
+}
diff --git a/evaluation/risk-control/list-contracts.json b/evaluation/risk-control/list-contracts.json
index d74383e4a..27950f125 100644
--- a/evaluation/risk-control/list-contracts.json
+++ b/evaluation/risk-control/list-contracts.json
@@ -555,8 +555,10 @@
     "risk-diverse-181": {
       "groups": [
         {
-          "id": "report-fields",
+          "id": "general-statistics",
           "kind": "field_report",
+          "start_pattern": "^(?:#{1,6}\\s*)?General statistics(?:\\s+(?:\\\\)?\\[(?:show|hide)(?:\\\\)?\\])*$",
+          "end_pattern": "^(?:#{1,6}\\s*)?Prose\\s*$",
           "required_fields": [
             {
               "id": "page_id",
@@ -628,12 +630,24 @@
               "aliases": [
                 "Latest edit"
               ]
-            },
+            }
+          ],
+          "fixed_values": {
+            "page_id": "1164",
+            "wikidata_id": "Q11660"
+          }
+        },
+        {
+          "id": "prose-statistics",
+          "kind": "field_report",
+          "start_pattern": "^(?:#{1,6}\\s*)?Prose\\s*$",
+          "end_pattern": "^(?:#{1,6}\\s*)?Registered edits(?:\\s*(?:·|:|[-–—])\\s*.*)?$",
+          "required_fields": [
             {
-              "id": "prose",
+              "id": "prose_words",
               "kind": "integer",
               "aliases": [
-                "Prose"
+                "Words"
               ]
             },
             {
@@ -643,38 +657,16 @@
                 "References"
               ]
             }
-          ],
-          "fixed_values": {
-            "page_id": "1164",
-            "wikidata_id": "Q11660"
-          }
+          ]
         }
       ]
     },
     "risk-diverse-192": {
-      "groups": [
-        {
-          "id": "homepage-news",
-          "kind": "named_link",
-          "minimum_records": 3,
-          "hosts": [
-            "www.ibiblio.org"
-          ],
-          "entry_path": "/archive/(?:19|20)[0-9]{2}/(?:0?[1-9]|1[0-2])/[a-z0-9][a-z0-9-]*",
-          "link_base_url": "https://www.ibiblio.org/",
-          "required_fields": [
-            {
-              "id": "published",
-              "kind": "date_or_time"
-            },
-            {
-              "id": "summary",
-              "kind": "text",
-              "minimum_chars": 40
-            }
-          ]
-        }
-      ]
+      "stable_text_role": "diagnostic",
+      "page_patterns": [
+        "(?is)\\bibiblio(?:\\.org)?\\b.{0,500}\\b(?:collections? of collections|public digital (?:library|archive)|digital (?:library|archive|repository))\\b.{0,700}\\b(?:freely available information|free(?:ly)? available (?:digital )?(?:information|resources|collections))\\b.{0,700}\\b(?:software|music|literature|art|history|science|politics|cultural studies)\\b.{0,700}\\b(?:UNC|University of North Carolina(?: at|-)? Chapel Hill)\\b"
+      ],
+      "groups": []
     },
     "risk-diverse-012": {
       "groups": [
diff --git a/evaluation/risk-control/remaining-70-rule-review.md b/evaluation/risk-control/remaining-70-rule-review.md
index 55b2d7639..b2b8cb442 100644
--- a/evaluation/risk-control/remaining-70-rule-review.md
+++ b/evaluation/risk-control/remaining-70-rule-review.md
@@ -81,9 +81,9 @@
 [打开目标网页](https://rpmfusion.org/)
 
 - **网址、语言与目标：** 输入和最终网址相同；英文；项目身份、用途和面向用户/打包者的入口说明。
-- **稳定文字：** `RPM Fusion provides software that the Fedora Project or Red Hat doesn't want to ship`、`Our goal is to simplify end-user experience`、`For users`、`For packagers`、`Browse available packages`；`Search`、`RPM Fusion`、`Configuration`、`ReportingBugs`、`Howto`、`FAQ`、`Contribute`、`Edit`、`Info`、`Other`、`Login`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
+- **稳定文字：** `RPM Fusion provides software that the Fedora Project or Red Hat doesn't want to ship`、`Our goal is to simplify end-user experience`、`For users`、`For packagers`、`Browse available packages`；`RPM Fusion`、`Configuration`、`ReportingBugs`、`Howto`、`FAQ`、`Contribute`、`Edit`、`Info`、`Other`、`Login`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
 - **正文参考：** 三区覆盖项目用途介绍、用户安装/使用入口、打包者和包浏览入口的固定说明。
-- **排除：** 当前 Fedora/EL 版本号、具体仓库矩阵和更新时间。
+- **排除：** 当前 Fedora/EL 版本号、具体仓库矩阵和更新时间；响应式导航中的 `Search` 不参与通过判定。
 
 ## 38. risk-diverse-118｜SquirrelJME
 
@@ -334,9 +334,9 @@
 [打开目标网页](https://wiki.anton-paar.com/)
 
 - **网址、语言与目标：** 正式输入为根网址；绑定证据在 `Accept-Language: en-US` 下跳转到 `/us-en/`；英文；同一 Anton Paar 科学知识 Wiki 首页。补查观察到其他浏览器语言环境可能转到 `/cn-cn/`，因此评分取证必须保持英文请求环境，不能把任意地区跳转当作目标正文。
-- **稳定文字：** `Anton Paar Wiki`、`Anton Paar Wiki is a living, growing scientific platform dedicated to highlighting the science behind your measurement solution.`、`Are you ready for your Eureka moment?`、`Articles`、`Tables`、`Calculators`。不再使用“平台介绍句”这种未给出原文的描述；`Home`、`Products`、`Services & Support`、`Resources`、`Shop`、`About Us`、`Careers`、`Contact`、`Recommended`、`Density`、`Viscosity`、`Rheology`、`Microwave Digestion`、`Surface characterization`、`Particle characterization`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
+- **稳定文字：** `Anton Paar Wiki`、`Anton Paar Wiki is a living, growing scientific platform dedicated to highlighting the science behind your measurement solution.`、`Are you ready for your Eureka moment?`、`Articles`、`Tables`、`Calculators`。不再使用“平台介绍句”这种未给出原文的描述；`Home`、`Products`、`Services & Support`、`Shop`、`About Us`、`Careers`、`Contact`、`Recommended`、`Density`、`Viscosity`、`Rheology`、`Microwave Digestion`、`Surface characterization`、`Particle characterization`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
 - **正文参考：** 单区覆盖从 `Anton Paar Wiki is a living, growing scientific platform` 到 `Are you ready for your Eureka moment?` 的完整平台用途介绍；Articles/Tables/Calculators 只有入口名称，没有独立资源说明，因此仍作为稳定文字核对，不重复充当正文。
-- **排除：** Cookie 设置、地区列表、隐藏菜单、当前内容数量和页脚。
+- **排除：** Cookie 设置、地区列表、隐藏菜单、当前内容数量和页脚；响应式导航中的 `Resources` 不参与通过判定。
 
 ## 64. risk-diverse-226｜Team Fortress Wiki
 
@@ -371,9 +371,9 @@
 [打开目标网页](https://www.power-z.cn/blogs/新闻/chargerlab-power-z-测试仪购买方式)
 
 - **网址、语言与目标：** 输入经正常编码后仍是同一中文文章；使用首次加载出的整篇文章正文，不能只取 KM/KT 区别摘要。
-- **稳定文字：** `ChargerLAB POWER-Z 测试仪购买方式`、`POWER-Z.cn`、`KM系列`、`主要区别`、`店长推荐`、`KT系列`、`重大事件`；`商品`、`下载`、`APP`、`PowerPi`、`THG Start`、`English`、`Cart`、`Home`、`新闻`、`联系我们`、`关于我们`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
+- **稳定文字：** `ChargerLAB POWER-Z 测试仪购买方式`、`POWER-Z.cn`、`KM系列`、`主要区别`、`店长推荐`、`KT系列`、`重大事件`；`商品`、`下载`、`APP`、`PowerPi`、`THG Start`、`English`、`新闻`、`联系我们`、`关于我们`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
 - **正文参考：** 从文章首段 `POWER-Z是ChargerLAB推出的便携式电源测试仪` 到文章内“联系我们”信息结束，分五个连续区域：①项目介绍和官方购买渠道；②KM 系列总述、区别、推荐及 KM002C；③KM001C 与 KM001Pro；④KT 系列总述、区别、推荐、KT002 与 KT001；⑤加群说明、重大事件和文章内联系信息。每区包含边界内全部正文，包括正文中的价格和真实购买/说明链接文字。
-- **排除：** 顶部产品导航、购物车、评论表单、文章后的站点页脚和站点级“关于我们”。5 区均需 60%，至少 4 区需 80%。
+- **排除：** 顶部产品导航、购物车、评论表单、文章后的站点页脚和站点级“关于我们”。5 区均需 60%，至少 4 区需 80%；响应式导航中的 `Cart`、`Home` 不参与通过判定。
 
 ## 68. risk-diverse-242｜TIB English homepage
 
@@ -445,9 +445,9 @@
 [打开目标网页](https://wiki.alpinelinux.org/wiki/Main_Page)
 
 - **网址、语言与目标：** 最终网址仅增加 `__goaway_challenge` 参数，正文仍为同一英文 Main Page；挑战参数不作为页面身份。
-- **稳定文字：** `Welcome to Alpine Linux Wiki!`、`Alpine Linux is a security-oriented, lightweight Linux distribution`、`How can we help you?`、`Installation`、`FAQ`、`Glossary`、`Tutorials and Howtos`、`Developer Documentation`、`Contribute`；`Alpine Linux`、`Search`、`Create account`、`Log in`、`Main Site`、`Wiki`、`Recent Changes`、`Site Index`、`Categories`、`Help`、`Read`、`View source`、`View history`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
+- **稳定文字：** `Welcome to Alpine Linux Wiki!`、`Alpine Linux is a security-oriented, lightweight Linux distribution`、`How can we help you?`、`Installation`、`FAQ`、`Glossary`、`Tutorials and Howtos`、`Developer Documentation`、`Contribute`；`Alpine Linux`、`Search`、`Create account`、`Log in`、`Wiki`、`Help`、`Read`、`View source`、`View history`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
 - **正文参考：** 两区覆盖发行版用途介绍和帮助栏目名称/说明。
-- **排除：** `Current releases` 的版本号、最后编辑时间、挑战参数值和页脚。
+- **排除：** `Current releases` 的版本号、最后编辑时间、挑战参数值和页脚；响应式导航中的 `Main Site`、`Recent Changes`、`Site Index`、`Categories` 不参与通过判定。
 
 ---
 
@@ -485,9 +485,9 @@
 [打开目标网页](https://wiki.archlinux.org/title/Installation_guide)
 
 - **网址、语言与目标：** 输入和最终网址相同；英文；首次加载出的整篇安装指南，不进入链接后的专题页。
-- **稳定文字：** `Installation guide`、`Pre-installation`、`Installation`、`Configure the system`、`Reboot`、`Post-installation`；`Home`、`Packages`、`Forums`、`Wiki`、`GitLab`、`Security`、`AUR`、`Download`、`Main page`、`Table of contents`、`Getting involved`、`Read`、`View source`、`View history`、`Appearance`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
+- **稳定文字：** `Installation guide`、`Pre-installation`、`Installation`、`Configure the system`、`Reboot`、`Post-installation`；`Home`、`Packages`、`Forums`、`Wiki`、`GitLab`、`Security`、`AUR`、`Download`、`Read`、`View source`、`View history`、`Appearance`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
 - **正文参考：** 使用文章导言到 Post-installation 结束的全文，分五区：①导言及 Pre-installation 从镜像获取到联网；②时钟、分区、格式化和挂载；③镜像选择和安装基本软件包；④Fstab、Chroot、Time、Localization；⑤Network configuration、Initramfs、Root password、Boot loader、Reboot、Post-installation。代码、警告和注释均属于正文。
-- **排除：** 目录的重复标题、语言导航、Retrieved from、最后编辑时间和页脚。5 区均需 60%，至少 4 区需 80%。
+- **排除：** 目录的重复标题、语言导航、Retrieved from、最后编辑时间和页脚。5 区均需 60%，至少 4 区需 80%；响应式导航中的 `Main page`、`Table of contents`、`Getting involved` 不参与通过判定。
 
 ## 80. risk-diverse-202｜Haiku Trac guide
 
@@ -530,9 +530,9 @@
 [打开目标网页](https://rpmfusion.org/FAQ)
 
 - **网址、语言与目标：** 输入和最终网址相同；英文；首次加载出的整篇 FAQ。
-- **稳定文字：** `Frequently Asked Questions`、`What is RPM Fusion?`、`What packages are available from RPM Fusion?`、`How do I use RPM Fusion?`、`General`、`Packages`；`Search`、`RPM Fusion`、`Configuration`、`ReportingBugs`、`Howto`、`FAQ`、`Contribute`、`Edit`、`Info`、`Other`、`Login`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
+- **稳定文字：** `Frequently Asked Questions`、`What is RPM Fusion?`、`What packages are available from RPM Fusion?`、`How do I use RPM Fusion?`、`General`、`Packages`；`RPM Fusion`、`Configuration`、`ReportingBugs`、`Howto`、`FAQ`、`Contribute`、`Edit`、`Info`、`Other`、`Login`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
 - **正文参考：** 从 What is RPM Fusion 的回答到最后 `How can I list all installed RPM Fusion Packages` 的回答，分五区：①项目和四类仓库；②使用/配置/安装及 Fedora 不收录原因；③合法性、信任、支持版本/架构；④报错、贡献和 broken dependencies；⑤General 与 Packages 下的全部问答。
-- **排除：** 顶部目录的重复问题、站点导航和页脚。5 区均需 60%，至少 4 区需 80%。
+- **排除：** 顶部目录的重复问题、站点导航和页脚。5 区均需 60%，至少 4 区需 80%；响应式导航中的 `Search` 不参与通过判定。
 
 ## 85. risk-diverse-210｜Installing Free Pascal
 
@@ -647,9 +647,9 @@
 [打开目标网页](https://dolphin-emu.org/docs/faq/)
 
 - **网址、语言与目标：** 正式输入为无参数网址；绑定的 `Accept-Language: en-US` HTTP 证据保持同一网址并取得英文全文；Dolphin FAQ 首次加载出的全部问答正文。补查观察到其他浏览器语言环境可能转到 `/cn/`，因此评分取证必须保持英文请求环境；`?nocr=true` 只能作为人工核对同一英文目标的辅助入口，不能替换正式输入。
-- **稳定文字：** `About Dolphin`、`Hardware and system requirements`、`Installation issues`、`Configuration issues`、`Common issues`、`Game issues`、`Dolphin development`、`Miscellaneous`；`Download`、`Blog`、`Screenshots`、`FAQ`、`Guides`、`Compatibility`、`Community`、`Discord`、`Forum`、`Wiki`、`GitHub`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
+- **稳定文字：** `About Dolphin`、`Hardware and system requirements`、`Installation issues`、`Configuration issues`、`Common issues`、`Game issues`、`Dolphin development`、`Miscellaneous`；`Download`、`Blog`、`Screenshots`、`FAQ`、`Guides`、`Compatibility`、`Community`、`Forum`、`Wiki`、`GitHub`。以上稳定文字均来自绑定的首次加载证据，全部参与任务通过判定；排除项中的“导航”仅指未列入这里的其他通用、状态性或易变导航。
 - **正文参考：** 从 `What is Dolphin?` 到 Supported Dump Formats 最后一项，分五区：①About Dolphin 与许可证/开发者；②硬件和系统要求；③安装、配置和常见问题；④游戏问题和 Dolphin development；⑤Miscellaneous，包括核心数、性能、ROM/ISO 与支持格式。
-- **排除：** 顶部目录重复项、语言列表、站点导航和页脚。5 区均需 60%，至少 4 区需 80%。
+- **排除：** 顶部目录重复项、语言列表、站点导航和页脚。5 区均需 60%，至少 4 区需 80%；响应式导航中的 `Discord` 不参与通过判定。
 
 ## 98. risk-diverse-238｜Egosoft forum FAQ
 
diff --git a/evaluation/risk-control/rule-authoring-guide.md b/evaluation/risk-control/rule-authoring-guide.md
index 129c396fd..e36587086 100644
--- a/evaluation/risk-control/rule-authoring-guide.md
+++ b/evaluation/risk-control/rule-authoring-guide.md
@@ -44,7 +44,7 @@ Initially loaded iframe/subdocument content can qualify with declared ownership.
 
 Do not use OCR, text within images/posters/icons/image buttons, alt text, hidden templates, scripts or still-collapsed content. Exclude content requiring clicks, expansion, typing, pagination or scroll-triggered loading. Challenges, access-denied pages, login notices and loading placeholders are not target body text. A browser-tab title absent from visible page content is not visible stable text.
 
-Ordinary text buttons can qualify without being clicked when visible, stable and relevant. Once selected they are mandatory, but cannot replace body or list completeness.
+Ordinary text buttons can qualify without being clicked when visible, stable and relevant. Their acceptance role follows the content contract: diagnostic when body or composite requirements exist, mandatory otherwise. They cannot replace body or list completeness.
 
 ### No interaction during supplementary capture
 
@@ -95,7 +95,7 @@ Do not freeze current leaderboard members, news headlines, prices, ranks, stock,
 
 There is no universal minimum or maximum group count. Do not stop at three or add unsuitable phrases to reach three. Overlapping fragments of one sentence are not independent identity items. Each group needs a meaningful phrase, original text, position, purpose and stability evidence; avoid large spans containing volatile dates or prices.
 
-All registered groups are mandatory. A selected footer or button missing from otherwise complete body text still fails. Select peripheral text carefully; stability alone does not require freezing every peripheral string. Navigation/footer matches do not prove body or list completeness.
+Stable text is `required` by default. A body or list-contract owner may explicitly set `stable_text_role` to `diagnostic` only after its mandatory body regions, structured records and any `page_patterns` together cover the complete qualified target scope. Missing diagnostic groups remain visible in coverage and per-group results but do not reject complete target content. Select peripheral text carefully; navigation and footer matches cannot establish body, identity or list completeness.
 
 ### Formatting and variants
 
@@ -202,13 +202,13 @@ These are design examples, not frozen answers for actual cases.
 | Short post | Post/author identity, suitable phrases and short-body check | Arbitrary phrase quotas or replies used as post text |
 | iframe page | Parent identity and actual subdocument target | Parent title or embed tag only |
 
-All selected requirements apply. Complete stable footers do not replace body; sufficient links do not replace another declared body region. Alternative wording inside one group does not make whole-page rule types alternatives.
+Every declared body region and composite group applies. Stable-text groups are diagnostics when either contract exists; cases with neither retain mandatory stable text. Complete footers cannot replace body content, and sufficient links cannot replace a declared body region.
 
 ## 12. Validate both error directions
 
 Exercise the shared scoring entry point, not only visual inspection of configuration. The guide itself does not execute these checks. Complete independent references should pass, including reasonable spaces, line breaks, case, Markdown tables/lists, real relative-link resolution and verified irrelevant tracking differences.
 
-Construct applicable negative controls for missing any stable phrase, including footers/buttons; site/navigation/footer-only outputs; wrong target/language; challenge-only or loading-shell responses; empty names; ownership mismatch; wrong hosts/paths; incomplete or invented links; IDs without links; missing or borrowed fields; duplicate records; wrong-region records; counts one below threshold; missing middle/end; repeated openings; and capture duplicates creating false coverage.
+Include positive controls for complete body or records without peripheral phrases. Construct applicable negative controls for missing mandatory stable phrases in anchor-only cases; site/navigation/footer-only outputs; wrong target/language; challenge-only or loading-shell responses; empty names; ownership mismatch; wrong hosts/paths; incomplete or invented links; IDs without links; missing or borrowed fields; duplicate records; wrong-region records; counts one below threshold; missing middle/end; repeated openings; and capture duplicates creating false coverage.
 
 Normal articles discussing login or CAPTCHA must not fail solely for those words. Exact threshold boundaries use unrounded values; display rounding cannot change verdicts. URL syntax alone cannot establish every new member's authenticity: require the declared provenance and ownership checks.
 
@@ -224,4 +224,4 @@ Keep original pages and observations in external evidence storage. Do not copy p
 
 The final cohort inventory, original evidence, per-case scope and mappings to historical material are bound by paths and hashes. Unused reserves stay outside Git. Dynamic-task methodology supplies independent evidence, rule combinations, link/field/count/body techniques and bidirectional checks, but not its dataset-specific counts or qualification criteria.
 
-Consult the [shared body implementation](../../harness/web_fetch/body_coverage.py) and [format handling](../../harness/web_fetch/metrics.py) for actual metric semantics. This cohort does not inherit an older three-phrase minimum, a mandatory extra visit per case or old candidate counts. It uses only the formal 100 cases, predeclared random reserve selection when needed, page-specific stable text without quotas, necessary evidenced variants, all-selected-item acceptance, evidence reuse, real links and at least 80% valid name-link count.
+Consult the [shared body implementation](../../harness/web_fetch/body_coverage.py) and [format handling](../../harness/web_fetch/metrics.py) for actual metric semantics. This cohort does not inherit an older three-phrase minimum, a mandatory extra visit per case or old candidate counts. It uses only the formal 100 cases, predeclared random reserve selection when needed, page-specific stable text without quotas, necessary evidenced variants, explicit body/record acceptance with stable-text diagnostics, anchor-only fallback, evidence reuse, real links and at least 80% valid name-link count.
diff --git a/evaluation/risk-control/run-profile.json b/evaluation/risk-control/run-profile.json
index 07d234ac3..4e434371c 100644
--- a/evaluation/risk-control/run-profile.json
+++ b/evaluation/risk-control/run-profile.json
@@ -4,8 +4,8 @@
   "status": "ready",
   "unresolved_case_ids": [],
   "dataset": {
-    "path": "evaluation/risk-control/dataset.json",
-    "sha256": "d0d038bae0114be107116edd94e501996ba6cda852ac29244c089e15a3e37437",
+    "path": "evaluation/risk-control/current/dataset.json",
+    "sha256": "165b888133e859304b035d74183dd40bf7ab609cac78bb6ae6e75b645c1de426",
     "case_count": 100,
     "site_count": 74,
     "case_ids_sha256": "f037b11fa10826f6bdafd1e61ec8663070fe9873ebb891218cf941f67e5012b1"
@@ -25,19 +25,19 @@
     },
     "first_30_rules": {
       "path": "evaluation/risk-control/first-30-rule-review.md",
-      "sha256": "280f18c04a0fc83f2e59816b07454525780366500bfb8b2faef3019749759344"
+      "sha256": "6945a6aa7b0d8d5990d8abf5d24fc41b5a42a22c70940a7c996d8698c6e9bf81"
     },
     "remaining_70_rules": {
       "path": "evaluation/risk-control/remaining-70-rule-review.md",
-      "sha256": "a1c743a2df97b20eddf10c28bf179f1125d8937e1a568abf6c9cf9e79c225da7"
+      "sha256": "301574dddcfddf6d30ed4d882cdd40b1ae859fdc95a0a02cf9868f55e3fd1079"
     },
     "list_contracts": {
       "path": "evaluation/risk-control/list-contracts.json",
-      "sha256": "4d848525cc47179904443758ccdea39ea12c0e959b07237e4193fe2540a59299"
+      "sha256": "a566fb13328bd1a88b189b5a49fb7b3565a8d037c22aaa19c2b86087cbbe0881"
     },
     "body_contracts": {
       "path": "evaluation/risk-control/body-contracts.json",
-      "sha256": "db7d3083ff5430c2c56e9dcd7000cb340b78792dfb426ec3b9e08bd17fb81552"
+      "sha256": "de5a1ff1b4333e980dd824848e79f2e7717175b53ffade512491afeb4f6c13f9"
     },
     "rule_independent_audit": {
       "path": "evaluation/risk-control/rule-independent-audit.md",
diff --git a/evaluation/risk-control/source-inputs.json b/evaluation/risk-control/source-inputs.json
index 00e57a5be..895a57ba0 100644
--- a/evaluation/risk-control/source-inputs.json
+++ b/evaluation/risk-control/source-inputs.json
@@ -1,13 +1,13 @@
 {
   "schema_version": 2,
   "kind": "frozen_reference_inputs",
-  "id": "risk-control-d0d038bae011-v2",
+  "id": "risk-control-d3f18edd2b29-v4",
   "dataset": "dataset.json",
-  "dataset_sha256": "d0d038bae0114be107116edd94e501996ba6cda852ac29244c089e15a3e37437",
+  "dataset_sha256": "d3f18edd2b29f8ef19eb496841f91c433d7f9adfe33c591874d963db55760d7c",
   "catalog": "dataset-catalog.json",
-  "catalog_sha256": "43e79ab63c12f56ed025d78fa6e417cfc91b812faa6a69b9016b99979a498a98",
+  "catalog_sha256": "02e30a5c408de3b5113e28f27359cf5e454814de612f860e6b7d7536c892efb0",
   "files": {
-    "dataset.json": "d0d038bae0114be107116edd94e501996ba6cda852ac29244c089e15a3e37437"
+    "dataset.json": "d3f18edd2b29f8ef19eb496841f91c433d7f9adfe33c591874d963db55760d7c"
   },
   "trees": {}
 }
diff --git a/evaluation/scoring-regressions.json b/evaluation/scoring-regressions.json
index 82663f684..378cdf5cd 100644
--- a/evaluation/scoring-regressions.json
+++ b/evaluation/scoring-regressions.json
@@ -21777,6 +21777,2464 @@
   "expected_metrics": {
     "stable_unique_record_count": 0
   }
+},
+{
+  "id": "unmatched-markdown-brackets-retains-required-prose",
+  "category": "format-normalization",
+  "root_cause": "Repeated suffix scans for unclosed Markdown delimiters make ordinary prose quadratic; indexing delimiters must preserve visible text and anchor decisions.",
+  "failure_mode": "false-negative",
+  "case": {
+    "url": "https://example.test/body",
+    "acceptance_contract": {
+      "version": 1,
+      "schema": "body_text",
+      "minimum_records": 0,
+      "stable_text_anchors": [
+        {
+          "id": "body",
+          "alternatives": [
+            "Source prose"
+          ]
+        }
+      ]
+    }
+  },
+  "artifact": "Source prose [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [label]( [label]( [label]( [label]( [label]( [label]( [label]( [label](",
+  "ok": true,
+  "expected_task_pass": true,
+  "expected_metrics": {
+    "stable_task_pass": true
+  }
+},
+{
+  "id": "unmatched-markdown-brackets-cannot-supply-missing-prose",
+  "category": "format-normalization",
+  "root_cause": "Repeated suffix scans for unclosed Markdown delimiters make ordinary prose quadratic; indexing delimiters must preserve visible text and anchor decisions.",
+  "failure_mode": "false-positive",
+  "case": {
+    "url": "https://example.test/body",
+    "acceptance_contract": {
+      "version": 1,
+      "schema": "body_text",
+      "minimum_records": 0,
+      "stable_text_anchors": [
+        {
+          "id": "body",
+          "alternatives": [
+            "Source prose"
+          ]
+        }
+      ]
+    }
+  },
+  "artifact": "Unrelated prose [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [ [label]( [label]( [label]( [label]( [label]( [label]( [label]( [label](",
+  "ok": true,
+  "expected_task_pass": false,
+  "expected_metrics": {
+    "stable_task_pass": false
+  }
+},
+{
+  "id": "required-final-url-missing-is-a-measured-failure",
+  "category": "task-predicate",
+  "root_cause": "missing_provider_observation_is_not_missing_benchmark_reference",
+  "failure_mode": "false-positive",
+  "case": {
+    "url": "https://example.test/start",
+    "track": "risk_control",
+    "task_kind": "body",
+    "source_benchmark": {
+      "risk_control": {
+        "navigation_contract": {
+          "requested_url": "https://example.test/start",
+          "observed_final_url": "https://example.test/final"
+        }
+      }
+    },
+    "acceptance_contract": {
+      "version": 1,
+      "schema": "body_text",
+      "minimum_records": 0,
+      "stable_text_anchors": [
+        {
+          "id": "body",
+          "alternatives": [
+            "Required body"
+          ]
+        }
+      ]
+    }
+  },
+  "artifact": "Required body",
+  "ok": true,
+  "expected_task_pass": false,
+  "expected_task_measured": true,
+  "expected_metrics": {
+    "page_identity_required": true,
+    "page_identity_status": "unavailable"
+  }
+},
+{
+  "id": "required-final-url-present-keeps-valid-body",
+  "category": "task-predicate",
+  "root_cause": "missing_provider_observation_is_not_missing_benchmark_reference",
+  "failure_mode": "false-negative",
+  "case": {
+    "url": "https://example.test/start",
+    "track": "risk_control",
+    "task_kind": "body",
+    "source_benchmark": {
+      "risk_control": {
+        "navigation_contract": {
+          "requested_url": "https://example.test/start",
+          "observed_final_url": "https://example.test/final"
+        }
+      }
+    },
+    "acceptance_contract": {
+      "version": 1,
+      "schema": "body_text",
+      "minimum_records": 0,
+      "stable_text_anchors": [
+        {
+          "id": "body",
+          "alternatives": [
+            "Required body"
+          ]
+        }
+      ]
+    }
+  },
+  "artifact": "Required body",
+  "ok": true,
+  "expected_task_pass": true,
+  "expected_task_measured": true,
+  "expected_metrics": {
+    "page_identity_required": true,
+    "page_identity_status": "verified"
+  },
+  "final_url": "https://example.test/final"
+},
+    {"id":"content-policy-dynamic-final-page-mismatch-cannot-be-counted-as-a-pass","category":"acceptance-contract","root_cause":"dynamic_page_identity_alignment","failure_mode":"false-negative","case":{"url":"https://example.test/start","evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/en/catalog","target_language":"en-US","target_region":"US","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"identity","alternatives":["Catalog"]}]}},"artifact":"Catalog","ok":true,"final_url":"https://example.test/fr/catalog","metadata":{"route":"dynamic_selected_text","document_language":"fr"},"expected_task_pass":true,"expected_metrics":{"page_identity_status":"mismatch","final_url_consistent":false,"language_consistent":false,"page_identity_required":false}},
+    {"id":"content-policy-dynamic-search-query-mismatch-is-a-different-page","category":"acceptance-contract","root_cause":"dynamic_page_query_identity","failure_mode":"false-negative","case":{"url":"https://example.test/search?q=Mario","evaluation_url":"https://example.test/search?q=Mario","expected_final_url":"https://example.test/search?q=Mario","target_language":"ja-JP","target_region":"JP","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"identity","alternatives":["Search results"]}]}},"artifact":"Search results","ok":true,"final_url":"https://example.test/search?q=Zelda","metadata":{"route":"dynamic_selected_text","document_language":"ja"},"expected_task_pass":true,"expected_metrics":{"page_identity_status":"mismatch","final_url_consistent":false,"page_identity_required":false}},
+    {"id":"content-policy-dynamic-source-document-language-mismatch-is-not-verified","category":"acceptance-contract","root_cause":"declared_document_language_vs_visible_language","failure_mode":"false-negative","case":{"url":"https://example.test/rtl","evaluation_url":"https://example.test/rtl","expected_final_url":"https://example.test/rtl","target_language":"ar","expected_document_language":"en","target_region":"US","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"arabic-content","alternatives":["الشخص"]}]}},"artifact":"الشخص","ok":true,"final_url":"https://example.test/rtl","metadata":{"route":"dynamic_selected_text","document_language":"fr"},"expected_task_pass":true,"expected_metrics":{"page_identity_status":"mismatch","language_consistent":false,"page_identity_required":false}},
+    {"id":"content-policy-dynamic-undeclared-source-language-rejects-declared-language","category":"acceptance-contract","root_cause":"source_document_language_absent","failure_mode":"false-negative","case":{"url":"https://example.test/untagged","evaluation_url":"https://example.test/untagged","expected_final_url":"https://example.test/untagged","target_language":"en","target_region":"US","expected_document_language_present":false,"track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"content","alternatives":["Visible content"]}]}},"artifact":"Visible content","ok":true,"final_url":"https://example.test/untagged","metadata":{"route":"dynamic_selected_text","document_language":"en"},"expected_task_pass":true,"expected_metrics":{"page_identity_status":"mismatch","language_consistent":false,"page_identity_required":false}},
+    {"id":"content-policy-required-final-url-missing-is-a-measured-failure","category":"task-predicate","root_cause":"body_fetch_does_not_require_final_url","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"risk_control","task_kind":"body","source_benchmark":{"risk_control":{"navigation_contract":{"requested_url":"https://example.test/start","observed_final_url":"https://example.test/final"}}},"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"body","alternatives":["Required body"]}]}},"artifact":"Required body","ok":true,"expected_task_pass":true,"expected_task_measured":true,"expected_metrics":{"page_identity_required":false,"page_identity_status":"unavailable"}},
+    {"id":"content-policy-required-final-url-present-keeps-valid-body","category":"task-predicate","root_cause":"body_fetch_does_not_require_final_url","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"risk_control","task_kind":"body","source_benchmark":{"risk_control":{"navigation_contract":{"requested_url":"https://example.test/start","observed_final_url":"https://example.test/final"}}},"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"body","alternatives":["Required body"]}]}},"artifact":"Required body","ok":true,"expected_task_pass":true,"expected_task_measured":true,"expected_metrics":{"page_identity_required":false,"page_identity_status":"verified"},"final_url":"https://example.test/final"},
+    {"category":"acceptance-contract","root_cause":"body_fetch_does_not_require_final_url","case":{"url":"https://example.test/start","track":"risk_control","task_kind":"body","source_benchmark":{"risk_control":{"navigation_contract":{"requested_url":"https://example.test/start","observed_final_url":"https://example.test/final"}}},"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"body","alternatives":["Target article content"]}]}},"ok":true,"expected_task_measured":true,"expected_metrics":{"page_identity_required":false},"id":"body-without-final-url-passes","artifact":"Target article content","expected_task_pass":true,"failure_mode":"false-negative"},
+    {"category":"acceptance-contract","root_cause":"body_fetch_does_not_require_final_url","case":{"url":"https://example.test/start","track":"risk_control","task_kind":"body","source_benchmark":{"risk_control":{"navigation_contract":{"requested_url":"https://example.test/start","observed_final_url":"https://example.test/final"}}},"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"body","alternatives":["Target article content"]}]}},"ok":true,"expected_task_measured":true,"expected_metrics":{"page_identity_required":false},"id":"verification-page-without-final-url-fails","artifact":"Please sign in to continue","expected_task_pass":false,"failure_mode":"false-positive"},
+    {"id":"wrong-body-content-policy-dynamic-final-page-mismatch-cannot-be-counted-as-a-pass","category":"acceptance-contract","root_cause":"dynamic_page_identity_alignment","failure_mode":"false-positive","case":{"url":"https://example.test/start","evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/en/catalog","target_language":"en-US","target_region":"US","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"identity","alternatives":["Catalog"]}]}},"artifact":"Unrelated page text","ok":true,"final_url":"https://example.test/fr/catalog","metadata":{"route":"dynamic_selected_text","document_language":"fr"},"expected_task_pass":false,"expected_metrics":{"page_identity_status":"mismatch","final_url_consistent":false,"language_consistent":false,"page_identity_required":false}},
+    {"id":"wrong-body-content-policy-dynamic-search-query-mismatch-is-a-different-page","category":"acceptance-contract","root_cause":"dynamic_page_query_identity","failure_mode":"false-positive","case":{"url":"https://example.test/search?q=Mario","evaluation_url":"https://example.test/search?q=Mario","expected_final_url":"https://example.test/search?q=Mario","target_language":"ja-JP","target_region":"JP","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"identity","alternatives":["Search results"]}]}},"artifact":"Unrelated page text","ok":true,"final_url":"https://example.test/search?q=Zelda","metadata":{"route":"dynamic_selected_text","document_language":"ja"},"expected_task_pass":false,"expected_metrics":{"page_identity_status":"mismatch","final_url_consistent":false,"page_identity_required":false}},
+    {"id":"wrong-body-content-policy-dynamic-source-document-language-mismatch-is-not-verified","category":"acceptance-contract","root_cause":"declared_document_language_vs_visible_language","failure_mode":"false-positive","case":{"url":"https://example.test/rtl","evaluation_url":"https://example.test/rtl","expected_final_url":"https://example.test/rtl","target_language":"ar","expected_document_language":"en","target_region":"US","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"arabic-content","alternatives":["الشخص"]}]}},"artifact":"Unrelated page text","ok":true,"final_url":"https://example.test/rtl","metadata":{"route":"dynamic_selected_text","document_language":"fr"},"expected_task_pass":false,"expected_metrics":{"page_identity_status":"mismatch","language_consistent":false,"page_identity_required":false}},
+    {"id":"wrong-body-content-policy-dynamic-undeclared-source-language-rejects-declared-language","category":"acceptance-contract","root_cause":"source_document_language_absent","failure_mode":"false-positive","case":{"url":"https://example.test/untagged","evaluation_url":"https://example.test/untagged","expected_final_url":"https://example.test/untagged","target_language":"en","target_region":"US","expected_document_language_present":false,"track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"content","alternatives":["Visible content"]}]}},"artifact":"Unrelated page text","ok":true,"final_url":"https://example.test/untagged","metadata":{"route":"dynamic_selected_text","document_language":"en"},"expected_task_pass":false,"expected_metrics":{"page_identity_status":"mismatch","language_consistent":false,"page_identity_required":false}},
+    {
+      "id": "scoped-markdown-empty-bookmark-keeps-owned-records",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_bookmark_format_detection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "<a id=\"catalog\"></a>\nRecommended\n[First item](/item/1)\n[Second item](/item/2)\nOther",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_structure_pass": true
+      }
+    },
+    {
+      "id": "scoped-markdown-bookmark-cannot-import-outside-links",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_bookmark_format_detection",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "<a name=\"catalog\"></a>\n[First item](/item/1)\n[Second item](/item/2)\nRecommended\n[One item](/item/3)\nOther",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_structure_pass": false
+      }
+    },
+    {
+      "id": "scoped-html-missing-owner-cannot-fall-back-to-text",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_bookmark_format_detection",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "<html><body><section>Recommended\n[First item](/item/1)\n[Second item](/item/2)\nOther</section></body></html>",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_structure_pass": false
+      }
+    },
+    {
+      "id": "scoped-html-owns-records-despite-bookmark",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_bookmark_format_detection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "<a id=\"catalog\"></a><div class=\"catalog\"><a href=\"/item/1\">First item</a><a href=\"/item/2\">Second item</a></div>",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_structure_pass": true
+      }
+    },
+    {
+      "id": "scoped-markdown-bullet-boundary-keeps-records",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_list_boundary_semantics",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "- Recommended\n[First item](/item/1)\n[Second item](/item/2)\n- Other\n[Outside item](/item/3)",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_structure_pass": true
+      }
+    },
+    {
+      "id": "scoped-markdown-numbered-boundary-keeps-records",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_list_boundary_semantics",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "1. Recommended\n[First item](/item/1)\n[Second item](/item/2)\n- Other\n[Outside item](/item/3)",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_structure_pass": true
+      }
+    },
+    {
+      "id": "scoped-markdown-linked-bullet-boundary-keeps-records",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_list_boundary_semantics",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "- [Recommended](/category)\n[First item](/item/1)\n[Second item](/item/2)\n- Other\n[Outside item](/item/3)",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_structure_pass": true
+      }
+    },
+    {
+      "id": "scoped-markdown-bullet-end-excludes-outside-records",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_list_boundary_semantics",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "- Recommended\n[One item](/item/1)\n- Other\n[Outside item](/item/2)",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_structure_pass": false
+      }
+    },
+    {
+      "id": "scoped-markdown-prose-is-not-a-list-boundary",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_list_boundary_semantics",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "We discuss Recommended here.\n[First item](/item/1)\n[Second item](/item/2)\nOther",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_structure_pass": false
+      }
+    },
+    {
+      "id": "scoped-markdown-bullet-prefix-does-not-match-prose",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_list_boundary_semantics",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$"
+          }
+        }
+      },
+      "artifact": "- Recommended reading elsewhere\n[First item](/item/1)\n[Second item](/item/2)\nOther",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_structure_pass": false
+      }
+    },
+    {
+      "id": "scoped-markdown-bookmark-keeps-owned-product-prices",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_bookmark_format_detection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "linked_product",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$",
+            "price_selector": ".price"
+          },
+          "price_patterns": [
+            "\\$\\d+\\.\\d{2}"
+          ],
+          "price_exclusion_patterns": []
+        }
+      },
+      "artifact": "<a id=\"products\"></a>\n- Recommended\n[First item](/item/1)\n$10.00\n[Second item](/item/2)\n$20.00\n- Other",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_structure_pass": true
+      }
+    },
+    {
+      "id": "scoped-markdown-product-scope-excludes-outside-prices",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_bookmark_format_detection",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "linked_product",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$",
+            "price_selector": ".price"
+          },
+          "price_patterns": [
+            "\\$\\d+\\.\\d{2}"
+          ],
+          "price_exclusion_patterns": []
+        }
+      },
+      "artifact": "<a id=\"products\"></a>\nRecommended\n[First item](/item/1)\n$10.00\nOther\n[Second item](/item/2)\n$20.00",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_structure_pass": false
+      }
+    },
+    {
+      "id": "scoped-markdown-product-missing-section-cannot-pass",
+      "category": "format-normalization",
+      "root_cause": "scoped_markdown_bookmark_format_detection",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "linked_product",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item/\\d+",
+          "entry_scope": {
+            "html_selector": ".catalog a",
+            "start_pattern": "(?m)^Recommended[ \\t]*$",
+            "end_pattern": "(?m)^Other[ \\t]*$",
+            "price_selector": ".price"
+          },
+          "price_patterns": [
+            "\\$\\d+\\.\\d{2}"
+          ],
+          "price_exclusion_patterns": []
+        }
+      },
+      "artifact": "[First item](/item/1)\n$10.00\n[Second item](/item/2)\n$20.00",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_structure_pass": false
+      }
+    },
+    {
+      "id": "mixed-html-visible-body-is-equivalent",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/article",
+        "ground_truth_main_content": "alpha bravo charlie delta echo foxtrot golf hotel",
+        "body_requirements": {
+          "version": 3,
+          "unit": "region_compact_hexagram_recall",
+          "minimum_coverage": 1.0,
+          "minimum_floor": 1.0,
+          "minimum_region_passes": 1,
+          "regions": [
+            {
+              "id": "body",
+              "text": "alpha bravo charlie delta echo foxtrot golf hotel"
+            }
+          ]
+        }
+      },
+      "artifact": "Introduction\n<div><span id=\"first\">alpha bravo</span><span class=\"second\"> charlie delta</span><span data-position=\"last\"> echo foxtrot golf hotel</span></div>",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "body_coverage_pass": true
+      }
+    },
+    {
+      "id": "mixed-html-attributes-cannot-supply-body",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/article",
+        "ground_truth_main_content": "alpha bravo charlie delta echo foxtrot golf hotel",
+        "body_requirements": {
+          "version": 3,
+          "unit": "region_compact_hexagram_recall",
+          "minimum_coverage": 1.0,
+          "minimum_floor": 1.0,
+          "minimum_region_passes": 1,
+          "regions": [
+            {
+              "id": "body",
+              "text": "alpha bravo charlie delta echo foxtrot golf hotel"
+            }
+          ]
+        }
+      },
+      "artifact": "Introduction\n<div data-description=\"alpha bravo charlie delta echo foxtrot golf hotel\">Unrelated page content</div>",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "body_coverage_pass": false
+      }
+    },
+    {
+      "id": "mixed-html-hidden-cannot-supply-body",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/article",
+        "ground_truth_main_content": "alpha bravo charlie delta echo foxtrot golf hotel",
+        "body_requirements": {
+          "version": 3,
+          "unit": "region_compact_hexagram_recall",
+          "minimum_coverage": 1.0,
+          "minimum_floor": 1.0,
+          "minimum_region_passes": 1,
+          "regions": [
+            {
+              "id": "body",
+              "text": "alpha bravo charlie delta echo foxtrot golf hotel"
+            }
+          ]
+        }
+      },
+      "artifact": "Intro\n<div hidden>alpha bravo charlie delta echo foxtrot golf hotel</div>",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "body_coverage_pass": false
+      }
+    },
+    {
+      "id": "mixed-html-script-cannot-supply-body",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/article",
+        "ground_truth_main_content": "alpha bravo charlie delta echo foxtrot golf hotel",
+        "body_requirements": {
+          "version": 3,
+          "unit": "region_compact_hexagram_recall",
+          "minimum_coverage": 1.0,
+          "minimum_floor": 1.0,
+          "minimum_region_passes": 1,
+          "regions": [
+            {
+              "id": "body",
+              "text": "alpha bravo charlie delta echo foxtrot golf hotel"
+            }
+          ]
+        }
+      },
+      "artifact": "Intro\n<script>const label=\"alpha bravo charlie delta echo foxtrot golf hotel\";</script>",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "body_coverage_pass": false
+      }
+    },
+    {
+      "id": "mixed-html-inline-code-remains-answer-text",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/code",
+        "required_facts": [
+          {
+            "id": "visible-code-attribute",
+            "alternatives": [
+              "data-value=\"literal\""
+            ]
+          }
+        ]
+      },
+      "artifact": "Introduction\n<p>Visible explanation</p>\n`<span data-value=\"literal\">example</span>`",
+      "ok": true,
+      "expected_task_pass": true
+    },
+    {
+      "id": "mixed-html-fenced-code-remains-answer-text",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/code",
+        "required_facts": [
+          {
+            "id": "visible-code-attribute",
+            "alternatives": [
+              "data-value=\"literal\""
+            ]
+          }
+        ]
+      },
+      "artifact": "Introduction\n<p>Visible explanation</p>\n```html\n<span data-value=\"literal\">example</span>\n```",
+      "ok": true,
+      "expected_task_pass": true
+    },
+    {
+      "id": "mixed-html-autolinks-remain-visible",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/links",
+        "required_facts": [
+          {
+            "id": "relative-path",
+            "alternatives": [
+              "/docs/start"
+            ]
+          },
+          {
+            "id": "absolute-url",
+            "alternatives": [
+              "https://example.test/guide"
+            ]
+          },
+          {
+            "id": "email-address",
+            "alternatives": [
+              "help@example.test"
+            ]
+          }
+        ]
+      },
+      "artifact": "Introduction\n<p>Read the guide</p>\n</docs/start> <https://example.test/guide> <help@example.test>",
+      "ok": true,
+      "expected_task_pass": true
+    },
+    {
+      "id": "output-table-structure-is-preserved",
+      "category": "format-normalization",
+      "root_cause": "pattern_output_and_prose_scope",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/pattern",
+        "required_patterns": [
+          {
+            "id": "table",
+            "pattern": "<table\\b",
+            "match_scope": "output"
+          }
+        ]
+      },
+      "artifact": "Intro\n<table><tr><td>A</td><td>B</td></tr></table>",
+      "ok": true,
+      "expected_task_pass": true
+    },
+    {
+      "id": "flattened-text-is-not-output-table",
+      "category": "format-normalization",
+      "root_cause": "pattern_output_and_prose_scope",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/pattern",
+        "required_patterns": [
+          {
+            "id": "table",
+            "pattern": "<table\\b",
+            "match_scope": "output"
+          }
+        ]
+      },
+      "artifact": "Intro\nA B\n1 2",
+      "ok": true,
+      "expected_task_pass": false
+    },
+    {
+      "id": "visible-text-pattern-is-recognized",
+      "category": "format-normalization",
+      "root_cause": "pattern_output_and_prose_scope",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/pattern",
+        "required_patterns": [
+          {
+            "id": "order",
+            "pattern": "Order ID [0-9]+"
+          }
+        ]
+      },
+      "artifact": "Intro\n<p>Order ID 123</p>",
+      "ok": true,
+      "expected_task_pass": true
+    },
+    {
+      "id": "attribute-text-cannot-satisfy-prose-pattern",
+      "category": "format-normalization",
+      "root_cause": "pattern_output_and_prose_scope",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/pattern",
+        "required_patterns": [
+          {
+            "id": "order",
+            "pattern": "Order ID [0-9]+"
+          }
+        ]
+      },
+      "artifact": "Intro\n<p data-label=\"Order ID 123\">Unrelated prose</p>",
+      "ok": true,
+      "expected_task_pass": false
+    },
+    {
+      "id": "mixed-html-escaped-tags-remain-literal",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/code",
+        "required_facts": [
+          {
+            "id": "literal-attribute",
+            "alternatives": [
+              "data-value=\"literal\""
+            ]
+          }
+        ]
+      },
+      "artifact": "Introduction\n<p>Visible explanation</p>\n\\<span data-value=\"literal\"\\>Example\\</span\\>",
+      "ok": true,
+      "expected_task_pass": true
+    },
+    {
+      "id": "mixed-html-closing-escaped-tag-remains-literal",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/code",
+        "required_facts": [
+          {
+            "id": "literal-attribute",
+            "alternatives": [
+              "data-value=\"literal\""
+            ]
+          }
+        ]
+      },
+      "artifact": "Introduction\n<p>Visible explanation</p>\n<span data-value=\"literal\"\\>Example</span\\>",
+      "ok": true,
+      "expected_task_pass": true
+    },
+    {
+      "id": "mixed-html-escaped-backslash-does-not-expose-attributes",
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/code",
+        "required_facts": [
+          {
+            "id": "literal-attribute",
+            "alternatives": [
+              "data-value=\"literal\""
+            ]
+          }
+        ]
+      },
+      "artifact": "Introduction\n<p>Visible explanation</p>\n\\\\<span data-value=\"literal\">Example</span>",
+      "ok": true,
+      "expected_task_pass": false
+    },
+    {
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "case": {
+        "url": "https://example.test/code-table",
+        "required_facts": [
+          {
+            "id": "literal-code",
+            "alternatives": [
+              "data-value=\"literal\""
+            ]
+          }
+        ]
+      },
+      "ok": true,
+      "id": "mixed-html-table-cell-code-preserves-literal-tags",
+      "failure_mode": "false-negative",
+      "artifact": "Introduction\n<p>Visible explanation</p>\n| Example |\n|---|\n|  ```html\n<span data-value=\"literal\">Example</span>\n```\n |",
+      "expected_task_pass": true
+    },
+    {
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "case": {
+        "url": "https://example.test/code-table",
+        "required_facts": [
+          {
+            "id": "literal-code",
+            "alternatives": [
+              "data-value=\"literal\""
+            ]
+          }
+        ]
+      },
+      "ok": true,
+      "id": "mixed-html-table-cell-code-does-not-expose-following-attributes",
+      "failure_mode": "false-positive",
+      "artifact": "Introduction\n| Example |\n|---|\n|  ```html\n<span>Example</span>\n```\n |\n<span data-value=\"literal\">Visible explanation</span>",
+      "expected_task_pass": false
+    },
+    {
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "case": {
+        "url": "https://example.test/events",
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "events",
+              "kind": "named_link",
+              "minimum_records": 2,
+              "hosts": [
+                "example.test"
+              ],
+              "entry_path": "/events/[0-9]+",
+              "required_fields": [
+                {
+                  "id": "date",
+                  "kind": "date_or_time"
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "ok": true,
+      "id": "mixed-html-markdown-record-lines-preserved",
+      "failure_mode": "false-negative",
+      "artifact": "<a id=\"events\"></a>\n\n[First concert](https://example.test/events/1)\n\nOctober 12, 2026\n\n[Second concert](https://example.test/events/2)\n\nOctober 13, 2026",
+      "expected_task_pass": true
+    },
+    {
+      "category": "body-scope",
+      "root_cause": "mixed_html_prose_projection",
+      "case": {
+        "url": "https://example.test/events",
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "events",
+              "kind": "named_link",
+              "minimum_records": 2,
+              "hosts": [
+                "example.test"
+              ],
+              "entry_path": "/events/[0-9]+",
+              "required_fields": [
+                {
+                  "id": "date",
+                  "kind": "date_or_time"
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "ok": true,
+      "id": "mixed-html-markdown-record-attributes-are-not-fields",
+      "failure_mode": "false-positive",
+      "artifact": "<a id=\"events\"></a>\n\n[First concert](https://example.test/events/1)\n\nOctober 12, 2026\n\n[Second concert](https://example.test/events/2)\n\n<span data-date=\"October 13, 2026\">Date unavailable</span>",
+      "expected_task_pass": false
+    },
+    {
+      "id": "declared-table-name-detail-columns-preserve-records",
+      "category": "structured-extraction",
+      "root_cause": "declared_markdown_table_record_ownership",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item",
+          "identity_query_keys": [
+            "id"
+          ],
+          "stable_text_anchors": [],
+          "entry_scope": {
+            "html_selector": "tr[data-item]",
+            "markdown_title_column": "Name",
+            "markdown_link_column": "Details"
+          },
+          "name_validation": "nonempty",
+          "title_exclusion_patterns": [
+            "Details"
+          ]
+        }
+      },
+      "artifact": "| Rank | Name | Details |\n| --- | --- | --- |\n| 1 | Alpha\\|Beta<br>[Maker](/brand/1) | [Details](/item?id=1) |\n| 2 | Second item | [Details](/item?id=2) |",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_complete_record_count": 2
+      }
+    },
+    {
+      "id": "declared-table-name-detail-columns-cannot-borrow-next-row",
+      "category": "structured-extraction",
+      "root_cause": "declared_markdown_table_record_ownership",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item",
+          "identity_query_keys": [
+            "id"
+          ],
+          "stable_text_anchors": [],
+          "entry_scope": {
+            "html_selector": "tr[data-item]",
+            "markdown_title_column": "Name",
+            "markdown_link_column": "Details"
+          },
+          "name_validation": "nonempty",
+          "title_exclusion_patterns": [
+            "Details"
+          ]
+        }
+      },
+      "artifact": "| Rank | Name | Details |\n| --- | --- | --- |\n| 1 | First item | |\n| 2 | | [Details](/item?id=2) |",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_complete_record_count": 0
+      }
+    },
+    {
+      "id": "declared-table-name-detail-columns-reject-ambiguous-links",
+      "category": "structured-extraction",
+      "root_cause": "declared_markdown_table_record_ownership",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item",
+          "identity_query_keys": [
+            "id"
+          ],
+          "stable_text_anchors": [],
+          "entry_scope": {
+            "html_selector": "tr[data-item]",
+            "markdown_title_column": "Name",
+            "markdown_link_column": "Details"
+          },
+          "name_validation": "nonempty",
+          "title_exclusion_patterns": [
+            "Details"
+          ]
+        }
+      },
+      "artifact": "| Rank | Name | Details |\n| --- | --- | --- |\n| 1 | First item | [Details](/item?id=1) [Details](/item?id=9) |\n| 2 | Second item | [Details](/item?id=2) |",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_complete_record_count": 1
+      }
+    },
+    {
+      "id": "declared-table-name-detail-columns-reject-wrong-header",
+      "category": "structured-extraction",
+      "root_cause": "declared_markdown_table_record_ownership",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item",
+          "identity_query_keys": [
+            "id"
+          ],
+          "stable_text_anchors": [],
+          "entry_scope": {
+            "html_selector": "tr[data-item]",
+            "markdown_title_column": "Name",
+            "markdown_link_column": "Details"
+          },
+          "name_validation": "nonempty",
+          "title_exclusion_patterns": [
+            "Details"
+          ]
+        }
+      },
+      "artifact": "| Rank | Artist | Details |\n| --- | --- | --- |\n| 1 | First item | [Details](/item?id=1) |\n| 2 | Second item | [Details](/item?id=2) |",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_complete_record_count": 0
+      }
+    },
+    {
+      "id": "declared-table-name-detail-columns-reject-code-example",
+      "category": "structured-extraction",
+      "root_cause": "declared_markdown_table_record_ownership",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item",
+          "identity_query_keys": [
+            "id"
+          ],
+          "stable_text_anchors": [],
+          "entry_scope": {
+            "html_selector": "tr[data-item]",
+            "markdown_title_column": "Name",
+            "markdown_link_column": "Details"
+          },
+          "name_validation": "nonempty",
+          "title_exclusion_patterns": [
+            "Details"
+          ]
+        }
+      },
+      "artifact": "```markdown\n| Rank | Name | Details |\n| --- | --- | --- |\n| 1 | First item | [Details](/item?id=1) |\n| 2 | Second item | [Details](/item?id=2) |\n```",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_complete_record_count": 0
+      }
+    },
+    {
+      "id": "declared-table-name-detail-columns-reject-duplicate-header",
+      "category": "structured-extraction",
+      "root_cause": "declared_markdown_table_record_ownership",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item",
+          "identity_query_keys": [
+            "id"
+          ],
+          "stable_text_anchors": [],
+          "entry_scope": {
+            "html_selector": "tr[data-item]",
+            "markdown_title_column": "Name",
+            "markdown_link_column": "Details"
+          },
+          "name_validation": "nonempty",
+          "title_exclusion_patterns": [
+            "Details"
+          ]
+        }
+      },
+      "artifact": "| Name | Name | Details |\n| --- | --- | --- |\n| First | First | [Details](/item?id=1) |\n| Second | Second | [Details](/item?id=2) |",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_complete_record_count": 0
+      }
+    },
+    {
+      "id": "declared-table-name-detail-columns-reject-short-row",
+      "category": "structured-extraction",
+      "root_cause": "declared_markdown_table_record_ownership",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item",
+          "identity_query_keys": [
+            "id"
+          ],
+          "stable_text_anchors": [],
+          "entry_scope": {
+            "html_selector": "tr[data-item]",
+            "markdown_title_column": "Name",
+            "markdown_link_column": "Details"
+          },
+          "name_validation": "nonempty",
+          "title_exclusion_patterns": [
+            "Details"
+          ]
+        }
+      },
+      "artifact": "| Rank | Name | Details |\n| --- | --- | --- |\n| 1 | [Details](/item?id=1) |\n| 2 | [Details](/item?id=2) |",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_complete_record_count": 0
+      }
+    },
+    {
+      "id": "declared-table-name-detail-columns-reject-conflicting-id",
+      "category": "structured-extraction",
+      "root_cause": "declared_markdown_table_record_ownership",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 2,
+          "hosts": [
+            "example.test"
+          ],
+          "entry_path": "/item",
+          "identity_query_keys": [
+            "id"
+          ],
+          "stable_text_anchors": [],
+          "entry_scope": {
+            "html_selector": "tr[data-item]",
+            "markdown_title_column": "Name",
+            "markdown_link_column": "Details",
+            "markdown_title_identity_pattern": "javascript:play\\(([0-9]+)\\)",
+            "markdown_detail_identity_pattern": "[?&]id=([0-9]+)(?:&|$)"
+          },
+          "name_validation": "nonempty",
+          "title_exclusion_patterns": [
+            "Details"
+          ]
+        }
+      },
+      "artifact": "| Name | Details |\n| --- | --- |\n| [First](javascript:play(1)) | [Details](/item?id=9) |\n| [Second](javascript:play(2)) | [Details](/item?id=2) |",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_complete_record_count": 1
+      }
+    },
+    {
+      "id": "declared-auxiliary-labels-yahoo-primary-and-auxiliary-same-url",
+      "category": "structured-extraction",
+      "root_cause": "declared_auxiliary_labels_are_not_entity_names",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://news.yahoo.co.jp/",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 1,
+          "hosts": [
+            "news.yahoo.co.jp"
+          ],
+          "entry_path": "/pickup/[0-9]+",
+          "stable_text_anchors": [],
+          "title_exclusion_patterns": [
+            "^(?:NEW|コメント数)$"
+          ]
+        }
+      },
+      "artifact": "- [実際のニュース見出し](https://news.yahoo.co.jp/pickup/1)\n  [NEW](https://news.yahoo.co.jp/pickup/1)\n  [コメント数](https://news.yahoo.co.jp/pickup/1)\n  [304](https://news.yahoo.co.jp/pickup/1)",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_complete_record_count": 1,
+        "stable_records": [
+          {
+            "fields": {
+              "title": "実際のニュース見出し",
+              "url": "https://news.yahoo.co.jp/pickup/1"
+            },
+            "valid": true,
+            "errors": []
+          }
+        ]
+      }
+    },
+    {
+      "id": "declared-auxiliary-labels-yahoo-only-auxiliary-links",
+      "category": "structured-extraction",
+      "root_cause": "declared_auxiliary_labels_are_not_entity_names",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://news.yahoo.co.jp/",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 1,
+          "hosts": [
+            "news.yahoo.co.jp"
+          ],
+          "entry_path": "/pickup/[0-9]+",
+          "stable_text_anchors": [],
+          "title_exclusion_patterns": [
+            "^(?:NEW|コメント数)$"
+          ]
+        }
+      },
+      "artifact": "  [NEW](https://news.yahoo.co.jp/pickup/1)\n  [コメント数](https://news.yahoo.co.jp/pickup/1)\n  [304](https://news.yahoo.co.jp/pickup/1)",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_complete_record_count": 0,
+        "stable_records": []
+      }
+    },
+    {
+      "id": "declared-auxiliary-labels-yahoo-auxiliary-before-primary",
+      "category": "structured-extraction",
+      "root_cause": "declared_auxiliary_labels_are_not_entity_names",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://news.yahoo.co.jp/",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 1,
+          "hosts": [
+            "news.yahoo.co.jp"
+          ],
+          "entry_path": "/pickup/[0-9]+",
+          "stable_text_anchors": [],
+          "title_exclusion_patterns": [
+            "^(?:NEW|コメント数)$"
+          ]
+        }
+      },
+      "artifact": "[NEW](https://news.yahoo.co.jp/pickup/1)\n[コメント数](https://news.yahoo.co.jp/pickup/1)\n[実際のニュース見出し](https://news.yahoo.co.jp/pickup/1)",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_complete_record_count": 1,
+        "stable_records": [
+          {
+            "fields": {
+              "title": "実際のニュース見出し",
+              "url": "https://news.yahoo.co.jp/pickup/1"
+            },
+            "valid": true,
+            "errors": []
+          }
+        ]
+      }
+    },
+    {
+      "id": "declared-auxiliary-labels-unrelated-real-entity-named-new",
+      "category": "structured-extraction",
+      "root_cause": "declared_auxiliary_labels_are_not_entity_names",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.org/",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 1,
+          "hosts": [
+            "example.org"
+          ],
+          "entry_path": "/entity/[0-9]+",
+          "stable_text_anchors": []
+        }
+      },
+      "artifact": "[NEW](https://example.org/entity/1)",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_complete_record_count": 1,
+        "stable_records": [
+          {
+            "fields": {
+              "title": "NEW",
+              "url": "https://example.org/entity/1"
+            },
+            "valid": true,
+            "errors": []
+          }
+        ]
+      }
+    },
+    {
+      "id": "declared-auxiliary-labels-unrelated-real-entity-named-comment-count",
+      "category": "structured-extraction",
+      "root_cause": "declared_auxiliary_labels_are_not_entity_names",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.org/",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 1,
+          "hosts": [
+            "example.org"
+          ],
+          "entry_path": "/entity/[0-9]+",
+          "stable_text_anchors": []
+        }
+      },
+      "artifact": "[コメント数](https://example.org/entity/1)",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_complete_record_count": 1,
+        "stable_records": [
+          {
+            "fields": {
+              "title": "コメント数",
+              "url": "https://example.org/entity/1"
+            },
+            "valid": true,
+            "errors": []
+          }
+        ]
+      }
+    },
+    {
+      "id": "rendered-result-section-accepts-visible-table",
+      "category": "body-scope",
+      "root_cause": "rendered_result_section_ownership",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/demo",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "page-section",
+              "alternatives": ["Result"]
+            }
+          ]
+        },
+        "required_patterns": [
+          {
+            "id": "rendered-result",
+            "pattern": "(?is)\\bResult\\b\\s+(?!Loading\\b).*?\\bName\\b.*?\\bEmail\\b.*?\\bJohn\\b.*?john@example\\.com"
+          }
+        ]
+      },
+      "artifact": "Live Editor\n```js\nconst rows = [[\"John\", \"john@example.com\"]];\n```\nResult\nName Email\nJohn john@example.com",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "content_pass": true
+      }
+    },
+    {
+      "id": "rendered-result-section-rejects-source-only-values",
+      "category": "body-scope",
+      "root_cause": "rendered_result_section_ownership",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/demo",
+        "task_kind": "body",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "page-section",
+              "alternatives": ["Result"]
+            }
+          ]
+        },
+        "required_patterns": [
+          {
+            "id": "rendered-result",
+            "pattern": "(?is)\\bResult\\b\\s+(?!Loading\\b).*?\\bName\\b.*?\\bEmail\\b.*?\\bJohn\\b.*?john@example\\.com"
+          }
+        ]
+      },
+      "artifact": "Live Editor\nconst rows = [[\"John\", \"john@example.com\"]];\n```js\nconst rows = [[\"John\", \"john@example.com\"]];\n```\nResult\nLoading...",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "content_pass": false
+      }
+    },
+  {
+    "id": "localized-equivalent-stable-anchor-passes",
+    "category": "acceptance-contract",
+    "root_cause": "equivalent_visible_label_alternatives",
+    "failure_mode": "false-negative",
+    "case": {
+      "url": "https://example.test/home",
+      "task_kind": "body",
+      "acceptance_contract": {
+        "version": 1,
+        "schema": "body_text",
+        "minimum_records": 0,
+        "stable_text_anchors": [
+          {
+            "id": "download",
+            "alternatives": [
+              "Download",
+              "下载"
+            ]
+          }
+        ]
+      }
+    },
+    "artifact": "下载",
+    "ok": true,
+    "expected_task_pass": true,
+    "expected_metrics": {
+      "stable_anchor_hits": 1,
+      "stable_task_pass": true
+    }
+  },
+  {
+    "id": "unrelated-label-does-not-satisfy-equivalent-stable-anchor",
+    "category": "acceptance-contract",
+    "root_cause": "equivalent_visible_label_alternatives",
+    "failure_mode": "false-positive",
+    "case": {
+      "url": "https://example.test/home",
+      "task_kind": "body",
+      "acceptance_contract": {
+        "version": 1,
+        "schema": "body_text",
+        "minimum_records": 0,
+        "stable_text_anchors": [
+          {
+            "id": "download",
+            "alternatives": [
+              "Download",
+              "下载"
+            ]
+          }
+        ]
+      }
+    },
+    "artifact": "Get the application",
+    "ok": true,
+    "expected_task_pass": false,
+    "expected_metrics": {
+      "stable_anchor_hits": 0,
+      "stable_task_pass": false
+    }
+  },
+  {
+    "id": "independent-stable-anchors-pass-in-any-document-order",
+    "category": "acceptance-contract",
+    "root_cause": "independent_stable_anchor_order",
+    "failure_mode": "false-negative",
+    "case": {
+      "url": "https://example.test/topics",
+      "task_kind": "body",
+      "acceptance_contract": {
+        "version": 1,
+        "schema": "body_text",
+        "minimum_records": 0,
+        "stable_text_anchors": [
+          {
+            "id": "education",
+            "alternatives": [
+              "Education"
+            ]
+          },
+          {
+            "id": "research",
+            "alternatives": [
+              "Research"
+            ]
+          },
+          {
+            "id": "weather",
+            "alternatives": [
+              "Weather"
+            ]
+          }
+        ]
+      }
+    },
+    "artifact": "Weather\nEducation\nResearch",
+    "ok": true,
+    "expected_task_pass": true,
+    "expected_metrics": {
+      "stable_anchor_hits": 3,
+      "stable_task_pass": true
+    }
+  },
+  {
+    "id": "independent-stable-anchors-still-require-every-group",
+    "category": "acceptance-contract",
+    "root_cause": "independent_stable_anchor_order",
+    "failure_mode": "false-positive",
+    "case": {
+      "url": "https://example.test/topics",
+      "task_kind": "body",
+      "acceptance_contract": {
+        "version": 1,
+        "schema": "body_text",
+        "minimum_records": 0,
+        "stable_text_anchors": [
+          {
+            "id": "education",
+            "alternatives": [
+              "Education"
+            ]
+          },
+          {
+            "id": "research",
+            "alternatives": [
+              "Research"
+            ]
+          },
+          {
+            "id": "weather",
+            "alternatives": [
+              "Weather"
+            ]
+          }
+        ]
+      }
+    },
+    "artifact": "Education\nResearch",
+    "ok": true,
+    "expected_task_pass": false,
+    "expected_metrics": {
+      "stable_anchor_hits": 2,
+      "stable_task_pass": false
+    }
+  },
+  {
+    "id": "complete-body-passes-without-responsive-navigation-labels",
+    "category": "acceptance-contract",
+    "root_cause": "task_relevant_visible_text_scope",
+    "failure_mode": "false-negative",
+    "case": {
+      "url": "https://example.test/article",
+      "task_kind": "body",
+      "ground_truth_main_content": "Article title alpha bravo charlie delta echo foxtrot golf hotel",
+      "body_requirements": {
+        "version": 3,
+        "unit": "region_compact_hexagram_recall",
+        "minimum_coverage": 0.8,
+        "minimum_floor": 0.6,
+        "minimum_region_passes": 2,
+        "regions": [
+          {
+            "id": "opening",
+            "text": "alpha bravo charlie delta"
+          },
+          {
+            "id": "ending",
+            "text": "echo foxtrot golf hotel"
+          }
+        ]
+      },
+      "acceptance_contract": {
+        "version": 1,
+        "schema": "body_text",
+        "minimum_records": 0,
+        "stable_text_anchors": [
+          {
+            "id": "article-title",
+            "alternatives": [
+              "Article title"
+            ]
+          }
+        ]
+      }
+    },
+    "artifact": "Article title\nalpha bravo charlie delta\necho foxtrot golf hotel",
+    "ok": true,
+    "expected_task_pass": true,
+    "expected_metrics": {
+      "stable_task_pass": true,
+      "body_coverage_pass": true,
+      "content_pass": true
+    }
+  },
+  {
+    "id": "page-title-without-required-body-still-fails",
+    "category": "acceptance-contract",
+    "root_cause": "task_relevant_visible_text_scope",
+    "failure_mode": "false-positive",
+    "case": {
+      "url": "https://example.test/article",
+      "task_kind": "body",
+      "ground_truth_main_content": "Article title alpha bravo charlie delta echo foxtrot golf hotel",
+      "body_requirements": {
+        "version": 3,
+        "unit": "region_compact_hexagram_recall",
+        "minimum_coverage": 0.8,
+        "minimum_floor": 0.6,
+        "minimum_region_passes": 2,
+        "regions": [
+          {
+            "id": "opening",
+            "text": "alpha bravo charlie delta"
+          },
+          {
+            "id": "ending",
+            "text": "echo foxtrot golf hotel"
+          }
+        ]
+      },
+      "acceptance_contract": {
+        "version": 1,
+        "schema": "body_text",
+        "minimum_records": 0,
+        "stable_text_anchors": [
+          {
+            "id": "article-title",
+            "alternatives": [
+              "Article title"
+            ]
+          }
+        ]
+      }
+    },
+    "artifact": "Article title",
+    "ok": true,
+    "expected_task_pass": false,
+    "expected_metrics": {
+      "stable_task_pass": true,
+      "body_coverage_pass": false,
+      "content_pass": false
+    }
+  },
+    {"id":"forbidden-term-longer-label-is-not-error","category":"format-normalization","root_cause":"forbidden_phrase_substring_collision","failure_mode":"false-negative","case":{"url":"https://example.test/news","task_kind":"body","required_facts":[{"alternatives":["Latest news"]}],"forbidden_any":["Not Found"],"acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/story/[^/]+"}},"artifact":"Latest news\n[Story](https://example.test/story/one)\n[Page Not FoundExtra](https://example.test/column)","ok":true,"expected_task_pass":true,"expected_metrics":{"forbidden_hits":[]}},
+    {"id":"forbidden-term-complete-phrase-still-fails","category":"format-normalization","root_cause":"forbidden_phrase_substring_collision","failure_mode":"false-positive","case":{"url":"https://example.test/news","task_kind":"body","required_facts":[{"alternatives":["Latest news"]}],"forbidden_any":["Not Found"],"acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/story/[^/]+"}},"artifact":"Latest news\n[Story](https://example.test/story/one)\nPage Not Found.","ok":true,"expected_task_pass":false,"expected_metrics":{"forbidden_hits":["Not Found"]}},
+    {"id":"forbidden-term-prefixed-word-is-not-error","category":"format-normalization","root_cause":"forbidden_phrase_substring_collision","failure_mode":"false-negative","case":{"url":"https://example.test/news","task_kind":"body","required_facts":[{"alternatives":["Latest news"]}],"forbidden_any":["Not Found"],"acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/story/[^/]+"}},"artifact":"Latest news\n[Story](https://example.test/story/one)\nLatestNot Found","ok":true,"expected_task_pass":true,"expected_metrics":{"forbidden_hits":[]}},
+    {"id":"named-caption-owned-by-link","category":"structured-extraction","root_cause":"scoped_markdown_caption_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/shows","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/series/[^/]+","name_validation":"nonempty","entry_scope":{"html_selector":"main a:has(p)","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$"}}},"artifact":"[Artwork<br>Series One<br>](https://example.test/series/one)","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_record_count":1}},
+    {"id":"named-caption-nearby-is-not-owned","category":"structured-extraction","root_cause":"scoped_markdown_caption_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/shows","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/series/[^/]+","name_validation":"nonempty","entry_scope":{"html_selector":"main a:has(p)","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$"}}},"artifact":"### Series One\n\n[Mehr Infos](https://example.test/series/other)\n\nSeries One<br>\n","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_record_count":0}},
+    {"id":"named-caption-unqualified-title-link","category":"structured-extraction","root_cause":"scoped_markdown_caption_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/shows","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/series/[^/]+","name_validation":"nonempty","entry_scope":{"html_selector":"main a:has(p)","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$"}}},"artifact":"### [Series One](https://example.test/series/one)","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_record_count":0}},
+    {"id":"forbidden-cjk-remains-unsegmented","category":"format-normalization","root_cause":"forbidden_phrase_substring_collision","failure_mode":"false-positive","case":{"url":"https://example.test/news","task_kind":"body","forbidden_any":["访问受限"]},"artifact":"当前页面访问受限，请稍后重试","ok":true,"expected_task_pass":false,"expected_metrics":{"forbidden_hits":["访问受限"]}},
+    {"id":"forbidden-url-path-is-not-visible","category":"format-normalization","root_cause":"forbidden_phrase_substring_collision","failure_mode":"false-negative","case":{"url":"https://example.test/news","task_kind":"body","forbidden_any":["Not Found"]},"artifact":"[Latest news](https://example.test/not-found)","ok":true,"expected_task_pass":true,"expected_metrics":{"forbidden_hits":[]}},
+    {"id":"forbidden-phrase-case-and-markup","category":"format-normalization","root_cause":"forbidden_phrase_substring_collision","failure_mode":"false-positive","case":{"url":"https://example.test/news","task_kind":"body","forbidden_any":["Not Found"]},"artifact":"**NOT** FOUND: requested page is unavailable.","ok":true,"expected_task_pass":false,"expected_metrics":{"forbidden_hits":["Not Found"]}},
+    {"id":"table-header-controls-valid","category":"structured-extraction","root_cause":"table_header_visual_line","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"integer"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"^Name\\s*$","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t]+)\\t(?P<amount>\\d+)"}}},"artifact":"| Name<br><br>Resize Name | Amount<br><br>Sort |\n| --- | --- |\n| Alpha | 7 |\n| Beta | 8 |","ok":true,"expected_task_pass":true},
+    {"id":"table-header-controls-invalid","category":"structured-extraction","root_cause":"table_header_visual_line","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"integer"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"^Name\\s*$","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t]+)\\t(?P<amount>\\d+)"}}},"artifact":"| Wrong<br><br>Resize Name | Amount<br><br>Sort |\n| --- | --- |\n| Alpha | 7 |\n| Beta | 8 |","ok":true,"expected_task_pass":false},
+    {"id":"table-split-body-valid","category":"structured-extraction","root_cause":"table_adjacent_split_body","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"integer"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"^Name\\s*$","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t]+)\\t(?P<amount>\\d+)"}}},"artifact":"| Name<br><br>Resize Name | Amount<br><br>Sort |\n| --- | --- |\n\n| | |\n| --- | --- |\n| Alpha | 7 |\n| Beta | 8 |","ok":true,"expected_task_pass":true},
+    {"id":"table-split-body-invalid","category":"structured-extraction","root_cause":"table_adjacent_split_body","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"integer"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"^Name\\s*$","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t]+)\\t(?P<amount>\\d+)"}}},"artifact":"| Name<br><br>Resize Name | Amount<br><br>Sort |\n| --- | --- |\n\nOther section\n| | |\n| --- | --- |\n| Alpha | 7 |\n| Beta | 8 |","ok":true,"expected_task_pass":false},
+    {"id":"mixed-html-linked-table-valid","category":"structured-extraction","root_cause":"composite_html_table_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"hosts":["example.test"],"entry_path":"/repo/[^/]+","required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","link_column":"name"}]}},"artifact":"Intro\n<div><table><tbody><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/alpha\">Alpha</a></td><td>Alice</td></tr><tr><td><a href=\"/repo/beta\">Beta</a></td><td>Bob</td></tr></tbody></table></div>","ok":true,"expected_task_pass":true},
+    {"id":"mixed-html-linked-table-missing-owned-field","category":"structured-extraction","root_cause":"composite_html_table_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"hosts":["example.test"],"entry_path":"/repo/[^/]+","required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","link_column":"name"}]}},"artifact":"Intro\n<div><table><tbody><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/alpha\">Alpha</a></td><td>Alice</td></tr><tr><td><a href=\"/repo/beta\">Beta</a></td><td></td></tr></tbody></table></div>","ok":true,"expected_task_pass":false},
+    {"id":"combined-split-table-valid","category":"structured-extraction","root_cause":"table_adjacent_split_body","failure_mode":"false-negative","case":{"url":"https://example.test/training","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"problems","kind":"table","minimum_records":3,"start_pattern":"(?m)^Section\\s+1\\.","end_pattern":"(?m)^Section\\s+6\\.","required_columns":[{"id":"number","kind":"text","pattern":"^[A-Z]?[0-9]+$","aliases":["Number"]},{"id":"name","kind":"text","aliases":["Name"]},{"id":"attempts","kind":"integer","aliases":["Tried"]},{"id":"accepted","kind":"integer","aliases":["AC"]},{"id":"difficulty","kind":"integer","aliases":["Difficulty"]}],"identity_column":"number","combined_columns":[{"aliases":["Problem"],"pattern":"^(?P<number>[A-Z]?[0-9]+)\\s+(?P<name>.+)$"}]}]}},"artifact":"Section 1. First\n| Problem | Tried | AC | Difficulty |\n| --- | --- | --- | --- |\n\n| | | | |\n| --- | --- | --- | --- |\n| **P1** Hello World | 1 | 1 | 7 |\n| **P2** Output Practice | 2 | 1 | 5 |\n| **B003** Addition Exercise | 3 | 2 | 4 |\nSection 6. End","ok":true,"expected_task_pass":true},
+    {"id":"combined-split-table-missing-field","category":"structured-extraction","root_cause":"table_adjacent_split_body","failure_mode":"false-positive","case":{"url":"https://example.test/training","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"problems","kind":"table","minimum_records":3,"start_pattern":"(?m)^Section\\s+1\\.","end_pattern":"(?m)^Section\\s+6\\.","required_columns":[{"id":"number","kind":"text","pattern":"^[A-Z]?[0-9]+$","aliases":["Number"]},{"id":"name","kind":"text","aliases":["Name"]},{"id":"attempts","kind":"integer","aliases":["Tried"]},{"id":"accepted","kind":"integer","aliases":["AC"]},{"id":"difficulty","kind":"integer","aliases":["Difficulty"]}],"identity_column":"number","combined_columns":[{"aliases":["Problem"],"pattern":"^(?P<number>[A-Z]?[0-9]+)\\s+(?P<name>.+)$"}]}]}},"artifact":"Section 1. First\n| Problem | Tried | AC | Difficulty |\n| --- | --- | --- | --- |\n\n| | | | |\n| --- | --- | --- | --- |\n| **P1** Hello World | 1 | 1 | 7 |\n| **P2** Output Practice | 2 | 1 | 5 |\n| **B003** Addition Exercise | 3 | | 4 |\nSection 6. End","ok":true,"expected_task_pass":false},
+    {"id":"mixed-html-linked-table-example-is-not-answer","category":"structured-extraction","root_cause":"composite_html_table_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"hosts":["example.test"],"entry_path":"/repo/[^/]+","required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","link_column":"name"}]}},"artifact":"Example:\n```html\nIntro\n<div><table><tbody><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/alpha\">Alpha</a></td><td>Alice</td></tr><tr><td><a href=\"/repo/beta\">Beta</a></td><td>Bob</td></tr></tbody></table></div>\n```\nNo records","ok":true,"expected_task_pass":false},
+    {"id":"mixed-html-linked-table-hidden-is-not-answer","category":"structured-extraction","root_cause":"composite_html_table_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"hosts":["example.test"],"entry_path":"/repo/[^/]+","required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","link_column":"name"}]}},"artifact":"<section hidden>Intro\n<div><table><tbody><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/alpha\">Alpha</a></td><td>Alice</td></tr><tr><td><a href=\"/repo/beta\">Beta</a></td><td>Bob</td></tr></tbody></table></div></section>","ok":true,"expected_task_pass":false},
+    {"id":"risk_control-diagnostic-url-missing-valid","category":"acceptance-contract","root_cause":"final_url_diagnostic_not_acceptance","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"risk_control","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"source_benchmark":{"risk_control":{"navigation_contract":{"requested_url":"https://example.test/start","observed_final_url":"https://example.test/catalog"}}}},"artifact":"Complete catalog","ok":true,"expected_task_pass":true,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false}},
+    {"id":"risk_control-diagnostic-url-missing-missing-content","category":"acceptance-contract","root_cause":"final_url_diagnostic_not_acceptance","failure_mode":"false-positive","case":{"url":"https://example.test/start","track":"risk_control","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"source_benchmark":{"risk_control":{"navigation_contract":{"requested_url":"https://example.test/start","observed_final_url":"https://example.test/catalog"}}}},"artifact":"Other content","ok":true,"expected_task_pass":false,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false}},
+    {"id":"risk_control-diagnostic-url-mismatch-valid","category":"acceptance-contract","root_cause":"final_url_diagnostic_not_acceptance","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"risk_control","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"source_benchmark":{"risk_control":{"navigation_contract":{"requested_url":"https://example.test/start","observed_final_url":"https://example.test/catalog"}}}},"artifact":"Complete catalog","ok":true,"expected_task_pass":true,"expected_metrics":{"page_identity_status":"mismatch","final_url_consistent":false,"page_identity_required":false},"final_url":"https://other.test/catalog"},
+    {"id":"risk_control-diagnostic-url-mismatch-missing-content","category":"acceptance-contract","root_cause":"final_url_diagnostic_not_acceptance","failure_mode":"false-positive","case":{"url":"https://example.test/start","track":"risk_control","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"source_benchmark":{"risk_control":{"navigation_contract":{"requested_url":"https://example.test/start","observed_final_url":"https://example.test/catalog"}}}},"artifact":"Other content","ok":true,"expected_task_pass":false,"expected_metrics":{"page_identity_status":"mismatch","final_url_consistent":false,"page_identity_required":false},"final_url":"https://other.test/catalog"},
+    {"id":"dynamic-diagnostic-url-missing-valid","category":"acceptance-contract","root_cause":"final_url_diagnostic_not_acceptance","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Complete catalog","ok":true,"expected_task_pass":true,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false},"metadata":{"route":"dynamic_selected_text","document_language":"en"}},
+    {"id":"dynamic-diagnostic-url-missing-missing-content","category":"acceptance-contract","root_cause":"final_url_diagnostic_not_acceptance","failure_mode":"false-positive","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Other content","ok":true,"expected_task_pass":false,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false},"metadata":{"route":"dynamic_selected_text","document_language":"en"}},
+    {"id":"dynamic-diagnostic-url-mismatch-valid","category":"acceptance-contract","root_cause":"final_url_diagnostic_not_acceptance","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Complete catalog","ok":true,"expected_task_pass":true,"expected_metrics":{"page_identity_status":"mismatch","final_url_consistent":false,"page_identity_required":false},"final_url":"https://other.test/catalog","metadata":{"route":"dynamic_selected_text","document_language":"en"}},
+    {"id":"dynamic-diagnostic-url-mismatch-missing-content","category":"acceptance-contract","root_cause":"final_url_diagnostic_not_acceptance","failure_mode":"false-positive","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Other content","ok":true,"expected_task_pass":false,"expected_metrics":{"page_identity_status":"mismatch","final_url_consistent":false,"page_identity_required":false},"final_url":"https://other.test/catalog","metadata":{"route":"dynamic_selected_text","document_language":"en"}},
+    {"id":"dynamic-diagnostic-lang-missing-valid","category":"acceptance-contract","root_cause":"html_language_metadata_diagnostic_not_acceptance","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Complete catalog","ok":true,"expected_task_pass":true,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false,"language_consistent":false},"metadata":{"route":"dynamic_selected_text"}},
+    {"id":"dynamic-diagnostic-lang-missing-missing-content","category":"acceptance-contract","root_cause":"html_language_metadata_diagnostic_not_acceptance","failure_mode":"false-positive","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Unrelated content","ok":true,"expected_task_pass":false,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false,"language_consistent":false},"metadata":{"route":"dynamic_selected_text"}},
+    {"id":"dynamic-diagnostic-lang-fr-valid","category":"acceptance-contract","root_cause":"html_language_metadata_diagnostic_not_acceptance","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Complete catalog","ok":true,"expected_task_pass":true,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false,"language_consistent":false},"metadata":{"route":"dynamic_selected_text","document_language":"fr"}},
+    {"id":"dynamic-diagnostic-lang-fr-missing-content","category":"acceptance-contract","root_cause":"html_language_metadata_diagnostic_not_acceptance","failure_mode":"false-positive","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Unrelated content","ok":true,"expected_task_pass":false,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false,"language_consistent":false},"metadata":{"route":"dynamic_selected_text","document_language":"fr"}},
+    {"id":"dynamic-diagnostic-lang-empty-valid","category":"acceptance-contract","root_cause":"html_language_metadata_diagnostic_not_acceptance","failure_mode":"false-negative","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Complete catalog","ok":true,"expected_task_pass":true,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false,"language_consistent":false},"metadata":{"route":"dynamic_selected_text","document_language":""}},
+    {"id":"dynamic-diagnostic-lang-empty-missing-content","category":"acceptance-contract","root_cause":"html_language_metadata_diagnostic_not_acceptance","failure_mode":"false-positive","case":{"url":"https://example.test/start","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"answer","alternatives":["Complete catalog"]}]},"evaluation_url":"https://example.test/start","expected_final_url":"https://example.test/catalog","target_language":"en","target_region":"US"},"artifact":"Unrelated content","ok":true,"expected_task_pass":false,"expected_metrics":{"page_identity_status":"unavailable","final_url_consistent":false,"page_identity_required":false,"language_consistent":false},"metadata":{"route":"dynamic_selected_text","document_language":""}},
+    {"id":"explicit-body-without-page-shell-passes","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-negative","case":{"url":"https://example.test/article","ground_truth_main_content":"alpha bravo charlie delta echo foxtrot golf hotel","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":2,"regions":[{"id":"opening","text":"alpha bravo charlie delta"},{"id":"ending","text":"echo foxtrot golf hotel"}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]}},"artifact":"alpha bravo charlie delta echo foxtrot golf hotel","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_anchors_required":false,"stable_anchor_hits":0,"body_coverage_pass":true}},
+    {"id":"page-shell-without-complete-body-fails","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-positive","case":{"url":"https://example.test/article","ground_truth_main_content":"alpha bravo charlie delta echo foxtrot golf hotel","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":2,"regions":[{"id":"opening","text":"alpha bravo charlie delta"},{"id":"ending","text":"echo foxtrot golf hotel"}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]}},"artifact":"Account login and site footer alpha bravo charlie delta","ok":true,"expected_task_pass":false},
+    {"id":"explicit-record-without-page-shell-passes","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-negative","case":{"url":"https://example.test/homes","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"homes","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"price","kind":"price"},{"id":"beds","kind":"integer","pattern":"\\b(?:bds|beds?)\\b"},{"id":"baths","kind":"integer","pattern":"\\b(?:ba|baths?)\\b"},{"id":"area","kind":"area"}]}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]}},"artifact":"[One Main Street](https://example.test/item/1)\n$900,000\n3 beds · 2 baths · 1,200 sqft","ok":true,"expected_task_pass":true},
+    {"id":"page-shell-with-incomplete-record-fails","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-positive","case":{"url":"https://example.test/homes","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"homes","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"price","kind":"price"},{"id":"beds","kind":"integer","pattern":"\\b(?:bds|beds?)\\b"},{"id":"baths","kind":"integer","pattern":"\\b(?:ba|baths?)\\b"},{"id":"area","kind":"area"}]}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]}},"artifact":"Account login and site footer\n[One Main Street](https://example.test/item/1)\n$900,000","ok":true,"expected_task_pass":false},
+    {"id":"explicit-record-placeholder-link-fails","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-positive","case":{"url":"https://example.test/homes","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"homes","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"price","kind":"price"},{"id":"beds","kind":"integer","pattern":"\\b(?:bds|beds?)\\b"},{"id":"baths","kind":"integer","pattern":"\\b(?:ba|baths?)\\b"},{"id":"area","kind":"area"}]}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]}},"artifact":"[One Main Street](#)\n$900,000\n3 beds · 2 baths · 1,200 sqft","ok":true,"expected_task_pass":false},
+    {"id":"anchor-only-contract-missing-shell-fails","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-positive","case":{"url":"https://example.test/page","acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"required","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]}},"artifact":"Some other body text","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_anchors_required":true}},
+    {"id":"anchor-only-contract-present-shell-passes","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-negative","case":{"url":"https://example.test/page","acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"required","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]}},"artifact":"Account login and site footer","ok":true,"expected_task_pass":true},
+    {"id":"explicit-body-request-failure-stays-failed","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-positive","case":{"url":"https://example.test/article","ground_truth_main_content":"alpha bravo charlie delta echo foxtrot golf hotel","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":2,"regions":[{"id":"opening","text":"alpha bravo charlie delta"},{"id":"ending","text":"echo foxtrot golf hotel"}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]}},"artifact":"alpha bravo charlie delta echo foxtrot golf hotel","ok":false,"expected_task_pass":false},
+    {"id":"body-and-record-both-remain-required","category":"acceptance-contract","root_cause":"page_shell_anchors_veto_explicit_body_or_record_contract","failure_mode":"false-positive","case":{"url":"https://example.test/article","ground_truth_main_content":"alpha bravo charlie delta echo foxtrot golf hotel","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":2,"regions":[{"id":"opening","text":"alpha bravo charlie delta"},{"id":"ending","text":"echo foxtrot golf hotel"}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"footer","alternatives":["Account login and site footer"]}]},"composite_acceptance":{"version":1,"groups":[{"id":"homes","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"price","kind":"price"},{"id":"beds","kind":"integer","pattern":"\\b(?:bds|beds?)\\b"},{"id":"baths","kind":"integer","pattern":"\\b(?:ba|baths?)\\b"},{"id":"area","kind":"area"}]}]}},"artifact":"alpha bravo charlie delta echo foxtrot golf hotel","ok":true,"expected_task_pass":false},
+    {"id":"table-visible_section-valid","category":"structured-extraction","root_cause":"table_visible_section_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","start_pattern":"(?m)^section_start$","end_pattern":"(?m)^section_end$"}]}},"artifact":"<h2>section_start</h2><table><tr><th>Name</th><th>Owner</th></tr><tr><td>Alpha</td><td>Alice | Bob</td></tr><tr><td>Beta</td><td>Alice | Bob</td></tr></table><h2>section_end</h2><table><tr><th>Name</th><th>Owner</th></tr><tr><td>Outside</td><td>Alice | Bob</td></tr><tr><td>Other</td><td>Alice | Bob</td></tr></table>","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}},
+    {"id":"table-visible_section-invalid","category":"structured-extraction","root_cause":"table_visible_section_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","start_pattern":"(?m)^section_start$","end_pattern":"(?m)^section_end$"}]}},"artifact":"<h2>section_start</h2><table><tr><th>Name</th><th>Owner</th></tr><tr><td>Alpha</td><td>Alice | Bob</td></tr></table><h2>section_end</h2><table><tr><th>Name</th><th>Owner</th></tr><tr><td>Outside</td><td>Alice | Bob</td></tr><tr><td>Other</td><td>Alice | Bob</td></tr></table>","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}},
+    {"id":"table-escaped_pipe-valid","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name"}]}},"artifact":"<table><tr><th>Name</th><th>Owner</th></tr><tr><td>Alpha</td><td>Alice | Bob</td></tr><tr><td>Beta</td><td>Alice | Bob</td></tr></table>","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}},
+    {"id":"table-escaped_pipe-invalid","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name"}]}},"artifact":"<table><tr><th>Name</th><th>Owner</th></tr><tr><td>Alpha</td><td>Alice</td><td>Bob</td></tr><tr><td>Beta</td><td>Alice</td><td>Bob</td></tr></table>","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}},
+    {"id":"linked_table-visible_section-valid","category":"structured-extraction","root_cause":"table_visible_section_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","hosts":["example.test"],"entry_path":"/repo/[^/]+","link_column":"name","start_pattern":"(?m)^section_start$","end_pattern":"(?m)^section_end$"}]}},"artifact":"<h2>section_start</h2><table><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/0\">Alpha</a></td><td>Alice | Bob</td></tr><tr><td><a href=\"/repo/1\">Beta</a></td><td>Alice | Bob</td></tr></table><h2>section_end</h2><table><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/0\">Outside</a></td><td>Alice | Bob</td></tr><tr><td><a href=\"/repo/1\">Other</a></td><td>Alice | Bob</td></tr></table>","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}},
+    {"id":"linked_table-visible_section-invalid","category":"structured-extraction","root_cause":"table_visible_section_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","hosts":["example.test"],"entry_path":"/repo/[^/]+","link_column":"name","start_pattern":"(?m)^section_start$","end_pattern":"(?m)^section_end$"}]}},"artifact":"<h2>section_start</h2><table><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/0\">Alpha</a></td><td>Alice | Bob</td></tr></table><h2>section_end</h2><table><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/0\">Outside</a></td><td>Alice | Bob</td></tr><tr><td><a href=\"/repo/1\">Other</a></td><td>Alice | Bob</td></tr></table>","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}},
+    {"id":"linked_table-escaped_pipe-valid","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","hosts":["example.test"],"entry_path":"/repo/[^/]+","link_column":"name"}]}},"artifact":"<table><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/0\">Alpha</a></td><td>Alice | Bob</td></tr><tr><td><a href=\"/repo/1\">Beta</a></td><td>Alice | Bob</td></tr></table>","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}},
+    {"id":"linked_table-escaped_pipe-invalid","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","hosts":["example.test"],"entry_path":"/repo/[^/]+","link_column":"name"}]}},"artifact":"<table><tr><th>Name</th><th>Owner</th></tr><tr><td><a href=\"/repo/0\">Alpha</a></td><td>Alice</td><td>Bob</td></tr><tr><td><a href=\"/repo/1\">Beta</a></td><td>Alice</td><td>Bob</td></tr></table>","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}},
+    {"id":"table-visible_section-valid-markdown","category":"structured-extraction","root_cause":"table_visible_section_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","start_pattern":"(?m)^section_start$","end_pattern":"(?m)^section_end$"}]}},"artifact":"\nsection_start\n\n| Name | Owner |\n| --- | --- |\n| Alpha | Alice \\| Bob |\n| Beta | Alice \\| Bob |\n\nsection_end\n\n| Name | Owner |\n| --- | --- |\n| Outside | Alice \\| Bob |\n| Other | Alice \\| Bob |\n","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}},
+    {"id":"table-visible_section-invalid-markdown","category":"structured-extraction","root_cause":"table_visible_section_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","start_pattern":"(?m)^section_start$","end_pattern":"(?m)^section_end$"}]}},"artifact":"\nsection_start\n\n| Name | Owner |\n| --- | --- |\n| Alpha | Alice \\| Bob |\n\nsection_end\n\n| Name | Owner |\n| --- | --- |\n| Outside | Alice \\| Bob |\n| Other | Alice \\| Bob |\n","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}},
+    {"id":"table-escaped_pipe-valid-markdown","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name"}]}},"artifact":"\n| Name | Owner |\n| --- | --- |\n| Alpha | Alice \\| Bob |\n| Beta | Alice \\| Bob |\n","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}},
+    {"id":"table-escaped_pipe-invalid-markdown","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name"}]}},"artifact":"\n| Name | Owner |\n| --- | --- |\n| Alpha | Alice | Bob |\n| Beta | Alice | Bob |\n","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}},
+    {"id":"linked_table-visible_section-valid-markdown","category":"structured-extraction","root_cause":"table_visible_section_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","hosts":["example.test"],"entry_path":"/repo/[^/]+","link_column":"name","start_pattern":"(?m)^section_start$","end_pattern":"(?m)^section_end$"}]}},"artifact":"\nsection_start\n\n| Name | Owner |\n| --- | --- |\n| [Alpha](/repo/0) | Alice \\| Bob |\n| [Beta](/repo/1) | Alice \\| Bob |\n\nsection_end\n\n| Name | Owner |\n| --- | --- |\n| [Outside](/repo/0) | Alice \\| Bob |\n| [Other](/repo/1) | Alice \\| Bob |\n","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}},
+    {"id":"linked_table-visible_section-invalid-markdown","category":"structured-extraction","root_cause":"table_visible_section_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","hosts":["example.test"],"entry_path":"/repo/[^/]+","link_column":"name","start_pattern":"(?m)^section_start$","end_pattern":"(?m)^section_end$"}]}},"artifact":"\nsection_start\n\n| Name | Owner |\n| --- | --- |\n| [Alpha](/repo/0) | Alice \\| Bob |\n\nsection_end\n\n| Name | Owner |\n| --- | --- |\n| [Outside](/repo/0) | Alice \\| Bob |\n| [Other](/repo/1) | Alice \\| Bob |\n","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}},
+    {"id":"linked_table-escaped_pipe-valid-markdown","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","hosts":["example.test"],"entry_path":"/repo/[^/]+","link_column":"name"}]}},"artifact":"\n| Name | Owner |\n| --- | --- |\n| [Alpha](/repo/0) | Alice \\| Bob |\n| [Beta](/repo/1) | Alice \\| Bob |\n","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}},
+    {"id":"linked_table-escaped_pipe-invalid-markdown","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"linked_table","minimum_records":2,"required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","hosts":["example.test"],"entry_path":"/repo/[^/]+","link_column":"name"}]}},"artifact":"\n| Name | Owner |\n| --- | --- |\n| [Alpha](/repo/0) | Alice | Bob |\n| [Beta](/repo/1) | Alice | Bob |\n","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}},
+    {"id":"stable-table-escaped-pipe-valid","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"integer"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"^Name\\s*$","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t]+)\\t(?P<amount>\\d+)"}}},"artifact":"| Name | Amount |\n| --- | --- |\n| Alpha \\| Beta | 7 |\n| Gamma \\| Delta | 8 |","ok":true,"expected_task_pass":true},
+    {"id":"stable-table-escaped-pipe-wrong-columns","category":"structured-extraction","root_cause":"table_escaped_pipe_boundaries","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"integer"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"^Name\\s*$","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t]+)\\t(?P<amount>\\d+)"}}},"artifact":"| Name | Amount |\n| --- | --- |\n| Alpha | Beta | 7 |\n| Gamma | Delta | 8 |","ok":true,"expected_task_pass":false},
+    {"id":"body-table-intermediate-column-keeps-text-column-continuous","category":"body-scope","root_cause":"body_table_column_continuity","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","ground_truth_main_content":"Name Complete Alan Bryan Chris Eric","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":1,"regions":[{"id":"table-text","text":"Name Complete Alan Bryan Chris Eric"}]}},"artifact":"| Name | Complete |\n| --- | --- |\n| Alan | 20 percent |\n| Bryan | 30 percent |\n| Chris | 40 percent |\n| Eric | 80 percent |","ok":true,"expected_task_pass":true,"expected_metrics":{"body_coverage_pass":true,"body_matching_surface":"table_header_and_column"}},
+    {"id":"body-table-unrelated-column-cannot-repair-missing-record","category":"body-scope","root_cause":"body_table_column_continuity","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","ground_truth_main_content":"Name Complete Alan Bryan Chris Eric","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":1,"regions":[{"id":"table-text","text":"Name Complete Alan Bryan Chris Eric"}]}},"artifact":"| Name | Complete |\n| --- | --- |\n| Alan | Bryan |\n| Eric | Chris |","ok":true,"expected_task_pass":false,"expected_metrics":{"body_coverage_pass":false}},
+    {"id":"body-table-missing-header-cannot-use-column-projection","category":"body-scope","root_cause":"body_table_column_continuity","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","ground_truth_main_content":"Name Complete Alan Bryan Chris Eric","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":1,"regions":[{"id":"table-text","text":"Name Complete Alan Bryan Chris Eric"}]}},"artifact":"| Name | Status |\n| --- | --- |\n| Alan | Complete |\n| Bryan | waiting |\n| Chris | done |\n| Eric | done |","ok":true,"expected_task_pass":false,"expected_metrics":{"body_coverage_pass":false}},
+    {"id":"current-homepage-stable-intersection-passes","category":"acceptance-contract","root_cause":"stale_homepage_anchor_contract","failure_mode":"false-negative","case":{"url":"https://example.test/","track":"challenge","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"product","alternatives":["Current product"]},{"id":"support","alternatives":["Current support"]}]}},"artifact":"Current product\nCurrent support","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}},
+    {"id":"obsolete-homepage-anchor-does-not-pass","category":"acceptance-contract","root_cause":"stale_homepage_anchor_contract","failure_mode":"false-positive","case":{"url":"https://example.test/","track":"challenge","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"product","alternatives":["Current product"]},{"id":"support","alternatives":["Current support"]}]}},"artifact":"Retired product\nObsolete support","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}},
+    {"id":"example-current-body-passes","category":"reference-evidence","root_cause":"current_example_body_reference","failure_mode":"false-negative","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"ground_truth_main_content":"This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":1,"segmentation_method":"sentences","regions":[{"id":"body-region-1","text":"this domain is for use in documentation examples without needing permission this is not a service avoid relying on it for testing and monitoring purposes learn more","source_text":"This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more","segmentation_method":"sentences"}]},"required_facts":[{"id":"purpose","alternatives":["documentation examples without needing permission"]},{"id":"service-warning","alternatives":["not a service; avoid relying on it for testing and monitoring purposes"]},{"id":"iana-link","alternatives":["Learn more"]}]},"artifact":"This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more","ok":true,"expected_task_pass":true},
+    {"id":"example-retired-body-does-not-pass","category":"reference-evidence","root_cause":"current_example_body_reference","failure_mode":"false-positive","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"ground_truth_main_content":"This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":1,"segmentation_method":"sentences","regions":[{"id":"body-region-1","text":"this domain is for use in documentation examples without needing permission this is not a service avoid relying on it for testing and monitoring purposes learn more","source_text":"This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more","segmentation_method":"sentences"}]},"required_facts":[{"id":"purpose","alternatives":["documentation examples without needing permission"]},{"id":"service-warning","alternatives":["not a service; avoid relying on it for testing and monitoring purposes"]},{"id":"iana-link","alternatives":["Learn more"]}]},"artifact":"Example Domain\nThis domain is for use in documentation examples without needing permission. Avoid use in operations.\nLearn more","ok":true,"expected_task_pass":false},
+    {"id":"retail-current-heading-passes","category":"reference-evidence","root_cause":"retail_return_heading_reference","failure_mode":"false-negative","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"required_facts":[{"id":"online-returns","alternatives":["Returning or Exchanging Online Orders"]},{"id":"store-returns","alternatives":["In-store purchases must be returned to a store location"]},{"id":"furniture-returns","alternatives":["Returning Furniture"]}]},"artifact":"Returning or Exchanging Online Orders\nIn-store purchases must be returned to a store location\nReturning Furniture","ok":true,"expected_task_pass":true},
+    {"id":"retail-retired-heading-does-not-pass","category":"reference-evidence","root_cause":"retail_return_heading_reference","failure_mode":"false-positive","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"required_facts":[{"id":"online-returns","alternatives":["Returning or Exchanging Online Orders"]},{"id":"store-returns","alternatives":["In-store purchases must be returned to a store location"]},{"id":"furniture-returns","alternatives":["Returning Furniture"]}]},"artifact":"Returning & Exchanging Online Orders\nIn-store purchases must be returned to a store location\nReturning Furniture","ok":true,"expected_task_pass":false},
+    {"id":"scrapy-current-python-requirement-passes","category":"acceptance-contract","root_cause":"scrapy_python_version_reference","failure_mode":"false-negative","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"framework","alternatives":["is a web scraping framework to extract structured data from"]},{"id":"python","alternatives":["It is cross-platform, and requires Python 3.11+. It is maintained"]},{"id":"contribute","alternatives":["If you wish to contribute, see"]}]}},"artifact":"is a web scraping framework to extract structured data from websites.\nIt is cross-platform, and requires Python 3.11+. It is maintained by Zyte.\nIf you wish to contribute, see Contributing.","ok":true,"expected_task_pass":true},
+    {"id":"scrapy-retired-python-requirement-does-not-pass","category":"acceptance-contract","root_cause":"scrapy_python_version_reference","failure_mode":"false-positive","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"framework","alternatives":["is a web scraping framework to extract structured data from"]},{"id":"python","alternatives":["It is cross-platform, and requires Python 3.11+. It is maintained"]},{"id":"contribute","alternatives":["If you wish to contribute, see"]}]}},"artifact":"is a web scraping framework to extract structured data from websites.\nIt is cross-platform, and requires Python 3.10+. It is maintained by Zyte.\nIf you wish to contribute, see Contributing.","ok":true,"expected_task_pass":false},
+    {"id":"postgresql-stable-tutorial-copy-passes","category":"acceptance-contract","root_cause":"postgresql_stable_body_excludes_release_banner","failure_mode":"false-negative","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"intro","alternatives":["Welcome to the PostgreSQL Tutorial. The tutorial is intended to give an introduction to PostgreSQL"]},{"id":"admin","alternatives":[". Those who provision and manage their own PostgreSQL installation"]},{"id":"report","alternatives":["to report a documentation issue."]}]}},"artifact":"Welcome to the PostgreSQL Tutorial. The tutorial is intended to give an introduction to PostgreSQL. Those who provision and manage their own PostgreSQL installation should also read Part III. Use this form to report a documentation issue.","ok":true,"expected_task_pass":true},
+    {"id":"postgresql-release-banner-does-not-pass","category":"acceptance-contract","root_cause":"postgresql_stable_body_excludes_release_banner","failure_mode":"false-positive","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"intro","alternatives":["Welcome to the PostgreSQL Tutorial. The tutorial is intended to give an introduction to PostgreSQL"]},{"id":"admin","alternatives":[". Those who provision and manage their own PostgreSQL installation"]},{"id":"report","alternatives":["to report a documentation issue."]}]}},"artifact":"PostgreSQL 19 Beta 4 Released!\nThose who provision and manage their own PostgreSQL installation should also read Part III. Use this form to report a documentation issue.","ok":true,"expected_task_pass":false},
+    {"id":"openai-stable-api-copy-passes","category":"acceptance-contract","root_cause":"openai_stable_body_excludes_model_catalog_copy","failure_mode":"false-negative","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"quickstart","alternatives":["Make your first API request in minutes. Learn the basics"]},{"id":"responses","alternatives":["Make direct model requests for text, structured output, tools, and"]},{"id":"status","alternatives":["Check the status of OpenAI services"]},{"id":"plugin","alternatives":["The OpenAI Developers plugin connects ChatGPT and Codex to the OpenAI Platform"]}]}},"artifact":"Make your first API request in minutes. Learn the basics. Make direct model requests for text, structured output, tools, and multimodal workflows. The OpenAI Developers plugin connects ChatGPT and Codex to the OpenAI Platform. Check the status of OpenAI services.","ok":true,"expected_task_pass":true},
+    {"id":"openai-volatile-model-copy-does-not-pass","category":"acceptance-contract","root_cause":"openai_stable_body_excludes_model_catalog_copy","failure_mode":"false-positive","case":{"url":"https://example.test/","track":"web","task_kind":"body","min_content_chars":1,"fact_coverage_threshold":1.0,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"quickstart","alternatives":["Make your first API request in minutes. Learn the basics"]},{"id":"responses","alternatives":["Make direct model requests for text, structured output, tools, and"]},{"id":"status","alternatives":["Check the status of OpenAI services"]},{"id":"plugin","alternatives":["The OpenAI Developers plugin connects ChatGPT and Codex to the OpenAI Platform"]}]}},"artifact":"Compare model capabilities and specifications. Start with GPT-6 Astra for complex reasoning and coding.","ok":true,"expected_task_pass":false},
+    {"id":"non-record-linked-image-alt-is-visible","category":"format-normalization","root_cause":"non_record_image_alt_visibility","failure_mode":"false-negative","case":{"url":"https://mail.ru/","track":"challenge","task_kind":"structure","min_content_chars":1,"acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["news.mail.ru"],"entry_path":"/[^/]+/[0-9]+","stable_text_anchors":[{"id":"site","alternatives":["mail.ru"],"match_scope":"non_record_lines"}]}},"artifact":"[![Mail.ru](/logo.svg)](/)\n[Story](https://news.mail.ru/politics/12345)","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}},
+    {"id":"image-url-cannot-supply-empty-alt","category":"format-normalization","root_cause":"non_record_image_alt_visibility","failure_mode":"false-positive","case":{"url":"https://mail.ru/","track":"challenge","task_kind":"structure","min_content_chars":1,"acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["news.mail.ru"],"entry_path":"/[^/]+/[0-9]+","stable_text_anchors":[{"id":"site","alternatives":["mail.ru"],"match_scope":"non_record_lines"}]}},"artifact":"[![](https://mail.ru/assets/mail.ru.svg)](https://mail.ru/)\n[Story](https://news.mail.ru/politics/12345)","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}},
+    {"id":"m365-current-introduction-variant-passes","category":"acceptance-contract","root_cause":"microsoft_homepage_language_and_drift","failure_mode":"false-negative","case":{"url":"https://m365.cloud.microsoft/en-us/","track":"challenge","task_kind":"structure","min_content_chars":1,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"stable-anchor-1","alternatives":["Work smarter across Microsoft 365"]},{"id":"stable-anchor-2","alternatives":["Sign in to create, collaborate, and move your work forward with Copilot in Microsoft 365.","AI in Microsoft 365 helps you create, summarize, and find information across your work."]},{"id":"stable-anchor-3","alternatives":["Popular prompts to try"]},{"id":"stable-anchor-4","alternatives":["Jump into your favorite app"]},{"id":"stable-anchor-5","alternatives":["Bring Copilot and your work together in a focused desktop experience."]}]}},"artifact":"Work smarter across Microsoft 365\nAI in Microsoft 365 helps you create, summarize, and find information across your work.\nPopular prompts to try\nJump into your favorite app\nBring Copilot and your work together in a focused desktop experience.","ok":true,"expected_task_pass":true},
+    {"id":"m365-established-introduction-variant-still-passes","category":"acceptance-contract","root_cause":"microsoft_homepage_language_and_drift","failure_mode":"false-negative","case":{"url":"https://m365.cloud.microsoft/en-us/","track":"challenge","task_kind":"structure","min_content_chars":1,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"stable-anchor-1","alternatives":["Work smarter across Microsoft 365"]},{"id":"stable-anchor-2","alternatives":["Sign in to create, collaborate, and move your work forward with Copilot in Microsoft 365.","AI in Microsoft 365 helps you create, summarize, and find information across your work."]},{"id":"stable-anchor-3","alternatives":["Popular prompts to try"]},{"id":"stable-anchor-4","alternatives":["Jump into your favorite app"]},{"id":"stable-anchor-5","alternatives":["Bring Copilot and your work together in a focused desktop experience."]}]}},"artifact":"Work smarter across Microsoft 365\nSign in to create, collaborate, and move your work forward with Copilot in Microsoft 365.\nPopular prompts to try\nJump into your favorite app\nBring Copilot and your work together in a focused desktop experience.","ok":true,"expected_task_pass":true},
+    {"id":"m365-retired-navigation-copy-does-not-pass","category":"acceptance-contract","root_cause":"microsoft_homepage_language_and_drift","failure_mode":"false-positive","case":{"url":"https://m365.cloud.microsoft/en-us/","track":"challenge","task_kind":"structure","min_content_chars":1,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"stable-anchor-1","alternatives":["Work smarter across Microsoft 365"]},{"id":"stable-anchor-2","alternatives":["Sign in to create, collaborate, and move your work forward with Copilot in Microsoft 365."]},{"id":"stable-anchor-3","alternatives":["Popular prompts to try"]},{"id":"stable-anchor-4","alternatives":["Jump into your favorite app"]},{"id":"stable-anchor-5","alternatives":["Bring Copilot and your work together in a focused desktop experience."]}]}},"artifact":"Word\nExcel\nPowerPoint\nAzure\nMicrosoft Learn\nMicrosoft Store\nMicrosoft Teams","ok":true,"expected_task_pass":false}
+    ,{"id":"stable-table-unclosed-html-example-keeps-markdown-rows","category":"structured-extraction","root_cause":"unclosed_html_example_table_surface","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"number"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"(?=^\\s*\\|?\\s*Name(?:\\s|\\|))","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t\\n]+)\\t(?P<amount>[^\\t\\n]+)"}}},"artifact":"Basic use of \\`\\<table demo\\>\\`\n| Name | Amount |\n| --- | --- |\n| Alpha | 1.25 |\n| Beta | 2.5 |","ok":true,"expected_task_pass":true}
+    ,{"id":"stable-table-unclosed-html-example-does-not-create-rows","category":"structured-extraction","root_cause":"unclosed_html_example_table_surface","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"number"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"(?=^\\s*\\|?\\s*Name(?:\\s|\\|))","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t\\n]+)\\t(?P<amount>[^\\t\\n]+)"}}},"artifact":"Basic use of \\`\\<table demo\\>\\`\nName Amount Alpha 1.25 Beta 2.5","ok":true,"expected_task_pass":false}
+    ,{"id":"stable-table-visible-markdown-number-passes","category":"format-normalization","root_cause":"table_visible_markdown_scalar","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"number"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"(?=^\\s*\\|?\\s*Name(?:\\s|\\|))","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t\\n]+)\\t(?P<amount>[^\\t\\n]+)"}}},"artifact":"| Name | Amount |\n| --- | --- |\n| **Alpha** | 1\\.25 |\n| **Beta** | 2\\.5 |","ok":true,"expected_task_pass":true}
+    ,{"id":"stable-table-visible-markdown-number-keeps-invalid-suffix","category":"format-normalization","root_cause":"table_visible_markdown_scalar","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"number"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"(?=^\\s*\\|?\\s*Name(?:\\s|\\|))","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t\\n]+)\\t(?P<amount>[^\\t\\n]+)"}}},"artifact":"| Name | Amount |\n| --- | --- |\n| Alpha | 1\\.25 kg |\n| Beta | 2\\.5 kg |","ok":true,"expected_task_pass":false}
+    ,{"id":"stable-table-shared-sort-controls-are-not-labels","category":"format-normalization","root_cause":"table_header_sort_control","failure_mode":"false-negative","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"integer"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"^Name\\s*$","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t\\n]+)\\t(?P<amount>[^\\t\\n]+)"}}},"artifact":"| Name ↕ | Amount ↕ |\n| --- | --- |\n| Alpha | 1 |\n| Beta | 2 |","ok":true,"expected_task_pass":true}
+    ,{"id":"stable-table-sort-controls-do-not-hide-wrong-label","category":"format-normalization","root_cause":"table_header_sort_control","failure_mode":"false-positive","case":{"url":"https://example.test/table","task_kind":"body","acceptance_contract":{"version":1,"schema":"table_row","minimum_records":2,"table_columns":[{"name":"name","label":"Name","type":"text"},{"name":"amount","label":"Amount","type":"integer"}],"record_identity_fields":["name"],"table_scope":{"row_selector":"table tbody tr","cell_selector":"td","start_pattern":"^Name\\s*$","end_pattern":"^Footer$","plain_row_pattern":"(?P<name>[^\\t\\n]+)\\t(?P<amount>[^\\t\\n]+)"}}},"artifact":"| Names ↕ | Amount ↕ |\n| --- | --- |\n| Alpha | 1 |\n| Beta | 2 |","ok":true,"expected_task_pass":false}
+    ,{"id":"dynamic-record-badge-is-not-required-page-copy","category":"acceptance-contract","root_cause":"dynamic_record_badge_not_page_anchor","failure_mode":"false-negative","case":{"url":"https://example.test/","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/post/[0-9]+","stable_text_anchors":[{"id":"site","alternatives":["Example Site"],"match_scope":"non_record_lines"},{"id":"about","alternatives":["About us"],"match_scope":"non_record_lines"}]}},"artifact":"Example Site\nAbout us\n[Matrix精选](/post/1)\n[Current article](/post/2)","ok":true,"expected_task_pass":true}
+    ,{"id":"dynamic-record-badge-cannot-replace-page-copy","category":"acceptance-contract","root_cause":"dynamic_record_badge_not_page_anchor","failure_mode":"false-positive","case":{"url":"https://example.test/","track":"dynamic","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/post/[0-9]+","stable_text_anchors":[{"id":"site","alternatives":["Example Site"],"match_scope":"non_record_lines"},{"id":"about","alternatives":["About us"],"match_scope":"non_record_lines"}]}},"artifact":"Example Site\n[Matrix精选](/post/1)\n[Current article](/post/2)","ok":true,"expected_task_pass":false}
+    ,{"id":"scoped-caption-after-heading-stays-owned","category":"structured-extraction","root_cause":"scoped_markdown_caption_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","name_validation":"nonempty","entry_scope":{"html_selector":"main a:has(h3):has(p)","title_selector":"p","link_selector":"a[href]","start_pattern":"(?m)^# Catalog$","end_pattern":"(?m)^# End$","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$"}}},"artifact":"# Catalog\n[![Artwork](/one.jpg)<h3>Artwork title</h3>Visible caption](/item/1)\n# End","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_record_count":1}}
+    ,{"id":"scoped-caption-outside-link-stays-unowned","category":"structured-extraction","root_cause":"scoped_markdown_caption_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","name_validation":"nonempty","entry_scope":{"html_selector":"main a:has(h3):has(p)","title_selector":"p","link_selector":"a[href]","start_pattern":"(?m)^# Catalog$","end_pattern":"(?m)^# End$","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$"}}},"artifact":"# Catalog\n[![Artwork](/one.jpg)<h3>Artwork title</h3>](/item/1)\nVisible caption\n# End","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_record_count":0}}
+    ,{"id":"visible-html-records-form-structured-results","category":"structured-extraction","root_cause":"visible_html_record_projection","failure_mode":"false-negative","case":{"url":"https://example.test/","task_kind":"body","acceptance_contract":{"version":1,"schema":"review","minimum_records":2,"stable_text_anchors":[]}},"artifact":"<ul><li><p>2026-09-01</p><p>First delivered review</p></li><li><p>2026-09-02</p><p>Second delivered review</p></li></ul>","ok":true,"expected_task_pass":true}
+    ,{"id":"script-json-does-not-form-visible-structured-results","category":"structured-extraction","root_cause":"visible_html_record_projection","failure_mode":"false-positive","case":{"url":"https://example.test/","task_kind":"body","acceptance_contract":{"version":1,"schema":"review","minimum_records":2,"stable_text_anchors":[]}},"artifact":"<html><body><div id=\"reviews\"></div><script>[{\"date\":\"2026-09-01\",\"text\":\"First delivered review\"},{\"date\":\"2026-09-02\",\"text\":\"Second delivered review\"}]</script></body></html>","ok":true,"expected_task_pass":false}
+    ,{"id":"single-character-reference-layer-matches-visible-body","category":"format-normalization","root_cause":"visible_character_reference_projection","failure_mode":"false-negative","case":{"url":"https://example.test/","task_kind":"body","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":1.0,"minimum_floor":1.0,"minimum_region_passes":1,"regions":[{"id":"body","text":"Alpha Beta Gamma Delta"}]}},"artifact":"Alpha&#32;Beta&#x20;Gamma&nbsp;Delta","ok":true,"expected_task_pass":true}
+    ,{"id":"double-encoded-character-references-remain-literal","category":"format-normalization","root_cause":"visible_character_reference_projection","failure_mode":"false-positive","case":{"url":"https://example.test/","task_kind":"body","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":1.0,"minimum_floor":1.0,"minimum_region_passes":1,"regions":[{"id":"body","text":"Alpha Beta Gamma Delta"}]}},"artifact":"Alpha&amp;#32;Beta&amp;#x20;Gamma&amp;nbsp;Delta","ok":true,"expected_task_pass":false}
+    ,{"id":"visible-html-links-form-composite-records","category":"structured-extraction","root_cause":"visible_html_link_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/base/","task_kind":"body","expected_any":["Directory"],"composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/base/[^/]+"}]}},"artifact":"<h1>Directory</h1><ul><li><a href=\"/base/alpha/\">Alpha</a></li><li><a href=\"/base/beta/\">Beta</a></li></ul>","ok":true,"expected_task_pass":true}
+    ,{"id":"hidden-html-links-do-not-form-composite-records","category":"structured-extraction","root_cause":"visible_html_link_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/base/","task_kind":"body","expected_any":["Directory"],"composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/base/[^/]+"}]}},"artifact":"<html><body><h1>Directory</h1><a href=\"/base/alpha/\">Alpha</a><a hidden href=\"/base/beta/\">Beta</a></body></html>","ok":true,"expected_task_pass":false}
+    ,{"id":"html-href-markup-cannot-inject-composite-record","category":"structured-extraction","root_cause":"visible_html_link_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/base/","task_kind":"body","expected_any":["Directory"],"composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/base/[^/]+"}]}},"artifact":"<h1>Directory</h1><a href=\"/base/alpha/\">Alpha</a><a href=\"/bad/) [Beta](/base/beta/\">Decoy</a>","ok":true,"expected_task_pass":false}
+    ,{"id":"scoped-inline-html-markdown-links-stay-visible","category":"structured-extraction","root_cause":"native_answer_surface_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","entry_scope":{"html_selector":"main a[href]","start_pattern":"^Target list$","end_pattern":"^Footer$"}}},"artifact":"## Target list\n[<h3>First entry</h3>](/item/1)\n[<h3>Second entry</h3>](/item/2)\n## Footer","ok":true,"expected_task_pass":true}
+    ,{"id":"full-html-does-not-fall-back-to-markdown-text-scope","category":"structured-extraction","root_cause":"native_answer_surface_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","entry_scope":{"html_selector":"main a[href]","start_pattern":"^Target list$","end_pattern":"^Footer$"}}},"artifact":"<html><body><main>Target list</main><footer><a href=\"/item/1\">First entry</a><a href=\"/item/2\">Second entry</a></footer></body></html>","ok":true,"expected_task_pass":false}
+    ,{"id":"uniquely-owned-native-link-metadata-may-corroborate-scope","category":"structured-extraction","root_cause":"native_answer_surface_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","entry_scope":{"html_selector":"main a[href]","start_pattern":"^Target list$","end_pattern":"^Footer$"}}},"artifact":"## Target list\nFirst entry\nSecond entry\n## Footer","metadata":{"links":[{"text":"First entry","href":"https://example.test/item/1"},{"text":"Second entry","href":"https://example.test/item/2"}]},"ok":true,"expected_task_pass":true}
+    ,{"id":"duplicated-native-link-label-cannot-prove-scope-ownership","category":"structured-extraction","root_cause":"native_answer_surface_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","entry_scope":{"html_selector":"main a[href]","start_pattern":"^Target list$","end_pattern":"^Footer$"}}},"artifact":"## Target list\nFirst entry\nSecond entry\n## Footer\nSee First entry for details","metadata":{"links":[{"text":"First entry","href":"https://example.test/item/1"},{"text":"Second entry","href":"https://example.test/item/2"}]},"ok":true,"expected_task_pass":false}
+    ,{"id":"embedded-cjk-link-label-cannot-prove-scope-ownership","category":"structured-extraction","root_cause":"native_answer_surface_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","entry_scope":{"html_selector":"main a[href]","start_pattern":"^Target list$","end_pattern":"^Footer$"}}},"artifact":"## Target list\n第一项\n第二项\n## Footer\n查看第一项详情","metadata":{"links":[{"text":"第一项","href":"https://example.test/item/1"},{"text":"第二项","href":"https://example.test/item/2"}]},"ok":true,"expected_task_pass":false}
+    ,{"id":"repeated-title-closes-description-card","category":"structured-extraction","root_cause":"repeated_title_card_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/catalog","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"cards","kind":"name_description","minimum_records":2,"start_pattern":"^# Catalog$","end_pattern":"^# End$"}]}},"artifact":"# Catalog\n\nAlpha film\n\nA complete first description.\n\nAlpha film\n\nBeta film\n\nA complete second description.\n\nBeta film\n\n# End","ok":true,"expected_task_pass":true}
+    ,{"id":"scope-outside-repeated-navigation-does-not-form-cards","category":"structured-extraction","root_cause":"repeated_title_card_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"cards","kind":"name_description","minimum_records":2,"start_pattern":"^# Catalog$","end_pattern":"^# End$"}]}},"artifact":"Home\n\nExplore everything we offer today.\n\nHome\n\nAbout\n\nLearn why customers choose us.\n\nAbout\n\n# Catalog\n\nAlpha film\n\nA complete first description.\n\nAlpha film\n\n# End","ok":true,"expected_task_pass":false}
+    ,{"id":"parenthesized-html-path-retains-identity","category":"structured-extraction","root_cause":"visible_html_link_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/base/","task_kind":"body","expected_any":["Directory"],"composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/base/foo\\(bar\\)"}]}},"artifact":"<h1>Directory</h1><a href=\"/base/foo(bar)\">Parenthesized</a>","ok":true,"expected_task_pass":true}
+    ,{"id":"unicode-html-path-retains-identity","category":"structured-extraction","root_cause":"visible_html_link_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/base/","task_kind":"body","expected_any":["Directory"],"composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/新闻/[0-9]+"}]}},"artifact":"<h1>Directory</h1><a href=\"/新闻/1\">News</a>","ok":true,"expected_task_pass":true}
+    ,{"id":"invalid-percent-bytes-do-not-become-unicode-path","category":"structured-extraction","root_cause":"visible_html_link_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/base/","task_kind":"body","expected_any":["Directory"],"composite_acceptance":{"version":1,"groups":[{"id":"entries","kind":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/(?:item/[0-9]+|bad/ÿ/tail)"}]}},"artifact":"<h1>Directory</h1><a href=\"/item/1\">Valid</a><a href=\"/bad/%FF%2Ftail\">Invalid bytes</a>","ok":true,"expected_task_pass":false}
+    ,{"id":"ascii-label-embedded-in-cjk-is-not-unique","category":"structured-extraction","root_cause":"native_answer_surface_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","entry_scope":{"html_selector":"main a[href]","start_pattern":"^Target list$","end_pattern":"^Footer$"}}},"artifact":"## Target list\nVIP\nSecond entry\n## Footer\n开通VIP会员","metadata":{"links":[{"text":"VIP","href":"https://example.test/item/1"},{"text":"Second entry","href":"https://example.test/item/2"}]},"ok":true,"expected_task_pass":false}
+    ,{"id":"scoped-heading-cards-own-their-detail-links","category":"structured-extraction","root_cause":"scoped_markdown_heading_card_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[],"source_record_pair_hashes":["a67480ffbdf4deb6ed7d059a67189bd970bf61ce06d7a2a99aaf4b9a2b113424","ef48a72c86de9cbea11c1a71f35a7c54d4a9b3aa8542a79420ad2699de07a9af"],"source_record_pairs_sha256":"b680579a61bf6e40124576f4bb02992bc94bf2e9b01133b31e3cb95e8d7d51e3","entry_scope":{"html_selector":"main article","start_pattern":"(?m)^# Target catalog$","end_pattern":"(?m)^# Footer$","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$","markdown_card_title_pattern":"(?m)^###\\s+(?P<title>[^\\n]+?)\\s*$"}}},"artifact":"# Target catalog\n\n### Alpha series\n\nA complete same-card summary.\n\n[Details](/item/alpha)\n\n### [Beta film](/item/beta)\n\nTwo seasons available.\n\n# Footer","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_record_count":2,"stable_task_pass":true}}
+    ,{"id":"scoped-heading-cards-cannot-borrow-across-cards","category":"structured-extraction","root_cause":"scoped_markdown_heading_card_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[],"source_record_pair_hashes":["a67480ffbdf4deb6ed7d059a67189bd970bf61ce06d7a2a99aaf4b9a2b113424","ef48a72c86de9cbea11c1a71f35a7c54d4a9b3aa8542a79420ad2699de07a9af"],"source_record_pairs_sha256":"b680579a61bf6e40124576f4bb02992bc94bf2e9b01133b31e3cb95e8d7d51e3","entry_scope":{"html_selector":"main article","start_pattern":"(?m)^# Target catalog$","end_pattern":"(?m)^# Footer$","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$","markdown_card_title_pattern":"(?m)^###\\s+(?P<title>[^\\n]+?)\\s*$"}}},"artifact":"# Target catalog\n\n### Alpha series\n\nA complete summary without its link.\n\n### Beta film\n\nA different card.\n\n[Details](/item/alpha)\n\n# Footer","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_record_count":0,"stable_task_pass":false}}
+    ,{"id":"scoped-heading-cards-stop-at-explicit-block-boundary","category":"structured-extraction","root_cause":"scoped_markdown_heading_card_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[],"entry_scope":{"html_selector":"main article","start_pattern":"(?m)^# Target catalog$","end_pattern":"(?m)^# Footer$","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$","markdown_card_title_pattern":"(?m)^###\\s+(?P<title>[^\\n]+?)\\s*$"}}},"artifact":"# Target catalog\n\n### Alpha series\n\nA complete same-card summary.\n\n---\n\n[Details](/item/alpha)\n\n# Footer","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_record_count":0,"stable_task_pass":false}}
+    ,{"id":"scoped-heading-cards-reject-wrong-detail-path","category":"structured-extraction","root_cause":"scoped_markdown_heading_card_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[],"entry_scope":{"html_selector":"main article","start_pattern":"(?m)^# Target catalog$","end_pattern":"(?m)^# Footer$","markdown_label_pattern":"(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$","markdown_card_title_pattern":"(?m)^###\\s+(?P<title>[^\\n]+?)\\s*$"}}},"artifact":"# Target catalog\n\n### Alpha series\n\nA complete same-card summary.\n\n[Details](/other/alpha)\n\n# Footer","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_record_count":0,"stable_task_pass":false}}
+    ,{"id":"scoped-boundary-decodes-one-character-reference-layer","category":"format-normalization","root_cause":"scoped_boundary_character_reference_projection","failure_mode":"false-negative","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[],"entry_scope":{"html_selector":"main a[href]","start_pattern":"(?m)^# Target & catalog$","end_pattern":"(?m)^# Footer$"}}},"artifact":"# Target &amp; catalog\n\n[Alpha series](/item/alpha)\n\n# Footer","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_record_count":1,"stable_task_pass":true}}
+    ,{"id":"scoped-boundary-keeps-double-encoded-reference-literal","category":"format-normalization","root_cause":"scoped_boundary_character_reference_projection","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[],"entry_scope":{"html_selector":"main a[href]","start_pattern":"(?m)^# Target & catalog$","end_pattern":"(?m)^# Footer$"}}},"artifact":"# Target &amp;amp; catalog\n\n[Alpha series](/item/alpha)\n\n# Footer","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_record_count":0,"stable_task_pass":false}}
+    ,{"id":"standalone-image-bounds-repeated-title-description-card","category":"structured-extraction","root_cause":"image_owned_repeated_title_card","failure_mode":"false-negative","case":{"url":"https://example.test/catalog","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"cards","kind":"name_description","minimum_records":2}]}},"artifact":"![](/alpha.jpg)\n\nVIP\n\nAlpha film\n\nA complete first description.\n\nAlpha film\n\n![](/beta.jpg)\n\nBeta film\n\nA complete second description.\n\nBeta film","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"unowned-or-cross-image-text-does-not-form-description-card","category":"structured-extraction","root_cause":"image_owned_repeated_title_card","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"cards","kind":"name_description","minimum_records":2}]}},"artifact":"Home\n\nNavigation summary.\n\nHome\n\n![](/alpha.jpg)\n\nAlpha film\n\n![](/beta.jpg)\n\nA complete first description.\n\nAlpha film\n\nBeta film","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"body-without-conditional-ui-control-passes","category":"acceptance-contract","root_cause":"conditional_ui_control_not_body_requirement","failure_mode":"false-negative","case":{"url":"https://example.test/article","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"publisher","alternatives":["Example Publisher"]},{"id":"article","alternatives":["The complete article body."]}]}},"artifact":"Example Publisher\nThe complete article body.","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}}
+    ,{"id":"conditional-ui-controls-cannot-replace-body","category":"acceptance-contract","root_cause":"conditional_ui_control_not_body_requirement","failure_mode":"false-positive","case":{"url":"https://example.test/article","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"publisher","alternatives":["Example Publisher"]},{"id":"article","alternatives":["The complete article body."]}]}},"artifact":"Log in\nTranslate","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}}
+    ,{"id":"declared-body-without-conditional-ui-control-passes","category":"acceptance-contract","root_cause":"conditional_ui_control_not_body_requirement","failure_mode":"false-negative","case":{"url":"https://example.test/project","task_kind":"body","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":1,"regions":[{"id":"readme","text":"Project identity and complete qualified README body."}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"conditional-action","alternatives":["Clone"]}]}},"artifact":"Project identity and complete qualified README body.","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true,"stable_anchors_required":false,"stable_anchor_hits":0,"body_coverage_pass":true}}
+    ,{"id":"conditional-ui-control-cannot-replace-declared-body","category":"acceptance-contract","root_cause":"conditional_ui_control_not_body_requirement","failure_mode":"false-positive","case":{"url":"https://example.test/project","task_kind":"body","body_requirements":{"version":3,"unit":"region_compact_hexagram_recall","minimum_coverage":0.8,"minimum_floor":0.6,"minimum_region_passes":1,"regions":[{"id":"readme","text":"Project identity and complete qualified README body."}]},"acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"stable_text_anchors":[{"id":"conditional-action","alternatives":["Clone"]}]}},"artifact":"Clone","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":true,"stable_anchors_required":false,"stable_anchor_hits":1,"body_coverage_pass":false}}
+    ,{"id":"archive-introduction-semantic-scope-passes","category":"acceptance-contract","root_cause":"archive_introduction_scope_not_legacy_ui_copy","failure_mode":"false-negative","case":{"url":"https://example.test/archive","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"page_patterns":["(?is)\\bibiblio(?:\\.org)?\\b.{0,500}\\b(?:collections? of collections|public digital (?:library|archive)|digital (?:library|archive|repository))\\b.{0,700}\\b(?:freely available information|free(?:ly)? available (?:digital )?(?:information|resources|collections))\\b.{0,700}\\b(?:software|music|literature|art|history|science|politics|cultural studies)\\b.{0,700}\\b(?:UNC|University of North Carolina(?: at|-)? Chapel Hill)\\b"],"stable_text_anchors":[{"id":"legacy-navigation","alternatives":["Logos"]}]}},"artifact":"ibiblio.org is a public digital library and a collection of collections. It preserves freely available information spanning software, music, literature, art, history, science, politics, and cultural studies. The archive is a collaboration with the University of North Carolina at Chapel Hill.","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true,"stable_anchors_required":false,"stable_anchor_hits":0}}
+    ,{"id":"archive-news-and-footer-cannot-replace-introduction","category":"acceptance-contract","root_cause":"archive_introduction_scope_not_legacy_ui_copy","failure_mode":"false-positive","case":{"url":"https://example.test/archive","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"page_patterns":["(?is)\\bibiblio(?:\\.org)?\\b.{0,500}\\b(?:collections? of collections|public digital (?:library|archive)|digital (?:library|archive|repository))\\b.{0,700}\\b(?:freely available information|free(?:ly)? available (?:digital )?(?:information|resources|collections))\\b.{0,700}\\b(?:software|music|literature|art|history|science|politics|cultural studies)\\b.{0,700}\\b(?:UNC|University of North Carolina(?: at|-)? Chapel Hill)\\b"],"stable_text_anchors":[{"id":"legacy-navigation","alternatives":["Logos"]}]}},"artifact":"ibiblio News\\nFirst update\\nSecond update\\nThird update\\nLogos\\nHosted by UNC Chapel Hill","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false,"stable_anchors_required":false,"stable_anchor_hits":1}}
+    ,{"id":"wrong-archive-identity-cannot-satisfy-introduction","category":"acceptance-contract","root_cause":"archive_introduction_scope_not_legacy_ui_copy","failure_mode":"false-positive","case":{"url":"https://example.test/archive","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"page_patterns":["(?is)\\bibiblio(?:\\.org)?\\b.{0,500}\\b(?:collections? of collections|public digital (?:library|archive)|digital (?:library|archive|repository))\\b.{0,700}\\b(?:freely available information|free(?:ly)? available (?:digital )?(?:information|resources|collections))\\b.{0,700}\\b(?:software|music|literature|art|history|science|politics|cultural studies)\\b.{0,700}\\b(?:UNC|University of North Carolina(?: at|-)? Chapel Hill)\\b"],"stable_text_anchors":[{"id":"legacy-navigation","alternatives":["Logos"]}]}},"artifact":"Another Archive is a public digital library and collection of collections with freely available information about software, music, literature, art, history, science, politics, and cultural studies. It works with UNC Chapel Hill.","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false,"stable_anchors_required":false,"stable_anchor_hits":0}}
+    ,{"id":"archive-identity-without-topical-introduction-fails","category":"acceptance-contract","root_cause":"archive_introduction_scope_not_legacy_ui_copy","failure_mode":"false-positive","case":{"url":"https://example.test/archive","task_kind":"body","acceptance_contract":{"version":1,"schema":"body_text","stable_text_role":"diagnostic","minimum_records":0,"page_patterns":["(?is)\\bibiblio(?:\\.org)?\\b.{0,500}\\b(?:collections? of collections|public digital (?:library|archive)|digital (?:library|archive|repository))\\b.{0,700}\\b(?:freely available information|free(?:ly)? available (?:digital )?(?:information|resources|collections))\\b.{0,700}\\b(?:software|music|literature|art|history|science|politics|cultural studies)\\b.{0,700}\\b(?:UNC|University of North Carolina(?: at|-)? Chapel Hill)\\b"],"stable_text_anchors":[{"id":"legacy-navigation","alternatives":["Logos"]}]}},"artifact":"ibiblio.org is hosted with UNC Chapel Hill. Browse Logos and the latest news.","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false,"stable_anchors_required":false,"stable_anchor_hits":1}}
+    ,{"id":"scoped-image-title-description-cards-count-once","category":"structured-extraction","root_cause":"overlapping_card_ownership_routes","failure_mode":"false-negative","case":{"url":"https://example.test/catalog","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"cards","kind":"name_description","minimum_records":2,"start_pattern":"^# Catalog$","end_pattern":"^# End$"}]}},"artifact":"# Catalog\n\n![](/alpha.jpg)\n\nAlpha film\n\nA complete first description.\n\nAlpha film\n\n![](/beta.jpg)\n\nBeta film\n\nA complete second description.\n\nBeta film\n\n# End","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"scoped-image-title-description-cards-require-distinct-records","category":"structured-extraction","root_cause":"overlapping_card_ownership_routes","failure_mode":"false-positive","case":{"url":"https://example.test/catalog","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"cards","kind":"name_description","minimum_records":2,"start_pattern":"^# Catalog$","end_pattern":"^# End$"}]}},"artifact":"# Catalog\n\n![](/alpha.jpg)\n\nAlpha film\n\nA complete first description.\n\nAlpha film\n\n# End","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"nested-image-accessible-names-identify-linked-records","category":"structured-extraction","root_cause":"nested_image_accessible_link_name","failure_mode":"false-negative","case":{"url":"https://example.test/","task_kind":"structure","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[]}},"artifact":"[![Alpha device](/images/alpha.jpg)](/item/alpha)\n[![Beta device](/images/beta.jpg)](/item/beta)","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_unique_record_count":2,"stable_task_pass":true}}
+    ,{"id":"empty-or-generic-image-alt-is-not-a-linked-record-name","category":"structured-extraction","root_cause":"nested_image_accessible_link_name","failure_mode":"false-positive","case":{"url":"https://example.test/","task_kind":"structure","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[]}},"artifact":"[![](/images/alpha.jpg)](/item/alpha)\n[![Product image](/images/beta.jpg)](/item/beta)","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_unique_record_count":0,"stable_task_pass":false}}
+    ,{"id":"same-line-labeled-fields-remain-distinct","category":"structured-extraction","root_cause":"same_line_labeled_field_spans","failure_mode":"false-negative","case":{"url":"https://example.test/news","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"news","kind":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"published","kind":"date_or_time","aliases":["Published"]},{"id":"comments","kind":"integer","aliases":["Comments"]}]}]}},"artifact":"[First](/item/1)\nPublished: Tue 08:30 UTC Comments: 0\n[Second](/item/2)\nPublished: Wed 09:45 UTC Comments: 3","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"empty-same-line-field-cannot-borrow-from-adjacent-record","category":"structured-extraction","root_cause":"same_line_labeled_field_spans","failure_mode":"false-positive","case":{"url":"https://example.test/news","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"news","kind":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"published","kind":"date_or_time","aliases":["Published"]},{"id":"comments","kind":"integer","aliases":["Comments"]}]}]}},"artifact":"[First](/item/1)\nPublished: Tue 08:30 UTC Comments:\n[Second](/item/2)\nPublished: Wed 09:45 UTC Comments: 3","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"linearized-linked-table-preserves-owned-records","category":"structured-extraction","root_cause":"linearized_linked_table_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/repos","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"repositories","kind":"linked_table","minimum_records":2,"hosts":["example.test"],"entry_path":"/repo/[a-z]+","required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"description","kind":"text","aliases":["Description"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","link_column":"name"}]}},"artifact":"[Name](/sort/name)\n[Description](/sort/description)\n[Owner](/sort/owner)\n\n[alpha](/repo/alpha)\n[Alpha summary](/repo/alpha)\n[Alice](/owner/alice)\n\n[beta](/repo/beta)\n[Beta summary](/repo/beta)\n[Bob](/owner/bob)","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"linearized-linked-table-cannot-borrow-next-record-owner","category":"structured-extraction","root_cause":"linearized_linked_table_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/repos","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"repositories","kind":"linked_table","minimum_records":3,"hosts":["example.test"],"entry_path":"/repo/[a-z]+","required_columns":[{"id":"name","kind":"text","aliases":["Name"]},{"id":"description","kind":"text","aliases":["Description"]},{"id":"owner","kind":"text","aliases":["Owner"]}],"identity_column":"name","link_column":"name"}]}},"artifact":"[Name](/sort/name)\n[Description](/sort/description)\n[Owner](/sort/owner)\n\n[alpha](/repo/alpha)\n[Alpha summary](/repo/alpha)\n[Alice](/owner/alice)\n\n[beta](/repo/beta)\n[Beta summary](/repo/beta)\n\n[gamma](/repo/gamma)\n[Gamma summary](/repo/gamma)\n[Grace](/owner/grace)","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"owned-specific-image-alt-is-an-accessible-record-name","category":"structured-extraction","root_cause":"nested_image_accessible_link_name","failure_mode":"false-negative","case":{"url":"https://example.test/list","task_kind":"body","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/\\d+","name_validation":"nonempty"}},"artifact":"[![Actual title](/logo.png)](/item/1)","ok":true,"expected_task_pass":true}
+    ,{"id":"standalone-field-label-cannot-use-the-next-label-as-value","category":"structured-extraction","root_cause":"same_line_labeled_field_spans","failure_mode":"false-positive","case":{"url":"https://example.test/news","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"news","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"publisher","kind":"text","aliases":["Publisher"]},{"id":"comments","kind":"integer","aliases":["Comments"]}]}]}},"artifact":"[First](/item/1)\nPublisher\nComments: 3","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"duplicate-field-labels-cannot-reuse-one-following-value","category":"structured-extraction","root_cause":"same_line_labeled_field_spans","failure_mode":"false-positive","case":{"url":"https://example.test/news","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"news","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"first","kind":"integer","aliases":["Count"]},{"id":"second","kind":"integer","aliases":["Count"]}]}]}},"artifact":"[First](/item/1)\nCount\n3","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"generic-cover-and-poster-alt-does-not-identify-a-record","category":"structured-extraction","root_cause":"nested_image_accessible_link_name","failure_mode":"false-positive","case":{"url":"https://example.test/","task_kind":"structure","acceptance_contract":{"version":1,"schema":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[a-z]+","stable_text_anchors":[]}},"artifact":"[![Poster](/images/generic.jpg)](/item/alpha)\n[![Cover](/images/generic.jpg)](/item/beta)\n[![封面](/images/generic.jpg)](/item/gamma)\n[![商品图片](/images/generic.jpg)](/item/delta)","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_unique_record_count":0,"stable_task_pass":false}}
+    ,{"id":"unpunctuated-labeled-fields-on-independent-lines","category":"structured-extraction","root_cause":"same_line_labeled_field_spans","failure_mode":"false-negative","case":{"url":"https://example.test/news","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"news","kind":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"published","kind":"date_or_time","aliases":["Published"]},{"id":"comments","kind":"integer","aliases":["Comments"]}]}]}},"artifact":"[First](/item/1)\nPublished Tue 08:30 UTC\nComments 0\n[Second](/item/2)\nPublished Wed 09:45 UTC\nComments 3","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"unpunctuated-label-without-value-cannot-borrow-next-field","category":"structured-extraction","root_cause":"same_line_labeled_field_spans","failure_mode":"false-positive","case":{"url":"https://example.test/news","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"news","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"publisher","kind":"text","aliases":["Publisher"]},{"id":"comments","kind":"integer","aliases":["Comments"]}]}]}},"artifact":"[First](/item/1)\nPublisher\nComments 3","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"markdown-field-report-cells-own-canonical-fixed-values","category":"structured-extraction","root_cause":"markdown_field_cell_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/report","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"report","kind":"field_report","required_fields":[{"id":"page_id","kind":"integer","aliases":["ID"]},{"id":"wikidata","kind":"text","aliases":["Wikidata ID"],"pattern":"Q[0-9]+"},{"id":"pageviews","kind":"integer","aliases":["Pageviews"]}],"fixed_values":{"page_id":"1164","wikidata":"Q11660","pageviews":"567652"}}]}},"artifact":"|  |  |\n| --- | --- |\n| ID | [1164](/page/1164) |\n| Wikidata ID | [Q11660](/entity/Q11660) · 214 sitelinks |\n| Pageviews (30 days) | [567,652](/views) |","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"markdown-field-report-cannot-borrow-fixed-value-from-comment","category":"structured-extraction","root_cause":"markdown_field_cell_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/report","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"report","kind":"field_report","required_fields":[{"id":"page_id","kind":"integer","aliases":["ID"]},{"id":"wikidata","kind":"text","aliases":["Wikidata ID"],"pattern":"Q[0-9]+"},{"id":"pageviews","kind":"integer","aliases":["Pageviews"]}],"fixed_values":{"page_id":"1164","wikidata":"Q11660","pageviews":"567652"}}]}},"artifact":"|  |  |\n| --- | --- |\n| ID | 999 |\n| Wikidata ID | [Q11660](/entity/Q11660) · 214 sitelinks; unrelated note 1164 |\n| Pageviews (30 days) | [567,652](/views) |","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"scoped-field-report-reads-declared-prose-subfields","category":"structured-extraction","root_cause":"field_report_section_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/report","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"prose","kind":"field_report","start_pattern":"^Prose$","end_pattern":"^Registered edits$","required_fields":[{"id":"words","kind":"integer","aliases":["Words"]},{"id":"references","kind":"integer","aliases":["References"]}]}]}},"artifact":"Other section\nBytes\n999999\nProse\nBytes\n84958\nWords\n12599\nReferences\n558\nRegistered edits","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"scoped-field-report-cannot-replace-words-with-unrelated-bytes","category":"structured-extraction","root_cause":"field_report_section_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/report","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"prose","kind":"field_report","start_pattern":"^Prose$","end_pattern":"^Registered edits$","required_fields":[{"id":"words","kind":"integer","aliases":["Words"]},{"id":"references","kind":"integer","aliases":["References"]}]}]}},"artifact":"Other section\nWords\n999999\nProse\nBytes\n84958\nReferences\n558\nRegistered edits","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"dashed-labeled-fields-retain-supported-separator","category":"structured-extraction","root_cause":"same_line_labeled_field_spans","failure_mode":"false-negative","case":{"url":"https://example.test/news","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"news","kind":"named_link","minimum_records":2,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"published","kind":"date_or_time","aliases":["Published"]},{"id":"comments","kind":"integer","aliases":["Comments"]}]}]}},"artifact":"[First](/item/1)\nPublished - Tue 08:30 UTC\nComments - 0\n[Second](/item/2)\nPublished - Wed 09:45 UTC\nComments - 3","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"field-report-explicit-fields-may-share-one-line","category":"structured-extraction","root_cause":"declared_field_span_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/report","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"report","kind":"field_report","required_fields":[{"id":"page_id","kind":"integer","aliases":["ID"]},{"id":"wikidata","kind":"text","aliases":["Wikidata ID"],"pattern":"Q[0-9]+"}],"fixed_values":{"page_id":"1164","wikidata":"Q11660"}}]}},"artifact":"ID: 1164 Wikidata ID: Q11660","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"longer-declared-label-does-not-satisfy-suffix-alias","category":"structured-extraction","root_cause":"declared_field_span_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/report","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"report","kind":"field_report","required_fields":[{"id":"page_id","kind":"integer","aliases":["ID"]}],"fixed_values":{"page_id":"1164"}}]}},"artifact":"Wikidata ID: Q1164 · 214 sitelinks","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"field-report-scope-accepts-plain-and-markdown-heading-boundaries","category":"structured-extraction","root_cause":"field_report_section_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/report","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"general","kind":"field_report","start_pattern":"^(?:#{1,6}\\s*)?General statistics(?:\\s+(?:\\\\)?\\[(?:show|hide)(?:\\\\)?\\])*$","end_pattern":"^(?:#{1,6}\\s*)?Prose\\s*$","required_fields":[{"id":"page_id","kind":"integer","aliases":["ID"]}],"fixed_values":{"page_id":"1164"}},{"id":"prose","kind":"field_report","start_pattern":"^(?:#{1,6}\\s*)?Prose\\s*$","end_pattern":"^(?:#{1,6}\\s*)?Registered edits(?:\\s*(?:·|:|[-–—])\\s*.*)?$","required_fields":[{"id":"words","kind":"integer","aliases":["Words"]},{"id":"references","kind":"integer","aliases":["References"]}]}]}},"artifact":"General statistics\nNavigation only\n#### General statistics \\[show\\] \\[hide\\]\nID | 1164\n##Prose\nBytes 84958\nWords 12599\nReferences 558\n###Registered edits · 100\nWords 999999","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"field-report-scope-requires-declared-semantic-end-boundary","category":"structured-extraction","root_cause":"field_report_section_ownership","failure_mode":"false-positive","case":{"url":"https://example.test/report","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"prose","kind":"field_report","start_pattern":"^(?:#{1,6}\\s*)?Prose\\s*$","end_pattern":"^(?:#{1,6}\\s*)?Registered edits(?:\\s*(?:·|:|[-–—])\\s*.*)?$","required_fields":[{"id":"words","kind":"integer","aliases":["Words"]},{"id":"references","kind":"integer","aliases":["References"]}]}]}},"artifact":"# Prose\nBytes 84958\nReferences 558\nRegistered editors\nWords 12599","ok":true,"expected_task_pass":false,"expected_metrics":{"composite_acceptance_pass":false}}
+    ,{"id":"field-value-equal-to-label-consumes-owned-span","category":"structured-extraction","root_cause":"declared_field_span_ownership","failure_mode":"false-negative","case":{"url":"https://example.test/items","task_kind":"body","composite_acceptance":{"version":1,"groups":[{"id":"items","kind":"named_link","minimum_records":1,"hosts":["example.test"],"entry_path":"/item/[0-9]+","required_fields":[{"id":"owner","kind":"text","aliases":["Owner"]},{"id":"comments","kind":"integer","aliases":["Comments"]}]}]}},"artifact":"[First](/item/1)\nOwner: Owner Comments: 3","ok":true,"expected_task_pass":true,"expected_metrics":{"composite_acceptance_pass":true}}
+    ,{"id":"complete-official-homepage-body-passes","category":"acceptance-contract","root_cause":"complete_official_homepage_body_scope","failure_mode":"false-negative","case":{"url":"https://example.test/en","track":"challenge","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"hero","alternatives":["Complete official platform introduction"]},{"id":"platform","alternatives":["AI platform details"]},{"id":"models","alternatives":["Model catalog details"]},{"id":"products","alternatives":["Cloud product descriptions"]},{"id":"trial","alternatives":["Free trial details"]},{"id":"solutions","alternatives":["Industry solution details"]},{"id":"customers","alternatives":["Customer evidence"]},{"id":"analysts","alternatives":["Independent analyst recognition"]},{"id":"infrastructure","alternatives":["Global infrastructure footprint"]},{"id":"compliance","alternatives":["Security and compliance details"]}]}},"artifact":"Complete official platform introduction\nAI platform details\nModel catalog details\nCloud product descriptions\nFree trial details\nIndustry solution details\nCustomer evidence\nIndependent analyst recognition\nGlobal infrastructure footprint\nSecurity and compliance details","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}}
+    ,{"id":"homepage-navigation-and-brand-shell-do-not-pass","category":"acceptance-contract","root_cause":"complete_official_homepage_body_scope","failure_mode":"false-positive","case":{"url":"https://example.test/en","track":"challenge","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"hero","alternatives":["Complete official platform introduction"]},{"id":"platform","alternatives":["AI platform details"]},{"id":"models","alternatives":["Model catalog details"]},{"id":"products","alternatives":["Cloud product descriptions"]},{"id":"trial","alternatives":["Free trial details"]},{"id":"solutions","alternatives":["Industry solution details"]},{"id":"customers","alternatives":["Customer evidence"]},{"id":"analysts","alternatives":["Independent analyst recognition"]},{"id":"infrastructure","alternatives":["Global infrastructure footprint"]},{"id":"compliance","alternatives":["Security and compliance details"]}]}},"artifact":"Example Cloud\nProducts\nSolutions\nPricing\nResources\nDocs\nConsole\nLogin\nFree Trial","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}}
+    ,{"id":"m365-single-current-reference-body-passes","category":"acceptance-contract","root_cause":"versioned_homepage_reference_alternatives","failure_mode":"false-negative","case":{"url":"https://example.test/en/","track":"challenge","task_kind":"structure","min_content_chars":1,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"stable-anchor-1","alternatives":["Work smarter across Microsoft 365"]},{"id":"stable-anchor-2","alternatives":["AI in Microsoft 365 helps you create, summarize, and find information across your work."]},{"id":"stable-anchor-3","alternatives":["Popular prompts to try"]},{"id":"stable-anchor-4","alternatives":["Jump into your favorite app"]},{"id":"stable-anchor-5","alternatives":["Bring Copilot and your work together in a focused desktop experience."]}]}},"artifact":"Work smarter across Microsoft 365\nAI in Microsoft 365 helps you create, summarize, and find information across your work.\nPopular prompts to try\nJump into your favorite app\nBring Copilot and your work together in a focused desktop experience.","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}}
+    ,{"id":"m365-single-current-reference-rejects-retired-introduction","category":"acceptance-contract","root_cause":"versioned_homepage_reference_alternatives","failure_mode":"false-positive","case":{"url":"https://example.test/en/","track":"challenge","task_kind":"structure","min_content_chars":1,"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"stable-anchor-1","alternatives":["Work smarter across Microsoft 365"]},{"id":"stable-anchor-2","alternatives":["AI in Microsoft 365 helps you create, summarize, and find information across your work."]},{"id":"stable-anchor-3","alternatives":["Popular prompts to try"]},{"id":"stable-anchor-4","alternatives":["Jump into your favorite app"]},{"id":"stable-anchor-5","alternatives":["Bring Copilot and your work together in a focused desktop experience."]}]}},"artifact":"Work smarter across Microsoft 365\nSign in to create, collaborate, and move your work forward with Copilot in Microsoft 365.\nPopular prompts to try\nJump into your favorite app\nBring Copilot and your work together in a focused desktop experience.","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}},
+    {"id":"frozen-localized-homepage-anchor-passes","category":"reference-evidence","root_cause":"unobserved_locale_alternative","failure_mode":"false-negative","case":{"url":"https://example.test/","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"identity","alternatives":["Official product identity"]},{"id":"localized-action","alternatives":["下载"]},{"id":"footer","alternatives":["隐私政策"]}]}},"artifact":"Official product identity\n下载\n隐私政策","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}},
+    {"id":"other-locale-homepage-copy-does-not-pass","category":"reference-evidence","root_cause":"unobserved_locale_alternative","failure_mode":"false-positive","case":{"url":"https://example.test/","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"identity","alternatives":["Official product identity"]},{"id":"localized-action","alternatives":["下载"]},{"id":"footer","alternatives":["隐私政策"]}]}},"artifact":"Official product identity\nDownload\n隐私政策","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}},
+    {"id":"source-attested-homepage-label-passes","category":"reference-evidence","root_cause":"unobserved_semantic_rewording","failure_mode":"false-negative","case":{"url":"https://example.test/","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"identity","alternatives":["企业协作平台"]},{"id":"cases","alternatives":["查看案例"]},{"id":"support","alternatives":["帮助中心"]}]}},"artifact":"企业协作平台\n查看案例\n帮助中心","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}},
+    {"id":"unattested-homepage-rewording-does-not-pass","category":"reference-evidence","root_cause":"unobserved_semantic_rewording","failure_mode":"false-positive","case":{"url":"https://example.test/","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"identity","alternatives":["企业协作平台"]},{"id":"cases","alternatives":["查看案例"]},{"id":"support","alternatives":["帮助中心"]}]}},"artifact":"企业协作平台\n了解更多客户案例\n帮助中心","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}},
+    {"id":"first-load-mixed-language-controls-pass","category":"reference-evidence","root_cause":"interactive_locale_state_added_to_no_interaction_contract","failure_mode":"false-negative","case":{"url":"https://example.test/training","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"title","alternatives":["中文训练题单"]},{"id":"table","alternatives":["题目","Problem"]},{"id":"navigation","alternatives":["首页"]}]}},"artifact":"中文训练题单\nProblem\n首页","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}},
+    {"id":"clicked-locale-navigation-does-not-pass-first-load-contract","category":"reference-evidence","root_cause":"interactive_locale_state_added_to_no_interaction_contract","failure_mode":"false-positive","case":{"url":"https://example.test/training","task_kind":"structure","acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"title","alternatives":["中文训练题单"]},{"id":"table","alternatives":["题目","Problem"]},{"id":"navigation","alternatives":["首页"]}]}},"artifact":"中文训练题单\nProblem\nHome","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}},
+    {"id":"same-document-required-links-both-pass","category":"acceptance-contract","root_cause":"independent_same_document_facts_encoded_as_alternatives","failure_mode":"false-negative","case":{"url":"https://example.test/climate","task_kind":"body","required_facts":[{"id":"purpose","alternatives":["Climate information"]},{"id":"drought","alternatives":["Drought.gov"]},{"id":"heat","alternatives":["Heat.gov"]}],"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"purpose","alternatives":["Climate information"]},{"id":"drought","alternatives":["Drought.gov"]},{"id":"heat","alternatives":["Heat.gov"]}]}},"artifact":"Climate information\nDrought.gov\nHeat.gov","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}},
+    {"id":"one-of-two-same-document-links-does-not-pass","category":"acceptance-contract","root_cause":"independent_same_document_facts_encoded_as_alternatives","failure_mode":"false-positive","case":{"url":"https://example.test/climate","task_kind":"body","required_facts":[{"id":"purpose","alternatives":["Climate information"]},{"id":"drought","alternatives":["Drought.gov"]},{"id":"heat","alternatives":["Heat.gov"]}],"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"purpose","alternatives":["Climate information"]},{"id":"drought","alternatives":["Drought.gov"]},{"id":"heat","alternatives":["Heat.gov"]}]}},"artifact":"Climate information\nDrought.gov","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}},
+    {"id":"source-attested-purpose-statement-passes","category":"reference-evidence","root_cause":"partial_stem_and_unattested_paraphrase_as_fact","failure_mode":"false-negative","case":{"url":"https://example.test/docs","task_kind":"body","required_facts":[{"id":"tool","alternatives":["web_fetch"]},{"id":"input","alternatives":["HTTP/HTTPS URL"]},{"id":"purpose","alternatives":["获取网页或文档内容","获取 HTTP/HTTPS URL 的内容","获取网页的文本内容"]}],"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"tool","alternatives":["web_fetch"]},{"id":"input","alternatives":["HTTP/HTTPS URL"]},{"id":"purpose","alternatives":["获取网页或文档内容","获取 HTTP/HTTPS URL 的内容","获取网页的文本内容"]}]}},"artifact":"web_fetch\nHTTP/HTTPS URL\n获取网页或文档内容","ok":true,"expected_task_pass":true,"expected_metrics":{"stable_task_pass":true}},
+    {"id":"purpose-stem-or-unattested-paraphrase-does-not-pass","category":"reference-evidence","root_cause":"partial_stem_and_unattested_paraphrase_as_fact","failure_mode":"false-positive","case":{"url":"https://example.test/docs","task_kind":"body","required_facts":[{"id":"tool","alternatives":["web_fetch"]},{"id":"input","alternatives":["HTTP/HTTPS URL"]},{"id":"purpose","alternatives":["获取网页或文档内容","获取 HTTP/HTTPS URL 的内容","获取网页的文本内容"]}],"acceptance_contract":{"version":1,"schema":"body_text","minimum_records":0,"stable_text_anchors":[{"id":"tool","alternatives":["web_fetch"]},{"id":"input","alternatives":["HTTP/HTTPS URL"]},{"id":"purpose","alternatives":["获取网页或文档内容","获取 HTTP/HTTPS URL 的内容","获取网页的文本内容"]}]}},"artifact":"web_fetch\nHTTP/HTTPS URL\n网页正文\n获取网页","ok":true,"expected_task_pass":false,"expected_metrics":{"stable_task_pass":false}},
+    {
+        "id": "random-header-tagline-does-not-replace-stable-contract",
+        "category": "acceptance-contract",
+        "root_cause": "server_selected_random_header_tagline_frozen_as_stable_text",
+        "failure_mode": "false-negative",
+        "case": {
+            "url": "https://example.test/community",
+            "task_kind": "structure",
+            "acceptance_contract": {
+                "version": 1,
+                "schema": "body_text",
+                "minimum_records": 0,
+                "stable_text_anchors": [
+                    {
+                        "id": "identity",
+                        "alternatives": [
+                            "Community Archive"
+                        ]
+                    },
+                    {
+                        "id": "purpose",
+                        "alternatives": [
+                            "Original fiction and fanworks"
+                        ]
+                    },
+                    {
+                        "id": "browse",
+                        "alternatives": [
+                            "Browse Works"
+                        ]
+                    }
+                ]
+            }
+        },
+        "artifact": "Community Archive\nA randomly selected greeting\nOriginal fiction and fanworks\nBrowse Works",
+        "ok": true,
+        "expected_task_pass": true,
+        "expected_metrics": {
+            "stable_task_pass": true
+        }
+    },
+    {
+        "id": "random-header-tagline-still-requires-body-purpose",
+        "category": "acceptance-contract",
+        "root_cause": "server_selected_random_header_tagline_frozen_as_stable_text",
+        "failure_mode": "false-positive",
+        "case": {
+            "url": "https://example.test/community",
+            "task_kind": "structure",
+            "acceptance_contract": {
+                "version": 1,
+                "schema": "body_text",
+                "minimum_records": 0,
+                "stable_text_anchors": [
+                    {
+                        "id": "identity",
+                        "alternatives": [
+                            "Community Archive"
+                        ]
+                    },
+                    {
+                        "id": "purpose",
+                        "alternatives": [
+                            "Original fiction and fanworks"
+                        ]
+                    },
+                    {
+                        "id": "browse",
+                        "alternatives": [
+                            "Browse Works"
+                        ]
+                    }
+                ]
+            }
+        },
+        "artifact": "Community Archive\nA randomly selected greeting\nBrowse Works",
+        "ok": true,
+        "expected_task_pass": false,
+        "expected_metrics": {
+            "stable_task_pass": false
+        }
+    },
+    {
+        "id": "escaped-literal-bang-before-link-preserves-visible-title",
+        "category": "acceptance-contract",
+        "root_cause": "escaped_literal_bang_before_link_misclassified_as_image",
+        "failure_mode": "false-negative",
+        "case": {
+            "url": "https://example.test/project",
+            "task_kind": "body",
+            "acceptance_contract": {
+                "version": 1,
+                "schema": "body_text",
+                "minimum_records": 0,
+                "stable_text_anchors": [
+                    {
+                        "id": "title",
+                        "alternatives": [
+                            "OpenWrt wants you!"
+                        ]
+                    }
+                ]
+            }
+        },
+        "artifact": "OpenWrt wants you\\![Join the project](#join)",
+        "ok": true,
+        "expected_task_pass": true,
+        "expected_metrics": {
+            "stable_task_pass": true
+        }
+    },
+    {
+        "id": "even-escaped-image-alt-does-not-fabricate-body-title",
+        "category": "acceptance-contract",
+        "root_cause": "escaped_literal_bang_before_link_misclassified_as_image",
+        "failure_mode": "false-positive",
+        "case": {
+            "url": "https://example.test/project",
+            "task_kind": "body",
+            "acceptance_contract": {
+                "version": 1,
+                "schema": "body_text",
+                "minimum_records": 0,
+                "stable_text_anchors": [
+                    {
+                        "id": "title",
+                        "alternatives": [
+                            "Required body title"
+                        ]
+                    }
+                ]
+            }
+        },
+        "artifact": "Introductory body\\\\![Required body title](avatar.png)",
+        "ok": true,
+        "expected_task_pass": false,
+        "expected_metrics": {
+            "stable_task_pass": false
+        }
+    },
+    {
+        "id": "escaped-link-does-not-supply-an-absent-second-title",
+        "category": "acceptance-contract",
+        "root_cause": "escaped_literal_bang_before_link_misclassified_as_image",
+        "failure_mode": "false-positive",
+        "case": {
+            "url": "https://example.test/project",
+            "task_kind": "body",
+            "acceptance_contract": {
+                "version": 1,
+                "schema": "body_text",
+                "minimum_records": 0,
+                "stable_text_anchors": [
+                    {
+                        "id": "visible-link-title",
+                        "alternatives": [
+                            "OpenWrt wants you!"
+                        ]
+                    },
+                    {
+                        "id": "required-body-title",
+                        "alternatives": [
+                            "Required body title"
+                        ]
+                    }
+                ]
+            }
+        },
+        "artifact": "OpenWrt wants you\\![Join the project](#join)",
+        "ok": true,
+        "expected_task_pass": false,
+        "expected_metrics": {
+            "stable_task_pass": false
+        }
+    },
+    {
+        "id": "ordinary-image-alt-does-not-fabricate-body-title",
+        "category": "acceptance-contract",
+        "root_cause": "escaped_literal_bang_before_link_misclassified_as_image",
+        "failure_mode": "false-positive",
+        "case": {
+            "url": "https://example.test/project",
+            "task_kind": "body",
+            "acceptance_contract": {
+                "version": 1,
+                "schema": "body_text",
+                "minimum_records": 0,
+                "stable_text_anchors": [
+                    {
+                        "id": "title",
+                        "alternatives": [
+                            "Required body title"
+                        ]
+                    }
+                ]
+            }
+        },
+        "artifact": "![Required body title](avatar.png)",
+        "ok": true,
+        "expected_task_pass": false,
+        "expected_metrics": {
+            "stable_task_pass": false
+        }
+    },
+    {
+      "id": "body-heading-does-not-require-joined-navigation",
+      "category": "acceptance-contract",
+      "root_cause": "stable_anchor_concatenates_unrelated_navigation_and_body_heading",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/packages",
+        "task_kind": "structure",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "heading",
+              "alternatives": [
+                "Package Search"
+              ]
+            },
+            {
+              "id": "criteria",
+              "alternatives": [
+                "Enter search criteria"
+              ]
+            }
+          ]
+        }
+      },
+      "artifact": "# Package Search\nEnter search criteria\nArch Repository Keywords",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "stable_task_pass": true
+      }
+    },
+    {
+      "id": "navigation-alone-does-not-replace-body-heading",
+      "category": "acceptance-contract",
+      "root_cause": "stable_anchor_concatenates_unrelated_navigation_and_body_heading",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/packages",
+        "task_kind": "structure",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "heading",
+              "alternatives": [
+                "Package Search"
+              ]
+            },
+            {
+              "id": "criteria",
+              "alternatives": [
+                "Enter search criteria"
+              ]
+            }
+          ]
+        }
+      },
+      "artifact": "[Arch Linux Official](https://example.test/project)\nEnter search criteria\nArch Repository Keywords",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "stable_task_pass": false
+      }
+    }
+,
+    {
+      "id": "dotted-month-news-date",
+      "category": "format-normalization",
+      "root_cause": "english_abbreviated_month_punctuation",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/news",
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "news",
+              "kind": "named_link",
+              "minimum_records": 1,
+              "hosts": [
+                "example.test"
+              ],
+              "entry_path": "/item/[0-9]+",
+              "required_fields": [
+                {
+                  "id": "published",
+                  "kind": "date_or_time"
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "artifact": "[Article](https://example.test/item/1)\nOct. 14, 2026\n",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "composite_acceptance_pass": true
+      }
+    },
+    {
+      "id": "unpunctuated-month-news-date",
+      "category": "format-normalization",
+      "root_cause": "english_abbreviated_month_punctuation",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/news",
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "news",
+              "kind": "named_link",
+              "minimum_records": 1,
+              "hosts": [
+                "example.test"
+              ],
+              "entry_path": "/item/[0-9]+",
+              "required_fields": [
+                {
+                  "id": "published",
+                  "kind": "date_or_time"
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "artifact": "[Article](https://example.test/item/1)\nOct 14, 2026\n",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "composite_acceptance_pass": true
+      }
+    },
+    {
+      "id": "day-first-dotted-month-news-date",
+      "category": "format-normalization",
+      "root_cause": "english_abbreviated_month_punctuation",
+      "failure_mode": "false-negative",
+      "case": {
+        "url": "https://example.test/news",
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "news",
+              "kind": "named_link",
+              "minimum_records": 1,
+              "hosts": [
+                "example.test"
+              ],
+              "entry_path": "/item/[0-9]+",
+              "required_fields": [
+                {
+                  "id": "published",
+                  "kind": "date_or_time"
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "artifact": "[Article](https://example.test/item/1)\n14 Oct. 2026\n",
+      "ok": true,
+      "expected_task_pass": true,
+      "expected_metrics": {
+        "composite_acceptance_pass": true
+      }
+    },
+    {
+      "id": "month-name-without-day-is-not-news-date",
+      "category": "format-normalization",
+      "root_cause": "english_abbreviated_month_punctuation",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/news",
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "news",
+              "kind": "named_link",
+              "minimum_records": 1,
+              "hosts": [
+                "example.test"
+              ],
+              "entry_path": "/item/[0-9]+",
+              "required_fields": [
+                {
+                  "id": "published",
+                  "kind": "date_or_time"
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "artifact": "[Article](https://example.test/item/1)\nOct.\n",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "composite_acceptance_pass": false
+      }
+    },
+    {
+      "id": "bare-year-is-not-news-date",
+      "category": "format-normalization",
+      "root_cause": "english_abbreviated_month_punctuation",
+      "failure_mode": "false-positive",
+      "case": {
+        "url": "https://example.test/news",
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "news",
+              "kind": "named_link",
+              "minimum_records": 1,
+              "hosts": [
+                "example.test"
+              ],
+              "entry_path": "/item/[0-9]+",
+              "required_fields": [
+                {
+                  "id": "published",
+                  "kind": "date_or_time"
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "artifact": "[Article](https://example.test/item/1)\n2026\n",
+      "ok": true,
+      "expected_task_pass": false,
+      "expected_metrics": {
+        "composite_acceptance_pass": false
+      }
+    },
+    {"id": "image-alternatives-do-not-create-visible-record-names", "category": "structured-extraction", "root_cause": "nested_image_accessible_link_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/", "task_kind": "structure", "acceptance_contract": {"version": 1, "schema": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[a-z]+", "stable_text_anchors": []}}, "artifact": "[![Alpha device](/images/alpha.jpg)](/item/alpha)\n[![Beta device](/images/beta.jpg)](/item/beta)", "ok": true, "expected_task_pass": false, "expected_metrics": {"stable_unique_record_count": 0, "stable_task_pass": false}},
+    {"id": "specific-image-alternative-does-not-create-visible-record-name", "category": "structured-extraction", "root_cause": "nested_image_accessible_link_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/list", "task_kind": "body", "acceptance_contract": {"version": 1, "schema": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/\\d+", "name_validation": "nonempty"}}, "artifact": "[![Actual title](/logo.png)](/item/1)", "ok": true, "expected_task_pass": false, "expected_metrics": {"stable_unique_record_count": 0, "stable_task_pass": false}},
+    {"id": "visible-record-name-markdown-image-only-fails", "category": "structured-extraction", "root_cause": "nested_image_accessible_link_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/list", "task_kind": "structure", "acceptance_contract": {"version": 1, "schema": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/\\d+", "stable_text_anchors": []}}, "artifact": "* _10_ [![Paper cover](/cover.png)](/item/10)", "ok": true, "expected_task_pass": false, "expected_metrics": {"stable_unique_record_count": 0, "stable_task_pass": false}},
+    {"id": "visible-record-name-markdown-text-passes", "category": "structured-extraction", "root_cause": "nested_image_accessible_link_name", "failure_mode": "false-negative", "case": {"url": "https://example.test/list", "task_kind": "structure", "acceptance_contract": {"version": 1, "schema": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/\\d+", "stable_text_anchors": []}}, "artifact": "* _10_ [![Paper cover](/cover.png) Paper title](/item/10)", "ok": true, "expected_task_pass": true, "expected_metrics": {"stable_unique_record_count": 1, "stable_task_pass": true}},
+    {"id": "visible-record-name-html-image-only-fails", "category": "structured-extraction", "root_cause": "nested_image_accessible_link_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/list", "task_kind": "structure", "acceptance_contract": {"version": 1, "schema": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/\\d+", "stable_text_anchors": []}}, "artifact": "<ul><li><a href=\"/item/10\"><img alt=\"Paper cover\" src=\"/cover.png\"></a></li></ul>", "ok": true, "expected_task_pass": false, "expected_metrics": {"stable_unique_record_count": 0, "stable_task_pass": false}},
+    {"id": "visible-record-name-html-text-passes", "category": "structured-extraction", "root_cause": "nested_image_accessible_link_name", "failure_mode": "false-negative", "case": {"url": "https://example.test/list", "task_kind": "structure", "acceptance_contract": {"version": 1, "schema": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/\\d+", "stable_text_anchors": []}}, "artifact": "<ul><li><a href=\"/item/10\"><img alt=\"Paper cover\" src=\"/cover.png\">Paper title</a></li></ul>", "ok": true, "expected_task_pass": true, "expected_metrics": {"stable_unique_record_count": 1, "stable_task_pass": true}},
+    {"id": "field-card-status-visible-name-markdown-passes", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "- [$100,000](/item/1)\n2 beds\n1 bath\n900 sqft\nUnder offer[10 Cedar Road](/item/1)\n\n- [$200,000](/item/2)\n3 beds\n2 baths\n1400 sqft\nRecently updated[20 Maple Street](/item/2)", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "field-card-status-image-only-markdown-fails", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "- [$100,000](/item/1)\n2 beds\n1 bath\n900 sqft\nUnder offer[![10 Cedar Road](/one.png)](/item/1)\n\n- [$200,000](/item/2)\n3 beds\n2 baths\n1400 sqft\nRecently updated[![20 Maple Street](/two.png)](/item/2)", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-fields-cannot-cross-image-only-card-markdown", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "[10 Cedar Road](/item/1)\n$100,000\n\nUnder offer[![20 Maple Street](/two.png)](/item/2)\n3 beds\n2 baths\n1400 sqft", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-price-only-name-markdown-fails", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "Under offer[$100,000](/item/1)\n$100,000\n2 beds\n1 bath\n900 sqft", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-date-only-name-markdown-fails", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "Under offer[Oct. 6, 2026](/item/1)\n$100,000\n2 beds\n1 bath\n900 sqft", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-numeric-only-name-markdown-fails", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "Under offer[12345](/item/1)\n$100,000\n2 beds\n1 bath\n900 sqft", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-status-visible-name-html-passes", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">$100,000</a><p>2 beds</p><p>1 bath</p><p>900 sqft</p><span>Under offer</span><a href=\"/item/1\">10 Cedar Road</a></article><article><a href=\"/item/2\">$200,000</a><p>3 beds</p><p>2 baths</p><p>1400 sqft</p><span>Recently updated</span><a href=\"/item/2\">20 Maple Street</a></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "field-card-status-image-only-html-fails", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">$100,000</a><p>2 beds</p><p>1 bath</p><p>900 sqft</p><span>Under offer</span><a href=\"/item/1\"><img src=\"/one.png\" alt=\"10 Cedar Road\"></a></article><article><a href=\"/item/2\">$200,000</a><p>3 beds</p><p>2 baths</p><p>1400 sqft</p><span>Recently updated</span><a href=\"/item/2\"><img src=\"/two.png\" alt=\"20 Maple Street\"></a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-fields-cannot-cross-image-only-card-html", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">10 Cedar Road</a><p>$100,000</p></article><article><span>Under offer</span><a href=\"/item/2\"><img alt=\"20 Maple Street\" src=\"/two.png\"></a><p>3 beds</p><p>2 baths</p><p>1400 sqft</p></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-price-only-name-html-fails", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article>Under offer<a href=\"/item/1\">$100,000</a><p>$100,000</p><p>2 beds</p><p>1 bath</p><p>900 sqft</p></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-date-only-name-html-fails", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article>Under offer<a href=\"/item/1\">Oct. 6, 2026</a><p>$100,000</p><p>2 beds</p><p>1 bath</p><p>900 sqft</p></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-numeric-only-name-html-fails", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "bedrooms", "kind": "integer", "pattern": "\\b(?:bds|beds?)\\b"}, {"id": "bathrooms", "kind": "integer", "pattern": "\\b(?:ba|baths?)\\b"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article>Under offer<a href=\"/item/1\">12345</a><p>$100,000</p><p>2 beds</p><p>1 bath</p><p>900 sqft</p></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "ordinary-named-links-do-not-admit-status-prose", "category": "structured-extraction", "root_cause": "required_field_card_visible_name_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/homes", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "homes", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+"}]}}, "artifact": "- [$100,000](/item/1)\n2 beds\n1 bath\n900 sqft\nUnder offer[10 Cedar Road](/item/1)\n\n- [$200,000](/item/2)\n3 beds\n2 baths\n1400 sqft\nRecently updated[20 Maple Street](/item/2)", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-markdown-visible", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "-\n$100,000\n[https://example.test/item/1](https://example.test/item/1)\n900 sqft\nStatus\n10 Cedar Road\n[https://example.test/item/1](https://example.test/item/1)", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "field-card-adjacent-name-markdown-image", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "-\n$100,000\n[https://example.test/item/1](https://example.test/item/1)\n900 sqft\nStatus\n![10 Cedar Road](/one.png)\n[https://example.test/item/1](https://example.test/item/1)", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-markdown-blank", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "-\n$100,000\n[https://example.test/item/1](https://example.test/item/1)\n900 sqft\nStatus\n10 Cedar Road\n\n[https://example.test/item/1](https://example.test/item/1)", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-markdown-price", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "-\n$100,000\n[https://example.test/item/1](https://example.test/item/1)\n900 sqft\nStatus\n$100,000\n[https://example.test/item/1](https://example.test/item/1)", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-markdown-date", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "-\n$100,000\n[https://example.test/item/1](https://example.test/item/1)\n900 sqft\nStatus\nOct. 6, 2026\n[https://example.test/item/1](https://example.test/item/1)", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-markdown-field", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "-\n$100,000\n[https://example.test/item/1](https://example.test/item/1)\n900 sqft\nStatus\n900 sqft\n[https://example.test/item/1](https://example.test/item/1)", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-markdown-cross", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "[One](/item/1)\nPrior card title\n[https://example.test/item/2](https://example.test/item/2)\n$100,000\n900 sqft", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-html-visible", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><div>$100,000</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a><div>900 sqft</div><div>Status</div><div>10 Cedar Road</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "field-card-adjacent-name-html-image", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><div>$100,000</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a><div>900 sqft</div><div>Status</div><img alt=\"10 Cedar Road\" src=\"/one.png\"><br><a href=\"https://example.test/item/1\">https://example.test/item/1</a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-html-blank", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><div>$100,000</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a><div>900 sqft</div><div>Status</div><div>10 Cedar Road</div><br><a href=\"https://example.test/item/1\">https://example.test/item/1</a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-html-price", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><div>$100,000</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a><div>900 sqft</div><div>Status</div><div>$100,000</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-html-date", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><div>$100,000</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a><div>900 sqft</div><div>Status</div><div>Oct. 6, 2026</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-html-field", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><div>$100,000</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a><div>900 sqft</div><div>Status</div><div>900 sqft</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-html-cross", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">One</a><div>Prior card title</div><a href=\"https://example.test/item/2\">https://example.test/item/2</a><div>$100,000</div><div>900 sqft</div></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "field-card-adjacent-name-markdown-consecutive-records", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "-\n$100,000\n[https://example.test/item/1](https://example.test/item/1)\n900 sqft\nStatus\n10 Cedar Road\n[https://example.test/item/1](https://example.test/item/1)\n-\n$100,000\n[https://example.test/item/2](https://example.test/item/2)\n900 sqft\nStatus\n20 Maple Street\n[https://example.test/item/2](https://example.test/item/2)", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "field-card-adjacent-name-html-consecutive-records", "category": "structured-extraction", "root_cause": "required_field_card_adjacent_scalar_name", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "composite_acceptance": {"version": 1, "groups": [{"id": "items", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><div>$100,000</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a><div>900 sqft</div><div>Status</div><div>10 Cedar Road</div><a href=\"https://example.test/item/1\">https://example.test/item/1</a></article><article><div>$100,000</div><a href=\"https://example.test/item/2\">https://example.test/item/2</a><div>900 sqft</div><div>Status</div><div>20 Maple Street</div><a href=\"https://example.test/item/2\">https://example.test/item/2</a></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-field-owner-same-article", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">First House</a><p>$100,000</p><p>900 sqft</p></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-field-owner-fields-before-link", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><p>$100,000</p><a href=\"/item/1\">First House</a><p>900 sqft</p></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-field-owner-adjacent-articles", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">First House</a><p>$100,000</p></article><article><p>900 sqft</p><a href=\"/item/2\">Second House</a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-field-owner-adjacent-list-items", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<ul><li><a href=\"/item/1\">First House</a><p>$100,000</p></li><li><p>900 sqft</p><a href=\"/item/2\">Second House</a></li></ul>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-field-owner-sibling-div-cards", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<div><div><a href=\"/item/1\">First House</a><p>$100,000</p></div><div><p>900 sqft</p><a href=\"/item/2\">Second House</a></div></div>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-field-owner-unrelated-aside", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">First House</a><p>$100,000</p></article><aside><p>900 sqft</p></aside>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-field-owner-nested-aside", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">First House</a><p>$100,000</p><aside><p>900 sqft</p></aside></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-field-owner-image-only-next-record", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">First House</a><p>$100,000</p></article><article><p>900 sqft</p><a href=\"/item/2\"><img src=\"/cover.png\" alt=\"Second House\"></a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-field-owner-two-complete-articles", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><p>$100,000</p><a href=\"/item/1\">First House</a><p>900 sqft</p></article><article><p>$200,000</p><a href=\"/item/2\">Second House</a><p>1000 sqft</p></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-field-owner-parent-fields-around-aside", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=\"/item/1\">First House</a><p>$100,000</p><aside><p>Unrelated notice</p></aside><p>900 sqft</p></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-field-owner-record-header-and-section", "category": "structured-extraction", "root_cause": "html_record_field_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><header><a href=\"/item/1\">First House</a><p>$100,000</p></header><section><p>900 sqft</p></section></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-layout-invariance-flat-incomplete", "category": "structured-extraction", "root_cause": "html_record_layout_wrapper_and_attribute_list_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<main><div class=card><a href=\"/item/1\">First House</a><p>$100,000</p></div><div class=card><p>900 sqft</p><a href=\"/item/2\">Second House</a></div></main>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-layout-invariance-wrapped-incomplete", "category": "structured-extraction", "root_cause": "html_record_layout_wrapper_and_attribute_list_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<main><div class=card><div class=content><a href=\"/item/1\">First House</a><p>$100,000</p></div></div><div class=card><div class=content><p>900 sqft</p><a href=\"/item/2\">Second House</a></div></div></main>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-layout-invariance-flat-complete", "category": "structured-extraction", "root_cause": "html_record_layout_wrapper_and_attribute_list_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<main><div class=card><a href=\"/item/1\">First House</a><p>$100,000</p><p>900 sqft</p></div><div class=card><p>$200,000</p><p>1000 sqft</p><a href=\"/item/2\">Second House</a></div></main>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-layout-invariance-wrapped-complete", "category": "structured-extraction", "root_cause": "html_record_layout_wrapper_and_attribute_list_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<main><div class=card><div class=content><a href=\"/item/1\">First House</a><p>$100,000</p><p>900 sqft</p></div></div><div class=card><div class=content><p>$200,000</p><p>1000 sqft</p><a href=\"/item/2\">Second House</a></div></div></main>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-layout-invariance-record-paragraphs", "category": "structured-extraction", "root_cause": "html_record_layout_wrapper_and_attribute_list_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=/item/1>First House</a><p>$100,000</p><p>900 sqft</p></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-layout-invariance-record-attribute-list", "category": "structured-extraction", "root_cause": "html_record_layout_wrapper_and_attribute_list_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=/item/1>First House</a><ul><li>$100,000</li><li>900 sqft</li></ul></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-layout-invariance-nested-independent-record-incomplete", "category": "structured-extraction", "root_cause": "html_record_layout_wrapper_and_attribute_list_ownership", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=/item/1>First House</a><p>$100,000</p><ul><li><p>900 sqft</p><a href=/item/2>Second House</a></li></ul></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-layout-invariance-nested-independent-record-complete", "category": "structured-extraction", "root_cause": "html_record_layout_wrapper_and_attribute_list_ownership", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=/item/1>First House</a><p>$100,000</p><p>900 sqft</p><ul><li><p>$200,000</p><p>1000 sqft</p><a href=/item/2>Second House</a></li></ul></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-single-child-sibling-cards-stay-isolated", "category": "structured-extraction", "root_cause": "html_effective_record_owner_before_layout_normalization", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<main><div><p><a href=/item/1>First House</a><br>$100,000</p></div><div><p>900 sqft<br><a href=/item/2>Second House</a></p></div></main>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-single-child-sibling-card-complete", "category": "structured-extraction", "root_cause": "html_effective_record_owner_before_layout_normalization", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<main><div><p><a href=/item/1>First House</a><br>$100,000<br>900 sqft</p></div><div><p><a href=/item/2>Second House</a></p></div></main>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-nested-title-list-uses-enclosing-card", "category": "structured-extraction", "root_cause": "html_nested_title_layout_owner", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><ul><li><a href=/item/1>First House</a></li></ul><p>$100,000</p><p>900 sqft</p></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-nested-distinct-title-stays-independent", "category": "structured-extraction", "root_cause": "html_nested_title_layout_owner", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 2, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><ul><li><a href=/item/1>First House</a></li><li><a href=/item/2>Second House</a></li></ul><p>$100,000</p><p>900 sqft</p></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}},
+    {"id": "html-record-duplicate-identity-validates-before-dedup", "category": "structured-extraction", "root_cause": "html_record_validation_before_identity_deduplication", "failure_mode": "false-negative", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=/item/1>First House</a><p>$100,000</p></article><article><a href=/item/1>First House</a><p>$100,000</p><p>900 sqft</p></article>", "ok": true, "expected_task_pass": true, "expected_metrics": {"composite_acceptance_pass": true}},
+    {"id": "html-record-duplicate-identity-cannot-combine-name-and-fields", "category": "structured-extraction", "root_cause": "html_record_validation_before_identity_deduplication", "failure_mode": "false-positive", "case": {"url": "https://example.test/catalog", "task_kind": "body", "min_content_chars": 1, "composite_acceptance": {"version": 1, "groups": [{"id": "houses", "kind": "named_link", "minimum_records": 1, "hosts": ["example.test"], "entry_path": "/item/[0-9]+", "required_fields": [{"id": "price", "kind": "price"}, {"id": "area", "kind": "area"}]}]}}, "artifact": "<article><a href=/item/1><img alt='First House' src=/one.png></a><p>$100,000</p><p>900 sqft</p></article><article><a href=/item/1>First House</a></article>", "ok": true, "expected_task_pass": false, "expected_metrics": {"composite_acceptance_pass": false}}
+  ],
+  "superseded_cases": {
+  "owned-specific-image-alt-is-an-accessible-record-name": "specific-image-alternative-does-not-create-visible-record-name",
+  "nested-image-accessible-names-identify-linked-records": "image-alternatives-do-not-create-visible-record-names",
+  "dynamic-final-page-mismatch-cannot-be-counted-as-a-pass": "content-policy-dynamic-final-page-mismatch-cannot-be-counted-as-a-pass",
+  "dynamic-search-query-mismatch-is-a-different-page": "content-policy-dynamic-search-query-mismatch-is-a-different-page",
+  "dynamic-source-document-language-mismatch-is-not-verified": "content-policy-dynamic-source-document-language-mismatch-is-not-verified",
+  "dynamic-undeclared-source-language-rejects-declared-language": "content-policy-dynamic-undeclared-source-language-rejects-declared-language",
+  "required-final-url-missing-is-a-measured-failure": "content-policy-required-final-url-missing-is-a-measured-failure",
+  "required-final-url-present-keeps-valid-body": "content-policy-required-final-url-present-keeps-valid-body"
 }
-]
 }
diff --git a/evaluation/source-inputs.json b/evaluation/source-inputs.json
index 8d67e023e..e014932a4 100644
--- a/evaluation/source-inputs.json
+++ b/evaluation/source-inputs.json
@@ -1,9 +1,9 @@
 {
   "schema_version": 2,
   "kind": "frozen_reference_inputs",
-  "id": "webfetch-sources-9511b16bd27c-complete-v2",
+  "id": "webfetch-sources-5f751146143d-complete-v4",
   "dataset": "dataset.json",
-  "dataset_sha256": "9511b16bd27cfe6c2d7913917992cec574f73a8b5b642c19283ea542f90dab81",
+  "dataset_sha256": "5f751146143dcbe9daf46f0fb2511da1147508b3c8c4cd3377a6f3cceb82264e",
   "trees": {
     "sources": {
       "challenge-01/evidence.json": "a185c84fd2df32b6c3dc7f0f400b465f9af3b5950b91c97dd6a3d29b5a2f2cd2",
@@ -788,11 +788,14 @@
       "challenge-10-justwatch.json": "2cfc6d8c9dc37d962b3c28a47d0743602ed866004d05bb6901c6c459c3457fbb",
       "details.json": "5b6d52c77d69a16daad3cb22d57b3cd7c2016a2b9141005de589105aedcb73cc",
       "xiaohongshu-details.json": "170b6f2c40f1840f94c43d8f08e7b26ff4c9a8a5c562286b2919da0e179dac76"
+    },
+    "revision-sources": {
+      "dynamic-069-ja-nintendo-search/record-count-correction.json": "3aee82fc6c033734058802f0243cbddb6773c0478adef222f895fe65568b00f5"
     }
   },
   "catalog": "dataset-catalog.json",
-  "catalog_sha256": "ccb06789463ba0720d5e342b9ef384c241675a791ada8b0ea318ea99a474b2e1",
+  "catalog_sha256": "994fa53f7fc7c3170692a7bb493ebc5af9ad8ffb5b576c022fa123e6e6fb3838",
   "files": {
-    "dataset.json": "9511b16bd27cfe6c2d7913917992cec574f73a8b5b642c19283ea542f90dab81"
+    "dataset.json": "5f751146143dcbe9daf46f0fb2511da1147508b3c8c4cd3377a6f3cceb82264e"
   }
 }
diff --git a/evaluation/webfetch-seven-family-430/case-corrections.json b/evaluation/webfetch-seven-family-430/case-corrections.json
new file mode 100644
index 000000000..d960be9fb
--- /dev/null
+++ b/evaluation/webfetch-seven-family-430/case-corrections.json
@@ -0,0 +1,4006 @@
+{
+  "schema_version": 2,
+  "kind": "profile_case_corrections",
+  "cases": [
+    {
+      "case_id": "static-simple",
+      "expected_definition_sha256": "982c4083495d0edeec20bc720b4dd104eab2333d7011ebe249e5be58e69f3fad",
+      "set": {
+        "ground_truth_main_content": "This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more",
+        "ground_truth_evidence": [
+          {
+            "source": "https://example.com/",
+            "supports": "Complete visible body independently observed on 2026-10-13."
+          }
+        ],
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-13",
+          "http_status": 200,
+          "method": "Independent HTTP response; complete body text",
+          "selector": "body",
+          "reference_sha256": "71a768a6c4f06264b71fad21ad7cc90185157c22ab513a3556e2cbe7f04c1afd",
+          "note": "Complete current visible body independently verified; the document title is outside the requested body-text contract."
+        },
+        "body_requirements": {
+          "version": 3,
+          "unit": "region_compact_hexagram_recall",
+          "minimum_coverage": 0.8,
+          "minimum_floor": 0.6,
+          "minimum_region_passes": 1,
+          "segmentation_method": "sentences",
+          "regions": [
+            {
+              "id": "body-region-1",
+              "text": "this domain is for use in documentation examples without needing permission this is not a service avoid relying on it for testing and monitoring purposes learn more",
+              "source_text": "This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more",
+              "segmentation_method": "sentences"
+            }
+          ]
+        },
+        "required_facts": [
+          {
+            "id": "purpose",
+            "alternatives": [
+              "documentation examples without needing permission"
+            ]
+          },
+          {
+            "id": "service-warning",
+            "alternatives": [
+              "not a service; avoid relying on it for testing and monitoring purposes"
+            ]
+          },
+          {
+            "id": "iana-link",
+            "alternatives": [
+              "Learn more"
+            ]
+          }
+        ]
+      },
+      "evidence": {
+        "source": "https://example.com/",
+        "observed_at": "2026-10-13",
+        "observed_text": "This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more",
+        "regression_ids": [
+          "example-current-body-passes",
+          "example-retired-body-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "redirect",
+      "expected_definition_sha256": "64162f1829c5e527f3818b5781a99f7b9146c4dac8d63524729b5ee129b219ee",
+      "set": {
+        "ground_truth_main_content": "This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more",
+        "ground_truth_evidence": [
+          {
+            "source": "https://httpbin.org/redirect-to?url=https%3A%2F%2Fexample.com%2F",
+            "supports": "Complete visible body independently observed on 2026-10-13."
+          }
+        ],
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-13",
+          "http_status": 200,
+          "method": "Independent HTTP response; complete body text",
+          "selector": "body",
+          "reference_sha256": "71a768a6c4f06264b71fad21ad7cc90185157c22ab513a3556e2cbe7f04c1afd",
+          "note": "Complete current visible body independently verified; the document title is outside the requested body-text contract."
+        },
+        "body_requirements": {
+          "version": 3,
+          "unit": "region_compact_hexagram_recall",
+          "minimum_coverage": 0.8,
+          "minimum_floor": 0.6,
+          "minimum_region_passes": 1,
+          "segmentation_method": "sentences",
+          "regions": [
+            {
+              "id": "body-region-1",
+              "text": "this domain is for use in documentation examples without needing permission this is not a service avoid relying on it for testing and monitoring purposes learn more",
+              "source_text": "This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more",
+              "segmentation_method": "sentences"
+            }
+          ]
+        },
+        "required_facts": [
+          {
+            "id": "purpose",
+            "alternatives": [
+              "documentation examples without needing permission"
+            ]
+          },
+          {
+            "id": "service-warning",
+            "alternatives": [
+              "not a service; avoid relying on it for testing and monitoring purposes"
+            ]
+          },
+          {
+            "id": "iana-link",
+            "alternatives": [
+              "Learn more"
+            ]
+          }
+        ]
+      },
+      "evidence": {
+        "source": "https://httpbin.org/redirect-to?url=https%3A%2F%2Fexample.com%2F",
+        "observed_at": "2026-10-13",
+        "observed_text": "This domain is for use in documentation examples without needing permission.\n\nThis is not a service; avoid relying on it for testing and monitoring purposes.\n\nLearn more",
+        "regression_ids": [
+          "example-current-body-passes",
+          "example-retired-body-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "web-retail-returns",
+      "expected_definition_sha256": "bbc22cbaa92edf04bafdb991ae6be973477ee236668d15400496f9145e4fa1fa",
+      "set": {
+        "ground_truth_main_content": "",
+        "ground_truth_evidence": [
+          {
+            "source": "https://www.anthropologie.com/help/returns-exchanges",
+            "supports": "Stable acceptance text independently observed on 2026-10-13; participant output was not used as reference evidence."
+          }
+        ],
+        "source_verification": {
+          "state": "unavailable",
+          "checked_at": "2026-10-13",
+          "http_status": 200,
+          "method": "Independent official-page observation; stable acceptance anchors only",
+          "selector": "main",
+          "reference_sha256": null,
+          "note": "The complete page reference remains unavailable; current stable task anchors were independently observed."
+        },
+        "required_facts": [
+          {
+            "id": "online-returns",
+            "alternatives": [
+              "Returning or Exchanging Online Orders"
+            ]
+          },
+          {
+            "id": "store-returns",
+            "alternatives": [
+              "In-store purchases must be returned to a store location"
+            ]
+          },
+          {
+            "id": "furniture-returns",
+            "alternatives": [
+              "Returning Furniture"
+            ]
+          }
+        ]
+      },
+      "evidence": {
+        "source": "https://www.anthropologie.com/help/returns-exchanges",
+        "observed_at": "2026-10-13",
+        "observed_text": "Returning or Exchanging Online Orders; In-store purchases must be returned to a store location; Returning Furniture",
+        "regression_ids": [
+          "retail-current-heading-passes",
+          "retail-retired-heading-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "live-010-navigation-menu",
+      "expected_definition_sha256": "3df38d53f2af6f76cd123826274e09fea639c63ceca7d7631c2eddeb440327b0",
+      "set": {
+        "ground_truth_main_content": "",
+        "ground_truth_evidence": [
+          {
+            "source": "https://github.com/scrapy/scrapy",
+            "supports": "Stable acceptance text independently observed on 2026-10-13; participant output was not used as reference evidence."
+          }
+        ],
+        "source_verification": {
+          "state": "unavailable",
+          "checked_at": "2026-10-13",
+          "http_status": 200,
+          "method": "Independent official-page observation; stable acceptance anchors only",
+          "selector": "main",
+          "reference_sha256": null,
+          "note": "The prior full snapshot is retired; only independently re-observed stable README anchors are authoritative."
+        },
+        "required_facts": [
+          {
+            "id": "正文核对点-1",
+            "alternatives": [
+              "is a web scraping framework to extract structured data from"
+            ]
+          },
+          {
+            "id": "正文核对点-2",
+            "alternatives": [
+              "It is cross-platform, and requires Python 3.11+. It is maintained"
+            ]
+          },
+          {
+            "id": "正文核对点-3",
+            "alternatives": [
+              "If you wish to contribute, see"
+            ]
+          }
+        ],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "正文核对点-1",
+              "alternatives": [
+                "is a web scraping framework to extract structured data from"
+              ]
+            },
+            {
+              "id": "正文核对点-2",
+              "alternatives": [
+                "It is cross-platform, and requires Python 3.11+. It is maintained"
+              ]
+            },
+            {
+              "id": "正文核对点-3",
+              "alternatives": [
+                "If you wish to contribute, see"
+              ]
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "https://github.com/scrapy/scrapy",
+        "observed_at": "2026-10-13",
+        "observed_text": "It is cross-platform, and requires Python 3.11+. It is maintained",
+        "regression_ids": [
+          "scrapy-current-python-requirement-passes",
+          "scrapy-retired-python-requirement-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "live-035-part-i-tutorial",
+      "expected_definition_sha256": "4a43eecdc326bc7a9d6038844dd0f8eb6fce650b8fd3af6cee049a1dba0714d9",
+      "set": {
+        "ground_truth_main_content": "",
+        "ground_truth_evidence": [
+          {
+            "source": "https://www.postgresql.org/docs/current/tutorial.html",
+            "supports": "Stable acceptance text independently observed on 2026-10-13; participant output was not used as reference evidence."
+          }
+        ],
+        "source_verification": {
+          "state": "unavailable",
+          "checked_at": "2026-10-13",
+          "http_status": 200,
+          "method": "Independent official-page observation; stable acceptance anchors only",
+          "selector": "main",
+          "reference_sha256": null,
+          "note": "The prior full snapshot is retired. Release banners are volatile site chrome; only stable tutorial anchors are authoritative."
+        },
+        "required_facts": [
+          {
+            "id": "正文核对点-1",
+            "alternatives": [
+              "Welcome to the PostgreSQL Tutorial. The tutorial is intended to give an introduction to PostgreSQL"
+            ]
+          },
+          {
+            "id": "正文核对点-2",
+            "alternatives": [
+              ". Those who provision and manage their own PostgreSQL installation"
+            ]
+          },
+          {
+            "id": "正文核对点-3",
+            "alternatives": [
+              "to report a documentation issue."
+            ]
+          }
+        ],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "正文核对点-1",
+              "alternatives": [
+                "Welcome to the PostgreSQL Tutorial. The tutorial is intended to give an introduction to PostgreSQL"
+              ]
+            },
+            {
+              "id": "正文核对点-2",
+              "alternatives": [
+                ". Those who provision and manage their own PostgreSQL installation"
+              ]
+            },
+            {
+              "id": "正文核对点-3",
+              "alternatives": [
+                "to report a documentation issue."
+              ]
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "https://www.postgresql.org/docs/current/tutorial.html",
+        "observed_at": "2026-10-13",
+        "observed_text": "Welcome to the PostgreSQL Tutorial. The tutorial is intended to give an introduction to PostgreSQL; release banners are site chrome and excluded.",
+        "regression_ids": [
+          "postgresql-stable-tutorial-copy-passes",
+          "postgresql-release-banner-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "live-036-build-on-the-openai-api-platform",
+      "expected_definition_sha256": "7a0e4ee714173832b40ce7c4403d5fc0889badd3d6adcdd23a302840839b1303",
+      "set": {
+        "ground_truth_main_content": "",
+        "ground_truth_evidence": [
+          {
+            "source": "https://developers.openai.com/api/docs",
+            "supports": "Stable acceptance text independently observed on 2026-10-13; participant output was not used as reference evidence."
+          }
+        ],
+        "source_verification": {
+          "state": "unavailable",
+          "checked_at": "2026-10-13",
+          "http_status": 200,
+          "method": "Independent official-page observation; stable acceptance anchors only",
+          "selector": "main",
+          "reference_sha256": null,
+          "note": "The prior full snapshot is retired. Model recommendations are volatile catalog copy and are excluded from stable acceptance."
+        },
+        "required_facts": [
+          {
+            "id": "正文核对点-1",
+            "alternatives": [
+              "Make your first API request in minutes. Learn the basics"
+            ]
+          },
+          {
+            "id": "正文核对点-2",
+            "alternatives": [
+              "Make direct model requests for text, structured output, tools, and"
+            ]
+          },
+          {
+            "id": "正文核对点-3",
+            "alternatives": [
+              "Check the status of OpenAI services"
+            ]
+          },
+          {
+            "id": "plugin-introduction",
+            "alternatives": [
+              "The OpenAI Developers plugin connects ChatGPT and Codex to the OpenAI Platform"
+            ]
+          }
+        ],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "正文核对点-1",
+              "alternatives": [
+                "Make your first API request in minutes. Learn the basics"
+              ]
+            },
+            {
+              "id": "正文核对点-2",
+              "alternatives": [
+                "Make direct model requests for text, structured output, tools, and"
+              ]
+            },
+            {
+              "id": "正文核对点-3",
+              "alternatives": [
+                "Check the status of OpenAI services"
+              ]
+            },
+            {
+              "id": "plugin-introduction",
+              "alternatives": [
+                "The OpenAI Developers plugin connects ChatGPT and Codex to the OpenAI Platform"
+              ]
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "https://developers.openai.com/api/docs",
+        "observed_at": "2026-10-13",
+        "observed_text": "Make your first API request in minutes; Responses API; OpenAI Developers plugin; Check the status of OpenAI services. Model recommendations are excluded as volatile copy.",
+        "regression_ids": [
+          "openai-stable-api-copy-passes",
+          "openai-volatile-model-copy-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "global-homepage-023-cloud-microsoft",
+      "execution_effect": "rerun_all_methods",
+      "expected_definition_sha256": "6ad25f05312b58cafcdc948aeb61904b22d54d50385db30272bb63455b700707",
+      "set": {
+        "url": "https://m365.cloud.microsoft/en-us/",
+        "description": "独立匿名浏览器观察确认目标为 Microsoft 365 英文首页；验收只使用页面主体中稳定可见的文字。",
+        "task_prompt": "直接获取 Microsoft 365 英文首页当前可见的正文，保留以下稳定文字：Work smarter across Microsoft 365；AI in Microsoft 365 helps you create, summarize, and find information across your work.；Popular prompts to try；Jump into your favorite app；Bring Copilot and your work together in a focused desktop experience.。不点击子页面、不登录，也不把图片文字、控件标签、隐藏名称、网页标题或脚本文字当作正文。",
+        "reference_answer": "直接获取 Microsoft 365 英文首页当前可见的正文，保留以下稳定文字：Work smarter across Microsoft 365；AI in Microsoft 365 helps you create, summarize, and find information across your work.；Popular prompts to try；Jump into your favorite app；Bring Copilot and your work together in a focused desktop experience.。不点击子页面、不登录，也不把图片文字、控件标签、隐藏名称、网页标题或脚本文字当作正文。",
+        "ground_truth_main_content": "",
+        "ground_truth_evidence": [
+          {
+            "source": "https://m365.cloud.microsoft/en-us/",
+            "supports": "The four unchanged body anchors and the current introduction independently observed in the v3 source capture."
+          }
+        ],
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-14",
+          "http_status": 200,
+          "method": "Independent fresh Chromium initial-page observation with strict public DNS-over-HTTPS",
+          "selector": "body",
+          "reference_sha256": "869cbe00735edeea0d049adc165fc843d370fc3ce61e979d4f2310652f17761b",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "a2c47a0eb2c6c629e6da4a5a82e0089624b821ec5ffa17fa3a555dd3bb659f76",
+          "note": "Independent observations reached the same English Microsoft 365 host; DNS did not select a different site. This revision freezes the v3 observed body and does not accept a retired introduction as an alternative."
+        },
+        "required_facts": [],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-1",
+              "alternatives": [
+                "Work smarter across Microsoft 365"
+              ]
+            },
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "AI in Microsoft 365 helps you create, summarize, and find information across your work."
+              ]
+            },
+            {
+              "id": "stable-anchor-3",
+              "alternatives": [
+                "Popular prompts to try"
+              ]
+            },
+            {
+              "id": "stable-anchor-4",
+              "alternatives": [
+                "Jump into your favorite app"
+              ]
+            },
+            {
+              "id": "stable-anchor-5",
+              "alternatives": [
+                "Bring Copilot and your work together in a focused desktop experience."
+              ]
+            }
+          ]
+        },
+        "body_requirements": {},
+        "source_benchmark": {
+          "mode": "ranked_domain_homepage",
+          "rank_metadata_used_for_scoring": false,
+          "requested_ranked_domain": "cloud.microsoft",
+          "observed_final_url": "https://m365.cloud.microsoft/",
+          "stable_annotation": {
+            "registry": "popular-sites",
+            "content_kind": "landing_page",
+            "stable_fields": [
+              "task_related_visible_page_text"
+            ],
+            "structural_only_fields": [],
+            "anchor_evidence": null,
+            "anchor_evidence_sha256": null,
+            "record_requirement": "Every registered visible stable-text group is required.",
+            "task_decision_scope": "structure_and_explicit_stable_content",
+            "live_factual_correctness": null,
+            "note": "The current body anchors were independently observed. Participant output was not used. Controls, image text, hidden labels, document title, scripts and volatile values were excluded."
+          }
+        }
+      },
+      "evidence": {
+        "source": "sha256:a2c47a0eb2c6c629e6da4a5a82e0089624b821ec5ffa17fa3a555dd3bb659f76",
+        "observed_at": "2026-10-14",
+        "observed_text": "The official Microsoft 365 body retains four established anchors and now says: AI in Microsoft 365 helps you create, summarize, and find information across your work.",
+        "qualification_bundle_sha256": "a2c47a0eb2c6c629e6da4a5a82e0089624b821ec5ffa17fa3a555dd3bb659f76",
+        "root_cause": "retired_homepage_copy_was_kept_as_a_parallel_reference",
+        "reference_version_policy": {
+          "prior": "two_version_alternatives",
+          "current": "single_v3_observed_body",
+          "reason": "The task has one fixed target body. An older official sentence is provenance, not a second acceptable answer.",
+          "removed_alternative": "Sign in to create, collaborate, and move your work forward with Copilot in Microsoft 365."
+        },
+        "prior_acceptance_contract_sha256": "f5d485a1a8f117da0dc5f7df404327636158758cb350f6b0d25d64599b13833a",
+        "revised_acceptance_contract_sha256": "487adb894e52604469f7f623f886655c7181c141a555ba01703496dd31cc14d6",
+        "scoring_source_sha256": "db507a6f0a90c8346aaa0fc7613505c8050c20427547cfccd94754548f1c8e9f",
+        "regression_ids": [
+          "m365-single-current-reference-body-passes",
+          "m365-single-current-reference-rejects-retired-introduction"
+        ]
+      }
+    },
+    {
+      "case_id": "risk-102",
+      "expected_definition_sha256": "a1a5341179ecce8397ee75b09b292ea72f5e184a936419b2e9cead7528d7e142",
+      "set": {
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "movie-cards",
+              "kind": "name_description",
+              "minimum_records": 10,
+              "start_pattern": "(?m)^(?:#{1,6}[ \\t]+)?推荐[ \\t]*$",
+              "end_pattern": "(?m)^(?:#{1,6}[ \\t]+)?为你推荐[ \\t]*$"
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "https://v.qq.com/channel/movie",
+        "observed_at": "2026-10-14",
+        "observed_text": "The visible 推荐 section owns the initial movie cards and ends before the independently visible 为你推荐 section; navigation and later recommendations are outside this record scope.",
+        "root_cause": "repeated_title_card_ownership",
+        "prior_composite_acceptance_sha256": "60bd38cbbaceab021b4551a1573ae52d568ed1162de1e1579c62e726e414bdbf",
+        "revised_composite_acceptance_sha256": "e805be64c176984f396747b040fd84d2f6dd02273be93d92295a55be62764d78",
+        "affected_scope": "risk-102 across all registered methods; offline rescore only",
+        "regression_ids": [
+          "repeated-title-closes-description-card",
+          "scope-outside-repeated-navigation-does-not-form-cards"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "dynamic-062-zh-sspai-home",
+      "expected_definition_sha256": "4f2a23e911296d0f7f6cba3ce479ed83f4bfded40e7167c7c183ca235e63d753",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 8,
+          "hosts": [
+            "sspai.com"
+          ],
+          "entry_path": "/post/\\d+",
+          "stable_text_anchors": [
+            {
+              "id": "source-stable-4e46b434e5c8",
+              "alternatives": [
+                "少数派"
+              ],
+              "source_location": "aside > span",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "49555f88c3c3a5edcdc991d60741539507feecba6447def84660c0c44fb68360",
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "source-stable-76a2171c057b",
+              "alternatives": [
+                "Matrix"
+              ],
+              "source_location": "header > span",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "09f971e12fdb9abf2a8ffaeddb3e747e5f7d0a8175f84342864d6ce31dcec895",
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "source-stable-9134428dcb7b",
+              "alternatives": [
+                "关于我们"
+              ],
+              "source_location": "nav > span",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "930fce03683489ed25ca833850a9c8f662563689a7dd1a7788039b828a7faba5",
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "source-stable-39adb2edf52e",
+              "alternatives": [
+                "少数派编辑部"
+              ],
+              "source_location": "body > span",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "04156507ad98b5e38f9982884cfdd9a93361648e8c1ec2826719288c8896533a"
+            }
+          ],
+          "record_count_policy": {
+            "list_type": "variable",
+            "source_observed_count": 9,
+            "required_ratio": 0.8,
+            "minimum_records": 8,
+            "source_observation_counts": [
+              9,
+              9,
+              9
+            ],
+            "reason": "可变化列表：按调用前Codex独立观察到的记录数取80%，结果向上取整。",
+            "source_evidence_sha256": "cfe3d7a0abab109b111fcdd4e74f234622e07f3270c66c617c9933879c45fbf4"
+          },
+          "name_validation": "nonempty",
+          "entry_scope": {
+            "html_selector": ".feed__main article",
+            "title_selector": "p.article__card__title",
+            "link_selector": "a.article__card__link[href^=\"/post/\"]",
+            "start_pattern": "(?m)^(?:推薦|推荐|\\[推荐\\]\\([^\\n]+\\))[ \\t]*$",
+            "end_pattern": "(?m)^(?:#{1,6}[ \\t]+)?派友在看[ \\t]*$"
+          }
+        }
+      },
+      "evidence": {
+        "source": "https://sspai.com/",
+        "observed_at": "2026-10-13",
+        "observed_text": "Matrix精选 is an article-card badge within the changing record list, not independently owned page-shell text. The page-level anchors remain required.",
+        "root_cause": "dynamic_record_badge_not_page_anchor",
+        "prior_acceptance_contract_sha256": "9bf6df958583cd268f3d1402f5d1d180a6b852397faea75e9c56a65966911e9d",
+        "revised_acceptance_contract_sha256": "da66f041e4dfa21f950eee95808a925eea00051fe8f8393cdad67732f632b9e1",
+        "affected_scope": "dynamic-062-zh-sspai-home across all registered methods; offline rescore only",
+        "regression_ids": [
+          "dynamic-record-badge-is-not-required-page-copy",
+          "dynamic-record-badge-cannot-replace-page-copy"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "dynamic-050-en-real-usgs-earthquakes",
+      "expected_definition_sha256": "0b7b79248b87bea1ab92b27d4387654ea786489b37479ed2e11228154b632422",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "earthquake",
+          "minimum_records": 3,
+          "stable_text_anchors": [
+            {
+              "id": "source-stable-97037cfd871a",
+              "alternatives": [
+                "Magnitude"
+              ],
+              "source_location": "body > span",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "5d2a4822bc9986e1b1c3d0089b21d4163b91c6975b7b139a93a1d7035320e848"
+            },
+            {
+              "id": "source-stable-4ea1885778d3",
+              "alternatives": [
+                "Newest First"
+              ],
+              "source_location": "body > span",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "f413a6b2bc8576970b1222813c65603d2778bf2fd24f76ee1bb1d10df3d8f59e"
+            },
+            {
+              "id": "source-stable-74a883a037bc",
+              "alternatives": [
+                "Settings"
+              ],
+              "source_location": "body > a",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "3f47086ffa8213405ec3ebc8423c281939a5433111b8c3c2960b049e41524a46"
+            },
+            {
+              "id": "source-stable-bec69036aa27",
+              "alternatives": [
+                "Sort"
+              ],
+              "source_location": "body > mat-label",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "b2694bcae82851c6ea153f5158daffb53c2e65334d0fc7d747f48af0ea9afe61"
+            },
+            {
+              "id": "source-stable-ae62e153ba72",
+              "alternatives": [
+                "Only List Earthquakes Shown on Map"
+              ],
+              "source_location": "body > label",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "2a0aa9d5253b781b74de10e09ef199206106c43a0700f86be46d31f8e11cb222"
+            },
+            {
+              "id": "source-stable-ec60bc50478b",
+              "alternatives": [
+                "Felt something not shown – report it here."
+              ],
+              "source_location": "body > a",
+              "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+              "source_evidence_sha256": "50676cdc4fb5b8f06cf0f623c7ca927d036533b90c63b80670fc71304bea0535"
+            }
+          ],
+          "record_count_policy": {
+            "list_type": "variable",
+            "source_observed_count": 3,
+            "required_ratio": 0.8,
+            "minimum_records": 3,
+            "source_observation_counts": [
+              3,
+              3
+            ],
+            "source_evidence_sha256": "b1f3a532ab58c85c79bbea988444a4d4ad36f9c22c36c2575af3cde85bea2222",
+            "reason": "Both independently captured initial-load targets contain three records; the unrelated 48-record diagnostic denominator is retired."
+          }
+        }
+      },
+      "evidence": {
+        "source": "https://earthquake.usgs.gov/earthquakes/map/",
+        "observed_at": "2026-09-24",
+        "observed_text": "The two bound independent initial-load captures each contain three target records; their target text hashes are identical.",
+        "root_cause": "source_observed_record_threshold",
+        "prior_acceptance_contract_sha256": "9490942d15708e216207b81ec9ef0ff16ffb07ee70a926a1f44e5afefec269bf",
+        "revised_acceptance_contract_sha256": "97475bdbfe37d011aa8cf28294d3fdae956d6ce1f595ce2065fd85eeb3c9bf9b",
+        "affected_scope": "dynamic-050-en-real-usgs-earthquakes across all registered methods; offline rescore only",
+        "regression_ids": [
+          "variable-list-23-of-30-does-not-meet-80-percent-source-threshold",
+          "variable-list-24-of-30-meets-source-threshold-without-claiming-completeness"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "global-homepage-045-nytimes-com",
+      "expected_definition_sha256": "86c8d0d3892b099d3c6768bbe9767b0fbfaa01023d3d42a4d3bd7e838403b221",
+      "set": {
+        "task_prompt": "直接获取这个热门网站首次加载后可见的稳定正文，保留栏目和支持入口文字；同时返回至少 10 条不同的具名文章入口，每条包含有意义的名称和 HTTP(S) 链接。不固定当前文章、顺序、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+        "reference_answer": "直接获取这个热门网站首次加载后可见的稳定正文，保留栏目和支持入口文字；同时返回至少 10 条不同的具名文章入口，每条包含有意义的名称和 HTTP(S) 链接。不固定当前文章、顺序、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 10,
+          "hosts": [
+            "www.nytimes.com"
+          ],
+          "entry_path": "/[0-9]{4}/[0-9]{2}/[0-9]{2}/.+",
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-1",
+              "alternatives": [
+                "U.S."
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "World"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-3",
+              "alternatives": [
+                "Business"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-4",
+              "alternatives": [
+                "Opinion"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-5",
+              "alternatives": [
+                "Arts"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-6",
+              "alternatives": [
+                "Cooking"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-7",
+              "alternatives": [
+                "Games"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-8",
+              "alternatives": [
+                "Wirecutter"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-9",
+              "alternatives": [
+                "The Athletic"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-11",
+              "alternatives": [
+                "Help"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-12",
+              "alternatives": [
+                "Site Map"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-13",
+              "alternatives": [
+                "Advertise"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-14",
+              "alternatives": [
+                "Contact Us"
+              ],
+              "match_scope": "non_record_lines"
+            }
+          ],
+          "link_base_url": "https://www.nytimes.com/"
+        }
+      },
+      "evidence": {
+        "source": "sources/global-homepage-045-nytimes-com/stable-page.txt",
+        "observed_at": "2026-09-16",
+        "observed_text": "The bound source lists Log in, while its own stable annotation excludes button and control text from the body contract.",
+        "root_cause": "conditional_ui_control_not_body_requirement",
+        "prior_acceptance_contract_sha256": "018c596188d7f9d76a70735b8de00fc3b579bf3ff172f4b39d6402f251eb10a2",
+        "revised_acceptance_contract_sha256": "a35f3a8847d74bedc70de8253b3ab74c106dda6ebecf81380e78c2c54a91b5da",
+        "affected_scope": "global-homepage-045-nytimes-com across all registered methods; offline rescore only",
+        "regression_ids": [
+          "body-without-conditional-ui-control-passes",
+          "conditional-ui-controls-cannot-replace-body"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "risk-diverse-011",
+      "expected_definition_sha256": "a1dc25366197b23bb314d20dcb50d3ebb82c83d6403d45a46634518e8d8707b6",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-01",
+              "alternatives": [
+                "nasa"
+              ]
+            },
+            {
+              "id": "stable-02",
+              "alternatives": [
+                "Space Threads"
+              ]
+            },
+            {
+              "id": "stable-03",
+              "alternatives": [
+                "Curly-haired crew, this one’s for you!"
+              ]
+            },
+            {
+              "id": "stable-04",
+              "alternatives": [
+                "串文"
+              ]
+            }
+          ],
+          "stable_text_role": "required"
+        }
+      },
+      "evidence": {
+        "source": "https://www.threads.com/@nasa/post/DdEwHNClPdc?hl=zh-cn",
+        "observed_at": "2026-09-24",
+        "observed_text": "The frozen post body keeps the author and post text as required anchors. The earlier correction still excludes the conditional translation control.",
+        "root_cause": "conditional_ui_control_not_body_requirement",
+        "prior_acceptance_contract_sha256": "7a4c57a425fa05e626ba6c98f4b9a3051472359222e2c2d3152826aa2ee353b1",
+        "revised_acceptance_contract_sha256": "f94d7ea5d49c79785bdaebc086ebb4d255e741af97bd1384f4fccfb829897fed",
+        "affected_scope": "risk-diverse-011 across all registered methods; offline rescore only",
+        "regression_ids": [
+          "body-without-conditional-ui-control-passes",
+          "conditional-ui-controls-cannot-replace-body"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "dynamic-086-joyn-prosieben",
+      "expected_definition_sha256": "d13635e79401a8972634924137bff41907131cccde94234f8308b60ac63fd602",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 12,
+          "hosts": [
+            "www.joyn.de"
+          ],
+          "entry_path": "/(?:serien|filme|shows)/(?!genre(?:/|$))[^/]+",
+          "stable_text_anchors": [
+            {
+              "id": "visible-nav-0",
+              "alternatives": [
+                "Neu & beliebt"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            },
+            {
+              "id": "visible-nav-1",
+              "alternatives": [
+                "Für Dich"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            },
+            {
+              "id": "visible-nav-2",
+              "alternatives": [
+                "Mediatheken"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            },
+            {
+              "id": "visible-nav-3",
+              "alternatives": [
+                "Live TV"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            },
+            {
+              "id": "visible-nav-4",
+              "alternatives": [
+                "Serien"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            },
+            {
+              "id": "visible-nav-5",
+              "alternatives": [
+                "Filme"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            },
+            {
+              "id": "visible-nav-6",
+              "alternatives": [
+                "Sport"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            },
+            {
+              "id": "visible-nav-7",
+              "alternatives": [
+                "News & Doku"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            },
+            {
+              "id": "visible-nav-8",
+              "alternatives": [
+                "Barrierefrei"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd"
+            }
+          ],
+          "record_count_policy": {
+            "list_type": "variable",
+            "source_observed_count": 15,
+            "required_ratio": 0.8,
+            "minimum_records": 12,
+            "source_observation_counts": [
+              15,
+              15
+            ],
+            "source_evidence_sha256": "86dc4a52636f32de9764e757ddfb79628a7eeeb46a6ca4f79ade361d75c407fd",
+            "reason": "Initial auto-loaded cards with independently visible caption and corresponding detail link. Captions and membership vary; refresh denominator in the call window."
+          },
+          "name_validation": "nonempty",
+          "entry_scope": {
+            "html_selector": "main a:has(h3):has(p)",
+            "title_selector": "p",
+            "link_selector": "a[href]",
+            "start_pattern": "(?m)^# Alle ProSieben Sendungen bei Joyn[^\\n]*$",
+            "end_pattern": "(?m)^#{1,6}\\s+ProSieben Mediathek bei Joyn:",
+            "markdown_label_pattern": "(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$",
+            "markdown_card_title_pattern": "(?m)^###\\s+(?P<title>[^\\n]+?)\\s*$"
+          }
+        }
+      },
+      "evidence": {
+        "source": "sha256:06e04978e1a852392cecbd599d69b0c821e37fdc24d4c5a62618610799b724b5",
+        "observed_at": "2026-10-14",
+        "observed_text": "The bounded native Markdown contains visible heading titles and same-card detail links; the prior caption-only pattern returned zero records for this representation.",
+        "root_cause": "scoped_markdown_heading_card_ownership",
+        "prior_acceptance_contract_sha256": "acce0b8bfa61ab04f467a2628855151525717b95abf347c2eba2504f180b07ee",
+        "revised_acceptance_contract_sha256": "6c75f54d7739a3f295cad7710b63d4788b719214ffbf5460c72ea722fa01c37a",
+        "affected_scope": "dynamic-086-joyn-prosieben across all registered methods; offline rescore only",
+        "regression_ids": [
+          "scoped-heading-cards-own-their-detail-links",
+          "scoped-heading-cards-cannot-borrow-across-cards",
+          "scoped-heading-cards-stop-at-explicit-block-boundary",
+          "scoped-heading-cards-reject-wrong-detail-path"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "dynamic-095-joyn-home",
+      "expected_definition_sha256": "ce19dc33fa5c7d4de9d7ad027b7e591ef5d2d1253c71a6f68af8be6786675bd5",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 8,
+          "hosts": [
+            "www.joyn.de"
+          ],
+          "entry_path": "/(?:serien|filme|shows)/(?!genre(?:/|$))[^/]+",
+          "stable_text_anchors": [
+            {
+              "id": "visible-nav-0",
+              "alternatives": [
+                "Neu & beliebt"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            },
+            {
+              "id": "visible-nav-1",
+              "alternatives": [
+                "Für Dich"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            },
+            {
+              "id": "visible-nav-2",
+              "alternatives": [
+                "Mediatheken"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            },
+            {
+              "id": "visible-nav-3",
+              "alternatives": [
+                "Live TV"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            },
+            {
+              "id": "visible-nav-4",
+              "alternatives": [
+                "Serien"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            },
+            {
+              "id": "visible-nav-5",
+              "alternatives": [
+                "Filme"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            },
+            {
+              "id": "visible-nav-6",
+              "alternatives": [
+                "Sport"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            },
+            {
+              "id": "visible-nav-7",
+              "alternatives": [
+                "News & Doku"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            },
+            {
+              "id": "visible-nav-8",
+              "alternatives": [
+                "Barrierefrei"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "header navigation",
+              "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9"
+            }
+          ],
+          "record_count_policy": {
+            "list_type": "variable",
+            "source_observed_count": 9,
+            "required_ratio": 0.8,
+            "minimum_records": 8,
+            "source_observation_counts": [
+              9,
+              9
+            ],
+            "source_evidence_sha256": "175001a072f969066d1b6e1a16a2a69bec329a4e7baf083196fc41e955a433c9",
+            "reason": "Initial auto-loaded cards with independently visible caption and corresponding detail link. Captions and membership vary; refresh denominator in the call window."
+          },
+          "name_validation": "nonempty",
+          "entry_scope": {
+            "html_selector": "main a:has(h3):has(p)",
+            "title_selector": "p",
+            "link_selector": "a[href]",
+            "start_pattern": "(?m)^# Joyn - Serien, Filme, Sport & Live TV[^\\n]*$",
+            "end_pattern": "(?m)^#{1,6}\\s+Willkommen bei Joyn:",
+            "markdown_label_pattern": "(?s)<br>\\s*(?P<label>[^<>\\n]+?)\\s*<br>\\s*$",
+            "markdown_card_title_pattern": "(?m)^###\\s+(?P<title>[^\\n]+?)\\s*$"
+          }
+        }
+      },
+      "evidence": {
+        "source": "sha256:4ddc63b3d5273c2aa49fa84319493fa65adcc82996b699b051ba57c4640d5e6d",
+        "observed_at": "2026-10-14",
+        "observed_text": "The bounded native Markdown encodes the visible ampersand in its scope heading and contains heading-owned detail cards; the prior raw boundary match and caption-only record rule returned zero records.",
+        "root_cause": "scoped_markdown_heading_card_ownership_and_visible_boundary_projection",
+        "prior_acceptance_contract_sha256": "06a23577d20b2de5a037c00e2cce681fe473e77a3b3f17862bd004993d3ee8b4",
+        "revised_acceptance_contract_sha256": "8a8158d49e788aa32664033d387219f33435713c6a0b8fe4927f3db55c52321f",
+        "affected_scope": "dynamic-095-joyn-home across all registered methods; offline rescore only",
+        "regression_ids": [
+          "scoped-heading-cards-own-their-detail-links",
+          "scoped-heading-cards-cannot-borrow-across-cards",
+          "scoped-heading-cards-stop-at-explicit-block-boundary",
+          "scoped-heading-cards-reject-wrong-detail-path",
+          "scoped-boundary-decodes-one-character-reference-layer",
+          "scoped-boundary-keeps-double-encoded-reference-literal"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "live-025-api-reference",
+      "expected_definition_sha256": "5bc3b2282b7f76999d3ee3462c825c98e1bb2d66fcab13ce4ded8956cc290739",
+      "set": {
+        "required_facts": [
+          {
+            "id": "正文核对点-1",
+            "alternatives": [
+              "from tavily import TavilyClient"
+            ]
+          },
+          {
+            "id": "正文核对点-2",
+            "alternatives": [
+              "Successful URLs appear in results; per-URL failures appear in failed_results."
+            ]
+          },
+          {
+            "id": "正文核对点-3",
+            "alternatives": [
+              "A unique request identifier you can share with customer support"
+            ]
+          }
+        ],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "正文核对点-1",
+              "alternatives": [
+                "from tavily import TavilyClient"
+              ]
+            },
+            {
+              "id": "正文核对点-2",
+              "alternatives": [
+                "Successful URLs appear in results; per-URL failures appear in failed_results."
+              ]
+            },
+            {
+              "id": "正文核对点-3",
+              "alternatives": [
+                "A unique request identifier you can share with customer support"
+              ]
+            }
+          ]
+        },
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-14",
+          "http_status": 200,
+          "method": "Independent fresh anonymous Chromium initial-page observations",
+          "selector": "rendered main DOM text, including preloaded response-code panels",
+          "reference_sha256": "ccb12d707395080d9c67e35d53d9d2ef51b7b86c0e1eefb531f8e4e2afc347d6",
+          "note": "Two independent current observations retain the SDK and request-id facts and replace the retired Unauthorized example with the current results/failed_results contract.",
+          "extracted_reference_sha256": "ad42f0c685051847b18d7e1aa7b0c14dd3e2c91a78a20e53f574fdc585d42154",
+          "reference_normalization": "Remove U+200B, U+FEFF and discretionary U+00AD; raw capture unchanged.",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+          "observation_sha256s": [
+            "dbd74939bb5bb5923964797b32f9071bf00a0b6e1d51cef6f410af6c49ee7651",
+            "061f7a97b0ec83a5f5122747109bd1f4a0415b162825aa226b3db9a3a6ff3bd8"
+          ]
+        }
+      },
+      "evidence": {
+        "source": "sha256:74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "observed_at": "2026-10-14",
+        "observed_text": "Two independent current observations retain the SDK and request-id facts and replace the retired Unauthorized example with the current results/failed_results contract.",
+        "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "regression_ids": [
+          "volatile-body-change-preserves-stable-anchor-pass",
+          "volatile-body-content-cannot-replace-stable-page-identity"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "dynamic-087-joyn-filme",
+      "expected_definition_sha256": "d7c907fd01e50424a58b45a45940c672d7e9e280d847b5821f357d81c113004d",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 24,
+          "hosts": [
+            "www.joyn.de"
+          ],
+          "entry_path": "/filme/(?!genre(?:/|$))[^/]+",
+          "stable_text_anchors": [
+            {
+              "id": "current-section-1",
+              "alternatives": [
+                "Filme"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "initial rendered body",
+              "source_evidence_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb"
+            },
+            {
+              "id": "current-section-2",
+              "alternatives": [
+                "Genres"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "initial rendered body",
+              "source_evidence_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb"
+            },
+            {
+              "id": "current-section-3",
+              "alternatives": [
+                "Die beliebtesten Filme"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "initial rendered body",
+              "source_evidence_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb"
+            },
+            {
+              "id": "current-section-4",
+              "alternatives": [
+                "Neue Filme auf Joyn"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "initial rendered body",
+              "source_evidence_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb"
+            },
+            {
+              "id": "current-section-5",
+              "alternatives": [
+                "Spannung pur"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "initial rendered body",
+              "source_evidence_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb"
+            },
+            {
+              "id": "current-section-6",
+              "alternatives": [
+                "Lust und Leidenschaft"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "initial rendered body",
+              "source_evidence_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb"
+            },
+            {
+              "id": "current-section-7",
+              "alternatives": [
+                "Für Fans von Fantasy"
+              ],
+              "match_scope": "non_record_lines",
+              "source_location": "initial rendered body",
+              "source_evidence_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb"
+            }
+          ],
+          "record_count_policy": {
+            "list_type": "variable",
+            "source_observed_count": 29,
+            "required_ratio": 0.8,
+            "minimum_records": 24,
+            "source_observation_counts": [
+              29,
+              29
+            ],
+            "source_evidence_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+            "reason": "Two independent current first-load DOM observations each contain 29 unique named movie-detail links; the threshold is the predeclared 80 percent floor rounded up."
+          },
+          "name_validation": "nonempty",
+          "entry_scope": {
+            "html_selector": "main div[class*=\"CardStandard_StandardCardWrapper\"]",
+            "title_selector": "h3",
+            "link_selector": "a[data-testid=\"LL--movie\"]"
+          }
+        },
+        "source_verification": {
+          "interaction_boundary": "first automatic load only; no click/input/scroll/search/pagination",
+          "timeout_ms": 45000,
+          "completion": {
+            "target_selectors": [
+              "main",
+              "#main",
+              "body"
+            ],
+            "frame_url_pattern": null,
+            "stable_samples": 4,
+            "poll_interval_ms": 250,
+            "timeout_ms": 45000,
+            "minimum_chars": 600,
+            "minimum_records": 6,
+            "loading_must_end": true
+          },
+          "independent_capture_a_sha256": "95b67873d3cc97676365af3b9b53f4e6360bd91b517340a07b8d6b27d2157fe0",
+          "independent_capture_b_sha256": "95b67873d3cc97676365af3b9b53f4e6360bd91b517340a07b8d6b27d2157fe0",
+          "state": "structure_only",
+          "reference_sha256": null,
+          "verification_scope": "independent current DOM; volatile values are not frozen",
+          "checked_at": "2026-10-14",
+          "method": "Independent fresh anonymous Chromium initial-page observations",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+          "observation_sha256s": [
+            "da1704216206bf2bc2af7dd3197dfba56323ae248edfedff34cccc4bda4da6fa",
+            "7fc609d2411bfa14ba9f3c218130d7793c935702e43bbc4c6811349e14daaf8b"
+          ],
+          "note": "Two independent current first-load DOM observations each contain 29 unique named movie-detail links and the same seven section labels."
+        }
+      },
+      "evidence": {
+        "source": "sha256:74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "observed_at": "2026-10-14",
+        "observed_text": "Two independent current first-load DOM observations each contain 29 unique named movie-detail links and the same seven section labels.",
+        "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "regression_ids": [
+          "current-homepage-stable-intersection-passes",
+          "obsolete-homepage-anchor-does-not-pass",
+          "variable-list-23-of-30-does-not-meet-80-percent-source-threshold",
+          "variable-list-24-of-30-meets-source-threshold-without-claiming-completeness"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "global-homepage-016-amazon-com",
+      "expected_definition_sha256": "c3c58c5a454336515995eefa26d3d693eee2eb5503300458b2f4174408be75a5",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 10,
+          "hosts": [
+            "www.amazon.com"
+          ],
+          "entry_path": "(?:/[^/]+)?/dp/[A-Z0-9]{10}",
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-1",
+              "alternatives": [
+                "All"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "Baby"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-3",
+              "alternatives": [
+                "Help"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-4",
+              "alternatives": [
+                "Sell"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-5",
+              "alternatives": [
+                "Books"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-6",
+              "alternatives": [
+                "Music"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-7",
+              "alternatives": [
+                "Prime"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-8",
+              "alternatives": [
+                "Careers"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-9",
+              "alternatives": [
+                "Coupons"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-10",
+              "alternatives": [
+                "English"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-11",
+              "alternatives": [
+                "Fashion"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-12",
+              "alternatives": [
+                "Returns"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-13",
+              "alternatives": [
+                "Audible"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-14",
+              "alternatives": [
+                "Pharmacy"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-15",
+              "alternatives": [
+                "Registry"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-17",
+              "alternatives": [
+                "Handmade"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-18",
+              "alternatives": [
+                "Gift Cards"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-19",
+              "alternatives": [
+                "Amazon Devices"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-20",
+              "alternatives": [
+                "Conditions of Use"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-21",
+              "alternatives": [
+                "Privacy Notice"
+              ],
+              "match_scope": "non_record_lines"
+            }
+          ],
+          "link_base_url": "https://www.amazon.com/"
+        },
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-14",
+          "method": "Independent fresh anonymous Chromium initial-page observations",
+          "reference_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+          "note": "Two independent current first loads retain the declared product-card population and every registered stable label except Computers.",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+          "observation_sha256s": [
+            "1ed36796d6cebc2850e2877281008359f0bd935170b3e6b70ea950a1a82fa55d",
+            "362cfb4e21c0f84d31080899e2c46bcd5608d77d16714efede471d5782389b64"
+          ]
+        }
+      },
+      "evidence": {
+        "source": "sha256:74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "observed_at": "2026-10-14",
+        "observed_text": "Two independent current first loads retain the declared product-card population and every registered stable label except Computers.",
+        "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "regression_ids": [
+          "current-homepage-stable-intersection-passes",
+          "obsolete-homepage-anchor-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "global-homepage-072-rakuten-co-jp",
+      "expected_definition_sha256": "6e422561432050c75172552f3fe9b1300e1074bae69897c3d2b2e6060c6cc5e7",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "named_link",
+          "minimum_records": 5,
+          "hosts": [
+            "item.rakuten.co.jp"
+          ],
+          "entry_path": "/.+",
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-1",
+              "alternatives": [
+                "お買い物"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "カード"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-3",
+              "alternatives": [
+                "銀行"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-4",
+              "alternatives": [
+                "証券"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-5",
+              "alternatives": [
+                "トラベル"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-6",
+              "alternatives": [
+                "ブックス"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-7",
+              "alternatives": [
+                "ポイント"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-8",
+              "alternatives": [
+                "モバイル"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-9",
+              "alternatives": [
+                "ラクマ"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-10",
+              "alternatives": [
+                "ROOM"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-11",
+              "alternatives": [
+                "ログイン"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-12",
+              "alternatives": [
+                "ヘルプ"
+              ],
+              "match_scope": "non_record_lines"
+            },
+            {
+              "id": "stable-anchor-14",
+              "alternatives": [
+                "採用情報"
+              ],
+              "match_scope": "non_record_lines"
+            }
+          ]
+        },
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-14",
+          "method": "Independent fresh anonymous Chromium initial-page observations",
+          "reference_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+          "note": "A current complete first-load observation and a separate current repeat show the registered page body while 会社概要 is not invariant.",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+          "observation_sha256s": [
+            "49d0d140afda50dedc4d64241d2ad9c76ccd307bfc518676002b8e7c75c7a7d0",
+            "08e589aeb5d646deff8207423ee6ff7abe5ec31e02810c3efb67046ab2316b69"
+          ]
+        }
+      },
+      "evidence": {
+        "source": "sha256:74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "observed_at": "2026-10-14",
+        "observed_text": "A current complete first-load observation and a separate current repeat show the registered page body while 会社概要 is not invariant.",
+        "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "regression_ids": [
+          "current-homepage-stable-intersection-passes",
+          "obsolete-homepage-anchor-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "china-homepage-008-doubao-com",
+      "expected_definition_sha256": "15923cde0d34b94552591970ec4c84a24f37529f678f360fb4727644d91db683",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-1",
+              "alternatives": [
+                "更多"
+              ]
+            },
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "最近"
+              ]
+            },
+            {
+              "id": "stable-anchor-3",
+              "alternatives": [
+                "新对话"
+              ]
+            },
+            {
+              "id": "stable-anchor-5",
+              "alternatives": [
+                "关于豆包"
+              ]
+            },
+            {
+              "id": "stable-anchor-6",
+              "alternatives": [
+                "新工作任务"
+              ]
+            },
+            {
+              "id": "stable-anchor-7",
+              "alternatives": [
+                "API 服务"
+              ]
+            },
+            {
+              "id": "stable-anchor-8",
+              "alternatives": [
+                "有什么我能帮你的吗？"
+              ]
+            }
+          ]
+        },
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-14",
+          "method": "Independent fresh anonymous Chromium initial-page observations",
+          "reference_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+          "note": "Two independent current first loads retain seven declared page labels; 为你推荐 appears conditionally and is removed from the stable intersection.",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+          "observation_sha256s": [
+            "837a06d7f6dea9d82026f14def3689f12b9fe8c492041f052db2d431c7f6f37f",
+            "71dc6d91d87f369770053030e0ff8989dd3be4f45a51e7f4578808e519351e7d"
+          ]
+        }
+      },
+      "evidence": {
+        "source": "sha256:74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "observed_at": "2026-10-14",
+        "observed_text": "Two independent current first loads retain seven declared page labels; 为你推荐 appears conditionally and is removed from the stable intersection.",
+        "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "regression_ids": [
+          "current-homepage-stable-intersection-passes",
+          "obsolete-homepage-anchor-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "china-homepage-026-aliyun-com",
+      "expected_definition_sha256": "d5174b445103acdc0f7a43e6d365899cd9613ee847b43b25be435e71db79d27d",
+      "set": {
+        "name": "Alibaba Cloud",
+        "url": "https://www.alibabacloud.com/en",
+        "description": "固定获取 Alibaba Cloud 官方国际站英文首页；验收覆盖首屏、AI 平台、模型、产品、试用、行业方案、客户、分析机构、全球基础设施、合规和支持正文。",
+        "task_prompt": "直接获取 Alibaba Cloud 国际站英文首页首次加载后可见的完整正文，并保留这些独立观察确认的稳定正文区段：Everything You Need in One Powerful AI Cloud Platform；Introducing Our Best-in-Class AI QWEN；Model Studio enables fast development of Gen AI apps；Platform for AI (PAI) is Alibaba Cloud's scalable, cost-effective platform；Get to Know QWEN #1 Most Downloaded Open-Source Model；End-to-End AI and Cloud Solutions For All Your Needs；Elastic Compute Service (ECS)；Object Storage Service (OSS)；Domain Names and Website；Start Your Free Trial；Industry Use Cases；Loved by Innovators All Over the World；Our Leadership Status Awarded by Global Analysts；Open for Business Globally 24/7；#1 most compliant cloud platform in Asia with 150+ certificates；Documentation Center。仅返回品牌、导航菜单或页脚不算完成。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+        "reference_answer": "直接获取 Alibaba Cloud 国际站英文首页首次加载后可见的完整正文，并保留这些独立观察确认的稳定正文区段：Everything You Need in One Powerful AI Cloud Platform；Introducing Our Best-in-Class AI QWEN；Model Studio enables fast development of Gen AI apps；Platform for AI (PAI) is Alibaba Cloud's scalable, cost-effective platform；Get to Know QWEN #1 Most Downloaded Open-Source Model；End-to-End AI and Cloud Solutions For All Your Needs；Elastic Compute Service (ECS)；Object Storage Service (OSS)；Domain Names and Website；Start Your Free Trial；Industry Use Cases；Loved by Innovators All Over the World；Our Leadership Status Awarded by Global Analysts；Open for Business Globally 24/7；#1 most compliant cloud platform in Asia with 150+ certificates；Documentation Center。仅返回品牌、导航菜单或页脚不算完成。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+        "ground_truth_main_content": "",
+        "ground_truth_evidence": [
+          {
+            "source": "https://www.alibabacloud.com/en",
+            "supports": "An independent strict public-DNS-over-HTTPS browser observation captured the complete visible official international homepage body."
+          }
+        ],
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-14",
+          "http_status": 200,
+          "method": "Independent fresh Chromium initial-page observation of the fixed /en URL with strict public DNS-over-HTTPS",
+          "selector": "body",
+          "reference_sha256": "d809d26595dcd5abf45c1c5086bb891fd882d8b2e536e94e9629a6fc90a95b95",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "b83fff306c63a8cbc3ad80b0e5f4d93d124ac5da21b5f1b728bf3f588e5fc7bd",
+          "observation_sha256s": [
+            "d809d26595dcd5abf45c1c5086bb891fd882d8b2e536e94e9629a6fc90a95b95"
+          ],
+          "note": "The fixed official /en URL completed under strict public DNS-over-HTTPS and returned a full English body. The site appended only its own locale query."
+        },
+        "required_facts": [],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "international-body-01",
+              "alternatives": [
+                "Everything You Need in One Powerful AI Cloud Platform"
+              ]
+            },
+            {
+              "id": "international-body-02",
+              "alternatives": [
+                "Introducing Our Best-in-Class AI QWEN"
+              ]
+            },
+            {
+              "id": "international-body-03",
+              "alternatives": [
+                "Model Studio enables fast development of Gen AI apps"
+              ]
+            },
+            {
+              "id": "international-body-04",
+              "alternatives": [
+                "Platform for AI (PAI) is Alibaba Cloud's scalable, cost-effective platform"
+              ]
+            },
+            {
+              "id": "international-body-05",
+              "alternatives": [
+                "Get to Know QWEN #1 Most Downloaded Open-Source Model"
+              ]
+            },
+            {
+              "id": "international-body-06",
+              "alternatives": [
+                "End-to-End AI and Cloud Solutions For All Your Needs"
+              ]
+            },
+            {
+              "id": "international-body-07",
+              "alternatives": [
+                "Elastic Compute Service (ECS)"
+              ]
+            },
+            {
+              "id": "international-body-08",
+              "alternatives": [
+                "Object Storage Service (OSS)"
+              ]
+            },
+            {
+              "id": "international-body-09",
+              "alternatives": [
+                "Domain Names and Website"
+              ]
+            },
+            {
+              "id": "international-body-10",
+              "alternatives": [
+                "Start Your Free Trial"
+              ]
+            },
+            {
+              "id": "international-body-11",
+              "alternatives": [
+                "Industry Use Cases"
+              ]
+            },
+            {
+              "id": "international-body-12",
+              "alternatives": [
+                "Loved by Innovators All Over the World"
+              ]
+            },
+            {
+              "id": "international-body-13",
+              "alternatives": [
+                "Our Leadership Status Awarded by Global Analysts"
+              ]
+            },
+            {
+              "id": "international-body-14",
+              "alternatives": [
+                "Open for Business Globally 24/7"
+              ]
+            },
+            {
+              "id": "international-body-15",
+              "alternatives": [
+                "#1 most compliant cloud platform in Asia with 150+ certificates"
+              ]
+            },
+            {
+              "id": "international-body-16",
+              "alternatives": [
+                "Documentation Center"
+              ]
+            }
+          ]
+        },
+        "body_requirements": {},
+        "source_benchmark": {
+          "mode": "ranked_domain_homepage",
+          "rank_metadata_used_for_scoring": false,
+          "ranking_source": "Semrush Most Visited Websites in China, July 2026",
+          "china_rank": 26,
+          "requested_ranked_domain": "aliyun.com",
+          "observed_final_url": "https://www.alibabacloud.com/en",
+          "stable_annotation": {
+            "registry": "popular-sites",
+            "content_kind": "landing_page",
+            "stable_fields": [
+              "task_related_visible_page_text"
+            ],
+            "structural_only_fields": [],
+            "anchor_evidence": null,
+            "anchor_evidence_sha256": null,
+            "record_requirement": "Every registered stable body section from the fixed official international homepage is required.",
+            "task_decision_scope": "structure_and_explicit_stable_content",
+            "live_factual_correctness": null,
+            "note": "The China-ranked source domain is retained as sampling provenance. The task now fixes the official Alibaba Cloud international English URL; participant output was not used to define its complete body scope."
+          }
+        },
+        "category": "global_homepage",
+        "tags": [
+          "global-popular",
+          "ranked-domain-homepage",
+          "landing_page"
+        ]
+      },
+      "evidence": {
+        "source": "sha256:b83fff306c63a8cbc3ad80b0e5f4d93d124ac5da21b5f1b728bf3f588e5fc7bd",
+        "observed_at": "2026-10-14",
+        "observed_text": "The fixed official /en URL returned a complete English body spanning the hero, QWEN platform, model and product descriptions, trial, industry solutions, customer evidence, analyst recognition, global infrastructure, compliance, and support sections.",
+        "qualification_bundle_sha256": "b83fff306c63a8cbc3ad80b0e5f4d93d124ac5da21b5f1b728bf3f588e5fc7bd",
+        "regression_ids": [
+          "complete-official-homepage-body-passes",
+          "homepage-navigation-and-brand-shell-do-not-pass"
+        ]
+      },
+      "execution_effect": "rerun_all_methods"
+    },
+    {
+      "case_id": "china-homepage-081-elsevier-com",
+      "expected_definition_sha256": "fae970f5feae5b29128c614d28b99face408f59c247a15c6f52fc416c1d64896",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "Health"
+              ]
+            },
+            {
+              "id": "stable-anchor-6",
+              "alternatives": [
+                "Careers"
+              ]
+            },
+            {
+              "id": "stable-anchor-7",
+              "alternatives": [
+                "Industry"
+              ]
+            },
+            {
+              "id": "stable-anchor-8",
+              "alternatives": [
+                "Open access"
+              ]
+            },
+            {
+              "id": "stable-anchor-9",
+              "alternatives": [
+                "Useful links"
+              ]
+            },
+            {
+              "id": "stable-anchor-10",
+              "alternatives": [
+                "Accessibility"
+              ]
+            },
+            {
+              "id": "stable-anchor-11",
+              "alternatives": [
+                "Cookie Policy"
+              ]
+            },
+            {
+              "id": "stable-anchor-13",
+              "alternatives": [
+                "About Elsevier"
+              ]
+            },
+            {
+              "id": "stable-anchor-14",
+              "alternatives": [
+                "Privacy policy"
+              ]
+            },
+            {
+              "id": "stable-anchor-15",
+              "alternatives": [
+                "Publish a book"
+              ]
+            },
+            {
+              "id": "stable-anchor-16",
+              "alternatives": [
+                "Publish with us"
+              ]
+            },
+            {
+              "id": "stable-anchor-17",
+              "alternatives": [
+                "Customer support"
+              ]
+            },
+            {
+              "id": "stable-anchor-18",
+              "alternatives": [
+                "Elsevier Connect"
+              ]
+            },
+            {
+              "id": "stable-anchor-19",
+              "alternatives": [
+                "Submit your paper"
+              ]
+            },
+            {
+              "id": "stable-anchor-20",
+              "alternatives": [
+                "View all products"
+              ]
+            },
+            {
+              "id": "stable-anchor-21",
+              "alternatives": [
+                "More from Elsevier"
+              ]
+            },
+            {
+              "id": "stable-anchor-22",
+              "alternatives": [
+                "Terms & Conditions"
+              ]
+            },
+            {
+              "id": "stable-anchor-23",
+              "alternatives": [
+                "Researcher & Author"
+              ]
+            },
+            {
+              "id": "stable-anchor-24",
+              "alternatives": [
+                "Academic & Government"
+              ]
+            },
+            {
+              "id": "stable-anchor-26",
+              "alternatives": [
+                "Resources for Editors"
+              ]
+            },
+            {
+              "id": "stable-anchor-27",
+              "alternatives": [
+                "Shop Books & Journals"
+              ]
+            },
+            {
+              "id": "stable-anchor-28",
+              "alternatives": [
+                "Resources for Reviewers"
+              ]
+            },
+            {
+              "id": "stable-anchor-29",
+              "alternatives": [
+                "Advancing human progress"
+              ]
+            },
+            {
+              "id": "stable-anchor-30",
+              "alternatives": [
+                "Publish your article in a journal"
+              ]
+            }
+          ]
+        },
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-14",
+          "method": "Independent fresh anonymous Chromium initial-page observations",
+          "reference_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+          "note": "Two byte-identical current observations remain on the declared Elsevier URL and retain 24 stable labels; six retired product labels are absent.",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+          "observation_sha256s": [
+            "20bef1fbdb37fcb1c381bb9ca81627af4ee251056cfb1b7ad67270d9fa44c251",
+            "4bc4e2a64a5dcffd63bdd792cd8de1f84ed13a334ab1d013f55a1d5a8b7dcb1f"
+          ]
+        }
+      },
+      "evidence": {
+        "source": "sha256:74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "observed_at": "2026-10-14",
+        "observed_text": "Two byte-identical current observations remain on the declared Elsevier URL and retain 24 stable labels; six retired product labels are absent.",
+        "qualification_bundle_sha256": "74e7841b8937fc6fea41f50a40b050ac3872f2c7fce2a8779283b0d9df7e9fcb",
+        "regression_ids": [
+          "current-homepage-stable-intersection-passes",
+          "obsolete-homepage-anchor-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "china-homepage-050-openai-com",
+      "expected_definition_sha256": "972cf4042ec508e1750fde47e88464b2705c9dc230dcc207ff6a233fd75a744c",
+      "set": {
+        "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：Docs；More；News；Codex；Academy；Careers；Company；Podcast；Support；About Us；Apps SDK；Download；Overview；Products；Security；Resources；Solutions；API Log In；Developers；Foundation；Help Center；Open Models；Our Charter；Try ChatGPT；API Platform；Terms of Use；Contact Sales；Release Notes；Other Policies；Privacy Policy；Research Index；Developer Forum；Safety Approach；ChatGPT Business；Customer Stories；Terms & Policies；OpenAI。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
+        "reference_answer": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：Docs；More；News；Codex；Academy；Careers；Company；Podcast；Support；About Us；Apps SDK；Download；Overview；Products；Security；Resources；Solutions；API Log In；Developers；Foundation；Help Center；Open Models；Our Charter；Try ChatGPT；API Platform；Terms of Use；Contact Sales；Release Notes；Other Policies；Privacy Policy；Research Index；Developer Forum；Safety Approach；ChatGPT Business；Customer Stories；Terms & Policies；OpenAI。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
+        "ground_truth_evidence": [
+          {
+            "source": "https://openai.com/",
+            "supports": "The current official homepage retains every registered stable body label except the retired Engineering link."
+          }
+        ],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-1",
+              "alternatives": [
+                "Docs"
+              ]
+            },
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "More"
+              ]
+            },
+            {
+              "id": "stable-anchor-3",
+              "alternatives": [
+                "News"
+              ]
+            },
+            {
+              "id": "stable-anchor-4",
+              "alternatives": [
+                "Codex"
+              ]
+            },
+            {
+              "id": "stable-anchor-5",
+              "alternatives": [
+                "Academy"
+              ]
+            },
+            {
+              "id": "stable-anchor-6",
+              "alternatives": [
+                "Careers"
+              ]
+            },
+            {
+              "id": "stable-anchor-7",
+              "alternatives": [
+                "Company"
+              ]
+            },
+            {
+              "id": "stable-anchor-8",
+              "alternatives": [
+                "Podcast"
+              ]
+            },
+            {
+              "id": "stable-anchor-9",
+              "alternatives": [
+                "Support"
+              ]
+            },
+            {
+              "id": "stable-anchor-10",
+              "alternatives": [
+                "About Us"
+              ]
+            },
+            {
+              "id": "stable-anchor-11",
+              "alternatives": [
+                "Apps SDK"
+              ]
+            },
+            {
+              "id": "stable-anchor-12",
+              "alternatives": [
+                "Download"
+              ]
+            },
+            {
+              "id": "stable-anchor-13",
+              "alternatives": [
+                "Overview"
+              ]
+            },
+            {
+              "id": "stable-anchor-14",
+              "alternatives": [
+                "Products"
+              ]
+            },
+            {
+              "id": "stable-anchor-15",
+              "alternatives": [
+                "Security"
+              ]
+            },
+            {
+              "id": "stable-anchor-16",
+              "alternatives": [
+                "Resources"
+              ]
+            },
+            {
+              "id": "stable-anchor-17",
+              "alternatives": [
+                "Solutions"
+              ]
+            },
+            {
+              "id": "stable-anchor-18",
+              "alternatives": [
+                "API Log In"
+              ]
+            },
+            {
+              "id": "stable-anchor-19",
+              "alternatives": [
+                "Developers"
+              ]
+            },
+            {
+              "id": "stable-anchor-20",
+              "alternatives": [
+                "Foundation"
+              ]
+            },
+            {
+              "id": "stable-anchor-22",
+              "alternatives": [
+                "Help Center"
+              ]
+            },
+            {
+              "id": "stable-anchor-23",
+              "alternatives": [
+                "Open Models"
+              ]
+            },
+            {
+              "id": "stable-anchor-24",
+              "alternatives": [
+                "Our Charter"
+              ]
+            },
+            {
+              "id": "stable-anchor-25",
+              "alternatives": [
+                "Try ChatGPT"
+              ]
+            },
+            {
+              "id": "stable-anchor-26",
+              "alternatives": [
+                "API Platform"
+              ]
+            },
+            {
+              "id": "stable-anchor-27",
+              "alternatives": [
+                "Terms of Use"
+              ]
+            },
+            {
+              "id": "stable-anchor-28",
+              "alternatives": [
+                "Contact Sales"
+              ]
+            },
+            {
+              "id": "stable-anchor-29",
+              "alternatives": [
+                "Release Notes"
+              ]
+            },
+            {
+              "id": "stable-anchor-30",
+              "alternatives": [
+                "Other Policies"
+              ]
+            },
+            {
+              "id": "stable-anchor-31",
+              "alternatives": [
+                "Privacy Policy"
+              ]
+            },
+            {
+              "id": "stable-anchor-32",
+              "alternatives": [
+                "Research Index"
+              ]
+            },
+            {
+              "id": "stable-anchor-33",
+              "alternatives": [
+                "Developer Forum"
+              ]
+            },
+            {
+              "id": "stable-anchor-34",
+              "alternatives": [
+                "Safety Approach"
+              ]
+            },
+            {
+              "id": "stable-anchor-35",
+              "alternatives": [
+                "ChatGPT Business"
+              ]
+            },
+            {
+              "id": "stable-anchor-36",
+              "alternatives": [
+                "Customer Stories"
+              ]
+            },
+            {
+              "id": "stable-anchor-37",
+              "alternatives": [
+                "Terms & Policies"
+              ]
+            },
+            {
+              "id": "stable-anchor-38",
+              "alternatives": [
+                "OpenAI"
+              ]
+            }
+          ]
+        },
+        "source_verification": {
+          "state": "valid",
+          "checked_at": "2026-10-14",
+          "method": "Independent current official-page retrieval",
+          "reference_sha256": "d25d5cf54c60526d976ac6072c411cb83e12e88ef13c7073528b5c5104b2b6cf",
+          "provider_output_used": false,
+          "qualification_bundle_sha256": "536ec31bff4e8d945564e30ebf017c262bb6038c27d398bad1f26a852c9a289b",
+          "note": "The current official homepage retains all other registered stable labels. Engineering is absent and is the only retired gate removed."
+        }
+      },
+      "evidence": {
+        "source": "sha256:536ec31bff4e8d945564e30ebf017c262bb6038c27d398bad1f26a852c9a289b",
+        "observed_at": "2026-10-14",
+        "observed_text": "The current official homepage retains Docs, More, News, Codex, Academy, Careers, Company, Podcast, Support, About Us, Apps SDK, Download, Overview, Products, Security, Resources, Solutions, API Log In, Developers, Foundation, Help Center, Open Models, Our Charter, Try ChatGPT, API Platform, Terms of Use, Contact Sales, Release Notes, Other Policies, Privacy Policy, Research Index, Developer Forum, Safety Approach, ChatGPT Business, Customer Stories, Terms & Policies, and OpenAI. Engineering is absent.",
+        "regression_ids": [
+          "current-homepage-stable-intersection-passes",
+          "obsolete-homepage-anchor-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "risk-diverse-042",
+      "expected_definition_sha256": "6aba3f75d126638c5a852af5b0be872afbb5bf44f732d5ce4dd26a84f94ae5d6",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-01",
+              "alternatives": [
+                "devuan"
+              ]
+            },
+            {
+              "id": "stable-02",
+              "alternatives": [
+                "installer-iso"
+              ]
+            },
+            {
+              "id": "stable-03",
+              "alternatives": [
+                "README.md"
+              ]
+            },
+            {
+              "id": "stable-04",
+              "alternatives": [
+                "Devuan Installer ISO"
+              ]
+            },
+            {
+              "id": "stable-05",
+              "alternatives": [
+                "How to Build an ISO"
+              ]
+            },
+            {
+              "id": "stable-06",
+              "alternatives": [
+                "Using APT Proxy"
+              ]
+            },
+            {
+              "id": "stable-07",
+              "alternatives": [
+                "Including local udebs"
+              ]
+            },
+            {
+              "id": "stable-08",
+              "alternatives": [
+                "Including local debs"
+              ]
+            },
+            {
+              "id": "stable-09",
+              "alternatives": [
+                "Help?"
+              ]
+            },
+            {
+              "id": "stable-10",
+              "alternatives": [
+                "Code"
+              ]
+            },
+            {
+              "id": "stable-11",
+              "alternatives": [
+                "Clone"
+              ]
+            },
+            {
+              "id": "stable-12",
+              "alternatives": [
+                "Explore"
+              ]
+            },
+            {
+              "id": "stable-13",
+              "alternatives": [
+                "Help"
+              ]
+            },
+            {
+              "id": "stable-14",
+              "alternatives": [
+                "Register"
+              ]
+            },
+            {
+              "id": "stable-15",
+              "alternatives": [
+                "Sign In"
+              ]
+            },
+            {
+              "id": "stable-16",
+              "alternatives": [
+                "Issues"
+              ]
+            },
+            {
+              "id": "stable-17",
+              "alternatives": [
+                "Pull Requests"
+              ]
+            },
+            {
+              "id": "stable-18",
+              "alternatives": [
+                "Projects"
+              ]
+            },
+            {
+              "id": "stable-19",
+              "alternatives": [
+                "Releases"
+              ]
+            },
+            {
+              "id": "stable-20",
+              "alternatives": [
+                "Wiki"
+              ]
+            }
+          ],
+          "stable_text_role": "diagnostic"
+        }
+      },
+      "evidence": {
+        "source": "evaluation/risk-control/history/v5/dataset-catalog.json",
+        "observed_at": "2026-10-14",
+        "observed_text": "The frozen README body owns the public project identity and summary. Responsive repository controls remain diagnostic.",
+        "root_cause": "conditional_ui_control_not_body_requirement",
+        "prior_acceptance_contract_sha256": "cd3c63a44782fe0bfb990561da1413a2ca389ec3ec0ea7a9d847f9cc7c203055",
+        "revised_acceptance_contract_sha256": "2d476c2e4d389253fb6c869c2c8a187954bbfd0636df488b79d60535f4a17c4a",
+        "affected_scope": "risk-diverse-042 across all registered methods; offline rescore only",
+        "regression_ids": [
+          "declared-body-without-conditional-ui-control-passes",
+          "conditional-ui-control-cannot-replace-declared-body"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "risk-diverse-181",
+      "expected_definition_sha256": "f5dc3515fbb61ed45e0be4e6784e314728a703f4d65e3eac5f0c276617fbdf02",
+      "set": {
+        "composite_acceptance": {
+          "version": 1,
+          "groups": [
+            {
+              "id": "general-statistics",
+              "kind": "field_report",
+              "start_pattern": "^(?:#{1,6}\\s*)?General statistics(?:\\s+(?:\\\\)?\\[(?:show|hide)(?:\\\\)?\\])*$",
+              "end_pattern": "^(?:#{1,6}\\s*)?Prose\\s*$",
+              "required_fields": [
+                {
+                  "id": "page_id",
+                  "kind": "integer",
+                  "aliases": [
+                    "ID"
+                  ]
+                },
+                {
+                  "id": "wikidata_id",
+                  "kind": "text",
+                  "aliases": [
+                    "Wikidata ID"
+                  ],
+                  "pattern": "Q[0-9]+"
+                },
+                {
+                  "id": "page_size",
+                  "kind": "integer",
+                  "aliases": [
+                    "Page size"
+                  ]
+                },
+                {
+                  "id": "total_edits",
+                  "kind": "integer",
+                  "aliases": [
+                    "Total edits"
+                  ]
+                },
+                {
+                  "id": "editors",
+                  "kind": "integer",
+                  "aliases": [
+                    "Editors"
+                  ]
+                },
+                {
+                  "id": "assessment",
+                  "kind": "text",
+                  "aliases": [
+                    "Assessment"
+                  ]
+                },
+                {
+                  "id": "page_watchers",
+                  "kind": "integer",
+                  "aliases": [
+                    "Page watchers"
+                  ]
+                },
+                {
+                  "id": "pageviews",
+                  "kind": "integer",
+                  "aliases": [
+                    "Pageviews"
+                  ]
+                },
+                {
+                  "id": "first_edit",
+                  "kind": "date_or_time",
+                  "aliases": [
+                    "First edit"
+                  ]
+                },
+                {
+                  "id": "latest_edit",
+                  "kind": "date_or_time",
+                  "aliases": [
+                    "Latest edit"
+                  ]
+                }
+              ],
+              "fixed_values": {
+                "page_id": "1164",
+                "wikidata_id": "Q11660"
+              }
+            },
+            {
+              "id": "prose-statistics",
+              "kind": "field_report",
+              "start_pattern": "^(?:#{1,6}\\s*)?Prose\\s*$",
+              "end_pattern": "^(?:#{1,6}\\s*)?Registered edits(?:\\s*(?:·|:|[-–—])\\s*.*)?$",
+              "required_fields": [
+                {
+                  "id": "prose_words",
+                  "kind": "integer",
+                  "aliases": [
+                    "Words"
+                  ]
+                },
+                {
+                  "id": "references",
+                  "kind": "integer",
+                  "aliases": [
+                    "References"
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "research/risk-control-xtools-field-scope-revision.json",
+        "observed_at": "2026-10-14",
+        "observed_text": "General statistics and Prose are separate bounded sections; Words and References belong to Prose rather than the preceding field list.",
+        "root_cause": "field_report_section_ownership",
+        "prior_composite_acceptance_sha256": "17ce23c6b3036ae0a4314cfceaa815eed05abe38389f0c8879f78ae01a0ca8b8",
+        "revised_composite_acceptance_sha256": "04c4698467834ad4492ce2caadfdcd16bfeacf2a9e0e737db75fd7802b00e6d0",
+        "affected_scope": "risk-diverse-181 across all registered methods; offline rescore only",
+        "regression_ids": [
+          "markdown-field-report-cells-own-canonical-fixed-values",
+          "markdown-field-report-cannot-borrow-fixed-value-from-comment",
+          "scoped-field-report-reads-declared-prose-subfields",
+          "scoped-field-report-cannot-replace-words-with-unrelated-bytes",
+          "field-report-scope-accepts-plain-and-markdown-heading-boundaries",
+          "field-report-scope-requires-declared-semantic-end-boundary"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "risk-diverse-192",
+      "expected_definition_sha256": "e5aa019d864c6248715f6183e159bed1751aeaee849d29179723b743eb27111b",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-01",
+              "alternatives": [
+                "Explore"
+              ]
+            },
+            {
+              "id": "stable-02",
+              "alternatives": [
+                "Share"
+              ]
+            },
+            {
+              "id": "stable-03",
+              "alternatives": [
+                "Software"
+              ]
+            },
+            {
+              "id": "stable-04",
+              "alternatives": [
+                "Projects"
+              ]
+            },
+            {
+              "id": "stable-05",
+              "alternatives": [
+                "About ibiblio"
+              ]
+            },
+            {
+              "id": "stable-06",
+              "alternatives": [
+                "ibiblio.org is a collaboration of the School of Information and Library Science and Information Technology Services at the University of North Carolina at Chapel Hill."
+              ]
+            },
+            {
+              "id": "stable-07",
+              "alternatives": [
+                "Donate"
+              ]
+            },
+            {
+              "id": "stable-08",
+              "alternatives": [
+                "About"
+              ]
+            },
+            {
+              "id": "stable-09",
+              "alternatives": [
+                "Help"
+              ]
+            },
+            {
+              "id": "stable-10",
+              "alternatives": [
+                "Blog"
+              ]
+            },
+            {
+              "id": "stable-11",
+              "alternatives": [
+                "Contact"
+              ]
+            },
+            {
+              "id": "stable-12",
+              "alternatives": [
+                "Privacy"
+              ]
+            },
+            {
+              "id": "stable-13",
+              "alternatives": [
+                "Logos"
+              ]
+            }
+          ],
+          "stable_text_role": "diagnostic",
+          "page_patterns": [
+            "(?is)\\bibiblio(?:\\.org)?\\b.{0,500}\\b(?:collections? of collections|public digital (?:library|archive)|digital (?:library|archive|repository))\\b.{0,700}\\b(?:freely available information|free(?:ly)? available (?:digital )?(?:information|resources|collections))\\b.{0,700}\\b(?:software|music|literature|art|history|science|politics|cultural studies)\\b.{0,700}\\b(?:UNC|University of North Carolina(?: at|-)? Chapel Hill)\\b"
+          ]
+        },
+        "composite_acceptance": null
+      },
+      "evidence": {
+        "source": "research/risk-control-explicit-content-owner-revision.json",
+        "observed_at": "2026-10-14",
+        "observed_text": "The task requires ibiblio archive identity and its automatically visible collection introduction, not a changing three-item homepage news list.",
+        "root_cause": "archive_introduction_scope_not_legacy_ui_copy",
+        "prior_acceptance_contract_sha256": "d2f662fb4a35b057d95313da266206c45a75cde85f5b1a7de8fae8ffbc173e72",
+        "revised_acceptance_contract_sha256": "fccbd213f940926041cd8d1bd68e87fec141098d01b0ecc68bd26a823686b84e",
+        "prior_composite_acceptance_sha256": "a55470085f88f625c3d18dcab6c017e4ad6c278fd845eb5f6a045f48f778dcda",
+        "revised_composite_acceptance": null,
+        "affected_scope": "risk-diverse-192 across all registered methods; offline rescore only",
+        "regression_ids": [
+          "archive-introduction-semantic-scope-passes",
+          "archive-news-and-footer-cannot-replace-introduction",
+          "wrong-archive-identity-cannot-satisfy-introduction",
+          "archive-identity-without-topical-introduction-fails"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "china-homepage-089-yuque-com",
+      "expected_definition_sha256": "54a9ac13bc98bdcad886dea102e6b82af94fc6841776b50460ddf83716defe77",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-1",
+              "alternatives": [
+                "画板"
+              ]
+            },
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "互动交流"
+              ]
+            },
+            {
+              "id": "stable-anchor-3",
+              "alternatives": [
+                "文档协同"
+              ]
+            },
+            {
+              "id": "stable-anchor-4",
+              "alternatives": [
+                "权限管理"
+              ]
+            },
+            {
+              "id": "stable-anchor-5",
+              "alternatives": [
+                "特色卡片"
+              ]
+            },
+            {
+              "id": "stable-anchor-6",
+              "alternatives": [
+                "目录编排"
+              ]
+            },
+            {
+              "id": "stable-anchor-7",
+              "alternatives": [
+                "知识管理"
+              ]
+            },
+            {
+              "id": "stable-anchor-8",
+              "alternatives": [
+                "个人免费使用"
+              ]
+            },
+            {
+              "id": "stable-anchor-9",
+              "alternatives": [
+                "团队免费使用"
+              ]
+            },
+            {
+              "id": "stable-anchor-10",
+              "alternatives": [
+                "组件化编辑器"
+              ]
+            },
+            {
+              "id": "stable-anchor-11",
+              "alternatives": [
+                "专业好用的编辑器"
+              ]
+            },
+            {
+              "id": "stable-anchor-12",
+              "alternatives": [
+                "像书一样的知识库"
+              ]
+            },
+            {
+              "id": "stable-anchor-13",
+              "alternatives": [
+                "Edge 插件"
+              ]
+            },
+            {
+              "id": "stable-anchor-14",
+              "alternatives": [
+                "Chrome 插件"
+              ]
+            },
+            {
+              "id": "stable-anchor-15",
+              "alternatives": [
+                "Help Center"
+              ]
+            },
+            {
+              "id": "stable-anchor-16",
+              "alternatives": [
+                "Security"
+              ]
+            },
+            {
+              "id": "stable-anchor-17",
+              "alternatives": [
+                "Terms"
+              ]
+            },
+            {
+              "id": "stable-anchor-18",
+              "alternatives": [
+                "Join us"
+              ]
+            },
+            {
+              "id": "stable-anchor-19",
+              "alternatives": [
+                "Pricing"
+              ]
+            },
+            {
+              "id": "stable-anchor-20",
+              "alternatives": [
+                "Support"
+              ]
+            },
+            {
+              "id": "stable-anchor-23",
+              "alternatives": [
+                "Download"
+              ]
+            },
+            {
+              "id": "stable-anchor-24",
+              "alternatives": [
+                "Feedback"
+              ]
+            },
+            {
+              "id": "stable-anchor-26",
+              "alternatives": [
+                "Developer"
+              ]
+            },
+            {
+              "id": "stable-anchor-27",
+              "alternatives": [
+                "Contact us"
+              ]
+            },
+            {
+              "id": "stable-anchor-28",
+              "alternatives": [
+                "Media reports"
+              ]
+            },
+            {
+              "id": "stable-anchor-29",
+              "alternatives": [
+                "Product information"
+              ]
+            },
+            {
+              "id": "stable-anchor-31",
+              "alternatives": [
+                "Login / Register"
+              ]
+            }
+          ]
+        },
+        "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：画板；互动交流；文档协同；权限管理；特色卡片；目录编排；知识管理；个人免费使用；团队免费使用；组件化编辑器；专业好用的编辑器；像书一样的知识库；Edge 插件；Chrome 插件；Help Center；Security；Terms；Join us；Pricing；Support；Download；Feedback；Developer；Contact us；Media reports；Product information；Login / Register。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
+        "reference_answer": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：画板；互动交流；文档协同；权限管理；特色卡片；目录编排；知识管理；个人免费使用；团队免费使用；组件化编辑器；专业好用的编辑器；像书一样的知识库；Edge 插件；Chrome 插件；Help Center；Security；Terms；Join us；Pricing；Support；Download；Feedback；Developer；Contact us；Media reports；Product information；Login / Register。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。"
+      },
+      "evidence": {
+        "source": "sha256:b25d34580413cd6303983e5d4f12cbcdceaee759191b9172f8f5776a448f3809",
+        "observed_at": "2026-10-14",
+        "observed_text": "The bound Yuque first-load stable page contains Download and does not contain 下载.",
+        "root_cause": "unobserved_locale_alternative",
+        "prior_acceptance_contract_sha256": "96aa435b978f38687adaf8b2457a7ddb03f44563300de83d35dac1d24e506403",
+        "revised_acceptance_contract_sha256": "2c62fcdf17a79c733c3b476dfec488cea2d29d9d7f3190d88aaa73796049d730",
+        "affected_scope": "china-homepage-089-yuque-com across all registered methods; offline rescore only",
+        "regression_ids": [
+          "frozen-localized-homepage-anchor-passes",
+          "other-locale-homepage-copy-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "global-homepage-008-whatsapp-com",
+      "expected_definition_sha256": "7ee2656ed20ae532286dd7c9029aa79d72602ef1b26fbae7f86a34567d0b67ea",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "current-stable-c737a59e7210",
+              "alternatives": [
+                "私密地收发消息"
+              ],
+              "source_evidence_sha256": "3d379cb138e21709683e314d07bac7576279bfedea8796af61c4baecbaff0584"
+            },
+            {
+              "id": "current-stable-8a47066bf393",
+              "alternatives": [
+                "下载"
+              ],
+              "source_evidence_sha256": "3d379cb138e21709683e314d07bac7576279bfedea8796af61c4baecbaff0584"
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "sha256:3d379cb138e21709683e314d07bac7576279bfedea8796af61c4baecbaff0584",
+        "observed_at": "2026-10-14",
+        "observed_text": "Both bound anonymous first-load observations contain 私密地收发消息 and 下载; the English counterparts are not part of this frozen page.",
+        "root_cause": "unobserved_locale_alternative",
+        "prior_acceptance_contract_sha256": "7951b8874e5cc12a0ada7a3563c7a3bdad438dcc35381c2568c4671db4875163",
+        "revised_acceptance_contract_sha256": "683faa04905df0b3838e3ec208239b4f14b0f430aaeab455419509eaea173ab4",
+        "affected_scope": "global-homepage-008-whatsapp-com across all registered methods; offline rescore only",
+        "regression_ids": [
+          "frozen-localized-homepage-anchor-passes",
+          "other-locale-homepage-copy-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "china-homepage-012-feishu-cn",
+      "expected_definition_sha256": "b11303b1cccafbd5933c46e5f3de52c6b31e711efbc5599ca044fe73e8c469ba",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-anchor-1",
+              "alternatives": [
+                "定价"
+              ]
+            },
+            {
+              "id": "stable-anchor-2",
+              "alternatives": [
+                "审批"
+              ]
+            },
+            {
+              "id": "stable-anchor-3",
+              "alternatives": [
+                "邮箱"
+              ]
+            },
+            {
+              "id": "stable-anchor-4",
+              "alternatives": [
+                "云文档"
+              ]
+            },
+            {
+              "id": "stable-anchor-5",
+              "alternatives": [
+                "知识库"
+              ]
+            },
+            {
+              "id": "stable-anchor-6",
+              "alternatives": [
+                "下载飞书"
+              ]
+            },
+            {
+              "id": "stable-anchor-7",
+              "alternatives": [
+                "产品功能"
+              ]
+            },
+            {
+              "id": "stable-anchor-8",
+              "alternatives": [
+                "企业服务"
+              ]
+            },
+            {
+              "id": "stable-anchor-9",
+              "alternatives": [
+                "关于飞书"
+              ]
+            },
+            {
+              "id": "stable-anchor-10",
+              "alternatives": [
+                "加入我们"
+              ]
+            },
+            {
+              "id": "stable-anchor-11",
+              "alternatives": [
+                "协同办公"
+              ]
+            },
+            {
+              "id": "stable-anchor-12",
+              "alternatives": [
+                "博客中心"
+              ]
+            },
+            {
+              "id": "stable-anchor-13",
+              "alternatives": [
+                "即时消息"
+              ]
+            },
+            {
+              "id": "stable-anchor-14",
+              "alternatives": [
+                "友情链接"
+              ]
+            },
+            {
+              "id": "stable-anchor-15",
+              "alternatives": [
+                "合作伙伴"
+              ]
+            },
+            {
+              "id": "stable-anchor-16",
+              "alternatives": [
+                "多维表格"
+              ]
+            },
+            {
+              "id": "stable-anchor-17",
+              "alternatives": [
+                "安全合规"
+              ]
+            },
+            {
+              "id": "stable-anchor-18",
+              "alternatives": [
+                "帮助中心"
+              ]
+            },
+            {
+              "id": "stable-anchor-19",
+              "alternatives": [
+                "应用目录"
+              ]
+            },
+            {
+              "id": "stable-anchor-20",
+              "alternatives": [
+                "开放平台"
+              ]
+            },
+            {
+              "id": "stable-anchor-21",
+              "alternatives": [
+                "技术支持"
+              ]
+            },
+            {
+              "id": "stable-anchor-22",
+              "alternatives": [
+                "探索飞书"
+              ]
+            },
+            {
+              "id": "stable-anchor-23",
+              "alternatives": [
+                "更新日志"
+              ]
+            },
+            {
+              "id": "stable-anchor-24",
+              "alternatives": [
+                "服务协议"
+              ]
+            },
+            {
+              "id": "stable-anchor-25",
+              "alternatives": [
+                "查看案例"
+              ]
+            },
+            {
+              "id": "stable-anchor-26",
+              "alternatives": [
+                "管理后台"
+              ]
+            },
+            {
+              "id": "stable-anchor-27",
+              "alternatives": [
+                "组织管理"
+              ]
+            },
+            {
+              "id": "stable-anchor-28",
+              "alternatives": [
+                "联系我们"
+              ]
+            },
+            {
+              "id": "stable-anchor-29",
+              "alternatives": [
+                "联系销售"
+              ]
+            },
+            {
+              "id": "stable-anchor-30",
+              "alternatives": [
+                "营业执照"
+              ]
+            },
+            {
+              "id": "stable-anchor-31",
+              "alternatives": [
+                "视频会议"
+              ]
+            },
+            {
+              "id": "stable-anchor-32",
+              "alternatives": [
+                "解决方案"
+              ]
+            },
+            {
+              "id": "stable-anchor-33",
+              "alternatives": [
+                "隐私政策"
+              ]
+            },
+            {
+              "id": "stable-anchor-34",
+              "alternatives": [
+                "飞书人事"
+              ]
+            },
+            {
+              "id": "stable-anchor-35",
+              "alternatives": [
+                "飞书招聘"
+              ]
+            },
+            {
+              "id": "stable-anchor-36",
+              "alternatives": [
+                "飞书绩效"
+              ]
+            },
+            {
+              "id": "stable-anchor-37",
+              "alternatives": [
+                "飞书项目"
+              ]
+            },
+            {
+              "id": "stable-anchor-38",
+              "alternatives": [
+                "举报与反馈"
+              ]
+            },
+            {
+              "id": "stable-anchor-39",
+              "alternatives": [
+                "飞书 AI"
+              ]
+            },
+            {
+              "id": "stable-anchor-40",
+              "alternatives": [
+                "智能会议纪要"
+              ]
+            },
+            {
+              "id": "stable-anchor-41",
+              "alternatives": [
+                "字节跳动旗下 AI 工作平台"
+              ]
+            }
+          ]
+        },
+        "task_prompt": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：定价；审批；邮箱；云文档；知识库；下载飞书；产品功能；企业服务；关于飞书；加入我们；协同办公；博客中心；即时消息；友情链接；合作伙伴；多维表格；安全合规；帮助中心；应用目录；开放平台；技术支持；探索飞书；更新日志；服务协议；查看案例；管理后台；组织管理；联系我们；联系销售；营业执照；视频会议；解决方案；隐私政策；飞书人事；飞书招聘；飞书绩效；飞书项目；举报与反馈；飞书 AI；智能会议纪要；字节跳动旗下 AI 工作平台。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。",
+        "reference_answer": "直接获取这个热门网站页面，并保留这些三次独立观察都出现的稳定普通网页文字：定价；审批；邮箱；云文档；知识库；下载飞书；产品功能；企业服务；关于飞书；加入我们；协同办公；博客中心；即时消息；友情链接；合作伙伴；多维表格；安全合规；帮助中心；应用目录；开放平台；技术支持；探索飞书；更新日志；服务协议；查看案例；管理后台；组织管理；联系我们；联系销售；营业执照；视频会议；解决方案；隐私政策；飞书人事；飞书招聘；飞书绩效；飞书项目；举报与反馈；飞书 AI；智能会议纪要；字节跳动旗下 AI 工作平台。不点击子页面、翻页、滚动触发更多内容、登录或执行其他 Browser Use 操作；图片文字、按钮控件文字、隐藏名称、网页标题和脚本文字不能代替这些文字。"
+      },
+      "evidence": {
+        "source": "sha256:84297664cc2d46a139129346600d069a87a06ce7d042d42eb57d23b41fb04c40",
+        "observed_at": "2026-10-14",
+        "observed_text": "The bound Feishu first-load stable page contains 查看案例 and does not contain the expanded rewording 了解更多客户案例.",
+        "root_cause": "unobserved_semantic_rewording",
+        "prior_acceptance_contract_sha256": "4626943810fb826fa3b907134a4ffe720a29e2d5d436139c920d9197d590318a",
+        "revised_acceptance_contract_sha256": "a96123b755c7cd8c2d42e2115c579c06064a7b7859e34b6f5a6682bcbeb0c2f8",
+        "affected_scope": "china-homepage-012-feishu-cn across all registered methods; offline rescore only",
+        "regression_ids": [
+          "source-attested-homepage-label-passes",
+          "unattested-homepage-rewording-does-not-pass"
+        ]
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "risk-diverse-153",
+      "expected_definition_sha256": "9857521a0b6a1ec9b2a80313f994346b68c942524b45ffdbf4531c7811acdad3",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-01",
+              "alternatives": [
+                "教材《C++版信息学奥赛一本通编程启蒙》题单"
+              ]
+            },
+            {
+              "id": "stable-02",
+              "alternatives": [
+                "登录以参加训练计划",
+                "Login to join training plan"
+              ]
+            },
+            {
+              "id": "stable-03",
+              "alternatives": [
+                "题目",
+                "Problem"
+              ]
+            },
+            {
+              "id": "stable-04",
+              "alternatives": [
+                "尝试",
+                "Tried"
+              ]
+            },
+            {
+              "id": "stable-05",
+              "alternatives": [
+                "AC"
+              ]
+            },
+            {
+              "id": "stable-06",
+              "alternatives": [
+                "难度",
+                "Difficulty"
+              ]
+            },
+            {
+              "id": "stable-07",
+              "alternatives": [
+                "首页"
+              ]
+            },
+            {
+              "id": "stable-08",
+              "alternatives": [
+                "题库"
+              ]
+            },
+            {
+              "id": "stable-09",
+              "alternatives": [
+                "训练"
+              ]
+            },
+            {
+              "id": "stable-10",
+              "alternatives": [
+                "比赛"
+              ]
+            },
+            {
+              "id": "stable-11",
+              "alternatives": [
+                "评测记录"
+              ]
+            },
+            {
+              "id": "stable-12",
+              "alternatives": [
+                "排名"
+              ]
+            },
+            {
+              "id": "stable-13",
+              "alternatives": [
+                "登录"
+              ]
+            },
+            {
+              "id": "stable-14",
+              "alternatives": [
+                "注册"
+              ]
+            },
+            {
+              "id": "stable-15",
+              "alternatives": [
+                "Language"
+              ]
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "research/risk-control-navigation-language-revision.json",
+        "observed_at": "2026-10-14",
+        "observed_text": "The English navigation labels were observed only after Language → English. English login and table labels from the untouched first load remain valid.",
+        "root_cause": "interactive_locale_state_added_to_no_interaction_contract",
+        "prior_acceptance_contract_sha256": "a567f0a71c3e7718f3c37af7ee62ebb6c375de74e50c4c7d46d9e718657b09f4",
+        "revised_acceptance_contract_sha256": "40b7f12b2ed32521482d2c734bf4cb5c57380a6286f9a69b5dde5270c12a6e1e",
+        "affected_scope": "risk-diverse-153 across all registered methods; offline rescore only",
+        "regression_ids": [
+          "first-load-mixed-language-controls-pass",
+          "clicked-locale-navigation-does-not-pass-first-load-contract"
+        ],
+        "first_load_observation_sha256": "479116ad4cdca847c460bc41690dee7f7dd6a7e21d07e2bf8d2e32d24f9b6687"
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "live-037-breadcrumb",
+      "expected_definition_sha256": "418e6f2b5bdd966d38e42f415c63ab22adf4b70e03daf66cf418b9ecfc984bcf",
+      "set": {
+        "required_facts": [
+          {
+            "id": "page-purpose",
+            "alternatives": [
+              "NOAA experts provide data, tools and information to help people understand, prepare for and adapt to our changing climate."
+            ]
+          },
+          {
+            "id": "climate-destination-drought",
+            "alternatives": [
+              "Drought.gov"
+            ]
+          },
+          {
+            "id": "climate-destination-heat",
+            "alternatives": [
+              "Heat.gov"
+            ]
+          },
+          {
+            "id": "focus-area-1",
+            "alternatives": [
+              "Education"
+            ]
+          },
+          {
+            "id": "focus-area-2",
+            "alternatives": [
+              "Sanctuaries"
+            ]
+          },
+          {
+            "id": "focus-area-3",
+            "alternatives": [
+              "Charting"
+            ]
+          },
+          {
+            "id": "focus-area-4",
+            "alternatives": [
+              "Marine & Aviation"
+            ]
+          },
+          {
+            "id": "focus-area-5",
+            "alternatives": [
+              "Research"
+            ]
+          },
+          {
+            "id": "focus-area-6",
+            "alternatives": [
+              "Satellites"
+            ]
+          },
+          {
+            "id": "focus-area-7",
+            "alternatives": [
+              "Fisheries"
+            ]
+          },
+          {
+            "id": "focus-area-8",
+            "alternatives": [
+              "Ocean & Coasts"
+            ]
+          },
+          {
+            "id": "focus-area-9",
+            "alternatives": [
+              "Weather"
+            ]
+          }
+        ],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "page-purpose",
+              "alternatives": [
+                "NOAA experts provide data, tools and information to help people understand, prepare for and adapt to our changing climate."
+              ]
+            },
+            {
+              "id": "climate-destination-drought",
+              "alternatives": [
+                "Drought.gov"
+              ]
+            },
+            {
+              "id": "climate-destination-heat",
+              "alternatives": [
+                "Heat.gov"
+              ]
+            },
+            {
+              "id": "focus-area-1",
+              "alternatives": [
+                "Education"
+              ]
+            },
+            {
+              "id": "focus-area-2",
+              "alternatives": [
+                "Sanctuaries"
+              ]
+            },
+            {
+              "id": "focus-area-3",
+              "alternatives": [
+                "Charting"
+              ]
+            },
+            {
+              "id": "focus-area-4",
+              "alternatives": [
+                "Marine & Aviation"
+              ]
+            },
+            {
+              "id": "focus-area-5",
+              "alternatives": [
+                "Research"
+              ]
+            },
+            {
+              "id": "focus-area-6",
+              "alternatives": [
+                "Satellites"
+              ]
+            },
+            {
+              "id": "focus-area-7",
+              "alternatives": [
+                "Fisheries"
+              ]
+            },
+            {
+              "id": "focus-area-8",
+              "alternatives": [
+                "Ocean & Coasts"
+              ]
+            },
+            {
+              "id": "focus-area-9",
+              "alternatives": [
+                "Weather"
+              ]
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "sha256:ab62f0273ab9f9b792c99d2d021bb1fe7f6ff7fcf6af9935de7b65cc4443d2e8",
+        "observed_at": "2026-10-14",
+        "observed_text": "The frozen NOAA Quick links section contains both Drought.gov and Heat.gov; they are two required facts, not interchangeable wording.",
+        "root_cause": "independent_same_document_facts_encoded_as_alternatives",
+        "prior_acceptance_contract_sha256": "519a62e1fc110a4eb78a2b61bdf2025f718ca852527a6e66f75abdc9f27210d4",
+        "revised_acceptance_contract_sha256": "88400b366e26d490bbe7e32999e048c439fc522bdfbd1d7931b508ff07ede7c4",
+        "affected_scope": "live-037-breadcrumb across all registered methods; offline rescore only",
+        "regression_ids": [
+          "same-document-required-links-both-pass",
+          "one-of-two-same-document-links-does-not-pass"
+        ],
+        "prior_required_facts_sha256": "681bf012d0d9605cae6466d9fa2004a255570b868e091222ca3ff7efd4ce7497",
+        "revised_required_facts_sha256": "604d1d6dadde50f2587ff868d5e43114767a83eaac6b76d9bbccd52df389499a"
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "cowagent-doc",
+      "expected_definition_sha256": "e4b165a4f5ea4b652a3d8fad8980106382cb65429342ea4a61753a8b30180015",
+      "set": {
+        "required_facts": [
+          {
+            "id": "tool-name",
+            "alternatives": [
+              "web_fetch",
+              "Web Fetch"
+            ]
+          },
+          {
+            "id": "url-input",
+            "alternatives": [
+              "url",
+              "URL"
+            ]
+          },
+          {
+            "id": "purpose",
+            "alternatives": [
+              "获取网页或文档内容",
+              "获取 HTTP/HTTPS URL 的内容",
+              "获取网页的文本内容"
+            ]
+          }
+        ],
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "tool-name",
+              "alternatives": [
+                "web_fetch",
+                "Web Fetch"
+              ]
+            },
+            {
+              "id": "url-input",
+              "alternatives": [
+                "url",
+                "URL"
+              ]
+            },
+            {
+              "id": "purpose",
+              "alternatives": [
+                "获取网页或文档内容",
+                "获取 HTTP/HTTPS URL 的内容",
+                "获取网页的文本内容"
+              ]
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "sha256:6d63269cfe683cd215e564852909f903c97d33fc7a01495421670ab7fe0c2591",
+        "observed_at": "2026-10-14",
+        "observed_text": "The frozen CowAgent document contains three complete purpose statements. 网页正文 is absent and 获取网页 is only a shared stem.",
+        "root_cause": "partial_stem_and_unattested_paraphrase_as_fact",
+        "prior_acceptance_contract_sha256": "10a24239eb07621417899cca0ddea18d52d29bd75b8403b6f419d8a6bc791496",
+        "revised_acceptance_contract_sha256": "8d01040116527d4d94873122337c8b4dacbce293861014d12be680135c6f7d17",
+        "affected_scope": "cowagent-doc across all registered methods; offline rescore only",
+        "regression_ids": [
+          "source-attested-purpose-statement-passes",
+          "purpose-stem-or-unattested-paraphrase-does-not-pass"
+        ],
+        "prior_required_facts_sha256": "bcafdf681d344d70301ddfc46ab59bd7090b24c9b0885c25e8f8b96ba88adbef",
+        "revised_required_facts_sha256": "61a34d8eb978a4c961ba4759170b705bd57118be17559af5350af2c35b4066ba"
+      },
+      "execution_effect": "rescore_only"
+    },
+    {
+      "case_id": "risk-diverse-059",
+      "expected_definition_sha256": "5a5131232354f0e34134945124cccdf809ba7d5e23ae710683d35063d53bc4b8",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-01",
+              "alternatives": [
+                "superlove"
+              ]
+            },
+            {
+              "id": "stable-03",
+              "alternatives": [
+                "for fanfiction, original fiction, multimedia fanworks, and more"
+              ]
+            },
+            {
+              "id": "stable-04",
+              "alternatives": [
+                "superlove is a project by"
+              ]
+            },
+            {
+              "id": "stable-05",
+              "alternatives": [
+                "girl on the moon"
+              ]
+            },
+            {
+              "id": "stable-06",
+              "alternatives": [
+                "superlove is:"
+              ]
+            },
+            {
+              "id": "stable-07",
+              "alternatives": [
+                "Find your favorites"
+              ]
+            },
+            {
+              "id": "stable-08",
+              "alternatives": [
+                "Browse"
+              ]
+            },
+            {
+              "id": "stable-09",
+              "alternatives": [
+                "Works"
+              ]
+            },
+            {
+              "id": "stable-10",
+              "alternatives": [
+                "Bookmarks"
+              ]
+            },
+            {
+              "id": "stable-11",
+              "alternatives": [
+                "Tags"
+              ]
+            },
+            {
+              "id": "stable-12",
+              "alternatives": [
+                "Collections"
+              ]
+            },
+            {
+              "id": "stable-13",
+              "alternatives": [
+                "Search"
+              ]
+            },
+            {
+              "id": "stable-14",
+              "alternatives": [
+                "People"
+              ]
+            },
+            {
+              "id": "stable-15",
+              "alternatives": [
+                "About"
+              ]
+            },
+            {
+              "id": "stable-16",
+              "alternatives": [
+                "About Us"
+              ]
+            },
+            {
+              "id": "stable-17",
+              "alternatives": [
+                "News"
+              ]
+            },
+            {
+              "id": "stable-18",
+              "alternatives": [
+                "FAQ"
+              ]
+            },
+            {
+              "id": "stable-19",
+              "alternatives": [
+                "Wrangling Guidelines"
+              ]
+            },
+            {
+              "id": "stable-20",
+              "alternatives": [
+                "Donate or Volunteer"
+              ]
+            },
+            {
+              "id": "stable-21",
+              "alternatives": [
+                "Site Status"
+              ]
+            },
+            {
+              "id": "stable-22",
+              "alternatives": [
+                "Links"
+              ]
+            }
+          ]
+        }
+      },
+      "execution_effect": "rescore_only",
+      "evidence": {
+        "source": "https://superlove.sayitditto.net/",
+        "observed_at": "2026-10-15",
+        "observed_text": "Two different header taglines appeared in three independent initial HTTP responses. The rotating slogan is not stable body content.",
+        "root_cause": "server_selected_random_header_tagline_frozen_as_stable_text",
+        "regression_ids": [
+          "random-header-tagline-does-not-replace-stable-contract",
+          "random-header-tagline-still-requires-body-purpose"
+        ],
+        "scoring_source_sha256": "db507a6f0a90c8346aaa0fc7613505c8050c20427547cfccd94754548f1c8e9f",
+        "source_receipt": {
+          "data_home_path": "evidence/research/webfetch-430-refresh-20261014/reference-superlove-random-tagline-v1/source-decision.json",
+          "sha256": "35e35e85420e3a0c20c760a79f3da77981ccbd4bf5a5c028eedf80ed8f34948c"
+        }
+      }
+    },
+    {
+      "case_id": "risk-diverse-049",
+      "execution_effect": "rescore_only",
+      "expected_definition_sha256": "36a18f11e670411c7969a26b4095de6a5b1bfe2cea37c111dbce440764e11991",
+      "set": {
+        "acceptance_contract": {
+          "version": 1,
+          "schema": "body_text",
+          "minimum_records": 0,
+          "stable_text_anchors": [
+            {
+              "id": "stable-01",
+              "alternatives": [
+                "Package Search"
+              ]
+            },
+            {
+              "id": "stable-02",
+              "alternatives": [
+                "Enter search criteria"
+              ]
+            },
+            {
+              "id": "stable-03",
+              "alternatives": [
+                "Arch"
+              ]
+            },
+            {
+              "id": "stable-04",
+              "alternatives": [
+                "Repository"
+              ]
+            },
+            {
+              "id": "stable-05",
+              "alternatives": [
+                "Keywords"
+              ]
+            },
+            {
+              "id": "stable-06",
+              "alternatives": [
+                "Repo"
+              ]
+            },
+            {
+              "id": "stable-07",
+              "alternatives": [
+                "Name"
+              ]
+            },
+            {
+              "id": "stable-08",
+              "alternatives": [
+                "Version"
+              ]
+            },
+            {
+              "id": "stable-09",
+              "alternatives": [
+                "Bugs"
+              ]
+            },
+            {
+              "id": "stable-10",
+              "alternatives": [
+                "Build Date"
+              ]
+            },
+            {
+              "id": "stable-11",
+              "alternatives": [
+                "Last Updated"
+              ]
+            },
+            {
+              "id": "stable-12",
+              "alternatives": [
+                "Delete"
+              ]
+            },
+            {
+              "id": "stable-13",
+              "alternatives": [
+                "Home"
+              ]
+            },
+            {
+              "id": "stable-14",
+              "alternatives": [
+                "Packages"
+              ]
+            },
+            {
+              "id": "stable-15",
+              "alternatives": [
+                "Forums"
+              ]
+            },
+            {
+              "id": "stable-16",
+              "alternatives": [
+                "Mailing List"
+              ]
+            },
+            {
+              "id": "stable-17",
+              "alternatives": [
+                "Download"
+              ]
+            }
+          ]
+        }
+      },
+      "evidence": {
+        "source": "https://www.archlinux32.org/packages/",
+        "observed_at": "2026-10-14T18:38:24.002970+00:00",
+        "observed_text": "The navigation link Arch Linux Official and the body heading Package Search are separate DOM elements. Their concatenation is not a heading.",
+        "root_cause": "stable_anchor_concatenates_unrelated_navigation_and_body_heading",
+        "regression_ids": [
+          "body-heading-does-not-require-joined-navigation",
+          "navigation-alone-does-not-replace-body-heading"
+        ],
+        "independent_evidence": {
+          "data_home_path": "evidence/research/webfetch-430-refresh-20261014/reference-archlinux32-cross-module-anchor-v1/source-decision.json",
+          "sha256": "e3061581d465facd39f5fcaac17e08850bcf6d4ec0f6899c1851dc8bbff6e03e"
+        }
+      }
+    }
+  ]
+}
diff --git a/evaluation/webfetch-seven-family-430/dataset-assembly.json b/evaluation/webfetch-seven-family-430/dataset-assembly.json
new file mode 100644
index 000000000..abb4d773a
--- /dev/null
+++ b/evaluation/webfetch-seven-family-430/dataset-assembly.json
@@ -0,0 +1,49 @@
+{
+  "schema_version": 3,
+  "kind": "profile_dataset_assembly",
+  "native_retrieval_policy": "uniform_dynamic_native_v1",
+  "dataset": {
+    "id": "webfetch-seven-families-430",
+    "name": "Web Fetch · seven families · 430 cases",
+    "tool": "web_fetch",
+    "dynamic_scoring": "动态内容按稳定文字和结构验收，不固定易变数值或条目。"
+  },
+  "sources": [
+    {
+      "path": "evaluation/dataset.json",
+      "sha256": "5f751146143dcbe9daf46f0fb2511da1147508b3c8c4cd3377a6f3cceb82264e",
+      "tracks": [
+        "web",
+        "document",
+        "image",
+        "video"
+      ]
+    },
+    {
+      "path": "evaluation/dynamic-content-100-moli-webfetch/dataset.json",
+      "sha256": "0da2bb30aaabe3ca2b93ec17b4cb88cdc1cf3ea46336bb3777fdb21c1f211b84",
+      "tracks": [
+        "dynamic"
+      ]
+    },
+    {
+      "path": "evaluation/popular-sites/dataset.json",
+      "sha256": "85544512d4cfd9459c22af1f70b1eb400844742dbf3179807662b76db2dcfc2e",
+      "tracks": [
+        "challenge"
+      ]
+    },
+    {
+      "path": "evaluation/risk-control/dataset.json",
+      "sha256": "d3f18edd2b29f8ef19eb496841f91c433d7f9adfe33c591874d963db55760d7c",
+      "tracks": [
+        "risk_control"
+      ]
+    }
+  ],
+  "case_corrections": {
+    "path": "evaluation/webfetch-seven-family-430/case-corrections.json",
+    "sha256": "7e6dae8e188e56d4cf3b9917f5d3b293d9b06da67ea5e58264b806d56fdda2b7"
+  },
+  "native_dataset_sha256": "f4fd17f0785db2848919ecf7055029d781ca03e8290531d0bba855aca0b22009"
+}
diff --git a/examples/web_fetch/docker/resource.Dockerfile b/examples/web_fetch/docker/resource.Dockerfile
index 96bc1f3e5..31fd266f8 100644
--- a/examples/web_fetch/docker/resource.Dockerfile
+++ b/examples/web_fetch/docker/resource.Dockerfile
@@ -10,14 +10,19 @@ ARG LIGHTPANDA_SHA_AMD64=4200e6dd7b7dd4ab60224c83f5d5f3688e7fd8cfe9389155f3bc5d6
 ARG OBSCURA_VERSION=v0.2.1
 ARG OBSCURA_SHA_ARM64=0297c26d583f598f0126a7271cc40750598a9a9cbd86d1d6f79b2b99097d5244
 ARG OBSCURA_SHA_AMD64=6a1a66b3f1ab118fa7d31330894a868617aea68c06d75436d851356c39df1ed3
-ARG MOLI_1_1_1_SHA_ARM64=549484765476b8dd3fd93ebf59a089e4424425a961c14874974a88bba6d8b5b4
-ARG MOLI_1_1_1_SHA_AMD64=7b3eb9cbbf2cc8bd5ea9ef4a5bdb24cee2df35d26da621216a8b69c2aff3ebaa
+ARG MOLI_VERSION=1.1.1
+ARG MOLI_SHA_ARM64=549484765476b8dd3fd93ebf59a089e4424425a961c14874974a88bba6d8b5b4
+ARG CHROMIUM_URL_ARM64=
+ARG CHROMIUM_SHA_ARM64=
+ARG CHROMIUM_URL_AMD64=
+ARG CHROMIUM_SHA_AMD64=
+ARG MOLI_SHA_AMD64=7b3eb9cbbf2cc8bd5ea9ef4a5bdb24cee2df35d26da621216a8b69c2aff3ebaa
 
 COPY --from=uv /uv /usr/local/bin/uv
 RUN apt-get update \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
        ca-certificates chromium curl fonts-liberation fonts-noto-cjk \
-       libcurl4 libgcc-s1 libstdc++6 nodejs npm python3 python3-venv tar \
+       libcurl4 libgcc-s1 libstdc++6 nodejs npm python3 python3-venv tar unzip \
     && rm -rf /var/lib/apt/lists/* \
     && useradd --create-home --uid 10001 evaluator
 
@@ -56,21 +61,39 @@ RUN target_arch="${TARGETARCH:-$(dpkg --print-architecture)}" \
 
 RUN target_arch="${TARGETARCH:-$(dpkg --print-architecture)}" \
     && case "$target_arch" in \
-      arm64) archive_arch=aarch64; sha="$MOLI_1_1_1_SHA_ARM64" ;; \
-      amd64) archive_arch=x86_64; sha="$MOLI_1_1_1_SHA_AMD64" ;; \
+      arm64) archive_arch=aarch64; sha="$MOLI_SHA_ARM64" ;; \
+      amd64) archive_arch=x86_64; sha="$MOLI_SHA_AMD64" ;; \
       *) echo "unsupported TARGETARCH=$target_arch" >&2; exit 2 ;; \
     esac \
     && aria2c --allow-overwrite=true --check-certificate=true --console-log-level=warn \
        --max-connection-per-server=8 --split=8 --min-split-size=1M \
-       --dir=/tmp --out=moli-1.1.1.tar.gz \
-       "https://github.com/lexmount/moli/releases/download/v1.1.1/moli-${archive_arch}-unknown-linux-gnu.tar.gz" \
-    && printf '%s  %s\n' "$sha" /tmp/moli-1.1.1.tar.gz | sha256sum -c - \
-    && mkdir -p /tmp/moli-1.1.1 \
-    && tar -xzf /tmp/moli-1.1.1.tar.gz -C /tmp/moli-1.1.1 \
-    && find /tmp/moli-1.1.1 -type f -name moli -exec install -m 0755 '{}' /usr/local/bin/moli-1.1.1 \; \
-    && test -x /usr/local/bin/moli-1.1.1 \
+       --dir=/tmp --out=moli-${MOLI_VERSION}.tar.gz \
+       "https://github.com/lexmount/moli/releases/download/v${MOLI_VERSION}/moli-${archive_arch}-unknown-linux-gnu.tar.gz" \
+    && printf '%s  %s\n' "$sha" /tmp/moli-${MOLI_VERSION}.tar.gz | sha256sum -c - \
+    && mkdir -p /tmp/moli-${MOLI_VERSION} \
+    && tar -xzf /tmp/moli-${MOLI_VERSION}.tar.gz -C /tmp/moli-${MOLI_VERSION} \
+    && find /tmp/moli-${MOLI_VERSION} -type f -name moli -exec install -m 0755 '{}' /usr/local/bin/moli-${MOLI_VERSION} \; \
+    && test -x /usr/local/bin/moli-${MOLI_VERSION} \
     && rm -rf /tmp/moli-*
 
+# Optional official Chrome for Testing archive. The caller binds its exact URL
+# and digest; the default image retains the existing Debian Chromium route.
+RUN mkdir -p /opt/chrome-for-testing \
+    && target_arch="${TARGETARCH:-$(dpkg --print-architecture)}" \
+    && case "$target_arch" in \
+      arm64) url="$CHROMIUM_URL_ARM64"; sha="$CHROMIUM_SHA_ARM64" ;; \
+      amd64) url="$CHROMIUM_URL_AMD64"; sha="$CHROMIUM_SHA_AMD64" ;; \
+      *) echo "unsupported TARGETARCH=$target_arch" >&2; exit 2 ;; \
+    esac \
+    && if [ -n "$url" ]; then \
+       test -n "$sha" \
+       && curl --fail --location --proto '=https' --tlsv1.2 "$url" -o /tmp/chromium.zip \
+       && printf '%s  %s\n' "$sha" /tmp/chromium.zip | sha256sum -c - \
+       && unzip -q /tmp/chromium.zip -d /opt/chrome-for-testing \
+       && test -n "$(find /opt/chrome-for-testing -type f -name chrome -print -quit)" \
+       && rm /tmp/chromium.zip; \
+       else test -z "$sha"; fi
+
 FROM python:3.11-slim-trixie@sha256:9534e5a8e315485d4061ed659af0fd78a284c015f9b73661b41d6bab25604534
 
 ARG DEBIAN_MIRROR=https://mirrors.aliyun.com/debian
@@ -82,7 +105,7 @@ RUN sed -i "s|http://deb.debian.org/debian-security|${DEBIAN_SECURITY_MIRROR}|g;
        /etc/apt/sources.list.d/debian.sources \
     && apt-get update \
     && packages="ca-certificates chromium curl fonts-liberation fonts-noto-cjk libcurl4 libgcc-s1 libstdc++6 tar" \
-    && DEBIAN_FRONTEND=noninteractive apt-get --print-uris --yes --no-install-recommends install $packages > /tmp/apt-uris.txt \
+    && DEBIAN_FRONTEND=noninteractive apt-get -o Acquire::ForceHash=SHA256 --print-uris --yes --no-install-recommends install $packages > /tmp/apt-uris.txt \
     && python /usr/local/bin/download_apt_uris.py /tmp/apt-uris.txt /var/cache/apt/archives \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-download --no-install-recommends $packages \
     && rm -rf /var/lib/apt/lists/* \
@@ -90,7 +113,8 @@ RUN sed -i "s|http://deb.debian.org/debian-security|${DEBIAN_SECURITY_MIRROR}|g;
     && useradd --create-home --uid 10001 evaluator
 COPY --from=downloads /usr/local/bin/lightpanda /usr/local/bin/lightpanda
 COPY --from=downloads /opt/obscura /opt/obscura
-COPY --from=downloads /usr/local/bin/moli-1.1.1 /usr/local/bin/moli-1.1.1
+COPY --from=downloads /usr/local/bin/moli-* /usr/local/bin/
+COPY --from=downloads /opt/chrome-for-testing /opt/chrome-for-testing
 RUN find /opt/obscura -type f -name obscura -exec ln -s '{}' /usr/local/bin/obscura \;
 
 WORKDIR /workspace
diff --git a/harness/reporting/links.py b/harness/reporting/links.py
index 24685d260..a769f8fe0 100644
--- a/harness/reporting/links.py
+++ b/harness/reporting/links.py
@@ -63,10 +63,10 @@ def handle_starttag(self, tag: str, attrs: list[tuple[str, str | None]]) -> None
             self.base_href = attrs_by_name.get("href")
             return
         if tag=='select':
-            self.current_filter=attrs_by_name.get('data-wmb-filter')
+            self.current_filter=(attrs_by_name.get('data-wmb-filter') or attrs_by_name.get('data-filter'))
             if self.current_filter:self.filter_options.setdefault(self.current_filter,set())
-        elif tag=='input' and attrs_by_name.get('data-wmb-filter'):
-            self.text_filters.add(attrs_by_name['data-wmb-filter'])
+        elif tag=='input' and (attrs_by_name.get('data-wmb-filter') or attrs_by_name.get('data-filter')):
+            self.text_filters.add(attrs_by_name.get('data-wmb-filter') or attrs_by_name['data-filter'])
         elif tag=='option' and self.current_filter:
             self.filter_options[self.current_filter].add(attrs_by_name.get('value') or '')
         for key, value in attrs:
diff --git a/harness/reporting/packs.py b/harness/reporting/packs.py
index 11ef8ea58..54eb43a33 100644
--- a/harness/reporting/packs.py
+++ b/harness/reporting/packs.py
@@ -12,13 +12,13 @@
 from pathlib import Path
 
 
-def read_packed_file(archive, name):
+def read_packed_file(archive, name, *, cache=None):
     """Read and verify one virtual file from a schema-v2 block archive."""
     manifest = json.loads(archive.read('manifest.json'))
     if manifest.get('schema_version') != 2:
         raise ValueError('Unsupported virtual-file archive')
     entry = manifest['files'][name]
-    cache, chunks = {}, []
+    cache, chunks = {} if cache is None else cache, []
     for key in entry['parts']:
         block = manifest['blocks'][key]
         pack = block['pack']
diff --git a/harness/reporting/publication.py b/harness/reporting/publication.py
index 55c2d9e49..a7ea5b604 100644
--- a/harness/reporting/publication.py
+++ b/harness/reporting/publication.py
@@ -7,13 +7,15 @@
 import os
 import re
 import shutil
+import stat
 import tempfile
 import urllib.parse
 import zipfile
 from collections.abc import Callable, Sequence
 from contextlib import contextmanager
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 from pathlib import Path
+from urllib.error import HTTPError
 
 from harness.web_fetch.safety import (
     contained_path,
@@ -27,22 +29,58 @@ class PublicationSnapshot:
     archive: Path
     sha256: str
     sources: dict
+    signatures: dict = field(default_factory=dict)
 
     def check(self) -> None:
-        if any(_identity(path) != value for path, value in self.sources.items()):
-            raise ValueError('publication inputs changed after validation')
-        if _identity(self.archive) != self.sha256:
-            raise ValueError('frozen publication archive changed')
+        for path, value in {**self.sources, self.archive: self.sha256}.items():
+            signature = _file_signature(path)
+            # Windows ctime is creation time, so retain byte checks there.
+            if os.name != 'nt' and self.signatures.get(path) == signature:
+                continue
+            if _identity(path) != value or _file_signature(path) != signature:
+                raise ValueError('publication inputs changed after validation')
+            self.signatures[path] = signature
+
+    def verify(self) -> None:
+        """Rehash the complete bytes at the final publication boundary."""
+        for path, value in {**self.sources, self.archive: self.sha256}.items():
+            if _identity(path) != value:
+                raise ValueError('publication inputs changed after validation')
+
+
+def _file_signature(path: Path):
+    """Kernel change times prevent same-size writes or restored mtimes hiding edits."""
+    entries = {}
+
+    def visit(current: Path, relative: str):
+        info = current.lstat()
+        if stat.S_ISLNK(info.st_mode):
+            raise ValueError('Publication inputs contain a symlink')
+        entries[relative] = (info.st_dev, info.st_ino, info.st_mode,
+                             info.st_size, info.st_mtime_ns, info.st_ctime_ns)
+        if stat.S_ISDIR(info.st_mode):
+            with os.scandir(current) as children:
+                for child in children:
+                    visit(Path(child.path), relative + '/' + child.name)
+        elif not stat.S_ISREG(info.st_mode):
+            raise ValueError('Publication inputs must be regular files or directories')
+
+    visit(path, '')
+    return entries
 
 
 @contextmanager
 def snapshot_publication(archive: Path, *, inputs: Sequence[Path]):
     """Upload a private byte-exact copy while guarding the release authority."""
-    sources = {path: _identity(path) for path in dict.fromkeys((archive, *inputs))}
+    paths = dict.fromkeys((archive, *inputs))
+    signatures = {path: _file_signature(path) for path in paths}
+    sources = {path: _identity(path) for path in paths}
+    if any(_file_signature(path) != signatures[path] for path in paths):
+        raise ValueError('publication inputs changed during snapshot creation')
     with tempfile.TemporaryDirectory(prefix='publication-snapshot-') as work:
         frozen = Path(work) / 'archive.zip'
         shutil.copyfile(archive, frozen)
-        snapshot = PublicationSnapshot(frozen, sources[archive], sources)
+        snapshot = PublicationSnapshot(frozen, sources[archive], sources, signatures)
         snapshot.check()
         yield snapshot
 
@@ -356,7 +394,13 @@ def pending(self, identity: dict, *, allow_create: bool) -> tuple[dict, bool]:
         return pending, False
 
     def completed(self, key: str, *, request: Callable, decode: Callable):
-        status, raw = request('/api/operations/' + urllib.parse.quote(key))
+        try:
+            status, raw = request('/api/operations/' + urllib.parse.quote(key))
+        except HTTPError as error:
+            if error.code != 404:
+                raise
+            error.close()
+            return None
         if status == 404:
             return None
         operation = decode(status, raw, operation='operation recovery')
diff --git a/harness/web_fetch/HEADLESS.md b/harness/web_fetch/HEADLESS.md
index f1eb178de..8079f9308 100644
--- a/harness/web_fetch/HEADLESS.md
+++ b/harness/web_fetch/HEADLESS.md
@@ -8,8 +8,10 @@ The separate frozen-HTML public-data comparison is documented in
 [WEBMAINBENCH.md](WEBMAINBENCH.md); its fidelity scores are not mixed with
 the live-URL task acceptance or resource profile below.
 
-The cohort reuses all 150 registered Web Fetch task IDs: 100 web cases and 10
-each for document, image, video, challenge and dynamic delivery. Every method
+The original published cohort contained 150 registered Web Fetch task IDs: 100 web
+cases and 10 each for document, image, video, challenge and dynamic delivery.
+A new cohort takes its participants, task families and counts from its frozen
+dataset and current-report profile; it does not inherit the original matrix. Every method
 receives the same URL, task rule and end-to-end deadline and is judged by the
 shared `score_attempt` path. Implementations are deliberately not forced through
 one extractor: the benchmark asks each method to use its fastest documented or
@@ -18,20 +20,45 @@ in readable text; direct-file tasks end in verified original bytes.
 
 ## Runtime and route
 
-| Method | Deployment | Measured route |
+| Method | Deployment | Task-native route |
 |---|---|---|
-| Kitesurf | Cloudflare account Browser Run | `POST /browser-rendering/markdown?browser=kitesurf` |
-| Lightpanda | local CLI | `fetch --dump markdown` |
-| Obscura | local CLI, standard mode | `fetch --dump markdown` |
-| Moli 1.1.1 | local CLI | ordinary pages: `fetch --dump markdown`; direct documents/media: bare `fetch URL`, then timed text extraction only for document-body tasks |
-| Chromium | local Playwright/CDP | rendered DOM HTML → `node-html-markdown` 2.0.0 |
+| Kitesurf | Cloudflare account Browser Run | page text: `/markdown?browser=kitesurf`; resource URLs: Kitesurf CDP DOM reads; document text: native `/markdown`; original files: the Kitesurf CDP endpoint |
+| Lightpanda | local browser | page text: `fetch --dump markdown --json`; original files and shared DOM projections: native CDP |
+| Obscura | local browser, standard mode | page text: pinned upstream Markdown expression with the final URL; original files: `fetch --dump original`; synchronous DOM projections: `--eval`; asynchronous embedded documents: native CDP |
+| Moli | local CLI | webpage text, document text, structured tasks and webpage media information: native Markdown; final URL comes only from unambiguous same-call official diagnostics; direct media files: native CDP response bytes or the same pinned CLI attachment interface |
+| Chromium | local Playwright/CDP | page text: rendered DOM → `node-html-markdown`; original files: navigation response or native download; resource URLs, metadata and embedded documents: shared DOM expressions |
+
+Choose the route from the input URL and declared deliverable before calling the
+browser. Ordinary, dynamic, popular-site and risk-control text remain page tasks.
+Image/video cases distinguish resource URLs, original file bytes and page metadata;
+a Markdown response cannot substitute for a required original file.
+
+文档正文必须由所选浏览器的原生内容接口返回。直接 PDF/DOCX 使用各自原生正文
+接口；不支持时保存真实失败，不交给外部 pypdf、DOCX XML 或 OCR 补正文。
+嵌入文档页面可通过该浏览器的 CDP 或脚本接口读取已经加载的 PDF 查看器文字，
+或页面可见文字；不得额外下载嵌入 PDF 后解析。Chromium 的例外只覆盖网页 HTML
+到 Markdown 的标准转换。
+
+图片与视频原始文件保留浏览器响应或下载路线。Moli 附件事件可调用同一固定二进制
+的原始附件接口，仍受同一截止时间约束；原文件字节不会被外部转换成正文成绩。
+资源地址读取已经加载的 DOM 与同源子页面，不额外抓取模块源码挖掘链接。
+最终网址只作辅助信息；正文验收以目标内容、必需字段和拦截页规则为准。
+
+Local HTTP downloading and Workers AI conversion are separate methods, not
+Kitesurf results. Every Kitesurf Quick Action and CDP connection must explicitly
+select `browser=kitesurf`; omitting it selects Cloudflare's Chromium backend.
+The current report's native-task route gate rejects these substitutions and stale
+one-provider projections while retaining genuine native failures.
+
 
 Chromium and CDP do not expose a native Markdown result. Chromium Reader Mode
 produces simplified HTML and does not cover this benchmark's full output
 contract. The selected fallback therefore captures the complete rendered DOM
 and converts it with the maintained MIT-licensed `node-html-markdown` package.
-The converter version, file hash, Node version, source HTML hash and conversion
-time are retained per call. Conversion is inside the 45-second deadline.
+The measured wrapper also preserves literal preformatted text with a safe fence
+and language label; it is not described as an unmodified package default. The
+package version, wrapper hash, Node version, source HTML hash and conversion time
+are retained per call. Conversion is inside the 45-second deadline.
 
 Kitesurf is not treated as a local open-source engine. As tested, it is a
 Cloudflare-hosted preview selected by `browser=kitesurf`; Cloudflare has stated
@@ -41,7 +68,10 @@ hypothetical local deployment.
 
 The routes have different completion controls because those controls belong to
 the tested interfaces: Kitesurf uses `networkidle2`, Chromium uses Playwright
-`domcontentloaded`, and each CLI uses its own documented completion behavior.
+`load` by default, and each CLI uses its own documented completion behavior.
+Explicit completion contracts retain their selected navigation condition; Chromium
+records `navigation_wait_until` in each call rather than inferring it from the
+current adapter. Native execution does not select task-specific readiness hints.
 No method receives task answers, task-specific selectors, clicks, scrolling,
 personal sessions, stealth fallback or model post-processing. The original
 published matrix used one provider call per task and did not retry; later
@@ -56,8 +86,7 @@ client-observed end-to-end deadline. It does not claim identical internals.
 Forcing native Markdown methods through HTML conversion would replace their
 product advantage with benchmark code and answer a less useful question.
 
-Kitesurf is remote while the other six methods are local (covering four local
-implementation families). Its latency includes network
+Kitesurf is remote while the registered local browser configurations run locally. Its latency includes network
 round trips, Cloudflare queueing and remote execution; local measurements
 include local process startup and machine contention. This is a cold-call
 client latency comparison, not an engine-only CPU/RSS benchmark. The original
@@ -96,10 +125,25 @@ names would still not prove equal implementation, so the report records the
 actual condition instead of calling it normalized. Documents and media also
 have different delivery contracts. A document-body case measures URL to readable
 text: a provider's direct text is accepted, while a provider that returns raw
-PDF/DOCX bytes must parse them inside the same end-to-end deadline. A direct-file
-case stops at verified bytes and never performs an irrelevant Markdown conversion.
-The run does not add OCR, media understanding or a generic downloader that bypasses
-the selected method.
+PDF/DOCX bytes has not delivered document text and fails that body task. A
+direct-file case stops at verified bytes and never performs an irrelevant
+Markdown conversion. The run does not add an external PDF/DOCX parser, OCR,
+media understanding or a generic downloader that bypasses the selected method.
+
+Public report families follow the deliverable rather than the media MIME type.
+The frozen `image` and `video` source tracks remain unchanged for provenance,
+but the report combines their 16 resource-URL cases and one video-page text
+case as **media information from webpages**, and groups their three direct
+binary inputs as **original media files**. A webpage resource case succeeds by
+returning the declared media URL; it does not need to download that resource.
+A direct-file case must return and validate the bytes. This produces seven
+reader-facing families without pretending that URL discovery and file delivery
+are the same operation.
+
+Moli uses native Markdown with frame inclusion for every webpage-media case.
+The shared scorer only reads URLs already present in that output; it never
+derives a playback URL from a site-specific identifier. A missing URL remains
+a failure and cannot trigger an HTML, JSON or network-trace fallback.
 
 ## Credentials and binaries
 
@@ -165,11 +209,11 @@ filenames rather than claiming the repository's default inputs.
 
 ### Capture, freeze and check references
 
-The reference lifecycle in [README.md](README.md) is mandatory. Independently
-capture ordinary pages, separately observe browser-dependent complete scopes,
-freeze the references, execute, then postcheck:
+Use the certified wrapper below. Existing frozen task and answer bytes remain
+unchanged. Only cases declaring `reference_mode: live_exact` need the live
+reference lifecycle in [README.md](README.md).
 
-Reference acquisition follows `source_verification.observation_route` (`http`
+For those live-reference cases, acquisition follows `source_verification.observation_route` (`http`
 or `browser`). Existing frozen inputs that name independent visible/rendered
 browser DOM acquisition retain that browser requirement. Task identifiers do
 not select the acquisition route. A browser-bound reference needs independent
@@ -184,41 +228,50 @@ manifest; response artifacts remain in the physical run for assembly. A failed
 reference check remains failed when the command resumes.
 
 ```sh
-uv run --frozen python scripts/freeze_headless_references.py --captures CAPTURES --output FROZEN --browser-observations PRE.json
-uv run --frozen python scripts/run_headless_benchmark.py --dataset FROZEN/dataset.json --output RUN --workers 5
-uv run --frozen python scripts/postcheck_headless.py --run-dir RUN --captures POST --browser-observations POST.json
-uv run --frozen python scripts/certify_headless_cases.py --run-dir RUN --observations POST/observations.json --output CERTIFICATES
-uv run --frozen python scripts/review_headless_results.py --evidence EVIDENCE --work REVIEW --batch-cases 5 --workers 4 --model EXACT_AVAILABLE_MODEL --install
+uv run --frozen python scripts/run_certified_benchmark.py --dataset DATASET --output RUN --work-root WORK --providers METHODS --case-ids IDS --provider-config PROVIDERS --workers 1 --browser-binary /absolute/path/to/chromium
 ```
 
 ### Certify a new run
 
-For new `run_benchmark.py` cohorts, use the fail-closed wrapper so an aggregate
-run cannot be mistaken for publishable evidence before its worker manifests
-and top-level execution file carry verified postchecks:
-
-```sh
-uv run --frozen python scripts/run_certified_benchmark.py --dataset evaluation/dataset.json --output RUN --work-root WORK --providers METHOD --case-ids ID1,ID2 --browser-binary /absolute/path/to/chromium
-```
+An unchanged compiled acceptance-contract dataset is the execution authority.
+Freeze its task and rule bytes; do not recover historical qualification files or
+repeat admission checks. Live exact-reference cases retain pre-call capture,
+freeze and post-call verification under [README.md](README.md). Source
+qualification belongs to new tasks or changes to references/acceptance rules.
+Use bounded cohorts when a complete serial run would exceed the live-reference
+window. The wrapper verifies worker manifests before finalizing the aggregate.
 
-Use `--provider-config /absolute/path/providers.json` to select one provider
-configuration for the entire requested scope. The certified wrapper forwards
-it to the shared runner while retaining all reference checks. Without this
-option, the repository's existing task-group configurations apply. Diagnostic
-`scripts/run_benchmark.py` runs support the same option and remain uncertified.
-
-After selecting and freezing the resource cohort, run it separately and keep the
-same postcheck and independent all-attempt review gates:
+Select the resource tasks through the existing provider-blind selector before
+resource calls. Set the dataset comparison kind to
+`headless_client_resource_profile`; its provider configuration binds each local
+engine, image, executable, 50 ms sample interval, two CPUs and 2 GiB memory.
+Run it through the same certified wrapper with one worker, then package:
 
 ```sh
 make resource-image
-uv run --frozen python scripts/run_headless_benchmark.py --dataset RESOURCE/dataset.json --output RESOURCE_RUN --workers 1 --resource-sample-interval-ms 50
-uv run --frozen python scripts/postcheck_headless.py --run-dir RESOURCE_RUN --captures RESOURCE_POST --browser-observations RESOURCE_POST.json
-uv run --frozen python scripts/certify_headless_cases.py --run-dir RESOURCE_RUN --observations RESOURCE_POST/observations.json --output RESOURCE_CERTIFICATES
-uv run --frozen python scripts/review_headless_results.py --evidence RESOURCE_RUN --work RESOURCE_REVIEW --batch-cases 1 --workers 4 --model EXACT_AVAILABLE_MODEL --scope all --install
+uv run --frozen python scripts/run_certified_benchmark.py --dataset RESOURCE/dataset.json --output RESOURCE_RUN --work-root RESOURCE_WORK --providers LOCAL_METHODS --case-ids IDS --provider-config RESOURCE/providers.json --workers 1
 uv run --frozen python scripts/package_headless_resources.py --run RESOURCE_RUN
 ```
 
+The image recipe accepts version-bound build arguments. Set `MOLI_VERSION`
+and `MOLI_SHA_ARM64` / `MOLI_SHA_AMD64` together; its executable is installed as
+`/usr/local/bin/moli-VERSION`. Lightpanda uses the existing per-architecture
+`LIGHTPANDA_URL_*` / `LIGHTPANDA_SHA_*` arguments, and Obscura uses
+`OBSCURA_VERSION` with its per-architecture digests. For official Chrome for
+Testing, supply `CHROMIUM_URL_ARM64` / `CHROMIUM_SHA_ARM64` or
+`CHROMIUM_URL_AMD64` / `CHROMIUM_SHA_AMD64`; a URL without a digest fails the
+build. Select the archive's executable under `/opt/chrome-for-testing/` through
+`resource_binary`. Omitting these Chrome arguments keeps Debian Chromium.
+The recipe defaults preserve the original image configuration; a new cohort
+must supply its selected release inputs and verify actual versions and hashes
+inside the built image before any measured call.
+
+Independent result review is opt-in for both matrices. Preserve the declared
+review policy; start failure review only after an explicit user request, and
+review passes or the complete matrix only after a separate full-review request.
+Packaging retains the exact reviewed/total scope. Do not use missing independent
+review as an execution blocker when the frozen protocol does not require it.
+
 Build the resource image once per declared image definition or browser-version
 change. Benchmark runs reuse `lex-web-fetch-resource:local` by image ID and do
 not rebuild it; repeated `make resource-image` calls reuse Docker layers. A
@@ -235,8 +288,8 @@ required metrics, image ID and executable hashes. Do not substitute the
 Headless resource packaging fails if CPU, memory or network evidence is missing;
 the report release check requires grouped winners whenever the cohort is present.
 
-The resource-mode default is the four local methods: Lightpanda, Obscura, Moli
-1.1.1, and Chromium. Kitesurf remains in the correctness and latency report but
+The resource cohort uses the four local browser families: Lightpanda, Obscura,
+Moli and Chromium. Each new run pins its actual versions and image identity. Kitesurf remains in the correctness and latency report but
 is excluded from the resource table because its remote browser CPU, memory, and
 upstream network traffic are not observable from the client.
 
@@ -328,3 +381,5 @@ The preserved public destination for this comparison is the separate app-domain
 Sites project `UUAhhQMnrGwm`. The current 10-method report is the separate
 project declared by `evaluation/current-report.json`; never use a headless
 receipt or evidence bundle to update it.
+
+固定参考答案默认保持冻结。`source_verification.reference_mode: live_exact` 是实时参考核验的显式声明；旧来源记录和缺少新版验收契约均不构成该声明。普通重跑不得据此重新抓取或更新答案。
diff --git a/harness/web_fetch/README.md b/harness/web_fetch/README.md
index 532ad7c54..d06ba1d49 100644
--- a/harness/web_fetch/README.md
+++ b/harness/web_fetch/README.md
@@ -135,12 +135,43 @@ checks where applicable, and one authoritative task predicate. Live execution an
 offline rescoring use the same entry point. Case contracts define the differences;
 provider identity never selects a more lenient evaluator.
 
-Live stable-contract cohorts use `scripts/run_certified_benchmark.py --diagnostic`.
-The stable-rule path does not qualify the current site's solvability; the generic
-entry therefore rejects such a cohort before external work unless its diagnostic
-state is explicit. This does not waive any scoring requirement. For a declared
-native-completion experiment, add `--retrieval-mode native`: it preserves all
-acceptance rules and rejects existing retrieval hints rather than dropping them.
+Text acceptance reads the visible prose of raw HTML embedded in Markdown. HTML
+attributes, scripts and explicitly hidden elements cannot supply body coverage
+or required facts. Literal HTML in code examples remains answer text. This
+projection runs inside the shared scorer and leaves provider artifacts unchanged.
+`required_patterns` defaults to `match_scope: "text"`; a rule that checks serialized
+output structure, such as an HTML table tag, must declare `match_scope: "output"`.
+Unknown scopes are rejected. Use paired controls in `evaluation/scoring-regressions.json`
+to guard equivalent prose, attribute-only answers and structural output.
+
+Reruns of an unchanged compiled stable-contract dataset use
+`scripts/run_certified_benchmark.py` normally: freeze existing task and acceptance
+rule bytes without recovering historical qualification files or rechecking
+admission. Source qualification is required when adding tasks or changing
+references or acceptance rules. Live exact-reference cases retain their pre/post
+reference checks. Use `--diagnostic` only when a diagnostic run is intended; its
+outputs cannot be upgraded to certified evidence.
+
+This applies to resource targets as well as text answers. Execution and report
+checks use the frozen resource target list without reopening historical source
+qualification files. Adding or changing a resource task still requires independent
+source qualification; an invalid source state or an explicitly live reference
+cannot take the frozen-input route.
+
+For declared native completion, add `--retrieval-mode native`: it preserves
+acceptance rules and rejects existing
+selector-guided retrieval hints rather than dropping them.
+Dynamic task families stay `dynamic`: the explicit
+`retrieval_hints: {"version": 3, "mode": "native"}` contract selects each
+provider's ordinary completion without injecting selectors, extraction hints or
+extra waits. A small number of independently qualified page shapes may add only
+`"contract": "<registered-name>"`. The shared registry in
+`evaluation/native-retrieval-contracts.json` binds each name to one case and one
+hash-verified source observation. Dataset rows cannot carry selectors, counts,
+delays or answer text directly; unknown names and names used by another case fail
+closed. Selecting native mode again preserves either form unchanged, and the
+runner validates it through the same strict parser.
+Version 1/2 selector-guided contracts keep their existing meaning.
 The diagnostic report accepts a `webfetch_diagnostic_inputs/1` manifest naming
 complete runs, independently captured whole-page observations and hash-bound
 per-case reviews. The supported builder adapts these inputs, preserves scored
@@ -194,6 +225,14 @@ borrowing without using aggregate F1 as an acceptance gate, while
 allowing one mildly noisy conversion region. It does not verify semantics. The
 thresholds and regions are stored in each case, never selected by provider.
 
+A `body_text` acceptance contract can declare `stable_text_role: diagnostic`
+when the case also supplies `body_requirements` or `composite_acceptance`.
+The declared body and record requirements remain mandatory; stable anchor hits,
+misses and coverage are retained as diagnostics. A diagnostic role without either
+content contract is rejected. Other schemas and contracts that omit the role keep
+their existing mandatory anchors. The risk-control compiler assigns this role
+from the independent contracts, without reading provider outputs.
+
 ## End-to-end budget and missing measurements
 
 The common call boundary includes provider acquisition, network retries, rendering,
@@ -384,16 +423,14 @@ Credentials and local executable/repository paths belong in the root `.env`
 variables take precedence; `--env-file` overrides which file is read.
 
 `moli-webfetch` invokes the official local Moli CLI; set `MOLI_BINARY` when it
-is not on PATH. Ordinary body tasks use `moli fetch --dump markdown`; challenge
-tasks use one `--dump json --trace-network` call and convert its final DOM to
-Markdown within the same deadline while retaining only a public-safe trace
-summary. Dynamic,
-resource-page, and embedded-document tasks use one bounded `--eval` call for
-their declared rendered output. Direct file tasks use bare `moli fetch URL`,
-without `--dump` or page-wait flags, so the evaluator can receive and verify
-original bytes. No alternate provider or output-format fallback is used after
-a failed call. The seven-method cohort's direct PDF and DOCX body route is
-defined separately in [HEADLESS.md](HEADLESS.md).
+is not on PATH. All webpage and document-body tasks use the CLI's native
+Markdown output. Webpage media-information tasks use that same native Markdown
+call with native frame inclusion; the shared scorer checks only the requested
+resource URLs already present in the output and does not download the media.
+Direct-media-file tasks use the CLI's raw response path so the evaluator can
+verify the original bytes. These routes are selected by deliverable before
+execution and do not fall back after failure. The six measured configurations
+and their document limits are defined in [HEADLESS.md](HEADLESS.md).
 
 The installed console command is `browser-harness-eval`. There is no legacy
 Python package or compatibility entrypoint.
@@ -546,11 +583,22 @@ dynamic examples are fixed demonstration data delivered after loading; popular
 rankings and catalogs change frequently. Annotate fields, not whole websites:
 
 - Stable document titles, headings and instructions can be explicit
-  `stable_text_anchors` with independently justified equivalent alternatives.
+  `stable_text_anchors`. Every alternative must be grounded in the same frozen
+  page and declared content scope. Formatting variants and explicitly
+  interchangeable statements within that page are allowed; alternatives must
+  not accept different regional, historical, or redesigned page bodies. DNS,
+  redirects, access failures, and variant page responses are retrieval
+  outcomes, not reasons to add acceptable answers.
+  Fix a wrong source or reference only from independent evidence. A change to
+  the target URL requires new calls for every affected method; retain the old
+  task and calls as historical evidence.
 - Frequently changing names, prices, dates and ranking positions use an
   `acceptance_contract`: required fields, types, record grouping, minimum count,
-  uniqueness and optional stable page identity. Values are not compared to a
-  previous ranking. Duplicate cards cannot satisfy the minimum.
+  uniqueness and stable page text. Values are not compared to a previous
+  ranking. Duplicate cards cannot satisfy the minimum. Final-URL agreement is
+  diagnostic: a missing or mismatched URL does not change acceptance or the
+  evaluated denominator. HTML document-language tags are also diagnostic;
+  content acceptance comes from the declared answer requirements.
 - Full-reference word precision, recall and F1 remain separate diagnostics.
   Historical demonstration snapshots describe their captured sample; they do
   not certify arbitrary later content. Without a comparable full reference,
@@ -637,8 +685,10 @@ Moli on Darwin uses a process-local native resolver bridge. Build it explicitly
 outside Git with `uv run --frozen python scripts/build_native_dns.py
 ~/.browser-eval/toolchains/native-dns/libbrowser-eval-dns.dylib`, and configure
 `native_dns_library` (or `MOLI_NATIVE_DNS_LIBRARY` in the example). The adapter
-checks the library hash, current source hashes and architecture before calls;
-changed source requires rebuilding. It never compiles during a measured call.
+checks the library hash, compiled C source hash and architecture before calls;
+a changed compiled source requires rebuilding. The Python coordinator remains
+covered by the run's runtime-source hash. It never compiles during a measured
+call.
 Crawl4AI's browser route starts the configured Chrome channel with a temporary
 strict-DoH profile and connects through its native CDP interface. The original
 native launch arguments are preserved; there is no system-DNS fallback for
@@ -690,19 +740,56 @@ while retaining the original status. Native `links.internal`/`links.external`
 name/URL pairs enter shared link input directly; names are not reconstructed from
 logs, requests or bare URLs.
 
+### Named records in Markdown tables
+
+A `named_link` task can declare `markdown_title_column` and
+`markdown_link_column` in its `entry_scope`. These are exact table headers from
+the independent source. A visible name and one detail link in the same row form
+a record, including when a native converter renders a JavaScript-backed name as
+plain text. The existing host, path, identity and minimum-count checks still
+apply. Missing or repeated declared headers, empty names and multiple detail links do not
+supply records. Content in another row or a fenced example cannot fill a missing
+field.
+
+### Output and download limits
+
+Moli's `max_bytes` bounds the captured answer. Page and subresource downloads use
+Moli's native capacity policy; the adapter does not pass this answer limit as
+`--http-max-response-size`. A large script can produce a small answer, so limiting
+its download would change page execution. Answers above `max_bytes` fail with
+`output_too_large`; truncated answers are not scored.
+
+### Moli native family completion
+
+For native dynamic-body tasks, Moli requests `--layout`, `--with-frames`, and
+`--wait-until domstable` for the whole family. Markdown comes directly from
+Moli; the harness does not assemble frame content or refresh DOM geometry.
+
+A Moli provider configuration can override completion with
+`wait_until_by_track`, for example `{"risk_control": "domstable"}`. Keys must
+be registered task families and values must be supported native wait modes.
+The policy is declared before calls and applies to every task in that family;
+case IDs, hostname rules, answer-dependent delays, and extraction scripts are
+not accepted by this setting. Call metadata records the selected family policy.
+
 ### Fixed native webpage calls
 
 `uniform_native_parameters: true` selects the fixed-native body/structure policy for web and dynamic tasks. Choose documented native extraction options once per method (for example Tavily advanced, Cloudflare networkidle2, Crawl4AI iframe/overlay options, native freshness and capacity options). The caller deadline is 45 seconds; product connection, navigation and extraction timers retain their native defaults. HTTP-client deadlines and worker cancellation enforce collection time, not product-side budgets. CowAgent globals are never patched.
 
-Per-case retrieval hints and auxiliary document/media/challenge routes are rejected before invocation in this mode. Cross-provider fallback, injected extraction algorithms and answer synthesis are prohibited. Caller failure retries follow the shared [retry policy](#retries); historical cohorts retain their frozen retry budgets. Keep the native response envelope and its declared answer; the product may still impose its own limits or internal retries. Prepare a new frozen invocation profile after a policy change; preserve previous measurements and do not infer revised scores without calls.
-### Main-document identity on declared navigation tasks
+Moli uses its native `done` completion for ordinary tasks and native
+`domstable` completion for the complete dynamic-body family. The same policy
+applies to the release and candidate builds. It is fixed before calls and may
+not vary by case or change after a failure.
 
-When a body task declares `source_benchmark.risk_control.navigation_contract`,
-Moli uses the existing `fetch --dump json` final-DOM route, without network tracing,
-except in fixed-native mode, which preserves the same native Markdown route for every case.
-The same response binds `final_url`, HTTP status and HTML; the existing local
-Markdown conversion stays inside the call deadline. It adds no second fetch.
-Ordinary body tasks without that requirement retain native Markdown output.
+Per-case retrieval hints and auxiliary document/media/challenge routes are rejected before invocation in this mode. Cross-provider fallback, injected extraction algorithms and answer synthesis are prohibited. Caller failure retries follow the shared [retry policy](#retries); historical cohorts retain their frozen retry budgets. Keep the native response envelope and its declared answer; the product may still impose its own limits or internal retries. Moli webpage, document-body and webpage-media-information tasks all use its native Markdown; only direct-media-file tasks use raw bytes. Prepare a new frozen invocation profile after a policy change; preserve previous measurements and do not infer revised scores without calls.
+### 原生内容接口与评测边界
+
+给定网址的正文任务验收返回的目标内容，不要求接口返回最终网址或 HTML 语言标签。
+最终网址、HTTP 状态和语言标签保留为辅助诊断；缺失这些字段本身不扣分。
+登录页、验证页、错误页、空正文、缺少题目要求的文字或字段仍然失败。
+验收规则对所有选手一致，禁止从标准答案补正文或推断缺失输出。
+
+### Main-document identity on declared navigation tasks
 
 Legacy debug GET completion rows do not bind redirect request owners or Location
 headers. Their order, a challenge query hint, or the first completion after a
@@ -815,3 +902,74 @@ physical-call output, uses the final declared response, verifies hashes and
 exposes the directory only after the entire matrix passes. Unbound review
 receipts cannot authorize a new assembly. Existing published reports retain
 their frozen evidence and are restored from their pinned release.
+按任务类型预选官方支持的正文、资源或原始文件接口。JSON 包装中的原生 Markdown
+可以解包；不能把 JSON DOM、HTML 或下载的 PDF/DOCX 另行转换成选手的正文成绩。
+Chromium 没有原生 Markdown，网页 HTML 使用固定版本的 node-html-markdown；此例外
+不授权外部文档解析器。浏览器内已经加载的 PDF 查看器可通过原生脚本接口读取文字，
+不得下载嵌入文件后交给外部解析器。图片、视频的原始文件交付只验收字节，不冒充正文提取。
+
+Lightpanda 使用 `--dump markdown --json` 的原生正文；Obscura 使用其固定官方
+`HTML_TO_MARKDOWN_JS`，脚本哈希必须与所测版本绑定；Kitesurf 使用显式指定该浏览器
+的官方 `/markdown` 或 CDP 接口。Moli 的网页正文、文档正文、结构与网页内嵌媒体
+统一使用原生 Markdown；网页媒体只核对同一次输出里的目标地址。直接媒体文件才走
+原始响应。禁止失败后切换为 HTML、JSON、网络跟踪或查看器脚本补结果。
+
+`output_mode_for_case` 负责路线选择，`browser_task_interface_matrix` 使用同一选择器
+生成每类任务与每种浏览器的接口表。`require_native_task_routes` 检查实测路线与外部
+转换标记；当前报告配置必须启用该门禁，检查失败时不得汇总或发布。
+改变调用接口应冻结完整受影响范围、保留旧调用并通过认证入口补跑；只改共享评分时
+离线重算所有选手，不重复请求网站。合成正反测试必须同时覆盖正确正文缺少网址和错误正文。
+
+方法名与浏览器引擎分开登记在 `configs/providers.headless.json`。同一浏览器的发布版和分支构建分别计分，
+原生路线检查、接口表和官方能力说明共用该登记的引擎；未知方法不能跳过检查。
+报告分别统计浏览器引擎和执行配置，同一引擎的多个版本不算成多种浏览器。
+资源属性中的单个 URL 保留完整地址；只有 `srcset` 按候选及描述符解析，URL 中间的逗号不能拆开。
+分支构建在调用前固定来源提交、基线提交、构建环境和二进制 SHA-256。新增配置只调用完整固定题库，
+旧配置的原始结果保持不变。不同日期的批次用于展示各自任务完成情况；代码带来的耗时变化须另按同窗配对协议测量。
+
+### 资源比较的统计范围
+
+`resource_cohort.py` 的主统计保留预先确定的完整方法与任务矩阵，包括失败调用。
+平均值、P50 和 P95 使用同一范围，报告同时显示各方法的通过数。各方法成功调用的统计另存为
+条件分布；所有方法共同通过的任务只作附加诊断，不能据此挑选排名样本。没有共同成功项时，
+仍须保留完整调用的资源统计；没有成功项的条件指标为不可用，不填零。
+
+改正统计范围时，用已保存、哈希校验通过的测量重新汇总，不重新调用浏览器，不覆盖旧汇总。
+主结果、原始输出和每次调用的资源计数保持不变。发布检查核对全部测量值、分母、指标方向
+及唯一最低值标记；并列项保持中性。资源消耗与任务通过率分别呈现，不合成总分。
+
+### 已编译评测集的重跑
+
+`scripts/run_certified_benchmark.py` 直接使用冻结的题目与验收规则。已有固定答案或稳定规则的题目
+不重新审核入选资格，不读取历史资格调查原文，也不因旧归档缺失而改成诊断结果。
+新增题目、修改参考或验收规则时，仍须通过相应构建与修订流程核验来源。
+固定答案不会因为有来源核验信息、旧核验日期或缺少新版验收契约而自动变成实时参考。
+只有题目明确声明 `source_verification.reference_mode: live_exact`，才执行调用前冻结和调用后核验。
+没有该声明时，执行器保持题库中的答案和评分规则不变。明确修订参考答案仍走独立的参考修订入口。
+
+已授权的错误修正应自动完成：先查明共享原因并添加必要的正反测试，再冻结受影响的完整调用范围，经认证入口补跑。
+接口、版本或执行错误需要新调用；评分或展示错误只重算或重建。不能为提高分数挑选失败题重试，
+不能让无关题目重复调用，也不能把已有题库的重跑变成重新收集资格证明。保留旧结果及修订影响。
+评测配置错误或适配器在调用前拦截属于执行问题，不能当作浏览器能力失败发布；原生路线门禁拒绝 `configuration` 结果。供应商实际调用返回的错误仍按原规则保留。
+
+
+### Reviewed browser interpretation inputs
+
+A current browser interpretation can require a complete failure diagnosis by setting
+`require_failure_review: true` and binding `failure_review: {path, sha256}` in its
+external `webfetch_browser_interpretation/1` content. The bound file uses
+`schema: webfetch_failure_review/1`, binds the exact `results.jsonl` bytes with
+`results_sha256`, and contains one `failures` entry for every failed result and no
+passing result. Each entry identifies `attempt_id`, `provider` and `case_id`, a
+stable lowercase `category`, a reader-facing `category_label`, an evidenced
+`reason`, a `remediation_status`, and nonempty hash-bound
+`evidence_paths: [{path, sha256}]`. A program error type remains a separate
+classification; it does not establish the reviewed cause. The build, report check
+and publication boundary reject stale, incomplete, duplicate or mismatched reviews.
+
+The same content may supply `background`, raster
+`figures: [{path, sha256, alt, caption}]`, and measured
+`case_examples: [{provider, case_id, explanation}]`. These use the existing report
+builder and its six-chapter interpretation. Assets stay outside Git and are copied
+only through their hash bindings. The independent HTML embeds figures and reviewed
+causes without copying every failure's complete output and logs.
diff --git a/harness/web_fetch/assembly.py b/harness/web_fetch/assembly.py
index 6fc1b92a3..7cfdeb8a7 100644
--- a/harness/web_fetch/assembly.py
+++ b/harness/web_fetch/assembly.py
@@ -15,6 +15,7 @@
     materialize_reference_checks,
     materialize_task_references,
 )
+from harness.web_fetch.metrics import task_passed
 from harness.web_fetch.publication_privacy import project_execution_manifest
 from harness.web_fetch.reference_inputs import input_tree, read_dataset_bytes
 from harness.web_fetch.reference_lifecycle import (
@@ -27,16 +28,24 @@
     valid_scoring_revision,
 )
 from harness.web_fetch.result_review import require_result_review
-from harness.web_fetch.safety import contained_path, reject_evidence_symlinks, validate_report_ids
+from harness.web_fetch.safety import (
+    contained_path,
+    reject_evidence_symlinks,
+    unlinked_path,
+    validate_report_ids,
+)
 from harness.web_fetch.scoring_regressions import (
     build_correction_provenance,
     valid_correction_provenance,
 )
 from harness.web_fetch.speed_cohort import build_summary as build_speed_summary
 
+REPOSITORY = Path(__file__).resolve().parents[2]
+
 ALLOWED_REVISION_FIELDS = {
     'body_requirements', 'required_patterns', 'required_facts', 'acceptance_contract',
     'forbidden_any', 'expected_resources', 'resource_output_contract', 'task_prompt',
+    'reference_answer',
     'mutable_body_policy',
 }
 
@@ -54,6 +63,195 @@ def read_records(root):
     return load_jsonl(root/'results.jsonl')
 
 
+def _materialize_canonical_references(output, canonical, canonical_dataset):
+    """Copy each assembled case's references from its hash-bound source dataset."""
+    declarations = canonical.get('comparison', {}).get('input_sources')
+    if not declarations:
+        materialize_task_references(output, {name: input_tree(canonical_dataset,name)
+            for name in ('sources','list-references')}, [case['id'] for case in canonical['cases']])
+        return
+    if not isinstance(declarations, list):
+        raise ValueError('Canonical input source bindings are invalid')
+    expected = {case['id'] for case in canonical['cases']}
+    owned = set()
+    sources = []
+    for declaration in declarations:
+        if (not isinstance(declaration, dict)
+                or set(declaration) != {'path', 'sha256', 'case_ids'}
+                or not isinstance(declaration['case_ids'], list)
+                or not declaration['case_ids']):
+            raise ValueError('Canonical input source binding is invalid')
+        identifiers = declaration['case_ids']
+        if (len(identifiers) != len(set(identifiers)) or owned.intersection(identifiers)
+                or not set(identifiers) <= expected):
+            raise ValueError('Canonical input source ownership is invalid')
+        source_dataset = contained_path(REPOSITORY, declaration['path'], reject_symlinks=True)
+        raw = read_dataset_bytes(source_dataset)
+        if hashlib.sha256(raw).hexdigest() != declaration['sha256']:
+            raise ValueError('Canonical input source changed: ' + declaration['path'])
+        source_ids = {case['id'] for case in json.loads(raw).get('cases', [])}
+        if not set(identifiers) <= source_ids:
+            raise ValueError('Canonical input source is missing an owned case')
+        trees = {name: input_tree(source_dataset,name)
+                 for name in ('sources','list-references')}
+        sources.append((set(identifiers), source_ids, trees))
+        materialize_task_references(output, trees, identifiers)
+        owned.update(identifiers)
+    if owned != expected:
+        raise ValueError('Canonical input sources do not own the complete case inventory')
+    # Some track-specific datasets reuse cases whose source capture remains in
+    # an earlier registered dataset.  Fall back only when the owning dataset has
+    # no reference for that case; copy every matching fallback so conflicts are
+    # still rejected rather than resolved by source order.
+    for identifiers, _source_ids, owner_trees in sources:
+        for identifier in identifiers:
+            owner_has_reference = (
+                (owner_trees['sources'] / identifier).exists()
+                or (owner_trees['list-references'] / (identifier + '.json')).exists()
+            )
+            if owner_has_reference:
+                continue
+            candidates = [trees for _owned, source_ids, trees in sources
+                          if identifier in source_ids and (
+                              (trees['sources'] / identifier).exists()
+                              or (trees['list-references'] / (identifier + '.json')).exists())]
+            if not candidates:
+                continue
+            for trees in candidates:
+                materialize_task_references(output, trees, [identifier])
+
+
+def _sha256_file(path):
+    return hashlib.sha256(Path(path).read_bytes()).hexdigest()
+
+
+_PROVIDER_REPLACEMENT_RECEIPT_FIELDS = {
+    'schema_version', 'kind', 'provider_calls', 'baseline_dataset_sha256',
+    'baseline_results_sha256', 'source_dataset_sha256', 'source_results_sha256',
+    'replacements',
+}
+
+
+def _valid_provider_replacement_receipt(receipt):
+    if (not isinstance(receipt, dict)
+            or set(receipt) != _PROVIDER_REPLACEMENT_RECEIPT_FIELDS
+            or receipt.get('schema_version') != 1
+            or receipt.get('kind') != 'audited_provider_replacement_scope'
+            or receipt.get('provider_calls') != 0):
+        return False
+    replacements = receipt.get('replacements')
+    if not isinstance(replacements, list) or not replacements:
+        return False
+    seen = set()
+    for item in replacements:
+        if (not isinstance(item, dict) or set(item) != {
+                'provider', 'case_id', 'prior_attempt_id', 'selected_attempt_id',
+                'category', 'reason'}
+                or item.get('category') not in {
+                    'invalid_prior_call', 'input_correction', 'implementation_correction'}
+                or not isinstance(item.get('reason'), str) or not item['reason'].strip()):
+            return False
+        pair = (item.get('provider'), item.get('case_id'))
+        if not all(isinstance(value, str) and value for value in (
+                *pair, item.get('prior_attempt_id'), item.get('selected_attempt_id'))):
+            return False
+        if pair in seen:
+            return False
+        seen.add(pair)
+    return True
+
+
+def _provider_replacement_scope_history(root):
+    """Load immutable scope receipts already owned by an assembled baseline."""
+    index_path = root/'provider-replacement-scopes.json'
+    history_root = root/'history'/'provider-replacement-scopes'
+    if not index_path.exists():
+        if history_root.exists():
+            raise ValueError('Inherited provider replacement scope history has no index')
+        return []
+    if index_path.is_symlink() or not index_path.is_file():
+        raise ValueError('Invalid inherited provider replacement scope index')
+    try:
+        index = json.loads(index_path.read_text())
+    except (OSError, ValueError, TypeError) as error:
+        raise ValueError('Invalid inherited provider replacement scope index') from error
+    if not isinstance(index, list) or not index:
+        raise ValueError('Invalid inherited provider replacement scope index')
+    checked = []
+    seen = set()
+    for item in index:
+        if (not isinstance(item, dict) or set(item) != {'path', 'sha256', 'replacements'}
+                or not isinstance(item.get('path'), str)):
+            raise ValueError('Invalid inherited provider replacement scope index')
+        relative = Path(item['path'])
+        if relative.parent != Path('history/provider-replacement-scopes'):
+            raise ValueError('Inherited provider replacement scope is outside its history owner')
+        path = contained_path(root, relative, reject_symlinks=True)
+        if item['path'] in seen or not path.is_file():
+            raise ValueError('Inherited provider replacement scope is missing or duplicated')
+        seen.add(item['path'])
+        if item.get('sha256') != _sha256_file(path):
+            raise ValueError('Inherited provider replacement scope hash differs')
+        try:
+            receipt = json.loads(path.read_text())
+        except (OSError, ValueError, TypeError) as error:
+            raise ValueError('Invalid inherited provider replacement scope receipt') from error
+        if (not _valid_provider_replacement_receipt(receipt)
+                or item.get('replacements') != receipt['replacements']):
+            raise ValueError('Invalid inherited provider replacement scope receipt')
+        checked.append((item, path, receipt))
+    stored = set(history_root.iterdir()) if history_root.is_dir() else set()
+    if stored != {path for _, path, _ in checked}:
+        raise ValueError('Inherited provider replacement scope history differs from its index')
+    return checked
+
+
+def _selected_provider_replacement_rows(run, root, rows, receipt_path):
+    """Select a correction scope from a broader immutable call bundle."""
+    if receipt_path is None:
+        return rows, None
+    receipt_path = unlinked_path(Path(receipt_path))
+    if not receipt_path.is_file():
+        raise ValueError('Provider replacement scope receipt is missing')
+    receipt = json.loads(receipt_path.read_text())
+    if (not _valid_provider_replacement_receipt(receipt)
+            or receipt.get('baseline_dataset_sha256') != _sha256_file(run/'dataset.json')
+            or receipt.get('baseline_results_sha256') != _sha256_file(run/'results.jsonl')
+            or receipt.get('source_dataset_sha256') != _sha256_file(root/'dataset.json')
+            or receipt.get('source_results_sha256') != _sha256_file(root/'results.jsonl')):
+        raise ValueError('Provider replacement scope receipt is not bound to its source evidence')
+    replacements = receipt.get('replacements')
+    source_by_attempt = {row['attempt_id']: row for row in rows}
+    baseline_by_pair = {(row['provider'], row['case_id']): row for row in read_records(run)}
+    baseline_cases = {
+        case['id']: case for case in json.loads((run/'dataset.json').read_text())['cases']
+    }
+    selected = []
+    seen = set()
+    for item in replacements:
+        pair = (item['provider'], item['case_id'])
+        prior = baseline_by_pair.get(pair)
+        current = source_by_attempt.get(item['selected_attempt_id'])
+        if (pair in seen or prior is None or current is None
+                or prior['attempt_id'] != item['prior_attempt_id']
+                or (current['provider'], current['case_id']) != pair):
+            raise ValueError('Provider replacement scope differs from bound attempts')
+        if (item['category'] == 'invalid_prior_call'
+                and prior.get('provider_metadata', {}).get('binary_sha256') !=
+                current.get('provider_metadata', {}).get('binary_sha256')):
+            raise ValueError('Invalid-call correction changed the provider binary')
+        if item['category'] == 'implementation_correction':
+            case = baseline_cases.get(item['case_id'])
+            if case is None or task_passed(
+                    bool(prior.get('ok')), prior.get('metrics', {}),
+                    case.get('task_kind', 'body')):
+                raise ValueError(
+                    'Implementation correction baseline machine verdict is not a failure')
+        seen.add(pair)
+        selected.append(current)
+    return selected, receipt
+
+
 def has_bound_direct_scoring_revision(root):
     """Require a provenance-checked receipt bound to this exact source bundle."""
     path = root/'scoring-revisions.json'
@@ -206,11 +404,53 @@ def copy_projected_review(source, output, excluded_providers):
     return True
 
 
-def bind_assembled_scoring_revision(output):
-    """Bind inherited scoring history to exact assembled bytes and full blind review."""
+def bind_assembled_scoring_revision(output, *, source=None):
+    """Bind composed scoring; revalidate machine evidence without inventing review."""
     path=output/'scoring-revisions.json'
     review_path=output/'result-review.json'
-    if not path.is_file() or not review_path.is_file():return False
+    if not path.is_file():return False
+    if not review_path.is_file():
+        if source is None or valid_scoring_revision(output):return False
+        if not valid_scoring_revision(source):
+            raise ValueError('Assembly source has invalid scoring authority')
+        if json.loads((output/'dataset.json').read_text()).get('comparison',{}).get(
+                'require_independent_result_review'):
+            raise ValueError('Assembly requires its declared independent result review')
+        inherited=path.read_bytes()
+        if inherited != (source/'scoring-revisions.json').read_bytes():
+            raise ValueError('Inherited scoring authority differs from declared source')
+        from .scoring_regressions import active_scoring_regressions
+        from .scoring_revision import revise
+        controls=active_scoring_regressions()
+        history=json.loads(inherited)
+        identifiers=list(dict.fromkeys(identifier for receipt in history
+            for identifier in receipt.get('correction_provenance',{}).get('regression_ids',[])
+            if identifier in controls))
+        if not identifiers:
+            raise ValueError('Assembly scoring authority has no current executable controls')
+        categories={controls[identifier]['category'] for identifier in identifiers}
+        before=read_records(output)
+        archive=output/'diagnostics'/'inherited-scoring-history.json'
+        archive.parent.mkdir(parents=True,exist_ok=True)
+        archive.write_bytes(inherited)
+        path.unlink()
+        receipt=revise(output,output/'dataset.json',
+            root_cause_category=next(iter(categories)) if len(categories)==1 else 'multi-root',
+            root_cause='Revalidate inherited shared scoring corrections against the complete '
+                'certified assembled cohort. Task definitions, answers and selected physical '
+                'calls remain unchanged; independent result review is not inferred.',
+            regression_ids=identifiers,validate_only=True)
+        after=read_records(output)
+        if receipt['task_decision_changes'] or before!=after:
+            raise ValueError('Assembly revalidation changed measured calls or scores')
+        receipt['inherited_scoring_authority']={
+            'dataset_sha256':hashlib.sha256((source/'dataset.json').read_bytes()).hexdigest(),
+            'results_sha256':hashlib.sha256((source/'results.jsonl').read_bytes()).hexdigest(),
+            'receipts_sha256':hashlib.sha256(inherited).hexdigest()}
+        path.write_text(json.dumps([receipt],ensure_ascii=False,indent=2)+'\n')
+        if not valid_scoring_revision(output):
+            raise ValueError('Assembly revalidation left invalid scoring authority')
+        return True
     dataset=json.loads((output/'dataset.json').read_text())
     records=read_records(output)
     require_result_review(output,dataset,records)
@@ -231,7 +471,7 @@ def bind_assembled_scoring_revision(output):
             changed[json.dumps(change,ensure_ascii=False,sort_keys=True)]=change
         for change in row.get('task_decision_changes',[]):
             decisions[json.dumps(change,ensure_ascii=False,sort_keys=True)]=change
-    history.append({
+    assembled_receipt = {
         'kind':'audited_assembled_scoring_revision',
         'scored_at':datetime.now(timezone.utc).isoformat(),
         'input_dataset_sha256':history[-1]['output_dataset_sha256'],
@@ -244,7 +484,14 @@ def bind_assembled_scoring_revision(output):
         'immutable_call_fields':'attempt identity, output bytes/hash, timestamps, elapsed time, metrics and verdicts retained',
         'source_scoring_receipts_sha256':scoring_revision_history_sha256(history),
         'independent_result_review_sha256':hashlib.sha256(review_path.read_bytes()).hexdigest(),
-    })
+    }
+    scoring_source = history[-1].get('output_scoring_source_sha256')
+    if scoring_source is not None:
+        assembled_receipt.update(
+            input_scoring_source_sha256=scoring_source,
+            output_scoring_source_sha256=scoring_source,
+        )
+    history.append(assembled_receipt)
     candidate=json.dumps(history,ensure_ascii=False,indent=2)+'\n'
     # Validate the complete candidate chain before replacing the real receipt.
     # A failed inherited chain must never be persisted even transiently.
@@ -355,9 +602,14 @@ def _provider_request_contract(case, provider):
     Firecrawl records ``minimum_text_fragments`` as unsupported and never puts
     it in the Scrape request.  A cohort frozen immediately before that
     evaluator-only completion diagnostic was added is therefore physically
-    equivalent for Firecrawl, while every other task field remains exact.
+    equivalent for Firecrawl, while request-bearing task fields remain exact.
     """
     value = _without_reference(case)
+    # Reader-facing explanation and independent reference provenance are not
+    # sent to providers.  Keep the physical-call comparison focused on the
+    # URL, requested scope and execution/acceptance contract.
+    value.pop("description", None)
+    value.pop("ground_truth_evidence", None)
     benchmark = value.get("source_benchmark", {})
     annotation = benchmark.get("stable_annotation", {})
     if annotation.get("content_kind") == "changing_public_body":
@@ -570,9 +822,14 @@ def _copy_speed_bundle(source, target, dataset, rows, batches, excluded_provider
 
 def _assemble(run, certificates, replacements, output, additions=None, provider_replacements=None,
               provider_additions=None, speed_cohort=None, resource_cohort=None,
-              canonical_dataset=None, retain_unverified=False, exclude_providers=None):
+              canonical_dataset=None, retain_unverified=False, exclude_providers=None,
+              provider_replacement_scope_receipts=None):
     additions = additions or []
     provider_replacements = provider_replacements or []
+    provider_replacement_scope_receipts = provider_replacement_scope_receipts or []
+    if provider_replacement_scope_receipts and (
+            len(provider_replacement_scope_receipts) != len(provider_replacements)):
+        raise ValueError('Provider replacement sources and scope receipts differ in count')
     provider_additions = provider_additions or []
     exclude_providers = exclude_providers or []
     if output.exists():raise ValueError('Destination exists; evidence must not be overwritten')
@@ -581,6 +838,13 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
     reference_input_roots={identifier:run for identifier in cases}
     canonical=(json.loads(read_dataset_bytes(canonical_dataset)) if canonical_dataset else None)
     canonical_cases={c['id']:c for c in canonical['cases']} if canonical else {}
+    if canonical:
+        canonical_comparison = canonical.get('comparison', {})
+        comparison = dataset.setdefault('comparison', {})
+        for key in ('require_independent_result_review',
+                    'independent_result_review_scope'):
+            if key in canonical_comparison:
+                comparison[key] = deepcopy(canonical_comparison[key])
     case_replacements=(canonical.get('comparison',{}).get('case_replacements',{})
                        if canonical else {})
     if (not isinstance(case_replacements,dict)
@@ -600,6 +864,9 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
                        and set(source_manifest.get('attempt_ids',[])) ==
                        {row['attempt_id'] for row in original})
     assembled_input=(run/'execution.json').exists() and not live_physical_run
+    inherited_replacement_scope_history = (
+        _provider_replacement_scope_history(run) if assembled_input else []
+    )
     replacement_cases={};batches=[];evidence=[];selected=[];audit=[]
     reference_evidence=[]
     if assembled_input:
@@ -650,6 +917,8 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
         if cid in replacement_cases:continue
         rows=[r for r in original if r['case_id']==cid]
         if requires_fresh_reference(canonical_cases.get(cid,case)) and not assembled_input:
+            if certificates is None:
+                raise ValueError('Fresh-reference assembly requires certificate evidence: '+cid)
             cert=certificates/cid
             manifest=json.loads((cert/'manifest.json').read_text())
             if {r['attempt_id']:r for r in read_records(cert)}!={r['attempt_id']:r for r in rows}:
@@ -668,8 +937,7 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
     for root in additions:
         new_dataset=json.loads((root/'dataset.json').read_text())
         rows=read_records(root)
-        manifest=json.loads((root/'manifest.json').read_text())
-        require_verified_reference_checks(manifest,cases=new_dataset,records=rows,source=root)
+        addition_batches=read_verified_batches(root,new_dataset,rows)
         incoming={c['id']:c for c in new_dataset['cases']}
         if set(incoming)&set(cases):raise ValueError('Addition overlaps existing cases')
         planned={(c['id'],p) for c in incoming.values() for p in new_dataset['coverage_plan'][c.get('track','web')]}
@@ -682,14 +950,25 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
             dataset['coverage_plan'].setdefault(case.get('track','web'),new_dataset['coverage_plan'][case.get('track','web')])
         expected|=planned
         selected.extend((r,root) for r in rows)
-        batches.append(project_execution_manifest(manifest));evidence.append(root)
-        reference_evidence.append((root, [manifest]))
-        audit.extend({'case_id':cid,'selection_reason':'missing case completed as a full five-method addition; no score-based selection','excluded_attempts':[]} for cid in incoming)
+        batches.extend(project_execution_manifest(batch) for batch in addition_batches);evidence.append(root)
+        reference_evidence.append((root, addition_batches))
+        audit.extend({'case_id':cid,'selection_reason':'missing case completed as the full declared provider cohort; no score-based selection','excluded_attempts':[]} for cid in incoming)
     pair_replacements = {}
-    for root in provider_replacements:
+    replacement_scope_receipts = []
+    for replacement_index, root in enumerate(provider_replacements):
         new_dataset=json.loads((root/'dataset.json').read_text())
         rows=read_records(root)
         replacement_batches=read_verified_batches(root,new_dataset,rows)
+        receipt_path = (provider_replacement_scope_receipts[replacement_index]
+                        if provider_replacement_scope_receipts else None)
+        rows, scope_receipt = _selected_provider_replacement_rows(
+            run, root, rows, receipt_path)
+        if scope_receipt is not None:
+            replacement_scope_receipts.append((Path(receipt_path), scope_receipt))
+        scope_by_pair = {
+            (item['case_id'], item['provider']): item
+            for item in (scope_receipt or {}).get('replacements', [])
+        }
         incoming={c['id']:c for c in new_dataset['cases']}
         for row in rows:
             key=(row['case_id'],row['provider'])
@@ -708,8 +987,13 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
                     raise ValueError('Provider replacement reference hash differs: '+row['case_id'])
             pair_replacements[key]=(row,root)
             old=_selected_record(selected,key)
+            declared = scope_by_pair.get(key)
             audit.append({'case_id':row['case_id'],'provider':row['provider'],
-                'selection_reason':'predeclared provider implementation replacement; complete scope selected without score-based retries',
+                'selection_reason':(
+                    declared['reason'] if declared else
+                    'predeclared provider implementation replacement; complete scope selected without score-based retries'),
+                **({'selection_category': declared['category']}
+                   if declared else {}),
                 'excluded_attempts':[{k:old[k] for k in ('attempt_id','run_id','started_at','elapsed_ms')}]})
         batches.extend(project_execution_manifest(batch) for batch in replacement_batches);evidence.append(root)
         reference_evidence.append((root, replacement_batches))
@@ -774,8 +1058,6 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
     validate_report_ids(dataset,records)
     if len(records)!=len(expected) or {(r['case_id'],r['provider']) for r in records}!=expected:
         raise ValueError('Assembled coverage differs from the complete cohort')
-    if added_providers:
-        dataset.setdefault('comparison',{})['require_independent_result_review']=True
     failed=[cid for batch in batches for cid,row in batch.get('reference_checks',{}).get('postcheck',{}).get('cases',{}).items() if row['status']!='verified']
     dataset['comparison']['publication_state']='blocked_reference_checks' if failed else 'verified'
     dataset['comparison']['unverified_reference_cases']=sorted(set(failed))
@@ -794,9 +1076,12 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
     for case in dataset['cases']:
         path=canonical_dataset or reference_input_roots[case['id']]/'dataset.json'
         reference_groups.setdefault(path,[]).append(case['id'])
-    for path, identifiers in reference_groups.items():
-        materialize_task_references(output, {name: input_tree(path,name)
-            for name in ('sources','list-references')}, identifiers)
+    if canonical:
+        _materialize_canonical_references(output, canonical, canonical_dataset)
+    else:
+        for path, identifiers in reference_groups.items():
+            materialize_task_references(output, {name: input_tree(path,name)
+                for name in ('sources','list-references')}, identifiers)
     for row,root in selected:
         materialize_bound_artifacts(output, root, [row])
     for root, source_batches in reference_evidence:
@@ -807,8 +1092,8 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
         rows=[r for r in original if r['case_id']==cid]
         # Keep the existing diagnostic serialization stable for downstream tools.
         (target/'results.jsonl').write_text(''.join(json.dumps(r, ensure_ascii=True)+'\n' for r in rows))
-        certificate=certificates/cid
-        if certificate.exists():
+        certificate=certificates/cid if certificates is not None else None
+        if certificate is not None and certificate.exists():
             rejected=project_execution_manifest(json.loads((certificate/'manifest.json').read_text()))
             (target/'manifest.json').write_text(json.dumps(rejected,ensure_ascii=False,indent=2)+'\n')
         elif (run/'manifest.json').exists():
@@ -825,13 +1110,32 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
                 raise ValueError('Assembled input has no execution batch for replaced case: '+cid)
             (target/'execution.json').write_text(json.dumps(
                 {'batches':rejected_batches},ensure_ascii=False,indent=2)+'\n')
-        if (certificate/'manifest.json').is_file():
+        if certificate is not None and (certificate/'manifest.json').is_file():
             materialize_reference_checks(target, certificate,
                 [json.loads((certificate/'manifest.json').read_text())])
         materialize_bound_artifacts(target, run, rows)
     for name,payload in [('dataset.json',dataset),('execution.json',{'batches':batches}),('selection-audit.json',audit)]:
         (output/name).write_text(json.dumps(payload,ensure_ascii=False,indent=2)+'\n')
     (output/'results.jsonl').write_text(''.join(json.dumps(r, ensure_ascii=True)+'\n' for r in records))
+    if inherited_replacement_scope_history or replacement_scope_receipts:
+        index = []
+        for item, source, _ in inherited_replacement_scope_history:
+            target = contained_path(output, item['path'], reject_symlinks=True)
+            target.parent.mkdir(parents=True, exist_ok=True)
+            shutil.copy2(source, target)
+            index.append(item)
+        history = output/'history'/'provider-replacement-scopes'
+        history.mkdir(parents=True, exist_ok=True)
+        for position, (receipt_path, receipt) in enumerate(replacement_scope_receipts):
+            target = history/f'{len(index) + position:03d}-{receipt_path.name}'
+            shutil.copy2(receipt_path, target)
+            index.append({
+                'path': str(target.relative_to(output)),
+                'sha256': _sha256_file(target),
+                'replacements': receipt['replacements'],
+            })
+        (output/'provider-replacement-scopes.json').write_text(
+            json.dumps(index, ensure_ascii=False, indent=2)+'\n')
     copy_scoring_revision_history(run, output)
     copy_projected_latency_correction(run, output)
     # Consolidate independently validated source reference-correction receipts
@@ -909,7 +1213,17 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
         if not copied and not any((replacements, additions, provider_replacements,
                                    provider_additions, canonical_dataset)):
             copy_projected_review(run,output,[])
-    bind_assembled_scoring_revision(output)
+    review_required = dataset.get('comparison', {}).get(
+        'require_independent_result_review', False)
+    review_pending = review_required and not (output/'result-review.json').is_file()
+    canonical_review_policy = bool(canonical and
+        canonical.get('comparison', {}).get('require_independent_result_review') is True)
+    # A changed matrix cannot inherit the old review.  Keep the canonical gate
+    # on the staged cohort so the normal review installer can bind these exact
+    # bytes, then bind the inherited scoring history after that review exists.
+    if not (review_pending and canonical_review_policy
+            and (output/'scoring-revisions.json').is_file()):
+        bind_assembled_scoring_revision(output, source=run)
     if speed_cohort:
         if not (speed_cohort/'speed-comparison.json').is_file():
             raise ValueError('Speed cohort has not been packaged')
@@ -943,12 +1257,16 @@ def _assemble(run, certificates, replacements, output, additions=None, provider_
 
 def assemble(run, certificates, replacements, output, additions=None, provider_replacements=None,
              provider_additions=None, speed_cohort=None, resource_cohort=None,
-             canonical_dataset=None, retain_unverified=False, exclude_providers=None):
+             canonical_dataset=None, retain_unverified=False, exclude_providers=None,
+             provider_replacement_scope_receipts=None):
     """Build and verify in a sibling staging directory, then publish atomically."""
-    for source in [run, certificates, *(replacements or []), *(additions or []),
-                   *(provider_replacements or []), *(provider_additions or []),
-                   *([speed_cohort] if speed_cohort else []),
-                   *([resource_cohort] if resource_cohort else [])]:
+    sources = [run, *(replacements or []), *(additions or []),
+               *(provider_replacements or []), *(provider_additions or []),
+               *([speed_cohort] if speed_cohort else []),
+               *([resource_cohort] if resource_cohort else [])]
+    if certificates is not None:
+        sources.append(certificates)
+    for source in sources:
         reject_evidence_symlinks(source)
         for name in ('dataset.json', 'results.jsonl', 'manifest.json', 'execution.json'):
             contained_path(source, name, reject_symlinks=True)
@@ -961,7 +1279,8 @@ def assemble(run, certificates, replacements, output, additions=None, provider_r
             provider_replacements=provider_replacements,provider_additions=provider_additions,
             speed_cohort=speed_cohort,resource_cohort=resource_cohort,
             canonical_dataset=canonical_dataset,
-            retain_unverified=retain_unverified,exclude_providers=exclude_providers)
+            retain_unverified=retain_unverified,exclude_providers=exclude_providers,
+            provider_replacement_scope_receipts=provider_replacement_scope_receipts)
         staging.replace(output)
         work.rmdir()
     except BaseException:
@@ -972,10 +1291,11 @@ def assemble(run, certificates, replacements, output, additions=None, provider_r
 def main(argv=None):
     parser=argparse.ArgumentParser(description=__doc__)
     parser.add_argument('--run-dir',type=Path,required=True)
-    parser.add_argument('--certificates',type=Path,required=True)
+    parser.add_argument('--certificates',type=Path,help='Certificate tree required only for unfinalized fresh-reference physical runs')
     parser.add_argument('--replacements',type=Path,nargs='*',default=[])
     parser.add_argument('--additions',type=Path,nargs='*',default=[])
     parser.add_argument('--provider-replacements',type=Path,nargs='*',default=[])
+    parser.add_argument('--provider-replacement-scope-receipts',type=Path,nargs='*',default=[],help='Hash-bound exact pair scopes for broader provider replacement bundles')
     parser.add_argument('--provider-additions',type=Path,nargs='*',default=[])
     parser.add_argument('--speed-cohort',type=Path)
     parser.add_argument('--resource-cohort',type=Path)
@@ -986,6 +1306,7 @@ def main(argv=None):
     args=parser.parse_args(argv)
     assemble(args.run_dir,args.certificates,args.replacements,args.output,
         additions=args.additions,provider_replacements=args.provider_replacements,
+        provider_replacement_scope_receipts=args.provider_replacement_scope_receipts,
         provider_additions=args.provider_additions,
         speed_cohort=args.speed_cohort,resource_cohort=args.resource_cohort,
         canonical_dataset=args.canonical_dataset,
diff --git a/harness/web_fetch/benchmark_runner.py b/harness/web_fetch/benchmark_runner.py
index 02bf3639b..3066727f5 100644
--- a/harness/web_fetch/benchmark_runner.py
+++ b/harness/web_fetch/benchmark_runner.py
@@ -31,12 +31,16 @@ def main(argv=None):
     parser.add_argument('--validate-only',action='store_true',help='Check selected configuration without creating files or calling providers')
     parser.add_argument('--measure-only',action='store_true',help='Persist measured evidence without building an unreviewed report')
     parser.add_argument('--workers',type=int,default=11)
+    parser.add_argument('--call-order', choices=('provider', 'case-alternating'), default='provider',
+                        help='Run serially by task with alternating method order, or use provider batches')
     parser.add_argument('--runs',type=int,default=1)
     add_failure_retry_argument(parser)
     args=parser.parse_args(argv)
     if args.provider_config and not args.provider_config.is_file():
         parser.error('--provider-config must be an existing file')
     if args.workers < 1:parser.error('--workers must be positive')
+    if args.call_order == 'case-alternating' and (args.workers != 1 or not args.provider_config):
+        parser.error('--call-order case-alternating requires --workers 1 and one explicit --provider-config')
     if args.runs < 1:parser.error('--runs must be positive')
     if not args.validate_only and args.output.exists():parser.error('Output exists; choose an empty directory to avoid overwriting measured evidence')
     load_runtime_env(args.env_file)
@@ -113,13 +117,25 @@ def work(name):
             batches.append(json.loads((folder/'manifest.json').read_text()));records.extend(rs)
         return records,batches
     aggregate_started_at=datetime.now(UTC).isoformat()
-    with ThreadPoolExecutor(max_workers=args.workers) as pool:parts=list(pool.map(work,names))
+    if args.call_order == 'case-alternating':
+        folder = args.output / 'workers' / 'interleaved'
+        records, _ = run_evaluation(
+            output_dir=folder, dataset_meta=dataset, dataset_path=args.dataset,
+            cases=cases, providers=selected_providers, provider_config_path=args.provider_config,
+            runs=args.runs, timeout=45, delay=.5, provider_concurrency=1,
+            max_failure_retries=args.max_failure_retries, call_order=args.call_order,
+        )
+        materialize_bound_artifacts(args.output, folder, records)
+        parts = [(records, [json.loads((folder / 'manifest.json').read_text())])]
+    else:
+        with ThreadPoolExecutor(max_workers=args.workers) as pool:parts=list(pool.map(work,names))
     aggregate_completed_at=datetime.now(UTC).isoformat()
     records=[r for rs,_ in parts for r in rs];batches=[b for _,bs in parts for b in bs]
     assert len(records)==len(cases)*len(names)*args.runs
     execution={'schema_version':1,'aggregate':{
         'started_at':aggregate_started_at,'completed_at':aggregate_completed_at,
         'providers':sorted(names),'case_ids':[case.id for case in cases],'batch_count':len(batches),
+        'call_order': args.call_order,
     },'batches':batches}
     for name,value in [('dataset.json',dataset),('execution.json',execution)]:
         (args.output/name).write_text(json.dumps(value,ensure_ascii=False,indent=2)+'\n')
diff --git a/harness/web_fetch/body_coverage.py b/harness/web_fetch/body_coverage.py
index f456ea3bd..812782410 100644
--- a/harness/web_fetch/body_coverage.py
+++ b/harness/web_fetch/body_coverage.py
@@ -386,7 +386,7 @@ def _global_region_allocation(predicted, expected, floor_counts, target_counts,
     return allocation, True
 
 
-def evaluate_body_requirements(content, contract):
+def _evaluate_body_surface(content, contract):
     if not contract:
         return {'body_coverage_pass': True, 'body_region_results': []}
     version = contract.get('version')
@@ -481,3 +481,21 @@ def evaluate_body_requirements(content, contract):
             **({'body_matching_text_sha256': hashlib.sha256(
                 matching_text.encode()).hexdigest()} if version == 3 else {}),
             'body_region_results': checks}
+
+
+def evaluate_body_requirements(content, contract):
+    """Evaluate prose directly, then one structure-preserving table column at a time."""
+    result = _evaluate_body_surface(content, contract)
+    if not contract or result['body_coverage_pass']:
+        return result
+    from .structured_tables import table_header_column_surfaces
+    for surface in table_header_column_surfaces(content):
+        candidate = _evaluate_body_surface(surface['text'], contract)
+        if candidate['body_coverage_pass']:
+            candidate.update({
+                'body_matching_surface': 'table_header_and_column',
+                'body_matching_table_index': surface['table_index'],
+                'body_matching_column_index': surface['column_index'],
+            })
+            return candidate
+    return result
diff --git a/harness/web_fetch/browser_observations.py b/harness/web_fetch/browser_observations.py
index 22083a4e3..7f01959d3 100644
--- a/harness/web_fetch/browser_observations.py
+++ b/harness/web_fetch/browser_observations.py
@@ -9,8 +9,10 @@
 import json
 import socket
 import sys
+import tempfile
 import time
 from concurrent.futures import ThreadPoolExecutor
+from contextlib import ExitStack
 from dataclasses import asdict, dataclass
 from datetime import UTC, datetime
 from pathlib import Path
@@ -18,6 +20,10 @@
 
 from harness.reporting.publication import atomic_create, json_bytes
 from harness.web_fetch.metrics import normalize_for_match
+from harness.web_fetch.network_dns import (
+    configure_chromium_dns_profile,
+    validate_dns_mode,
+)
 from harness.web_fetch.reference_inputs import read_dataset_bytes
 from harness.web_fetch.reference_lifecycle import (
     _resource_target_matches,
@@ -27,6 +33,37 @@
 from harness.web_fetch.safety import safe_identifier
 from harness.web_fetch.source_capture import extract_html
 
+# innerText includes opacity-zero content. Descend only through ancestors of
+# transparent subtrees; unaffected branches retain the browser's text layout.
+PAINTED_TEXT = r"""(root) => {
+  for (let n = root; n; n = n.parentElement) {
+    if (Number(getComputedStyle(n).opacity) === 0) return '';
+  }
+  const affected = new Set();
+  for (const node of root.querySelectorAll('*')) {
+    if (Number(getComputedStyle(node).opacity) !== 0) continue;
+    for (let n = node.parentElement; n && !affected.has(n); n = n.parentElement) {
+      affected.add(n);
+      if (n === root) break;
+    }
+  }
+  const read = node => {
+    if (node.nodeType === Node.TEXT_NODE) {
+      return getComputedStyle(node.parentElement).visibility === 'visible'
+        ? node.textContent : '';
+    }
+    if (node.nodeType !== Node.ELEMENT_NODE) return '';
+    const style = getComputedStyle(node);
+    if (style.display === 'none' || Number(style.opacity) === 0) return '';
+    if (!affected.has(node)) return node.innerText || '';
+    const block = !['inline', 'inline-block', 'contents'].includes(style.display);
+    const text = Array.from(node.childNodes, read).join('');
+    return block ? '\n' + text + '\n' : text;
+  };
+  return read(root).trim();
+}"""
+
+
 CONTRACTS = Path(__file__).parent / "data/browser-observation-contracts.json"
 
 
@@ -251,34 +288,62 @@ def capture(
     resolved_ip: str | None = None,
     *,
     observation_scope: str = "reference",
+    dns_mode: str = "system",
 ) -> dict:
     from playwright.sync_api import sync_playwright
 
     if type(timeout_ms) is not int or timeout_ms < 1:
         raise ValueError("Browser observation timeout must be positive")
+    dns_mode = validate_dns_mode(dns_mode)
+    if dns_mode == "public_doh" and resolved_ip is not None:
+        raise ValueError("public_doh cannot use a resolved-IP override")
     policy = capture_policy(case, observation_scope)
     begin = time.monotonic()
     host = url_host(case["url"])
     if resolved_ip is not None:
         resolved_ip = public_ip(resolved_ip)
     frames = []
-    with sync_playwright() as playwright:
+    dns_metadata = {"dns_mode": dns_mode}
+    browser_version = None
+    primary_response_server_addr = None
+    with sync_playwright() as playwright, ExitStack() as resources:
         launch_args = (
             [f"--host-resolver-rules={chromium_host_rule(host, resolved_ip)}"]
             if resolved_ip
             else []
         )
-        browser = playwright.chromium.launch(
-            headless=True,
-            executable_path=browser_binary,
-            args=launch_args,
+        context = None
+        launch = dict(
+            headless=True, executable_path=browser_binary, args=launch_args,
             timeout=remaining_ms(begin, timeout_ms),
         )
-        try:
+        if dns_mode == "public_doh":
+            profile = resources.enter_context(
+                tempfile.TemporaryDirectory(prefix="browser-observation-dns-")
+            )
+            dns_metadata = configure_chromium_dns_profile(profile, dns_mode)
+            context = playwright.chromium.launch_persistent_context(profile, **launch)
+            browser = context.browser
+            page = context.new_page()
+        else:
+            browser = playwright.chromium.launch(**launch)
             page = browser.new_page()
-            page.goto(
+        try:
+            browser_version = browser.version if browser is not None else None
+            response = page.goto(
                 case["url"], wait_until="domcontentloaded", timeout=remaining_ms(begin, timeout_ms)
             )
+            if response is not None:
+                try:
+                    address = response.server_addr()
+                    if isinstance(address, dict):
+                        ip_address = address.get("ip_address", address.get("ipAddress"))
+                        primary_response_server_addr = {
+                            **({"ip_address": ip_address} if ip_address else {}),
+                            **({"port": address["port"]} if "port" in address else {}),
+                        } or None
+                except Exception:
+                    primary_response_server_addr = None
             if case.get("task_kind") == "resource":
                 captured = capture_resource_observation(page, case, timeout_ms, begin)
                 final_url, title = page.url, page.title()
@@ -312,11 +377,11 @@ def capture(
                     )
                     observation_method = "rendered_dom_text_including_preloaded_hidden_panels"
                 elif policy.text_mode == "visible":
-                    content = content_locator.inner_text(timeout=remaining_ms(begin, timeout_ms))
+                    content = content_locator.evaluate(PAINTED_TEXT, timeout=remaining_ms(begin, timeout_ms))
                     observation_method = (
-                        "visible_whole_page_inner_text"
+                        "painted_whole_page_text"
                         if observation_scope == "visible_page"
-                        else "visible_inner_text"
+                        else "painted_visible_text"
                     )
                 else:
                     content = extract_pruned_selector_text(outer_html, case["url"])
@@ -328,14 +393,17 @@ def capture(
                         try:
                             current, shown = frame, True
                             while current.parent_frame is not None:
-                                if not current.frame_element().is_visible():
+                                if not current.frame_element().evaluate(
+                                    "element => element.checkVisibility({opacityProperty: true, "
+                                    "visibilityProperty: true})"
+                                ):
                                     shown = False
                                     break
                                 current = current.parent_frame
                             if not shown:
                                 continue
-                            text = frame.locator("body").inner_text(
-                                timeout=remaining_ms(begin, timeout_ms)
+                            text = frame.locator("body").evaluate(
+                                PAINTED_TEXT, timeout=remaining_ms(begin, timeout_ms)
                             )
                             frames.append(
                                 {"url": frame.url, "status": "success", "content_text": text}
@@ -347,14 +415,24 @@ def capture(
                                 {"url": frame.url, "status": "failure", "error": str(error)[:1000]}
                             )
         finally:
-            browser.close()
+            if context is not None:
+                context.close()
+            elif browser is not None:
+                browser.close()
     observer = {
         "browser": "Chromium",
         "binary": "explicit" if browser_binary else "Playwright default",
         "dns_override": bool(resolved_ip),
         "host": host,
         "resolved_ip": resolved_ip,
-        "resolution_method": "caller_supplied" if resolved_ip else "chromium_dns",
+        "resolution_method": (
+            "chromium_secure_dns"
+            if dns_mode == "public_doh"
+            else "caller_supplied" if resolved_ip else "chromium_dns"
+        ),
+        "browser_version": browser_version,
+        "primary_response_server_addr": primary_response_server_addr,
+        **dns_metadata,
     }
     if case.get("task_kind") == "resource":
         return {
@@ -417,8 +495,12 @@ def capture_with_retries(
     resolved_ip: str | None = None,
     *,
     observation_scope: str = "reference",
+    dns_mode: str = "system",
 ) -> dict:
     """Capture one case without allowing it to abort the rest of the batch."""
+    dns_mode = validate_dns_mode(dns_mode)
+    if dns_mode == "public_doh" and resolved_ip is not None:
+        raise ValueError("public_doh cannot use a resolved-IP override")
     errors = []
     last_row: dict = {}
     observer = {
@@ -428,15 +510,28 @@ def capture_with_retries(
         "host": None,
         "resolved_ip": None,
         "resolution_method": (
-            "explicit_cli_override" if resolved_ip is not None else "system_dns_getaddrinfo"
+            "chromium_secure_dns"
+            if dns_mode == "public_doh"
+            else "explicit_cli_override" if resolved_ip is not None else "system_dns_getaddrinfo"
+        ),
+        "dns_mode": dns_mode,
+        **(
+            {"system_dns_fallback": False}
+            if dns_mode == "public_doh"
+            else {}
         ),
     }
     for attempt in range(1, attempts + 1):
         try:
-            host, attempt_ip, resolution_method = resolve_public_host(case["url"], resolved_ip)
+            if dns_mode == "public_doh":
+                host, attempt_ip, resolution_method = (
+                    url_host(case["url"]), None, "chromium_secure_dns"
+                )
+            else:
+                host, attempt_ip, resolution_method = resolve_public_host(case["url"], resolved_ip)
             observer.update(
                 {
-                    "dns_override": True,
+                    "dns_override": attempt_ip is not None,
                     "host": host,
                     "resolved_ip": attempt_ip,
                     "resolution_method": resolution_method,
@@ -445,6 +540,8 @@ def capture_with_retries(
             options = (
                 {"observation_scope": observation_scope} if observation_scope != "reference" else {}
             )
+            if dns_mode != "system":
+                options["dns_mode"] = dns_mode
             row = capture(case, timeout_ms, browser_binary, attempt_ip, **options)
             last_row = row
             row["observer"].update(observer)
@@ -489,6 +586,7 @@ def capture_with_retries(
 def capture_source_identity() -> dict:
     names = (
         "browser_observations.py",
+        "network_dns.py",
         "source_capture.py",
         "reference_lifecycle.py",
         "metrics.py",
@@ -506,6 +604,7 @@ def capture_batch(
     attempts,
     browser_binary=None,
     resolved_ip=None,
+    dns_mode="system",
     observation_scope="reference",
     checkpoints=None,
     workers=1,
@@ -513,6 +612,9 @@ def capture_batch(
     """Checkpoint independent observations against capture code, policy and binary."""
     if any(type(value) is not int or value < 1 for value in (timeout_ms, attempts, workers)):
         raise ValueError("Browser observation budgets and workers must be positive integers")
+    dns_mode = validate_dns_mode(dns_mode)
+    if dns_mode == "public_doh" and resolved_ip is not None:
+        raise ValueError("public_doh cannot use a resolved-IP override")
     if len({case["id"] for case in cases}) != len(cases):
         raise ValueError("Invalid browser observation batch: duplicate case IDs")
     for case in cases:
@@ -549,8 +651,9 @@ def observe(case):
             attempts=attempts,
             binary_sha256=binary_sha,
             resolved_ip=resolved_ip,
+            dns_mode=dns_mode,
             observation_scope=observation_scope,
-            capture_schema=2,
+            capture_schema=3,
             capture_sources=sources,
         )
         fingerprint = hashlib.sha256(json.dumps(inputs, sort_keys=True).encode()).hexdigest()
@@ -576,6 +679,8 @@ def observe(case):
         options = (
             {"observation_scope": observation_scope} if observation_scope != "reference" else {}
         )
+        if dns_mode != "system":
+            options["dns_mode"] = dns_mode
         row = capture_with_retries(
             case, timeout_ms, attempts, browser_binary, resolved_ip, **options
         )
@@ -615,6 +720,7 @@ def main(argv=None, *, root: Path | None = None) -> None:
     )
     parser.add_argument("--checkpoint-dir", type=Path)
     parser.add_argument("--workers", type=int, default=1)
+    parser.add_argument("--dns-mode", choices=("system", "public_doh"), default="system")
     parser.add_argument(
         "--resolved-ip",
         help="Audited public IP override, mapped only to each current case URL host",
@@ -627,6 +733,8 @@ def main(argv=None, *, root: Path | None = None) -> None:
             args.resolved_ip = public_ip(args.resolved_ip)
         except ValueError as error:
             parser.error(str(error))
+    if args.dns_mode == "public_doh" and args.resolved_ip is not None:
+        parser.error("public_doh cannot use --resolved-ip")
     if args.output.exists() or args.output.is_symlink():
         parser.error("Output exists; observations are immutable")
     rows = json.loads(read_dataset_bytes(args.dataset))["cases"]
@@ -646,6 +754,7 @@ def main(argv=None, *, root: Path | None = None) -> None:
         attempts=args.attempts,
         browser_binary=args.browser_binary,
         resolved_ip=args.resolved_ip,
+        dns_mode=args.dns_mode,
         observation_scope=args.observation_scope,
         checkpoints=args.checkpoint_dir,
         workers=args.workers,
diff --git a/harness/web_fetch/certification.py b/harness/web_fetch/certification.py
index d8aa38bdb..167a51ef2 100644
--- a/harness/web_fetch/certification.py
+++ b/harness/web_fetch/certification.py
@@ -148,6 +148,7 @@ def main(argv: list[str] | None = None) -> None:
     parser.add_argument("--case-ids", required=True)
     parser.add_argument("--workers", type=int, default=1)
     add_failure_retry_argument(parser)
+    parser.add_argument("--call-order", choices=("provider", "case-alternating"), default="provider")
     parser.add_argument("--capture-workers", type=int, default=8)
     parser.add_argument("--browser-capture-attempts", type=int, default=2)
     parser.add_argument("--browser-binary")
@@ -175,6 +176,8 @@ def main(argv: list[str] | None = None) -> None:
     args = parser.parse_args(argv)
     if args.provider_config and not args.provider_config.is_file():
         parser.error("--provider-config must be an existing file")
+    if args.call_order == "case-alternating" and (args.workers != 1 or not args.provider_config):
+        parser.error("Alternating case calls require --workers 1 and --provider-config")
     if args.browser_capture_attempts < 1:
         parser.error("--browser-capture-attempts must be at least 1")
 
@@ -188,20 +191,9 @@ def main(argv: list[str] | None = None) -> None:
     if args.output.exists() or args.work_root.exists():
         parser.error("Output and work root must both be new immutable paths")
 
-    # Stable rules deliberately bypass exact-reference lifecycle checks. A
-    # completed wrapper therefore cannot certify that their old labels or
-    # record requirements are still present on the live site.
-    from harness.web_fetch.reference_lifecycle import source_unqualified_contract_cases
-
-    unqualified = source_unqualified_contract_cases(
-        case for case in dataset["cases"] if case["id"] in case_ids
-    )
-    if unqualified and not args.diagnostic:
-        parser.error(
-            "Stable live-page contracts have no fresh source qualification; "
-            "use --diagnostic to retain uncertified evidence, not to waive scoring: "
-            + ", ".join(unqualified)
-        )
+    # Frozen answers are already evaluation inputs. Historical admission
+    # evidence does not turn a version rerun into live source qualification.
+    unqualified = []
 
     from harness.web_fetch.retrieval_hints import native_fetch_dataset, parse_retrieval_hints
 
@@ -227,10 +219,12 @@ def main(argv: list[str] | None = None) -> None:
         parse_retrieval_hints(
             case.get("track", "web"), case.get("retrieval_hints"), identifier=case["id"]
         )
-    if args.retrieval_mode == "native" or args.diagnostic:
-        args.work_root.mkdir(parents=True)
-        args.dataset = args.work_root / "input-dataset.json"
-        args.dataset.write_text(json.dumps(dataset, ensure_ascii=False, indent=2) + "\n")
+    source_ids = ",".join(case["id"] for case in dataset["cases"]
+                          if case["id"] in case_ids and requires_fresh_reference(case))
+    args.work_root.mkdir(parents=True)
+    dataset.setdefault('comparison', {})['source_reference_policy'] = 'frozen_benchmark_inputs_with_explicit_live_exact_checks'
+    args.dataset = args.work_root / "input-dataset.json"
+    args.dataset.write_text(json.dumps(dataset, ensure_ascii=False, indent=2) + "\n")
 
     selected = ",".join(case_ids)
     pre_captures = args.work_root / "pre-captures"
@@ -239,17 +233,12 @@ def main(argv: list[str] | None = None) -> None:
     post_captures = args.work_root / "post-captures"
     post_browser = args.work_root / "post-browser.json"
 
-    run(
-        source_capture.main,
-        [
-            str(args.dataset),
-            str(pre_captures),
-            "--workers",
-            str(args.capture_workers),
-            "--only",
-            selected,
-        ]
-    )
+    if source_ids:
+        run(source_capture.main, [str(args.dataset), str(pre_captures),
+            "--workers", str(args.capture_workers), "--only", source_ids])
+    else:
+        pre_captures.mkdir(parents=True)
+        (pre_captures / 'audit.json').write_text('[]\n')
     try:
         pre_browser_cases = browser_observation_cases(dataset, pre_captures, case_ids)
     except (KeyError, TypeError, ValueError) as error:
@@ -314,6 +303,7 @@ def main(argv: list[str] | None = None) -> None:
         "--max-failure-retries",
         str(args.max_failure_retries),
         "--measure-only",
+        "--call-order", args.call_order,
     ]
     if args.env_file:
         benchmark.extend(["--env-file", str(args.env_file)])
@@ -325,17 +315,12 @@ def main(argv: list[str] | None = None) -> None:
     # choose browser fallbacks from that post-call evidence. Reusing the
     # pre-call browser inventory is unsafe: an endpoint can become unavailable
     # during a long cohort even though its frozen pre-capture was usable.
-    run(
-        source_capture.main,
-        [
-            str(args.output / "dataset.json"),
-            str(post_captures),
-            "--workers",
-            str(args.capture_workers),
-            "--only",
-            selected,
-        ]
-    )
+    if source_ids:
+        run(source_capture.main, [str(args.output / "dataset.json"), str(post_captures),
+            "--workers", str(args.capture_workers), "--only", source_ids])
+    else:
+        post_captures.mkdir(parents=True)
+        (post_captures / 'audit.json').write_text('[]\n')
     post_dataset = json.loads((args.output / "dataset.json").read_text(encoding="utf-8"))
     try:
         post_browser_cases = browser_observation_cases(post_dataset, post_captures, case_ids)
@@ -368,17 +353,9 @@ def main(argv: list[str] | None = None) -> None:
         except ValueError as error:
             parser.error(str(error))
         post_browser_args = ["--browser-observations", str(post_browser)]
-    run(
-        reference_freeze.postcheck_main,
-        [
-            "--run-dir",
-            str(args.output),
-            "--captures",
-            str(post_captures),
-            "--resume",
-            *post_browser_args,
-        ]
-    )
+    if source_ids:
+        run(reference_freeze.postcheck_main, ["--run-dir", str(args.output),
+            "--captures", str(post_captures), "--resume", *post_browser_args])
     observations = post_captures / "observations.json"
     if not observations.exists():
         observations.parent.mkdir(parents=True, exist_ok=True)
diff --git a/harness/web_fetch/comparison_audit.py b/harness/web_fetch/comparison_audit.py
new file mode 100644
index 000000000..73f903060
--- /dev/null
+++ b/harness/web_fetch/comparison_audit.py
@@ -0,0 +1,476 @@
+"""Verify and summarize one complete fixed-native two-build cohort."""
+
+from __future__ import annotations
+
+import hashlib
+import json
+from collections import Counter, defaultdict
+from datetime import datetime
+from pathlib import Path
+from typing import Any
+
+from harness.record_io import parse_jsonl
+
+from .artifacts import diagnostic_log_binding, verify_public_call_log, verify_record_artifacts
+from .metrics import task_passed
+from .reference_lifecycle import require_verified_reference_checks
+from .reference_lifecycle import is_diagnostic_evidence
+from .safety import contained_path, reject_evidence_symlinks, safe_identifier
+from .task_outputs import require_native_task_routes
+from .retrieval_hints import parse_retrieval_hints
+
+
+_IDENTITY_FIELDS = {
+    "label",
+    "source_url",
+    "binary",
+    "expected_reported_version",
+    "expected_binary_sha256",
+}
+
+
+def _read_json(path: Path) -> dict[str, Any]:
+    if path.is_symlink() or not path.is_file():
+        raise ValueError("Comparison input is missing or unsafe: " + str(path))
+    value = json.loads(path.read_bytes())
+    if not isinstance(value, dict):
+        raise ValueError("Comparison input must be a JSON object: " + str(path))
+    return value
+
+
+def _sha256(path: Path) -> str:
+    return hashlib.sha256(path.read_bytes()).hexdigest()
+
+
+def _native_contract(config: dict[str, Any]) -> dict[str, Any]:
+    return {key: value for key, value in config.items() if key not in _IDENTITY_FIELDS}
+
+
+def _timestamp(value: Any) -> datetime:
+    if not isinstance(value, str):
+        raise ValueError("Comparison call has no timestamp")
+    return datetime.fromisoformat(value)
+
+
+def _relation(before: bool, after: bool) -> str:
+    return {
+        (True, True): "pass_to_pass",
+        (True, False): "pass_to_fail",
+        (False, True): "fail_to_pass",
+        (False, False): "fail_to_fail",
+    }[before, after]
+
+
+def _scalar_metric_changes(before: dict[str, Any], after: dict[str, Any]) -> list[str]:
+    keys = set(before) | set(after)
+    return sorted(
+        key
+        for key in keys
+        if isinstance(before.get(key), (str, int, float, bool, type(None)))
+        and isinstance(after.get(key), (str, int, float, bool, type(None)))
+        and before.get(key) != after.get(key)
+    )
+
+
+def _method_result(row: dict[str, Any], passed: bool) -> dict[str, Any]:
+    metadata = row.get("provider_metadata") or {}
+    call_log = metadata.get("call_log") or {}
+    metrics = row.get("metrics") or {}
+    return {
+        "attempt_id": row["attempt_id"],
+        "request_ok": row.get("ok") is True,
+        "task_pass": passed,
+        "status_code": row.get("status_code"),
+        "error_type": row.get("error_type"),
+        "content_sha256": metrics.get("content_sha256"),
+        "content_chars": metrics.get("content_chars"),
+        "elapsed_ms": row.get("elapsed_ms"),
+        "route": metadata.get("route") or metadata.get("extractor"),
+        "artifact_path": row.get("artifact_path"),
+        "call_log_path": call_log.get("path"),
+    }
+
+
+def audit_fixed_native_comparison(
+    evidence_root: Path,
+    *,
+    source_dataset: Path,
+    provider_config: Path,
+    run_receipt: Path,
+    output_json: Path,
+    output_markdown: Path,
+    stable_provider: str,
+    candidate_provider: str,
+) -> dict[str, Any]:
+    """Fail closed on cohort drift, then write an exhaustive paired locator.
+
+    This is an evidence audit, not an independent result review.  It classifies
+    deterministic result differences without assigning a product root cause.
+    """
+    evidence_root = evidence_root.resolve()
+    reject_evidence_symlinks(evidence_root)
+    for value in (stable_provider, candidate_provider):
+        safe_identifier(value)
+    if stable_provider == candidate_provider:
+        raise ValueError("Comparison methods must be distinct")
+
+    dataset_path = contained_path(evidence_root, "dataset.json", reject_symlinks=True)
+    results_path = contained_path(evidence_root, "results.jsonl", reject_symlinks=True)
+    execution_path = contained_path(evidence_root, "execution.json", reject_symlinks=True)
+    dataset = _read_json(dataset_path)
+    source = _read_json(source_dataset)
+    config = _read_json(provider_config)
+    receipt = _read_json(run_receipt)
+    execution = _read_json(execution_path)
+    results_raw = results_path.read_bytes()
+    records = parse_jsonl(results_raw)
+
+    providers = [stable_provider, candidate_provider]
+    source_sha256 = _sha256(source_dataset)
+    expected_count = receipt.get("inputs", {}).get("case_count")
+    if (
+        receipt.get("schema_version") != 1
+        or receipt.get("inputs", {}).get("dataset_sha256") != source_sha256
+        or not isinstance(expected_count, int)
+        or isinstance(expected_count, bool)
+        or expected_count < 1
+    ):
+        raise ValueError("Run receipt does not bind the original source dataset")
+    source_ids = [case.get("id") for case in source.get("cases", [])]
+    case_ids = [case.get("id") for case in dataset.get("cases", [])]
+    if (
+        len(source_ids) != expected_count
+        or len(set(source_ids)) != expected_count
+        or case_ids != source_ids
+        or dataset.get("comparison", {}).get("input_dataset_sha256") != source_sha256
+        or dataset.get("comparison", {}).get("retrieval_mode")
+        != "native_task_family_completion"
+    ):
+        raise ValueError("Measured dataset differs from the bound native source scope")
+    for case in dataset["cases"]:
+        hints = case.get("retrieval_hints")
+        if case.get("track", "web") == "dynamic":
+            try:
+                parse_retrieval_hints("dynamic", hints, identifier=case["id"])
+            except ValueError as error:
+                raise ValueError("Dynamic comparison case did not use a registered native contract") from error
+            if hints.get("version") != 3 or hints.get("mode") != "native":
+                raise ValueError("Dynamic comparison case did not use native completion")
+        elif hints:
+            raise ValueError("Fixed-native comparison contains per-case retrieval hints")
+
+    configured = config.get("providers")
+    if not isinstance(configured, dict) or set(configured) != set(providers):
+        raise ValueError("Provider configuration does not contain the exact comparison pair")
+    for provider in providers:
+        item = configured[provider]
+        if (
+            item.get("type") != "moli_webfetch"
+            or item.get("wait_until") != "done"
+            or item.get("dynamic_wait_until") != "domstable"
+            or item.get("uniform_native_parameters") is not True
+            or item.get("block_private_networks") is not True
+            or item.get("dns_mode", "system") != "system"
+            or item.get("log_level") != "debug"
+            or item.get("retain_complete_diagnostic_log") is not True
+            or item.get("max_diagnostic_bytes") != 100_000_000
+        ):
+            raise ValueError(provider + ": provider configuration is not fixed native")
+    if _native_contract(configured[stable_provider]) != _native_contract(
+        configured[candidate_provider]
+    ):
+        raise ValueError("Stable and candidate use different non-identity parameters")
+
+    declared = receipt.get("execution", {})
+    call_order = declared.get("call_order")
+    runtime_source_sha256 = declared.get("runtime_source_sha256")
+    evidence_state = declared.get("evidence_state")
+    if declared != {
+        "workers": 1,
+        "call_order": call_order,
+        "runs": 1,
+        "caller_retries": 0,
+        "retrieval_mode": "native",
+        "runtime_source_sha256": runtime_source_sha256,
+        "evidence_state": evidence_state,
+    } or call_order not in {"provider", "case-alternating"} or (
+        not isinstance(runtime_source_sha256, str)
+        or len(runtime_source_sha256) != 64
+        or any(character not in "0123456789abcdef" for character in runtime_source_sha256)
+    ) or evidence_state not in {"certified", "diagnostic"}:
+        raise ValueError("Run receipt does not declare the fixed comparison protocol")
+    identities = {
+        stable_provider: receipt.get("stable", {}),
+        candidate_provider: receipt.get("candidate", {}),
+    }
+    for provider, identity in identities.items():
+        expected_hash = configured[provider].get("expected_binary_sha256")
+        expected_version = configured[provider].get("expected_reported_version")
+        if (
+            identity.get("binary_sha256") != expected_hash
+            or identity.get("reported_version") != expected_version
+        ):
+            raise ValueError(provider + ": receipt and configured identity differ")
+
+    aggregate = execution.get("aggregate", {})
+    batches = execution.get("batches")
+    expected_batch_count = 1 if call_order == "case-alternating" else 2
+    if (
+        aggregate.get("providers") != sorted(providers)
+        or aggregate.get("case_ids") != case_ids
+        or aggregate.get("batch_count") != expected_batch_count
+        or aggregate.get("call_order") != call_order
+        or not isinstance(batches, list)
+        or len(batches) != expected_batch_count
+    ):
+        raise ValueError("Execution boundary does not describe the declared comparison batches")
+    batch_attempt_ids: list[str] = []
+    for index, batch in enumerate(batches):
+        parameters = batch.get("parameters", {})
+        batch_providers = [item.get("name") for item in batch.get("providers", [])]
+        expected_batch_providers = providers if call_order == "case-alternating" else [providers[index]]
+        expected_scope = (
+            "serial_alternating_providers_per_case"
+            if call_order == "case-alternating"
+            else "providers_parallel_cases_sequential_per_provider"
+        )
+        if (
+            batch_providers != expected_batch_providers
+            or parameters.get("runs") != 1
+            or parameters.get("max_failure_retries") != 0
+            or parameters.get("call_order") != call_order
+            or parameters.get("provider_concurrency") != 1
+            or parameters.get("concurrency_scope") != expected_scope
+            or batch.get("unexecuted")
+            or not batch.get("completed_at")
+            or batch.get("provider_config_sha256") != _sha256(provider_config)
+            or batch.get("runtime_source_sha256") != runtime_source_sha256
+        ):
+            raise ValueError("Physical batch differs from the declared comparison protocol")
+        batch_identities = {
+            item["name"]: item.get("implementation_identity")
+            for item in batch["providers"]
+        }
+        for provider in expected_batch_providers:
+            if batch_identities[provider] != {
+                "reported_version": configured[provider]["expected_reported_version"],
+                "binary_sha256": configured[provider]["expected_binary_sha256"],
+            }:
+                raise ValueError(provider + ": batch implementation identity differs")
+        if batch.get("attempt_count") != len(batch.get("attempt_ids", [])):
+            raise ValueError("Physical batch attempt inventory is incomplete")
+        batch_attempt_ids.extend(batch.get("attempt_ids", []))
+
+    expected_keys = {(provider, case_id, 1) for provider in providers for case_id in case_ids}
+    actual_keys = [(row.get("provider"), row.get("case_id"), row.get("run")) for row in records]
+    if len(records) != expected_count * 2 or Counter(actual_keys) != Counter(expected_keys):
+        raise ValueError("Comparison result matrix is incomplete or duplicated")
+    attempt_ids = [row.get("attempt_id") for row in records]
+    if (
+        len(set(attempt_ids)) != len(attempt_ids)
+        or len(batch_attempt_ids) != len(records)
+        or Counter(batch_attempt_ids) != Counter(attempt_ids)
+    ):
+        raise ValueError("Comparison attempt inventory is incomplete or duplicated")
+
+    diagnostic_evidence = is_diagnostic_evidence(dataset) or any(
+        is_diagnostic_evidence(batch) for batch in batches
+    )
+    if diagnostic_evidence != (evidence_state == "diagnostic"):
+        raise ValueError("Run receipt and evidence state differ")
+    require_verified_reference_checks(
+        batches, cases=dataset, records=records, source=evidence_root,
+        allow_diagnostic=evidence_state == "diagnostic",
+    )
+    require_native_task_routes(dataset["cases"], records)
+    indexed: dict[tuple[str, str], dict[str, Any]] = {}
+    for row in records:
+        provider = row["provider"]
+        expected = configured[provider]
+        metadata = row.get("provider_metadata") or {}
+        observed_identity = {
+            "binary_sha256": metadata.get("binary_sha256"),
+            "reported_version": metadata.get("reported_version"),
+        }
+        expected_identity = {
+            "binary_sha256": expected["expected_binary_sha256"],
+            "reported_version": expected["expected_reported_version"],
+        }
+        # An outer deadline can return before the provider thread yields its
+        # metadata.  The completed batch still binds the executable identity;
+        # every call that did return an identity must repeat that exact pin.
+        missing_timeout_identity = (
+            row.get("ok") is False
+            and row.get("error_type") in {"timeout", "network"}
+            and not any(observed_identity.values())
+        )
+        diagnostic = diagnostic_log_binding(metadata)
+        if (
+            row.get("provider_type") != "moli_webfetch"
+            or (not missing_timeout_identity and observed_identity != expected_identity)
+            or "retry" in metadata
+            or diagnostic is None
+            or diagnostic["bytes"] > expected["max_diagnostic_bytes"]
+            or metadata.get("diagnostic_log_truncated") is True
+        ):
+            raise ValueError(provider + "/" + row["case_id"] + ": call identity or retry policy differs")
+        verify_record_artifacts(evidence_root, row)
+        binding = metadata.get("call_log")
+        log = json.loads(verify_public_call_log(evidence_root, binding).read_bytes())
+        if log.get("identity", {}).get("physical_attempt") != 1:
+            raise ValueError("Comparison contains a retry physical call")
+        indexed[provider, row["case_id"]] = row
+
+    chronological = sorted(records, key=lambda row: (_timestamp(row["started_at"]), row["attempt_id"]))
+    expected_order: list[tuple[str, str]] = []
+    if call_order == "case-alternating":
+        for index, case_id in enumerate(case_ids):
+            order = providers if index % 2 == 0 else providers[::-1]
+            expected_order.extend((provider, case_id) for provider in order)
+    else:
+        expected_order = [
+            (provider, case_id) for provider in providers for case_id in case_ids
+        ]
+    if [(row["provider"], row["case_id"]) for row in chronological] != expected_order:
+        raise ValueError("Recorded calls do not follow the predeclared comparison order")
+    for before, after in zip(chronological, chronological[1:]):
+        if _timestamp(before["completed_at"]) > _timestamp(after["started_at"]):
+            raise ValueError("Comparison calls overlap; serial execution is unproven")
+
+    cases = {case["id"]: case for case in dataset["cases"]}
+    relation_counts: Counter[str] = Counter()
+    by_track: dict[str, Counter[str]] = defaultdict(Counter)
+    paired = []
+    for case_id in case_ids:
+        case = cases[case_id]
+        before = indexed[stable_provider, case_id]
+        after = indexed[candidate_provider, case_id]
+        kind = case.get("task_kind", "body")
+        before_pass = task_passed(before["ok"], before["metrics"], kind)
+        after_pass = task_passed(after["ok"], after["metrics"], kind)
+        relation = _relation(before_pass, after_pass)
+        relation_counts[relation] += 1
+        by_track[case.get("track", "web")][relation] += 1
+        changes = _scalar_metric_changes(before.get("metrics", {}), after.get("metrics", {}))
+        paired.append({
+            "case_id": case_id,
+            "track": case.get("track", "web"),
+            "task_kind": kind,
+            "call_order": [
+                provider for provider, ordered_case in expected_order if ordered_case == case_id
+            ],
+            "relation": relation,
+            "stable": _method_result(before, before_pass),
+            "candidate": _method_result(after, after_pass),
+            "differences": {
+                "output_changed": before["metrics"].get("content_sha256")
+                != after["metrics"].get("content_sha256"),
+                "request_outcome_changed": (
+                    before.get("ok"), before.get("status_code"), before.get("error_type")
+                ) != (
+                    after.get("ok"), after.get("status_code"), after.get("error_type")
+                ),
+                "changed_scalar_metrics": changes,
+            },
+        })
+
+    summary = {
+        "schema_version": 1,
+        "kind": "fixed_native_two_build_comparison_audit",
+        "scope": {
+            "case_count": expected_count,
+            "result_count": len(records),
+            "stable_provider": stable_provider,
+            "candidate_provider": candidate_provider,
+            "source_dataset_sha256": source_sha256,
+            "call_order": (
+                "serial_case_alternating"
+                if call_order == "case-alternating"
+                else "serial_provider_batches"
+            ),
+            "runs": 1,
+            "caller_retries": 0,
+            "evidence_state": evidence_state,
+        },
+        "bindings": {
+            "measured_dataset_sha256": _sha256(dataset_path),
+            "results_sha256": hashlib.sha256(results_raw).hexdigest(),
+            "execution_sha256": _sha256(execution_path),
+            "provider_config_sha256": _sha256(provider_config),
+            "run_receipt_sha256": _sha256(run_receipt),
+            "runtime_source_sha256": runtime_source_sha256,
+        },
+        "identities": {
+            provider: {
+                "reported_version": configured[provider]["expected_reported_version"],
+                "binary_sha256": configured[provider]["expected_binary_sha256"],
+                **({"revision": identities[provider]["revision"]}
+                   if identities[provider].get("revision") else {}),
+                **({"source_revision": identities[provider]["source_revision"]}
+                   if identities[provider].get("source_revision") else {}),
+            }
+            for provider in providers
+        },
+        "verdict_relations": {key: relation_counts[key] for key in (
+            "pass_to_pass", "pass_to_fail", "fail_to_pass", "fail_to_fail"
+        )},
+        "verdict_relations_by_track": {
+            track: {key: counts[key] for key in (
+                "pass_to_pass", "pass_to_fail", "fail_to_pass", "fail_to_fail"
+            )}
+            for track, counts in sorted(by_track.items())
+        },
+        "changed_output_cases": sum(
+            item["differences"]["output_changed"] for item in paired
+        ),
+        "cases": paired,
+        "review_state": (
+            "Deterministic evidence and difference audit only; product root causes require "
+            "separate review of every changed or failed case."
+        ),
+    }
+    output_json.parent.mkdir(parents=True, exist_ok=True)
+    output_json.write_text(json.dumps(summary, ensure_ascii=False, indent=2) + "\n")
+
+    def identifiers(relation: str) -> str:
+        values = [item["case_id"] for item in paired if item["relation"] == relation]
+        return ", ".join(f"`{value}`" for value in values) if values else "None"
+
+    same_verdict_changed = [
+        item["case_id"] for item in paired
+        if item["relation"] in {"pass_to_pass", "fail_to_fail"}
+        and item["differences"]["output_changed"]
+    ]
+    markdown = "\n".join([
+        "## Web Fetch stable-versus-candidate audit",
+        "",
+        f"Verified {expected_count} cases × 2 methods ({len(records)} physical calls), "
+        "one run, zero caller retries, "
+        + (
+            "serial case-alternating order."
+            if call_order == "case-alternating"
+            else "serial provider-batch order."
+        ),
+        "",
+        "| Stable → candidate | Cases |",
+        "| --- | ---: |",
+        f"| Pass → pass | {relation_counts['pass_to_pass']} |",
+        f"| Pass → fail | {relation_counts['pass_to_fail']} |",
+        f"| Fail → pass | {relation_counts['fail_to_pass']} |",
+        f"| Fail → fail | {relation_counts['fail_to_fail']} |",
+        "",
+        f"**Regressions:** {identifiers('pass_to_fail')}",
+        "",
+        f"**Improvements:** {identifiers('fail_to_pass')}",
+        "",
+        "**Changed outputs with the same verdict:** "
+        + (", ".join(f"`{value}`" for value in same_verdict_changed)
+           if same_verdict_changed else "None"),
+        "",
+        f"The exhaustive {expected_count}-case inventory and its evidence hashes are in "
+        f"`{output_json.name}`. This is a deterministic locator, not a product root-cause review.",
+        "",
+    ])
+    output_markdown.parent.mkdir(parents=True, exist_ok=True)
+    output_markdown.write_text(markdown)
+    return summary
diff --git a/harness/web_fetch/composite_tasks.py b/harness/web_fetch/composite_tasks.py
index 348518d54..11dc5160d 100644
--- a/harness/web_fetch/composite_tasks.py
+++ b/harness/web_fetch/composite_tasks.py
@@ -13,7 +13,8 @@
 import unicodedata
 from urllib.parse import parse_qsl, unquote, urljoin, urlsplit
 
-from .dynamic_lists import _canonical_entry_path, extract_named_entries
+from .structured_tables import _pipe_cells, table_text_surface
+from .dynamic_lists import _canonical_entry_path, _named_candidate, extract_named_entries
 from .reference_quality import clean_reference_text, markdown_links, visible_markdown_links
 
 
@@ -279,7 +280,100 @@ def _link_identity(url: str, group: dict) -> str | None:
     return identity
 
 
-def _named_link_group(content: str, group: dict, base_url: str, links: list | None) -> dict:
+def _html_field_surface(content: str, group: dict, base_url: str) -> tuple[str, str]:
+    """Keep real DOM ownership while projecting visible links and field text."""
+    from bs4 import Comment, NavigableString, Tag
+    from .dynamic_lists import _scoped_html, visible_html_text
+
+    soup = _scoped_html(content)
+    identity_cache = {}
+    def target_identities(node):
+        if id(node) not in identity_cache:
+            identity_cache[id(node)] = {
+                _link_identity(urljoin(group.get('link_base_url', base_url), anchor['href']), group)
+                for anchor in node.find_all('a', href=True)} - {None}
+        return identity_cache[id(node)]
+
+    owners = {id(node): node for node in soup.select(
+        'article,li,aside,nav,[role="article"],[role="listitem"]')}
+    # Generic div cards have no semantic tag. Repeated sibling containers with
+    # their own content and distinct target links supply the same DOM boundary.
+    for parent in soup.find_all(True):
+        siblings = parent.find_all('div', recursive=False)
+        if len(siblings) < 2:
+            continue
+        cards = []
+        for node in siblings:
+            identities = target_identities(node)
+            if identities:
+                cards.append((node, identities))
+        if len(cards) > 1 and len(set().union(*(ids for _, ids in cards))) > 1:
+            owners.update((id(node), node) for node, _ in cards)
+    # Lists may represent fields or merely wrap a record title.  A nested list
+    # item is a separate record only when it identifies a narrower target set
+    # than its enclosing record; otherwise the enclosing card owns its fields.
+    nested_layout_items = []
+    for key, node in owners.items():
+        if node.name != 'li' and node.get('role') != 'listitem':
+            continue
+        identities = target_identities(node)
+        enclosing = [
+            parent
+            for parent in node.parents
+            if id(parent) in owners
+            and parent.name not in {'aside', 'nav'}
+            and target_identities(parent)
+        ]
+        if enclosing and (not identities or identities == target_identities(enclosing[0])):
+            nested_layout_items.append(key)
+    for key in nested_layout_items:
+        del owners[key]
+    # A section/header/footer inside an identified record still belongs to
+    # that record. Outside records, these delimit unrelated page regions.
+    for node in soup.select('section,header,footer'):
+        if not any(id(parent) in owners and parent.name not in {'aside','nav'}
+                   for parent in node.parents):
+            owners[id(node)] = node
+    # Remove layout-only wrappers only after effective record owners are known.
+    # This keeps a one-child sibling card as a boundary while making deeper
+    # presentation wrappers irrelevant to ownership.
+    for node in reversed(soup.find_all('div')):
+        elements = [child for child in node.children if isinstance(child, Tag)]
+        direct_text = any(isinstance(child, NavigableString) and not isinstance(child, Comment)
+                          and str(child).strip() for child in node.children)
+        if (id(node) not in owners and len(elements) == 1 and not direct_text
+                and node.get('role') not in {'article','listitem'}):
+            node.unwrap()
+    marker = '\ufdd1record-owner-'
+    while marker in content:
+        marker += '_'
+    for index, node in enumerate(owners.values()):
+        node.insert_before(NavigableString('\n'+marker+'S'+str(index)+'\n'))
+        node.insert_after(NavigableString('\n'+marker+'E'+str(index)+'\n'))
+    for node in soup.find_all(['img','br']):
+        node.replace_with(NavigableString('\ufdd0'))
+    return visible_html_text(str(soup), preserve_links=True).replace('\ufdd0', '\n\n'), marker
+
+
+def _record_owner_ranges(content: str, marker: str | None):
+    if marker is None:
+        return content, []
+    parts, starts, ranges, offset, cursor = [], {}, [], 0, 0
+    for match in re.finditer(re.escape(marker)+r'([SE])(\d+)', content):
+        segment = content[cursor:match.start()]
+        parts.append(segment); offset += len(segment); cursor = match.end()
+        if match[1] == 'S':
+            starts[match[2]] = offset
+        else:
+            ranges.append((starts.pop(match[2], 0), offset))
+    parts.append(content[cursor:])
+    clean = ''.join(parts)
+    ranges.extend((start, len(clean)) for start in starts.values())
+    return clean, ranges
+
+
+def _named_link_group(content: str, group: dict, base_url: str, links: list | None, *, ownership_marker: str | None = None) -> dict:
+    content, owner_ranges = _record_owner_ranges(content, ownership_marker)
     standard = {
         "version": 1,
         "schema": "named_link",
@@ -324,22 +418,94 @@ def is_record_start(link) -> bool:
         # link for one identity up to the first qualifying link for another
         # identity.  Repeated title/date links to the same article stay inside
         # that record and cannot inflate the count.
-        allowed_rows = {_link_identity(entry["url"], group): entry for entry in entries}
+        source_links = markdown_links(content)
+        previous_targets = {}
+        previous_target = None
+        for source_link in source_links:
+            previous_targets[source_link.start] = previous_target
+            source_destination = urljoin(group.get("link_base_url", base_url), source_link.destination)
+            source_identity = _link_identity(source_destination, group)
+            if source_identity is not None and not source_link.is_image:
+                previous_target = (source_identity, source_link.end)
+
+        def previous_scalar(link):
+            destination = urljoin(group.get("link_base_url", base_url), link.destination)
+            if link.label.strip() not in {link.destination, destination}:
+                return None
+            start = content.rfind("\n", 0, link.start) + 1
+            end = content.find("\n", link.end)
+            end = len(content) if end < 0 else end
+            if content[start:link.start].strip() or content[link.end:end].strip() or start == 0:
+                return None
+            previous_start = content.rfind("\n", 0, start - 1) + 1
+            scalar = content[previous_start:start - 1].strip()
+            if (not scalar or markdown_links(scalar) or re.search(r"<[^>]*>", scalar)
+                    or re.match(r"(?:[#>*]|[-+]\s|\d+[.)]\s|https?://|//)", scalar)):
+                return None
+            prior = previous_targets[link.start]
+            paragraph = content.rfind("\n\n", 0, previous_start) + 2
+            if (prior and prior[1] > paragraph and prior[0] != _link_identity(destination, group)
+                    and not (_PRICE.fullmatch(scalar) or _DATE_OR_TIME.fullmatch(scalar)
+                             or _AREA.fullmatch(scalar))):
+                return None
+            return previous_start, scalar
+
+        def visible_label(link):
+            label = link.label
+            for image in reversed([item for item in markdown_links(label) if item.is_image]):
+                label = label[:image.start] + label[image.end:]
+            label = visible_markdown_links(label).strip()
+            if previous := previous_scalar(link):
+                scalar = previous[1]
+                field_like = (_AREA.fullmatch(scalar) or _VERSION.fullmatch(scalar)
+                              or _line_starts_declared_label(scalar, _declared_aliases(fields))
+                              or any(pattern.fullmatch(scalar) for spec in fields
+                                     if (pattern := _field_token_pattern(spec)) is not None))
+                if not field_like:
+                    label = scalar
+            return label
+
+        def name_only(label):
+            return not (_PRICE.fullmatch(label) or _DATE_OR_TIME.fullmatch(label)
+                        or re.fullmatch(r"(?i)(?:today|tomorrow|\d[\d,.]*|more|details?)", label))
+
+        allowed_rows = {_link_identity(entry["url"], group): entry for entry in entries
+                        if name_only(entry["title"])} if "*" not in group["hosts"] else {}
+        # Field cards prove their own ownership through the target identity and
+        # typed fields. Adjacent status text need not satisfy ordinary list
+        # prefix rules, but the title must still be real visible link text.
+        for link in markdown_links(content):
+            destination = urljoin(group.get("link_base_url", base_url), link.destination)
+            identity = _link_identity(destination, group)
+            if identity is None or link.is_image or not is_record_start(link):
+                continue
+            label = visible_label(link)
+            candidate_contract = (standard if "*" not in group["hosts"] else
+                                  {**standard, "hosts": [urlsplit(destination).hostname]})
+            candidate = _named_candidate(destination, label, candidate_contract, base_url, [])
+            if candidate and name_only(candidate[1]["title"]) and _key(candidate[1]["title"]) not in exclusions:
+                allowed_rows.setdefault(identity, candidate[1])
+        def owner_for(position):
+            containing = [(begin, end) for begin, end in owner_ranges
+                          if begin <= position < end]
+            return min(containing, key=lambda item: item[1] - item[0]) if containing else None
+
         preferred_titles = {}
         for link in markdown_links(content):
             destination = urljoin(group.get("link_base_url", base_url), link.destination)
             identity = _link_identity(destination, group)
             if identity not in allowed_rows or link.is_image or not is_record_start(link):
                 continue
-            label = visible_markdown_links(link.label).strip()
+            label = visible_label(link)
             field_like = bool(
                 _PRICE.search(label)
                 or _DATE_OR_TIME.search(label)
                 or re.fullmatch(r"(?i)(?:today|tomorrow|\d[\d,.]*|more|details?)", label)
                 or re.search(r"[A-Za-z][A-Za-z .'-]+,\s*[A-Z]{2}\b$", label)
             )
-            if label and not field_like and _key(label) not in exclusions:
-                preferred_titles.setdefault(identity, label)
+            if (label and not field_like and label not in {link.destination, destination}
+                    and _key(label) not in exclusions):
+                preferred_titles.setdefault((identity, owner_for(link.start)), label)
         candidates = []
         for link in markdown_links(content):
             destination = urljoin(group.get("link_base_url", base_url), link.destination)
@@ -347,12 +513,16 @@ def is_record_start(link) -> bool:
             if identity is None or link.is_image or not is_record_start(link):
                 continue
             entry = allowed_rows.get(identity)
-            if entry is None:
-                continue
-            title = preferred_titles.get(identity, entry["title"])
-            if not title or _key(title) in exclusions:
-                continue
-            candidates.append((identity, entry["url"], title, link.start))
+            owner = owner_for(link.start)
+            title = preferred_titles.get(
+                (identity, owner),
+                entry["title"] if entry and owner is None else "",
+            )
+            # Even an unnamed target starts a different card. Its fields must
+            # never complete the preceding named record.
+            previous = previous_scalar(link)
+            start = previous[0] if previous else link.start
+            candidates.append((identity, destination, title, start, link.start, owner))
         owned = {}
         # Consecutive links to the same identity belong to one card (for
         # example, a title link followed by a linked date).  A later duplicate
@@ -360,17 +530,38 @@ def is_record_start(link) -> bool:
         # intervening record's field context.
         ordered = []
         for candidate in sorted(candidates, key=lambda row: row[3]):
-            if not ordered or ordered[-1][0] != candidate[0]:
+            if (not ordered or ordered[-1][0] != candidate[0]
+                    or ordered[-1][5] != candidate[5]):
                 ordered.append(candidate)
-        for index, (identity, destination, label, start) in enumerate(ordered):
+        for index, (identity, destination, label, start, link_start, owner) in enumerate(ordered):
             line_start = content.rfind("\n", 0, start) + 1
             finish = ordered[index + 1][3] if index + 1 < len(ordered) else len(content)
             next_line = content.rfind("\n", 0, finish) + 1 if finish < len(content) else finish
-            context = content[line_start:next_line]
-            if _required_fields(context, label, field_specs=fields):
+            if owner:
+                begin, end = owner
+                # The first link can have fields before it in the same card.
+                first = not any(
+                    begin <= previous[4] < link_start and previous[5] == owner
+                    for previous in ordered[:index]
+                )
+                line_start = begin if first else max(line_start, begin)
+                next_line = min(next_line, end)
+            # Exclude unrelated owners rather than discarding the parent's
+            # own fields on either side of an embedded aside/section.
+            excluded = sorted((max(begin, line_start), min(end, next_line))
+                              for begin, end in owner_ranges
+                              if not begin <= link_start < end
+                              and begin < next_line and end > line_start)
+            pieces, cursor = [], line_start
+            for begin, end in excluded:
+                if begin > cursor:
+                    pieces.append(content[cursor:begin])
+                cursor = max(cursor, end)
+            pieces.append(content[cursor:next_line])
+            context = "\n\n".join(pieces)
+            if label and _required_fields(context, label, field_specs=fields):
                 owned[identity] = {"url": destination, "title": label, "context": context}
-        allowed = {_link_identity(entry["url"], group) for entry in entries}
-        records = [row for identity, row in owned.items() if identity in allowed]
+        records = [row for identity, row in owned.items() if identity in allowed_rows]
     else:
         records = entries
     return {
@@ -387,10 +578,10 @@ def is_record_start(link) -> bool:
     r"\b\d{1,2}[-/.]\d{1,2}[-/.](?:\d{2}|\d{4})\b|"
     r"\b(?:Jan(?:uary)?|Feb(?:ruary)?|Mar(?:ch)?|Apr(?:il)?|May|Jun(?:e)?|"
     r"Jul(?:y)?|Aug(?:ust)?|Sep(?:tember)?|Oct(?:ober)?|Nov(?:ember)?|"
-    r"Dec(?:ember)?)\s+\d{1,2}(?:,\s*(?:19|20)\d{2})?\b|"
+    r"Dec(?:ember)?)\.?\s+\d{1,2}(?:,\s*(?:19|20)\d{2})?\b|"
     r"\b\d{1,2}\s+(?:Jan(?:uary)?|Feb(?:ruary)?|Mar(?:ch)?|Apr(?:il)?|May|"
     r"Jun(?:e)?|Jul(?:y)?|Aug(?:ust)?|Sep(?:tember)?|Oct(?:ober)?|Nov(?:ember)?|"
-    r"Dec(?:ember)?)(?:\s+(?:19|20)\d{2})?\b|"
+    r"Dec(?:ember)?)\.?(?:\s+(?:19|20)\d{2})?\b|"
     r"\b(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun)(?:day)?\b|"
     r"\b\d{1,2}:\d{2}(?:\s*[ap]m)?\b|"
     r"\b(?:an?|\d+)\s+(?:minutes?|hours?|days?)\s+ago\b)",
@@ -466,56 +657,140 @@ def _field_token_pattern(spec: dict):
             'version': _VERSION}.get(spec['kind'])
 
 
+def _declared_aliases(field_specs: list[dict]) -> list[str]:
+    return sorted(
+        {alias for spec in field_specs for alias in spec.get("aliases", [])},
+        key=len,
+        reverse=True,
+    )
+
+
+def _trimmed_value_span(line: str, start: int, end: int) -> tuple[str, int, int]:
+    while start < end and line[start] in "| ":
+        start += 1
+    while end > start and line[end - 1] in "| ":
+        end -= 1
+    return line[start:end], start, end
+
+
+def _owned_labeled_values(
+    line: str, aliases: list[str]
+) -> list[tuple[str, str, int, int]]:
+    """Split one visible line into values owned by its longest declared labels."""
+    if not aliases:
+        return []
+    names = "|".join(re.escape(alias) for alias in aliases)
+    label = rf"(?P<label>{names})(?:\s*\([^)]*\))?"
+    explicit = re.compile(
+        rf"(?i)(?<!\S){label}\s*(?:[:：|]|[-–—])\s*"
+    )
+    matches = list(explicit.finditer(line))
+    # A field line starts with a declared label. Once that owner is known,
+    # later explicit labels may share the same physical line.
+    if matches and not line[: matches[0].start()].strip():
+        values = []
+        for position, match in enumerate(matches):
+            finish = matches[position + 1].start() if position + 1 < len(matches) else len(line)
+            value, start, end = _trimmed_value_span(line, match.end(), finish)
+            if value:
+                values.append((match.group("label"), value, start, end))
+        return values
+    unpunctuated = re.match(rf"(?i)^\s*{label}\s+(.+)$", line)
+    if unpunctuated:
+        value, start, end = _trimmed_value_span(line, *unpunctuated.span(2))
+        return [(unpunctuated.group("label"), value, start, end)] if value else []
+    return []
+
+
+def _line_starts_declared_label(line: str, aliases: list[str]) -> bool:
+    return _key(line) in {_key(alias) for alias in aliases} or bool(
+        _owned_labeled_values(line, aliases)
+    )
+
+
 def _field_value(
-    lines: list[str], spec: dict, used: set[int] | None = None
-) -> tuple[int, str] | None:
+    lines: list[str],
+    spec: dict,
+    used: set[int] | None = None,
+    *,
+    declared_aliases: list[str] | None = None,
+) -> tuple[int, str, int, int] | None:
+    """Return one value owned by its declared label or typed line."""
     aliases = spec.get("aliases", [])
-    candidates = []
-    if aliases:
-        for index, line in enumerate(lines):
-            if used and index in used:
-                continue
-            for alias in aliases:
-                match = re.match(rf"(?i)^\s*{re.escape(alias)}\s*[:：-]?\s*(.+)$", line)
-                if match and match[1].strip():
-                    candidates.append((index, match[1].strip()))
-                elif (
-                    _key(line) == _key(alias)
-                    and index + 1 < len(lines)
-                    and (not used or index + 1 not in used)
-                ):
-                    candidates.append((index + 1, lines[index + 1].strip()))
-    else:
-        candidates = [
-            (index, line) for index, line in enumerate(lines) if not used or index not in used
-        ]
-    for index, value in candidates:
+    candidates: list[tuple[int, str, int, int]] = []
+    declared = declared_aliases or list(aliases)
+    spec_alias_keys = {_key(alias) for alias in aliases}
+    for index, line in enumerate(lines):
+        if used and index in used:
+            continue
+        if aliases:
+            candidates.extend(
+                (index, value, start, end)
+                for alias, value, start, end in _owned_labeled_values(line, declared)
+                if _key(alias) in spec_alias_keys
+            )
+            if _key(line) in spec_alias_keys:
+                if index + 1 < len(lines) and (not used or index + 1 not in used):
+                    next_line = lines[index + 1].strip()
+                    if next_line and not _line_starts_declared_label(next_line, declared):
+                        candidates.append((index + 1, next_line, 0, len(next_line)))
+            continue
+        candidates.append((index, line, 0, len(line)))
+    for index, value, start, end in candidates:
         if token_pattern := _field_token_pattern(spec):
             for match in token_pattern.finditer(value):
                 if _value_matches_spec(match[0], spec):
-                    return index, match[0]
+                    return index, match[0], start + match.start(), start + match.end()
             continue
         if _value_matches_spec(value, spec):
-            return index, value
+            return index, value, start, end
     return None
 
 
+def _canonical_field_report_value(value: str, spec: dict) -> str:
+    """Keep the typed scalar from an owned field cell for diagnostics/fixed values."""
+    visible = visible_markdown_links(value).strip().strip("| ")
+    if spec["kind"] == "integer":
+        match = re.search(_AMOUNT, visible)
+        return match[0] if match else visible
+    if pattern := spec.get("pattern"):
+        match = re.search(pattern, visible, re.I)
+        return match[0] if match else visible
+    if spec["kind"] == "date_or_time":
+        match = _DATE_OR_TIME.search(visible)
+        return match[0] if match else visible
+    return visible
+
+
+def _fixed_field_value_key(value: str, spec: dict) -> str:
+    if spec["kind"] == "integer":
+        value = re.sub(r"(?<=\d)[,\s](?=\d{3}\b)", "", value)
+    return _key(value)
+
+
 def _required_fields(context: str, title: str, *, field_specs: list[dict]) -> bool:
     """Require every declared field inside the record block which owns the link."""
     lines = _context_lines(context, title)
-    used = set()
-    typed_lines = set()
+    used: set[int] = set()
+    typed_lines: set[int] = set()
+    declared = _declared_aliases(field_specs)
     for spec in field_specs:
         typed = _field_token_pattern(spec) is not None
-        result = _field_value(lines, spec, used if typed else used | typed_lines)
+        result = _field_value(
+            lines,
+            spec,
+            used if typed else used | typed_lines,
+            declared_aliases=declared,
+        )
         if result is None:
             return False
-        index, value = result
+        index, value, start, end = result
+        # Consume the exact owned value. Multiple declared labels may share a
+        # physical line, but one value cannot satisfy two required fields.
+        lines[index] = lines[index][:start] + " " * (end - start) + lines[index][end:]
         if typed:
-            # Consume this exact span so fields may share a line, never a value.
-            lines[index] = lines[index].replace(value, ' ' * len(value), 1)
             typed_lines.add(index)
-        else:
+        elif not spec.get("aliases"):
             used.add(index)
     return True
 
@@ -531,6 +806,9 @@ def _name_description_group(content: str, group: dict, base_url: str) -> dict:
             "minimum_records": group["minimum_records"],
         },
         base_url,
+        allow_closed_title_cards=bool(
+            group.get("start_pattern") and group.get("end_pattern")
+        ),
     )
     return {
         "count": result["stable_unique_record_count"],
@@ -541,15 +819,15 @@ def _name_description_group(content: str, group: dict, base_url: str) -> dict:
 
 
 def _table_group(content: str, group: dict) -> dict:
-    lines = [line.strip() for line in clean_reference_text(content).splitlines() if line.strip()]
+    lines = [line.strip() for line in clean_reference_text(table_text_surface(content)).splitlines() if line.strip()]
     required = group["required_columns"]
     records = []
     for index in range(len(lines) - 1):
         delimiter = "|" if "|" in lines[index] else "\t" if "\t" in lines[index] else None
         if not delimiter:
             continue
-        headers = [_key(value) for value in lines[index].strip("|").split(delimiter)]
-        separator = lines[index + 1].strip("|").split(delimiter)
+        headers = [_key(visible_markdown_links(value)) for value in (_pipe_cells(lines[index]) if delimiter == "|" else lines[index].split(delimiter))]
+        separator = (_pipe_cells(lines[index + 1]) if delimiter == "|" else lines[index + 1].split(delimiter))
         if delimiter == "|" and not all(
             re.fullmatch(r"\s*:?-{3,}:?\s*", value) for value in separator
         ):
@@ -577,11 +855,11 @@ def _table_group(content: str, group: dict) -> dict:
                 continue
             row_index = index + 2 if delimiter == "|" else index + 1
             while row_index < len(lines) and delimiter in lines[row_index]:
-                values = [value.strip() for value in lines[row_index].strip("|").split(delimiter)]
+                values = [value.strip() for value in (_pipe_cells(lines[row_index]) if delimiter == "|" else lines[row_index].split(delimiter))]
                 if len(values) == len(headers):
                     row = {}
                     for field, (column, pattern) in mapping.items():
-                        match = pattern.fullmatch(visible_markdown_links(values[column])) if pattern else None
+                        match = pattern.fullmatch(visible_markdown_links(values[column]).replace("**", "").strip()) if pattern else None
                         row[field] = (match[field] if match else '') if pattern else values[column]
                     if all(
                         _value_matches_spec(row[spec["id"]], spec, whole_cell=True)
@@ -601,15 +879,15 @@ def _table_group(content: str, group: dict) -> dict:
 
 
 def _linked_table_group(content: str, group: dict, base_url: str) -> dict:
-    """Read named links and all required fields from the same Markdown row."""
-    lines = [line.strip() for line in clean_reference_text(content).splitlines() if line.strip()]
+    """Read named links and required fields from the same owned table row."""
+    lines = [line.strip() for line in clean_reference_text(table_text_surface(content)).splitlines() if line.strip()]
     required = group["required_columns"]
     records = {}
     for index in range(len(lines) - 1):
         if "|" not in lines[index]:
             continue
-        headers = [_key(value) for value in lines[index].strip("|").split("|")]
-        separator = lines[index + 1].strip("|").split("|")
+        headers = [_key(visible_markdown_links(value)) for value in _pipe_cells(lines[index])]
+        separator = _pipe_cells(lines[index + 1])
         if not all(re.fullmatch(r"\s*:?-{3,}:?\s*", value) for value in separator):
             continue
         mapping = {}
@@ -625,7 +903,7 @@ def _linked_table_group(content: str, group: dict, base_url: str) -> dict:
         else:
             row_index = index + 2
             while row_index < len(lines) and "|" in lines[row_index]:
-                values = [value.strip() for value in lines[row_index].strip("|").split("|")]
+                values = [value.strip() for value in _pipe_cells(lines[row_index])]
                 if len(values) == len(headers):
                     row = {field: values[column] for field, column in mapping.items()}
                     cell = row[group["link_column"]]
@@ -644,6 +922,67 @@ def _linked_table_group(content: str, group: dict, base_url: str) -> dict:
                             records[identity] = {"url": destination, "title": label, "fields": row}
                 row_index += 1
             break
+    if not records:
+        links = [link for link in markdown_links(content) if not link.is_image]
+        entry_links = []
+        for link in links:
+            destination = urljoin(group.get("link_base_url", base_url), link.destination)
+            identity = _link_identity(destination, group)
+            if identity is not None:
+                entry_links.append((identity, destination, link))
+        ordered = []
+        for candidate in entry_links:
+            if not ordered or ordered[-1][0] != candidate[0]:
+                ordered.append(candidate)
+        if ordered:
+            prefix = content[: ordered[0][2].start]
+            header_positions = []
+            for spec in required:
+                hits = [
+                    match.start()
+                    for alias in spec["aliases"]
+                    for match in re.finditer(
+                        rf"(?im)^\s*(?:\[[^]]*{re.escape(alias)}[^]]*\]\([^)]*\)|"
+                        rf"{re.escape(alias)})\s*$",
+                        prefix,
+                    )
+                ]
+                if hits:
+                    header_positions.append(min(hits))
+            if len(header_positions) == len(required) and header_positions == sorted(header_positions):
+                for index, (identity, destination, link) in enumerate(ordered):
+                    finish = ordered[index + 1][2].start if index + 1 < len(ordered) else len(content)
+                    block = content[link.start:finish]
+                    raw_lines = [line.strip() for line in block.splitlines() if line.strip()]
+                    cell_links = []
+                    for line in raw_lines[: len(required)]:
+                        candidates = [item for item in markdown_links(line) if not item.is_image]
+                        if len(candidates) != 1:
+                            break
+                        cell_links.append(candidates[0])
+                    # Once table delimiters are gone, one owned link per required
+                    # cell is the remaining unambiguous column boundary. Plain
+                    # trailing values (for example Idle or action text) cannot
+                    # slide left to repair an absent Description or Owner cell.
+                    if len(cell_links) < len(required):
+                        continue
+                    row = {
+                        spec["id"]: visible_markdown_links(cell_links[position].label).strip()
+                        for position, spec in enumerate(required)
+                    }
+                    link_label = visible_markdown_links(link.label).strip()
+                    if (
+                        row.get(group["link_column"]) == link_label
+                        and all(
+                            _value_matches_spec(row[spec["id"]], spec, whole_cell=True)
+                            for spec in required
+                        )
+                    ):
+                        records[identity] = {
+                            "url": destination,
+                            "title": link_label,
+                            "fields": row,
+                        }
     values = list(records.values())
     return {
         "count": len(values),
@@ -657,13 +996,23 @@ def _field_report_group(content: str, group: dict) -> dict:
     lines = _context_lines(content, "")
     fields = {}
     used = set()
+    declared = _declared_aliases(group["required_fields"])
     for spec in group["required_fields"]:
-        value = _field_value(lines, spec, used)
+        value = _field_value(lines, spec, used, declared_aliases=declared)
         if value is not None:
-            fields[spec["id"]] = value[1]
-            used.add(value[0])
+            index, raw, start, end = value
+            fields[spec["id"]] = _canonical_field_report_value(raw, spec)
+            lines[index] = lines[index][:start] + " " * (end - start) + lines[index][end:]
+            if not spec.get("aliases"):
+                used.add(index)
+    specs = {spec["id"]: spec for spec in group["required_fields"]}
     fixed = {
-        key: {"value": value, "pass": key in fields and _key(fields[key]) == _key(value)}
+        key: {
+            "value": value,
+            "pass": key in fields
+            and _fixed_field_value_key(fields[key], specs[key])
+            == _fixed_field_value_key(value, specs[key]),
+        }
         for key, value in group.get("fixed_values", {}).items()
     }
     passed = len(fields) == len(group["required_fields"]) and all(
@@ -679,15 +1028,24 @@ def _field_report_group(content: str, group: dict) -> dict:
 
 
 def evaluate_composite_acceptance(
-    content: str, contract: dict, *, base_url: str, links: list | None = None, eligible: bool = True
+    content: str, contract: dict, *, base_url: str, links: list | None = None, eligible: bool = True, table_content: str | None = None
 ) -> dict:
     validate_composite_acceptance(contract)
     results = []
     for group in contract["groups"]:
-        scoped = _scope(content, group)
+        source = table_content if table_content is not None and group["kind"] in {"table", "linked_table"} else content
+        if group["kind"] in {"table", "linked_table"}:
+            source = table_text_surface(source)
+        ownership_marker = None
+        if group["kind"] == "named_link" and group.get("required_fields") and table_content:
+            from .dynamic_lists import _document_html
+            if _document_html(table_content):
+                source, ownership_marker = _html_field_surface(table_content, group, base_url)
+        scoped = _scope(source, group)
         if group["kind"] == "named_link":
             result = _named_link_group(
-                scoped, group, base_url, links if scoped == content else None
+                scoped, group, base_url, links if scoped == content else None,
+                ownership_marker=ownership_marker,
             )
         elif group["kind"] == "linked_table":
             result = _linked_table_group(scoped, group, base_url)
diff --git a/harness/web_fetch/config.py b/harness/web_fetch/config.py
index 2b10aed4d..937a626ef 100644
--- a/harness/web_fetch/config.py
+++ b/harness/web_fetch/config.py
@@ -10,7 +10,11 @@
 
 from .models import EvalCase, validate_case
 from .reference_inputs import read_dataset_bytes
-from .retrieval_hints import parse_retrieval_hints, native_default_case
+from .retrieval_hints import (
+    native_default_case,
+    parse_retrieval_hints,
+    task_definition_sha256,
+)
 
 ROOT = Path(__file__).resolve().parents[2]
 DEFAULT_FAILURE_RETRIES = 1
@@ -38,6 +42,7 @@ def _validate_retrieval_hints(item: dict[str, Any]) -> None:
         str(item.get("track", "web")),
         item.get("retrieval_hints") if "retrieval_hints" in item else None,
         identifier=str(item.get("id", "<unknown>")),
+        current_task_definition_sha256=task_definition_sha256(item),
     )
 
 
diff --git a/harness/web_fetch/dataset_assembly.py b/harness/web_fetch/dataset_assembly.py
new file mode 100644
index 000000000..e8e5b7d37
--- /dev/null
+++ b/harness/web_fetch/dataset_assembly.py
@@ -0,0 +1,276 @@
+"""Compile one hash-bound Web Fetch dataset from its registered source datasets."""
+
+from __future__ import annotations
+
+import hashlib
+import json
+import re
+from pathlib import Path
+
+from harness.web_fetch.reference_inputs import read_dataset_bytes
+from harness.web_fetch.retrieval_hints import historical_native_fetch_dataset, native_fetch_dataset
+from harness.web_fetch.safety import contained_path
+
+ROOT = Path(__file__).resolve().parents[2]
+
+_CORRECTABLE_CASE_FIELDS = {
+    "ground_truth_main_content",
+    "ground_truth_evidence",
+    "source_verification",
+    "body_requirements",
+    "required_patterns",
+    "required_facts",
+    "acceptance_contract",
+    "composite_acceptance",
+    "forbidden_any",
+    "mutable_body_policy",
+}
+
+_RERUN_ONLY_CASE_FIELDS = {
+    "category",
+    "name",
+    "tags",
+    "url",
+    "description",
+    "task_prompt",
+    "reference_answer",
+    "source_benchmark",
+}
+
+
+def _sha256(raw: bytes) -> str:
+    return hashlib.sha256(raw).hexdigest()
+
+
+def _canonical_bytes(value: dict) -> bytes:
+    return (json.dumps(value, ensure_ascii=False, indent=2) + "\n").encode("utf-8")
+
+
+def _case_sha256(case: dict) -> str:
+    encoded = json.dumps(case, ensure_ascii=False, sort_keys=True, separators=(",", ":")).encode()
+    return _sha256(encoded)
+
+
+def _apply_case_corrections(
+    definition: dict, selected: dict[str, dict], repository: Path
+) -> list[str]:
+    """Apply compact, hash-locked reference and scoring corrections to imported cases."""
+    from harness.web_fetch.scoring_regressions import require_scoring_regressions
+    from harness.web_fetch.reference_lifecycle import homepage_prompt_anchor_correction
+
+    declaration = definition.get("case_corrections")
+    if declaration is None:
+        return []
+    if set(declaration) != {"path", "sha256"}:
+        raise ValueError("Assembly case-correction declaration is invalid")
+    path = contained_path(repository, declaration["path"], reject_symlinks=True)
+    raw = path.read_bytes()
+    if _sha256(raw) != declaration["sha256"]:
+        raise ValueError("Assembly case corrections changed: " + declaration["path"])
+    document = json.loads(raw)
+    schema_version = document.get("schema_version")
+    if (
+        schema_version not in {1, 2}
+        or document.get("kind") != "profile_case_corrections"
+        or not isinstance(document.get("cases"), list)
+    ):
+        raise ValueError("Unsupported profile case corrections")
+    seen = set()
+    rerun_all_methods = []
+    for row in document["cases"]:
+        expected_fields = {"case_id", "expected_definition_sha256", "set", "evidence"}
+        if schema_version == 2:
+            expected_fields.add("execution_effect")
+        if set(row) != expected_fields:
+            raise ValueError("Assembly case correction is invalid")
+        case_id = row["case_id"]
+        if case_id in seen or case_id not in selected:
+            raise ValueError("Assembly case correction names an unknown or duplicate case")
+        seen.add(case_id)
+        case = selected[case_id]
+        if _case_sha256(case) != row["expected_definition_sha256"]:
+            raise ValueError("Assembly case correction input changed: " + case_id)
+        changes = row["set"]
+        execution_effect = row.get("execution_effect", "rescore_only")
+        proposed = {**case, **changes} if isinstance(changes, dict) else case
+        rerun_fields = set(changes or {}) & _RERUN_ONLY_CASE_FIELDS
+        prompt_only_scoring_correction = (
+            bool(rerun_fields)
+            and rerun_fields <= {"task_prompt", "reference_answer"}
+            and homepage_prompt_anchor_correction(case, proposed)
+            and proposed.get("reference_answer") == proposed.get("task_prompt")
+        )
+        evidence = row.get("evidence")
+        regression_ids = evidence.get("regression_ids") if isinstance(evidence, dict) else None
+        if (
+            not isinstance(changes, dict)
+            or not changes
+            or execution_effect not in {"rescore_only", "rerun_all_methods"}
+            or set(changes) - (_CORRECTABLE_CASE_FIELDS | _RERUN_ONLY_CASE_FIELDS)
+            or (
+                rerun_fields
+                and execution_effect != "rerun_all_methods"
+                and not prompt_only_scoring_correction
+            )
+            or not isinstance(evidence, dict)
+            or not isinstance(evidence.get("source"), str)
+            or not evidence["source"].strip()
+            or not isinstance(evidence.get("observed_at"), str)
+            or not evidence["observed_at"].strip()
+            or not isinstance(evidence.get("observed_text"), str)
+            or not evidence["observed_text"].strip()
+            or not isinstance(regression_ids, list)
+            or not regression_ids
+            or any(
+                not isinstance(identifier, str) or not identifier for identifier in regression_ids
+            )
+            or len(regression_ids) != len(set(regression_ids))
+        ):
+            raise ValueError("Assembly case correction lacks bounded fields or evidence")
+        require_scoring_regressions(regression_ids)
+        selected[case_id] = {**case, **changes}
+        if execution_effect == "rerun_all_methods":
+            rerun_all_methods.append(case_id)
+    return rerun_all_methods
+
+
+def assemble_profile_dataset(
+    assembly_path: Path, *, repository: Path = ROOT, require_output_hash: bool = True,
+    profile_path_override: Path | None = None,
+) -> tuple[dict, bytes]:
+    """Build the exact preregistered case inventory without provider calls."""
+    assembly_path = assembly_path.resolve()
+    definition = json.loads(assembly_path.read_text(encoding="utf-8"))
+    if (
+        definition.get("schema_version") not in {1, 2, 3}
+        or definition.get("kind") != "profile_dataset_assembly"
+        or not isinstance(definition.get("sources"), list)
+    ):
+        raise ValueError("Unsupported profile dataset assembly")
+    if definition.get("case_corrections") is not None and definition["schema_version"] not in {2, 3}:
+        raise ValueError("Case corrections require profile dataset assembly schema 2 or 3")
+    if definition["schema_version"] == 3:
+        if definition.get("native_retrieval_policy") != "uniform_dynamic_native_v1":
+            raise ValueError("Schema-3 assembly requires the uniform native retrieval policy")
+    elif "native_retrieval_policy" in definition:
+        raise ValueError("Native retrieval policy requires profile dataset assembly schema 3")
+    repository = repository.resolve()
+    declared_profile = definition.get("profile")
+    if profile_path_override is None and not declared_profile:
+        raise ValueError("Dataset assembly requires an external report profile")
+    profile_path = contained_path(
+        repository,
+        profile_path_override if profile_path_override is not None else declared_profile,
+        reject_symlinks=True,
+    )
+    profile = json.loads(profile_path.read_text(encoding="utf-8"))
+    inventory = profile.get("case_inventory")
+    if not isinstance(inventory, dict) or not inventory:
+        raise ValueError("Assembly profile has no case inventory")
+    if set(definition.get("dataset", {})) != {"id", "name", "tool", "dynamic_scoring"}:
+        raise ValueError("Assembly dataset identity is incomplete")
+    if definition["dataset"]["id"] != profile.get("dataset_id"):
+        raise ValueError("Assembly dataset ID differs from its profile")
+
+    selected: dict[str, dict] = {}
+    input_sources = []
+    owned_tracks: set[str] = set()
+    for source in definition["sources"]:
+        if set(source) != {"path", "sha256", "tracks"}:
+            raise ValueError("Assembly source declaration is invalid")
+        path = contained_path(repository, source["path"], reject_symlinks=True)
+        raw = read_dataset_bytes(path)
+        if _sha256(raw) != source["sha256"]:
+            raise ValueError("Assembly source hash changed: " + source["path"])
+        source_dataset = json.loads(raw)
+        source_cases = {case["id"]: case for case in source_dataset.get("cases", [])}
+        if len(source_cases) != len(source_dataset.get("cases", [])):
+            raise ValueError("Assembly source has duplicate case IDs: " + source["path"])
+        tracks = source["tracks"]
+        if (
+            not isinstance(tracks, list)
+            or not tracks
+            or any(track not in inventory for track in tracks)
+            or owned_tracks.intersection(tracks)
+        ):
+            raise ValueError("Assembly source track ownership is invalid")
+        owned_tracks.update(tracks)
+        case_ids = [case_id for track in tracks for case_id in inventory[track]]
+        missing = [case_id for case_id in case_ids if case_id not in source_cases]
+        if missing:
+            raise ValueError("Assembly source is missing profile cases: " + ", ".join(missing))
+        for track in tracks:
+            for case_id in inventory[track]:
+                case = source_cases[case_id]
+                if case.get("track", "web") != track or case_id in selected:
+                    raise ValueError("Assembly case ownership differs from the profile: " + case_id)
+                selected[case_id] = case
+        input_sources.append(
+            {
+                "path": source["path"],
+                "sha256": source["sha256"],
+                "case_ids": case_ids,
+            }
+        )
+    if owned_tracks != set(inventory):
+        raise ValueError("Assembly sources do not own every profile track")
+
+    rerun_all_methods = _apply_case_corrections(definition, selected, repository)
+
+    ordered_ids = [case_id for cases in inventory.values() for case_id in cases]
+    if len(ordered_ids) != len(set(ordered_ids)) or set(ordered_ids) != set(selected):
+        raise ValueError("Assembly profile case inventory is duplicated or incomplete")
+    if len(ordered_ids) != profile.get("case_count"):
+        raise ValueError("Assembly profile case count differs from its inventory")
+    case_ids_sha256 = _sha256(
+        json.dumps(ordered_ids, ensure_ascii=True, separators=(",", ":")).encode()
+    )
+    if case_ids_sha256 != profile.get("case_ids_sha256"):
+        raise ValueError("Assembly profile case order changed")
+
+    comparison = {
+        "kind": profile["comparison_kind"],
+        "timeout_seconds": profile["timeout_seconds"],
+        "runs_per_case": profile["runs_per_case"],
+        "concurrency": profile["concurrency"],
+        "max_failure_retries": profile["max_failure_retries"],
+        "require_independent_result_review": profile["require_independent_result_review"],
+        "publication_state": "pre_call_frozen",
+        "input_sources": input_sources,
+        "reference_binding_mode": profile["reference_binding_mode"],
+        "reproduction_profile": str(profile_path_override or declared_profile),
+        "report_output": profile["report_output"],
+    }
+    review_scope = profile.get("independent_result_review_scope")
+    if review_scope is not None:
+        if review_scope not in {"all", "machine-failures"}:
+            raise ValueError("Unsupported declared result review scope")
+        comparison["independent_result_review_scope"] = review_scope
+    if "retry_selection" in profile:
+        comparison["retry_selection"] = profile["retry_selection"]
+    if definition.get("case_corrections") is not None:
+        comparison["case_corrections"] = {
+            **definition["case_corrections"],
+            "rerun_all_methods": rerun_all_methods,
+        }
+    dataset = {
+        "schema_version": 1,
+        **definition["dataset"],
+        "cases": [selected[case_id] for case_id in ordered_ids],
+        "comparison": comparison,
+        "coverage_plan": {track: list(profile["providers"]) for track in inventory},
+    }
+    dataset = (
+        native_fetch_dataset(dataset)
+        if definition["schema_version"] == 3
+        else historical_native_fetch_dataset(dataset)
+    )
+    raw = _canonical_bytes(dataset)
+    expected = definition.get("native_dataset_sha256")
+    if require_output_hash and (
+        not isinstance(expected, str) or not re.fullmatch(r"[0-9a-f]{64}", expected)
+    ):
+        raise ValueError("Assembly has no valid native dataset hash")
+    if expected is not None and _sha256(raw) != expected:
+        raise ValueError("Assembled native dataset differs from its registered hash")
+    return dataset, raw
diff --git a/harness/web_fetch/dynamic_lists.py b/harness/web_fetch/dynamic_lists.py
index e326c6e40..c85287459 100644
--- a/harness/web_fetch/dynamic_lists.py
+++ b/harness/web_fetch/dynamic_lists.py
@@ -8,7 +8,7 @@
 import unicodedata
 from html import unescape
 from html.parser import HTMLParser
-from urllib.parse import parse_qsl,unquote,urlencode,urljoin,urlsplit,urlunsplit
+from urllib.parse import parse_qsl, quote, unquote, urlencode, urljoin, urlsplit, urlunsplit
 
 
 class Links(HTMLParser):
@@ -60,12 +60,33 @@ def _is_named_label(title,url,parts,nonempty=False):
 
 
 def _canonical_entry_path(path):
-    """Decode only unreserved URL characters; keep encoded separators intact."""
+    """Normalize IRI text without decoding path separators or delimiters."""
     def decode(match):
-        character = chr(int(match[1], 16))
-        return character if character.isascii() and (
-            character.isalnum() or character in '-._~') else match[0].upper()
-    return re.sub(r'%([0-9a-fA-F]{2})', decode, path)
+        encoded = match[0]
+        octets = bytes(int(value, 16) for value in re.findall(r'%([0-9a-fA-F]{2})', encoded))
+        try:
+            characters = octets.decode('utf-8')
+        except UnicodeDecodeError:
+            return encoded.upper()
+        normalized = []
+        for character in characters:
+            character_bytes = character.encode('utf-8')
+            if ord(character) > 127 or character.isalnum() or character in '-._~()':
+                normalized.append(character)
+            else:
+                normalized.extend(f'%{value:02X}' for value in character_bytes)
+        return ''.join(normalized)
+    return re.sub(r'(?:%[0-9a-fA-F]{2})+', decode, path)
+
+
+def _markdown_safe_destination(destination):
+    """Escape only characters that can change Markdown link structure."""
+    return ''.join(
+        quote(character, safe='')
+        if character in r'()[]<>\\' or character.isspace() or ord(character) < 32
+        else character
+        for character in destination
+    )
 
 
 def named_entry_identity(url, contract):
@@ -130,18 +151,19 @@ def _scoped_html(content):
     return soup
 
 
-def visible_html_text(content):
+def visible_html_text(
+    content, *, preserve_source_whitespace=False, preserve_links=False
+):
     """Preserve block boundaries without splitting inline prose into headings.
 
+    Mixed Markdown retains source line boundaries for scoped record fields.
     This uses the same explicit visibility exclusions as record extraction,
     not computed CSS. Source indentation is whitespace, not a rendered line.
     """
     from bs4 import Comment, NavigableString, Tag
-    blocks = {'address', 'article', 'aside', 'blockquote', 'dd', 'details', 'dialog',
-              'div', 'dl', 'dt', 'fieldset', 'figcaption', 'figure', 'footer',
-              'form', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'header', 'hr', 'li',
-              'main', 'nav', 'ol', 'p', 'pre', 'section', 'summary', 'table',
-              'tbody', 'thead', 'tfoot', 'tr', 'ul'}
+    from .reference_quality import HTML_BLOCK_ELEMENTS
+
+    blocks = HTML_BLOCK_ELEMENTS
     parts = []
     stack = [(_scoped_html(content), False, False)]
     while stack:
@@ -149,15 +171,42 @@ def visible_html_text(content):
         if isinstance(node, Comment):
             continue
         if isinstance(node, NavigableString):
-            parts.append(str(node) if preformatted else re.sub(r'\s+', ' ', str(node)))
+            parts.append(str(node) if preformatted or preserve_source_whitespace
+                         else re.sub(r'\s+', ' ', str(node)))
         elif isinstance(node, Tag):
             separator = '\n' if node.name in blocks or node.name == 'br' else '\t' if node.name in {'td', 'th'} else ''
+            if preserve_links:
+                if node.name in {'td', 'th'}:
+                    separator = '\t' if closing else ''
+                if node.name == 'a' and node.get('href'):
+                    destination = _markdown_safe_destination(str(node['href']))
+                    parts.append('](' + destination + ')' if closing else '[')
+                if not closing and re.fullmatch(r'h[1-6]', node.name):
+                    parts.append(separator + '#' * int(node.name[1]) + ' ')
+                    separator = ''
             parts.append(separator)
             if not closing:
                 preformatted = preformatted or node.name in {'pre', 'textarea'}
                 stack.append((node, True, preformatted))
                 stack.extend((child, False, preformatted) for child in reversed(node.contents))
-    return '\n'.join(line.strip() for line in ''.join(parts).splitlines() if line.strip())
+    text = '\n'.join(line.strip() for line in ''.join(parts).splitlines() if line.strip())
+    if preserve_links:
+        from .reference_quality import markdown_links
+
+        text = re.sub(r"(?m)^(#{1,6})[ \t]+", r"\1 ", text)
+        for link in reversed(markdown_links(text)):
+            heading = re.fullmatch(r"\s*(#{1,6})[ \t]+([^\n]+)\s*", link.label)
+            if heading and not link.is_image:
+                text = (
+                    text[:link.start]
+                    + "\n"
+                    + heading[1]
+                    + " ["
+                    + heading[2].strip()
+                    + "](" + link.destination + ")\n"
+                    + text[link.end:]
+                )
+    return text
 
 
 def _named_candidate(url, title, contract, base_url, excluded_titles, diagnostics=None):
@@ -224,8 +273,12 @@ def _text_scope_boundary(content, pattern):
     if raw:candidates.append((raw.start(),raw.end()))
     offset=0
     for line in content.splitlines(keepends=True):
-        visible=visible_markdown_links(line).strip()
+        decoded_line = unescape(line)
+        if re.match(pattern, decoded_line, re.M):
+            candidates.append((offset, offset + len(line)))
+        visible=unescape(visible_markdown_links(line)).strip()
         visible=re.sub(r'^#{1,6}\s+','',visible)
+        visible=re.sub(r'^(?:[-*+]|\d+[.)])\s+','',visible)
         visible=re.sub(r'([*_]{1,2})(.+?)\1',r'\2',visible)
         visible=re.sub(r'\s+#+\s*$','',visible).strip()
         if re.match(pattern,visible,re.M):
@@ -234,23 +287,81 @@ def _text_scope_boundary(content, pattern):
     return min(candidates) if candidates else None
 
 
+def _has_scoped_html(content):
+    # Native Markdown may retain empty bookmark anchors. They provide no HTML
+    # record ownership and must not select the HTML-only CSS scope parser.
+    without_bookmarks = re.sub(r'<a\b[^>]*>\s*</a\s*>', '', content, flags=re.I)
+    return bool(re.search(
+        r'<(?:html|body|main|div|section|article|table|ul|ol|a|p|h[1-6])\b',
+        without_bookmarks, re.I,
+    ))
+
+
+def _document_html(content):
+    from .reference_quality import is_html_document_or_fragment
+
+    return is_html_document_or_fragment(content)
+
+
+def _owned_metadata_links(full_content, scoped_content, links, base_url):
+    """Use flat link metadata only when its visible name proves scope ownership."""
+    from collections import defaultdict
+
+    from .reference_quality import visible_markdown_links
+    from .response_input import safe_named_links
+
+    def visible_text(text):
+        return _label_key(re.sub(r'<[^>]+>', ' ', visible_markdown_links(text)))
+
+    def occurrence_count(text, label):
+        if not label:
+            return 0
+        count = 0
+        start = 0
+        while (position := text.find(label, start)) >= 0:
+            end = position + len(label)
+            left_boundary = label[0].isascii() and label[0].isalnum()
+            right_boundary = label[-1].isascii() and label[-1].isalnum()
+            ascii_word = lambda char: char.isascii() and char.isalnum()
+            left_ok = not left_boundary or position == 0 or not ascii_word(text[position - 1])
+            right_ok = not right_boundary or end == len(text) or not ascii_word(text[end])
+            count += bool(left_ok and right_ok)
+            start = position + max(1, len(label))
+        return count
+
+    full_text = visible_text(full_content)
+    scoped_text = visible_text(scoped_content)
+    candidates = safe_named_links(links, base_url)
+    destinations = defaultdict(set)
+    for url, label in candidates:
+        destinations[_label_key(label)].add(url)
+    return [
+        {'url': url, 'title': label}
+        for url, label in candidates
+        if occurrence_count(full_text, _label_key(label)) == 1
+        and occurrence_count(scoped_text, _label_key(label)) == 1
+        and len(destinations[_label_key(label)]) == 1
+    ]
+
+
 def _scope_named_content(content, scope):
     """Apply one declared HTML or text scope and return owned name/link pairs."""
     owned_items = []
-    if re.search(r'<(?:html|body|main|div|section|article|table|ul|ol|a|p|h[1-6])\b', content, re.I):
+    if _has_scoped_html(content):
         soup = _scoped_html(content)
         owners = soup.select(scope['html_selector'])
-        if not scope.get('title_selector'):
-            return '\n'.join(str(node) for node in owners), owned_items, True
-        for owner in owners:
-            titles = owner.select(scope['title_selector'])
-            destination_nodes = owner.select(scope['link_selector'])
-            if owner.name == 'a' and owner.css.match(scope['link_selector']):
-                destination_nodes.insert(0, owner)
-            destinations = {a.get('href') for a in destination_nodes if a.get('href')}
-            if len(titles) == 1 and len(destinations) == 1:
-                owned_items.append((destinations.pop(), titles[0].get_text(' ', strip=True)))
-        return '', owned_items, True
+        if owners or _document_html(content) or not scope.get('start_pattern'):
+            if not scope.get('title_selector'):
+                return '\n'.join(str(node) for node in owners), owned_items, True
+            for owner in owners:
+                titles = owner.select(scope['title_selector'])
+                destination_nodes = owner.select(scope['link_selector'])
+                if owner.name == 'a' and owner.css.match(scope['link_selector']):
+                    destination_nodes.insert(0, owner)
+                destinations = {a.get('href') for a in destination_nodes if a.get('href')}
+                if len(titles) == 1 and len(destinations) == 1:
+                    owned_items.append((destinations.pop(), titles[0].get_text(' ', strip=True)))
+            return '', owned_items, True
     if scope.get('start_pattern'):
         start = _text_scope_boundary(content, scope['start_pattern'])
         if not start:
@@ -324,12 +435,179 @@ def _paired_markdown_items(content, scope):
     return items
 
 
-def _markdown_named_items(content, contract, scope):
+def _named_table_items(content, scope):
+    """Declared table columns bind a visible name to its same-row detail link."""
+    if not scope or not scope.get('markdown_title_column'):
+        return []
+    from .reference_quality import markdown_links, visible_markdown_links, visible_mixed_html_text
+
+    def cells(line):
+        # Escaped pipes remain text; a doubled backslash leaves a real delimiter.
+        values, start, slashes = [], 0, 0
+        for index, char in enumerate(line):
+            if char == '|' and slashes % 2 == 0:
+                values.append(line[start:index].strip())
+                start = index + 1
+            slashes = slashes + 1 if char == '\\' else 0
+        values.append(line[start:].strip())
+        if line.lstrip().startswith('|'):
+            values.pop(0)
+        if values and not values[-1] and line.rstrip().endswith('|'):
+            values.pop()
+        return values
+
+    lines, fence = [], None
+    for line in content.splitlines():
+        marker = re.match(r'^ {0,3}(`{3,}|~{3,})(.*)$', line)
+        if marker:
+            if fence is None:
+                fence = marker[1]
+            elif (marker[1][0] == fence[0] and len(marker[1]) >= len(fence)
+                  and not marker[2].strip()):
+                fence = None
+            lines.append('')
+        else:
+            lines.append('' if fence else line)
+    items = []
+    title_identity = (re.compile(scope['markdown_title_identity_pattern'])
+                      if scope.get('markdown_title_identity_pattern') else None)
+    detail_identity = (re.compile(scope['markdown_detail_identity_pattern'])
+                       if scope.get('markdown_detail_identity_pattern') else None)
+    for index in range(len(lines) - 1):
+        if '|' not in lines[index]:
+            continue
+        headers = [visible_markdown_links(value).strip() for value in cells(lines[index])]
+        divider = cells(lines[index + 1])
+        if (len(divider) != len(headers)
+                or not all(re.fullmatch(r':?-{3,}:?', value) for value in divider)
+                or headers.count(scope['markdown_title_column']) != 1
+                or headers.count(scope['markdown_link_column']) != 1):
+            continue
+        title_column = headers.index(scope['markdown_title_column'])
+        link_column = headers.index(scope['markdown_link_column'])
+        for line in lines[index + 2:]:
+            if not line.strip() or '|' not in line:
+                break
+            row = cells(line)
+            if len(row) != len(headers):
+                continue
+            detail_links = {link.destination for link in markdown_links(row[link_column])
+                            if not link.is_image}
+            if len(detail_links) != 1:
+                continue
+            destination = next(iter(detail_links))
+            title_cell = re.split(r'<br\s*/?>', row[title_column], maxsplit=1, flags=re.I)[0]
+            title = visible_markdown_links(visible_mixed_html_text(title_cell)).strip()
+            if not title:
+                continue
+            if title_identity and detail_identity:
+                stated_ids = {match[1] for link in markdown_links(title_cell)
+                              if (match := title_identity.fullmatch(unquote(link.destination)
+                                  .replace(r'\(', '(').replace(r'\)', ')')))}
+                detail_id = detail_identity.search(unquote(destination))
+                if stated_ids and (not detail_id or stated_ids != {detail_id[1]}):
+                    continue
+            items.append((destination, title))
+    return items
+
+
+def _markdown_heading_card_items(content, contract, scope, base_url):
+    """Bind one heading title to one detail link inside that heading's card.
+
+    This parser is opt-in because a heading does not ordinarily own every link
+    below it. A declared title pattern starts a card, the next Markdown heading
+    ends it, and visible body copy must occur before the detail link. The
+    contract's host and path rules identify detail links without relying on a
+    provider, site name, action label, or saved entity title.
+    """
+    if not scope or not scope.get('markdown_card_title_pattern'):
+        return [], set()
+    from .reference_quality import markdown_links, visible_markdown_links
+
+    title_pattern = re.compile(scope['markdown_card_title_pattern'])
+    headings = list(re.finditer(r'(?m)^ {0,3}#{1,6}[ \t]+[^\n]+$', content))
+    items, owned_link_spans = [], set()
+    excluded_titles = [re.compile(pattern, re.I)
+                       for pattern in contract.get('title_exclusion_patterns', [])]
+    for heading in headings:
+        title_match = title_pattern.fullmatch(heading[0])
+        if not title_match:
+            continue
+        title = re.sub(r'\s+', ' ', visible_markdown_links(title_match['title'])).strip()
+        heading_candidates = []
+        for link in markdown_links(title_match['title']):
+            if link.is_image:
+                continue
+            candidate = _named_candidate(
+                link.destination, title, contract, base_url, excluded_titles,
+            )
+            if candidate is not None:
+                heading_candidates.append(candidate)
+        heading_identities = {candidate[0] for candidate in heading_candidates}
+        if len(heading_identities) == 1:
+            identity = next(iter(heading_identities))
+            candidate = next(
+                candidate for candidate in heading_candidates
+                if candidate[0] == identity
+            )
+            items.append((candidate[1]['url'], candidate[1]['title']))
+            continue
+        if heading_candidates:
+            continue
+        following = content[heading.end():]
+        block_boundary = re.search(
+            r'(?m)^(?: {0,3}#{1,6}[ \t]+| {0,3}(?:(?:\*\s*){3,}|(?:-\s*){3,}|(?:_\s*){3,}))',
+            following,
+        )
+        boundary = (
+            heading.end() + block_boundary.start()
+            if block_boundary else len(content)
+        )
+        segment = content[heading.end():boundary]
+        candidates = []
+        for link in markdown_links(segment):
+            if link.is_image:
+                continue
+            candidate = _named_candidate(
+                link.destination, title, contract, base_url,
+                excluded_titles,
+            )
+            if candidate is not None:
+                candidates.append((link, candidate))
+        identities = {candidate[0] for _link, candidate in candidates}
+        if len(identities) != 1:
+            continue
+        identity = next(iter(identities))
+        first_link, candidate = next(
+            (link, candidate) for link, candidate in candidates
+            if candidate[0] == identity
+        )
+        before_link = segment[:first_link.start]
+        for link in reversed(markdown_links(before_link)):
+            before_link = before_link[:link.start] + before_link[link.end:]
+        body = visible_markdown_links(
+            re.sub(r'!\[[^\]]*\]\([^)]*\)|<[^>]+>', ' ', before_link)
+        )
+        if not any(any(character.isalnum() for character in line)
+                   for line in body.splitlines()):
+            continue
+        owned_link_spans.update(
+            (heading.end() + link.start, heading.end() + link.end)
+            for link, owned_candidate in candidates
+            if owned_candidate[0] == candidate[0]
+        )
+        items.append((candidate[1]['url'], candidate[1]['title']))
+    return items, owned_link_spans
+
+
+def _markdown_named_items(content, contract, scope, excluded_spans=frozenset()):
     """Extract explicit named Markdown links without treating prose as a list."""
     from .reference_quality import markdown_links, visible_markdown_links
     items = []
     parsed_links = markdown_links(content)
     for link_index, link in enumerate(parsed_links):
+        if (link.start, link.end) in excluded_spans:
+            continue
         destination = link.destination.strip()
         try:
             target = urlsplit(destination)
@@ -371,7 +649,8 @@ def _markdown_named_items(content, contract, scope):
                 and not re.fullmatch(r'[\s#>*+\-\d.)|/:•·●▪◦,，、;；]*',prefix)):
             continue
         non_image_label=link.label
-        for nested in reversed(markdown_links(link.label)):
+        nested_images = [nested for nested in markdown_links(link.label) if nested.is_image]
+        for nested in reversed(nested_images):
             if nested.is_image:
                 non_image_label=non_image_label[:nested.start]+non_image_label[nested.end:]
         if (not non_image_label.strip() if contract.get('name_validation') == 'nonempty'
@@ -382,9 +661,21 @@ def _markdown_named_items(content, contract, scope):
             # title exists only in artwork. Match within this link's label;
             # never borrow a caption from the following card or navigation.
             match = re.search(scope['markdown_label_pattern'], non_image_label)
+            if not match and not re.search(r'`+|~{3,}', non_image_label):
+                headings = list(re.finditer(r'</h[1-6]\s*>', non_image_label, re.I))
+                if headings:
+                    tail = non_image_label[headings[-1].end():]
+                    if (tail.strip() and not markdown_links(tail)
+                            and not re.search(r'<[^>]+>', tail)):
+                        caption = re.sub(r'\s+', ' ', tail).strip()
+                        match = re.search(
+                            scope['markdown_label_pattern'],
+                            '<br>' + caption + '<br>',
+                        )
             if not match:
                 continue
-            non_image_label = match['label']
+            else:
+                non_image_label = match['label']
         title=re.sub(r'\s+',' ',visible_markdown_links(non_image_label)).strip()
         items.append((destination,title))
     return items
@@ -442,17 +733,29 @@ def _extract_named_candidates(content,contract,base_url,links=None,diagnostics=N
     scope = contract.get('entry_scope')
     owned_items = []
     if scope:
-        # Flat metadata links carry no section ownership. Never let them fill
-        # a short list from a different region of the page.
-        links = None
+        full_content = content
         content, owned_items, matched = _scope_named_content(content, scope)
         if not matched:
             return {}
+        # Metadata has no DOM position. It may corroborate a link only when its
+        # exact visible name occurs once in the declared text scope and once in
+        # the complete answer, and maps to one destination.
+        links = (
+            _owned_metadata_links(full_content, content, links, base_url)
+            if scope.get('start_pattern') and not _document_html(full_content)
+            else None
+        )
     parser=Links();parser.feed(content)
-    items = owned_items + _paired_markdown_items(content, scope)
+    heading_items, heading_link_spans = _markdown_heading_card_items(
+        content, contract, scope, base_url,
+    )
+    items = owned_items + _paired_markdown_items(content, scope) + _named_table_items(content, scope)
     items += list(parser.items) + safe_named_links(links, base_url)
-    items += _markdown_named_items(content, contract, scope)
+    items += _markdown_named_items(content, contract, scope, heading_link_spans)
     items += _image_heading_items(content, scope)
+    # Explicit card ownership is stronger than a generic link label for the
+    # same destination, so append it last before canonical deduplication.
+    items += heading_items
     return _deduplicated_named_candidates(items, contract, base_url, diagnostics)
 
 
@@ -466,8 +769,7 @@ def extract_named_entries(content,contract,base_url,links=None,diagnostics=None)
 def extract_linked_products(content, contract, base_url, diagnostics=None):
     """Extract title/link/price triples from one owned product segment."""
     scope = contract.get('entry_scope')
-    if scope and scope.get('price_selector') and re.search(
-            r'<(?:html|body|main|div|section|article|table|ul|ol|a|p|h[1-6])\b', content, re.I):
+    if scope and scope.get('price_selector') and _has_scoped_html(content):
         soup = _scoped_html(content)
         allowed = [re.compile(p, re.I) for p in contract['price_patterns']]
         excluded = [re.compile(p, re.I) for p in contract.get('price_exclusion_patterns', [])]
@@ -494,6 +796,10 @@ def extract_linked_products(content, contract, base_url, diagnostics=None):
                         **entry, 'price': None, 'price_status': 'not_shown_on_page',
                         'price_unavailable_text': hint}
         return list(records.values())
+    if scope:
+        content, _, matched = _scope_named_content(content, scope)
+        if not matched:
+            return []
     scannable = re.sub(r"!\[([^\]]*)\]\([^)]*\)", r"\1", content)
     link_pattern = re.compile(
         r"\[([^\]\n]+)\]\((https?://[^\s)]+|/[^\s)]+)\)"
diff --git a/harness/web_fetch/evidence.py b/harness/web_fetch/evidence.py
index 589b53dbe..91c421bbc 100644
--- a/harness/web_fetch/evidence.py
+++ b/harness/web_fetch/evidence.py
@@ -35,6 +35,92 @@
     validate_report_ids,
 )
 
+def recover_completed_batch(source: Path, manifest: dict, records: list[dict]) -> dict:
+    """Bind all flushed calls from an interrupted fixed-answer physical batch.
+
+    The source manifest stays unchanged. The returned boundary describes only
+    saved completed calls, and explicitly retains the original unfinished state.
+    It never supplies missing live-reference certification or chooses scores.
+    """
+    from datetime import datetime
+    from .artifacts import public_call_log_binding, verify_public_call_log
+    from .reference_lifecycle import requires_fresh_reference
+
+    if (manifest.get("schema_version") != 1 or manifest.get("tool") != "web_fetch"
+            or manifest.get("completed_at") or manifest.get("attempt_ids") is not None
+            or not records):
+        raise ValueError("Recovery requires an interrupted versioned physical batch")
+    parameters = manifest.get("parameters", {})
+    if parameters.get("runs") != 1 or parameters.get("max_failure_retries") != 0:
+        raise ValueError("Interrupted recovery requires one call per logical result")
+
+    def verified_input(path, digest):
+        path = Path(path)
+        if path.is_symlink() or not path.is_file():
+            raise ValueError("Recovery input is missing or unsafe")
+        raw = path.read_bytes()
+        if not digest or hashlib.sha256(raw).hexdigest() != digest:
+            raise ValueError("Recovery input hash changed")
+        return raw
+
+    input_raw = verified_input(manifest["dataset"]["source"], manifest.get("dataset_sha256"))
+    verified_input(manifest["provider_config_source"], manifest.get("provider_config_sha256"))
+    dataset = json.loads((source / "dataset.json").read_bytes())
+    original_cases = {case["id"]: case for case in json.loads(input_raw)["cases"]}
+    cases = {case["id"]: case for case in dataset["cases"]}
+    if (len(cases) != len(dataset["cases"])
+            or any(original_cases.get(identifier) != case for identifier, case in cases.items())):
+        raise ValueError("Recovery task differs from frozen pre-call input")
+    providers = {provider["name"]: provider for provider in manifest["providers"]}
+    lower = datetime.fromisoformat(manifest["started_at"])
+    ends, identities = [], set()
+    for row in records:
+        key = (row["provider"], row["case_id"])
+        if (key in identities or key[0] not in providers or key[1] not in cases
+                or row["run"] != 1 or row["provider_type"] != providers[key[0]]["type"]):
+            raise ValueError("Interrupted result has duplicate or undeclared identity")
+        identities.add(key)
+        if requires_fresh_reference(cases[key[1]]):
+            raise ValueError("Interrupted live-reference calls require their full certificate")
+        started, ended = (datetime.fromisoformat(row[field])
+                          for field in ("started_at", "completed_at"))
+        binding = public_call_log_binding(row.get("provider_metadata", {}).get("call_log"))
+        if not binding:
+            raise ValueError("Interrupted result has no completed physical call log")
+        log = json.loads(verify_public_call_log(source, binding).read_bytes())
+        if any(log["identity"].get(field) != row[field]
+               for field in ("attempt_id", "provider", "provider_type", "case_id", "run")):
+            raise ValueError("Interrupted result does not match its physical call identity")
+        timing = log["timing"]
+        if (log["identity"]["physical_attempt"] != 1
+                or not lower <= started <= datetime.fromisoformat(timing["started_at"])
+                <= datetime.fromisoformat(timing["completed_at"]) <= ended
+                or timing["elapsed_ms"] != row["elapsed_ms"]):
+            raise ValueError("Interrupted result does not match its completed call timing")
+        artifact = contained_path(source, row["artifact_path"])
+        digest = row["metrics"]["content_sha256"]
+        if (artifact.is_symlink() or not artifact.is_file()
+                or hashlib.sha256(artifact.read_bytes()).hexdigest() != digest
+                or log["output"]["path"] != row["artifact_path"]
+                or log["output"]["sha256"] != digest):
+            raise ValueError("Interrupted result output differs from completed physical call")
+        verify_record_artifacts(source, row)
+        ends.append(ended)
+    batch = deepcopy(manifest)
+    batch.update(completed_at=max(ends).isoformat(), attempt_count=len(records),
+                 attempt_ids=[row["attempt_id"] for row in records])
+    batch["recovery"] = {
+        "kind": "all-saved-completed-calls-from-interrupted-batch",
+        "original_batch_completed": False,
+        "source_manifest_sha256": hashlib.sha256((source / "manifest.json").read_bytes()).hexdigest(),
+        "source_results_sha256": hashlib.sha256((source / "results.jsonl").read_bytes()).hexdigest(),
+        "source_dataset_sha256": hashlib.sha256((source / "dataset.json").read_bytes()).hexdigest(),
+        "pending_logical_results": len(cases) * len(providers) - len(records),
+        "selection": "every persisted completed call, regardless of pass or fail",
+        "boundary": "last saved call completion; original full batch did not complete",
+    }
+    return batch
+
 
 def add_provider_run(canonical: Path, incoming: Path, provider: str, implementation=None, *, track=None):
     for root in (canonical, incoming):
@@ -258,19 +344,23 @@ def _project_batches(
 
 
 def _project_provider_run(source: Path, output: Path, provider: str, reference_root: Path | None = None,
-            case_ids: set[str] | None = None) -> None:
+            case_ids: set[str] | None = None, *, retain_completed: bool = False) -> None:
     source, output = source.resolve(), output.resolve()
     reference_root = (reference_root or source).resolve()
     if output.exists():
         raise ValueError("Projection destination exists: " + str(output))
     dataset = json.loads((source / "dataset.json").read_text())
+    all_records = _records(source)
+    if retain_completed:
+        if case_ids is not None:
+            raise ValueError("Interrupted recovery cannot select a case subset")
+        case_ids = {row["case_id"] for row in all_records if row["provider"] == provider}
     if case_ids is not None:
         known = {case["id"] for case in dataset["cases"]}
         if not case_ids or case_ids - known:
             raise ValueError("Projection case IDs are empty or unknown")
         dataset["cases"] = [case for case in dataset["cases"] if case["id"] in case_ids]
     cases = {case["id"]: case for case in dataset["cases"]}
-    all_records = _records(source)
     selected = [row for row in all_records
                 if row["provider"] == provider and row["case_id"] in cases]
     expected = set(cases)
@@ -282,6 +372,10 @@ def _project_provider_run(source: Path, output: Path, provider: str, reference_r
 
     source_batches, source_kind, source_document_bytes = _source_batches(source)
     source_document_sha256 = hashlib.sha256(source_document_bytes).hexdigest()
+    if retain_completed:
+        if source_kind != "manifest" or len(source_batches) != 1:
+            raise ValueError("Interrupted recovery requires one physical source manifest")
+        source_batches = [recover_completed_batch(source, source_batches[0], all_records)]
     dataset["coverage_plan"] = {
         track: [provider] for track, providers in dataset["coverage_plan"].items()
         if provider in providers
@@ -340,7 +434,7 @@ def _project_provider_run(source: Path, output: Path, provider: str, reference_r
 
 def project_provider_run(source: Path, output: Path, provider: str,
                          reference_root: Path | None = None,
-                         case_ids: set[str] | None = None) -> None:
+                         case_ids: set[str] | None = None, *, retain_completed: bool = False) -> None:
     """Expose a new projection only after its complete evidence passes validation."""
     for root in (source, reference_root or source):
         reject_evidence_symlinks(root)
@@ -353,7 +447,8 @@ def project_provider_run(source: Path, output: Path, provider: str,
     output.parent.mkdir(parents=True, exist_ok=True)
     with tempfile.TemporaryDirectory(prefix='.' + output.name + '-', dir=output.parent) as work:
         staging = Path(work) / 'evidence'
-        _project_provider_run(source, staging, provider, reference_root, case_ids)
+        _project_provider_run(source, staging, provider, reference_root, case_ids,
+                              retain_completed=retain_completed)
         staging.replace(output)
 
 
@@ -362,6 +457,8 @@ def projection_main(argv=None) -> None:
     parser.add_argument("--source", type=Path, required=True)
     parser.add_argument("--output", type=Path, required=True)
     parser.add_argument("--provider", required=True)
+    parser.add_argument("--retain-completed", action="store_true",
+                        help="Retain every saved completed call from an interrupted fixed-answer batch")
     parser.add_argument("--case-ids", help="Optional comma-separated explicit subset")
     parser.add_argument("--reference-root", type=Path,
                         help="Root containing frozen sources/list-references when the live run omits them")
@@ -372,7 +469,8 @@ def projection_main(argv=None) -> None:
         if any(not value for value in values) or len(set(values)) != len(values):
             parser.error('Case IDs must be nonempty and unique')
         case_ids = set(values)
-    project_provider_run(args.source, args.output, args.provider, args.reference_root, case_ids)
+    project_provider_run(args.source, args.output, args.provider, args.reference_root, case_ids,
+                         retain_completed=args.retain_completed)
     print(f"Projected {args.provider}: {args.output}")
 
 
@@ -601,7 +699,11 @@ def finalize_aggregate(run_dir: Path, observations: Path) -> None:
         raise ValueError("Aggregated run has no execution batches")
     original_by_key = _index_batches(original)
 
-    manifests = sorted((run_dir / "workers").glob("*/*/manifest.json"))
+    worker_root = run_dir / "workers"
+    manifests = sorted({
+        *worker_root.glob("*/manifest.json"),
+        *worker_root.glob("*/*/manifest.json"),
+    })
     if not manifests:
         raise ValueError("Aggregated run has no worker manifests")
     before = [_read(path) for path in manifests]
diff --git a/harness/web_fetch/failure_diagnosis.py b/harness/web_fetch/failure_diagnosis.py
index b67ba53d2..7de03cc89 100644
--- a/harness/web_fetch/failure_diagnosis.py
+++ b/harness/web_fetch/failure_diagnosis.py
@@ -12,6 +12,24 @@ def _platform_capability_restricted(message):
     ))
 
 
+def _unsupported_output_error(message):
+    """Use an explicit delivery-format rejection rather than debug option names."""
+    return re.search(
+        r'raw download output only supports[^\r\n]*|'
+        r'unsupported output format[^\r\n]*|'
+        r'(?:--dump[ =]+\S+|output format)[^\r\n]{0,80}\b(?:is not supported|unsupported)\b[^\r\n]*',
+        message, re.I,
+    )
+
+
+def _timeout_error(message, error_type):
+    if re.search(r'(?:^|_)(?:timeout|timed_out)$', str(error_type or '').lower()):
+        return True
+    # timeout_ms, request_timeout_ms and timeout=45000 describe configuration,
+    # whereas a standalone timeout or an explicit deadline failure is evidence.
+    return bool(re.search(r'timed out|\btimeout\b(?!["\']?\s*[:=])|deadline exceeded', message, re.I))
+
+
 def _stable_failure(metrics):
     """Describe measured contract errors; never infer a shortfall by default."""
     errors = metrics.get('stable_task_errors', [])
@@ -55,7 +73,10 @@ def set_result(label,where,evidence):return label,where,evidence
     elif meta.get('empty_content'):
         category,stage,proof=set_result('正文提取为空','内容提取','接口成功，但返回 result 为空；响应类型：'+str(meta.get('content_type') or '未提供'))
     elif not r['ok']:
-        if any(x in low for x in ['unsupported_content_type','unexpected_content_type','unsupported_file','file type that firecrawl cannot process']):
+        output_error = _unsupported_output_error(message)
+        if output_error:
+            category,stage,proof=set_result('不支持所需输出格式','内容交付',output_error.group(0)[:650])
+        elif any(x in low for x in ['unsupported_content_type','unexpected_content_type','unsupported_file','file type that firecrawl cannot process']):
             category,stage,proof=set_result('不支持输入类型','方法能力',message[:650])
         elif 'do not support this site' in low:
             category,stage,proof=set_result('方法不支持该站点','方法策略',message[:650])
@@ -85,7 +106,7 @@ def set_result(label,where,evidence):return label,where,evidence
             certainty='服务明确返回按调用地区限制请求能力；不据此归责源站'
         elif 'execution context was destroyed' in low:
             category,stage,proof=set_result('浏览器执行上下文中断','浏览器执行',message[:650])
-        elif re.search(r'timed out|(?<![a-z])timeout(?![a-z])|deadline exceeded',low):
+        elif _timeout_error(message, r.get('error_type')):
             category,stage,proof=set_result('加载 / 提取超时','取页或提取',message[:650])
         elif upstream in {401,403} or re.search(r'(?:http[_ :]*|failed \(|status code[: ]*|status_not_ok.{0,80})(?:401|403)',low) or re.search(r'(401|403) client error',low):
             category,stage,proof=set_result('源站拒绝该次访问','源站访问',str(nested.get('message') or r.get('error_message') or message)[:650])
diff --git a/harness/web_fetch/headless_runner.py b/harness/web_fetch/headless_runner.py
index fded6f391..b154c9c5b 100644
--- a/harness/web_fetch/headless_runner.py
+++ b/harness/web_fetch/headless_runner.py
@@ -136,6 +136,21 @@ def main(argv=None):
         providers=args.providers,
     )
     names = list(config)
+    incompatible = {
+        name: value.get("type")
+        for name, value in config.items()
+        if value.get("type") != "headless_markdown"
+    }
+    if incompatible:
+        details = ", ".join(
+            f"{name} ({provider_type or 'missing type'})"
+            for name, provider_type in incompatible.items()
+        )
+        parser.error(
+            "Headless benchmark providers must use type headless_markdown; "
+            f"incompatible provider configuration: {details}. "
+            "Use scripts/run_benchmark.py for native Web Fetch providers."
+        )
     if args.resource_sample_interval_ms is not None:
         if args.resource_container_image is None:
             args.resource_container_image = cohort_config.get("resource_container_image")
diff --git a/harness/web_fetch/html_to_markdown.mjs b/harness/web_fetch/html_to_markdown.mjs
index b79bc5b12..31234a581 100644
--- a/harness/web_fetch/html_to_markdown.mjs
+++ b/harness/web_fetch/html_to_markdown.mjs
@@ -6,7 +6,8 @@ const { NodeHtmlMarkdown } = require(process.argv[2] || 'node-html-markdown');
 const chunks = [];
 for await (const chunk of process.stdin) chunks.push(chunk);
 const html = Buffer.concat(chunks).toString('utf8');
-const converter = new NodeHtmlMarkdown({}, {
+// Literal angle brackets in prose must not become active HTML in Markdown.
+const converter = new NodeHtmlMarkdown({ textReplace: [[/[<>]/g, '\\$&']] }, {
   pre: ({node}) => {
     // A highlighted shell variable is literal code, not Markdown emphasis.
     const content = node.textContent;
diff --git a/harness/web_fetch/methods.py b/harness/web_fetch/methods.py
index 7c48b4149..4d0f18fbf 100644
--- a/harness/web_fetch/methods.py
+++ b/harness/web_fetch/methods.py
@@ -1,14 +1,100 @@
 from __future__ import annotations
 
+import json
+import importlib.metadata
 import re
+from collections import Counter
+from functools import lru_cache, wraps
+from contextvars import ContextVar
+from pathlib import Path
 from typing import Any
 
 
+@lru_cache(maxsize=1)
+def browser_method_registry():
+    """Use the execution registry for release and source-build participants."""
+    path = Path(__file__).resolve().parents[2] / "configs/providers.headless.json"
+    if not path.is_file():
+        from harness.distribution import installed_data_path
+        try:
+            path = installed_data_path("share/browser-harness-eval/providers.headless.json")
+        except importlib.metadata.PackageNotFoundError:
+            return {}
+        except ValueError as error:
+            if str(error).startswith('Distribution must declare one data file:'):
+                return {}
+            raise
+    return json.loads(path.read_text())["providers"]
+
+
+def native_browser_engine(name):
+    return browser_method_registry().get(name, {}).get("engine")
+
+
+def browser_method_label(name):
+    return _MEASURED_LABELS.get().get(
+        name, browser_method_registry().get(name, {}).get("label", name)
+    )
+
+
+_MEASURED_LABELS = ContextVar("webfetch_measured_labels", default={})
+
+
+def measured_method_label(name, fallback):
+    return _MEASURED_LABELS.get().get(name, fallback)
+
+
+def with_measured_method_labels(render):
+    """Scope Moli version labels to the actual report's hash-bound binaries."""
+    @wraps(render)
+    def wrapped(out, dataset, records, *args, **kwargs):
+        path = Path(out) / "implementation-provenance.json"
+        provenance = json.loads(path.read_text()) if path.is_file() else {}
+        identities = {
+            item["binary_sha256"]: item["version"]
+            for item in provenance.get("implementations", [])
+            if item.get("version") and item.get("binary_sha256")
+        }
+        labels = {}
+        for name in {r["provider"] for r in records}:
+            if native_browser_engine(name) != "moli":
+                continue
+            subset = [r for r in records if r["provider"] == name]
+            versions = [
+                identities.get(r.get("provider_metadata", {}).get("binary_sha256"))
+                for r in subset
+            ]
+            if versions and all(versions):
+                counts = Counter(versions)
+                if len(counts) == 1:
+                    labels[name] = "Moli " + next(iter(counts))
+                else:
+                    releases = [
+                        match.group(1) if (match := re.match(r"^(\d+\.\d+\.\d+)", version)) else None
+                        for version in counts
+                    ]
+                    if None not in releases and len(set(releases)) == 1:
+                        release = releases[0]
+                        configured = browser_method_registry().get(name, {}).get("label", "")
+                        qualifier = "（候选版）" if "candidate" in configured.lower() else ""
+                        labels[name] = f"Moli {release}{qualifier}"
+                    else:
+                        labels[name] = "Moli 多构建结果（" + "；".join(
+                            f"{count} 例 {version}" for version, count in sorted(counts.items())
+                        ) + "）"
+        token = _MEASURED_LABELS.set(labels)
+        try:
+            return render(out, dataset, records, *args, **kwargs)
+        finally:
+            _MEASURED_LABELS.reset(token)
+    return wrapped
+
+
 METHOD_REGISTRY: dict[str, dict[str, Any]] = {
     "http": {"endpoint":"HTTP GET","contract":"已知 URL → HTML 文本或文件任务的原始字节","output":"HTML 提取文本；文件任务保留响应字节","freshness":"每次独立请求，不执行页面 JavaScript","leaderboard":"独立 HTTP 对照"},
     "headless_html": {"endpoint":"browser HTML → node-html-markdown 2.0.0","contract":"已知 URL → DOM HTML → Markdown","output":"Markdown；独立保存 HTML 和诊断","freshness":"每次新进程/会话；domcontentloaded；45 秒外层预算","leaderboard":"六类任务分别验收","report":{"observed_routes":True}},
     "headless_markdown": {"endpoint":"各方法最快的正式任务原生产物路径","contract":"已知 URL → 正文 Markdown/文本，或文件任务的原始字节","output":"正文 Markdown/文本；文件任务为原始字节；保留接口与阶段诊断","freshness":"每次新进程/会话；45 秒端到端预算","leaderboard":"六类任务分别验收","report":{"observed_routes":True}},
-    "moli_webfetch": {"endpoint":"moli fetch（按任务预选 Markdown、DOM eval 或裸响应）","contract":"已知 URL → 渲染正文、结构化资源 URL 或原文件字节","output":"stdout 文本/JSON/字节；stderr 独立诊断","freshness":"每次启动独立进程；使用预声明的有界完成条件","leaderboard":"六类任务分别验收","report":{"reported_version":{"pattern":r"^moli\s+","replacement":"Moli "},"profiles":[{"metadata_equals":{"dump":"markdown","route":"dynamic_native_markdown","wait_until":"done","wait.strategy":"native_default_completion"},"endpoint":"moli fetch --dump markdown --wait-until done URL","freshness":"每例启动一个独立进程；由 Moli 的默认 done 完成方式决定何时交付内容。","configuration":"本轮 {record_count} 例统一使用 Moli 原生 Markdown Fetch 与默认 done 完成方式；除目标 URL 外没有逐例等待元素、额外等待时间、提取脚本或特殊参数。未启用额外的理解模型或付费后备方法。"}]}},
+    "moli_webfetch": {"endpoint":"moli fetch（网页、文档正文、结构与网页内嵌媒体用原生 Markdown，直接媒体文件用原始响应）","contract":"已知 URL → 原生 Markdown 或原文件字节","output":"stdout Markdown/字节；stderr 独立诊断","freshness":"每次启动独立进程；结构完成条件只控制官方等待参数","leaderboard":"七类任务分别验收","report":{"reported_version":{"pattern":r"^moli\s+","replacement":"Moli "},"profiles":[{"metadata_equals":{"dump":"markdown","route":"dynamic_native_markdown","wait_until":"domstable","wait.strategy":"native_task_family_completion","layout":True,"with_frames":True},"endpoint":"moli fetch --dump markdown --layout --with-frames --wait-until domstable URL","freshness":"每例启动一个独立进程；动态网站正文统一等待 Moli 原生 DOM 稳定信号，并启用原生页面布局和已加载子文档。","configuration":"本轮 {record_count} 个动态网站正文任务统一使用 Moli 原生 Markdown、--layout、--with-frames 和 domstable。除目标 URL 外，没有逐题等待元素、延迟、提取脚本或特殊参数，也没有启用理解模型、格式回退或付费后备方法。"},{"metadata_equals":{"dump":"markdown","route":"dynamic_native_markdown","wait_until":"done","wait.strategy":"native_default_completion"},"endpoint":"moli fetch --dump markdown --wait-until done URL","freshness":"每例启动一个独立进程；由 Moli 的默认 done 完成方式决定何时交付内容。","configuration":"本轮 {record_count} 例统一使用 Moli 原生 Markdown 和默认 done 完成方式。除目标 URL 外，没有逐例等待元素、额外等待时间、提取脚本或特殊参数，也没有启用理解模型、格式回退或付费后备方法。"}]}},
     "cowagent_builtin": {"endpoint":"仓库内 WebFetch.execute","contract":"已知 URL → 可读文本/文档文字","output":"纯文本","freshness":"实时请求","leaderboard":"可读正文"},
     "lexmount": {"endpoint":"POST https://api.lexmount.com/v1/extract","contract":"已知 URL → 主正文 + 元数据","output":"main_text","freshness":"托管实时抓取","leaderboard":"可读正文"},
     "lexmount_cn": {"endpoint":"POST https://api.lexmount.cn/v1/extract","contract":"已知 URL → 主正文 + 元数据","output":"main_text","freshness":"中国区托管实时抓取","leaderboard":"可读正文"},
@@ -25,6 +111,13 @@
 }
 
 
+def is_browser_comparison(records: list[dict[str, Any]]) -> bool:
+    """Recognize browser cohorts independently of their task-specific adapters."""
+    types = {row.get("provider_type") for row in records}
+    return bool(types & {"headless_html", "headless_markdown"}) and types <= {
+        "headless_html", "headless_markdown", "moli_webfetch"}
+
+
 def method_info(provider_type: str) -> dict[str, Any]:
     return METHOD_REGISTRY.get(provider_type, {"endpoint":"未记录","contract":"未知","output":"未知","freshness":"未知","leaderboard":"未分类"})
 
@@ -34,7 +127,7 @@ def method_info(provider_type: str) -> dict[str, Any]:
     "lightpanda_native_markdown": "Lightpanda CLI 直接返回 Markdown",
     "obscura_native_markdown": "Obscura CLI 直接返回 Markdown",
     "moli_native_markdown": "Moli CLI 直接返回 Markdown",
-    "node-html-markdown": "Chromium 渲染 DOM → node-html-markdown 2.0.0",
+    "node-html-markdown": "浏览器渲染 DOM → node-html-markdown 2.0.0",
 }
 
 
@@ -68,7 +161,8 @@ def method_page_model(name: str, label: str, records: list[dict[str, Any]]) -> d
             version_rule["pattern"], version_rule.get("replacement", ""), versions[0],
             flags=re.I,
         )
-        title += f" · {version}"
+        if version not in title:
+            title += f" · {version}"
     model = {
         "title": title,
         "contract": info["contract"],
diff --git a/harness/web_fetch/metrics.py b/harness/web_fetch/metrics.py
index 2b5ddaa30..9038d860e 100644
--- a/harness/web_fetch/metrics.py
+++ b/harness/web_fetch/metrics.py
@@ -1,11 +1,13 @@
 from __future__ import annotations
 
 import re
+import json
 import math
 import hashlib
 import statistics
 import unicodedata
 from collections import Counter, defaultdict
+from html.parser import HTMLParser
 from typing import Any
 from urllib.parse import urljoin, urlsplit, urlunsplit, unquote
 
@@ -183,6 +185,130 @@ def _image_content_candidates(
     return candidates
 
 
+class _VisibleInlineFrames(HTMLParser):
+    """Collect browser-serialized inline frame documents that are visibly embedded."""
+
+    def __init__(self) -> None:
+        super().__init__(convert_charrefs=True)
+        self.documents: list[tuple[str, str | None]] = []
+
+    def handle_starttag(self, tag: str, attrs: list[tuple[str, str | None]]) -> None:
+        if tag.casefold() != "iframe":
+            return
+        values = {key.casefold(): value for key, value in attrs}
+        style = re.sub(r"\s+", "", values.get("style") or "").casefold()
+        if (
+            "hidden" in values
+            or "display:none" in style
+            or "visibility:hidden" in style
+            or (values.get("width") == "0" and values.get("height") == "0")
+        ):
+            return
+        source = values.get("srcdoc")
+        if source:
+            self.documents.append((source, values.get("data-moli-frame-url")))
+
+
+def _inline_frame_candidates(
+    content: str,
+    expected_resources: list[dict[str, Any]],
+    *,
+    base_url: str,
+    images_only: bool,
+) -> list[tuple[str, str]]:
+    """Read resource URLs from visible native ``srcdoc`` serialization.
+
+    Moli's official ``--with-frames`` output keeps child documents inside the
+    returned HTML.  This is still provider output; the scorer only resolves
+    URLs that the browser serialized, and ignores hidden synchronization or ad
+    frames.  The same parser applies to any provider returning inline frames.
+    """
+    parser = _VisibleInlineFrames()
+    parser.feed(content)
+    candidates: list[tuple[str, str]] = []
+    for document, declared_base in parser.documents[:100]:
+        try:
+            declared_base_is_http = bool(
+                declared_base
+                and urlsplit(declared_base).scheme in {"http", "https"}
+            )
+        except ValueError:
+            declared_base_is_http = False
+        frame_base = (
+            declared_base
+            if declared_base_is_http
+            else base_url
+        )
+        if images_only:
+            raw_candidates = _image_content_candidates(
+                document, expected_resources, base_url=frame_base,
+            )
+        else:
+            raw_candidates = [
+                (url, "content.frame_html_url")
+                for _, url in re.findall(
+                    r"(?:src|href)\s*=\s*([\"'])(.*?)\1", document, re.I
+                )
+            ]
+            raw_candidates.extend(
+                (url, "content.frame_bare_url")
+                for url in re.findall(r"https?://[^\s<>'\")\]]+", document)
+            )
+        for raw_url, source in raw_candidates:
+            normalized = normalize_resource_url(raw_url, frame_base)
+            if normalized:
+                candidates.append((normalized, source.replace("content.", "content.frame_", 1)))
+    return candidates
+
+
+def _native_json_resource_candidates(
+    content: str,
+    expected_resources: list[dict[str, Any]],
+    *,
+    base_url: str,
+) -> list[tuple[str, str]]:
+    """Read URLs from a browser's native JSON page and network record.
+
+    The accepted surface is deliberately structural: serialized page HTML and
+    network entries named ``url`` or ``final_url``. It never reads expected
+    answers to choose a field or invents a URL from a playback identifier.
+    """
+    try:
+        payload = json.loads(content)
+    except (json.JSONDecodeError, TypeError):
+        return []
+    if not isinstance(payload, dict):
+        return []
+    candidates: list[tuple[str, str]] = []
+    html = payload.get("html")
+    if isinstance(html, str):
+        candidates.extend(
+            (match[1], "content.native_json_html_url")
+            for match in re.findall(
+                r"(?:src|href)\s*=\s*([\"'])(.*?)\1", html, re.I
+            )
+        )
+        candidates.extend(
+            (url, "content.native_json_html_bare_url")
+            for url in re.findall(r"https?://[^\s<>'\")\]]+", html)
+        )
+        candidates.extend(_inline_frame_candidates(
+            html, expected_resources, base_url=base_url, images_only=False,
+        ))
+    pending = [payload.get("network")]
+    while pending:
+        value = pending.pop()
+        if isinstance(value, dict):
+            for key, item in value.items():
+                if key in {"url", "final_url"} and isinstance(item, str):
+                    candidates.append((item, f"content.native_json_network.{key}"))
+                elif isinstance(item, (dict, list)):
+                    pending.append(item)
+        elif isinstance(value, list):
+            pending.extend(value)
+    return candidates
+
+
 def _normalized_candidates(
     candidates: list[tuple[str, str]], *, base_url: str,
 ) -> tuple[list[str], list[dict[str, Any]]]:
@@ -244,6 +370,9 @@ def evaluate_resources(
         candidates.extend(_image_content_candidates(
             content, expected_resources, base_url=base_url,
         ))
+        candidates.extend(_inline_frame_candidates(
+            content, expected_resources, base_url=base_url, images_only=True,
+        ))
     elif eligible:
         answer_fields = {key: metadata[key] for key in ('links','images','videos','media','extras') if key in metadata}
         candidates.extend(_metadata_resource_candidates(answer_fields))
@@ -256,6 +385,12 @@ def evaluate_resources(
                           for url in markdown_link_destinations(content))
         candidates.extend((url, "content.visible_file")
                           for url in _visible_relative_resource_urls(content))
+        candidates.extend(_inline_frame_candidates(
+            content, expected_resources, base_url=base_url, images_only=False,
+        ))
+        candidates.extend(_native_json_resource_candidates(
+            content, expected_resources, base_url=base_url,
+        ))
     normalized_candidates, candidate_evidence = _normalized_candidates(candidates, base_url=base_url)
     results = []
     allowed_urls: set[str] = set()
@@ -325,15 +460,14 @@ def task_passed(ok: bool, metrics: dict, task_kind: str | None = None) -> bool:
     # Scored records carry the case kind so dataset-free summaries use the same
     # predicate as the report. Explicit case context still takes precedence.
     task_kind = task_kind if task_kind is not None else metrics.get('task_kind', 'body')
-    if (metrics.get('page_identity_required')
-            and metrics.get('page_identity_status') != 'verified'):
-        return False
     if (not task_measured(metrics, task_kind) or metrics.get('deadline_overrun')
             or metrics.get('blocked_page')):
         return False
     if "stable_task_pass" in metrics:
         combined = (metrics.get("content_pass")
-                    if "composite_acceptance_pass" in metrics or metrics.get("body_region_results")
+                    if ("composite_acceptance_pass" in metrics
+                        or metrics.get("body_region_results")
+                        or metrics.get("pattern_results"))
                     else True)
         return bool(ok and metrics["stable_task_pass"]
                     and combined
@@ -347,10 +481,8 @@ def task_passed(ok: bool, metrics: dict, task_kind: str | None = None) -> bool:
 def task_measured(metrics: dict, task_kind: str | None = None) -> bool:
     if metrics.get('rule_review_status') == 'unresolved':
         return False
-    if (metrics.get('page_identity_required')
-            and metrics.get('page_identity_status') == 'unavailable'
-            and metrics.get('request_ok') is not False):
-        return False
+    # A completed call missing required page observations is a measured failure.
+    # Missing benchmark rules remain unmeasured through rule_review_status above.
     kind = task_kind or metrics.get('task_kind', 'body')
     return kind != 'file' or isinstance(metrics.get('raw_file_pass'), bool)
 
@@ -441,6 +573,15 @@ def fact_in_text(text: str, fact: str) -> bool:
     return False
 
 
+def forbidden_in_text(text: str, phrase: str) -> bool:
+    """Match ASCII word boundaries without segmenting CJK phrases."""
+    if not phrase:
+        return False
+    left = r'(?<![a-z0-9_])' if phrase[0].isascii() and phrase[0].isalnum() else ''
+    right = r'(?![a-z0-9_])' if phrase[-1].isascii() and phrase[-1].isalnum() else ''
+    return bool(re.search(left + re.escape(phrase) + right, text))
+
+
 def text_corruption(value: str) -> tuple[int, float, bool]:
     """Detect substantial UTF-8 replacement-character damage in text output."""
     count = value.count('\ufffd')
@@ -486,12 +627,16 @@ def evaluate_content(
 ) -> dict[str, Any]:
     title_prefix = ((title.strip() + '\n') if title and title.strip() else '')
     visible_content = content
-    is_html = bool(re.match(r'\s*<!doctype\s+html\b', content, re.I) or
-                   re.match(r'\s*<(?:html|body|main|div|section|article)\b', content, re.I))
+    from .reference_quality import is_html_document_or_fragment
+    is_html = is_html_document_or_fragment(content)
     if is_html:
         # Keep raw HTML for records and links; score prose from visible text.
         from .dynamic_lists import visible_html_text
         visible_content = visible_html_text(content)
+    else:
+        from .reference_quality import visible_mixed_html_text
+        visible_content = visible_mixed_html_text(content)
+    has_html_prose = is_html or visible_content != content
     answer_text = title_prefix + visible_content
     from .reference_quality import blocked_page_hits, script_payload_shell
     block_hits = blocked_page_hits(answer_text)
@@ -534,12 +679,12 @@ def evaluate_content(
         ]
         block_hits = [hit for hit in block_hits if hit not in block_reference_exemptions]
     reference_exemptions = [item for item in (forbidden_any or [])
-                            if reference_folded and (text := normalize_for_match(item)) and text in reference_folded]
+                            if reference_folded and forbidden_in_text(reference_folded, normalize_for_match(item))]
     if acceptance_contract:
         # A historical snapshot cannot exempt an explicit stable-mode block rule.
         reference_exemptions = []
     forbidden = [item for item in (forbidden_any or [])
-                 if item not in reference_exemptions and (text := normalize_for_match(item)) and text in folded]
+                 if item not in reference_exemptions and forbidden_in_text(folded, normalize_for_match(item))]
     lines = [re.sub(r"\s+", " ", line).strip().casefold() for line in answer_text.splitlines()]
     lines = [line for line in lines if line]
     unique_line_ratio = round(len(set(lines)) / len(lines), 4) if lines else 1.0
@@ -550,7 +695,11 @@ def evaluate_content(
                     and not script_shell)
     pattern_results = []
     for rule in required_patterns or []:
-        count = len(set(re.findall(rule['pattern'], visible_content, re.I)))
+        scope = rule.get('match_scope', 'text')
+        if scope not in {'text', 'output'}:
+            raise ValueError('Required pattern match_scope must be text or output')
+        pattern_content = content if scope == 'output' else visible_content
+        count = len(set(re.findall(rule['pattern'], pattern_content, re.I)))
         pattern_results.append({'id':rule['id'],'count':count,'minimum':rule.get('minimum',1),'pass':count >= rule.get('minimum',1)})
     content_pass = content_pass and all(item['pass'] for item in pattern_results)
     from .body_coverage import evaluate_body_requirements
@@ -604,16 +753,26 @@ def evaluate_content(
             if ground_truth_main_content else None),
     }
     if acceptance_contract:
-        # Frozen literal markers and snapshot facts are diagnostics once a
-        # stable contract owns acceptance.  A separately declared body-region
-        # contract is different: it remains an independent acceptance gate.
+        # Explicit body/record requirements own body-text acceptance. Stable
+        # page-shell literals remain inspectable diagnostics in those cases.
+        anchors_required = acceptance_contract.get("stable_text_role", "required") != "diagnostic"
+        if not anchors_required and not (
+            body_requirements
+            or (composite_acceptance and composite_acceptance.get("groups"))
+            or acceptance_contract.get("page_patterns")
+        ):
+            raise ValueError(
+                "Diagnostic stable text requires body, composite, or page-pattern acceptance"
+            )
         declared_body_pass = bool(result["body_coverage_pass"])
+        declared_pattern_pass = all(item["pass"] for item in result["pattern_results"])
         from .stable_tasks import evaluate_stable_task
         # Document metadata remains diagnostic; it cannot supply rendered
         # page anchors, records, or declared body coverage.
         result.update(evaluate_stable_task(content, acceptance_contract,
                                            base_url, links=named_links,
-                                           anchor_text=visible_content if is_html else None))
+                                            anchor_text=visible_content if has_html_prose else None,
+                                           anchors_required=anchors_required))
         if encoding_corruption:
             result["stable_task_pass"] = False
             result["stable_content_pass"] = False
@@ -637,12 +796,21 @@ def evaluate_content(
             result["stable_content_pass"] = False
             if "content_too_short" not in result["stable_task_errors"]:
                 result["stable_task_errors"].append("content_too_short")
-        result["content_pass"] = bool(declared_body_pass and result["stable_task_pass"])
-        result["content_decision_basis"] = "stable_contract_and_declared_content_requirements"
+        result["content_pass"] = bool(
+            declared_body_pass and declared_pattern_pass and result["stable_task_pass"]
+        )
+        result["content_decision_basis"] = (
+            "declared_content_requirements_with_stable_text_diagnostics"
+            if not anchors_required else "stable_contract_and_declared_content_requirements")
     if composite_acceptance:
         from .composite_tasks import evaluate_composite_acceptance
+        from .dynamic_lists import visible_html_text
         composite = evaluate_composite_acceptance(
-            visible_content, composite_acceptance, base_url=base_url, links=named_links,
+            visible_html_text(content, preserve_links=True) if is_html else visible_content,
+            composite_acceptance,
+            base_url=base_url,
+            links=named_links,
+            table_content=content,
         )
         result.update(composite)
         result["content_pass"] = bool(result["content_pass"] and composite["composite_acceptance_pass"])
diff --git a/harness/web_fetch/models.py b/harness/web_fetch/models.py
index c37d20128..271bc8656 100644
--- a/harness/web_fetch/models.py
+++ b/harness/web_fetch/models.py
@@ -8,11 +8,30 @@
 
 TASK_KINDS = ('body', 'structure', 'resource', 'file')
 TRACKS = {
-    'web': '静态网站正文', 'dynamic': '动态网站正文', 'challenge': '热门网站正文',
+    'web': '普通网页正文', 'dynamic': '动态网站正文', 'challenge': '热门网站正文',
+    'risk_control': '风控网页正文',
     'document': '文档正文', 'image': '图片获取', 'video': '视频获取',
-    'risk_control': '历史访问受限网址正文',
 }
 
+# The frozen dataset retains image/video as source tracks. Public comparisons
+# group those cases by the deliverable a caller must receive.
+REPORT_FAMILIES = {
+    'web': '静态网站正文',
+    'dynamic': '动态网站正文',
+    'challenge': '热门网站正文',
+    'risk_control': '风控网页正文',
+    'document': '文档正文',
+    'web_media': '网页内嵌媒体',
+    'media_file': '直接媒体文件',
+}
+
+
+def report_family(case: dict[str, Any]) -> str:
+    track = case.get('track', 'web')
+    if track in {'image', 'video'}:
+        return 'media_file' if case.get('task_kind', 'body') == 'file' else 'web_media'
+    return track
+
 
 def execution_id(record: dict[str, Any]) -> str:
     """Stable local invocation ID, distinct from the supplier's request ID."""
diff --git a/harness/web_fetch/network_dns.py b/harness/web_fetch/network_dns.py
index 319ee13a1..2d60e8eef 100644
--- a/harness/web_fetch/network_dns.py
+++ b/harness/web_fetch/network_dns.py
@@ -7,6 +7,7 @@
 import time
 import urllib.parse
 import urllib.request
+from pathlib import Path
 
 DNS_ENDPOINT = "https://cloudflare-dns.com/dns-query"
 DNS_MODES = {"system", "public_doh"}
@@ -27,6 +28,28 @@ def validate_dns_mode(mode):
     return mode
 
 
+def configure_chromium_dns_profile(profile, mode):
+    """Configure a fresh Chromium profile for one declared DNS mode."""
+    mode = validate_dns_mode(mode)
+    if mode == "system":
+        return {"dns_mode": "system"}
+    profile = Path(profile)
+    state = profile / "Local State"
+    if state.exists() or state.is_symlink():
+        raise ValueError("Chromium DNS profile must be fresh")
+    state.write_text(json.dumps({
+        "dns_over_https": {"mode": "secure", "templates": DNS_ENDPOINT + "{?dns}"},
+        "built_in_dns_client_enabled": True,
+    }))
+    return {
+        "dns_mode": "public_doh",
+        "dns_endpoint": DNS_ENDPOINT,
+        "secure_dns_mode": "secure",
+        "system_dns_fallback": False,
+        "dns_bootstrap": "system resolver for the fixed DoH endpoint only",
+    }
+
+
 def lookup_public_dns(hostname, *, timeout, opener=None):
     """Resolve A and AAAA once each; no fallback or retry; leave safety to the product."""
     try:
@@ -247,10 +270,7 @@ async def crawl4ai_public_dns_browser(config):
         raise ValueError("public_doh requires the frozen Chrome channel")
     with tempfile.TemporaryDirectory(prefix="webfetch-crawl-dns-") as directory:
         profile = pathlib.Path(directory)
-        (profile / "Local State").write_text(json.dumps({
-            "dns_over_https": {"mode": "secure", "templates": DNS_ENDPOINT + "{?dns}"},
-            "built_in_dns_client_enabled": True,
-        }))
+        dns_metadata = configure_chromium_dns_profile(profile, "public_doh")
         arguments = BrowserManager(config)._build_browser_args()
         arguments["args"] += ["--remote-debugging-port=0", "--remote-debugging-address=127.0.0.1"]
         async with async_playwright() as playwright:
@@ -264,11 +284,9 @@ async def crawl4ai_public_dns_browser(config):
                 if not 1 <= port <= 65535:
                     raise ValueError("invalid Chrome debugging endpoint")
                 yield config.clone(cdp_url=f"http://127.0.0.1:{port}"), {
-                    "dns_mode": "public_doh", "dns_endpoint": DNS_ENDPOINT,
-                    "secure_dns_mode": "secure", "system_dns_fallback": False,
+                    **dns_metadata,
                     "browser_channel": config.chrome_channel,
                     "browser_version": context.browser.version if context.browser else None,
-                    "dns_bootstrap": "system resolver for the fixed DoH endpoint only",
                 }
             finally:
                 await context.close()
@@ -276,8 +294,7 @@ async def crawl4ai_public_dns_browser(config):
 
 def _native_dns_sources():
     import pathlib
-    owner = pathlib.Path(__file__).resolve()
-    return [owner.parent / "workers/native_dns_darwin.c", owner]
+    return [pathlib.Path(__file__).resolve().parent / "workers/native_dns_darwin.c"]
 
 
 def validate_native_dns_library(library):
@@ -315,14 +332,37 @@ def build_native_dns_library(destination):
         raise ValueError("native public DNS bridge currently requires Darwin")
     path = pathlib.Path(destination).expanduser().resolve()
     path.parent.mkdir(parents=True, exist_ok=True)
-    source, helper = _native_dns_sources()
+    source, = _native_dns_sources()
     with tempfile.TemporaryDirectory(dir=path.parent) as directory:
         staged = pathlib.Path(directory) / path.name
         subprocess.run(["cc", "-dynamiclib", "-O2", "-Wall", "-Wextra", "-Werror", str(source), "-o", str(staged)], check=True)
         manifest = {"platform": "Darwin", "architecture": platform.machine(),
                     "compiler": subprocess.check_output(["cc", "--version"], text=True).splitlines()[0],
-                    "source_sha256": {item.name: hashlib.sha256(item.read_bytes()).hexdigest() for item in (source, helper)},
+                    "source_sha256": {
+                        source.name: hashlib.sha256(source.read_bytes()).hexdigest()
+                    },
                     "library_sha256": hashlib.sha256(staged.read_bytes()).hexdigest()}
         staged.replace(path)
         path.with_suffix(".json").write_text(json.dumps(manifest, indent=2) + "\n")
     return validate_native_dns_library(path)
+
+
+@contextmanager
+def native_process_dns_environment(mode, library, deadline, metadata, base=None):
+    """Apply the selected resolver to one Darwin browser process."""
+    validate_dns_mode(mode)
+    metadata["dns_mode"] = mode
+    if mode == "system":
+        yield base
+        return
+    path, binding = validate_native_dns_library(library)
+    with NativeDnsBroker() as broker:
+        remaining = deadline - time.monotonic()
+        if remaining <= 0:
+            raise TimeoutError("DNS setup exceeded the call deadline")
+        broker.begin_call(remaining)
+        try:
+            yield broker.environment(path, base=base)
+        finally:
+            metadata["dns_resolutions"] = list(broker.traces)
+            metadata["native_dns_binding"] = binding
diff --git a/harness/web_fetch/network_preflight.py b/harness/web_fetch/network_preflight.py
index abd87129d..ec9206672 100644
--- a/harness/web_fetch/network_preflight.py
+++ b/harness/web_fetch/network_preflight.py
@@ -14,32 +14,74 @@ def inspect(host):
         try:
             addresses = sorted({item[4][0] for item in resolver(host, 443, type=socket.SOCK_STREAM)})
         except OSError as error:
-            return {"host": host, "addresses": [], "dns_error": type(error).__name__, "synthetic": False}
-        synthetic = any(ipaddress.ip_address(address).version == 4 and
-                        ipaddress.ip_address(address) in _FAKE_IP_RANGE for address in addresses)
-        return {"host": host, "addresses": addresses, "synthetic": synthetic}
+            return {"host": host, "addresses": [], "dns_error": type(error).__name__,
+                    "synthetic": False, "non_public": False}
+        parsed = [ipaddress.ip_address(address) for address in addresses]
+        synthetic = any(address.version == 4 and address in _FAKE_IP_RANGE
+                        for address in parsed)
+        non_public = any(not address.is_global for address in parsed)
+        return {"host": host, "addresses": addresses, "synthetic": synthetic,
+                "non_public": non_public}
     with ThreadPoolExecutor(max_workers=4) as pool:
         rows = list(pool.map(inspect, hosts))
-    return {"schema_version": 1, "hosts": rows, "usable_for_guarded_local_comparison": not any(row["synthetic"] for row in rows)}
+    return {
+        "schema_version": 1,
+        "hosts": rows,
+        "usable_for_guarded_local_comparison": not any(
+            row["synthetic"] or row.get("non_public") or row.get("dns_error")
+            for row in rows
+        ),
+    }
 
 
-def require_usable_public_dns(audit):
-    bad = [row["host"] for row in audit["hosts"] if row["synthetic"]]
-    if bad:
-        raise ValueError("System DNS returned synthetic 198.18.0.0/15 addresses for: " + ", ".join(bad) +
+def require_usable_public_dns(audit, *, allow_partial_resolution_failures=False):
+    """Reject unsafe answers and environment-wide DNS failure."""
+    synthetic = [row["host"] for row in audit["hosts"] if row["synthetic"]]
+    if synthetic:
+        raise ValueError("System DNS returned synthetic 198.18.0.0/15 addresses for: " + ", ".join(synthetic) +
                          "; use a real-public-address DNS environment before comparison. Do not disable product safety guards.")
+    non_public = [row["host"] for row in audit["hosts"] if row.get("non_public")]
+    if non_public:
+        raise ValueError("DNS returned non-public addresses for public benchmark hosts: "
+                         + ", ".join(non_public)
+                         + "; use the declared public_doh environment before comparison. "
+                           "Do not disable product safety guards.")
+    unresolved = [row["host"] for row in audit["hosts"] if row.get("dns_error")]
+    resolved = [row["host"] for row in audit["hosts"] if not row.get("dns_error")]
+    if unresolved and (not allow_partial_resolution_failures or not resolved):
+        scope = "all declared public benchmark hosts" if not resolved else "public benchmark hosts"
+        raise ValueError("DNS resolution failed for " + scope + ": " + ", ".join(unresolved))
 
 
 def preflight_guarded_providers(providers, cases):
-    """Require one declared DNS environment for all supported native callers."""
+    """Require one declared DNS environment for every local comparison method."""
     from .network_dns import lookup_public_dns, validate_dns_mode
     native = {"openclaw_builtin", "deepseek_harness_builtin", "cowagent_builtin", "langchain_webbase", "moli_webfetch", "crawl4ai"}
-    selected = [provider for provider in providers if provider.type in native]
+    selected = [
+        provider for provider in providers
+        if provider.type in native or (
+            provider.type in {"headless_markdown", "headless_html"}
+            and provider.config.get("engine") != "kitesurf"
+        )
+    ]
+    isolated = [provider for provider in selected
+                if provider.config.get("network_policy") == "loopback_only"
+                and provider.config.get("allow_private_network") is True]
+    if isolated:
+        for case in cases:
+            host = urlsplit(case.url).hostname
+            try:
+                loopback = ipaddress.ip_address(host).is_loopback
+            except ValueError:
+                loopback = host == "localhost"
+            if not loopback:
+                raise ValueError("Isolated fixture runs require loopback task URLs")
+        selected = [provider for provider in selected if provider not in isolated]
     if not selected:
         return None
     modes = {validate_dns_mode(provider.config.get("dns_mode", "system")) for provider in selected}
     if len(modes) != 1:
-        raise ValueError("Selected native callers must declare the same dns_mode")
+        raise ValueError("Selected local methods must declare the same dns_mode")
     mode = modes.pop()
     if mode == "system":
         audit = inspect_system_dns([case.url for case in cases])
@@ -49,9 +91,14 @@ def resolve(host, port, **kwargs):
                      socket.SOCK_STREAM, 6, '', (address, port))
                     for address, family in lookup_public_dns(host, timeout=45)]
         audit = inspect_system_dns([case.url for case in cases], resolver=resolve)
-        failed = [row["host"] for row in audit["hosts"] if row.get("dns_error")]
-        if failed:
-            raise ValueError("Public DNS preflight failed for: " + ", ".join(failed))
     audit["dns_mode"] = mode
-    require_usable_public_dns(audit)
+    audit["unresolved_hosts"] = [
+        row["host"] for row in audit["hosts"] if row.get("dns_error")
+    ]
+    # ``usable_for_guarded_local_comparison`` keeps its original strict
+    # meaning: every declared host resolved only to public addresses.  Under
+    # either declared resolver, a partial lookup outage is left to the affected
+    # measured call. No successful lookup in a nonempty scope still indicates
+    # an unusable environment; unsafe answers always fail closed above.
+    require_usable_public_dns(audit, allow_partial_resolution_failures=True)
     return audit
diff --git a/harness/web_fetch/providers/base.py b/harness/web_fetch/providers/base.py
index 1a7c231f0..b7493fa04 100644
--- a/harness/web_fetch/providers/base.py
+++ b/harness/web_fetch/providers/base.py
@@ -1,11 +1,80 @@
 from __future__ import annotations
 
 from abc import ABC, abstractmethod
+import os
+import signal
+import subprocess
+import time
 from typing import Any
 
 from ..models import EvalCase, ProviderResult
 
 
+def terminate_owned_process_tree(process):
+    """Stop an owned POSIX session, including detached descendant groups.
+
+    If the process tree cannot be observed, leave the worker alive so the
+    caller can quarantine unresolved work instead of claiming it stopped.
+    """
+    if process is None or process.poll() is not None:
+        return True
+    if os.name != 'posix':
+        return False
+    try:
+        observed = subprocess.run(
+            ['ps', '-axo', 'pid=,ppid=,pgid='], capture_output=True,
+            text=True, check=True, timeout=.5,
+        )
+        rows = [tuple(map(int, line.split())) for line in observed.stdout.splitlines()]
+        if any(len(row) != 3 for row in rows):
+            return False
+    except (OSError, ValueError, subprocess.SubprocessError):
+        return False
+    parents = {pid: parent for pid, parent, _ in rows}
+    groups = {pid: group for pid, _, group in rows}
+    if groups.get(process.pid) != process.pid:
+        return process.poll() is not None
+    owned = {process.pid}
+    while True:
+        descendants = {pid for pid, parent in parents.items() if parent in owned}
+        expanded = owned | descendants
+        if expanded == owned:
+            break
+        owned = expanded
+    owned_groups = {groups[pid] for pid in owned}
+    if os.getpgrp() in owned_groups:
+        return False
+    # Descendants may call setsid (Playwright does this for Chromium). Stop
+    # their groups first, then the original worker, preserving its diagnostics.
+    for group in sorted(owned_groups, key=lambda value: value == process.pid):
+        try:
+            os.killpg(group, signal.SIGKILL)
+        except ProcessLookupError:
+            pass
+        except OSError:
+            return False
+    # SIGKILL delivery is asynchronous. Confirm the owned groups are quiescent
+    # before releasing the next call; zombies cannot perform physical work.
+    deadline = time.monotonic() + .5
+    while True:
+        try:
+            observed = subprocess.run(
+                ['ps', '-axo', 'pgid=,stat='], capture_output=True,
+                text=True, check=True, timeout=.5,
+            )
+            survivors = [parts for line in observed.stdout.splitlines()
+                         if len(parts := line.split()) == 2
+                         and int(parts[0]) in owned_groups
+                         and not parts[1].startswith('Z')]
+        except (OSError, ValueError, subprocess.SubprocessError):
+            return False
+        if not survivors:
+            return True
+        if time.monotonic() >= deadline:
+            return False
+        time.sleep(.01)
+
+
 class Provider(ABC):
     def __init__(self, name: str, config: dict[str, Any]):
         self.name = name
@@ -13,13 +82,26 @@ def __init__(self, name: str, config: dict[str, Any]):
         self.type = str(config.get("type", name))
 
     def check_native_call(self, case: EvalCase) -> None:
-        """The fixed native cohort permits no per-case assistance or extra routes."""
+        """Allow only shared, answer-free capabilities on fixed native calls."""
         if not self.config.get("uniform_native_parameters"):
             return
         if case.retrieval_hints:
-            raise ValueError("fixed native calls prohibit per-case retrieval hints")
-        if case.track not in {"web", "dynamic"} or case.task_kind not in {"body", "structure"}:
-            raise ValueError("fixed native calls support webpage body/structure only; auxiliary routes are prohibited")
+            if (
+                case.track != "dynamic"
+                or case.retrieval_hints != {"version": 3, "mode": "native"}
+            ):
+                raise ValueError("fixed native calls prohibit per-case retrieval hints")
+        supported = {
+            "web": {"body", "structure"},
+            "dynamic": {"body", "structure"},
+            "challenge": {"body", "structure"},
+            "risk_control": {"body", "structure"},
+            "document": {"body", "file"},
+            "image": {"body", "resource"},
+            "video": {"body", "resource"},
+        }
+        if case.task_kind not in supported.get(case.track, set()):
+            raise ValueError("fixed native calls do not support this declared task route")
 
     @property
     def min_interval_seconds(self) -> float:
diff --git a/harness/web_fetch/providers/cloudflare.py b/harness/web_fetch/providers/cloudflare.py
index 7be3b0861..9dbccd2d1 100644
--- a/harness/web_fetch/providers/cloudflare.py
+++ b/harness/web_fetch/providers/cloudflare.py
@@ -11,7 +11,7 @@
 from urllib.parse import urlencode, urljoin, urlsplit
 
 from ..models import EvalCase, ProviderResult
-from ..retrieval_hints import plan_for_case, native_default_case
+from ..retrieval_hints import native_contract_for_case, native_default_case, plan_for_case
 from ..safety import validate_http_url
 from .base import Provider
 from .http_client import HttpOnlyRedirectHandler, HttpResponse, inner_timeout_budget, request
@@ -319,13 +319,17 @@ def fetch_html(self, case: EvalCase, html: str, timeout: float) -> ProviderResul
     def _fetch_payload(self, case: EvalCase, timeout: float, request_body: dict) -> ProviderResult:
         account_id = str(self.config.get("account_id", ""))
         http_timeout = inner_timeout_budget(timeout, native_default=bool(self.config.get("uniform_native_parameters")))
-        if case.task_kind == "resource" and case.track in {"image", "video"}:
+        if (
+            case.task_kind == "resource"
+            and case.track in {"image", "video"}
+            and self.config.get("page_output") != "native_markdown"
+        ):
             return self._fetch_media_resources(
                 case,
                 account_id=account_id,
                 http_timeout=http_timeout,
             )
-        if _uses_direct_document_route(case):
+        if _uses_direct_document_route(case) and self.config.get("browser") != "kitesurf":
             return self._fetch_direct_document(
                 case,
                 account_id=account_id,
@@ -348,12 +352,16 @@ def _fetch_payload(self, case: EvalCase, timeout: float, request_body: dict) ->
             request_body.get("gotoOptions", {}).pop("timeout", None)
             request_body.pop("actionTimeout", None)
         wait_metadata = None
+        plan = None
+        native_contract = None
         if case.track == "dynamic" and not native_default_case(case) and "url" in request_body:
             try:
                 if not math.isfinite(timeout) or timeout <= 0:
                     raise ValueError
                 plan = plan_for_case(case)
-                assert plan is not None
+                native_contract = native_contract_for_case(case)
+                if plan is None and native_contract is not None:
+                    plan = native_contract.completion_plan(service_timeout_ms)
             except (KeyError, TypeError, ValueError):
                 return ProviderResult(
                     False,
@@ -362,6 +370,7 @@ def _fetch_payload(self, case: EvalCase, timeout: float, request_body: dict) ->
                     error_message="invalid dynamic retrieval_hints v1",
                 )
 
+        if plan is not None:
             # The Markdown endpoint exposes waitForSelector, but no selector-count
             # or arbitrary-function wait. Use only independently declared,
             # answer-free readiness signals and disclose unsupported semantics.
@@ -380,9 +389,10 @@ def _fetch_payload(self, case: EvalCase, timeout: float, request_body: dict) ->
                 )
             request_body["gotoOptions"] = {
                 "waitUntil": wait_until,
-                "timeout": effective_timeout_ms,
             }
-            request_body["actionTimeout"] = effective_timeout_ms
+            if not self.config.get("uniform_native_parameters"):
+                request_body["gotoOptions"]["timeout"] = effective_timeout_ms
+                request_body["actionTimeout"] = effective_timeout_ms
             # Quick Actions documents these as independent readiness timers, not
             # an ordered selector-then-delay chain. Supplying both can let the
             # shorter timer win, so choose the strongest single native signal.
@@ -390,13 +400,15 @@ def _fetch_payload(self, case: EvalCase, timeout: float, request_body: dict) ->
                 # The endpoint cannot target a child browsing context. For this
                 # route a predeclared delay is stronger than the outer iframe,
                 # which is normally present before its child content is ready.
-                request_body["waitForTimeout"] = plan.delay_ms
-                strategy = "predeclared_delay"
+                if plan.delay_ms:
+                    request_body["waitForTimeout"] = plan.delay_ms
+                    strategy = "predeclared_delay"
+                else:
+                    strategy = "native_completion_unsupported"
             else:
-                request_body["waitForSelector"] = {
-                    "selector": plan.selector,
-                    "timeout": effective_timeout_ms,
-                }
+                request_body["waitForSelector"] = {"selector": plan.selector}
+                if not self.config.get("uniform_native_parameters"):
+                    request_body["waitForSelector"]["timeout"] = effective_timeout_ms
                 strategy = "selector"
             count_enforced = plan.frame_selector is None and plan.minimum_count == 1
             exact = count_enforced and plan.delay_ms == 0
@@ -405,6 +417,8 @@ def _fetch_payload(self, case: EvalCase, timeout: float, request_body: dict) ->
                 unsupported.extend(["child_frame_selector", "selector"])
             if plan.minimum_count != 1:
                 unsupported.append("minimum_count")
+            if plan.minimum_text_fragments:
+                unsupported.append("minimum_text_fragments")
             if plan.delay_ms and not plan.frame_selector:
                 unsupported.append("post_selector_delay")
             route = "browser_rendering_markdown_dynamic"
@@ -417,10 +431,19 @@ def _fetch_payload(self, case: EvalCase, timeout: float, request_body: dict) ->
                 "completion_support": "exact" if exact else "approximate",
                 "unsupported": unsupported,
                 "delay_ms": plan.delay_ms,
-                "timeout_ms": effective_timeout_ms,
+                "timeout_ms": (
+                    None if self.config.get("uniform_native_parameters") else effective_timeout_ms
+                ),
                 "client_http_timeout_ms": int(http_timeout * 1000),
                 "wait_until": wait_until,
             }
+        if native_contract is not None and native_contract.include_subdocuments:
+            wait_metadata = dict(wait_metadata or {})
+            wait_metadata["subdocuments"] = {
+                "requested": True,
+                "support": "unsupported",
+                "harness_content_assembly": False,
+            }
         response = request(
             endpoint + ("?" + query if query else ""),
             method="POST",
@@ -457,7 +480,7 @@ def _fetch_payload(self, case: EvalCase, timeout: float, request_body: dict) ->
             # Task scoring, not request classification, decides its usefulness.
             content=content if envelope_success else "",
             status_code=response.status,
-            final_url=meta.get("finalUrl") or case.url,
+            final_url=meta.get("finalUrl"),
             title=meta.get("title"),
             error_type=error_type,
             error_message=error_message,
@@ -504,7 +527,8 @@ def _fetch_media_resources(
                   ["video", "video source", "audio", "audio source", "iframe", "a[href]"])
         )
         response = request(
-            f"https://api.cloudflare.com/client/v4/accounts/{account_id}/browser-rendering/scrape",
+            f"https://api.cloudflare.com/client/v4/accounts/{account_id}/browser-rendering/scrape"
+            + ("?" + urlencode({"browser": self.config["browser"]}) if self.config.get("browser") else ""),
             method="POST",
             timeout=http_timeout,
             max_bytes=int(self.config.get("max_bytes", 20_000_000)),
@@ -555,6 +579,9 @@ def _fetch_media_resources(
                 "raw_response_sha256": hashlib.sha256(response.body).hexdigest(),
                 "raw_response_bytes": len(response.body),
                 "route": "browser_rendering_scrape_resources",
+                "browser": self.config.get("browser"),
+                "endpoint_route": "/browser-rendering/scrape" + ("?" + urlencode({"browser": self.config["browser"]}) if self.config.get("browser") else ""),
+                "adapter_sha256": hashlib.sha256(Path(__file__).read_bytes()).hexdigest(),
                 "request_method": "POST",
                 "request_summary": {
                     "selectors": selectors,
diff --git a/harness/web_fetch/providers/headless.py b/harness/web_fetch/providers/headless.py
index 4b52bb3c2..89b502ffe 100644
--- a/harness/web_fetch/providers/headless.py
+++ b/harness/web_fetch/providers/headless.py
@@ -2,24 +2,27 @@
 from __future__ import annotations
 
 import base64
+from contextlib import contextmanager
+import socket
 import hashlib
 import importlib.util
 import json
 import math
 import os
 import shutil
-import signal
 import subprocess
 import sys
 import tempfile
+import threading
 import time
 from pathlib import Path
+from urllib.parse import urlsplit
 
 from ..markdown import converter_package, require_converter
 from ..models import EvalCase, ProviderResult
-from ..retrieval_hints import plan_for_case
+from ..retrieval_hints import native_contract_for_case, plan_for_case
 from ..safety import validate_http_url
-from .base import Provider
+from .base import Provider, terminate_owned_process_tree
 from .runtime_identity import require_expected_provider_versions
 
 ENGINES = ('kitesurf', 'lightpanda', 'obscura', 'moli', 'chromium')
@@ -30,9 +33,9 @@
     '(allow network-outbound (remote ip "localhost:*"))'
 )
 HEADLESS_CONVERSION = (
-    'Native Markdown for Kitesurf, Lightpanda, Obscura and Moli; direct '
-    'Moli documents/media use automatic raw output; Chromium '
-    'whole-DOM HTML via node-html-markdown 2.0.0'
+    'Native Markdown for page, embedded-document and webpage-media tasks when the '
+    'browser supplies it; task-native browser bytes for files; Chromium DOM HTML '
+    'uses node-html-markdown 2.0.0 for every page deliverable'
 )
 
 
@@ -68,8 +71,6 @@ def _cli_completion_arguments(engine, plan):
                 '--delay-ms' if engine == 'moli' else '--wait-ms',
                 str(plan['delay_ms']),
             ]
-        if engine == 'moli' and plan.get('frame_selector'):
-            arguments.append('--with-frames')
         return arguments
     if engine == 'obscura':
         # Obscura can wait for one top-level selector but cannot express a
@@ -97,7 +98,9 @@ def completion_metadata(engine, plan, output_mode):
             'minimum_count_enforced': False,
             'unsupported': ['selector', 'minimum_count', 'post_completion_delay'],
         }
-    elif engine in {'moli', 'lightpanda', 'chromium'}:
+    elif engine in {'moli', 'chromium'} or (
+        engine == 'lightpanda' and plan['wait_kind'] == 'selector'
+    ):
         strategy = (
             'frame_selector_count_script'
             if plan.get('frame_selector')
@@ -111,10 +114,26 @@ def completion_metadata(engine, plan, output_mode):
             'minimum_count_enforced': True,
             'unsupported': [],
         }
-        if engine in {'lightpanda', 'chromium'} and plan.get('frame_selector'):
+        if engine == 'chromium' and plan.get('frame_selector'):
             # These paths can wait on same-origin child content, but their
             # existing Markdown/outerHTML contract does not serialize it.
             metadata['output_unsupported'] = ['child_frame_serialization']
+    elif engine == 'lightpanda':
+        # Lightpanda 1.0.0 accepts --wait-script but does not enforce the
+        # predicate: even `() => false` returns a successful response
+        # immediately.  Keep using the official flag so the attempted route is
+        # reproducible, but do not describe count, frame or text-completeness
+        # predicates as an exact request boundary.
+        metadata = {
+            'strategy': 'native_script_not_enforced',
+            'completion_support': 'unsupported',
+            'minimum_count_enforced': False,
+            'unsupported': [
+                'script_enforcement', 'minimum_count', 'minimum_text_fragments',
+            ],
+        }
+        if plan.get('frame_selector'):
+            metadata['unsupported'].append('child_frame_selector')
     elif engine == 'obscura':
         frame = bool(plan.get('frame_selector'))
         # The CLI only warns when its selector poll expires and still exits
@@ -143,11 +162,32 @@ def completion_metadata(engine, plan, output_mode):
         'selector': plan['selector'],
         'frame_selector': plan.get('frame_selector'),
         'minimum_count': plan['minimum_count'],
+        'minimum_text_fragments': plan.get('minimum_text_fragments', 0),
         'timeout_ms': plan['timeout_ms'],
         'delay_ms': plan['delay_ms'],
     }
 
 
+def _native_script_bytes(metadata):
+    if 'script_source' in metadata:
+        if 'script_path' in metadata or not isinstance(metadata['script_source'], str):
+            raise ValueError('native Markdown script source is ambiguous or invalid')
+        source = metadata['script_source'].encode('utf-8')
+    else:
+        source = Path(metadata['script_path']).read_bytes()
+    if hashlib.sha256(source).hexdigest() != metadata['script_sha256']:
+        raise ValueError('native Markdown script hash mismatch')
+    return source
+
+
+def _worker_native_metadata(metadata):
+    if not metadata or metadata.get('format') != 'obscura_eval':
+        return metadata
+    source = _native_script_bytes(metadata)
+    return {**{key: value for key, value in metadata.items() if key != 'script_path'},
+            'script_source': source.decode('utf-8')}
+
+
 def cli_command(
     engine,
     binary,
@@ -159,11 +199,60 @@ def cli_command(
     allow_private_network=False,
     ca_cert=None,
     http_proxy=None,
+    native_metadata=None,
+    track=None,
+    detail_links=False,
+    include_subdocuments=False,
 ):
+    if native_metadata:
+        if output_mode != 'markdown':
+            raise ValueError('native metadata requires native Markdown completion')
+        if engine == 'lightpanda' and native_metadata.get('format') == 'lightpanda_json':
+            return cli_command(
+                engine, binary, url, timeout, output_mode,
+                wait_until=wait_until,
+                retrieval_plan=retrieval_plan,
+                allow_private_network=allow_private_network,
+                ca_cert=ca_cert,
+                http_proxy=http_proxy,
+                track=track,
+                detail_links=detail_links,
+                include_subdocuments=include_subdocuments,
+            ) + ['--json']
+        if retrieval_plan:
+            raise ValueError('native metadata requires native Markdown completion')
+        if engine == 'obscura' and native_metadata.get('format') == 'obscura_eval':
+            source = _native_script_bytes(native_metadata)
+            expression = ('JSON.stringify({content:(' + source.decode('utf-8')
+                          + '),final_url:location.href,title:document.title})')
+            prefix = [binary, '--allow-private-network'] if allow_private_network else [binary]
+            if http_proxy:
+                prefix += ['--proxy', http_proxy]
+            return prefix + ['fetch', '--eval', expression, '--timeout',
+                             str(math.ceil(timeout)), '--quiet', url]
+        raise ValueError('unsupported native metadata route')
     ms = str(max(1, math.ceil(timeout * 1000)))
+    if output_mode in {'resource', 'media_metadata', 'document_page'}:
+        from ..task_outputs import MEDIA_METADATA_EXPRESSION, DOCUMENT_PAGE_EXPRESSION, resource_expression
+        expression = resource_expression(track, detail_links) if output_mode == 'resource' else {'media_metadata': MEDIA_METADATA_EXPRESSION, 'document_page': DOCUMENT_PAGE_EXPRESSION}[output_mode]
+        if engine == 'obscura':
+            command = [binary, 'fetch', '--eval', expression, '--timeout', str(math.ceil(timeout)), '--quiet']
+            if allow_private_network:
+                command.append('--allow-private-network')
+            if http_proxy:
+                command += ['--proxy', http_proxy]
+            return command + [url]
+        raise ValueError('Rendered projection requires a native CDP or eval interface')
     if output_mode not in {'html', 'markdown', 'document', 'file'}:
         raise ValueError('Unsupported browser output mode: ' + output_mode)
     if output_mode in {'document', 'file'}:
+        if engine == 'obscura':
+            command = [binary, 'fetch', '--dump', 'original']
+            if allow_private_network:
+                command.append('--allow-private-network')
+            if http_proxy:
+                command += ['--proxy', http_proxy]
+            return command + ['--timeout', str(math.ceil(timeout)), '--quiet', url]
         if engine != 'moli':
             raise ValueError('Raw document auto-output is only supported by Moli')
         # All three measured Moli releases write direct raw responses such as
@@ -186,6 +275,10 @@ def cli_command(
             return prefix + ['fetch', '--dump', 'markdown', *(completion or []), '--timeout',
                     str(math.ceil(timeout)), '--quiet', url]
         common = [binary, 'fetch', '--dump', 'markdown']
+        if include_subdocuments and engine in {'moli', 'lightpanda'}:
+            common.append('--with-frames')
+            if engine == 'lightpanda':
+                common += ['--load-resources', 'iframe']
         if http_proxy:
             common += ['--http-proxy', http_proxy]
         common += completion or ['--wait-until', wait_until or 'done']
@@ -209,25 +302,94 @@ def cli_command(
 
 
 def output_mode_for_case(engine, provider_type, case):
-    """Choose the fastest version-supported route for the requested deliverable."""
-    document_url = case.url.casefold().split('?', 1)[0]
-    direct_document = (engine == 'moli' and case.track == 'document'
-                       and (document_url.endswith(('.pdf', '.docx'))
-                            or '/pdf/' in document_url))
-    if engine == 'moli' and case.task_kind == 'file':
+    """Choose one product-native route for each task family."""
+    if engine in ENGINES and case.task_kind == 'file':
         return 'file'
-    if direct_document:
-        return 'document'
+    if engine == 'moli' and case.track == 'document':
+        return 'markdown'
+    native_markdown = (
+        provider_type == 'headless_markdown'
+        and engine in {'lightpanda', 'obscura', 'kitesurf'}
+    )
+    if native_markdown and (
+        case.track == 'document'
+        or (case.task_kind == 'resource' and case.track in {'image', 'video'})
+        or (case.task_kind == 'body' and case.track == 'video')
+    ):
+        return 'markdown'
+    if engine == 'chromium' and (
+        case.track == 'document'
+        or (case.task_kind == 'resource' and case.track in {'image', 'video'})
+        or (case.task_kind == 'body' and case.track == 'video')
+    ):
+        return 'markdown'
+    # Document text must come from the selected browser content interface.
+    # Downloaded bytes must not be turned into readable text by the harness.
+    if case.track == 'document' and (urlsplit(case.url).path.casefold().endswith('.html') or urlsplit(case.url).path.endswith('/')):
+        return 'document_page'
+    if case.track == 'document':
+        return 'markdown' if provider_type == 'headless_markdown' else 'html'
+    if case.task_kind == 'resource' and case.track in {'image', 'video'}:
+        return 'resource'
+    if case.task_kind == 'body' and case.track == 'video':
+        return 'markdown' if engine == 'moli' else 'media_metadata'
     return 'markdown' if provider_type == 'headless_markdown' else 'html'
 
 
 class HeadlessProvider(Provider):
+    def __init__(self, name, config):
+        super().__init__(name, config)
+        self._process_lock = threading.Lock()
+        self._active_process = None
+        self._cancel_requested = False
+
+    def begin_call(self):
+        with self._process_lock:
+            self._active_process = None
+            self._cancel_requested = False
+
+    def cancel(self):
+        with self._process_lock:
+            self._cancel_requested = True
+            terminate_owned_process_tree(self._active_process)
+
+    @property
+    def cancellation_cleanup_seconds(self):
+        # Remote and resource-container calls retain their own boundaries.
+        local = (self.config.get('engine') != 'kitesurf'
+                 and self.config.get('resource_sample_interval_ms') is None)
+        return 1.0 if local else 0.0
+
     def validate(self):
         errors = []
         engine = self.config.get('engine')
         if engine not in ENGINES:
             errors.append('engine')
+        native_metadata = self.config.get('native_metadata')
+        if native_metadata is not None:
+            try:
+                if not isinstance(native_metadata, dict):
+                    raise ValueError('native metadata must be an object')
+                cli_command(engine, self.config.get('binary', 'browser'),
+                            'https://example.com/', 1, 'markdown',
+                            native_metadata=native_metadata)
+                if self.type != 'headless_markdown':
+                    raise ValueError('native metadata requires headless_markdown')
+            except (KeyError, OSError, ValueError) as error:
+                errors.append('native_metadata:' + str(error))
         resource_interval = self.config.get('resource_sample_interval_ms')
+        from ..network_dns import validate_dns_mode, validate_native_dns_library
+        try:
+            dns_mode = validate_dns_mode(self.config.get('dns_mode', 'system'))
+            if engine == 'kitesurf' and dns_mode != 'system':
+                errors.append('hosted Kitesurf owns its DNS environment')
+            elif dns_mode == 'public_doh':
+                if resource_interval is not None:
+                    errors.append('public_doh is unavailable inside resource containers')
+                elif engine != 'chromium':
+                    validate_native_dns_library(self.config.get('native_dns_library'))
+        except ValueError as error:
+            errors.append(str(error))
         if resource_interval is not None:
             if engine == 'kitesurf' and self.type == 'headless_markdown':
                 errors.extend(name for name in ('api_token', 'account_id')
@@ -355,6 +517,7 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
             raise ValueError('timeout must be positive and finite')
         try:
             retrieval_plan = plan_for_case(case)
+            native_contract = native_contract_for_case(case)
         except ValueError as error:
             return ProviderResult(False, '', error_type='configuration',
                                   error_message=str(error))
@@ -364,23 +527,44 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
         binary = (self.config.get('resource_binary') if resource_interval is not None else
                   getattr(self, '_resolved_binary', None) or _resolve_binary(
                       engine, self.config.get('binary')))
-        cli_wait = retrieval_plan.wait_until if retrieval_plan else 'done'
-        wait_until = ('automatic raw response' if output_mode == 'file'
+        completion_plan = retrieval_plan or (
+            native_contract.completion_plan(max(1, math.ceil(timeout * 1000)))
+            if native_contract else None
+        )
+        cli_wait = completion_plan.wait_until if completion_plan else 'done'
+        wait_until = ('browser response bytes or completed native download' if output_mode in {'file','document'} and engine == 'chromium'
+                      else 'navigation response bytes' if output_mode in {'file','document'} and engine in {'lightpanda','kitesurf'}
+                      else 'automatic raw response' if output_mode == 'file'
                       else 'automatic raw response or serialized HTML' if output_mode == 'document'
                       else 'networkidle2' if engine == 'kitesurf' and output_mode == 'markdown'
                       else cli_wait if output_mode == 'markdown' and engine in {'moli','lightpanda'}
                       else 'load + adaptive settle' if output_mode == 'markdown' and engine == 'obscura'
-                      else 'domcontentloaded')
-        extractor = ('moli_auto_raw' if output_mode == 'file'
-                     else 'moli_auto_raw+document_text' if output_mode == 'document'
+                      else 'load + adaptive settle' if engine == 'obscura' and output_mode in {'resource','media_metadata'}
+                      else self.config.get('cdp_wait_until', 'load') if engine == 'kitesurf'
+                      else 'load')
+        extractor = ('browser_native_response_or_download' if output_mode == 'file' and engine == 'chromium'
+                     else 'kitesurf_cdp_response' if output_mode == 'file' and engine == 'kitesurf'
+                     else 'lightpanda_cdp_response' if output_mode == 'file' and engine == 'lightpanda'
+                     else 'obscura_original_response' if output_mode == 'file' and engine == 'obscura'
+                     else 'moli_cdp_response' if output_mode == 'file'
+                     else 'browser_native_response_or_download+document_text' if output_mode == 'document' and engine == 'chromium'
+                     else 'kitesurf_cdp_response+document_text' if output_mode == 'document' and engine == 'kitesurf'
+                     else 'lightpanda_cdp_response+document_text' if output_mode == 'document' and engine == 'lightpanda'
+                     else 'obscura_original_response+document_text' if output_mode == 'document' and engine == 'obscura'
+                     else 'moli_cdp_response+document_text' if output_mode == 'document'
                      else 'cloudflare_native_markdown' if engine == 'kitesurf' and output_mode == 'markdown'
                      else f'{engine}_native_markdown' if output_mode == 'markdown' and engine != 'chromium'
+                     else 'rendered_dom_resources' if output_mode == 'resource'
+                     else 'rendered_body_and_standard_media_metadata' if output_mode == 'media_metadata'
+                     else 'browser_runtime_document_text' if output_mode == 'document_page'
                      else 'node-html-markdown')
         output_contract = ('original_file_bytes' if output_mode == 'file' else
-                           'readable_document_text' if output_mode == 'document' else
-                           'markdown')
+                           'readable_document_text' if output_mode in {'document','document_page'} else
+                           'structured_resource_urls' if output_mode == 'resource' else
+                           'readable_media_metadata' if output_mode == 'media_metadata' else 'markdown')
         metadata = {'engine': engine, 'wait_until': wait_until,
                     'extractor': extractor, 'output_contract': output_contract,
+                    'dns_mode': self.config.get('dns_mode', 'system'),
                     'session': 'fresh per call',
                     'network_policy': self.config.get('network_policy', 'unrestricted'),
                     'deployment': ('Cloudflare Browser Run from isolated client container'
@@ -389,18 +573,55 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
                                    if resource_interval is not None
                                    else 'public cloud CDP' if engine == 'kitesurf'
                                    else 'local process')}
-        normalized_plan = retrieval_plan.worker_dict() if retrieval_plan else None
+        if output_mode in {'resource', 'media_metadata', 'document_page'}:
+            from ..task_outputs import MEDIA_METADATA_EXPRESSION, DOCUMENT_PAGE_EXPRESSION, resource_expression, resource_detail_links
+            projection = resource_expression(case.track, resource_detail_links(case)) if output_mode == 'resource' else {'media_metadata': MEDIA_METADATA_EXPRESSION, 'document_page': DOCUMENT_PAGE_EXPRESSION}[output_mode]
+            metadata['output_projection_sha256'] = hashlib.sha256(projection.encode('utf-8')).hexdigest()
+        normalized_plan = completion_plan.worker_dict() if completion_plan else None
+        if normalized_plan is not None and native_contract is not None:
+            normalized_plan['include_subdocuments'] = native_contract.include_subdocuments
+        subdocument_tracks = self.config.get('include_subdocuments_by_track', {})
+        if (not isinstance(subdocument_tracks, dict)
+                or any(not isinstance(value, bool) for value in subdocument_tracks.values())):
+            raise ValueError('include_subdocuments_by_track must map tracks to booleans')
+        include_subdocuments = bool(
+            (native_contract and native_contract.include_subdocuments)
+            or subdocument_tracks.get(case.track, False)
+        )
         if normalized_plan and engine != 'kitesurf':
             metadata['completion'] = completion_metadata(engine, normalized_plan, output_mode)
             metadata['completion']['effective_route_timeout_ms'] = round(
                 min(timeout, retrieval_plan.timeout_ms / 1000) * 1000
+                if retrieval_plan else timeout * 1000
+            )
+        if include_subdocuments:
+            interface = (
+                '--load-resources iframe + --with-frames'
+                if engine == 'lightpanda' and output_mode == 'markdown'
+                else '--with-frames'
+                if engine == 'moli' and output_mode == 'markdown'
+                else None
             )
+            metadata['subdocuments'] = {
+                'requested': True,
+                'support': (
+                    'native' if engine == 'moli' and interface
+                    else 'native_markdown_omits_child_document'
+                    if engine == 'lightpanda' and interface
+                    else 'unsupported'
+                ),
+                'interface': interface,
+                'harness_content_assembly': False,
+            }
         if engine == 'kitesurf' and output_mode == 'markdown' and resource_interval is None:
             from .cloudflare import CloudflareMarkdownProvider
             cloudflare = CloudflareMarkdownProvider(self.name, {
                 'account_id': self.config['account_id'], 'api_token': self.config['api_token'],
                 'browser': 'kitesurf', 'wait_until': self.config.get('wait_until', 'networkidle2'),
                 'max_bytes': self.config.get('max_bytes', 20_000_000),
+                'page_output': 'native_markdown',
+                'uniform_native_parameters': self.config.get('uniform_native_parameters', False),
+                'endpoint': 'wss://api.cloudflare.com/client/v4/accounts/' + self.config['account_id'] + '/browser-run/devtools/browser?browser=kitesurf',
             })
             result = cloudflare.fetch(case, timeout)
             result.metadata = {**metadata, **result.metadata,
@@ -410,31 +631,49 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
             identity = self.implementation_identity()
             metadata['binary_sha256'] = identity['binary_sha256']
             if identity['reported_version']:
+                metadata['reported_version'] = identity['reported_version']
                 metadata['browser_version'] = identity['reported_version']
             if identity['version_probe_error']:
                 metadata['browser_version_probe_error'] = identity['version_probe_error']
         request = {'engine': engine, 'binary': binary, 'url': case.url,
+                   'case_id': case.id,
                    'timeout': timeout, 'output_mode': output_mode,
                    'task_kind': case.task_kind,
+                   'resource_detail_links': resource_detail_links(case) if output_mode == 'resource' else False,
                    'browser_args': ['--no-sandbox']
                    if resource_interval is not None and engine == 'chromium' else [],
                    'wait_until': retrieval_plan.wait_until if retrieval_plan else None,
                    'track': case.track,
                    'retrieval_plan': normalized_plan,
+                   'include_subdocuments': include_subdocuments,
+                   'retrieval_hints': case.retrieval_hints,
                    'allow_private_network': bool(self.config.get('allow_private_network')),
+                   'block_private_networks': bool(self.config.get('block_private_networks', False)),
+                   'log_level': self.config.get('log_level'),
+                   'max_diagnostic_bytes': self.config.get('max_diagnostic_bytes', 100_000_000),
+                   'max_original_file_bytes': self.config.get('max_original_file_bytes'),
+                   'native_metadata': _worker_native_metadata(self.config.get('native_metadata'))
+                   if output_mode == 'markdown' else None,
                    'ca_cert': self.config.get('ca_cert'),
                    'http_proxy': self.config.get('http_proxy'),
+                   'dns_mode': self.config.get('dns_mode', 'system'),
+                   'native_dns_library': self.config.get('native_dns_library'),
                    'network_policy': self.config.get('network_policy', 'unrestricted'),
                    'endpoint': self.config.get('endpoint',
                    'wss://kitesurf.cloudflare.app/devtools/browser')}
         if engine == 'kitesurf':
+            cdp_wait = self.config.get('cdp_wait_until', 'load')
+            if cdp_wait not in {'load', 'domcontentloaded', 'networkidle', 'commit'}:
+                raise ValueError('Kitesurf cdp_wait_until must be a supported CDP completion event')
+            metadata.update(browser='kitesurf', endpoint_route='/browser-run/devtools/browser?browser=kitesurf')
             request.update({
-                'remote_markdown_api': True,
+                'remote_markdown_api': output_mode == 'markdown',
                 'account_id': self.config['account_id'],
                 'api_token': self.config['api_token'],
                 'browser': 'kitesurf',
-                'wait_until': self.config.get('wait_until', 'networkidle2'),
+                'wait_until': self.config.get('wait_until', 'networkidle2') if output_mode == 'markdown' else cdp_wait,
                 'max_bytes': self.config.get('max_bytes', 20_000_000),
+                'endpoint': 'wss://api.cloudflare.com/client/v4/accounts/' + self.config['account_id'] + '/browser-run/devtools/browser?browser=kitesurf',
             })
         if engine == 'chromium' or self.type == 'headless_html':
             configured_package = self.config.get('node_html_markdown_path')
@@ -442,6 +681,7 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
                                                  if resource_interval is None else configured_package)
         worker = Path(__file__).with_name('headless_worker.py')
         metadata['worker_sha256'] = hashlib.sha256(worker.read_bytes()).hexdigest()
+        metadata['execution_sha256'] = metadata['worker_sha256']
         if request['browser_args']:
             metadata['browser_launch_args'] = request['browser_args']
         limit = 40_000_000
@@ -491,42 +731,142 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
             metadata['rendered_html_sha256'] = hashlib.sha256(html.encode()).hexdigest()
         return ProviderResult(**result, metadata=metadata)
 
-    @staticmethod
-    def _run_local_worker(worker, request, timeout, limit):
+    def _run_local_worker(self, worker, request, timeout, limit):
         with tempfile.TemporaryFile() as stdout, tempfile.TemporaryFile() as stderr:
             command = [sys.executable, str(worker)]
             if request.get('network_policy') == 'loopback_only':
                 command = ['/usr/bin/sandbox-exec', '-p', LOOPBACK_SANDBOX_PROFILE, *command]
+            with self._process_lock:
+                if self._cancel_requested:
+                    raise TimeoutError('Isolated fetch cancelled before launch')
+            # Popen must not hold the lock needed by the deadline thread.
             process = subprocess.Popen(command, stdin=subprocess.PIPE,
                 stdout=stdout, stderr=stderr, start_new_session=True)
-            process.stdin.write(json.dumps(request).encode())
-            process.stdin.close()
-            deadline = time.monotonic() + timeout
+            with self._process_lock:
+                self._active_process = process
+                if self._cancel_requested:
+                    terminate_owned_process_tree(process)
             stopped = None
-            while process.poll() is None:
-                if stdout.tell() > limit or stderr.tell() > limit:
-                    stopped = 'output_too_large'
-                    break
-                if time.monotonic() >= deadline:
-                    stopped = 'timeout'
-                    break
-                try:
-                    process.wait(timeout=min(.05, max(.001, deadline-time.monotonic())))
-                except subprocess.TimeoutExpired:
-                    pass
-            if stopped:
+            try:
                 try:
-                    os.killpg(process.pid, signal.SIGKILL)
-                except ProcessLookupError:
-                    pass
-                except PermissionError:
-                    # Some managed runners forbid process-group signals while
-                    # permitting signals to a child created by this process.
-                    process.kill()
+                    process.stdin.write(json.dumps(request).encode())
+                    process.stdin.close()
+                except BrokenPipeError:
+                    with self._process_lock:
+                        if not self._cancel_requested:
+                            raise
+                deadline = time.monotonic() + timeout
+                while process.poll() is None:
+                    with self._process_lock:
+                        cancelled = self._cancel_requested
+                    if cancelled:
+                        stopped = 'timeout'
+                        break
+                    if stdout.tell() > limit or stderr.tell() > limit:
+                        stopped = 'output_too_large'
+                        break
+                    if time.monotonic() >= deadline:
+                        stopped = 'timeout'
+                        break
+                    try:
+                        process.wait(timeout=min(.05, max(.001, deadline-time.monotonic())))
+                    except subprocess.TimeoutExpired:
+                        pass
+                with self._process_lock:
+                    if self._cancel_requested:
+                        stopped = 'timeout'
+                if stopped:
+                    terminate_owned_process_tree(process)
+                    process.wait()
+                stdout_bytes = os.fstat(stdout.fileno()).st_size
+                stderr_bytes = os.fstat(stderr.fileno()).st_size
+                stdout.seek(0); raw = stdout.read(limit+1)
+                stderr.seek(0); diagnostic_raw = stderr.read(limit+1)
+                diagnostic = diagnostic_raw[:limit].decode('utf-8', 'replace')
+            finally:
+                terminate_owned_process_tree(process)
                 process.wait()
-            stdout_bytes = os.fstat(stdout.fileno()).st_size
-            stderr_bytes = os.fstat(stderr.fileno()).st_size
-            stdout.seek(0); raw = stdout.read(limit+1)
-            stderr.seek(0); diagnostic_raw = stderr.read(limit+1)
-            diagnostic = diagnostic_raw[:limit].decode('utf-8', 'replace')
+                if not process.stdin.closed:
+                    try:
+                        process.stdin.close()
+                    except BrokenPipeError:
+                        pass
+                with self._process_lock:
+                    if self._active_process is process:
+                        self._active_process = None
         return raw, diagnostic, stopped, process.returncode, stdout_bytes, stderr_bytes
+
+
+@contextmanager
+def native_cdp_browser(playwright, request, deadline, metadata=None):
+    """Own a fresh native CDP server within the caller's complete deadline."""
+    with socket.socket() as reservation:
+        reservation.bind(('127.0.0.1', 0))
+        port = reservation.getsockname()[1]
+    remaining = lambda: max(.001, deadline - time.monotonic())
+    command = [request['binary'], 'serve', '--host', '127.0.0.1', '--port', str(port)]
+    engine = request['engine']
+    if engine == 'lightpanda':
+        command += ['--http-timeout', str(max(1, math.ceil(remaining() * 1000)))]
+    elif engine == 'moli':
+        if request.get('block_private_networks'): command.append('--block-private-networks')
+        if request.get('log_level'): command += ['--log-level', request['log_level']]
+    elif engine == 'obscura':
+        command.append('--quiet')
+        if request.get('allow_private_network'):
+            command.append('--allow-private-network')
+    else:
+        raise ValueError('Unsupported native CDP server engine')
+    if engine == 'lightpanda' and request.get('output_mode') in {'resource', 'document_page'}:
+        command += ['--load-resources', 'iframe']
+    if request.get('http_proxy'):
+        command += ['--http-proxy' if engine in {'lightpanda', 'moli'} else '--proxy', request['http_proxy']]
+    if request.get('ca_cert') and engine in {'lightpanda', 'moli'}:
+        command += ['--ca-cert', str(request['ca_cert'])]
+    browser = None
+    with tempfile.TemporaryFile() as log:
+        environment = {**os.environ, 'SSL_CERT_FILE': str(request['ca_cert'])} if engine == 'obscura' and request.get('ca_cert') else None
+        from ..network_dns import native_process_dns_environment
+        with native_process_dns_environment(
+            request.get('dns_mode', 'system'),
+            request.get('native_dns_library'),
+            deadline,
+            metadata if metadata is not None else {},
+            environment,
+        ) as process_environment:
+            process = subprocess.Popen(
+                command, stdout=log, stderr=log, env=process_environment
+            )
+            try:
+                while True:
+                    if process.poll() is not None:
+                        log.seek(0)
+                        raise RuntimeError(log.read().decode('utf-8', 'replace')[:4000])
+                    if time.monotonic() >= deadline:
+                        raise TimeoutError('Native CDP server startup exceeded the call deadline')
+                    try:
+                        with socket.create_connection(('127.0.0.1', port), timeout=min(.1, remaining())):
+                            break
+                    except OSError:
+                        time.sleep(min(.02, remaining()))
+                browser = playwright.chromium.connect_over_cdp(
+                    'http://127.0.0.1:' + str(port), timeout=remaining() * 1000)
+                yield browser
+            finally:
+                try:
+                    if browser is not None:
+                        browser.close()
+                finally:
+                    if process.poll() is None:
+                        process.terminate()
+                        try:
+                            process.wait(timeout=1)
+                        except subprocess.TimeoutExpired:
+                            process.kill()
+                            process.wait(timeout=1)
+                    if engine == 'moli' and metadata is not None:
+                        log.seek(0)
+                        raw_log = log.read(int(request.get('max_diagnostic_bytes', 100_000_000))+1)
+                        metadata.update(_diagnostic_log_b64=base64.b64encode(raw_log).decode('ascii'),
+                            diagnostic_log_sha256=hashlib.sha256(raw_log).hexdigest(), diagnostic_log_bytes=len(raw_log),
+                            diagnostic_log_process_completed=True)
diff --git a/harness/web_fetch/providers/headless_worker.py b/harness/web_fetch/providers/headless_worker.py
index 0ac874ded..63f5c2a26 100644
--- a/harness/web_fetch/providers/headless_worker.py
+++ b/harness/web_fetch/providers/headless_worker.py
@@ -3,30 +3,210 @@
 import hashlib
 import json
 import os
+import re
 import shutil
 import subprocess
 import sys
 import time
+import tempfile
 from importlib.metadata import version
 from pathlib import Path
 
+# Direct script execution prepends this directory to sys.path.  Leaving it
+# there makes providers/http.py shadow Python's stdlib http package when the
+# contract verifier imports urllib inside the isolated worker.
+_WORKER_DIRECTORY = Path(__file__).resolve().parent
+if sys.path and Path(sys.path[0]).resolve() == _WORKER_DIRECTORY:
+    sys.path.pop(0)
 sys.path.insert(0, str(Path(__file__).resolve().parents[3]))
-from harness.web_fetch.document_text import extract_document_text
 from harness.web_fetch.markdown import CONVERTER, converter_command, require_converter
-from harness.web_fetch.providers.headless import cli_command, completion_metadata
+from harness.web_fetch.document_text import extract_document_text
+from harness.web_fetch.providers.headless import cli_command, completion_metadata, native_cdp_browser
 from harness.web_fetch.safety import validate_http_url
 
 
+def browser_error_type(error):
+    """Normalize known main-navigation failures without retrying security errors."""
+    if 'Timeout' in type(error).__name__:
+        return 'timeout'
+    match = re.match(r'^(?:Page|Frame)\.goto: net::(ERR_[A-Z_]+)\b', str(error))
+    if match:
+        code = match.group(1)
+        if code in {'ERR_NAME_NOT_RESOLVED', 'ERR_NAME_RESOLUTION_FAILED', 'ERR_DNS_TIMED_OUT'}:
+            return 'dns'
+        if code in {'ERR_TIMED_OUT', 'ERR_CONNECTION_TIMED_OUT'}:
+            return 'timeout'
+        if code in {
+            'ERR_CONNECTION_CLOSED', 'ERR_CONNECTION_RESET', 'ERR_CONNECTION_REFUSED',
+            'ERR_CONNECTION_ABORTED', 'ERR_ADDRESS_UNREACHABLE', 'ERR_INTERNET_DISCONNECTED',
+            'ERR_NETWORK_CHANGED', 'ERR_EMPTY_RESPONSE',
+        }:
+            return 'network'
+    return 'browser_error'
+
+
 def require_normalized_retrieval_plan(request):
-    """Enforce presence at this process boundary; the runner owns validation."""
+    """Keep the declared family while validating explicit native completion."""
+    from harness.web_fetch.retrieval_hints import native_contract_for_case, parse_retrieval_hints
     plan = request.get('retrieval_plan')
-    if request.get('track') == 'dynamic' and not plan:
-        raise ValueError('dynamic tasks require a normalized retrieval_plan')
-    if request.get('track') not in {None, 'dynamic'} and plan:
+    track = request.get('track')
+    hints = request.get('retrieval_hints')
+    case_id = request.get('case_id')
+    if isinstance(hints, dict) and hints.get('contract'):
+        if not isinstance(case_id, str) or not case_id:
+            raise ValueError('named native retrieval contracts require case_id')
+    identifier = case_id if isinstance(case_id, str) and case_id else '<unknown>'
+    declared = parse_retrieval_hints(track, hints, identifier=identifier) if hints else None
+    native_contract = native_contract_for_case(
+        {**request, 'id': identifier}
+    ) if hints else None
+    if track == 'dynamic' and not plan:
+        if not hints or declared is not None:
+            raise ValueError('dynamic tasks require a normalized retrieval_plan or explicit native contract')
+    if declared is None and hints and plan and not (
+        native_contract is not None and native_contract.selector is not None
+    ):
+        raise ValueError('native completion cannot carry a retrieval_plan')
+    if track not in {None, 'dynamic'} and plan:
         raise ValueError('retrieval_plan is only valid for dynamic tasks')
     return plan
 
 
+def _native_browser_file(page, request, route_timeout, start, meta):
+    """Deliver bytes from this browser navigation or its native download."""
+    from playwright.sync_api import Error
+    downloads = []
+    page.on('download', lambda download: downloads.append(download))
+    response = None
+    remaining_ms = lambda: max(1, (route_timeout - (time.monotonic() - start)) * 1000)
+    meta['navigation_wait_until'] = 'commit'
+    try:
+        response = page.goto(request['url'], wait_until='commit', timeout=remaining_ms())
+    except Error as error:
+        if 'ERR_ABORTED' not in str(error) and 'Download is starting' not in str(error):
+            raise
+        if not downloads:
+            downloads.append(page.wait_for_event('download', timeout=remaining_ms()))
+    if downloads:
+        download = downloads[0]
+        if request.get('engine') == 'moli':
+            # This is a native attachment event, not an HTTP/scoring retry.
+            # Moli's CLI exposes raw attachments while its current CDP download
+            # completion event is incompatible with Playwright's file helper.
+            command = cli_command('moli', request['binary'], download.url,
+                remaining_ms()/1000, output_mode='file', ca_cert=request.get('ca_cert'),
+                http_proxy=request.get('http_proxy'))
+            if request.get('block_private_networks'): command.append('--block-private-networks')
+            from harness.web_fetch.network_dns import native_process_dns_environment
+            attachment_dns = {}
+            meta['native_attachment_dns'] = attachment_dns
+            with native_process_dns_environment(
+                request.get('dns_mode', 'system'), request.get('native_dns_library'),
+                start + route_timeout, attachment_dns,
+            ) as process_environment:
+                result = subprocess.run(command, capture_output=True,
+                    timeout=remaining_ms()/1000, env=process_environment)
+            if result.returncode: raise ValueError(result.stderr.decode('utf-8','replace'))
+            raw = result.stdout
+            meta.update(native_attachment_interface='moli_cli_raw_response',
+                        native_navigation_count=1, native_attachment_fetch_count=1,
+                        native_attachment_stderr=result.stderr.decode('utf-8','replace'))
+        else:
+            failure = download.failure()
+            if failure:
+                raise ValueError('Browser download failed: ' + failure)
+            raw = Path(download.path()).read_bytes()
+        final_url, status, mime = download.url, None, None
+        meta['native_file_route'] = 'moli_cli_attachment_response' if request.get('engine') == 'moli' else 'browser_download'
+    elif response is not None:
+        final_url, status = response.url, response.status
+        mime = response.headers.get('content-type')
+        meta.update(file_response_status=status, file_response_url=final_url)
+        raw = response.body()
+        meta['native_file_route'] = 'navigation_response_body'
+    else:
+        raise ValueError('Browser navigation exposed neither a response nor a download')
+    limit = request.get('max_original_file_bytes')
+    if limit is not None and len(raw) > limit:
+        meta.update(original_file_bytes=len(raw), original_file_byte_limit=limit)
+        return dict(ok=False, content='', html='', status_code=status, final_url=final_url,
+                    metadata=meta, error_type='output_too_large',
+                    error_message='Original file exceeds the configured byte budget')
+    meta.update(raw_stdout_sha256=hashlib.sha256(raw).hexdigest(),
+                raw_fetch_ms=round((time.monotonic() - start) * 1000, 2),
+                file_response_mime=mime)
+    ok = bool(raw) and (status is None or 200 <= status < 300)
+    if not ok:
+        meta['_raw_stdout_b64'] = base64.b64encode(raw).decode('ascii')
+    return dict(ok=ok, content='', html='', status_code=status, final_url=final_url,
+                metadata=meta, files_b64=[base64.b64encode(raw).decode('ascii')] if ok else [],
+                error_type=None if ok else 'http_error' if status is not None and status >= 400 else 'empty_response')
+
+
+def _projection_expression(output_mode, track, detail_links=False):
+    from harness.web_fetch.task_outputs import MEDIA_METADATA_EXPRESSION, DOCUMENT_PAGE_EXPRESSION, resource_expression
+    return resource_expression(track, detail_links) if output_mode == 'resource' else {'media_metadata': MEDIA_METADATA_EXPRESSION,
+            'document_page': DOCUMENT_PAGE_EXPRESSION}[output_mode]
+
+
+def _projection_text(content, output_mode, meta, deadline):
+    if output_mode != 'document_page':
+        return content
+    extract_start = time.monotonic()
+    envelope = json.loads(content)
+    if not isinstance(envelope, dict):
+        raise ValueError('Invalid document projection')
+    if envelope.get('source'):
+        validate_http_url(envelope['source'])
+        meta['embedded_document_url'] = envelope['source']
+    if envelope.get('kind') in {'text', 'page_text'}:
+        text = str(envelope.get('text') or '')
+        meta['document_extractor'] = 'pdfjs_runtime' if envelope['kind'] == 'text' else 'rendered_page_text'
+    else:
+        raise ValueError('Unknown document projection kind')
+    meta['document_extract_ms'] = round((time.monotonic()-extract_start)*1000, 2)
+    if time.monotonic() >= deadline:
+        raise TimeoutError('Document projection exceeded the call deadline')
+    return text
+
+
+def _evaluate_document(page, expression, deadline, meta):
+    """Recover one DOM read interrupted by a navigation in this same page."""
+    from playwright.sync_api import Error
+
+    def remaining_ms():
+        remaining = (deadline - time.monotonic()) * 1000
+        if remaining <= 0:
+            raise TimeoutError('Document read exceeded the call deadline')
+        return remaining
+
+    remaining_ms()
+    try:
+        value = page.evaluate(expression)
+    except Error as error:
+        if 'Execution context was destroyed' not in str(error):
+            raise
+        # A client redirect can replace the document after goto completed.
+        # Reuse its navigation; never issue another request or reset the budget.
+        page.wait_for_load_state('domcontentloaded', timeout=remaining_ms())
+        remaining_ms()
+        value = page.evaluate(expression)
+        meta['document_read_recovery'] = {
+            'cause': 'navigation_replaced_execution_context',
+            'additional_navigations': 0,
+            'additional_dom_reads': 1,
+        }
+    remaining_ms()
+    return value
+
+
+def _page_projection(page, request, output_mode, meta, deadline):
+    if output_mode == 'document_page':
+        from harness.web_fetch.task_outputs import DOCUMENT_PAGE_READY
+        page.wait_for_function(DOCUMENT_PAGE_READY, timeout=max(1, (deadline-time.monotonic())*1000))
+    return _projection_text(_evaluate_document(page, _projection_expression(output_mode, request.get('track'), request.get('resource_detail_links', False)), deadline, meta), output_mode, meta, deadline)
+
+
 def fetch(request):
     # Match the provider boundary; this validates URL syntax, not network isolation.
     validate_http_url(request['url'])
@@ -41,9 +221,7 @@ def fetch(request):
     html = ''
     try:
         if engine == 'kitesurf' and request.get('remote_markdown_api'):
-            from harness.web_fetch.providers.cloudflare import (
-                CloudflareMarkdownProvider,
-            )
+            from harness.web_fetch.providers.cloudflare import CloudflareMarkdownProvider
 
             provider = CloudflareMarkdownProvider('kitesurf', {
                 'account_id': request['account_id'],
@@ -67,6 +245,29 @@ def fetch(request):
                 'error_message': result.error_message,
                 'metadata': result.metadata,
             }
+        if (engine == 'moli' and output_mode in {'document', 'file', 'document_page'}) or (engine == 'lightpanda' and output_mode in {'document', 'file', 'resource', 'media_metadata', 'document_page'}) or (engine == 'obscura' and output_mode == 'document_page'):
+            from playwright.sync_api import sync_playwright
+            with sync_playwright() as playwright:
+                with native_cdp_browser(playwright, request, start + route_timeout, metadata=meta) as browser:
+                    meta['browser_version'] = browser.version
+                    page = browser.new_context().new_page()
+                    if output_mode in {'resource', 'media_metadata', 'document_page'}:
+                        meta['navigation_wait_until'] = 'load'
+                        response = page.goto(request['url'], wait_until=meta['navigation_wait_until'], timeout=max(1, (route_timeout-(time.monotonic()-start))*1000))
+                        content = _page_projection(page, request, output_mode, meta, start + route_timeout)
+                        return dict(ok=response is not None and 200 <= response.status < 300, content=content, html='', status_code=response.status if response else None, final_url=page.url, metadata=meta)
+                    native = _native_browser_file(page, request, route_timeout, start, meta)
+                    if output_mode == 'file' or not native['ok']:
+                        return native
+                    raw = base64.b64decode(native.pop('files_b64')[0], validate=True)
+                    meta['_raw_stdout_b64'] = base64.b64encode(raw).decode('ascii')
+                    extract_start = time.monotonic()
+                    text, extractor = extract_document_text(raw)
+                    meta.update(document_extractor=extractor,
+                        document_extract_ms=round((time.monotonic()-extract_start)*1000, 2))
+                    native.update(ok=bool(text.strip()), content=text,
+                        error_type=None if text.strip() else 'empty_response')
+                    return native
         if engine in ('moli', 'obscura', 'lightpanda'):
             command = cli_command(
                 engine,
@@ -79,15 +280,29 @@ def fetch(request):
                 allow_private_network=bool(request.get('allow_private_network')),
                 ca_cert=request.get('ca_cert'),
                 http_proxy=request.get('http_proxy'),
+                native_metadata=request.get('native_metadata'),
+                track=request.get('track'),
+                detail_links=request.get('resource_detail_links', False),
+                include_subdocuments=bool(request.get('include_subdocuments')),
             )
             environment = None
             if engine == 'obscura' and request.get('ca_cert'):
                 environment = {**os.environ, 'SSL_CERT_FILE': str(request['ca_cert'])}
-            result = subprocess.run(command, capture_output=True, timeout=route_timeout,
-                                    **({'env': environment} if environment else {}))
+            from harness.web_fetch.network_dns import native_process_dns_environment
+            with native_process_dns_environment(
+                request.get('dns_mode', 'system'),
+                request.get('native_dns_library'),
+                start + route_timeout,
+                meta,
+                environment,
+            ) as process_environment:
+                result = subprocess.run(
+                    command, capture_output=True, timeout=route_timeout,
+                    **({'env': process_environment} if process_environment else {})
+                )
             meta.update(browser_exit_code=result.returncode,
                         browser_stderr=result.stderr.decode('utf-8', 'replace'))
-            if result.returncode:
+            if result.returncode and not request.get('native_metadata'):
                 return dict(ok=False, content='', html='', error_type='browser_exit',
                             error_message=meta['browser_stderr'] or str(result.returncode), metadata=meta)
             if output_mode == 'file':
@@ -98,12 +313,12 @@ def fetch(request):
                             files_b64=[base64.b64encode(result.stdout).decode('ascii')]
                             if result.stdout else [],
                             error_type=None if result.stdout else 'empty_response')
-            if output_mode == 'document' and result.stdout.startswith((b'%PDF', b'PK')):
+            if output_mode == 'document':
                 raw_fetch_ms = round((time.monotonic()-start)*1000, 2)
-                text, extractor = extract_document_text(result.stdout)
                 meta['_raw_stdout_b64'] = base64.b64encode(result.stdout).decode('ascii')
                 meta['raw_stdout_sha256'] = hashlib.sha256(result.stdout).hexdigest()
                 meta['raw_fetch_ms'] = raw_fetch_ms
+                text, extractor = extract_document_text(result.stdout)
                 meta['document_extractor'] = extractor
                 meta['document_extract_ms'] = round((time.monotonic()-start)*1000-raw_fetch_ms, 2)
                 return dict(ok=bool(text.strip()), content=text, html='', status_code=None,
@@ -116,39 +331,115 @@ def fetch(request):
                 meta['raw_stdout_sha256'] = hashlib.sha256(result.stdout).hexdigest()
                 return dict(ok=False, content='', html='', error_type='non_utf8_response',
                     error_message='HTML adapter received non-UTF-8 bytes; preserved without conversion', metadata=meta)
+            if output_mode == 'markdown' and request.get('native_metadata'):
+                meta['_raw_stdout_b64'] = base64.b64encode(result.stdout).decode('ascii')
+                meta['raw_stdout_sha256'] = hashlib.sha256(result.stdout).hexdigest()
+                contract = request['native_metadata']
+                meta['native_metadata'] = {key: value for key, value in contract.items()
+                                           if key not in {'script_path', 'script_source'}}
+                envelope = json.loads(browser_output)
+                if not isinstance(envelope, dict) or not isinstance(envelope.get('content'), str):
+                    raise ValueError('native Markdown envelope requires string content')
+                content = envelope['content']
+                final_url = envelope.get('url') if engine == 'lightpanda' else envelope.get('final_url')
+                final_url = final_url or None
+                if final_url is not None:
+                    validate_http_url(final_url)
+                status = envelope.get('http_status') if engine == 'lightpanda' else None
+                status = status if isinstance(status, int) and 100 <= status <= 599 else None
+                error = envelope.get('error')
+                ok = not result.returncode and not error and bool(content.strip())
+                meta['native_markdown_ms'] = round((time.monotonic()-start)*1000, 2)
+                return dict(ok=ok, content=content, html='', status_code=status,
+                            final_url=final_url, title=envelope.get('title'), metadata=meta,
+                            error_type='browser_exit' if result.returncode or error else
+                                       None if content.strip() else 'empty_response',
+                            error_message=str(error or meta['browser_stderr']) if result.returncode or error else None)
+            if output_mode in {'resource', 'media_metadata', 'document_page'}:
+                meta['projection_ms'] = round((time.monotonic()-start)*1000, 2)
+                content = _projection_text(browser_output, output_mode, meta, start + route_timeout)
+                return dict(ok=bool(content.strip()), content=content, html='', status_code=None, final_url=None, metadata=meta)
             if output_mode == 'markdown':
                 meta['native_markdown_ms'] = round((time.monotonic()-start)*1000, 2)
                 return dict(ok=bool(browser_output.strip()), content=browser_output, html='',
                             status_code=None, final_url=None, metadata=meta,
                             error_type=None if browser_output.strip() else 'empty_response')
             html = browser_output
-            if output_mode == 'document':
-                meta['document_response'] = 'serialized_html_not_raw_document'
             status = None
             final_url = None
         else:
             from playwright.sync_api import sync_playwright
             meta['playwright_version'] = version('playwright')
             with sync_playwright() as p:
+                fixture_https = bool(request.get('ca_cert')) and request.get('network_policy') == 'loopback_only'
+                profile = None
+                persistent_context = None
                 if engine == 'kitesurf':
-                    browser = p.chromium.connect_over_cdp(request['endpoint'], timeout=timeout*1000)
+                    browser = p.chromium.connect_over_cdp(request['endpoint'], timeout=max(1, (route_timeout-(time.monotonic()-start))*1000), headers={'Authorization': 'Bearer ' + request['api_token']})
                 else:
                     launch = dict(executable_path=request['binary'], headless=True,
                                   args=request.get('browser_args') or [], timeout=timeout*1000)
                     if request.get('http_proxy'):
                         launch['proxy'] = {'server': request['http_proxy']}
-                    browser = p.chromium.launch(**launch)
+                    needs_profile = (
+                        output_mode in {'file', 'document'}
+                        or request.get('dns_mode', 'system') == 'public_doh'
+                    )
+                    if needs_profile:
+                        profile = tempfile.TemporaryDirectory(prefix='browser-profile-')
+                        if request.get('dns_mode', 'system') == 'public_doh':
+                            from harness.web_fetch.network_dns import (
+                                configure_chromium_dns_profile,
+                            )
+                            meta.update(configure_chromium_dns_profile(
+                                profile.name, 'public_doh'
+                            ))
+                        if output_mode in {'file', 'document'}:
+                            # The built-in PDF viewer replaces response bytes
+                            # with HTML, so document tasks use native downloads.
+                            preferences = Path(profile.name) / 'Default' / 'Preferences'
+                            preferences.parent.mkdir()
+                            preferences.write_text(json.dumps({
+                                'plugins': {'always_open_pdf_externally': True}
+                            }))
+                        persistent_context = p.chromium.launch_persistent_context(
+                            profile.name, accept_downloads=True, ignore_https_errors=fixture_https, **launch)
+                        browser = persistent_context.browser
+                        if output_mode in {'file', 'document'}:
+                            meta['pdf_handling'] = 'native download; viewer disabled in fresh temporary profile'
+                    else:
+                        browser = p.chromium.launch(**launch)
                 try:
-                    meta['browser_version'] = browser.version
+                    if browser is not None:
+                        if engine == 'kitesurf':
+                            meta['cdp_reported_browser_version'] = browser.version
+                            meta['engine_version_exposed'] = False
+                        else:
+                            meta['browser_version'] = browser.version
                     # The benchmark fixture has a per-run CA, not a system-trusted
                     # certificate. Only isolated loopback requests may bypass the
                     # browser's public trust store.
-                    fixture_https = bool(request.get('ca_cert')) and request.get('network_policy') == 'loopback_only'
-                    context = browser.new_context(ignore_https_errors=fixture_https)
+                    context = persistent_context or browser.new_context(ignore_https_errors=fixture_https)
                     page = context.new_page()
+                    if output_mode in {'file', 'document'}:
+                        native = _native_browser_file(page, request, route_timeout, start, meta)
+                        if output_mode == 'file' or not native['ok']:
+                            return native
+                        raw = base64.b64decode(native.pop('files_b64')[0], validate=True)
+                        meta['_raw_stdout_b64'] = base64.b64encode(raw).decode('ascii')
+                        if raw.startswith((b'%PDF', b'PK')):
+                            extract_start = time.monotonic()
+                            text, extractor = extract_document_text(raw)
+                            meta.update(document_extractor=extractor,
+                                document_extract_ms=round((time.monotonic()-extract_start)*1000, 2))
+                            native.update(ok=bool(text.strip()), content=text,
+                                error_type=None if text.strip() else 'empty_response')
+                            return native
+                        raise ValueError('Browser document response is not a supported PDF or DOCX')
+                    meta['navigation_wait_until'] = request.get('wait_until') or 'load'
                     response = page.goto(
                         request['url'],
-                        wait_until=request.get('wait_until') or 'domcontentloaded',
+                        wait_until=meta['navigation_wait_until'],
                         timeout=max(1, (route_timeout-(time.monotonic()-start))*1000),
                     )
                     if plan:
@@ -162,17 +453,26 @@ def fetch(request):
                             page.wait_for_function(plan['wait_value'], timeout=remaining_ms)
                         if plan['delay_ms']:
                             page.wait_for_timeout(plan['delay_ms'])
+                    if output_mode in {'resource', 'media_metadata', 'document_page'}:
+                        content = _page_projection(page, request, output_mode, meta, start + route_timeout)
+                        return dict(ok=response is not None and 200 <= response.status < 300, content=content, html='', status_code=response.status if response else None, final_url=page.url, metadata=meta)
                     # Avoid Playwright's XMLSerializer helper, which is not
                     # implemented by every CDP engine. Same expression for both.
-                    html = page.evaluate('document.documentElement.outerHTML')
+                    html = _evaluate_document(page, 'document.documentElement.outerHTML', start + route_timeout, meta)
                     final_url = page.url
                     status = response.status if response else None
                 finally:
-                    browser.close()
+                    if persistent_context is not None:
+                        persistent_context.close()
+                    elif browser is not None:
+                        browser.close()
+                    if profile is not None:
+                        profile.cleanup()
         meta['fetch_html_ms'] = round((time.monotonic()-start)*1000, 2)
+        converter = CONVERTER
         package = require_converter(request.get('node_html_markdown_path'))
         meta['extractor_version'] = json.loads((package / 'package.json').read_text())['version']
-        meta['converter_sha256'] = hashlib.sha256(CONVERTER.read_bytes()).hexdigest()
+        meta['converter_sha256'] = hashlib.sha256(converter.read_bytes()).hexdigest()
         meta['node_version'] = subprocess.run(
             [shutil.which('node') or 'node', '--version'], capture_output=True, text=True,
             check=True, timeout=5).stdout.strip()
@@ -190,7 +490,8 @@ def fetch(request):
                     error_type=None if ok else 'empty_response')
     except Exception as error:
         return dict(ok=False, content='', html=html, metadata=meta,
-                    error_type='timeout' if 'Timeout' in type(error).__name__ else 'browser_error',
+                    status_code=meta.get('file_response_status'), final_url=meta.get('file_response_url'),
+                    error_type=browser_error_type(error),
                     error_message=str(error)[:4000])
 
 
diff --git a/harness/web_fetch/providers/moli.py b/harness/web_fetch/providers/moli.py
index 7c23f6d67..afbe9113f 100644
--- a/harness/web_fetch/providers/moli.py
+++ b/harness/web_fetch/providers/moli.py
@@ -5,12 +5,10 @@
 import base64
 from contextlib import ExitStack
 import hashlib
-import json
 import math
 import os
 import re
 import shutil
-import signal
 import subprocess
 import tempfile
 import threading
@@ -18,12 +16,11 @@
 from pathlib import Path
 from urllib.parse import parse_qsl, quote, urlsplit
 
-from ..document_text import extract_document_text
-from ..markdown import CONVERTER, converter_command, require_converter
-from ..models import EvalCase, ProviderResult
-from ..retrieval_hints import native_default_case, plan_for_case
+from ..models import EvalCase, ProviderResult, TRACKS
+from ..retrieval_hints import native_contract_for_case, plan_for_case
 from ..safety import validate_http_url
-from .base import Provider
+from .base import Provider, terminate_owned_process_tree
+from .http_client import inner_timeout_budget
 
 _WAIT_UNTIL_VALUES = {
     "done",
@@ -43,6 +40,29 @@
     re.IGNORECASE,
 )
 
+_MOLI_FETCH_FAILURE = re.compile(
+    r"(?:^|\n)Error: failed to fetch `[^`\r\n]+`\r?\n"
+    r"Reason: (?P<reason>[^\r\n]+)\s*\Z"
+)
+_MOLI_READINESS_TIMEOUT = re.compile(
+    r"fetch readiness timed out after [1-9]\d* ms while waiting for [^\r\n]+"
+)
+_MOLI_DNS_FAILURE = re.compile(
+    r"failed to resolve [^\s:]+:\d+: failed to lookup address information: .+"
+)
+_MOLI_CURL_FAILURE = re.compile(
+    r"curl request failed for \S+ after active=\d+ms queued=\d+ms: "
+    r"\[(?P<code>\d+)\] (?P<detail>.+)"
+)
+_CURL_DNS_FAILURES = {5, 6}
+_CURL_TIMEOUT_FAILURES = {28}
+_CURL_TRANSIENT_TRANSFER_FAILURES = {7, 16, 18, 35, 52, 55, 56, 92, 95}
+_CURL_CERTIFICATE_FAILURES = {51, 58, 60, 77, 82, 83, 90, 91}
+_CERTIFICATE_FAILURE_DETAIL = re.compile(
+    r"certificate|cert(?:ificate)? verify|issuer|CA cert|SSH remote key|CRL|OCSP",
+    re.IGNORECASE,
+)
+
 
 def _markdown_http_error_status(content: str) -> int | None:
     """Recognize Moli's whole-response HTTP error page, not status prose."""
@@ -52,6 +72,71 @@ def _markdown_http_error_status(content: str) -> int | None:
     return int(match.group("status")) if match else None
 
 
+def _moli_native_error_type(stderr: str | bytes) -> str:
+    """Classify only explicit, retry-safe Moli failure envelopes.
+
+    The shared runner owns the single declared retry.  This adapter exposes a
+    transient type only when Moli's final error envelope identifies a bounded
+    readiness timeout, DNS failure, or known curl transport failure.  All
+    ambiguous, content, certificate, and configuration failures stay terminal.
+    """
+    diagnostic = stderr.decode("utf-8", "replace") if isinstance(stderr, bytes) else stderr
+    failure = _MOLI_FETCH_FAILURE.search(diagnostic)
+    if failure is None:
+        return "tool_error"
+    reason = failure.group("reason")
+    if _MOLI_READINESS_TIMEOUT.fullmatch(reason):
+        return "timeout"
+    if _MOLI_DNS_FAILURE.fullmatch(reason):
+        return "dns"
+    curl = _MOLI_CURL_FAILURE.fullmatch(reason)
+    if curl is None:
+        return "tool_error"
+    code = int(curl.group("code"))
+    detail = curl.group("detail")
+    if code in _CURL_CERTIFICATE_FAILURES or _CERTIFICATE_FAILURE_DETAIL.search(detail):
+        return "tool_error"
+    if code in _CURL_DNS_FAILURES:
+        return "dns"
+    if code in _CURL_TIMEOUT_FAILURES:
+        return "timeout"
+    if code in _CURL_TRANSIENT_TRANSFER_FAILURES:
+        return "network"
+    return "tool_error"
+
+
+def _native_fetch_diagnostics(stderr: bytes, requested_url: str) -> tuple[int | None, bool]:
+    """Read only same-call native events; ambiguous document ownership stays unknown."""
+    prefix = rb"(?:^|\n)(?:\d{4}-\d{2}-\d{2}T[^\s]+\s+)?"
+    rows = list(re.finditer(
+        prefix + rb"DEBUG fetch request complete method=(?:GET|POST) "
+        rb"url=(?P<url>\S+) final_url=\S+ status=(?P<status>\d{3})\b[^\r\n]*",
+        stderr,
+    ))
+    requested = requested_url.encode("utf-8")
+    matches = [row for row in rows if row.group("url") == requested]
+    status = None
+    if len(matches) == 1:
+        row = matches[0]
+        value = int(row.group("status"))
+        # Legacy logs cannot bind subsequent HTTP redirect hops to a Document.
+        # A committed script navigation also invalidates the initial response.
+        later = stderr[row.end():]
+        if not 300 <= value < 400 and not any(marker in later for marker in (
+            b"committed main navigation before replacement realm bootstrap",
+            b"detached committed main WindowProxy for replacement context",
+        )):
+            status = value
+    waits = re.finditer(
+        prefix + rb"WARN fetch readiness wait timed out; returning best-effort page "
+        rb"page_id=\d+ url=(?P<url>\S+) final_url=\S+ "
+        rb"wait_until=(?:DomStable|NetworkIdle) timeout_ms=[1-9]\d* "
+        rb"remaining_ms=\d+ error=[^\r\n]+",
+        stderr,
+    )
+    return status, any(row.group("url") == requested for row in waits)
+
+
 def _diagnostic_main_document_url(stderr: str | bytes, requested_url: str) -> str | None:
     """Read Moli's effective main-document URL from the same call's debug log."""
     pattern = re.compile(
@@ -96,10 +181,11 @@ def identity(value: str) -> tuple | None:
     navigations = list(navigation_pattern.finditer(diagnostic))
     for index, navigation in enumerate(navigations):
         boundary = navigations[index + 1].start() if index + 1 < len(navigations) else len(diagnostic)
-        committed = diagnostic.find(
+        commits = [diagnostic.find(marker, navigation.end(), boundary) for marker in (
             b"committed main navigation before replacement realm bootstrap",
-            navigation.end(), boundary,
-        )
+            b"detached committed main WindowProxy for replacement context",
+        )]
+        committed = next((position for position in commits if position >= 0), -1)
         if committed < 0:
             continue
         navigation_identity = identity(field(navigation, "url"))
@@ -122,260 +208,6 @@ def identity(value: str) -> tuple | None:
 
 
 
-_RESOURCE_PAGE_EXPRESSION = r"""
-(async () => {
-  const urls = new Set();
-  const add = (value, base = location.href) => {
-    if (!value) return;
-    for (const part of String(value).split(',')) {
-      const raw = part.trim().split(/\s+/)[0];
-      if (!raw || /^(?:data|blob|javascript|mailto):/i.test(raw)) continue;
-      try { urls.add(new URL(raw, base).href); } catch {}
-    }
-  };
-
-  // Enumerate the top document and bounded, already-loaded same-origin frame
-  // documents.  This is answer-free: it follows the page's own document
-  // hierarchy and never receives an expected URL or case-specific selector.
-  const roots = [document];
-  for (let cursor = 0; cursor < roots.length && roots.length < 16; cursor++) {
-    for (const frame of roots[cursor].querySelectorAll('iframe,frame')) {
-      try {
-        if (frame.contentDocument && !roots.includes(frame.contentDocument)) {
-          roots.push(frame.contentDocument);
-          if (roots.length >= 16) break;
-        }
-      } catch {}
-    }
-  }
-  for (const root of roots) {
-    for (const node of root.querySelectorAll('[src],[href],[data],[poster],[srcset]')) {
-      for (const name of ['src', 'href', 'data', 'poster', 'srcset']) {
-        add(node.getAttribute(name), node.baseURI || root.baseURI || location.href);
-      }
-    }
-  }
-  const queue = roots.flatMap(root => [...root.querySelectorAll(
-      'astro-island[component-url],script[type="module"][src]'
-    )].map(node => ({
-      value: node.getAttribute('component-url') || node.getAttribute('src'),
-      base: node.baseURI || root.baseURI || location.href
-    })))
-    .filter(item => item.value).slice(0, 16)
-    .map(item => ({url: new URL(item.value, item.base).href, depth: 0}));
-  const seen = new Set();
-  while (queue.length && seen.size < 48) {
-    const item = queue.shift(), moduleUrl = item.url;
-    if (seen.has(moduleUrl) || new URL(moduleUrl).origin !== location.origin) continue;
-    seen.add(moduleUrl);
-    try {
-      const source = await (await fetch(moduleUrl)).text();
-      for (const match of source.matchAll(/https?:\/\/[^\s`"'<>]+/g)) add(match[0]);
-      if (item.depth < 2) {
-        for (const match of source.matchAll(/(?:from\s*|import\s*)[('"`]([^'"`]+)[)'"`]/g)) {
-          try {
-            const imported = new URL(match[1], moduleUrl).href;
-            if (new URL(imported).origin === location.origin) {
-              queue.push({url: imported, depth: item.depth + 1});
-            }
-          } catch {}
-        }
-      }
-    } catch {}
-  }
-  return JSON.stringify({links: [...urls]});
-})()
-"""
-
-_DOCUMENT_PAGE_EXPRESSION = r"""
-(async () => {
-  const app = globalThis.PDFViewerApplication;
-  if (app) {
-    await app.initializedPromise;
-    const pdf = app.pdfDocument;
-    if (pdf) {
-      const pages = [];
-      for (let number = 1; number <= pdf.numPages; number++) {
-        const page = await pdf.getPage(number), text = await page.getTextContent();
-        pages.push(text.items.map(item => item.str).join(' '));
-      }
-      return JSON.stringify({
-        kind: 'text', source: new URL(app.url, location.href).href,
-        text: pages.join('\n\n')
-      });
-    }
-  }
-  const nodes = [...document.querySelectorAll('embed[src],iframe[src],object[data],a[href]')];
-  const source = nodes.map(node => node.src || node.data || node.href)
-    .find(value => value && /\.pdf(?:$|[?#])/i.test(value));
-  if (!source) return JSON.stringify({kind: 'page_text', text: document.body?.innerText || ''});
-  const response = await fetch(new URL(source, location.href));
-  if (!response.ok) throw new Error(`embedded PDF HTTP ${response.status}`);
-  const bytes = new Uint8Array(await response.arrayBuffer());
-  let binary = '';
-  for (let offset = 0; offset < bytes.length; offset += 32768) {
-    binary += String.fromCharCode(...bytes.subarray(offset, offset + 32768));
-  }
-  return JSON.stringify({kind: 'pdf_base64', source: response.url, data: btoa(binary)});
-})()
-"""
-
-_DOCUMENT_PAGE_READY = r"""
-() => {
-  const viewer = document.querySelector('#viewer');
-  if (viewer) return !!globalThis.PDFViewerApplication?.pdfDocument;
-  return !!document.querySelector('embed[src],iframe[src],object[data],a[href*=".pdf"]')
-    || !!document.body?.innerText?.trim();
-}
-"""
-
-_DOCUMENT_RUNTIME_FETCH_EXPRESSION = r"""
-(async () => {
-  const response = await fetch(location.href, {credentials: 'include'});
-  if (!response.ok) throw new Error(`document HTTP ${response.status}`);
-  const bytes = new Uint8Array(await response.arrayBuffer());
-  let binary = '';
-  for (let offset = 0; offset < bytes.length; offset += 32768) {
-    binary += String.fromCharCode(...bytes.subarray(offset, offset + 32768));
-  }
-  return JSON.stringify({
-    kind: 'document_base64', source: response.url, status: response.status,
-    content_type: response.headers.get('content-type'), data: btoa(binary)
-  });
-})()
-"""
-
-
-_MEDIA_METADATA_EXPRESSION = r"""
-(() => {
-  const values = [];
-  const add = value => {
-    const text = String(value || '').trim();
-    if (text && !values.includes(text)) values.push(text);
-  };
-  add(document.title);
-  add(document.body?.innerText);
-  for (const node of document.querySelectorAll(
-    'meta[name="author"],meta[property$=":author"],meta[itemprop="author"],'
-    + '[itemprop="author"],[itemprop="creator"],[itemprop="publisher"]'
-  )) {
-    add(node.content);
-    add(node.getAttribute?.('content'));
-    add(node.innerText);
-    for (const name of node.querySelectorAll?.('[itemprop="name"]') || []) {
-      add(name.content);
-      add(name.getAttribute?.('content'));
-      add(name.innerText);
-    }
-  }
-  let visited = 0;
-  const visit = (value, depth = 0) => {
-    if (++visited > 2048 || depth > 6 || value == null) return;
-    if (Array.isArray(value)) {
-      for (const item of value.slice(0, 64)) visit(item, depth + 1);
-      return;
-    }
-    if (typeof value !== 'object') return;
-    for (const [key, item] of Object.entries(value).slice(0, 128)) {
-      if (/^(?:author|creator|publisher)$/i.test(key)) {
-        if (typeof item === 'string') add(item);
-        else if (item && typeof item === 'object') add(item.name);
-      }
-      visit(item, depth + 1);
-    }
-  };
-  for (const script of [...document.querySelectorAll('script[type="application/ld+json"]')]
-    .slice(0, 16)) {
-    try { visit(JSON.parse(script.textContent)); } catch {}
-  }
-  return values.join('\n\n');
-})()
-"""
-
-
-def _dynamic_text_expression(plan) -> str:
-    """Build an answer-free rendered-text extraction for the declared scope."""
-    extraction_selector = plan.extraction_selector or plan.selector
-    selector = json.dumps(extraction_selector, ensure_ascii=False)
-    extraction_frame = plan.extraction_frame_selector if plan.version == 2 else plan.frame_selector
-    if extraction_frame:
-        frame = json.dumps(extraction_frame, ensure_ascii=False)
-        root = f"document.querySelector({frame})?.contentDocument"
-    else:
-        root = "document"
-    maximum_count = plan.extraction_maximum_count if plan.version == 2 else plan.minimum_count
-    limit = ".slice(0, " + str(maximum_count) + ")"
-    exclusions = json.dumps(list(plan.extraction_exclude_selectors), ensure_ascii=False)
-    fallback = (
-        "((root?.body || root?.documentElement || document.body || "
-        "document.documentElement)?.innerText?.trim() || '')"
-        if plan.extraction_fallback == "body"
-        else "''"
-    )
-    return (
-        "(() => { const root = "
-        + root
-        + "; const selected = root ? [...root.querySelectorAll("
-        + selector
-        + ")]"
-        + limit
-        + " : []; const exclusions = "
-        + exclusions
-        + "; const lines = node => (node.innerText || node.textContent || '').split(/\\n+/)"
-        + ".map(value => value.trim()).filter(Boolean); const text = node => { const values = "
-        + "lines(node); if (!exclusions.length) return values; const omitted = new Set("
-        + "exclusions.flatMap(item => [...node.querySelectorAll(item)].flatMap(lines))); return "
-        + "values.filter(value => !omitted.has(value)); }; const records = selected.map(node => "
-        + "text(node).join('\\n'))"
-        + ".filter(Boolean); const fallback = "
-        + fallback
-        + "; return records.length ? records.join('\\n\\n') : fallback; })()"
-    )
-
-
-_ROUTE_OUTPUTS = {
-    "raw_file": "raw_bytes",
-    "document_runtime_fetch": "runtime_document_base64+local_text",
-    "raw_document": "raw_document_bytes+local_text",
-    "document_page_runtime": "document_text_or_embedded_document",
-    "resource_page_runtime": "structured_resource_urls",
-    "challenge_json_trace": "final_dom_html+local_markdown+network_diagnostics",
-    "page_identity_json": "final_dom_html+local_markdown",
-    "dynamic_selected_text": "selected_records_or_rendered_body_fallback",
-    "dynamic_native_markdown": "markdown",
-    "media_metadata_runtime": "visible_text_and_standard_media_metadata",
-    "ordinary_markdown": "markdown",
-}
-
-
-def _route_for_case(case: EvalCase, *, native_default: bool = False) -> str:
-    """Select one output contract before applying page-family extraction rules."""
-    if case.task_kind == "file":
-        return "raw_file"
-    if case.task_kind == "resource":
-        return "resource_page_runtime"
-    if case.track == "document":
-        path = urlsplit(case.url).path.casefold()
-        if path.endswith(".docx"):
-            return "document_runtime_fetch"
-        if path.endswith(".pdf") or "/pdf/" in path:
-            return "raw_document"
-        if path.endswith((".html", "/")):
-            return "document_page_runtime"
-    navigation = ((case.source_benchmark or {}).get("risk_control") or {}).get("navigation_contract")
-    if case.track == "challenge":
-        return "challenge_json_trace"
-    if (not native_default and case.task_kind == "body" and isinstance(navigation, dict)
-            and navigation.get("requested_url") and navigation.get("observed_final_url")):
-        return "page_identity_json"
-    if case.track == "dynamic" and not native_default_case(case):
-        return "dynamic_selected_text"
-    if case.track == "dynamic":
-        return "dynamic_native_markdown"
-    if case.track == "video" and case.task_kind == "body":
-        return "media_metadata_runtime"
-    return "ordinary_markdown"
-
 
 class MoliWebFetchProvider(Provider):
     def __init__(self, name, config):
@@ -383,6 +215,7 @@ def __init__(self, name, config):
         self._process_lock = threading.Lock()
         self._cancel_requested = False
         self._active_process = None
+        self._active_native_provider = None
 
     def begin_call(self):
         with self._process_lock:
@@ -417,6 +250,16 @@ def _configuration_errors(self, binary: str | None) -> list[str]:
             errors.append("expected_binary_sha256")
         if self.config.get("wait_until", "done") not in _WAIT_UNTIL_VALUES:
             errors.append("wait_until")
+        if self.config.get("dynamic_wait_until", "domstable") not in _WAIT_UNTIL_VALUES:
+            errors.append("dynamic_wait_until")
+        if self.config.get("wait_option", "wait-until") not in {"wait", "wait-until"}:
+            errors.append("wait_option")
+        track_waits = self.config.get("wait_until_by_track", {})
+        if (not isinstance(track_waits, dict)
+                or any(not isinstance(track, str) or track not in TRACKS
+                       or not isinstance(wait, str) or wait not in _WAIT_UNTIL_VALUES
+                       for track, wait in track_waits.items())):
+            errors.append("wait_until_by_track")
         if int(self.config.get("max_bytes", 20_000_000)) <= 0:
             errors.append("max_bytes")
         retain_diagnostic = self.config.get("retain_complete_diagnostic_log", False)
@@ -521,7 +364,17 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
             # Validate the dynamic contract before selecting any content route.
             # A future dynamic file/document case must not bypass fail-closed
             # retrieval planning merely because it takes the raw-byte path.
+            if (
+                case.track == "dynamic"
+                and isinstance(case.retrieval_hints, dict)
+                and case.retrieval_hints.get("version") == 3
+                and case.retrieval_hints != {"version": 3, "mode": "native"}
+            ):
+                raise ValueError(
+                    f"{case.id}: Moli native dynamic tasks require one family marker"
+                )
             retrieval_plan = plan_for_case(case)
+            native_contract = native_contract_for_case(case)
         except ValueError as error:
             return ProviderResult(
                 False,
@@ -529,17 +382,14 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
                 error_type="configuration",
                 error_message=str(error),
             )
-        route = _route_for_case(case, native_default=bool(self.config.get("uniform_native_parameters")))
-        if retrieval_plan and (route == "raw_file" or (
-            retrieval_plan.version == 2 and route != "dynamic_selected_text"
-        )):
+        completion_plan = retrieval_plan or (
+            native_contract.completion_plan(max(1, math.ceil(timeout * 1000)))
+            if native_contract else None
+        )
+        if completion_plan and case.task_kind == "file":
             return ProviderResult(
                 False, "", error_type="configuration",
-                error_message=(
-                    "DOM completion cannot be applied to raw file delivery"
-                    if route == "raw_file" else
-                    "Declared text extraction requires the dynamic text route"
-                ),
+                error_message="DOM completion cannot be applied to raw file delivery",
             )
         call_deadline = time.monotonic() + timeout
         binary = self._resolve_binary()
@@ -550,169 +400,137 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
             return ProviderResult(
                 False, "", error_type="configuration", error_message="; ".join(errors)
             )
-        wait = self.config.get("wait_until", "done")
-        file_task = route == "raw_file"
-        document_task = route in {"raw_document", "document_runtime_fetch"}
-        document_runtime_fetch_task = route == "document_runtime_fetch"
-        document_page_task = route == "document_page_runtime"
-        media_metadata_task = route == "media_metadata_runtime"
-        challenge_task = route == "challenge_json_trace"
-        json_page_task = route in {"challenge_json_trace", "page_identity_json"}
-        if json_page_task:
+        from .headless import HeadlessProvider
+        # Moli has one content interface for every webpage and document-body
+        # task.  Only a direct-media-file deliverable takes the raw-byte path.
+        # This avoids changing the participant's output format within a report
+        # family based on the URL suffix or the expected answer.
+        if case.task_kind == 'file':
+            native = HeadlessProvider(self.name, {**self.config, 'type':'headless_markdown',
+                                                  'engine':'moli', 'binary':binary,
+                                                  'max_original_file_bytes':int(self.config.get('max_bytes',20_000_000))})
+            with self._process_lock:
+                self._active_native_provider = native
+                if self._cancel_requested: native.cancel()
             try:
-                markdown_package = require_converter(self.config.get('node_html_markdown_path'))
-            except ValueError as error:
-                return ProviderResult(False, '', error_type='configuration', error_message=str(error))
-        raw_task = file_task or (document_task and not document_runtime_fetch_task)
-        timeout_ms = str(max(1, int(timeout * 1000)))
-        if raw_task:
-            # Direct file delivery uses Moli's automatic response mode. Forcing
-            # --dump html/markdown can reject or serialize a non-HTML response
-            # before the evaluator receives the original bytes.
-            dump = None
-            command = [
-                binary,
-                "fetch",
-                "--timeout",
-                timeout_ms,
-                "--http-timeout",
-                timeout_ms,
-            ]
-            wait_metadata = None
-        else:
-            dump = "html" if case.task_kind == "resource" else "markdown"
-            try:
-                if document_runtime_fetch_task:
-                    wait_arguments = [
-                        "--eval",
-                        _DOCUMENT_RUNTIME_FETCH_EXPRESSION,
-                        "--wait-until",
-                        wait,
-                    ]
-                    wait_metadata = {
-                        "wait_until": wait,
-                        "document_delivery": "page_runtime_second_http_fetch",
-                        "completion_support": "exact",
-                    }
-                    dump = None
-                elif document_page_task:
-                    wait_arguments = [
-                        "--eval",
-                        _DOCUMENT_PAGE_EXPRESSION,
-                        "--wait-script",
-                        _DOCUMENT_PAGE_READY,
-                        "--wait-until",
-                        wait,
-                    ]
-                    wait_metadata = {
-                        "wait_until": wait,
-                        "embedded_document": "page_runtime",
-                        "completion_support": "exact",
-                    }
-                    dump = None
-                elif json_page_task:
-                    wait_arguments = (["--trace-network"] if challenge_task else []) + ["--wait-until", wait]
-                    wait_metadata = {
-                        "wait_until": wait,
-                        "extraction": "json_final_dom_then_local_markdown",
-                        "network_trace": "metadata_without_response_bodies" if challenge_task else "not_requested",
-                    }
-                    dump = "json"
-                elif route == "resource_page_runtime":
-                    wait_arguments = ["--eval", _RESOURCE_PAGE_EXPRESSION, "--wait-until", wait]
-                    wait_metadata = {
-                        "wait_until": wait,
-                        "resource_discovery": "rendered_dom_and_same_origin_component_modules",
-                    }
-                    dump = None
-                elif route == "dynamic_selected_text":
-                    plan = retrieval_plan
-                    assert plan is not None
-                    wait_arguments = ["--eval", _dynamic_text_expression(plan)]
-                    dump = None
-                    wait_metadata = {
-                        "extraction": (
-                            "declared_scope_or_rendered_body_fallback"
-                            if plan.version == 2
-                            else "selected_records_or_rendered_body_fallback"
-                        ),
-                    }
-                    if plan.version == 2:
-                        wait_metadata["extraction_scope"] = {
-                            "selector": plan.extraction_selector,
-                            "maximum_count": plan.extraction_maximum_count,
-                            "frame_selector": plan.extraction_frame_selector,
-                            "exclude_selectors": list(plan.extraction_exclude_selectors),
-                            "fallback": plan.extraction_fallback,
-                        }
-                elif media_metadata_task:
-                    wait_arguments = [
-                        "--eval",
-                        _MEDIA_METADATA_EXPRESSION,
-                        "--wait-until",
-                        wait,
-                    ]
-                    wait_metadata = {
-                        "wait_until": wait,
-                        "extraction": "visible_text_and_standard_media_metadata",
-                    }
-                    dump = None
-                else:
-                    wait_arguments = ["--wait-until", wait]
-                    wait_metadata = {"wait_until": wait, **({"strategy": "native_default_completion"} if case.track == "dynamic" else {})}
-            except ValueError as error:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="configuration",
-                    error_message=str(error),
-                )
-            if retrieval_plan:
-                plan = retrieval_plan
-                # Completion is independent of the selected output representation.
-                # Replace the default navigation wait without losing route flags.
-                if "--wait-until" in wait_arguments:
-                    index = wait_arguments.index("--wait-until")
-                    del wait_arguments[index:index + 2]
-                wait_arguments.extend([
+                result = native.fetch(case, max(.001, call_deadline-time.monotonic()))
+                result.metadata.update(route='raw_file',
+                    reported_version=self._reported_version, binary_sha256=self._binary_sha256)
+                return result
+            finally:
+                with self._process_lock: self._active_native_provider = None
+        wait = self.config.get("wait_until", "done")
+        family_wait = (
+            self.config.get("dynamic_wait_until", "domstable")
+            if case.track == "dynamic"
+            else wait
+        )
+        track_waits = self.config.get("wait_until_by_track", {})
+        family_wait = track_waits.get(case.track, family_wait)
+        native_dynamic_task = (
+            case.track == "dynamic"
+            and case.retrieval_hints == {"version": 3, "mode": "native"}
+        )
+        wait_option = "--" + self.config.get("wait_option", "wait-until")
+        timeout_ms = str(max(1, int(inner_timeout_budget(timeout) * 1000)))
+        dump = "markdown"
+        try:
+            if case.task_kind == "resource":
+                resource_wait = family_wait
+                wait_arguments = [wait_option, resource_wait]
+                wait_metadata = {
+                    "wait_until": resource_wait,
+                    "resource_discovery": "native_markdown_common_url_scoring",
+                }
+            elif completion_plan is not None:
+                plan = completion_plan
+                wait_arguments = [
                     "--wait-selector" if plan.wait_kind == "selector" else "--wait-script",
-                    plan.wait_value, "--wait-until", plan.wait_until,
-                ])
-                if plan.delay_ms:
-                    wait_arguments.extend(["--delay-ms", str(plan.delay_ms)])
-                wait_metadata.update({
+                    plan.wait_value,
+                    wait_option,
+                    plan.wait_until or family_wait,
+                ]
+                wait_metadata = {
                     "strategy": (
-                        "frame_selector_count_script" if plan.frame_selector else
-                        "selector" if plan.wait_kind == "selector" else "selector_count_script"
+                        "frame_selector_count_script"
+                        if plan.frame_selector
+                        else "selector"
+                        if plan.wait_kind == "selector"
+                        else "selector_count_script"
                     ),
                     "selector": plan.selector,
                     "minimum_count": plan.minimum_count,
                     "frame_selector": plan.frame_selector,
-                    "delay_ms": plan.delay_ms,
-                    "timeout_ms": plan.timeout_ms,
-                    "wait_until": plan.wait_until,
+                    "wait_until": plan.wait_until or family_wait,
                     "completion_support": "exact",
-                })
+                    "output_extraction": "native_markdown",
+                }
                 if plan.minimum_text_fragments:
                     wait_metadata["minimum_text_fragments"] = plan.minimum_text_fragments
-                timeout_ms = str(min(int(timeout_ms), plan.timeout_ms))
-            command = [binary, "fetch"]
-            if dump is not None:
-                command.extend(["--dump", dump])
-            command.extend(
-                [
-                    *wait_arguments,
-                    "--timeout",
-                    timeout_ms,
-                    "--http-timeout",
-                    timeout_ms,
-                ]
+            else:
+                wait_arguments = [wait_option, family_wait]
+                wait_metadata = {"wait_until": family_wait}
+                if case.track == "dynamic":
+                    wait_metadata.update(
+                        scope="dynamic_task_family",
+                        strategy="native_task_family_completion",
+                    )
+            if completion_plan is None and case.track in track_waits:
+                wait_metadata.update(
+                    scope=f"{case.track}_task_family",
+                    strategy="native_task_family_completion",
+                )
+        except ValueError as error:
+            return ProviderResult(
+                False,
+                "",
+                error_type="configuration",
+                error_message=str(error),
             )
-        # Forward the common limits to the native transport as well as stdout.
-        command.extend(["--http-connect-timeout", timeout_ms,
-                        "--http-max-response-size", str(int(self.config.get("max_bytes", 20_000_000)))])
+        command = [binary, "fetch"]
+        if dump is not None:
+            command.extend(["--dump", dump])
+        layout = native_dynamic_task
+        if layout:
+            command.append("--layout")
+            wait_metadata["layout"] = {
+                "requested": True,
+                "support": "native",
+                "interface": "--layout",
+                "scope": "dynamic_task_family",
+            }
+        include_subdocuments = (
+            native_dynamic_task
+            or case.task_kind == "resource"
+            or native_contract is not None and native_contract.include_subdocuments
+        )
+        if include_subdocuments:
+            command.append("--with-frames")
+            wait_metadata["subdocuments"] = {
+                "requested": True,
+                "support": "native",
+                "interface": "--with-frames",
+                "harness_content_assembly": False,
+                "scope": (
+                    "dynamic_task_family"
+                    if native_dynamic_task
+                    else "resource_task_family"
+                    if case.task_kind == "resource"
+                    else "declared_native_contract"
+                ),
+            }
+        command.extend(
+            [
+                *wait_arguments,
+                "--timeout",
+                timeout_ms,
+                "--http-timeout",
+                timeout_ms,
+            ]
+        )
+        # The retained answer limit must not restrict page or subresource downloads.
+        command.extend(["--http-connect-timeout", timeout_ms])
         if self.config.get("uniform_native_parameters"):
-            # These are product timers, not the runner's wall-clock deadline.
             for flag in ("--timeout", "--http-timeout", "--http-connect-timeout"):
                 if flag in command:
                     index = command.index(flag)
@@ -734,13 +552,27 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
         diagnostic_read_limit = diagnostic_limit if retain_diagnostic else limit
         metadata = {
             "dump": dump,
+            "layout": layout,
+            "with_frames": include_subdocuments,
             "http_connect_timeout_ms": None if self.config.get("uniform_native_parameters") else int(timeout_ms),
             "internal_timeout_policy": "native_default" if self.config.get("uniform_native_parameters") else "explicit",
-            "http_max_response_bytes": int(self.config.get("max_bytes", 20_000_000)),
-            "route": route,
-            "output": _ROUTE_OUTPUTS[route],
+            "http_max_response_bytes": None,
+            "retained_output_max_bytes": limit,
+            "route": (
+                "resource_native_markdown"
+                if case.task_kind == "resource"
+                else "dynamic_native_markdown"
+                if case.track == "dynamic"
+                else "ordinary_markdown"
+            ),
+            "output": (
+                "native_markdown_resource_urls"
+                if case.task_kind == "resource"
+                else "markdown"
+            ),
             "wait": wait_metadata,
-            "wait_until": None if raw_task else wait_metadata.get("wait_until"),
+            "wait_until": wait_metadata.get("wait_until"),
+            "wait_interface": wait_option,
             "binary": Path(binary).name,
             "block_private_networks": block_private_networks,
             "private_network_guard_exception": private_network_guard_exception,
@@ -748,11 +580,17 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
                 requested_host if private_network_guard_exception else None
             ),
             "log_level": log_level,
-            "network_trace_requested": challenge_task,
+            "network_trace_requested": False,
             "local_report_complete_diagnostic_links": bool(
                 self.config.get("local_report_complete_diagnostic_links", False)
             ),
         }
+        if case.task_kind == "resource":
+            metadata["output_contract"] = "native_markdown_resource_urls"
+            metadata["extractor"] = "moli_native_markdown"
+        else:
+            metadata["output_contract"] = "markdown"
+            metadata["extractor"] = "moli_native_markdown"
         try:
             if hasattr(self, "_binary_identity"):
                 stat = Path(binary).stat()
@@ -817,7 +655,7 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
                 with self._process_lock:
                     self._active_process = process
                     if self._cancel_requested:
-                        self._kill(process)
+                        terminate_owned_process_tree(process)
             except OSError as error:
                 return ProviderResult(
                     False,
@@ -849,7 +687,7 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
                     except subprocess.TimeoutExpired:
                         pass
                 if stopped:
-                    self._kill(process)
+                    terminate_owned_process_tree(process)
                     process.wait()
                 if dns_broker is not None:
                     metadata["dns_queries"] = list(dns_broker.traces)
@@ -912,342 +750,6 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
                 error_message="Moli fetch exceeded time budget",
                 metadata=metadata,
             )
-        if file_task:
-            ok = process.returncode == 0
-            return ProviderResult(
-                ok,
-                "",
-                files=[{"data": raw}] if raw else [],
-                error_type=None if ok else "tool_error",
-                error_message=None if ok else stderr or "Moli file request failed",
-                metadata=metadata,
-            )
-        if document_runtime_fetch_task:
-            if process.returncode != 0:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="tool_error",
-                    error_message=stderr or "Moli document runtime fetch failed",
-                    metadata=metadata,
-                )
-            try:
-                envelope = json.loads(raw.decode("utf-8"))
-                if not isinstance(envelope, dict) or envelope.get("kind") != "document_base64":
-                    raise ValueError("unknown document envelope kind")
-                document_bytes = base64.b64decode(envelope["data"], validate=True)
-                if not document_bytes.startswith(b"PK"):
-                    raise ValueError("runtime response is not an OOXML ZIP document")
-            except (
-                UnicodeDecodeError,
-                json.JSONDecodeError,
-                KeyError,
-                TypeError,
-                ValueError,
-            ) as error:
-                metadata.update(
-                    raw_stdout_sha256=hashlib.sha256(raw).hexdigest(),
-                    _raw_stdout_b64=base64.b64encode(raw).decode("ascii"),
-                )
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="invalid_output",
-                    error_message=f"Moli document runtime output is invalid: {error}",
-                    metadata=metadata,
-                )
-            metadata.update(
-                document_runtime_source=envelope.get("source"),
-                document_runtime_status=envelope.get("status"),
-                document_runtime_content_type=envelope.get("content_type"),
-                document_runtime_second_http_fetch=True,
-                raw_stdout_sha256=hashlib.sha256(document_bytes).hexdigest(),
-                _raw_stdout_b64=base64.b64encode(document_bytes).decode("ascii"),
-            )
-            try:
-                content, extractor = extract_document_text(document_bytes)
-            except Exception as error:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="document_parse_error",
-                    error_message=str(error),
-                    metadata=metadata,
-                )
-            metadata["document_extractor"] = extractor
-            if time.monotonic() >= call_deadline:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="timeout",
-                    error_message="Moli document runtime extraction exceeded time budget",
-                    metadata=metadata,
-                )
-            ok = True
-            status = envelope.get("status")
-            return ProviderResult(
-                ok,
-                content,
-                status_code=status if isinstance(status, int) else None,
-                final_url=envelope.get("source"),
-                error_type=None,
-                error_message=None,
-                metadata=metadata,
-            )
-        if document_task and raw.startswith((b"%PDF", b"PK")):
-            try:
-                content, extractor = extract_document_text(raw)
-            except Exception as error:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="document_parse_error",
-                    error_message=str(error),
-                    metadata=metadata,
-                )
-            metadata.update(
-                document_extractor=extractor,
-                raw_stdout_sha256=hashlib.sha256(raw).hexdigest(),
-                _raw_stdout_b64=base64.b64encode(raw).decode("ascii"),
-            )
-            if time.monotonic() >= call_deadline:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="timeout",
-                    error_message="Moli document extraction exceeded time budget",
-                    metadata=metadata,
-                )
-            ok = process.returncode == 0
-            return ProviderResult(
-                ok,
-                content,
-                error_type=None if ok else "tool_error",
-                error_message=None if ok else stderr or "Moli document request failed",
-                metadata=metadata,
-            )
-        if document_task:
-            metadata.update(
-                document_response="serialized_text_not_raw_document",
-                raw_stdout_sha256=hashlib.sha256(raw).hexdigest(),
-                _raw_stdout_b64=base64.b64encode(raw).decode("ascii"),
-            )
-            return ProviderResult(
-                False,
-                "",
-                error_type="invalid_output" if process.returncode == 0 else "tool_error",
-                error_message=(
-                    "Moli serialized a direct document instead of returning raw bytes"
-                    if process.returncode == 0
-                    else stderr or "Moli did not return raw document bytes"
-                ),
-                metadata=metadata,
-            )
-        if document_page_task:
-            if process.returncode != 0:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="tool_error",
-                    error_message=stderr or "Moli document-page extraction failed",
-                    metadata=metadata,
-                )
-            try:
-                envelope = json.loads(raw.decode("utf-8"))
-            except (UnicodeDecodeError, json.JSONDecodeError) as error:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="invalid_output",
-                    error_message=f"Moli document-page output is invalid JSON: {error}",
-                    metadata=metadata,
-                )
-            metadata["embedded_document_url"] = envelope.get("source")
-            if envelope.get("kind") == "pdf_base64":
-                try:
-                    embedded = base64.b64decode(envelope["data"], validate=True)
-                    content, extractor = extract_document_text(embedded)
-                except Exception as error:
-                    return ProviderResult(
-                        False,
-                        "",
-                        error_type="document_parse_error",
-                        error_message=str(error),
-                        metadata=metadata,
-                    )
-                metadata.update(
-                    document_extractor=extractor,
-                    raw_stdout_sha256=hashlib.sha256(embedded).hexdigest(),
-                    _raw_stdout_b64=base64.b64encode(embedded).decode("ascii"),
-                )
-            elif envelope.get("kind") in {"text", "page_text"}:
-                content = str(envelope.get("text") or "")
-                metadata["document_extractor"] = (
-                    "pdfjs_runtime" if envelope.get("kind") == "text" else "rendered_page_text"
-                )
-            else:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="invalid_output",
-                    error_message="Moli document-page output has an unknown kind",
-                    metadata=metadata,
-                )
-            if time.monotonic() >= call_deadline:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="timeout",
-                    error_message="Moli document-page extraction exceeded time budget",
-                    metadata=metadata,
-                )
-            ok = True
-            return ProviderResult(
-                ok,
-                content,
-                error_type=None,
-                error_message=None,
-                metadata=metadata,
-            )
-        if json_page_task:
-            metadata["final_url_source"] = "same_call_json"
-            metadata.update(
-                raw_stdout_sha256=hashlib.sha256(raw).hexdigest(),
-                _raw_stdout_b64=base64.b64encode(raw).decode("ascii"),
-            )
-            try:
-                envelope = json.loads(raw.decode("utf-8"))
-            except (UnicodeDecodeError, json.JSONDecodeError) as error:
-                return ProviderResult(
-                    False,
-                    "",
-                    error_type="tool_error" if process.returncode else "invalid_output",
-                    error_message=(stderr or "Moli page request failed") if process.returncode
-                    else f"Moli page JSON is invalid: {error}",
-                    metadata=metadata,
-                )
-            if not isinstance(envelope, dict) or not isinstance(envelope.get("html"), str):
-                return ProviderResult(
-                    False,
-                    "",
-                    status_code=envelope.get("status") if isinstance(envelope, dict) else None,
-                    final_url=envelope.get("final_url") if isinstance(envelope, dict) else None,
-                    title=envelope.get("title") if isinstance(envelope, dict) else None,
-                    error_type="invalid_output",
-                    error_message="Moli page JSON omitted final DOM HTML",
-                    metadata=metadata,
-                )
-            trace = envelope.get("network") if isinstance(envelope.get("network"), dict) else {}
-            main = (
-                trace.get("main_document") if isinstance(trace.get("main_document"), dict) else {}
-            )
-            subresources = (
-                trace.get("subresources") if isinstance(trace.get("subresources"), list) else []
-            )
-            metadata["network_trace"] = {
-                "main_document": {
-                    key: main.get(key)
-                    for key in (
-                        "url",
-                        "requested_url",
-                        "status",
-                        "content_type",
-                        "redirected",
-                        "redirect_count",
-                    )
-                    if key in main
-                },
-                "subresource_count": len(subresources),
-                "failed_subresource_count": sum(
-                    isinstance(item, dict) and item.get("ok") is False for item in subresources
-                ),
-                "response_header_names": sorted(
-                    {
-                        str(item.get("name", "")).casefold()
-                        for item in envelope.get("headers", [])
-                        if isinstance(item, dict) and item.get("name")
-                    }
-                ),
-                "redirect_chain": [
-                    {key: item.get(key) for key in ("from_url", "to_url", "status")}
-                    for item in envelope.get("redirect_chain", [])[:20]
-                    if isinstance(item, dict)
-                ],
-            }
-            remaining = call_deadline - time.monotonic()
-            if remaining <= 0:
-                return ProviderResult(
-                    False,
-                    "",
-                    status_code=envelope.get("status"),
-                    final_url=envelope.get("final_url"),
-                    title=envelope.get("title"),
-                    error_type="timeout",
-                    error_message="Moli page conversion exceeded time budget",
-                    metadata=metadata,
-                )
-            try:
-                metadata['converter_sha256'] = hashlib.sha256(CONVERTER.read_bytes()).hexdigest()
-                metadata['extractor_version'] = '2.0.0'
-                converted = subprocess.run(
-                    converter_command(markdown_package),
-                    input=envelope["html"].encode("utf-8"),
-                    capture_output=True,
-                    timeout=remaining,
-                    check=False,
-                )
-            except subprocess.TimeoutExpired:
-                return ProviderResult(
-                    False,
-                    "",
-                    status_code=envelope.get("status"),
-                    final_url=envelope.get("final_url"),
-                    title=envelope.get("title"),
-                    error_type="timeout",
-                    error_message="Moli page conversion exceeded time budget",
-                    metadata=metadata,
-                )
-            if converted.returncode != 0 or len(converted.stdout) > limit:
-                return ProviderResult(
-                    False,
-                    "",
-                    status_code=envelope.get("status"),
-                    final_url=envelope.get("final_url"),
-                    title=envelope.get("title"),
-                    error_type="conversion_error" if converted.returncode else "output_too_large",
-                    error_message=(
-                        converted.stderr.decode("utf-8", "replace")[:2000]
-                        if converted.returncode
-                        else "Converted page output exceeds max_bytes"
-                    ),
-                    metadata=metadata,
-                )
-            content = converted.stdout.decode("utf-8", "replace")
-            status = envelope.get("status")
-            http_ok = isinstance(status, int) and 200 <= status < 400
-            ok = process.returncode == 0 and http_ok
-            return ProviderResult(
-                ok,
-                content,
-                status_code=status if isinstance(status, int) else None,
-                final_url=envelope.get("final_url"),
-                title=envelope.get("title"),
-                error_type=(
-                    None
-                    if ok
-                    else "api_error"
-                    if isinstance(status, int) and status >= 400
-                    else "tool_error"
-                ),
-                error_message=(
-                    None
-                    if ok
-                    else stderr or f"Moli returned HTTP {status}"
-                    if isinstance(status, int) and status >= 400
-                    else stderr or "Moli challenge request failed"
-                ),
-                metadata=metadata,
-            )
         try:
             content = raw.decode("utf-8")
         except UnicodeDecodeError:
@@ -1258,21 +760,41 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
                 error_message="Moli markdown output is not UTF-8",
                 metadata=metadata,
             )
-        parsed_error_status = _markdown_http_error_status(content)
+        native_status, readiness_timed_out = _native_fetch_diagnostics(diagnostic_raw, case.url)
+        if native_status is not None:
+            metadata["http_status_source"] = "same_call_native_document_event"
+        if readiness_timed_out:
+            metadata["native_readiness_timed_out"] = True
+        if process.returncode == 0 and not content.strip() and native_status not in range(400, 600):
+            return ProviderResult(
+                False,
+                content,
+                error_type="timeout" if readiness_timed_out else "empty_response",
+                error_message=("Moli readiness deadline expired without Markdown content"
+                               if readiness_timed_out else "Moli returned no Markdown content"),
+                metadata=metadata,
+            )
+        parsed_error_status = ((native_status if native_status >= 400 else None)
+                               if native_status is not None else _markdown_http_error_status(content))
         ok = process.returncode == 0 and parsed_error_status is None
+        native_error_type = _moli_native_error_type(diagnostic_raw)
         final_url = _diagnostic_main_document_url(diagnostic_raw, case.url)
         if final_url:
             metadata["final_url_source"] = "same_call_debug_log"
-        # The debug trace is part of this same provider call, so page identity
-        # does not require a second request. Moli's compact whole-response error
-        # page remains the only status envelope recognized in Markdown output.
+        # Preserve native Markdown even on HTTP errors or best-effort readiness.
+        # Nonempty best-effort output remains a valid answer for the shared scorer;
+        # its content failures do not acquire a new retry policy.
         return ProviderResult(
             ok,
             content,
-            status_code=parsed_error_status,
+            status_code=native_status if native_status is not None else parsed_error_status,
             final_url=final_url,
             error_type=(
-                None if ok else "api_error" if parsed_error_status is not None else "tool_error"
+                None
+                if ok
+                else "api_error"
+                if parsed_error_status is not None
+                else native_error_type
             ),
             error_message=(
                 None
@@ -1289,27 +811,9 @@ def cancel(self) -> None:
         # thread on process creation. The launching thread kills a late child.
         with self._process_lock:
             self._cancel_requested = True
-            self._kill(self._active_process)
+            terminate_owned_process_tree(self._active_process)
+            if self._active_native_provider is not None: self._active_native_provider.cancel()
 
     @property
     def cancellation_cleanup_seconds(self) -> float:
         return 1.0
-
-    @staticmethod
-    def _kill(process):
-        if process is not None and process.poll() is None:
-            if os.name == "posix":
-                try:
-                    os.killpg(process.pid, signal.SIGKILL)
-                    return
-                except ProcessLookupError:
-                    return
-                except OSError:
-                    # Sandboxes can forbid process-group signalling while
-                    # still allowing the direct child to be terminated.
-                    pass
-            try:
-                if process.poll() is None:
-                    process.kill()
-            except OSError:
-                pass
diff --git a/harness/web_fetch/publication_check.py b/harness/web_fetch/publication_check.py
index 86b8d84b0..0c575a87e 100644
--- a/harness/web_fetch/publication_check.py
+++ b/harness/web_fetch/publication_check.py
@@ -14,7 +14,11 @@
 from harness.record_io import parse_jsonl
 from harness.reporting.links import validate_virtual_links
 from harness.reporting.publication import archive_inventory
-from harness.web_fetch.publication_privacy import project_file, publication_risk
+from harness.web_fetch.publication_privacy import (
+    project_file,
+    project_redundant_result_streams,
+    publication_risk,
+)
 from harness.web_fetch.safety import contained_path, evidence_tree_identity
 from harness.web_fetch.webmainbench_diagnostics import (
     require_valid_teds_for_release,
@@ -128,9 +132,33 @@ def data(name):
                 raise ValueError("Publication source hash differs or source binding is missing: " + name)
         privacy = json.loads(data("publication-privacy.json"))
         privacy_by_path = {row["path"]: row for row in privacy["files"]}
+        footprint_by_path = {
+            row["path"]: row for row in privacy.get("footprint_projections", [])
+        }
         results_raw = data("results.jsonl")
-        if results_raw != project_file("results.jsonl", (source / "results.jsonl").read_bytes())[0]:
+        source_results = (source / "results.jsonl").read_bytes()
+        privacy_results = project_file("results.jsonl", source_results)[0]
+        expected_results, expected_footprint = project_redundant_result_streams(
+            "results.jsonl", privacy_results
+        )
+        if results_raw != expected_results:
             raise ValueError("Published results differ from the current source evidence")
+        if bool(expected_footprint) != bool(footprint_by_path):
+            raise ValueError("Publication footprint disclosure differs from the public projection")
+        if expected_footprint:
+            receipt = footprint_by_path.get("results.jsonl")
+            if (
+                len(footprint_by_path) != 1
+                or not receipt
+                or receipt.get("original_sha256") != hashlib.sha256(source_results).hexdigest()
+                or receipt.get("published_sha256") != hashlib.sha256(results_raw).hexdigest()
+                or receipt.get("original_bytes") != len(source_results)
+                or receipt.get("published_bytes") != len(results_raw)
+                or receipt.get("omitted_fields") != expected_footprint.get("omitted_fields")
+                or receipt.get("omitted_payload_bytes")
+                != expected_footprint.get("omitted_payload_bytes")
+            ):
+                raise ValueError("Invalid publication footprint disclosure")
         rows = parse_jsonl(results_raw)
         require_valid_teds_for_release(rows)
         latency_receipt = validate_latency_correction(source)
diff --git a/harness/web_fetch/publication_privacy.py b/harness/web_fetch/publication_privacy.py
index 20e1dcfa3..d3eaf112f 100644
--- a/harness/web_fetch/publication_privacy.py
+++ b/harness/web_fetch/publication_privacy.py
@@ -44,6 +44,70 @@ def project_execution_manifest(manifest: dict) -> dict:
     return result
 
 
+_DUPLICATED_RESULT_STREAMS = ('stderr', 'stdout', 'browser_stderr')
+
+
+def project_redundant_result_streams(name: str, data: bytes):
+    """Omit result-embedded streams when the public call log owns the same evidence.
+
+    The measured result remains unchanged in the retained evidence tree.  The hosted
+    ``results.jsonl`` keeps scores, verdicts, timings, hashes and the call-log binding;
+    large diagnostic streams are loaded from that bound log instead of being shipped
+    a second time inside every result row.
+    """
+    if name != 'results.jsonl':
+        return data, None
+    lines = data.splitlines(keepends=True)
+    try:
+        rows = [json.loads(line) if line.strip() else None for line in lines]
+    except (ValueError, UnicodeError):
+        return data, None
+    counts = {key: 0 for key in _DUPLICATED_RESULT_STREAMS}
+    omitted_bytes = 0
+    output = []
+    changed = False
+    for raw, row in zip(lines, rows):
+        row_changed = False
+        metadata = row.get('provider_metadata') if isinstance(row, dict) else None
+        retry = metadata.get('retry') if isinstance(metadata, dict) else None
+        has_public_call_log = bool(
+            isinstance(metadata, dict)
+            and (
+                metadata.get('call_log')
+                or metadata.get('call_log_path')
+                or (isinstance(retry, dict) and retry.get('attempts'))
+            )
+            or isinstance(row, dict)
+            and (row.get('call_log') or row.get('call_log_path'))
+        )
+        if has_public_call_log:
+            for key in _DUPLICATED_RESULT_STREAMS:
+                if key in metadata:
+                    value = metadata.pop(key)
+                    omitted_bytes += len(str(value).encode('utf-8', errors='replace'))
+                    counts[key] += 1
+                    changed = True
+                    row_changed = True
+        if row_changed:
+            ending = b'\r\n' if raw.endswith(b'\r\n') else b'\n' if raw.endswith(b'\n') else b''
+            output.append(json.dumps(row, ensure_ascii=False, separators=(',', ':')).encode() + ending)
+        else:
+            output.append(raw)
+    if not changed:
+        return data, None
+    projected = b''.join(output)
+    return projected, {
+        'path': name,
+        'reason': 'diagnostic streams are served once from hash-bound public call logs',
+        'omitted_fields': {key: value for key, value in counts.items() if value},
+        'omitted_payload_bytes': omitted_bytes,
+        'original_sha256': hashlib.sha256(data).hexdigest(),
+        'published_sha256': hashlib.sha256(projected).hexdigest(),
+        'original_bytes': len(data),
+        'published_bytes': len(projected),
+    }
+
+
 GOOGLE_KEY = re.compile(rb'AIzaSy[A-Za-z0-9_-]{20,}')
 OTHER_SECRET = re.compile(
     rb'(?<![A-Za-z0-9_-])(?:ahp_[A-Za-z0-9_-]{20,}|gh[pousr]_[A-Za-z0-9]{20,}|'
@@ -57,6 +121,19 @@ def project_execution_manifest(manifest: dict) -> dict:
     rb'(?i)(?:proxy-)?authorization\s*[:=]\s*'
     rb'(?:[A-Za-z][A-Za-z0-9_-]*\s+)?(?:<[^>\r\n]+>|\[[^\]\r\n]+\])'
 )
+PUBLIC_CORS_CREDENTIAL_POLICY = re.compile(
+    rb'''(?i)["']?access[-_]control[-_]allow[-_]credentials["']?\s*[:=]\s*'''
+    rb'''(?:%[si])?["'`]*(?:true|false)["'`]*'''
+)
+
+
+def _public_cors_policy(data):
+    """A CORS permission Boolean (including ABNF) is not a credential value."""
+    decoded = html.unescape(data.decode('utf-8', errors='surrogateescape'))
+    return bool(PUBLIC_CORS_CREDENTIAL_POLICY.fullmatch(decoded.strip().encode(
+        'utf-8', errors='surrogateescape')))
+
+
 AUTH_SENSITIVE_VALUE = re.compile(
     rb'(?im)((?:proxy[-_]?authorization|authorization)[ \t]*[:=][ \t]*)'
     rb'(?![A-Za-z][A-Za-z0-9_-]*[ \t]+(?:<|\[)|(?:<|\[))'
@@ -86,11 +163,24 @@ def project_execution_manifest(manifest: dict) -> dict:
     rb'(?i)((&quot;|&#0*34;|&#x0*22;|&apos;|&#0*39;|&#x0*27;)'
     + SENSITIVE_KEY + rb'\2\s*:\s*\2)(?!<|\[)([^\r\n]*?)(\2)'
 )
+# Reader-facing excerpts can stop inside a quoted header value. Bound such a
+# value by the current line/text node rather than waiting for a later HTML quote.
+JSON_SENSITIVE_TAIL = re.compile(
+    rb'(?im)(["\']' + SENSITIVE_KEY + rb'["\']\s*:\s*["\'])(?!<|\[)'
+    rb'((?:\\.|[^"\'\r\n<])*)(?=<|$)'
+)
+ENTITY_SENSITIVE_TAIL = re.compile(
+    rb'(?im)((&quot;|&#0*34;|&#x0*22;|&apos;|&#0*39;|&#x0*27;)'
+    + SENSITIVE_KEY + rb'\2\s*:\s*\2)(?!<|\[|&lt;|&#0*60;|&#x0*3c;)'
+    rb'((?:(?!\2)[^\r\n<])*)(?=<|$)'
+)
 LOCAL_USER_PATH = re.compile(
     rb'(?<![A-Za-z0-9])(?:/(?:Users|home)/[^/\s"\'<>]+/|/root/)'
 )
 
 REDACTIONS = (
+    (ENTITY_SENSITIVE_TAIL, 'sensitive_field', rb'\1[REDACTED]'),
+    (JSON_SENSITIVE_TAIL, 'sensitive_field', rb'\1[REDACTED]'),
     (ENTITY_SENSITIVE_VALUE, 'sensitive_field', rb'\1[REDACTED]\4'),
     (AUTH_SENSITIVE_VALUE, 'sensitive_field', rb'\1[REDACTED]'),
     (JSON_SENSITIVE_VALUE, 'sensitive_field', rb'\1[REDACTED]\3'),
@@ -104,10 +194,22 @@ def _redact_plain_url_queries(text):
 
     def redact_url(match):
         nonlocal replacements
-        url = match.group()
+        original = match.group()
+        decoded = original
+        while True:
+            unescaped = html.unescape(decoded)
+            if unescaped == decoded:
+                break
+            decoded = unescaped
+        bounded = EMBEDDED_URL.match(decoded)
+        if bounded is None:
+            return original
+        url = bounded.group()
+        suffix = decoded[len(url):]
         query = url.partition('?')[2].partition('#')[0]
         if not query:
-            return url
+            return original
+        prior_replacements = replacements
         parts = []
         for item in query.split('&'):
             key, separator, value = item.partition('=')
@@ -122,7 +224,10 @@ def redact_url(match):
                 item = key + '=[REDACTED]'
                 replacements += 1
             parts.append(item)
-        return url.replace('?' + query, '?' + '&'.join(parts), 1)
+        if replacements == prior_replacements:
+            return original
+        projected = url.replace('?' + query, '?' + '&'.join(parts), 1) + suffix
+        return html.escape(projected, quote=True) if decoded != original else projected
 
     return EMBEDDED_URL.sub(redact_url, text), replacements
 
@@ -161,12 +266,14 @@ def auth_matches(data):
             or PUBLIC_AUTH_PLACEHOLDER.fullmatch(data.strip())):
         return []
     matches = sorted(
-        [*ENTITY_SENSITIVE_VALUE.finditer(data), *AUTH_SENSITIVE_VALUE.finditer(data), *JSON_SENSITIVE_VALUE.finditer(data),
+        [*ENTITY_SENSITIVE_TAIL.finditer(data), *JSON_SENSITIVE_TAIL.finditer(data), *ENTITY_SENSITIVE_VALUE.finditer(data), *AUTH_SENSITIVE_VALUE.finditer(data), *JSON_SENSITIVE_VALUE.finditer(data),
          *LINE_SENSITIVE_VALUE.finditer(data)],
         key=lambda match: (match.start(), -match.end()),
     )
     distinct = []
     for match in matches:
+        if _public_cors_policy(match.group()):
+            continue
         if distinct and match.start() < distinct[-1].end():
             continue
         distinct.append(match)
@@ -188,12 +295,18 @@ def publication_risk(data):
 
 
 def project_file(name, data):
-    """Redact only auxiliary HTML. Any match elsewhere requires human review."""
+    """Project public copies and bind their hashes to retained original evidence."""
     path = PurePosixPath(name)
     if 'private_artifacts' in path.parts:
         raise ValueError('Private evidence is not publishable: ' + name)
     if any(part.startswith('.') for part in path.parts):
         raise ValueError('Private/hidden file is not publishable: ' + name)
+    if OTHER_SECRET.search(data):
+        raise ValueError('Potential credential-shaped value in publication file: ' + name)
+    if name.endswith(('.json', '.jsonl')):
+        structured = _project_json(name, data)
+        if structured is not None:
+            return structured
     original = data
     inline_replacements = 0
     inline_kinds = set()
@@ -221,7 +334,8 @@ def project_pre(match):
     projected = GOOGLE_KEY.sub(b'[REDACTED_GOOGLE_API_KEY]',
                                url_projected.encode('utf-8', errors='surrogateescape'))
     for pattern, _, replacement in REDACTIONS:
-        projected = pattern.sub(replacement, projected)
+        projected = pattern.sub(lambda match: match.group() if _public_cors_policy(
+            match.group()) else match.expand(replacement), projected)
     projected = LOCAL_USER_PATH.sub(b'/[REDACTED_USER]/', projected)
     categories = []
     kinds = []
@@ -242,3 +356,57 @@ def project_pre(match):
         'original_bytes': len(original),
         'published_bytes': len(projected),
     }
+
+
+def _project_json(name, data):
+    """Project decoded values so header text cannot consume JSON delimiters."""
+    lines = data.splitlines(keepends=True) if name.endswith('.jsonl') else [data]
+    try:
+        documents = [json.loads(line) if line.strip() else None for line in lines]
+    except (ValueError, UnicodeError):
+        return None
+    replacements = 0
+    kinds = set()
+
+    def project(value):
+        nonlocal replacements
+        if isinstance(value, dict):
+            result = {}
+            for key, child in value.items():
+                if (isinstance(child, str) and child
+                        and re.fullmatch(SENSITIVE_KEY, key.encode(), re.I)
+                        and not child.startswith(('<', '['))
+                        and not PUBLIC_AUTH_PLACEHOLDER.fullmatch((key+': '+child).encode())):
+                    result[key] = '[REDACTED]'
+                    replacements += 1
+                    kinds.add('credential')
+                else:
+                    result[key] = project(child)
+            return result
+        if isinstance(value, list):
+            return [project(child) for child in value]
+        if isinstance(value, str):
+            raw, receipt = project_file(name+'.value.txt', value.encode())
+            if receipt:
+                replacements += receipt['replacements']
+                kinds.update(receipt['kinds'])
+            return raw.decode()
+        return value
+
+    output = []
+    for raw, document in zip(lines, documents):
+        revised = project(document)
+        if revised == document:
+            output.append(raw)
+        else:
+            ending = b'\r\n' if raw.endswith(b'\r\n') else b'\n' if raw.endswith(b'\n') else b''
+            output.append(json.dumps(revised, ensure_ascii=True).encode()+ending)
+    projected = b''.join(output)
+    if projected == data:
+        return data, None
+    return projected, {'path': name, 'kinds': sorted(kinds),
+        'reason': 'sensitive values in decoded JSON; JSON structure and non-sensitive fields retained',
+        'replacements': replacements,
+        'original_sha256': hashlib.sha256(data).hexdigest(),
+        'published_sha256': hashlib.sha256(projected).hexdigest(),
+        'original_bytes': len(data), 'published_bytes': len(projected)}
diff --git a/harness/web_fetch/reference_freeze.py b/harness/web_fetch/reference_freeze.py
index 8c0ea7715..8696b0669 100644
--- a/harness/web_fetch/reference_freeze.py
+++ b/harness/web_fetch/reference_freeze.py
@@ -118,7 +118,7 @@ def _require_promotion(path, *, dataset_sha256, capture_audit_sha256,
 def select_freeze_cases(dataset, case_ids=None, exclude_case_ids=None):
     """Return the exact requested subset; shared by prepare and freeze."""
     selected=deepcopy(dataset)
-    selected.setdefault('comparison',{})['require_independent_result_review']=True
+    selected.setdefault('comparison',{})
     if case_ids:
         wanted=set(case_ids.split(','))
         selected['cases']=[case for case in selected['cases'] if case['id'] in wanted]
@@ -161,7 +161,7 @@ def load_browser_observations(dataset, path=None, directory=None):
     return observations
 
 
-def compute_reference_update(dataset, captures, observations=None):
+def compute_reference_update(dataset, captures, observations=None, *, refresh_case_ids=()):
     """Compute the one authoritative frozen dataset/change set from captures."""
     from harness.web_fetch.reference_lifecycle import _completion
 
@@ -171,7 +171,13 @@ def compute_reference_update(dataset, captures, observations=None):
     changes=[];contexts={}
     for case in frozen['cases']:
         cid=case['id']
-        refresh=requires_fresh_reference(case)
+        refresh=(requires_fresh_reference(case) or (
+            cid in refresh_case_ids
+            and case.get('track','web') in {'web','dynamic','challenge'}
+            and case.get('task_kind','body')=='body'
+            and not case.get('acceptance_contract')
+            and bool(case.get('source_verification'))
+            and bool((case.get('ground_truth_main_content') or '').strip())))
         if not refresh:
             # A previously unavailable body reference must be allowed to
             # recover when a later independent HTTP capture is complete.  Do
@@ -297,8 +303,11 @@ def main(argv=None):
                                     args.exclude_case_ids)
         observations=load_browser_observations(
             dataset,args.browser_observations,args.browser_observation_directory)
+        refresh_case_ids = ({change['case_id'] for change in
+            json.loads(args.reference_promotion.read_text()).get('changes', [])}
+            if args.reference_promotion else set())
         dataset,changes,contexts=compute_reference_update(
-            dataset,args.captures,observations)
+            dataset,args.captures,observations, refresh_case_ids=refresh_case_ids)
     except (OSError,KeyError,ValueError,json.JSONDecodeError) as error:
         p.error(str(error))
     audit_path=args.captures/'audit.json'
@@ -318,7 +327,7 @@ def main(argv=None):
     args.output.mkdir(parents=True)
     materialize_task_references(args.output, input_trees, [case['id'] for case in dataset['cases']])
     for case in dataset['cases']:
-        if not requires_fresh_reference(case):
+        if case['id'] not in contexts:
             continue
         cid = case['id']; target = args.output/'sources'/cid
         target.mkdir(parents=True, exist_ok=True)
@@ -457,7 +466,8 @@ def prepare_promotion(*,dataset_path,captures,output,approved_by,approved_at,
     dataset=select_freeze_cases(json.loads(dataset_bytes),case_ids,exclude_case_ids)
     observations=load_browser_observations(
         dataset,browser_observations,browser_observation_directory)
-    candidate,changes,_=compute_reference_update(dataset,captures,observations)
+    candidate,changes,_=compute_reference_update(dataset,captures,observations,
+        refresh_case_ids=[case['id'] for case in dataset['cases']])
     if not changes:
         raise ValueError('Captured reference scope is unchanged; no promotion is needed')
     audit_bytes=(captures/'audit.json').read_bytes()
@@ -548,7 +558,7 @@ def promote(*,canonical_path,candidate_path,captures,receipt_path,receipt_target
     observations=load_browser_observations(
         selected,browser_observations,browser_observation_directory)
     expected,changes,contexts=compute_reference_update(
-        selected,captures,observations)
+        selected,captures,observations, refresh_case_ids=case_ids)
     expected_bytes=(json.dumps(expected,ensure_ascii=False,indent=2)+'\n').encode()
     candidate_bytes=candidate_path.read_bytes()
     if candidate_bytes!=expected_bytes:
diff --git a/harness/web_fetch/reference_inputs.py b/harness/web_fetch/reference_inputs.py
index ac5466ce9..228857e8b 100644
--- a/harness/web_fetch/reference_inputs.py
+++ b/harness/web_fetch/reference_inputs.py
@@ -8,12 +8,17 @@
 import re
 import tempfile
 from pathlib import Path
+from urllib.parse import quote, urlsplit, urlunsplit
+from urllib.request import urlopen
 
 from harness.reporting.assets import copy_bound_assets
+from harness.reporting.packs import read_packed_file
 from harness.web_fetch.safety import contained_path, reject_evidence_symlinks, safe_identifier
 from harness.web_fetch.storage import data_home
 
 MANIFEST_NAME = "source-inputs.json"
+_PACKED_INPUT_PREFIXES = ("sources/", "list-references/")
+_MAX_REMOTE_FILE_BYTES = 64_000_000
 
 
 def digest(path: Path) -> str:
@@ -230,10 +235,130 @@ def import_inputs(manifest_path: Path, source: Path) -> Path:
     return output
 
 
+def _remote_file_url(manifest_url: str, relative: str) -> str:
+    parts = urlsplit(manifest_url)
+    if parts.scheme != "https" or not parts.netloc or not parts.path.endswith("/manifest.json"):
+        raise ValueError("Packed snapshot manifest must use an HTTPS manifest.json URL")
+    selected = Path(relative)
+    if selected.is_absolute() or not selected.parts or ".." in selected.parts:
+        raise ValueError("Packed snapshot file path escapes its origin")
+    path = parts.path[: -len("manifest.json")] + quote(relative, safe="/")
+    return urlunsplit((parts.scheme, parts.netloc, path, parts.query, ""))
+
+
+def _download_bytes(url: str) -> bytes:
+    with urlopen(url, timeout=60) as response:
+        declared = response.headers.get("Content-Length")
+        if declared is not None and int(declared) > _MAX_REMOTE_FILE_BYTES:
+            raise ValueError("Packed snapshot file exceeds the download limit")
+        raw = response.read(_MAX_REMOTE_FILE_BYTES + 1)
+    if len(raw) > _MAX_REMOTE_FILE_BYTES:
+        raise ValueError("Packed snapshot file exceeds the download limit")
+    return raw
+
+
+def import_packed_snapshot(
+    manifest_url: str,
+    expected_manifest_sha256: str,
+    expected_dataset_sha256: str,
+    identifier: str,
+    *,
+    fetch_bytes=_download_bytes,
+) -> Path:
+    """Restore only benchmark inputs from one immutable public packed snapshot."""
+    safe_identifier(identifier)
+    for label, value in (
+        ("manifest", expected_manifest_sha256),
+        ("dataset", expected_dataset_sha256),
+    ):
+        if not isinstance(value, str) or not re.fullmatch(r"[0-9a-f]{64}", value):
+            raise ValueError(f"Packed snapshot {label} SHA-256 is invalid")
+    manifest_raw = fetch_bytes(manifest_url)
+    if hashlib.sha256(manifest_raw).hexdigest() != expected_manifest_sha256:
+        raise ValueError("Packed snapshot manifest differs from its pinned hash")
+    manifest = json.loads(manifest_raw)
+    if manifest.get("schema_version") != 2 or not isinstance(manifest.get("files"), dict):
+        raise ValueError("Unsupported packed snapshot manifest")
+    if any(not isinstance(name, str) for name in manifest["files"]):
+        raise ValueError("Packed snapshot file name is invalid")
+    selected = {
+        name: entry
+        for name, entry in manifest["files"].items()
+        if name == "dataset.json" or name.startswith(_PACKED_INPUT_PREFIXES)
+    }
+    if "dataset.json" not in selected:
+        raise ValueError("Packed snapshot does not contain dataset.json")
+    if selected["dataset.json"].get("sha256") != expected_dataset_sha256:
+        raise ValueError("Packed snapshot dataset differs from its pinned hash")
+    source_dataset_sha256 = selected["dataset.json"].get("source_sha256")
+    if (
+        source_dataset_sha256 is not None
+        and source_dataset_sha256 != expected_dataset_sha256
+    ):
+        raise ValueError(
+            "Packed snapshot dataset is a publication projection, not the scored source dataset"
+        )
+    for name, entry in selected.items():
+        relative = Path(name)
+        if relative.is_absolute() or ".." in relative.parts:
+            raise ValueError("Packed snapshot input path escapes its destination")
+        if not isinstance(entry, dict) or not isinstance(entry.get("parts"), list):
+            raise ValueError("Packed snapshot file entry is invalid")
+
+    class RemoteArchive:
+        def __init__(self):
+            self.downloaded = {"manifest.json": manifest_raw}
+
+        def read(self, name):
+            if name not in self.downloaded:
+                self.downloaded[name] = fetch_bytes(_remote_file_url(manifest_url, name))
+            return self.downloaded[name]
+
+    output = data_home() / "reference-inputs" / identifier
+    if output.exists() or output.is_symlink():
+        raise ValueError(
+            "Reference input destination already exists; verify it or select a new snapshot id"
+        )
+    output.parent.mkdir(parents=True, exist_ok=True)
+    archive = RemoteArchive()
+    decompressed = {}
+    with tempfile.TemporaryDirectory(prefix=".reference-inputs-", dir=output.parent) as work:
+        staging = Path(work) / "inputs"
+        staging.mkdir()
+        for name in sorted(selected):
+            raw = read_packed_file(archive, name, cache=decompressed)
+            target = contained_path(staging, name, reject_symlinks=True)
+            target.parent.mkdir(parents=True, exist_ok=True)
+            target.write_bytes(raw)
+        if digest(staging / "dataset.json") != expected_dataset_sha256:
+            raise ValueError("Restored packed dataset differs from its pinned hash")
+        receipt = {
+            "schema_version": 1,
+            "kind": "packed_reference_input_import",
+            "id": identifier,
+            "manifest_url": manifest_url,
+            "manifest_sha256": expected_manifest_sha256,
+            "dataset_sha256": expected_dataset_sha256,
+            "input_file_count": len(selected),
+            "downloaded_packs": sorted(
+                name for name in archive.downloaded if name != "manifest.json"
+            ),
+        }
+        (staging / "import-receipt.json").write_text(
+            json.dumps(receipt, ensure_ascii=False, indent=2) + "\n", encoding="utf-8"
+        )
+        staging.rename(output)
+    return output
+
+
 def main(argv=None) -> None:
     parser = argparse.ArgumentParser(description=__doc__)
-    parser.add_argument("--manifest", type=Path, required=True)
-    action = parser.add_mutually_exclusive_group(required=True)
+    parser.add_argument("--manifest", type=Path)
+    parser.add_argument("--packed-manifest-url")
+    parser.add_argument("--expected-manifest-sha256")
+    parser.add_argument("--expected-dataset-sha256")
+    parser.add_argument("--snapshot-id")
+    action = parser.add_mutually_exclusive_group()
     action.add_argument(
         "--source", type=Path, help="Approved local source copy; no network download"
     )
@@ -243,6 +368,29 @@ def main(argv=None) -> None:
         help="Verify every installed input against the manifest",
     )
     args = parser.parse_args(argv)
+    if args.packed_manifest_url:
+        if args.manifest or args.check or args.source:
+            parser.error("--packed-manifest-url cannot be combined with local manifest actions")
+        required = {
+            "--expected-manifest-sha256": args.expected_manifest_sha256,
+            "--expected-dataset-sha256": args.expected_dataset_sha256,
+            "--snapshot-id": args.snapshot_id,
+        }
+        missing = [name for name, value in required.items() if not value]
+        if missing:
+            parser.error("packed snapshot import requires " + ", ".join(missing))
+        output = import_packed_snapshot(
+            args.packed_manifest_url,
+            args.expected_manifest_sha256,
+            args.expected_dataset_sha256,
+            args.snapshot_id,
+        )
+        print(output)
+        return
+    if args.manifest is None:
+        parser.error("--manifest is required for local source and check actions")
+    if not args.check and args.source is None:
+        parser.error("select --source or --check")
     if args.check:
         manifest = load_manifest(args.manifest)
         root = input_root(manifest)
diff --git a/harness/web_fetch/reference_lifecycle.py b/harness/web_fetch/reference_lifecycle.py
index 578e01864..263574fdf 100644
--- a/harness/web_fetch/reference_lifecycle.py
+++ b/harness/web_fetch/reference_lifecycle.py
@@ -17,10 +17,66 @@
 from harness.record_io import load_jsonl, parse_jsonl
 
 from .metrics import normalize_for_match, normalize_resource_url
-from .reference_inputs import input_tree
+from .reference_inputs import input_tree, read_dataset_bytes
 from .render_evidence import validate_render_reference
+
+
+HOMEPAGE_READER_SCOPE_PROMPTS = frozenset({
+    "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。"
+    "不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、"
+    "不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。",
+    "直接获取这个热门网站首次加载后可见的稳定正文，保留产品、功能、栏目和支持入口文字。"
+    "不固定轮播内容、当前条目、顺序、价格、排名或数量；不点击子页面、不翻页、不滚动触发更多内容、"
+    "不登录，也不执行其他 Browser Use 操作。图片文字、隐藏名称、网页标题和脚本文字不能代替正文。"
+    "同时返回至少 10 条不同的具名详情入口；每条包含有意义的名称和 HTTP(S) 链接，链接路径完整匹配 /[0-9]+。",
+    "直接获取这个热门网站首次加载后可见的稳定正文，保留栏目和支持入口文字；同时返回至少 10 条不同的"
+    "具名文章入口，每条包含有意义的名称和 HTTP(S) 链接。不固定当前文章、顺序、排名或数量；不点击子页面、"
+    "不翻页、不滚动触发更多内容、不登录，也不执行其他 Browser Use 操作。图片文字、按钮控件文字、隐藏名称、"
+    "网页标题和脚本文字不能代替正文。",
+})
 from .safety import contained_path, safe_identifier
 
+
+def _same_homepage_reader_constraints(old: dict, new: dict) -> bool:
+    """Accept revised homepage prose only when its operational suffix is unchanged."""
+    old_prompt = old.get("task_prompt", "")
+    new_prompt = new.get("task_prompt", "")
+    constraint_marker = "不点击子页面"
+    return (
+        isinstance(old_prompt, str)
+        and isinstance(new_prompt, str)
+        and constraint_marker in old_prompt
+        and constraint_marker in new_prompt
+        and old_prompt[old_prompt.index(constraint_marker):]
+        == new_prompt[new_prompt.index(constraint_marker):]
+    )
+
+
+def homepage_prompt_anchor_correction(old: dict, new: dict) -> bool:
+    """Recognize a reader-scope prompt synchronized with narrowed homepage anchors."""
+    before = old.get("acceptance_contract", {})
+    after = new.get("acceptance_contract", {})
+    without_anchors = lambda value: {
+        key: item for key, item in value.items() if key != "stable_text_anchors"
+    }
+    anchors = after.get("stable_text_anchors", [])
+    new_prompt = new.get("task_prompt", "")
+    return (
+        old.get("source_benchmark", {}).get("mode")
+        == new.get("source_benchmark", {}).get("mode")
+        == "ranked_domain_homepage"
+        and before.get("stable_text_anchors") != anchors
+        and without_anchors(before) == without_anchors(after)
+        and bool(anchors)
+        and (
+            new_prompt in HOMEPAGE_READER_SCOPE_PROMPTS
+            or (
+                new.get("reference_answer") == new_prompt
+                and _same_homepage_reader_constraints(old, new)
+            )
+        )
+    )
+
 MAX_REFERENCE_AGE_SECONDS = 30 * 60
 
 
@@ -81,29 +137,22 @@ def _not_future(value, now: datetime) -> datetime:
     return checked
 
 
-def source_unqualified_contract_cases(cases) -> list[str]:
-    """Invariant rule validation is not current source-solvability evidence.
-
-    The generic lifecycle does not currently qualify live acceptance contracts.
-    Specialized frozen-input tracks have their own certificates and boundaries.
-    """
-    return [_get(case, 'id') for case in cases if _get(case, 'acceptance_contract', {})]
-
-
 def requires_fresh_reference(case) -> bool:
+    """Existing answers stay frozen unless the task explicitly selects live checks."""
     contract = _get(case, "acceptance_contract", {})
     if contract:
-        # This mode evaluates invariant rules, not equality with live values.
-        # Validate before choosing it; snapshot-bound runs retain all checks.
         from .stable_tasks import validate_acceptance_contract
         validate_acceptance_contract(contract)
         return False
-    # Tiny synthetic fixtures intentionally have no independent verification.
-    # Production body cases carry this metadata, including invalid attestations.
-    return (_get(case, "track", "web") in {"web", "dynamic", "challenge"}
+    verification = _get(case, "source_verification", {}) or {}
+    mode = verification.get("reference_mode", "frozen")
+    if mode not in {"frozen", "live_exact"}:
+        raise ReferenceLifecycleError("Unknown reference mode; use frozen or live_exact")
+    return (mode == "live_exact"
+            and _get(case, "track", "web") in {"web", "dynamic", "challenge"}
             and _get(case, "task_kind", "body") == "body"
             and bool((_get(case, "ground_truth_main_content", "") or "").strip())
-            and bool(_get(case, "source_verification", {})))
+            and bool(verification))
 
 
 def expected_providers(dataset, case):
@@ -215,13 +264,15 @@ def _resource_target_matches(case, candidates: list[dict]) -> list[dict]:
     return results
 
 
-def validate_resource_source_evidence(case, dataset_path: Path) -> dict | None:
-    """Fail closed unless every resource target has independent, hash-bound evidence.
+def validate_resource_source_evidence(case, dataset_path: Path, *, execution: bool = False) -> dict | None:
+    """Qualify resource sources, or reuse fixed targets during declared execution.
 
     HTTP probes remain useful diagnostics, but a blocked probe cannot become a
     valid source merely because an unbound human-review note says the page was
     checked. A successful browser observation may qualify only when its bounded
     candidate list, completion condition and exact resource scope are retained.
+    Execution of frozen benchmark inputs binds the existing task and answer
+    bytes instead of reopening historical admission files.
     """
     if _get(case, "task_kind", "body") != "resource":
         return None
@@ -235,6 +286,14 @@ def validate_resource_source_evidence(case, dataset_path: Path) -> dict | None:
     if verification.get("state") != "valid":
         raise ReferenceLifecycleError(
             f"{identifier}: independent resource source verification is not valid")
+    if execution and verification.get('reference_mode', 'frozen') == 'frozen':
+        dataset = json.loads(read_dataset_bytes(Path(dataset_path)))
+        if dataset.get('comparison', {}).get('source_reference_policy') in {
+                'frozen_benchmark_inputs_with_explicit_live_exact_checks',
+                'frozen_acceptance_contracts_with_live_exact_reference_checks'}:
+            # Admission has already qualified these fixed answers. Execution
+            # binds the task bytes; it does not repeat historical qualification.
+            return None
     expected_path = f"sources/{identifier}/evidence.json"
     evidence_path = verification.get("evidence_path")
     evidence_hash = verification.get("evidence_sha256")
@@ -547,7 +606,7 @@ def preflight_reference_checks(cases, dataset_path: Path, now=None) -> dict | No
     checked = _now(now)
     bindings = {}
     for case in cases:
-        validate_resource_source_evidence(case, dataset_path)
+        validate_resource_source_evidence(case, dataset_path, execution=True)
         if requires_fresh_reference(case):
             identifier = _get(case, "id")
             if identifier in bindings:
@@ -638,9 +697,18 @@ def check_case_scoring_revision_binding(case, binding: dict) -> None:
         and {key: value for key, value in before_policy.items() if key != "unexpected"}
             == {key: value for key, value in after_policy.items() if key != "unexpected"}
     )
+    prompt_homepage_correction = (
+        current.get("source_benchmark", {}).get("mode")
+        == original.get("source_benchmark", {}).get("mode")
+        == "ranked_domain_homepage"
+        and (
+            current.get("task_prompt") in HOMEPAGE_READER_SCOPE_PROMPTS
+            or _same_homepage_reader_constraints(original, current)
+        )
+    )
     current.pop("evaluation_contract", None)
     original.pop("evaluation_contract", None)
-    if prompt_policy_correction:
+    if prompt_policy_correction or prompt_homepage_correction:
         current.pop("task_prompt", None)
         original.pop("task_prompt", None)
     if (sha256(reference) != binding.get("reference_sha256")
@@ -881,6 +949,42 @@ def revision_edge(value):
         return before, after
 
     reference_edges = set()
+    presentation_path = root/'report-binding-revisions.json'
+    if presentation_path.is_file():
+        try:
+            presentation_rows = json.loads(presentation_path.read_text())
+            if not isinstance(presentation_rows, list):
+                return False
+            for receipt in presentation_rows:
+                edge = revision_edge(receipt)
+                if (edge is None or receipt.get('kind') != 'report_interpretation_binding_revision'
+                        or receipt.get('provider_calls') != 0 or edge[0][1] != edge[1][1]):
+                    return False
+                asset_fields = receipt.get('bound_asset_fields', ['report_interpretation'])
+                if (not isinstance(asset_fields, list) or not asset_fields
+                        or any(not isinstance(field, str) for field in asset_fields)
+                        or len(asset_fields) != len(set(asset_fields))
+                        or 'report_interpretation' not in asset_fields
+                        or set(asset_fields) - {'report_interpretation', 'implementation_provenance'}):
+                    return False
+                snapshots = []
+                for side, binding in zip(('input', 'output'), edge):
+                    raw = contained_path(root, receipt[f'{side}_dataset_path']).read_bytes()
+                    if sha256(raw) != binding[0]:
+                        return False
+                    document = json.loads(raw)
+                    if not isinstance(document, dict):
+                        return False
+                    for field in asset_fields:
+                        document.get('comparison', {}).pop(field, None)
+                    if not document.get('comparison'):
+                        document.pop('comparison', None)
+                    snapshots.append(document)
+                if snapshots[0] != snapshots[1]:
+                    return False
+                reference_edges.add(edge)
+        except (OSError, ValueError, TypeError, KeyError):
+            return False
     reference_path = root/'reference-revisions.json'
     if reference_path.is_file():
         try:
@@ -936,11 +1040,13 @@ def valid_assembled_binding(row, index):
         return False
     allowed_fields = {
         'body_requirements', 'required_patterns', 'required_facts',
-        'acceptance_contract', 'forbidden_any', 'expected_resources',
-        'resource_output_contract', 'task_prompt',
+        'acceptance_contract', 'composite_acceptance', 'forbidden_any', 'expected_resources',
+        'resource_output_contract', 'task_prompt', 'reference_answer',
         'mutable_body_policy',
     }
     previous_output = None
+    previous_scoring_source = None
+    scoring_source_binding_started = False
     for index, row in enumerate(rows):
         if not isinstance(row, dict):
             return False
@@ -966,7 +1072,45 @@ def valid_assembled_binding(row, index):
                            and set(change.get('fields', ())) <= allowed_fields
                            for change in row['changed_cases'])):
             return False
+        if any(
+            'task_prompt' in set(change.get('fields', ()))
+            and not ({'acceptance_contract', 'resource_output_contract'}
+                     & set(change.get('fields', ())))
+            for change in row['changed_cases']
+        ):
+            return False
+        input_scoring_sources = row.get('input_scoring_source_sha256s')
+        single_input_scoring_source = row.get('input_scoring_source_sha256')
+        output_scoring_source = row.get('output_scoring_source_sha256')
+        if input_scoring_sources is not None and single_input_scoring_source is not None:
+            return False
+        if input_scoring_sources is None and single_input_scoring_source is not None:
+            input_scoring_sources = [single_input_scoring_source]
+        if input_scoring_sources is not None or output_scoring_source is not None:
+            if (not isinstance(input_scoring_sources, list)
+                    or not input_scoring_sources
+                    or input_scoring_sources != sorted(set(input_scoring_sources))
+                    or any(not isinstance(value, str)
+                           or re.fullmatch(r'[0-9a-f]{64}', value) is None
+                           for value in input_scoring_sources)
+                    or not isinstance(output_scoring_source, str)
+                    or re.fullmatch(r'[0-9a-f]{64}', output_scoring_source) is None
+                    or (previous_scoring_source is not None
+                        and input_scoring_sources != [previous_scoring_source])):
+                return False
+            previous_scoring_source = output_scoring_source
+            scoring_source_binding_started = True
+        else:
+            if scoring_source_binding_started:
+                return False
+            previous_scoring_source = None
         previous_output = output_binding
+    if previous_scoring_source is not None:
+        current_scoring_sources = {
+            row.get('metrics', {}).get('scoring_source_sha256') for row in (records or [])
+        }
+        if current_scoring_sources != {previous_scoring_source}:
+            return False
     return previous_output is not None and bridged(
         previous_output, (current_dataset, current_results)
     )
@@ -1103,8 +1247,9 @@ def receipt_transitions(receipt):
             return {}
         allowed = {
             "body_requirements", "required_patterns", "required_facts",
-            "acceptance_contract", "forbidden_any", "expected_resources",
-            "resource_output_contract", "task_prompt", "mutable_body_policy",
+            "acceptance_contract", "composite_acceptance", "forbidden_any", "expected_resources",
+            "resource_output_contract", "task_prompt", "reference_answer",
+            "mutable_body_policy",
         }
         for receipt in scoring if isinstance(scoring, list) else ():
             before, after = hash_pair(receipt, "input"), hash_pair(receipt, "output")
@@ -1195,14 +1340,24 @@ def check_case_reference_and_scoring_revision_binding(
     )
     before_policy = before_contract.get("resource_output_contract", {})
     after_policy = after_contract.get("resource_output_contract", {})
-    if (
+    prompt_policy_correction = (
         current.get("task_kind") == original.get("task_kind") == "resource"
         and aliases_expand_only
         and before_policy.get("candidate_scope") == after_policy.get("candidate_scope")
             == "image_answer_fields"
         and before_policy.get("unexpected") == "reject"
         and after_policy.get("unexpected") == "allow"
-    ):
+    )
+    prompt_homepage_correction = (
+        current.get("source_benchmark", {}).get("mode")
+        == original.get("source_benchmark", {}).get("mode")
+        == "ranked_domain_homepage"
+        and (
+            current.get("task_prompt") in HOMEPAGE_READER_SCOPE_PROMPTS
+            or _same_homepage_reader_constraints(original, current)
+        )
+    )
+    if prompt_policy_correction or prompt_homepage_correction:
         current.pop("task_prompt", None)
         original.pop("task_prompt", None)
     if binding.get("reference_sha256") not in original_hashes or current != original:
@@ -1237,7 +1392,8 @@ def require_certifiable_evidence(dataset=None, manifests=()) -> None:
 
 def require_verified_reference_checks(manifests, *, cases=None, records=None, source=None,
                                       equivalent_capture_bindings=False,
-                                      allow_scoring_rule_revision=False) -> None:
+                                      allow_scoring_rule_revision=False,
+                                      allow_diagnostic=False) -> None:
     """Fail closed for explicit live lifecycles; leave historical batches readable.
 
     Call before report/append writes. The minimum call validates certificate
@@ -1254,7 +1410,8 @@ def require_verified_reference_checks(manifests, *, cases=None, records=None, so
         manifests = [manifests]
     if not isinstance(manifests, (list, tuple)):
         raise ReferenceLifecycleError("Expected manifest batches")
-    require_certifiable_evidence(cases, manifests)
+    if not allow_diagnostic:
+        require_certifiable_evidence(cases, manifests)
     case_map = None
     if cases is not None:
         if isinstance(cases, dict) and "cases" in cases and isinstance(cases["cases"], list):
@@ -1306,8 +1463,33 @@ def valid_hash(value):
     allow_scoring_rule_revision = (allow_scoring_rule_revision or valid_scoring_revision(source))
     revised_references = reference_revision_cases(source)
     original_latency = latency_correction_original_elapsed(source, records=records)
+    selected_current_batches = {}
+    duplicate_current_attempts = []
+    if records is not None:
+        current_indexes = [
+            index for index, batch in enumerate(manifests) if current_protocol(batch)
+        ]
+        current_coverage = {}
+        for index in current_indexes:
+            selected = _selected_records(manifests[index], records, original_latency)
+            selected_current_batches[index] = selected
+            for record in selected:
+                attempt_id = record["attempt_id"]
+                current_coverage[attempt_id] = current_coverage.get(attempt_id, 0) + 1
+        duplicate_current_attempts = sorted(
+            attempt_id for attempt_id, count in current_coverage.items() if count != 1
+        )
+        if current_indexes and len(current_indexes) == len(manifests):
+            record_ids = [record.get("attempt_id") for record in records]
+            if (any(not isinstance(attempt_id, str) or not attempt_id
+                    for attempt_id in record_ids)
+                    or len(record_ids) != len(set(record_ids))
+                    or set(record_ids) != set(current_coverage)):
+                raise ReferenceLifecycleError(
+                    "Current batch attempts do not exactly cover measured records"
+                )
     try:
-        for batch in manifests:
+        for batch_index, batch in enumerate(manifests):
             if not isinstance(batch, dict):
                 raise ReferenceLifecycleError("Invalid manifest")
             if "reference_checks" not in batch:
@@ -1331,7 +1513,12 @@ def valid_hash(value):
             finalized_at = timestamp(post.get("checked_at"))
             if finalized_at < preflight_at:
                 raise ReferenceLifecycleError("Reference postcheck precedes preflight")
-            selected = _selected_records(batch, records, original_latency) if records is not None else None
+            selected = (
+                selected_current_batches.get(batch_index)
+                if records is not None and current_protocol(batch)
+                else (_selected_records(batch, records, original_latency)
+                      if records is not None else None)
+            )
             if fresh_attempt_coverage is not None and current_protocol(batch):
                 for record in selected or []:
                     attempt_id = record.get("attempt_id")
@@ -1449,3 +1636,8 @@ def valid_hash(value):
             raise ReferenceLifecycleError(
                 "Fresh-reference measured attempts require exactly one certificate: "
                 + "; ".join(detail))
+    if duplicate_current_attempts:
+        raise ReferenceLifecycleError(
+            "Measured attempt appears in more than one current batch: "
+            + ", ".join(duplicate_current_attempts)
+        )
diff --git a/harness/web_fetch/reference_quality.py b/harness/web_fetch/reference_quality.py
index 1e1a456ce..016e6c47a 100644
--- a/harness/web_fetch/reference_quality.py
+++ b/harness/web_fetch/reference_quality.py
@@ -1,7 +1,17 @@
 """Deterministic reference preparation; original source bytes remain evidence."""
 import re
-from dataclasses import dataclass
 import unicodedata
+from dataclasses import dataclass
+from html import unescape
+
+
+HTML_BLOCK_ELEMENTS = frozenset({
+    "address", "article", "aside", "blockquote", "caption", "colgroup", "dd",
+    "details", "dialog", "div", "dl", "dt", "fieldset", "figcaption", "figure",
+    "footer", "form", "h1", "h2", "h3", "h4", "h5", "h6", "header", "hr",
+    "li", "main", "nav", "ol", "p", "pre", "section", "summary", "table",
+    "tbody", "thead", "tfoot", "tr", "ul",
+})
 
 
 def clean_reference_text(text: str) -> str:
@@ -27,6 +37,20 @@ def reference_anchor_in_text(reference: str, anchor: str) -> bool:
     return bool(expected and expected in normalize_reference_anchor(reference))
 
 
+def is_html_document_or_fragment(text: str) -> bool:
+    """Return whether an answer starts with a block HTML document surface.
+
+    A Markdown answer may retain inline tags inside link labels or prose.  Only
+    a leading document or block element selects the HTML projection path.
+    """
+    elements = "|".join(sorted(HTML_BLOCK_ELEMENTS | {"html", "body"}))
+    return bool(re.match(
+        rf"\s*(?:<!doctype\s+html\b[^>]*>\s*)?<(?:{elements})\b",
+        text,
+        re.I,
+    ))
+
+
 _BLOCKED_PAGE = re.compile(
     r"(?im)^\s*(?:#{1,6}\s*)?(?:[*_]{1,3})?(?:access denied|403 forbidden|"
     r"error:\s*forbidden\s*/\s*403|verify (?:that )?you are human|"
@@ -89,35 +113,67 @@ class MarkdownLink:
 _MAX_MARKDOWN_LINK_SPAN = 8192
 
 
-def _closing(text: str, start: int, opening: str, closing: str) -> int | None:
-    depth = 1
-    index = start + 1
-    limit = min(len(text), start + _MAX_MARKDOWN_LINK_SPAN)
-    while index < limit:
-        if text[index] == "\\":
-            index += 2
+def is_markdown_image_start(text: str, index: int) -> bool:
+    """Return whether ``![`` starts image syntax at *index*.
+
+    CommonMark punctuation escapes are parity-sensitive: an odd number of
+    immediately preceding backslashes escapes the bang, while an even number
+    leaves it active after the backslashes are paired.
+    """
+    if not text.startswith("![", index):
+        return False
+    backslashes = 0
+    cursor = index - 1
+    while cursor >= 0 and text[cursor] == "\\":
+        backslashes += 1
+        cursor -= 1
+    return backslashes % 2 == 0
+
+
+def markdown_delimiter_pairs(text, *, maximum_span=None):
+    """Index escaped, nested Markdown delimiters once, including malformed prose."""
+    pairs = {}
+    stacks = {'[': [], '(': []}
+    escaped_starts = {'[': {}, '(': {}}
+    openings = {']': '[', ')': '('}
+    i = 0
+    while i < len(text):
+        char = text[i]
+        if char == "\\":
+            # Existing callers may begin at an escaped opening delimiter.
+            # Such an opening does not nest inside another candidate, but it
+            # shares that depth's next close when parsed as the link start.
+            if i + 1 < len(text) and text[i + 1] in stacks:
+                opening = text[i + 1]
+                escaped_starts[opening].setdefault(len(stacks[opening]), []).append(i + 1)
+            i += 2
             continue
-        if text[index] == opening:
-            depth += 1
-        elif text[index] == closing:
-            depth -= 1
-            if not depth:
-                return index
-        index += 1
-    return None
+        if char in stacks:
+            stacks[char].append(i)
+        elif char in openings:
+            opening = openings[char]
+            starts = escaped_starts[opening].pop(len(stacks[opening]), [])
+            if stacks[opening]:
+                starts.append(stacks[opening].pop())
+            for start in starts:
+                if maximum_span is None or i - start < maximum_span:
+                    pairs[start] = i
+        i += 1
+    return pairs
 
 
 def markdown_links(text: str) -> list[MarkdownLink]:
     """Return explicit balanced Markdown links without guessing from bare URLs."""
+    pairs = markdown_delimiter_pairs(text, maximum_span=_MAX_MARKDOWN_LINK_SPAN)
     links: list[MarkdownLink] = []
     index = 0
     while index < len(text):
-        image = text.startswith("![", index)
+        image = is_markdown_image_start(text, index)
         start = index + 1 if image else index
         if text[start:start + 1] != "[":
             index += 1
             continue
-        label_end = _closing(text, start, "[", "]")
+        label_end = pairs.get(start)
         if label_end is None:
             index += 1
             continue
@@ -127,7 +183,7 @@ def markdown_links(text: str) -> list[MarkdownLink]:
         if text[destination_start:destination_start + 1] != "(":
             index += 1
             continue
-        destination_end = _closing(text, destination_start, "(", ")")
+        destination_end = pairs.get(destination_start)
         if destination_end is None:
             index += 1
             continue
@@ -211,6 +267,51 @@ def visible_markdown_links(text: str) -> str:
     return re.sub(r"<((?:/[^<>\s/]+){2,}(?:[?#][^<>\s]*)?)>", r"\1", visible)
 
 
+def visible_mixed_html_text(text: str) -> str:
+    """Project raw HTML in a Markdown answer, preserving literal code and autolinks."""
+    from .dynamic_lists import visible_html_text
+
+    literals = []
+    marker = "\ue010"
+    while marker in text:
+        marker += "\ue010"
+
+    def protect(match):
+        literals.append(match.group(0))
+        return f"{marker}{len(literals) - 1}{marker}"
+
+    # Native Markdown can serialize multiline code inside table cells.
+    # Recognize their opening fence before a closing fence is mistaken for one.
+    # Code examples and Markdown-escaped brackets are answer text.
+    # Consume escaped backslashes as pairs so an unescaped following tag
+    # remains HTML rather than being protected by its second backslash.
+    protected = re.sub(
+        r"(?ms)^ {0,3}(?:\|[ \t]*)?(`{3,}|~{3,})[^\n]*\n.*?^ {0,3}\1[ \t]*$"
+        r"|`+[^`\n]+`+|<(?:https?://|mailto:|/[^<>\s/]+/)[^<>\s]+>"
+        r"|<[^<>\s]+@[^<>\s]+>"
+        # Some Markdown serializers escape only the closing angle bracket of
+        # a literal HTML tag (``<td\>``). Protect the complete token so the
+        # unescaped opening bracket cannot turn a displayed code sample into
+        # live HTML. A wholly unescaped tag remains markup and is projected.
+        r"|(?:\\</?[A-Za-z][^<>\n]*>|</?[A-Za-z][^<>\n]*\\>)|\\[\\<>]",
+        protect, text,
+    )
+    if not re.search(
+        r"</?(?:a|article|aside|b|blockquote|br|code|dd|div|dl|dt|em|footer|"
+        r"h[1-6]|header|hr|i|li|main|nav|ol|p|pre|section|span|strong|table|"
+        r"tbody|td|th|thead|tr|ul|script|style|template)\b[^>]*>",
+        protected, re.I,
+    ):
+        projected = unescape(protected)
+        for index, literal in enumerate(literals):
+            projected = projected.replace(f"{marker}{index}{marker}", literal)
+        return projected
+    projected = visible_html_text(protected, preserve_source_whitespace=True)
+    for index, literal in enumerate(literals):
+        projected = projected.replace(f"{marker}{index}{marker}", literal)
+    return projected
+
+
 def audit_reference(text, facts, *, normalize):
     issues=[]
     if not text.strip(): issues.append('empty_reference')
diff --git a/harness/web_fetch/reference_revision.py b/harness/web_fetch/reference_revision.py
index c2676a5a7..1efee902e 100644
--- a/harness/web_fetch/reference_revision.py
+++ b/harness/web_fetch/reference_revision.py
@@ -237,7 +237,8 @@ def _revise_staged(
         # result rows for such a correction would manufacture a scoring revision
         # and invalidate an otherwise unchanged result-review binding.
         decisions = (
-            rescore(source, allow_rule_revision=True, reference_revision_hashes=original_hashes)
+            rescore(source, case_ids=selected, allow_rule_revision=True,
+                    reference_revision_hashes=original_hashes)
             if scoring_relevant_change
             else []
         )
diff --git a/harness/web_fetch/refresh_assembly.py b/harness/web_fetch/refresh_assembly.py
index e1d5130fd..03eacc413 100644
--- a/harness/web_fetch/refresh_assembly.py
+++ b/harness/web_fetch/refresh_assembly.py
@@ -18,12 +18,15 @@
     materialize_bound_artifacts,
     materialize_reference_checks,
     materialize_task_references,
+    record_public_call_log_bindings,
+    verify_public_call_log,
     verify_record_artifacts,
 )
 from harness.web_fetch.assembly import (
     _copy_speed_bundle,
     _prune_shadowed_batch_attempts,
 )
+from harness.web_fetch.metrics import task_passed
 from harness.web_fetch.reference_inputs import input_tree, read_dataset_bytes
 from harness.web_fetch.reference_lifecycle import (
     reference_revision_cases,
@@ -31,6 +34,7 @@
     valid_scoring_revision,
 )
 from harness.web_fetch.safety import contained_path, reject_evidence_symlinks, validate_report_ids
+from harness.web_fetch.scoring import load_list_reference, score_attempt
 from harness.web_fetch.scoring_regressions import (
     build_correction_provenance,
     load_scoring_regressions,
@@ -107,15 +111,27 @@ def _require_reason(value: object, *, label: str) -> None:
         raise ValueError(f"Refresh plan has empty {label}")
 
 
-def expected_refresh_pairs(plan: dict, canonical: dict) -> set[tuple[str, str]]:
+def _same_window_speed_not_measured(plan: dict) -> bool:
+    speed = plan.get("same_window_speed_cohort")
+    return (
+        plan.get("schema_version") == 3
+        and isinstance(speed, dict)
+        and speed.get("evidence_state") == "not_measured_same_window"
+    )
+
+
+def _expected_v2_refresh_pairs(plan: dict, canonical: dict) -> set[tuple[str, str]]:
     """Return the exact main refresh scope, rejecting an internally inconsistent plan."""
     matrix = plan.get("main_matrix")
-    if plan.get("schema_version") != 2 or not isinstance(matrix, dict):
+    if plan.get("schema_version") not in {2, 3} or not isinstance(matrix, dict):
         raise ValueError("Unsupported refresh plan")
-    if set(plan) != {
+    expected_plan_fields = {
         "schema_version", "baseline", "main_matrix", "same_window_speed_cohort",
         "total_planned_new_calls",
-    } or not isinstance(plan.get("baseline"), dict) or set(plan["baseline"]) != {
+    }
+    if plan.get("schema_version") == 3:
+        expected_plan_fields.update({"implementation_upgrades", "correction_layers"})
+    if set(plan) != expected_plan_fields or not isinstance(plan.get("baseline"), dict) or set(plan["baseline"]) != {
         "dataset_sha256", "results_sha256", "logical_attempts",
     }:
         raise ValueError("Refresh plan has unknown or missing top-level fields")
@@ -146,6 +162,19 @@ def expected_refresh_pairs(plan: dict, canonical: dict) -> set[tuple[str, str]]:
         raise ValueError("Refresh plan has invalid pair_replacements")
     if not set(matched_cases) <= set(cases):
         raise ValueError("Refresh plan names a noncanonical case")
+    correction_reruns = (
+        canonical.get("comparison", {}).get("case_corrections", {}).get(
+            "rerun_all_methods", []
+        )
+    )
+    if (
+        not isinstance(correction_reruns, list)
+        or len(correction_reruns) != len(set(correction_reruns))
+        or not set(correction_reruns) <= set(matched_cases)
+    ):
+        raise ValueError(
+            "Every input-changing case correction must rerun all methods"
+        )
     if not set(full_providers) <= set(providers):
         raise ValueError("Refresh plan names a noncanonical provider")
     reasons = matrix.get("full_rerun_reason_by_provider")
@@ -230,20 +259,31 @@ def expected_refresh_pairs(plan: dict, canonical: dict) -> set[tuple[str, str]]:
         raise ValueError("Pair replacements must not overlap broader refresh scopes")
 
     expected = case_pairs | provider_pairs | explicit_pairs
-    if matrix.get("planned_new_calls") != len(expected):
+    if plan.get("schema_version") == 2 and matrix.get("planned_new_calls") != len(expected):
         raise ValueError("Refresh plan call count does not match its declared scopes")
     speed = plan.get("same_window_speed_cohort", {})
     if not isinstance(speed, dict) or type(speed.get("required")) is not bool:
         raise ValueError("Refresh plan has invalid speed cohort")
     speed_common = {"required", "reuse_existing", "reason", "planned_new_calls"}
-    expected_speed_fields = (
-        speed_common | {"case_ids", "provider_count"}
-        if speed["required"]
-        else speed_common | {
-            "dataset_sha256", "results_sha256", "execution_sha256",
-            "speed_comparison_sha256", "auxiliary_sha256",
-        }
-    )
+    if _same_window_speed_not_measured(plan):
+        expected_speed_fields = speed_common | {"evidence_state"}
+        if (
+            speed["required"] is not False
+            or speed.get("reuse_existing") is not False
+            or speed.get("planned_new_calls") != 0
+        ):
+            raise ValueError(
+                "Absent same-window speed evidence cannot be required, reused, or scheduled"
+            )
+    else:
+        expected_speed_fields = (
+            speed_common | {"case_ids", "provider_count"}
+            if speed["required"]
+            else speed_common | {
+                "dataset_sha256", "results_sha256", "execution_sha256",
+                "speed_comparison_sha256", "auxiliary_sha256",
+            }
+        )
     if set(speed) != expected_speed_fields:
         raise ValueError("Refresh plan has unknown or missing speed-cohort fields")
     if not isinstance(speed.get("reason"), str) or not speed["reason"].strip():
@@ -251,8 +291,173 @@ def expected_refresh_pairs(plan: dict, canonical: dict) -> set[tuple[str, str]]:
     speed_calls = speed.get("planned_new_calls")
     if type(speed_calls) is not int or speed_calls < 0:
         raise ValueError("Refresh plan has invalid speed call count")
+    if plan.get("schema_version") == 2 and plan.get("total_planned_new_calls") != len(expected) + speed_calls:
+        raise ValueError("Refresh plan total call count is inconsistent")
+    return expected
+
+
+def _case_ids_sha256(case_ids: list[str]) -> str:
+    payload = json.dumps(sorted(case_ids), ensure_ascii=False, separators=(",", ":")).encode()
+    return hashlib.sha256(payload).hexdigest()
+
+
+def _implementation_upgrades(plan: dict, canonical: dict) -> list[dict]:
+    if plan.get("schema_version") != 3:
+        return []
+    upgrades = plan.get("implementation_upgrades")
+    if not isinstance(upgrades, list) or not upgrades:
+        raise ValueError("Schema v3 refresh plan requires implementation upgrades")
+    canonical_providers = set(_provider_order(canonical))
+    canonical_cases = {case.get("id") for case in canonical.get("cases", [])}
+    seen_logical, seen_baseline, seen_rerun = set(), set(), set()
+    expected_fields = {
+        "logical_provider", "baseline_provider", "rerun_provider", "affected_case_ids",
+        "reason", "impact_receipt", "baseline_implementation_identity",
+        "rerun_implementation_identity",
+    }
+    for upgrade in upgrades:
+        if not isinstance(upgrade, dict) or set(upgrade) != expected_fields:
+            raise ValueError("Refresh plan has invalid implementation upgrade")
+        logical = upgrade.get("logical_provider")
+        baseline = upgrade.get("baseline_provider")
+        rerun = upgrade.get("rerun_provider")
+        if not all(isinstance(value, str) and value for value in (logical, baseline, rerun)):
+            raise ValueError("Implementation upgrade has an invalid provider")
+        if logical not in canonical_providers or baseline == logical or rerun != logical:
+            raise ValueError("Implementation upgrade provider mapping is invalid")
+        if logical in seen_logical or baseline in seen_baseline or rerun in seen_rerun:
+            raise ValueError("Implementation upgrades have overlapping providers")
+        seen_logical.add(logical)
+        seen_baseline.add(baseline)
+        seen_rerun.add(rerun)
+        case_ids = upgrade.get("affected_case_ids")
+        if (
+            not isinstance(case_ids, list) or not case_ids
+            or not all(isinstance(case_id, str) and case_id for case_id in case_ids)
+            or len(case_ids) != len(set(case_ids))
+            or not set(case_ids) <= canonical_cases
+        ):
+            raise ValueError("Implementation upgrade has invalid affected case IDs")
+        if set(case_ids) != canonical_cases:
+            raise ValueError(
+                "Implementation upgrades require a complete canonical rerun; "
+                "partial version upgrades cannot produce a fair aggregate"
+            )
+        _require_reason(upgrade.get("reason"), label=f"upgrade reason for {logical}")
+        receipt = upgrade.get("impact_receipt")
+        if not isinstance(receipt, dict) or set(receipt) != {
+            "path", "sha256", "case_ids_sha256"
+        }:
+            raise ValueError("Implementation upgrade has invalid impact receipt binding")
+        if (
+            not isinstance(receipt["path"], str) or not receipt["path"]
+            or not re.fullmatch(r"[0-9a-f]{64}", str(receipt["sha256"]))
+            or receipt["case_ids_sha256"] != _case_ids_sha256(case_ids)
+        ):
+            raise ValueError("Implementation upgrade impact receipt binding is inconsistent")
+        for label in ("baseline_implementation_identity", "rerun_implementation_identity"):
+            identity = upgrade.get(label)
+            if not isinstance(identity, dict) or not identity:
+                raise ValueError(f"Implementation upgrade has invalid {label}")
+    return upgrades
+
+
+def _parameters_sha256(parameters: dict) -> str:
+    return hashlib.sha256(json.dumps(
+        parameters, ensure_ascii=False, sort_keys=True, separators=(",", ":")
+    ).encode()).hexdigest()
+
+
+def _correction_layers(
+    plan: dict, canonical: dict, expected_pairs: set[tuple[str, str]]
+) -> list[dict]:
+    if plan.get("schema_version") != 3:
+        return []
+    layers = plan.get("correction_layers")
+    if not isinstance(layers, list) or not layers:
+        raise ValueError("Schema v3 refresh plan requires correction layers")
+    providers = set(_provider_order(canonical)) | {
+        upgrade["baseline_provider"] for upgrade in _implementation_upgrades(plan, canonical)
+    }
+    cases = {case.get("id") for case in canonical.get("cases", [])}
+    layer_ids, declared_pairs = set(), set()
+    for layer in layers:
+        if not isinstance(layer, dict) or set(layer) != {
+            "id", "provider", "case_ids", "source_bundle", "execution_contract",
+            "scope_receipt",
+        }:
+            raise ValueError("Refresh plan has an invalid correction layer")
+        layer_id, provider, case_ids = layer["id"], layer["provider"], layer["case_ids"]
+        if (
+            not isinstance(layer_id, str) or not layer_id or layer_id in layer_ids
+            or not isinstance(provider, str) or provider not in providers
+            or not isinstance(case_ids, list) or not case_ids
+            or len(case_ids) != len(set(case_ids))
+            or not all(isinstance(case_id, str) and case_id in cases for case_id in case_ids)
+        ):
+            raise ValueError("Correction layer has an invalid identity or case scope")
+        layer_ids.add(layer_id)
+        pairs = {(provider, case_id) for case_id in case_ids}
+        if declared_pairs & pairs:
+            raise ValueError("Correction layers assign a provider/case pair more than once")
+        declared_pairs |= pairs
+        bundle = layer["source_bundle"]
+        if not isinstance(bundle, dict) or set(bundle) != {
+            "dataset_sha256", "results_sha256", "execution_file", "execution_sha256"
+        } or not all(
+            isinstance(bundle.get(field), str) and (
+                field == "execution_file" or re.fullmatch(r"[0-9a-f]{64}", bundle[field])
+            )
+            for field in bundle
+        ):
+            raise ValueError("Correction layer has an invalid source bundle binding")
+        contract = layer["execution_contract"]
+        if not isinstance(contract, dict) or set(contract) != {
+            "runtime_source_sha256", "provider_config_sha256", "parameters_sha256",
+            "implementation_identity",
+        } or not all(
+            re.fullmatch(r"[0-9a-f]{64}", str(contract.get(field, "")))
+            for field in ("runtime_source_sha256", "provider_config_sha256", "parameters_sha256")
+        ) or not isinstance(contract["implementation_identity"], dict) or not contract[
+            "implementation_identity"
+        ]:
+            raise ValueError("Correction layer has an invalid execution contract")
+        receipt = layer["scope_receipt"]
+        if not isinstance(receipt, dict) or set(receipt) != {
+            "path", "sha256", "case_ids_sha256"
+        } or not isinstance(receipt["path"], str) or not receipt["path"] or not re.fullmatch(
+            r"[0-9a-f]{64}", str(receipt["sha256"])
+        ) or receipt["case_ids_sha256"] != _case_ids_sha256(case_ids):
+            raise ValueError("Correction layer has an invalid scope receipt binding")
+    if declared_pairs != expected_pairs:
+        missing, extra = expected_pairs - declared_pairs, declared_pairs - expected_pairs
+        raise ValueError(
+            "Correction layers differ from the exact refresh scope: "
+            f"missing={len(missing)}, extra={len(extra)}"
+        )
+    return layers
+
+
+def expected_refresh_pairs(plan: dict, canonical: dict) -> set[tuple[str, str]]:
+    """Return exact physical rerun pairs for either refresh-plan schema."""
+    regular = _expected_v2_refresh_pairs(plan, canonical)
+    upgrades = _implementation_upgrades(plan, canonical)
+    if not upgrades:
+        return regular
+    upgrade_pairs = {
+        (upgrade["rerun_provider"], case_id)
+        for upgrade in upgrades for case_id in upgrade["affected_case_ids"]
+    }
+    if regular & upgrade_pairs:
+        raise ValueError("Implementation upgrade overlaps another refresh scope")
+    expected = regular | upgrade_pairs
+    matrix = plan["main_matrix"]
+    if matrix.get("planned_new_calls") != len(expected):
+        raise ValueError("Refresh plan call count does not include implementation upgrades")
+    speed_calls = plan["same_window_speed_cohort"]["planned_new_calls"]
     if plan.get("total_planned_new_calls") != len(expected) + speed_calls:
         raise ValueError("Refresh plan total call count is inconsistent")
+    _correction_layers(plan, canonical, expected)
     return expected
 
 
@@ -280,13 +485,22 @@ def _pair_scope_reasons(plan: dict, provider: str, case_id: str) -> list[dict]:
                 "category": replacement["category"],
                 "reason": replacement["reason"],
             })
+    for upgrade in plan.get("implementation_upgrades", []):
+        if provider == upgrade["rerun_provider"] and case_id in upgrade["affected_case_ids"]:
+            scopes.append({
+                "scope": "implementation_upgrade",
+                **upgrade["reason"],
+                "logical_provider": upgrade["logical_provider"],
+                "baseline_provider": upgrade["baseline_provider"],
+            })
     if not scopes:
         raise ValueError(f"Rerun pair has no declared scope reason: {provider}/{case_id}")
     return scopes
 
 
 def _validate_record_identity(
-    rows: list[dict], *, allowed_pairs: set[tuple[str, str]], label: str
+    rows: list[dict], *, allowed_pairs: set[tuple[str, str]], label: str,
+    allow_physical_projection: bool = False,
 ) -> None:
     validate_report_ids({"cases": [{"id": case_id} for _, case_id in allowed_pairs]}, rows)
     pairs = [(row.get("provider"), row.get("case_id")) for row in rows]
@@ -300,13 +514,223 @@ def _validate_record_identity(
     if len(attempts) != len(set(attempts)):
         raise ValueError(f"{label} contains duplicate attempt IDs")
     for row in rows:
-        expected = f"{row['provider']}__{row['case_id']}__r001"
-        if row.get("run") != 1 or row.get("attempt_id") != expected:
+        physical = row.get("physical_execution")
+        if physical is not None and not allow_physical_projection:
+            raise ValueError(f"{label} contains an undeclared physical projection")
+        physical_provider = row["provider"]
+        physical_attempt = row.get("attempt_id")
+        if physical is not None:
+            if not isinstance(physical, dict) or set(physical) != {
+                "provider", "attempt_id", "implementation_identity", "source_bundle"
+            }:
+                raise ValueError(f"{label} has an invalid physical execution identity")
+            physical_provider = physical.get("provider")
+            physical_attempt = physical.get("attempt_id")
+            if row.get("attempt_id") != physical_attempt:
+                raise ValueError(f"{label} rewrote a physical attempt identity")
+        expected = f"{physical_provider}__{row['case_id']}__r001"
+        if row.get("run") != 1 or physical_attempt != expected:
             raise ValueError(
                 f"{label} has a noncanonical attempt identity: {row.get('attempt_id')}"
             )
 
 
+def _batch_identity_by_attempt(
+    batches: list[dict], rows: list[dict], root: Path, *, required_providers: set[str]
+) -> dict[str, dict]:
+    rows_by_attempt = {row["attempt_id"]: row for row in rows}
+    required_attempts = {
+        row["attempt_id"] for row in rows if row["provider"] in required_providers
+    }
+    identities = {}
+    for batch in batches:
+        providers = {
+            provider.get("name"): provider.get("implementation_identity")
+            for provider in batch.get("providers", []) if isinstance(provider, dict)
+        }
+        for attempt_id in batch.get("attempt_ids", []):
+            row = rows_by_attempt.get(attempt_id)
+            if row is None:
+                continue
+            if row["provider"] not in required_providers:
+                continue
+            identity = providers.get(row["provider"])
+            metadata = row.get("provider_metadata", {})
+            if not isinstance(identity, dict) or not identity:
+                identity = _recorded_implementation_identity(row)
+            if not isinstance(identity, dict) or not identity:
+                raise ValueError(f"Execution batch lacks implementation identity: {attempt_id}")
+            for field in ("binary_sha256", "reported_version"):
+                if metadata.get(field) is not None and identity.get(field) != metadata[field]:
+                    raise ValueError(
+                        f"Result and execution implementation identity differ: {attempt_id}/{field}"
+                    )
+            for binding in record_public_call_log_bindings(row):
+                payload = json.loads(verify_public_call_log(root, binding).read_bytes())
+                call_identity = payload["identity"]
+                if (
+                    call_identity.get("attempt_id") != attempt_id
+                    or call_identity.get("provider") != row["provider"]
+                    or call_identity.get("case_id") != row["case_id"]
+                    or call_identity.get("run") != row["run"]
+                ):
+                    raise ValueError(f"Public call log physical identity differs: {attempt_id}")
+            identities[attempt_id] = deepcopy(identity)
+    if set(identities) != required_attempts:
+        raise ValueError(
+            f"Execution identities do not cover required implementation results: {root}"
+        )
+    return identities
+
+
+def _recorded_implementation_identity(row: dict) -> dict | None:
+    metadata = row.get("provider_metadata", {})
+    if metadata.get("binary_sha256"):
+        return {
+            "binary_sha256": metadata["binary_sha256"],
+            "reported_version": metadata.get("reported_version")
+            or metadata.get("browser_version"),
+        }
+    if metadata.get("adapter_sha256"):
+        return {
+            "adapter_sha256": metadata["adapter_sha256"],
+            "deployment": metadata.get("deployment"),
+            "service": metadata.get("browser") or metadata.get("engine"),
+        }
+    return None
+
+
+def _validate_impact_receipts(plan: dict, plan_path: Path, canonical: dict) -> list[dict]:
+    validated = []
+    for upgrade in _implementation_upgrades(plan, canonical):
+        binding = upgrade["impact_receipt"]
+        path = contained_path(plan_path.parent, binding["path"], reject_symlinks=True)
+        if not path.is_file() or _sha256(path) != binding["sha256"]:
+            raise ValueError("Implementation impact receipt bytes differ from refresh plan")
+        receipt = _read_json(path)
+        required = {
+            "schema_version", "kind", "provider_calls", "baseline_provider",
+            "logical_provider", "rerun_provider", "affected_case_ids",
+            "baseline_implementation_identity", "rerun_implementation_identity",
+        }
+        if (
+            not required <= set(receipt)
+            or receipt.get("schema_version") != 1
+            or receipt.get("kind") != "implementation_upgrade_impact"
+            or receipt.get("provider_calls") != 0
+            or receipt.get("baseline_provider") != upgrade["baseline_provider"]
+            or receipt.get("logical_provider") != upgrade["logical_provider"]
+            or receipt.get("rerun_provider") != upgrade["rerun_provider"]
+            or receipt.get("affected_case_ids") != upgrade["affected_case_ids"]
+            or receipt.get("baseline_implementation_identity")
+            != upgrade["baseline_implementation_identity"]
+            or receipt.get("rerun_implementation_identity")
+            != upgrade["rerun_implementation_identity"]
+        ):
+            raise ValueError("Implementation impact receipt differs from refresh plan")
+        validated.append({
+            "path": binding["path"], "sha256": binding["sha256"],
+            "case_ids_sha256": binding["case_ids_sha256"],
+        })
+    return validated
+
+
+def _validate_correction_scope_receipts(
+    layers: list[dict], plan_path: Path
+) -> list[dict]:
+    validated = []
+    for layer in layers:
+        binding = layer["scope_receipt"]
+        path = contained_path(plan_path.parent, binding["path"], reject_symlinks=True)
+        if not path.is_file() or _sha256(path) != binding["sha256"]:
+            raise ValueError("Correction-layer scope receipt bytes differ from refresh plan")
+        receipt = _read_json(path)
+        entries = receipt.get("layers") if isinstance(receipt.get("layers"), list) else []
+        entry = next(
+            (item for item in entries if isinstance(item, dict)
+             and item.get("layer_id") == layer["id"]),
+            None,
+        )
+        if (
+            receipt.get("schema_version") != 1
+            or receipt.get("kind") != "correction_layer_scope_bindings"
+            or receipt.get("provider_calls") != 0
+            or entry is None
+            or set(entry) != {"layer_id", "provider", "case_ids"}
+            or entry.get("provider") != layer["provider"]
+            or entry.get("case_ids") != layer["case_ids"]
+        ):
+            raise ValueError("Correction-layer scope receipt differs from refresh plan")
+        validated.append({
+            "layer_id": layer["id"], "path": binding["path"],
+            "sha256": binding["sha256"],
+            "case_ids_sha256": binding["case_ids_sha256"],
+        })
+    return validated
+
+
+def _bundle_matches_layer(root: Path, execution_path: Path, layer: dict) -> bool:
+    binding = layer["source_bundle"]
+    return binding == {
+        "dataset_sha256": _sha256(root / "dataset.json"),
+        "results_sha256": _sha256(root / "results.jsonl"),
+        "execution_file": execution_path.name,
+        "execution_sha256": _sha256(execution_path),
+    }
+
+
+def _validate_layer_execution(
+    layer: dict, rows_by_pair: dict[tuple[str, str], dict], batches: list[dict], root: Path
+) -> None:
+    provider = layer["provider"]
+    contract = layer["execution_contract"]
+    batches_by_attempt = {}
+    for batch in batches:
+        for attempt_id in batch.get("attempt_ids", []):
+            batches_by_attempt[attempt_id] = batch
+    for case_id in layer["case_ids"]:
+        row = rows_by_pair.get((provider, case_id))
+        if row is None:
+            raise ValueError(f"Correction layer is missing its selected pair: {layer['id']}/{case_id}")
+        batch = batches_by_attempt.get(row["attempt_id"])
+        if batch is None:
+            raise ValueError(f"Correction layer selected pair has no execution batch: {row['attempt_id']}")
+        provider_identity = next(
+            (item.get("implementation_identity") for item in batch.get("providers", [])
+             if isinstance(item, dict) and item.get("name") == provider),
+            None,
+        )
+        if provider_identity is None:
+            provider_identity = _recorded_implementation_identity(row)
+        actual = {
+            "runtime_source_sha256": batch.get("runtime_source_sha256"),
+            "provider_config_sha256": batch.get("provider_config_sha256"),
+            "parameters_sha256": _parameters_sha256(batch.get("parameters", {})),
+            "implementation_identity": provider_identity,
+        }
+        if actual != contract:
+            changed = ", ".join(
+                field for field in contract if contract[field] != actual[field]
+            )
+            raise ValueError(
+                f"Correction layer execution differs from its contract: {layer['id']}: {changed}"
+            )
+        selected_providers = [
+            ({**item, "implementation_identity": provider_identity}
+             if isinstance(item, dict) and item.get("name") == provider else item)
+            for item in batch.get("providers", [])
+        ]
+        selected_batch = {
+            **batch,
+            "providers": selected_providers,
+            "attempt_ids": [row["attempt_id"]],
+            "attempt_count": 1,
+        }
+        _batch_identity_by_attempt(
+            [selected_batch], [row], root, required_providers={provider}
+        )
+
+
 def _verify_artifacts(root: Path, rows: list[dict]) -> None:
     for row in rows:
         verify_record_artifacts(root, row)
@@ -462,6 +886,45 @@ def _require_canonical_cases(
             raise ValueError(f"{label} case/reference binding differs from canonical: {case_id}")
 
 
+def _require_reproducible_verdicts(root: Path) -> None:
+    """Reject retained verdicts that the public scorer cannot reproduce."""
+    dataset = _read_json(root / "dataset.json")
+    cases = {case["id"]: case for case in dataset.get("cases", [])}
+    list_references = {
+        case_id: load_list_reference(case, root) for case_id, case in cases.items()
+    }
+    flips = []
+    for row in _read_records(root):
+        case = cases[row["case_id"]]
+        raw = contained_path(root, row["artifact_path"]).read_bytes()
+        if hashlib.sha256(raw).hexdigest() != row["metrics"].get("content_sha256"):
+            raise ValueError(f"Assembled artifact hash differs from result: {row['attempt_id']}")
+        before = task_passed(
+            bool(row["ok"]), row["metrics"], case.get("task_kind", "body")
+        )
+        rescored = score_attempt(
+            case,
+            raw,
+            ok=bool(row["ok"]),
+            status_code=row.get("status_code"),
+            title=row.get("title"),
+            final_url=row.get("final_url"),
+            metadata=row.get("provider_metadata", {}),
+            previous_metrics=row["metrics"],
+            list_reference=list_references[row["case_id"]],
+        )
+        after = task_passed(bool(row["ok"]), rescored, case.get("task_kind", "body"))
+        if before != after:
+            flips.append(f"{row['provider']}/{row['case_id']} ({before}->{after})")
+    if flips:
+        preview = ", ".join(flips[:5])
+        suffix = "" if len(flips) <= 5 else f", and {len(flips) - 5} more"
+        raise ValueError(
+            "Assembled persisted verdict differs from public scorer: "
+            f"{preview}{suffix}"
+        )
+
+
 def _copy_artifacts(output: Path, selections: list[tuple[dict, Path]]) -> None:
     by_root = defaultdict(list)
     for row, root in selections:
@@ -470,6 +933,16 @@ def _copy_artifacts(output: Path, selections: list[tuple[dict, Path]]) -> None:
         materialize_bound_artifacts(output, root, rows)
 
 
+def _physical_record(record: dict) -> dict:
+    physical = record.get("physical_execution")
+    if not isinstance(physical, dict):
+        return record
+    value = deepcopy(record)
+    value["provider"] = physical["provider"]
+    value.pop("physical_execution", None)
+    return value
+
+
 def _bundle_identity(root: Path, execution_path: Path) -> dict:
     return {
         "label": root.name,
@@ -639,16 +1112,33 @@ def _write_composite_revisions(output: Path, selections: list[tuple[dict, Path]]
 def _assemble(
     baseline: Path,
     main_reruns: list[Path],
-    speed_cohort: Path,
+    speed_cohort: Path | None,
     canonical_path: Path,
     plan_path: Path,
     output: Path,
 ) -> None:
     plan = _read_json(plan_path)
     canonical = _read_json(canonical_path)
+    speed_not_measured = _same_window_speed_not_measured(plan)
+    if speed_not_measured and speed_cohort is not None:
+        raise ValueError(
+            "Refresh plan declares no same-window speed evidence but a speed cohort was supplied"
+        )
+    if not speed_not_measured and speed_cohort is None:
+        raise ValueError("Refresh plan requires a speed cohort input")
     canonical_cases = {case["id"]: case for case in canonical.get("cases", [])}
     providers = _provider_order(canonical)
+    upgrades = _implementation_upgrades(plan, canonical)
+    impact_receipts = _validate_impact_receipts(plan, plan_path, canonical)
+    upgrade_by_logical = {upgrade["logical_provider"]: upgrade for upgrade in upgrades}
+    logical_by_baseline = {
+        upgrade["baseline_provider"]: upgrade["logical_provider"] for upgrade in upgrades
+    }
     expected_main = expected_refresh_pairs(plan, canonical)
+    correction_layers = _correction_layers(plan, canonical, expected_main)
+    correction_scope_receipts = _validate_correction_scope_receipts(
+        correction_layers, plan_path
+    )
     expected_final = {(provider, case_id) for provider in providers for case_id in canonical_cases}
     if plan["main_matrix"].get("final_logical_attempts") != len(expected_final):
         raise ValueError("Final logical attempt count differs from the canonical matrix")
@@ -665,17 +1155,39 @@ def _assemble(
     baseline_pairs = {
         (provider, case_id) for provider in baseline_providers for case_id in baseline_cases
     }
-    if baseline_binding.get("logical_attempts") != len(baseline_rows) or set(
-        baseline_providers
-    ) != set(providers):
+    mapped_baseline_providers = {
+        logical_by_baseline.get(provider, provider) for provider in baseline_providers
+    }
+    if baseline_binding.get("logical_attempts") != len(baseline_rows) or (
+        mapped_baseline_providers != set(providers)
+        or len(mapped_baseline_providers) != len(baseline_providers)
+    ):
         raise ValueError("Baseline cohort differs from the refresh plan")
     _validate_record_identity(baseline_rows, allowed_pairs=baseline_pairs, label="baseline")
     _verify_artifacts(baseline, baseline_rows)
     baseline_batches, baseline_execution = _validate_source_batches(
         baseline, baseline_dataset, baseline_rows, references=False
     )
+    baseline_attempt_identities = _batch_identity_by_attempt(
+        baseline_batches,
+        baseline_rows,
+        baseline,
+        required_providers={upgrade["baseline_provider"] for upgrade in upgrades},
+    ) if upgrades else {}
+    for upgrade in upgrades:
+        identities = {
+            json.dumps(baseline_attempt_identities[row["attempt_id"]], sort_keys=True)
+            for row in baseline_rows if row["provider"] == upgrade["baseline_provider"]
+        }
+        expected_identity = json.dumps(
+            upgrade["baseline_implementation_identity"], sort_keys=True
+        )
+        if identities != {expected_identity}:
+            raise ValueError("Baseline implementation identity differs from upgrade plan")
 
     replacements = canonical.get("comparison", {}).get("case_replacements")
+    if replacements is None:
+        replacements = {}
     if not isinstance(replacements, dict) or len(set(replacements.values())) != len(replacements):
         raise ValueError("Canonical case replacement map is missing or invalid")
     baseline_only = set(baseline_cases) - set(canonical_cases)
@@ -689,7 +1201,10 @@ def _assemble(
     if canonical_only != set(active_replacements.values()):
         raise ValueError("Canonical-only cases differ from the replacement map")
     matched_cases = set(plan["main_matrix"]["matched_case_ids"])
-    if not set(active_replacements.values()) <= matched_cases:
+    upgrade_cases = {
+        case_id for upgrade in upgrades for case_id in upgrade["affected_case_ids"]
+    }
+    if not set(active_replacements.values()) <= matched_cases | upgrade_cases:
         raise ValueError("Every active replacement case must be in the matched rerun scope")
 
     rerun_by_pair: dict[tuple[str, str], tuple[dict, Path]] = {}
@@ -699,54 +1214,133 @@ def _assemble(
         canonical.get("comparison", {}).get("reference_binding_mode")
         == "equivalent_reference_bytes_with_independent_batch_captures"
     )
-    for root in main_reruns:
+    ordered_main_reruns = (
+        sorted(main_reruns, key=lambda root: _sha256(root / "results.jsonl"))
+        if correction_layers else main_reruns
+    )
+    consumed_layers = set()
+    for root in ordered_main_reruns:
         dataset = _read_json(root / "dataset.json")
         rows = _read_records(root)
-        _reject_account_capacity_results(rows, label="main rerun")
+        row_pairs = [(row.get("provider"), row.get("case_id")) for row in rows]
+        if len(row_pairs) != len(set(row_pairs)):
+            raise ValueError(f"Main rerun source contains duplicate provider/case results: {root}")
+        all_pairs = set(row_pairs)
+        _validate_record_identity(rows, allowed_pairs=all_pairs, label="main rerun source")
+        batches, execution_path = _validate_source_batches(root, dataset, rows, references=True)
+        bound_layers = [
+            layer for layer in correction_layers
+            if _bundle_matches_layer(root, execution_path, layer)
+        ]
+        if correction_layers and not bound_layers:
+            raise ValueError(f"Main rerun source is not bound by a correction layer: {root}")
+        selected_pairs = (
+            {(layer["provider"], case_id) for layer in bound_layers
+             for case_id in layer["case_ids"]}
+            if correction_layers else all_pairs
+        )
+        selected_rows = [
+            row for row in rows if (row["provider"], row["case_id"]) in selected_pairs
+        ]
+        _reject_account_capacity_results(selected_rows, label="main rerun")
         _require_canonical_cases(
             dataset,
             canonical_cases,
-            rows,
+            selected_rows,
             "main rerun",
             equivalent_capture_bindings=equivalent_capture_bindings,
         )
-        validate_report_ids(canonical, rows)
-        _verify_artifacts(root, rows)
-        batches, execution_path = _validate_source_batches(root, dataset, rows, references=True)
+        validate_report_ids(canonical, selected_rows)
+        _verify_artifacts(root, selected_rows)
+        rows_by_pair = {(row["provider"], row["case_id"]): row for row in rows}
+        for layer in bound_layers:
+            _validate_layer_execution(layer, rows_by_pair, batches, root)
+            consumed_layers.add(layer["id"])
         source_identities.append(_bundle_identity(root, execution_path))
-        rerun_batches.append((batches, rows, root, execution_path))
-        for row in rows:
+        rerun_batches.append((batches, selected_rows, root, execution_path))
+        for row in selected_rows:
             pair = (row.get("provider"), row.get("case_id"))
             if pair in rerun_by_pair:
                 raise ValueError(f"Main reruns contain duplicate provider/case results: {pair}")
             rerun_by_pair[pair] = (row, root)
+    if correction_layers and consumed_layers != {layer["id"] for layer in correction_layers}:
+        raise ValueError("Not every correction layer has a bound source bundle")
     rerun_rows = [row for row, _ in rerun_by_pair.values()]
-    _validate_consistent_provider_run_identities(rerun_batches)
+    if not correction_layers:
+        _validate_consistent_provider_run_identities(rerun_batches)
     _validate_record_identity(rerun_rows, allowed_pairs=expected_main, label="main reruns")
+    rerun_attempt_identities = {}
+    rerun_upgrade_providers = {upgrade["rerun_provider"] for upgrade in upgrades}
+    for batches, rows, root, _source_path in rerun_batches:
+        rerun_attempt_identities.update(_batch_identity_by_attempt(
+            batches,
+            rows,
+            root,
+            required_providers=rerun_upgrade_providers,
+        ))
+    for upgrade in upgrades:
+        expected_identity = json.dumps(upgrade["rerun_implementation_identity"], sort_keys=True)
+        identities = {
+            json.dumps(rerun_attempt_identities[row["attempt_id"]], sort_keys=True)
+            for row in rerun_rows if row["provider"] == upgrade["rerun_provider"]
+        }
+        if identities != {expected_identity}:
+            raise ValueError("Rerun implementation identity differs from upgrade plan")
 
     baseline_by_pair = {(row["provider"], row["case_id"]): row for row in baseline_rows}
     selected: list[tuple[dict, Path]] = []
     audit = []
     for provider in providers:
         for case in canonical["cases"]:
-            pair = (provider, case["id"])
-            if pair in rerun_by_pair:
-                row, root = rerun_by_pair[pair]
+            logical_pair = (provider, case["id"])
+            upgrade = upgrade_by_logical.get(provider)
+            affected = upgrade is not None and case["id"] in upgrade["affected_case_ids"]
+            physical_provider = (
+                upgrade["rerun_provider"] if affected else
+                upgrade["baseline_provider"] if upgrade is not None else provider
+            )
+            physical_pair = (physical_provider, case["id"])
+            if affected or logical_pair in rerun_by_pair:
+                source_pair = physical_pair if affected else logical_pair
+                row, root = rerun_by_pair[source_pair]
                 old_case_id = next(
                     (old for old, new in active_replacements.items() if new == case["id"]),
                     case["id"],
                 )
-                old = baseline_by_pair.get((provider, old_case_id))
-                selected.append((row, root))
+                old_provider = upgrade["baseline_provider"] if upgrade is not None else provider
+                old = baseline_by_pair.get((old_provider, old_case_id))
+                selected_row = deepcopy(row)
+                if upgrade is not None:
+                    selected_row["provider"] = provider
+                    selected_row["physical_execution"] = {
+                        "provider": row["provider"],
+                        "attempt_id": row["attempt_id"],
+                        "implementation_identity": rerun_attempt_identities[row["attempt_id"]],
+                        "source_bundle": _bundle_identity(
+                            root, next(path for _, _, candidate, path in rerun_batches
+                                       if candidate == root)
+                        ),
+                    }
+                selected.append((selected_row, root))
                 audit.append(
                     {
-                        "attempt_id": row["attempt_id"],
+                        "attempt_id": selected_row["attempt_id"],
                         "provider": provider,
+                        "physical_provider": row["provider"],
                         "case_id": case["id"],
                         "replaces_case_id": old_case_id,
                         "selection_reason": "predeclared refresh scope; no score-based selection",
-                        "declared_scopes": _pair_scope_reasons(plan, provider, case["id"]),
+                        "declared_scopes": _pair_scope_reasons(
+                            plan, row["provider"], case["id"]
+                        ),
                         "source_results_sha256": _sha256(root / "results.jsonl"),
+                        **({
+                            "correction_layer": next(
+                                layer["id"] for layer in correction_layers
+                                if row["provider"] == layer["provider"]
+                                and case["id"] in layer["case_ids"]
+                            )
+                        } if correction_layers else {}),
                         "excluded_attempt": (
                             {
                                 key: old.get(key)
@@ -758,104 +1352,156 @@ def _assemble(
                     }
                 )
             else:
-                old = baseline_by_pair.get(pair)
+                old_case_id = next(
+                    (old for old, new in active_replacements.items() if new == case["id"]),
+                    case["id"],
+                )
+                old = baseline_by_pair.get((physical_provider, old_case_id))
                 if old is None:
-                    raise ValueError(f"No baseline or rerun result for final pair: {pair}")
-                selected.append((old, baseline))
+                    raise ValueError(f"No baseline or rerun result for final pair: {logical_pair}")
+                selected_row = deepcopy(old)
+                if upgrade is not None:
+                    selected_row["provider"] = provider
+                    selected_row["physical_execution"] = {
+                        "provider": old["provider"],
+                        "attempt_id": old["attempt_id"],
+                        "implementation_identity": baseline_attempt_identities[old["attempt_id"]],
+                        "source_bundle": _bundle_identity(baseline, baseline_execution),
+                    }
+                    audit.append({
+                        "attempt_id": selected_row["attempt_id"],
+                        "provider": provider,
+                        "physical_provider": old["provider"],
+                        "case_id": case["id"],
+                        "replaces_case_id": old_case_id,
+                        "selection_reason": (
+                            "predeclared implementation-impact complement; no score-based selection"
+                        ),
+                        "declared_scopes": [{
+                            "scope": "implementation_upgrade_unaffected_complement",
+                            **upgrade["reason"],
+                            "baseline_provider": upgrade["baseline_provider"],
+                        }],
+                        "source_results_sha256": _sha256(baseline / "results.jsonl"),
+                        "excluded_attempt": None,
+                    })
+                selected.append((selected_row, baseline))
     final_rows = [row for row, _ in selected]
+    inherited_baseline_rows = [
+        _physical_record(row) for row, root in selected if root == baseline
+    ]
+    _require_canonical_cases(
+        baseline_dataset,
+        canonical_cases,
+        inherited_baseline_rows,
+        "baseline inherited",
+        equivalent_capture_bindings=equivalent_capture_bindings,
+    )
     _validate_record_identity(
-        final_rows, allowed_pairs=expected_final, label="assembled main matrix"
+        final_rows, allowed_pairs=expected_final, label="assembled main matrix",
+        allow_physical_projection=bool(upgrades),
     )
 
     speed_plan = plan.get("same_window_speed_cohort", {})
-    speed_dataset = _read_json(speed_cohort / "dataset.json")
-    speed_rows = _read_records(speed_cohort)
-    speed_case_inventory = [case.get("id") for case in speed_dataset.get("cases", [])]
-    if (
-        not speed_case_inventory
-        or len(speed_case_inventory) != len(set(speed_case_inventory))
-        or not set(speed_case_inventory) <= set(canonical_cases)
-    ):
-        raise ValueError("Invalid speed cohort case inventory")
-    required_speed = speed_plan.get("required")
-    if type(required_speed) is not bool:
-        raise ValueError("Invalid speed cohort plan")
-    if required_speed:
-        speed_cases = speed_plan.get("case_ids")
+    if not speed_not_measured:
+        assert speed_cohort is not None
+        speed_dataset = _read_json(speed_cohort / "dataset.json")
+        speed_rows = _read_records(speed_cohort)
+        speed_case_inventory = [case.get("id") for case in speed_dataset.get("cases", [])]
         if (
-            speed_plan.get("reuse_existing") is not False
-            or not isinstance(speed_cases, list)
-            or len(speed_cases) != len(set(speed_cases))
-            or speed_cases != speed_case_inventory
+            not speed_case_inventory
+            or len(speed_case_inventory) != len(set(speed_case_inventory))
+            or not set(speed_case_inventory) <= set(canonical_cases)
         ):
-            raise ValueError("Invalid measured speed cohort plan")
-        if speed_plan.get("provider_count") != len(providers):
-            raise ValueError("Speed provider count differs from the main cohort")
-        expected_speed_calls = len(providers) * len(speed_cases)
-        if speed_plan.get("planned_new_calls") != expected_speed_calls:
-            raise ValueError("Speed call count differs from its exact matrix")
-    else:
-        if speed_plan.get("reuse_existing") is not True or speed_plan.get("planned_new_calls") != 0:
-            raise ValueError("Unmeasured speed cohort must explicitly reuse existing evidence")
-        if not isinstance(speed_plan.get("reason"), str) or not speed_plan["reason"].strip():
-            raise ValueError("Reused speed cohort requires a reason")
-        bindings = {
-            "dataset_sha256": _sha256(speed_cohort / "dataset.json"),
-            "results_sha256": _sha256(speed_cohort / "results.jsonl"),
-            "execution_sha256": _sha256(speed_cohort / "execution.json"),
-            "speed_comparison_sha256": _sha256(speed_cohort / "speed-comparison.json"),
+            raise ValueError("Invalid speed cohort case inventory")
+        required_speed = speed_plan.get("required")
+        if type(required_speed) is not bool:
+            raise ValueError("Invalid speed cohort plan")
+        if required_speed:
+            speed_cases = speed_plan.get("case_ids")
+            if (
+                speed_plan.get("reuse_existing") is not False
+                or not isinstance(speed_cases, list)
+                or len(speed_cases) != len(set(speed_cases))
+                or speed_cases != speed_case_inventory
+            ):
+                raise ValueError("Invalid measured speed cohort plan")
+            if speed_plan.get("provider_count") != len(providers):
+                raise ValueError("Speed provider count differs from the main cohort")
+            expected_speed_calls = len(providers) * len(speed_cases)
+            if speed_plan.get("planned_new_calls") != expected_speed_calls:
+                raise ValueError("Speed call count differs from its exact matrix")
+        else:
+            if (
+                speed_plan.get("reuse_existing") is not True
+                or speed_plan.get("planned_new_calls") != 0
+            ):
+                raise ValueError("Unmeasured speed cohort must explicitly reuse existing evidence")
+            if not isinstance(speed_plan.get("reason"), str) or not speed_plan["reason"].strip():
+                raise ValueError("Reused speed cohort requires a reason")
+            bindings = {
+                "dataset_sha256": _sha256(speed_cohort / "dataset.json"),
+                "results_sha256": _sha256(speed_cohort / "results.jsonl"),
+                "execution_sha256": _sha256(speed_cohort / "execution.json"),
+                "speed_comparison_sha256": _sha256(speed_cohort / "speed-comparison.json"),
+            }
+            if any(speed_plan.get(field) != digest for field, digest in bindings.items()):
+                raise ValueError("Reused speed cohort bytes differ from the refresh plan")
+            auxiliary_names = (
+                "result-review.json", "scoring-revisions.json", "reference-revisions.json"
+            )
+            actual_auxiliary = {
+                name: _sha256(speed_cohort / name)
+                for name in auxiliary_names if (speed_cohort / name).is_file()
+            }
+            if speed_plan.get("auxiliary_sha256") != actual_auxiliary:
+                raise ValueError("Reused speed auxiliary bytes differ from the refresh plan")
+            speed_cases = speed_case_inventory
+        speed_providers = _provider_order(speed_dataset)
+        mapped_speed_providers = [logical_by_baseline.get(name, name) for name in speed_providers]
+        if mapped_speed_providers != providers:
+            raise ValueError("Speed provider cohort differs from the main cohort")
+        expected_speed = {
+            (provider, case_id) for provider in speed_providers for case_id in speed_cases
         }
-        if any(speed_plan.get(field) != digest for field, digest in bindings.items()):
-            raise ValueError("Reused speed cohort bytes differ from the refresh plan")
-        auxiliary_names = (
-            "result-review.json", "scoring-revisions.json", "reference-revisions.json"
+        # A hash-bound reused speed cohort is historical measured evidence, not a
+        # fresh execution against today's canonical scoring annotations.  Its exact
+        # dataset/results/execution/summary and auxiliary receipts were verified
+        # above, so do not reinterpret it as if those calls used later task rules.
+        # A newly measured cohort must still match the current canonical cases.
+        if required_speed:
+            _require_canonical_cases(
+                speed_dataset,
+                canonical_cases,
+                speed_rows,
+                "speed cohort",
+                equivalent_capture_bindings=equivalent_capture_bindings,
+            )
+        _validate_record_identity(speed_rows, allowed_pairs=expected_speed, label="speed cohort")
+        _verify_artifacts(speed_cohort, speed_rows)
+        _speed_batches, speed_execution = _validate_source_batches(
+            speed_cohort, speed_dataset, speed_rows, references=True
         )
-        actual_auxiliary = {
-            name: _sha256(speed_cohort / name)
-            for name in auxiliary_names if (speed_cohort / name).is_file()
-        }
-        if speed_plan.get("auxiliary_sha256") != actual_auxiliary:
-            raise ValueError("Reused speed auxiliary bytes differ from the refresh plan")
-        speed_cases = speed_case_inventory
-    if _provider_order(speed_dataset) != providers:
-        raise ValueError("Speed provider cohort differs from the main cohort")
-    expected_speed = {(provider, case_id) for provider in providers for case_id in speed_cases}
-    # A hash-bound reused speed cohort is historical measured evidence, not a
-    # fresh execution against today's canonical scoring annotations.  Its exact
-    # dataset/results/execution/summary and auxiliary receipts were verified
-    # above, so do not reinterpret it as if those calls used later task rules.
-    # A newly measured cohort must still match the current canonical cases.
-    if required_speed:
-        _require_canonical_cases(
+        if speed_execution.name != "execution.json":
+            raise ValueError("Speed cohort requires aggregate execution.json")
+        speed_execution_value = _read_json(speed_execution)
+        if speed_execution_value.get("schema_version") != 1:
+            raise ValueError("Unsupported speed execution schema")
+        expected_speed_summary = build_speed_summary(
             speed_dataset,
-            canonical_cases,
             speed_rows,
-            "speed cohort",
-            equivalent_capture_bindings=equivalent_capture_bindings,
+            _speed_batches,
+            speed_execution_value.get("aggregate"),
         )
-    _validate_record_identity(speed_rows, allowed_pairs=expected_speed, label="speed cohort")
-    _verify_artifacts(speed_cohort, speed_rows)
-    _speed_batches, speed_execution = _validate_source_batches(
-        speed_cohort, speed_dataset, speed_rows, references=True
-    )
-    if speed_execution.name != "execution.json":
-        raise ValueError("Speed cohort requires aggregate execution.json")
-    speed_execution_value = _read_json(speed_execution)
-    if speed_execution_value.get("schema_version") != 1:
-        raise ValueError("Unsupported speed execution schema")
-    expected_speed_summary = build_speed_summary(
-        speed_dataset,
-        speed_rows,
-        _speed_batches,
-        speed_execution_value.get("aggregate"),
-    )
-    expected_speed_summary["bindings"] = {
-        "dataset_sha256": _sha256(speed_cohort / "dataset.json"),
-        "results_sha256": _sha256(speed_cohort / "results.jsonl"),
-    }
-    packaged_speed_summary = _read_json(speed_cohort / "speed-comparison.json")
-    if packaged_speed_summary != expected_speed_summary:
-        raise ValueError("Speed comparison schema, bindings, or rows differ from measured evidence")
+        expected_speed_summary["bindings"] = {
+            "dataset_sha256": _sha256(speed_cohort / "dataset.json"),
+            "results_sha256": _sha256(speed_cohort / "results.jsonl"),
+        }
+        packaged_speed_summary = _read_json(speed_cohort / "speed-comparison.json")
+        if packaged_speed_summary != expected_speed_summary:
+            raise ValueError(
+                "Speed comparison schema, bindings, or rows differ from measured evidence"
+            )
 
     output.mkdir(parents=True)
     materialize_task_references(output, {name: input_tree(canonical_path,name)
@@ -866,7 +1512,9 @@ def _assemble(
         materialize_reference_checks(output, root, source_batches)
 
     selected_baseline = [row for row, root in selected if root == baseline]
-    batches = _prune_shadowed_batch_attempts(deepcopy(baseline_batches), selected_baseline)
+    batches = _prune_shadowed_batch_attempts(
+        deepcopy(baseline_batches), [_physical_record(row) for row in selected_baseline]
+    )
     for source_batches, rows, _root, _ in rerun_batches:
         chosen = [row for row in rows if (row["provider"], row["case_id"]) in expected_main]
         batches.extend(_prune_shadowed_batch_attempts(deepcopy(source_batches), chosen))
@@ -887,6 +1535,7 @@ def _assemble(
     (output / "selection-audit.json").write_text(
         json.dumps(audit, ensure_ascii=False, indent=2) + "\n", encoding="utf-8"
     )
+    _require_reproducible_verdicts(output)
     _write_composite_revisions(output, selected)
 
     history = output / "history" / "source-executions"
@@ -898,11 +1547,58 @@ def _assemble(
     for index, (root, path) in enumerate(execution_sources):
         shutil.copy2(path, history / f"{index:03d}-{root.name}-{path.name}")
 
-    _copy_speed_bundle(
-        speed_cohort, output / "speed-cohort", speed_dataset, speed_rows, _speed_batches
-    )
+    if upgrades:
+        impact_history = output / "history" / "implementation-impact"
+        impact_history.mkdir(parents=True)
+        for index, (upgrade, binding) in enumerate(zip(upgrades, impact_receipts, strict=True)):
+            source = contained_path(
+                plan_path.parent, upgrade["impact_receipt"]["path"], reject_symlinks=True
+            )
+            relative = (
+                f"history/implementation-impact/{index:03d}-"
+                f"{upgrade['logical_provider']}.json"
+            )
+            shutil.copy2(source, output / relative)
+            binding["stored_path"] = relative
+
+    if correction_layers:
+        scope_history = output / "history" / "correction-layer-scopes"
+        scope_history.mkdir(parents=True)
+        receipts_by_layer = {item["layer_id"]: item for item in correction_scope_receipts}
+        for index, layer in enumerate(correction_layers):
+            source = contained_path(
+                plan_path.parent, layer["scope_receipt"]["path"], reject_symlinks=True
+            )
+            relative = f"history/correction-layer-scopes/{index:03d}-{layer['id']}.json"
+            shutil.copy2(source, output / relative)
+            receipts_by_layer[layer["id"]]["stored_path"] = relative
+
+    if not speed_not_measured:
+        assert speed_cohort is not None
+        _copy_speed_bundle(
+            speed_cohort, output / "speed-cohort", speed_dataset, speed_rows, _speed_batches
+        )
+        speed_receipt = {
+            **_bundle_identity(speed_cohort, speed_execution),
+            "logical_attempts": len(speed_rows),
+            "new_calls": speed_plan["planned_new_calls"],
+            "reused_existing": speed_plan.get("reuse_existing") is True,
+            "stored_below": "speed-cohort/",
+            "excluded_from_main_results": True,
+            "excluded_from_main_execution": True,
+        }
+    else:
+        speed_receipt = {
+            "evidence_state": "not_measured_same_window",
+            "reason": speed_plan["reason"],
+            "new_calls": 0,
+            "reused_existing": False,
+            "stored_below": None,
+            "excluded_from_main_results": True,
+            "excluded_from_main_execution": True,
+        }
     receipt = {
-        "schema_version": 1,
+        "schema_version": 2 if upgrades else 1,
         "kind": "predeclared_webfetch_refresh_assembly",
         "assembled_at": datetime.now(UTC).isoformat(),
         "plan_sha256": _sha256(plan_path),
@@ -920,18 +1616,49 @@ def _assemble(
         "output_results_sha256": hashlib.sha256(results_bytes).hexdigest(),
         "output_execution_sha256": _sha256(output / "execution.json"),
         "selection_audit_sha256": _sha256(output / "selection-audit.json"),
-        "speed_cohort": {
-            **_bundle_identity(speed_cohort, speed_execution),
-            "logical_attempts": len(speed_rows),
-            "new_calls": speed_plan["planned_new_calls"],
-            "reused_existing": speed_plan.get("reuse_existing") is True,
-            "stored_below": "speed-cohort/",
-            "excluded_from_main_results": True,
-            "excluded_from_main_execution": True,
-        },
+        "speed_cohort": speed_receipt,
         "provider_calls_performed_by_assembler": 0,
         "selection_policy": "exact profile scope; never select by score or retry outcome",
     }
+    if upgrades:
+        receipt["implementation_upgrades"] = []
+        for upgrade, impact_receipt in zip(upgrades, impact_receipts, strict=True):
+            logical = upgrade["logical_provider"]
+            logical_rows = [row for row in final_rows if row["provider"] == logical]
+            rerun_cases = set(upgrade["affected_case_ids"])
+            receipt["implementation_upgrades"].append({
+                "logical_provider": logical,
+                "baseline_provider": upgrade["baseline_provider"],
+                "rerun_provider": upgrade["rerun_provider"],
+                "baseline_implementation_identity": upgrade[
+                    "baseline_implementation_identity"
+                ],
+                "rerun_implementation_identity": upgrade["rerun_implementation_identity"],
+                "affected_case_ids": upgrade["affected_case_ids"],
+                "affected_case_ids_sha256": _case_ids_sha256(upgrade["affected_case_ids"]),
+                "inherited_attempts": sum(
+                    row["case_id"] not in rerun_cases for row in logical_rows
+                ),
+                "rerun_attempts": sum(row["case_id"] in rerun_cases for row in logical_rows),
+                "final_logical_attempts": len(logical_rows),
+                "impact_receipt": impact_receipt,
+                "physical_identity_policy": (
+                    "logical provider projection only; attempt IDs, artifact bindings, public "
+                    "call logs, source bundle hashes and implementation identities are immutable"
+                ),
+            })
+    if correction_layers:
+        receipts_by_layer = {item["layer_id"]: item for item in correction_scope_receipts}
+        receipt["correction_layers"] = [{
+            "id": layer["id"],
+            "provider": layer["provider"],
+            "case_ids": layer["case_ids"],
+            "case_ids_sha256": _case_ids_sha256(layer["case_ids"]),
+            "source_bundle": layer["source_bundle"],
+            "execution_contract": layer["execution_contract"],
+            "scope_receipt": receipts_by_layer[layer["id"]],
+            "selection_policy": "predeclared provider/case layer; outcome fields ignored",
+        } for layer in correction_layers]
     (output / "refresh-assembly.json").write_text(
         json.dumps(receipt, ensure_ascii=False, indent=2) + "\n", encoding="utf-8"
     )
@@ -940,21 +1667,22 @@ def _assemble(
 def assemble(
     baseline: Path,
     main_reruns: list[Path],
-    speed_cohort: Path,
+    speed_cohort: Path | None,
     output: Path,
     *,
     canonical_dataset: Path = ROOT / "evaluation/dataset.json",
     plan: Path = ROOT / "evaluation/current-rerun.json",
 ) -> None:
     """Validate into a sibling staging directory and expose the result atomically."""
-    reject_evidence_symlinks(speed_cohort)
+    if speed_cohort is not None:
+        reject_evidence_symlinks(speed_cohort)
     for root in [baseline, *main_reruns]:
         reject_evidence_symlinks(root)
         for name in ("dataset.json", "results.jsonl", "manifest.json", "execution.json"):
             contained_path(root, name, reject_symlinks=True)
     baseline = baseline.resolve()
     main_reruns = [root.resolve() for root in main_reruns]
-    speed_cohort = speed_cohort.resolve()
+    speed_cohort = speed_cohort.resolve() if speed_cohort is not None else None
     output = output.resolve()
     if not main_reruns:
         raise ValueError("At least one main rerun bundle is required")
@@ -983,7 +1711,7 @@ def main(argv=None) -> None:
     parser = argparse.ArgumentParser(description=__doc__)
     parser.add_argument("--baseline", required=True, type=Path)
     parser.add_argument("--main-rerun", required=True, action="append", type=Path)
-    parser.add_argument("--speed-cohort", required=True, type=Path)
+    parser.add_argument("--speed-cohort", type=Path)
     parser.add_argument("--canonical-dataset", type=Path, default=ROOT / "evaluation/dataset.json")
     parser.add_argument("--plan", type=Path, default=ROOT / "evaluation/current-rerun.json")
     parser.add_argument("--output", required=True, type=Path)
diff --git a/harness/web_fetch/report.py b/harness/web_fetch/report.py
index 99eb60df0..4ca8cb95e 100644
--- a/harness/web_fetch/report.py
+++ b/harness/web_fetch/report.py
@@ -15,9 +15,9 @@
 
 from .accounts import report_access_registry
 from .failure_diagnosis import diagnose
-from .methods import ROUTE_LABELS, method_page_model
+from .methods import ROUTE_LABELS, method_page_model, is_browser_comparison, browser_method_label
 from .metrics import percentile, task_measured, task_passed
-from .models import TRACKS, execution_id
+from .models import REPORT_FAMILIES, TRACKS, execution_id, report_family
 from .report_components import (
  basis_label,
  examples,
@@ -31,7 +31,7 @@
  tabs,
  task_instruction,
 )
-from .report_interfaces import HEADLESS_ACCESS
+from .report_interfaces import HEADLESS_ACCESS, method_access, method_version, method_provenance
 from .report_methods import PROFILES, adoption_counts
 from .report_resources import render_resource_comparison
 from .report_style import STYLE
@@ -298,15 +298,19 @@ def score_digits(values, direction='max'):
    page(lang,f'cases/{case}.html',case,body)
  from harness.report_languages import write_language_contract
  write_language_contract(out, include_english=include_english)
-def provider_label(name):return PROVIDER_LABELS.get(name,name)
+def provider_label(name):
+ from .methods import measured_method_label
+ return measured_method_label(name,PROVIDER_LABELS.get(name,browser_method_label(name)))
 def case_track_label(case):
+ family=report_family(case)
+ if family in {'web_media','media_file'}:return REPORT_FAMILIES[family]
  if case.get('track','web')=='web':
   return {'file':'文件交付','resource':'资源发现','structure':'结构化内容'}.get(case.get('task_kind','body'),TRACKS['web'])
  return TRACKS[case['track']]
 def active_tracks(cases):
  rows=[]
- for key,label in TRACKS.items():
-  selected=[c for c in cases.values() if c.get('track','web')==key]
+ for key,label in REPORT_FAMILIES.items():
+  selected=[c for c in cases.values() if report_family(c)==key]
   if not selected:continue
   if key=='web' and any(c.get('task_kind','body')!='body' for c in selected):
    labels={case_track_label(c) for c in selected}
@@ -317,7 +321,7 @@ def active_tracks(cases):
 def track_count_label(count):return str(count)
 
 def is_headless_cohort(records):
- return bool(records) and all(r.get('provider_type') in {'headless_html','headless_markdown'} for r in records)
+ return is_browser_comparison(records)
 
 def provider_configuration(name,records,info):
  """Compatibility accessor for the generic method-page model."""
@@ -356,7 +360,7 @@ def provider_page_body(name,records,cases,headers,tracks,*,native_default=False)
 function closeCallLog(button){let dialog=button.closest('dialog');if(!dialog)return;if(typeof dialog.close==='function')dialog.close();else{dialog.removeAttribute('open');let trigger=callLogTrigger;callLogTrigger=null;trigger?.focus()}}
 function applyReportAnchor(anchor){if(!anchor)return;if(wmbInspect(anchor))return;if(anchor.startsWith('track-')){chooseTab('dataset-hub','cases');let s=document.querySelector('select[data-filter="track"]');if(s){s.value=anchor.slice(6);document.querySelectorAll('select[data-filter]').forEach(x=>{if(x!==s)x.value=''});cascadeFilters(s)}}else if(['references','sources'].includes(anchor)){chooseTab('dataset-hub',anchor)}else{let target=document.getElementById(anchor);for(let p=target;p;p=p.parentElement){if(p.dataset?.panel)chooseTab(p.parentElement.id,p.dataset.panel);if(p.tagName==='DETAILS')p.open=true}}}
 function wmbFilters(){let table=document.querySelector('[data-wmb-table]');if(!table)return;let rows=table.tBodies[0].rows,controls=[...document.querySelectorAll('[data-wmb-filter]')],values=Object.fromEntries(controls.map(c=>[c.dataset.wmbFilter,c.value])),axis=values.axis||'',query=(values.query||'').trim().toLowerCase();let category=controls.find(c=>c.dataset.wmbFilter==='category');if(category){let allowed=new Set();for(let row of rows)if(!values.method||row.dataset.method===values.method)allowed.add(row.dataset[axis]);for(let option of category.options)option.disabled=!!option.value&&!allowed.has(option.value);if(category.value&&!allowed.has(category.value)){category.value='';values.category=''}}let failure=controls.find(c=>c.dataset.wmbFilter==='failure');if(failure){let available=new Set();for(let row of rows)if((!values.method||row.dataset.method===values.method)&&(!values.request||row.dataset.request===values.request)&&row.dataset.failure)available.add(row.dataset.failure);for(let option of failure.options)option.disabled=!!option.value&&!available.has(option.value);failure.disabled=values.request==='success'||available.size===0;if(failure.disabled||failure.value&&!available.has(failure.value)){failure.value='';values.failure=''}}let band=controls.find(c=>c.dataset.wmbFilter==='band');if(band){band.disabled=!values.metric;if(band.disabled){band.value='';values.band=''}}let count=0;for(let row of rows){let search=row.dataset.searchNormalized||(row.dataset.searchNormalized=(row.dataset.search||'').toLowerCase());let show=(!values.method||row.dataset.method===values.method)&&(!axis||!values.category||row.dataset[axis]===values.category)&&(!values.request||row.dataset.request===values.request)&&(!values.failure||row.dataset.failure===values.failure)&&(!query||search.includes(query));if(show&&values.metric){let raw=row.dataset[values.metric],number=raw===''||raw==null?null:Number(raw);if(values.band==='unavailable')show=number===null;else if(values.band){let [low,high]=values.band.split(':').map(Number);show=number!==null&&number>=low&&number<(high===1?1.0000001:high)}}row.hidden=!show;if(show){count++;row.cells[0].textContent=count}}let indicator=document.querySelector('[data-wmb-count]');if(indicator)indicator.textContent=tr(`显示 ${count} / ${rows.length} 条`,`Showing ${count} / ${rows.length}`)}
-function wmbInspect(anchor){if(!anchor.startsWith('inspect?'))return false;let params=new URLSearchParams(anchor.slice(8).replace(/\+/g,'%2B'));document.querySelectorAll('[data-wmb-filter]').forEach(c=>{let value=params.get(c.dataset.wmbFilter);if(value!==null)c.value=value});wmbFilters();(document.querySelector('.wmb-controls')||document.querySelector('[data-wmb-table]')?.closest('section'))?.scrollIntoView({block:'start'});return true}
+function wmbInspect(anchor){if(!anchor.startsWith('inspect?'))return false;let params=new URLSearchParams(anchor.slice(8).replace(/\+/g,'%2B'));let regular=[...document.querySelectorAll('[data-filter]')];if(regular.length){regular.forEach(c=>c.value=params.get(c.dataset.filter)||'');cascadeFilters();document.querySelector('.filters')?.scrollIntoView({block:'start'});return true}document.querySelectorAll('[data-wmb-filter]').forEach(c=>{let value=params.get(c.dataset.wmbFilter);if(value!==null)c.value=value});wmbFilters();(document.querySelector('.wmb-controls')||document.querySelector('[data-wmb-table]')?.closest('section'))?.scrollIntoView({block:'start'});return true}
 function wmbReset(){document.querySelectorAll('[data-wmb-filter]').forEach(c=>{c.value=c.dataset.wmbDefault||''});wmbFilters()}
 function wmbSliceFilters(){let table=document.getElementById('wmb-slices'),axis=document.getElementById('wmb-slice-axis'),category=document.getElementById('wmb-slice-category'),method=document.getElementById('wmb-slice-method'),count=document.getElementById('wmb-slice-count');if(!table||!axis||!category||!method||!count)return;let rows=[...table.tBodies[0].rows],available=new Set(rows.filter(r=>r.dataset.axis===axis.value&&(!method.value||r.dataset.method===method.value)).map(r=>r.dataset.category));for(let option of category.options)option.disabled=!!option.value&&!available.has(option.value);if(category.value&&!available.has(category.value))category.value='';let shown=0;for(let row of rows){let visible=row.dataset.axis===axis.value&&(!category.value||row.dataset.category===category.value)&&(!method.value||row.dataset.method===method.value);row.hidden=!visible;if(visible)row.cells[0].textContent=++shown}count.textContent=tr(`显示 ${shown} / ${rows.length} 条分类结果`,`Showing ${shown} / ${rows.length} category results`)}
 function wmbDistribution(){let table=document.getElementById('wmb-distribution'),axis=document.getElementById('wmb-distribution-axis'),count=document.getElementById('wmb-distribution-count');if(!table||!axis||!count)return;let rows=[...table.tBodies[0].rows],shown=0,parent=0,sample=0;for(let row of rows){let visible=row.dataset.axis===axis.value;row.hidden=!visible;if(visible){row.cells[0].textContent=++shown;parent+=Number(row.dataset.parent||0);sample+=Number(row.dataset.sample||0)}}count.textContent=tr(`${shown} 个分类 · 母集合计 ${parent} · 样本合计 ${sample}`,`${shown} categories · parent total ${parent} · sample total ${sample}`)}
@@ -599,23 +603,17 @@ def run_log_section(out,record,output):
   stderr_data=stderr_text.encode('utf-8');stderr_total+=len(stderr_data)
   truncated=bool(log_process.get('stderr_truncated') or metadata.get('stderr_truncated'))
   any_stderr=any_stderr or bool(stderr_data);any_truncated=any_truncated or truncated
-  suffix='' if len(logs)==1 else f'-physical-{index:03d}'
-  stderr_path=(f'public-logs/{record["provider"]}/{record["case_id"]}/'
-               f'run-{int(record.get("run") or 1):03d}{suffix}.stderr.log')
   raw_download=(f'<a href="../{esc(log["path"])}" download>下载调用日志 JSON</a> · '
                 f'<code class="break">JSON SHA-256：{esc(log["sha256"])}</code>')
   if stderr_data:
-   target=contained_path(out,stderr_path);target.parent.mkdir(parents=True,exist_ok=True);target.write_bytes(stderr_data)
-   stderr_sha=hashlib.sha256(stderr_data).hexdigest()
    rows=''.join(f'<li value="{int(match.group(1))}"><code>{esc(match.group(2))}</code></li>'
                 for line in _reader_log_excerpt(stderr_text).splitlines()
                 if (match:=re.match(r'\s*(\d+)\s{2}(.*)',line)))
    completeness=('这份公开日志是现有调用记录中保存的前段内容，原始记录注明其已截断。' if truncated else
                  '以下内容逐行摘自这次物理调用已保存的完整 stderr / debug 日志。')
-   body=(f'<p class="source-note">{completeness} 行号对应下载文件；人工说明不写入日志框。</p>'
+   body=(f'<p class="source-note">{completeness} 行号对应调用日志 JSON 中的 process.stderr 字段；人工说明不写入日志框。</p>'
          +(f'<ol class="log-lines">{rows}</ol>' if rows else '')
-         +f'<p><a class="log-download" href="../{esc(stderr_path)}" download>下载已保存的公开日志</a> · '
-          f'<code class="break">公开 SHA-256：{esc(stderr_sha)}</code><br>{raw_download}</p>')
+         +f'<p>{raw_download}</p>')
   else:
    body=(f'<p class="source-note">这次物理调用没有保存可展示的 stderr / debug 日志；'
          f'不会补造不存在的日志。</p><p>{raw_download}</p>')
@@ -635,8 +633,7 @@ def run_log_section(out,record,output):
   native_text,caller_text=_separate_observed_logs(debug_bytes.decode("utf-8", "replace"))
   native_view=('<pre data-log-source="product">'+esc(native_text)+'</pre>' if native_text else '<p data-log-unavailable>本次没有取得产品或依赖库的原生日志。已保存的调用方记录见下方。</p>')
   diagnostics=[f'<article><h3>实际诊断日志 · 产品与依赖库</h3><p>{esc(metadata.get("public_log_note") or "仅展示真实观测记录；未开放的内部过程不作推断。")}</p><p>返回 JSON 在“原始返回”中单独展示；接入程序记录在下方“调用方事件”中。</p>{native_view}<details><summary>调用方事件（测试程序记录）</summary><pre data-log-source="caller">{esc(caller_text)}</pre></details><p><a href="../{esc(public_debug)}" download>下载运行时日志（已分离返回内容）</a> · 公开 SHA-256：<code class="break">{esc(metadata["public_debug_log_sha256"])}</code> · 原始采集记录 {int(metadata.get("diagnostic_log_bytes") or 0):,} 字节（可含协议返回） · 原始 SHA-256：<code class="break">{esc(metadata.get("diagnostic_log_sha256") or "—")}</code></p></article>']
- version=(metadata.get('reported_version') or metadata.get('binary_version') or metadata.get('browser_version') or
-          metadata.get('moli_version') or metadata.get('version') or '—')
+ version=method_version(record,method_provenance(out)) or '—'
  command=metadata.get('command_args') or metadata.get('command') or '—（调用记录未保存可展示的完整命令）'
  if isinstance(command,list):command=' '.join(str(item) for item in command)
  status='成功' if record.get('ok') else '失败'
@@ -646,7 +643,7 @@ def run_log_section(out,record,output):
                if any_stderr else '0 字节')
  fields=(f'<dt>调用状态</dt><dd>{status}</dd><dt>耗时</dt><dd>{ms(record.get("elapsed_ms"))}</dd>'
          f'<dt>退出码</dt><dd>{esc(process.get("exit_code",metadata.get("exit_code","—")))}</dd>'
-         f'<dt>Markdown 输出</dt><dd>{output_bytes:,} 字节</dd><dt>运行日志</dt><dd>{top_log_size}</dd>'
+         f'<dt>原始输出</dt><dd>{output_bytes:,} 字节</dd><dt>运行日志</dt><dd>{top_log_size}</dd>'
          f'<dt>日志是否完整</dt><dd>{complete_label}</dd><dt>运行 ID</dt><dd>{esc(record.get("run_id") or execution_id(record) or "—")}</dd>'
          f'<dt>工具版本</dt><dd>{esc(version)}</dd>')
  full_fields=(f'<dt>开始时间</dt><dd>{esc(record.get("started_at") or timing.get("started_at") or "—")}</dd>'
@@ -655,6 +652,9 @@ def run_log_section(out,record,output):
               f'<dt>公开日志</dt><dd>{top_log_size}</dd><dt>公开日志脱敏</dt><dd>{"已隐藏凭据与本机路径" if public_debug else "否"}</dd>'
               f'<dt>方法 SHA-256</dt><dd>{esc(metadata.get("binary_sha256") or "—")}</dd>'
               f'<dt>正式命令</dt><dd>{esc(command)}</dd>')
+ runtime_error=''
+ if not record.get('ok') or record.get('error_type'):
+  runtime_error='<div class="runtime-error"><h3>程序错误</h3><p>分类：<code>'+esc(record.get('error_type') or '未记录')+'</code></p><pre>'+esc(record.get('error_message') or '调用记录未提供错误文字。')+'</pre></div>'
  diagnostic=''.join(diagnostics) if diagnostics else '<p class="source-note">这次历史调用没有保存可展示的 stderr / debug 日志；不会补造不存在的日志。</p>'
  raw_record=' · '.join(f'<a href="../{esc(log["path"])}" download>下载{esc(log["label"])}记录</a>' for log in logs)
  if artifact_relative:
@@ -681,7 +681,7 @@ def run_log_section(out,record,output):
               f'（{diagnostic_size:,} 字节 · SHA-256：<code class="break">{esc(diagnostic_sha)}</code> · 截断：{diagnostic_truncated}）')
  if not raw_record:raw_record='这次历史调用没有可下载的原始记录'
  return (f'<section class="section" id="run-log"><div class="wrap"><h2>运行日志与证据</h2>'
-         f'<dl class="diagnostic-fields">{fields}</dl>'
+         f'<dl class="diagnostic-fields">{fields}</dl>{runtime_error}'
          f'<details class="technical-details"><summary>查看完整运行字段</summary><dl class="diagnostic-fields">{full_fields}</dl></details>'
          f'<p class="log-summary"><b>结论说明：</b>{result_note}</p>'
          f'<details class="diagnostic-log"><summary>查看本次真实日志</summary><div class="diagnostic-log-body">{diagnostic}</div></details>'
@@ -693,7 +693,37 @@ def link(url,label):return f'<a href="{esc(safe_href(url))}">{esc(label)}</a>'
 def cell(value,sort=None):return '<td'+(f' data-sort="{sort}"' if sort is not None else '')+f'>{value}</td>'
 def rate(a,b):return pct(a/b) if b else '—'
 def section(title,body,id=''):return '<section class="section"'+(f' id="{id}"' if id else '')+f'><div class="wrap"><h2>{title}</h2>{body}</div></section>'
-def hero(title,desc):return f'<section class="hero"><div class="wrap"><div class="eyebrow">Web Fetch · 评测报告</div><h1>{title}</h1><p class="lead">{desc}</p></div></section>'
+def hero(title,desc):
+ label='合成示例' if '合成示例 · 非正式评测' in _RELIABILITY_BANNER else '诊断运行' if '诊断运行 · 非正式评测' in _RELIABILITY_BANNER else '实测报告'
+ return f'<section class="hero"><div class="wrap"><div class="eyebrow">Web Fetch · {label}</div><h1>{title}</h1><p class="lead">{desc}</p></div></section>'
+def comparative_rows(rows, directions):
+ """Mark raw-value column extrema without ranking unavailable values or ties."""
+ matches=[list(re.finditer(r'<td\b[^>]*>.*?</td>',values,re.S)) for _,values in rows]
+ numbers={}
+ for index,(metric,direction) in directions.items():
+  values=[]
+  for cells in matches:
+   match=re.search(r'data-sort="([^"]+)"',cells[index].group())
+   value=float(match.group(1)) if match else None
+   values.append(value if value is not None and value>=0 else None)
+  valid=[v for v in values if v is not None]
+  extreme=(max(valid) if direction=='max' else min(valid)) if valid else None
+  numbers[index]=(values,extreme,valid.count(extreme)==1)
+ result=[]
+ for row_number,((attrs,values),cells) in enumerate(zip(rows,matches)):
+  for index in sorted(directions,reverse=True):
+   metric,direction=directions[index];column,extreme,unique=numbers[index]
+   fragment=cells[index].group();opening,body=fragment.split('>',1)
+   if column[row_number] is None:opening=re.sub(r' data-sort="[^"]+"','',opening)
+   opening+=' data-metric="'+metric+'" data-metric-direction="'+direction+'"'
+   content=body[:-5]
+   if unique and column[row_number] is not None and column[row_number]==extreme:
+    content='<strong class="comparison-winner good">'+content+'</strong>'
+   values=values[:cells[index].start()]+opening+'>'+content+'</td>'+values[cells[index].end():]
+  result.append((attrs,values))
+ return result
+
+
 def table(headers,rows,id='',sortable=False,cls='',metrics=None,index_header='序号',default_sort=None):
  head=f'<th>{esc(index_header)}</th>'+''.join(f'<th><button class="sort-button" onclick="sortTable(\'{id}\',{i+1})">{h} ↕</button></th>' if sortable else f'<th>{h}</th>' for i,h in enumerate(headers))
  body=''.join(f'<tr{attrs}><td>{i+1}</td>{values}</tr>' for i,(attrs,values) in enumerate(rows))
@@ -1061,9 +1091,9 @@ def case_rate(rs,c):
  return value
 
 def overview_card(records,cases,track,label,names):
- selected=[c for c in cases.values() if c.get('track','web')==track]
+ selected=[c for c in cases.values() if report_family(c)==track]
  if not selected:return ''
- rs=[r for r in records if cases[r['case_id']].get('track','web')==track]
+ rs=[r for r in records if report_family(cases[r['case_id']])==track]
  eligible=[r for r in rs if measured(r,cases[r['case_id']])]
  rates={n:sum(succeeded(r,cases[r['case_id']]) for r in eligible if r['provider']==n)/sum(r['provider']==n for r in eligible) for n in names if any(r['provider']==n for r in eligible)}
  maximum=max(rates.values(),default=None)
@@ -1222,22 +1252,31 @@ def _body_scoring_text(record, output):
  from .response_input import answer_input
  content=answer_input(output.encode('utf-8'),record.get('provider_metadata'),
                       ok=record.get('ok',False),status_code=record.get('status_code'))[0]
- if re.match(r'\s*(?:<!doctype\s+html\b|<(?:html|body|main|div|section|article)\b)',content,re.I):
+ from .reference_quality import is_html_document_or_fragment,visible_mixed_html_text
+ if is_html_document_or_fragment(content):
   from .dynamic_lists import visible_html_text
   content=visible_html_text(content)
+ else:
+  content=visible_mixed_html_text(content)
  return content
 
 def body_region_rows(case, metrics, output):
  from .body_coverage import evaluate_body_requirements
  contract=case.get('body_requirements') or {}
  if not contract:return [],''
- recalculated={x['id']:x for x in evaluate_body_requirements(output,contract)['body_region_results']}
  saved_regions=metrics.get('body_region_results',[])
  if saved_regions and all('matched_output_passages' in item for item in saved_regions):
+  from .body_coverage import _compact_with_positions
+  matching_text=_compact_with_positions(output)[0]
+  digest=hashlib.sha256(matching_text.encode()).hexdigest()
+  if any(item.get('matching_text_sha256')!=digest for item in saved_regions):
+   raise ValueError('Saved body evidence differs from the scorer input')
   evidence={item['id']:[passage.get('text','') for passage in item.get('matched_output_passages',[]) if passage.get('text')]
             for item in saved_regions}
   evidence_counts={item['id']:item.get('matched_units',item.get('matched_tokens',0)) for item in saved_regions}
+  recalculated={item['id']:item for item in saved_regions}
  else:
+  recalculated={x['id']:x for x in evaluate_body_requirements(output,contract)['body_region_results']}
   evidence,evidence_counts=_body_region_evidence(output,contract)
  regions={x['id']:x for x in contract['regions']}
  rows=[];cards=[];total=len(regions)
@@ -1262,17 +1301,20 @@ def body_region_rows(case, metrics, output):
 
 def stable_answer_panel(contract):
  anchors=contract.get('stable_text_anchors',[])
+ anchors_required=contract.get('stable_text_role','required')!='diagnostic'
+ anchor_label='必须出现的稳定文字' if anchors_required else '用于范围核对的稳定文字'
  items=[]
  for index,anchor in enumerate(anchors,1):
   alternatives=anchor.get('alternatives',[])
   text='\n或\n'.join(alternatives)
-  items.append(f'<div class="answer-item"><b>必须出现的稳定文字 {index}（任一写法即可）</b><blockquote>{esc(text)}</blockquote></div>')
+  items.append(f'<div class="answer-item"><b>{anchor_label} {index}（任一写法即可）</b><blockquote>{esc(text)}</blockquote></div>')
  minimum=contract.get('minimum_records')
  maximum=contract.get('maximum_records')
  count=(f'至少 {minimum} 条完整且不重复的记录' if maximum is None else
         f'{minimum}–{maximum} 条完整且不重复的记录')
  scroll=' data-scroll-after="5"' if len(anchors)>5 else ''
- note=(f'<p class="source-note">共 {len(anchors)} 组稳定文字，全部属于标准答案；当前区域显示约 5 组高度，向下滚动查看全部。</p>'
+ role_note='全部属于标准答案' if anchors_required else '只用于范围核对，不影响是否通过'
+ note=(f'<p class="source-note">共 {len(anchors)} 组稳定文字，{role_note}；当前区域显示约 5 组高度，向下滚动查看全部。</p>'
        if len(anchors)>5 else '')
  return note+f'<div class="answer-list"{scroll}><div class="answer-item"><b>结构要求</b><blockquote>{esc(count)}</blockquote></div>{"".join(items)}</div>'
 
@@ -1362,6 +1404,8 @@ def _quote_field_issue(metrics):
 
 def stable_anchor_evidence(metrics,output):
  cards=[]
+ anchors_required=metrics.get('stable_anchors_required',True)
+ expected_label='标准答案' if anchors_required else '范围核对文字'
  for index,item in enumerate(metrics.get('stable_anchor_results',[]),1):
   alternatives=item.get('alternatives',[]);expected='\n或\n'.join(alternatives)
   excerpt=''
@@ -1386,9 +1430,11 @@ def stable_anchor_evidence(metrics,output):
    field_detail='<p class="source-note">整条记录按字段判定；文字出现不等于列表边界完整。</p>'+table(['字段','标准答案','实际解析','判定'],rows,metrics=[])
    badge='字段边界不合格'
   actual=(f'<p>{esc(excerpt)}</p>' if excerpt else '<p class="empty">实际返回中未找到可供定位的连续原文。</p>')
-  cards.append(f'<article class="anchor-card {css}"><div class="anchor-head"><h3>稳定文字 {index}</h3><span class="verdict-badge">{badge}</span></div><div class="evidence-pair"><div class="evidence-sample"><b>标准答案</b><p>{esc(expected)}</p></div><div class="evidence-sample"><b>实际返回证据</b>{actual}</div></div>{field_detail}</article>')
+  cards.append(f'<article class="anchor-card {css}"><div class="anchor-head"><h3>稳定文字 {index}</h3><span class="verdict-badge">{badge}</span></div><div class="evidence-pair"><div class="evidence-sample"><b>{expected_label}</b><p>{esc(expected)}</p></div><div class="evidence-sample"><b>实际返回证据</b>{actual}</div></div>{field_detail}</article>')
  if not cards:return ''
- note=(f'<p class="source-note">共 {len(cards)} 项稳定文字判定，全部参与评分；当前区域显示约 5 项高度，向下滚动查看全部。</p>'
+ role_note=('全部参与评分' if anchors_required else
+            '只用于范围核对，不影响是否通过')
+ note=(f'<p class="source-note">共 {len(cards)} 项稳定文字判定，{role_note}；当前区域显示约 5 项高度，向下滚动查看全部。</p>'
        if len(cards)>5 else '')
  scroll=' data-scroll-after="5"' if len(cards)>5 else ''
  return note+f'<div class="anchor-grid"{scroll}>'+''.join(cards)+'</div>'
@@ -1510,12 +1556,12 @@ def stable_checks(m):
 
 def ranking(records,cases,track,base='',id=None,compact=False,audit=None):
  from .report_components import comparable_body_reference
- title_scope=track=='challenge' and any('title_quality' in r for r in records if cases[r['case_id']].get('track')==track)
- selected={k:c for k,c in cases.items() if c.get('track','web')==track}
- text_track=track in {'web','dynamic','document','challenge'} and any(c.get('task_kind','body') in {'body','structure'} for c in selected.values())
+ title_scope=track=='challenge' and any('title_quality' in r for r in records if report_family(cases[r['case_id']])==track)
+ selected={k:c for k,c in cases.items() if report_family(c)==track}
+ text_track=track in {'web','dynamic','document','challenge','risk_control'} and any(c.get('task_kind','body') in {'body','structure'} for c in selected.values())
  groups=defaultdict(list)
  for r in records:
-  if cases[r['case_id']].get('track','web')==track:groups[r['provider']].append(r)
+  if report_family(cases[r['case_id']])==track:groups[r['provider']].append(r)
  def sort_key(item):
   name,rs=item
   n=sum(measured(r,cases[r['case_id']]) for r in rs)
@@ -1579,6 +1625,9 @@ def avg(key):
   missing=sorted({r['provider'] for r in records}-set(groups))
   note+=' 各类型按各自任务范围比较，不合并为跨类型总分。'
   if missing:note+=' 未测方法（不计为失败）：'+esc('、'.join(missing))+'。'
+ directions={i:('quality_'+str(i),'max') for i in range(1,len(heads)) if heads[i] not in {'均值','P50','P95','判分完整性','审查结果'}}
+ directions.update({i:('latency_'+str(i),'min') for i,h in enumerate(heads) if h in {'均值','P50','P95'}})
+ rows=comparative_rows(rows,directions)
  result=table(heads,rows,id or 'ranking-'+track,True,'ranking',metrics=[] if compact else None)
  if text_scopes and len(set(text_scopes.values()))>1:
   result='<details><summary>文字核对覆盖范围</summary><ul>'+''.join('<li>'+esc(name)+f'：{len(scope)}/{len(selected)} 例；'+esc('、'.join(selected[k]['name'] for k in sorted(scope)) or '无文字核对记录')+'</li>' for name,scope in sorted(text_scopes.items()))+'</ul></details>'+result
@@ -1680,16 +1729,16 @@ def title_diagnostics(groups,selected,base,identifier):
   '<p>该诊断回答“已经返回的条目标题是否完整、干净”，不衡量榜单召回率、实时性或整页正文质量。</p>'+steps
   +table(['方法','标题完整度','标题纯净度','标题 F1','标题参考覆盖（可评分 / 返回）'],rows,identifier+'-titles',True,metrics=[])+ '</details>')
 
-def overall_ranking(records,cases,audit=None):
+def overall_ranking(records,cases,audit=None,*,call_budget_seconds=None):
  groups=defaultdict(list)
  for r in records:groups[r['provider']].append(r)
  rows=[]
  for name,rs in groups.items():
   n=sum(measured(r,cases[r['case_id']]) for r in rs)
   passed=sum(succeeded(r,cases[r['case_id']]) for r in rs)
-  values=cell(link(f'providers/{name}.html',provider_label(name)))+cell(rate(sum(bool(r['ok']) for r in rs),len(rs)))+cell(rate(passed,n),passed/n if n else -1)
+  values=cell(link(f'providers/{name}.html',provider_label(name)))+cell(rate(sum(bool(r['ok']) for r in rs),len(rs)),sum(bool(r['ok']) for r in rs)/len(rs))+cell(rate(passed,n),passed/n if n else -1)
   for track,_ in active_tracks(cases):
-   subset=[r for r in rs if cases[r['case_id']].get('track','web')==track and measured(r,cases[r['case_id']])]
+   subset=[r for r in rs if report_family(cases[r['case_id']])==track and measured(r,cases[r['case_id']])]
    values+=cell(f'{sum(succeeded(r,cases[r["case_id"]]) for r in subset)}/{len(subset)}',sum(succeeded(r,cases[r['case_id']]) for r in subset)/len(subset) if subset else -1)
   times=[r['elapsed_ms'] for r in rs]
   values+=cell(ms(statistics.mean(times)),statistics.mean(times))
@@ -1699,7 +1748,7 @@ def overall_ranking(records,cases,audit=None):
   rows.append((passed,name,('',values)))
  rows=[row for _,_,row in sorted(rows,key=lambda x:(-x[0],x[1]))]
  tracks=active_tracks(cases)
- heads=['方法','请求成功率','综合任务通过率']+[label for _,label in tracks]+['均值','P50','P95']
+ heads=['方法','请求成功率','综合任务通过率']+[label for _,label in tracks]+['总耗时均值','总耗时 P50','总耗时 P95']
  if audit:heads+=['审查结果']
  case_count=len(cases);track_count=len(tracks);track_label=track_count_label(track_count)
  if case_count==150 and track_count==6:
@@ -1709,15 +1758,22 @@ def overall_ranking(records,cases,audit=None):
  help=('<details class="ranking-metric-help"><summary>总榜指标说明</summary><div class="metric-help"><dl>'
        f'<div><dt>综合任务通过率</dt><dd>{case_count} 个任务中满足各自验收规则的数量；每题等权。</dd></div>'
        f'<div><dt>{track_label} 类通过数</dt><dd>各分榜通过数 / 本类任务数，用于定位总分来自哪些能力。</dd></div>'
-       f'<div><dt>全调用均值 / P50 / P95</dt><dd>每种方法在同一组 {case_count} 个计划任务上的端到端耗时，包含通过与失败；三项不参与通过率排名。主矩阵调用跨日期、跨批次，不等同于同窗受控速度比较。</dd></div>'
+       f'<div><dt>总耗时均值 / P50 / P95</dt><dd>每种方法在同一组 {case_count} 个计划任务上的端到端耗时，包含通过与失败；三项不参与通过率排名。主矩阵调用跨日期、跨批次，不等同于同窗受控速度比较。</dd></div>'
        '<div><dt>审查结果</dt><dd>独立盲审覆盖数、审查方法和未决数。</dd></div>'
        '</dl></div></details>')
- return intro+help+table(heads,rows,'ranking-overall',True,'ranking',metrics=[]).replace('<table class="ranking"','<table class="ranking" data-col="3" data-dir="desc"')
+ directions={i:('acceptance_'+str(i),'max') for i in range(1,3+len(tracks))}
+ directions.update({i:('all_latency_'+str(i),'min') for i in range(3+len(tracks),6+len(tracks))})
+ rows=comparative_rows(rows,directions)
+ timing_note='<p>总耗时按每题所有物理调用累计，包含失败重试和重试等待；每题仍只计一个样本。'
+ if call_budget_seconds is not None:
+  timing_note+=f'<span>每次物理调用预算为 {call_budget_seconds:g} 秒，重试后的累计耗时可能超过该预算。</span>'
+ timing_note+='</p>'
+ return intro+timing_note+help+table(heads,rows,'ranking-overall',True,'ranking',metrics=[]).replace('<table class="ranking"','<table class="ranking" data-col="3" data-dir="desc"')
 
 def filter_controls(options,all_first=()):
  controls=''
  for key,label,choices in options:
-  ordered=([('','全部')]+choices) if key in {'track','category','failureStage','failureCategory',*all_first} else (choices+[('','全部')])
+  ordered=([('','全部')]+choices) if key in {'provider','track','category','failureStage','failureCategory',*all_first} else (choices+[('','全部')])
   controls+=f'<label>{label} <select data-filter="{key}" aria-label="{label}">'+''.join(f'<option value="{esc(v)}"'+(' selected' if key=='result' and v=='fail' else '')+f'>{esc(t)}</option>' for v,t in ordered)+'</select></label>'
  return '<div class="filters">'+controls+'<input data-filter="query" aria-label="搜索" placeholder="搜索案例、方法或原因"><span id="count" role="status" aria-live="polite"></span></div>'
 
@@ -1760,7 +1816,7 @@ def method_comparisons(cases,bycase,names):
          f'<div class="comparison-result">{comparison_table(rows,"compare-rows")}</div></article>')
 
 def dataset_attrs(c):
- return f' data-track="{esc(c.get("track","web"))}" data-category="{esc(c["category"])}"'
+ return f' data-track="{esc(report_family(c))}" data-category="{esc(c["category"])}"'
 
 def case_attrs(r,c):
  content='na' if c.get('task_kind','body')!='body' else 'pass' if r['ok'] and r['metrics']['content_pass'] else 'fail'
@@ -1768,7 +1824,7 @@ def case_attrs(r,c):
  stage='' if succeeded(r,c) or not measured(r,c) else 'task' if r['ok'] else 'request'
  category='' if not stage else failure_category(r,c)
  result='unmeasured' if not measured(r,c) else 'pass' if succeeded(r,c) else 'fail'
- return dataset_attrs(c)+f' data-provider="{esc(r["provider"])}" data-transport="{"pass" if r["ok"] else "fail"}" data-result="{result}" data-content="{content}" data-resources="{resources}" data-failure-stage="{stage}" data-failure-category="{esc(category)}" data-search="{esc(reason(r,c))}"'
+ return dataset_attrs(c)+f' data-provider="{esc(r["provider"])}" data-transport="{"pass" if r["ok"] else "fail"}" data-result="{result}" data-content="{content}" data-resources="{resources}" data-failure-stage="{stage}" data-failure-category="{esc(category)}" data-search="{esc(str(c.get("id",r.get("case_id","")))+" "+str(c.get("name",""))+" "+str(c.get("url",""))+" "+reason(r,c))}"'
 
 def attempt_row(r,c,base='../',*,label=None):
  state=result_label(r,c)
@@ -1793,8 +1849,16 @@ def local_audit_banner(dataset):
   return '<div class="wrap callout"><strong>本地实测版</strong><p>全部方法使用同一组已提交案例和判分规则，每例一次调用，统一45秒外部时限，不设逐例等待或提取参数，不重试。结果为机器判定，未进行独立人工审核；本报告仅供本地查看，不代表正式发布。</p></div>'
  return '<div class="wrap callout"><strong>本地审核版</strong><p>本页合并两个不同日期的 Moli 调用批次，保留每例的真实调用时间。本次仅更换报告展示代码，没有新增 Moli 调用，也不代表正式发布。</p></div>'
 
-def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english:bool=False,authored_interpretation:bool=True,presentation_only:bool=False):
+from .methods import with_measured_method_labels
+
+@with_measured_method_labels
+def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english:bool=False,authored_interpretation:bool=True,presentation_only:bool=False,detail_attempt_ids:set[str]|None=None):
  global _RELIABILITY_BANNER,_ENGLISH_GENERATED
+ if detail_attempt_ids is not None:
+  if not presentation_only:
+   raise ValueError('Scoped detail refresh requires presentation_only=True')
+  unknown=set(detail_attempt_ids)-{row['attempt_id'] for row in records}
+  if unknown:raise ValueError('Unknown detail refresh attempts: '+', '.join(sorted(unknown)))
  _ENGLISH_GENERATED=include_english
  from .reliability import assess_reliability
  reliability=assess_reliability(dataset,records)
@@ -1821,6 +1885,12 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
  tracks=active_tracks(cases);track_count=len(tracks);track_label=track_count_label(track_count)
  audit=json.loads((out/'result-review.json').read_text()) if (out/'result-review.json').is_file() else None
  audited_attempts=review_index(audit)
+ failure_reviews={}
+ content_binding=dataset.get('comparison',{}).get('report_interpretation')
+ if content_binding:
+  from .report_explainer import load_browser_failure_review
+  article_content=json.loads(contained_path(out,content_binding['path']).read_text())
+  failure_reviews=load_browser_failure_review(out,cases,records,article_content)
  bycase=defaultdict(list);byprovider=defaultdict(list)
  for r in records:bycase[r['case_id']].append(r);byprovider[r['provider']].append(r)
  cards=''
@@ -1832,6 +1902,9 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
   home+=f'<p class="callout">{len(cases)} 个案例 · {len(records)} 次调用，机器判分。'+source_note+link('guide/index.html#call-chain-audit','查看调用链问题和日志留存范围')+'</p>'
  from .report_explainer import article_title,render_explainer,supports_authored_explainer
  TITLE='本轮调用链检查与日志范围' if dataset.get('comparison',{}).get('call_chain_audit') else article_title(records) if authored_interpretation and supports_authored_explainer(cases) and not all(row.get('provider_type') == 'fixture' for row in records) else '本报告的任务范围与验收规则'
+ if authored_interpretation and dataset.get('comparison',{}).get('report_interpretation'):
+  binding=dataset['comparison']['report_interpretation']
+  TITLE=json.loads(contained_path(out,binding['path']).read_text())['title']
  reading_note='从分数差异、失败案例和实现机制，理解如何选择抓取方法。' if authored_interpretation else '查看本报告的任务范围、结果数量与验收规则。'
  home+='<aside class="wrap home-reading" aria-label="报告解读"><div><strong>报告解读</strong><p>'+link('guide/index.html',TITLE)+'</p></div><p>'+reading_note+'</p>'+link('guide/index.html','阅读全文 →')+'</aside>'
  if dataset.get('comparison',{}).get('call_chain_audit'):
@@ -1842,13 +1915,14 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
  write(out,'guide/index.html','报告解读',guide)
  panels=[]
  for track,label in tracks:
-  selected=[c for c in cases.values() if c.get('track','web')==track]
-  coverage=f'{len(selected)} 个案例 · {len({r["provider"] for r in records if cases[r["case_id"]].get("track","web")==track})} 种已测方法'
+  selected=[c for c in cases.values() if report_family(c)==track]
+  coverage=f'{len(selected)} 个案例 · {len({r["provider"] for r in records if report_family(cases[r["case_id"]])==track})} 种已测方法'
   panels.append((track,label,f'<div class="track-heading"><h3>{label}</h3><span>{coverage}</span></div>'+ranking(records,cases,track,compact=True,audit=audit)+f'<p>{link("datasets/index.html#track-"+track,"案例与参考 →")}</p>'))
- home+=section(f'{track_label} 类任务概览',review_summary(out)+'<p class="callout success"><b>调用完整：</b>'+str(reliability['expected_calls'])+'/'+str(reliability['expected_calls'])+' 次均有结果。</p><p class="source-note">只在同一任务类别内比较。</p><div class="grid home-overview-grid">'+cards+'</div>','overview')
- home+=section('综合通过率总榜',overall_ranking(records,cases,audit),'overall-ranking')
+ budgets={m['timeout_seconds'] for m in manifests if m.get('timeout_seconds') is not None}
+ home+=section('综合通过率总榜',overall_ranking(records,cases,audit,call_budget_seconds=next(iter(budgets)) if len(budgets)==1 else None),'overall-ranking')
  if dataset.get('comparison',{}).get('kind')=='uniform_native_local_measurement':
   home+=section('同一任务集合的全部调用耗时',overview_all_call_latency(records,cases),'all-call-latency')
+ home+=section(f'{track_label} 类任务概览',review_summary(out)+'<p class="callout success"><b>调用完整：</b>'+str(reliability['expected_calls'])+'/'+str(reliability['expected_calls'])+' 次均有结果。</p><p class="source-note">只在同一任务类别内比较。</p><div class="grid home-overview-grid">'+cards+'</div>','overview')
  home+=section('全部方法共同成功任务的耗时',overview_matched_latency(records,cases),'overall-matched-latency')
  if (out/'resource-cohort/resource-comparison.json').is_file():
   home+=section('CPU、内存与网络',overview_resources(out),'overall-resources')
@@ -1858,9 +1932,9 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
  rows=[]
  for c in cases.values():
   verified=c.get('source_verification',{});state='受限' if verified.get('state')=='restricted' else '有效'
-  rows.append((dataset_attrs(c),cell(link(c['id']+'.html',c['name']))+cell(esc(c['category']))+cell(link(c['url'],'源页 ↗'))+cell(link(c['id']+'.html#facts',basis_label(c)))+cell(reference_label(c))+cell(state)+cell(case_rate(bycase[c['id']],c))))
+  rows.append((dataset_attrs(c),cell(link(c['id']+'.html',c['name']))+cell(esc(c['category']))+cell(link(c['url'],'源页 ↗'))+cell(link(c['id']+'.html#facts',basis_label(c)))+cell(reference_label(c))+cell(state)))
  anchors=''.join(f'<span id="track-{t}"></span>' for t,_ in tracks)
- dataset_panels=[('cases','案例',anchors+controls+'<p class="source-note">核对依据可点击展开。访问受限不等于网站失效；稳定内容与条目结构按登记契约核验，不固定频繁变化的榜单。动态网站正文按各案例声明的完整范围核验。</p>'+table(['案例','类别','URL','核对依据','参考状态','原访问','达标率'],rows,'filtered-table')),('references','参考状态','<span id="references"></span>'+reference_status(list(cases.values()))),('sources','来源','<span id="sources"></span>'+sources_panel())]
+ dataset_panels=[('cases','案例',anchors+controls+'<p class="source-note">核对依据可点击展开。访问受限不等于网站失效；稳定内容与条目结构按登记契约核验，不固定频繁变化的榜单。动态网站正文按各案例声明的完整范围核验。</p>'+table(['案例','类别','URL','核对依据','参考状态','原访问'],rows,'filtered-table')),('references','参考状态','<span id="references"></span>'+reference_status(list(cases.values()))),('sources','来源','<span id="sources"></span>'+sources_panel())]
  write(out,'datasets/index.html','评测集',hero('评测集',f'{len(cases)} 个案例，按任务类型查看。')+section('案例与依据',tabs('dataset-hub',dataset_panels)))
  headers=['案例','类型','结果','失败分类','耗时','运行 ID']
  for c in ([] if presentation_only else cases.values()):
@@ -1882,7 +1956,7 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
    rules='<div class="guide-grid"><article class="guide-card"><h3>登记任务规则</h3><p>'+esc(list_rule_description(c))+'</p></article><article class="guide-card"><h3>稳定内容与变化字段</h3><p>稳定标题、栏目、说明按登记内容核对；频繁变化的名单、条目标题、排序、价格或 ID 不固定为旧快照取值，按声明的字段结构、类型、数量及唯一性核验。登录页、重复入口、空链接不计入。</p></article></div>'
   if c.get('acceptance_contract'):
    facts=[]
-   rules=stable_contract_details(c)
+   rules=stable_contract_details(c,evidence_root=out)
    if c.get('composite_acceptance'):
     rules+=composite_contract_details(c['composite_acceptance'])
   source_record=link('../sources/'+c['id']+'/evidence.json','获取记录') if (out/'sources'/c['id']/'evidence.json').exists() else '未保存源页快照'
@@ -1916,11 +1990,12 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
             f'{pct(rules["minimum_coverage"])}。')
    else:policy=f'每段至少达到 {pct(rules["minimum_coverage"])}。'
    body+=section('如何检查是否抓全',f'<p class="decision-lead"><b>这是一份完整答案，不是 {total} 个任务。</b> 只检查标题和几个关键词，可能让“只抓到开头”的残缺结果通过。因此系统按前后位置检查同一份标准答案。{policy} 比对忽略空白、排版符号和 Markdown 链接地址；每次执行页会并列显示各位置的标准原文和实际证据。</p>'+''.join(region_cards))
-  body+=section('全部方法执行结果',table(['方法']+headers[1:],[attempt_row(r,c,label=provider_label(r['provider'])) for r in bycase[c['id']]]))
+  body+='<p class="actions">'+link('../analysis/index.html#inspect?query='+c['id'],'查看各方法执行结果 →')+'</p>'
   write(out,'datasets/'+c['id']+'.html',c['name'],body)
  for name,rs in byprovider.items():
   write(out,'providers/'+name+'.html',name,provider_page_body(name,rs,cases,headers,tracks,native_default=dataset.get("comparison",{}).get("kind")=="uniform_native_local_measurement"))
- for r in ([] if presentation_only else records):
+ detail_records=([r for r in records if r['attempt_id'] in (detail_attempt_ids or set())] if presentation_only else records)
+ for r in detail_records:
   c=cases[r['case_id']];m=r['metrics'];ref=reference_text(c)
   output=contained_path(out,r['artifact_path']).read_text(encoding='utf-8',errors='replace')
   rows=[('',cell(k)+cell(v)) for k,v in [('任务 ID',f'<code>{esc(c["id"])}</code>'),('方法',link('../providers/'+r['provider']+'.html',provider_label(r['provider']))),('请求','成功' if r['ok'] else '失败'),('任务结果','通过' if succeeded(r,c) else '未通过'),('HTTP 状态',esc(r.get('status_code'))),('耗时',ms(r['elapsed_ms'])),('全文完整度 / 纯净度 / F1',f'{pct(m.get("word_recall"))} / {pct(m.get("word_precision"))} / {pct(m.get("word_f1"))}'),('输出字符',f'{len(output):,}'),('输出校验值',f'<code class="break">{esc(m.get("content_sha256"))}</code>')]]
@@ -1997,6 +2072,18 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
    route_label=f'处理路线：方法直接取得原始文档 → {provider_meta["document_extractor"]} → 可读正文'
   elif c.get('task_kind')=='file':
    route_label='处理路线：方法直接取得原始文件 → 格式、长度与 SHA-256 验收'
+  elif provider_meta.get('output_contract')=='readable_document_text':
+   route_label='处理路线：浏览器原生接口获取文档 → 共同 PDF / DOCX 正文解析；实际完成步骤见运行证据'
+  elif provider_meta.get('output_contract')=='native_markdown_resource_urls':
+   route_label='处理路线：Moli 原生 Markdown → 共同评分器只核对其中的目标图片或视频地址'
+  elif provider_meta.get('output_contract')=='native_html_resource_urls':
+   route_label='处理路线：Moli 原生 HTML → 共同评分器只识别其中的图片或视频资源地址'
+  elif provider_meta.get('output_contract')=='native_json_resource_urls':
+   route_label='处理路线：Moli 原生 JSON 页面与网络记录 → 共同评分器只识别其中的视频资源地址'
+  elif provider_meta.get('output_contract')=='structured_resource_urls':
+   route_label='处理路线：浏览器原生 DOM 接口 → 共同资源读取脚本 → 图片或视频资源地址'
+  elif provider_meta.get('output_contract')=='readable_media_metadata':
+   route_label='处理路线：浏览器原生页面接口 → 共同脚本读取正文、作者和媒体元数据'
   else:
    extractor=str(provider_meta.get('extractor') or '')
    route_label='处理路线：'+ROUTE_LABELS.get(extractor,extractor or '参评方法直接返回正文')
@@ -2007,7 +2094,7 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
              f'<span class="meta"><span class="pill">方法：{esc(provider_label(r["provider"]))}</span>'
              f'<span class="pill">运行 ID：{esc(r.get("run_id") or execution_id(r))}</span></span>')
   summary=(f'<div class="attempt-verdict {"" if passed else "failure"}">'
-           f'<span class="status-line">{esc(state)}</span><p>{esc(reason(r,c))}</p>'
+           f'<span class="status-line">{esc(state)}</span><p>{esc(reason(r,c) if passed else (r.get("diagnosis") or {}).get("category") or "任务规则未满足")}</p>'
            f'<p class="source-note">方法：{link("../providers/"+r["provider"]+".html",provider_label(r["provider"]))} · '
            f'请求：{"成功" if r["ok"] else "失败"} · 耗时：{ms(r["elapsed_ms"])} · {actual_summary}</p></div>')
   summary+=f'<p class="source-note">{esc(route_label)}</p>'
@@ -2039,6 +2126,12 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
        ['项目','核验记录'],
        [('',cell(esc(label))+cell(esc(value))) for label,value in review_rows],
        metrics=[]),'independent-review')
+  failure_review=failure_reviews.get(r['attempt_id'])
+  if failure_review:
+   cause_body='<p><strong>'+esc(failure_review['category_label'])+'</strong></p><p>'+esc(failure_review['reason'])+'</p>'
+   cause_body+='<p>处理结论：'+esc(failure_review['remediation_status'])+'</p><p>'+link('../guide/index.html#browser-'+r['provider'],'同类失败与专题分析')+'</p>'
+   cause_body+='<details><summary>专题审查依据</summary><ul>'+''.join('<li>'+link('../'+item['path'],'证据 '+str(index))+'</li>' for index,item in enumerate(failure_review['evidence_paths'],1))+'</ul></details>'
+   body+=section('失败原因专题核验',cause_body,'failure-review')
   reference_heading='完整标准答案' if c.get('task_kind')!='structure' else '标准答案与验收规则'
   reference_download='../references/'+c['id']+'.txt'
   source_body=f'<pre data-kind="reference">{esc(ref)}</pre>'
@@ -2054,7 +2147,9 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
                 (composite_contract_details(c['composite_acceptance']) if c.get('composite_acceptance') else '')+
                 '<details class="technical-details"><summary>查看机器可读契约</summary>'
                 f'<pre data-kind="contract">{esc(contract_text)}</pre></details>')
-   source_meta='这里直接列出本任务真正要求的文字和记录数量，不要求用户阅读 JSON。'
+   source_meta=('这里直接列出本任务真正要求的文字和记录数量，不要求用户阅读 JSON。'
+                if c['acceptance_contract'].get('stable_text_role','required')!='diagnostic' else
+                '这里列出正文验收规则和用于范围核对的文字；范围核对文字不影响是否通过。')
   corruption=''
   if m.get('text_encoding_corruption'):
    corruption=(f'<p class="callout failure encoding-warning"><b>实际输出存在解码损坏：</b>'
@@ -2136,7 +2231,7 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
    body+=section('原始文件字节证据',table(['文件','格式特征','字节数','SHA-256','目标校验'],file_rows,metrics=[]))
   write(out,'attempts/'+r['attempt_id']+'.html',c['name']+' · '+r['provider'],body)
  controls=filter_controls([('provider','方法',[(n,provider_label(n)) for n in names]),('track','类型',tracks),('result','结果',[('pass','任务通过'),('fail','任务失败')])]+failure_filters(records,cases))
- comparison=section('方法组合对比','<p class="source-note">按同一任务逐项比较，不用各方法不同的成功样本拼接结论。成功与失败均沿用主榜已核验判定；点击方法可查看标准答案、实际返回和原因。</p>'+method_comparisons(cases,bycase,names),'method-comparison')
+ comparison=section('方法组合对比','<p class="source-note">按同一任务逐项比较，不用各方法不同的成功样本拼接结论。成功与失败均沿用主榜的程序判定；点击方法可查看标准答案、实际返回和原因。</p>'+method_comparisons(cases,bycase,names),'method-comparison')
  write(out,'analysis/index.html','结果分析',hero('结果分析','先比较方法在同一任务上的成败组合，再筛选全部执行记录。')+comparison+section('全部执行记录',controls+table(['方法']+headers,[(case_attrs(r,cases[r['case_id']]),cell(link('../providers/'+r['provider']+'.html',provider_label(r['provider'])))+attempt_row(r,cases[r['case_id']])[1]) for r in records],'filtered-table')))
  write_support(out,records,manifests,authored_interpretation=authored_interpretation)
  from .report_changes import render_changes
@@ -2150,7 +2245,20 @@ def generate(out:Path,dataset:dict,records:list,manifests:list,*,include_english
   from .report_i18n import write_english_report
   write_english_report(out)
  from harness.report_languages import write_language_contract
- write_language_contract(out,include_english=include_english)
+ if presentation_only and (out/'report-languages.json').is_file():
+  from harness.report_languages import check_language_contract, generated_languages
+  if ('en' in generated_languages(out)) != include_english:
+   raise ValueError('Presentation refresh cannot change generated languages')
+  if not include_english:
+   from harness.report_languages import english_notice
+   (out/'en').mkdir(exist_ok=True)
+   (out/'en/index.html').write_text(english_notice(), encoding='utf-8')
+  from harness.report_languages import primary_report_language, select_report_language
+  if primary_report_language(out) == 'en':
+   select_report_language(out, 'en')
+  check_language_contract(out)
+ else:
+  write_language_contract(out,include_english=include_english)
  return out/'index.html'
 
 
@@ -2191,17 +2299,18 @@ def coverage(label,item):
  write(out,'review/index.html','核验记录',page)
 
 def write_support(out,records,manifests,*,authored_interpretation=True):
+ dataset=json.loads((out/'dataset.json').read_text()) if (out/'dataset.json').is_file() else {}
  local_matrix=(out/'dataset.json').is_file() and json.loads((out/'dataset.json').read_text()).get('comparison',{}).get('kind')=='uniform_native_local_measurement'
  headless=is_headless_cohort(records)
  from .report_components import task_contract_guide
  methodology=hero('评测方法','按任务定义验收规则。同组已测方法使用相同的冻结任务与参考，覆盖数量在各榜单列明。')
  if headless:
-  methodology+=section('从参考到发布','<div class="guide-grid"><article class="guide-card"><h3>1 · 冻结参考</h3><p>独立采集源页；需要渲染的页面另做浏览器观测，通过完整范围校验后才冻结。</p></article><article class="guide-card"><h3>2 · 执行调用</h3><p>同一 URL、任务和截止时间；各方法使用其最快的正式任务原生产物路线，保留版本、输出与哈希。</p></article><article class="guide-card"><h3>3 · 测后核验</h3><p>独立重取精确参考页，确认调用期间标准答案未改变；不把参考变化算成浏览器失败。</p></article><article class="guide-card"><h3>4 · 结果独立审查</h3><p>强代理逐次读取完整输出、标准答案与任务规则；分歧必须裁定，未裁定项会阻止构建。</p></article></div>'+review_summary(out,'../'),'评测流程')
+  methodology+=section('从参考到发布','<div class="guide-grid"><article class="guide-card"><h3>1 · 冻结参考</h3><p>锁定既定题目、答案和验收规则；只有明确声明需要实时参考的任务才重新采集源页。</p></article><article class="guide-card"><h3>2 · 执行调用</h3><p>同一 URL、任务和截止时间；各方法使用其最快的正式任务原生产物路线，保留版本、输出与哈希。</p></article><article class="guide-card"><h3>3 · 测后核验</h3><p>核对冻结题目、答案、规则和调用记录；需要实时参考的任务另做前后采集，确认参考未变。</p></article><article class="guide-card"><h3>4 · 结果独立审查</h3><p>独立审查按明确指定的范围开展，检查输出、参考答案和验收规则；本轮审查覆盖见下方，不把程序评分当成独立审查。</p></article></div>'+review_summary(out,'../'),'评测流程')
  examples_html=re.sub(r'<a href="../datasets/([^"#]+).html">([^<]*)</a>',lambda m:m[0] if (out/'datasets'/(m[1]+'.html')).exists() else m[2],examples())
  methodology+=section('每类怎么测',examples_html)+section('指标说明',metric_guide())
- methodology+=section('共同输入、计时边界与调用预算','<p>所有方法进入同一个评分入口，但按任务交付物验收，而不是强制使用同一种中间格式。网页与文档正文最终验收可读文本；原始文件任务验收 PDF、DOCX、图片或视频字节；结构任务验收字段和稳定文字。HTML/Markdown 链接与明确配对的结构化名称—链接字段按同一规则核验；不把请求回显或诊断日志当成答案。原始输出与原始适配器状态保留，报告层不按方法名称改写任务结果。</p><div class="guide-grid"><article class="guide-card"><h3>计入耗时</h3><p>从准备发起该次 provider 调用开始，到形成可送入统一评分器的最终答案为止：线程调度、SDK/CLI/HTTP 调用、远端处理与网络下载、浏览器渲染与正文提取、本地解析、统一输入转换，以及文件字节读取、格式识别和 SHA-256 计算均在计时内。</p></article><article class="guide-card"><h3>不计入耗时</h3><p>数据集与参考加载、provider 配置校验、调用间限速等待、最终答案形成后的证据落盘、统一评分计算、报告汇总与页面生成不计入。供应商上报的服务端耗时只作附加证据，排名使用客户端观测的端到端耗时。</p></article></div><p>这个边界比较的是“拿到本任务最终交付物”所需时间：服务直接返回成品时计完整往返；本地方法若还需下载、渲染或解析，也必须完成后才停表。正文任务中，方法只返回原始 PDF 或 DOCX 时，本地正文解析也计时；原始文件任务则到字节校验完成即停止，不做无关的 Markdown 转换。所有方法使用同一外层计时器和截止预算。超时答案不接收；无法取消的调用会被隔离，整批结果因此不完整并触发不可靠状态，构建产物不得发布。</p><p>完整正文任务除原有核对点外，按参考正文最多五个连续位置检查字符六元组覆盖：每个位置至少达到 60%，通常要求至少四处达到 80%。所有位置一次性做全局容量分配；同一返回片段实例只能计入一个位置，位置排列顺序不影响结论。若页面存在经独立证据确认的合法重排，案例可显式登记不同位置门槛。比较忽略空白和排版符号但保留文字顺序；全文 F1 独立保留实际值。文件任务必须有字节验收，资源 URL 不等于文件。</p>')
+ methodology+=section('共同输入、计时边界与调用预算','<p>所有方法进入同一个评分入口，但按任务交付物验收，而不是强制使用同一种中间格式。网页与文档题验收可读正文；网页媒体题验收指定资源地址或登记文字；直接媒体文件题验收图片或视频字节；结构任务验收字段和稳定文字。HTML/Markdown 链接与明确配对的结构化名称—链接字段按同一规则核验；不把请求回显或诊断日志当成答案。原始输出与原始适配器状态保留，报告层不按方法名称改写任务结果。</p><div class="guide-grid"><article class="guide-card"><h3>计入耗时</h3><p>从准备发起该次 provider 调用开始，到形成可送入统一评分器的最终答案为止：线程调度、SDK/CLI/HTTP 调用、远端处理与网络下载、浏览器渲染与正文提取、本地解析、统一输入转换，以及文件字节读取、格式识别和 SHA-256 计算均在计时内。</p></article><article class="guide-card"><h3>不计入耗时</h3><p>数据集与参考加载、provider 配置校验、调用间限速等待、最终答案形成后的证据落盘、统一评分计算、报告汇总与页面生成不计入。供应商上报的服务端耗时只作附加证据，排名使用客户端观测的端到端耗时。</p></article></div><p>这个边界比较的是“拿到本任务最终交付物”所需时间：服务直接返回成品时计完整往返；本地方法若还需下载、渲染或解析，也必须完成后才停表。文档正文必须由参评方法交付为可读文字；直接媒体文件任务到字节校验完成即停止，不做无关的 Markdown 转换。所有方法使用同一外层计时器和截止预算。超时答案不接收；无法取消的调用会被隔离，整批结果因此不完整并触发不可靠状态，构建产物不得发布。</p><p>完整正文任务除原有核对点外，按参考正文最多五个连续位置检查字符六元组覆盖：每个位置至少达到 60%，通常要求至少四处达到 80%。所有位置一次性做全局容量分配；同一返回片段实例只能计入一个位置，位置排列顺序不影响结论。若页面存在经独立证据确认的合法重排，案例可显式登记不同位置门槛。比较忽略空白和排版符号但保留文字顺序；全文 F1 独立保留实际值。直接媒体文件任务必须有字节验收，资源 URL 不等于文件。</p>')
  if (out/'resource-cohort/resource-comparison.json').is_file():
-  methodology+=section('资源测量边界','<p>CPU、内存和网络使用独立的 20 题同窗队列，不回填历史正确率调用。每次调用在受限的 Linux 容器中运行，使用 cgroup v2 累计 CPU、独立网络命名空间累计收发字节，并以 50 ms 采样内存与瞬时速率。容器固定为 2 个逻辑 CPU、2 GiB 内存和 512 个 PID；宿主控制器与容器启停不计入。</p><p>资源汇总只纳入四种本地配置共同通过的任务，避免把快速失败当成节省资源，并覆盖容器内 worker、浏览器与转换过程。Kitesurf 的远端 CPU、内存和上游流量不可见，因此不进入资源表。缺少任一资源字段、非 Linux/cgroup v2、镜像或二进制身份变化、并发不为 1，都会阻断资源包构建。</p><p>CPU 与网络总量来自累计计数；内存峰值和速率分位数依赖 50 ms 采样，可能遗漏更短的尖峰。报告分别呈现 CPU、内存、网络和任务通过率，不合成总分。</p>')
+  methodology+=section('资源测量边界','<p>CPU、内存和网络使用独立的 20 题同窗队列，不回填历史正确率调用。每次调用在受限的 Linux 容器中运行，使用 cgroup v2 累计 CPU、独立网络命名空间累计收发字节，并以 50 ms 采样内存与瞬时速率。容器固定为 2 个逻辑 CPU、2 GiB 内存和 512 个 PID；宿主控制器与容器启停不计入。</p><p>资源主表纳入预先确定的全部任务，包括失败调用，统计容器内调用进程、浏览器与转换过程的消耗；同时列出各方法通过数。各方法成功调用另作条件统计，共同通过的任务仅作诊断。Kitesurf 的远端 CPU、内存和上游流量不可见，因此不进入资源表。缺少任一资源字段、非 Linux/cgroup v2、镜像或二进制身份变化、并发不为 1，都会阻断资源包构建。</p><p>CPU 与网络总量来自累计计数；内存峰值和速率分位数依赖 50 ms 采样，可能遗漏更短的尖峰。报告分别呈现 CPU、内存、网络和任务通过率，不合成总分。</p>')
  if (out/'scoring-revisions.json').exists():
   revision_links=[link('../scoring-revisions.json','评分规则修订收据')]
   if (out/'reference-revisions.json').exists():revision_links.append(link('../reference-revisions.json','参考答案修订收据'))
@@ -2225,15 +2334,27 @@ def write_support(out,records,manifests,*,authored_interpretation=True):
  methodology+=section('变更后重跑范围','<p>不把“代码有更新”直接等同于全部重跑。只改展示时重建报告；只改裁判且原始输出足够时离线重算；某个参考变化时重跑该题的全部方法；新增或升级单个实现时重跑该方法的全部题；计时边界变化时废弃并重跑同窗测速。只有全局任务输入、调用边界或所有方法共同依赖发生变化，才需要全量重跑。</p>')
  methodology+=section('计算与边界','''<details><summary>全文评分公式</summary><p>完整度＝取回的参考词数 ÷ 参考词数；纯净度＝匹配的正文词数 ÷ 返回词数；F1＝2 × 完整度 × 纯净度 ÷ 两者之和。英文按词、中文按字，统一大小写与 Unicode 字符形式；Markdown 链接只计文字。对有完整参考的全部案例取平均；请求失败计 0，请求成功但任务未通过仍按实际正文评分，没有参考不计算。</p></details><details><summary>参考范围与公平性</summary><p>网页、文档使用独立保存的参考正文；仓库以 README 为准，列表只覆盖指定的已加载范围，不要求无限滚动或跨页翻页。登录页和验证码不能代替目标正文。参考正文自身包含的“404 Not Found”等术语不作为错误页判据。</p><p>不同方法并行，同一方法串行；正文结束后再测其他任务。Firecrawl 每次完成后冷却 6.1 秒。本报告不是 WCXB 官方榜单。</p><p>媒体网址只证明找到入口，不代表取得文件。文件任务没有另接下载器代替参评方法完成。</p></details>''')
  if headless:
-  methodology=methodology.replace('Firecrawl 每次完成后冷却 6.1 秒。','五种方法每次使用新进程或新上下文。静态网页正文：Kitesurf 走 Cloudflare 账户级 /markdown，Lightpanda、Obscura 与 Moli 1.1.1 使用各自 CLI 正文能力，Chromium 取完整渲染 DOM 后由 node-html-markdown 2.0.0 转换。Moli 遇到直接 PDF、DOCX、图片或视频 URL 时使用不带 --dump 和页面等待参数的自动响应；正文任务在预算内解析可读文字，文件任务直接校验字节。原始主矩阵未启用失败重试，每次调用有 45 秒端到端预算。运行器可在测量前声明至多一次失败重试：保留全部物理证据和总耗时，并固定采用最后一次结果，不能择优。已确认的命令、版本、裁判、参考或测量错误可按完整声明范围重测并替换权威逻辑结果；旧证据不得删除。历史报告中的 Moli 1.0.6 与 1.1.3 证据继续归档，但不进入当前报告矩阵。方法之间并行、同一方法串行。')
+  methods_count=len({row['provider'] for row in records})
+  methodology=methodology.replace('Firecrawl 每次完成后冷却 6.1 秒。',f'本轮 {methods_count} 种配置分别使用独立进程或新上下文。具体接口、等待条件与输出处理见报告解读的任务接口表，实际版本和配置见执行批次。每次调用使用 45 秒端到端预算，调用次数和重试规则以事前声明的协议为准。命令、版本、参考、评分或计时错误按完整声明范围纠正，保留旧证据；不按分数选择重试结果。')
+  if dataset.get('comparison',{}).get('retrieval_mode') in {
+      'native_default_completion', 'native_task_family_completion'}:
+   methodology=methodology.replace('正文任务中，方法只返回原始 PDF 或 DOCX 时，本地正文解析也计时；原始文件任务则到字节校验完成即停止，不做无关的 Markdown 转换。','本轮文档正文只验收浏览器原生接口交付的文字；取得文件字节后不另接外部解析器补正文。原始文件任务到字节校验完成即停止。')
  if local_matrix:
   methodology+=section('本轮固定原生配置','<p>每种方法内部串行执行，每题只调用一次，45秒为外层交卷期限。内部加载、连接和处理时间保留产品默认值。允许测试前固定的原生选项，不传入逐题等待、选择器、数量提示或脚本；不补抓、不额外重试。产品返回的正文和原始响应分别保存。</p><p>每种方法内部串行执行；方法之间的调度以执行批次和保存的调用时间为准。分段执行保留每个原始分段，完整调用时间见执行批次。</p>')
   methodology=methodology.replace('方法之间并行、同一方法串行。','每种方法内部串行；方法之间的调度见执行批次。')
  write(out,'methodology/index.html','评测方法',methodology)
- downloads=' · '.join(link('../'+path,label) for path,label in [('dataset.json','评测集与参考'),('results.jsonl','全部调用记录'),('summary.json','分类汇总'),('execution.json','执行批次')]+([('implementation-provenance.json','版本回溯证据')] if (out/'implementation-provenance.json').is_file() else [])+([('reference-revisions.json','参考修订收据')] if (out/'reference-revisions.json').is_file() else [])+([('scoring-revisions.json','评分修订收据')] if (out/'scoring-revisions.json').is_file() else [])+([('latency-corrections.json','时延纠正收据')] if (out/'latency-corrections.json').is_file() else [])+([('request-status-corrections.json','请求状态纠正收据')] if (out/'request-status-corrections.json').is_file() else []))
+ downloads=' · '.join(link('../'+path,label) for path,label in [('dataset.json','评测集与参考'),('results.jsonl','全部调用记录'),('summary.json','分类汇总'),('execution.json','执行批次')]+([('implementation-provenance.json','浏览器版本与二进制来源')] if (out/'implementation-provenance.json').is_file() else [])+([('reference-revisions.json','参考修订收据')] if (out/'reference-revisions.json').is_file() else [])+([('scoring-revisions.json','评分修订收据')] if (out/'scoring-revisions.json').is_file() else [])+([('latency-corrections.json','时延纠正收据')] if (out/'latency-corrections.json').is_file() else [])+([('request-status-corrections.json','请求状态纠正收据')] if (out/'request-status-corrections.json').is_file() else []))
  reproduce='<p>在评测仓库中执行；读取 evaluation/ 的当前实测数据，不调用供应商接口。</p><pre>make setup\nmake report EVIDENCE=/absolute/path/to/evidence\nmake report-check</pre><p>输出目录：reports/webfetch/。固定的 Python 3.11 与 uv.lock 依赖不满足时会立即失败。凭据仅从本地环境加载，不包含在报告中。</p>'
  if headless:
-  reproduce='<p>在评测仓库中执行；从明确指定的持久化冻结证据构建，不重新调用浏览器。</p><pre>make setup\nmake report EVIDENCE=/absolute/path/to/evidence\nmake report-check</pre><p>唯一输出目录为 reports/webfetch/。固定的 Python 3.11 与 uv.lock 依赖不满足时会立即失败。重新测量使用 uv run --frozen python scripts/run_headless_benchmark.py 和 configs/providers.headless.json；先独立采集并冻结参考，再调用，最后做测后核验。完整命令与版本见仓库 harness/web_fetch/HEADLESS.md。</p>'
+  reproduce='<p>在评测仓库中执行；从明确指定的持久化冻结证据构建，不重新调用浏览器。</p><pre>make setup\nmake report EVIDENCE=/absolute/path/to/evidence\nmake report-check</pre><p>唯一输出目录为 reports/webfetch/。固定的 Python 3.11 与 uv.lock 依赖不满足时会立即失败。重新测量使用 uv run --frozen python scripts/run_certified_benchmark.py 和本轮方法配置；先锁定题目、答案、规则和执行范围，再调用；明确声明需要实时参考的任务才做前后采集。完整命令与版本见仓库 harness/web_fetch/HEADLESS.md。</p>'
+ profile_path=dataset.get('comparison',{}).get('reproduction_profile')
+ if profile_path:
+  candidate=Path(profile_path)
+  if candidate.is_absolute() or not candidate.parts or '..' in candidate.parts or candidate.parts[0]!='evaluation' or candidate.name!='current-report.json':
+   raise ValueError('Report reproduction profile must stay under evaluation/')
+  destination=dataset['comparison'].get('report_output','reports/webfetch')
+  command=f'uv run --frozen python scripts/build_report.py --profile {profile_path} --evidence /absolute/path/to/evidence --output {destination}\nuv run --frozen python scripts/check_report.py {destination} --profile {profile_path}'
+  reproduce='<p>从本轮独立配置和冻结证据构建，不重新调用浏览器。</p><pre>'+esc(command)+'</pre><p>重新测量使用仓库的认证入口；既定题目和验收规则在调用前冻结，只有明确声明需要实时参考的任务才做前后采集。</p>'
  if local_matrix:
   reproduce='<p>以下命令只从本轮证据重建本地中文报告，不重新调用产品。</p><pre>uv run --frozen python scripts/build_report.py --local-audit --evidence /absolute/path/to/report-evidence --output /absolute/path/to/report\nuv run --frozen python scripts/check_report.py /absolute/path/to/report</pre><p>调用时配置、实现版本与评分器哈希见 '+link('../local-run-contract.json','调用前冻结协议')+'；各次实际请求参数见详情中的真实调用日志。源码中的当前配置与调用时配置可能不同，以冻结协议和原始批次清单为准。凭据只从仓库 .env 读取。</p>'
  common=[]
@@ -2246,10 +2367,7 @@ def write_support(out,records,manifests,*,authored_interpretation=True):
  provider_rows=[]
  for name in sorted({r['provider'] for r in records}):
   subset=[r for r in records if r['provider']==name]
-  versions=sorted({str(value) for r in subset for value in
-                   [r.get('provider_metadata',{}).get('browser_version') or
-                    r.get('provider_metadata',{}).get('library_version')]
-                   if value})
+  versions=sorted({str(value) for r in subset if (value:=method_version(r,provenance))})
   identities=[p.get('implementation_identity',{}) for m in manifests for p in m.get('providers',[]) if p.get('name')==name]
   versions=versions or sorted({str(identity['repository']['head']) for identity in identities if identity.get('repository',{}).get('head')})
   hashes=sorted({str(r.get('provider_metadata',{}).get('binary_sha256')) for r in subset if r.get('provider_metadata',{}).get('binary_sha256')})
@@ -2301,11 +2419,11 @@ def write_support(out,records,manifests,*,authored_interpretation=True):
  elif headless:
   access_rows=[]
   for name in sorted({r['provider'] for r in records},key=lambda value:(provider_label(value).lower(),value)):
-   access=HEADLESS_ACCESS[name]
+   access=method_access(name,records)
    official='<br>'.join(link(url,label) for label,url in access['links'])
    variables='<br>'.join('<code>'+esc(value)+'</code>' for value in access['env_vars'])
    access_rows.append(('',cell(provider_label(name))+cell(esc(access['account']))+cell(official)+cell(variables)+cell(esc(access['configuration']))))
-  account_intro='只有 Kitesurf 的账户级 Cloudflare Browser Run 路线需要供应商账号与凭据；其余六种方法是本地二进制，不需要账号，但仍需安装并明确指定可执行文件。'
+  account_intro='只有 Kitesurf 的账户级 Cloudflare Browser Run 路线需要供应商账号与凭据；其余方法是本地二进制，不需要账号，但仍需安装并明确指定可执行文件。'
   account_body=hero('账号与安装',account_intro)
   account_body+=section('本轮方法清单','<p>这里列的是完成本报告所需的全部外部准备：账号、官方获取入口和变量名称。变量值、本机路径、登录会话、Cookie 和 Token 均不进入报告。</p>'+table(['方法','账号要求','官方获取入口','变量名称','本轮配置'],access_rows,cls='accounts-table',metrics=[]))
   account_body+=section('公开内容边界','<p class="callout success"><b>报告只公开复现所需的名称和入口，不公开凭据值。</b> 发布门禁会扫描 HTML、JSON、下载文件和逐次输出中的常见 Token、私钥、Authorization 值与用户目录路径；第三方原始 HTML 中命中密钥形态的片段单独脱敏，计分输出保持逐字节不变。扫描结果和脱敏文件哈希随发布包保存。</p>')
@@ -2796,7 +2914,7 @@ def generate_webmainbench(out:Path,dataset:dict,records:list,summaries:dict,mani
  failure_types=sorted({r['_output_error'] for r in records if not r['_body_present'] and r['_output_error']})
  failed_request_count=sum(not r['_body_present'] for r in records)
  case_count=len(cases);result_count=case_count*len(names)
- labels={'kitesurf':'Kitesurf','lightpanda':'Lightpanda','obscura':'Obscura','moli':'Moli 1.1.5','moli-1.1.7':'Moli 1.1.7','chromium':'Chromium 152'}
+ labels={'kitesurf':'Kitesurf','lightpanda':'Lightpanda','obscura':'Obscura','moli':'Moli','moli-1.1.7':'Moli 1.1.7','chromium':'Chromium 152'}
  metric_order=['overall','text_edit','code_edit','formula_edit','table_edit','table_TEDS']
  corrected=teds_revision is not None
  display_score=_wmb_pct
diff --git a/harness/web_fetch/report_build.py b/harness/web_fetch/report_build.py
index bb543e4da..a66636adc 100644
--- a/harness/web_fetch/report_build.py
+++ b/harness/web_fetch/report_build.py
@@ -42,6 +42,52 @@
 from .webmainbench_latency_correction import prior_results_path
 from .webmainbench_latency_diagnostic import load_diagnostic as load_latency_diagnostic
 
+REPOSITORY = Path(__file__).resolve().parents[2]
+
+
+def _validate_stable_annotation_evidence(case, source, dataset):
+    """Validate anchors against their primary or registered qualification evidence."""
+    from copy import deepcopy
+
+    from .reference_inputs import input_tree, read_dataset_bytes
+    from .stable_annotations import bind_annotation_evidence
+
+    checked = deepcopy(case)
+    try:
+        bind_annotation_evidence(checked, source)
+        return checked['source_benchmark']['stable_annotation']['anchor_evidence_sha256']
+    except ValueError as error:
+        if not str(error).startswith('Stable text lacks independent evidence:'):
+            raise
+    identifier = case['id']
+    relative = f'sources/{identifier}/mixed-session-stable-text.json'
+    aggregate = contained_path(source, relative, reject_symlinks=True)
+    if not aggregate.is_file():
+        raise ValueError('Stable text lacks registered qualification evidence: ' + identifier)
+    matches = []
+    for declaration in dataset.get('comparison', {}).get('input_sources', []):
+        if (not isinstance(declaration, dict)
+                or set(declaration) != {'path', 'sha256', 'case_ids'}):
+            continue
+        path = contained_path(REPOSITORY, declaration['path'], reject_symlinks=True)
+        raw = read_dataset_bytes(path)
+        if hashlib.sha256(raw).hexdigest() != declaration['sha256']:
+            raise ValueError('Registered input source changed: ' + declaration['path'])
+        source_ids = {row['id'] for row in json.loads(raw).get('cases', [])}
+        candidate = contained_path(input_tree(path, 'sources'),
+                                   f'{identifier}/mixed-session-stable-text.json',
+                                   reject_symlinks=True)
+        if identifier in source_ids and candidate.is_file():
+            matches.append(candidate)
+    if not matches or any(candidate.read_bytes() != aggregate.read_bytes() for candidate in matches):
+        raise ValueError('Stable text qualification evidence is not registry-bound: ' + identifier)
+    annotation = checked['source_benchmark']['stable_annotation']
+    primary_sha256 = annotation['anchor_evidence_sha256']
+    annotation['anchor_evidence'] = relative
+    annotation.pop('anchor_evidence_sha256', None)
+    bind_annotation_evidence(checked, source)
+    return primary_sha256
+
 
 def build_diagnostic_cohorts(source: Path | None, output: Path, profile: Path | None = None) -> Path:
     """Build an explicitly requested diagnostic edition using the WebFetch owner."""
@@ -202,7 +248,7 @@ def _install_report_tree(staging: Path, output: Path):
 
 
 def build_report(source: Path, output: Path, *, include_english: bool = False,
-                 local_audit: bool = False, authored_interpretation: bool = False,
+                 local_audit: bool = False, authored_interpretation: bool | None = None,
                  diagnostic_preview: bool = False, language: str | None = None) -> Path:
     from harness.report_languages import includes_english, select_report_language
     include_english = includes_english(language, include_english)
@@ -224,6 +270,8 @@ def build_report(source: Path, output: Path, *, include_english: bool = False,
     if not local_audit:
         require_selection_history(source)
     dataset = json.loads(contained_path(source,'dataset.json').read_text())
+    if authored_interpretation is None:
+        authored_interpretation = bool(dataset.get('comparison', {}).get('report_interpretation'))
     records = load_jsonl(contained_path(source,'results.jsonl'))
     validate_report_ids(dataset,records)
     require_risk_control_certification(source, dataset, records)
@@ -264,17 +312,15 @@ def build_report(source: Path, output: Path, *, include_english: bool = False,
     for c in cases.values():
         annotation=c.get('source_benchmark',{}).get('stable_annotation',{})
         if annotation.get('anchor_evidence_sha256'):
-            if local_audit:
+            if (local_audit or dataset.get('comparison', {}).get('reference_binding_mode') == 'frozen_task_contracts'
+                    or dataset.get('comparison', {}).get('source_reference_policy') in {
+                        'frozen_acceptance_contracts_with_live_exact_reference_checks',
+                        'frozen_benchmark_inputs_with_explicit_live_exact_checks'}):
                 # The two historical dynamic cohorts retain their own source
                 # audit receipts.  Do not reinterpret those revisions with the
                 # newer origin/main release gate in a local merged view.
                 continue
-            from copy import deepcopy
-
-            from .stable_annotations import bind_annotation_evidence
-            checked=deepcopy(c)
-            bind_annotation_evidence(checked,source)
-            if checked['source_benchmark']['stable_annotation']['anchor_evidence_sha256'] != annotation['anchor_evidence_sha256']:
+            if _validate_stable_annotation_evidence(c, source, dataset) != annotation['anchor_evidence_sha256']:
                 raise ValueError('Stable text evidence changed: '+c['id'])
     for r in records:
         if r.get('metrics', {}).get('scoring_source_sha256') != SCORING_SOURCE_SHA256:
@@ -442,12 +488,17 @@ def build_report(source: Path, output: Path, *, include_english: bool = False,
                 text=[r for r in subset if r['metrics'].get('content_check_coverage') is not None]
                 row['text_checked_attempts']=len(text)
                 row['text_checked_cases']=len({r['case_id'] for r in text})
-        for name,data in [('dataset.json',dataset),('execution.json',{'batches':manifests}),('summary.json',summary)]:
+        # Preserve frozen input bytes across build and release profile checks.
+        shutil.copy2(contained_path(source,'dataset.json'), staging/'dataset.json')
+        for name,data in [('execution.json',{'batches':manifests}),('summary.json',summary)]:
             (staging/name).write_text(json.dumps(data,ensure_ascii=False,indent=2)+'\n')
         if (source / 'certification.json').is_file():
             shutil.copy2(source / 'certification.json', staging / 'certification.json')
             if dataset.get('comparison', {}).get('kind') == 'risk_control_100_moli':
-                for name in ('dataset.json', 'manifest.json', 'execution.json', 'reference-proof-verification.json'):
+                from .risk_control import risk_control_verification_binding
+                receipt = json.loads((source / 'certification.json').read_text())
+                verification_name, _ = risk_control_verification_binding(receipt)
+                for name in ('dataset.json', 'manifest.json', 'execution.json', verification_name):
                     shutil.copy2(contained_path(source, name), staging / name)
         reliability=assess_reliability(dataset,records)
         (staging/'reliability.json').write_text(json.dumps(reliability,ensure_ascii=False,indent=2)+'\n')
@@ -459,10 +510,48 @@ def build_report(source: Path, output: Path, *, include_english: bool = False,
         if local_audit:
             if (source/'local-evidence').is_dir():
                 shutil.copytree(source/'local-evidence', staging/'local-evidence')
+        content_binding = dataset.get('comparison', {}).get('report_interpretation')
+        if content_binding is not None:
+            copy_bound_assets(source, staging, {content_binding['path']: content_binding['sha256']})
+            authored_content = json.loads(contained_path(staging, content_binding['path']).read_text())
+            nested_assets = {item['path']: item['sha256'] for item in authored_content.get('figures', [])}
+            failure_binding = authored_content.get('failure_review')
+            if failure_binding:
+                copy_bound_assets(source, staging, {failure_binding['path']: failure_binding['sha256']})
+                failure_review = json.loads(contained_path(staging, failure_binding['path']).read_text())
+                for item in failure_review.get('failures', []):
+                    for evidence in item.get('evidence_paths', []):
+                        if not isinstance(evidence, dict):
+                            raise ValueError('Failure review evidence requires path and sha256')
+                        previous = nested_assets.setdefault(evidence['path'], evidence['sha256'])
+                        if previous != evidence['sha256']:
+                            raise ValueError('Conflicting interpretation asset binding')
+            missing_assets = {}
+            for relative, expected_hash in nested_assets.items():
+                existing = contained_path(staging, relative, reject_symlinks=True)
+                if existing.exists():
+                    if not existing.is_file() or hashlib.sha256(existing.read_bytes()).hexdigest() != expected_hash:
+                        raise ValueError('Conflicting interpretation evidence: ' + relative)
+                else:
+                    missing_assets[relative] = expected_hash
+            if missing_assets:
+                copy_bound_assets(source, staging, missing_assets)
         copy_methodology_assets(staging)
-        provenance=Path(__file__).resolve().parents[2]/'research/headless-implementation-provenance.json'
-        if provenance.is_file():
-            shutil.copy2(provenance,staging/'implementation-provenance.json')
+        implementation_binding = dataset.get('comparison', {}).get('implementation_provenance')
+        if implementation_binding is not None:
+            if implementation_binding['path'] != 'implementation-provenance.json':
+                raise ValueError('Implementation provenance uses implementation-provenance.json')
+            copy_bound_assets(source, staging, {
+                implementation_binding['path']: implementation_binding['sha256']})
+        else:
+            provenance=Path(__file__).resolve().parents[2]/'research/headless-implementation-provenance.json'
+            if provenance.is_file():
+                payload=json.loads(provenance.read_text())
+                hashes={r.get('provider_metadata',{}).get('binary_sha256') for r in records}
+                matched=[item for item in payload.get('implementations',[]) if item.get('binary_sha256') in hashes]
+                if matched:
+                    (staging/'implementation-provenance.json').write_text(json.dumps(
+                        {**payload,'implementations':matched},ensure_ascii=False,indent=2)+'\n')
         if (source/'scoring-revisions.json').is_file():
             scoring_path = source/'scoring-revisions.json'
             scoring_revisions = json.loads(scoring_path.read_text())
@@ -483,6 +572,28 @@ def build_report(source: Path, output: Path, *, include_english: bool = False,
                 shutil.copy2(archived, target)
         if (source/'reference-revisions.json').is_file():
             shutil.copy2(source/'reference-revisions.json', staging/'reference-revisions.json')
+        replacement_scopes = source/'provider-replacement-scopes.json'
+        if replacement_scopes.is_file():
+            scopes = json.loads(replacement_scopes.read_text())
+            if not isinstance(scopes, list):
+                raise ValueError('Provider replacement scope index is invalid')
+            for item in scopes:
+                if (not isinstance(item, dict) or set(item) != {'path', 'sha256', 'replacements'}):
+                    raise ValueError('Provider replacement scope entry is invalid')
+                bound = contained_path(source, item['path'], reject_symlinks=True)
+                if (not bound.is_file()
+                        or hashlib.sha256(bound.read_bytes()).hexdigest() != item['sha256']):
+                    raise ValueError('Provider replacement scope receipt changed')
+                target = contained_path(staging, item['path'], reject_symlinks=True)
+                target.parent.mkdir(parents=True, exist_ok=True)
+                shutil.copy2(bound, target)
+            shutil.copy2(replacement_scopes, staging/'provider-replacement-scopes.json')
+        if (source/'report-binding-revisions.json').is_file():
+            receipts = json.loads((source/'report-binding-revisions.json').read_text())
+            bindings = {row[f'{side}_dataset_path']: row[f'{side}_dataset_sha256']
+                        for row in receipts for side in ('input', 'output')}
+            copy_bound_assets(source, staging, bindings)
+            shutil.copy2(source/'report-binding-revisions.json', staging/'report-binding-revisions.json')
         if (source/'latency-corrections.json').is_file():
             shutil.copy2(source/'latency-corrections.json', staging/'latency-corrections.json')
         if (source/'request-status-corrections.json').is_file():
@@ -493,18 +604,21 @@ def build_report(source: Path, output: Path, *, include_english: bool = False,
             shutil.copytree(source/'history/file-baseline', staging/'history/file-baseline')
         if dataset.get("comparison", {}).get("kind") == "uniform_native_local_measurement":
             shutil.copy2(source / "local-run-contract.json", staging / "local-run-contract.json")
-            from harness.reporting.templates import resolve_template
-            (staging / "report-manifest.json").write_text(json.dumps({
-                "schema_version": 1, "template": resolve_template("webfetch"),
-                "evidence_state": "local_measurement", "certified": False,
-                "languages": ["zh", "en"] if include_english else ["zh"], "provider_calls_added": 0,
-                "dataset_sha256": hashlib.sha256((source / "dataset.json").read_bytes()).hexdigest(),
-                "results_sha256": hashlib.sha256((source / "results.jsonl").read_bytes()).hexdigest(),
-            }, ensure_ascii=False, indent=2))
         generate(staging,dataset,records,manifests,include_english=include_english,
                  authored_interpretation=authored_interpretation)
         if language is not None:
             select_report_language(staging, language)
+        from harness.reporting.templates import resolve_template
+        from harness.report_languages import generated_languages
+        nonpublication = diagnostic_preview or dataset.get('comparison', {}).get('kind') == 'uniform_native_local_measurement'
+        template_manifest = {'schema_version': 1, 'template': None if nonpublication else resolve_template('webfetch'),
+            'dataset_sha256': hashlib.sha256((staging/'dataset.json').read_bytes()).hexdigest(),
+            'results_sha256': hashlib.sha256((staging/'results.jsonl').read_bytes()).hexdigest(),
+            'generated_languages': generated_languages(staging)}
+        if dataset.get('comparison', {}).get('kind') == 'uniform_native_local_measurement':
+            template_manifest.update(evidence_state='local_measurement', certified=False,
+                languages=template_manifest['generated_languages'], provider_calls_added=0)
+        (staging/'report-manifest.json').write_text(json.dumps(template_manifest, ensure_ascii=False, indent=2)+'\n')
         (staging/marker).write_text('Generated from persisted evidence. Rebuild; do not edit.\n')
         # Replace only an explicitly marked generated directory; never merge stale pages.
         _install_report_tree(staging, output)
@@ -1179,9 +1293,9 @@ def validate_local_presentation(output: Path, binding_path: Path):
     if (binding.get('comparison_kind') != 'uniform_native_local_measurement'
             or manifest.get('evidence_state') != 'local_measurement'
             or manifest.get('certified') is not False
-            or manifest.get('languages') != ['zh']
+            or manifest.get('languages') not in (['zh'], ['zh', 'en'])
             or not (output / '.generated-report').is_file()):
-        raise ValueError('Presentation refresh requires a bound Chinese diagnostic snapshot')
+        raise ValueError('Presentation refresh requires a bound diagnostic snapshot')
     for name, key in [('dataset.json', 'frozen_dataset_sha256'), ('results.jsonl', 'results_sha256')]:
         expected = binding.get(key)
         manifest_key = 'dataset_sha256' if name == 'dataset.json' else key
@@ -1220,12 +1334,15 @@ def refresh_local_presentation(output: Path, binding_path: Path) -> Path:
     routes = ['index.html', 'methodology/index.html', 'adoption/index.html', 'reproduce/index.html', 'changes/index.html']
     routes += ['providers/' + provider + '.html' for provider in binding['providers']]
     routes += ['adoption/interfaces/' + provider + '.json' for provider in binding['providers']]
+    include_english = 'en' in manifest['languages']
+    if include_english:
+        routes += ['en/' + relative for relative in routes if relative.endswith('.html')]
     with tempfile.TemporaryDirectory(prefix='.presentation-', dir=output.parent) as scratch:
         staging = Path(scratch) / 'report'
         shutil.copytree(output, staging)
         shutil.rmtree(staging / 'en', ignore_errors=True)
         batches = json.loads((output / 'execution.json').read_text())['batches']
-        generate(staging, dataset, records, batches, presentation_only=True)
+        generate(staging, dataset, records, batches, include_english=include_english, presentation_only=True)
         changed = []
         for relative in routes:
             before, after = contained_path(output, relative), contained_path(staging, relative)
diff --git a/harness/web_fetch/report_capabilities.py b/harness/web_fetch/report_capabilities.py
index 886685ff5..d4d9336f5 100644
--- a/harness/web_fetch/report_capabilities.py
+++ b/harness/web_fetch/report_capabilities.py
@@ -154,18 +154,18 @@ def c(status, detail):
 SOURCES['moli-recipes'] = ('Moli 1.1.4 · 输出与接口边界', 'https://github.com/lexmount/moli/blob/v1.1.4/skills/moli-webfetch/references/fetch-recipes.md')
 SOURCES['moli-release'] = ('Moli 1.1.4 · 官方发布', 'https://github.com/lexmount/moli/releases/tag/v1.1.4')
 CAPABILITIES['moli-webfetch'] = {
- 'scope':'moli fetch；普通正文使用 Markdown，挑战题使用 JSON 最终 DOM 与网络诊断，动态/资源/嵌入文档使用有界 DOM eval，直接文档与媒体使用裸 fetch 自动响应', 'sources':['moli','moli-recipes','moli-release'],
+ 'scope':'moli fetch；网页、文档正文、结构和网页内嵌媒体使用原生 Markdown，预声明完成条件只调用官方等待参数，直接媒体文件使用原始响应', 'sources':['moli','moli-recipes','moli-release'],
  'web':c('支持','JS 渲染网页 → Markdown / HTML'),
  'document':c('需配置','裸 fetch 取得原始 PDF 后在同一预算内本地解析；Office 取决于实际响应'),
- 'image':c('有限支持','页面引用；JSON HTML / eval 可取地址'),
- 'av':c('有限支持','页面入口；HTML / eval 可取地址'),
+ 'image':c('有限支持','原生 Markdown 中保留的图片地址；直接文件可验收原始字节'),
+ 'av':c('有限支持','原生 Markdown 中保留的媒体地址；直接文件可验收原始字节'),
  'file':c('有限支持','裸 fetch 可自动返回直接非 HTML 响应的原始字节'),
  'js':c('支持','默认运行 JS，支持多种就绪等待'),
  'input':'单个 URL；每个页面单独调用 fetch。',
- 'structure':'JSON 返回最终 URL、状态、标题、响应头、重定向链和 HTML；--eval 可返回 DOM 字段。',
+ 'structure':'网页与文档任务由 --dump markdown 返回原生 Markdown；直接媒体文件返回原始字节；等待条件不参与内容抽取。',
  'access':'支持授权 cookie-file / profile-dir 和请求头；仍可能被站点拒绝。默认适配器不加载登录状态。',
  'notes':'截图和 PDF 是启用 --layout 后生成的页面产物，不是读取已有文档或下载原媒体。官方未承诺文档 OCR、媒体理解或音频转写；直接非 HTML 输入不强制使用 Markdown。',
- 'tested':'Moli 1.1.4：普通正文使用 Markdown；挑战题一次请求返回 JSON 最终 DOM、HTTP 状态、最终 URL 和网络诊断，DOM 在同一截止内本地转 Markdown；动态任务分别使用预声明的完成 selector 与正文范围；资源页从渲染 DOM、同源 iframe 与有界同源模块返回 URL；直接 PDF 与媒体不传 --dump。DOCX 因当前 CLI 的 OOXML 误分类，在同一次 CLI 运行中由页面运行时二次 fetch 原始字节；冻结公开域名的 split-DNS 例外使用精确白名单。无 layout、失败后格式回退或跨 provider 补抓；只有实际执行记录参与榜单。',
+ 'tested':'网页正文、文档正文、结构和网页内嵌媒体任务统一使用 Moli 原生 Markdown；动态网站正文整类统一启用 --layout、--with-frames 和 domstable，不使用逐题 selector。网页媒体只核对同一 Markdown 输出里的目标地址，不下载媒体。直接 PDF/DOCX 未提供可读正文时按失败记录；直接媒体文件验收原始字节。失败后不切换格式，也不借用其他 provider 补抓；只有实际执行记录参与榜单。',
 }
 CAPABILITIES['lexmount-cn'] = {**CAPABILITIES['lexmount-global'], 'scope': 'POST /v1/extract · 中国区'}
 for engine,url in {
@@ -197,19 +197,19 @@ def c(status, detail):
     SOURCES[source]=(f'Moli {version} · 官方发布',
         f'https://github.com/lexmount/moli/releases/tag/v{version}')
     CAPABILITIES[provider]={
-      'scope':'普通网页原生 Markdown；直接文档与媒体使用裸 fetch 自动响应；原始文档的正文解析计入任务耗时',
+      'scope':'网页和文档正文使用原生 Markdown；直接媒体文件使用原始响应',
       'sources':[source],
       'web':c('支持','CLI 原生 Markdown'),
-      'document':c('需配置','裸 fetch 取得原始 PDF 后在预算内解析；Office 格式取决于实际响应'),
+      'document':c('有限支持','HTML/TXT 可以直接返回正文；PDF/DOCX 必须由同一原生 Markdown 接口交付可读文字'),
       'image':c('仅链接','网页资源取决于 Markdown 保留；直接 URL 可验收原始字节'),
       'av':c('仅链接','网页资源取决于 Markdown 保留；直接 URL 可验收原始字节'),
       'file':c('支持','裸 fetch 返回直接 PDF、PNG、WebM、MP4 等原始响应'),
       'js':c('支持','兼容范围看逐例结果'),
       'input':'给定公开 HTTP(S) URL；不登录、不点击、不滚动。',
-      'structure':'普通网页输出 Markdown；直接文档或媒体输出序列化 HTML 或原始字节。',
+      'structure':'网页和文档正文输出 Markdown；直接媒体文件输出原始字节。',
       'access':'每次新进程；本地二进制，不使用托管服务凭据。',
-      'notes':'正文与文件是不同交付契约。直接文档若返回原始字节，评测在同一次预算内解析；直接媒体只校验格式、长度和冻结 SHA-256，不进行内容理解。1.0.6 与 1.1.1 的裸 fetch 行为由官方发行二进制实测确认，1.1.3 还在 CLI 帮助中明确说明。',
-      'tested':'普通网页 --dump markdown；直接 PDF、DOCX 和媒体不传 --dump；本轮没有启用失败重试，端到端预算 45 秒。',
+      'notes':'正文与文件是不同交付契约。文档题要求 Moli 的原生 Markdown 接口直接交付可读正文；只返回 PDF/DOCX 字节或地址不通过，评测端不再外部解析。直接媒体文件只校验格式、长度和冻结 SHA-256，不进行内容理解。',
+      'tested':'网页与文档正文使用 --dump markdown；直接媒体文件返回原始字节；本轮没有启用失败重试，端到端预算 45 秒。',
     }
 
 SOURCES['headless-moli-1.1.7']=('Moli 1.1.7 · 官方发布','https://github.com/lexmount/moli/releases/tag/v1.1.7')
@@ -227,17 +227,65 @@ def c(status, detail):
     'tested':'fetch --dump markdown --wait-until done；最终结果为准，失败重试链单独保留。',
 }
 
-def render_capabilities(out, names, *, table, cell, link):
-    labels={'moli-1.0.6':'Moli 1.0.6','moli':'Moli 1.1.5','moli-1.1.3':'Moli 1.1.3','moli-1.1.7':'Moli 1.1.7','moli-1.1.11':'Moli 1.1.11'}
-    unknown = sorted(set(names) - set(CAPABILITIES))
+def task_capabilities(out, names, records):
+    """Describe the configured native task routes, without upgrading product claims."""
+    from .report_interfaces import browser_task_interface_matrix
+    from .methods import native_browser_engine, browser_method_registry
+    measured=[r for r in records if r.get('provider_metadata',{}).get('output_contract')]
+    if (not measured or not all(native_browser_engine(name) in {'moli','lightpanda','obscura','chromium','kitesurf'} for name in names)
+            or not (out/'dataset.json').is_file()):return None
+    dataset=json.loads((out/'dataset.json').read_text())
+    cases={case['id']:case for case in dataset['cases']}
+    matrix=browser_task_interface_matrix(cases,names)
+    configured={}
+    for name in names:
+        engine=native_browser_engine(name)
+        row={**CAPABILITIES[engine]}
+        row.update(
+            scope=matrix['capabilities'][name],
+            web=c('支持','原生网页正文输出' if engine!='chromium' else '原生 DOM 加共同 HTML 转换'),
+            document=(c('有限支持','HTML/TXT 可由原生 Markdown 返回；直接 PDF/DOCX 未提供可读正文，评测端不使用外部解析器')
+                      if engine=='moli' else
+                      c('共同转换','使用浏览器渲染后的完整 HTML，再由固定 HTML-to-Markdown 包转换；不读取查看器私有对象，不使用外部 PDF/DOCX 解析器')
+                      if engine=='chromium' else
+                      c('原生输出','直接使用浏览器正文接口；不使用外部 PDF/DOCX 解析器')),
+            image=c('资源地址 / 字节',
+                    '原生 Markdown 由共同评分器识别目标资源 URL；直接文件通过原生响应取得'
+                    if engine!='chromium' else
+                    '完整渲染 HTML 经过共同转换，评分器从 Markdown 核对资源地址；直接文件通过原生响应取得'),
+            av=c('资源与元数据',
+                 '完整渲染 HTML 经过共同转换，评分器从 Markdown 核对地址或页面信息；直接文件读取原始字节'
+                 if engine=='chromium' else
+                 '原生接口读取地址、页面元数据或原始字节；不做媒体理解'),
+            file=c('原生获取','使用该浏览器原始响应或附件接口，按固定规则验收字节'),
+            structure='按任务交付 Markdown、文档正文、资源地址、媒体元数据或原始文件。',
+            notes=('浏览器负责访问与原生产物获取；网页内嵌媒体与正文统一走原生 Markdown，共同评分器只核对目标资源 URL；只有 Chromium 使用标准 HTML 转 Markdown 包。完整分类及边界见报告解读的接口表。'
+                   if engine!='chromium' else
+                   'Chromium 负责访问和渲染；所有页面类任务都取得完整 HTML，再由固定标准包转成 Markdown。评测端不运行资源提取脚本，也不读取文档查看器私有对象。完整分类及边界见报告解读的接口表。'),
+            tested='接口按任务大类预选；获取、等待和原生输出共享 45 秒预算。Chromium 的 HTML 转换也计入该预算。失败不切换引擎，不按评分结果选择更好的返回。')
+        source='task-native-'+name
+        source_url={'moli':'https://github.com/lexmount/moli','lightpanda':'https://github.com/lightpanda-io/browser','obscura':'https://github.com/h4ckf0r0day/obscura','chromium':'https://developer.chrome.com/docs/automation-and-testing/headless','kitesurf':'https://developers.cloudflare.com/browser-run/kitesurf/'}[engine]
+        source_url=browser_method_registry()[name].get('source_url',source_url)
+        SOURCES[source]=(name+' · 官方接口',source_url)
+        row['sources']=[source]
+        configured[name]=row
+    return configured
+
+def render_capabilities(out, names, *, table, cell, link, records=()):
+    labels={'moli-1.0.6':'Moli 1.0.6','moli':'Moli','moli-1.1.3':'Moli 1.1.3','moli-1.1.7':'Moli 1.1.7','moli-1.1.11':'Moli 1.1.11'}
+    from .methods import measured_method_label
+    labels.update({name:measured_method_label(name,labels.get(name,name)) for name in names})
+    configured=task_capabilities(out,names,records)
+    capabilities=configured or CAPABILITIES
+    unknown = sorted(set(names) - set(capabilities))
     evidence = {'checked_at': CHECKED_AT, 'scope': '官方契约/固定源码能力，不是实测成绩',
-                'sources': SOURCES, 'methods': {n: CAPABILITIES[n] for n in names if n in CAPABILITIES}, 'unreviewed': unknown}
+                'sources': SOURCES, 'methods': {n: capabilities[n] for n in names if n in capabilities}, 'unreviewed': unknown}
     (out / 'adoption' / 'capabilities.json').write_text(json.dumps(evidence, ensure_ascii=False, indent=2)+'\n')
     content_rows, runtime_rows, details = [], [], []
     for name in names:
-        if name not in CAPABILITIES:
+        if name not in capabilities:
             continue
-        row = CAPABILITIES[name]
+        row = capabilities[name]
         method = cell(link('#capability-'+name, labels.get(name,name)))
         values = []
         for key in ['web', 'document', 'image', 'av', 'file']:
@@ -249,11 +297,13 @@ def render_capabilities(out, names, *, table, cell, link):
         sources = ' · '.join(link(SOURCES[s][1], SOURCES[s][0]+' ↗') for s in row['sources'])
         details.append(f'<details class="interface-panel" id="capability-{escape(name)}"><summary>{escape(labels.get(name,name))} · 范围与官方依据</summary>'+
                        f'<p><strong>对应接口：</strong>{escape(row["scope"])}</p><p>{escape(row["notes"])}</p>'+
-                       f'<p><strong>本轮配置：</strong>{escape(row["tested"])}</p><p class="source-note">{sources}</p></details>')
+                       f'<p><strong>登记配置：</strong>{escape(row["tested"])}</p><p class="source-note">{sources}</p></details>')
     legend = ('<p>原有资料核对日期：'+CHECKED_AT+'；本版新增 Cloudflare 与 Firecrawl 接口核对日期：'+ROUTE_CHECKED_AT+'。托管服务按官方文档；内置工具按固定源码。此处说明可选能力，<strong>不是实测成绩</strong>；没有启用的选项不补算进榜单。</p>'
               '<dl class="capability-legend"><div><dt>支持 / 需配置</dt><dd>有对应实现或契约；需配置表示要启用额外模式。</dd></div>'
               '<div><dt>仅链接 / 有限支持</dt><dd>仅返回地址，或只覆盖指定输入、正文区域。</dd></div>'
               '<div><dt>无此能力 / 未声明</dt><dd>前者有明确实现边界；后者是官方资料不足，不能当作不支持。</dd></div></dl>')
+    if configured:
+        legend='<p>下表说明本报告配置的接口与处理边界，浏览器版本及固定来源见“环境与复现”。共同解析、资源读取脚本和 HTML 转换由评测提供，不计作浏览器内置能力。接口可用不代表每题都能完成；实测结果见结果分析。</p>'
     content = ('<p class="source-note">能力声明不是实测任务成绩；任务通过按登记的稳定内容锚点与字段结构等规则判定，不证明频繁变化值的事实准确性或实时性。文档列指 PDF / Office 中的文字；普通 TXT 不等于文档解析。图片、音视频列说明网页资源取得方式，<strong>不代表视觉理解或转写</strong>；直接媒体 URL 能否取得字节看原文件列。原文件不是页面正文、截图或下载链接本身。</p>'+
                table(['方法 / 依据', '静态网站正文', '文档文字', '图片资源', '音视频资源', '原文件'], content_rows, cls='capability-matrix', metrics=[]))
     runtime = table(['方法 / 依据', 'JS 渲染', '输入范围', '结构化输出', '访问与会话'], runtime_rows, cls='capability-runtime', metrics=[])
diff --git a/harness/web_fetch/report_changes.py b/harness/web_fetch/report_changes.py
index 62d8405a9..149cee0ea 100644
--- a/harness/web_fetch/report_changes.py
+++ b/harness/web_fetch/report_changes.py
@@ -26,6 +26,16 @@ def require_review_rounds(data):
     return rounds
 
 
+def published_releases(releases, *, require_state=False):
+    public=[]
+    for release in releases:
+        state=release.get('publication_state',None if require_state else 'published')
+        if state not in {'published','unpublished'}:
+            raise ValueError('Unknown release publication state')
+        if state=='published':public.append(release)
+    return public
+
+
 def select_cohort_history(data, dataset, records):
     """Select public history for the measured cohort, including legacy untagged entries.
 
@@ -40,7 +50,7 @@ def select_cohort_history(data, dataset, records):
         kind='headless_markdown'
     if not kind:kind='generic'
     headless=kind in {'headless_html','headless_markdown'}
-    releases=data.get('releases',[])
+    releases=published_releases(data.get('releases',[]), require_state=data.get('schema_version',2)>=3)
     boundary=next((i for i,row in enumerate(releases) if row.get('id')==HEADLESS_HISTORY_START),None)
     selected=[]
     for index,release in enumerate(releases):
@@ -74,7 +84,7 @@ def require_revision_release_bindings(history, releases):
     for receipt in history:
         digest = receipt.get('input_results_sha256')
         matches = []
-        for release in releases:
+        for release in published_releases(releases):
             declared = release.get('scoring_revision_input_sha256')
             declared = declared if isinstance(declared, list) else [declared]
             if digest in declared:
@@ -92,7 +102,7 @@ def release_details(release, table, cell, esc):
 
 def localized_release_history(data, kind):
     """Select one report's release records, newest first, with complete EN labels."""
-    releases = [row for row in data.get('releases', []) if kind in row.get('comparison_kinds', [])]
+    releases = [row for row in published_releases(data.get('releases', []), require_state=data.get('schema_version',2)>=3) if kind in row.get('comparison_kinds', [])]
     if not releases or len({row['id'] for row in releases}) != len(releases):
         raise ValueError(kind + ' release history is absent or has duplicate IDs')
     for row in releases:
@@ -164,7 +174,10 @@ def render_changes(out, cases, records, dataset=None):
             raise FileNotFoundError(
                 'Required file-rerun evidence directories are missing: '
                 + ', '.join(str(path) for path in missing))
-    data=json.loads((ROOT/'research/report-changes.json').read_text())
+    source = out / 'report-assets/report-changes.json'
+    if not source.is_file():
+        source = ROOT / 'research/report-changes.json'
+    data=json.loads(source.read_text())
     require_review_rounds(data)
     public_data=select_cohort_history(data,dataset,records)
     (out/'report-changes.json').write_text(json.dumps(public_data,ensure_ascii=False,indent=2)+'\n')
diff --git a/harness/web_fetch/report_check.py b/harness/web_fetch/report_check.py
index 5eec4fb54..609bdc51a 100644
--- a/harness/web_fetch/report_check.py
+++ b/harness/web_fetch/report_check.py
@@ -12,6 +12,7 @@
 from harness.record_io import load_jsonl
 from harness.report_languages import check_language_contract, generated_languages, visible_numbers
 from harness.reporting.article_assets import ArticleAssetParity
+from harness.reporting.presentation import check_presentation
 from harness.web_fetch.reference_lifecycle import validate_resource_source_evidence
 from harness.web_fetch.reliability import require_reliable
 from harness.web_fetch.safety import contained_path, reject_evidence_symlinks, safe_identifier
@@ -133,7 +134,7 @@ def handle_data(self, text):
             self.numbers.extend(visible_numbers(text))
 
 
-def check(root: Path, *, authority_root: Path, profile: Path | None = None, presentation_binding: Path | None = None):
+def check(root: Path, *, authority_root: Path, profile: Path | None = None, presentation_binding: Path | None = None, source_dataset: Path | None = None):
     reject_evidence_symlinks(root)
     root = root.resolve()
     repository = authority_root.resolve()
@@ -158,9 +159,34 @@ def check(root: Path, *, authority_root: Path, profile: Path | None = None, pres
             if (profile_path.parent / "dataset.json").is_file()
             else repository / "evaluation"
         )
-        require_canonical_inputs(root, canonical)
+        if not json.loads(profile_path.read_text()).get('frozen_inputs'):
+            require_canonical_inputs(root, canonical)
     d = json.loads((root / "dataset.json").read_text())
+    manifest_path = root / 'report-manifest.json'
+    if manifest_path.is_file():
+        from harness.reporting.templates import resolve_template
+        manifest = json.loads(manifest_path.read_text())
+        expected_template = None if d.get('comparison', {}).get('kind') == 'uniform_native_local_measurement' else resolve_template('webfetch', root=repository)
+        if manifest.get('template') != expected_template:
+            raise ValueError('Report manifest differs from the maintained template')
+        for name in ('dataset', 'results'):
+            path = root / ('dataset.json' if name == 'dataset' else 'results.jsonl')
+            if manifest.get(name + '_sha256') != hashlib.sha256(path.read_bytes()).hexdigest():
+                raise ValueError('Report manifest evidence changed: ' + name)
+        if manifest.get('generated_languages') != list(generated_languages(root)):
+            raise ValueError('Report manifest languages differ from generated routes')
     rs = load_jsonl(root / "results.jsonl")
+    if source_dataset:
+        if not profile_path:
+            raise ValueError('Frozen source dataset requires an explicit report profile')
+        profile_data = json.loads(profile_path.read_text())
+        if source_dataset.is_symlink():
+            raise ValueError('Frozen source dataset rejects symlinks')
+        source_raw = source_dataset.read_bytes()
+        if hashlib.sha256(source_raw).hexdigest() != profile_data.get('frozen_inputs', {}).get('dataset_sha256'):
+            raise ValueError('Frozen source dataset differs from current profile')
+        if json.loads(source_raw)['cases'] != d['cases']:
+            raise ValueError('Report cases differ from frozen source dataset')
     check_language_contract(root)
     has_english = "en" in generated_languages(root)
     if d.get("comparison", {}).get("kind") == "webmainbench_frozen_html_to_markdown":
@@ -186,7 +212,7 @@ def check(root: Path, *, authority_root: Path, profile: Path | None = None, pres
             require_local_measurement(root, d, rs)
         inventory = {track: {"case_ids": [case["id"] for case in d["cases"] if case.get("track", "web") == track], "providers": providers} for track, providers in d["coverage_plan"].items()}
         canonical_dataset = repository / json.loads((root / "local-run-contract.json").read_text())["dataset_path"]
-    elif profile_path and (profile_path.parent / "dataset.json").is_file():
+    elif source_dataset or (profile_path and (json.loads(profile_path.read_text()).get('frozen_inputs') or (profile_path.parent / "dataset.json").is_file())):
         inventory = {
             track: {
                 "case_ids": [
@@ -196,7 +222,7 @@ def check(root: Path, *, authority_root: Path, profile: Path | None = None, pres
             }
             for track, providers in d.get("coverage_plan", {}).items()
         }
-        canonical_dataset = profile_path.parent / "dataset.json"
+        canonical_dataset = source_dataset or (root / 'dataset.json' if json.loads(profile_path.read_text()).get('frozen_inputs') else profile_path.parent / "dataset.json")
     else:
         inventory = json.loads((repository / "configs/evaluation-inventory.json").read_text())
         canonical_dataset = repository / "evaluation/dataset.json"
@@ -253,7 +279,7 @@ def check(root: Path, *, authority_root: Path, profile: Path | None = None, pres
     case_by_id = {c["id"]: c for c in d["cases"]}
     for case in d["cases"]:
         safe_identifier(case["id"])
-        validate_resource_source_evidence(case, canonical_dataset)
+        validate_resource_source_evidence(case, canonical_dataset, execution=True)
     reliability = require_reliable(d, rs)
     saved_reliability = json.loads((root / "reliability.json").read_text())
     if not saved_reliability == reliability:
@@ -275,7 +301,6 @@ def check(root: Path, *, authority_root: Path, profile: Path | None = None, pres
         if c.get("track", "web") in {"web", "dynamic", "document"} and (
             not c.get("ground_truth_main_content")
         ):
-            unavailable = c.get("source_verification", {}).get("state") == "unavailable"
             stable_checks = bool(
                 c.get("required_facts")
                 or c.get("required_patterns")
@@ -284,7 +309,7 @@ def check(root: Path, *, authority_root: Path, profile: Path | None = None, pres
             if local_measurement:
                 from .stable_tasks import validate_acceptance_contract
                 validate_acceptance_contract(c["acceptance_contract"])
-            elif not (unavailable and stable_checks):
+            elif not stable_checks:
                 raise ValueError(c["id"])
         if c.get("ground_truth_main_content"):
             expected = c["ground_truth_main_content"].encode()
@@ -292,6 +317,9 @@ def check(root: Path, *, authority_root: Path, profile: Path | None = None, pres
                 from .reference_inputs import read_dataset_bytes
                 canonical_cases = {case["id"]: case for case in json.loads(read_dataset_bytes(canonical_dataset))["cases"]}
                 valid_reference = expected == canonical_cases[c["id"]]["ground_truth_main_content"].encode()
+            elif source_dataset:
+                digest = hashlib.sha256(expected).hexdigest()
+                valid_reference = all(r['metrics'].get('scored_reference_sha256') == digest for r in rs if r['case_id'] == c['id'])
             else:
                 valid_reference = hashlib.sha256(expected).hexdigest() == c["source_verification"]["reference_sha256"]
             if not valid_reference:
@@ -400,6 +428,7 @@ def canonical_link(page, value):
                 )
     for p in root.rglob("*.html"):
         text = p.read_text()
+        check_presentation(text)
         reader = VisibleText()
         reader.feed(text)
         visible = " ".join(reader.parts)
@@ -442,6 +471,8 @@ def canonical_link(page, value):
                 if case.get("task_kind") == "file"
                 else "标准答案与验收规则"
                 if case.get("task_kind") == "structure"
+                else "验收规则（无全文参考）"
+                if case.get('task_kind', 'body') == 'body' and not (case.get('ground_truth_main_content') or case.get('reference_answer'))
                 else "完整标准答案"
             )
             actual_heading = (
@@ -449,6 +480,7 @@ def canonical_link(page, value):
                     "目标文件": "Target file",
                     "标准答案与验收规则": "Reference and acceptance contract",
                     "完整标准答案": "Complete reference answer",
+                    "验收规则（无全文参考）": "Acceptance rules (no full-text reference)",
                 }[heading]
                 if p.relative_to(root).parts[0] == "en"
                 else heading
@@ -485,22 +517,23 @@ def canonical_link(page, value):
     home = (root / "index.html").read_text()
     track_count = len({case.get("track", "web") for case in d["cases"]})
     if (
-        not home.index(f"<h2>{track_count} 类任务概览</h2>")
-        < home.index("<h2>综合通过率总榜</h2>")
+        not home.index("<h2>综合通过率总榜</h2>")
+        < home.index(f"<h2>{track_count} 类任务概览</h2>")
         < home.index(f"<h2>{track_count} 类分榜</h2>")
     ):
-        raise ValueError("Task overview and overall ranking must precede detailed rankings")
+        raise ValueError("Core comparison must precede the overview and detailed rankings")
     if not ("本类最高：" in home and "判分完整性" in home):
         raise ValueError("Report acceptance check failed")
     if (root / "resource-cohort/resource-comparison.json").is_file():
+        from .report_resources import check_resource_presentation
+        resource_summary = json.loads((root / "resource-cohort/resource-comparison.json").read_text())
         guide = (root / "guide/index.html").read_text()
         for page_name, text in [("home", home), ("guide", guide)]:
+            check_resource_presentation(text, resource_summary)
             if "data-resource-winner=" not in text:
                 raise ValueError((page_name, "missing resource winner summary"))
             if not all(label in text for label in ("CPU 与计算", "内存", "网络")):
                 raise ValueError((page_name, "missing grouped resource tables"))
-            if not text.count("data-resource-metric-winner=") >= 9:
-                raise ValueError((page_name, "resource winners are not marked"))
         if has_english:
             for page_name, text in [
                 ("English home", (root / "en/index.html").read_text()),
@@ -510,8 +543,7 @@ def canonical_link(page, value):
                     raise ValueError((page_name, "missing resource winner summary"))
                 if not all(label in text for label in ("CPU and compute", "Memory", "Network")):
                     raise ValueError((page_name, "missing grouped resource tables"))
-                if not text.count("data-resource-metric-winner=") >= 9:
-                    raise ValueError((page_name, "resource winners are not marked"))
+                check_resource_presentation(text, resource_summary)
     methodology = (root / "methodology/index.html").read_text()
     for phrase in [
         "计入耗时",
@@ -532,10 +564,11 @@ def main(argv=None, *, authority_root: Path | None = None):
     parser = argparse.ArgumentParser(description=__doc__)
     parser.add_argument("root", type=Path)
     parser.add_argument("--profile", type=Path)
+    parser.add_argument('--source-dataset', type=Path)
     parser.add_argument("--authority-root", type=Path, default=authority_root or Path.cwd())
     parser.add_argument("--presentation-binding", type=Path)
     args = parser.parse_args(argv)
-    result = check(args.root, authority_root=args.authority_root, profile=args.profile, presentation_binding=args.presentation_binding)
+    result = check(args.root, authority_root=args.authority_root, profile=args.profile, presentation_binding=args.presentation_binding, source_dataset=args.source_dataset)
     if result is not None:
         print(result)
 
@@ -559,6 +592,29 @@ def check_revision(out: Path, *, authority_root: Path):
         return (
             "PASS: WebMainBench preselected-200 release scope and report acceptance checks verified"
         )
+    binding = dataset.get('comparison', {}).get('report_interpretation')
+    if binding:
+        from .report_explainer import check_current_browser_article
+        check_current_browser_article(out, {case['id']:case for case in dataset['cases']},
+                                      load_jsonl(out/'results.jsonl'), binding)
+    provenance_path = out / "implementation-provenance.json"
+    if provenance_path.is_file():
+        from .methods import native_browser_engine
+        provenance = json.loads(provenance_path.read_text())
+        records = load_jsonl(out / "results.jsonl")
+        home = BeautifulSoup((out / "index.html").read_text(), "html.parser")
+        for item in provenance.get("implementations", []):
+            name = item.get("provider")
+            if native_browser_engine(name) != "moli" or not item.get("version"):
+                continue
+            hashes = {r.get("provider_metadata", {}).get("binary_sha256")
+                      for r in records if r["provider"] == name}
+            if hashes != {item.get("binary_sha256")}:
+                continue
+            expected = "Moli " + item["version"]
+            links = home.select('a[href="providers/' + name + '.html"]')
+            if not links or any(anchor.get_text() != expected for anchor in links):
+                raise ValueError("Measured method version label: " + name)
     check_language_contract(out)
     has_english = "en" in generated_languages(out)
     for path in out.rglob("*.html"):
@@ -600,6 +656,24 @@ def check_revision(out: Path, *, authority_root: Path):
                     raise ValueError((path, width))
         for table in soup.select("table.ranking"):
             headers = table.select("thead th")
+            body_families = {"web", "dynamic", "challenge", "risk_control", "document"}
+            family = table.get("id", "").removeprefix("ranking-")
+            if family in body_families and any(
+                c.get("track", "web") == family and c.get("task_kind", "body") in {"body", "structure"}
+                for c in dataset["cases"]
+            ):
+                labels = [h.get_text() for h in headers]
+                required = (
+                    ["Recall", "Precision", "F1"] if is_english else ["完整度", "纯净度", "F1"]
+                )
+                forbidden = (
+                    ["Resource hit rate", "File retrieval rate"]
+                    if is_english else ["资源命中率", "文件取得率"]
+                )
+                if not all(any(label in h for h in labels) for label in required) or any(
+                    label in h for label in forbidden for h in labels
+                ):
+                    raise ValueError((path, "Body ranking metric columns", family))
             sort = int(table["data-col"])
             expected = (
                 (["Matched repositories"] if is_english else ["命中仓库数"])
@@ -640,6 +714,13 @@ def check_revision(out: Path, *, authority_root: Path):
             expected_failure = "Failure class" if is_english else "失败分类"
             if expected_failure not in [h.get_text() for h in soup.select("#filtered-table th")]:
                 raise ValueError(path)
+    records = load_jsonl(out / 'results.jsonl')
+    if records and all(row.get('provider_type') == 'fixture' for row in records):
+        methods = BeautifulSoup((out / 'adoption/index.html').read_text(), 'html.parser')
+        for name in {row['provider'] for row in records}:
+            if methods.find(id='interface-' + name) is None:
+                raise ValueError('Synthetic adapter interface is missing: ' + name)
+        return 'PASS: synthetic report presentation, declared adapters and bound interpretation verified'
     counts = json.loads((out / "adoption/counts.json").read_text())["methods"]
     names = {row["provider"] for row in load_jsonl(out / "results.jsonl")}
     from harness.web_fetch.report_methods import PROFILES
@@ -652,13 +733,15 @@ def check_revision(out: Path, *, authority_root: Path):
         '.interface-panel[id^="interface-"]'
     )
     from harness.web_fetch.report_interfaces import SPECS
+    from harness.web_fetch.methods import native_browser_engine
+    interface_names = set(SPECS) | {name for name in names if native_browser_engine(name)}
 
     if not (
-        len(interfaces) == len(SPECS)
+        len(interfaces) == len(interface_names)
         and sum(p.has_attr("open") for p in interfaces) == bool(interfaces)
     ):
         raise ValueError("Report presentation check failed")
-    if {panel.get("id") for panel in interfaces} != {"interface-" + name for name in SPECS}:
+    if {panel.get("id") for panel in interfaces} != {"interface-" + name for name in interface_names}:
         raise ValueError("Interface inventory differs from registry")
     for panel in interfaces:
         if not len(panel.select("pre")) == 2:
diff --git a/harness/web_fetch/report_components.py b/harness/web_fetch/report_components.py
index 3db213b2b..58bde611d 100644
--- a/harness/web_fetch/report_components.py
+++ b/harness/web_fetch/report_components.py
@@ -34,7 +34,7 @@ def cards(items):
 
 
 def metric_guide():
-    return '<p>静态网站正文、动态网站正文、热门网站正文和文档正文使用同一评分流程。页面来源与加载方式不同，改变的是案例要求，不改变指标定义。</p>'+cards([
+    return '<p>静态网站正文、动态网站正文、热门网站正文、风控网页正文和文档正文使用同一评分流程。页面来源与加载方式不同，改变的是案例要求，不改变指标定义。</p>'+cards([
         ('统一验收流程','接口返回 → 排除空内容与错误页 → 核对题目要求的文字和字段 → 检查列表数量、类型与唯一性 → 汇总任务结果。只执行该例适用的检查；失败详情保留具体未满足项。图片与视频沿用请求和交付检查，资源地址或文件字节另按格式核验。'),
         ('任务通过率','满足该例全部验收规则的次数 ÷ 已有验收证据的任务。段落、列表、字段都属于内容要求；<strong>没有 F1 最低分门槛</strong>。请求失败计入分母；任何计划调用缺失或无法判分时，整份报告标为不可靠并禁止发布。'),
         ('文字核对覆盖','每例命中的必需文字组数 ÷ 登记组数，再按案例取均值。固定标题、说明、字段标签或事实句均可作为核对组；易变名单和价格不固定为答案。没有文字依据的案例不记作满分，覆盖案例数另列。'),
@@ -144,6 +144,22 @@ def metric_legend(headers):
         'case_id': 'video-09',
         'boundary': '不测画面理解、语音转写或字幕质量。找到播放入口不等于取得视频字节；历史调用缺少原文件字节验收，相关记录显示未测，不计为产品失败。',
     },
+    'web_media': {
+        'flow': ['请求媒体网页', '定位指定资源或信息', '提取地址或文字', '交付题目要求的结果'],
+        'flow_note': '16 道题只要求网页中的资源地址，另 1 道题要求视频页标题与发布者；这组不下载媒体文件。',
+        'meaning': '从网页中找到指定图片、视频资源或视频入口地址，或读取视频页登记的文字信息。这里测的是网页取数，不是图片或视频理解。',
+        'example': '含图页面须返回登记的图片地址；视频信息页须返回标题与发布者。拿到地址不代表已经取得对应文件。',
+        'case_id': 'image-01',
+        'boundary': '地址题只核对目标地址，文字题只核对登记信息；不检查画面、字幕、声音，也不要求下载媒体字节。',
+    },
+    'media_file': {
+        'flow': ['请求直接文件地址', '接收响应字节', '识别文件格式', '核对长度与 SHA-256'],
+        'flow_note': '输入直接指向图片或视频文件，评测对象是返回的原始字节，不进行 Markdown 转换。',
+        'meaning': '取得直接媒体文件。必须返回可验证的图片或视频字节；复述网址、返回文件名或网页文字都不能代替文件。',
+        'example': '直接 PNG 地址须交付与独立保存样本一致的文件格式、长度和 SHA-256；只返回该 PNG 的网址不通过。',
+        'case_id': 'image-10',
+        'boundary': '这组只验证文件交付，不测试图片描述、视频理解、语音转写或字幕质量。',
+    },
 }
 
 
@@ -154,14 +170,17 @@ def task_pass_guide(track, base='', cases=None):
         'document': '文档正文采用与网页相同的文字验收规则：请求、最低长度、全部核对点及错误页检查满足；不是只拿到下载链接。F1 另算，不作为通过门槛。',
         'image': '含图页面须在实际返回值中找齐指定图片地址；直接 PNG 须交付文件字节并通过格式、长度与目标 SHA-256 验收。',
         'video': '按案例区分：找齐播放入口、核对标题与发布者，或交付通过格式、长度与目标 SHA-256 验收的原文件。链接不等于文件，均不测画面理解。',
+        'web_media': '输入是网页，共 17 题：16 题返回指定图片、视频或视频入口地址，1 题返回视频页登记的文字信息。地址题不下载媒体文件；文字题也不据此推断已取得视频字节。',
+        'media_file': '输入直接指向媒体文件，共 3 题：必须取得原始字节，并通过格式特征、长度与目标 SHA-256 验收。只复述输入网址不通过，也不要求把二进制内容转换成 Markdown。',
         'challenge': '请求成功，取得至少 3 条具名详情链接，字段完整、类型正确、条目不重复，链接符合目标站点规则；有独立内容证据的稳定标题、栏目、说明还须命中。频繁变化的名单和价格不固定旧值。通过表示满足上述取数要求，不证明变化值真实或最新。',
-        'risk_control': '请求成功并取得指定目标页面；全部稳定文字、正文分区和组合规则均须满足。文章不能只返回标题或开头，列表须达到登记的字段、真实链接、路径、去重和数量要求；验证页、空返回和页面外壳均不通过。',
+        'risk_control': '请求成功并取得指定目标页面；正文分区、组合规则和登记为必需的稳定文字均须满足。登记为诊断的稳定文字只帮助核对抓取范围，不影响是否通过。文章不能只返回标题或开头，列表须达到登记的字段、真实链接、路径、去重和数量要求；验证页、空返回和页面外壳均不通过。',
     }
     text = rules.get(track, '按案例中登记的验收规则逐项检查。')
     coverage=[c['body_requirements'] for c in (cases or {}).values() if c.get('body_requirements')]
     if coverage:
-        thresholds=' / '.join(f'{v:.0%}' for v in sorted({r['minimum_coverage'] for r in coverage}))
-        text+=f' 已登记正文覆盖规则的案例，还须在最多 {max(len(r["regions"]) for r in coverage)} 个参考区域中逐区达到 {thresholds} 词语计数覆盖，不能只返回标题或开头。'
+        text+=' 已登记正文覆盖规则的案例，按各例指定的比较单位、区域门槛和通过区域数验收，不能只返回标题或开头。'
+        if any(r.get('unit')=='region_compact_hexagram_recall' for r in coverage):
+            text+=' 字符六元组规则忽略排版空白，保留文字顺序；各区域的要求见题目详情。'
     for c in (cases or {}).values():
         fields=c.get('acceptance_contract',{}).get('field_minimum_records',{})
         if fields:
@@ -213,20 +232,20 @@ def examples():
         ('document','文档正文',[
             ('任务','以 Attention Is All You Need PDF 为例，读取整篇论文；另测 DOCX、TXT 和嵌入文档页面。'),
             ('标准答案','从原始文件全部页面、段落和表格独立提取正文，并保存原文件。'),
-            ('怎么测','输入原始文档 URL。方法能直接返回正文时直接使用；只返回 PDF、DOCX 等原始字节时，在同一计时预算内本地解析。取得可读正文后停表，再对照全文计算完整度、纯净度与 F1，并检查标题、核心术语及章节。'),
+            ('怎么测','输入原始文档 URL，直接使用参评浏览器官方接口返回的正文。只返回 PDF、DOCX 等原始字节时，本题不通过；评测端不再替它解析。取得可读正文后停表，再对照全文计算完整度、纯净度与 F1，并检查标题、核心术语及章节。'),
             ('怎样算通过','必须返回文档正文，只返回论文下载地址不通过。<a href="../datasets/document-01.html">查看本例完整参考与逐方法结果 →</a>'),
         ]),
-        ('image','图片获取',[
-            ('任务','以 MDN 响应式图片页为例，找到指定正文图片；输入直接 PNG 时交付图片文件。'),
-            ('标准答案','含图页使用从源页保存的图片地址清单；直接图片使用原文件与校验值。'),
-            ('怎么测','逐项匹配允许的图片地址；直接文件核对实际字节的格式特征、长度与目标 SHA-256。'),
-            ('怎样算通过','找齐指定入口，或实际返回文件；只复述 PNG 地址不算取得文件。本榜不测“看懂图片”。<a href="../datasets/image-01.html">查看图片参考与结果 →</a>'),
+        ('web_media','网页内嵌媒体',[
+            ('任务','输入网页，从页面里找到指定图片、视频或视频入口地址；另有 1 题读取视频页标题与发布者。'),
+            ('标准答案','16 道地址题使用独立保存的资源地址或地址规则；1 道文字题使用可见标题与发布者。'),
+            ('怎么测','地址题只核对返回值里是否出现目标地址，不要求另行下载媒体文件；文字题按登记事实核对。'),
+            ('怎样算通过','完成该题声明的地址或文字交付。拿到地址不等于取得文件，也不表示理解了图片、画面、字幕或声音。<a href="../datasets/image-01.html">查看网页媒体参考与结果 →</a>'),
         ]),
-        ('video','视频获取',[
-            ('任务','找到网页中的播放入口、交付直接视频文件，或读取标题与发布者。'),
-            ('标准答案','分别保存源页播放地址、原视频文件或可见标题与发布者，三种任务分开核对。'),
-            ('怎么测','例如 MDN 视频页匹配目标播放地址；信息页核对文字事实；直接 MP4 核对实际字节的格式特征、长度与目标 SHA-256。'),
-            ('怎样算通过','完成指定任务；找到播放地址不等于拿到视频，更不等于能识别画面或字幕。<a href="../datasets/video-01.html">查看视频参考与结果 →</a>'),
+        ('media_file','直接媒体文件',[
+            ('任务','输入 1 个直接图片地址或 2 个直接视频地址，取得原始文件。'),
+            ('标准答案','独立保存的原文件格式、长度和 SHA-256。'),
+            ('怎么测','核对实际返回字节的格式特征、长度和目标 SHA-256；不对二进制文件做 Markdown 转换。'),
+            ('怎样算通过','必须实际交付匹配的文件字节；复述输入网址或只返回网页文字不通过。本组不测试媒体理解。<a href="../datasets/image-10.html">查看原始文件参考与结果 →</a>'),
         ]),
         ('challenge','热门网站正文',[
             ('任务','以 JustWatch 为例取得声明数量的不同剧集及名称、详情入口；任务结果与耗时进入热门网站主表。缺少完整参考只影响全文指标，不隐藏任务结果。'),
@@ -234,24 +253,24 @@ def examples():
             ('结构怎么测','至少 3 个有名称的本站详情链接，按地址去重。仅网址、导航按钮和登录提示不计入；频繁变化的条目名称、名次、价格或 ID 不固定为旧快照取值，不免除登记的稳定内容核对。'),
             ('怎样算通过','稳定内容锚点与必需字段、类型、唯一性和数量全部通过。通过不证明变化值的事实准确性或实时性；缺少完整、可比的参考时完整度、纯净度和 F1 为 —。<a href="../datasets/challenge-10-justwatch.html">查看参考与实测 →</a>'),
         ]),
-        ('risk_control','历史访问受限网址内容',[
+        ('risk_control','风控网页正文',[
             ('任务','打开指定网址，取得首次自动加载出的目标正文、列表和真实链接，不进行点击、输入、滚动、翻页或登录。'),
-            ('核对依据','按独立保存的目标页面证据登记稳定文字、完整正文分区，以及名称—链接、路径、字段、去重和数量要求。'),
-            ('怎么测','先排除请求失败、空返回、验证或拦截页面和页面外壳，再逐项检查本例声明的稳定文字、正文覆盖与组合规则。'),
-            ('怎样算通过','本例登记的全部规则均通过；文章只返回标题或开头、列表数量不足、链接不符合真实路径，均不通过。'),
+            ('核对依据','按独立保存的目标页面证据登记稳定文字、完整正文分区，以及名称—链接、路径、字段、去重和数量要求。稳定文字会明确标为必需或诊断。'),
+            ('怎么测','先排除请求失败、空返回、验证或拦截页面和页面外壳，再逐项检查本例声明的稳定文字、正文覆盖与组合规则；诊断文字只显示命中情况。'),
+            ('怎样算通过','正文与列表规则及标为必需的稳定文字均通过；诊断文字不影响结论。文章只返回标题或开头、列表数量不足、链接不符合真实路径，均不通过。'),
         ]),
     ]
-    order = ['web', 'dynamic', 'challenge', 'risk_control', 'document', 'image', 'video']
+    order = ['web', 'dynamic', 'challenge', 'risk_control', 'document', 'web_media', 'media_file']
     items.sort(key=lambda item: order.index(item[0]))
     return tabs('task-examples',[(k,l,cards(c)) for k,l,c in items])
 
 
 def task_contract_guide():
     return cards([
-        ('任务契约','按声明范围同时核对稳定内容锚点（稳定标题、栏目、说明）和条目数量、必需字段、唯一性和字段类型，不是只检查数量。频繁变化的名单、条目标题、价格和名次只按声明的结构、类型与数量核验，不固定旧快照取值；这不等于证明这些变化值真实或最新。'),
-        ('结果与规则绑定','任务结果对应已登记的内容锚点、字段要求与数量范围；保留原始输出及评分规则，便于逐项复核。'),
+        ('任务契约','按声明范围核对稳定内容锚点（稳定标题、栏目、说明）和条目数量、必需字段、唯一性和字段类型。锚点会明确标为必需或诊断：必需锚点参与验收，诊断锚点只核对抓取范围。频繁变化的名单、条目标题、价格和名次只按声明的结构、类型与数量核验，不固定旧快照取值；这不等于证明这些变化值真实或最新。'),
+        ('结果与规则绑定','任务结果对应已登记的必需锚点、字段要求与数量范围；诊断锚点另行展示。保留原始输出及评分规则，便于逐项复核。'),
         ('完整性与模式','原始输出哈希和证据完整性检查保留。已验证的 stable_contract 按数据不变量验收，不依赖快照时效；exact_snapshot 模式仍可按其协议检查参考。两种模式不能混用，也不声称所有调用满足同一采集窗口。'),
-        ('全文诊断独立','完整度、纯净度与 F1 必须有完整参考，且与输出的目标范围和内容具有可比性；不能用条目数量推算全文 F1。缺少完整、可比的参考显示 —（全文指标未评测），任务通过率和耗时仍保留。稳定内容锚点仍用于任务验收；文本重合不证明变化值的事实准确性或实时性，名单变化本身不使稳定任务契约过期。'),
+        ('全文诊断独立','完整度、纯净度与 F1 必须有完整参考，且与输出的目标范围和内容具有可比性；不能用条目数量推算全文 F1。缺少完整、可比的参考显示 —（全文指标未评测），任务通过率和耗时仍保留。标为必需的稳定内容锚点参与验收；诊断锚点只核对抓取范围。文本重合不证明变化值的事实准确性或实时性，名单变化本身不使稳定任务契约过期。'),
     ])
 
 
@@ -272,7 +291,7 @@ def list_rule_description(c):
     'quote':'引文列表', 'product':'商品列表', 'catalog_product':'商品目录',
     'review':'评论列表', 'name_description':'名称与说明', 'api_operation':'接口摘要',
     'taxonomy_family':'科名列表', 'named_link':'具名详情入口',
-    'linked_product':'具名商品详情', 'page_identity':'页面身份',
+    'linked_product':'具名商品详情', 'page_identity':'目标页面核对',
 }
 FIELD_REQUIREMENTS = {
     'magnitude':('震级','有效的数字震级，不固定某次地震的数值。'),
@@ -326,10 +345,13 @@ def task_instruction(c):
 def stable_rule_description(c):
     contract = c['acceptance_contract']
     if contract['schema'] == 'body_text':
-        return ('页面正文按登记的稳定文字锚点核验；新闻、日期、轮播卡片、仓库状态等'
+        role = contract.get('stable_text_role', 'required')
+        anchor_rule = ('稳定文字只用于核对抓取范围，不影响是否通过；'
+                       if role == 'diagnostic' else '登记的稳定文字必须命中；')
+        return ('页面正文按登记的正文规则核验；'+anchor_rule+'新闻、日期、轮播卡片、仓库状态等'
                 '易变内容不固定为答案。历史完整快照只作诊断，不进入全文质量汇总。')
     if contract['schema'] == 'page_identity':
-        return '页面身份：所有独立登记的稳定文字组均须命中；不声明或虚构条目数量。'
+        return '目标页面核对：指定的稳定文字组都须命中；不要求页面包含固定条目数。'
     maximum = contract.get('maximum_records')
     limit = f'至少 {contract["minimum_records"]} 条' + (f'，最多 {maximum} 条' if maximum is not None else '')
     return (f'{SCHEMA_LABELS.get(contract["schema"], contract["schema"])}：{limit}完整且唯一的记录。'
@@ -337,7 +359,7 @@ def stable_rule_description(c):
             '频繁变化的名单和价格不固定旧快照取值；通过不证明这些变化值真实或最新。')
 
 
-def stable_contract_details(c):
+def stable_contract_details(c, *, evidence_root=None):
     from .stable_tasks import SCHEMA_FIELDS, UNIQUE_FIELDS
     contract = c['acceptance_contract']
     schema = contract['schema']
@@ -374,11 +396,16 @@ def stable_contract_details(c):
                   or c.get('source_benchmark',{}).get('stable_annotation',{}))
     evidence = ((c.get('stable_text_evidence') or {}).get('path')
                 or annotation.get('anchor_evidence'))
+    if evidence and evidence_root is not None and not (evidence_root/evidence).is_file():
+        evidence = None
     provenance = ('<p>独立文字依据：<a href="../'+escape(evidence,quote=True)+'">查看限定范围原文</a>。'
-        '这些核对项验证文字是否保留，不证明整页正文完整，也不以榜单当前成员为答案。</p>') if evidence else ('<p>本例未登记稳定文字依据；文字核对覆盖不计算，已执行的列表规则与结果仍保留。</p>' if annotation else '')
+        '这些核对项验证文字是否保留，不证明整页正文完整，也不以榜单当前成员为答案。</p>') if evidence else ('<p>固定文字核对项见下方；本报告未附早期标注的原始页面文件。</p>' if annotation and anchors else '<p>本例未登记稳定文字依据；文字核对覆盖不计算，已执行的列表规则与结果仍保留。</p>' if annotation else '')
+    anchors_required = contract.get('stable_text_role', 'required') != 'diagnostic'
+    anchor_note = ('每组至少命中一种允许表达，所有组均须通过。' if anchors_required else
+                   '这些文字只用于核对抓取范围；未命中不会使任务失败。')
     return ('<p>'+escape(stable_rule_description(c))+'</p>'+requirements
             + provenance
-            + ('<h3>稳定文本锚点</h3><p>每组至少命中一种允许表达，所有组均须通过。</p><ul>'+anchors+'</ul>' if anchors else '')
+            + ('<h3>稳定文本锚点</h3><p>'+anchor_note+'</p><ul>'+anchors+'</ul>' if anchors else '')
             + ('<h3>页面模式</h3><p>以下模式均须匹配。</p><ul>'+patterns+'</ul>' if patterns else ''))
 
 
diff --git a/harness/web_fetch/report_diagnostic.py b/harness/web_fetch/report_diagnostic.py
index 8d8c32bc3..0c6592711 100644
--- a/harness/web_fetch/report_diagnostic.py
+++ b/harness/web_fetch/report_diagnostic.py
@@ -260,9 +260,8 @@ def add(kind, label, expected, actual):
         add('truncated', '输出声明被截断', '完整的任务内容', '；'.join(metrics['declared_truncation_hits']))
     if metrics.get('script_payload_shell'):
         add('shell', '只有脚本或页面框架', '目标正文', '保存评分识别到脚本或空框架')
-    if metrics.get('page_identity_status') in ('mismatch', 'unknown', 'not_verified') or any(
-            k in str(row.get('failure', '')) for k in ('page_identity_not_verified', 'page_identity_mismatch')):
-        add('identity', '页面身份未满足要求', '最终网址和页面语言符合任务',
+    if metrics.get('page_identity_status') == 'mismatch':
+        add('identity', '页面身份诊断（不参与通过判定）', '仅供核对访问路径，无通过要求',
             '最终网址：' + str(log.get('final_url') or '记录未提供') + '；页面语言：' + str(metrics.get('observed_document_language') or log.get('document_language') or '记录未提供'))
     for check in metrics.get('stable_anchor_results') or []:
         if check.get('pass') is False:
diff --git a/harness/web_fetch/report_explainer.py b/harness/web_fetch/report_explainer.py
index 1280be6fd..efd1623e9 100644
--- a/harness/web_fetch/report_explainer.py
+++ b/harness/web_fetch/report_explainer.py
@@ -2,6 +2,7 @@
 import base64
 import hashlib
 import json
+import re
 import statistics
 from collections import Counter
 from datetime import datetime, timezone
@@ -13,20 +14,22 @@
 from harness.record_io import parse_jsonl
 from harness.web_fetch.reference_inputs import read_dataset_bytes
 
-from .metrics import percentile, task_passed
 from .report_resources import render_resource_comparison
+from .metrics import task_passed, percentile
+from .methods import is_browser_comparison, with_measured_method_labels
+from .scoring import score_attempt
 from .report_style import STYLE
 from .safety import contained_path, safe_identifier
-from .scoring import score_attempt
 
 TITLE = '网页抓取成功之后，内容离可用还有多远'
-HEADLESS_TITLE = '五类浏览器、七种方法取同一批网页：速度、正文与交付边界'
+HEADLESS_TITLE = '五类浏览器、六种配置、七类任务：正文、媒体与交付边界'
 from .publication_target import public_report_url
 
 ROOT = Path(__file__).resolve().parents[2]
 TEMPLATE = Path(__file__).parent / 'templates/interpretation.html'
-TRACK_NAMES = {'web': '静态网站正文', 'document': '文档文字', 'image': '图片',
-               'video': '视频', 'challenge': '热门网站正文', 'dynamic': '动态网站正文'}
+from .models import REPORT_FAMILIES as BROWSER_FAMILY_NAMES, report_family
+from .report import TRACKS as TRACK_NAMES
+
 PROVIDER_NAMES = {'cowagent-built-in': 'CowAgent', 'moli-webfetch': 'Moli',
                   'cloudflare-markdown': 'Cloudflare Markdown', 'exa': 'Exa',
                   'langchain-webbase': 'LangChain WebBaseLoader', 'firecrawl': 'Firecrawl',
@@ -34,8 +37,14 @@
                   'deepseek-harness-built-in': 'DeepSeek Harness', 'tavily': 'Tavily',
                   'lexmount-global': 'Lexmount 国际', 'lexmount-cn': 'Lexmount 中国区',
                   'moli-1.0.6': 'Moli 1.0.6', 'moli': 'Moli 1.1.5',
+                  'moli-pr919': 'Moli 历史方法标识',
                   'moli-1.1.3': 'Moli 1.1.3', 'moli-1.1.11': 'Moli 1.1.11'}
 
+def provider_name(name, fallback):
+    from .methods import measured_method_label
+    return measured_method_label(name, PROVIDER_NAMES.get(name, fallback))
+
+
 METHODOLOGY_FIGURES = (
     ('annotation', '混合标注：稳定文字、易变字段与全文参考',
      '页面中稳定标题、栏目与说明作为内容核对点；变化条目检查数量、字段类型和结构；全文参考单独声明范围。',
@@ -301,7 +310,7 @@ def num(value):
 
     if speed.get('schema_version', 1) == 1:
         table = _table(['方法', '共同成功样本', 'P50 ms', '样本 P95 ms'], [
-            (escape(PROVIDER_NAMES.get(row['provider'], row['provider'])),
+            (escape(provider_name(row['provider'], row['provider'])),
              str(row['attempts']), num(row['p50_ms']), num(row['p95_ms']))
             for row in rows],
             f'同窗速度子集：预先声明 {len(planned_cases)} 题，{provider_count} 种方法共同通过 '
@@ -318,7 +327,7 @@ def num(value):
     table = _table(
         ['方法', '计划调用', '任务通过', '通过率', '全调用 P50 ms', '全调用 P95 ms',
          '通过调用 P50 ms', '通过调用 P95 ms'], [
-            (escape(PROVIDER_NAMES.get(row['provider'], row['provider'])),
+            (escape(provider_name(row['provider'], row['provider'])),
              str(row['planned_attempts']), str(row['successful_attempts']),
              _percent(row['task_pass_rate']), num(row['all_calls_p50_ms']),
              num(row['all_calls_p95_ms']), num(row['successful_calls_p50_ms']),
@@ -433,7 +442,7 @@ def _dynamic_section(data, cases):
     if sample:
         stats = scope['providers'][sample['provider']]
         metrics = sample['metrics']
-        mechanism += (f'<p>{escape(PROVIDER_NAMES.get(sample["provider"], sample["provider"]))} 在动态网站正文中通过 '
+        mechanism += (f'<p>{escape(provider_name(sample["provider"], sample["provider"]))} 在动态网站正文中通过 '
             f'{stats["task_pass"]}/{stats["records"]}，平均 F1 却为 {_percent(stats["mean_f1"])}。'
             f'其中{_attempt(sample, cases[sample["case_id"]]["name"])}的 F1 为 {_percent(metrics["word_f1"])}，'
             '但没有满足该例任务规则。'
@@ -459,7 +468,7 @@ def _dynamic_section(data, cases):
 
 
 def _is_headless_comparison(records):
-    return bool(records) and all(r.get('provider_type') in {'headless_html','headless_markdown'} for r in records)
+    return is_browser_comparison(records)
 
 
 def article_title(records):
@@ -480,7 +489,12 @@ def passed(r):
             'independent_result_audit': None, 'chromium_markdown_selection': selection}
     for name in names:
         meta = next(r['provider_metadata'] for r in records if r['provider']==name)
-        data['runtime'][name] = {k:v for k,v in meta.items() if k in ('binary_sha256','browser_version','worker_sha256','extractor_version','playwright_version','deployment','wait_until')}
+        data['runtime'][name] = {k:v for k,v in meta.items() if k in (
+            'binary_sha256', 'browser_version', 'worker_sha256',
+            'extractor_version', 'playwright_version', 'deployment',
+            'wait_until', 'dns_mode', 'dns_endpoint', 'secure_dns_mode',
+            'system_dns_fallback', 'native_dns_binding',
+        )}
         text_rows=[r for r in records if r['provider']==name and cases[r['case_id']].get('track','web')=='web' and r['metrics'].get('word_f1') is not None]
         data['quality'][name]={'attempts':len(text_rows), **{key:_mean([r['metrics'].get(key) for r in text_rows]) for key in ('word_precision','word_recall','word_f1')}}
     for r in records:
@@ -524,11 +538,16 @@ def passed(r):
 def _headless_article_input(cases, records, providers):
     """Bind measured article inputs while ignoring report-only annotations."""
     derived_fields = {'diagnosis', 'failure_category', 'title_quality'}
+    def measured_record(record):
+        result = {key: value for key, value in record.items() if key not in derived_fields}
+        if 'provider_metadata' in result:
+            result['provider_metadata'] = {key: value for key, value in result['provider_metadata'].items()
+                if key != 'local_report_complete_diagnostic_links'}
+        return result
     return {
         'cases': cases,
         'records': sorted(
-            [{key: value for key, value in record.items() if key not in derived_fields}
-             for record in records if record['provider'] in providers],
+            [measured_record(record) for record in records if record['provider'] in providers],
             key=lambda record: record['attempt_id']),
     }
 
@@ -594,7 +613,7 @@ def _render_article_speed(population):
         best, top = min(value for _, value in values), max(value for _, value in values)
         html += f'<div class="m-speed-column"><h4>{title}</h4><p>{explanation}</p>'
         for provider, value in values:
-            label = escape(PROVIDER_NAMES.get(provider, provider.title()))
+            label = escape(provider_name(provider, provider.title()))
             html += (f'<div class="m-speed-row"><span>{label}</span><b>{value/1000:.2f} s</b>'
                      '<div class="m-speed-track">'
                      f'<i class="{"best" if value == best else ""}" style="width:{value/top*100:.3f}%"></i>'
@@ -607,6 +626,7 @@ def _render_article_resources(summary, selected):
     if summary is None:
         return ('<p>当前证据没有独立的客户端资源测量；本文不从耗时反推 CPU 或内存。</p>',
                 '资源指标待独立同题测量后补充。')
+    selected = summary.get('providers', selected)
     rendered, result = render_resource_comparison(summary, selected)
     interpretation = (
         f'{result["winner_label"]} 是本轮资源效率领先者，在 '
@@ -641,7 +661,7 @@ def passed(r):
     pass_ids = {n: {cid for cid, r in rows[n].items() if passed(r)} for n in selected}
     totals = {n: len(pass_ids[n]) for n in selected}
     def label(n):
-        return escape(PROVIDER_NAMES.get(n, n.title()))
+        return escape(provider_name(n, n.title()))
     def bars(values, unit='', maximum=None):
         top = maximum or max(v for _, v in values) or 1
         return '<div class="m-bars">' + ''.join(
@@ -696,6 +716,7 @@ def bars(values, unit='', maximum=None):
                   for metric in ('mean_ms', 'p50_ms', 'p95_ms')}
     data['editorial']['chromium_latency_reduction_pct'] = reductions
     values = {
+        "article_style": "<style>" + (Path(__file__).parent / "templates/interpretation-headless.css").read_text() + "</style>",
         'time_window': escape(' 至 '.join(
             datetime.fromisoformat(t).astimezone(timezone.utc).strftime('%Y-%m-%d')
             for t in data['time_window'])),
@@ -718,7 +739,7 @@ def bars(values, unit='', maximum=None):
         'resources': resource_table,
         'resource_interpretation': escape(resource_interpretation),
         'resource_methodology': (
-            '<details class="m-details"><summary>资源指标怎样测</summary><p>资源数据来自四种本地方法的单独同题 cohort，不回填到历史正确率调用。每次调用启动一个受限的 Linux 客户端容器及独立网络；宿主控制器和容器启停不计入。CPU 与网络总量读取累计计数，内存与速率分位数按 50 ms 采样。</p><p>资源汇总只使用四种本地配置共同通过的任务，避免把快速失败或空输出当成节省资源。短于采样间隔的内存或速率峰值可能遗漏；Kitesurf 等远端服务的服务端 CPU、内存与上游流量不可观测，因而不进入资源表。</p></details>'
+            '<details class="m-details"><summary>资源指标怎样测</summary><p>资源数据来自四种本地方法的独立同题测量，不回填到历史通过率调用。每次调用启动一个受限的 Linux 客户端容器及独立网络；宿主控制器和容器启停不计入。CPU 与网络总量读取累计计数，内存与速率分位数按 50 ms 采样。</p><p>资源主表统计预先确定的全部任务，包括失败调用，并列出各方法的通过数；成功调用另作条件统计，共同通过的任务仅作诊断。短于采样间隔的内存或速率峰值可能遗漏；Kitesurf 等远端服务的服务端 CPU、内存与上游流量不可观测，因而不进入资源表。</p></details>'
             if resource_summary is not None else ''
         ),
         'pdf_chars': f'{pdf_chars:,}',
@@ -749,14 +770,991 @@ def bars(values, unit='', maximum=None):
     return body + '<aside id="evidence" class="m-downloads"><a href="article.html" download="moli-web-fetch.html">下载独立 HTML</a> · <a href="interpretation-evidence.json" download>本文计算明细</a></aside>'
 
 
+def load_browser_failure_review(out, cases, records, content):
+    """Validate a complete, current per-failure diagnosis independently of scoring."""
+    binding = content.get('failure_review')
+    if not binding:
+        if content.get('require_failure_review'):
+            raise ValueError('Browser interpretation requires a failure review')
+        return {}
+    path = contained_path(out, binding['path'], reject_symlinks=True)
+    if path.is_symlink():
+        raise ValueError('Failure review must not be a symlink')
+    raw = path.read_bytes()
+    if hashlib.sha256(raw).hexdigest() != binding['sha256']:
+        raise ValueError('Failure review hash mismatch')
+    review = json.loads(raw)
+    if review.get('schema') != 'webfetch_failure_review/1':
+        raise ValueError('Unsupported failure review schema')
+    result_path = contained_path(out, 'results.jsonl', reject_symlinks=True)
+    if review.get('results_sha256') != hashlib.sha256(result_path.read_bytes()).hexdigest():
+        raise ValueError('Failure review results binding is stale')
+    expected = {row['attempt_id']: row for row in records if not task_passed(
+        row['ok'], row['metrics'], cases[row['case_id']].get('task_kind', 'body'))}
+    failures = review.get('failures')
+    if not isinstance(failures, list):
+        raise ValueError('Failure review requires a failure list')
+    indexed, labels, evidence_digests = {}, {}, {}
+    for item in failures:
+        aid = item.get('attempt_id')
+        if aid in indexed:
+            raise ValueError('Duplicate failure review attempt')
+        row = expected.get(aid)
+        if row is None or any(item.get(key) != row[key] for key in ('provider', 'case_id')):
+            raise ValueError('Failure review contains a pass or mismatched identity')
+        category = item.get('category', '')
+        if not isinstance(category, str) or not re.fullmatch(r'[a-z][a-z0-9_]*', category):
+            raise ValueError('Failure review requires a stable root cause category')
+        for field in ('category_label', 'reason', 'remediation_status'):
+            if not isinstance(item.get(field), str) or not item[field].strip():
+                raise ValueError('Failure review is missing ' + field)
+        if category in labels and labels[category] != item['category_label']:
+            raise ValueError('Failure review category labels disagree')
+        labels[category] = item['category_label']
+        evidence = item.get('evidence_paths')
+        if not isinstance(evidence, list) or not evidence:
+            raise ValueError('Failure review requires direct evidence')
+        for binding in evidence:
+            if not isinstance(binding, dict) or not binding.get('path') or not binding.get('sha256'):
+                raise ValueError('Failure review evidence requires path and sha256')
+            evidence_path = contained_path(out, binding['path'], reject_symlinks=True)
+            if binding['path'] not in evidence_digests:
+                evidence_digests[binding['path']] = hashlib.sha256(evidence_path.read_bytes()).hexdigest()
+            if evidence_digests[binding['path']] != binding['sha256']:
+                raise ValueError('Failure review evidence hash mismatch')
+        indexed[aid] = item
+    if set(indexed) != set(expected):
+        raise ValueError('Failure review must cover every failed result exactly once')
+    return indexed
+
+
+def browser_example_evidence(out, case, row, *, focus=None, reference_focus=None):
+    """Project saved scoring evidence for a compact example; never rescore outputs."""
+    from .report_components import task_instruction
+    m = row['metrics']
+    def text(value):
+        if isinstance(value, str): return value
+        if isinstance(value, bool): return '是' if value else '否'
+        if isinstance(value, list): return ' / '.join(text(item) for item in value) or '未命中'
+        return json.dumps(value, ensure_ascii=False, sort_keys=True)
+    reference = case.get('ground_truth_main_content') or case.get('reference_answer')
+    requirements = {key:case[key] for key in (
+        'required_facts','min_content_chars','body_requirements','acceptance_contract',
+        'composite_acceptance','expected_resources','resource_output_contract','expected_files') if case.get(key) is not None}
+    expected = task_instruction(case)+'\n\n'+(str(reference) if reference else text(requirements))
+    delivered_chars = None
+    if case.get('task_kind') == 'file':
+        files = (row.get('provider_metadata') or {}).get('file_evaluation', {}).get('files', [])
+        actual = text([{
+            key:item[key] for key in ('mime','bytes','sha256','pass','error') if key in item
+        } for item in files]) if files else '本次未交付可校验的原始文件字节。'
+    else:
+        raw = contained_path(out, row['artifact_path'], reject_symlinks=True).read_bytes()
+        delivered_chars = len(raw.decode('utf-8', errors='replace'))
+        # Body/document/resource artifacts are scored text, never a PDF/media payload.
+        if raw.startswith((b'%PDF-', b'PK\x03\x04', b'\x89PNG', b'\xff\xd8\xff')) or b'\x00' in raw[:1024]:
+            actual = '本次返回二进制响应，没有形成可供该题验收的正文。'
+        else:
+            actual = raw.decode('utf-8', errors='replace') or '本次没有返回内容。'
+    checks = []
+    def add(key, title, expected, actual, verdict):
+        checks.append({'key':key,'label':title,'expected':text(expected),'actual':text(actual),
+                       'verdict':'通过' if verdict is True else '未通过' if verdict is False else '未记录'})
+    add('request','请求完成','成功返回','成功返回' if row['ok'] else '未成功返回',bool(row['ok']))
+    if 'length_pass' in m:
+        add('length','正文长度',('至少 '+str(case['min_content_chars'])+' 字符') if 'min_content_chars' in case else '题目登记的最小长度',str(m.get('content_chars','未记录'))+' 字符',m['length_pass'])
+    for field,title in [('fact_results','事实组'),('stable_anchor_results','稳定文字'),
+                        ('pattern_results','字段模式'),('stable_page_pattern_results','页面模式'),
+                        ('body_region_results','正文分段'),('stable_field_results','记录字段'),
+                        ('resource_results','目标资源'),('composite_group_results','组合规则')]:
+        for index,item in enumerate(m.get(field, []),1):
+            target = item.get('alternatives', item.get('minimum', item.get('pattern', item.get('expected'))))
+            observed = item.get('matched', item.get('count', item.get('actual')))
+            if field == 'body_region_results':
+                rule=case.get('body_requirements') or {}
+                target=('本区至少 '+format(rule['minimum_floor'],'.0%')+'；' if 'minimum_floor' in rule else '')
+                target+=('至少 '+str(m.get('body_required_target_regions',1))+' 区达到 '+format(rule['minimum_coverage'],'.0%')) if 'minimum_coverage' in rule else '满足本区登记的覆盖要求'
+                observed=format(item['coverage'],'.1%') if item.get('coverage') is not None else '未记录覆盖率'
+                if item.get('reference_fragments') is not None:
+                    observed+='（命中 '+str(item.get('matched_fragments',0))+'/'+str(item['reference_fragments'])+' 个参考片段）'
+            elif field == 'resource_results':
+                target = next((value for value in case.get('expected_resources', []) if value.get('id') == item.get('id')), item.get('id'))
+                observed = {key:value for key,value in item.items() if key not in {'pass','id'}}
+            elif field == 'composite_group_results':
+                target = next((value for value in (case.get('composite_acceptance') or {}).get('groups', []) if value.get('id') == item.get('id')), item.get('id'))
+                observed = {key:value for key,value in item.items() if key not in {'pass','id'}}
+            add(field+'_'+str(index),title+' '+str(item.get('id',item.get('field',index))),
+                target if target is not None else '满足本题登记要求',
+                observed if observed is not None else {key:value for key,value in item.items() if key not in {'pass','id'}},
+                item.get('target_pass',item.get('pass')))
+    if 'stable_unique_record_count' in m:
+        add('records','完整且唯一的记录数',m.get('stable_minimum_records'),m['stable_unique_record_count'],m.get('stable_structure_pass'))
+    for field,title in [('body_coverage_pass','正文覆盖'),('stable_content_pass','稳定内容'),
+                        ('list_task_pass','列表结构'),('raw_file_pass','原始文件格式、长度与哈希'),
+                        ('resource_pass','媒体地址交付')]:
+        if field in m:
+            add(field,title,'满足本题登记要求',m[field],m[field])
+    accepted = task_passed(row['ok'],m,case.get('task_kind','body'))
+    add('task','最终任务判定','满足完整验收规则',accepted,accepted)
+    # Prefer frozen rule evidence and corresponding body paragraphs to navigation.
+    facts=case.get('required_facts') or []
+    if facts:
+        expected=task_instruction(case)+'\n\n必需内容：\n'+'\n'.join(text(fact.get('any',fact.get('alternatives',fact))) for fact in facts)+'\n\n'+str(reference or '')
+    if case.get('acceptance_contract'):
+        contract=case['acceptance_contract']
+        labels={'body_text':'稳定正文','named_link':'带名称的目标链接记录','table':'表格','quote':'名言记录','taxonomy_family':'龟科目录'}
+        requirements=[task_instruction(case),'验收内容：'+labels.get(contract.get('schema'),str(contract.get('schema')))]
+        if contract.get('minimum_records'):
+            requirements.append('完整且唯一的记录至少 '+str(contract['minimum_records'])+' 条。')
+        if contract.get('entry_path'):
+            requirements.append('目标记录链接格式：'+contract['entry_path'])
+        anchors=contract.get('stable_text_anchors') or []
+        if anchors:
+            requirements.append('必需的可见文字（节选）：'+ '；'.join(' / '.join(item.get('alternatives') or []) for item in anchors[:8]))
+        if contract.get('required_fields'):
+            requirements.append('每条记录必需字段：'+text(contract['required_fields']))
+        if reference:
+            requirements.append('冻结要求节选：\n'+str(reference)[:1500])
+        expected='\n\n'.join(requirements)
+    full_actual_chars=len(actual) if delivered_chars is None else delivered_chars
+    if focus:
+        if not isinstance(focus,str) or focus not in actual:
+            raise ValueError('Browser example focus is absent from measured output')
+        start=actual.index(focus)
+        actual=actual[start:start+3600]
+    else:
+        urls=[url for item in m.get('resource_results',[]) for url in item.get('matched_urls',[])]
+        located=next((actual.index(url) for url in urls if url in actual),None)
+        if located is not None:
+            start=actual.rfind('\n',0,located)+1
+            actual=actual[max(start,located-500):located+2500]
+        elif len(actual)>3600:
+            paragraphs=actual.split('\n\n')
+            substantive=[part for part in paragraphs if len(part)>100 and sum(len(link) for link in re.findall(r'\[[^\]]*\]\([^)]*\)',part))<len(part)*0.7]
+            if substantive:
+                actual='\n\n[…节选…]\n\n'.join(substantive[:5])[:3600]
+    actual=re.sub(r'data:image/[^;,)\s]+;base64,[A-Za-z0-9+/=]+','[内嵌图片字节省略，完整输出保留]',actual)
+    reference_text=str(reference or '')
+    if reference_focus:
+        if not isinstance(reference_focus,str) or reference_focus not in reference_text:
+            raise ValueError('Browser example reference focus is absent from the frozen reference')
+        reference_text=reference_text[reference_text.index(reference_focus):]
+    return {'reference':reference_text[:650], 'reference_chars':len(str(reference or '')),
+            'expected':expected[:3600], 'actual':actual[:3600], 'checks':checks,
+            'expected_chars':len(expected), 'actual_chars':full_actual_chars,
+            'run_id':str(row.get('run_id') or row.get('attempt_id')), 'passed':accepted}
+
+
+def current_browser_article_model(out, cases, records, binding):
+    """Bind new cohort prose to measured inputs; derive every comparison value."""
+    path = contained_path(out, binding['path'])
+    raw = path.read_bytes()
+    if hashlib.sha256(raw).hexdigest() != binding['sha256']:
+        raise ValueError('Browser interpretation content hash mismatch')
+    content = json.loads(raw)
+    providers = sorted({row['provider'] for row in records})
+    if content.get('schema') != 'webfetch_browser_interpretation/1':
+        raise ValueError('Unsupported browser interpretation content schema')
+    if content.get('evidence_sha256') != _digest(_headless_article_input(cases, records, providers)):
+        raise ValueError('Browser interpretation evidence changed')
+    if set(content.get('providers', {})) != set(providers):
+        raise ValueError('Browser interpretation must explain every participant')
+    if not cases or not providers or any(report_family(c) not in BROWSER_FAMILY_NAMES for c in cases.values()):
+        raise ValueError('Browser interpretation requires supported nonempty task families')
+    expected = {(name, cid) for name in providers for cid in cases}
+    indexed = {(row['provider'], row['case_id']): row for row in records}
+    if len(indexed) != len(records) or set(indexed) != expected:
+        raise ValueError('Browser interpretation requires the complete declared matrix')
+    def passed(row):
+        return task_passed(row['ok'], row['metrics'], cases[row['case_id']].get('task_kind', 'body'))
+    def distribution(rows):
+        times = [row['elapsed_ms'] for row in rows]
+        return {'n': len(rows), 'mean': statistics.mean(times) if times else None,
+                'p50': statistics.median(times) if times else None,
+                'p95': percentile(times, .95) if times else None}
+    tracks = [track for track in BROWSER_FAMILY_NAMES if any(report_family(c) == track for c in cases.values())]
+    failure_review = load_browser_failure_review(out, cases, records, content)
+    from .report_components import comparable_body_reference
+    quality_cases=[cid for cid,case in cases.items() if report_family(case)=='web' and comparable_body_reference(case)]
+    figures = content.get('figures', [])
+    if not isinstance(figures, list):
+        raise ValueError('Browser figures must be a list')
+    for figure in figures:
+        image = contained_path(out, figure['path'], reject_symlinks=True)
+        if image.is_symlink() or hashlib.sha256(image.read_bytes()).hexdigest() != figure['sha256']:
+            raise ValueError('Browser figure hash mismatch')
+        if image.suffix.lower() not in {'.png', '.jpg', '.jpeg', '.webp'} or not all(
+                isinstance(figure.get(key), str) and figure[key].strip() for key in ('alt', 'caption')):
+            raise ValueError('Browser figure needs a raster asset, alt and caption')
+    examples = []
+    for item in content.get('case_examples', []):
+        row = indexed.get((item.get('provider'), item.get('case_id')))
+        if row is None or not isinstance(item.get('explanation'), str) or not item['explanation'].strip():
+            raise ValueError('Browser example requires a measured result and explanation')
+        examples.append({'row': row, 'explanation': item['explanation'],
+                         'evidence': browser_example_evidence(out,cases[row['case_id']],row,focus=item.get('focus'),reference_focus=item.get('reference_focus'))})
+    stats = {}
+    from .report_interfaces import method_provenance, method_version
+    provenance = method_provenance(out)
+    for name in providers:
+        rows = [indexed[name, cid] for cid in cases]
+        successes = [row for row in rows if passed(row)]
+        failures = [row for row in rows if not passed(row)]
+        chapter = content['providers'][name]
+        specimen = indexed.get((name, chapter.get('specimen_case_id')))
+        if specimen is None or (failures and passed(specimen)):
+            raise ValueError('Browser chapter requires an evidenced failure specimen when failures exist')
+        explanation = chapter.get('explanation')
+        if not isinstance(explanation, str) or not explanation.strip():
+            raise ValueError('Browser chapter requires a measured explanation')
+        versions = sorted({str(method_version(row,provenance) or '') for row in rows} - {''})
+        groups = {track: [row for row in rows if report_family(cases[row['case_id']]) == track] for track in tracks}
+        final_times=[]
+        physical_calls=0
+        for row in rows:
+            attempts=((row.get('provider_metadata') or {}).get('retry') or {}).get('attempts') or []
+            physical_calls+=len(attempts) or 1
+            final_times.append(attempts[-1]['elapsed_ms'] if attempts else row['elapsed_ms'])
+        quality_rows=[indexed[name,cid] for cid in quality_cases if indexed[name,cid]['metrics'].get('word_f1') is not None]
+        stats[name] = {'quality':{'n':len(quality_rows),'reference_cases':len(quality_cases),**{key:_mean(row['metrics'].get(key) for row in quality_rows) for key in ('word_recall','word_precision','word_f1')}}, 'version': ' / '.join(versions) if versions else '托管服务，内部版本未公开' if name == 'kitesurf' else '未提供版本',
+                       'passed': len(successes), 'pass_rate': len(successes)/len(cases),
+                       'tracks': {track: {'passed': sum(passed(row) for row in subset), 'n': len(subset)} for track,subset in groups.items()},
+                       'all': distribution(rows), 'successful': distribution(successes),
+                       'physical_calls':physical_calls, 'final_call_mean_ms':statistics.mean(final_times),
+                       'prior_call_mean_ms':statistics.mean(row['elapsed_ms'] for row in rows)-statistics.mean(final_times),
+                       'failure_counts': dict(Counter(row.get('error_type') or 'acceptance' for row in failures)),
+                       'reviewed_failure_counts': dict(Counter(failure_review[row['attempt_id']]['category'] for row in failures)) if failure_review else {},
+                       'failure_reviews': [failure_review[row['attempt_id']] for row in failures] if failure_review else [],
+                       'specimen': specimen}
+    for field in ('title', 'intro', 'scoring', 'conclusions'):
+        if not isinstance(content.get(field), str) or not content[field].strip():
+            raise ValueError('Browser interpretation is missing prose: ' + field)
+    tracks = [track for track in BROWSER_FAMILY_NAMES if any(report_family(c) == track for c in cases.values())]
+    return {'content': content, 'providers': providers, 'stats': stats, 'tracks': tracks,
+            'cases': len(cases), 'results': len(records), 'failure_review': failure_review,
+            'figures': figures, 'examples': examples}
+
+
+def _offline_browser_article(body, out, cases, model):
+    """Embed specimen evidence; an independent download needs no report host."""
+    from bs4 import BeautifulSoup
+    from .artifacts import record_public_call_log_bindings, verify_public_call_log
+    document = BeautifulSoup(body, 'html.parser')
+    for script in document.select('script'):
+        script.decompose()
+    targets = {}
+    appendices = []
+    def evidence(path, anchor, title, payload):
+        if path in targets:
+            return
+        targets[path] = '#'+anchor
+        appendices.append('<details class="wrap" id="'+escape(anchor)+'"><summary>'
+                          +escape(title)+'</summary>'+payload+'</details>')
+    for name in model['providers']:
+        row = model['stats'][name]['specimen']
+        case = cases[row['case_id']]
+        evidence('../datasets/'+case['id']+'.html', 'offline-task-'+case['id'],
+                 '任务与固定验收规则 · '+case['id'],
+                 '<pre>'+escape(json.dumps(case,ensure_ascii=False,indent=2))+'</pre>')
+        raw = contained_path(out,row['artifact_path']).read_text(encoding='utf-8',errors='replace')
+        payload = '<h3>完整实际返回</h3><pre data-standalone-output="'+escape(name)+'">'+escape(raw)+'</pre>'
+        payload += '<h3>结果与评分</h3><pre>'+escape(json.dumps({key:row[key] for key in ('attempt_id','provider','case_id','run_id','started_at','elapsed_ms','ok','status_code','error_type','metrics') if key in row},ensure_ascii=False,indent=2))+'</pre>'
+        for binding in record_public_call_log_bindings(row):
+            log = verify_public_call_log(out,binding).read_text()
+            payload += '<h3>调用日志</h3><pre>'+escape(log)+'</pre>'
+        evidence('../attempts/'+row['attempt_id']+'.html', 'offline-result-'+row['attempt_id'],
+                 '完整结果与调用证据 · '+name, payload)
+    for example in model.get('examples', []):
+        row = example['row']; case = cases[row['case_id']]
+        evidence('../datasets/'+case['id']+'.html', 'offline-task-'+case['id'],
+                 '任务与固定验收规则 · '+case['id'],
+                 '<pre>'+escape(json.dumps(case,ensure_ascii=False,indent=2))+'</pre>')
+        evidence('../attempts/'+row['attempt_id']+'.html', 'offline-result-'+row['attempt_id'],
+                 '实例返回与判定 · '+row['case_id'],
+                 '<p>'+escape(example['explanation'])+'</p><pre>'+escape(json.dumps(row,ensure_ascii=False,indent=2))+'</pre>')
+    referenced={anchor.get('href') for anchor in document.select('a[href]')}
+    for item in model.get('failure_review', {}).values():
+        target='../attempts/'+item['attempt_id']+'.html'
+        if target in referenced and target not in targets:
+            evidence(target,'offline-failure-'+item['attempt_id'],'失败原因 · '+item['case_id'],
+                     '<p>'+escape(item['category_label'])+'：'+escape(item['reason'])+'</p><p>'+escape(item['remediation_status'])+'</p>')
+    for route,title in (('../analysis/index.html','全部逐题结果'),('../methodology/index.html','评测方法'),('../adoption/index.html','方法介绍')):
+        evidence(route,'offline-'+route.split('/')[1],title,'<p>完整调用及逐题结果见报告的对应栏目；本文保留各类原因的代表证据。</p>')
+    for image in document.select('img[data-browser-figure]'):
+        relative = image['data-browser-figure']
+        suffix = Path(relative).suffix.lower()
+        mime = 'image/jpeg' if suffix in {'.jpg','.jpeg'} else 'image/'+suffix[1:]
+        image['src'] = 'data:'+mime+';base64,'+base64.b64encode(contained_path(out,relative).read_bytes()).decode('ascii')
+    if (out/'result-review.json').is_file():
+        review=json.loads((out/'result-review.json').read_text())
+        summary={key:review[key] for key in ('reviewed_attempts','total_attempts','expected_attempts','accepted_unreviewed_passes','disagreements','unresolved') if key in review}
+        evidence('../review/index.html','offline-review','独立审查范围',
+                 '<pre>'+escape(json.dumps(summary,ensure_ascii=False,indent=2))+'</pre>')
+    for anchor in document.select('a[href]'):
+        href = anchor['href']
+        if href in targets:
+            anchor['href'] = targets[href]
+        elif not href.startswith(('https://','http://','#')):
+            raise ValueError('Independent article has an unbound evidence target: '+href)
+    return str(document)+''.join(appendices)
+
+
+def _browser_network_rows(records, providers):
+    """Summarize recorded DNS routes without filling missing metadata."""
+    from .methods import browser_method_label, native_browser_engine
+    rows=[]
+    for provider in providers:
+        label=browser_method_label(provider)
+        if label==provider:label=provider.title()
+        if native_browser_engine(provider)=='kitesurf':
+            rows.append({'provider':provider,'mode':'service_network',
+                         'text':label+'在 Cloudflare Browser Run 托管网络中执行；本地 DNS 配置不适用于该服务。耗时包含云端部署位置和公网路径。'})
+            continue
+        selected=[row for row in records if row['provider']==provider]
+        metadata=[row.get('provider_metadata') or {} for row in selected]
+        modes=[str(meta['dns_mode']) for meta in metadata if meta.get('dns_mode')]
+        missing=len(metadata)-len(modes)
+        distinct=sorted(set(modes))
+        if not distinct:
+            mode='unknown'
+            text=label+'的调用记录未保存可核对的 DNS 模式；报告不把它推定为 public DoH。'
+        else:
+            mode=('partial:' if missing else '')+(','.join(distinct) if len(distinct)>1 else distinct[0])
+            counts=Counter(modes)
+            details='、'.join(name+' '+str(counts[name])+' 次' for name in distinct)
+            text=label+'的调用记录中，DNS 模式为 '+details
+            if missing:
+                text+='；另有 '+str(missing)+' 次没有可核对的 DNS 元数据'
+            text+='。'
+            if distinct==['public_doh']:
+                no_fallback=sum(meta.get('system_dns_fallback') is False for meta in metadata)
+                strict=sum(meta.get('secure_dns_mode') in {'secure','strict'} for meta in metadata)
+                if no_fallback:text+=' 其中 '+str(no_fallback)+' 次明确记录不回退系统 DNS。'
+                if strict:text+=' 其中 '+str(strict)+' 次由浏览器严格安全 DNS 配置执行。'
+                text+=' 统一解析策略不保证不同时间、地点或浏览器一定取得同一 IP。'
+        rows.append({'provider':provider,'mode':mode,'text':text})
+    return rows
+
+
+def _browser_error_excerpt(row, has_failures, *, reviewed_error=None):
+    error = str(reviewed_error or row.get('error_message') or (
+        '未满足完整验收规则；逐项期望与实际值见结果详情。' if has_failures else '满足该题验收规则。'))
+    if len(error) > 4000:
+        matches=list(re.finditer(r'(?im)^.*(?:panicked at|FATAL ERROR|fatal runtime error|WeakMap\.get|FINAL ERROR:|\bError:).*$',error))
+        fragments=[]
+        for match in (matches[:2]+matches[-2:]):
+            fragment=error[max(0,match.start()-80):min(len(error),match.end()+300)]
+            if fragment not in fragments:fragments.append(fragment)
+        excerpt=('\n[…节选…]\n'.join(fragment[:450] for fragment in fragments)+'\n[…结尾…]\n'+error[-1800:])[:4000] if fragments else error[-4000:]
+        return '错误过长，仅节选关键错误及结尾；完整错误和日志见结果详情。\n'+excerpt
+    return error
+
+
+
+def _browser_wait_summary(records, name):
+    labels={'done':'原生默认完成（done）','domstable':'DOM 稳定（domstable）',
+            'load':'文档加载完成（load）','networkidle2':'网络静默（networkidle2）',
+            'load + adaptive settle':'文档加载后自适应静默等待',
+            'automatic raw response':'自动原始响应',
+            'navigation response bytes':'导航响应字节',
+            'browser response bytes or completed native download':'响应字节或原生下载完成'}
+    waits=Counter(str((row.get('provider_metadata') or {}).get('wait_until') or '未记录')
+                  for row in records if row['provider']==name)
+    return '；'.join(labels.get(wait,wait)+'：'+str(count)+' 题' for wait,count in waits.items())
+
+
+def _browser_reviewed_error(out, model, row):
+    item=model['failure_review'].get(row['attempt_id'],{})
+    relative=item.get('error_excerpt_path')
+    if not relative:return None
+    if relative not in {binding['path'] for binding in item['evidence_paths']}:
+        raise ValueError('Program error excerpt has no verified evidence binding')
+    return contained_path(out,relative,reject_symlinks=True).read_text()
+
+
+@with_measured_method_labels
+def _render_current_browser_article(out, cases, records, binding):
+    model = current_browser_article_model(out, cases, records, binding)
+    content, names, stats = model['content'], model['providers'], model['stats']
+    from .methods import browser_method_label, native_browser_engine
+    engine_count = len({native_browser_engine(name) or name for name in names})
+    def label(name):
+        return escape(browser_method_label(name) if browser_method_label(name) != name else name.title())
+    def paragraph(value):
+        return '<p>' + escape(value).replace('\n\n', '</p><p>') + '</p>'
+    def section(title, body, anchor):
+        return '<section class="section" id="'+anchor+'"><h2>'+escape(title)+'</h2>'+body+'</section>'
+    def metric(name, key, value, values, higher=False, suffix=''):
+        valid = [v for v in values if v is not None]
+        extreme = (max(valid) if higher else min(valid)) if valid else None
+        winner = value is not None and value == extreme and valid.count(extreme) == 1
+        text = '—' if value is None else (f'{value:.1%}' if key == 'pass_rate' or key.startswith(('family_','quality_')) else f'{value:,.0f}{suffix}')
+        return ('<span data-browser-metric="'+escape(key)+'" data-provider="'+escape(name)
+                +'" data-value="'+('' if value is None else str(value))+'"'
+                + (' data-winner="true" class="good"' if winner else '')+'>'+text+'</span>')
+    def latency_table(population):
+        return _table(['浏览器', '样本数', '平均总耗时 · ms', 'P50 · ms', 'P95 · ms'], [
+            (label(name), str(stats[name][population]['n']), *(
+                metric(name, population+'_'+key, stats[name][population][key],
+                       [stats[n][population][key] for n in names]) for key in ('mean','p50','p95')))
+            for name in names], '均值、P50、P95 使用同一行样本；每题只计一次，耗时含该题重试。')
+    body = '<article data-browser-interpretation="1">'
+    dates = sorted({row['started_at'][:10] for row in records})
+    figures = ''.join('<figure class="editorial-figure"><img data-browser-figure="'+escape(item['path'],quote=True)
+                      +'" src="../'+escape(item['path'],quote=True)+'" alt="'+escape(item['alt'],quote=True)
+                      +'" style="display:block;width:100%;height:auto"><figcaption>'+escape(item['caption'])+'</figcaption></figure>'
+                      for item in model['figures'])
+    body += section('这次测什么', paragraph(content.get('background', content['intro'])), 'scope')
+    def family_cell(name, track):
+        group = stats[name]['tracks'][track]
+        rate = group['passed']/group['n']
+        values = [stats[n]['tracks'][track]['passed']/stats[n]['tracks'][track]['n'] for n in names]
+        return f"{group['passed']}/{group['n']}<br>" + metric(name,'family_'+track,rate,values,True)
+    from .report_interfaces import browser_task_interface_matrix
+    interfaces = browser_task_interface_matrix(cases, names, records, compact=True)
+    route_rows = []
+    for row in interfaces['rows']:
+        cells = []
+        for name in names:
+            parts = row['cells'][name]
+            cells.append('<div data-browser-interface="'+escape(name)+'" data-track="'+escape(row['track'])+'">'
+                         + '<br><br>'.join('<span data-route-mode="'+escape(part['mode'])+'" data-case-count="'+str(part['count'])+'">'
+                           +str(part['count'])+' 题：'+escape(part['description'])+'</span>' for part in parts)+'</div>')
+        route_rows.append((escape(BROWSER_FAMILY_NAMES[row['track']])+f" · {row['count']} 题", *cells))
+    matrix = _table(['任务类型',*(label(name) for name in names)], route_rows, '每格为实际请求的接口路线与目标交付物；调用失败或能力不足仍保留原路线，不代表已经成功交付。')
+    network_rows = _browser_network_rows(records, names)
+    network_note = '<details><summary>网络执行位置与解析方式</summary>'+''.join(
+        '<p data-network-method="'+escape(row['provider'])+'" data-network-mode="'
+        +escape(row['mode'])+'">'+escape(row['text'])+'</p>' for row in network_rows)+'</details>'
+    wait_rows=[]
+    for name in names:
+        wait_rows.append((label(name),'<span data-browser-wait="'+escape(name)+'">'+escape(_browser_wait_summary(records,name))+'</span>'))
+    body += section('七类任务分别用了什么接口',
+        '<p>下表列出实际获取方式与交付物。本轮网页和文档正文统一选择 Markdown 输出。Chromium 额外使用固定的 HTML 转换器；其余方法保留官方原生输出，不在评测端补正文。网页内嵌媒体主要验收指定地址，直接媒体文件验收原始字节。</p>'
+        +'<div class="browser-interface-matrix">'+matrix+'</div>'
+        +'<p>Moli 使用 fetch --dump markdown；动态正文整类启用 --layout 与 --with-frames。Lightpanda 使用 --dump markdown，JSON 外壳只用于读取同一次返回的 Markdown；Obscura 执行固定版本的官方 Markdown 脚本；Kitesurf 使用 Cloudflare Browser Run 的 /markdown 接口。完整命令、转换器版本和各题原始调用见<a href="../methodology/index.html">评测方法</a>及<a href="../adoption/index.html">方法介绍</a>。接口缺失的记录在表中单列，不推定它使用了什么路线。</p>'
+        +_table(['方法','原生等待条件及题数'],wait_rows,'等待条件来自保存的调用记录；文件字节路线不等待查看器绘制。')
+        +'<p>单次物理调用预算为 45 秒，包含启动、访问、等待和转换。传输或 HTTP 临时错误允许一次重试，整题总耗时会累加两次调用；评分在计时结束后执行。最终网址只用于诊断，不参与正文判分。评测端没有追加 PDF 或 DOCX 解析器。</p>'+network_note,'interfaces')
+    flow = 'flowchart LR\n A[同一目标网址与验收规则] --> B[各浏览器原生访问与提取]\n B --> C[保留完整输出与调用日志]\n C --> D[统一评分]\n D --> E[整体与专项结果]'
+    fallback = ' → '.join('<span class="tag">'+x+'</span>' for x in ('目标网址与规则','浏览器原生访问','完整输出与日志','统一评分','整体与专项'))
+    mechanism = '<div class="wmb-flow"><div data-wmb-flow-fallback>'+fallback+'</div><pre class="mermaid" hidden>'+escape(flow)+'</pre></div>'
+    body += section('怎样判断一次获取是否可用', mechanism+paragraph(content['scoring'])+figures, 'scoring')
+    if model['examples']:
+        examples = ''
+        for example_index,item in enumerate(model['examples']):
+            row = item['row']; case = cases[row['case_id']]
+            examples += '<details'+(' open' if example_index==0 else '')+' data-browser-example="'+escape(row['attempt_id'])+'"><summary>'+escape(BROWSER_FAMILY_NAMES[report_family(case)])+' · '+escape(case.get('name',case['id']))+'</summary>'
+            evidence = item['evidence']
+            examples += paragraph(item['explanation'])+'<p>方法：'+label(row['provider'])+' · 运行 ID：<code>'+escape(evidence['run_id'])+'</code> · 任务判定：<strong data-example-verdict="'+escape(row['attempt_id'])+'">'+('通过' if evidence['passed'] else '未通过')+'</strong></p>'
+            examples += '<div class="evidence-compare" style="display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,300px),1fr));gap:1rem"><article class="evidence-pane"><h4>题目要求与参考节选</h4><p>共 '+str(evidence['expected_chars'])+' 字符，节选 '+str(len(evidence['expected']))+' 字符。</p><pre style="max-height:28rem;overflow:auto;white-space:pre-wrap" data-example-expected="'+escape(row['attempt_id'])+'">'+escape(evidence['expected'])+'</pre></article><article class="evidence-pane"><h4>原始输出节选</h4><p>文件任务展示交付元数据；正文节选 '+str(len(evidence['actual']))+' 字符。</p><pre style="max-height:28rem;overflow:auto;white-space:pre-wrap" data-example-actual="'+escape(row['attempt_id'])+'">'+escape(evidence['actual'])+'</pre></article></div>'
+            examples += _table(['检查项目','题目要求','实际结果','判定'],[(escape(check['label']),escape(check['expected']),escape(check['actual']),'<span class="'+('good' if check['verdict']=='通过' else 'bad' if check['verdict']=='未通过' else 'neutral')+'" data-example-check="'+escape(row['attempt_id'])+'" data-check-key="'+escape(check['key'])+'">'+escape(check['verdict'])+'</span>') for check in evidence['checks']], '检查值来自本次保存的统一评分结果；完整输出和逐项证据见结果详情。')
+            examples += '<p><a href="../datasets/'+escape(case['id'],quote=True)+'.html">任务与验收规则</a> · <a href="../attempts/'+escape(row['attempt_id'],quote=True)+'.html">实际返回与判定证据</a></p></details>'
+        body += section('同一任务怎样验收', examples, 'examples')
+    body += section('全部调用的耗时', '<p>P50 是中位数，P95 表示 95% 任务的累计耗时不超过该值。每行均为全部任务，包含成功、失败与自动重试的累计耗时。45 秒是单次调用预算，允许一次重试的任务可能接近 90 秒。评分时间不计入。调用分布在不同日期，不能把耗时差异直接归因于浏览器引擎或新版改进；耗时较短也不等于任务通过率更高。</p>'+latency_table('all'), 'all-latency')
+    timing_rows=[(label(name),str(stats[name]['physical_calls']),
+                  *(metric(name,key,stats[name][key],[stats[n][key] for n in names]) for key in ('final_call_mean_ms','prior_call_mean_ms'))) for name in names]
+    body += section('重试与原生等待怎样影响耗时',
+        _table(['方法','实际调用数','末次调用平均耗时 · ms','此前调用及重试等待 · ms/题'],timing_rows,
+               '每行均对应完整任务集；两项平均耗时相加等于上表平均总耗时。没有按成功与否筛选任务。')
+        +paragraph(content.get('timing_explanation','原生完成条件决定何时交付。等待更多页面变化可能延长耗时，仍须同时检查交付内容；提前返回错误或空正文也会使平均耗时缩短。')),'timing-boundary')
+    body += section('通过任务的耗时', '<p>只计各浏览器自己通过的任务。各行样本可能不同，须结合通过数阅读；这张表不改变任务范围或整体排名。</p>'+latency_table('successful'), 'successful-latency')
+    resource = contained_path(out, 'resource-cohort/resource-comparison.json')
+    if resource.is_file():
+        resource_summary = json.loads(resource.read_text())
+        # The resource cohort is an independently registered measurement.  Its
+        # provider IDs can differ from the main result matrix (for example,
+        # ``moli`` versus a source-build comparison ID).  Render the cohort's
+        # complete declared population instead of silently dropping rows whose
+        # IDs do not appear in the quality matrix.
+        table, explanation = _render_article_resources(
+            resource_summary, resource_summary['providers'])
+        body += section('客户端资源消耗', table+paragraph(explanation), 'resources')
+    else:
+        body += section('客户端资源消耗', '<p>本轮未登记完整可比的 CPU、内存和网络资源测量，不据此作资源效率排名。</p>', 'resources')
+    quality_n=max(stats[name]['quality']['reference_cases'] for name in names)
+    if quality_n:
+        quality_table=_table(['方法','已计算 / 有参考','参考词语找回比例 · Recall','输出词语纯净度 · Precision','综合文字重合 · F1'],[
+            (label(name),str(stats[name]['quality']['n'])+'/'+str(quality_n),*(metric(name,'quality_'+key,stats[name]['quality'][key],[stats[n]['quality'][key] for n in names],True) for key in ('word_recall','word_precision','word_f1'))) for name in names],
+            '仅使用有完整可比参考的静态网页，逐题算术平均，包含已测失败项；未提供参考的网页不记为零或满分。')
+        qfocus=content.get('focus_provider') or max(names,key=lambda name:stats[name]['passed'])
+        qbaseline=content.get('comparison_provider') or next((name for name in names if name!=qfocus),qfocus)
+        interpretation=''
+        if all(stats[name]['quality']['word_recall'] is not None for name in (qfocus,qbaseline)):
+            interpretation='<p>在这 '+str(quality_n)+' 道题中，'+label(qfocus)+' 平均找回 '+format(stats[qfocus]['quality']['word_recall'],'.1%')+' 的参考词语，'+label(qbaseline)+' 为 '+format(stats[qbaseline]['quality']['word_recall'],'.1%')+'。平均值包含本次未取得正文的样本，并非仅统计通过网页的正文完整程度。</p>'
+        body+=section('正文完整程度与任务通过率', '<p>本轮 '+str(sum(report_family(case)=='web' for case in cases.values()))+' 道静态正文题中，'+str(quality_n)+' 道有完整可比参考。Recall 衡量参考词语找回多少，Precision 衡量返回词语有多少与参考重合，F1 综合二者。它们检查文字重合，不判断事实正确性，也不代表其余网页的全文质量。</p>'+interpretation+quality_table+'<p>满足题目要求，仍可能夹带导航等多余文字；找回部分正文，也可能因为缺少必需段落而失败。任务通过率和全文质量分别回答这两个问题。</p>', 'body-quality')
+    def reviewed_distribution(items, provider):
+        counts = Counter(item['category'] for item in items)
+        labels = {item['category']: item['category_label'] for item in items}
+        return _table(['核验后的失败原因', '未通过数量'], [
+            ('<a href="../attempts/'+escape(next(item['attempt_id'] for item in items if item['category']==category)) +'.html">'+escape(labels[category])+'</a>',
+             '<span data-reviewed-failure="'+escape(provider)+'" data-category="'+escape(category)+'" data-count="'+str(count)+'">'+str(count)+'</span>')
+            for category,count in sorted(counts.items(),key=lambda item:(-item[1],item[0]))],
+            '每个失败结果只归入一个主要原因；程序错误分类单独保留。')
+    if model['failure_review']:
+        body += section('失败集中在哪些环节', reviewed_distribution(list(model['failure_review'].values()), 'all')
+                        +'<p>每条失败只归入一个主要原因。验证码、登录和风控要求有明确返回证据；子资源报错不等于主导航失败。全部逐题原因、处理结论和原始日志保留在<a href="../analysis/index.html">结果分析</a>与结果详情。</p>', 'failure-summary')
+    errors = {'acceptance':'内容或交付验收未通过','timeout':'访问或提取超时',
+              'browser_exit':'浏览器进程返回错误','browser_error':'浏览器访问或运行错误',
+              'http_status':'网页返回错误状态','empty_response':'返回内容为空','tool_error':'工具执行错误','api_error':'服务接口错误'}
+    for name in names:
+        stat, chapter = stats[name], content['providers'][name]
+        counts = stat['failure_counts']
+        distribution = _table(['程序分类','未通过数量'], [
+            (escape(errors.get(key, key)), '<span data-browser-failure="'+escape(name)+'" data-category="'+escape(key)+'" data-count="'+str(count)+'">'+str(count)+'</span>')
+            for key,count in sorted(counts.items())], f'{name} 的全部未通过结果，每个结果归入一个程序分类。') if counts else '<p>本轮所有任务均通过。</p>'
+        if model['failure_review']:
+            reviewed = stat['failure_reviews']
+            diagnosis = reviewed_distribution(reviewed, name) if reviewed else '<p>本轮所有任务均通过。</p>'
+            distribution = diagnosis+'<details><summary>程序返回分类</summary>'+distribution+'</details>'
+        row = stat['specimen'];case = cases[row['case_id']]
+        raw = contained_path(out,row['artifact_path']).read_text(encoding='utf-8',errors='replace')
+        specimen_evidence=browser_example_evidence(out,case,row)
+        reference=specimen_evidence['expected']
+        raw=specimen_evidence['actual']
+        error = _browser_error_excerpt(row, bool(counts),reviewed_error=_browser_reviewed_error(out,model,row))
+        example = '<details data-browser-specimen="'+escape(name)+'"><summary>'+escape(case.get('name',case['id']))+' · '+escape(case['id'])+'</summary>'
+        example += '<p><a href="'+escape(case['url'],quote=True)+'">原始页面</a> · <a href="../datasets/'+escape(case['id'],quote=True)+'.html">任务与验收规则</a> · <a data-browser-result="'+escape(name)+'" href="../attempts/'+escape(row['attempt_id'],quote=True)+'.html">完整结果、评分与日志</a></p>'
+        example += '<h4>参考范围或验收要求（节选）</h4><pre>'+escape(reference)+'</pre><h4>实际返回（节选）</h4><pre>'+escape(raw)+'</pre><h4>程序返回或验收结果</h4><pre style="max-height:24rem;overflow:auto;white-space:pre-wrap" data-browser-error="'+escape(name)+'">'+escape(error)+'</pre></details>'
+        body += section((browser_method_label(name) if browser_method_label(name) != name else name.title())+'：'+str(stat['passed'])+'/'+str(model['cases'])+' 题通过',
+                        '<div data-browser-chapter="'+escape(name)+'">'+paragraph(chapter['explanation'])+distribution+example+'</div>', 'browser-'+name)
+    review_path = contained_path(out,'result-review.json')
+    review = json.loads(review_path.read_text()) if review_path.is_file() else None
+    body += section('结论与审查范围', paragraph(content['conclusions'])+
+                    ('<p>独立核验范围与修订见<a href="../review/index.html">核验记录</a>。逐题原因与原始证据可从结果分析打开。</p>' if review else
+                     '<p>独立结果审查：0/'+str(model['results'])+'。未经独立复判的程序通过结果：'+str(sum(stats[n]['passed'] for n in names))+'。本轮报告使用统一评分器的原始验收结果。</p>'), 'conclusions')
+    # Reuse the reference article's reading components with current measured data.
+    from bs4 import BeautifulSoup
+    article = BeautifulSoup(body, 'html.parser')
+    parts = {node['id']:node for node in article.select('article > section[id]')}
+    reading = BeautifulSoup('<article class="m-article publication-article browser-interpretation" data-browser-interpretation="1" aria-labelledby="article-title"></article>', 'html.parser')
+    owner = reading.article
+    def append_html(parent, markup):
+        fragment=BeautifulSoup(markup,'html.parser')
+        for node in list(fragment.contents):parent.append(node.extract())
+    primary=content.get('focus_provider') or max(names,key=lambda name:stats[name]['passed'])
+    baseline=content.get('comparison_provider') or next((name for name in names if name!=primary),primary)
+    previous=content.get('version_baseline')
+    if primary not in names or baseline not in names or (previous and previous not in names):
+        raise ValueError('Reading comparison refers to an unregistered method')
+    order=sorted(names,key=lambda name:(-stats[name]['passed'],name))
+    family_titles={'web':'静态正文','dynamic':'动态正文','challenge':'热门正文','risk_control':'风控正文','document':'文档正文','web_media':'网页内嵌媒体','media_file':'直接媒体文件'}
+    combined=_table(['浏览器','综合任务通过率',*(family_titles.get(track,BROWSER_FAMILY_NAMES[track]) for track in model['tracks'])], [
+        (label(name),metric(name,'pass_rate',stats[name]['pass_rate'],[stats[n]['pass_rate'] for n in names],True)
+         +f'<br>{stats[name]["passed"]}/{model["cases"]}',*(family_cell(name,track) for track in model['tracks'])) for name in order],
+        '每种配置执行相同的 '+str(model['cases'])+' 题，每题等权。分项为通过数 / 本组题数；绿色只标记该列唯一最高值。')
+    diff=stats[primary]['passed']-stats[baseline]['passed']
+    cards='<div><span>整体通过数 · 相对 '+label(baseline)+'</span><b>'+f'{diff:+d}'+' 题</b><p>'+label(primary)+f' {stats[primary]["passed"]}/{model["cases"]}；'+label(baseline)+f' {stats[baseline]["passed"]}/{model["cases"]}'+f'<br>相差 {(stats[primary]["pass_rate"]-stats[baseline]["pass_rate"])*100:.1f} 个百分点</p></div>'
+    if previous:
+        old={r['case_id']:task_passed(r['ok'],r['metrics'],cases[r['case_id']].get('task_kind','body')) for r in records if r['provider']==previous}
+        new={r['case_id']:task_passed(r['ok'],r['metrics'],cases[r['case_id']].get('task_kind','body')) for r in records if r['provider']==primary}
+        gains=sum(new[cid] and not old[cid] for cid in cases);losses=sum(old[cid] and not new[cid] for cid in cases)
+        cards+='<div><span>通过数 · 相对 '+label(previous)+'</span><b>'+f'{gains-losses:+d}'+' 题</b><p>'+str(gains)+' 题由失败变为通过<br>'+str(losses)+' 题由通过变为失败</p></div>'
+    else:
+        cards+='<div><span>完整评测范围</span><b>'+str(model['results'])+' 个结果</b><p>'+str(len(names))+' 种配置 × '+str(model['cases'])+' 道相同任务</p></div>'
+    fastest=min(names,key=lambda name:stats[name]['all']['mean'])
+    cards+='<div><span>全部任务 · 平均总耗时最短</span><b>'+f'{stats[fastest]["all"]["mean"]/1000:.2f}'+' 秒</b><p>'+label(fastest)+'<br>含成功、失败与重试，非纯内核测速</p></div>'
+    hero=reading.new_tag('header',attrs={'class':'m-hero'})
+    append_html(hero,'<div class="m-chips"><span>Web Fetch 实测</span><span>'+str(engine_count)+' 种浏览器 · '+str(len(names))+' 种配置</span><span>'+str(model['cases'])+' 道任务</span></div><h1 id="article-title">'+escape(content['title']).replace('：','：<br>',1)+'</h1><p class="m-deck">'+escape(content['intro'])+'</p><div class="m-hero-table" id="overall">'+combined+'</div><div class="m-ledger" data-reading-ledger="1">'+cards+'</div><p class="m-scope-note">正文与文档采用本轮登记的原生 Markdown 路线；Chromium 使用固定的 HTML 转换器。原始字节与媒体地址分别验收。'+escape(content.get('version_note',''))+'</p>')
+    owner.append(hero)
+    # Figures are explanatory assets, never substitutes for measured charts.
+    figures_by_section={key:[] for key in ('scope','method','conclusion')}
+    for figure in article.select('figure.editorial-figure'):
+        identity=figure.find('img')['data-browser-figure'];definition=next(item for item in model['figures'] if item['path']==identity)
+        figures_by_section.get(definition.get('section','method'),figures_by_section['method']).append(figure.extract())
+    for figure in figures_by_section['scope']:parts['scope'].insert(1,figure)
+    for figure in figures_by_section['method']:parts['scoring'].append(figure)
+    if content.get('results_explanation'):
+        decomposition=reading.new_tag('section',id='result-decomposition')
+        append_html(decomposition,paragraph(content['results_explanation']))
+        panels=[]
+        for comparison in content.get('comparisons',[]):
+            left,right=comparison['left'],comparison['right'];tracks=comparison['tracks']
+            if left not in names or right not in names or not set(tracks)<=set(model['tracks']):
+                raise ValueError('Reading task comparison differs from the declared population')
+            totals={name:(sum(stats[name]['tracks'][track]['passed'] for track in tracks),sum(stats[name]['tracks'][track]['n'] for track in tracks)) for name in (left,right)}
+            l,denominator=totals[left];r,other=totals[right]
+            if denominator!=other:raise ValueError('Reading task comparison needs the same tasks')
+            panels.append('<div class="m-split-panel" data-reading-comparison="'+escape(comparison['id'])+'"><span>'+escape(comparison['title'])+' · '+str(denominator)+' 题</span><div class="m-duel"><div><b>'+str(l)+'</b><small>'+label(left)+'</small></div><em>:</em><div><b>'+str(r)+'</b><small>'+label(right)+'</small></div></div><p>通过数相差 '+str(abs(l-r))+' 题</p></div>')
+        if panels:append_html(decomposition,'<figure class="m-figure"><div class="m-split">'+''.join(panels)+'</div><figcaption>'+escape(content.get('comparison_caption','同一任务类别与验收规则下的实际通过数。'))+'</figcaption></figure>')
+        if content.get('results_context'):append_html(decomposition,paragraph(content['results_context']))
+        for source in content.get('context_sources',[]):
+            if urlsplit(source['url']).scheme not in {'http','https'}:raise ValueError('Reading source must use an HTTP(S) URL')
+            append_html(decomposition,'<p class="m-scope-note"><a href="'+escape(source['url'],quote=True)+'">'+escape(source['title'])+'</a></p>')
+        parts['result-decomposition']=decomposition
+    # One visual per latency statistic, with the full common task population.
+    columns=[]
+    for key,title,meaning in [('mean','平均总耗时','每题累计耗时的算术平均'),('p50','P50 · 中位数','一半任务的耗时不超过此值'),('p95','P95 · 较慢一端','95% 任务的耗时不超过此值')]:
+        values=[stats[name]['all'][key] for name in names];maximum=max(values);minimum=min(values)
+        rows=[]
+        for name in order:
+            value=stats[name]['all'][key];winner=value==minimum and values.count(minimum)==1
+            rows.append('<div class="m-speed-row" data-reading-speed="'+escape(name)+'" data-statistic="'+key+'" data-value="'+str(value)+'"><span>'+label(name)+'</span><b'+(' class="good"' if winner else '')+'>'+f'{value/1000:.2f}'+' s</b><div class="m-speed-track"><i'+(' class="best"' if winner else '')+' style="width:'+f'{value/maximum*100:.4f}'+'%"></i></div></div>')
+        columns.append('<div class="m-speed-column"><h4>'+title+'</h4><p>'+meaning+'</p>'+''.join(rows)+'</div>')
+    latency=parts['all-latency'];latency_table_markup=''.join(str(node) for node in latency.contents if getattr(node,'name',None) not in {'h2','p'})
+    latency.clear();append_html(latency,'<h3>耗时的差距：等待策略与长尾</h3><p>以下每行使用全部 '+str(model['cases'])+' 题，包含成功、失败和重试。P50 是中位数，P95 是 95% 任务耗时不超过的值。调用来自不同日期，这些数值描述本轮交付路径，不能分离出纯浏览器内核的速度。</p><figure class="m-figure"><h3>全部任务的总耗时 · 秒</h3><div class="m-speed-grid">'+''.join(columns)+'</div><figcaption>从进程启动到交付结果，包含访问、原生等待、转换及该题重试；评分时间不计入。</figcaption></figure>'+paragraph(content.get('timing_explanation','不同方法的原生完成条件不同；等待成本需要和内容交付一同判断。'))+'<details class="m-details"><summary>精确耗时数值与样本范围</summary>'+latency_table_markup+'</details>')
+    retry=parts['timing-boundary'];retry_tables=''.join(str(node) for node in retry.contents if getattr(node,'name',None) not in {'h2','p'})
+    retry.clear();retry.name='details';retry['class']='m-details';append_html(retry,'<summary>重试增加了多少耗时</summary><p>45 秒是单次物理调用预算。允许一次重试时，整题累计耗时可能接近 90 秒；下表两项平均耗时相加等于平均总耗时。</p>'+retry_tables)
+    successful=parts['successful-latency'];heading=successful.find('h2');heading.name='summary';successful.name='details';successful['class']='m-details'
+    # Reuse the case workbench: frozen reference, exact output and checks stay together.
+    example_section=parts.get('examples')
+    if example_section:
+        panels=[];tabs=[];radios=[]
+        for i,node in enumerate(example_section.select('[data-browser-example]'),1):
+            item=model['examples'][i-1];row=item['row'];case=cases[row['case_id']]
+            title=node.summary.get_text();node.summary.decompose();node.name='section';node.attrs.pop('open',None);node['class']='case-panel';node['id']='article-panel-'+str(i);node['aria-labelledby']='article-label-'+str(i)
+            heading=reading.new_tag('h3');heading.string=case.get('name',case['id']);node.insert(0,heading)
+            input_line=BeautifulSoup('<div class="case-input">输入：<a href="'+escape(case['url'],quote=True)+'">'+escape(case['url'])+'</a></div>','html.parser').div;node.insert(2,input_line)
+            compare=node.select_one('.evidence-compare');compare['class']='case-compare';compare.attrs.pop('style',None)
+            for pane,klass in zip(compare.find_all('article',recursive=False),('case-reference','case-actual')):
+                pane.name='div';pane['class']=klass
+                pre=pane.find('pre');pre['class']='case-excerpt';pre.attrs.pop('style',None)
+                if klass=='case-reference':
+                    if item['evidence']['reference']:
+                        existing=list(pane.contents);pane.clear()
+                        reference_title=('目标文件要求' if case.get('task_kind')=='file' else '目标媒体与资源要求' if case.get('expected_resources') else '独立参考正文' if case.get('ground_truth_main_content') else '固定验收要求')
+                        append_html(pane,'<h4>'+reference_title+'</h4><p>'+('全文' if len(item['evidence']['reference'])==item['evidence']['reference_chars'] else '原文节选')+' · '+str(len(item['evidence']['reference']))+' 字符</p><pre class="case-excerpt" data-example-reference="'+escape(row['attempt_id'])+'">'+escape(item['evidence']['reference'])+'</pre>')
+                        rule=reading.new_tag('details',attrs={'class':'m-details'});summary=reading.new_tag('summary');summary.string='完整验收说明与要求';rule.append(summary)
+                        for old_node in existing:rule.append(old_node.extract())
+                        pane.append(rule)
+                    else:pane.find('h4').string='固定验收要求'
+                else:
+                    pane.find('h4').string='本次真实返回'
+                    if item['evidence']['actual_chars']==0:
+                        pane.find('p').string='本次未交付正文 · 0 字符'
+                    else:pane.find('p').string=('原始文件交付元数据' if case.get('task_kind')=='file' else ('原始 Markdown 全文' if len(item['evidence']['actual'])==item['evidence']['actual_chars'] else '原始 Markdown 节选'))+' · '+str(len(item['evidence']['actual']))+' 字符'
+            meta=next((p for p in node.find_all('p',recursive=False) if '运行 ID：' in p.get_text()),None)
+            if meta is not None:meta['class']='case-input'
+            for table in node.select('table'):table['class']='case-checks'
+            panels.append(str(node.extract()));tab=BROWSER_FAMILY_NAMES[report_family(case)]
+            tabs.append('<label id="article-label-'+str(i)+'" for="article-case-'+str(i)+'">'+escape(tab)+'</label>')
+            radios.append('<input class="case-choice" type="radio" name="article-case" id="article-case-'+str(i)+'" aria-labelledby="article-label-'+str(i)+'"'+(' checked' if i==1 else '')+'>')
+        example_section.clear();append_html(example_section,'<h3>各类任务的真实输入与输出</h3><p>每组一道实测，左右对照题目要求和原始返回，下面保留实际判定。示例用于解释验收边界，不代表各类失败的比例。</p><div class="m-rule-strip"><b>每题只记通过或失败</b><span>相同网址与要求</span><span>单次预算 45 秒</span><span>失败计入总题数</span></div><div class="case-workbench">'+''.join(radios)+'<div class="case-tab-nav">'+''.join(tabs)+'</div><div class="case-panels">'+''.join(panels)+'</div></div>')
+    # Charts explain frequency; the exact tables and canonical result links remain inspectable.
+    for provider,node in [('all',parts.get('failure-summary'))]+[(name,parts['browser-'+name]) for name in names]:
+        if node is None:continue
+        items=list(model['failure_review'].values()) if provider=='all' else stats[provider]['failure_reviews']
+        if not items:continue
+        counts=Counter(item['category'] for item in items);labels={item['category']:item['category_label'] for item in items};total=len(items)
+        ordered=sorted(counts,key=lambda key:(-counts[key],key));bars=[]
+        for key in ordered:
+            count=counts[key]
+            bars.append('<div class="m-loss-row"><span>'+escape(labels[key])+'</span><div class="m-loss-track"><i data-reading-cause="'+escape(key)+'" data-count="'+str(count)+'" style="width:'+f'{count/total*100:.4f}'+'%"></i></div><b>'+str(count)+'</b></div>')
+        figure=BeautifulSoup('<figure class="m-figure" data-reading-failures="'+escape(provider)+'"><h4>'+('全部方法' if provider=='all' else label(provider))+' · '+str(total)+' 条失败结果</h4><div class="m-loss-bars">'+''.join(bars)+'</div><figcaption>横条按该方法全部失败结果的占比绘制；右侧为结果数，每条失败只归入一个主要原因。</figcaption></figure>','html.parser').figure
+        table=node.find('table');container=table.parent
+        while container.parent!=node and container.parent.get('data-browser-chapter') is None:container=container.parent
+        detail=reading.new_tag('details',attrs={'class':'m-details'});summary=reading.new_tag('summary');summary.string='完整原因分布与代表证据';detail.append(summary);container.replace_with(detail);detail.append(container)
+        if provider=='all':
+            detail.insert(1,figure);summary.string='全部失败结果的合并分布与证据'
+        else:detail.insert_before(figure)
+        for item in node.select('[data-browser-specimen]'):item['class']='m-details'
+    versions=_table(['方法','实测版本'],[(label(name),escape(stats[name]['version'])) for name in order],'版本身份来自保存的物理调用；完整命令和版本依据见方法介绍。')
+    append_html(parts['interfaces'],'<details class="m-details"><summary>本轮版本与构建身份</summary>'+versions+'</details>')
+    if content.get('failure_mechanism'):
+        append_html(parts['failure-summary'],'<div class="m-webfail"><div><h3>页面已返回，目标列表尚未出现</h3><div class="m-delay"><span>外层页面稳定</span><i>→</i><span>返回 Markdown</span></div><p>'+escape(content['failure_mechanism']['waiting'])+'</p></div><div><h3>页面里的子页面，需要独立交付</h3><div class="m-frame-map">外层网页<div>iframe 子页面：正文、表格或文档</div></div><p>'+escape(content['failure_mechanism']['frames'])+'</p></div></div>')
+    for figure in figures_by_section['conclusion']:parts['conclusions'].insert(1,figure)
+    if previous:
+        both=sum(new[cid] and old[cid] for cid in cases);neither=sum(not new[cid] and not old[cid] for cid in cases)
+        changes=[('两版都通过',both),('修复版变为通过',gains),('修复版变为失败',losses),('两版都失败',neither)]
+        append_html(parts['conclusions'],'<figure class="m-figure" data-reading-version="'+escape(primary)+'"><h3>同一批题的两版结果 · '+str(model['cases'])+' 题</h3><div class="m-verdict-grid">'+''.join('<div data-version-relation="'+str(i)+'" data-count="'+str(count)+'"><h4>'+title+'</h4><div class="m-duel"><b>'+str(count)+'</b><small>题</small></div></div>' for i,(title,count) in enumerate(changes))+'</div><figcaption>同一验收标准，所有任务都保留在对照中；变化是在线调用的实际结果，不单独证明代码因果。</figcaption></figure>')
+    chapters=[('scope','01 这次测什么',['scope']),('results','02 通过率、耗时与资源',['result-decomposition','all-latency','timing-boundary','successful-latency','resources']),('method','03 测试方法与实例',['scoring','examples']),('configuration','04 浏览器与测试配置',['interfaces']),('failures','05 失败任务与正文缺失',['body-quality','failure-summary']+['browser-'+name for name in order]),('conclusion','06 结论与适用范围',['conclusions'])]
+    toc='<nav class="m-toc" aria-label="报告解读目录" data-reading-contents="1">'+''.join('<a href="#reading-'+anchor+'">'+title+'</a>' for anchor,title,_ in chapters)+'</nav>'
+    append_html(hero,toc)
+    for anchor,title,children in chapters:
+        wrapper=reading.new_tag('section',attrs={'class':'m-section reading-chapter','id':'reading-'+anchor});heading=reading.new_tag('h2');heading.string=title;wrapper.append(heading)
+        for child in children:
+            node=parts.get(child)
+            if node is None:continue
+            node['class']=list(node.get('class',[]))+['m-content-block']
+            for heading in node.find_all('h2',recursive=False):
+                if child in {'scope','scoring','conclusions'}:heading.decompose()
+                else:heading.name='h3'
+            wrapper.append(node.extract())
+        owner.append(wrapper)
+    append_html(owner,'<footer class="m-end">调用日期：'+escape('、'.join(dates))+'。本页使用本轮冻结结果；任务、输出与逐题审查见报告对应栏目。</footer>')
+    style=(Path(__file__).parent/'templates/interpretation-headless.css').read_text()
+    body='<style>'+style+'</style>'+str(reading)
+    body += '<script>document.addEventListener("DOMContentLoaded",()=>{if(typeof wmbRenderFlow==="function")wmbRenderFlow()});</script>'
+    evidence = {'schema':'webfetch_browser_interpretation_evidence/1','input_sha256':content['evidence_sha256'],
+                'cases':model['cases'],'results':model['results'],'providers':names,'interfaces':interfaces,
+                'stats':{n:{k:v for k,v in stats[n].items() if k not in {'specimen','failure_reviews'}} for n in names}}
+    guide = contained_path(out,'guide');guide.mkdir(parents=True,exist_ok=True)
+    (guide/'interpretation-evidence.json').write_text(json.dumps(evidence,ensure_ascii=False,indent=2)+'\n')
+    from .report import EXTRA
+    standalone = _offline_browser_article(body,out,cases,model)
+    (guide/'article.html').write_text('<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>'+escape(content['title'])+'</title><style>'+STYLE+EXTRA+'</style></head><body>'+standalone+'</body></html>')
+    return body+'<aside class="wrap"><a href="article.html" download>下载独立 HTML</a> · <a href="interpretation-evidence.json">本文计算明细</a></aside>'
+
+
+@with_measured_method_labels
+def check_current_browser_article(out, cases, records, binding):
+    """Verify numerical populations, unique highlights and complete drilldowns."""
+    from html.parser import HTMLParser
+    from urllib.parse import urlsplit
+    model = current_browser_article_model(out, cases, records, binding)
+    from .report_interfaces import browser_task_interface_matrix
+    interfaces = browser_task_interface_matrix(cases, model['providers'], records, compact=True)
+    expected_interfaces = {(name,row['track']):[(part['mode'],part['count'],str(part['count'])+' 题：'+part['description']) for part in row['cells'][name]]
+                           for row in interfaces['rows'] for name in model['providers']}
+    expected = {}
+    failures = {}
+    for name in model['providers']:
+        stats = model['stats'][name]
+        expected[name, 'pass_rate'] = stats['pass_rate']
+        if stats['quality']['reference_cases']:
+            for key in ('word_recall','word_precision','word_f1'):expected[name,'quality_'+key]=stats['quality'][key]
+        for key in ('final_call_mean_ms','prior_call_mean_ms'):
+            expected[name,key]=stats[key]
+        for population in ('all','successful'):
+            for key in ('mean','p50','p95'):
+                expected[name, population+'_'+key] = stats[population][key]
+        for track, group in stats['tracks'].items():
+            expected[name, 'family_'+track] = group['passed']/group['n']
+        failures.update({(name,key):count for key,count in stats['failure_counts'].items()})
+    class Inspect(HTMLParser):
+        def __init__(self):
+            super().__init__();self.metrics=[];self.failures=[];self.chapters=[];self.errors=[];self.links=[];self.active=None
+            self.interfaces={};self.interface=None;self.route=None;self.network=[];self.network_row=None
+        def handle_starttag(self, tag, attrs):
+            data=dict(attrs)
+            if 'data-browser-interface' in data:
+                self.interface=(data['data-browser-interface'],data['data-track'])
+                if self.interface in self.interfaces:raise ValueError('Duplicate browser task interface')
+                self.interfaces[self.interface]=[]
+            if 'data-route-mode' in data:
+                if self.interface is None:raise ValueError('Browser route has no task interface')
+                self.route=[data['data-route-mode'],int(data['data-case-count']),'']
+                self.interfaces[self.interface].append(self.route)
+            if 'data-network-method' in data:
+                self.network_row=[data['data-network-method'],data['data-network-mode'],'']
+                self.network.append(self.network_row)
+            if 'data-browser-metric' in data:
+                self.active=[data,''];self.metrics.append(self.active)
+            if 'data-browser-failure' in data:
+                self.failures.append((data['data-browser-failure'],data['data-category'],int(data['data-count'])))
+            if 'data-browser-chapter' in data:self.chapters.append(data['data-browser-chapter'])
+            if 'data-browser-error' in data:self.errors.append(data['data-browser-error'])
+            if 'data-browser-result' in data:self.links.append((data['data-browser-result'],data.get('href')))
+        def handle_data(self,text):
+            if self.active is not None:self.active[1]+=text
+            if self.route is not None:self.route[2]+=text
+            if self.network_row is not None:self.network_row[2]+=text
+        def handle_endtag(self,tag):
+            if tag=='span':self.active=None;self.route=None
+            if tag=='p':self.network_row=None
+    for relative in ('guide/index.html','guide/article.html'):
+        page=contained_path(out,relative)
+        inspect=Inspect();inspect.feed(page.read_text())
+        from bs4 import BeautifulSoup
+        document = BeautifulSoup(page.read_text(), 'html.parser')
+        chapter_ids = [node.get('id') for node in document.select('.reading-chapter')]
+        if chapter_ids != ['reading-'+key for key in ('scope','results','method','configuration','failures','conclusion')]:
+            raise ValueError('Browser interpretation reading sequence is incomplete')
+        # Protect the reference's reading behavior, not only a table of contents.
+        root=document.select_one('article.m-article[data-browser-interpretation]')
+        hero=root.find('header',recursive=False) if root else None
+        if hero is None or 'm-hero' not in hero.get('class',[]) or hero.select_one('.m-deck') is None or hero.select_one('#overall table') is None or hero.select_one('[data-reading-ledger]') is None:
+            raise ValueError('Browser interpretation is missing its opening result and reading hierarchy')
+        charts=document.select('[data-reading-speed]')
+        chart_keys=[(node['data-reading-speed'],node['data-statistic']) for node in charts]
+        if len(chart_keys)!=len(set(chart_keys)) or set(chart_keys)!={(name,key) for name in model['providers'] for key in ('mean','p50','p95')}:
+            raise ValueError('Browser interpretation latency charts omit a method or statistic')
+        for node in charts:
+            name,key=node['data-reading-speed'],node['data-statistic'];value=model['stats'][name]['all'][key]
+            peers=[model['stats'][n]['all'][key] for n in model['providers']];best=value==min(peers) and peers.count(value)==1
+            bar=node.select_one('.m-speed-track i');number=node.find('b')
+            if node.get('data-value')!=str(value) or number is None or number.get_text()!=f'{value/1000:.2f} s' or bar is None or bar.get('style')!=f'width:{value/max(peers)*100:.4f}%':
+                raise ValueError('Browser interpretation chart values or bar lengths differ from evidence')
+            if ('best' in bar.get('class',[]))!=best or ('good' in number.get('class',[]))!=best:
+                raise ValueError('Browser interpretation chart highlights differ from the full population')
+        if model['examples']:
+            controls=document.select('.case-workbench > input[type="radio"]')
+            if len(controls)!=len(model['examples']) or sum(node.has_attr('checked') for node in controls)!=1 or not controls[0].has_attr('checked'):
+                raise ValueError('Browser interpretation case selection is incomplete')
+            for index,node in enumerate(controls,1):
+                panel=document.find(id='article-panel-'+str(index));tab=document.find(id='article-label-'+str(index))
+                if node.get('id')!='article-case-'+str(index) or panel is None or 'case-panel' not in panel.get('class',[]) or panel.select_one('.case-compare') is None or tab is None or tab.get('for')!=node['id']:
+                    raise ValueError('Browser interpretation case tabs are not connected to their evidence')
+        for comparison in model['content'].get('comparisons',[]):
+            node=document.select_one('[data-reading-comparison="'+comparison['id']+'"]')
+            expected_counts=[sum(model['stats'][name]['tracks'][track]['passed'] for track in comparison['tracks']) for name in (comparison['left'],comparison['right'])]
+            if node is None or [item.get_text() for item in node.select('.m-duel b')]!=[str(value) for value in expected_counts]:
+                raise ValueError('Browser interpretation grouped task comparison differs from evidence')
+        expected_charts={name:dict(Counter(item['category'] for item in model['stats'][name]['failure_reviews'])) for name in model['providers'] if model['stats'][name]['failure_reviews']}
+        if model['failure_review']:expected_charts['all']=dict(Counter(item['category'] for item in model['failure_review'].values()))
+        actual_charts={}
+        for figure in document.select('[data-reading-failures]'):
+            name=figure['data-reading-failures'];parts=figure.select('[data-reading-cause]')
+            if name in actual_charts:raise ValueError('Duplicate browser failure chart')
+            counts={part['data-reading-cause']:int(part['data-count']) for part in parts};actual_charts[name]=counts
+            if len(counts)!=len(parts):raise ValueError('Duplicate browser failure category in chart')
+            for part in parts:
+                if part.get('style')!=f'width:{int(part["data-count"])/sum(counts.values())*100:.4f}%':
+                    raise ValueError('Browser failure chart bar differs from its population')
+        if actual_charts!=expected_charts:raise ValueError('Browser failure charts omit reviewed results')
+        previous=model['content'].get('version_baseline')
+        if previous:
+            primary=model['content'].get('focus_provider') or max(model['providers'],key=lambda name:model['stats'][name]['passed'])
+            lookup={(row['provider'],row['case_id']):task_passed(row['ok'],row['metrics'],cases[row['case_id']].get('task_kind','body')) for row in records}
+            pairs=[(lookup[previous,cid],lookup[primary,cid]) for cid in cases]
+            expected_transitions=[sum(before and after for before,after in pairs),sum(not before and after for before,after in pairs),sum(before and not after for before,after in pairs),sum(not before and not after for before,after in pairs)]
+            nodes=document.select('[data-version-relation]')
+            if len(nodes)!=4 or [int(node['data-count']) for node in nodes]!=expected_transitions:
+                raise ValueError('Browser version comparison does not cover every task')
+        expected_root = {}
+        for name in model['providers']:
+            expected_root.update({(name,key):count for key,count in model['stats'][name]['reviewed_failure_counts'].items()})
+        if model['failure_review']:
+            expected_root.update({('all',key):count for key,count in Counter(item['category'] for item in model['failure_review'].values()).items()})
+        actual_root = [(node['data-reviewed-failure'],node['data-category'],int(node['data-count'])) for node in document.select('[data-reviewed-failure]')]
+        if len(actual_root) != len(expected_root) or {(name,key):count for name,key,count in actual_root} != expected_root:
+            raise ValueError('Reviewed failure distribution differs from evidence')
+        category_labels = {item['category']:item['category_label'] for item in model['failure_review'].values()}
+        for node in document.select('[data-reviewed-failure]'):
+            if node.find_parent('tr').find('a').get_text() != category_labels[node['data-category']]:
+                raise ValueError('Reviewed failure category label differs from evidence')
+        if document.select('[data-reviewed-reason], [data-reviewed-treatment]'):
+            raise ValueError('Interpretation duplicates the per-result audit inventory')
+        for item in model['figures']:
+            matches = [node for node in document.select('img[data-browser-figure]') if node['data-browser-figure'] == item['path']]
+            if len(matches) != 1 or matches[0].get('alt') != item['alt']:
+                raise ValueError('Browser interpretation figure is missing or wrong')
+            if relative.endswith('article.html'):
+                suffix = Path(item['path']).suffix.lower()
+                mime = 'image/jpeg' if suffix in {'.jpg','.jpeg'} else 'image/'+suffix[1:]
+                expected_src = 'data:'+mime+';base64,'+base64.b64encode(contained_path(out,item['path']).read_bytes()).decode('ascii')
+            else:
+                expected_src = '../'+item['path']
+            if matches[0].get('src') != expected_src or matches[0].find_parent('figure').find('figcaption').get_text() != item['caption']:
+                raise ValueError('Browser interpretation figure bytes or caption differ')
+        for name in model['providers']:
+            values = document.select('[data-browser-error="'+name+'"]')
+            stat = model['stats'][name]
+            if len(values) != 1 or values[0].get_text() != _browser_error_excerpt(stat['specimen'], bool(stat['failure_counts']),reviewed_error=_browser_reviewed_error(out,model,stat['specimen'])):
+                raise ValueError('Browser specimen error excerpt is missing or differs from evidence')
+        examples = document.select('[data-browser-example]')
+        expected_examples = {item['row']['attempt_id']:item for item in model['examples']}
+        if len(examples) != len(expected_examples) or {node['data-browser-example'] for node in examples} != set(expected_examples):
+            raise ValueError('Browser interpretation examples are incomplete')
+        for node in examples:
+            item = expected_examples[node['data-browser-example']]
+            if node.find('p').get_text() != item['explanation']:
+                raise ValueError('Browser interpretation example explanation differs')
+            evidence = item['evidence']
+            aid = item['row']['attempt_id']
+            for field in ('expected','actual'):
+                values = node.select('[data-example-'+field+']')
+                if len(values) != 1 or values[0].get('data-example-'+field) != aid or values[0].get_text() != evidence[field]:
+                    raise ValueError('Browser example expected or actual evidence is missing or wrong')
+            references=node.select('[data-example-reference]')
+            if evidence['reference']:
+                if len(references)!=1 or references[0].get_text()!=evidence['reference']:
+                    raise ValueError('Browser example reference excerpt differs from frozen text')
+            elif references:raise ValueError('Browser example invents a reference excerpt')
+            checks = node.select('[data-example-check]')
+            actual_checks = {value['data-check-key']:value.get_text() for value in checks if value.get('data-example-check') == aid}
+            if len(checks) != len(evidence['checks']) or actual_checks != {value['key']:value['verdict'] for value in evidence['checks']}:
+                raise ValueError('Browser example scoring checks are missing or wrong')
+            for value in checks:
+                check = next(item for item in evidence['checks'] if item['key'] == value['data-check-key'])
+                expected_state = 'good' if check['verdict']=='通过' else 'bad' if check['verdict']=='未通过' else 'neutral'
+                if value.get('class') != [expected_state]:
+                    raise ValueError('Browser example check color contradicts its verdict')
+                cells = value.find_parent('tr').find_all('td')[1:]
+                if [cell.get_text() for cell in cells] != [check['label'],check['expected'],check['actual'],check['verdict']]:
+                    raise ValueError('Browser example expected/actual check values differ')
+            verdict = node.select_one('[data-example-verdict]')
+            if verdict is None or verdict.get_text() != ('通过' if evidence['passed'] else '未通过') or evidence['run_id'] not in node.get_text():
+                raise ValueError('Browser example run identity or verdict is missing')
+            row = item['row']
+            target = '#offline-result-'+row['attempt_id'] if relative.endswith('article.html') else '../attempts/'+row['attempt_id']+'.html'
+            if target not in [anchor.get('href') for anchor in node.select('a[href]')]:
+                raise ValueError('Browser interpretation example evidence target is broken')
+
+        for name in model['providers']:
+            expected_wait=_browser_wait_summary(records,name)
+            node=document.select('[data-browser-wait="'+name+'"]')
+            if len(node)!=1 or node[0].get_text()!=expected_wait:
+                raise ValueError('Browser wait disclosure is missing or wrong')
+        timing=document.find(id='timing-boundary')
+        if timing is None or len(timing.select('tbody tr'))!=len(model['providers']):
+            raise ValueError('Browser retry timing boundary is missing')
+        for node,name in zip(timing.select('tbody tr'),model['providers']):
+            values=[cell.get_text() for cell in node.find_all('td')]
+            stat=model['stats'][name]
+            if values[-3:]!=[str(stat['physical_calls']),f"{stat['final_call_mean_ms']:,.0f}",f"{stat['prior_call_mean_ms']:,.0f}"]:
+                raise ValueError('Browser retry cost differs from recorded calls')
+        for anchor in document.select('a[href^="#failure-category-"]'):
+            if document.find(id=anchor['href'][1:]) is None:
+                raise ValueError('Failure category drilldown is broken')
+        contents = document.select_one('[data-reading-contents]')
+        if contents is None or [item.get('href') for item in contents.select('a')] != ['#'+key for key in chapter_ids]:
+            raise ValueError('Browser interpretation chapter navigation is incomplete')
+        if 'P50 是中位数' not in document.get_text() or '不同日期' not in document.find(id='all-latency').get_text():
+            raise ValueError('Browser latency population or timing limitation is missing')
+        actual_interfaces={key:[tuple(part) for part in parts] for key,parts in inspect.interfaces.items()}
+        if actual_interfaces != expected_interfaces:
+            raise ValueError('Browser task interface matrix is missing or differs from declared tasks')
+        expected_network=[(row['provider'],row['mode'],row['text'])
+                          for row in _browser_network_rows(records,model['providers'])]
+        if [tuple(row) for row in inspect.network] != expected_network:
+            raise ValueError('Browser network environment disclosure is missing or wrong')
+        actual={}
+        for data,text in inspect.metrics:
+            key=(data['data-provider'],data['data-browser-metric'])
+            if key in actual or key not in expected:raise ValueError('Duplicate or unknown browser metric')
+            value=expected[key]
+            if data.get('data-value') != ('' if value is None else str(value)):
+                raise ValueError('Browser metric value differs from evidence')
+            peers=[v for (name,metric),v in expected.items() if metric==key[1] and v is not None]
+            high=key[1]=='pass_rate' or key[1].startswith(('family_','quality_'))
+            extreme=(max(peers) if high else min(peers)) if peers else None
+            winner=value is not None and value==extreme and peers.count(extreme)==1
+            if (data.get('data-winner')=='true') != winner:
+                raise ValueError('Browser metric unique highlight is missing or wrong')
+            visible='—' if value is None else (f'{value:.1%}' if high else f'{value:,.0f}')
+            if text.strip()!=visible:raise ValueError('Visible browser metric differs from evidence')
+            actual[key]=value
+        if actual != expected:raise ValueError('Browser metric population is incomplete')
+        if len(inspect.failures)!=len(failures) or {(n,k):v for n,k,v in inspect.failures}!=failures:
+            raise ValueError('Browser failure distribution differs from evidence')
+        for values in (inspect.chapters,inspect.errors):
+            if Counter(values)!=Counter(model['providers']):raise ValueError('Browser chapter or program error evidence is missing')
+        if Counter(n for n,link in inspect.links)!=Counter(model['providers']):
+            raise ValueError('Browser result drilldown is missing')
+        for name,link in inspect.links:
+            attempt = model['stats'][name]['specimen']['attempt_id']
+            expected_link = '#offline-result-'+attempt if relative.endswith('article.html') else '../attempts/'+attempt+'.html'
+            if link!=expected_link or (not link.startswith('#') and not (page.parent/urlsplit(link).path).is_file()):
+                raise ValueError('Browser result evidence target is broken')
+        if relative.endswith('article.html'):
+            from bs4 import BeautifulSoup
+            offline = BeautifulSoup(page.read_text(),'html.parser')
+            if offline.select('script,link[rel="stylesheet"]'):
+                raise ValueError('Independent article requires external runtime')
+            for name in model['providers']:
+                row = model['stats'][name]['specimen']
+                anchor = offline.find(id='offline-result-'+row['attempt_id'])
+                output = anchor.select_one('[data-standalone-output]') if anchor else None
+                if output is None or output.get_text() != contained_path(out,row['artifact_path']).read_text(encoding='utf-8',errors='replace'):
+                    raise ValueError('Independent article omits complete specimen output')
+    return model
+
+
 def supports_authored_explainer(cases):
     """Do not apply a mixed-track article to a different task family."""
-    return all(case.get('track', 'web') in TRACK_NAMES for case in cases.values())
+    # Historical authored prose has no risk-control chapter. New bound cohort
+    # content is selected before this legacy presentation guard.
+    return all(case.get('track', 'web') in set(TRACK_NAMES) - {'risk_control'} for case in cases.values())
 
 
-def render_explainer(out, cases, records, *, table=None, cell=None, link=None, authored=True):
+def render_explainer(out, cases, records, *, table=None, cell=None, link=None, authored=True, content_binding=None):
     """One authored body; only image URL serialization differs for the offline export."""
     out = Path(out)
+    dataset_path = out / 'dataset.json'
+    if content_binding is None and dataset_path.is_file():
+        content_binding = json.loads(dataset_path.read_text()).get('comparison', {}).get('report_interpretation')
+    if authored and content_binding is not None:
+        return _render_current_browser_article(out, cases, records, content_binding)
     if (not authored or not supports_authored_explainer(cases)
             or (records and all(row.get('provider_type') == 'fixture' for row in records))):
         passes = sum(task_passed(row['ok'], row['metrics'],
diff --git a/harness/web_fetch/report_i18n.py b/harness/web_fetch/report_i18n.py
index 95f751223..801899511 100644
--- a/harness/web_fetch/report_i18n.py
+++ b/harness/web_fetch/report_i18n.py
@@ -37,6 +37,47 @@
 # Exact editorial translations take priority.  Dynamic evidence (task names,
 # references and provider output) is deliberately absent from this catalog.
 TEXT = {
+    "本轮所有本地方法的每个主机名和跳转都使用固定的 Cloudflare HTTPS DNS，且不回退到系统 DNS。Moli、Lightpanda 和 Obscura 通过进程内解析器取得同一组公网地址；Chromium 使用自身的严格安全 DNS 配置。各浏览器原有的私网访问保护保持不变。": "Every local method uses the fixed Cloudflare HTTPS DNS service for each hostname and redirect, with no fallback to system DNS. Moli, Lightpanda, and Obscura receive the same public addresses through a process-scoped resolver; Chromium uses its own strict secure-DNS profile. Each browser keeps its existing private-network protection.",
+    "Kitesurf 在 Cloudflare Browser Run 中执行，使用云端网络。它的任务结果可以按同一验收规则比较，但耗时包含不同的部署位置和公网路径，不能据此判断本地浏览器引擎谁更快。": "Kitesurf runs in Cloudflare Browser Run and uses its cloud network. Its task outcomes use the same acceptance rules, but its latency includes a different deployment location and public-network path and therefore cannot rank local browser-engine speed.",
+    "CLI · 原生 Markdown 或原始响应路线": "CLI · native Markdown or raw-response route",
+    "直接取得 Moli 原生 Markdown；直接 PDF/DOCX 未提供可读正文时失败": "Returns Moli's native Markdown directly; a direct PDF or DOCX fails when the interface does not deliver readable body text",
+    "让同一次原生 Markdown 调用包含已加载子文档；不切换输出格式": "Includes loaded child documents in the same native Markdown call without switching output format",
+    "网页正文、文档正文、结构题和网页内嵌媒体题统一使用 Moli 原生 Markdown。动态网站正文整类统一启用 --layout、--with-frames 和 domstable，不按题目设置 selector。网页内嵌媒体只在原生输出中核对题目指定的资源地址，不下载媒体，也不切换 HTML、JSON 或网络跟踪接口。直接 PDF/DOCX 没有交付可读正文时按失败记录，评测端不下载后解析。直接媒体文件使用原生 CDP 响应或同一二进制的原始附件接口。最终网址只作诊断，不决定正文是否通过；失败后不切换格式或借用其他 provider。": "Moli uses native Markdown for webpage body text, document body text, structured tasks, and media information from webpages. Every dynamic-body task uses --layout, --with-frames, and domstable; no task-specific selector is supplied. Media-information tasks check only the requested resource URLs in native output; they do not download the media or switch to HTML, JSON, or network tracing. A direct PDF or DOCX fails when the interface does not deliver readable body text; the benchmark does not download and parse it. Direct media files use native CDP responses or the same binary's raw attachment interface. The final URL is diagnostic and does not decide body-task acceptance. A failure never triggers a format switch or another provider.",
+    "moli fetch；网页、文档正文、结构和网页内嵌媒体使用原生 Markdown，预声明完成条件只调用官方等待参数，直接媒体文件使用原始响应": "moli fetch; webpage body text, document body text, structured tasks, and webpage media information use native Markdown; preregistered completion conditions only call official wait parameters; direct media files use raw responses",
+    "网页正文、文档正文、结构和网页内嵌媒体任务统一使用 Moli 原生 Markdown；动态网站正文整类统一启用 --layout、--with-frames 和 domstable，不使用逐题 selector。网页媒体只核对同一 Markdown 输出里的目标地址，不下载媒体。直接 PDF/DOCX 未提供可读正文时按失败记录；直接媒体文件验收原始字节。失败后不切换格式，也不借用其他 provider 补抓；只有实际执行记录参与榜单。": "Webpage body text, document body text, structured tasks, and webpage media information all use Moli's native Markdown. Every dynamic-body task uses --layout, --with-frames, and domstable; no task-specific selector is supplied. Webpage media tasks check target URLs in the same Markdown output and do not download the media. A direct PDF or DOCX fails when it does not provide readable body text; direct media files validate raw bytes. A failure does not switch formats or fetch through another provider. Only measured records enter the ranking.",
+    "动态网站正文整类；网页内嵌媒体任务使用 --with-frames": "Every dynamic-body task; webpage media-information tasks use --with-frames",
+    "动态正文统一启用 Moli 页面布局能力，并在同一次原生 Markdown 调用中包含已加载子文档；不按题目设置 selector": "Dynamic-body tasks uniformly enable Moli's page-layout capability and include loaded child documents in the same native Markdown call; no task-specific selector is supplied",
+    "网页正文、文档正文、结构和网页内嵌媒体统一使用原生 Markdown；动态网站正文整类统一启用 --layout、--with-frames 和 domstable；网页媒体只核对输出中的目标地址。最终网址不参与正文判分。": "Webpage body text, document body text, structured tasks, and webpage media information use native Markdown. Every dynamic-body task uses --layout, --with-frames, and domstable. Media-information tasks only check target URLs in the output. The final URL does not affect body-task acceptance.",
+    "CLI fetch --dump markdown → 内置转换 → Markdown；动态正文整类统一启用 --layout 和 --with-frames，不使用逐题 selector": "CLI fetch --dump markdown → built-in conversion → Markdown; every dynamic-body task uses --layout and --with-frames, with no task-specific selector",
+    "原生 Markdown 中保留的图片地址；直接文件可验收原始字节": "Image URLs retained in native Markdown; direct files can validate raw bytes",
+    "原生 Markdown 中保留的媒体地址；直接文件可验收原始字节": "Media URLs retained in native Markdown; direct files can validate raw bytes",
+    "按题目要求预先选定参评浏览器的官方原生接口。网页正文和文档正文都必须以可读 Markdown 交付；除 Chromium 使用固定的 HTML-to-Markdown 包外，不会改取 HTML、JSON DOM 或 PDF/DOCX 字节后替选手提取正文。网页内嵌媒体题只检查原生输出中的指定图片、视频或条目地址，媒体文件不下载。只有直接媒体文件题返回原始字节，并校验类型、文件头、长度和 SHA-256；这是二进制文件交付，不冒充 Markdown。下表按固定任务输入列出处理链；失败后不切换接口或引擎。": "Each task is assigned an official native interface before execution. Webpage and document body tasks must deliver readable Markdown. Chromium is the sole exception: it uses the fixed HTML-to-Markdown package because it has no native Markdown output. The benchmark does not take HTML, a JSON DOM, or PDF or DOCX bytes and extract body text on a participant's behalf. Webpage media-information tasks check only the required image, video, or entry URL in native output and do not download the media. Direct-media-file tasks alone return original bytes, which are checked for type, signature, length, and SHA-256. That binary deliverable is not presented as Markdown. The table lists the route fixed for each task input; a failure never switches interface or engine.",
+    "外层统一为 45 秒。内部参数以冻结的调用记录为准：显式模式留出收尾和清理时间；uniform 模式沿用产品默认值": "The outer deadline is always 45 seconds. Internal parameters follow the frozen call record: explicit mode reserves time for finalization and cleanup; uniform mode keeps the product defaults.",
+    "45 秒外层截止；Moli 总等待、HTTP 和连接超时保留该二进制默认值": "45-second outer deadline; Moli's total-wait, HTTP, and connection timeouts retain the measured binary's defaults",
+    "这批调用未传入 Moli 内部超时参数。": "These calls did not pass Moli internal-timeout arguments.",
+    "45 秒外层截止；实测命令同时显式传入 Moli 总等待、HTTP 和连接超时 45,000 毫秒": "45-second outer deadline; the measured command also explicitly set Moli's total-wait, HTTP, and connection timeouts to 45,000 ms",
+    "45 秒外层截止；实测命令同时显式传入 Moli 总等待、HTTP 和连接超时 40,500 毫秒": "45-second outer deadline; the measured command also explicitly set Moli's total-wait, HTTP, and connection timeouts to 40,500 ms",
+    "这批调用使用保存记录中的显式 Moli 超时，未写成产品默认值。": "These calls used the explicit Moli timeouts preserved in their records; the report does not describe them as product defaults.",
+    "45 秒外层截止；Moli 内部超时以逐次调用记录为准": "45-second outer deadline; Moli's internal timeout policy is taken from each saved call record",
+    "保存证据未提供可核对的 Moli 内部超时策略。": "The saved evidence does not expose a verifiable Moli internal-timeout policy.",
+    "网页和文档正文使用原生 Markdown；直接媒体文件使用原始响应": "Native Markdown for webpage and document body text; raw responses for direct media files",
+    "HTML/TXT 可以直接返回正文；PDF/DOCX 必须由同一原生 Markdown 接口交付可读文字": "HTML and TXT can return body text directly; PDF and DOCX must deliver readable text through the same native Markdown interface",
+    "网页和文档正文输出 Markdown；直接媒体文件输出原始字节。": "Webpage and document body tasks output Markdown; direct media files output original bytes.",
+    "CLI · 按任务预选原生 Markdown、HTML 或原始响应路线": "CLI · preselects native Markdown, HTML, or raw-response routes by task",
+    "网页内嵌媒体": "Embedded webpage media",
+    "直接媒体文件": "Direct media files",
+    "输入是网页，共 17 题：16 题返回指定图片、视频或视频入口地址，1 题返回视频页登记的文字信息。地址题不下载媒体文件；文字题也不据此推断已取得视频字节。": "The input is a webpage. Across 17 tasks, 16 require specified image, video, or video-entry URLs and one requires registered text from a video page. URL tasks do not download the media file, and the text task does not imply that video bytes were obtained.",
+    "输入直接指向媒体文件，共 3 题：必须取得原始字节，并通过格式特征、长度与目标 SHA-256 验收。只复述输入网址不通过，也不要求把二进制内容转换成 Markdown。": "The input points directly to a media file. Across three tasks, the method must obtain the original bytes and pass format-signature, length, and target SHA-256 checks. Repeating the input URL fails, and binary content does not need conversion to Markdown.",
+    "直接取得 Moli 原生 HTML；共同评分器只识别其中的资源 URL": "Returns Moli's native HTML directly; the shared scorer only identifies resource URLs in it",
+    "使用 Moli 官方等待能力；只等待，不抽取或拼接正文": "Uses Moli's official wait capability for readiness only; it neither extracts nor assembles body text",
+    "所有正文与结构任务使用 Moli 原生 Markdown。旧版 selector 合同只映射到官方等待参数，不参与正文抽取。图片、视频资源页使用原生 HTML，共同评分器只识别其中的资源 URL。直接 PDF/DOCX 仍调用同一原生接口；接口没有交付可读正文时按失败记录，评测端不下载后解析。文件使用原生 CDP 响应或同一二进制的原始附件接口。最终网址仅作诊断，不决定正文是否通过；失败后不切换格式或借用其他 provider。": "All body and structured tasks use Moli's native Markdown. Legacy selector contracts map only to official wait parameters and do not extract body text. Image and video resource pages use native HTML, from which the shared scorer only identifies resource URLs. Direct PDF and DOCX inputs still use the same native interface; if it does not deliver readable text, the task fails and the benchmark does not download and parse the file. File tasks use native CDP responses or the same binary's raw attachment interface. The final URL is diagnostic only and does not determine body-task acceptance. A failure never triggers a format switch or another provider.",
+    "moli fetch；正文使用原生 Markdown，资源页使用原生 HTML，预声明完成条件只调用官方等待参数，直接文件使用原始响应": "moli fetch; body tasks use native Markdown, resource pages use native HTML, preregistered completion conditions only call official wait parameters, and direct files use raw responses",
+    "Moli 1.1.4：所有正文与结构任务使用原生 Markdown；旧版动态任务的预声明 selector 只映射到 --wait-selector 或 --wait-script。资源页使用原生 HTML，共同评分器只识别其中的资源 URL。直接 PDF/DOCX 仍走原生接口，未提供可读正文时按失败记录；文件题验收原始字节。无 layout、失败后格式回退或跨 provider 补抓；只有实际执行记录参与榜单。": "Moli 1.1.4: all body and structured tasks use native Markdown; preregistered selectors from legacy dynamic tasks map only to --wait-selector or --wait-script. Resource pages use native HTML, from which the shared scorer only identifies resource URLs. Direct PDF and DOCX inputs still use the native interface and fail if it does not provide readable text; file tasks validate raw bytes. There is no layout extraction, post-failure format fallback, or cross-provider recovery. Only actual execution records enter the ranking.",
+    "资源页原生 HTML 中的图片地址": "Image URLs in native HTML from the resource page",
+    "资源页原生 HTML 中的媒体地址": "Media URLs in native HTML from the resource page",
+    "直接取得 Moli 原生 HTML；共同评分器只识别其中的图片 URL": "Returns Moli's native HTML directly; the shared scorer only identifies image URLs in it",
+    "直接取得 Moli 原生页面与网络记录；共同评分器只识别其中的视频 URL": "Returns Moli's native page and network record directly; the shared scorer only identifies video URLs in it",
+    "所有正文与结构任务使用 Moli 原生 Markdown。旧版 selector 合同只映射到官方等待参数，不参与正文抽取。网页图片地址题使用原生 HTML；网页视频地址题使用原生 JSON 页面与网络记录，并在 done 后统一留出 5 秒加载窗口。共同评分器只识别原生输出中的资源 URL。直接 PDF/DOCX 仍调用同一原生接口；接口没有交付可读正文时按失败记录，评测端不下载后解析。文件使用原生 CDP 响应或同一二进制的原始附件接口。最终网址仅作诊断，不决定正文是否通过；失败后不切换格式或借用其他 provider。": "All body and structured tasks use Moli's native Markdown. Legacy selector contracts map only to official wait parameters and do not extract body text. Webpage image-URL tasks use native HTML. Webpage video-URL tasks use the native JSON page and network record, with a uniform five-second loading window after done. The shared scorer only identifies resource URLs in the native output. Direct PDF and DOCX inputs still use the same native interface; if it does not deliver readable text, the task fails and the benchmark does not download and parse it. File tasks use native CDP responses or the same binary's raw attachment interface. The final URL is diagnostic only and does not determine body-task acceptance. A failure never triggers a format switch or another provider.",
     "查看本报告的任务范围、结果数量与验收规则。": "See the tasks, result counts and acceptance rules used in this report.",
     "内容选择": "Content selection",
     "典型处理流程": "Typical processing flow",
@@ -109,7 +150,12 @@
     '本报告的方法由调用方的显式配置提供。': 'The caller’s explicit configuration supplies the methods in this report.',
     '方法名称': 'Method name',
     '工具版本': 'Tool version',
+    '原始输出': 'Raw output',
+    '程序错误': 'Program error',
+    '分类：': 'Classification: ',
     'Web Fetch · 评测报告': 'Web Fetch · Evaluation report',
+    'Web Fetch · 合成示例': 'Web Fetch · Synthetic example',
+    'Web Fetch · 诊断运行': 'Web Fetch · Diagnostic run',
     '合成示例 · 非正式评测': 'Synthetic example · not a formal benchmark',
     '诊断运行 · 非正式评测': 'Diagnostic run · not a formal benchmark',
     '文件交付': 'File delivery',
@@ -134,6 +180,17 @@
     '合成示例': 'Synthetic example',
     '本报告由本地测试适配器生成。没有正式评测发布记录。': 'This report was generated by a local test adapter and has no formal benchmark release history.',
 
+    "Lightpanda、Obscura 与 Moli 的普通网页使用 CLI 正文输出。Moli 的直接文档和媒体 URL 使用裸 fetch：正文任务在预算内解析，文件任务校验字节。": "Lightpanda, Obscura and Moli use CLI body output for ordinary web pages. Moli uses bare fetch for direct document and media URLs: body parsing stays within the time budget and file tasks validate bytes.",
+    "Chromium 由 Playwright 取完整渲染 DOM，再用 node-html-markdown 2.0.0 转换。五种方法都不调用模型。": "Playwright obtains Chromium's complete rendered DOM, then node-html-markdown 2.0.0 converts it. None of these five methods calls a model.",
+    "实际版本、配置和调用路线见“环境与复现”及逐次调用记录。": "See Environment & reproduction and the individual call records for measured versions, settings and execution routes.",
+    "保留同一次调用的原生 Markdown 和最终页面地址。Lightpanda 解包原生 JSON；Obscura 执行固定哈希的官方 Markdown 脚本，并读取当前地址；页面完成条件不变。": "Retain native Markdown and the final page URL from the same call. Lightpanda unwraps its native JSON; Obscura evaluates the hash-pinned upstream Markdown script and reads the current URL, preserving the page completion conditions.",
+    "安装与本报告版本和 SHA-256 一致的浏览器，配置 CHROMIUM_BINARY；详见“环境与复现”。": "Install the browser matching this report's version and SHA-256, and configure CHROMIUM_BINARY; see Environment & reproduction.",
+    "登记配置：": "Registered configuration:",
+    "安装与本报告版本和 SHA-256 一致的二进制，配置 MOLI_BINARY；详见“环境与复现”。": "Install the binary matching this report's version and SHA-256, and configure MOLI_BINARY; see Environment & reproduction.",
+    "只有 Kitesurf 的账户级 Cloudflare Browser Run 路线需要供应商账号与凭据；其余方法是本地二进制，不需要账号，但仍需安装并明确指定可执行文件。": "Only the account-level Kitesurf Cloudflare Browser Run route requires a provider account and credentials; the other methods use local binaries that must be installed and explicitly selected.",
+    "查看各方法执行结果 →": "View execution results for all methods →",
+    "浏览器版本与二进制来源": "Browser versions and binary sources",
+    "风控网页正文": "Risk-control page body text",
     "本报告的任务范围与验收规则": "Task scope and acceptance rules",
     "查看全部任务及验收规则": "View all tasks and acceptance rules",
     "查看结果、实际返回及失败证据": "View results, actual outputs, and failure evidence",
@@ -150,8 +207,7 @@
     "从官方 v1.1.7 release 获取二进制，配置 MOLI_1_1_7_BINARY。": "Obtain the binary from the official v1.1.7 release and configure MOLI_1_1_7_BINARY.",
     "Moli 1.1.7 正式发布": "Moli 1.1.7 official release",
     "本方法只使用官方 1.1.7 发行二进制，与其他 Moli 版本分开计分。普通网页使用原生 Markdown；直接文档与媒体的裸 fetch 路线在正式二进制上实测确认。正文任务若取得受支持的原始文档，会在同一计时预算内解析文字；文件任务直接验收字节。不在失败后切换引擎或输出模式。": "This method uses only the official 1.1.7 release binary and is scored separately from other Moli versions. Ordinary web pages use native Markdown; bare-fetch routes for direct documents and media were verified on the release binary. If a body-text task retrieves a supported original document, text is parsed within the same timing budget; file tasks validate bytes directly. The method does not switch engines or output modes after a failure.",
-    "历史访问受限网址正文": "Historically access-restricted URL body text",
-    "历史访问受限网址内容": "Historically access-restricted URL content",
+    "风控网站正文": "Risk-control website body text",
     "请求指定网址": "Request the specified URL",
     "识别目标页或拦截页": "Identify the target page or a blocked page",
     "提取首次加载内容": "Extract the initially loaded content",
@@ -161,13 +217,17 @@
     "从曾在保存的观察中出现登录、验证、反自动化或访问限制的指定网址取得目标内容。资格只解释样本来源；评分按独立保存的目标页面参考核对，防止只取得标题、开头、导航或少量列表条目也被判为通过。": "Retrieve target content from specified URLs where saved observations showed login, verification, anti-automation, or access restrictions. Qualification only explains cohort selection; scoring uses independently saved target-page references so a title, opening section, navigation, or a few list entries cannot pass as the full target.",
     "文章页须覆盖直接加载出的完整正文；列表页须保留稳定栏目，并取得满足域名、路径、字段、去重和数量要求的名称与真实链接。": "An article page must cover the complete body loaded directly. A list page must retain stable sections and return names with real links that meet the host, path, field, deduplication, and quantity requirements.",
     "规则只覆盖指定网址首次自动加载出的可见目标内容，不要求绕过验证或执行交互。通过表示本次返回满足冻结规则，不证明网站以后不会改变，也不证明所有访问环境都能取得相同页面。": "The rules cover only visible target content loaded automatically on the specified URL. They do not require bypassing verification or interacting with the page. A pass means this response satisfies the frozen rules; it does not prove that the site will remain unchanged or that every access environment receives the same page.",
-    "请求成功并取得指定目标页面；全部稳定文字、正文分区和组合规则均须满足。文章不能只返回标题或开头，列表须达到登记的字段、真实链接、路径、去重和数量要求；验证页、空返回和页面外壳均不通过。": "The request must succeed and return the specified target page, with every stable-text, body-region, and composite rule satisfied. An article cannot return only its title or opening. A list must meet its declared field, real-link, path, deduplication, and quantity requirements. Verification pages, empty responses, and page shells fail.",
-    "请求成功并取得指定目标页面；全部稳定文字、正文分区和组合规则均须满足。文章不能只返回标题或开头，列表须达到登记的字段、真实链接、路径、去重和数量要求；验证页、空返回和页面外壳均不通过。 已登记正文覆盖规则的案例，还须在最多 5 个参考区域中逐区达到 80% 词语计数覆盖，不能只返回标题或开头。": "The request must succeed and return the specified target page, with every stable-text, body-region, and composite rule satisfied. An article cannot return only its title or opening. A list must meet its declared field, real-link, path, deduplication, and quantity requirements. Verification pages, empty responses, and page shells fail. Cases with registered body-coverage rules must also reach 80% token-count coverage in each of up to 5 reference regions; returning only a title or opening section is insufficient.",
+    "请求成功并取得指定目标页面；正文分区、组合规则和登记为必需的稳定文字均须满足。登记为诊断的稳定文字只帮助核对抓取范围，不影响是否通过。文章不能只返回标题或开头，列表须达到登记的字段、真实链接、路径、去重和数量要求；验证页、空返回和页面外壳均不通过。": "The request must succeed and return the specified target page. Body-region rules, composite rules, and stable text marked as required must pass. Diagnostic stable text only checks retrieval scope and does not affect acceptance. An article cannot return only its title or opening. A list must meet its declared field, real-link, path, deduplication, and quantity requirements. Verification pages, empty responses, and page shells fail.",
+    "页面正文按登记的正文规则核验；稳定文字只用于核对抓取范围，不影响是否通过；新闻、日期、轮播卡片、仓库状态等易变内容不固定为答案。历史完整快照只作诊断，不进入全文质量汇总。": "Page text is evaluated against its registered body rules. Stable text only checks retrieval scope and does not affect acceptance. Volatile news, dates, carousel cards, repository status, and similar content are not frozen as answers. Historical full snapshots are diagnostic only and are excluded from full-text quality aggregates.",
+    "页面正文按登记的正文规则核验；登记的稳定文字必须命中；新闻、日期、轮播卡片、仓库状态等易变内容不固定为答案。历史完整快照只作诊断，不进入全文质量汇总。": "Page text is evaluated against its registered body rules, and registered stable text must match. Volatile news, dates, carousel cards, repository status, and similar content are not frozen as answers. Historical full snapshots are diagnostic only and are excluded from full-text quality aggregates.",
     "打开指定网址，取得首次自动加载出的目标正文、列表和真实链接，不进行点击、输入、滚动、翻页或登录。": "Open the specified URL and retrieve the target body, lists, and real links loaded automatically, without clicking, typing, scrolling, pagination, or login.",
-    "按独立保存的目标页面证据登记稳定文字、完整正文分区，以及名称—链接、路径、字段、去重和数量要求。": "Use independently saved target-page evidence to register stable text, complete body regions, and name-link, path, field, deduplication, and quantity requirements.",
-    "先排除请求失败、空返回、验证或拦截页面和页面外壳，再逐项检查本例声明的稳定文字、正文覆盖与组合规则。": "First exclude request failures, empty responses, verification or blocked pages, and page shells. Then check the case's declared stable text, body coverage, and composite rules.",
-    "本例登记的全部规则均通过；文章只返回标题或开头、列表数量不足、链接不符合真实路径，均不通过。": "Every registered rule for the case must pass. An article with only a title or opening, a list below its quantity threshold, or links that do not match real paths fails.",
+    "按独立保存的目标页面证据登记稳定文字、完整正文分区，以及名称—链接、路径、字段、去重和数量要求。稳定文字会明确标为必需或诊断。": "Use independently saved target-page evidence to register stable text, complete body regions, and name-link, path, field, deduplication, and quantity requirements. Stable text is explicitly marked as required or diagnostic.",
+    "先排除请求失败、空返回、验证或拦截页面和页面外壳，再逐项检查本例声明的稳定文字、正文覆盖与组合规则；诊断文字只显示命中情况。": "First exclude request failures, empty responses, verification or blocked pages, and page shells. Then check the case's declared stable text, body coverage, and composite rules; diagnostic text only reports whether it matched.",
+    "正文与列表规则及标为必需的稳定文字均通过；诊断文字不影响结论。文章只返回标题或开头、列表数量不足、链接不符合真实路径，均不通过。": "Body and list rules and stable text marked as required must pass; diagnostic text does not affect the verdict. An article with only a title or opening, a list below its quantity threshold, or links that do not match real paths fails.",
     "每例启动一个独立进程；由 Moli 的默认 done 完成方式决定何时交付内容。": "Each case starts a separate process; Moli's default done completion mode decides when to deliver the content.",
+    "每例启动一个独立进程；动态网站正文统一等待 Moli 原生 DOM 稳定信号，并启用原生页面布局和已加载子文档。": "Each case starts a separate process. Every dynamic-body task waits for Moli's native DOM-stability signal and enables native page layout and loaded child documents.",
+    "动态网站正文整类使用 CLI 原生 domstable": "The complete dynamic-page body family uses the CLI's native domstable mode",
+    "本轮 {record_count} 个动态网站正文任务统一使用 Moli 原生 Markdown、--layout、--with-frames 和 domstable。除目标 URL 外，没有逐题等待元素、延迟、提取脚本或特殊参数，也没有启用理解模型、格式回退或付费后备方法。": "All {record_count} dynamic-body tasks use Moli's native Markdown, --layout, --with-frames, and domstable mode. Apart from the target URL, there are no per-task element waits, delays, extraction scripts, or special parameters. No interpretation model, format fallback, or paid backup method is enabled.",
     "本轮100例统一使用 Moli 原生 Markdown Fetch 与默认 done 完成方式；除目标 URL 外没有逐例等待元素、额外等待时间、提取脚本或特殊参数。未启用额外的理解模型或付费后备方法。": "All 100 cases use Moli's native Markdown Fetch and default done completion mode. Apart from the target URL, no case-specific wait element, extra delay, extraction script, or special parameter is used. No additional interpretation model or paid fallback is enabled.",
     "核验初次加载范围：稳定内容锚点（稳定标题、栏目、说明）与条目的必需字段、数量、唯一性和类型共同决定任务通过。频繁变化的名单、条目标题和价格按声明的结构与类型核验，不固定旧快照取值。HTTP 页面壳不通过；渲染、内嵌数据和公开 API 均可作为实现路径。全文质量仅在有完整、可比的参考时另算。 已登记正文覆盖规则的案例，还须在最多 5 个参考区域中逐区达到 80% 词语计数覆盖，不能只返回标题或开头。 Ajax | Web Scraper Test Sites 的字段覆盖要求：price至少 6 条、description至少 6 条、reviews至少 6 条，各归属于完整且唯一的记录。 React · 商品与分期信息 的字段覆盖要求：分期至少 15 条、配送至少 13 条，各归属于完整且唯一的记录。": "Initial-load acceptance combines stable content anchors (stable headings, sections, and explanations) with each record's required fields, count, uniqueness, and types. Frequently changing lists, item titles, and prices are checked against declared structure and types rather than frozen snapshot values. An HTTP shell alone fails; rendering, embedded data, and public APIs are all valid implementation routes. Full-text quality is calculated separately only when a complete comparable reference exists. Cases with registered body-coverage rules must also reach 80% token-count coverage in each of up to 5 reference regions; returning only a title or opening section is insufficient. For Ajax | Web Scraper Test Sites, field coverage requires at least 6 price, 6 description, and 6 review values, each belonging to a complete unique record. For React · 商品与分期信息, field coverage requires at least 15 installment entries and 13 delivery entries, each belonging to a complete unique record.",
     "新增25例结果审核 25/25；未决 0；75例沿用既有审核记录": "Added 25-case result review: 25/25; 0 unresolved. Existing audit records are retained for the prior 75 cases",
@@ -1003,6 +1063,11 @@
     "全调用 P50": "All-call P50",
     "全调用 P95": "All-call P95",
     "全调用均值 / P50 / P95": "All-call mean / P50 / P95",
+    "总耗时均值": "Mean total latency",
+    "总耗时 P50": "P50 total latency",
+    "总耗时 P95": "P95 total latency",
+    "总耗时均值 / P50 / P95": "Mean / P50 / P95 total latency",
+    "总耗时按每题所有物理调用累计，包含失败重试和重试等待；每题仍只计一个样本。": "Total latency accumulates all physical calls for each task, including failure retries and retry waits; each task remains one sample.",
     "按需查看共同成功任务耗时": "View shared-pass latency on demand",
     "通过调用 P50 ms": "Successful-call P50 (ms)",
     "通过调用 P95 ms": "Successful-call P95 (ms)",
@@ -1217,7 +1282,7 @@
     "完整报告中的任务均明确判为通过或失败。诊断构建可显示未测，但会被标为不可靠且不能发布。通过不证明事实准确性、实时性或整页完整性。": "Every task in a complete report has an explicit pass or fail verdict. Diagnostic builds may show unmeasured tasks, but are marked unreliable and cannot be published. A pass does not prove factual accuracy, freshness, or whole-page completeness.",
     "所有分数由本轮调用记录计算。网页与服务可能变化；结论仅适用于本轮样本和配置。": "All scores are computed from the recorded calls. Web pages and services may change; conclusions apply only to this sample and configuration.",
     "先比较方法在同一任务上的成败组合，再筛选全部执行记录。": "Compare methods on the same tasks first, then filter the complete execution record.",
-    "按同一任务逐项比较，不用各方法不同的成功样本拼接结论。成功与失败均沿用主榜已核验判定；点击方法可查看标准答案、实际返回和原因。": "Methods are compared task by task; conclusions never splice together different success samples. Pass and fail states use the reviewed primary verdicts. Open a method to inspect its reference, output, and rationale.",
+    "按同一任务逐项比较，不用各方法不同的成功样本拼接结论。成功与失败均沿用主榜的程序判定；点击方法可查看标准答案、实际返回和原因。": "Methods are compared task by task; conclusions never splice together different success samples. Pass and fail states use the primary program verdicts. Open a method to inspect its reference, output, and rationale.",
     "记录每轮核验的范围、发现、纠正和未决事项。": "Each review round records its scope, findings, corrections, and unresolved items.",
     "本轮没有绑定独立核验记录。": "No independent review record is bound to this build.",
     "代码、评测集和复现说明以 browser-eval 仓库为准；本页只列本轮必要配置。": "The browser-eval repository is authoritative for code, dataset, and reproduction instructions. This page lists only the configuration required for this run.",
@@ -1309,7 +1374,7 @@
 
     # Overview and ranking guidance.
     "Web Fetch 评测报告": "Web Fetch benchmark report",
-    "五类浏览器、七种方法取同一批网页：速度、正文与交付边界": "Five browsers, seven methods, one shared URL set: latency, content, and delivery boundaries",
+    "五类浏览器、六种配置、七类任务：正文、媒体与交付边界": "Five browsers, six configurations, seven task families: content, media, and delivery boundaries",
     "从分数差异、失败案例和实现机制，理解如何选择抓取方法。": "Use score differences, failure evidence, and implementation boundaries to choose the right retrieval method.",
     "阅读全文 →": "Read the interpretation →",
     "查看核验轮次 →": "View review rounds →",
@@ -1350,7 +1415,7 @@
     "仅链接": "Link only",
 
     # Shared metric definitions and task-family explanations.
-    "静态网站正文、动态网站正文、热门网站正文和文档正文使用同一评分流程。页面来源与加载方式不同，改变的是案例要求，不改变指标定义。": "General web, rendered web, popular-site, and document text all use the same scoring pipeline. Source and loading behavior change the task contract, not the metric definitions.",
+    "静态网站正文、动态网站正文、热门网站正文、风控网页正文和文档正文使用同一评分流程。页面来源与加载方式不同，改变的是案例要求，不改变指标定义。": "Static-site, dynamic-site, popular-site, risk-control, and document body-text tasks share one scoring pipeline. Their sources and loading behavior affect case requirements, not metric definitions.",
     "统一验收流程": "Shared acceptance pipeline",
     "接口返回 → 排除空内容与错误页 → 核对题目要求的文字和字段 → 检查列表数量、类型与唯一性 → 汇总任务结果。只执行该例适用的检查；失败详情保留具体未满足项。图片与视频沿用请求和交付检查，资源地址或文件字节另按格式核验。": "Provider response → reject empty content and error pages → check required text and fields → validate record count, types, and uniqueness → determine the task verdict. Only applicable checks run for each task, and failures retain the unmet requirements. Image and video tasks use the same request and delivery checks, with resource URLs or file bytes validated by format.",
     "满足该例全部验收规则的次数 ÷ 已有验收证据的任务。段落、列表、字段都属于内容要求；没有 F1 最低分门槛。请求失败计入分母；任何计划调用缺失或无法判分时，整份报告标为不可靠并禁止发布。": "Calls satisfying every acceptance rule divided by tasks with acceptance evidence. Paragraphs, lists, and fields are all content requirements; there is no minimum F1 threshold. Request failures remain in the denominator. A missing or unjudgeable planned call makes the report unreliable and blocks publication.",
@@ -1645,6 +1710,9 @@
     "评分使用上方完整标准答案和完整实际返回，不使用下面展示的短定位样例。两边先统一大小写和常见排版差异，去掉 Markdown 链接地址、空白及标点，再切成连续六字符片段。标准答案按前后位置分成 5 份；每份覆盖率 = 在完整实际返回中找到的片段数 ÷ 该份标准片段总数。本任务要求每个位置至少达到 60.0%，且至少 4/5 个位置达到 80.0%。同一个实际片段只能计入一个位置，避免重复文字被多次借用。全文完整度、纯净度和 F1 仍按完整文本另行计算。": "Scoring uses the complete reference and complete actual output above, not the short inspection snippets below. Both sides are normalized for case and common formatting differences; Markdown link destinations, whitespace, and punctuation are removed before forming contiguous six-character shingles. The reference is divided into 5 ordered regions. Region coverage equals matched shingles in the complete output divided by reference shingles in that region. Every region must reach the 60.0% hard floor and at least 4 of 5 regions must reach the 80.0% target. An output shingle can count toward only one region, preventing repeated text from being reused. Full-text recall, precision, and F1 are calculated separately on the complete text.",
     "评分使用上方完整标准答案和完整实际返回，不使用下面展示的短定位样例。两边先统一大小写和常见排版差异，去掉 Markdown 链接地址、空白及标点，再切成连续六字符片段。标准答案按前后位置分成 1 份；每份覆盖率 = 在完整实际返回中找到的片段数 ÷ 该份标准片段总数。本任务要求每个位置至少达到 60.0%，且至少 1/1 个位置达到 80.0%。同一个实际片段只能计入一个位置，避免重复文字被多次借用。全文完整度、纯净度和 F1 仍按完整文本另行计算。": "Scoring uses the complete reference and complete actual output above, not the short inspection snippets below. Both sides are normalized for case and common formatting differences; Markdown link destinations, whitespace, and punctuation are removed before forming contiguous six-character shingles. This reference has 1 region. Region coverage equals matched shingles in the complete output divided by reference shingles in that region. At least 1 of 1 region must reach the 60.0% hard floor and the 80.0% target. An output shingle can count only once. Full-text recall, precision, and F1 are calculated separately on the complete text.",
     "每组至少命中一种允许表达，所有组均须通过。": "At least one accepted variant must match in every group; all groups are required.",
+    "这些文字只用于核对抓取范围；未命中不会使任务失败。": "These texts only verify retrieval scope; missing them does not fail the task.",
+    "范围核对文字": "Scope-check text",
+    "这里列出正文验收规则和用于范围核对的文字；范围核对文字不影响是否通过。": "This section lists the body acceptance rules and text used to check retrieval scope; scope-check text does not affect acceptance.",
     "必需字段与要求": "Required fields and constraints",
     "名称与链接核验依据": "Name and URL validation basis",
     "各字段须属于同一条记录，不得跨条目拼接。按详情链接核对唯一性。": "All fields must belong to the same record and cannot be assembled across items. Uniqueness is checked by detail URL.",
@@ -2061,7 +2129,7 @@
     "查看参考与实测 →": "View reference and measured results →",
     "以 Attention Is All You Need PDF 为例，读取整篇论文；另测 DOCX、TXT 和嵌入文档页面。": "Use the Attention Is All You Need PDF as an example and read the complete paper; DOCX, TXT, and embedded-document pages are tested separately.",
     "从原始文件全部页面、段落和表格独立提取正文，并保存原文件。": "Independently extract body text from every page, paragraph, and table in the original file, and retain the file.",
-    "输入原始文档 URL。方法能直接返回正文时直接使用；只返回 PDF、DOCX 等原始字节时，在同一计时预算内本地解析。取得可读正文后停表，再对照全文计算完整度、纯净度与 F1，并检查标题、核心术语及章节。": "Provide the original document URL. Use body text directly when the method returns it; when it returns only PDF, DOCX, or other original bytes, parse locally within the same timing budget. Stop timing once readable body text is available, then calculate recall, precision, and F1 against the complete text and check the title, core terms, and sections.",
+    "输入原始文档 URL，直接使用参评浏览器官方接口返回的正文。只返回 PDF、DOCX 等原始字节时，本题不通过；评测端不再替它解析。取得可读正文后停表，再对照全文计算完整度、纯净度与 F1，并检查标题、核心术语及章节。": "Provide the original document URL and use the body text returned by the browser's official interface. A task fails if the method returns only raw PDF, DOCX, or other file bytes; the evaluation harness does not parse the file on its behalf. Stop timing once readable body text is available, then compare it with the full reference text for recall, precision, and F1, and check the title, key terms, and sections.",
     "必须返回文档正文，只返回论文下载地址不通过。": "The document body is required; a paper download URL alone fails.",
     "必须返回文档正文，只返回论文下载地址不通过。查看本例完整参考与逐方法结果 →": "The document body is required; a paper download URL alone fails. View the complete reference and per-method results →",
     "查看本例完整参考与逐方法结果 →": "View the complete reference and per-method results →",
@@ -2083,10 +2151,12 @@
     "变更记录": "Changelog",
     "评分规则修订收据": "Scoring-rule revision receipt",
     "参考答案修订收据": "Reference-answer revision receipt",
-    "按声明范围同时核对稳定内容锚点（稳定标题、栏目、说明）和条目数量、必需字段、唯一性和字段类型，不是只检查数量。频繁变化的名单、条目标题、价格和名次只按声明的结构、类型与数量核验，不固定旧快照取值；这不等于证明这些变化值真实或最新。": "Within the declared scope, validate stable content anchors (stable headings, sections, and descriptions) together with record count, required fields, uniqueness, and field types—not count alone. Frequently changing lists, item titles, prices, and ranks are checked by declared structure, type, and count rather than old snapshot values; this does not establish that those values are accurate or current.",
+    "按声明范围核对稳定内容锚点（稳定标题、栏目、说明）和条目数量、必需字段、唯一性和字段类型。锚点会明确标为必需或诊断：必需锚点参与验收，诊断锚点只核对抓取范围。频繁变化的名单、条目标题、价格和名次只按声明的结构、类型与数量核验，不固定旧快照取值；这不等于证明这些变化值真实或最新。": "Within the declared scope, validate stable content anchors (stable headings, sections, and descriptions), record count, required fields, uniqueness, and field types. Each anchor is marked as required or diagnostic: required anchors affect acceptance, while diagnostic anchors only check retrieval scope. Frequently changing lists, item titles, prices, and ranks are checked by declared structure, type, and count rather than old snapshot values; this does not establish that those values are accurate or current.",
     "任务结果对应已登记的内容锚点、字段要求与数量范围；保留原始输出及评分规则，便于逐项复核。": "Each task verdict binds to registered content anchors, field requirements, and count range. Raw output and scoring rules are retained for item-level verification.",
     "原始输出哈希和证据完整性检查保留。已验证的 stable_contract 按数据不变量验收，不依赖快照时效；exact_snapshot 模式仍可按其协议检查参考。两种模式不能混用，也不声称所有调用满足同一采集窗口。": "Raw-output hashes and evidence-integrity checks are retained. A validated stable_contract uses data invariants and does not depend on snapshot age; exact_snapshot references remain governed by their own protocol. The modes cannot be mixed, and the report does not claim one capture window for every call.",
-    "完整度、纯净度与 F1 必须有完整参考，且与输出的目标范围和内容具有可比性；不能用条目数量推算全文 F1。缺少完整、可比的参考显示 —（全文指标未评测），任务通过率和耗时仍保留。稳定内容锚点仍用于任务验收；文本重合不证明变化值的事实准确性或实时性，名单变化本身不使稳定任务契约过期。": "Recall, precision, and F1 require a complete reference comparable in target scope and content; record count cannot imply full-text F1. Without such a reference, full-text metrics are shown as — while task pass rate and latency remain. Stable content anchors still determine acceptance. Text overlap does not establish factual accuracy or freshness, and list changes alone do not expire a stable task contract.",
+    "标为必需的稳定内容锚点参与验收；诊断锚点只核对抓取范围。": "Stable content anchors marked as required affect acceptance; diagnostic anchors only check retrieval scope.",
+    "完整度、纯净度与 F1 必须有完整参考，且与输出的目标范围和内容具有可比性；不能用条目数量推算全文 F1。缺少完整、可比的参考显示 —（全文指标未评测），任务通过率和耗时仍保留。标为必需的稳定内容锚点参与验收；诊断锚点只核对抓取范围。文本重合不证明变化值的事实准确性或实时性，名单变化本身不使稳定任务契约过期。": "Recall, precision, and F1 require a complete reference comparable in target scope and content; record count cannot imply full-text F1. Without such a reference, full-text metrics are shown as — while task pass rate and latency remain. Stable content anchors marked as required affect acceptance; diagnostic anchors only check retrieval scope. Text overlap does not establish factual accuracy or freshness, and list changes alone do not expire a stable task contract.",
+    "任务结果对应已登记的必需锚点、字段要求与数量范围；诊断锚点另行展示。保留原始输出及评分规则，便于逐项复核。": "Task results are bound to registered required anchors, field requirements, and count ranges; diagnostic anchors are shown separately. Raw outputs and scoring rules are retained for item-by-item review.",
 
     # Current release-note entries.
     "Codex 独立强推理代理": "Codex independent high-reasoning agent",
@@ -2140,8 +2210,17 @@
     "本轮没有媒体解析，不据此推断产品能力": "This run performs no media parsing; no broader product limitation is inferred",
     "本轮异常二进制输出仅保留证据": "Anomalous binary output from this run is retained as evidence only",
     "原生 Markdown": "Native Markdown",
+    "直接取得 Moli 原生 Markdown": "Retrieve Moli native Markdown directly",
+    "直接取得 Moli 原生 Markdown；直接 PDF/DOCX 不提供可读正文": "Retrieve Moli native Markdown directly; direct PDF/DOCX inputs do not yield readable body text",
+    "通过 Moli 原生执行接口读取已加载内容；表达式只由公开任务类型决定": "Read loaded content through Moli's native execution interface; expressions are selected only by public task type",
+    "Markdown 正文统一使用 Moli 默认 done 完成方式": "Markdown body uses Moli's default done completion mode",
+    "每次调用 45 秒；不改写 Moli 内部 HTTP 和连接超时默认值": "45 seconds per call; Moli's internal HTTP and connection timeout defaults remain unchanged",
+    "默认启用": "Enabled by default",
+    "普通、动态、热门、风控和直接文档正文统一使用 Moli 原生 Markdown。文件使用原生 CDP 响应或同一二进制的原始附件接口。图片、视频资源和嵌入文档只通过 Moli 原生执行接口读取已加载内容，不另抓模块或下载文档后外部解析。最终网址仅作诊断，不决定正文是否通过；失败后不切换格式或借用其他 provider。": "Regular, dynamic, popular-site, risk-control, and direct-document body tasks use Moli's native Markdown. Files use native CDP responses or the same binary's raw attachment interface. Image and video resources and embedded documents use only Moli's native execution interface to inspect loaded content; the runner does not fetch modules separately or parse downloaded documents externally. The final URL is diagnostic only and does not determine whether body extraction passes. A failure does not switch format or borrow another provider.",
+    "普通、动态、热门、风控及 HTML/TXT 文档正文使用 Moli 原生 Markdown。直接 PDF/DOCX 仍调用同一原生接口；接口没有交付可读正文时按失败记录，评测端不下载后解析。文件使用原生 CDP 响应或同一二进制的原始附件接口。图片、视频资源和嵌入文档只通过 Moli 原生执行接口读取已加载内容。最终网址仅作诊断，不决定正文是否通过；失败后不切换格式或借用其他 provider。": "Regular, dynamic, popular-site, risk-control, and HTML/TXT document-body tasks use Moli's native Markdown. Direct PDF/DOCX inputs still use that native interface; if it does not return readable body text, the task fails and the benchmark does not download and parse the file. Files use native CDP responses or the same binary's raw attachment interface. Image and video resources and embedded documents use only Moli's native execution interface to inspect loaded content. The final URL is diagnostic only and does not determine whether body extraction passes. A failure does not switch format or borrow another provider.",
     "CLI 原生 Markdown": "Native Markdown from CLI",
     "CLI · 按任务预选 Markdown、DOM eval 或裸响应路线": "CLI · preselect Markdown, DOM eval, or bare-response routes by task",
+    "CLI · 按任务预选 Markdown、DOM eval 或原始响应路线": "CLI · preselect Markdown, DOM eval, or raw-response routes by task",
     "CLI · 按任务预选 Markdown、JSON 诊断、DOM eval 或裸响应路线": "CLI · preselect Markdown, JSON diagnostics, DOM eval, or bare-response routes by task",
     "Moli 一次性 fetch：普通正文用 Markdown，挑战题用 JSON 返回最终 DOM、状态和跳转诊断后在同一截止内本地转 Markdown；不调用模型。": "Moli performs one fetch per task: ordinary body tasks use Markdown, while challenge tasks return final-DOM JSON, status, and redirect diagnostics before local Markdown conversion within the same deadline; no model is called.",
     "stdout 文本/JSON/字节；stderr 独立诊断": "Text, JSON, or bytes on stdout; separate diagnostics on stderr",
@@ -2213,8 +2292,8 @@
     "text.verbosity=full、maxAgeHours=0；资源题取 links/imageLinks，具名列表题取 richLinks 并只接收非空 anchor—URL 对。本轮没有调用摘要或高亮生成。": "This run uses text.verbosity=full and maxAgeHours=0. Resource tasks collect links/imageLinks; named-list tasks collect richLinks and accept only non-empty anchor–URL pairs. Summary and highlight generation are not called.",
     "只调用 /markdown；普通网页使用 networkidle2，动态任务使用预声明 selector 和有界稳定等待；未提供源站登录 Cookie，未调用其他端点。": "Only /markdown is called. Ordinary pages use networkidle2, while dynamic tasks use a predeclared selector and bounded settling wait. No origin-login cookie is supplied and no other endpoint is called.",
     "非动态网页使用通用浏览器策略、domcontentloaded 与无缓存；动态任务使用预声明的完成条件。直接 PDF 正文在调用前选择 PDFCrawlerStrategy 与 PDFContentScrapingStrategy；文件任务选择原生 HTTP 文件策略并统一校验。未启用截图、OCR 或 LLM 提取；媒体字段不代表内容理解。": "Non-dynamic pages use the general browser strategy with domcontentloaded and no cache; dynamic tasks use their predeclared completion condition. Direct PDF body tasks preselect PDFCrawlerStrategy with PDFContentScrapingStrategy; file tasks select the native HTTP file strategy and shared validation. Screenshots, OCR, and LLM extraction are not enabled, and media fields do not imply content understanding.",
-    "正文与文件是不同交付契约。直接文档若返回原始字节，评测在同一次预算内解析；直接媒体只校验格式、长度和冻结 SHA-256，不进行内容理解。1.0.6 与 1.1.1 的裸 fetch 行为由官方发行二进制实测确认，1.1.3 还在 CLI 帮助中明确说明。": "Body text and files have different delivery contracts. When a direct document returns original bytes, the benchmark parses them within the same budget; direct media is checked only for format, length, and frozen SHA-256, without content understanding. Bare-fetch behavior for 1.0.6 and 1.1.1 was verified with official release binaries, and 1.1.3 also documents it in CLI help.",
-    "普通网页 --dump markdown；直接 PDF、DOCX 和媒体不传 --dump；本轮没有启用失败重试，端到端预算 45 秒。": "Ordinary pages use --dump markdown; direct PDF, DOCX, and media inputs omit --dump. Failure retries were disabled in this run; the end-to-end budget is 45 seconds.",
+    "正文与文件是不同交付契约。文档题要求 Moli 的原生 Markdown 接口直接交付可读正文；只返回 PDF/DOCX 字节或地址不通过，评测端不再外部解析。直接媒体文件只校验格式、长度和冻结 SHA-256，不进行内容理解。": "Body text and files have different delivery contracts. Document tasks require Moli's native Markdown interface to return readable body text directly. PDF or DOCX bytes or a URL alone do not pass, and the benchmark does not parse them externally. Direct media files are checked only for format, length, and frozen SHA-256, without content understanding.",
+    "网页与文档正文使用 --dump markdown；直接媒体文件返回原始字节；本轮没有启用失败重试，端到端预算 45 秒。": "Webpage and document body tasks use --dump markdown; direct media files return original bytes. Failure retries were disabled in this run, with a 45-second end-to-end budget.",
     "obscura fetch --dump markdown 原生输出": "Native output from obscura fetch --dump markdown",
     "下载能力与来源数据": "Acquisition capability and source data",
     "Beta 期免费；账户级限制": "Free during beta; account-level limits apply",
@@ -2243,6 +2322,28 @@
 
 })
 
+# Reader-facing task-family copy from report_components.py. These strings are
+# rendered on the methodology page and therefore need full English editions;
+# measured task names and prompts remain unchanged.
+TEXT.update({
+    "输入网页，从页面里找到指定图片、视频或视频入口地址；另有 1 题读取视频页标题与发布者。": "Given a web page, find the specified image, video, or playback URL. One additional task asks for the video-page title and publisher.",
+    "16 道地址题使用独立保存的资源地址或地址规则；1 道文字题使用可见标题与发布者。": "Sixteen URL tasks use independently saved resource URLs or URL rules. One text task uses the visible title and publisher.",
+    "地址题只核对返回值里是否出现目标地址，不要求另行下载媒体文件；文字题按登记事实核对。": "URL tasks check whether the returned value contains the target URL and do not require a separate media download. The text task checks the registered facts.",
+    "完成该题声明的地址或文字交付。拿到地址不等于取得文件，也不表示理解了图片、画面、字幕或声音。": "Return the URL or text required by the task. A URL alone does not deliver the file or show understanding of images, video, captions, or audio.",
+    "输入 1 个直接图片地址或 2 个直接视频地址，取得原始文件。": "Retrieve the original file from one direct image URL or either of two direct video URLs.",
+    "独立保存的原文件格式、长度和 SHA-256。": "Independently saved file format, length, and SHA-256.",
+    "核对实际返回字节的格式特征、长度和目标 SHA-256；不对二进制文件做 Markdown 转换。": "Check the returned bytes against the required file signature, length, and SHA-256. Binary files are not converted to Markdown.",
+    "必须实际交付匹配的文件字节；复述输入网址或只返回网页文字不通过。本组不测试媒体理解。": "The method must return the matching file bytes. Repeating the input URL or returning page text does not pass. These tasks do not test media understanding.",
+    "查看网页媒体参考与结果 →": "View web-media references and results →",
+    "查看原始文件参考与结果 →": "View original-file references and results →",
+    "完成该题声明的地址或文字交付。拿到地址不等于取得文件，也不表示理解了图片、画面、字幕或声音。查看网页媒体参考与结果 →": "Return the URL or text required by the task. A URL alone does not deliver the file or show understanding of images, video, captions, or audio. View web-media references and results →",
+    "必须实际交付匹配的文件字节；复述输入网址或只返回网页文字不通过。本组不测试媒体理解。查看原始文件参考与结果 →": "The method must return the matching file bytes. Repeating the input URL or returning page text does not pass. These tasks do not test media understanding. View original-file references and results →",
+    "本轮 100 例统一使用 Moli 原生 Markdown 和默认 done 完成方式。除目标 URL 外，没有逐例等待元素、额外等待时间、提取脚本或特殊参数，也没有启用理解模型、格式回退或付费后备方法。": "All 100 cases use Moli's native Markdown and default done completion mode. Beyond the target URL, there are no case-specific wait elements, added delays, extraction scripts, or special parameters. No interpretation model, format fallback, or paid backup method is enabled.",
+    "所有方法进入同一个评分入口，但按任务交付物验收，而不是强制使用同一种中间格式。网页与文档题验收可读正文；网页媒体题验收指定资源地址或登记文字；直接媒体文件题验收图片或视频字节；结构任务验收字段和稳定文字。HTML/Markdown 链接与明确配对的结构化名称—链接字段按同一规则核验；不把请求回显或诊断日志当成答案。原始输出与原始适配器状态保留，报告层不按方法名称改写任务结果。": "Every method enters the same scoring pipeline, while acceptance follows each task's required deliverable. Web and document tasks require readable body text; web-media tasks require the specified resource URL or registered text; direct-media tasks require image or video bytes; structure tasks require the declared fields and stable text. HTML and Markdown links follow the same checks as explicitly paired structured name–URL fields. Request echoes and diagnostic logs do not count as answers. Raw output and adapter status are preserved, and the report layer does not alter results by method name.",
+    "这个边界比较的是“拿到本任务最终交付物”所需时间：服务直接返回成品时计完整往返；本地方法若还需下载、渲染或解析，也必须完成后才停表。文档正文必须由参评方法交付为可读文字；直接媒体文件任务到字节校验完成即停止，不做无关的 Markdown 转换。所有方法使用同一外层计时器和截止预算。超时答案不接收；无法取消的调用会被隔离，整批结果因此不完整并触发不可靠状态，构建产物不得发布。": "This boundary measures the time needed to obtain the task's final deliverable. A service that returns a finished result includes the full round trip; a local method stops only after any required download, rendering, or parsing. The evaluated method must deliver document body text in readable form. Direct-media tasks stop after byte validation and do not perform an unrelated Markdown conversion. Every method uses the same outer timer and deadline. Late answers are rejected. Calls that cannot be cancelled are isolated, which leaves the batch incomplete and blocks publication.",
+    "完整正文任务除原有核对点外，按参考正文最多五个连续位置检查字符六元组覆盖：每个位置至少达到 60%，通常要求至少四处达到 80%。所有位置一次性做全局容量分配；同一返回片段实例只能计入一个位置，位置排列顺序不影响结论。若页面存在经独立证据确认的合法重排，案例可显式登记不同位置门槛。比较忽略空白和排版符号但保留文字顺序；全文 F1 独立保留实际值。直接媒体文件任务必须有字节验收，资源 URL 不等于文件。": "Alongside the existing checks, complete-body tasks measure six-character-shingle coverage across up to five consecutive reference regions. Every region must reach 60%, and normally at least four must reach 80%. A global capacity assignment ensures that each returned fragment instance counts toward only one region, regardless of region order. A task may declare different regional thresholds when independent evidence establishes legitimate reordering. Matching ignores whitespace and presentation marks while preserving text order; full-text F1 remains a separate measurement. Direct-media tasks require byte validation, and a resource URL does not count as a file.",
+})
+
 TEXT.update({
     "langchain-webbase 官方实现：": "Official langchain-webbase implementation:",
     "按本轮适配器介绍，不混用完整产品能力。输入示例展示正文配置，资源配置差异单列；它们不是每条历史请求的逐字回放。各调用所属批次及实际配置见“环境与复现”。输出示例取存档调用，经适配器整理后的真实节选，不冒充原始 HTTP 响应。Key 和账号均用占位符。": "Descriptions follow the adapters used in this run and do not imply each product's full capabilities. Request examples show body-text settings; resource-setting differences are listed separately. They are not verbatim replays of every historical request. See Reproduction for each call's batch and effective configuration. Response examples are genuine excerpts from archived calls after adapter normalization, not raw HTTP responses. Keys and account values use placeholders.",
@@ -2388,6 +2489,7 @@
 # are deliberately narrow report phrases; they never include task names,
 # reference answers, or provider output.
 PHRASES = {
+    "Moli 1.1.15 · 独立资源批次": "Moli 1.1.15 · independent resource cohort",
     "的 Moli 已保存输出仍包含": "'s saved Moli output still contains ",
     "，内容规则未通过。请求成功在这里记录了一个正常返回的结果，却没有等来任务要求的内容。这比方法是否具备浏览器功能更接近本次接入要解决的问题。": ", but failed the content rule. A normal response did not wait for the required content. This is closer to the integration problem than whether the method has browser features.",
     "Quotes to Scrape 的": "Quotes to Scrape's ",
@@ -2525,6 +2627,7 @@
 
 
 REGEX = [
+    (re.compile(r"^每次物理调用预算为 ([\d.]+) 秒，重试后的累计耗时可能超过该预算。$"), r"Each physical call has a \1-second budget; accumulated latency after retries can exceed it."),
     (re.compile(r"^本报告包含 (\d+) 个任务、(\d+) 个逻辑结果，任务通过 (\d+)/(\d+)。结论仅适用于已登记的任务和规则。$"), r"This report contains \1 tasks and \2 logical results, with \3/\4 task passes. Conclusions apply only to the registered tasks and rules."),
     (re.compile(r"^的 F1 为 ([\d.]+%)，但没有满足该例任务规则。零通过表示没有一次满足全部任务门槛，不表示输出与参考毫无词语重合。这里的 F1 对照已保存的样本文本，只诊断文字重合，不承担实时事实核验。词频相似度允许部分文字得分，任务规则检查指定的内容或字段结构；二者应保留各自的含义。$"),
      r" has F1 \1 but does not satisfy its task rules. Zero passes means no call met every threshold, not zero textual overlap. This F1 compares saved sample text only and does not verify live facts. Token-frequency similarity can award partial text credit, while task rules check required content or field structure; the two retain distinct meanings."),
@@ -2664,6 +2767,7 @@
     (re.compile(r"^(\d+)\. 位置 (\d+)（标准答案 (\d+)–(\d+)%）$"), r"\1. Region \2 (reference \3–\4%)"),
     (re.compile(r"^位置 (\d+)（标准答案 (\d+)–(\d+)%）$"), r"Region \1 (reference \2–\3%)"),
     (re.compile(r"^必须出现的稳定文字 (\d+)（任一写法即可）$"), r"Required stable text \1 (any listed variant)"),
+    (re.compile(r"^用于范围核对的稳定文字 (\d+)（任一写法即可）$"), r"Stable text for scope diagnosis \1 (any listed variant)"),
     (re.compile(r"^稳定文字 (\d+)$"), r"Stable text \1"),
     (re.compile(r"^正文核对点-(\d+)$"), r"Body check \1"),
     (re.compile(r"^至少 (\d+) 条完整且不重复的记录$"), r"At least \1 complete, unique records"),
@@ -2955,6 +3059,12 @@
 def release_translations(history: dict) -> dict[str, str]:
     """Localize only the structured release records included in this report."""
     translations = {}
+
+    def add(source, target):
+        if source in translations and translations[source] != target:
+            raise ValueError('Conflicting English release translation for ' + repr(source))
+        translations[source] = target
+
     for release in history['releases']:
         if any(kind in release.get('comparison_kinds', []) for kind in (
                 'webmainbench_frozen_html_to_markdown', 'public_benchmark_research',
@@ -2966,11 +3076,12 @@ def release_translations(history: dict) -> dict[str, str]:
                 or len(release.get('changes', [])) != len(english.get('changes', []))):
             raise ValueError('Web Fetch release requires complete English text: ' + release['id'])
         for key in ('title', 'summary'):
-            translations[release[key]] = english[key]
+            add(release[key], english[key])
         for source_row, target_row in zip(release['changes'], english['changes'], strict=True):
             if len(source_row) != 4 or len(target_row) != 4:
                 raise ValueError('Web Fetch release change rows must have four columns: ' + release['id'])
-            translations.update(zip(source_row, target_row, strict=True))
+            for source, target in zip(source_row, target_row, strict=True):
+                add(source, target)
 
     return translations
 
@@ -3227,10 +3338,18 @@ def release_translations(history: dict) -> dict[str, str]:
     re.compile(r"^共 (\d+) 组稳定文字，全部属于标准答案；当前区域显示约 5 组高度，向下滚动查看全部。$"),
     r"All \1 stable-text groups belong to the reference answer. This area shows about 5 groups at a time; scroll to view all.",
 ))
+REGEX.insert(0, (
+    re.compile(r"^共 (\d+) 组稳定文字，只用于范围核对，不影响是否通过；当前区域显示约 5 组高度，向下滚动查看全部。$"),
+    r"All \1 stable-text groups are scope diagnostics and do not affect acceptance. This area shows about 5 groups at a time; scroll to view all.",
+))
 REGEX.insert(0, (
     re.compile(r"^共 (\d+) 项稳定文字判定，全部参与评分；当前区域显示约 5 项高度，向下滚动查看全部。$"),
     r"All \1 stable-text checks contribute to scoring. This area shows about 5 at a time; scroll to view all.",
 ))
+REGEX.insert(0, (
+    re.compile(r"^共 (\d+) 项稳定文字判定，只用于范围核对，不影响是否通过；当前区域显示约 5 项高度，向下滚动查看全部。$"),
+    r"All \1 stable-text checks are scope diagnostics and do not affect acceptance. This area shows about 5 at a time; scroll to view all.",
+))
 
 REGEX.insert(0, (
     re.compile(r"^(\d+) 个物理调用日志已保存并通过 SHA-256 校验。$"),
@@ -3324,6 +3443,11 @@ def release_translations(history: dict) -> dict[str, str]:
     "接收": "Received",
     "发送": "Sent",
     "同题口径：所列配置共同通过": "Matched-task scope: general pages passed by every listed configuration:",
+    "所列配置共同通过": "Tasks passed by every listed configuration:",
+    "；这项交集只作附加诊断，不用于选择资源表的样本。各方法成功调用的条件统计另保留在资源证据中。": "; this intersection is diagnostic only and does not select the resource-table population. Conditional statistics for each method's successful calls are retained in the resource evidence.",
+    "资源数据来自四种本地方法的独立同题测量，不回填到历史通过率调用。每次调用启动一个受限的 Linux 客户端容器及独立网络；宿主控制器和容器启停不计入。CPU 与网络总量读取累计计数，内存与速率分位数按 50 ms 采样。": "Resource data comes from a separate matched-task measurement of the four local methods and is not added to historical pass-rate calls. Each call starts a limited Linux client container with a dedicated network; the host controller and container lifecycle are excluded. CPU and network totals use cumulative counters, while memory and rate percentiles are sampled every 50 ms.",
+    "资源主表统计预先确定的全部任务，包括失败调用，并列出各方法的通过数；成功调用另作条件统计，共同通过的任务仅作诊断。短于采样间隔的内存或速率峰值可能遗漏；Kitesurf 等远端服务的服务端 CPU、内存与上游流量不可观测，因而不进入资源表。": "The primary resource table includes every predeclared task, including failed calls, and shows each method's pass count. Successful calls have separate conditional statistics; shared successes are diagnostic only. Memory or rate peaks shorter than the sampling interval may be missed. Server-side CPU, memory, and upstream traffic for remote services such as Kitesurf are unobservable, so they are excluded from the resource table.",
+    "资源主表纳入预先确定的全部任务，包括失败调用，统计容器内调用进程、浏览器与转换过程的消耗；同时列出各方法通过数。各方法成功调用另作条件统计，共同通过的任务仅作诊断。Kitesurf 的远端 CPU、内存和上游流量不可见，因此不进入资源表。缺少任一资源字段、非 Linux/cgroup v2、镜像或二进制身份变化、并发不为 1，都会阻断资源包构建。": "The primary resource table includes every predeclared task, including failed calls, and measures the caller process, browser, and conversion within the container. Each method's pass count is shown. Successful calls have separate conditional statistics; shared successes are diagnostic only. Kitesurf's remote CPU, memory, and upstream traffic are unobservable, so it is excluded. Missing resource fields, a non-Linux/cgroup-v2 backend, changed image or binary identity, or concurrency other than one block resource packaging.",
     "个普通网页；失败任务不进入资源排名。": "pages; failed tasks do not enter the resource ranking.",
     "CPU 与计算": "CPU and compute",
     "内存": "Memory",
@@ -3350,6 +3474,17 @@ def release_translations(history: dict) -> dict[str, str]:
     "左右滑动查看完整对比": "Scroll horizontally for the full comparison",
 })
 
+REGEX.insert(0, (
+    re.compile(r"^资源表覆盖预先确定的全部 (\d+) 个普通网页，包含失败调用。这组任务的通过数：(.*)。各项平均值、P50、P95 使用同一完整范围。$"),
+    lambda match: (
+        f"The resource table covers all {match.group(1)} predeclared general pages, including failed calls. "
+        "Pass counts: " + match.group(2).replace(
+            "Moli 1.1.15 · 独立资源批次", "Moli 1.1.15 · independent resource cohort"
+        ).replace("，", ", ")
+        + ". Mean, P50, and P95 share this complete population."
+    ),
+))
+
 REGEX.insert(0, (
     re.compile(r"^(\d+)/(\d+)$"),
     r"\1/\2",
@@ -3364,8 +3499,10 @@ def release_translations(history: dict) -> dict[str, str]:
     + " / sent " + match.group(2).replace("、", ", "),
 ))
 REGEX.insert(0, (
-    re.compile(r"^(?:Chromium|Lightpanda|Moli 1\.1\.1|Obscura)(?:、(?:Chromium|Lightpanda|Moli 1\.1\.1|Obscura))+$"),
-    lambda match: match.group(0).replace("、", ", "),
+    re.compile(r"^(?:Chromium|Lightpanda|Moli(?: \d+(?:\.\d+)*)?(?: · 独立资源批次)?|Obscura)(?:、(?:Chromium|Lightpanda|Moli(?: \d+(?:\.\d+)*)?(?: · 独立资源批次)?|Obscura))+$"),
+    lambda match: match.group(0).replace(
+        "Moli 1.1.15 · 独立资源批次", "Moli 1.1.15 · independent resource cohort"
+    ).replace("、", ", "),
 ))
 REGEX.insert(0, (
     re.compile(r"^(.+) 是本轮资源效率领先者，在 (\d+) 个可按低消耗比较的指标中取得 (\d+) 项最低。这里的资源领先不等于综合任务通过率领先。$"),
@@ -3414,6 +3551,11 @@ def release_translations(history: dict) -> dict[str, str]:
     (re.compile(r"^(\d+) 个案例 · (\d+) 次调用，机器判分。本轮未重新核验来源。$"), r"\1 cases · \2 calls, machine-scored. Sources were not reverified for this run."),
     (re.compile(r"^每种方法均使用同一组 (\d+) 个任务，包含通过、未通过、错误和超时。耗时是单次调用从输入到返回的时间，不包含调用之间的统一冷却间隔。各方法串行执行，仍受本地与远程环境、网络和产品内部限制影响。$"), r"Each method uses the same \1 tasks, including passes, failures, errors, and timeouts. Latency runs from input to return for a single call, excluding shared cooldown intervals. Each method runs serially and remains subject to local and remote environments, networks, and product limits."),
 ]
+TEXT.update({
+    '普通正文使用 Markdown；动态完成条件与正文提取范围分离。直接文档使用 Moli 原生正文接口；文件使用原生 CDP 的原始响应；附件事件使用同一二进制的原始附件接口，计入同一时限。图片、视频资源只从已取得的 DOM 中读取，不另抓模块挖掘链接。文档原生文字读取计入同一截止预算；私网保护默认开启，只对冻结公开测试域名使用精确白名单；不在失败后切换格式或借用其他 provider。': 'Ordinary body text uses Markdown; readiness conditions are separate from extraction scope. Direct documents use Moli native body output. Files use native CDP responses; attachment events use the same binary’s raw attachment interface within the deadline. Image and video resources are read only from the retrieved DOM, without fetching modules for more links. Native document text retrieval shares the deadline. Private-network protection is enabled by default, with exact exceptions for frozen public test domains. Failures do not trigger format changes or another provider.',
+    '读取预声明范围；资源和嵌入文档使用各浏览器共用的脚本': 'Read the declared scope; resource and embedded-document tasks use the same scripts across browsers.',
+    '普通正文使用 Markdown；动态完成条件与正文提取范围分离。直接文档与文件使用 Moli 原生 CDP 的原始响应；附件事件使用同一二进制的原始附件接口，计入同一时限。图片、视频资源只从已取得的 DOM 中读取，不另抓模块挖掘链接。文档解析计入同一截止预算；私网保护默认开启，只对冻结公开测试域名使用精确白名单；不在失败后切换格式或借用其他 provider。': 'Ordinary pages use Markdown; readiness conditions are separate from extraction scope. Direct documents and files use Moli native CDP responses; attachment events use the same binary’s raw attachment interface within the same deadline. Image and video resources are read only from the retrieved DOM, without crawling modules for more links. Document parsing shares the deadline. Private-network protection is enabled by default, with exact exceptions for frozen public test domains. Failures do not trigger format changes or another provider.',
+})
 
 REGEX.extend([
     (re.compile(r"^本报告纳入 ([\d,]+) 个逻辑结果。运行参数见下表；保留的物理调用与输出见各结果详情。$"),
diff --git a/harness/web_fetch/report_i18n_adoption_b.py b/harness/web_fetch/report_i18n_adoption_b.py
index 6786e259e..663748822 100644
--- a/harness/web_fetch/report_i18n_adoption_b.py
+++ b/harness/web_fetch/report_i18n_adoption_b.py
@@ -86,7 +86,7 @@
     "Free 10 分钟/天；未公开时长量阶折扣": "Free: 10 minutes/day; no public volume discount for duration",
     "套餐折算价＝套餐费用 ÷ 可用积分 × 每页积分 × 1,000。只用完 20% 的额度，实际平均单价就是满额折算价的 5 倍。超额单价用于追加用量，不能替代套餐平均价。免费额度内供应商费用可为零；超额费用及自身运行成本另计。": "Converted plan price = plan cost ÷ available credits × credits per page × 1,000. If only 20% of the allowance is used, the actual average unit price is 5 times the fully utilized price. Overage pricing applies to additional usage and cannot replace the average plan price. Provider cost may be zero within the free allowance; overage charges and self-hosting costs are separate.",
     "Firecrawl · Scrape · 月套餐 + 年付优惠 + $5 批次追加": "Firecrawl · Scrape · Monthly plans + annual-billing discounts + $5 batch add-ons",
-    "本轮正文与资源题使用 /v2/scrape 和 proxy=auto；原文件题只请求 rawBase64，并传入 parsers=[] 禁用 PDF 文字解析。官方现行规则下，基础 Scrape、auto 和 enhanced 代理均按 1 credit/页计费，自动升级重试不重复收费；禁用解析的 rawBase64 PDF 整份固定 1 credit。本表是官方报价边界，不是本轮实测账单；容量预检只校验账户能否覆盖声明调用数，不代表实际扣费。": "This run uses /v2/scrape with proxy=auto for body and resource tasks. Original-file tasks request rawBase64 alone and pass parsers=[] to disable PDF text parsing. Under the current official rules, base Scrape, auto, and enhanced proxy requests all cost 1 credit/page, and an automatic enhanced retry is not billed again; a rawBase64 PDF with parsing disabled costs a flat 1 credit for the whole file. This table describes published pricing boundaries, not this run's measured bill. The capacity preflight only checks whether the account can cover the declared call count; it does not represent the credits actually charged.",
+    "Scrape 正文与资源模式使用 /v2/scrape 和 proxy=auto；原文件模式只请求 rawBase64，并传入 parsers=[] 禁用 PDF 文字解析。官方现行规则下，基础 Scrape、auto 和 enhanced 代理均按 1 credit/页计费，自动升级重试不重复收费；禁用解析的 rawBase64 PDF 整份固定 1 credit。本表记录官方报价边界，不代表调用方的实际账单；容量预检只校验账户能否覆盖声明调用数，不代表实际扣费。": "Scrape body and resource modes use /v2/scrape with proxy=auto. Original-file mode requests rawBase64 alone and passes parsers=[] to disable PDF text parsing. Under the current official rules, base Scrape, auto, and enhanced proxy requests all cost 1 credit/page, and an automatic enhanced retry is not billed again; a rawBase64 PDF with parsing disabled costs a flat 1 credit for the whole file. This catalog records published pricing boundaries rather than a caller's actual bill. Capacity preflight only checks whether the account can cover the declared call count; it does not represent credits actually charged.",
     "价格与账期明细 ↗": "Pricing and billing details ↗",
     "定价页与扣费 FAQ ↗": "Pricing page and billing FAQ ↗",
     "详细扣费与结转 ↗": "Detailed billing and rollover ↗",
diff --git a/harness/web_fetch/report_i18n_adoption_c.py b/harness/web_fetch/report_i18n_adoption_c.py
index c13a5ad3c..4e961fdef 100644
--- a/harness/web_fetch/report_i18n_adoption_c.py
+++ b/harness/web_fetch/report_i18n_adoption_c.py
@@ -13,10 +13,10 @@
     "检查仅用于 JSON：成功共 9；检查执行后失败共 5（不含其他加价）；ZDR 可另叠加": "Checks apply only to JSON: 9 total on success; 5 total when the request fails after the check runs, excluding other surcharges; ZDR may be added separately",
     "PDF 文字解析": "PDF text parsing",
     "基础价之上 +1 credit/PDF 页": "+1 credit/PDF page on top of the base price",
-    "Billing 按附加费列示；本轮原文件题传 parsers=[]，不解析，rawBase64 整份 PDF 固定 1 credit": "Billing lists this as a surcharge. Original-file tasks in this run pass parsers=[] and do not parse the document, so a rawBase64 PDF costs a flat 1 credit for the whole file",
+    "Billing 按附加费列示；原文件模式传 parsers=[] 时不解析，rawBase64 整份 PDF 固定 1 credit": "Billing lists this as a surcharge. Original-file mode passes parsers=[] and does not parse the document, so a rawBase64 PDF costs a flat 1 credit for the whole file",
     "Interact 浏览器交互": "Interact browser automation",
     "2–7 credits/分钟，至少 1 分钟": "2–7 credits/minute, with a 1-minute minimum",
-    "纯代码 2；使用 prompt 7；不属于本轮 Scrape": "2 for code only; 7 when using a prompt; not part of this Scrape run",
+    "纯代码 2；使用 prompt 7；不属于 Scrape 模式": "2 for code only; 7 when using a prompt; outside Scrape mode",
     "30 credits/请求；JSON 为 34": "30 credits/request; 34 for JSON",
     "特殊域名走 Grok，非标准页价": "Special domains use Grok and are not charged at the standard per-page rate",
     "免费额度": "Free credits",
diff --git a/harness/web_fetch/report_interfaces.py b/harness/web_fetch/report_interfaces.py
index d11938dd9..32d997e08 100644
--- a/harness/web_fetch/report_interfaces.py
+++ b/harness/web_fetch/report_interfaces.py
@@ -1,7 +1,9 @@
 """Interfaces actually used by the benchmark, not a claim to cover entire SDKs."""
 import json
+import re
 from html import escape
 from .safety import contained_path
+from .methods import native_browser_engine, browser_method_registry, browser_method_label
 
 URL='https://example.com/'
 HEADLESS_ACCESS={
@@ -14,21 +16,21 @@
  'lightpanda':{'account':'不需要供应商账号或 API Key。','configuration':'从官方项目获取二进制，配置 LIGHTPANDA_BINARY；不使用托管服务凭据。','env_vars':['LIGHTPANDA_BINARY'],'links':[('官方项目与安装说明','https://github.com/lightpanda-io/browser')]},
  'obscura':{'account':'不需要供应商账号或 API Key。','configuration':'从官方项目获取程序及配套 worker，配置 OBSCURA_BINARY。','env_vars':['OBSCURA_BINARY'],'links':[('官方项目与安装说明','https://github.com/h4ckf0r0day/obscura')]},
  'moli-1.0.6':{'account':'不需要供应商账号或 API Key。','configuration':'从官方 v1.0.6 release 获取二进制，配置 MOLI_1_0_6_BINARY；发布归档与可执行文件均校验 SHA-256。','env_vars':['MOLI_1_0_6_BINARY'],'links':[('Moli 1.0.6 正式发布','https://github.com/lexmount/moli/releases/tag/v1.0.6')]},
- 'moli':{'account':'不需要供应商账号或 API Key。','configuration':'从官方 v1.1.5 release 获取二进制，配置 MOLI_BINARY；不是 Lexmount 云服务接口。','env_vars':['MOLI_BINARY'],'links':[('Moli 1.1.5 正式发布','https://github.com/lexmount/moli/releases/tag/v1.1.5')]},
+ 'moli':{'account':'不需要供应商账号或 API Key。','configuration':'安装与本报告版本和 SHA-256 一致的二进制，配置 MOLI_BINARY；详见“环境与复现”。','env_vars':['MOLI_BINARY'],'links':[('官方项目与安装说明','https://github.com/lexmount/moli')]},
  'moli-1.1.7':{'account':'不需要供应商账号或 API Key。','configuration':'从官方 v1.1.7 release 获取二进制，配置 MOLI_1_1_7_BINARY。','env_vars':['MOLI_1_1_7_BINARY'],'links':[('Moli 1.1.7 正式发布','https://github.com/lexmount/moli/releases/tag/v1.1.7')]},
  'moli-1.1.11':{'account':'不需要供应商账号或 API Key。','configuration':'从官方 v1.1.11 release 获取二进制，配置 MOLI_1_1_11_BINARY。','env_vars':['MOLI_1_1_11_BINARY'],'links':[('Moli 1.1.11 正式发布','https://github.com/lexmount/moli/releases/tag/v1.1.11')]},
  'moli-pr643':{'account':'不需要供应商账号或 API Key。','configuration':'从 Moli PR #643 的固定源码提交构建，配置 MOLI_PR643_BINARY；此方法是候选构建版。','env_vars':['MOLI_PR643_BINARY'],'links':[('Moli 源码 PR','https://github.com/lexmount/moli/pull/643')]},
  'moli-1.1.3':{'account':'不需要供应商账号或 API Key。','configuration':'从官方 v1.1.3 release 获取二进制，配置 MOLI_1_1_3_BINARY；发布包与可执行文件均校验 SHA-256。','env_vars':['MOLI_1_1_3_BINARY'],'links':[('Moli 1.1.3 正式发布','https://github.com/lexmount/moli/releases/tag/v1.1.3')]},
- 'chromium':{'account':'不需要 Google 账号或 API Key；不加载个人登录会话。','configuration':'通过 Playwright 安装匹配的 Chromium，配置 CHROMIUM_BINARY。','env_vars':['CHROMIUM_BINARY'],'links':[('官方浏览器安装说明','https://playwright.dev/python/docs/browsers')]},
+ 'chromium':{'account':'不需要 Google 账号或 API Key；不加载个人登录会话。','configuration':'安装与本报告版本和 SHA-256 一致的浏览器，配置 CHROMIUM_BINARY；详见“环境与复现”。','env_vars':['CHROMIUM_BINARY'],'links':[('Chrome for Testing','https://googlechromelabs.github.io/chrome-for-testing/'),('官方浏览器安装说明','https://playwright.dev/python/docs/browsers')]},
 }
 def spec(entry,auth,params,fields,request,source,notes):
  return dict(entry=entry,auth=auth,params=params,fields=fields,request=request,source=source,notes=notes)
 SPECS={
- 'moli-webfetch':spec('CLI · 按任务预选 Markdown、JSON 诊断、DOM eval 或裸响应路线','本地二进制；无 API Key',
- [('URL','string · 必填','公开 HTTP(S) 页面或直接文件'),('--dump markdown','普通正文','直接取得 Markdown'),('--eval','动态 / 资源页 / DOCX','一次返回有界记录文本、结构化 URL 或页面运行时文档字节'),('--wait-until / --wait-selector / --wait-script','string','使用预声明的生命周期或动态完成条件'),('--timeout / --http-timeout','number','毫秒；导航、HTTP、进程与本地文档解析共享同一端到端预算'),('--block-private-networks','flag','默认启用；仅对冻结公开测试域名的精确白名单省略')],
+ 'moli-webfetch':spec('CLI · 原生 Markdown 或原始响应路线','本地二进制；无 API Key',
+ [('URL','string · 必填','公开 HTTP(S) 页面或直接文件'),('--dump markdown','所有网页、文档正文与网页内嵌媒体任务','直接取得 Moli 原生 Markdown；直接 PDF/DOCX 未提供可读正文时失败'),('--layout / --with-frames','动态网站正文整类；网页内嵌媒体任务使用 --with-frames','动态正文统一启用 Moli 页面布局能力，并在同一次原生 Markdown 调用中包含已加载子文档；不按题目设置 selector'),('--wait-until / --wait-selector / --wait-script','string','使用 Moli 官方等待能力；只等待，不抽取或拼接正文'),('外层截止','number','外层统一为 45 秒。内部参数以冻结的调用记录为准：显式模式留出收尾和清理时间；uniform 模式沿用产品默认值'),('--block-private-networks','flag','默认启用')],
  [('stdout','UTF-8 string / bytes','Markdown、eval 结果或直接文件原始字节'),('stderr','string','独立诊断；不混入正文'),('exit_code','integer','0 表示工具请求完成；正文或文件为空仍由任务规则单独判失败'),('status_code / final_url','可能未提供','CLI 未提供时保持未知，不伪造 HTTP 200 或最终 URL')],
- {'ordinary_body':'moli fetch --dump markdown … URL','challenge':'moli fetch --dump json --trace-network … URL → 最终 DOM 本地转 Markdown','dynamic_or_resource_page':'moli fetch --eval <answer-free expression> <bounded wait> … URL','direct_pdf_or_media':'moli fetch … URL','direct_docx':'moli fetch --eval <runtime fetch bytes> … URL'},
- 'harness/web_fetch/providers/moli.py','普通正文使用 Markdown；动态完成条件与正文提取范围分离。直接 PDF 与媒体使用不带 --dump 的原始响应路线；DOCX 因当前 Moli CLI 的 OOXML 误分类，在同一次 CLI 运行中由页面运行时二次 fetch 原始字节并明确披露。文档解析计入同一截止预算；私网保护默认开启，只对冻结公开测试域名使用精确白名单；不在失败后切换格式或借用其他 provider。'),
+ {'page_body':'moli fetch --dump markdown --wait-until done URL','dynamic_body':'moli fetch --dump markdown --layout --with-frames --wait-until domstable URL','exact_page_identity':'正文仍用原生 Markdown；最终网址不是评分条件，无法确认时保持空值','webpage_media':'moli fetch --dump markdown --with-frames --wait-until done URL','direct_document_body':'moli fetch --dump markdown --wait-until done URL','direct_file':'Moli 原生 CDP 响应；附件事件使用同一 Moli 原始附件接口'},
+ 'harness/web_fetch/providers/moli.py','网页正文、文档正文、结构题和网页内嵌媒体题统一使用 Moli 原生 Markdown。动态网站正文整类统一启用 --layout、--with-frames 和 domstable，不按题目设置 selector。网页内嵌媒体只在原生输出中核对题目指定的资源地址，不下载媒体，也不切换 HTML、JSON 或网络跟踪接口。直接 PDF/DOCX 没有交付可读正文时按失败记录，评测端不下载后解析。直接媒体文件使用原生 CDP 响应或同一二进制的原始附件接口。最终网址只作诊断，不决定正文是否通过；失败后不切换格式或借用其他 provider。'),
  'lexmount-global':spec('POST https://api.lexmount.com/v1/extract','X-API-Key: <API_KEY>；X-Project-Id: <PROJECT_ID>',
  [('extract.url','string · 必填','目标网页 URL'),('extract.engine','string · 可选','指定提取引擎；本轮不传，使用服务端选择')],
  [('result.main_text','string','正文 → content'),('result.title / final_url','string','页面标题 / 最终地址'),('result.links / images','array','页面链接和图片 → provider_metadata'),('result.status_code','number','源站状态；与 HTTP API 状态分开'),('metadata.server_elapsed_ms','number','服务端耗时')],
@@ -78,22 +80,22 @@ def spec(entry,auth,params,fields,request,source,notes):
  [('url','string','唯一任务输入'),('gotoOptions.waitUntil','string','networkidle2'),('browser','query','kitesurf'),('timeout','seconds','45 秒客户端端到端截止')],
  [('result','string','Cloudflare 原生 Markdown → content'),('success / errors','boolean / array','接口状态与错误'),('browser_ms_used','number-like','服务端浏览器计费时间；不等于客户端耗时')],
  {'url':URL,'gotoOptions':{'waitUntil':'networkidle2'}},'harness/web_fetch/providers/cloudflare.py',
- '账号版 Browser Run 原生 Markdown 路径。客户端耗时包含公网往返、远端排队与执行；browser_ms_used 仅作附加诊断。')
+ '网页正文、嵌入文档以及网页中的图片或视频信息都使用指定 Kitesurf 的 Browser Run 原生 Markdown。直接文档也使用官方 Markdown 接口，直接文件通过官方 CDP 获取原始响应。Workers AI 文档转换不计入 Kitesurf 成绩。客户端耗时包含公网往返、排队与执行。')
 for engine,wait in (('lightpanda','done'),('obscura','load + adaptive settle'),('moli','done')):
  SPECS[engine]=spec(
   'CLI · '+engine+' fetch --dump markdown','本地独立浏览器；不需要供应商 API Key',
   [('URL','string','唯一任务输入'),('--dump','string','markdown'),('wait_until','string',wait),('timeout','seconds','45 秒外层截止；CLI 参数按各自单位换算')],
   [('stdout','UTF-8 string','浏览器原生 Markdown → content'),('native_markdown_ms','number','CLI 调用及原生序列化阶段耗时'),('browser_stderr','string','浏览器诊断；不进入正文')],
   {'url':URL,'engine':engine,'timeout':45,'wait_until':wait,'dump':'markdown'},'harness/web_fetch/providers/headless_worker.py',
-  '不点击、不滚动、不补抓资源，不在失败后切换引擎或输出模式。CLI 未提供可靠 HTTP 状态和最终 URL 时保持空值。')
+  '网页正文、嵌入文档以及网页中的图片或视频信息都使用浏览器原生 Markdown。直接文件使用浏览器已有的原始响应接口。不在失败后切换输出方式、调用共同 DOM 脚本，或请求外部服务补正文。接口未提供 HTTP 状态或最终网址时保留空值。')
 def moli_release_spec(version):
  base=SPECS['moli']
  return {**base,
- 'entry':f'CLI · Moli {version} 普通网页 Markdown / 直接文档与媒体自动原始响应',
- 'params':[('URL','string · 必填','唯一任务输入'),('--dump markdown','普通网页正文','直接取得 Markdown'),('不传 --dump','直接文档或媒体','由 CLI 自动选择原始响应或序列化页面；不附加页面等待参数'),('timeout','seconds','45 秒外层端到端截止；文档解析包含在内')],
- 'fields':[('stdout','UTF-8 string / bytes','普通网页为 Markdown；直接文件为原始字节'),('document_extractor','string','直接文档正文使用的本地解析器'),('raw_stdout_path / sha256','string','保存的原始文档或媒体证据'),('file_evaluation','object','文件格式、长度和目标 SHA-256 验收')],
- 'request':{'ordinary_web':'moli fetch --dump markdown --wait-until done --timeout 45000 URL','direct_document_or_media':'moli fetch --timeout 45000 --http-timeout 45000 URL','version':version},
- 'notes':f'本方法只使用官方 {version} 发行二进制，与其他 Moli 版本分开计分。普通网页使用原生 Markdown；直接文档与媒体的裸 fetch 路线在正式二进制上实测确认。正文任务若取得受支持的原始文档，会在同一计时预算内解析文字；文件任务直接验收字节。不在失败后切换引擎或输出模式。'}
+ 'entry':f'CLI · Moli {version} 原生 Markdown / 原始文件接口',
+ 'params':[('URL','string · 必填','唯一任务输入'),('--dump markdown','网页、文档正文、结构与网页内嵌媒体任务','直接取得 Markdown；直接 PDF/DOCX 不提供可读正文时失败'),('--layout / --with-frames','动态网站正文整类；网页内嵌媒体任务使用 --with-frames','动态正文统一启用 Moli 页面布局能力，并在同一次原生 Markdown 调用中包含已加载子文档；不按题目设置 selector'),('--wait-selector / --wait-script','旧版预声明完成条件','只等待，不抽取或拼接正文'),('外层截止','seconds','外层统一为 45 秒。内部参数以冻结的调用记录为准：显式模式留出收尾和清理时间；uniform 模式沿用产品默认值')],
+ 'fields':[('stdout','UTF-8 string / bytes','网页与文档任务为原生 Markdown；直接文件为原始字节'),('raw_stdout_path / sha256','string','保存的原始文档或媒体证据'),('file_evaluation','object','文件格式、长度和目标 SHA-256 验收')],
+ 'request':{'page_or_document_body':'moli fetch --dump markdown --wait-until done URL','dynamic_body':'moli fetch --dump markdown --layout --with-frames --wait-until domstable URL','webpage_media':'moli fetch --dump markdown --with-frames --wait-until done URL','direct_file':'原始响应或附件接口；具体路线见逐次调用记录','version':version},
+ 'notes':f'本方法只使用官方 {version} 发行二进制，与其他 Moli 版本分开计分。网页正文、文档正文、结构题和网页内嵌媒体题统一使用原生 Markdown；动态网站正文整类统一启用 --layout、--with-frames 和 domstable，不按题目设置 selector。网页媒体只核对这份输出中的目标地址，不下载，也不切换 HTML、JSON 或网络跟踪接口。直接 PDF/DOCX 没有交付可读正文时按失败记录；直接媒体文件验收原始字节。评测端不使用外部 PDF/DOCX 解析器补正文，也不在失败后切换引擎或输出模式。'}
 SPECS['moli-1.0.6']=moli_release_spec('1.0.6')
 SPECS['moli']=moli_release_spec('1.1.5')
 SPECS['moli-1.1.7']=moli_release_spec('1.1.7')
@@ -101,10 +103,292 @@ def moli_release_spec(version):
 SPECS['moli-1.1.11']=moli_release_spec('1.1.11')
 SPECS['chromium']=spec(
  'Playwright · Chromium → DOM HTML → node-html-markdown','本地独立浏览器；不需要 Google 账号，不加载个人会话',
- [('url','string','唯一任务输入'),('wait_until','string','domcontentloaded'),('timeout','seconds','45 秒端到端截止'),('converter','string','node-html-markdown 2.0.0')],
+ [('url','string','唯一任务输入'),('wait_until','string','load'),('timeout','seconds','45 秒端到端截止'),('converter','string','node-html-markdown 2.0.0')],
  [('content','string','转换后的 Markdown'),('rendered_html_path / sha256','string','转换前 DOM HTML 证据'),('fetch_html_ms / conversion_ms','number','分阶段耗时'),('browser_stderr','string','浏览器诊断；不进入正文')],
- {'url':URL,'engine':'chromium','timeout':45,'wait_until':'domcontentloaded','dump':'html','converter':'node-html-markdown 2.0.0'},'harness/web_fetch/providers/headless_worker.py',
- 'Chromium/CDP 没有原生 Markdown 输出，因此取完整渲染 DOM 后转换；转换计入端到端耗时，HTML 与转换器版本、哈希均保留。')
+ {'url':URL,'engine':'chromium','timeout':45,'wait_until':'load','dump':'html','converter':'node-html-markdown 2.0.0'},'harness/web_fetch/providers/headless_worker.py',
+ '所有页面类任务都取得完整渲染 DOM，再使用 node-html-markdown 2.0.0 转为 Markdown；不运行资源提取脚本，不读取 PDF.js 等查看器私有对象，也不使用外部文档解析器。页面获取、DOM 转换与原始文件读取均计入耗时；原始字节、HTML 与转换器哈希均保留。')
+
+def method_provenance(out):
+ path=out/'implementation-provenance.json'
+ return {item['binary_sha256']:item for item in json.loads(path.read_text()).get('implementations',[])} if path.is_file() else {}
+
+
+def method_version(record, provenance=None):
+ """Use executable identity, never a different engine's CDP compatibility number."""
+ meta=record.get('provider_metadata') or {}
+ name=record.get('provider')
+ if name=='kitesurf':return 'Beta · 托管后端版本未公开'
+ bound=(provenance or {}).get(meta.get('binary_sha256'),{})
+ if bound.get('version'):return bound['version']
+ if meta.get('reported_version'):return meta['reported_version']
+ value=meta.get('browser_version')
+ if name in {'moli','lightpanda','obscura'} and re.fullmatch(r'\d+\.\d+\.\d+\.\d+',str(value)):
+  return None
+ return value or meta.get('binary_version') or meta.get('moli_version') or meta.get('library_version') or meta.get('version')
+
+
+def method_access(name, records):
+ engine=native_browser_engine(name) or name
+ access=HEADLESS_ACCESS.get(name) or HEADLESS_ACCESS.get(engine)
+ if access and engine!=name:
+  source=browser_method_registry()[name].get('source_url')
+  return {**access,'configuration':'使用本轮绑定提交构建的二进制；提交、构建环境与 SHA-256 见环境与复现。','links':[(name+' · 源码分支',source)] if source else access['links']}
+ if access is None or name!='moli':return access
+ versions=set()
+ for row in records:
+  if row['provider']!=name:continue
+  match=re.fullmatch(r'moli (\d+\.\d+\.\d+)',row.get('provider_metadata',{}).get('reported_version',''))
+  if match:versions.add(match.group(1))
+ if len(versions)!=1:return access
+ version=next(iter(versions))
+ return {**access,'links':[(f'Moli {version}',f'https://github.com/lexmount/moli/releases/tag/v{version}')]}
+
+
+def method_spec(name, record):
+ engine=native_browser_engine(name) or name
+ if record and record.get('provider_type')=='moli_webfetch':
+  base=SPECS['moli-webfetch']
+  meta=record.get('provider_metadata') or {}
+  policy=meta.get('internal_timeout_policy')
+  if policy=='native_default':
+   timeout_description='45 秒外层截止；Moli 总等待、HTTP 和连接超时保留该二进制默认值'
+   timeout_note='这批调用未传入 Moli 内部超时参数。'
+  elif policy=='explicit':
+   timeout_ms=meta.get('http_connect_timeout_ms')
+   timeout_description=('45 秒外层截止；实测命令同时显式传入 Moli 总等待、HTTP 和连接超时'
+                        +((' '+f'{timeout_ms:,}'+' 毫秒') if isinstance(timeout_ms,int) else ''))
+   timeout_note='这批调用使用保存记录中的显式 Moli 超时，未写成产品默认值。'
+  else:
+   timeout_description='45 秒外层截止；Moli 内部超时以逐次调用记录为准'
+   timeout_note='保存证据未提供可核对的 Moli 内部超时策略。'
+  params=[(key,kind,timeout_description if key=='外层截止' else description)
+          for key,kind,description in base['params']]
+  entry=base['entry'] if name in SPECS else 'CLI · Moli · 路线以逐次调用记录为准'
+  return {**base,'entry':entry,'params':params,'notes':base['notes']+' '+timeout_note}
+ base=SPECS.get(name) or SPECS[engine]
+ meta=(record or {}).get('provider_metadata',{})
+ if name=='moli':
+  match=re.fullmatch(r'moli (\d+\.\d+\.\d+)',meta.get('reported_version',''))
+  if match:base=moli_release_spec(match.group(1))
+  else:
+   base={**base,'entry':'CLI · Moli','request':{k:v for k,v in base['request'].items() if k!='version'}}
+  return {**base,'notes':'实际版本、配置和调用路线见“环境与复现”及逐次调用记录。'}
+ if name=='chromium':
+  request={**base['request']}
+  params=list(base['params'])
+  wait=meta.get('navigation_wait_until')
+  if wait in {'load','domcontentloaded','networkidle','commit'}:
+   request['wait_until']=wait
+   params=[(key,kind,wait if key=='wait_until' else description)
+           for key,kind,description in params]
+  converter_sha=meta.get('converter_sha256')
+  notes=base['notes']
+  if isinstance(converter_sha,str) and re.fullmatch(r'[0-9a-f]{64}',converter_sha):
+   request['converter_sha256']=converter_sha
+   params=[(key,kind,
+            description+'；包装脚本 SHA-256 '+converter_sha
+            if key=='converter' else description)
+           for key,kind,description in params]
+   notes+=' 转换包装还负责代码块围栏与语言标签；本轮以完整脚本 SHA-256 绑定，不把它写成未修改的包默认行为。'
+  return {**base,'request':request,'params':params,'notes':notes}
+ native={k:v for k,v in meta.get('native_metadata',{}).items() if k in {'format','script_sha256'}}
+ format_name=native.get('format')
+ if (name,format_name) not in {('lightpanda','lightpanda_json'),('obscura','obscura_eval')}:return base
+ command=('lightpanda fetch URL --dump markdown --json' if name=='lightpanda'
+          else 'obscura fetch URL --eval <upstream-native-markdown-and-location>')
+ request={**base['request'],'command':command,'native_metadata':native}
+ if name=='obscura':request.pop('dump',None)
+ return {**base,'entry':'CLI · '+command,'request':request,
+         'params':[row for row in base['params'] if name!='obscura' or row[0]!='--dump'],
+         'notes':'Lightpanda 解包同一次调用返回的原生 Markdown；Obscura 执行固定哈希的官方 Markdown 脚本。网页正文、嵌入文档以及网页中的图片或视频信息均保留该原生输出。直接文件分别使用 Lightpanda CDP 与 Obscura --dump original。评测端不再加工 DOM 或外部解析文档；获取与输出处理均计入耗时。'}
+
+
+
+def _observed_wait(meta):
+ navigation=meta.get('navigation_wait_until')
+ completion=meta.get('wait_until')
+ if navigation and completion and navigation!=completion:
+  return f'导航等待 {navigation}；输出完成条件 {completion}'
+ if navigation:return f'导航等待 {navigation}'
+ if completion:return f'输出完成条件 {completion}'
+ return '调用记录未提供可核对的等待条件'
+
+
+def _observed_route(engine, meta):
+ """Describe only the interface persisted by one measured call."""
+ route=meta.get('route')
+ extractor=meta.get('extractor')
+ contract=meta.get('output_contract')
+ dump=meta.get('dump')
+ browser=meta.get('browser')
+ native=meta.get('native_metadata') or {}
+ route_note=f'（route={route}）' if route else ''
+ if engine=='moli' and extractor=='moli_native_markdown' and dump=='markdown':
+  flags=' --layout --with-frames' if (meta.get('layout') and meta.get('with_frames')) else ''
+  return 'moli fetch --dump markdown'+flags+' → Moli 原生 Markdown'+route_note
+ if engine=='lightpanda' and extractor=='lightpanda_native_markdown':
+  json_flag=' --json' if native.get('format')=='lightpanda_json' else ''
+  return 'Lightpanda --dump markdown'+json_flag+' → 原生 Markdown'+route_note
+ if engine=='obscura' and extractor=='obscura_native_markdown':
+  script='（脚本 SHA-256 '+native['script_sha256']+'）' if native.get('script_sha256') else ''
+  return 'Obscura --eval 官方 Markdown 脚本'+script+' → 原生 Markdown'+route_note
+ if engine=='chromium' and extractor=='node-html-markdown':
+  version=(' '+str(meta['extractor_version'])) if meta.get('extractor_version') else ''
+  return 'Chromium 渲染 HTML → node-html-markdown'+version+' → Markdown'+route_note
+ if (engine=='kitesurf' and browser=='kitesurf'
+     and extractor=='cloudflare_native_markdown'):
+  return 'Cloudflare /markdown?browser=kitesurf → 托管原生 Markdown'+route_note
+ if contract=='original_file_bytes':
+  origins={
+   'moli_cdp_response':'Moli CDP 原始响应',
+   'lightpanda_cdp_response':'Lightpanda CDP 原始响应',
+   'obscura_original_response':'Obscura --dump original 原始响应',
+   'kitesurf_cdp_response':'Kitesurf 官方 CDP 原始响应',
+   'browser_native_response_or_download':'Chromium 原始响应或原生下载',
+  }
+  source=origins.get(extractor,('调用记录 extractor='+str(extractor)
+    if extractor else '调用记录未注明原始文件接口'))
+  return source+' → 原始文件字节'+route_note
+ fields=[]
+ for key,value in (('route',route),('extractor',extractor),
+                   ('output_contract',contract),('dump',dump)):
+  if value:fields.append(f'{key}={value}')
+ if fields:
+  return '调用记录：'+'；'.join(fields)+'；未据此补写未记录的转换步骤'
+ return '调用记录未提供可核对的接口路线；不推断原生 Markdown、HTML 或额外转换'
+
+
+def browser_task_interface_matrix(cases, providers, records=None, *, compact=False):
+ """Describe task routes, preferring persisted call metadata when available."""
+ from collections import Counter
+ from types import SimpleNamespace
+ from .providers.headless import output_mode_for_case
+ capabilities={
+  'moli':'网页正文、文档正文、结构和网页内嵌媒体统一使用原生 Markdown；动态网站正文整类统一启用 --layout、--with-frames 和 domstable；网页媒体只核对输出中的目标地址。最终网址不参与正文判分。',
+  'lightpanda':'内置 Markdown 转换；同一任务大类只使用 CLI --dump markdown --json，不传逐题选择器、数量、延迟或 iframe 参数。',
+  'obscura':'内置 Markdown 与 LP.getMarkdown 共用官方 JS 实现；本次执行固定版本的同一脚本，不按题目切换接口。',
+  'chromium':'没有直接输出 Markdown 的原生接口；取得渲染后的 DOM，再使用共同的 node-html-markdown 2.0.0。',
+  'kitesurf':'官方 Browser Run /markdown?browser=kitesurf 返回 Markdown；这是托管服务的转换能力，不是客户端共同转换。',
+ }
+ markdown={
+  'moli':'CLI fetch --dump markdown → 内置转换 → Markdown',
+  'lightpanda':'CLI fetch --dump markdown --json → 内置转换 → 解包 Markdown',
+  'obscura':'CLI --eval 官方固定版本脚本 → 官方转换 → Markdown',
+  'chromium':'Playwright/CDP 导航 → 最终 DOM → 共同转换 → Markdown',
+  'kitesurf':'/markdown?browser=kitesurf → 官方托管转换 → Markdown',
+ }
+ original={
+  'moli':'原生 CDP 响应；附件事件使用同一 Moli 原始附件接口',
+  'lightpanda':'原生 CDP Response.body()',
+  'obscura':'CLI fetch --dump original（原始 HTTP 响应，不运行页面 JS）',
+  'chromium':'Playwright/CDP 原始响应或原生下载',
+  'kitesurf':'指定 Kitesurf 的官方 CDP 原始响应',
+ }
+ resource={
+  'moli':'CLI fetch --dump markdown --with-frames → 原生 Markdown；共同评分器只识别题目指定的资源 URL',
+  'lightpanda':'CLI fetch --dump markdown --json → 原生 Markdown；评分器只从交付内容中核对资源地址',
+  'obscura':'CLI --eval 官方固定版本脚本 → 原生 Markdown；评分器只从交付内容中核对资源地址',
+  'chromium':'Playwright/CDP 取得完整渲染 HTML → node-html-markdown 2.0.0 → 评分器核对资源地址',
+  'kitesurf':'/markdown?browser=kitesurf → 原生 Markdown；评分器只从交付内容中核对资源地址',
+ }
+ runtime={'moli':'原生 CDP','obscura':'原生 CDP','lightpanda':'原生 CDP',
+          'chromium':'Playwright/CDP','kitesurf':'指定 Kitesurf 的官方 CDP'}
+ waits={
+ 'moli':'CLI 等待 done',
+  'lightpanda':'Markdown CLI 等待 done',
+  'obscura':'CLI 使用官方默认 load 加自适应静默等待（最多 5 秒）',
+  'chromium':'页面提取等待 load',
+  'kitesurf':'Markdown API 等待 networkidle2',
+ }
+ tracks=[]
+ from .models import REPORT_FAMILIES, report_family
+ for case in cases.values():
+  track=report_family(case)
+  if track not in tracks:tracks.append(track)
+ order=list(REPORT_FAMILIES)
+ tracks.sort(key=lambda track:order.index(track) if track in order else len(order))
+ rows=[]
+ indexed={(row['provider'],row['case_id']):row for row in (records or [])}
+ case_ids={id(case):case_id for case_id,case in cases.items()}
+ for track in tracks:
+  group=[case for case in cases.values() if report_family(case)==track]
+  cells={}
+  for provider in providers:
+   engine=native_browser_engine(provider)
+   if engine not in capabilities:raise ValueError('Unregistered native browser participant: '+provider)
+   parts=[];counts=Counter()
+   for case in group:
+    case_id=case.get('id',case_ids[id(case)])
+    mode=output_mode_for_case(engine,'headless_markdown',SimpleNamespace(
+     url=case['url'],track=case.get('track','web'),task_kind=case.get('task_kind','body')))
+    measured=indexed.get((provider,case_id))
+    if records is not None:
+     meta=(measured or {}).get('provider_metadata') or {}
+     counts[(mode,_observed_route(engine,meta),_observed_wait(meta))]+=1
+    else:
+     counts[(mode,None,None)]+=1
+   for (mode,observed_description,observed_wait),count in counts.items():
+    if mode=='markdown':
+     if track=='document' and engine=='moli':
+      description=markdown[engine]+'；HTML/TXT 可直接返回正文，直接 PDF/DOCX 未提供可读正文；评测端不使用外部解析器'
+     else:
+      description=markdown[engine]+('；文档必须由此接口直接返回文字，不使用外部 PDF/DOCX 解析器' if track=='document' else '')
+    elif mode=='document':description=original[engine]+' → 原始 PDF/DOCX；只取得字节不能通过文档正文题，评测端不外部解析'
+    elif mode=='file':description=original[engine]+' → 原始文件字节（不转 Markdown）'
+    elif mode=='resource':description=resource[engine]+(
+      ' → 图片或视频资源地址（直接从原生 Markdown 核对）' if engine=='moli'
+      else ' → 图片或视频资源地址（不转 Markdown）')
+    elif mode=='document_page':description=runtime[engine]+' 读取嵌入文档 → 已加载 PDF 查看器原生文字，或页面可见文字 → 文档正文；不下载后另行解析'
+    elif mode=='media_metadata':description=runtime[engine]+' 执行共用脚本，读取正文、作者及 JSON-LD → 页面正文与媒体元数据（不转 Markdown）'
+    else:raise ValueError('Unsupported browser task interface mode: '+mode)
+    wait=('读取原始响应或下载文件，不等待查看器绘制' if mode in {'file','document'} else waits[engine])
+    if engine=='moli' and track=='dynamic' and mode=='markdown':
+     description+='；动态正文整类统一启用 --layout 和 --with-frames，不使用逐题 selector'
+     wait='动态网站正文整类使用 CLI 原生 domstable'
+    if mode not in {'file','document','markdown'}:
+     if engine in {'lightpanda','kitesurf'} or (engine=='obscura' and mode in {'document_page','media_metadata'}):
+      wait='CDP 页面提取等待 load'
+    if mode=='document_page':wait+='；随后等待查看器文档就绪或页面内容'
+    if records is not None:
+     description=observed_description
+     wait=observed_wait
+    parts.append({'count':count,'mode':mode,'description':description,'wait':wait})
+   if compact and records is not None:
+    grouped={}
+    for part in parts:
+     description=part['description']
+     if description.startswith('调用记录未提供'):
+      description='接口未记录'
+     elif 'node-html-markdown' in description:
+      description='渲染 HTML → node-html-markdown → Markdown'
+     elif '原生 Markdown' in description or '官方 Markdown 脚本' in description:
+      description='官方脚本 → Markdown' if engine=='obscura' else '原生 Markdown'
+     elif '原始文件字节' in description:
+      description=description.split(' → ')[0]+' → 文件字节'
+     elif description.startswith('调用记录未提供'):
+      description='接口未记录'
+     else:
+      description=description.split('（route=')[0]
+     mode='markdown' if 'Markdown' in description else part['mode']
+     key=(mode,description)
+     if key not in grouped:grouped[key]={'mode':mode,'count':0,'description':description,'wait':''}
+     grouped[key]['count']+=part['count']
+    parts=list(grouped.values())
+   cells[provider]=parts
+  rows.append({'track':track,'count':len(group),'cells':cells})
+ selected_capabilities={name:capabilities[native_browser_engine(name)] for name in providers}
+ if records is not None:
+  for provider in providers:
+   engine=native_browser_engine(provider)
+   observed=[]
+   for row in records:
+    if row['provider']!=provider:continue
+    description=_observed_route(engine,row.get('provider_metadata') or {})
+    if description not in observed:observed.append(description)
+   selected_capabilities[provider]=('本轮调用记录：'+'；'.join(observed)
+     if observed else '本轮没有可核对的调用接口记录。')
+ return {'providers':providers,'capabilities':selected_capabilities,'rows':rows}
+
 
 def render_interfaces(out,records):
  from .artifacts import record_public_call_log_bindings, verify_public_call_log
@@ -113,29 +397,30 @@ def render_interfaces(out,records):
  def pre(value):return '<pre>'+escape(value if isinstance(value,str) else json.dumps(value,ensure_ascii=False,indent=2))+'</pre>'
  def fields(rows):return '<dl class="interface-fields">'+''.join('<div><dt><code>'+escape(k)+'</code> <small>'+escape(t)+'</small></dt><dd>'+escape(d)+'</dd></div>' for k,t,d in rows)+'</dl>'
  measured={r['provider'] for r in records}
- names=sorted(SPECS,key=lambda name:(name not in measured,name))
+ names=sorted(set(SPECS)|{name for name in measured if native_browser_engine(name)},key=lambda name:(name not in measured,name))
  body='<p>按本轮适配器介绍，不混用完整产品能力。输入示例展示正文配置，资源配置差异单列；它们不是每条历史请求的逐字回放。各调用所属批次及实际配置见“环境与复现”。输出示例取存档调用，经适配器整理后的真实节选，不冒充原始 HTTP 响应。Key 和账号均用占位符。</p>'
  if native_default:
   body='<p>已测方法的输入展示保存的公开调用字段，输出展示同一次调用的实际节选。完整配置、原始响应和日志见环境与调用详情。未参评方法保留仓库登记示例。</p>'
  for i,name in enumerate(names):
-  s=SPECS[name];r=next((r for r in records if r['provider']==name and r['case_id']=='static-simple'),next((r for r in records if r['provider']==name),None))
+  r=next((r for r in records if r['provider']==name and r['case_id']=='static-simple'),next((r for r in records if r['provider']==name),None))
+  s=method_spec(name,r)
   if r and native_default:
    bindings=record_public_call_log_bindings(r)
    if not bindings:
     raise ValueError("Measured native interface requires a saved call log: "+name)
    request=json.loads(verify_public_call_log(out,bindings[-1]).read_text())["request"]
    s={**s,"params":[],"request":request,"notes":"此处展示该次公开调用记录保存的请求字段；完整配置和日志见环境与调用详情。产品内部超时以冻结配置和实际请求为准。"}
-  access=HEADLESS_ACCESS.get(name)
+  access=method_access(name,records)
   if r:
    content=contained_path(out,r['artifact_path']).read_text();sample={k:r.get(k) for k in ['ok','status_code','title','final_url']};sample['content_excerpt']=content[:450];sample['content_characters']=len(content)
   else:sample={'measurement':None,'note':'仓库登记接口，未纳入本轮；此处不提供虚构的运行输出。'}
   # Explicit whitelist: no local paths, request IDs, credentials or session metadata.
   meta=r.get('provider_metadata',{}) if r else {};sample['metadata']={k:meta[k] for k in ['engine','upstream_status','links_count','images_count','extractor','truncated','document_count'] if k in meta}
   dest=out/'adoption'/'interfaces';dest.mkdir(exist_ok=True);(dest/(name+'.json')).write_text(json.dumps({'interface':s,'access':access,'sample':sample,'attempt_id':r['attempt_id'] if r else None},ensure_ascii=False,indent=2)+'\n')
-  body+=f'<details class="interface-panel" id="interface-{name}"'+(' open' if i==0 else '')+'><summary>'+escape(name)+'</summary>'
+  body+=f'<details class="interface-panel" id="interface-{name}"'+(' open' if i==0 else '')+'><summary>'+escape(browser_method_label(name))+'</summary>'
   body+='<p class="interface-endpoint"><code>'+escape(s['entry'])+'</code></p><p class="source-note">'+escape(s['auth'])+'</p>'
   if access:
-   body+='<h3>账号与获取入口</h3><p>'+escape(access['account'])+'</p><p>'+escape(access['configuration'])+'</p><p>'+ ' · '.join('<a href="'+escape(url,quote=True)+'">'+escape(label)+'</a>' for label,url in access['links'])+'</p><p class="source-note">官方说明核验：2026-09-07。只列账号要求、获取入口与占位符，不公开真实凭据。</p>'
+   body+='<h3>账号与获取入口</h3><p>'+escape(access['account'])+'</p><p>'+escape(access['configuration'])+'</p><p>'+ ' · '.join('<a href="'+escape(url,quote=True)+'">'+escape(label)+'</a>' for label,url in access['links'])+'</p><p class="source-note">实际版本和接口见运行记录；下方链接指向官方说明。</p>'
   sample_label='本轮输出节选 · 统一记录' if r else '本轮未执行'
   body+='<div class="guide-grid"><article class="guide-card"><h3>输入</h3>'+fields(s['params'])+('<h4>本轮保存的调用字段</h4>' if r and native_default else '<h4>调用输入示例</h4>')+pre(s['request'])+'</article><article class="guide-card"><h3>输出</h3>'+fields(s['fields'])+'<h4>'+sample_label+'</h4>'+pre(sample)+'</article></div>'
   measured_link='<a href="../attempts/'+escape(r['attempt_id'])+'.html">该次完整输出与判定 →</a>' if r else '未纳入本轮；参数说明为仓库登记模式，不计入本轮结果'
diff --git a/harness/web_fetch/report_methods.py b/harness/web_fetch/report_methods.py
index 0e7bb7af3..ba836318c 100644
--- a/harness/web_fetch/report_methods.py
+++ b/harness/web_fetch/report_methods.py
@@ -1,7 +1,7 @@
 """Provider-centred introduction and reproducible, sample-scoped adoption counts."""
 import json
 from pathlib import Path
-from .methods import method_info, method_page_model
+from .methods import method_info, method_page_model, is_browser_comparison, browser_method_label, measured_method_label
 from .report_components import tabs,cards
 from .report_interfaces import render_interfaces
 from .report_capabilities import render_capabilities
@@ -12,12 +12,12 @@
  'lightpanda':('本地浏览器 CLI','Lightpanda fetch --dump markdown，直接输出浏览器原生 Markdown。','https://github.com/lightpanda-io/browser'),
  'obscura':('本地浏览器 CLI','Obscura fetch --dump markdown；标准模式，不启用 stealth 或备用引擎。','https://github.com/h4ckf0r0day/obscura'),
  'moli-1.0.6':('本地浏览器 CLI','普通网页使用 fetch --dump markdown；直接文档和媒体使用裸 fetch。原始文档的本地正文解析计入耗时，文件任务直接校验字节。','https://github.com/lexmount/moli/releases/tag/v1.0.6'),
- 'moli':('本地浏览器 CLI','普通网页使用 fetch --dump markdown；直接文档和媒体使用裸 fetch。原始文档的本地正文解析计入耗时，文件任务直接校验字节。','https://github.com/lexmount/moli/releases/tag/v1.1.5'),
+ 'moli':('本地浏览器 CLI','普通网页使用 fetch --dump markdown；直接文档和媒体使用裸 fetch。原始文档的本地正文解析计入耗时，文件任务直接校验字节。','https://github.com/lexmount/moli'),
  'moli-1.1.7':('本地浏览器 CLI','普通网页使用 fetch --dump markdown；直接文档和媒体使用裸 fetch。原始文档的本地正文解析计入耗时，文件任务直接校验字节。','https://github.com/lexmount/moli/releases/tag/v1.1.7'),
  'moli-1.1.11':('本地浏览器 CLI','普通网页使用 fetch --dump markdown；本轮风险网站评测固定 debug 日志并逐次完整留存。','https://github.com/lexmount/moli/releases/tag/v1.1.11'),
  'moli-1.1.3':('本地浏览器 CLI','普通网页使用 fetch --dump markdown；直接文档和媒体使用裸 fetch。原始文档的本地正文解析计入耗时，文件任务直接校验字节。','https://github.com/lexmount/moli/releases/tag/v1.1.3'),
  'chromium':('本地浏览器 CDP','Playwright 启动 Chromium，取完整渲染 DOM，再由 node-html-markdown 2.0.0 生成 Markdown。','https://playwright.dev/python/docs/browsers'),
- 'moli-webfetch':('本地 CLI','Moli：普通正文用 Markdown，挑战题用 JSON 返回最终 DOM、状态和跳转诊断；动态等待与正文范围分离。DOCX 在同一次 CLI 运行中二次 fetch 原始字节；不调用模型。','https://github.com/lexmount/moli/tree/v1.1.4/skills/moli-webfetch'),
+ 'moli-webfetch':('本地 CLI','Moli：网页正文、文档正文、结构和网页内嵌媒体统一使用原生 Markdown；直接媒体文件使用原始响应。完成条件只控制官方等待参数；不调用模型。','https://github.com/lexmount/moli/tree/main/skills/moli-webfetch'),
  'cowagent-built-in':('项目内置','CowAgent 内的 HTTP 抓取和文本、文档解析工具。','https://github.com/zhayujie/CowAgent/blob/main/agent/tools/web_fetch/web_fetch.py'),
  'lexmount-global':('托管 API','Lexmount 国际 API，返回网页主正文与元数据。','https://browser.lexmount.com/en/docs/webfetch'),
  'lexmount-cn':('托管 API','Lexmount 中国区 API；与国际 API 分开实测，不重复计算品牌采用。','https://browser.lexmount.com/en/docs/webfetch'),
@@ -30,8 +30,8 @@
  'langchain-webbase':('本地开源库','WebBaseLoader 使用 HTTP 与 BeautifulSoup 取得网页文字。','https://reference.langchain.com/python/langchain-community/document_loaders/web_base/WebBaseLoader'),
  'crawl4ai':('本地开源库','本地浏览器渲染，再抽取 Markdown、媒体及链接信息。','https://docs.crawl4ai.com/'),
 }
-DISPLAY_NAMES={'moli-1.0.6':'Moli 1.0.6','moli':'Moli 1.1.5','moli-1.1.3':'Moli 1.1.3','moli-1.1.7':'Moli 1.1.7','moli-1.1.11':'Moli 1.1.11'}
-def display_name(name):return DISPLAY_NAMES.get(name,name)
+DISPLAY_NAMES={'moli-1.0.6':'Moli 1.0.6','moli':'Moli','moli-1.1.3':'Moli 1.1.3','moli-1.1.7':'Moli 1.1.7','moli-1.1.11':'Moli 1.1.11'}
+def display_name(name):return measured_method_label(name,DISPLAY_NAMES.get(name,browser_method_label(name)))
 
 def adoption_counts(data,names):
     result=[]
@@ -93,7 +93,11 @@ def render_methods(out,records,*,hero,section,table,cell,link,esc,authored=True)
     (dest/'counts.json').write_text(json.dumps({'snapshot':data['generated_at'],'scope':'签名命中线索，不是运行调用次数或全网采用量','methods':counts},ensure_ascii=False,indent=2)+'\n')
     intro=[];rows=[];details=''
     for name in names:
-        kind,desc,url=PROFILES.get(name,('测试适配器','本地可重复测试实现。','https://example.com'));r=next(r for r in records if r['provider']==name);info=method_info(r['provider_type'])
+        from .methods import native_browser_engine, browser_method_registry
+        engine=native_browser_engine(name)
+        kind,desc,url=PROFILES.get(name,PROFILES.get(engine,('测试适配器','本地可重复测试实现。','https://example.com')))
+        if engine and engine!=name:url=browser_method_registry()[name].get('source_url',url)
+        r=next(r for r in records if r['provider']==name);info=method_info(r['provider_type'])
         intro.append(('',cell(link('../providers/'+name+'.html',display_name(name)))+cell(kind)+cell(desc)+cell(esc(info['output']))+cell(esc(info['freshness']))+cell(link(url,'文档 / 源码 ↗'))))
     for item in counts:
         name=item['provider'];n=item['repository_count'];known=n is not None
@@ -114,13 +118,13 @@ def render_methods(out,records,*,hero,section,table,cell,link,esc,authored=True)
         ('方法归属规则','逐一读取命中的 Git 文件并校验内容。通用 web_fetch 和同名函数不能证明归属；Exa 要求 Contents 端点或 SDK 导入及 get_contents。内置方法也包括源码复制与官方仓库，不能冒充第三方集成。'),
     ])+'<p>'+link('evidence.json','完整检索证据')+' · '+link('counts.json','逐方法统计数据')+'</p>'
     body=hero('方法介绍','参评方法的官方能力、价格、接口与开源采用；实测表现见各方法执行记录。')
-    if records and all(r.get('provider_type') in {'headless_html','headless_markdown'} for r in records):
-        body+=section('参评方法',cards([('远程正文接口','Kitesurf 使用 Cloudflare 账户级 Browser Run /markdown API；耗时包含公网往返、远端排队与执行。'),('本地原生产物','Lightpanda、Obscura 与 Moli 1.1.1 的普通网页使用 CLI 正文输出。Moli 的直接文档和媒体 URL 使用裸 fetch：正文任务在预算内解析，文件任务校验字节。'),('本地 DOM 转换','Chromium 152 由 Playwright 取完整渲染 DOM，再用 node-html-markdown 2.0.0 转换。五种方法都不调用模型。')]))
+    if is_browser_comparison(records):
+        body+=section('参评方法',cards([('远程接口','Kitesurf 使用指定 browser=kitesurf 的 Cloudflare Browser Run API；耗时包含公网往返、远端排队与执行。'),('本地原生接口','Lightpanda、Obscura 与 Moli 按任务使用各自官方接口。正文、文档和媒体任务的具体调用及输出格式见报告解读中的接口表。'),('Chromium 的正文转换','Chromium 通过原生接口读取渲染后的 DOM，再用 node-html-markdown 2.0.0 转成 Markdown。其他浏览器的正文不经过共同转换；文档任务不使用外部 PDF / DOCX 解析器。所有方法均不调用模型。')]))
         body+=section('Kitesurf 能否本地部署',cards([('当前结论','截至 2026-09-07，Cloudflare 尚未发布 Kitesurf 源码或自行部署包；本轮只能通过 Cloudflare 账号版 Browser Run 远程测试，不能把它当作本地开源浏览器。'),('后续意向','Cloudflare 官方博客表示计划在准备好后开源，并希望允许客户部署到自己的账户。这是未来计划，不是当前已有能力。')])+'<p class="source-note"><a href="https://developers.cloudflare.com/browser-run/kitesurf/">当前官方接入说明</a> · <a href="https://blog.cloudflare.com/kitesurf/">官方开源计划说明</a></p>')
     else:
         body+=section('参评方法',cards([('托管 API','Lexmount 两个区域、Firecrawl、Tavily、Exa、Cloudflare；通过各自 API 调用。'),('项目内置','CowAgent、OpenClaw、DeepSeek Harness；按本轮保留的实现与配置执行。'),('本地运行','LangChain WebBaseLoader、Crawl4AI、Moli WebFetch；使用本机网络与运行环境。')]))
     body+=section('能力、价格与接口',tabs('method-guide',[
-        ('capabilities','官方能力',render_capabilities(out,names,table=table,cell=cell,link=link)),
+        ('capabilities','官方能力',render_capabilities(out,names,table=table,cell=cell,link=link,records=records)),
         ('pricing','价格与计费',render_pricing(out,names,table=table,cell=cell,link=link,esc=esc)),
         ('adoption','采用统计',f'<p>{data["generated_at"][:10]} 核验的公开源码候选集，包括搜索结果与登记文件。计数是已核验下限，不是全网采用量；点击数字查看仓库与文件。</p>'+stats+details),
         ('profiles','方法详情','<p>下表介绍本轮实际调用的实现；方法名称可打开其全部已测案例。各组覆盖数量以执行记录为准，功能范围以本轮配置为准。</p>'+table(['方法','形态','做什么','本轮输出','本轮新鲜度设置','来源'],intro)),
diff --git a/harness/web_fetch/report_package.py b/harness/web_fetch/report_package.py
index 9adf0879e..2d8cd490c 100644
--- a/harness/web_fetch/report_package.py
+++ b/harness/web_fetch/report_package.py
@@ -17,7 +17,7 @@
 from harness.record_io import load_jsonl
 from harness.reporting.packs import write_packs
 from harness.reporting.links import validate_virtual_links
-from harness.web_fetch.publication_privacy import project_file
+from harness.web_fetch.publication_privacy import project_file, project_redundant_result_streams
 from harness.web_fetch.safety import evidence_tree_identity
 
 
@@ -37,11 +37,19 @@ def validate_release(source: Path) -> bool:
             value = json.loads(path.read_text())
             manifests.extend(value.get('batches', [value]))
     require_certifiable_evidence(dataset, manifests)
+    content_binding = dataset.get('comparison', {}).get('report_interpretation')
+    if content_binding:
+        from .report_explainer import current_browser_article_model
+        current_browser_article_model(source, {case['id']:case for case in dataset['cases']},
+                                      load_jsonl(source/'results.jsonl'), content_binding)
     sampled = dataset.get("comparison", {}).get("kind") == "webmainbench_frozen_html_to_markdown"
     if not sampled:
         reliability = json.loads((source / "reliability.json").read_text())
         if reliability.get("complete") is not True:
             raise ValueError("Refusing to package an incomplete or unjudged benchmark report")
+        if dataset.get("comparison", {}).get("require_independent_result_review"):
+            from .result_review import require_result_review
+            require_result_review(source, dataset, load_jsonl(source / "results.jsonl"))
         return False
     review = json.loads((source / "result-review.json").read_text())
     if review.get("status") != "passed" or review.get("failures"):
@@ -82,6 +90,7 @@ def _build(source: Path, destination: Path, archive: Path, *, webmainbench: bool
     original = {}
     pages = {}
     redactions = []
+    footprint_projections = []
     source_paths = sorted(path for path in source.rglob("*") if path.is_file())
     source_file_count = sum(path.name != ".generated-report" for path in source_paths)
     logical_route_count = sum(path.suffix == ".html" for path in source_paths)
@@ -113,6 +122,9 @@ def add(path, data, *, source_sha256=None):
         if path.is_symlink():
             raise ValueError("Publication source must not contain symlinks: " + name)
         data, redaction = project_file(name, data)
+        data, footprint_projection = project_redundant_result_streams(name, data)
+        if footprint_projection:
+            footprint_projections.append(footprint_projection)
         if redaction:
             if name in scored_paths:
                 redaction["scored_output"] = True
@@ -241,6 +253,11 @@ def add(path, data, *, source_sha256=None):
             redaction["published_sha256"] = hashlib.sha256(data).hexdigest()
             redaction["published_bytes"] = len(data)
             redactions.append(redaction)
+        if footprint_projection:
+            footprint_projection["original_sha256"] = source_sha256
+            footprint_projection["original_bytes"] = path.stat().st_size
+            footprint_projection["published_sha256"] = hashlib.sha256(data).hexdigest()
+            footprint_projection["published_bytes"] = len(data)
         add(name, data, source_sha256=source_sha256)
     privacy = {
         "schema_version": 1,
@@ -253,6 +270,7 @@ def add(path, data, *, source_sha256=None):
             "Key validity is not tested."
         ),
         "files": redactions,
+        "footprint_projections": footprint_projections,
     }
     add(
         "publication-privacy.json",
@@ -437,7 +455,10 @@ def old_bytes(name):
 
         if (
             old_bytes("results.jsonl")
-            != project_file("results.jsonl", (source / "results.jsonl").read_bytes())[0]
+            != project_redundant_result_streams(
+                "results.jsonl",
+                project_file("results.jsonl", (source / "results.jsonl").read_bytes())[0],
+            )[0]
         ):
             raise ValueError("Incremental update cannot replace measured results")
         refresh = json.loads((source / "report-manifest.json").read_text()).get(
diff --git a/harness/web_fetch/report_pricing.py b/harness/web_fetch/report_pricing.py
index 78c8601da..740b3cbec 100644
--- a/harness/web_fetch/report_pricing.py
+++ b/harness/web_fetch/report_pricing.py
@@ -24,7 +24,10 @@ def money(value):
 
 
 def render_pricing(out, names, *, table, cell, link, esc):
-    data = json.loads(SOURCE.read_text())
+    source = out / 'report-assets/provider-pricing.json'
+    if not source.is_file():
+        source = SOURCE
+    data = json.loads(source.read_text())
     dest = out / 'adoption'
     dest.mkdir(exist_ok=True)
     (dest / 'pricing.json').write_text(json.dumps(data, ensure_ascii=False, indent=2) + '\n')
diff --git a/harness/web_fetch/report_publish.py b/harness/web_fetch/report_publish.py
index a5c4d7bef..092abde1f 100644
--- a/harness/web_fetch/report_publish.py
+++ b/harness/web_fetch/report_publish.py
@@ -188,7 +188,9 @@ def finish(value):
     if config.mode == "reuse":
         if package_check is None:
             return finish(result)
-        with snapshot_publication(config.archive, inputs=[config.profile, config.source, *validation_inputs]) as release:
+        with snapshot_publication(
+            config.archive, inputs=[config.profile, config.source, *validation_inputs]
+        ) as release:
             release_guard = release.check
             package_check(release.archive, config.source)
             release.check()
@@ -198,14 +200,17 @@ def finish(value):
     for path in (config.archive, config.receipt, config.journal):
         if path.resolve().is_relative_to(config.source.resolve()):
             raise ValueError("Publication outputs must stay outside the source report")
-    with snapshot_publication(config.archive, inputs=[config.profile, config.source, *validation_inputs]) as release:
+    with snapshot_publication(
+        config.archive, inputs=[config.profile, config.source, *validation_inputs]
+    ) as release:
         release_guard = release.check
         (package_check or check)(release.archive, config.source)
         release.check()
         original_send = send
 
         def guarded_send(*args, **kwargs):
-            release.check()
+            if '/commit' in args[0] or '/versions' in args[0]:
+                release.verify()
             return original_send(*args, **kwargs)
 
         send = guarded_send
@@ -247,7 +252,7 @@ def staged_send(path, data=None, content_type=None, *, method=None):
                     return send(path, data, content_type, method=method, extra_headers=headers)
 
                 raw = upload_large_archive(
-                    staged_send, release.archive, identity["slug"], expected, title=config.title
+                    staged_send, release.archive, identity["slug"], expected, title=config.title, max_workers=4
                 )
                 status = 200
             else:
@@ -284,7 +289,7 @@ def staged_send(path, data=None, content_type=None, *, method=None):
             )
             save(result)
         summary = finish(result)
-        release.check()
+        release.verify()
         operations.clear(identity)
         return summary
 
diff --git a/harness/web_fetch/report_resources.py b/harness/web_fetch/report_resources.py
index 1acdb214e..a1cacb44c 100644
--- a/harness/web_fetch/report_resources.py
+++ b/harness/web_fetch/report_resources.py
@@ -6,7 +6,7 @@
 PROVIDER_NAMES = {
     'chromium': 'Chromium',
     'lightpanda': 'Lightpanda',
-    'moli': 'Moli 1.1.1',
+    'moli': 'Moli 1.1.15 · 独立资源批次',
     'obscura': 'Obscura',
 }
 
@@ -122,10 +122,14 @@ def lowest(key, statistic):
             cells = []
             for provider in local:
                 rendered = escape(_format(values[provider], unit))
-                if lower_is_better and values[provider] == best:
-                    rendered = (f'<strong class="resource-best" data-resource-metric-winner="{escape(provider)}">'
+                if lower_is_better and values[provider] == best and list(values.values()).count(best) == 1:
+                    rendered = (f'<strong class="resource-best comparison-winner" data-resource-metric-winner="{escape(provider)}">'
                                 f'{rendered}<span>本项最低</span></strong>')
-                cells.append('<td>' + rendered + '</td>')
+                cells.append(f'<td data-resource-provider="{escape(provider)}" '
+                    f'data-resource-key="{key}" data-resource-statistic="{statistic}" '
+                    f'data-metric="resource-{key}-{statistic}" '
+                    f'data-metric-direction="{"min" if lower_is_better else "neutral"}" '
+                    f'data-sort="{values[provider]}">' + rendered + '</td>')
             rows.append(f'<tr><td>{row_index}</td><td class="resource-metric">' + escape(metric_name) + '</td>'
                         + ''.join(cells) + '</tr>')
         header = ''.join('<th scope="col">' + escape(PROVIDER_NAMES.get(provider, provider)) + '</th>'
@@ -138,9 +142,16 @@ def lowest(key, statistic):
             '<table><thead><tr><th scope="col">序号</th><th scope="col">指标</th>' + header + '</tr></thead><tbody>'
             + ''.join(rows) + '</tbody></table></div></section>')
 
-    sample = (f'<p class="resource-sample">同题口径：所列配置共同通过 '
-              f'<strong>{len(summary["common_pass_cases"])}/{len(summary["planned_cases"])}</strong> 个普通网页；'
-              '失败任务不进入资源排名。</p>')
+    count = len(summary['planned_cases'])
+    completions = '，'.join(PROVIDER_NAMES.get(provider, provider) + ' ' +
+        str(indexed[provider].get('successful_attempts', '—')) + '/' + str(count)
+        for provider in local)
+    sample = (f'<p class="resource-sample" data-resource-population="all_declared_calls" '
+              f'data-resource-cases="{count}">资源表覆盖预先确定的全部 {count} 个普通网页，包含失败调用。'
+              f'这组任务的通过数：{escape(completions)}。各项平均值、P50、P95 使用同一完整范围。</p>'
+              '<p>所列配置共同通过 '
+              f'<strong>{len(summary["common_pass_cases"])}/{count}</strong>；'
+              '这项交集只作附加诊断，不用于选择资源表的样本。各方法成功调用的条件统计另保留在资源证据中。</p>')
     caveat = ('<p class="callout"><b>可比边界：</b>每次调用使用一次性 Linux 客户端容器、cgroup v2 与独立网络命名空间；'
               '宿主控制器和容器启停不计入。Kitesurf 的远端浏览器 CPU、内存和远端上游流量不可见，'
               '因此不进入资源表或本地引擎资源排名。</p>'
@@ -153,3 +164,40 @@ def lowest(key, statistic):
         'ranked_metric_count': len(winners),
         'winner_tied': leader_tied,
     }
+
+
+def check_resource_presentation(html, summary):
+    """Verify complete-population values and unique extrema at release time."""
+    from harness.reporting.presentation import check_presentation
+    soup = check_presentation(html)
+    if summary.get('primary_population') != 'all_declared_calls':
+        raise ValueError('Resource ranking must retain every declared call')
+    count = len(summary['planned_cases'])
+    sample = soup.select('[data-resource-population="all_declared_calls"]')
+    if len(sample) != 1 or sample[0].get('data-resource-cases') != str(count):
+        raise ValueError('Resource comparison has the wrong population or denominator')
+    headline = soup.select('[data-resource-winner]')
+    expected_html, _ = render_resource_comparison(summary, summary['providers'])
+    from bs4 import BeautifulSoup
+    expected_leaders = BeautifulSoup(expected_html, 'html.parser').select_one(
+        '[data-resource-winner]')['data-resource-winner']
+    if len(headline) != 1 or headline[0]['data-resource-winner'] != expected_leaders:
+        raise ValueError('Resource leader differs from measured metric winners')
+    expected = {(row['provider'], key, statistic): row['metrics'][key][statistic]
+        for row in summary['rows'] for _, metrics in GROUPS
+        for _, key, statistic, _, _ in metrics}
+    cells = soup.select('td[data-resource-provider][data-resource-key][data-resource-statistic]')
+    observed = {}
+    for cell in cells:
+        identity = (cell['data-resource-provider'], cell['data-resource-key'], cell['data-resource-statistic'])
+        if identity in observed or cell.get('data-sort') is None:
+            raise ValueError('Resource comparison contains duplicate or unavailable measurements')
+        direction = next('min' if lower else 'neutral' for _, metrics in GROUPS
+            for _, key, statistic, _, lower in metrics if identity[1:] == (key, statistic))
+        if cell.get('data-metric-direction') != direction or cell.get('data-metric') != (
+                'resource-' + identity[1] + '-' + identity[2]):
+            raise ValueError('Resource metric direction or identity changed')
+        observed[identity] = float(cell['data-sort'])
+    if observed != expected or any(row['attempts'] != count or any(
+            value['n'] != count for value in row['metrics'].values()) for row in summary['rows']):
+        raise ValueError('Resource comparison differs from its complete measured cohort')
diff --git a/harness/web_fetch/report_style.py b/harness/web_fetch/report_style.py
index 0f505332c..af91d7efe 100644
--- a/harness/web_fetch/report_style.py
+++ b/harness/web_fetch/report_style.py
@@ -1,5 +1,7 @@
 """Shared visual styling for the current report and standalone editorial export."""
 STYLE = r"""
+.browser-interface-matrix table{min-width:1440px;table-layout:fixed}.browser-interface-matrix th:first-child{width:140px}.browser-interface-matrix td{overflow-wrap:anywhere}.browser-interface-matrix th{white-space:nowrap}
+.browser-interpretation .browser-interface-matrix table{min-width:1100px;font-size:13px}.browser-interpretation .browser-interface-matrix th:first-child{width:32px}.browser-interpretation .browser-interface-matrix th:nth-child(2){width:150px}.browser-interpretation pre{max-height:24rem;overflow:auto;white-space:pre-wrap;overflow-wrap:anywhere}
 :root{color-scheme:light;--bg:#f6f8fb;--panel:#fff;--panel2:#eef3f8;--ink:#17212b;--muted:#5d6b78;--line:#d9e2ea;--accent:#1268d8;--accent-soft:#e9f2ff;--violet:#6756d8;--lime:#3f7b26;--coral:#bd402f;--good:#117a47;--bad:#c22e43;--warn:#8a5a00;--callout:#fff6d8;--failure-bg:#fff0f2;--success-bg:#eaf8f0;--code-bg:#101820;--code-ink:#e9f1f5;--shadow:0 8px 28px rgba(30,55,80,.08);--max:1180px}
 :root[data-theme="dark"]{color-scheme:dark;--bg:#071015;--panel:#0d1a21;--panel2:#122630;--ink:#edf6f7;--muted:#9aadb4;--line:#263c46;--accent:#49d6ed;--accent-soft:#10303a;--violet:#8b7cff;--lime:#c6ed3d;--coral:#ff8168;--good:#67df9f;--bad:#ff6b7a;--warn:#ffd166;--callout:#251f13;--failure-bg:#2a1419;--success-bg:#10271d;--code-bg:#050d11;--code-ink:#d7e8eb;--shadow:none}
 *{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;background:linear-gradient(180deg,var(--accent-soft) 0,transparent 240px),var(--bg);color:var(--ink);font:15px/1.65 Inter,system-ui,-apple-system,"Segoe UI","PingFang SC",sans-serif;transition:background .2s,color .2s}a{color:var(--accent);text-decoration:none}a:hover{text-decoration:underline}.wrap{width:min(var(--max),calc(100% - 40px));margin:auto}.top{border-bottom:1px solid var(--line);background:color-mix(in srgb,var(--panel) 92%,transparent);position:sticky;top:0;z-index:5;backdrop-filter:blur(14px)}nav{display:flex;align-items:center;gap:17px;overflow:auto;padding:10px 0;white-space:nowrap}.brand{font-weight:850;color:var(--ink);margin-right:auto}.theme-toggle{border:1px solid var(--line);background:var(--panel);color:var(--ink);border-radius:999px;padding:7px 12px;font:inherit;font-size:12px;cursor:pointer}.theme-toggle:hover{border-color:var(--accent)}.hero{padding:42px 0 30px}.eyebrow{font:750 12px/1.2 ui-monospace,monospace;letter-spacing:.12em;color:var(--accent)}h1{font-size:clamp(34px,5vw,58px);line-height:1.08;letter-spacing:-.04em;margin:13px 0;max-width:980px}h2{font-size:clamp(25px,3vw,36px);line-height:1.16;letter-spacing:-.025em;margin:0 0 12px}h3{font-size:19px;margin:24px 0 8px}.lead,.sub{color:var(--muted);max-width:900px}.meta{display:flex;gap:8px;flex-wrap:wrap}.pill,.tag{border:1px solid var(--line);background:var(--panel);border-radius:999px;padding:5px 10px;color:var(--muted);font-size:12px}.tag{padding:2px 7px}.grid{display:grid;grid-template-columns:repeat(12,1fr);gap:14px}.card{background:var(--panel);border:1px solid var(--line);border-radius:14px;padding:20px;box-shadow:var(--shadow)}.kpi{grid-column:span 3;border-top:3px solid var(--accent)}.kpi:nth-child(2){border-top-color:var(--violet)}.kpi:nth-child(3){border-top-color:var(--lime)}.kpi:nth-child(4){border-top-color:var(--coral)}.n{font-size:32px;font-weight:850;letter-spacing:-.04em;margin:7px 0}.section{padding:38px 0;border-top:1px solid var(--line)}.table-wrap{overflow:auto;border:1px solid var(--line);border-radius:13px;background:var(--panel);box-shadow:var(--shadow)}table{border-collapse:collapse;width:100%;min-width:760px;background:var(--panel)}th,td{padding:11px 13px;border-bottom:1px solid var(--line);text-align:left;vertical-align:top}th{background:var(--panel2);font-size:12px;letter-spacing:.03em;position:sticky;top:0}td{color:var(--ink)}tbody tr:hover{background:var(--accent-soft)}.good{color:var(--good);font-weight:750}.bad{color:var(--bad);font-weight:750}.warn{color:var(--warn);font-weight:750}.bar{height:9px;background:var(--panel2);border-radius:99px;overflow:hidden;min-width:120px}.bar>i{display:block;height:100%;background:linear-gradient(90deg,var(--accent),var(--violet));border-radius:99px}.callout{border-left:4px solid var(--warn);background:var(--callout);padding:14px 17px;border-radius:0 12px 12px 0}.failure{border-left-color:var(--bad);background:var(--failure-bg)}.success{border-left-color:var(--good);background:var(--success-bg)}pre,code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace}code{color:var(--accent);overflow-wrap:anywhere}pre{white-space:pre-wrap;overflow-wrap:anywhere;background:var(--code-bg);border:1px solid var(--line);padding:18px;border-radius:12px;color:var(--code-ink);max-height:70vh;overflow:auto}.attempt-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(190px,1fr));gap:10px}.kv{background:var(--panel);border:1px solid var(--line);border-radius:11px;padding:13px}.kv b{display:block;font-size:12px;color:var(--muted);margin-bottom:4px}.footer{padding:36px 0 64px;color:var(--muted)}.empty{color:var(--muted);font-style:italic}.tiny{font-size:12px;color:var(--muted)}
diff --git a/harness/web_fetch/rescoring.py b/harness/web_fetch/rescoring.py
index 3a6c7ac59..250495771 100644
--- a/harness/web_fetch/rescoring.py
+++ b/harness/web_fetch/rescoring.py
@@ -2,6 +2,7 @@
 
 import hashlib
 import json
+from copy import deepcopy
 from datetime import datetime, timezone
 from pathlib import Path
 
@@ -25,7 +26,44 @@
 from harness.web_fetch.scoring import SCORING_SOURCE_SHA256, load_list_reference, score_attempt
 
 
-def rescore(source, case_ids=None, *, allow_rule_revision=False, reference_revision_hashes=None):
+def _rescore_one(arguments):
+    r,c,source,audit,validate_only=arguments
+    original = deepcopy(r) if validate_only else None
+    raw = contained_path(source, r["artifact_path"]).read_bytes()
+    if hashlib.sha256(raw).hexdigest() != r["metrics"]["content_sha256"]:
+        raise ValueError("Output integrity failure: " + r["attempt_id"])
+    before = succeeded(r, c)
+    # Status and artifact normalization are shared with live execution.
+    r["metrics"] = score_attempt(
+        c,
+        raw,
+        ok=bool(r["ok"]),
+        status_code=r.get("status_code"),
+        title=r.get("title"),
+        final_url=r.get("final_url"),
+        metadata=r.get("provider_metadata", {}),
+        previous_metrics=r["metrics"],
+        list_reference=load_list_reference(c, source),
+    )
+    apply_request_status(r)
+    if validate_only:
+        if r != original:
+            raise ValueError('Scoring validation would change a retained attempt: ' + r['attempt_id'])
+        return r, None
+    if "run_id" not in r:
+        r["run_id"] = execution_id(r)
+    r["diagnosis"] = diagnose(r, c, raw.decode("utf-8", errors="replace"))
+    r["failure_category"] = failure_category(r, c)
+    r["scoring"] = {**r.get("scoring", {}), **audit}
+    after = succeeded(r, c)
+    change={"attempt_id":r["attempt_id"],"before":before,"after":after} if before!=after else None
+    return r,change
+
+
+def rescore(source, case_ids=None, *, allow_rule_revision=False, reference_revision_hashes=None,
+            validate_only=False, jobs=1):
+    if type(jobs) is not int or not 1<=jobs<=8:
+        raise ValueError('Offline scoring jobs must be between 1 and 8')
     dataset_path = contained_path(source, "dataset.json")
     dataset_bytes = dataset_path.read_bytes()
     dataset = json.loads(dataset_bytes)
@@ -108,38 +146,37 @@ def rescore(source, case_ids=None, *, allow_rule_revision=False, reference_revis
         "reference_revision": bool(reference_revision_hashes),
     }
     changes = []
-    for r in records:
-        if case_ids is not None and r["case_id"] not in case_ids:
-            continue
-        c = cases[r["case_id"]]
-        raw = contained_path(source, r["artifact_path"]).read_bytes()
-        if hashlib.sha256(raw).hexdigest() != r["metrics"]["content_sha256"]:
-            raise ValueError("Output integrity failure: " + r["attempt_id"])
-        before = succeeded(r, c)
-        # Status and artifact normalization are shared with live execution.
-        r["metrics"] = score_attempt(
-            c,
-            raw,
-            ok=bool(r["ok"]),
-            status_code=r.get("status_code"),
-            title=r.get("title"),
-            final_url=r.get("final_url"),
-            metadata=r.get("provider_metadata", {}),
-            previous_metrics=r["metrics"],
-            list_reference=load_list_reference(c, source),
-        )
-        apply_request_status(r)
-        if "run_id" not in r:
-            r["run_id"] = execution_id(r)
-        r["diagnosis"] = diagnose(r, c, raw.decode("utf-8", errors="replace"))
-        r["failure_category"] = failure_category(r, c)
-        r["scoring"] = {**r.get("scoring", {}), **audit}
-        after = succeeded(r, c)
-        if before != after:
-            changes.append({"attempt_id": r["attempt_id"], "before": before, "after": after})
+    selected=[index for index,row in enumerate(records) if case_ids is None or row['case_id'] in case_ids]
+    def arguments(index):
+        row=records[index]
+        return row,cases[row['case_id']],source,audit,validate_only
+    def accept(index,computed):
+        row,change=computed
+        records[index]=row
+        if change is not None:changes.append(change)
+    if jobs==1:
+        for index in selected:
+            accept(index,_rescore_one(arguments(index)))
+    else:
+        from collections import deque
+        from concurrent.futures import ProcessPoolExecutor
+        # Bound queued records as well as workers: saved answers and diagnostics
+        # can be large, so eager map would retain many duplicated payloads.
+        with ProcessPoolExecutor(max_workers=jobs) as pool:
+            remaining=iter(selected)
+            pending=deque((index,pool.submit(_rescore_one,arguments(index)))
+                          for index in [next(remaining,None) for _ in range(jobs)] if index is not None)
+            while pending:
+                index,future=pending.popleft()
+                accept(index,future.result())
+                following=next(remaining,None)
+                if following is not None:
+                    pending.append((following,pool.submit(_rescore_one,arguments(following))))
     temporary = contained_path(source, "results.jsonl.tmp")
     if path.read_bytes() != original_results or dataset_path.read_bytes() != dataset_bytes:
         raise ValueError("Scoring inputs changed during rescoring")
+    if validate_only:
+        return []
     # JSON Lines readers split on physical line boundaries. Escaping Unicode
     # line/paragraph separators keeps one attempt on exactly one line too.
     temporary.write_text("".join(json.dumps(r, ensure_ascii=True) + "\n" for r in records))
diff --git a/harness/web_fetch/resource_cohort.py b/harness/web_fetch/resource_cohort.py
index 698ddb68c..4348f2799 100644
--- a/harness/web_fetch/resource_cohort.py
+++ b/harness/web_fetch/resource_cohort.py
@@ -36,9 +36,9 @@
 def _stats(values):
     return {
         "n": len(values),
-        "p50": statistics.median(values),
-        "p95": percentile(values, 0.95),
-        "mean": statistics.fmean(values),
+        "p50": statistics.median(values) if values else None,
+        "p95": percentile(values, 0.95) if values else None,
+        "mean": statistics.fmean(values) if values else None,
     }
 
 
@@ -101,21 +101,29 @@ def build_summary(dataset: dict, records: list[dict], batches: list[dict]) -> di
             for provider in providers
         )
     )
-    if len(common) < 5:
-        raise ValueError("Too few all-provider successful cases for resource comparison")
     by_key = {(record["provider"], record["case_id"]): record for record in records}
     rows = []
     for provider in providers:
         metrics = {
-            metric: _stats([value(by_key[provider, case_id], metric) for case_id in common])
+            metric: _stats([value(by_key[provider, case_id], metric) for case_id in cases])
             for metric in METRICS
         }
-        rows.append({"provider": provider, "attempts": len(common), "metrics": metrics})
+        successful = [case_id for case_id, case in cases.items() if task_passed(
+            by_key[provider, case_id]['ok'], by_key[provider, case_id]['metrics'],
+            case.get('task_kind', 'body'))]
+        rows.append({"provider": provider, "attempts": len(cases), "metrics": metrics,
+            "successful_attempts": len(successful), "successful_case_ids": sorted(successful),
+            "successful_metrics": {metric: _stats([value(by_key[provider, case_id], metric)
+                for case_id in successful]) for metric in METRICS}})
     summary = {
-        "schema_version": 1,
+        "schema_version": 2,
+        "primary_population": "all_declared_calls",
+        "conditional_population": "individually_successful_calls",
+        "common_pass_population": "diagnostic_only",
         "selection": (
-            "Predeclared provider-blind ordinary-web cohort; aggregates use the single "
-            "all-provider successful case intersection."
+            "Every predeclared provider-task call is included in the primary distribution. "
+            "Per-provider successful-call distributions are conditional; the common-pass "
+            "intersection is diagnostic only and never selects ranking samples."
         ),
         "interpretation": "isolated_local_browser_client_container_cost",
         "scope": (
diff --git a/harness/web_fetch/result_review.py b/harness/web_fetch/result_review.py
index cb7cc1dff..e642e2f3a 100644
--- a/harness/web_fetch/result_review.py
+++ b/harness/web_fetch/result_review.py
@@ -64,6 +64,12 @@ def review_input_identity(record):
         'artifact_path': record.get('artifact_path'),
         'request_ok': record.get('ok'),
         'error_type': record.get('error_type'),
+        'error_message': record.get('error_message'),
+        'diagnostic_log': ({
+            'path': metadata.get('diagnostic_log_path'),
+            'sha256': metadata.get('diagnostic_log_sha256'),
+            'bytes': metadata.get('diagnostic_log_bytes'),
+        } if metadata.get('diagnostic_log_path') else None),
         'content_sha256': record.get('metrics', {}).get('content_sha256'),
         'file_artifacts': [item for item in raw_artifacts if item['kind'] == 'file'],
         'raw_artifacts': raw_artifacts,
@@ -103,6 +109,11 @@ def _require_result_review(source, dataset, records, review_document=None, *, an
     scope = protocol.get('scope', 'all')
     if scope not in {'all','machine-failures'}:
         raise ValueError('Unsupported result review scope')
+    declared_scope = dataset.get('comparison', {}).get('independent_result_review_scope')
+    if declared_scope is not None and declared_scope not in {'all', 'machine-failures'}:
+        raise ValueError('Unsupported declared result review scope')
+    if declared_scope == 'all' and scope != 'all':
+        raise ValueError('The declared full review must include successful and failed attempts')
     anomaly_attempts = set()
     if anomaly_gate and dataset.get('comparison', {}).get('require_anomaly_review', False):
         from .anomaly_review import detect_anomalies
@@ -194,10 +205,13 @@ def rebind_unchanged_result_review(path, before_dataset, before_results,
         key for key in set(before_comparison) | set(after_comparison)
         if before_comparison.get(key) != after_comparison.get(key)
     }
-    if changed_comparison - {'conversion'}:
+    # Authored interpretation and implementation descriptions do not alter the
+    # frozen task or raw answer. Their bytes are checked at the report boundary.
+    presentation_fields = {'conversion', 'report_interpretation', 'implementation_provenance'}
+    if changed_comparison - presentation_fields:
         raise IndependentReviewRequired(
             'Comparison semantics changed; independent result review must be rerun: '
-            + ', '.join(sorted(changed_comparison - {'conversion'}))
+            + ', '.join(sorted(changed_comparison - presentation_fields))
         )
     old_rows = {row['attempt_id']: row for row in parse_jsonl(before_results)}
     new_rows = {row['attempt_id']: row for row in parse_jsonl(after_results)}
diff --git a/harness/web_fetch/retrieval_hints.py b/harness/web_fetch/retrieval_hints.py
index b9c704eba..76bc2e6d6 100644
--- a/harness/web_fetch/retrieval_hints.py
+++ b/harness/web_fetch/retrieval_hints.py
@@ -2,15 +2,19 @@
 
 from __future__ import annotations
 
+import hashlib
 import json
-from copy import deepcopy
 import re
 from collections.abc import Mapping
+from copy import deepcopy
 from dataclasses import dataclass
+from functools import lru_cache
+from pathlib import Path
 from typing import Any
 
 _WAIT_UNTIL = {"domcontentloaded", "load", "networkidle"}
 _COMPLETION_KEYS = {"selector", "minimum_count", "timeout_ms", "delay_ms"}
+_NATIVE_COMPLETION_KEYS = {"selector", "minimum_count"}
 _EXTRACTION_KEYS = {"selector", "maximum_count", "exclude_selectors", "fallback"}
 _EXTRACTION_FALLBACKS = {"body", "empty"}
 _SAFE_SELECTOR = re.compile(
@@ -18,25 +22,100 @@
     r"(?:(?:[.#][A-Za-z_][A-Za-z0-9_-]*)|"
     r"(?:\s*>\s*|\s+)(?:[A-Za-z][A-Za-z0-9_-]*|[.#][A-Za-z_][A-Za-z0-9_-]*))*$"
 )
+_CONTRACT_NAME = re.compile(r"^[a-z][a-z0-9-]{2,80}$")
+_CONTRACT_REGISTRY_PATH = (
+    Path(__file__).resolve().parents[2]
+    / "evaluation/native-retrieval-contracts.json"
+)
+_REPOSITORY_ROOT = Path(__file__).resolve().parents[2]
+_ANSWER_SELECTOR = re.compile(r"(?:^|[.#_-])(answer|correct-answer)(?:$|[.#_-])", re.I)
+
+
+@lru_cache(maxsize=1)
+def _native_contract_registry() -> dict[str, Any]:
+    registry = json.loads(_CONTRACT_REGISTRY_PATH.read_text(encoding="utf-8"))
+    if registry.get("schema_version") != 1 or not isinstance(registry.get("contracts"), dict):
+        raise ValueError("Native retrieval contract registry is invalid")
+    return registry
+
+
+@lru_cache(maxsize=None)
+def _verify_contract_source(path: str, expected_sha256: str) -> None:
+    prefix = Path("evaluation/sources")
+    authority = Path(path)
+    try:
+        relative = authority.relative_to(prefix)
+    except ValueError as error:
+        raise ValueError("Native retrieval contract source must belong to evaluation/sources") from error
+    manifest = json.loads((_REPOSITORY_ROOT / "evaluation/source-inputs.json").read_text())
+    if manifest.get("trees", {}).get("sources", {}).get(relative.as_posix()) != expected_sha256:
+        raise ValueError("Native retrieval contract source hash is not in the source manifest")
+    source = _verified_source_tree() / relative
+    if hashlib.sha256(source.read_bytes()).hexdigest() != expected_sha256:
+        raise ValueError("Native retrieval contract source bytes do not match the declared hash")
+
+
+@lru_cache(maxsize=None)
+def _verify_task_definition(identifier: str, expected_sha256: str) -> None:
+    catalog = json.loads((_REPOSITORY_ROOT /
+        "evaluation/dynamic-content-100-moli-webfetch/dataset-catalog.json").read_text())
+    declared = next((case for case in catalog.get("cases", [])
+                     if case.get("id") == identifier), None)
+    if declared is None or declared.get("definition_sha256") != expected_sha256:
+        raise ValueError("Native retrieval contract task definition hash is not in the dataset catalog")
+
+
+def task_definition_sha256(case: Mapping[str, Any]) -> str:
+    """Hash one task with the same canonical form as the frozen catalog."""
+    return hashlib.sha256(
+        json.dumps(
+            case, ensure_ascii=False, sort_keys=True, separators=(",", ":")
+        ).encode()
+    ).hexdigest()
+
+
+@lru_cache(maxsize=1)
+def _verified_source_tree() -> Path:
+    from .reference_inputs import input_tree
+    return input_tree(_REPOSITORY_ROOT / "evaluation/dataset.json", "sources")
 
 
 def native_fetch_dataset(dataset: dict) -> dict:
     """Select default WebFetch execution without changing scenario acceptance.
 
-    ``dynamic`` is the selector-guided execution track, not merely a description
-    of a site's contents. A native-completion experiment uses the ordinary web
-    execution track while retaining the original family and every scoring rule.
+    Keep case-specific routing and completion hints out of the native
+    comparison. Every dynamic case receives the same marker; providers choose
+    one official completion policy for the whole dynamic task family.
     """
     result = deepcopy(dataset)
+    for case in result['cases']:
+        if case.get('track') == 'dynamic':
+            case['retrieval_hints'] = {'version': 3, 'mode': 'native'}
+        elif case.get('retrieval_hints'):
+            raise ValueError('Native retrieval hints are only valid for dynamic cases: ' + case['id'])
+    result.setdefault('comparison', {})['retrieval_mode'] = 'native_task_family_completion'
+    return result
+
+
+def historical_native_fetch_dataset(dataset: dict) -> dict:
+    """Reproduce schema-1/2 assemblies whose bytes predate family normalization."""
+    result = deepcopy(dataset)
     for case in result['cases']:
         if case.get('retrieval_hints'):
-            raise ValueError('Native fetch cannot discard declared retrieval hints: ' + case['id'])
+            try:
+                plan = parse_retrieval_hints(
+                    case.get('track', 'web'), case['retrieval_hints'], identifier=case['id']
+                )
+            except ValueError as error:
+                raise ValueError(
+                    'Native fetch cannot discard declared retrieval hints: ' + case['id']
+                ) from error
+            if plan is not None:
+                raise ValueError(
+                    'Native fetch cannot discard declared retrieval hints: ' + case['id']
+                )
         if case.get('track') == 'dynamic':
-            case['track'] = 'web'
-            case.setdefault('source_benchmark', {})['scenario_track'] = 'dynamic'
-    if 'dynamic' in result.get('coverage_plan', {}):
-        dynamic = result['coverage_plan'].pop('dynamic')
-        result['coverage_plan']['web'] = list(dict.fromkeys(result['coverage_plan'].get('web', []) + dynamic))
+            case.setdefault('retrieval_hints', {'version': 3, 'mode': 'native'})
     result.setdefault('comparison', {})['retrieval_mode'] = 'native_default_completion'
     return result
 
@@ -123,6 +202,37 @@ def worker_dict(self) -> dict[str, Any]:
         return result
 
 
+@dataclass(frozen=True)
+class NativeRetrievalContract:
+    """Answer-free capabilities requested from each product's native interface.
+
+    Unlike the retired guided routes, this contract never describes content to
+    extract.  A provider may wait for the declared page shape or ask its own
+    serializer to include child documents.  Unsupported capabilities remain
+    visible in provider metadata and must not be emulated by the harness.
+    """
+
+    include_subdocuments: bool = False
+    selector: str | None = None
+    minimum_count: int = 0
+    frame_selector: str | None = None
+    minimum_text_fragments: int = 0
+
+    def completion_plan(self, timeout_ms: int) -> RetrievalPlan | None:
+        if self.selector is None:
+            return None
+        return RetrievalPlan(
+            version=3,
+            wait_until="load",
+            selector=self.selector,
+            minimum_count=self.minimum_count,
+            timeout_ms=timeout_ms,
+            delay_ms=0,
+            frame_selector=self.frame_selector,
+            minimum_text_fragments=self.minimum_text_fragments,
+        )
+
+
 def complete_text_wait_value(plan: RetrievalPlan) -> str:
     """Strengthen a count wait with answer-free record completeness.
 
@@ -166,6 +276,7 @@ def parse_retrieval_hints(
     hints: Any,
     *,
     identifier: str = "<unknown>",
+    current_task_definition_sha256: str | None = None,
 ) -> RetrievalPlan | None:
     """Validate once and produce the only plan consumed by provider adapters."""
     if hints is None:
@@ -177,6 +288,22 @@ def parse_retrieval_hints(
     if not isinstance(hints, Mapping):
         raise ValueError(f"{identifier}: retrieval_hints must be an object")
     version = hints.get("version")
+    if isinstance(version, int) and not isinstance(version, bool) and version == 3:
+        if hints.get("mode") != "native":
+            raise ValueError(
+                f"{identifier}: native retrieval_hints must use version=3 and mode=native"
+            )
+        allowed = {"version", "mode", "contract"}
+        if set(hints) - allowed:
+            raise ValueError(
+                f"{identifier}: native retrieval_hints contain unsupported fields"
+            )
+        _parse_native_contract(
+            hints,
+            identifier=identifier,
+            current_task_definition_sha256=current_task_definition_sha256,
+        )
+        return None
     expected_keys = (
         {"version", "wait_until", "completion", "extraction"}
         if version == 2 and not isinstance(version, bool)
@@ -307,6 +434,117 @@ def parse_retrieval_hints(
     )
 
 
+def _parse_native_contract(
+    hints: Mapping[str, Any], *, identifier: str,
+    current_task_definition_sha256: str | None = None,
+) -> NativeRetrievalContract:
+    name = hints.get("contract")
+    if name is None:
+        return NativeRetrievalContract()
+    if not isinstance(name, str) or not _CONTRACT_NAME.fullmatch(name):
+        raise ValueError(f"{identifier}: retrieval_hints.contract is invalid")
+    registry = _native_contract_registry()
+    declared = registry["contracts"].get(name)
+    if not isinstance(declared, Mapping):
+        raise ValueError(f"{identifier}: unknown native retrieval contract {name!r}")
+    if declared.get("case_id") != identifier:
+        raise ValueError(f"{identifier}: native retrieval contract belongs to another case")
+    definition_sha256 = declared.get("task_definition_sha256")
+    if not isinstance(definition_sha256, str) or not re.fullmatch(r"[0-9a-f]{64}", definition_sha256):
+        raise ValueError(f"{identifier}: native retrieval contract task binding is invalid")
+    _verify_task_definition(identifier, definition_sha256)
+    if (
+        current_task_definition_sha256 is not None
+        and current_task_definition_sha256 != definition_sha256
+    ):
+        raise ValueError(
+            f"{identifier}: native retrieval contract does not match the current task definition"
+        )
+    authority = declared.get("source_authority")
+    if (
+        not isinstance(authority, Mapping)
+        or not isinstance(authority.get("path"), str)
+        or not re.fullmatch(r"[0-9a-f]{64}", str(authority.get("sha256", "")))
+        or authority.get("provider_output_used") is not False
+    ):
+        raise ValueError(f"{identifier}: native retrieval contract source binding is invalid")
+    _verify_contract_source(authority["path"], authority["sha256"])
+    capabilities = declared.get("capabilities")
+    if not isinstance(capabilities, Mapping):
+        raise ValueError(f"{identifier}: native retrieval contract capabilities are invalid")
+    if set(declared) != {"case_id", "task_definition_sha256", "source_authority", "capabilities"}:
+        raise ValueError(f"{identifier}: native retrieval contract contains unsupported fields")
+    if set(capabilities) - {"include_subdocuments", "completion"}:
+        raise ValueError(f"{identifier}: native retrieval contract capabilities are unsupported")
+    include_subdocuments = capabilities.get("include_subdocuments", False)
+    if not isinstance(include_subdocuments, bool):
+        raise ValueError(
+            f"{identifier}: retrieval_hints.include_subdocuments must be a boolean"
+        )
+    completion = capabilities.get("completion")
+    if completion is None:
+        return NativeRetrievalContract(include_subdocuments=include_subdocuments)
+    if not isinstance(completion, Mapping):
+        raise ValueError(f"{identifier}: retrieval_hints.completion must be an object")
+    optional = {"frame_selector", "minimum_text_fragments"}
+    completion_keys = set(completion)
+    if (
+        not _NATIVE_COMPLETION_KEYS <= completion_keys
+        or completion_keys - _NATIVE_COMPLETION_KEYS - optional
+    ):
+        raise ValueError(
+            f"{identifier}: native completion must contain only selector, minimum_count "
+            "and optional frame_selector or minimum_text_fragments"
+        )
+    selector = _selector(identifier, "selector", completion["selector"])
+    frame_selector = (
+        _selector(identifier, "frame_selector", completion["frame_selector"])
+        if "frame_selector" in completion
+        else None
+    )
+    if _ANSWER_SELECTOR.search(selector) or (
+        frame_selector is not None and _ANSWER_SELECTOR.search(frame_selector)
+    ):
+        raise ValueError(f"{identifier}: native retrieval contract selector is answer-derived")
+    minimum_count = _integer(
+        identifier, "minimum_count", completion["minimum_count"], minimum=1, maximum=1000
+    )
+    minimum_text_fragments = (
+        _integer(
+            identifier,
+            "minimum_text_fragments",
+            completion["minimum_text_fragments"],
+            minimum=1,
+            maximum=20,
+        )
+        if "minimum_text_fragments" in completion
+        else 0
+    )
+    if frame_selector and not include_subdocuments:
+        raise ValueError(
+            f"{identifier}: frame completion requires include_subdocuments=true"
+        )
+    return NativeRetrievalContract(
+        include_subdocuments=include_subdocuments,
+        selector=selector,
+        minimum_count=minimum_count,
+        frame_selector=frame_selector,
+        minimum_text_fragments=minimum_text_fragments,
+    )
+
+
+def native_contract_for_case(case: Any) -> NativeRetrievalContract | None:
+    """Return a validated version-3 contract without changing legacy plans."""
+    get = case.get if isinstance(case, dict) else lambda key, default=None: getattr(case, key, default)
+    hints = get("retrieval_hints")
+    if not isinstance(hints, Mapping) or hints.get("version") != 3:
+        return None
+    parse_retrieval_hints(
+        get("track", "web"), hints, identifier=get("id", "<unknown>")
+    )
+    return _parse_native_contract(hints, identifier=get("id", "<unknown>"))
+
+
 def native_default_case(case: Any) -> bool:
     """Stable acceptance contracts permit a URL-only provider-default route."""
     get = case.get if isinstance(case, dict) else lambda key, default=None: getattr(case, key, default)
diff --git a/harness/web_fetch/risk_control.py b/harness/web_fetch/risk_control.py
index ca18c2a74..9e62f4941 100644
--- a/harness/web_fetch/risk_control.py
+++ b/harness/web_fetch/risk_control.py
@@ -27,6 +27,47 @@ def _case_ids_digest(case_ids: list[str]) -> str:
     return hashlib.sha256(("\n".join(case_ids) + "\n").encode()).hexdigest()
 
 
+RISK_CONTROL_CERTIFICATIONS = {
+    "certified_risk_control_100_moli_v1": (
+        "reference-proof-verification.json", "reference_proof_verification_sha256"),
+    "certified_risk_control_100_moli_v2": (
+        "frozen-input-verification.json", "frozen_input_verification_sha256"),
+}
+
+
+def risk_control_verification_binding(receipt: dict) -> tuple[str, str]:
+    try:
+        return RISK_CONTROL_CERTIFICATIONS[receipt["kind"]]
+    except (KeyError, TypeError) as error:
+        raise ValueError("Unsupported risk-control certification") from error
+
+
+def frozen_risk_control_input_snapshot(profile_path: Path) -> dict:
+    """Verify executable inputs without reopening historical source qualification."""
+    root = profile_path.resolve().parents[2]
+    profile_raw = profile_path.read_bytes()
+    profile = json.loads(profile_raw)
+    files = [{"role": "profile", "path": profile_path.resolve().relative_to(root).as_posix(),
+              "sha256": hashlib.sha256(profile_raw).hexdigest(), "bytes": len(profile_raw)}]
+    bindings = {"dataset": profile["dataset"],
+                "provider_config": {"path": profile["provider"]["config_path"],
+                                    "sha256": profile["provider"]["config_sha256"]},
+                **profile["source_bindings"]}
+    for role, binding in sorted(bindings.items()):
+        path = contained_path(root, binding["path"])
+        if path.is_symlink():
+            raise ValueError("Missing frozen input: " + binding["path"])
+        raw = read_dataset_bytes(path) if role == 'dataset' else path.read_bytes()
+        digest = hashlib.sha256(raw).hexdigest()
+        if digest != binding["sha256"]:
+            raise ValueError("Changed frozen input: " + binding["path"])
+        files.append({"role": role, "path": binding["path"], "sha256": digest, "bytes": len(raw)})
+    dataset = json.loads(read_dataset_bytes(contained_path(root, profile["dataset"]["path"])))
+    inventory = json.dumps(files, ensure_ascii=False, sort_keys=True, separators=(",", ":"))
+    return {"case_count": len(dataset["cases"]),
+            "inventory_sha256": hashlib.sha256(inventory.encode()).hexdigest(), "files": files}
+
+
 def risk_control_comparison(profile: dict[str, Any], profile_sha256: str) -> dict[str, Any]:
     execution = profile["execution"]
     return {
@@ -115,54 +156,67 @@ def validate_risk_control_certification(
             raise ValueError("Risk-control result provider identity or retry policy changed")
     manifest_path = contained_path(source, "manifest.json")
     execution_path = contained_path(source, "execution.json")
-    proof_verification_path = contained_path(source, "reference-proof-verification.json")
+    verification_name, verification_field = risk_control_verification_binding(receipt)
+    verification_path = contained_path(source, verification_name)
     manifest = json.loads(manifest_path.read_text(encoding="utf-8"))
     execution_record = json.loads(execution_path.read_text(encoding="utf-8"))
-    proof_verification = json.loads(proof_verification_path.read_text(encoding="utf-8"))
-    proof_rows = proof_verification.get("before", {}).get("files", [])
-    expected_proofs = [
-        {"case_id": case["id"], **case["source_benchmark"]["risk_control"]["reference_proof"]}
-        for case in frozen_dataset["cases"]
-    ]
-    observed_proofs = [
-        {key: row.get(key) for key in ("case_id", "root", "path", "sha256")} for row in proof_rows
-    ]
-    proof_inventory = json.dumps(
-        proof_rows, ensure_ascii=False, sort_keys=True, separators=(",", ":")
-    )
-    if (
-        proof_verification.get("schema_version") != 1
-        or proof_verification.get("kind") != "risk_control_reference_proof_verification"
-        or proof_verification.get("unchanged") is not True
-        or (proof_verification.get("after") != proof_verification.get("before"))
-        or (proof_verification.get("before", {}).get("case_count") != 100)
-        or (
-            proof_verification.get("before", {}).get("inventory_sha256")
-            != hashlib.sha256(proof_inventory.encode()).hexdigest()
+    proof_verification = json.loads(verification_path.read_text(encoding="utf-8"))
+    if receipt["kind"] == "certified_risk_control_100_moli_v2":
+        expected_inputs = frozen_risk_control_input_snapshot(profile_path)
+        if (proof_verification.get("schema_version") != 1
+                or proof_verification.get("kind") != "risk_control_frozen_input_verification"
+                or proof_verification.get("unchanged") is not True
+                or proof_verification.get("before") != expected_inputs
+                or proof_verification.get("after") != expected_inputs):
+            raise ValueError("Risk-control frozen input verification is incomplete or mismatched")
+    else:
+        proof_rows = proof_verification.get("before", {}).get("files", [])
+        expected_proofs = [
+            {
+                "case_id": case["id"],
+                **case["source_benchmark"]["risk_control"]["reference_proof"],
+            }
+            for case in frozen_dataset["cases"]
+        ]
+        observed_proofs = [
+            {key: row.get(key) for key in ("case_id", "root", "path", "sha256")}
+            for row in proof_rows
+        ]
+        proof_inventory = json.dumps(
+            proof_rows, ensure_ascii=False, sort_keys=True, separators=(",", ":")
         )
-        or (observed_proofs != expected_proofs)
-        or any(type(row.get("bytes")) is not int or row["bytes"] < 1 for row in proof_rows)
-    ):
-        raise ValueError("Risk-control reference proof verification is incomplete or mismatched")
-    proof_verification_sha256 = _digest(proof_verification_path)
+        if (
+            proof_verification.get("schema_version") != 1
+            or proof_verification.get("kind") != "risk_control_reference_proof_verification"
+            or proof_verification.get("unchanged") is not True
+            or proof_verification.get("after") != proof_verification.get("before")
+            or proof_verification.get("before", {}).get("case_count") != 100
+            or proof_verification.get("before", {}).get("inventory_sha256")
+            != hashlib.sha256(proof_inventory.encode()).hexdigest()
+            or observed_proofs != expected_proofs
+            or any(type(row.get("bytes")) is not int or row["bytes"] < 1 for row in proof_rows)
+        ):
+            raise ValueError("Risk-control reference proof verification is incomplete or mismatched")
+    proof_verification_sha256 = _digest(verification_path)
     provider_rows = manifest.get("providers")
     parameters = manifest.get("parameters", {})
     if (
         manifest.get("attempt_count") != 100
         or manifest.get("attempt_ids") != expected_attempt_ids
         or manifest.get("unexecuted") != []
-        or (manifest.get("dataset_sha256") != frozen_dataset_sha256)
-        or (manifest.get("provider_config_sha256") != profile["provider"]["config_sha256"])
-        or (manifest.get("reference_proof_verification_sha256") != proof_verification_sha256)
-        or (not isinstance(provider_rows, list))
-        or (len(provider_rows) != 1)
-        or (provider_rows[0].get("name") != provider_name)
-        or (provider_rows[0].get("implementation_identity") != expected_identity)
-        or (parameters.get("runs") != execution["runs_per_case"])
-        or (parameters.get("timeout") != execution["timeout_seconds"])
-        or (parameters.get("delay") != execution["delay_seconds"])
-        or (parameters.get("provider_concurrency") != execution["concurrency"])
-        or (parameters.get("max_failure_retries") != execution["max_failure_retries"])
+        or manifest.get("dataset_sha256") != frozen_dataset_sha256
+        or manifest.get("provider_config_sha256") != profile["provider"]["config_sha256"]
+        or manifest.get(verification_field)
+        != proof_verification_sha256
+        or not isinstance(provider_rows, list)
+        or len(provider_rows) != 1
+        or provider_rows[0].get("name") != provider_name
+        or provider_rows[0].get("implementation_identity") != expected_identity
+        or parameters.get("runs") != execution["runs_per_case"]
+        or parameters.get("timeout") != execution["timeout_seconds"]
+        or parameters.get("delay") != execution["delay_seconds"]
+        or parameters.get("provider_concurrency") != execution["concurrency"]
+        or parameters.get("max_failure_retries") != execution["max_failure_retries"]
     ):
         raise ValueError("Risk-control manifest does not match the frozen execution contract")
     aggregate = execution_record.get("aggregate", {})
@@ -180,18 +234,19 @@ def validate_risk_control_certification(
     results_path = contained_path(source, "results.jsonl")
     if (
         receipt.get("schema_version") != 1
-        or receipt.get("kind") != "certified_risk_control_100_moli_v1"
+        or receipt.get("kind") not in RISK_CONTROL_CERTIFICATIONS
         or receipt.get("profile_sha256") != profile_sha256
-        or (receipt.get("dataset_sha256") != _digest(contained_path(source, "dataset.json")))
-        or (receipt.get("results_sha256") != _digest(results_path))
-        or (receipt.get("manifest_sha256") != _digest(manifest_path))
-        or (receipt.get("execution_sha256") != _digest(execution_path))
-        or (receipt.get("reference_proof_verification_sha256") != proof_verification_sha256)
-        or (receipt.get("provider_identity_before") != expected_identity)
-        or (receipt.get("provider_identity_after") != expected_identity)
-        or (receipt.get("logical_results") != 100)
-        or (receipt.get("physical_calls") != 100)
-        or (receipt.get("complete_diagnostic_logs") is not True)
+        or receipt.get("dataset_sha256") != _digest(contained_path(source, "dataset.json"))
+        or receipt.get("results_sha256") != _digest(results_path)
+        or receipt.get("manifest_sha256") != _digest(manifest_path)
+        or receipt.get("execution_sha256") != _digest(execution_path)
+        or receipt.get(verification_field)
+        != proof_verification_sha256
+        or receipt.get("provider_identity_before") != expected_identity
+        or receipt.get("provider_identity_after") != expected_identity
+        or receipt.get("logical_results") != 100
+        or receipt.get("physical_calls") != 100
+        or receipt.get("complete_diagnostic_logs") is not True
     ):
         raise ValueError("Risk-control certification receipt is incomplete or mismatched")
 
@@ -237,48 +292,6 @@ def require_complete_diagnostic_logs(records: list[dict]) -> None:
         )
 
 
-def reference_proof_roots(profile: dict) -> dict[str, Path]:
-    """Resolve the external, Git-out source roots declared by the bound manifest."""
-    binding = profile["source_bindings"]["qualification_manifest"]
-    manifest = json.loads(rooted(binding["path"]).read_text(encoding="utf-8"))
-    return {
-        key: (data_home() / relative).resolve()
-        for key, relative in manifest["evidence_roots"].items()
-    }
-
-
-def reference_proof_snapshot(cases: list[dict], roots: dict[str, Path]) -> dict:
-    """Hash every declared reference text; missing or changed files fail closed."""
-    files = []
-    for case in cases:
-        binding = case["source_benchmark"]["risk_control"]["reference_proof"]
-        if binding.get("root") not in roots:
-            raise ValueError(f"Unknown reference proof root: {case['id']}")
-        path = contained_path(roots[binding["root"]], binding["path"])
-        if not path.is_file():
-            raise ValueError(f"Missing reference proof: {case['id']}")
-        observed = _digest(path)
-        if observed != binding.get("sha256"):
-            raise ValueError(f"Changed reference proof: {case['id']}")
-        files.append(
-            {
-                "case_id": case["id"],
-                "root": binding["root"],
-                "path": binding["path"],
-                "sha256": observed,
-                "bytes": path.stat().st_size,
-            }
-        )
-    if len(files) != 100 or len({row["case_id"] for row in files}) != 100:
-        raise ValueError("Reference proof scope is not the exact 100-case cohort")
-    inventory = json.dumps(files, ensure_ascii=False, sort_keys=True, separators=(",", ":"))
-    return {
-        "case_count": 100,
-        "inventory_sha256": hashlib.sha256(inventory.encode()).hexdigest(),
-        "files": files,
-    }
-
-
 def validate(profile_path: Path) -> tuple[dict, dict, list, object, Path]:
     profile = json.loads(profile_path.read_text(encoding="utf-8"))
     if profile.get("schema_version") != 1 or profile.get("kind") != "risk_control_100_moli_v1":
@@ -404,8 +417,7 @@ def main(argv: list[str] | None = None, *, certified: bool = False) -> None:
     profile_sha256 = _digest(profile_path)
     measured_dataset = measured_risk_control_dataset(profile, dataset, profile_sha256)
     execution = profile["execution"]
-    proof_roots = reference_proof_roots(profile)
-    proof_before = reference_proof_snapshot(dataset["cases"], proof_roots)
+    proof_before = frozen_risk_control_input_snapshot(profile_path)
     pre_identity = implementation_identity(provider)
     from harness.web_fetch.runner import run_evaluation
 
@@ -428,15 +440,15 @@ def main(argv: list[str] | None = None, *, certified: bool = False) -> None:
     post_identity = implementation_identity(provider, refresh=True)
     if post_identity != pre_identity:
         raise ValueError("Moli implementation identity changed during execution")
-    proof_after = reference_proof_snapshot(dataset["cases"], proof_roots)
+    proof_after = frozen_risk_control_input_snapshot(profile_path)
     if proof_after != proof_before:
-        raise ValueError("Reference proof inventory changed during execution")
-    proof_verification_path = output / "reference-proof-verification.json"
+        raise ValueError("Frozen benchmark inputs changed during execution")
+    proof_verification_path = output / "frozen-input-verification.json"
     proof_verification_path.write_text(
         json.dumps(
             {
                 "schema_version": 1,
-                "kind": "risk_control_reference_proof_verification",
+                "kind": "risk_control_frozen_input_verification",
                 "before": proof_before,
                 "after": proof_after,
                 "unchanged": True,
@@ -450,7 +462,7 @@ def main(argv: list[str] | None = None, *, certified: bool = False) -> None:
     proof_verification_sha256 = _digest(proof_verification_path)
     manifest = json.loads((output / "manifest.json").read_text(encoding="utf-8"))
     manifest["run_profile_sha256"] = profile_sha256
-    manifest["reference_proof_verification_sha256"] = proof_verification_sha256
+    manifest["frozen_input_verification_sha256"] = proof_verification_sha256
     (output / "manifest.json").write_text(
         json.dumps(manifest, ensure_ascii=False, indent=2) + "\n", encoding="utf-8"
     )
@@ -476,13 +488,13 @@ def main(argv: list[str] | None = None, *, certified: bool = False) -> None:
     results_path = output / "results.jsonl"
     certification = {
         "schema_version": 1,
-        "kind": "certified_risk_control_100_moli_v1",
+        "kind": "certified_risk_control_100_moli_v2",
         "profile_sha256": profile_sha256,
         "dataset_sha256": _digest(output / "dataset.json"),
         "results_sha256": _digest(results_path),
         "manifest_sha256": _digest(output / "manifest.json"),
         "execution_sha256": _digest(output / "execution.json"),
-        "reference_proof_verification_sha256": proof_verification_sha256,
+        "frozen_input_verification_sha256": proof_verification_sha256,
         "provider_identity_before": pre_identity,
         "provider_identity_after": post_identity,
         "logical_results": len(records),
diff --git a/harness/web_fetch/risk_control_dataset.py b/harness/web_fetch/risk_control_dataset.py
index 5367f36c4..9c3030a32 100644
--- a/harness/web_fetch/risk_control_dataset.py
+++ b/harness/web_fetch/risk_control_dataset.py
@@ -29,12 +29,13 @@
 LIST_CONTRACTS = RISK / "list-contracts.json"
 BODY_CONTRACTS = RISK / "body-contracts.json"
 EXPECTED_RULE_HASHES = {
-    "first-30-rule-review.md": "280f18c04a0fc83f2e59816b07454525780366500bfb8b2faef3019749759344",
+    "first-30-rule-review.md": "6945a6aa7b0d8d5990d8abf5d24fc41b5a42a22c70940a7c996d8698c6e9bf81",
     "remaining-70-rule-review.md": (
-        "a1c743a2df97b20eddf10c28bf179f1125d8937e1a568abf6c9cf9e79c225da7"
+        "301574dddcfddf6d30ed4d882cdd40b1ae859fdc95a0a02cf9868f55e3fd1079"
     ),
 }
 EXPECTED_COHORT_HASH = "aeec7ec26d24650896263574135a27fc4848f4d362bd38f0a5b5c167f82abc26"
+EXPECTED_STABLE_LITERAL_COUNT = 1586
 CHINESE_NUMBERS = {"一": 1, "两": 2, "二": 2, "三": 3, "四": 4, "五": 5}
 
 
@@ -42,6 +43,53 @@ def sha(path: Path) -> str:
     return hashlib.sha256(path.read_bytes()).hexdigest()
 
 
+def assign_content_acceptance_roles(cases: list[dict]) -> None:
+    """Default stable text to required; preserve explicit audited declarations."""
+    for case in cases:
+        contract = case["acceptance_contract"]
+        role = contract.get("stable_text_role", "required")
+        if role == "diagnostic" and not (
+            case.get("body_requirements")
+            or (
+                case.get("composite_acceptance")
+                and case["composite_acceptance"].get("groups")
+            )
+            or contract.get("page_patterns")
+        ):
+            raise ValueError(
+                "Diagnostic stable text requires body, composite, or page-pattern acceptance"
+            )
+        validate_acceptance_contract(contract)
+
+
+def apply_content_acceptance_policy(acceptance: dict, *owners: dict | None) -> None:
+    """Apply an explicit scope-completeness decision from an existing contract owner."""
+    roles = {
+        owner["stable_text_role"]
+        for owner in owners
+        if owner is not None and "stable_text_role" in owner
+    }
+    if len(roles) > 1:
+        raise ValueError("Conflicting stable-text roles across content contracts")
+    if roles:
+        acceptance["stable_text_role"] = roles.pop()
+
+    page_patterns = []
+    for owner in owners:
+        if owner is None:
+            continue
+        declared = owner.get("page_patterns", [])
+        if not isinstance(declared, list) or any(
+            not isinstance(pattern, str) or not pattern for pattern in declared
+        ):
+            raise ValueError("Invalid content-contract page patterns")
+        page_patterns.extend(declared)
+    if len(page_patterns) != len(set(page_patterns)):
+        raise ValueError("Duplicate content-contract page patterns")
+    if page_patterns:
+        acceptance["page_patterns"] = page_patterns
+
+
 def compact_key(value: str) -> str:
     return "".join(
         character
@@ -278,8 +326,10 @@ def build(output: Path, definition_dir: Path = RISK) -> dict:
     ] != [case["id"] for case in qualified]:
         raise ValueError("Rule/cohort order mismatch")
     stable_literal_count = sum(len(section["stable"]) for section in sections)
-    if stable_literal_count != 1600:
-        raise ValueError("Expected exactly 1600 required stable literals")
+    if stable_literal_count != EXPECTED_STABLE_LITERAL_COUNT:
+        raise ValueError(
+            f"Expected exactly {EXPECTED_STABLE_LITERAL_COUNT} required stable literals"
+        )
 
     roots = evidence_roots(manifest_path)
     list_source = json.loads(list_contracts_path.read_text())
@@ -309,15 +359,15 @@ def build(output: Path, definition_dir: Path = RISK) -> dict:
         for group in value["groups"]
     )
     # The replacement removes Kuaishou's two independently counted list groups
-    # and adds a fixed full-body About page.  The remaining multi-group cases are
-    # Scioly (3), HydroOJ (2), and Global European (4).
+    # and adds a fixed full-body About page. Ibiblio's owner carries only its
+    # explicit page-scope policy: the task does not require its changing news list.
     if (
-        len(quantity_contracts) != 21
-        or quantity_groups != 27
+        len(quantity_contracts) != 20
+        or quantity_groups != 26
         or len(contracts) != 23
         or groups != 29
     ):
-        raise ValueError("Expected 21 quantity cases/27 groups plus 2 field groups")
+        raise ValueError("Expected 20 quantity cases/26 groups plus 3 field groups")
     cases = []
     body_count = 0
     for section, qualified_case in zip(sections, qualified, strict=True):
@@ -347,11 +397,16 @@ def build(output: Path, definition_dir: Path = RISK) -> dict:
             "minimum_records": 0,
             "stable_text_anchors": anchors,
         }
+        apply_content_acceptance_policy(
+            acceptance,
+            body_contracts.get(section["id"]),
+            contracts.get(section["id"]),
+        )
         validate_acceptance_contract(acceptance)
         body = body_reference(section, source, body_contracts.get(section["id"]))
         body_count += bool(body)
         composite = None
-        if section["id"] in contracts:
+        if section["id"] in contracts and contracts[section["id"]]["groups"]:
             composite = {"version": 1, "groups": contracts[section["id"]]["groups"]}
             validate_composite_acceptance(composite)
         final_url = qualified_case.get("observed_final_url") or section["url"]
@@ -385,11 +440,14 @@ def build(output: Path, definition_dir: Path = RISK) -> dict:
                 }
             },
         }
+        # Keep independently observed anchors intact. Shared scoring makes
+        # them diagnostic when body or composite requirements own acceptance.
         if body:
             case["body_requirements"] = body
         if composite:
             case["composite_acceptance"] = composite
         cases.append(case)
+    assign_content_acceptance_roles(cases)
     dataset = {
         "schema_version": 1,
         "id": "risk-control-audited-100",
@@ -400,7 +458,7 @@ def build(output: Path, definition_dir: Path = RISK) -> dict:
         "body_case_count": body_count,
         "quantity_case_count": len(quantity_contracts),
         "independent_quantity_group_count": quantity_groups,
-        "list_or_field_case_count": len(contracts),
+        "list_or_field_case_count": sum(bool(owner["groups"]) for owner in contracts.values()),
         "composite_group_count": groups,
         "stable_literal_count": stable_literal_count,
         "observed_literal_count": stable_literal_count,
diff --git a/harness/web_fetch/runner.py b/harness/web_fetch/runner.py
index 03385a67a..a49472682 100644
--- a/harness/web_fetch/runner.py
+++ b/harness/web_fetch/runner.py
@@ -7,6 +7,7 @@
 import platform
 import re
 import socket
+import ssl
 import sys
 import threading
 import time
@@ -112,10 +113,14 @@ def utc_now() -> str:
 
 
 def classify_exception(error: Exception) -> tuple[str, str]:
+    if isinstance(error, (ssl.SSLCertVerificationError, ssl.CertificateError)):
+        return "tls_certificate", str(error)
     if isinstance(error, (TimeoutError, socket.timeout)):
         return "timeout", str(error)
     if isinstance(error, urllib.error.URLError):
         reason = getattr(error, "reason", None)
+        if isinstance(reason, (ssl.SSLCertVerificationError, ssl.CertificateError)):
+            return "tls_certificate", str(error)
         if isinstance(reason, socket.gaierror):
             return "dns", str(error)
         if isinstance(reason, (TimeoutError, socket.timeout)):
@@ -461,6 +466,7 @@ def run_evaluation(
     provider_concurrency: int = 1,
     max_failure_retries: int = DEFAULT_FAILURE_RETRIES,
     resource_sample_interval_ms: int | None = None,
+    call_order: str = "provider",
 ) -> tuple[list[dict[str, Any]], dict[str, Any]]:
     output_dir = output_dir.resolve()
     for name, value, minimum in (
@@ -473,6 +479,10 @@ def run_evaluation(
         if (not isinstance(value, (int, float)) or isinstance(value, bool)
                 or not math.isfinite(value) or value < minimum or (name == 'timeout' and value == 0)):
             raise ValueError(f'{name} must be finite and {"positive" if name == "timeout" else "nonnegative"}')
+    if call_order not in {"provider", "case-alternating"}:
+        raise ValueError("Unsupported call order")
+    if call_order == "case-alternating" and provider_concurrency != 1:
+        raise ValueError("Alternating case calls require serial provider execution")
     if resource_sample_interval_ms is not None and (
         type(resource_sample_interval_ms) is not int or resource_sample_interval_ms < 10
     ):
@@ -549,7 +559,10 @@ def run_evaluation(
             "timeout": timeout,
             "delay": delay,
             "provider_concurrency": min(provider_concurrency, max(1, len(providers))),
-            "concurrency_scope": "providers_parallel_cases_sequential_per_provider",
+            "concurrency_scope": ("serial_alternating_providers_per_case"
+                                  if call_order == "case-alternating"
+                                  else "providers_parallel_cases_sequential_per_provider"),
+            "call_order": call_order,
             "max_failure_retries": max_failure_retries,
             "retry_selection": "retry_only_after_failed_task; final_physical_attempt_is_authoritative",
             "primary_latency": "final_physical_call",
@@ -584,10 +597,14 @@ def run_evaluation(
     results_path = output_dir / "results.jsonl"
     result_lock = threading.Lock()
     with results_path.open("w", encoding="utf-8") as results_file:
-        def run_provider(provider: Provider) -> None:
-            previous_request_completed: float | None = None
-            for run_number in range(1, runs + 1):
-                for case_index, case in enumerate(cases, 1):
+        completed_by_provider = {}
+        case_positions = {case.id: index for index, case in enumerate(cases, 1)}
+
+        def run_provider(provider: Provider, selected_cases=None, selected_runs=None) -> bool:
+            previous_request_completed = completed_by_provider.get(provider.name)
+            for run_number in (range(1, runs + 1) if selected_runs is None else selected_runs):
+                for case in (cases if selected_cases is None else selected_cases):
+                    case_index = case_positions[case.id]
                     throttle_wait_ms = 0.0
                     if previous_request_completed is not None and provider.min_interval_seconds:
                         remaining = provider.min_interval_seconds - (time.monotonic() - previous_request_completed)
@@ -651,6 +668,7 @@ def run_provider(provider: Provider) -> None:
                             '_answer_elapsed_ms', wall_elapsed_ms
                         )
                         previous_request_completed = time.monotonic()
+                        completed_by_provider[provider.name] = previous_request_completed
                         if case.task_kind == 'file':
                             result.metadata.setdefault('file_evaluation', {'files': [], 'pass': False,
                                 'scope': 'returned_bytes_signature_length_sha256'})
@@ -793,12 +811,34 @@ def run_provider(provider: Provider) -> None:
                                 manifest['unexecuted'].append({'provider': provider.name,
                                     'after_attempt_id': attempt_id,
                                     'reason': 'non_cancellable_call_still_running; remaining provider cases not executed'})
-                            return
+                        return False
+            return True
 
         workers = min(provider_concurrency, max(1, len(providers)))
         try:
-            with ThreadPoolExecutor(max_workers=workers, thread_name_prefix="webfetch-provider") as executor:
-                list(executor.map(run_provider, providers))
+            if call_order == "case-alternating":
+                stopped = False
+                for run_number in range(1, runs + 1):
+                    for index, case in enumerate(cases):
+                        ordered = providers if (index + run_number - 1) % 2 == 0 else providers[::-1]
+                        for provider in ordered:
+                            if not run_provider(provider, [case], [run_number]):
+                                # A live non-cancellable call would overlap the next
+                                # method. Stop the serial cohort, preserving evidence.
+                                manifest['unexecuted'].append({
+                                    'provider': provider.name,
+                                    'after_attempt_id': f"{provider.name}__{case.id}__r{run_number:03d}",
+                                    'reason': 'non_cancellable_call_still_running; alternating cohort stopped',
+                                })
+                                stopped = True
+                                break
+                        if stopped:
+                            break
+                    if stopped:
+                        break
+            else:
+                with ThreadPoolExecutor(max_workers=workers, thread_name_prefix="webfetch-provider") as executor:
+                    list(executor.map(run_provider, providers))
         except ReferenceLifecycleError as error:
             if reference_checks is not None:
                 reference_checks.update(status=error.status, callcheck_error=str(error))
diff --git a/harness/web_fetch/scoring.py b/harness/web_fetch/scoring.py
index 7c0b75577..ec012d965 100644
--- a/harness/web_fetch/scoring.py
+++ b/harness/web_fetch/scoring.py
@@ -51,6 +51,7 @@ def load_list_reference(case: EvalCase | dict[str, Any], source: Path) -> dict |
     "structure_pass", "named_entry_count", "minimum_entries", "snapshot_f1",
     "dynamic_titles", "verification_note", "confirmed_entries", "checked_entries",
     "page_identity_required", "page_identity_status", "final_url_consistent",
+    "document_language_required",
     "language_consistent", "observed_document_language",
     "acceptable_final_urls",
     "ordered_tree", "ordered_tree_similarity",
@@ -187,7 +188,7 @@ def score_attempt(
             else "unavailable"
         )
         result.update(
-            page_identity_required=True,
+            page_identity_required=False,
             page_identity_status=identity_status,
             final_url_consistent=final_consistent,
             language_consistent=language_consistent,
@@ -205,7 +206,7 @@ def score_attempt(
             and any(_same_page_url(final_url, expected) for expected in acceptable_urls)
         )
         result.update(
-            page_identity_required=True,
+            page_identity_required=False,
             page_identity_status=(
                 "verified" if final_consistent else "mismatch" if final_url else "unavailable"
             ),
@@ -255,13 +256,6 @@ def score_attempt(
             body_requirements, sort_keys=True, ensure_ascii=False).encode()).hexdigest()
     if not result["content_score_applicable"] or not ok:
         result["content_pass"] = False
-    if result.get("page_identity_required") and result.get("page_identity_status") != "verified":
-        result["content_pass"] = False
-        if contract:
-            result["stable_task_pass"] = False
-            result["stable_content_pass"] = False
-            if "page_identity_not_verified" not in result["stable_task_errors"]:
-                result["stable_task_errors"].append("page_identity_not_verified")
     if not ok:
         if contract:
             result["stable_task_pass"] = False
diff --git a/harness/web_fetch/scoring_regressions.py b/harness/web_fetch/scoring_regressions.py
index 16f71c9af..eb807446e 100644
--- a/harness/web_fetch/scoring_regressions.py
+++ b/harness/web_fetch/scoring_regressions.py
@@ -46,6 +46,8 @@ def load_scoring_regressions(path: Path | None = None) -> dict[str, dict[str, An
             raise ValueError(f"{identifier}: artifact must be synthetic text")
         if not isinstance(row.get("ok"), bool) or not isinstance(row.get("expected_task_pass"), bool):
             raise ValueError(f"{identifier}: expected verdict fields must be booleans")
+        if "expected_task_measured" in row and not isinstance(row["expected_task_measured"], bool):
+            raise ValueError(f"{identifier}: expected_task_measured must be a boolean")
         if not isinstance(row.get("expected_metrics", {}), dict):
             raise ValueError(f"{identifier}: expected_metrics must be an object")
         rows[identifier] = row
@@ -54,6 +56,22 @@ def load_scoring_regressions(path: Path | None = None) -> dict[str, dict[str, An
     return rows
 
 
+def active_scoring_regressions(path: Path | None = None) -> dict[str, dict[str, Any]]:
+    """Run current policy controls while preserving immutable historical inputs."""
+    path = default_registry_path() if path is None else path
+    rows = load_scoring_regressions(path)
+    mapping = json.loads(path.read_text()).get("superseded_cases", {})
+    if not isinstance(mapping, dict):
+        raise ValueError("Scoring supersessions must map explicit control IDs")
+    for old, new in mapping.items():
+        if old not in rows or new not in rows or old == new or new in mapping:
+            raise ValueError("Invalid scoring policy supersession")
+        if any(rows[old].get(field) != rows[new].get(field) for field in
+               ("case", "artifact", "ok", "metadata", "title", "final_url")):
+            raise ValueError("Policy supersession must preserve synthetic inputs")
+    return {key: row for key, row in rows.items() if key not in mapping}
+
+
 def require_scoring_regressions(identifiers: list[str] | tuple[str, ...], *,
                                 category: str | None = None) -> list[str]:
     unique = list(dict.fromkeys(identifiers))
diff --git a/harness/web_fetch/scoring_revision.py b/harness/web_fetch/scoring_revision.py
index df56e1764..1f6a7ab09 100644
--- a/harness/web_fetch/scoring_revision.py
+++ b/harness/web_fetch/scoring_revision.py
@@ -11,7 +11,11 @@
 ROOT = Path(__file__).resolve().parents[2]
 from harness.record_io import parse_jsonl
 from harness.web_fetch.reference_inputs import read_dataset_bytes
-from harness.web_fetch.reference_lifecycle import reference_revision_cases, valid_scoring_revision
+from harness.web_fetch.reference_lifecycle import (
+    homepage_prompt_anchor_correction,
+    reference_revision_cases,
+    valid_scoring_revision,
+)
 from harness.web_fetch.rescoring import rescore
 from harness.web_fetch.result_review import (
     IndependentReviewRequired,
@@ -19,6 +23,7 @@
     rebind_unchanged_result_review,
 )
 from harness.web_fetch.safety import contained_path, validate_report_ids
+from harness.web_fetch.scoring import SCORING_SOURCE_SHA256
 from harness.web_fetch.scoring_regressions import (
     ROOT_CAUSE_CATEGORIES,
     build_correction_provenance,
@@ -29,10 +34,12 @@
     "required_patterns",
     "required_facts",
     "acceptance_contract",
+    "composite_acceptance",
     "forbidden_any",
     "expected_resources",
     "resource_output_contract",
     "task_prompt",
+    "reference_answer",
     "mutable_body_policy",
 }
 
@@ -47,13 +54,7 @@ def _without_rules(case):
 
 
 def _resource_prompt_policy_correction(old: dict, new: dict) -> bool:
-    """Allow wording to follow one narrowly audited resource-policy correction.
-
-    The physical resource request receives the URL and native resource route;
-    it never receives a target URL.  Changing an impossible target-only
-    precision requirement to recall acceptance therefore changes scoring and
-    its reader-facing wording, not the preserved provider call.
-    """
+    """Allow wording to follow one narrowly audited resource-policy correction."""
     before = old.get("resource_output_contract", {})
     after = new.get("resource_output_contract", {})
     old_targets = old.get("expected_resources", [])
@@ -76,6 +77,23 @@ def _resource_prompt_policy_correction(old: dict, new: dict) -> bool:
     )
 
 
+def _homepage_prompt_anchor_correction(old: dict, new: dict) -> bool:
+    """Allow a homepage scope description to stop embedding revised answer anchors."""
+    return homepage_prompt_anchor_correction(old, new)
+
+
+def _scoring_source_sha256s(records: list[dict], *, label: str) -> list[str]:
+    values = {
+        row.get("metrics", {}).get("scoring_source_sha256")
+        for row in records
+    }
+    if (not values or any(not isinstance(value, str) or len(value) != 64
+                          or any(char not in "0123456789abcdef" for char in value)
+                          for value in values)):
+        raise ValueError(label + " results require valid scoring source SHA-256 values")
+    return sorted(values)
+
+
 def _revise_unlocked(
     source: Path,
     canonical_path: Path,
@@ -83,6 +101,8 @@ def _revise_unlocked(
     root_cause_category: str,
     root_cause: str,
     regression_ids: list[str],
+    validate_only: bool = False,
+    jobs: int = 1,
 ):
     # Validate correction intent and executable controls before touching evidence.
     provenance = correction_provenance(root_cause_category, root_cause, regression_ids)
@@ -91,6 +111,10 @@ def _revise_unlocked(
     results_path = contained_path(source, "results.jsonl")
     before_dataset = read_dataset_bytes(dataset_path)
     before_results = results_path.read_bytes()
+    before_records = parse_jsonl(before_results)
+    input_scoring_source_sha256s = _scoring_source_sha256s(
+        before_records, label="Input",
+    )
     receipt_path = contained_path(source, "scoring-revisions.json", reject_symlinks=True)
     history = json.loads(receipt_path.read_bytes()) if receipt_path.exists() else []
     if not isinstance(history, list) or (history and not valid_scoring_revision(source)):
@@ -132,11 +156,12 @@ def _revise_unlocked(
         for key in ("url", "track", "task_kind"):
             if old.get(key) != canonical_case.get(key):
                 raise ValueError(identifier + ": captured task differs from canonical " + key)
-        if old.get("task_prompt") != canonical_case.get(
-            "task_prompt"
-        ) and not _resource_prompt_policy_correction(old, canonical_case):
+        if old.get("task_prompt") != canonical_case.get("task_prompt") and not (
+            _resource_prompt_policy_correction(old, canonical_case)
+            or _homepage_prompt_anchor_correction(old, canonical_case)
+        ):
             raise ValueError(
-                identifier + ": task_prompt changed outside the audited resource-policy correction"
+                identifier + ": task_prompt changed without its audited scoring contract"
             )
         new = dict(old)
         for key in ALLOWED_FIELDS:
@@ -149,14 +174,25 @@ def _revise_unlocked(
         if fields:
             changed.append({"case_id": identifier, "fields": fields})
     dataset["cases"] = [updated_cases[case["id"]] for case in dataset["cases"]]
-    validate_report_ids(dataset, parse_jsonl(before_results))
-    dataset_path.write_text(json.dumps(dataset, ensure_ascii=False, indent=2) + "\n")
+    validate_report_ids(dataset, before_records)
+    if input_scoring_source_sha256s != [SCORING_SOURCE_SHA256] and changed:
+        raise ValueError(
+            "Shared scorer and task requirements changed together; "
+            "apply a scorer-only revision first"
+        )
+    if validate_only and changed:
+        raise ValueError('Scoring validation cannot change task requirements')
+    if not validate_only:
+        dataset_path.write_text(json.dumps(dataset, ensure_ascii=False, indent=2) + "\n")
     staged_dataset = read_dataset_bytes(dataset_path)
     try:
         decisions = rescore(
             source,
+            case_ids={change["case_id"] for change in changed} if changed else None,
             allow_rule_revision=True,
             reference_revision_hashes=revised_reference_hashes or None,
+            validate_only=validate_only,
+            jobs=jobs,
         )
     except BaseException:
         # Never roll stale bytes over a different process's completed revision.
@@ -178,6 +214,11 @@ def _revise_unlocked(
         case_id = attempt_cases[decision["attempt_id"]]
         changed_by_case.setdefault(case_id, {"case_id": case_id, "fields": []})
     changed = [changed_by_case[case_id] for case_id in sorted(changed_by_case)]
+    output_scoring_source_sha256s = _scoring_source_sha256s(
+        parse_jsonl(results_path.read_bytes()), label="Output",
+    )
+    if output_scoring_source_sha256s != [SCORING_SOURCE_SHA256]:
+        raise ValueError("Scoring revision did not bind the current shared scorer")
     review_revision = {}
     try:
         rebind_unchanged_result_review(
@@ -200,9 +241,16 @@ def _revise_unlocked(
         "input_results_sha256": hashlib.sha256(before_results).hexdigest(),
         "output_dataset_sha256": hashlib.sha256(read_dataset_bytes(dataset_path)).hexdigest(),
         "output_results_sha256": hashlib.sha256(results_path.read_bytes()).hexdigest(),
+        **(
+            {"input_scoring_source_sha256": input_scoring_source_sha256s[0]}
+            if len(input_scoring_source_sha256s) == 1
+            else {"input_scoring_source_sha256s": input_scoring_source_sha256s}
+        ),
+        "output_scoring_source_sha256": output_scoring_source_sha256s[0],
         "changed_cases": changed,
         "task_decision_changes": decisions,
         "provider_calls": 0,
+        **({'validation_only': True} if validate_only else {}),
         "immutable_call_fields": (
             "attempt identity, output bytes/hash, timestamps and elapsed time retained"
         ),
@@ -224,6 +272,54 @@ def _revise_unlocked(
     return receipt
 
 
+def rebind_report_interpretation(source: Path, binding: dict, *, implementation_binding: dict | None = None):
+    """Bind presentation content while preserving the scored output bytes."""
+    from .reference_lifecycle import valid_scoring_revision
+    source = source.resolve()
+    if not valid_scoring_revision(source):
+        raise ValueError('Report binding requires a valid existing scoring chain')
+    if set(binding) != {'path', 'sha256'}:
+        raise ValueError('Invalid report interpretation binding')
+    asset = contained_path(source, binding['path'], reject_symlinks=True)
+    if hashlib.sha256(asset.read_bytes()).hexdigest() != binding['sha256']:
+        raise ValueError('Report interpretation content hash mismatch')
+    if implementation_binding is not None:
+        if (set(implementation_binding) != {'path', 'sha256'}
+                or implementation_binding['path'] != 'implementation-provenance.json'):
+            raise ValueError('Invalid implementation provenance binding')
+        implementation = contained_path(source, implementation_binding['path'], reject_symlinks=True)
+        if hashlib.sha256(implementation.read_bytes()).hexdigest() != implementation_binding['sha256']:
+            raise ValueError('Implementation provenance content hash mismatch')
+    dataset_path = contained_path(source, 'dataset.json')
+    before = dataset_path.read_bytes()
+    dataset = json.loads(before)
+    dataset.setdefault('comparison', {})['report_interpretation'] = binding
+    if implementation_binding is not None:
+        dataset['comparison']['implementation_provenance'] = implementation_binding
+    after = (json.dumps(dataset, ensure_ascii=False, indent=2)+'\n').encode()
+    results_hash = hashlib.sha256((source/'results.jsonl').read_bytes()).hexdigest()
+    receipt = {'kind': 'report_interpretation_binding_revision', 'provider_calls': 0,
+               'input_results_sha256': results_hash, 'output_results_sha256': results_hash}
+    receipt['bound_asset_fields'] = ['report_interpretation'] + (
+        ['implementation_provenance'] if implementation_binding is not None else [])
+    for side, raw in (('input', before), ('output', after)):
+        digest = hashlib.sha256(raw).hexdigest()
+        relative = f'revision-history/dataset-{digest}.json'
+        target = contained_path(source, relative)
+        target.parent.mkdir(parents=True, exist_ok=True)
+        if target.exists() and target.read_bytes() != raw:
+            raise ValueError('Dataset history collision')
+        target.write_bytes(raw)
+        receipt[f'{side}_dataset_sha256'] = digest
+        receipt[f'{side}_dataset_path'] = relative
+    path = source/'report-binding-revisions.json'
+    history = json.loads(path.read_text()) if path.exists() else []
+    history.append(receipt)
+    path.write_text(json.dumps(history, ensure_ascii=False, indent=2)+'\n')
+    dataset_path.write_bytes(after)
+    return receipt
+
+
 def revise(
     source: Path,
     canonical_path: Path,
@@ -231,6 +327,8 @@ def revise(
     root_cause_category: str,
     root_cause: str,
     regression_ids: list[str],
+    validate_only: bool = False,
+    jobs: int = 1,
 ):
     """Serialize evidence revisions and make rollback ownership explicit."""
     source = source.resolve()
@@ -245,6 +343,8 @@ def revise(
                 root_cause_category=root_cause_category,
                 root_cause=root_cause,
                 regression_ids=regression_ids,
+                validate_only=validate_only,
+                jobs=jobs,
             )
         finally:
             fcntl.flock(lock.fileno(), fcntl.LOCK_UN)
@@ -268,6 +368,7 @@ def main(argv=None):
         required=True,
         help="Executable case id from evaluation/scoring-regressions.json; repeat as needed",
     )
+    parser.add_argument("--jobs",type=int,default=1,help="Parallel offline scoring workers (1–8); no provider calls")
     args = parser.parse_args(argv)
     print(
         json.dumps(
@@ -277,6 +378,7 @@ def main(argv=None):
                 root_cause_category=args.root_cause_category,
                 root_cause=args.root_cause,
                 regression_ids=args.regression_id,
+                jobs=args.jobs,
             ),
             ensure_ascii=False,
             indent=2,
diff --git a/harness/web_fetch/stable_annotations.py b/harness/web_fetch/stable_annotations.py
index 6dec3b97b..1640f81e3 100644
--- a/harness/web_fetch/stable_annotations.py
+++ b/harness/web_fetch/stable_annotations.py
@@ -421,6 +421,6 @@ def bind_annotation_evidence(case, source):
     raw = contained_path(source, annotation['anchor_evidence']).read_bytes()
     reference = normalize_for_match(raw.decode('utf-8'))
     for anchor in case['acceptance_contract'].get('stable_text_anchors', []):
-        if not all(fact_in_text(reference, normalize_for_match(value)) for value in anchor['alternatives']):
+        if not any(fact_in_text(reference, normalize_for_match(value)) for value in anchor['alternatives']):
             raise ValueError('Stable text lacks independent evidence: ' + case['id'] + '/' + anchor['id'])
     annotation['anchor_evidence_sha256'] = hashlib.sha256(raw).hexdigest()
diff --git a/harness/web_fetch/stable_tasks.py b/harness/web_fetch/stable_tasks.py
index be0ea4661..aa6067c60 100644
--- a/harness/web_fetch/stable_tasks.py
+++ b/harness/web_fetch/stable_tasks.py
@@ -6,17 +6,18 @@
 """
 from __future__ import annotations
 
-from datetime import date, datetime
-from html import unescape
 import hashlib
 import math
 import re
 import unicodedata
+from datetime import date, datetime
+from html import unescape
 from urllib.parse import urlsplit
 
 from .dynamic_lists import extract_named_entries, named_entry_source_pair_hash
-from .reference_quality import clean_reference_text
-
+from .reference_quality import (
+    clean_reference_text, is_markdown_image_start, markdown_delimiter_pairs,
+)
 
 SCHEMA_FIELDS = {
     "table_row": (),
@@ -60,23 +61,7 @@ def _key(text):
 
 
 _CARD_BOUNDARY = "\ue000"
-
-
-def _closing(text, start, opening, closing):
-    depth = 1
-    i = start + 1
-    while i < len(text):
-        if text[i] == "\\":
-            i += 2
-            continue
-        if text[i] == opening:
-            depth += 1
-        elif text[i] == closing:
-            depth -= 1
-            if not depth:
-                return i
-        i += 1
-    return None
+_MEDIA_BOUNDARY = "\ue001"
 
 
 def _unwrap_links(text, schema):
@@ -85,17 +70,18 @@ def _unwrap_links(text, schema):
     Only explicit markup creates boundaries; text from separate cards is never
     flattened together. Image alt text is not a substitute for a visible title.
     """
+    pairs = markdown_delimiter_pairs(text)
     output, i = [], 0
     while i < len(text):
-        image = text.startswith("![", i)
+        image = is_markdown_image_start(text, i)
         start = i + 1 if image else i
         if text[start:start + 1] != "[":
             output.append(text[i])
             i += 1
             continue
-        end = _closing(text, start, "[", "]")
+        end = pairs.get(start)
         destination = end + 1 if end is not None else len(text)
-        close = _closing(text, destination, "(", ")") if text[destination:destination + 1] == "(" else None
+        close = pairs.get(destination) if text[destination:destination + 1] == "(" else None
         if close is None:
             output.append(text[i])
             i += 1
@@ -107,6 +93,14 @@ def _unwrap_links(text, schema):
             prefix = "".join(output).rsplit("\n", 1)[-1]
             if re.fullmatch(r"\s*(?:[-*+]|\d+[.)])\s*", prefix):
                 output.append(_CARD_BOUNDARY)
+            elif image and not prefix.strip():
+                line_end = text.find("\n", close + 1)
+                suffix = text[close + 1:line_end if line_end >= 0 else len(text)]
+                if not suffix.strip():
+                    # A standalone image is an explicit local card boundary.
+                    # Keep it as ownership evidence without treating alt text as
+                    # the record name or joining prose across adjacent cards.
+                    output.append(_MEDIA_BOUNDARY)
         if label:
             rendered = "".join(output)
             prefix = rendered.rsplit("\n", 1)[-1]
@@ -133,17 +127,29 @@ def _unwrap_links(text, schema):
 
 
 def _visible(text, schema=None):
+    from .reference_quality import is_html_document_or_fragment
+
+    projected_html = (
+        schema in SCHEMA_FIELDS
+        and schema not in {"named_link", "linked_product", "table_row", "body_text", "page_identity"}
+        and is_html_document_or_fragment(text)
+    )
+    if projected_html:
+        from .dynamic_lists import visible_html_text
+
+        text = visible_html_text(text)
     text = clean_reference_text(text)
     # Decode one character-reference layer, as a browser does for both HTML
     # and Markdown. In particular, ``&amp;`` is the visible ``&`` while an
     # intentionally escaped ``&amp;amp;`` remains the literal text ``&amp;``.
-    text = unescape(text)
+    if not projected_html:
+        text = unescape(text)
     # Extractors represent Markdown hard breaks using one or two backslashes.
     text = re.sub(r"\\{1,2}[ \t]*(?=\n)", "", text)
     text = _unwrap_links(text, schema)
     # CommonMark punctuation escapes preserve the same visible characters.
     # Remove them before date/field parsing (for example ``2023\-05\-18``).
-    text = re.sub(r'\\([!"#$%&\'()*+,\-./:;<=>?@\[\]\\^_`{|}~])', r'\1', text)
+    text = re.sub(r'\\([!"#$%&\'()*+,\-./:;<=>?@\[\]\\^_`{|}~])', lambda m: m[0] if schema == 'table_row' and m[1] in {'|', '\\'} else m[1], text)
     if schema == "name_description":
         # Image-only card links intentionally contribute no visible title.
         # Remove their now-empty bullet line so blank-delimited card parsing
@@ -151,8 +157,9 @@ def _visible(text, schema=None):
         text = re.sub(r"(?m)^\s*(?:[-*+]|\d+[.)])\s*$", "", text)
         text = re.sub(rf"(?m)^\s*(?:[-*+]|\d+[.)])\s*{_CARD_BOUNDARY}\s*$",
                       f"\n{_CARD_BOUNDARY}\n", text)
-        text = "\n".join(line if line.strip() == _CARD_BOUNDARY
-                         else line.replace(_CARD_BOUNDARY, "")
+        boundaries = {_CARD_BOUNDARY, _MEDIA_BOUNDARY}
+        text = "\n".join(line if line.strip() in boundaries
+                         else line.replace(_CARD_BOUNDARY, "").replace(_MEDIA_BOUNDARY, "")
                          for line in text.splitlines())
     text = re.sub(r"\*\*|__|`", "", text)
     # Link unwrapping may insert boundary spaces inside surrounding emphasis
@@ -471,6 +478,38 @@ def _descriptions(text):
     return records
 
 
+def _closed_title_descriptions(text):
+    """Treat title-description-title triples as explicitly closed cards."""
+    paragraphs = [block.strip() for block in re.split(r"\n\s*\n", text) if block.strip()]
+    records = []
+    for first, description, repeated in zip(
+        paragraphs, paragraphs[1:], paragraphs[2:], strict=False
+    ):
+        if any("\n" in value for value in (first, description, repeated)):
+            continue
+        name = _line(first)
+        if _key(name) != _key(_line(repeated)):
+            continue
+        record = _record(
+            {"name": name, "description": _line(description)},
+            "name_description",
+        )
+        if record["valid"]:
+            records.append(record)
+    return records
+
+
+def _media_closed_title_descriptions(text):
+    """Read title-description-title closures only inside image-owned blocks."""
+    if _MEDIA_BOUNDARY not in text:
+        return []
+    return [
+        record
+        for block in text.split(_MEDIA_BOUNDARY)[1:]
+        for record in _closed_title_descriptions(block)
+    ]
+
+
 def _earthquakes(text):
     """Read contiguous magnitude/location/time/depth cards, never bag-of-fields.
 
@@ -507,7 +546,7 @@ def _earthquakes(text):
     return records
 
 
-def _parse_records(visible, schema):
+def _parse_records(visible, schema, *, allow_closed_title_cards=False):
     raw_lines = visible.splitlines()
     records, occupied = _table_records(raw_lines, schema)
     remainder = "\n".join(line if i not in occupied else "" for i, line in enumerate(raw_lines))
@@ -529,7 +568,30 @@ def _parse_records(visible, schema):
         for section in sections:
             records.extend(_operations([_line(line) for line in section.splitlines() if line.strip()]))
     elif schema == "name_description":
-        records.extend(_descriptions(remainder))
+        # Scoped title-description-title cards and image-owned cards are two
+        # ways to establish the same ownership boundary.  When the caller has
+        # already bounded the target section, parsing both routes would emit
+        # every image-backed card twice and reject an otherwise valid answer as
+        # a duplicate-name list.
+        closed = (
+            _closed_title_descriptions(remainder)
+            if allow_closed_title_cards
+            else _media_closed_title_descriptions(remainder)
+        )
+        weak = _descriptions(remainder)
+        for record in weak:
+            description = _key(record["fields"].get("description", ""))
+            name = _key(record["fields"].get("name", ""))
+            if any(
+                name != _key(owner["fields"]["name"])
+                and _key(owner["fields"]["name"]) in description
+                and _key(owner["fields"]["description"]) in description
+                for owner in closed
+            ):
+                record["valid"] = False
+                record["errors"].append("description_contains_separate_owned_record")
+        records.extend(weak)
+        records.extend(closed)
     elif schema == "taxonomy_family":
         records.extend(_record({"family": _field(line, "family")}, schema) for line in lines
                        if re.fullmatch(r"(?:family\s*:\s*)?[A-Za-z]+idae", line, re.I))
@@ -539,8 +601,9 @@ def _parse_records(visible, schema):
 def _non_record_visible(content, contract, records, base_url):
     """Remove owned record links, without erasing identical navigation text."""
     from urllib.parse import urljoin
-    from .dynamic_lists import named_entry_identity, _scoped_html
-    from .reference_quality import markdown_links
+
+    from .dynamic_lists import _scoped_html, named_entry_identity
+    from .reference_quality import markdown_links, visible_markdown_links
 
     identities = {named_entry_identity(r['fields']['url'], contract)
                   for r in records if r.get('valid') and r.get('fields', {}).get('url')}
@@ -567,7 +630,11 @@ def is_record(url):
         for link in reversed(links):
             if is_record(link.destination):
                 content = content[:link.start] + ' ' + content[link.end:]
-        return _visible(content)
+        # A linked logo can be the only reader-visible site identity. Preserve
+        # its alt text for page-level anchors after owned record links are
+        # removed. Record parsing still uses ``_visible`` above, so image alt
+        # text cannot manufacture a named-link record title.
+        return _visible(visible_markdown_links(content))
     # Plain text has no URL ownership; retain the conservative fallback.
     return None
 
@@ -621,8 +688,12 @@ def validate_acceptance_contract(contract: dict) -> None:
             or contract.get("version") != 1 or not isinstance(contract.get("schema"), str)
             or contract.get("schema") not in SCHEMA_FIELDS):
         raise ValueError("Unsupported stable acceptance contract")
-    if set(contract) - {"version", "schema", "minimum_records", "maximum_records", "page_patterns", "stable_text_anchors", "hosts", "entry_path", "entry_identity_pattern", "entry_context", "entry_scope", "name_validation", "identity_query_keys", "field_minimum_records", "record_name_exclusions", "title_exclusion_patterns", "price_patterns", "price_exclusion_patterns", "price_unavailable_patterns", "record_count_policy", "source_record_pair_hashes", "source_record_pairs_sha256", "table_columns", "record_identity_fields", "table_scope", "duplicate_policy", "link_base_url"}:
+    if set(contract) - {"version", "schema", "minimum_records", "maximum_records", "page_patterns", "stable_text_anchors", "stable_text_role", "hosts", "entry_path", "entry_identity_pattern", "entry_context", "entry_scope", "name_validation", "identity_query_keys", "field_minimum_records", "record_name_exclusions", "title_exclusion_patterns", "price_patterns", "price_exclusion_patterns", "price_unavailable_patterns", "record_count_policy", "source_record_pair_hashes", "source_record_pairs_sha256", "table_columns", "record_identity_fields", "table_scope", "duplicate_policy", "link_base_url"}:
         raise ValueError("Unknown stable acceptance contract fields")
+    if contract.get("stable_text_role", "required") not in {"required", "diagnostic"}:
+        raise ValueError("Invalid stable text role")
+    if contract.get("stable_text_role") == "diagnostic" and contract["schema"] != "body_text":
+        raise ValueError("Diagnostic stable text requires a body-text contract")
     if contract['schema'] == 'table_row':
         from .structured_tables import validate_table
         validate_table(contract)
@@ -716,7 +787,7 @@ def validate_acceptance_contract(contract: dict) -> None:
         scope = contract.get("entry_scope")
         if scope is not None:
             if (not isinstance(scope, dict) or not scope.get("html_selector")
-                    or set(scope) - {"html_selector", "start_pattern", "end_pattern", "title_selector", "link_selector", "price_selector", "auxiliary_links_end_pattern", "markdown_title_identity_pattern", "markdown_detail_identity_pattern", "markdown_label_pattern"}
+                    or set(scope) - {"html_selector", "start_pattern", "end_pattern", "title_selector", "link_selector", "price_selector", "auxiliary_links_end_pattern", "markdown_title_identity_pattern", "markdown_detail_identity_pattern", "markdown_label_pattern", "markdown_card_title_pattern", "markdown_title_column", "markdown_link_column"}
                     or any(not isinstance(v, str) or not v.strip() for v in scope.values())
                     or (("title_selector" in scope) != ("link_selector" in scope))):
                 raise ValueError("Invalid linked record section scope")
@@ -730,11 +801,24 @@ def validate_acceptance_contract(contract: dict) -> None:
                     compiled = re.compile(scope[key], re.M)
                     if compiled.search(""):
                         raise ValueError("Record section boundary cannot match empty text")
+            column_keys = ("markdown_title_column", "markdown_link_column")
+            if any(key in scope for key in column_keys):
+                if (not all(key in scope for key in column_keys)
+                        or scope[column_keys[0]] == scope[column_keys[1]]
+                        or contract["schema"] != "named_link"):
+                    raise ValueError("Named table records require distinct title and link columns")
             pair_keys = ("markdown_title_identity_pattern", "markdown_detail_identity_pattern")
             if 'markdown_label_pattern' in scope:
                 pattern = re.compile(scope['markdown_label_pattern'])
                 if 'label' not in pattern.groupindex or pattern.search(''):
                     raise ValueError('Markdown card label requires a nonempty named label capture')
+            if 'markdown_card_title_pattern' in scope:
+                pattern = re.compile(scope['markdown_card_title_pattern'])
+                if ('title' not in pattern.groupindex or pattern.search('')
+                        or not scope.get('start_pattern') or not scope.get('end_pattern')):
+                    raise ValueError(
+                        'Markdown heading cards require bounded scope and a nonempty title capture'
+                    )
             if any(key in scope for key in pair_keys):
                 if not all(key in scope for key in pair_keys):
                     raise ValueError("Markdown row identity patterns must be paired")
@@ -830,14 +914,15 @@ def validate_acceptance_contract(contract: dict) -> None:
         raise ValueError("Invalid stable acceptance regex") from error
 
 
-def evaluate_stable_task(content: str, contract: dict, base_url: str = "", eligible: bool = True, links=None, *, anchor_text: str | None = None) -> dict:
+def evaluate_stable_task(content: str, contract: dict, base_url: str = "", eligible: bool = True, links=None, *, anchor_text: str | None = None, anchors_required: bool = True, allow_closed_title_cards: bool = False) -> dict:
     """Validate a version-1 schema/count contract, without fetching or snapshots.
 
     Required keys: version, schema, minimum_records. Optional maximum_records
     imposes a finite exact scope when equal to the minimum. page_patterns is a
     list of required regexes for stable page/section identity (not current items).
     stable_text_anchors contains explicit {id, alternatives} groups; every group
-    must match, independently of record shape and optional snapshot word metrics.
+    must match unless the caller supplies a separate body or composite contract
+    and selects diagnostic anchors. Record and page-pattern gates remain required.
     named_link additionally requires hosts and entry_path, using the existing
     same-site detail-link parser. Raw URL identity is not factual verification.
     anchor_text may reuse the caller's normalized visible HTML prose;
@@ -923,7 +1008,15 @@ def evaluate_stable_task(content: str, contract: dict, base_url: str = "", eligi
             from .structured_tables import parse_table_records
             records = parse_table_records(content, visible, contract)
         else:
-            records = [] if schema in {"body_text", "page_identity"} else _parse_records(visible, schema)
+            records = (
+                []
+                if schema in {"body_text", "page_identity"}
+                else _parse_records(
+                    visible,
+                    schema,
+                    allow_closed_title_cards=allow_closed_title_cards,
+                )
+            )
     anchors = []
     non_record_visible = None
     if schema == 'named_link' and any(a.get('match_scope') == 'non_record_lines'
@@ -933,7 +1026,9 @@ def evaluate_stable_task(content: str, contract: dict, base_url: str = "", eligi
         matched = _anchor_matches(anchor, records, visible, schema,
                                   non_record_visible, anchor_visible)
         anchors.append({**anchor, "matched": matched, "pass": bool(matched)})
-    content_errors += ["missing_stable_anchor:" + r["id"] for r in anchors if not r["pass"]]
+    anchor_errors = ["missing_stable_anchor:" + r["id"] for r in anchors if not r["pass"]]
+    if anchors_required:
+        content_errors += anchor_errors
     complete = [r for r in records if r["valid"]]
     identity_fields = contract["record_identity_fields"] if schema == "table_row" else UNIQUE_FIELDS[schema]
     compact_fields = {c['name'] for c in contract.get('table_columns', [])
@@ -980,7 +1075,8 @@ def identity_key(record, field):
             "stable_field_results": field_checks,
             "stable_structure_pass": structure_pass, "stable_content_pass": not content_errors,
             "stable_blocked_page": blocked_page,
-            "stable_anchor_results": anchors, "stable_page_pattern_results": page_results,
+            "stable_anchors_required": anchors_required,
+            "stable_anchor_errors": anchor_errors, "stable_anchor_results": anchors, "stable_page_pattern_results": page_results,
             "stable_anchor_hits": sum(r["pass"] for r in anchors),
             "stable_anchor_total": len(anchors),
             "stable_anchor_coverage": sum(r["pass"] for r in anchors) / len(anchors) if anchors else None,
diff --git a/harness/web_fetch/storage.py b/harness/web_fetch/storage.py
index e0d6283d9..1ea48e5d5 100644
--- a/harness/web_fetch/storage.py
+++ b/harness/web_fetch/storage.py
@@ -54,6 +54,26 @@ def require_selection_history(evidence: Path) -> None:
         )
 
 
+def frozen_input_bindings(evidence: Path) -> dict[str, str]:
+    """Compact publication binding for a composed, frozen dataset and its assets."""
+    dataset = evidence / "dataset.json"
+    if evidence.is_symlink() or dataset.is_symlink():
+        raise ValueError("Frozen input bindings reject symlinks")
+    auxiliary = {}
+    for name in ("sources", "list-references"):
+        tree = evidence / name
+        if tree.is_symlink():
+            raise ValueError("Frozen input bindings reject symlinks")
+        for path in tree.rglob("*"):
+            if path.is_symlink():
+                raise ValueError("Frozen input bindings reject symlinks")
+            if path.is_file():
+                auxiliary[path.relative_to(evidence).as_posix()] = hashlib.sha256(path.read_bytes()).hexdigest()
+    return {"dataset_sha256": hashlib.sha256(dataset.read_bytes()).hexdigest(),
+            "auxiliary_sha256": hashlib.sha256(json.dumps(auxiliary, sort_keys=True,
+                separators=(",", ":")).encode()).hexdigest()}
+
+
 def require_canonical_inputs(evidence: Path, canonical: Path) -> None:
     """Reject a report build when its frozen inputs differ from Git."""
     from .reference_inputs import input_tree, read_dataset_bytes
@@ -93,6 +113,25 @@ def require_canonical_inputs(evidence: Path, canonical: Path) -> None:
             raise ValueError(f"Persistent evidence differs from canonical input tree: {relative}")
 
 
+def require_frozen_case_source(evidence: Path, profile_path: Path, source: Path) -> None:
+    """Verify all task bytes against the profile-bound pre-call dataset."""
+    profile = json.loads(profile_path.read_text())
+    expected_hash = profile.get("source_native_dataset_sha256")
+    if not expected_hash or not profile.get("frozen_inputs"):
+        raise ValueError("Pre-call case verification requires both source and report input bindings")
+    if source.is_symlink() or not source.is_file():
+        raise ValueError("Pre-call dataset must be a regular, non-symlink file")
+    raw = source.read_bytes()
+    if hashlib.sha256(raw).hexdigest() != expected_hash:
+        raise ValueError("Pre-call dataset differs from the profile source binding")
+    if frozen_input_bindings(evidence) != profile["frozen_inputs"]:
+        raise ValueError("Report differs from frozen input bindings")
+    original = json.loads(raw)
+    current = json.loads((evidence / "dataset.json").read_bytes())
+    if current.get("cases") != original.get("cases") or not original.get("cases"):
+        raise ValueError("Report task definitions or answers differ from pre-call input")
+
+
 def require_current_report_profile(evidence: Path, profile_path: Path) -> None:
     """Reject evidence from another valid cohort when building the current report."""
     profile = json.loads(profile_path.read_text())
@@ -100,6 +139,48 @@ def require_current_report_profile(evidence: Path, profile_path: Path) -> None:
         raise ValueError("WCXB evidence uses the certified cohort validator, not the legacy current-report profile validator")
     dataset = json.loads((evidence / "dataset.json").read_text())
     records = load_jsonl(evidence / "results.jsonl")
+    evidence_binding = profile.get("evidence_binding")
+    if evidence_binding is not None:
+        from .safety import contained_path
+
+        files = evidence_binding.get("files") if isinstance(evidence_binding, dict) else None
+        required = {"dataset.json", "results.jsonl", "execution.json"}
+        authority_files = {
+            "scoring-revisions.json",
+            "provider-replacement-scopes.json",
+            "reference-revisions.json",
+            "latency-corrections.json",
+            "request-status-corrections.json",
+        }
+        required.update(name for name in authority_files if (evidence / name).is_file())
+        if profile.get("resource_profile", {}).get("required"):
+            required.update({
+                "resource-cohort/dataset.json",
+                "resource-cohort/results.jsonl",
+                "resource-cohort/execution.json",
+                "resource-cohort/resource-comparison.json",
+            })
+        if (
+            set(evidence_binding or {}) != {"schema_version", "kind", "files"}
+            or evidence_binding.get("schema_version") != 1
+            or evidence_binding.get("kind") != "assembled_webfetch_evidence"
+            or not isinstance(files, dict)
+            or set(files) != required
+        ):
+            raise ValueError("Current report profile has an incomplete evidence binding")
+        for relative, expected in files.items():
+            path = contained_path(evidence, relative, reject_symlinks=True)
+            if (
+                not path.is_file()
+                or not isinstance(expected, str)
+                or len(expected) != 64
+                or hashlib.sha256(path.read_bytes()).hexdigest() != expected
+            ):
+                raise ValueError("Evidence differs from the current report binding: " + relative)
+        if files["dataset.json"] != profile.get("frozen_inputs", {}).get("dataset_sha256"):
+            raise ValueError("Evidence binding differs from frozen dataset binding")
+    if profile.get("frozen_inputs") is not None and frozen_input_bindings(evidence) != profile["frozen_inputs"]:
+        raise ValueError("Evidence differs from the profile frozen input bindings")
     comparison = dataset.get("comparison", {})
     providers = set(profile["providers"])
     if len(providers) != len(profile["providers"]):
@@ -108,6 +189,11 @@ def require_current_report_profile(evidence: Path, profile_path: Path) -> None:
     cases = dataset.get("cases", [])
     case_ids = [case.get("id") for case in cases]
     failures = []
+    if profile.get("frozen_inputs") is not None:
+        inventory = {track: [case['id'] for case in cases if case.get('track', 'web') == track]
+                     for track in {case.get('track', 'web') for case in cases}}
+        if profile.get('case_inventory') != inventory:
+            failures.append('case_inventory')
     if dataset.get("id") != profile["dataset_id"]:
         failures.append("dataset_id")
     if len(dataset.get("cases", [])) != profile["case_count"]:
@@ -152,8 +238,10 @@ def require_current_report_profile(evidence: Path, profile_path: Path) -> None:
                 or hashlib.sha256(sample_path.read_bytes()).hexdigest() != profile.get("sample_manifest_sha256")
                 or dataset.get("sample_manifest_sha256") != profile.get("sample_manifest_sha256")):
             failures.append("sample_manifest_file")
-    for key in ("concurrency", "reference_binding_mode", "publication_state",
+    for key in ("concurrency", "reference_binding_mode", "publication_state", "retry_selection",
                 "unverified_reference_cases", "require_independent_result_review"):
+        if key == "retry_selection" and key not in profile:
+            continue
         if comparison.get(key) != profile[key]:
             failures.append(key)
     tracks = {case.get("track", "web") for case in cases}
@@ -179,6 +267,15 @@ def require_current_report_profile(evidence: Path, profile_path: Path) -> None:
     attempt_ids = [row.get("attempt_id") for row in records]
     if any(not identifier for identifier in attempt_ids) or len(attempt_ids) != len(set(attempt_ids)):
         failures.append("attempt_ids")
+    route_contract = profile.get("native_task_route_contract")
+    from .methods import native_browser_engine
+    if profile.get("comparison_kind") == "headless_markdown" and any(native_browser_engine(name) for name in providers) and route_contract is None:
+        raise ValueError("Native browser report requires native_task_route_contract")
+    if route_contract is not None:
+        if route_contract != 4:
+            raise ValueError("Unsupported native task route contract")
+        from .task_outputs import require_native_task_routes
+        require_native_task_routes(cases, records)
     resource_profile = profile.get("resource_profile") or {}
     if resource_profile.get("required"):
         resource_root = evidence / "resource-cohort"
diff --git a/harness/web_fetch/structured_tables.py b/harness/web_fetch/structured_tables.py
index 0d78c3a07..611b06d4b 100644
--- a/harness/web_fetch/structured_tables.py
+++ b/harness/web_fetch/structured_tables.py
@@ -142,6 +142,18 @@ def _valid(value, col):
     return col.get('minimum', float('-inf')) <= number <= col.get('maximum', float('inf'))
 
 
+def _visible_markdown_scalar(value):
+    """Project inline Markdown syntax without changing cell boundaries."""
+    from .reference_quality import visible_markdown_links
+
+    value = visible_markdown_links(value)
+    value = re.sub(r'\\([!"#$%&\'()*+,\-./:;<=>?@\[\\\]^_`{|}~])', r'\1', value)
+    value = re.sub(r'`([^`\n]+)`', r'\1', value)
+    value = re.sub(r'\*\*(?=\S)([^*\n]*\S)\*\*', r'\1', value)
+    value = re.sub(r'__(?=\S)([^_\n]*\S)__', r'\1', value)
+    return value.strip()
+
+
 def _canonical(value, column):
     if column.get('compact_whitespace'):
         return re.sub(r'\s+', '', value).casefold()
@@ -174,6 +186,148 @@ def _without_example_fences(text):
     return ''.join(lines)
 
 
+def table_header_label(value):
+    """The first visual line names a column; later lines are controls/help."""
+    return _visible_markdown_scalar(
+        re.split(r'<br\s*/?>', value, maxsplit=1, flags=re.I)[0]
+    )
+
+
+def _table_header_labels(values):
+    """Remove a table-wide, standalone sort affordance from header labels."""
+    labels = [table_header_label(value) for value in values]
+    sortable = [re.fullmatch(r'(.*?)\s+([↕↥↧⇅⇵])', value) for value in labels]
+    if labels and all(sortable):
+        return [match[1].rstrip() for match in sortable]
+    return labels
+
+
+def _contains_rendered_html_table(content):
+    """Distinguish rendered table markup from literal Markdown examples."""
+    candidate = re.sub(r'`+[^`\n]+`+', '', content)
+    candidate = re.sub(
+        r'(?:\\</?[A-Za-z][^<>\n]*>|</?[A-Za-z][^<>\n]*\\>|\\[<>])',
+        '', candidate,
+    )
+    # A lone opening token commonly appears in API documentation after the
+    # Markdown projection has removed code delimiters.  Real serialized table
+    # markup has an owned closing boundary; do not feed the rest of the answer
+    # to an HTML parser when that boundary is absent.
+    return bool(re.search(r'<table\b[^>]*>[\s\S]*?</table\s*>', candidate, re.I))
+
+
+def table_text_surface(content):
+    """Preserve owned HTML cells/links and adjacent split Markdown bodies."""
+    from bs4 import BeautifulSoup
+    content = _without_example_fences(content)
+    if _contains_rendered_html_table(content):
+        from .dynamic_lists import _scoped_html
+        content = str(_scoped_html(content))
+        content = re.sub(
+            r"<h([1-6])\b[^>]*>[\s\S]*?</h\1\s*>",
+            lambda m: "\n" + BeautifulSoup(m[0], "html.parser").get_text(" ", strip=True) + "\n",
+            content, flags=re.I,
+        )
+
+    def convert(match):
+        soup = BeautifulSoup(match[0], 'html.parser')
+        table = soup.find('table')
+        lines = []
+        for row in table.find_all('tr'):
+            if row.find_parent('table') is not table:
+                continue
+            cells = row.find_all(['th', 'td'], recursive=False)
+            values = []
+            for cell in cells:
+                if cell.get('colspan', '1') != '1' or cell.get('rowspan', '1') != '1':
+                    break
+                for link in cell.find_all('a', href=True):
+                    link.replace_with('[' + link.get_text(' ', strip=True) + '](' + link['href'] + ')')
+                values.append(cell.get_text(' ', strip=True).replace('\\', r'\\').replace('|', r'\|'))
+            else:
+                if values:
+                    lines.append('| ' + ' | '.join(values) + ' |')
+                    if all(cell.name == 'th' for cell in cells):
+                        lines.append('| ' + ' | '.join('---' for _ in cells) + ' |')
+        return '\n' + '\n'.join(lines) + '\n'
+    content = re.sub(r'<table\b[^>]*>[\s\S]*?</table\s*>', convert, content, flags=re.I)
+    lines = content.splitlines()
+    output = []
+    index = 0
+    def separator(line):
+        return '|' in line and all(
+            re.fullmatch(r'\s*:?-{3,}:?\s*', c) for c in _pipe_cells(line))
+    while index < len(lines):
+        cells = _pipe_cells(lines[index])
+        prior = []
+        if '|' in lines[index] and all(not c.strip() for c in cells):
+            for line in reversed(output):
+                if line.strip():
+                    prior.append(line)
+                    if len(prior) == 2:
+                        break
+            prior.reverse()
+        if ('|' in lines[index] and all(not c.strip() for c in cells)
+                and index + 1 < len(lines) and separator(lines[index + 1])
+                and len(_pipe_cells(lines[index + 1])) == len(cells)
+                and len(prior) >= 2 and separator(prior[-1])
+                and len(_pipe_cells(prior[-2])) == len(cells)
+                and any(c.strip() for c in _pipe_cells(prior[-2]))):
+            while output and not output[-1].strip():
+                output.pop()
+            index += 2
+            continue
+        output.append(lines[index])
+        index += 1
+    return '\n'.join(output)
+
+
+def table_header_column_surfaces(content):
+    """Return each real table's header followed by one complete body column.
+
+    A visible reference can legitimately omit graphical or auxiliary cell values
+    while retaining every header and the text-bearing column.  Keep each table
+    and column isolated: values from another column, table, or surrounding prose
+    must never repair a missing cell.
+    """
+    lines = table_text_surface(content).splitlines()
+    surfaces = []
+    table_index = 0
+    index = 0
+    while index + 1 < len(lines):
+        headers = _pipe_cells(lines[index])
+        separators = _pipe_cells(lines[index + 1])
+        if ("|" not in lines[index] or len(headers) < 2
+                or len(separators) != len(headers)
+                or not all(header.strip() for header in headers)
+                or not all(re.fullmatch(r"\s*:?-{3,}:?\s*", cell)
+                           for cell in separators)):
+            index += 1
+            continue
+        rows = []
+        cursor = index + 2
+        while cursor < len(lines) and "|" in lines[cursor]:
+            cells = _pipe_cells(lines[cursor])
+            if len(cells) != len(headers):
+                break
+            rows.append(cells)
+            cursor += 1
+        if rows:
+            from .reference_quality import visible_markdown_links
+            table_index += 1
+            visible_headers = [visible_markdown_links(value).strip() for value in headers]
+            for column_index in range(len(headers)):
+                column = [visible_markdown_links(row[column_index]).strip() for row in rows]
+                if all(column):
+                    surfaces.append({
+                        "text": "\n".join(visible_headers + column),
+                        "table_index": table_index,
+                        "column_index": column_index,
+                    })
+        index = max(index + 1, cursor)
+    return surfaces
+
+
 def parse_table_records(content, visible, contract):
     columns, scope = contract['table_columns'], contract['table_scope']
     names = [c['name'] for c in columns]
@@ -184,7 +338,8 @@ def parse_table_records(content, visible, contract):
         visible = _without_example_fences(visible)
     explicit_html = bool(re.match(document_pattern, content, re.I))
     root = None
-    if re.search(r'<(?:html|body|main|div|table|section|article|ul|ol)\b', content, re.I):
+    if (re.search(r'<(?:html|body|main|div|section|article|ul|ol)\b', content, re.I)
+            or _contains_rendered_html_table(content)):
         from .dynamic_lists import _scoped_html
         soup = _scoped_html(content)
         root = soup
@@ -227,7 +382,13 @@ def parse_table_records(content, visible, contract):
     if root is None:
         # Inline layout breaks do not create new Markdown rows/cells. Preserve
         # a space so split numeric tokens cannot become a different valid value.
-        visible = re.sub(r'<br\s*/?>', ' ', visible, flags=re.I)
+        lines = table_text_surface(visible).splitlines()
+        for i in range(len(lines) - 1):
+            cells = _pipe_cells(lines[i])
+            if ('|' in lines[i] and len(cells) == len(_pipe_cells(lines[i + 1]))
+                    and all(re.fullmatch(r'\s*:?-{3,}:?\s*', c) for c in _pipe_cells(lines[i + 1]))):
+                lines[i] = '| ' + ' | '.join(_table_header_labels(cells)) + ' |'
+        visible = re.sub(r'<br\s*/?>', ' ', '\n'.join(lines), flags=re.I)
         # Only source-verified, case-declared auxiliary text is removed.
         # This also normalizes headers before locating the target table.
         for pattern in scope.get('plain_text_ignored_patterns', []):
@@ -272,7 +433,7 @@ def capture(match):
         for i in range(len(lines) - 1):
             if i in occupied or '|' not in lines[i]:
                 continue
-            labels = [s.strip().casefold() for s in _pipe_cells(lines[i])]
+            labels = [s.casefold() for s in _table_header_labels(_pipe_cells(lines[i]))]
             ignored = {v.casefold() for v in scope.get('ignored_column_labels', [])}
             selected = [j for j, label in enumerate(labels) if label not in ignored]
             headings = [aliases.get(labels[j]) for j in selected]
@@ -285,7 +446,10 @@ def capture(match):
             while j < len(lines) and '|' in lines[j]:
                 values = [v.strip() for v in _pipe_cells(lines[j])]
                 if len(values) == len(labels):
-                    candidates.append(dict(zip(headings, (values[j] for j in selected))))
+                    candidates.append(dict(zip(
+                        headings,
+                        (_visible_markdown_scalar(values[j]) for j in selected),
+                    )))
                 occupied.add(j); j += 1
             table_count += 1
             if table_count == scope.get('markdown_table_limit'):
@@ -309,5 +473,23 @@ def capture(match):
 
 
 def _pipe_cells(line):
-    # Remove only the table's outer delimiters; adjacent pipes are empty cells.
-    return line.strip().removeprefix('|').removesuffix('|').split('|')
+    """Split real delimiters, preserving escaped pipes and empty owned cells."""
+    line = line.strip()
+    cells = ['']
+    index = 0
+    while index < len(line):
+        char = line[index]
+        if char == '\\' and index + 1 < len(line) and line[index + 1] in {'|', '\\'}:
+            cells[-1] += line[index + 1]
+            index += 2
+            continue
+        if char == '|':
+            cells.append('')
+        else:
+            cells[-1] += char
+        index += 1
+    if line.startswith('|'):
+        cells.pop(0)
+    if cells and cells[-1] == '' and line.endswith('|'):
+        cells.pop()
+    return cells
diff --git a/harness/web_fetch/task_outputs.py b/harness/web_fetch/task_outputs.py
new file mode 100644
index 000000000..b419a1e6d
--- /dev/null
+++ b/harness/web_fetch/task_outputs.py
@@ -0,0 +1,345 @@
+"""Shared, answer-free projections of already-rendered browser content.
+
+Resource and metadata projections only read already-loaded content. The document
+projection reads text already loaded in a browser viewer or page; it never
+downloads document bytes for external conversion.
+"""
+
+RESOURCE_PAGE_EXPRESSION = r"""
+(() => {
+  const urls = new Set();
+  const add = (value, base = location.href) => {
+    const raw = String(value || '').trim();
+    if (!raw || /^(?:data|blob|javascript|mailto):/i.test(raw)) return;
+    try { urls.add(new URL(raw, base).href); } catch {}
+  };
+  const addSrcset = (value, base) => {
+    // HTML srcset URLs end at whitespace; commas inside a URL are literal.
+    // Trailing commas delimit candidates without descriptors.
+    const text = String(value || '');
+    let cursor = 0;
+    while (cursor < text.length) {
+      while (cursor < text.length && /[\s,]/.test(text[cursor])) cursor++;
+      const start = cursor;
+      while (cursor < text.length && !/\s/.test(text[cursor])) cursor++;
+      const token = text.slice(start, cursor);
+      add(token.replace(/,+$/, ''), base);
+      if (token.endsWith(',')) continue;
+      while (cursor < text.length && text[cursor] !== ',') cursor++;
+      cursor++;
+    }
+  };
+
+  // Enumerate the top document and bounded, already-loaded same-origin frame
+  // documents.  This is answer-free: it follows the page's own document
+  // hierarchy and never receives an expected URL or case-specific selector.
+  const roots = [document];
+  for (let cursor = 0; cursor < roots.length && roots.length < 16; cursor++) {
+    for (const frame of roots[cursor].querySelectorAll('iframe,frame')) {
+      try {
+        if (frame.contentDocument && !roots.includes(frame.contentDocument)) {
+          roots.push(frame.contentDocument);
+          if (roots.length >= 16) break;
+        }
+      } catch {}
+    }
+  }
+  for (const root of roots) {
+    for (const node of root.querySelectorAll(__RESOURCE_SELECTOR__)) {
+      for (const name of ['src', 'href', 'data', 'poster', 'srcset']) {
+        const value = node.getAttribute(name);
+        if (__VIDEO_TASK__ && name === 'href') {
+          let path;
+          try { path = new URL(value, location.href).pathname.toLowerCase(); } catch { continue; }
+          const media = /\.(?:mp4|webm|mov|m4v|mp3|wav|ogg)(?:\.zip)?$/.test(path);
+          const detail = __DETAIL_LINKS__ && /\/(?:video|videos|watch)(?:\/|$)/.test(path);
+          if (!media && !detail) continue;
+        }
+        const base = node.baseURI || root.baseURI || location.href;
+        if (name === 'srcset') addSrcset(value, base);
+        else add(value, base);
+      }
+    }
+  }
+  return JSON.stringify({links: [...urls]});
+})()
+"""
+
+
+def resource_detail_links(case):
+    """Read only the public resource kind; expected URLs never reach the browser."""
+    return case.track == 'video' and any(item.get('kind') == 'video-link' for item in getattr(case, 'expected_resources', []))
+
+
+def resource_expression(track, detail_links=False):
+    """Select resource element types from the declared task, never its answers."""
+    import json
+    selectors = {'image':'img,picture source',
+                 'video':'video,video source,audio,audio source,iframe,a[href]'}
+    if track not in selectors:
+        raise ValueError('Unsupported resource task family')
+    selector = 'a[href]' if track == 'video' and detail_links else selectors[track]
+    return (RESOURCE_PAGE_EXPRESSION.replace('__RESOURCE_SELECTOR__', json.dumps(selector))
+            .replace('__VIDEO_TASK__', 'true' if track == 'video' else 'false')
+            .replace('__DETAIL_LINKS__', 'true' if detail_links else 'false'))
+
+MEDIA_METADATA_EXPRESSION = r"""
+(() => {
+  const values = [];
+  const add = value => {
+    const text = String(value || '').trim();
+    if (text && !values.includes(text)) values.push(text);
+  };
+  add(document.title);
+  add(document.body?.innerText);
+  for (const node of document.querySelectorAll(
+    'meta[name="author"],meta[property$=":author"],meta[itemprop="author"],'
+    + '[itemprop="author"],[itemprop="creator"],[itemprop="publisher"]'
+  )) {
+    add(node.content);
+    add(node.getAttribute?.('content'));
+    add(node.innerText);
+    for (const name of node.querySelectorAll?.('[itemprop="name"]') || []) {
+      add(name.content);
+      add(name.getAttribute?.('content'));
+      add(name.innerText);
+    }
+  }
+  let visited = 0;
+  const visit = (value, depth = 0) => {
+    if (++visited > 2048 || depth > 6 || value == null) return;
+    if (Array.isArray(value)) {
+      for (const item of value.slice(0, 64)) visit(item, depth + 1);
+      return;
+    }
+    if (typeof value !== 'object') return;
+    for (const [key, item] of Object.entries(value).slice(0, 128)) {
+      if (/^(?:author|creator|publisher)$/i.test(key)) {
+        if (typeof item === 'string') add(item);
+        else if (item && typeof item === 'object') add(item.name);
+      }
+      visit(item, depth + 1);
+    }
+  };
+  for (const script of [...document.querySelectorAll('script[type="application/ld+json"]')]
+    .slice(0, 16)) {
+    try { visit(JSON.parse(script.textContent)); } catch {}
+  }
+  return values.join('\n\n');
+})()
+"""
+
+
+DOCUMENT_PAGE_EXPRESSION = r"""
+(async () => {
+  const app = globalThis.PDFViewerApplication;
+  if (app?.pdfDocument) {
+    const pdf = app.pdfDocument;
+    if (pdf) {
+      const pages = [];
+      for (let number = 1; number <= pdf.numPages; number++) {
+        const page = await pdf.getPage(number), text = await page.getTextContent();
+        pages.push(text.items.map(item => item.str).join(' '));
+      }
+      return JSON.stringify({
+        kind: 'text', source: new URL(app.url, location.href).href,
+        text: pages.join('\n\n')
+      });
+    }
+  }
+  return JSON.stringify({kind: 'page_text', text: document.body?.innerText || ''});
+})()
+"""
+
+DOCUMENT_PAGE_READY = r"""
+() => {
+  if (globalThis.PDFViewerApplication) return !!globalThis.PDFViewerApplication.pdfDocument;
+  return !!document.querySelector('embed[src],iframe[src],object[data],a[href*=".pdf"]')
+    || !!document.body?.innerText?.trim();
+}
+"""
+
+
+
+def require_native_task_routes(cases, records):
+    """Reject substitutions and stale task adapters before report publication."""
+    import hashlib
+    from types import SimpleNamespace
+    from .providers.headless import output_mode_for_case
+    from .retrieval_hints import native_contract_for_case
+
+    inventory = {case['id']: SimpleNamespace(id=case['id'], url=case['url'], track=case.get('track','web'), task_kind=case.get('task_kind','body'), retrieval_hints=case.get('retrieval_hints',{}), source_benchmark=case.get('source_benchmark',{}), expected_resources=[{'kind':r.get('kind')} for r in case.get('expected_resources',[])]) for case in cases}
+    expressions = {'resource':RESOURCE_PAGE_EXPRESSION, 'media_metadata':MEDIA_METADATA_EXPRESSION,
+                   'document_page':DOCUMENT_PAGE_EXPRESSION}
+    failures = []
+    for row in records:
+        from .methods import native_browser_engine
+        provider = (
+            'moli'
+            if row.get('provider_type') == 'moli_webfetch'
+            else native_browser_engine(row['provider'])
+        )
+        if provider not in {'moli','lightpanda','obscura','chromium','kitesurf'}:
+            failures.append(row['provider'] + '/' + row['case_id'])
+            continue
+        if row.get('error_type') == 'configuration':
+            failures.append(row['provider'] + '/' + row['case_id'])
+            continue
+        case = inventory[row['case_id']]
+        mode = output_mode_for_case(provider, 'headless_markdown', case)
+        native_contract = native_contract_for_case(case)
+        meta = row.get('provider_metadata') or {}
+        native_dynamic_task = (
+            provider == 'moli'
+            and case.track == 'dynamic'
+            and case.retrieval_hints == {'version': 3, 'mode': 'native'}
+        )
+        # The runner may expire before a worker returns metadata. Its retained
+        # call and cohort receipts still bind the invocation and deadline.
+        runner_fields = {
+            'call_log', 'configured_min_interval_seconds', 'client_throttle_wait_ms',
+            # A declared retry records the completed physical calls but cannot
+            # add route metadata when every call expires in the runner.
+            'retry',
+        }
+        if row.get('ok') is False and row.get('error_type') in {'timeout','network'} and meta.get('call_log') and not (set(meta) - runner_fields):
+            continue
+        valid = True
+        if mode == 'markdown':
+            # Page-body tasks have one formal deliverable: Markdown.  Every
+            # non-Chromium method must obtain it from its browser's native
+            # Markdown route; Chromium is the sole declared shared-converter
+            # exception.  Older Moli evidence did not spell out the two
+            # redundant metadata fields, so its native route/output pair is
+            # also the backward-compatible proof of this contract.
+            standard_body = case.track not in {'document', 'image', 'video'}
+            if standard_body:
+                declared_contract = meta.get('output_contract')
+                if declared_contract not in {None, 'markdown'}:
+                    valid = False
+            if provider == 'moli':
+                native = (meta.get('route') == 'ordinary_markdown'
+                          and meta.get('output') == 'markdown')
+                if meta.get('route') == 'dynamic_native_markdown':
+                    native = (case.track == 'dynamic' and meta.get('output') == 'markdown'
+                              and meta.get('dump') == 'markdown')
+                valid = valid and native and meta.get('extractor') in {None, 'moli_native_markdown'}
+                if native_dynamic_task:
+                    wait = meta.get('wait') or {}
+                    layout = wait.get('layout') or {}
+                    valid = valid and (
+                        meta.get('layout') is True
+                        and meta.get('with_frames') is True
+                        and meta.get('wait_until') == 'domstable'
+                        and wait.get('wait_until') == 'domstable'
+                        and wait.get('scope') == 'dynamic_task_family'
+                        and wait.get('strategy') == 'native_task_family_completion'
+                        and layout == {
+                            'requested': True,
+                            'support': 'native',
+                            'interface': '--layout',
+                            'scope': 'dynamic_task_family',
+                        }
+                        and not set(wait).intersection({
+                            'selector', 'frame_selector', 'minimum_count',
+                            'minimum_text_fragments', 'output_extraction',
+                        })
+                    )
+            elif provider == 'chromium':
+                valid = valid and (meta.get('extractor') == 'node-html-markdown'
+                                   and (meta.get('extractor_version') == '2.0.0'
+                                        or (row.get('ok') is False and meta.get('extractor_version') is None)))
+            elif provider in {'lightpanda','obscura'}:
+                valid = valid and meta.get('extractor') == provider+'_native_markdown'
+            elif provider == 'kitesurf':
+                routes = {'browser_rendering_markdown'}
+                if case.track == 'dynamic':
+                    routes.add('browser_rendering_markdown_dynamic')
+                valid = valid and (meta.get('route') in routes
+                                   and meta.get('extractor') == 'cloudflare_native_markdown'
+                                   and meta.get('browser') == 'kitesurf')
+        elif mode in {'document','file'}:
+            if provider == 'moli':
+                valid = (meta.get('route') == ('raw_document' if mode == 'document' else 'raw_file')
+                         and meta.get('extractor') == 'moli_cdp_response' + ('+document_text' if mode == 'document' else ''))
+            else:
+                prefixes = {'lightpanda':'lightpanda_cdp_response', 'obscura':'obscura_original_response',
+                            'chromium':'browser_native_response_or_download', 'kitesurf':'kitesurf_cdp_response'}
+                valid = meta.get('extractor') == prefixes[provider] + ('+document_text' if mode == 'document' else '')
+            valid = valid and meta.get('route') != 'workers_ai_tomarkdown'
+        elif mode == 'resource' and provider == 'moli':
+            valid = (
+                meta.get('route') == 'resource_native_markdown'
+                and meta.get('output') == 'native_markdown_resource_urls'
+                and meta.get('output_contract') == 'native_markdown_resource_urls'
+                and meta.get('dump') == 'markdown'
+                and meta.get('extractor') == 'moli_native_markdown'
+                and not meta.get('network_trace_requested')
+            )
+            valid = valid and not meta.get('output_projection_sha256')
+        elif mode in expressions:
+            expression = resource_expression(case.track, resource_detail_links(case)) if mode == 'resource' else expressions[mode]
+            valid = meta.get('output_projection_sha256') == hashlib.sha256(expression.encode()).hexdigest()
+            if provider == 'kitesurf':
+                valid = (valid and meta.get('browser') == 'kitesurf'
+                         and meta.get('endpoint_route') == '/browser-run/devtools/browser?browser=kitesurf')
+        if case.track == 'document':
+            valid = valid and meta.get('document_extractor') in {None, 'pdfjs_runtime', 'rendered_page_text'}
+            valid = valid and '+document_text' not in str(meta.get('extractor', ''))
+        frame_contract = (
+            native_dynamic_task
+            or (provider == 'moli' and case.task_kind == 'resource')
+            or bool(native_contract and native_contract.include_subdocuments)
+        )
+        frame_metadata = (
+            (meta.get('wait') or {}).get('subdocuments')
+            if provider == 'moli'
+            else meta.get('subdocuments')
+        )
+        # A family-wide provider option may request native child documents
+        # without adding a case-specific completion/selector contract.
+        optional_native_family_frames = (
+            not frame_contract
+            and provider == 'lightpanda' and case.track == 'dynamic'
+            and mode == 'markdown' and frame_metadata is not None
+        )
+        if optional_native_family_frames:
+            valid = valid and meta.get('output_contract') == 'markdown'
+        if frame_contract or optional_native_family_frames:
+            expected = {
+                'moli': ('native', '--with-frames'),
+                'lightpanda': (
+                    'native_markdown_omits_child_document',
+                    '--load-resources iframe + --with-frames',
+                ),
+            }.get(provider, ('unsupported', None))
+            expected_frame_metadata = {
+                'requested': True,
+                'support': expected[0],
+                'interface': expected[1],
+                'harness_content_assembly': False,
+            }
+            if isinstance(frame_metadata, dict):
+                extra = set(frame_metadata) - set(expected_frame_metadata)
+                valid = valid and not extra - {'scope'}
+                valid = valid and all(
+                    frame_metadata.get(key) == value
+                    for key, value in expected_frame_metadata.items()
+                )
+                if 'scope' in frame_metadata:
+                    expected_scope = (
+                        'dynamic_task_family'
+                        if native_dynamic_task or optional_native_family_frames
+                        else 'resource_task_family'
+                        if case.task_kind == 'resource'
+                        else 'declared_native_contract'
+                    )
+                    valid = valid and frame_metadata['scope'] == expected_scope
+            else:
+                valid = False
+        elif frame_metadata is not None:
+            valid = False
+        if not valid:
+            failures.append(row['provider'] + '/' + case.id)
+    if failures:
+        raise ValueError('Native task route contract violated: ' + ', '.join(failures))
diff --git a/harness/web_fetch/templates/interpretation-headless.css b/harness/web_fetch/templates/interpretation-headless.css
new file mode 100644
index 000000000..c0b9fb5d2
--- /dev/null
+++ b/harness/web_fetch/templates/interpretation-headless.css
@@ -0,0 +1,326 @@
+.m-article{--paper:#fff;--surface:#fff;--surface-2:#f1f4f3;--ink:#243940;--muted:#64757a;--line:#d8e1df;--navy:#123e4a;--blue:#14657a;--blue-soft:#edf5f7;--green:#25714f;--rust:#a74e31;--reading:850px;box-sizing:border-box;max-width:1376px;margin:24px auto 64px;padding:0 64px 40px;background:var(--paper);color:var(--ink);font:18px/1.85 "PingFang SC","Microsoft YaHei",system-ui,sans-serif;text-align:left;color-scheme:light}
+.m-article *{box-sizing:border-box;min-width:0}
+.m-article h1,
+.m-article h2,
+.m-article h3,
+.m-article h4,
+.m-article p,
+.m-article figure{margin:0}
+.m-article a{color:var(--blue);text-underline-offset:4px;overflow-wrap:anywhere}
+.m-article :focus-visible{outline:3px solid var(--blue);outline-offset:4px}
+.m-article p+p{margin-top:18px}
+.m-article img{display:block;max-width:100%;height:auto}
+.m-article code,
+.m-article pre{font-family:ui-monospace,SFMono-Regular,Consolas,monospace}
+.m-article h1{font-size:clamp(44px,5.6vw,80px);line-height:1.14;letter-spacing:-.045em;font-weight:780;color:var(--navy);margin:26px 0}
+.m-article h2{font-size:clamp(30px,3.5vw,46px);line-height:1.3;letter-spacing:-.025em;color:var(--navy);margin-bottom:28px;text-align:left;max-width:1120px}
+.m-article h3{font-size:26px;line-height:1.45;color:var(--navy);margin:30px 0 18px}
+.m-article h4{font-size:19px;line-height:1.5;color:var(--navy);margin-bottom:12px}
+.m-article .m-hero{padding:46px 0 0;border-top:6px solid var(--navy)}
+.m-article .m-chips{display:flex;gap:12px;flex-wrap:wrap;color:var(--blue);font-size:13px;font-weight:650}
+.m-article .m-chips span+span{border-left:1px solid var(--line);padding-left:12px}
+.m-article .m-deck{font-size:24px;line-height:1.75;max-width:1080px}
+.m-article .m-ledger{display:grid;grid-template-columns:1.15fr 1fr 1fr;border-block:1px solid var(--line);margin:34px 0 24px}
+.m-article .m-ledger>div{padding:22px 22px 22px 0}
+.m-article .m-ledger>div+div{padding-left:24px;border-left:1px solid var(--line)}
+.m-article .m-ledger span{font-size:13px;color:var(--muted)}
+.m-article .m-ledger b{display:block;color:var(--navy);font-size:34px;line-height:1.3;margin:9px 0 12px}
+.m-article .m-ledger p{font-size:13px;line-height:1.75;color:var(--muted)}
+.m-article .m-report-link{max-width:none;margin:26px 0 30px;display:flex;align-items:baseline;gap:12px 24px;flex-wrap:wrap}
+.m-article .m-report-link a{font-size:17px;font-weight:650}
+.m-article .m-report-link span{font-size:13px;color:var(--muted)}
+.m-article .m-toc{display:flex;overflow:auto;gap:24px;border-bottom:1px solid var(--line)}
+.m-article .m-toc a{flex-shrink:0;text-decoration:none;color:var(--muted);font-size:14px;padding:16px 0}
+.m-article .m-section{padding:54px 0;border-bottom:1px solid var(--line);scroll-margin-top:24px}
+.m-article .m-section>p,
+.m-article .m-section>h3{max-width:var(--reading);margin-left:0;margin-right:auto}
+.m-article .m-section>p+figure{margin-top:26px}
+.m-article .m-verdict-grid{display:grid;grid-template-columns:1fr 1fr;gap:28px;margin:26px 0}
+.m-article .m-verdict-grid>div{padding:20px 0;border-top:3px solid var(--line)}
+.m-article .m-verdict-grid>div:first-child{border-color:var(--blue)}
+.m-article .m-verdict-grid h3{margin:0 0 12px;font-size:21px}
+.m-article .m-verdict-grid p{font-size:16px}
+.m-article .m-route{display:flex;align-items:center;flex-wrap:wrap;gap:12px;margin-top:20px;font-size:14px}
+.m-article .m-route span{border-bottom:2px solid var(--line);padding-bottom:5px}
+.m-article .m-route i{font-style:normal;color:var(--muted)}
+.m-article .m-figure{margin:28px 0!important;padding:24px;border:1px solid var(--line);border-top:3px solid var(--blue)}
+.m-article .m-figure h3{font-size:20px;margin:0 0 24px}
+.m-article figcaption,
+.m-article caption{font-size:13px;line-height:1.75;color:var(--muted);text-align:left;margin-top:20px}
+.m-article .m-bars{display:grid;gap:20px}
+.m-article .m-bar-row{display:grid;grid-template-columns:135px 1fr 100px;gap:16px;align-items:center;font-size:15px}
+.m-article .m-bar-track,
+.m-article .m-speed-track{background:var(--surface-2);height:16px}
+.m-article .m-bar-track i,
+.m-article .m-speed-track i{display:block;height:100%;background:#9daeb0}
+.m-article .m-bar-track i.primary{background:var(--blue)}
+.m-article .m-bar-row b{text-align:right;font-variant-numeric:tabular-nums}
+.m-article .m-split{display:grid;grid-template-columns:1fr 1fr;gap:40px}
+.m-article .m-split-panel>span{font-size:15px;font-weight:650}
+.m-article .m-duel{display:flex;align-items:center;gap:28px;margin-top:20px}
+.m-article .m-duel b{font-size:44px;line-height:1.3;color:var(--navy)}
+.m-article .m-duel small{display:block;font-size:13px;font-weight:400}
+.m-article .m-duel em{font-style:normal;color:var(--muted);font-size:26px}
+.m-article .m-split-panel p{font-size:14px;color:var(--blue);margin-top:18px}
+.m-article .m-speed-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:32px}
+.m-article .m-speed-column h4{font-size:19px;margin:0 0 7px}
+.m-article .m-speed-column>p{font-size:12px;color:var(--muted);min-height:45px;line-height:1.7}
+.m-article .m-speed-row{display:grid;grid-template-columns:1fr auto;gap:5px 12px;margin-top:15px;font-size:13px}
+.m-article .m-speed-row b{font-variant-numeric:tabular-nums}
+.m-article .m-speed-track{grid-column:1/-1;height:9px}
+.m-article .m-speed-track i.best{background:var(--green)}
+.m-article .m-details{margin:26px 0 0;border-block:1px solid var(--line);padding:16px 0;font-size:15px}
+.m-article .m-details summary{cursor:pointer;font-weight:650;color:var(--blue);min-height:32px}
+.m-article .m-details>p{max-width:var(--reading);margin:18px 0 0}
+.m-article .m-rule-strip{display:flex;gap:12px 28px;flex-wrap:wrap;margin:24px 0;color:var(--muted);font-size:14px}
+.m-article .m-rule-strip b{color:var(--ink)}
+.m-article .case-scroll-hint{display:none}
+.m-article .case-excerpt mark{background:#fff0b8;color:#183f4a;padding:1px 0}
+.m-article .case-workbench{position:relative;margin:24px 0 0;border:1px solid var(--line);background:var(--surface)}
+.m-article .case-choice{position:absolute;left:14px;top:14px;width:1px;height:1px;opacity:0}
+.m-article .case-tab-nav{display:flex;overflow:auto;background:var(--surface-2);border-bottom:1px solid var(--line)}
+.m-article .case-tab-nav label{padding:14px 20px;min-height:52px;flex:1 0 auto;font-size:15px;font-weight:650;cursor:pointer;text-align:center;border-bottom:3px solid transparent;color:var(--muted)}
+.m-article #article-case-1:checked~.case-tab-nav label[for=article-case-1],
+.m-article #article-case-2:checked~.case-tab-nav label[for=article-case-2],
+.m-article #article-case-3:checked~.case-tab-nav label[for=article-case-3],
+.m-article #article-case-4:checked~.case-tab-nav label[for=article-case-4],
+.m-article #article-case-5:checked~.case-tab-nav label[for=article-case-5],
+.m-article #article-case-6:checked~.case-tab-nav label[for=article-case-6],
+.m-article #article-case-7:checked~.case-tab-nav label[for=article-case-7]{background:var(--surface);border-color:var(--blue);color:var(--blue)}
+.m-article #article-case-1:focus-visible~.case-tab-nav label[for=article-case-1],
+.m-article #article-case-2:focus-visible~.case-tab-nav label[for=article-case-2],
+.m-article #article-case-3:focus-visible~.case-tab-nav label[for=article-case-3],
+.m-article #article-case-4:focus-visible~.case-tab-nav label[for=article-case-4],
+.m-article #article-case-5:focus-visible~.case-tab-nav label[for=article-case-5],
+.m-article #article-case-6:focus-visible~.case-tab-nav label[for=article-case-6],
+.m-article #article-case-7:focus-visible~.case-tab-nav label[for=article-case-7]{outline:3px solid var(--blue);outline-offset:-5px}
+.m-article .case-panel{display:none;padding:26px}
+.m-article .case-panel h3{margin:0 0 10px;font-size:25px}
+.m-article .case-input{font-size:13px;overflow-wrap:anywhere;color:var(--muted)}
+.m-article #article-case-1:checked~.case-panels #article-panel-1,
+.m-article #article-case-2:checked~.case-panels #article-panel-2,
+.m-article #article-case-3:checked~.case-panels #article-panel-3,
+.m-article #article-case-4:checked~.case-panels #article-panel-4,
+.m-article #article-case-5:checked~.case-panels #article-panel-5,
+.m-article #article-case-6:checked~.case-panels #article-panel-6,
+.m-article #article-case-7:checked~.case-panels #article-panel-7{display:block}
+.m-article .case-compare{display:grid;grid-template-columns:1fr 1fr;gap:0;margin:24px 0;border:1px solid var(--line)}
+.m-article .case-reference,
+.m-article .case-actual{padding:20px;background:var(--surface-2)}
+.m-article .case-actual{background:var(--blue-soft);border-left:1px solid var(--line)}
+.m-article .case-compare h4{font-size:17px;margin:0 0 16px}
+.m-article .case-compare p{font-size:12px;color:var(--muted);margin:12px 0 8px}
+.m-article .case-excerpt{white-space:pre-wrap;overflow-wrap:anywhere;font-size:13px;line-height:1.8;margin:0;background:transparent;border:0;padding:0;color:var(--ink);max-height:350px;overflow:auto}
+.m-article .case-counterexample{border-top:1px solid var(--line);margin-top:20px;padding-top:4px}
+.m-article .case-file-preview{max-width:130px!important;max-height:150px;object-fit:contain;margin:12px 0}
+.m-article .case-contract p{font-size:13px;color:var(--ink);line-height:1.7;margin:8px 0}
+.m-article .case-conclusion{font-size:14px;line-height:1.8;margin-top:18px!important}
+.m-article .case-evidence{font-size:13px;margin-top:14px!important}
+.m-article .case-check-wrap,
+.m-article .table-wrap,
+.m-article .editorial-table{overflow-x:auto;max-width:100%;margin:24px 0}
+.m-article table{width:100%;border-collapse:collapse;font-size:14px;line-height:1.75;text-align:left}
+.m-article th,
+.m-article td{padding:12px;border-bottom:1px solid var(--line);vertical-align:top;white-space:normal;overflow-wrap:anywhere}
+.m-article thead{background:var(--surface-2);font-size:12px;color:var(--muted)}
+.m-article th{font-weight:650;text-align:left}
+.m-article .case-check-name{font-weight:650}
+.m-article .case-checks{table-layout:fixed}
+.m-article .case-checks th:first-child{width:6%}
+.m-article .case-checks th:nth-child(2){width:16%}
+.m-article .case-checks th:last-child{width:12%}
+.m-article .case-checks td:last-child{color:var(--muted);font-weight:650}
+.m-article caption{caption-side:bottom;padding:13px 0}
+.m-article .editorial-table-hint{font-size:12px;color:var(--muted);margin-top:20px!important}
+.m-article .m-webfail{display:grid;grid-template-columns:1fr 1fr;gap:32px;margin:26px 0}
+.m-article .m-webfail>div{border-top:3px solid var(--line);padding-top:18px}
+.m-article .m-webfail p{font-size:15px}
+.m-article .m-delay{display:flex;gap:10px;align-items:center;margin:20px 0;font-size:14px}
+.m-article .m-delay span{border-bottom:2px solid var(--blue);padding:10px 0}
+.m-article .m-delay i{font-style:normal}
+.m-article .m-frame-map{border:1px solid var(--line);padding:10px;margin:20px 0;font-size:14px}
+.m-article .m-frame-map>div{border:1px dashed var(--blue);padding:8px;margin-top:8px;color:var(--blue)}
+.m-article .m-end{padding:30px 0 0;font-size:12px;color:var(--muted)}
+.m-article + .m-downloads{max-width:1376px;margin:24px auto;text-align:center;font-size:14px}
+@media(max-width:1000px){
+.m-article{padding:0 32px 36px;margin:0}
+.m-article .m-ledger b{font-size:27px}
+.m-article .m-deck{font-size:21px}
+.m-article .m-speed-grid{gap:20px}
+.m-article .case-panel{padding:20px}
+}
+@media(max-width:700px){
+.m-article .case-scroll-hint{display:block;font-size:12px;color:var(--muted);margin:14px 0 0}
+.m-article{padding:0 20px 28px;font-size:16px}
+.m-article .m-hero{padding-top:28px}
+.m-article h1{font-size:38px;line-height:1.2}
+.m-article h1 br{display:none}
+.m-article h2{font-size:29px}
+.m-article h3{font-size:22px}
+.m-article .m-deck{font-size:18px}
+.m-article .m-chips{font-size:11px;gap:8px}
+.m-article .m-ledger{grid-template-columns:1fr;margin-top:24px}
+.m-article .m-ledger>div,
+.m-article .m-ledger>div+div{padding:17px 0;border-left:0}
+.m-article .m-ledger>div+div{border-top:1px solid var(--line)}
+.m-article .m-ledger b{font-size:30px;margin:5px 0}
+.m-article .m-section{padding:36px 0}
+.m-article .m-toc{gap:20px}
+.m-article .m-verdict-grid,
+.m-article .m-webfail,
+.m-article .m-split{grid-template-columns:1fr;gap:20px}
+.m-article .m-verdict-grid>div{padding-bottom:8px}
+.m-article .m-figure{padding:16px;margin:24px 0!important}
+.m-article .m-figure h3{font-size:18px}
+.m-article .m-bar-row{grid-template-columns:92px 1fr 74px;gap:8px;font-size:12px}
+.m-article .m-bar-track{height:12px}
+.m-article .m-speed-grid{grid-template-columns:1fr;gap:30px}
+.m-article .m-speed-column>p{min-height:0}
+.m-article .m-speed-column+.m-speed-column{border-top:1px solid var(--line);padding-top:20px}
+.m-article .m-speed-row{grid-template-columns:110px 1fr 65px;align-items:center;font-size:13px}
+.m-article .m-speed-row b{grid-column:3;grid-row:1;text-align:right}
+.m-article .m-speed-track{grid-column:2;grid-row:1}
+.m-article .case-panel{padding:16px}
+.m-article .case-panel h3{font-size:21px}
+.m-article .case-tab-nav label{font-size:13px;padding:13px 16px}
+.m-article .case-compare{grid-template-columns:1fr}
+.m-article .case-reference,
+.m-article .case-actual{padding:15px}
+.m-article .case-actual{border-left:0;border-top:1px solid var(--line)}
+.m-article .case-excerpt{font-size:12px;max-height:280px}
+.m-article table{font-size:12px;min-width:570px}
+.m-article th,
+.m-article td{padding:10px}
+.m-article .m-rule-strip{font-size:12px;gap:8px 14px}
+.m-article .m-rule-strip b{flex-basis:100%}
+.m-article .m-report-link span{display:block}
+.m-article .m-details{font-size:14px}
+.m-article figcaption{font-size:12px}
+.m-article .m-duel b{font-size:38px}
+}
+@media(prefers-color-scheme:dark){
+.m-article{--paper:#142126;--surface:#142126;--surface-2:#243238;--ink:#e0e8e8;--muted:#a4b8bc;--line:#3b4c50;--navy:#b1dbe6;--blue:#83c9dd;--blue-soft:#213c44;--green:#8fd3a9;--rust:#e8a18a;color-scheme:dark}
+}
+[data-theme="dark"] .m-article,
+.m-article[data-theme="dark"]{--paper:#142126;--surface:#142126;--surface-2:#243238;--ink:#e0e8e8;--muted:#a4b8bc;--line:#3b4c50;--navy:#b1dbe6;--blue:#83c9dd;--blue-soft:#213c44;--green:#8fd3a9;--rust:#e8a18a;color-scheme:dark}
+[data-theme="light"] .m-article,
+.m-article[data-theme="light"]{--paper:#fff;--surface:#fff;--surface-2:#f1f4f3;--ink:#243940;--muted:#64757a;--line:#d8e1df;--navy:#123e4a;--blue:#14657a;--blue-soft:#edf5f7;--green:#25714f;--rust:#a74e31;color-scheme:light}
+@media print{
+.m-article{--paper:#fff;--surface:#fff;--surface-2:#f1f4f3;--ink:#243940;--muted:#64757a;--line:#d8e1df;--navy:#123e4a;--blue:#14657a;--blue-soft:#edf5f7;--green:#25714f;--rust:#a74e31;max-width:none;margin:0;padding:0;font-size:10pt;background:#fff!important;print-color-adjust:exact;-webkit-print-color-adjust:exact}
+.m-article h1{font-size:30pt}
+.m-article h2{font-size:21pt;break-after:avoid}
+.m-article h3{font-size:15pt;break-after:avoid}
+.m-article .m-deck{font-size:13pt}
+.m-article .m-hero{padding-top:12px}
+.m-article .m-ledger{grid-template-columns:repeat(3,1fr)}
+.m-article .m-ledger b{font-size:19pt}
+.m-article .m-ledger p{font-size:9pt}
+.m-article .m-section{padding:25px 0}
+.m-article .m-toc,
+.m-article .case-tab-nav,
+.m-article .case-choice,
+.m-article + .m-downloads{display:none!important}
+.m-article .case-panel{display:block!important;padding:20px 0;break-before:auto}
+.m-article .case-panel+.case-panel{border-top:2px solid var(--line)}
+.m-article .case-workbench{border:0}
+.m-article .case-excerpt{max-height:none;overflow:visible;font-size:9pt}
+.m-article .case-compare{break-inside:avoid}
+.m-article .case-check-wrap,
+.m-article .table-wrap,
+.m-article .editorial-table{overflow:visible}
+.m-article table{min-width:0;font-size:8pt}
+.m-article table tr{break-inside:avoid}
+.m-article table thead{display:table-header-group}
+.m-article caption{caption-side:top}
+.m-article .m-figure{break-inside:avoid;padding:16px}
+.m-article .m-speed-grid{grid-template-columns:repeat(3,1fr)}
+.m-article .m-details>*{display:block!important}
+.m-article .m-details{font-size:10pt}
+.m-article p{orphans:3;widows:3}
+.m-article .m-end{font-size:8pt}
+}
+.m-article .m-flow-grid{display:grid;grid-template-columns:1fr 1fr;gap:24px 36px;margin:28px 0}
+.m-article .m-flow-grid>div{border-top:2px solid var(--line);padding:18px 0}
+.m-article .m-flow-grid h3{margin:0 0 12px;font-size:22px}
+.m-article .m-flow-grid p{font-size:15px;margin-top:12px}
+.m-article .m-browser-table table{table-layout:fixed}
+.m-article .m-browser-table th:first-child{width:5%}
+.m-article .m-browser-table th:nth-child(2){width:21%}
+.m-article .m-browser-table th:nth-child(3){width:25%}
+.m-article .m-browser-table th:nth-child(4){width:23%}
+.m-article .m-summary-list,
+.m-article .m-next-list,
+.m-article .m-delivery-legend{max-width:var(--reading);padding-left:1.5em;margin:0}
+.m-article .m-summary-list li,
+.m-article .m-next-list li,
+.m-article .m-delivery-legend li{padding-left:.3em;margin:0 0 16px}
+.m-article .m-scope-note{font-size:14px;line-height:1.8;color:var(--muted);max-width:1080px}
+.m-article .m-hero .editorial-table{margin:28px 0 16px}
+@media(max-width:700px){
+.m-article .m-flow-grid{grid-template-columns:1fr;gap:12px}
+.m-article .m-flow-grid h3{font-size:22px}
+.m-article .m-browser-table table{min-width:850px}
+.m-article .m-scope-note{font-size:13px}
+}
+@media print{
+.m-article .m-browser-table table{min-width:0}
+.m-article .m-summary-list,
+.m-article .m-next-list,
+.m-article .m-delivery-legend{max-width:none}
+}
+.m-article .m-delivery-legend{display:grid;grid-template-columns:1fr 1fr;gap:0 36px;font-size:15px;margin:20px 0}
+.m-article .m-delivery-legend li{margin-bottom:10px}
+@media(max-width:700px){
+.m-article .m-delivery-legend{grid-template-columns:1fr;font-size:14px}
+}
+.m-article .case-checks td.case-fail{color:var(--rust)}
+.m-article .m-hero table{min-width:760px}
+.m-article .m-hero td,
+.m-article .m-hero th:first-child,
+.m-article .m-browser-table th:first-child{white-space:nowrap}
+.m-article .m-browser-table th:first-child{width:6%}
+@media print{
+.m-article .m-hero table{min-width:0}
+}
+.m-article section{margin:0}
+.m-article .m-hero{background:transparent;color:var(--ink)}
+.m-article .m-toc{flex-wrap:nowrap}
+.m-article .m-toc a{color:var(--muted)}
+.m-article table{min-width:0}
+.m-article table th{position:static;background:var(--surface-2);color:var(--muted);z-index:auto}
+.m-article table tr:hover{background:transparent}
+.m-article .m-details{border-radius:0;border-inline:0;background:transparent}
+.m-article .case-choice{padding:0;border:0;appearance:none}
+.m-article .m-illustration{margin:28px 0}
+.m-article .m-illustration img{width:100%;border:1px solid var(--line)}
+.m-article .m-hero-table{font-variant-numeric:tabular-nums}
+.m-article .m-hero-table table{min-width:760px}
+.m-article .m-loss-bars{display:grid;gap:9px;margin:24px 0}
+.m-article .m-loss-row{display:grid;grid-template-columns:minmax(150px,1.3fr) minmax(60px,2fr) 52px;gap:12px;align-items:center;font-size:14px;line-height:1.5}
+.m-article .m-loss-row b{text-align:right;font-variant-numeric:tabular-nums}
+.m-article .m-loss-track{height:9px;background:var(--surface-2)}
+.m-article .m-loss-track i{display:block;height:100%;background:var(--blue)}
+@media(max-width:700px){
+.m-article .m-loss-row{grid-template-columns:minmax(110px,1.5fr) minmax(35px,1fr) 35px;gap:8px;font-size:12px}
+.m-article .editorial-table table,.m-article .case-checks{min-width:570px}
+}
+@media print{
+.m-article.m-article{--paper:#fff;--surface:#fff;--surface-2:#f1f4f3;--ink:#243940;--muted:#64757a;--line:#d8e1df;--navy:#123e4a;--blue:#14657a;--blue-soft:#edf5f7;--green:#25714f;--rust:#a74e31;color-scheme:light}
+.m-article .case-panel{display:block!important;content-visibility:visible}
+.m-article .case-excerpt{max-height:none;overflow:visible}
+.m-article .m-hero-table table,.m-article .editorial-table table,.m-article .case-checks{min-width:0}
+}
+
+
+
+@media print{.m-article details::details-content{content-visibility:visible!important;display:block!important}}
+
+.m-article .m-content-block > p,.m-article .m-content-block > h3{max-width:var(--reading);margin-left:0;margin-right:auto}
+.m-article .m-content-block > p+p{margin-top:18px}
+.m-article .case-panel .case-input{font-size:13px;line-height:1.7;color:var(--muted);margin-top:12px}
+.m-article .case-panel .case-input code{font-size:inherit}
+
+.m-article .case-panel .case-input code{color:inherit;background:transparent;padding:0;border:0}
+.m-article table th:first-child{white-space:nowrap}
+.m-article .case-checks .good{color:var(--green)}
+.m-article .case-checks .bad{color:var(--rust)}
diff --git a/harness/web_fetch/templates/interpretation-headless.html b/harness/web_fetch/templates/interpretation-headless.html
index fac9c24a2..e46c4f97c 100644
--- a/harness/web_fetch/templates/interpretation-headless.html
+++ b/harness/web_fetch/templates/interpretation-headless.html
@@ -1,25 +1,4 @@
-<style>
-.m-article{--paper:#fff;--surface:#fff;--surface-2:#f1f4f3;--ink:#243940;--muted:#64757a;--line:#d8e1df;--navy:#123e4a;--blue:#14657a;--blue-soft:#edf5f7;--green:#25714f;--rust:#a74e31;--reading:850px;box-sizing:border-box;max-width:1376px;margin:24px auto 64px;padding:0 64px 40px;background:var(--paper);color:var(--ink);font:18px/1.85 "PingFang SC","Microsoft YaHei",system-ui,sans-serif;text-align:left;color-scheme:light}
-.m-article *{box-sizing:border-box;min-width:0}.m-article h1,.m-article h2,.m-article h3,.m-article h4,.m-article p,.m-article figure{margin:0}.m-article a{color:var(--blue);text-underline-offset:4px;overflow-wrap:anywhere}.m-article :focus-visible{outline:3px solid var(--blue);outline-offset:4px}.m-article p+p{margin-top:18px}.m-article img{display:block;max-width:100%;height:auto}.m-article code,.m-article pre{font-family:ui-monospace,SFMono-Regular,Consolas,monospace}.m-article h1{font-size:clamp(44px,5.6vw,80px);line-height:1.14;letter-spacing:-.045em;font-weight:780;color:var(--navy);margin:26px 0}.m-article h2{font-size:clamp(30px,3.5vw,46px);line-height:1.3;letter-spacing:-.025em;color:var(--navy);margin-bottom:28px;text-align:left;max-width:1120px}.m-article h3{font-size:26px;line-height:1.45;color:var(--navy);margin:30px 0 18px}.m-article h4{font-size:19px;line-height:1.5;color:var(--navy);margin-bottom:12px}.m-hero{padding:46px 0 0;border-top:6px solid var(--navy)}.m-chips{display:flex;gap:12px;flex-wrap:wrap;color:var(--blue);font-size:13px;font-weight:650}.m-chips span+span{border-left:1px solid var(--line);padding-left:12px}.m-deck{font-size:24px;line-height:1.75;max-width:1080px}.m-ledger{display:grid;grid-template-columns:1.15fr 1fr 1fr;border-block:1px solid var(--line);margin:34px 0 24px}.m-ledger>div{padding:22px 22px 22px 0}.m-ledger>div+div{padding-left:24px;border-left:1px solid var(--line)}.m-ledger span{font-size:13px;color:var(--muted)}.m-ledger b{display:block;color:var(--navy);font-size:34px;line-height:1.3;margin:9px 0 12px}.m-ledger p{font-size:13px;line-height:1.75;color:var(--muted)}.m-article .m-report-link{max-width:none;margin:26px 0 30px;display:flex;align-items:baseline;gap:12px 24px;flex-wrap:wrap}.m-report-link a{font-size:17px;font-weight:650}.m-report-link span{font-size:13px;color:var(--muted)}.m-toc{display:flex;overflow:auto;gap:24px;border-bottom:1px solid var(--line)}.m-toc a{flex-shrink:0;text-decoration:none;color:var(--muted);font-size:14px;padding:16px 0}.m-section{padding:54px 0;border-bottom:1px solid var(--line);scroll-margin-top:24px}.m-section>p,.m-section>h3{max-width:var(--reading);margin-left:0;margin-right:auto}.m-section>p+figure{margin-top:26px}.m-verdict-grid{display:grid;grid-template-columns:1fr 1fr;gap:28px;margin:26px 0}.m-verdict-grid>div{padding:20px 0;border-top:3px solid var(--line)}.m-verdict-grid>div:first-child{border-color:var(--blue)}.m-verdict-grid h3{margin:0 0 12px;font-size:21px}.m-verdict-grid p{font-size:16px}.m-route{display:flex;align-items:center;flex-wrap:wrap;gap:12px;margin-top:20px;font-size:14px}.m-route span{border-bottom:2px solid var(--line);padding-bottom:5px}.m-route i{font-style:normal;color:var(--muted)}.m-figure{margin:28px 0!important;padding:24px;border:1px solid var(--line);border-top:3px solid var(--blue)}.m-figure h3{font-size:20px;margin:0 0 24px}.m-article figcaption,.m-article caption{font-size:13px;line-height:1.75;color:var(--muted);text-align:left;margin-top:20px}.m-bars{display:grid;gap:20px}.m-bar-row{display:grid;grid-template-columns:135px 1fr 100px;gap:16px;align-items:center;font-size:15px}.m-bar-track,.m-speed-track{background:var(--surface-2);height:16px}.m-bar-track i,.m-speed-track i{display:block;height:100%;background:#9daeb0}.m-bar-track i.primary{background:var(--blue)}.m-bar-row b{text-align:right;font-variant-numeric:tabular-nums}.m-split{display:grid;grid-template-columns:1fr 1fr;gap:40px}.m-split-panel>span{font-size:15px;font-weight:650}.m-duel{display:flex;align-items:center;gap:28px;margin-top:20px}.m-duel b{font-size:44px;line-height:1.3;color:var(--navy)}.m-duel small{display:block;font-size:13px;font-weight:400}.m-duel em{font-style:normal;color:var(--muted);font-size:26px}.m-split-panel p{font-size:14px;color:var(--blue);margin-top:18px}.m-speed-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:32px}.m-speed-column h4{font-size:19px;margin:0 0 7px}.m-speed-column>p{font-size:12px;color:var(--muted);min-height:45px;line-height:1.7}.m-speed-row{display:grid;grid-template-columns:1fr auto;gap:5px 12px;margin-top:15px;font-size:13px}.m-speed-row b{font-variant-numeric:tabular-nums}.m-speed-track{grid-column:1/-1;height:9px}.m-speed-track i.best{background:var(--green)}.m-details{margin:26px 0 0;border-block:1px solid var(--line);padding:16px 0;font-size:15px}.m-details summary{cursor:pointer;font-weight:650;color:var(--blue);min-height:32px}.m-details>p{max-width:var(--reading);margin:18px 0 0}.m-rule-strip{display:flex;gap:12px 28px;flex-wrap:wrap;margin:24px 0;color:var(--muted);font-size:14px}.m-rule-strip b{color:var(--ink)}
-.case-scroll-hint{display:none}.case-excerpt mark{background:#fff0b8;color:#183f4a;padding:1px 0}.case-workbench{position:relative;margin:24px 0 0;border:1px solid var(--line);background:var(--surface)}.case-choice{position:absolute;left:14px;top:14px;width:1px;height:1px;opacity:0}.case-tab-nav{display:flex;overflow:auto;background:var(--surface-2);border-bottom:1px solid var(--line)}.case-tab-nav label{padding:14px 20px;min-height:52px;flex:1 0 auto;font-size:15px;font-weight:650;cursor:pointer;text-align:center;border-bottom:3px solid transparent;color:var(--muted)}
-#article-case-1:checked~.case-tab-nav label[for=article-case-1],#article-case-2:checked~.case-tab-nav label[for=article-case-2],#article-case-3:checked~.case-tab-nav label[for=article-case-3],#article-case-4:checked~.case-tab-nav label[for=article-case-4],#article-case-5:checked~.case-tab-nav label[for=article-case-5],#article-case-6:checked~.case-tab-nav label[for=article-case-6]{background:var(--surface);border-color:var(--blue);color:var(--blue)}
-#article-case-1:focus-visible~.case-tab-nav label[for=article-case-1],#article-case-2:focus-visible~.case-tab-nav label[for=article-case-2],#article-case-3:focus-visible~.case-tab-nav label[for=article-case-3],#article-case-4:focus-visible~.case-tab-nav label[for=article-case-4],#article-case-5:focus-visible~.case-tab-nav label[for=article-case-5],#article-case-6:focus-visible~.case-tab-nav label[for=article-case-6]{outline:3px solid var(--blue);outline-offset:-5px}
-.case-panel{display:none;padding:26px}.case-panel h3{margin:0 0 10px;font-size:25px}.case-input{font-size:13px;overflow-wrap:anywhere;color:var(--muted)}
-#article-case-1:checked~.case-panels #article-panel-1,#article-case-2:checked~.case-panels #article-panel-2,#article-case-3:checked~.case-panels #article-panel-3,#article-case-4:checked~.case-panels #article-panel-4,#article-case-5:checked~.case-panels #article-panel-5,#article-case-6:checked~.case-panels #article-panel-6{display:block}
-.case-compare{display:grid;grid-template-columns:1fr 1fr;gap:0;margin:24px 0;border:1px solid var(--line)}.case-reference,.case-actual{padding:20px;background:var(--surface-2)}.case-actual{background:var(--blue-soft);border-left:1px solid var(--line)}.case-compare h4{font-size:17px;margin:0 0 16px}.case-compare p{font-size:12px;color:var(--muted);margin:12px 0 8px}.case-excerpt{white-space:pre-wrap;overflow-wrap:anywhere;font-size:13px;line-height:1.8;margin:0;background:transparent;border:0;padding:0;color:var(--ink);max-height:350px;overflow:auto}.case-counterexample{border-top:1px solid var(--line);margin-top:20px;padding-top:4px}.case-file-preview{max-width:130px!important;max-height:150px;object-fit:contain;margin:12px 0}.m-article .case-contract p{font-size:13px;color:var(--ink);line-height:1.7;margin:8px 0}.case-conclusion{font-size:14px;line-height:1.8;margin-top:18px!important}.case-evidence{font-size:13px;margin-top:14px!important}.case-check-wrap,.table-wrap,.editorial-table{overflow-x:auto;max-width:100%;margin:24px 0}.m-article table{width:100%;border-collapse:collapse;font-size:14px;line-height:1.75;text-align:left}.m-article th,.m-article td{padding:12px;border-bottom:1px solid var(--line);vertical-align:top;white-space:normal;overflow-wrap:anywhere}.m-article thead{background:var(--surface-2);font-size:12px;color:var(--muted)}.m-article th{font-weight:650;text-align:left}.case-check-name{font-weight:650}.case-checks{table-layout:fixed}.case-checks th:first-child{width:6%}.case-checks th:nth-child(2){width:16%}.case-checks th:last-child{width:12%}.case-checks td:last-child{color:var(--green);font-weight:650}.m-article caption{caption-side:bottom;padding:13px 0}.editorial-table-hint{font-size:12px;color:var(--muted);margin-top:20px!important}.m-webfail{display:grid;grid-template-columns:1fr 1fr;gap:32px;margin:26px 0}.m-webfail>div{border-top:3px solid var(--line);padding-top:18px}.m-webfail p{font-size:15px}.m-delay{display:flex;gap:10px;align-items:center;margin:20px 0;font-size:14px}.m-delay span{border-bottom:2px solid var(--blue);padding:10px 0}.m-delay i{font-style:normal}.m-frame-map{border:1px solid var(--line);padding:10px;margin:20px 0;font-size:14px}.m-frame-map>div{border:1px dashed var(--blue);padding:8px;margin-top:8px;color:var(--blue)}.m-end{padding:30px 0 0;font-size:12px;color:var(--muted)}.standalone-article{margin:0;background:#edf1f0}.m-downloads{max-width:1376px;margin:24px auto;text-align:center;font-size:14px}
-@media(max-width:1000px){.m-article{padding:0 32px 36px;margin:0}.m-ledger b{font-size:27px}.m-deck{font-size:21px}.m-speed-grid{gap:20px}.case-panel{padding:20px}}
-@media(max-width:700px){.m-article .case-scroll-hint{display:block;font-size:12px;color:var(--muted);margin:14px 0 0}.m-article{padding:0 20px 28px;font-size:16px}.m-hero{padding-top:28px}.m-article h1{font-size:38px;line-height:1.2}.m-article h1 br{display:none}.m-article h2{font-size:29px}.m-article h3{font-size:22px}.m-deck{font-size:18px}.m-chips{font-size:11px;gap:8px}.m-ledger{grid-template-columns:1fr;margin-top:24px}.m-ledger>div,.m-ledger>div+div{padding:17px 0;border-left:0}.m-ledger>div+div{border-top:1px solid var(--line)}.m-ledger b{font-size:30px;margin:5px 0}.m-section{padding:36px 0}.m-toc{gap:20px}.m-verdict-grid,.m-webfail,.m-split{grid-template-columns:1fr;gap:20px}.m-verdict-grid>div{padding-bottom:8px}.m-figure{padding:16px;margin:24px 0!important}.m-figure h3{font-size:18px}.m-bar-row{grid-template-columns:92px 1fr 74px;gap:8px;font-size:12px}.m-bar-track{height:12px}.m-speed-grid{grid-template-columns:1fr;gap:30px}.m-speed-column>p{min-height:0}.m-speed-column+.m-speed-column{border-top:1px solid var(--line);padding-top:20px}.m-speed-row{grid-template-columns:110px 1fr 65px;align-items:center;font-size:13px}.m-speed-row b{grid-column:3;grid-row:1;text-align:right}.m-speed-track{grid-column:2;grid-row:1}.case-panel{padding:16px}.case-panel h3{font-size:21px}.case-tab-nav label{font-size:13px;padding:13px 16px}.case-compare{grid-template-columns:1fr}.case-reference,.case-actual{padding:15px}.case-actual{border-left:0;border-top:1px solid var(--line)}.case-excerpt{font-size:12px;max-height:280px}.m-article table{font-size:12px;min-width:570px}.m-article th,.m-article td{padding:10px}.m-rule-strip{font-size:12px;gap:8px 14px}.m-rule-strip b{flex-basis:100%}.m-report-link span{display:block}.m-details{font-size:14px}.m-article figcaption{font-size:12px}.m-duel b{font-size:38px}}
-@media(prefers-color-scheme:dark){.standalone-article{background:#10191d}.m-article{--paper:#142126;--surface:#142126;--surface-2:#243238;--ink:#e0e8e8;--muted:#a4b8bc;--line:#3b4c50;--navy:#b1dbe6;--blue:#83c9dd;--blue-soft:#213c44;--green:#8fd3a9;--rust:#e8a18a;color-scheme:dark}}
-[data-theme="dark"] .m-article,.m-article[data-theme="dark"]{--paper:#142126;--surface:#142126;--surface-2:#243238;--ink:#e0e8e8;--muted:#a4b8bc;--line:#3b4c50;--navy:#b1dbe6;--blue:#83c9dd;--blue-soft:#213c44;--green:#8fd3a9;--rust:#e8a18a;color-scheme:dark}
-[data-theme="light"] .m-article,.m-article[data-theme="light"]{--paper:#fff;--surface:#fff;--surface-2:#f1f4f3;--ink:#243940;--muted:#64757a;--line:#d8e1df;--navy:#123e4a;--blue:#14657a;--blue-soft:#edf5f7;--green:#25714f;--rust:#a74e31;color-scheme:light}
-@media print{.m-article{--paper:#fff;--surface:#fff;--surface-2:#f1f4f3;--ink:#243940;--muted:#64757a;--line:#d8e1df;--navy:#123e4a;--blue:#14657a;--blue-soft:#edf5f7;--green:#25714f;--rust:#a74e31;max-width:none;margin:0;padding:0;font-size:10pt;background:#fff!important;print-color-adjust:exact;-webkit-print-color-adjust:exact}.standalone-article{background:#fff}.m-article h1{font-size:30pt}.m-article h2{font-size:21pt;break-after:avoid}.m-article h3{font-size:15pt;break-after:avoid}.m-deck{font-size:13pt}.m-hero{padding-top:12px}.m-ledger{grid-template-columns:repeat(3,1fr)}.m-ledger b{font-size:19pt}.m-ledger p{font-size:9pt}.m-section{padding:25px 0}.m-toc,.case-tab-nav,.case-choice,.m-downloads,.sidebar,.topbar{display:none!important}.case-panel{display:block!important;padding:20px 0;break-before:auto}.case-panel+.case-panel{border-top:2px solid var(--line)}.case-workbench{border:0}.case-excerpt{max-height:none;overflow:visible;font-size:9pt}.case-compare{break-inside:avoid}.case-check-wrap,.table-wrap,.editorial-table{overflow:visible}.m-article table{min-width:0;font-size:8pt}.m-article table tr{break-inside:avoid}.m-article table thead{display:table-header-group}.m-article caption{caption-side:top}.m-figure{break-inside:avoid;padding:16px}.m-speed-grid{grid-template-columns:repeat(3,1fr)}.m-details>*{display:block!important}.m-details{font-size:10pt}.m-article p{orphans:3;widows:3}.m-end{font-size:8pt}}
-@page{margin:15mm}
-
-.m-flow-grid{display:grid;grid-template-columns:1fr 1fr;gap:24px 36px;margin:28px 0}.m-flow-grid>div{border-top:2px solid var(--line);padding:18px 0}.m-flow-grid h3{margin:0 0 12px;font-size:22px}.m-flow-grid p{font-size:15px;margin-top:12px}.m-browser-table table{table-layout:fixed}.m-browser-table th:first-child{width:5%}.m-browser-table th:nth-child(2){width:21%}.m-browser-table th:nth-child(3){width:25%}.m-browser-table th:nth-child(4){width:23%}.m-summary-list,.m-next-list,.m-delivery-legend{max-width:var(--reading);padding-left:1.5em;margin:0}.m-summary-list li,.m-next-list li,.m-delivery-legend li{padding-left:.3em;margin:0 0 16px}.m-article .m-scope-note{font-size:14px;line-height:1.8;color:var(--muted);max-width:1080px}.m-hero .editorial-table{margin:28px 0 16px}@media(max-width:700px){.m-flow-grid{grid-template-columns:1fr;gap:12px}.m-flow-grid h3{font-size:22px}.m-browser-table table{min-width:850px}.m-article .m-scope-note{font-size:13px}}@media print{.m-browser-table table{min-width:0}.m-summary-list,.m-next-list,.m-delivery-legend{max-width:none}}
-.m-delivery-legend{display:grid;grid-template-columns:1fr 1fr;gap:0 36px;font-size:15px;margin:20px 0}.m-delivery-legend li{margin-bottom:10px}@media(max-width:700px){.m-delivery-legend{grid-template-columns:1fr;font-size:14px}}
-.m-article .case-checks td.case-fail{color:var(--rust)}
-.m-hero table{min-width:760px}.m-hero td,.m-hero th:first-child,.m-browser-table th:first-child{white-space:nowrap}.m-browser-table th:first-child{width:6%}@media print{.m-hero table{min-width:0}}
-</style>
+${article_style}
 <article class="m-article publication-article" aria-labelledby="article-title">
 <header class="m-hero">
 <div class="m-chips"><span>Web Fetch 实测</span><span>Moli 1.1.1</span><span>五款浏览器 · 150 道任务</span></div>
diff --git a/pyproject.toml b/pyproject.toml
index a1a00e300..5a2121744 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -105,6 +105,6 @@ include = ["harness*"]
 "harness.environments.webarena" = ["runtime/*.ini"]
 
 [tool.setuptools.data-files]
-"share/browser-harness-eval" = ["evaluation/scoring-regressions.json"]
+"share/browser-harness-eval" = ["evaluation/scoring-regressions.json", "configs/providers.headless.json"]
 "share/browser-harness-eval/webmainbench" = ["evaluation/webmainbench-full/scoring-regressions.json"]
 "share/browser-harness-eval/public-webarena" = ["evaluation/browser-use-public/adoption-evidence.json", "evaluation/browser-use-public/benchmark-catalog.json", "evaluation/browser-use-public/report-changes.json"]
diff --git a/research/body-table-column-continuity-scoring-revision.json b/research/body-table-column-continuity-scoring-revision.json
new file mode 100644
index 000000000..cd8e760e7
--- /dev/null
+++ b/research/body-table-column-continuity-scoring-revision.json
@@ -0,0 +1,54 @@
+{
+  "schema_version": 2,
+  "kind": "shared_body_scoring_revision",
+  "provider_calls": 0,
+  "correction_provenance": {
+    "category": "body-scope",
+    "root_cause": "Compact body fragments treated every visible table cell as one linear prose stream, so valid auxiliary values between adjacent cells of the independently observed text column broke its continuity.",
+    "regression_ids": [
+      "body-table-intermediate-column-keeps-text-column-continuous",
+      "body-table-unrelated-column-cannot-repair-missing-record",
+      "body-table-missing-header-cannot-use-column-projection"
+    ],
+    "verdict_corrections": {
+      "false_positives": 0,
+      "false_negatives": 1,
+      "total": 1
+    }
+  },
+  "policy": {
+    "direct_body_surface": "evaluated_first_and_unchanged",
+    "table_projection": "one complete table header plus one nonempty data column from the same rectangular table",
+    "cross_column_or_cross_table_borrowing": "forbidden",
+    "surrounding_prose_borrowing": "forbidden"
+  },
+  "independent_source_authority": {
+    "case_id": "dynamic-043-en-stable-grommet-table",
+    "audit_sha256": "4f19f66321922863c6ffd3dd48fd4981bbbc34ae00b7aed7ad8ba9b1c35cd9bb",
+    "source_html_sha256": "1eb3a7185bbad8a230225cccfdb640ced20c021d926ce10b5500a86fd0eed287",
+    "source_contract_sha256": "e4fc15a0286237b4390201f0ab0ec7dbe94f553d7b6111e1c1198359b806d218",
+    "observation_status": "source_full_rule_met",
+    "provider_output_used": false
+  },
+  "scorer_binding": {
+    "baseline_repository_commit": "748e56e4c530d68757b1ec1799d1e1b6aa6ecbbe",
+    "baseline_scoring_source_sha256": "4a7048e2f6095352ab01f8a50ee459f36683dcb48ea8b5a28c45c575841324ef",
+    "revised_scoring_source_sha256": "8bc386c7c081b70701d635e4fc2ead8c22a7f9a6004ec42adcaf391f9d470f1b",
+    "scoring_regressions_sha256": "a4bfd485ca1f26d6759e2ad3e5c1ba85ac53e6e9687f47243ea9ba65cd7fc45f"
+  },
+  "offline_decision_check": {
+    "dataset_sha256": "029c46d13639cebc298092c0be5649c5e419f2e4868a9ea91e3196403b32906e",
+    "artifact_sha256": "de5cb6d649d637aa961e0e9915a6cb0e0a67e5c5d52d9584339d4d438f981102",
+    "case_id": "dynamic-043-en-stable-grommet-table",
+    "before_task_pass": false,
+    "after_task_pass": true
+  },
+  "unresolved_source_qualification": {
+    "case_id": "dynamic-086-joyn-prosieben",
+    "source_html_sha256": "26718d6d39a91322df8380c89308db99f5ebfa0b7c1672a0a01c54c5660538e6",
+    "status": "source_contract_unmet",
+    "qualified_record_count": 0,
+    "raw_source_bytes_recovered": false,
+    "decision": "No scoring or reference change. Provider output is not an independent source authority."
+  }
+}
diff --git a/research/browser-native-430-html-record-ownership-scoring-revision.json b/research/browser-native-430-html-record-ownership-scoring-revision.json
new file mode 100644
index 000000000..05ab963cc
--- /dev/null
+++ b/research/browser-native-430-html-record-ownership-scoring-revision.json
@@ -0,0 +1,48 @@
+{
+  "schema_version": 1,
+  "kind": "browser_native_430_score_only_revision",
+  "created_at": "2026-10-16T16:40:00+08:00",
+  "root_cause": "HTML named-link scoring normalized layout wrappers and deduplicated target URLs before it had bound each visible name and required field set to one effective DOM record. This could erase one-child card boundaries, treat a nested title list item as the whole record, or combine separate same-URL records.",
+  "correction": {
+    "behavior": "Determine effective DOM record owners first, validate each owner-local candidate, then deduplicate accepted target identities.",
+    "provider_specific_logic": false,
+    "provider_calls": 0,
+    "predecessor_composite_tasks_sha256": "98bee26d83a097e48eba0fb531623da902a220c36b4e5f57ac89d02b695657b1",
+    "revised_composite_tasks_sha256": "245ba0c069d6951ac339aa69fba6bd6c0724bf69c347a4141831b90a014078ea"
+  },
+  "scoring_provenance": {
+    "predecessor_scoring_regressions_sha256": "a26c905a165655f7a07ede54a67d5b7d8cd08e47cb42520ec754fc9f4d76941d",
+    "revised_scoring_regressions_sha256": "d519f86e327d9e2fd1c884670642eb31714435864e834592e2c7b65ef21ee655",
+    "regression_ids": [
+      "html-record-single-child-sibling-cards-stay-isolated",
+      "html-record-single-child-sibling-card-complete",
+      "html-record-nested-title-list-uses-enclosing-card",
+      "html-record-nested-distinct-title-stays-independent",
+      "html-record-duplicate-identity-validates-before-dedup",
+      "html-record-duplicate-identity-cannot-combine-name-and-fields"
+    ]
+  },
+  "current_report_impact": {
+    "dataset_sha256": "fd0e2b11ebda91d314041e16f4d6a39eb2dc7b2aaee9b6dfaf5c2f0ecfa08d3d",
+    "results_sha256": "e0949fa98339588145cd0df9602ab5566c11efaf29c443636c476a2a965c57d6",
+    "candidate_case_count": 8,
+    "candidate_result_count": 48,
+    "html_result_count": 0,
+    "verdict_changes": 0,
+    "metric_changes": 0,
+    "report_rebuild_required": false,
+    "provider_rerun_required": false
+  },
+  "verification": {
+    "related_tests": {
+      "passed": 356,
+      "skipped": 1,
+      "subtests_passed": 1003
+    },
+    "scoring_registry_tests": {
+      "passed": 116,
+      "subtests_passed": 896
+    },
+    "repository_python_lint": "passed"
+  }
+}
diff --git a/research/current-page-reference-contract-revision.json b/research/current-page-reference-contract-revision.json
new file mode 100644
index 000000000..e6e5f1efc
--- /dev/null
+++ b/research/current-page-reference-contract-revision.json
@@ -0,0 +1,245 @@
+{
+  "schema_version": 2,
+  "kind": "current_page_reference_and_contract_revision",
+  "provider_calls": 0,
+  "request_invariants": {
+    "provider_input": "URL only, with the saved native route and runtime settings",
+    "url_route_runtime_changed": false,
+    "task_prompt_provider_visible": false,
+    "saved_output_bytes_and_timing_retained": true
+  },
+  "reference_revisions": {
+    "case_ids": [
+      "static-simple",
+      "redirect",
+      "live-010-navigation-menu",
+      "live-025-api-reference",
+      "live-035-part-i-tutorial"
+    ],
+    "source_authority": "Independent rendered browser DOM in the declared target scope",
+    "browser_observation_sha256": {
+      "static-simple": "3d62e4dde450cc223daa9ae4af4c12a7c359362d9565824a6ee02a5215567979",
+      "redirect": "f8dd763cbfa9a7850633fce8017761e22e99037623058697bc2c5033c5d2989e",
+      "live-010-navigation-menu": "ff95d3912968b817b934aa594435750bce8181f8ea36e23291a0782835d1fac8",
+      "live-025-api-reference": "f585c751e30c2aa64206f7987863225daac6167c4257d3205606e15908eae1b6",
+      "live-035-part-i-tutorial": "c41db85761d58a8de345a67ee9bc23d250bbb6634234f86217f78e5692b90fb4"
+    },
+    "receipt_sha256": "2197fbd2ecd0d0f1a7537b339f4521060eebb12196943407fb93340c3175794b",
+    "input_dataset_sha256": "965911fc190e42316d9b16be2282791f0159f242c8edbe63a5f9a735c53bfc30",
+    "input_results_sha256": "b2106cfcf099b6c081fb047bac8f8a7d3729512eec3790c9755a924fb3256524",
+    "output_dataset_sha256": "fec06de905fffac9e42c6add8a1de4ac97424fb4242c9ef97346095697f1bf43",
+    "output_results_sha256": "478b0958176b51fa714c279acb5034ad7a230d3377b955932e88dd13ba2d7486"
+  },
+  "acceptance_contract_revisions": {
+    "case_ids": [
+      "china-homepage-033-dingtalk-com",
+      "china-homepage-040-quark-cn",
+      "china-homepage-048-douyu-com",
+      "china-homepage-085-shopify-com",
+      "china-homepage-088-figma-com",
+      "dynamic-082-allocine-films",
+      "global-homepage-008-whatsapp-com",
+      "global-homepage-010-bing-com",
+      "global-homepage-067-deepseek-com",
+      "global-homepage-086-usps-com"
+    ],
+    "homepage_contract_source": "Task-relevant intersection of two same-region independent first loads",
+    "popular_source_input_id": "popular-sites-85544512d4cf-v6",
+    "popular_dataset_sha256": "85544512d4cfd9459c22af1f70b1eb400844742dbf3179807662b76db2dcfc2e",
+    "popular_observations": [
+      {
+        "case_id": "china-homepage-033-dingtalk-com",
+        "observation_times": [
+          "2026-10-13T06:10:26.844053+00:00",
+          "2026-10-13T06:24:40.449295+00:00"
+        ],
+        "evidence_sha256": "b124d67b50f17db6bc15b988ff9714c454c59165a5701fdcb0bbc557c0ce4bf8",
+        "anchor_groups": 5
+      },
+      {
+        "case_id": "china-homepage-040-quark-cn",
+        "observation_times": [
+          "2026-10-13T06:24:41.283324+00:00",
+          "2026-10-13T06:25:39.586243+00:00"
+        ],
+        "evidence_sha256": "4882f58b1dd814b7d4682343923e48c7dee9c3533b3908e22fdcd4e1659439c1",
+        "anchor_groups": 11
+      },
+      {
+        "case_id": "china-homepage-048-douyu-com",
+        "observation_times": [
+          "2026-10-13T06:10:27.636028+00:00",
+          "2026-10-13T06:24:41.500563+00:00"
+        ],
+        "evidence_sha256": "3239f658eaf00a0e9289757df24d5d575ffb015cb14108ec8033927194c2137a",
+        "anchor_groups": 21
+      },
+      {
+        "case_id": "china-homepage-085-shopify-com",
+        "observation_times": [
+          "2026-10-13T06:10:31.465406+00:00",
+          "2026-10-13T06:24:40.502873+00:00"
+        ],
+        "evidence_sha256": "db803b5d4ce0b5628c39497f6e7750523eda54e8b40500e295b46cf26ff05d06",
+        "anchor_groups": 14
+      },
+      {
+        "case_id": "china-homepage-088-figma-com",
+        "observation_times": [
+          "2026-10-13T06:10:31.585141+00:00",
+          "2026-10-13T06:24:50.759331+00:00"
+        ],
+        "evidence_sha256": "bb868fdfb8ccaf39f6ad734207d1ec7f195e162c4598efc17bf1391c4e78cc44",
+        "anchor_groups": 12
+      },
+      {
+        "case_id": "global-homepage-010-bing-com",
+        "observation_times": [
+          "2026-10-13T06:24:51.080990+00:00",
+          "2026-10-13T06:26:02.580389+00:00"
+        ],
+        "evidence_sha256": "76782d2f51b5f1b47ccd1cdbc461515247f2041067ee3e4c49524d0e16789205",
+        "anchor_groups": 5
+      },
+      {
+        "case_id": "global-homepage-067-deepseek-com",
+        "observation_times": [
+          "2026-10-13T06:10:36.515625+00:00",
+          "2026-10-13T06:24:46.639922+00:00"
+        ],
+        "evidence_sha256": "2ebbde4f22e3a45c6c3a771406609c6443fc884b78fcedaa02fb786095a9b093",
+        "anchor_groups": 6
+      },
+      {
+        "case_id": "global-homepage-086-usps-com",
+        "observation_times": [
+          "2026-10-13T06:10:40.867834+00:00",
+          "2026-10-13T06:24:54.745623+00:00"
+        ],
+        "evidence_sha256": "556031894e8d797f93fff54372a616cf0618f1cbd664fa7d5cf093fc0acfcd2b",
+        "anchor_groups": 19
+      },
+      {
+        "case_id": "global-homepage-008-whatsapp-com",
+        "observation_times": [
+          "2026-10-13T06:10:33.765548+00:00",
+          "2026-10-13T06:24:53.505915+00:00"
+        ],
+        "evidence_sha256": "3d379cb138e21709683e314d07bac7576279bfedea8796af61c4baecbaff0584",
+        "anchor_groups": 2
+      }
+    ],
+    "dynamic_source_input_id": "dynamic-content-100-moli-webfetch-1f3268366b17-v4",
+    "dynamic_dataset_sha256": "1f3268366b17d490c85b75fbda329e5b3e6143d0a058523c1cad8a73ed916278",
+    "dynamic_observation": {
+      "case_id": "dynamic-082-allocine-films",
+      "evidence_sha256": "717a0d1a864f561ae80c601c5733fccdfda16120e37b2ff4d0837c2718d86038",
+      "change": "Remove one navigation token absent from the independent current-page observation; retain the named-film-link contract."
+    },
+    "regression_ids": [
+      "current-homepage-stable-intersection-passes",
+      "obsolete-homepage-anchor-does-not-pass"
+    ],
+    "receipt_sha256": "f52ea78ab9714cf4ced3719dcecdd8c04f4720b6864f12f522220d61e458e6fc",
+    "input_dataset_sha256": "fec06de905fffac9e42c6add8a1de4ac97424fb4242c9ef97346095697f1bf43",
+    "input_results_sha256": "478b0958176b51fa714c279acb5034ad7a230d3377b955932e88dd13ba2d7486",
+    "output_dataset_sha256": "046bf1fc86bfb62d5e60cc7fa806cb854fa3da09c97d4b08685e3a2987952275",
+    "output_results_sha256": "6801b8ccc9262ca79b7426cc9b53eac5a8e918e786a039e06ef16b081f41065f"
+  },
+  "offline_six_method_impact": {
+    "reference_revision": {
+      "false_to_true": 4,
+      "true_to_false": 0,
+      "attempt_ids": [
+        "obscura__static-simple__r001",
+        "obscura__redirect__r001",
+        "kitesurf__static-simple__r001",
+        "kitesurf__redirect__r001"
+      ]
+    },
+    "contract_revision": {
+      "false_to_true": 34,
+      "true_to_false": 0,
+      "by_method": {
+        "moli": 7,
+        "moli-pr919": 6,
+        "lightpanda": 5,
+        "obscura": 6,
+        "chromium": 6,
+        "kitesurf": 4
+      },
+      "attempt_ids": [
+        "moli__dynamic-082-allocine-films__r001",
+        "moli__china-homepage-088-figma-com__r001",
+        "moli__global-homepage-067-deepseek-com__r001",
+        "moli__global-homepage-086-usps-com__r001",
+        "moli__china-homepage-033-dingtalk-com__r001",
+        "moli__china-homepage-040-quark-cn__r001",
+        "moli__china-homepage-085-shopify-com__r001",
+        "lightpanda__china-homepage-088-figma-com__r001",
+        "lightpanda__global-homepage-067-deepseek-com__r001",
+        "lightpanda__china-homepage-033-dingtalk-com__r001",
+        "lightpanda__china-homepage-040-quark-cn__r001",
+        "lightpanda__china-homepage-048-douyu-com__r001",
+        "obscura__china-homepage-088-figma-com__r001",
+        "obscura__global-homepage-067-deepseek-com__r001",
+        "obscura__china-homepage-033-dingtalk-com__r001",
+        "obscura__china-homepage-040-quark-cn__r001",
+        "obscura__china-homepage-048-douyu-com__r001",
+        "obscura__china-homepage-085-shopify-com__r001",
+        "chromium__dynamic-082-allocine-films__r001",
+        "chromium__china-homepage-088-figma-com__r001",
+        "chromium__global-homepage-067-deepseek-com__r001",
+        "chromium__china-homepage-033-dingtalk-com__r001",
+        "chromium__china-homepage-040-quark-cn__r001",
+        "chromium__china-homepage-085-shopify-com__r001",
+        "kitesurf__dynamic-082-allocine-films__r001",
+        "kitesurf__global-homepage-010-bing-com__r001",
+        "kitesurf__global-homepage-067-deepseek-com__r001",
+        "kitesurf__china-homepage-085-shopify-com__r001",
+        "moli-pr919__dynamic-082-allocine-films__r001",
+        "moli-pr919__china-homepage-088-figma-com__r001",
+        "moli-pr919__global-homepage-067-deepseek-com__r001",
+        "moli-pr919__china-homepage-033-dingtalk-com__r001",
+        "moli-pr919__china-homepage-040-quark-cn__r001",
+        "moli-pr919__china-homepage-085-shopify-com__r001"
+      ]
+    },
+    "final_dataset_sha256": "046bf1fc86bfb62d5e60cc7fa806cb854fa3da09c97d4b08685e3a2987952275",
+    "final_results_sha256": "6801b8ccc9262ca79b7426cc9b53eac5a8e918e786a039e06ef16b081f41065f"
+  },
+  "unchanged_cases": [
+    {
+      "case_id": "dynamic-022-en-stable-syncfusion-grid",
+      "reason": "The current official grid reports no records; current source cannot qualify a replacement contract."
+    },
+    {
+      "case_id": "dynamic-034-034-vuetify-server-table",
+      "reason": "The declared target scope does not independently expose the required rows; whole-page text mixes unrelated site navigation."
+    },
+    {
+      "case_id": "dynamic-035-035-vuetify-virtual-table",
+      "reason": "The declared target scope does not independently expose the required rows; whole-page text mixes unrelated site navigation."
+    },
+    {
+      "case_id": "dynamic-086-joyn-prosieben",
+      "reason": "No complete independent source evidence qualifies a reference or scoring correction."
+    },
+    {
+      "case_id": "china-homepage-044-kimi-com",
+      "reason": "Independent first loads end at a CAPTCHA, so no replacement body contract is qualified."
+    },
+    {
+      "case_id": "china-homepage-050-openai-com",
+      "reason": "Independent first loads return blocked or empty content, so no replacement body contract is qualified."
+    },
+    {
+      "case_id": "web-retail-returns",
+      "reason": "Independent first loads return 403 or CAPTCHA content, so no replacement body contract is qualified."
+    },
+    {
+      "case_id": "global-homepage-072-rakuten-co-jp",
+      "reason": "Independent current-page evidence still supports the existing contract; retain the method failure."
+    }
+  ]
+}
diff --git a/research/dynamic-native-retrieval-contract-pre-call-revision.json b/research/dynamic-native-retrieval-contract-pre-call-revision.json
new file mode 100644
index 000000000..ee96b0dba
--- /dev/null
+++ b/research/dynamic-native-retrieval-contract-pre-call-revision.json
@@ -0,0 +1,113 @@
+{
+  "schema_version": 1,
+  "kind": "dynamic_native_retrieval_contract_pre_call_revision",
+  "created_at": "2026-10-13T16:03:40+08:00",
+  "provider_calls": 0,
+  "predecessor_dataset_sha256": "1f3268366b17d490c85b75fbda329e5b3e6143d0a058523c1cad8a73ed916278",
+  "revised_dataset_sha256": "0da2bb30aaabe3ca2b93ec17b4cb88cdc1cf3ea46336bb3777fdb21c1f211b84",
+  "dataset_manifest": {
+    "path": "evaluation/dynamic-content-100-moli-webfetch/source-inputs.json",
+    "sha256": "710f9c91705b29bb9e4aa15af97dcc856e64e406baa4b9966446408d7e3d26a8"
+  },
+  "dataset_catalog": {
+    "path": "evaluation/dynamic-content-100-moli-webfetch/dataset-catalog.json",
+    "sha256": "ca1572aa80fc2324b2f00800a79b053cfd584d1831ffb16e6906ae0981522c6c"
+  },
+  "contract_registry": {
+    "path": "evaluation/native-retrieval-contracts.json",
+    "sha256": "210281ea49c61aa9c1ae4976be0f8b97adf1ef0eed6e08a74d77f54bab80b71b"
+  },
+  "assembly_correction": {
+    "predecessor_native_dataset_sha256": "def61624252afce7e21c36ec6970c387476fa65e2c31efe6ea19ef0087db94e9",
+    "revised_native_dataset_sha256": "de540d36c49ae49caf6189769627966f8975d87b82a1f355a91bbc20a70be8e7",
+    "removed_generated_field": "source_benchmark.scenario_track",
+    "reason": "The native compiler already preserves track=dynamic. Adding a second scenario marker changed the frozen task definition after its catalog and named retrieval contract had been verified.",
+    "provider_route_changed": false,
+    "acceptance_changed": false,
+    "provider_calls": 0
+  },
+  "delayed_completion_correction": {
+    "case_id": "dynamic-delayed",
+    "predecessor_contract_registry_sha256": "b54e31b9b1872cc126935c8e078611249d9cc2c5c17cf5a4cf49290990095132",
+    "revised_contract_registry_sha256": "210281ea49c61aa9c1ae4976be0f8b97adf1ef0eed6e08a74d77f54bab80b71b",
+    "completion": {
+      "selector": ".quote",
+      "minimum_count": 10,
+      "minimum_text_fragments": 3
+    },
+    "source_authority": {
+      "path": "evaluation/sources/dynamic-delayed/render-audit.json",
+      "sha256": "cb72f36b479827c25816f1df5e2448885c0935ab61c0ad130bc145a2d466cc93",
+      "provider_output_used": false
+    },
+    "source_basis": "The independent render audit records 30 of 30 populated fields across ten visible quote cards: quote text, author and tags. Counting empty card containers was insufficient.",
+    "provider_request_changed": true,
+    "acceptance_changed": false,
+    "scoring_changed": false,
+    "required_new_calls": {
+      "moli_fixed": 1,
+      "moli_pr919": 1,
+      "lightpanda": 1,
+      "obscura": 1,
+      "chromium": 1,
+      "kitesurf": 1,
+      "physical_calls": 6
+    },
+    "deduplication": "These six calls replace the already-declared dynamic-delayed calls in the method scopes below; they do not increase the 76-call physical total.",
+    "provider_calls": 0
+  },
+  "changed_cases": [
+    {
+      "case_id": "dynamic-015-015-testpages-iframe-list",
+      "contract": "iframe-list-one-hundred-items"
+    },
+    {
+      "case_id": "dynamic-019-selenium-dev-selenium",
+      "contract": "iframe-one-form"
+    },
+    {
+      "case_id": "dynamic-iframe",
+      "contract": "iframe-fourteen-family-headings"
+    },
+    {
+      "case_id": "dynamic-delayed",
+      "contract": "delayed-ten-records"
+    }
+  ],
+  "execution_effect": {
+    "provider_request_changed": true,
+    "ordinary_native_cases_changed": false,
+    "interface_policy": {
+      "lightpanda_dynamic": "official_native_markdown",
+      "lightpanda_dynamic_case_count": 100,
+      "lightpanda_iframe_behavior": "three contracts preserve their named completion plan and add official frame flags inside the native Markdown JSON transport envelope; native Markdown omission remains a scored failure",
+      "non_chromium_body": "browser-native Markdown",
+      "chromium_body": "rendered HTML converted by node-html-markdown 2.0.0"
+    },
+    "required_new_calls": {
+      "moli_fixed": 39,
+      "moli_pr919": 21,
+      "lightpanda": 4,
+      "obscura": 4,
+      "chromium": 4,
+      "kitesurf": 4,
+      "physical_calls": 76
+    },
+    "reason": "The four contracts change native completion or subdocument flags for every method. The fixed Moli build and the historical PR919 comparison also have independently audited implementation-change scopes. Overlap is removed within each method before summing; Lightpanda keeps the same native Markdown interface for its other 96 Dynamic tasks."
+  },
+  "acceptance_effect": {
+    "answers_changed": false,
+    "scoring_changed": false,
+    "task_scope_changed": false
+  },
+  "compiled_dataset_input": {
+    "assembly": {
+      "path": "evaluation/webfetch-seven-family-430/dataset-assembly.json",
+      "sha256": "63d6ead0b832b6020d02a74fa5270ed79549df76d9c138af6149d72361a77914"
+    },
+    "superseded_pre_call_dataset_sha256": "e708980fb9bfcbb003fda7e2219a6739f637b769359e7d150c6bb3b312661a90",
+    "revised_pre_call_dataset_sha256": "de540d36c49ae49caf6189769627966f8975d87b82a1f355a91bbc20a70be8e7",
+    "case_count": 430,
+    "provider_calls": 0
+  }
+}
diff --git a/research/headless-implementation-provenance.json b/research/headless-implementation-provenance.json
index 1767865a9..f22de221a 100644
--- a/research/headless-implementation-provenance.json
+++ b/research/headless-implementation-provenance.json
@@ -44,6 +44,24 @@
       "archive_url": "https://github.com/lexmount/moli/releases/download/v1.1.7/moli-aarch64-apple-darwin.tar.gz",
       "archive_sha256": "d61b057da58f94c0c9dc2442b5024e576c4b89bd9cce2d385e128d8c95e0e4fd"
     },
+    {
+      "provider": "moli-pr919",
+      "version": "1.1.15",
+      "binary_sha256": "5696ccf88d20fdcc38f297af722c74035b9bad99db2a73e0e316ca707ef4766a",
+      "identity_timing": "recorded_during_run",
+      "verification": "The measured source build reports `moli 1.1.15`; every retained call records this exact executable SHA-256.",
+      "source": "https://github.com/lexmount/moli/commit/98be1f105728da8284b70d7aed42d8c84a2a93ed",
+      "source_commit": "98be1f105728da8284b70d7aed42d8c84a2a93ed"
+    },
+    {
+      "provider": "moli-fixed",
+      "version": "1.1.17",
+      "binary_sha256": "a276fc5d11bb3debd9f72246dc01f761a8206e8b28700713ba6c8f1dffaba11d",
+      "identity_timing": "recorded_during_run",
+      "verification": "The measured repair build reports `moli 1.1.17`; every retained call records this exact executable SHA-256.",
+      "source": "https://github.com/lexmount/moli/commit/60773df391ad782ab647e878dc6629032d0275a6",
+      "source_commit": "60773df391ad782ab647e878dc6629032d0275a6"
+    },
     {
       "provider": "obscura",
       "version": "0.2.1",
diff --git a/research/lightpanda-100-native-iframe-capability.json b/research/lightpanda-100-native-iframe-capability.json
new file mode 100644
index 000000000..47b22c42c
--- /dev/null
+++ b/research/lightpanda-100-native-iframe-capability.json
@@ -0,0 +1,337 @@
+{
+  "schema_version": 1,
+  "kind": "lightpanda_native_iframe_capability_probe",
+  "provider_calls": 0,
+  "implementation": {
+    "version": "1.0.0",
+    "binary_sha256": "955440053a84754dd64c62f970449a56a2b350cdf43ea5f2e809a73047b8173d"
+  },
+  "official_cli_help": {
+    "command": "lightpanda fetch --help",
+    "sha256": "dc18abddc11d455ed3e51251021603828f19989c74bc2751cb35f8f0b9511aa6",
+    "declared_flags": [
+      "--load-resources iframe",
+      "--with-frames"
+    ]
+  },
+  "fixture": {
+    "network": "127.0.0.1 only",
+    "parent_marker": "PARENT_READY",
+    "child_marker": "CHILD_FRAME_READY",
+    "matrix_sha256": "42f0af8fec947d503269181b4384ab16573b557189372564a50e89ca14f99859"
+  },
+  "observations": [
+    {
+      "dump": "semantic_tree_text",
+      "wait": "load",
+      "flags": [],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree_text",
+      "wait": "load",
+      "flags": [
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree_text",
+      "wait": "load",
+      "flags": [
+        "--load-resources",
+        "iframe"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree_text",
+      "wait": "load",
+      "flags": [
+        "--load-resources",
+        "iframe",
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree_text",
+      "wait": "done",
+      "flags": [],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree_text",
+      "wait": "done",
+      "flags": [
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree_text",
+      "wait": "done",
+      "flags": [
+        "--load-resources",
+        "iframe"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree_text",
+      "wait": "done",
+      "flags": [
+        "--load-resources",
+        "iframe",
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree",
+      "wait": "load",
+      "flags": [],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree",
+      "wait": "load",
+      "flags": [
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree",
+      "wait": "load",
+      "flags": [
+        "--load-resources",
+        "iframe"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree",
+      "wait": "load",
+      "flags": [
+        "--load-resources",
+        "iframe",
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree",
+      "wait": "done",
+      "flags": [],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree",
+      "wait": "done",
+      "flags": [
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree",
+      "wait": "done",
+      "flags": [
+        "--load-resources",
+        "iframe"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "semantic_tree",
+      "wait": "done",
+      "flags": [
+        "--load-resources",
+        "iframe",
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "html",
+      "wait": "load",
+      "flags": [],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "html",
+      "wait": "load",
+      "flags": [
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "html",
+      "wait": "load",
+      "flags": [
+        "--load-resources",
+        "iframe"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "html",
+      "wait": "load",
+      "flags": [
+        "--load-resources",
+        "iframe",
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": true
+    },
+    {
+      "dump": "html",
+      "wait": "done",
+      "flags": [],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "html",
+      "wait": "done",
+      "flags": [
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "html",
+      "wait": "done",
+      "flags": [
+        "--load-resources",
+        "iframe"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "html",
+      "wait": "done",
+      "flags": [
+        "--load-resources",
+        "iframe",
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": true
+    },
+    {
+      "dump": "markdown",
+      "wait": "load",
+      "flags": [],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "markdown",
+      "wait": "load",
+      "flags": [
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "markdown",
+      "wait": "load",
+      "flags": [
+        "--load-resources",
+        "iframe"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "markdown",
+      "wait": "load",
+      "flags": [
+        "--load-resources",
+        "iframe",
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "markdown",
+      "wait": "done",
+      "flags": [],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "markdown",
+      "wait": "done",
+      "flags": [
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "markdown",
+      "wait": "done",
+      "flags": [
+        "--load-resources",
+        "iframe"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    },
+    {
+      "dump": "markdown",
+      "wait": "done",
+      "flags": [
+        "--load-resources",
+        "iframe",
+        "--with-frames"
+      ],
+      "returncode": 0,
+      "child_marker_present": false
+    }
+  ],
+  "formal_route_policy": {
+    "selection_scope": "browser_by_track",
+    "track": "dynamic",
+    "case_count": 100,
+    "output_contract": "markdown",
+    "interface": "official_native_markdown",
+    "shared_html_to_markdown": false,
+    "iframe_contract_count": 3,
+    "iframe_flags": [
+      "--load-resources iframe",
+      "--with-frames"
+    ],
+    "observed_iframe_limitation": "native_markdown_omits_child_document",
+    "verdict_policy": "retain the scored failure; do not switch output interface"
+  },
+  "conclusion": "Loading the iframe and including frame serialization are separate native controls. Both flags expose the child in native HTML, but Lightpanda 1.0.0 native Markdown still omits it. The formal Dynamic contract therefore keeps official native Markdown for all 100 tasks; the three iframe tasks add only the official frame flags and retain any resulting content failure without switching to HTML or a shared converter."
+}
diff --git a/research/moli-111-three-cohort-evaluation-revision.json b/research/moli-111-three-cohort-evaluation-revision.json
index 11fae2891..1d4fac70e 100644
--- a/research/moli-111-three-cohort-evaluation-revision.json
+++ b/research/moli-111-three-cohort-evaluation-revision.json
@@ -331,38 +331,61 @@
       "scope": "Scorer and regression bindings; current diagnostic rescoring uses separate receipts, not historical certification."
     },
     {
-      "root_cause":"Normalize CommonMark escaped punctuation in list prefixes and reuse unreserved URL canonicalization for composite field ownership; preserve prose rejection and record boundaries.",
-      "provider_calls":0,
-      "predecessor_source_sha256":"5af22f03e56ecc28e41511c2ad23736508e40981f7914b54865741df43dcfffb",
-      "revised_sha256":"6d092487f414f55287fc2b63be09660e8e5b30e0ec1f1f4dec04df714aa01c13",
-      "scoring_regressions_sha256":"574867b68a701232dd1b3074841c6c5dacccd924435fd4fae550aa25bfd1ebd8",
-      "regression_ids":[
-        "html-doctype-hidden-challenge-is-not-visible", "html-doctype-visible-challenge-still-blocks",
-        "html-inline-code-preserves-visible-anchor", "html-hidden-script-cannot-satisfy-anchor",
-        "html-inline-code-counts-for-body-coverage", "html-hidden-script-cannot-satisfy-body-coverage",
-        "html-visible-body-ignores-hidden-challenge-heading", "html-hidden-script-cannot-inflate-visible-length",
+      "root_cause": "Normalize CommonMark escaped punctuation in list prefixes and reuse unreserved URL canonicalization for composite field ownership; preserve prose rejection and record boundaries.",
+      "provider_calls": 0,
+      "predecessor_source_sha256": "5af22f03e56ecc28e41511c2ad23736508e40981f7914b54865741df43dcfffb",
+      "revised_sha256": "6d092487f414f55287fc2b63be09660e8e5b30e0ec1f1f4dec04df714aa01c13",
+      "scoring_regressions_sha256": "574867b68a701232dd1b3074841c6c5dacccd924435fd4fae550aa25bfd1ebd8",
+      "regression_ids": [
+        "html-doctype-hidden-challenge-is-not-visible",
+        "html-doctype-visible-challenge-still-blocks",
+        "html-inline-code-preserves-visible-anchor",
+        "html-hidden-script-cannot-satisfy-anchor",
+        "html-inline-code-counts-for-body-coverage",
+        "html-hidden-script-cannot-satisfy-body-coverage",
+        "html-visible-body-ignores-hidden-challenge-heading",
+        "html-hidden-script-cannot-inflate-visible-length",
         "html-visible-challenge-heading-blocks-body",
-        "dynamic-undeclared-source-language-can-verify-identity", "dynamic-undeclared-source-language-rejects-declared-language",
-        "long-metadata-title-keeps-visible-html-anchor", "long-metadata-title-cannot-expose-script-anchor",
-        "html-inline-challenge-explanation-is-prose", "html-independent-challenge-heading-still-blocks",
-        "combined-problem-cells-across-sections-pass", "combined-problem-cells-cannot-omit-name",
-        "html-head-title-cannot-supply-body", "html-body-anchor-with-head-title-passes",
-        "card-single-line-distinct-typed-fields-pass", "card-unrelated-quantity-cannot-supply-typed-fields",
-        "metadata-title-body-anchor-missing-fails", "metadata-title-body-anchor-visible-passes",
-        "metadata-title-body-coverage-missing-fails", "metadata-title-body-coverage-visible-passes",
-        "metadata-title-composite-missing-fails", "metadata-title-composite-visible-passes",
-        "legacy-title-marker-missing-fails", "legacy-title-marker-visible-passes",
-        "legacy-title-pattern-missing-fails", "legacy-title-pattern-visible-passes",
-        "html-misplaced-title-missing-body-fails", "html-misplaced-title-visible-body-passes",
-        "declared-page-chrome-is-required-stable-text", "missing-declared-page-chrome-fails-full-page-contract",
-        "emphasized-numeric-rank-is-valid-entry", "emphasized-recommendation-is-not-list-entry",
-        "markdown-heading-opens-declared-list-scope", "outside-section-links-do-not-fill-declared-scope",
-        "inline-layout-breaks-preserve-table-fields", "inline-layout-breaks-do-not-repair-missing-table-fields",
-        "declared-redirect-link-base-resolves-relative-records", "declared-redirect-link-base-does-not-allow-other-hosts",
-        "escaped-list-punctuation-retains-entry", "escaped-recommendation-remains-prose",
-        "unreserved-path-encoding-retains-card-fields", "encoded-card-cannot-borrow-next-price"
+        "dynamic-undeclared-source-language-can-verify-identity",
+        "dynamic-undeclared-source-language-rejects-declared-language",
+        "long-metadata-title-keeps-visible-html-anchor",
+        "long-metadata-title-cannot-expose-script-anchor",
+        "html-inline-challenge-explanation-is-prose",
+        "html-independent-challenge-heading-still-blocks",
+        "combined-problem-cells-across-sections-pass",
+        "combined-problem-cells-cannot-omit-name",
+        "html-head-title-cannot-supply-body",
+        "html-body-anchor-with-head-title-passes",
+        "card-single-line-distinct-typed-fields-pass",
+        "card-unrelated-quantity-cannot-supply-typed-fields",
+        "metadata-title-body-anchor-missing-fails",
+        "metadata-title-body-anchor-visible-passes",
+        "metadata-title-body-coverage-missing-fails",
+        "metadata-title-body-coverage-visible-passes",
+        "metadata-title-composite-missing-fails",
+        "metadata-title-composite-visible-passes",
+        "legacy-title-marker-missing-fails",
+        "legacy-title-marker-visible-passes",
+        "legacy-title-pattern-missing-fails",
+        "legacy-title-pattern-visible-passes",
+        "html-misplaced-title-missing-body-fails",
+        "html-misplaced-title-visible-body-passes",
+        "declared-page-chrome-is-required-stable-text",
+        "missing-declared-page-chrome-fails-full-page-contract",
+        "emphasized-numeric-rank-is-valid-entry",
+        "emphasized-recommendation-is-not-list-entry",
+        "markdown-heading-opens-declared-list-scope",
+        "outside-section-links-do-not-fill-declared-scope",
+        "inline-layout-breaks-preserve-table-fields",
+        "inline-layout-breaks-do-not-repair-missing-table-fields",
+        "declared-redirect-link-base-resolves-relative-records",
+        "declared-redirect-link-base-does-not-allow-other-hosts",
+        "escaped-list-punctuation-retains-entry",
+        "escaped-recommendation-remains-prose",
+        "unreserved-path-encoding-retains-card-fields",
+        "encoded-card-cannot-borrow-next-price"
       ],
-      "scope":"Shared scoring implementation provenance only; measured score revisions retain separate per-run receipts and immutable call bytes."
+      "scope": "Shared scoring implementation provenance only; measured score revisions retain separate per-run receipts and immutable call bytes."
     },
     {
       "root_cause": "Accept equivalent plus bullets, adjacent multiline Markdown cards, and declared headings in Markdown table headers without accepting prose or unscoped rows.",
@@ -426,9 +449,484 @@
         "markdown-table-header-cannot-bypass-declared-scope"
       ],
       "scope": "Shared parser and regression bindings only. Frozen measured reports retain their declared scoring revision; this record does not rescore or recertify historical calls."
+    },
+    {
+      "root_cause": "Merge the shared scorer corrections and the independently retained delimiter performance correction without altering historical provider calls or stored verdicts.",
+      "provider_calls": 0,
+      "predecessor_source_sha256": "b97dc5f788fc6da194c6e3b8987f039468960a68328d2d061f3b941acca5750f",
+      "parallel_predecessor_source_sha256": "c0fce0df529aec9d024ea82dde7caf31a69f0297fb9c79e1ea5b36e25ead9372",
+      "revised_sha256": "d9d961022d66a29703b262fe2db987d0d17c6a915c896cf8825ab46221a24044",
+      "scoring_regressions_sha256": "b1f61cdfc5e2be265b944cfd6c767b9dfd1823446378e73a89eb08ed8980a2ad",
+      "regression_ids": [
+        "adjacent-multiline-markdown-cards-keep-records",
+        "card-single-line-distinct-typed-fields-pass",
+        "card-unrelated-quantity-cannot-supply-typed-fields",
+        "combined-problem-cells-across-sections-pass",
+        "combined-problem-cells-cannot-omit-name",
+        "declared-page-chrome-is-required-stable-text",
+        "declared-redirect-link-base-does-not-allow-other-hosts",
+        "declared-redirect-link-base-resolves-relative-records",
+        "dynamic-undeclared-source-language-can-verify-identity",
+        "dynamic-undeclared-source-language-rejects-declared-language",
+        "emphasized-numeric-rank-is-valid-entry",
+        "emphasized-recommendation-is-not-list-entry",
+        "encoded-card-cannot-borrow-next-price",
+        "escaped-list-punctuation-retains-entry",
+        "escaped-recommendation-remains-prose",
+        "html-body-anchor-with-head-title-passes",
+        "html-doctype-hidden-challenge-is-not-visible",
+        "html-doctype-visible-challenge-still-blocks",
+        "html-head-title-cannot-supply-body",
+        "html-hidden-script-cannot-inflate-visible-length",
+        "html-hidden-script-cannot-satisfy-anchor",
+        "html-hidden-script-cannot-satisfy-body-coverage",
+        "html-independent-challenge-heading-still-blocks",
+        "html-inline-challenge-explanation-is-prose",
+        "html-inline-code-counts-for-body-coverage",
+        "html-inline-code-preserves-visible-anchor",
+        "html-misplaced-title-missing-body-fails",
+        "html-misplaced-title-visible-body-passes",
+        "html-visible-body-ignores-hidden-challenge-heading",
+        "html-visible-challenge-heading-blocks-body",
+        "inline-layout-breaks-do-not-repair-missing-table-fields",
+        "inline-layout-breaks-preserve-table-fields",
+        "legacy-title-marker-missing-fails",
+        "legacy-title-marker-visible-passes",
+        "legacy-title-pattern-missing-fails",
+        "legacy-title-pattern-visible-passes",
+        "long-metadata-title-cannot-expose-script-anchor",
+        "long-metadata-title-keeps-visible-html-anchor",
+        "markdown-heading-opens-declared-list-scope",
+        "markdown-plus-list-keeps-named-records",
+        "markdown-plus-prose-is-not-a-record-list",
+        "markdown-table-header-cannot-bypass-declared-scope",
+        "markdown-table-header-opens-declared-scope",
+        "metadata-title-body-anchor-missing-fails",
+        "metadata-title-body-anchor-visible-passes",
+        "metadata-title-body-coverage-missing-fails",
+        "metadata-title-body-coverage-visible-passes",
+        "metadata-title-composite-missing-fails",
+        "metadata-title-composite-visible-passes",
+        "missing-declared-page-chrome-fails-full-page-contract",
+        "multiline-card-followed-by-prose-does-not-borrow-record",
+        "outside-section-links-do-not-fill-declared-scope",
+        "unmatched-markdown-brackets-cannot-supply-missing-prose",
+        "unmatched-markdown-brackets-retains-required-prose",
+        "unreserved-path-encoding-retains-card-fields"
+      ]
+    },
+    {
+      "provider_calls": 0,
+      "predecessor_source_sha256": "d9d961022d66a29703b262fe2db987d0d17c6a915c896cf8825ab46221a24044",
+      "revised_sha256": "30731d9556b150ec91c48074a4b12d37e14acc1569d78194d1aa6f6b7d6f9788",
+      "task_verdicts_unchanged": true,
+      "root_cause": "Completed calls lacking required final-URL or language observations are failed measurements, not missing benchmark references. Unresolved benchmark rules remain unavailable.",
+      "scoring_regressions_sha256": "d3a9cffb5a476dcbb73958ef1f2c48a1d0414ff7a46d1dd1dbf3f2750f2d9e1a",
+      "regression_ids": [
+        "adjacent-multiline-markdown-cards-keep-records",
+        "card-single-line-distinct-typed-fields-pass",
+        "card-unrelated-quantity-cannot-supply-typed-fields",
+        "combined-problem-cells-across-sections-pass",
+        "combined-problem-cells-cannot-omit-name",
+        "declared-page-chrome-is-required-stable-text",
+        "declared-redirect-link-base-does-not-allow-other-hosts",
+        "declared-redirect-link-base-resolves-relative-records",
+        "dynamic-undeclared-source-language-can-verify-identity",
+        "dynamic-undeclared-source-language-rejects-declared-language",
+        "emphasized-numeric-rank-is-valid-entry",
+        "emphasized-recommendation-is-not-list-entry",
+        "encoded-card-cannot-borrow-next-price",
+        "escaped-list-punctuation-retains-entry",
+        "escaped-recommendation-remains-prose",
+        "html-body-anchor-with-head-title-passes",
+        "html-doctype-hidden-challenge-is-not-visible",
+        "html-doctype-visible-challenge-still-blocks",
+        "html-head-title-cannot-supply-body",
+        "html-hidden-script-cannot-inflate-visible-length",
+        "html-hidden-script-cannot-satisfy-anchor",
+        "html-hidden-script-cannot-satisfy-body-coverage",
+        "html-independent-challenge-heading-still-blocks",
+        "html-inline-challenge-explanation-is-prose",
+        "html-inline-code-counts-for-body-coverage",
+        "html-inline-code-preserves-visible-anchor",
+        "html-misplaced-title-missing-body-fails",
+        "html-misplaced-title-visible-body-passes",
+        "html-visible-body-ignores-hidden-challenge-heading",
+        "html-visible-challenge-heading-blocks-body",
+        "inline-layout-breaks-do-not-repair-missing-table-fields",
+        "inline-layout-breaks-preserve-table-fields",
+        "legacy-title-marker-missing-fails",
+        "legacy-title-marker-visible-passes",
+        "legacy-title-pattern-missing-fails",
+        "legacy-title-pattern-visible-passes",
+        "long-metadata-title-cannot-expose-script-anchor",
+        "long-metadata-title-keeps-visible-html-anchor",
+        "markdown-heading-opens-declared-list-scope",
+        "markdown-plus-list-keeps-named-records",
+        "markdown-plus-prose-is-not-a-record-list",
+        "markdown-table-header-cannot-bypass-declared-scope",
+        "markdown-table-header-opens-declared-scope",
+        "metadata-title-body-anchor-missing-fails",
+        "metadata-title-body-anchor-visible-passes",
+        "metadata-title-body-coverage-missing-fails",
+        "metadata-title-body-coverage-visible-passes",
+        "metadata-title-composite-missing-fails",
+        "metadata-title-composite-visible-passes",
+        "missing-declared-page-chrome-fails-full-page-contract",
+        "multiline-card-followed-by-prose-does-not-borrow-record",
+        "outside-section-links-do-not-fill-declared-scope",
+        "required-final-url-missing-is-a-measured-failure",
+        "required-final-url-present-keeps-valid-body",
+        "unmatched-markdown-brackets-cannot-supply-missing-prose",
+        "unmatched-markdown-brackets-retains-required-prose",
+        "unreserved-path-encoding-retains-card-fields"
+      ]
+    },
+    {
+      "provider_calls": 0,
+      "predecessor_source_sha256": "30731d9556b150ec91c48074a4b12d37e14acc1569d78194d1aa6f6b7d6f9788",
+      "revised_sha256": "181578a2be34f26ddc22dfd1590a84b3367a3b161f01656f0215914e54412dd4",
+      "task_verdicts_unchanged": false,
+      "root_cause": "Web Fetch body acceptance incorrectly required returned final-URL and HTML-language metadata. Target content and blocked-page checks are authoritative; optional metadata remains diagnostic. All methods are rescored from immutable saved output, without changes to measured tasks or references.",
+      "scoring_regressions_sha256": "3c82b56fc8bd13ab3d3b25168b6dafd5b24c29c3409fb41c2f5521e6aabd9346",
+      "regression_ids": [
+        "adjacent-multiline-markdown-cards-keep-records",
+        "body-without-final-url-passes",
+        "card-single-line-distinct-typed-fields-pass",
+        "card-unrelated-quantity-cannot-supply-typed-fields",
+        "combined-problem-cells-across-sections-pass",
+        "combined-problem-cells-cannot-omit-name",
+        "content-policy-dynamic-final-page-mismatch-cannot-be-counted-as-a-pass",
+        "content-policy-dynamic-search-query-mismatch-is-a-different-page",
+        "content-policy-dynamic-source-document-language-mismatch-is-not-verified",
+        "content-policy-dynamic-undeclared-source-language-rejects-declared-language",
+        "content-policy-required-final-url-missing-is-a-measured-failure",
+        "content-policy-required-final-url-present-keeps-valid-body",
+        "declared-page-chrome-is-required-stable-text",
+        "declared-redirect-link-base-does-not-allow-other-hosts",
+        "declared-redirect-link-base-resolves-relative-records",
+        "dynamic-undeclared-source-language-can-verify-identity",
+        "dynamic-undeclared-source-language-rejects-declared-language",
+        "emphasized-numeric-rank-is-valid-entry",
+        "emphasized-recommendation-is-not-list-entry",
+        "encoded-card-cannot-borrow-next-price",
+        "escaped-list-punctuation-retains-entry",
+        "escaped-recommendation-remains-prose",
+        "html-body-anchor-with-head-title-passes",
+        "html-doctype-hidden-challenge-is-not-visible",
+        "html-doctype-visible-challenge-still-blocks",
+        "html-head-title-cannot-supply-body",
+        "html-hidden-script-cannot-inflate-visible-length",
+        "html-hidden-script-cannot-satisfy-anchor",
+        "html-hidden-script-cannot-satisfy-body-coverage",
+        "html-independent-challenge-heading-still-blocks",
+        "html-inline-challenge-explanation-is-prose",
+        "html-inline-code-counts-for-body-coverage",
+        "html-inline-code-preserves-visible-anchor",
+        "html-misplaced-title-missing-body-fails",
+        "html-misplaced-title-visible-body-passes",
+        "html-visible-body-ignores-hidden-challenge-heading",
+        "html-visible-challenge-heading-blocks-body",
+        "inline-layout-breaks-do-not-repair-missing-table-fields",
+        "inline-layout-breaks-preserve-table-fields",
+        "legacy-title-marker-missing-fails",
+        "legacy-title-marker-visible-passes",
+        "legacy-title-pattern-missing-fails",
+        "legacy-title-pattern-visible-passes",
+        "long-metadata-title-cannot-expose-script-anchor",
+        "long-metadata-title-keeps-visible-html-anchor",
+        "markdown-heading-opens-declared-list-scope",
+        "markdown-plus-list-keeps-named-records",
+        "markdown-plus-prose-is-not-a-record-list",
+        "markdown-table-header-cannot-bypass-declared-scope",
+        "markdown-table-header-opens-declared-scope",
+        "metadata-title-body-anchor-missing-fails",
+        "metadata-title-body-anchor-visible-passes",
+        "metadata-title-body-coverage-missing-fails",
+        "metadata-title-body-coverage-visible-passes",
+        "metadata-title-composite-missing-fails",
+        "metadata-title-composite-visible-passes",
+        "missing-declared-page-chrome-fails-full-page-contract",
+        "multiline-card-followed-by-prose-does-not-borrow-record",
+        "outside-section-links-do-not-fill-declared-scope",
+        "required-final-url-missing-is-a-measured-failure",
+        "required-final-url-present-keeps-valid-body",
+        "unmatched-markdown-brackets-cannot-supply-missing-prose",
+        "unmatched-markdown-brackets-retains-required-prose",
+        "unreserved-path-encoding-retains-card-fields",
+        "verification-page-without-final-url-fails",
+        "wrong-body-content-policy-dynamic-final-page-mismatch-cannot-be-counted-as-a-pass",
+        "wrong-body-content-policy-dynamic-search-query-mismatch-is-a-different-page",
+        "wrong-body-content-policy-dynamic-source-document-language-mismatch-is-not-verified",
+        "wrong-body-content-policy-dynamic-undeclared-source-language-rejects-declared-language"
+      ],
+      "superseded_regression_ids": {
+        "dynamic-final-page-mismatch-cannot-be-counted-as-a-pass": "content-policy-dynamic-final-page-mismatch-cannot-be-counted-as-a-pass",
+        "dynamic-search-query-mismatch-is-a-different-page": "content-policy-dynamic-search-query-mismatch-is-a-different-page",
+        "dynamic-source-document-language-mismatch-is-not-verified": "content-policy-dynamic-source-document-language-mismatch-is-not-verified",
+        "dynamic-undeclared-source-language-rejects-declared-language": "content-policy-dynamic-undeclared-source-language-rejects-declared-language",
+        "required-final-url-missing-is-a-measured-failure": "content-policy-required-final-url-missing-is-a-measured-failure",
+        "required-final-url-present-keeps-valid-body": "content-policy-required-final-url-present-keeps-valid-body"
+      }
+    },
+    {
+      "root_cause": "Stable-text contracts conflated equivalent visible labels, independent anchor order, and task-relevant body scope with one fixed presentation. Shared acceptance now keeps each semantic requirement strict while allowing independently verified equivalents and excluding responsive page chrome from body coverage.",
+      "provider_calls": 0,
+      "predecessor_source_sha256": "181578a2be34f26ddc22dfd1590a84b3367a3b161f01656f0215914e54412dd4",
+      "revised_sha256": "5f983ec0abadb1bd4887f93c4ef8e1a3e8312d7dbe67fa02a22a590024bc9039",
+      "scoring_regressions_sha256": "e09c049dfefbe6e8f616e6c7e642e290262fd408e49aab7261d4d9d750d31ba1",
+      "regression_ids": [
+        "adjacent-multiline-markdown-cards-keep-records",
+        "body-without-final-url-passes",
+        "card-single-line-distinct-typed-fields-pass",
+        "card-unrelated-quantity-cannot-supply-typed-fields",
+        "combined-problem-cells-across-sections-pass",
+        "combined-problem-cells-cannot-omit-name",
+        "content-policy-dynamic-final-page-mismatch-cannot-be-counted-as-a-pass",
+        "content-policy-dynamic-search-query-mismatch-is-a-different-page",
+        "content-policy-dynamic-source-document-language-mismatch-is-not-verified",
+        "content-policy-dynamic-undeclared-source-language-rejects-declared-language",
+        "content-policy-required-final-url-missing-is-a-measured-failure",
+        "content-policy-required-final-url-present-keeps-valid-body",
+        "declared-page-chrome-is-required-stable-text",
+        "declared-redirect-link-base-does-not-allow-other-hosts",
+        "declared-redirect-link-base-resolves-relative-records",
+        "dynamic-undeclared-source-language-can-verify-identity",
+        "dynamic-undeclared-source-language-rejects-declared-language",
+        "emphasized-numeric-rank-is-valid-entry",
+        "emphasized-recommendation-is-not-list-entry",
+        "encoded-card-cannot-borrow-next-price",
+        "escaped-list-punctuation-retains-entry",
+        "escaped-recommendation-remains-prose",
+        "html-body-anchor-with-head-title-passes",
+        "html-doctype-hidden-challenge-is-not-visible",
+        "html-doctype-visible-challenge-still-blocks",
+        "html-head-title-cannot-supply-body",
+        "html-hidden-script-cannot-inflate-visible-length",
+        "html-hidden-script-cannot-satisfy-anchor",
+        "html-hidden-script-cannot-satisfy-body-coverage",
+        "html-independent-challenge-heading-still-blocks",
+        "html-inline-challenge-explanation-is-prose",
+        "html-inline-code-counts-for-body-coverage",
+        "html-inline-code-preserves-visible-anchor",
+        "html-misplaced-title-missing-body-fails",
+        "html-misplaced-title-visible-body-passes",
+        "html-visible-body-ignores-hidden-challenge-heading",
+        "html-visible-challenge-heading-blocks-body",
+        "inline-layout-breaks-do-not-repair-missing-table-fields",
+        "inline-layout-breaks-preserve-table-fields",
+        "legacy-title-marker-missing-fails",
+        "legacy-title-marker-visible-passes",
+        "legacy-title-pattern-missing-fails",
+        "legacy-title-pattern-visible-passes",
+        "long-metadata-title-cannot-expose-script-anchor",
+        "long-metadata-title-keeps-visible-html-anchor",
+        "markdown-heading-opens-declared-list-scope",
+        "markdown-plus-list-keeps-named-records",
+        "markdown-plus-prose-is-not-a-record-list",
+        "markdown-table-header-cannot-bypass-declared-scope",
+        "markdown-table-header-opens-declared-scope",
+        "metadata-title-body-anchor-missing-fails",
+        "metadata-title-body-anchor-visible-passes",
+        "metadata-title-body-coverage-missing-fails",
+        "metadata-title-body-coverage-visible-passes",
+        "metadata-title-composite-missing-fails",
+        "metadata-title-composite-visible-passes",
+        "missing-declared-page-chrome-fails-full-page-contract",
+        "multiline-card-followed-by-prose-does-not-borrow-record",
+        "outside-section-links-do-not-fill-declared-scope",
+        "required-final-url-missing-is-a-measured-failure",
+        "required-final-url-present-keeps-valid-body",
+        "unmatched-markdown-brackets-cannot-supply-missing-prose",
+        "unmatched-markdown-brackets-retains-required-prose",
+        "unreserved-path-encoding-retains-card-fields",
+        "verification-page-without-final-url-fails",
+        "wrong-body-content-policy-dynamic-final-page-mismatch-cannot-be-counted-as-a-pass",
+        "wrong-body-content-policy-dynamic-search-query-mismatch-is-a-different-page",
+        "wrong-body-content-policy-dynamic-source-document-language-mismatch-is-not-verified",
+        "wrong-body-content-policy-dynamic-undeclared-source-language-rejects-declared-language",
+        "localized-equivalent-stable-anchor-passes",
+        "unrelated-label-does-not-satisfy-equivalent-stable-anchor",
+        "independent-stable-anchors-pass-in-any-document-order",
+        "independent-stable-anchors-still-require-every-group",
+        "complete-body-passes-without-responsive-navigation-labels",
+        "page-title-without-required-body-still-fails"
+      ],
+      "scope": "Shared acceptance controls and regression bindings. Saved provider outputs are rescored separately; no provider calls or best-result selection."
+    }
+  ],
+  "dynamic_dataset_followups": [
+    {
+      "case_id": "dynamic-065-franceinfo-home",
+      "field_path": [
+        "acceptance_contract",
+        "link_base_url"
+      ],
+      "value": "https://www.franceinfo.fr/",
+      "provider_calls": 0,
+      "predecessor_sha256": "57a138d2c79c9f107124cad3997a7350aa33e40cee3ac1137c5d627f1db098ce",
+      "revised_sha256": "b32c7ad678ddef0377868f88d8fb82b0f84c09b708f67e5688317db96eab9571",
+      "source_authority": {
+        "path": "evaluation/sources/dynamic-065-franceinfo-home/mixed-session-stable-text.json",
+        "sha256": "254111452c2cec1b5a5a9481c5204b01aa029cb06c97563092db9d12208ba58b",
+        "provider_output_used": false
+      },
+      "regression_ids": [
+        "declared-redirect-link-base-resolves-relative-records",
+        "declared-redirect-link-base-does-not-allow-other-hosts"
+      ]
+    },
+    {
+      "case_id": "dynamic-069-ja-nintendo-search",
+      "provider_calls": 0,
+      "predecessor_sha256": "b32c7ad678ddef0377868f88d8fb82b0f84c09b708f67e5688317db96eab9571",
+      "revised_sha256": "c278cdc46a5f9cc193a346d29712861de2f8a16125e8d44934fa15328d1c9686",
+      "root_cause": "The record threshold was bound to a stale 24-item count. Three independent first-render observations contain 10 valid records, so the predeclared 80% rule requires 8.",
+      "source_authority": {
+        "path": "evaluation/revision-sources/dynamic-069-ja-nintendo-search/record-count-correction.json",
+        "sha256": "3aee82fc6c033734058802f0243cbddb6773c0478adef222f895fe65568b00f5",
+        "provider_output_used": false
+      },
+      "changes": [
+        {
+          "field_path": [
+            "acceptance_contract",
+            "entry_scope",
+            "start_pattern"
+          ],
+          "previous_value": "(?m)^#{1,6}[ \\t]+ゲームソフトをさがす[ \\t]*$",
+          "value": "(?m)^\\s*ゲームソフトをさがす\\s*$"
+        },
+        {
+          "field_path": [
+            "acceptance_contract",
+            "minimum_records"
+          ],
+          "previous_value": 20,
+          "value": 8
+        },
+        {
+          "field_path": [
+            "acceptance_contract",
+            "record_count_policy",
+            "minimum_records"
+          ],
+          "previous_value": 20,
+          "value": 8
+        },
+        {
+          "field_path": [
+            "acceptance_contract",
+            "record_count_policy",
+            "reason"
+          ],
+          "previous_value": "Independent current initial-load scope; virtual-list counts use retained container-clipping geometry, excluding prefetch buffer. Diagnostic window only, refresh before formal run.",
+          "value": "Three independent rendered observations found 10 valid records; the 80% threshold therefore requires 8."
+        },
+        {
+          "field_path": [
+            "acceptance_contract",
+            "record_count_policy",
+            "source_evidence_sha256"
+          ],
+          "previous_value": "f64ef5b085267889c394f634421214c40c080a21ba3e00e1051b4e0a33d57826",
+          "value": "da2cf65eb6482e48a619b82d5557f9d37db123fd336f206f78325be142797fdd"
+        },
+        {
+          "field_path": [
+            "acceptance_contract",
+            "record_count_policy",
+            "source_observation_counts"
+          ],
+          "previous_value": [
+            24,
+            24
+          ],
+          "value": [
+            10,
+            10,
+            10
+          ]
+        },
+        {
+          "field_path": [
+            "acceptance_contract",
+            "record_count_policy",
+            "source_observed_count"
+          ],
+          "previous_value": 24,
+          "value": 10
+        }
+      ],
+      "regression_ids": [
+        "rendered-result-section-accepts-visible-table",
+        "rendered-result-section-rejects-source-only-values"
+      ]
+    },
+    {
+      "case_id": "dynamic-082-allocine-films",
+      "provider_calls": 0,
+      "provider_outputs_used": false,
+      "predecessor_sha256": "c278cdc46a5f9cc193a346d29712861de2f8a16125e8d44934fa15328d1c9686",
+      "revised_sha256": "1f3268366b17d490c85b75fbda329e5b3e6143d0a058523c1cad8a73ed916278",
+      "root_cause": "The independent current-browser capture no longer contains the previously required TVActu navigation label, so that stale page-shell anchor was removed. The same revision adds an explicit native execution contract without a selector, answer text, delay or extraction rule.",
+      "source_authority": {
+        "path": "evaluation/dynamic-content-100-moli-webfetch/sources/dynamic-082-allocine-films/current-browser-observation.json",
+        "sha256": "717a0d1a864f561ae80c601c5733fccdfda16120e37b2ff4d0837c2718d86038",
+        "provider_output_used": false
+      },
+      "source_basis": {
+        "observation_method": "rendered_selector_dom_text_with_reference_scope_pruning",
+        "checked_at": "2026-10-13T06:10:46.798835+00:00",
+        "captured_text_contains_removed_anchor": false
+      },
+      "acceptance_effect": {
+        "changed": true,
+        "required_stable_anchor_count_before": 55,
+        "required_stable_anchor_count_after": 54,
+        "removed_required_anchor_id": "phase1-stable-0e2130d4bdb9",
+        "effect": "An otherwise valid result no longer fails solely because TVActu is absent; all 54 remaining anchors, the 57-record minimum, host, entry-path and link rules remain required.",
+        "record_and_link_rules_changed": false
+      },
+      "changes": [
+        {
+          "field_path": [
+            "acceptance_contract",
+            "stable_text_anchors"
+          ],
+          "operation": "remove_list_item",
+          "index": 49,
+          "removed_value": {
+            "id": "phase1-stable-0e2130d4bdb9",
+            "alternatives": [
+              "TVActu"
+            ],
+            "match_scope": "non_record_lines",
+            "source_location": "nav > a",
+            "observation_status": "三次混合会话观察均可见（含全新匿名环境和已有正常会话）",
+            "source_evidence_sha256": "5c0632b98101bfc24446ed9c114f77ce691b8493578f34313b111b708a300ea7"
+          }
+        },
+        {
+          "field_path": [
+            "retrieval_hints"
+          ],
+          "value": {
+            "version": 3,
+            "mode": "native"
+          }
+        },
+        {
+          "field_path": [
+            "source_benchmark"
+          ],
+          "value": {
+            "scenario_track": "dynamic"
+          }
+        }
+      ]
     }
   ],
-  "dynamic_dataset_followups": [{"case_id":"dynamic-065-franceinfo-home","field_path":["acceptance_contract","link_base_url"],"value":"https://www.franceinfo.fr/","provider_calls":0,"predecessor_sha256":"57a138d2c79c9f107124cad3997a7350aa33e40cee3ac1137c5d627f1db098ce","revised_sha256":"b32c7ad678ddef0377868f88d8fb82b0f84c09b708f67e5688317db96eab9571","source_authority":{"path":"evaluation/sources/dynamic-065-franceinfo-home/mixed-session-stable-text.json","sha256":"254111452c2cec1b5a5a9481c5204b01aa029cb06c97563092db9d12208ba58b","provider_output_used":false},"regression_ids":["declared-redirect-link-base-resolves-relative-records","declared-redirect-link-base-does-not-allow-other-hosts"]}],
   "shared_scorer": {
     "main_baseline_sha256": "bd0b0118c84b0ba03d9241aba74be84330a9a9dd20f98f62a3ac8be396c79725",
     "revised_sha256": "130d8de3c553e7f8d7ecc1ba3832aa6c03ad55c9f9b53ad4661a3faaddae1a39",
@@ -446,5 +944,81 @@
       "dynamic-undeclared-source-language-can-verify-identity",
       "dynamic-undeclared-source-language-rejects-declared-language"
     ]
+  },
+  "shared_scorer_parallel_followups": [
+    {
+      "root_cause": "Both visible Markdown links and stable-task link unwrapping repeatedly scanned suffixes for unmatched delimiters. A shared delimiter index preserves balanced, escaped, nested and span-bounded parsing while avoiding quadratic work.",
+      "change_kind": "performance_only",
+      "provider_calls": 0,
+      "provider_outputs_used": false,
+      "stored_scores_changed": false,
+      "predecessor_source_sha256": "6d092487f414f55287fc2b63be09660e8e5b30e0ec1f1f4dec04df714aa01c13",
+      "revised_sha256": "c0fce0df529aec9d024ea82dde7caf31a69f0297fb9c79e1ea5b36e25ead9372",
+      "scoring_regressions_sha256": "f8ab69c9eb61ee5048d9af3385e19816e3327a98f372f0b5f8163fe37a9d8348",
+      "synthetic_input_count": 10000,
+      "synthetic_metric_changes": 0,
+      "synthetic_task_decision_changes": 0,
+      "compatibility_evidence": {
+        "path": "evidence/research/webfetch-430-refresh-20261008/markdown-parser-equivalence-receipt.json",
+        "sha256": "b9adadf5c5e549219af9bf84c0d08c910ed19db965181fab962261f859ab7e19",
+        "baseline_commit": "a205217775cb1c4dba476013a8bbb1f36e7f9b59"
+      },
+      "regression_ids": [
+        "html-doctype-hidden-challenge-is-not-visible",
+        "html-doctype-visible-challenge-still-blocks",
+        "html-inline-code-preserves-visible-anchor",
+        "html-hidden-script-cannot-satisfy-anchor",
+        "html-inline-code-counts-for-body-coverage",
+        "html-hidden-script-cannot-satisfy-body-coverage",
+        "html-visible-body-ignores-hidden-challenge-heading",
+        "html-hidden-script-cannot-inflate-visible-length",
+        "html-visible-challenge-heading-blocks-body",
+        "dynamic-undeclared-source-language-can-verify-identity",
+        "dynamic-undeclared-source-language-rejects-declared-language",
+        "long-metadata-title-keeps-visible-html-anchor",
+        "long-metadata-title-cannot-expose-script-anchor",
+        "html-inline-challenge-explanation-is-prose",
+        "html-independent-challenge-heading-still-blocks",
+        "combined-problem-cells-across-sections-pass",
+        "combined-problem-cells-cannot-omit-name",
+        "html-head-title-cannot-supply-body",
+        "html-body-anchor-with-head-title-passes",
+        "card-single-line-distinct-typed-fields-pass",
+        "card-unrelated-quantity-cannot-supply-typed-fields",
+        "metadata-title-body-anchor-missing-fails",
+        "metadata-title-body-anchor-visible-passes",
+        "metadata-title-body-coverage-missing-fails",
+        "metadata-title-body-coverage-visible-passes",
+        "metadata-title-composite-missing-fails",
+        "metadata-title-composite-visible-passes",
+        "legacy-title-marker-missing-fails",
+        "legacy-title-marker-visible-passes",
+        "legacy-title-pattern-missing-fails",
+        "legacy-title-pattern-visible-passes",
+        "html-misplaced-title-missing-body-fails",
+        "html-misplaced-title-visible-body-passes",
+        "declared-page-chrome-is-required-stable-text",
+        "missing-declared-page-chrome-fails-full-page-contract",
+        "emphasized-numeric-rank-is-valid-entry",
+        "emphasized-recommendation-is-not-list-entry",
+        "markdown-heading-opens-declared-list-scope",
+        "outside-section-links-do-not-fill-declared-scope",
+        "inline-layout-breaks-preserve-table-fields",
+        "inline-layout-breaks-do-not-repair-missing-table-fields",
+        "declared-redirect-link-base-resolves-relative-records",
+        "declared-redirect-link-base-does-not-allow-other-hosts",
+        "escaped-list-punctuation-retains-entry",
+        "escaped-recommendation-remains-prose",
+        "unreserved-path-encoding-retains-card-fields",
+        "encoded-card-cannot-borrow-next-price",
+        "unmatched-markdown-brackets-retains-required-prose",
+        "unmatched-markdown-brackets-cannot-supply-missing-prose"
+      ]
+    }
+  ],
+  "current_shared_scorer_authority": {
+    "path": "research/body-table-column-continuity-scoring-revision.json",
+    "sha256": "f9c9b1f283c122b6768291b94d086fc87ae24c3e153c94c9079fc35fce03483e",
+    "current_scoring_regressions_sha256": "f9660650ebeee38df87491ad913c2946c67431c1ddecef5f968f2e006194d3df"
   }
 }
diff --git a/research/provider-pricing.json b/research/provider-pricing.json
index 2b4c87624..96d1192c7 100644
--- a/research/provider-pricing.json
+++ b/research/provider-pricing.json
@@ -11,7 +11,7 @@
       "commitment": "Hobby $19/月；年付 $190 起",
       "discount": "套餐量越大单价越低；年付省 16.7%–20.0%；追加 $1–5/千积分",
       "headline": "月套餐 + 年付优惠 + $5 批次追加",
-      "scope": "本轮正文与资源题使用 /v2/scrape 和 proxy=auto；原文件题只请求 rawBase64，并传入 parsers=[] 禁用 PDF 文字解析。官方现行规则下，基础 Scrape、auto 和 enhanced 代理均按 1 credit/页计费，自动升级重试不重复收费；禁用解析的 rawBase64 PDF 整份固定 1 credit。本表是官方报价边界，不是本轮实测账单；容量预检只校验账户能否覆盖声明调用数，不代表实际扣费。",
+      "scope": "Scrape 正文与资源模式使用 /v2/scrape 和 proxy=auto；原文件模式只请求 rawBase64，并传入 parsers=[] 禁用 PDF 文字解析。官方现行规则下，基础 Scrape、auto 和 enhanced 代理均按 1 credit/页计费，自动升级重试不重复收费；禁用解析的 rawBase64 PDF 整份固定 1 credit。本表记录官方报价边界，不代表调用方的实际账单；容量预检只校验账户能否覆盖声明调用数，不代表实际扣费。",
       "credits_per_page": 1,
       "sources": [
         {"label":"价格与账期明细", "url":"https://www.firecrawl.dev/pricing.md"},
@@ -31,8 +31,8 @@
         ["基础 Scrape / auto / enhanced", "1 credit/页", "auto 在特定源站状态下最多升级重试一次；当前 enhanced 与重试均不加收积分"],
         ["JSON 模型抽取", "+4 credits/页", "普通网页总计 5；不能按基础单价预算"],
         ["提示注入检查 / ZDR", "分别 +4 / +1 credits/页", "检查仅用于 JSON：成功共 9；检查执行后失败共 5（不含其他加价）；ZDR 可另叠加"],
-        ["PDF 文字解析", "基础价之上 +1 credit/PDF 页", "Billing 按附加费列示；本轮原文件题传 parsers=[]，不解析，rawBase64 整份 PDF 固定 1 credit"],
-        ["Interact 浏览器交互", "2–7 credits/分钟，至少 1 分钟", "纯代码 2；使用 prompt 7；不属于本轮 Scrape"],
+        ["PDF 文字解析", "基础价之上 +1 credit/PDF 页", "Billing 按附加费列示；原文件模式传 parsers=[] 时不解析，rawBase64 整份 PDF 固定 1 credit"],
+        ["Interact 浏览器交互", "2–7 credits/分钟，至少 1 分钟", "纯代码 2；使用 prompt 7；不属于 Scrape 模式"],
         ["X / Twitter", "30 credits/请求；JSON 为 34", "特殊域名走 Grok，非标准页价"]
       ],
       "offers":[
@@ -55,7 +55,7 @@
       "commitment":"按量 $0.008/credit；月套餐 $30 起",
       "discount":"积分量大折扣；未找到公开年付优惠",
       "headline":"按成功 URL 累积扣积分",
-      "scope":"本轮使用 Advanced Extract。套餐表按 Basic 满额换算；本轮 Advanced 用量相同则积分翻倍、每千页价格翻倍，不能把搜索的一次调用价格套给 Extract。",
+      "scope":"Advanced Extract 模式下，套餐表按 Basic 满额换算；相同用量的 Advanced Extract 积分翻倍、每千页价格翻倍，不能把搜索的一次调用价格套给 Extract。",
       "credits_per_page":0.4,
       "sources":[
         {"label":"积分单价与套餐", "url":"https://docs.tavily.com/documentation/api-credits"},
@@ -68,7 +68,7 @@
         {"name":"Growth", "credits_monthly":100000, "monthly_usd":500, "overage":"按量 $0.008/credit"}
       ],
       "rate_headers":["模式", "每千成功页积分", "按量每千页", "月套餐满额每千页"],
-      "rates":[["Basic", "200", "$1.6", "$1–1.5"],["Advanced（本轮）", "400", "$3.2", "$2–3"]],
+      "rates":[["Basic", "200", "$1.6", "$1–1.5"],["Advanced", "400", "$3.2", "$2–3"]],
       "terms":[
         ["免费额度", "每月 1,000 credits，无需绑卡。若全部用于 Extract，可换算为 5,000 个 Basic 或 2,500 个 Advanced 成功 URL；不是额外赠送的独立页额度。"],
         ["扣费与批量调用", "失败 URL 不扣费。接口说明尚未累计到 5 个成功 URL 时 usage.credits 可为 0；不能对每次单 URL 调用单独向上取整为 1 credit。未公开跨账期余数的完整结算规则。"],
@@ -82,7 +82,7 @@
       "commitment":"按量预付积分；无订阅或最低消费",
       "discount":"企业量大折扣询价；未公布阶梯或年付折扣",
       "headline":"正文、摘录、摘要分别计费",
-      "scope":"本轮是给定 URL 的 Contents，text=true，不是 Search。每页每种内容类型单独计费，不能把一次批量请求当成一页；链接和图片地址不等于下载原文件。",
+      "scope":"给定 URL 的 Contents 模式使用 text=true，不是 Search。每页每种内容类型单独计费，不能把一次批量请求当成一页；链接和图片地址不等于下载原文件。",
       "sources":[
         {"label":"Contents 单价与计费单位", "url":"https://exa.ai/docs/reference/pricing"},
         {"label":"免费额度与方案", "url":"https://exa.ai/pricing"},
@@ -90,11 +90,11 @@
         {"label":"逐 URL 状态与 costDollars", "url":"https://exa.ai/docs/reference/get-contents"}
       ],
       "rate_headers":["返回内容", "每千页价格", "条件"],
-      "rates":[["Text（本轮正文）", "$1", "1 种内容"],["Text + Highlights 或 Summary", "$2", "2 种内容；Summary 不再重复加一遍"],["Text + Highlights + Summary", "$3", "3 种内容"],["Enterprise", "询价", "量大折扣与 SLA；无公开阶梯"]],
+      "rates":[["Text", "$1", "1 种内容"],["Text + Highlights 或 Summary", "$2", "2 种内容；Summary 不再重复加一遍"],["Text + Highlights + Summary", "$3", "3 种内容"],["Enterprise", "询价", "量大折扣与 SLA；无公开阶梯"]],
       "terms":[
         ["免费与充值", "注册赠 $20；Free Tier 每月 $10 credits。只取 Text 时分别可折算 20,000 与 10,000 页，额度与其他 API 共用。自动充值最低每次 $5，不是月订阅最低消费。定价页另列创业与教育申请计划，最高 $1,000 积分；不作为所有客户自动享有的折扣。"],
-        ["失败扣费", "所查普通 API Key 计费文档没有明确的所有失败均免费的承诺；应核验逐 URL 状态与 costDollars。x402 按请求参数计算付款，是不同支付方式，不能套用为本轮的结算规则。"],
-        ["价格范围", "公开定价按内容类型分别收费。泛称“包含内容”的搜索描述不意味着独立 Contents 免费；年付折扣、免费积分结转及本轮 extras 字段的独立加价未获公开确认。"]
+        ["失败扣费", "所查普通 API Key 计费文档没有明确的所有失败均免费的承诺；应核验逐 URL 状态与 costDollars。x402 按请求参数计算付款，是不同支付方式，不能套用为 Contents 的结算规则。"],
+        ["价格范围", "公开定价按内容类型分别收费。泛称“包含内容”的搜索描述不意味着独立 Contents 免费；年付折扣、免费积分结转及extras 字段的独立加价未获公开确认。"]
       ]
     },
     {
@@ -104,7 +104,7 @@
       "commitment":"Workers Paid $5/月起，含 10 浏览器小时",
       "discount":"Free 10 分钟/天；未公开时长量阶折扣",
       "headline":"按浏览器时间，不按请求数",
-      "scope":"官方现称 Browser Run。本轮 /markdown 属于 Quick Actions，只收浏览器时长费用，不收 Browser Sessions 的并发费用；不是 Workers AI toMarkdown 或 Markdown for Agents。",
+      "scope":"官方现称 Browser Run。/markdown 属于 Quick Actions，只收浏览器时长费用，不收 Browser Sessions 的并发费用；不是 Workers AI toMarkdown 或 Markdown for Agents。",
       "sources":[
         {"label":"Browser Run 定价与取整", "url":"https://developers.cloudflare.com/browser-run/pricing/"},
         {"label":"Workers 基础月费", "url":"https://developers.cloudflare.com/workers/platform/pricing/"},
@@ -121,12 +121,12 @@
     }
   ],
   "other_methods":[
-    {"ids":["kitesurf"], "label":"Kitesurf · Cloudflare Browser Run /markdown", "status":"Beta 期免费；账户级限制", "note":"2026-09-07 核验的 Kitesurf 专项文档明确写明 Beta 期免费且受每账户限制。通用 Browser Run 另有浏览器时长计价；在专项文档改口前，不把通用超额价格当成 Kitesurf Beta 的已证实单价。", "sources":[{"label":"官方 Kitesurf 文档", "url":"https://developers.cloudflare.com/browser-run/kitesurf/"},{"label":"Browser Run 通用定价", "url":"https://developers.cloudflare.com/browser-run/pricing/"}]},
-    {"ids":["lightpanda","obscura","moli-1.0.6","moli","moli-1.1.3","moli-1.1.7","chromium"], "label":"Lightpanda / Obscura / Moli 1.0.6 / 1.1.5 / 1.1.3 / 1.1.7 / Chromium", "status":"本轮本地浏览器；无托管调用单价", "note":"核验于 2026-09-17。算力、网络、存储、代理和维护成本自担；没有测量这些成本，不把本地调用等同于零成本。官方托管产品或服务价格不属于本轮执行模式。", "sources":[{"label":"Lightpanda", "url":"https://github.com/lightpanda-io/browser"},{"label":"Obscura", "url":"https://github.com/h4ckf0r0day/obscura"},{"label":"Moli", "url":"https://github.com/lexmount/moli/releases/tag/v1.1.7"},{"label":"Chrome Headless", "url":"https://developer.chrome.com/docs/automation-and-testing/headless"}]},
-    {"ids":["moli-1.1.11"], "label":"Moli 1.1.11", "status":"本轮本地浏览器；无托管调用单价", "note":"核验于 2026-09-28。算力、网络、存储、代理和维护成本自担；没有测量这些成本，不把本地调用等同于零成本。官方托管产品或服务价格不属于本轮执行模式。", "sources":[{"label":"Moli 1.1.11", "url":"https://github.com/lexmount/moli/releases/tag/v1.1.11"}]},
+    {"ids":["kitesurf"], "label":"Kitesurf · Cloudflare Browser Run", "status":"Beta 期免费；账户级限制", "note":"2026-10-09 核验：Kitesurf 专项文档仍标明 Beta 期免费，受账户用量限制。通用 Browser Run 另有浏览器时长计价；在专项文档改口前，不把通用超额价格当成 Kitesurf Beta 的已证实单价。", "sources":[{"label":"官方 Kitesurf 文档", "url":"https://developers.cloudflare.com/browser-run/kitesurf/"},{"label":"Browser Run 通用定价", "url":"https://developers.cloudflare.com/browser-run/pricing/"}]},
+    {"ids":["lightpanda","obscura","moli-1.0.6","moli","moli-1.1.3","moli-1.1.7","chromium"], "label":"Lightpanda / Obscura / Moli / Chromium", "status":"本地浏览器；无托管调用单价", "note":"核验于 2026-09-17。算力、网络、存储、代理和维护成本自担；没有测量这些成本，不把本地调用等同于零成本。官方托管产品或服务价格不属于本地执行模式。", "sources":[{"label":"Lightpanda", "url":"https://github.com/lightpanda-io/browser"},{"label":"Obscura", "url":"https://github.com/h4ckf0r0day/obscura"},{"label":"Moli", "url":"https://github.com/lexmount/moli/releases/tag/v1.1.7"},{"label":"Chrome Headless", "url":"https://developer.chrome.com/docs/automation-and-testing/headless"}]},
+    {"ids":["moli-1.1.11"], "label":"Moli 1.1.11", "status":"本地浏览器；无托管调用单价", "note":"核验于 2026-09-28。算力、网络、存储、代理和维护成本自担；没有测量这些成本，不把本地调用等同于零成本。官方托管产品或服务价格不属于本地执行模式。", "sources":[{"label":"Moli 1.1.11", "url":"https://github.com/lexmount/moli/releases/tag/v1.1.11"}]},
     {"ids":["lexmount-cn","lexmount-global"], "label":"Lexmount CN / Global", "status":"未查到公开价格", "note":"官方 WebFetch 文档标记内测；两个区域分别实测，不能据此推断价格相同。价格未公布不代表免费。", "sources":[{"label":"官方 WebFetch 文档", "url":"https://browser.lexmount.com/en/docs/webfetch"}]},
-    {"ids":["moli-webfetch"], "label":"Moli WebFetch", "status":"本轮本地 CLI；无托管 API 单价", "note":"Moli 可独立运行；本地算力、网络和代理自担。Lexmount 托管浏览器是另一个产品。", "sources":[{"label":"官方项目说明", "url":"https://github.com/lexmount/moli"}]},
-    {"ids":["crawl4ai"], "label":"Crawl4AI", "status":"本轮本地开源库；非云套餐", "note":"计算、浏览器、网络及代理成本自担；商业云服务价格不能当成本轮本地调用的费用。", "sources":[{"label":"官方文档", "url":"https://docs.crawl4ai.com/"}]},
-    {"ids":["cowagent-built-in","openclaw-built-in","deepseek-harness-built-in","langchain-webbase"], "label":"CowAgent / OpenClaw / DeepSeek Harness / LangChain", "status":"本轮内置或本地实现", "note":"没有调用其聊天模型或付费回退 API；不引用模型 token 价格。运行与维护成本不等于零。", "sources":[{"label":"本轮接口与实现", "url":"#method-guide-interfaces"}]}
+    {"ids":["moli-webfetch"], "label":"Moli WebFetch", "status":"本地 CLI；无托管 API 单价", "note":"Moli 可独立运行；本地算力、网络和代理自担。Lexmount 托管浏览器是另一个产品。", "sources":[{"label":"官方项目说明", "url":"https://github.com/lexmount/moli"}]},
+    {"ids":["crawl4ai"], "label":"Crawl4AI", "status":"本地开源库；非云套餐", "note":"计算、浏览器、网络及代理成本自担；商业云服务价格不能当成本地调用的费用。", "sources":[{"label":"官方文档", "url":"https://docs.crawl4ai.com/"}]},
+    {"ids":["cowagent-built-in","openclaw-built-in","deepseek-harness-built-in","langchain-webbase"], "label":"CowAgent / OpenClaw / DeepSeek Harness / LangChain", "status":"内置或本地实现", "note":"没有调用其聊天模型或付费回退 API；不引用模型 token 价格。运行与维护成本不等于零。", "sources":[{"label":"接口与实现", "url":"#method-guide-interfaces"}]}
   ]
 }
diff --git a/research/risk-control-body-scope-revision.json b/research/risk-control-body-scope-revision.json
new file mode 100644
index 000000000..dc187e413
--- /dev/null
+++ b/research/risk-control-body-scope-revision.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": 2,
+  "kind": "risk_control_body_scope_policy_revision",
+  "provider_calls": 0,
+  "correction_provenance": {
+    "category": "acceptance-contract",
+    "root_cause": "Page-shell stable anchors incorrectly veto outputs that satisfy the independently declared initial-load body or record contract.",
+    "regression_ids": [
+      "explicit-body-without-page-shell-passes",
+      "page-shell-without-complete-body-fails",
+      "explicit-record-without-page-shell-passes",
+      "page-shell-with-incomplete-record-fails",
+      "explicit-record-placeholder-link-fails",
+      "anchor-only-contract-missing-shell-fails",
+      "anchor-only-contract-present-shell-passes",
+      "explicit-body-request-failure-stays-failed",
+      "body-and-record-both-remain-required"
+    ],
+    "verdict_corrections": {
+      "false_positives": 0,
+      "false_negatives": 0,
+      "total": 0
+    }
+  },
+  "policy": {
+    "body_text_with_body_or_composite_contract": "diagnostic_stable_text",
+    "body_text_without_content_contract": "required_stable_text",
+    "other_schemas": "unchanged"
+  },
+  "independent_authorities": {
+    "evaluation/risk-control/qualification/cohort/cohort-manifest.json": "aeec7ec26d24650896263574135a27fc4848f4d362bd38f0a5b5c167f82abc26",
+    "evaluation/risk-control/body-contracts.json": "db7d3083ff5430c2c56e9dcd7000cb340b78792dfb426ec3b9e08bd17fb81552",
+    "evaluation/risk-control/list-contracts.json": "4d848525cc47179904443758ccdea39ea12c0e959b07237e4193fe2540a59299"
+  },
+  "baseline_scorer_commit": "4b91f6bc8ef9d27e8d7824d6ea0c66cb3ee292a1",
+  "baseline_scoring_source_sha256": "315cad157f30cf25c2933295aec88539cacb07b48c7bb8b3c78ef9f37b02534a",
+  "data_home_bindings": {
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/summary.json": "db9161b7e49de3ed85230d75c83de804d973303c3f4adfbe853a2da18799a1f0",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/scoring-policy.patch": "a54f192abf61e6432054723f9d553eb99d829f6edb6076f07f5b01d402060ca6",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/reproduce.py": "e83fd1565f68b8ff7cfe9a3d4d46b630bdf3f73379742dd7a3a1183a23e2f2f8",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/revised-risk-control-contracts.json": "c7cc2b333ca590ec09f79fba2bbfa6ddeaba04be59a7309e179affbe57efc047",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/six-method-current-scorer-dd3504d8/revision-receipt.json": "61fee24fc86d1f28b8304716b168924398cb3dfd756067e490bc73420e9ed662",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/six-method-current-scorer-dd3504d8/dataset.json": "319839d5187f2948ab2914392f45019aa6d2dd556f41d9e89a51dafce1999359",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/six-method-current-scorer-dd3504d8/results.jsonl": "55b4d6630e4ec4bcd0f9c05b59e38ad378bb9400784f17d58fea9950631369cf",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/six-method-current-scorer-dd3504d8/changes.json": "d9bdca35fdad643238a8125f61b730242b7293ba5a4cc5862180b8c0b353eb75",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/moli-1436-all-prior-failures/revision-receipt.json": "771634fb1de89b5196f65c75ff0d18247cd87b6a9dd1ac6273e3ada6b3a14652",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/moli-1436-all-prior-failures/dataset.json": "889c0b5789c208adec9cee81a8e991d91e1763da22077afd1cfa1145d476162e",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/moli-1436-all-prior-failures/results.jsonl": "b893660fbef6d6bd1a507c2754d1712ecdf9c37e6cf7901f11701e5147c17b96",
+    "evidence/research/webfetch-430-refresh-20261012/body-contract-pinned-offline-impact-20261013/moli-1436-all-prior-failures/changes.json": "e31840d7e5261a95a075dd013ed344e739019bc92e56964ed386d6d4d9afabdb"
+  },
+  "historical_profiles_and_certificates": "unchanged"
+}
diff --git a/research/risk-control-explicit-content-owner-revision.json b/research/risk-control-explicit-content-owner-revision.json
new file mode 100644
index 000000000..25dd896d4
--- /dev/null
+++ b/research/risk-control-explicit-content-owner-revision.json
@@ -0,0 +1,60 @@
+{
+  "schema_version": 1,
+  "kind": "risk_control_acceptance_scope_revision",
+  "predecessor_revision": "research/risk-control-xtools-field-scope-revision.json",
+  "root_cause": "Three cases left the role of historical page-shell text implicit. Devuan's independently frozen README body can satisfy the declared project scope without responsive repository controls; ibiblio's task asks for archive identity and its visible collection introduction rather than a changing news list or historical navigation copy. The NASA post retains its original required author and post text contract.",
+  "source_authority": {
+    "cohort_manifest_sha256": "aeec7ec26d24650896263574135a27fc4848f4d362bd38f0a5b5c167f82abc26",
+    "frozen_predecessor_dataset_sha256": "43717c2f8d5e9d3568f84670ba4975fbd22e05468fd2353c3a13f6c48983cdae",
+    "case_scopes": {
+      "risk-diverse-042": "Devuan installer-iso public project identity and README summary",
+      "risk-diverse-192": "ibiblio public archive identity and automatically visible collection introduction"
+    },
+    "ibiblio_first_party_sources": [
+      "https://www.ibiblio.org/hosted/about/about.ibiblio.sheet.pdf",
+      "https://www.ibiblio.org/pjones/blog/ibibliolulu/"
+    ],
+    "provider_output_used": false,
+    "new_provider_calls": 0
+  },
+  "correction": {
+    "predecessor_dataset_sha256": "43717c2f8d5e9d3568f84670ba4975fbd22e05468fd2353c3a13f6c48983cdae",
+    "predecessor_run_profile_sha256": "6cd713e74eae815b3c2688d069381e05e633ecb881c66910cbbc28aca4ca1f36",
+    "new_dataset_sha256": "165b888133e859304b035d74183dd40bf7ab609cac78bb6ae6e75b645c1de426",
+    "new_dataset_catalog_sha256": "52ec968b2ada26e5e061ccb25cbe4a73747539e556fa88f31bece6d7fb79b3cb",
+    "new_run_profile_sha256": "f56b04e66cff763fdff14619b2e2a6524fa92875ee612d852c038a1df4bb0d74",
+    "new_body_contracts_sha256": "de5a1ff1b4333e980dd824848e79f2e7717175b53ffade512491afeb4f6c13f9",
+    "new_list_contracts_sha256": "a566fb13328bd1a88b189b5a49fb7b3565a8d037c22aaa19c2b86087cbbe0881",
+    "provider_calls": 0,
+    "score_only_revision": true,
+    "unchanged_case_count": 97,
+    "affected_case_ids": [
+      "risk-diverse-011",
+      "risk-diverse-042",
+      "risk-diverse-192"
+    ],
+    "quantity_case_count_before": 21,
+    "quantity_case_count_after": 20,
+    "quantity_group_count_before": 27,
+    "quantity_group_count_after": 26,
+    "composite_group_count_before": 30,
+    "composite_group_count_after": 29
+  },
+  "scoring_provenance": {
+    "scoring_regressions_sha256": "117fb98b5ffbf5d05515e83804606e7804c0f662c76e2d87cca0aa61fbe03690",
+    "regression_ids": [
+      "declared-body-without-conditional-ui-control-passes",
+      "conditional-ui-control-cannot-replace-declared-body",
+      "archive-introduction-semantic-scope-passes",
+      "archive-news-and-footer-cannot-replace-introduction",
+      "wrong-archive-identity-cannot-satisfy-introduction",
+      "archive-identity-without-topical-introduction-fails"
+    ]
+  },
+  "history_policy": {
+    "preserve_revision": "v5",
+    "preserve_prior_certified_calls": true,
+    "rescore_or_rerun_required": true,
+    "reason": "The revision changes task acceptance only; historical calls and their original receipts remain immutable."
+  }
+}
diff --git a/research/risk-control-responsive-navigation-revision.json b/research/risk-control-responsive-navigation-revision.json
new file mode 100644
index 000000000..b1858c40b
--- /dev/null
+++ b/research/risk-control-responsive-navigation-revision.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": 1,
+  "kind": "risk_control_reference_scope_revision",
+  "predecessor_revision": "research/risk-control-navigation-language-revision.json",
+  "root_cause": "Eight rules required labels that appear only in some responsive navigation layouts. The labels are outside the declared target body and are absent from other valid first-load layouts, so they cannot be universal body acceptance requirements.",
+  "source_authority": {
+    "path": "research/moli-111-three-cohort-evaluation-revision.json",
+    "sha256": "b21974be8e887043617d43aaac08b786ed9abd808c9e18c2becc08226be63293",
+    "provider_output_used": false
+  },
+  "correction": {
+    "predecessor_dataset_sha256": "d0d038bae0114be107116edd94e501996ba6cda852ac29244c089e15a3e37437",
+    "predecessor_run_profile_sha256": "079d0a171a040dd56342ba737ad9279710bd18a44aefdd23f2208e00c03cc2f1",
+    "new_dataset_sha256": "d3f18edd2b29f8ef19eb496841f91c433d7f9adfe33c591874d963db55760d7c",
+    "new_run_profile_sha256": "08cd1faf6118263a6cf9a18e53c8722ed4d512b83068950372a5ad9ad4a87da5",
+    "provider_calls": 0,
+    "score_only_revision": true,
+    "unchanged_case_count": 100,
+    "stable_anchor_count_before": 1600,
+    "stable_anchor_count_after": 1586,
+    "affected_case_ids": [
+      "risk-diverse-038",
+      "risk-diverse-117",
+      "risk-diverse-201",
+      "risk-diverse-209",
+      "risk-diverse-225",
+      "risk-diverse-237",
+      "risk-diverse-241",
+      "risk-diverse-268"
+    ]
+  },
+  "regression_ids": [
+    "complete-body-passes-without-responsive-navigation-labels",
+    "page-title-without-required-body-still-fails"
+  ]
+}
diff --git a/research/risk-control-xtools-field-scope-revision.json b/research/risk-control-xtools-field-scope-revision.json
new file mode 100644
index 000000000..37bfd46cb
--- /dev/null
+++ b/research/risk-control-xtools-field-scope-revision.json
@@ -0,0 +1,37 @@
+{
+  "schema_version": 1,
+  "kind": "risk_control_scoring_contract_revision",
+  "predecessor_revision": "research/risk-control-responsive-navigation-revision.json",
+  "case_id": "risk-diverse-181",
+  "root_cause": "The XTools page exposes General statistics and Prose as separate sections. The predecessor contract incorrectly treated Prose as an integer label and did not scope the two field sets, which rejected a complete native Markdown representation.",
+  "source_authority": {
+    "kind": "independent_current_source_observation",
+    "external_path": "research/webfetch-430-refresh-20261014/reference-requalification-risk181-v2/risk-diverse-181/evidence.json",
+    "sha256": "a8c74fbfc73b8cc730f192f76ecede4cf83335c3f19577f5e5bde2d7af9e3f",
+    "provider_output_used": false
+  },
+  "correction": {
+    "predecessor_dataset_sha256": "d3f18edd2b29f8ef19eb496841f91c433d7f9adfe33c591874d963db55760d7c",
+    "predecessor_run_profile_sha256": "08cd1faf6118263a6cf9a18e53c8722ed4d512b83068950372a5ad9ad4a87da5",
+    "predecessor_list_contracts_sha256": "4d848525cc47179904443758ccdea39ea12c0e959b07237e4193fe2540a59299",
+    "new_dataset_sha256": "43717c2f8d5e9d3568f84670ba4975fbd22e05468fd2353c3a13f6c48983cdae",
+    "new_run_profile_sha256": "6cd713e74eae815b3c2688d069381e05e633ecb881c66910cbbc28aca4ca1f36",
+    "new_list_contracts_sha256": "c40d6ab1384b2c1b238b4cc8ab363ba8e6b303c1d0978506843e627fadb5f612",
+    "provider_calls": 0,
+    "score_only_revision": true,
+    "unchanged_case_count": 99,
+    "affected_case_ids": [
+      "risk-diverse-181"
+    ],
+    "composite_group_count_before": 29,
+    "composite_group_count_after": 30
+  },
+  "regression_ids": [
+    "markdown-field-report-cells-own-canonical-fixed-values",
+    "markdown-field-report-cannot-borrow-fixed-value-from-comment",
+    "scoped-field-report-reads-declared-prose-subfields",
+    "scoped-field-report-cannot-replace-words-with-unrelated-bytes",
+    "field-report-scope-accepts-plain-and-markdown-heading-boundaries",
+    "field-report-scope-requires-declared-semantic-end-boundary"
+  ]
+}
diff --git a/scripts/assemble_webfetch_dataset.py b/scripts/assemble_webfetch_dataset.py
new file mode 100644
index 000000000..2a29a8516
--- /dev/null
+++ b/scripts/assemble_webfetch_dataset.py
@@ -0,0 +1,34 @@
+#!/usr/bin/env python3
+"""Compile a registered Web Fetch dataset without making provider calls."""
+
+import argparse
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1]))
+
+from harness.web_fetch.dataset_assembly import assemble_profile_dataset
+
+
+def main(argv=None) -> None:
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--assembly", required=True, type=Path)
+    parser.add_argument(
+        "--profile",
+        type=Path,
+        help="external report profile; required when the reusable assembly does not bind one",
+    )
+    parser.add_argument("--output", required=True, type=Path)
+    args = parser.parse_args(argv)
+    if args.output.exists() or args.output.is_symlink():
+        parser.error("--output must be a new path")
+    _dataset, raw = assemble_profile_dataset(
+        args.assembly, profile_path_override=args.profile
+    )
+    args.output.parent.mkdir(parents=True, exist_ok=True)
+    args.output.write_bytes(raw)
+    print(args.output)
+
+
+if __name__ == "__main__":
+    main()
diff --git a/scripts/audit_fixed_native_comparison.py b/scripts/audit_fixed_native_comparison.py
new file mode 100644
index 000000000..27b575499
--- /dev/null
+++ b/scripts/audit_fixed_native_comparison.py
@@ -0,0 +1,36 @@
+#!/usr/bin/env python3
+"""Verify one complete two-build native Web Fetch cohort and summarize differences."""
+
+from __future__ import annotations
+
+import argparse
+from pathlib import Path
+
+from harness.web_fetch.comparison_audit import audit_fixed_native_comparison
+
+
+def main(argv=None) -> None:
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("--evidence", type=Path, required=True)
+    parser.add_argument("--source-dataset", type=Path, required=True)
+    parser.add_argument("--provider-config", type=Path, required=True)
+    parser.add_argument("--run-receipt", type=Path, required=True)
+    parser.add_argument("--output-json", type=Path, required=True)
+    parser.add_argument("--output-markdown", type=Path, required=True)
+    parser.add_argument("--stable-provider", required=True)
+    parser.add_argument("--candidate-provider", required=True)
+    args = parser.parse_args(argv)
+    audit_fixed_native_comparison(
+        args.evidence,
+        source_dataset=args.source_dataset,
+        provider_config=args.provider_config,
+        run_receipt=args.run_receipt,
+        output_json=args.output_json,
+        output_markdown=args.output_markdown,
+        stable_provider=args.stable_provider,
+        candidate_provider=args.candidate_provider,
+    )
+
+
+if __name__ == "__main__":
+    main()
diff --git a/scripts/build_report.py b/scripts/build_report.py
index 484c365b7..3d7c36497 100644
--- a/scripts/build_report.py
+++ b/scripts/build_report.py
@@ -106,7 +106,7 @@ def requested_language(output, supported=SUPPORTED_REPORT_LANGUAGES):
                                 language=requested_language(args.output or ROOT/'reports/wcxb')))
         raise SystemExit(0)
     evidence=require_evidence(args.evidence or current_evidence_dir())
-    if profile.get('comparison_kind')!='webmainbench_frozen_html_to_markdown':
+    if profile.get('comparison_kind')!='webmainbench_frozen_html_to_markdown' and not profile.get('frozen_inputs'):
         canonical=(profile_path.parent if (profile_path.parent/'dataset.json').is_file()
                    else ROOT/'evaluation')
         require_canonical_inputs(evidence,canonical)
diff --git a/tests/package_smoke.py b/tests/package_smoke.py
index 187fb7b2d..d702e37a5 100644
--- a/tests/package_smoke.py
+++ b/tests/package_smoke.py
@@ -1536,7 +1536,7 @@ def log_message(self, *args):
                 'category': 'web', 'track': 'web', 'task_kind': 'body',
                 'expected_any': ['Independent fact 0'],
                 'ground_truth_main_content': reference,
-                'source_verification': {'method': 'independent HTTP capture'}}
+                'source_verification': {'reference_mode': 'live_exact', 'method': 'independent HTTP capture'}}
         (stage / 'tasks.json').write_text(json.dumps({'schema_version': 1,
             'id': 'certification-control', 'name': 'Certification control', 'tool': 'web_fetch',
             'cases': [case], 'coverage_plan': {'web': ['fixture']}}))
@@ -1646,7 +1646,7 @@ def main():
         dataset.write_text(json.dumps({'tool': 'web_fetch', 'id': 'fixture',
             'comparison': {},
             'coverage_plan': {'web': ['custom']}, 'cases': [{
-            'id': 'one', 'name': 'One', 'url': 'https://example.invalid/',
+            'id': 'one', 'name': 'One', 'url': 'https://1.1.1.1/',
             'category': 'web', 'expected_any': ['Independent fixture output'],
         }]}))
         config = root / 'providers.json'
diff --git a/tests/report_check_fixture.py b/tests/report_check_fixture.py
index af0453e72..02874d093 100644
--- a/tests/report_check_fixture.py
+++ b/tests/report_check_fixture.py
@@ -78,10 +78,10 @@ def create_report(base: Path, *, english=False, headless=False):
         path.write_bytes(b"fixture")
     pages = {
         "index.html": (
-            "<h2>1 类任务概览</h2><p>本类最高： 判分完整性</p>"
-            "<h2>综合通过率总榜</h2><h2>1 类分榜</h2>",
-            "<h2>1 task family</h2><p>Highest score. Scoring completeness.</p>"
-            "<h2>Overall ranking</h2><h2>1 task family ranking</h2>",
+            '<h2>综合通过率总榜</h2><div class="home-overview">Overview</div>'
+            "<h2>1 类任务概览</h2><p>本类最高： 判分完整性</p><h2>1 类分榜</h2>",
+            '<h2>Overall ranking</h2><div class="home-overview">Overview</div>'
+            "<h2>1 task family</h2><p>Highest score. Scoring completeness.</p><h2>1 task family ranking</h2>",
         ),
         "methodology/index.html": (
             "<p>计入耗时 不计入耗时 供应商上报的服务端耗时只作附加证据 "
@@ -113,7 +113,7 @@ def create_revision_report(base: Path):
     home = root / "index.html"
     home.write_text(
         home.read_text()
-        + """<div class="home-overview">Overview</div>
+        + """
     <div id="home-rankings"><div role="tabpanel">
     <div class="track-guide">Guide</div><div class="track-meaning">Meaning</div>
     <ul class="track-flow"><li>Input</li><li>Fetch</li><li>Score</li><li>Result</li></ul>
diff --git a/tests/test_apt_uri_download.py b/tests/test_apt_uri_download.py
index 4cc45096f..59f62207e 100644
--- a/tests/test_apt_uri_download.py
+++ b/tests/test_apt_uri_download.py
@@ -50,3 +50,27 @@ def test_apt_plan_rejects_path_escape_and_missing_checksum(tmp_path: Path):
     plan.write_text("'https://example.invalid/fixture.deb' fixture.deb 12\n")
     with pytest.raises(ValueError, match="invalid apt package plan entry"):
         parse_plan(plan, tmp_path / "archives")
+
+
+def test_sha256_plan_preserves_encoded_url_and_checks_package_bytes(tmp_path: Path):
+    payload = b"package bytes"
+    plan = tmp_path / "apt-uris.txt"
+    url = "https://example.invalid/fixture_1%2bdeb13_arm64.deb"
+    name = "fixture_1+deb13_arm64.deb"
+    digest = hashlib.sha256(payload).hexdigest()
+    plan.write_text(f"'{url}' {name} {len(payload)} SHA256:{digest}\n")
+    archives = tmp_path / "archives"
+    archives.mkdir()
+    item, = parse_plan(plan, archives)
+    assert item.url == url
+    assert item.destination.name == name
+    with patch("examples.web_fetch.docker.download_apt_uris.urllib.request.urlretrieve",
+               side_effect=lambda _url, target: Path(target).write_bytes(payload)):
+        download(item)
+    assert item.destination.read_bytes() == payload
+    item.destination.unlink()
+    with patch("examples.web_fetch.docker.download_apt_uris.urllib.request.urlretrieve",
+               side_effect=lambda _url, target: Path(target).write_bytes(b"altered bytes")):
+        with pytest.raises(ValueError, match="checksum mismatch"):
+            download(item)
+    assert not item.destination.exists()
diff --git a/tests/test_assemble_headless_contract.py b/tests/test_assemble_headless_contract.py
index 2a302c9b8..1398cd4b1 100644
--- a/tests/test_assemble_headless_contract.py
+++ b/tests/test_assemble_headless_contract.py
@@ -4,6 +4,42 @@
 
 
 class ProviderRequestContractTests(unittest.TestCase):
+    def test_ignores_reader_description_and_reference_evidence(self):
+        case = {
+            "id": "page",
+            "url": "https://example.test/",
+            "task_prompt": "Return the page body.",
+            "description": "Earlier reader-facing explanation.",
+            "ground_truth_evidence": {"source": "earlier observation"},
+        }
+        canonical = {
+            **case,
+            "description": "Corrected reader-facing explanation.",
+            "ground_truth_evidence": {"source": "current observation"},
+        }
+        self.assertEqual(
+            _provider_request_contract(case, "crawl4ai"),
+            _provider_request_contract(canonical, "crawl4ai"),
+        )
+
+    def test_preserves_fields_that_change_the_physical_request(self):
+        case = {
+            "id": "page",
+            "url": "https://example.test/",
+            "task_prompt": "Return the page body.",
+            "acceptance_contract": {"body_requirements": ["Current body"]},
+        }
+        for field, changed in (
+                ("url", "https://other.example.test/"),
+                ("task_prompt", "Return a different scope."),
+                ("acceptance_contract", {"body_requirements": ["Different body"]})):
+            with self.subTest(field=field):
+                canonical = {**case, field: changed}
+                self.assertNotEqual(
+                    _provider_request_contract(case, "crawl4ai"),
+                    _provider_request_contract(canonical, "crawl4ai"),
+                )
+
     def test_ignores_draft_mutable_body_annotation_that_never_entered_request(self):
         case = {
             "id": "body",
@@ -35,6 +71,21 @@ def test_preserves_dynamic_list_source_contract(self):
         }
         self.assertEqual(_provider_request_contract(case, "crawl4ai"), case)
 
+    def test_native_dataset_removes_named_contracts_before_request_binding(self):
+        from harness.web_fetch.retrieval_hints import native_fetch_dataset
+        source = {"tool": "web_fetch", "cases": [
+            {"id": "arbitrary", "url": "https://example.test/", "track": "dynamic",
+             "retrieval_hints": {"version": 3, "mode": "native",
+                                  "contract": "case-specific-contract"}},
+        ]}
+        selected = native_fetch_dataset(source)["cases"][0]
+        expected = {"id": "arbitrary", "url": "https://example.test/", "track": "dynamic",
+                    "retrieval_hints": {"version": 3, "mode": "native"}}
+        for provider in ("moli-webfetch", "moli-pr919-webfetch", "lightpanda",
+                         "obscura", "chromium", "kitesurf"):
+            self.assertEqual(_provider_request_contract(selected, provider),
+                             _provider_request_contract(expected, provider))
+
 
 if __name__ == "__main__":
     unittest.main()
diff --git a/tests/test_assemble_webfetch_refresh.py b/tests/test_assemble_webfetch_refresh.py
index cc38c5a6f..6ac033655 100644
--- a/tests/test_assemble_webfetch_refresh.py
+++ b/tests/test_assemble_webfetch_refresh.py
@@ -419,6 +419,20 @@ def test_matched_case_ids_and_reason_groups_must_be_empty_together(self) -> None
         with self.assertRaisesRegex(ValueError, "must both be empty or nonempty"):
             expected_refresh_pairs(self.plan, self.canonical)
 
+    def test_input_changing_correction_requires_matched_all_method_rerun(self) -> None:
+        case_id = RERUN_CASES[0]
+        self.canonical["comparison"]["case_corrections"] = {
+            "path": "corrections.json",
+            "sha256": "0" * 64,
+            "rerun_all_methods": [case_id],
+        }
+        self.plan["main_matrix"]["matched_case_ids"].remove(case_id)
+        for group in self.plan["main_matrix"]["matched_case_reason_groups"]:
+            if case_id in group["case_ids"]:
+                group["case_ids"].remove(case_id)
+        with self.assertRaisesRegex(ValueError, "must rerun all methods"):
+            expected_refresh_pairs(self.plan, self.canonical)
+
     def test_refresh_scope_rejects_missing_reasons_and_bad_counts(self) -> None:
         self.plan["main_matrix"]["matched_case_reason_groups"][0]["reason"] = ""
         with self.assertRaisesRegex(ValueError, "empty matched case reason group"):
@@ -589,6 +603,7 @@ def test_assembly_rejects_invalid_selected_source_revision(self) -> None:
                      canonical_dataset=self.canonical_path, plan=self.plan_path)
         self.assertFalse(output.exists())
 
+
     def test_duplicate_rerun_pair_fails_without_creating_output(self) -> None:
         rows = [json.loads(line) for line in (self.main / "results.jsonl").read_text().splitlines()]
         rows.append(rows[0])
@@ -968,6 +983,64 @@ def test_baseline_hash_mismatch_fails_closed(self) -> None:
             )
         self.assertFalse(output.exists())
 
+    def test_inherited_baseline_case_must_match_canonical_contract(self) -> None:
+        dataset = json.loads((self.baseline / "dataset.json").read_text())
+        inherited = next(case for case in dataset["cases"] if case["id"] == "filler-001")
+        inherited["url"] = "https://stale.example.test/filler-001"
+        self.write_json(self.baseline / "dataset.json", dataset)
+        self.plan["baseline"]["dataset_sha256"] = sha(
+            (self.baseline / "dataset.json").read_bytes()
+        )
+        self.write_json(self.plan_path, self.plan)
+
+        output = self.root / "stale-inherited-baseline-output"
+        with self.assertRaisesRegex(
+            ValueError, "baseline inherited case/reference binding differs from canonical"
+        ):
+            assemble(
+                self.baseline,
+                [self.main],
+                self.speed,
+                output,
+                canonical_dataset=self.canonical_path,
+                plan=self.plan_path,
+            )
+        self.assertFalse(output.exists())
+
+    def test_assembly_rejects_persisted_verdict_that_public_scorer_flips(self) -> None:
+        rows = [
+            json.loads(line)
+            for line in (self.baseline / "results.jsonl").read_text().splitlines()
+        ]
+        stale = next(
+            row
+            for row in rows
+            if row["provider"] == "cloudflare-markdown"
+            and row["case_id"] == "filler-001"
+        )
+        stale["metrics"]["content_pass"] = False
+        (self.baseline / "results.jsonl").write_text(
+            "".join(json.dumps(row) + "\n" for row in rows), encoding="utf-8"
+        )
+        self.plan["baseline"]["results_sha256"] = sha(
+            (self.baseline / "results.jsonl").read_bytes()
+        )
+        self.write_json(self.plan_path, self.plan)
+
+        output = self.root / "stale-persisted-verdict-output"
+        with self.assertRaisesRegex(
+            ValueError, "persisted verdict differs from public scorer"
+        ):
+            assemble(
+                self.baseline,
+                [self.main],
+                self.speed,
+                output,
+                canonical_dataset=self.canonical_path,
+                plan=self.plan_path,
+            )
+        self.assertFalse(output.exists())
+
     def test_reused_speed_hash_mismatch_fails_closed(self) -> None:
         self.plan["same_window_speed_cohort"]["results_sha256"] = "0" * 64
         self.write_json(self.plan_path, self.plan)
@@ -1014,5 +1087,650 @@ def test_speed_dataset_cannot_smuggle_an_extra_main_case(self) -> None:
         self.assertFalse(output.exists())
 
 
+class AssembleImplementationUpgradeTests(unittest.TestCase):
+    CASES = ["case-a", "case-b", "case-c", "case-d"]
+    AFFECTED = list(CASES)
+    BASELINE_PROVIDERS = ["moli", "other"]
+    FINAL_PROVIDERS = ["moli-fixed", "other"]
+
+    def setUp(self) -> None:
+        self.temp = tempfile.TemporaryDirectory()
+        self.root = Path(self.temp.name)
+        self.canonical = self.dataset(self.FINAL_PROVIDERS)
+        self.canonical_path = self.root / "evaluation" / "dataset.json"
+        self.write_json(self.canonical_path, self.canonical)
+        (self.canonical_path.parent / "sources").mkdir()
+        (self.canonical_path.parent / "list-references").mkdir()
+
+        self.baseline = self.root / "baseline"
+        baseline_rows = AssembleWebfetchRefreshTests.rows(
+            self.BASELINE_PROVIDERS, self.CASES
+        )
+        self.write_bundle(self.baseline, self.dataset(self.BASELINE_PROVIDERS), baseline_rows)
+        baseline_execution = json.loads((self.baseline / "execution.json").read_text())
+        other_identity = next(
+            provider for provider in baseline_execution["batches"][0]["providers"]
+            if provider["name"] == "other"
+        )
+        other_identity.pop("implementation_identity")
+        self.write_json(self.baseline / "execution.json", baseline_execution)
+
+        self.main = self.root / "main"
+        rerun_rows = AssembleWebfetchRefreshTests.rows_for_pairs({
+            ("moli-fixed", case_id) for case_id in self.AFFECTED
+        })
+        self.write_bundle(self.main, self.canonical, rerun_rows)
+
+        self.speed = self.root / "speed"
+        speed_rows = AssembleWebfetchRefreshTests.rows(
+            self.BASELINE_PROVIDERS, self.CASES[:2]
+        )
+        speed_dataset = {
+            **self.dataset(self.BASELINE_PROVIDERS),
+            "cases": self.dataset(self.BASELINE_PROVIDERS)["cases"][:2],
+        }
+        self.write_bundle(self.speed, speed_dataset, speed_rows)
+        source_batch = json.loads((self.speed / "execution.json").read_text())["batches"][0]
+        batches = []
+        for provider in self.BASELINE_PROVIDERS:
+            attempt_ids = [
+                row["attempt_id"] for row in speed_rows if row["provider"] == provider
+            ]
+            batches.append({
+                **source_batch,
+                "providers": [next(
+                    item for item in source_batch["providers"] if item["name"] == provider
+                )],
+                "attempt_ids": attempt_ids,
+                "attempt_count": len(attempt_ids),
+            })
+        aggregate = {
+            "started_at": "2026-09-10T00:00:00+00:00",
+            "completed_at": "2026-09-10T00:00:03+00:00",
+            "providers": self.BASELINE_PROVIDERS,
+            "case_ids": self.CASES[:2],
+            "batch_count": len(batches),
+        }
+        self.write_json(self.speed / "execution.json", {
+            "schema_version": 1, "aggregate": aggregate, "batches": batches,
+        })
+        speed_summary = build_speed_summary(speed_dataset, speed_rows, batches, aggregate)
+        speed_summary["bindings"] = {
+            "dataset_sha256": sha((self.speed / "dataset.json").read_bytes()),
+            "results_sha256": sha((self.speed / "results.jsonl").read_bytes()),
+        }
+        self.write_json(self.speed / "speed-comparison.json", speed_summary)
+
+        self.baseline_identity = {"fixture_sha256": sha(b"moli")}
+        self.rerun_identity = {"fixture_sha256": sha(b"moli-fixed")}
+        self.impact = {
+            "schema_version": 1,
+            "kind": "implementation_upgrade_impact",
+            "provider_calls": 0,
+            "baseline_provider": "moli",
+            "logical_provider": "moli-fixed",
+            "rerun_provider": "moli-fixed",
+            "affected_case_ids": list(self.AFFECTED),
+            "baseline_implementation_identity": self.baseline_identity,
+            "rerun_implementation_identity": self.rerun_identity,
+        }
+        self.impact_path = self.root / "evaluation" / "impact.json"
+        self.write_json(self.impact_path, self.impact)
+        ids_hash = sha(json.dumps(
+            sorted(self.AFFECTED), ensure_ascii=False, separators=(",", ":")
+        ).encode())
+        self.scope_receipt = {
+            "schema_version": 1,
+            "kind": "correction_layer_scope_bindings",
+            "provider_calls": 0,
+            "layers": [{
+                "layer_id": "moli-fixed-body-fixes",
+                "provider": "moli-fixed",
+                "case_ids": list(self.AFFECTED),
+            }],
+        }
+        self.scope_receipt_path = self.root / "evaluation" / "scope.json"
+        self.write_json(self.scope_receipt_path, self.scope_receipt)
+        main_execution = json.loads((self.main / "execution.json").read_text())
+        main_batch = main_execution["batches"][0]
+        self.plan = {
+            "schema_version": 3,
+            "baseline": {
+                "dataset_sha256": sha((self.baseline / "dataset.json").read_bytes()),
+                "results_sha256": sha((self.baseline / "results.jsonl").read_bytes()),
+                "logical_attempts": 8,
+            },
+            "main_matrix": {
+                "full_rerun_providers": [],
+                "full_rerun_reason_by_provider": {},
+                "matched_case_ids": [],
+                "matched_case_reason_groups": [],
+                "pair_replacements": [],
+                "offline_rescore_cases": [],
+                "planned_new_calls": 4,
+                "final_logical_attempts": 8,
+            },
+            "implementation_upgrades": [{
+                "logical_provider": "moli-fixed",
+                "baseline_provider": "moli",
+                "rerun_provider": "moli-fixed",
+                "affected_case_ids": list(self.AFFECTED),
+                "reason": {
+                    "category": "implementation_upgrade",
+                    "reason": "the new implementation is rerun over the complete canonical scope",
+                },
+                "impact_receipt": {
+                    "path": "impact.json",
+                    "sha256": sha(self.impact_path.read_bytes()),
+                    "case_ids_sha256": ids_hash,
+                },
+                "baseline_implementation_identity": self.baseline_identity,
+                "rerun_implementation_identity": self.rerun_identity,
+            }],
+            "correction_layers": [{
+                "id": "moli-fixed-body-fixes",
+                "provider": "moli-fixed",
+                "case_ids": list(self.AFFECTED),
+                "source_bundle": {
+                    "dataset_sha256": sha((self.main / "dataset.json").read_bytes()),
+                    "results_sha256": sha((self.main / "results.jsonl").read_bytes()),
+                    "execution_file": "execution.json",
+                    "execution_sha256": sha((self.main / "execution.json").read_bytes()),
+                },
+                "execution_contract": {
+                    "runtime_source_sha256": main_batch["runtime_source_sha256"],
+                    "provider_config_sha256": main_batch["provider_config_sha256"],
+                    "parameters_sha256": sha(json.dumps(
+                        main_batch["parameters"], sort_keys=True, separators=(",", ":")
+                    ).encode()),
+                    "implementation_identity": self.rerun_identity,
+                },
+                "scope_receipt": {
+                    "path": "scope.json",
+                    "sha256": sha(self.scope_receipt_path.read_bytes()),
+                    "case_ids_sha256": ids_hash,
+                },
+            }],
+            "same_window_speed_cohort": {
+                "required": False,
+                "reuse_existing": True,
+                "reason": "historical mixed-version timing remains separate",
+                "dataset_sha256": sha((self.speed / "dataset.json").read_bytes()),
+                "results_sha256": sha((self.speed / "results.jsonl").read_bytes()),
+                "execution_sha256": sha((self.speed / "execution.json").read_bytes()),
+                "speed_comparison_sha256": sha(
+                    (self.speed / "speed-comparison.json").read_bytes()
+                ),
+                "auxiliary_sha256": {},
+                "planned_new_calls": 0,
+            },
+            "total_planned_new_calls": 4,
+        }
+        self.plan_path = self.root / "evaluation" / "refresh-plan.json"
+        self.write_json(self.plan_path, self.plan)
+
+    def tearDown(self) -> None:
+        self.temp.cleanup()
+
+    @staticmethod
+    def dataset(providers: list[str]) -> dict:
+        return {
+            "schema_version": 2,
+            "id": "upgrade-fixture",
+            "cases": [{
+                "id": case_id,
+                "name": case_id,
+                "url": f"https://example.test/{case_id}",
+                "track": "web",
+                "task_kind": "body",
+            } for case_id in AssembleImplementationUpgradeTests.CASES],
+            "coverage_plan": {"web": providers},
+            "comparison": {"case_replacements": {}},
+        }
+
+    @staticmethod
+    def write_json(path: Path, value: object) -> None:
+        AssembleWebfetchRefreshTests.write_json(path, value)
+
+    def write_bundle(self, root: Path, dataset: dict, rows: list[dict]) -> None:
+        AssembleWebfetchRefreshTests.write_bundle(self, root, dataset, rows)
+        loaded = [json.loads(line) for line in (root / "results.jsonl").read_text().splitlines()]
+        for row in loaded:
+            relative = f"call-logs/{row['provider']}/{row['case_id']}.json"
+            payload = self.call_log(row)
+            binary = json.dumps(payload, sort_keys=True).encode()
+            path = root / relative
+            path.parent.mkdir(parents=True, exist_ok=True)
+            path.write_bytes(binary)
+            row["provider_metadata"] = {
+                "call_log": {"path": relative, "sha256": sha(binary), "bytes": len(binary)}
+            }
+        (root / "results.jsonl").write_text(
+            "".join(json.dumps(row) + "\n" for row in loaded), encoding="utf-8"
+        )
+
+    @staticmethod
+    def call_log(row: dict) -> dict:
+        artifact = b"artifact"
+        return {
+            "schema_version": 1,
+            "identity": {
+                "call_id": row["attempt_id"] + "__p001",
+                "attempt_id": row["attempt_id"],
+                "provider": row["provider"],
+                "provider_type": "fixture",
+                "case_id": row["case_id"],
+                "run": 1,
+                "physical_attempt": 1,
+            },
+            "timing": {
+                "started_at": row["started_at"], "completed_at": row["completed_at"],
+                "elapsed_ms": row["elapsed_ms"], "retry_throttle_wait_ms": 0,
+                "deadline_budget_ms": 45000, "deadline_overrun": False,
+            },
+            "request": {"method": None, "route": "fixture", "url": None, "summary": None},
+            "response": {
+                "status_code": None, "upstream_status_code": None, "final_url": None,
+                "content_type": None, "request_id": None,
+            },
+            "process": {
+                "exit_code": 0, "stdout": None, "stdout_bytes": len(artifact),
+                "stdout_truncated": False, "stderr": "", "stderr_bytes": 0,
+                "stderr_truncated": False,
+            },
+            "output": {
+                "path": "artifacts/shared.txt", "bytes": len(artifact),
+                "sha256": sha(artifact), "empty": False,
+            },
+            "error": {"type": None, "message": None, "exception_class": None, "stack": []},
+            "events": [
+                {"stage": "call_started", "at": row["started_at"],
+                 "status_code": None, "error_type": None},
+                {"stage": "response_received", "at": row["completed_at"],
+                 "status_code": None, "error_type": None},
+                {"stage": "call_completed", "at": row["completed_at"],
+                 "status_code": None, "error_type": None},
+            ],
+            "capture": {
+                "record": "complete", "response_metadata": "captured",
+                "process_metadata": "captured", "process_stdout": "bound_as_output",
+                "process_stderr": "captured_complete", "request_summary": "not_exposed",
+                "events": "complete", "raw_response": "not_retained",
+                "output": "complete_hash_bound", "diagnostic_log": "not_retained",
+            },
+        }
+
+    def assemble(self, name: str = "output", roots: list[Path] | None = None) -> Path:
+        output = self.root / name
+        assemble(
+            self.baseline, roots or [self.main], self.speed, output,
+            canonical_dataset=self.canonical_path, plan=self.plan_path,
+        )
+        return output
+
+    def rewrite_plan(self) -> None:
+        self.write_json(self.plan_path, self.plan)
+
+    def declare_speed_not_measured(self) -> None:
+        self.plan["same_window_speed_cohort"] = {
+            "required": False,
+            "reuse_existing": False,
+            "evidence_state": "not_measured_same_window",
+            "reason": "the fixed implementation was not measured in the shared time window",
+            "planned_new_calls": 0,
+        }
+        self.rewrite_plan()
+
+    def rebind_main_source(self) -> None:
+        bundle = self.plan["correction_layers"][0]["source_bundle"]
+        bundle.update({
+            "dataset_sha256": sha((self.main / "dataset.json").read_bytes()),
+            "results_sha256": sha((self.main / "results.jsonl").read_bytes()),
+            "execution_file": "execution.json",
+            "execution_sha256": sha((self.main / "execution.json").read_bytes()),
+        })
+        self.rewrite_plan()
+
+    def test_upgrade_projects_logical_provider_and_preserves_physical_evidence(self) -> None:
+        output = self.assemble()
+        rows = [json.loads(line) for line in (output / "results.jsonl").read_text().splitlines()]
+        fixed = [row for row in rows if row["provider"] == "moli-fixed"]
+        self.assertEqual(len(fixed), 4)
+        self.assertEqual(
+            {row["physical_execution"]["provider"] for row in fixed},
+            {"moli-fixed"},
+        )
+        for row in fixed:
+            physical = row["physical_execution"]
+            self.assertEqual(row["attempt_id"], physical["attempt_id"])
+            self.assertTrue((output / row["provider_metadata"]["call_log"]["path"]).is_file())
+        execution = json.loads((output / "execution.json").read_text())
+        physical_providers = {
+            provider["name"] for batch in execution["batches"]
+            for provider in batch["providers"]
+        }
+        self.assertEqual(physical_providers, {"moli-fixed", "other"})
+        receipt = json.loads((output / "refresh-assembly.json").read_text())
+        upgrade = receipt["implementation_upgrades"][0]
+        self.assertEqual((upgrade["inherited_attempts"], upgrade["rerun_attempts"]), (0, 4))
+        self.assertEqual(upgrade["impact_receipt"]["sha256"], sha(self.impact_path.read_bytes()))
+        stored_impact = output / upgrade["impact_receipt"]["stored_path"]
+        self.assertEqual(stored_impact.read_bytes(), self.impact_path.read_bytes())
+        audit = json.loads((output / "selection-audit.json").read_text())
+        self.assertEqual(len([row for row in audit if row["provider"] == "moli-fixed"]), 4)
+
+    def test_equal_case_inventory_does_not_require_a_replacement_map(self) -> None:
+        self.canonical["comparison"].pop("case_replacements")
+        self.write_json(self.canonical_path, self.canonical)
+        output = self.assemble(name="no-case-replacement-map")
+        self.assertTrue((output / "refresh-assembly.json").is_file())
+
+    def test_layer_can_bind_identity_recorded_on_each_result(self) -> None:
+        execution = json.loads((self.main / "execution.json").read_text())
+        execution["batches"][0]["providers"][0].pop("implementation_identity")
+        self.write_json(self.main / "execution.json", execution)
+        rows = [json.loads(line) for line in (self.main / "results.jsonl").read_text().splitlines()]
+        for row in rows:
+            row["provider_metadata"].update({
+                "reported_version": "moli fixture",
+                "binary_sha256": sha(b"moli-fixed-row-identity"),
+            })
+        (self.main / "results.jsonl").write_text(
+            "".join(json.dumps(row) + "\n" for row in rows), encoding="utf-8"
+        )
+        row_identity = {
+            "reported_version": "moli fixture",
+            "binary_sha256": sha(b"moli-fixed-row-identity"),
+        }
+        self.plan["implementation_upgrades"][0]["rerun_implementation_identity"] = row_identity
+        self.impact["rerun_implementation_identity"] = row_identity
+        self.write_json(self.impact_path, self.impact)
+        self.plan["implementation_upgrades"][0]["impact_receipt"]["sha256"] = sha(
+            self.impact_path.read_bytes()
+        )
+        layer = self.plan["correction_layers"][0]
+        layer["execution_contract"]["implementation_identity"] = row_identity
+        layer["source_bundle"].update({
+            "results_sha256": sha((self.main / "results.jsonl").read_bytes()),
+            "execution_sha256": sha((self.main / "execution.json").read_bytes()),
+        })
+        self.rewrite_plan()
+
+        output = self.assemble(name="row-identity-output")
+        self.assertTrue((output / "refresh-assembly.json").is_file())
+
+    def test_upgrade_can_explicitly_omit_same_window_speed_evidence(self) -> None:
+        self.declare_speed_not_measured()
+        output = self.root / "no-speed-output"
+        assemble(
+            self.baseline, [self.main], None, output,
+            canonical_dataset=self.canonical_path, plan=self.plan_path,
+        )
+
+        self.assertFalse((output / "speed-cohort").exists())
+        receipt = json.loads((output / "refresh-assembly.json").read_text())
+        self.assertEqual(receipt["speed_cohort"], {
+            "evidence_state": "not_measured_same_window",
+            "reason": "the fixed implementation was not measured in the shared time window",
+            "new_calls": 0,
+            "reused_existing": False,
+            "stored_below": None,
+            "excluded_from_main_results": True,
+            "excluded_from_main_execution": True,
+        })
+
+    def test_speed_input_must_match_declared_evidence_state(self) -> None:
+        self.declare_speed_not_measured()
+        with self.assertRaisesRegex(ValueError, "no same-window speed evidence"):
+            assemble(
+                self.baseline, [self.main], self.speed, self.root / "unexpected-speed",
+                canonical_dataset=self.canonical_path, plan=self.plan_path,
+            )
+
+        self.plan["same_window_speed_cohort"] = {
+            key: value for key, value in self.plan["same_window_speed_cohort"].items()
+            if key != "evidence_state"
+        }
+        self.rewrite_plan()
+        with self.assertRaisesRegex(ValueError, "requires a speed cohort input"):
+            assemble(
+                self.baseline, [self.main], None, self.root / "missing-speed",
+                canonical_dataset=self.canonical_path, plan=self.plan_path,
+            )
+
+    def test_absent_speed_state_rejects_reuse_calls_and_evidence_bindings(self) -> None:
+        self.declare_speed_not_measured()
+        valid = json.loads(json.dumps(self.plan))
+        for name, update, pattern in (
+            ("reuse", {"reuse_existing": True}, "cannot be required, reused, or scheduled"),
+            ("calls", {"planned_new_calls": 1}, "cannot be required, reused, or scheduled"),
+            ("binding", {"results_sha256": "0" * 64}, "speed-cohort fields"),
+        ):
+            with self.subTest(name=name):
+                self.plan = json.loads(json.dumps(valid))
+                self.plan["same_window_speed_cohort"].update(update)
+                self.rewrite_plan()
+                with self.assertRaisesRegex(ValueError, pattern):
+                    expected_refresh_pairs(self.plan, self.canonical)
+
+    def test_upgrade_selection_is_independent_of_outcome(self) -> None:
+        rows = [json.loads(line) for line in (self.main / "results.jsonl").read_text().splitlines()]
+        rows[0].update(ok=False, error_type="tool_error")
+        (self.main / "results.jsonl").write_text(
+            "".join(json.dumps(row) + "\n" for row in rows), encoding="utf-8"
+        )
+        self.rebind_main_source()
+        output = self.assemble("failed-rerun-output")
+        selected = [json.loads(line) for line in (output / "results.jsonl").read_text().splitlines()]
+        failed = next(row for row in selected if row["case_id"] == rows[0]["case_id"]
+                      and row["provider"] == "moli-fixed")
+        self.assertFalse(failed["ok"])
+        self.assertEqual(failed["attempt_id"], rows[0]["attempt_id"])
+
+    def test_upgrade_rejects_scope_and_receipt_drift(self) -> None:
+        self.plan["implementation_upgrades"][0]["affected_case_ids"] = self.AFFECTED[:-1]
+        self.plan["implementation_upgrades"][0]["impact_receipt"]["case_ids_sha256"] = sha(
+            json.dumps(sorted(self.AFFECTED[:-1]), separators=(",", ":")).encode()
+        )
+        self.rewrite_plan()
+        with self.assertRaisesRegex(ValueError, "complete canonical rerun"):
+            self.assemble("scope-drift")
+
+        self.plan["implementation_upgrades"][0]["affected_case_ids"] = list(self.AFFECTED)
+        self.plan["implementation_upgrades"][0]["impact_receipt"]["case_ids_sha256"] = sha(
+            json.dumps(sorted(self.AFFECTED), separators=(",", ":")).encode()
+        )
+        self.plan["implementation_upgrades"][0]["impact_receipt"]["sha256"] = "0" * 64
+        self.rewrite_plan()
+        with self.assertRaisesRegex(ValueError, "impact receipt bytes differ"):
+            self.assemble("receipt-drift")
+
+    def test_correction_layers_allow_predeclared_runtime_differences_order_independently(self) -> None:
+        roots, layers = [], []
+        for index, case_id in enumerate(self.AFFECTED):
+            root = self.root / f"layer-{index}"
+            rows = AssembleWebfetchRefreshTests.rows_for_pairs({("moli-fixed", case_id)})
+            self.write_bundle(root, self.canonical, rows)
+            execution = json.loads((root / "execution.json").read_text())
+            execution["batches"][0]["runtime_source_sha256"] = sha(
+                f"runtime-{index}".encode()
+            )
+            self.write_json(root / "execution.json", execution)
+            layer_id = f"layer-{index}"
+            scope = {
+                "schema_version": 1, "kind": "correction_layer_scope_bindings",
+                "provider_calls": 0, "layers": [{
+                    "layer_id": layer_id, "provider": "moli-fixed",
+                    "case_ids": [case_id],
+                }],
+            }
+            scope_path = self.root / "evaluation" / f"{layer_id}-scope.json"
+            self.write_json(scope_path, scope)
+            batch = execution["batches"][0]
+            layers.append({
+                "id": layer_id, "provider": "moli-fixed", "case_ids": [case_id],
+                "source_bundle": {
+                    "dataset_sha256": sha((root / "dataset.json").read_bytes()),
+                    "results_sha256": sha((root / "results.jsonl").read_bytes()),
+                    "execution_file": "execution.json",
+                    "execution_sha256": sha((root / "execution.json").read_bytes()),
+                },
+                "execution_contract": {
+                    "runtime_source_sha256": batch["runtime_source_sha256"],
+                    "provider_config_sha256": batch["provider_config_sha256"],
+                    "parameters_sha256": sha(json.dumps(
+                        batch["parameters"], sort_keys=True, separators=(",", ":")
+                    ).encode()),
+                    "implementation_identity": self.rerun_identity,
+                },
+                "scope_receipt": {
+                    "path": scope_path.name, "sha256": sha(scope_path.read_bytes()),
+                    "case_ids_sha256": sha(json.dumps(
+                        [case_id], separators=(",", ":")
+                    ).encode()),
+                },
+            })
+            roots.append(root)
+        self.plan["correction_layers"] = layers
+        self.rewrite_plan()
+
+        forward = self.assemble("layers-forward", roots)
+        reverse = self.assemble("layers-reverse", list(reversed(roots)))
+        self.assertEqual(
+            (forward / "results.jsonl").read_bytes(),
+            (reverse / "results.jsonl").read_bytes(),
+        )
+        self.assertEqual(
+            (forward / "selection-audit.json").read_bytes(),
+            (reverse / "selection-audit.json").read_bytes(),
+        )
+        receipt = json.loads((forward / "refresh-assembly.json").read_text())
+        self.assertEqual(
+            {layer["execution_contract"]["runtime_source_sha256"]
+             for layer in receipt["correction_layers"]},
+            {sha(f"runtime-{index}".encode()) for index in range(len(self.AFFECTED))},
+        )
+
+        valid_plan = json.loads(self.plan_path.read_text())
+        for index, field in enumerate((
+            "runtime_source_sha256", "provider_config_sha256", "parameters_sha256"
+        )):
+            self.plan = json.loads(json.dumps(valid_plan))
+            self.plan["correction_layers"][0]["execution_contract"][field] = "0" * 64
+            self.rewrite_plan()
+            with self.assertRaisesRegex(ValueError, f"execution differs.*{field}"):
+                self.assemble(f"layer-{field}-drift-{index}", roots)
+
+    def test_correction_layers_reject_scope_or_authority_drift(self) -> None:
+        self.plan["correction_layers"][0]["case_ids"] = [self.AFFECTED[0]]
+        self.plan["correction_layers"][0]["scope_receipt"]["case_ids_sha256"] = sha(
+            json.dumps([self.AFFECTED[0]], separators=(",", ":")).encode()
+        )
+        self.rewrite_plan()
+        with self.assertRaisesRegex(ValueError, "differ from the exact refresh scope"):
+            expected_refresh_pairs(self.plan, self.canonical)
+
+        self.plan["correction_layers"][0]["case_ids"] = list(self.AFFECTED)
+        self.plan["correction_layers"][0]["scope_receipt"]["case_ids_sha256"] = sha(
+            json.dumps(sorted(self.AFFECTED), separators=(",", ":")).encode()
+        )
+        self.plan["correction_layers"].append(json.loads(json.dumps(
+            self.plan["correction_layers"][0]
+        )))
+        self.plan["correction_layers"][1]["id"] = "duplicate-layer"
+        self.rewrite_plan()
+        with self.assertRaisesRegex(ValueError, "assign a provider/case pair more than once"):
+            expected_refresh_pairs(self.plan, self.canonical)
+
+        self.plan["correction_layers"] = self.plan["correction_layers"][:1]
+        self.scope_receipt["provider_calls"] = 1
+        self.write_json(self.scope_receipt_path, self.scope_receipt)
+        self.plan["correction_layers"][0]["scope_receipt"]["sha256"] = sha(
+            self.scope_receipt_path.read_bytes()
+        )
+        self.rewrite_plan()
+        with self.assertRaisesRegex(ValueError, "scope receipt differs"):
+            self.assemble("scope-authority-drift")
+
+    def test_correction_layers_reject_unbound_source_or_bundle_hash(self) -> None:
+        self.plan["correction_layers"][0]["source_bundle"]["results_sha256"] = "0" * 64
+        self.rewrite_plan()
+        with self.assertRaisesRegex(ValueError, "not bound by a correction layer"):
+            self.assemble("source-hash-drift")
+
+        self.rebind_main_source()
+        with self.assertRaisesRegex(ValueError, "not bound by a correction layer"):
+            self.assemble("unbound-extra-source", [self.main, self.speed])
+
+    def test_upgrade_rejects_missing_extra_or_duplicate_rerun_pairs(self) -> None:
+        original = [json.loads(line) for line in (self.main / "results.jsonl").read_text().splitlines()]
+        original_results = (self.main / "results.jsonl").read_bytes()
+        original_execution = (self.main / "execution.json").read_bytes()
+        for name, changed, pattern in (
+            ("missing", original[:-1], "missing its selected pair"),
+            ("duplicate", original + [dict(original[0])], "duplicate provider/case"),
+        ):
+            with self.subTest(name=name):
+                (self.main / "results.jsonl").write_text(
+                    "".join(json.dumps(row) + "\n" for row in changed), encoding="utf-8"
+                )
+                execution = json.loads((self.main / "execution.json").read_text())
+                execution["batches"][0]["attempt_ids"] = [row["attempt_id"] for row in changed]
+                execution["batches"][0]["attempt_count"] = len(changed)
+                self.write_json(self.main / "execution.json", execution)
+                self.rebind_main_source()
+                with self.assertRaisesRegex(ValueError, pattern):
+                    self.assemble(f"{name}-output")
+                (self.main / "results.jsonl").write_bytes(original_results)
+                (self.main / "execution.json").write_bytes(original_execution)
+                self.rebind_main_source()
+
+        extra = original + AssembleWebfetchRefreshTests.rows_for_pairs(
+            {("other", "case-a")}
+        )
+        (self.main / "results.jsonl").write_text(
+            "".join(json.dumps(row) + "\n" for row in extra), encoding="utf-8"
+        )
+        execution = json.loads((self.main / "execution.json").read_text())
+        execution["batches"][0]["attempt_ids"] = [row["attempt_id"] for row in extra]
+        execution["batches"][0]["attempt_count"] = len(extra)
+        self.write_json(self.main / "execution.json", execution)
+        self.rebind_main_source()
+        output = self.assemble("extra-source-row-output")
+        other_case_a = next(
+            row for row in map(json.loads, (output / "results.jsonl").read_text().splitlines())
+            if row["provider"] == "other" and row["case_id"] == "case-a"
+        )
+        self.assertEqual(other_case_a["attempt_id"], "other__case-a__r001")
+
+    def test_upgrade_rejects_batch_or_call_log_physical_identity_drift(self) -> None:
+        original_execution = (self.main / "execution.json").read_bytes()
+        execution = json.loads((self.main / "execution.json").read_text())
+        execution["batches"][0]["providers"][0]["implementation_identity"] = {
+            "fixture_sha256": "0" * 64
+        }
+        self.write_json(self.main / "execution.json", execution)
+        self.rebind_main_source()
+        with self.assertRaisesRegex(ValueError, "Correction layer execution differs"):
+            self.assemble("binary-drift")
+
+        (self.main / "execution.json").write_bytes(original_execution)
+        self.rebind_main_source()
+        result_rows = [json.loads(line) for line in (self.main / "results.jsonl").read_text().splitlines()]
+        binding = result_rows[0]["provider_metadata"]["call_log"]
+        path = self.main / binding["path"]
+        payload = json.loads(path.read_text())
+        payload["identity"]["provider"] = "moli"
+        binary = json.dumps(payload, sort_keys=True).encode()
+        path.write_bytes(binary)
+        binding.update(sha256=sha(binary), bytes=len(binary))
+        (self.main / "results.jsonl").write_text(
+            "".join(json.dumps(row) + "\n" for row in result_rows), encoding="utf-8"
+        )
+        self.rebind_main_source()
+        with self.assertRaisesRegex(ValueError, "call log physical identity differs"):
+            self.assemble("call-log-drift")
+
+
 if __name__ == "__main__":
     unittest.main()
diff --git a/tests/test_assembly_evidence.py b/tests/test_assembly_evidence.py
index 43ca5cc68..690796adb 100644
--- a/tests/test_assembly_evidence.py
+++ b/tests/test_assembly_evidence.py
@@ -7,8 +7,15 @@
 
 import pytest
 
+import harness.web_fetch.assembly as assembly_module
+
 from harness.web_fetch.artifacts import artifact_bindings
-from harness.web_fetch.assembly import assemble
+from harness.web_fetch.assembly import (
+    _provider_replacement_scope_history,
+    _selected_provider_replacement_rows,
+    assemble,
+    bind_assembled_scoring_revision,
+)
 from harness.web_fetch.models import EvalCase, ProviderResult
 from harness.web_fetch.providers.base import Provider
 from harness.web_fetch.reference_inputs import import_inputs
@@ -24,7 +31,9 @@ class Retrying(Provider):
 
         def fetch(self, case, timeout):
             self.calls += 1
-            return ProviderResult(True, 'Expected' if self.calls == 2 else 'Wrong',
+            return ProviderResult(self.calls == 2, 'Expected' if self.calls == 2 else '',
+                error_type=None if self.calls == 2 else 'network',
+                error_message=None if self.calls == 2 else 'synthetic transient failure',
                 metadata={'_rendered_html': '<main>retained HTML</main>',
                           'rendered_html_sha256': hashlib.sha256(b'<main>retained HTML</main>').hexdigest(),
                           'raw_stdout_sha256': hashlib.sha256(b'retained stdout').hexdigest(),
@@ -53,6 +62,354 @@ def test_assembly_preserves_all_physical_call_evidence(source, tmp_path):
         assert (target / relative).read_bytes() == (root / relative).read_bytes()
 
 
+def test_canonical_dataset_promotes_an_explicit_full_review_policy(source, tmp_path):
+    from harness.web_fetch.reference_lifecycle import valid_scoring_revision
+    from harness.web_fetch.result_review import require_result_review
+    from harness.web_fetch.scoring_revision import revise
+
+    root, _ = source
+    baseline = json.loads((root / 'dataset.json').read_text())
+    baseline['comparison'] = {
+        'require_independent_result_review': False,
+        'independent_result_review_scope': 'machine-failures',
+    }
+    (root / 'dataset.json').write_text(json.dumps(baseline))
+    revise(root, root / 'dataset.json', root_cause_category='answer-surface',
+        root_cause='Synthetic retained-answer correction is checked on the complete cohort.',
+        regression_ids=['answer-title-supplies-required-fact'])
+    baseline = json.loads((root / 'dataset.json').read_text())
+    canonical = tmp_path / 'canonical.json'
+    promoted = json.loads(json.dumps(baseline))
+    promoted['comparison'] = {
+        'require_independent_result_review': True,
+        'independent_result_review_scope': 'all',
+    }
+    canonical.write_text(json.dumps(promoted))
+
+    output = tmp_path / 'assembled-for-full-review'
+    assemble(root, tmp_path / 'certificates', [], output,
+             canonical_dataset=canonical)
+
+    comparison = json.loads((output / 'dataset.json').read_text())['comparison']
+    assert comparison['require_independent_result_review'] is True
+    assert comparison['independent_result_review_scope'] == 'all'
+    assert not (output / 'result-review.json').exists()
+    assert not valid_scoring_revision(output)
+
+    record = json.loads((output / 'results.jsonl').read_text())
+    with pytest.raises(ValueError, match='review is required but missing'):
+        require_result_review(output, json.loads((output / 'dataset.json').read_text()),
+                              [record])
+    review = {
+        'schema_version': 1,
+        'bindings': {
+            'dataset_sha256': hashlib.sha256(
+                (output / 'dataset.json').read_bytes()).hexdigest(),
+            'results_sha256': hashlib.sha256(
+                (output / 'results.jsonl').read_bytes()).hexdigest(),
+        },
+        'review_protocol': {
+            'scope': 'all',
+            'machine_judgments_withheld': True,
+        },
+        'attempts': [{
+            'attempt_id': record['attempt_id'],
+            'machine_verdict': 'pass',
+            'agent_verdict': 'pass',
+            'final_verdict': 'pass',
+        }],
+    }
+    (output / 'result-review.json').write_text(json.dumps(review))
+    assert bind_assembled_scoring_revision(output, source=root)
+    assert valid_scoring_revision(output)
+
+
+def test_canonical_dataset_without_review_policy_keeps_baseline_policy(source, tmp_path):
+    root, _ = source
+    baseline = json.loads((root / 'dataset.json').read_text())
+    baseline['comparison'] = {
+        'require_independent_result_review': False,
+        'independent_result_review_scope': 'machine-failures',
+    }
+    (root / 'dataset.json').write_text(json.dumps(baseline))
+    canonical = tmp_path / 'canonical.json'
+    inherited = json.loads(json.dumps(baseline))
+    inherited['comparison'] = {}
+    canonical.write_text(json.dumps(inherited))
+
+    output = tmp_path / 'assembled-with-inherited-review-policy'
+    assemble(root, tmp_path / 'certificates', [], output,
+             canonical_dataset=canonical)
+
+    comparison = json.loads((output / 'dataset.json').read_text())['comparison']
+    assert comparison['require_independent_result_review'] is False
+    assert comparison['independent_result_review_scope'] == 'machine-failures'
+
+
+def test_provider_replacement_scope_selects_bound_pair_without_reading_scores(tmp_path):
+    baseline, incoming = tmp_path/'baseline', tmp_path/'incoming'
+    baseline.mkdir(); incoming.mkdir()
+    dataset = {'cases': [{'id': 'one'}, {'id': 'two'}]}
+    (baseline/'dataset.json').write_text(json.dumps(dataset))
+    (incoming/'dataset.json').write_text(json.dumps(dataset))
+    prior = [
+        {'attempt_id': 'old-one', 'provider': 'p', 'case_id': 'one',
+         'provider_metadata': {'binary_sha256': 'a'*64}},
+        {'attempt_id': 'old-two', 'provider': 'p', 'case_id': 'two',
+         'provider_metadata': {'binary_sha256': 'a'*64}},
+    ]
+    current = [
+        {'attempt_id': 'new-one', 'provider': 'p', 'case_id': 'one',
+         'provider_metadata': {'binary_sha256': 'a'*64}, 'metrics': {'content_pass': False}},
+        {'attempt_id': 'new-two', 'provider': 'p', 'case_id': 'two',
+         'provider_metadata': {'binary_sha256': 'a'*64}, 'metrics': {'content_pass': True}},
+    ]
+    for root, rows in ((baseline, prior), (incoming, current)):
+        (root/'results.jsonl').write_text(''.join(json.dumps(row)+'\n' for row in rows))
+    receipt = {
+        'schema_version': 1, 'kind': 'audited_provider_replacement_scope',
+        'provider_calls': 0,
+        'baseline_dataset_sha256': hashlib.sha256((baseline/'dataset.json').read_bytes()).hexdigest(),
+        'baseline_results_sha256': hashlib.sha256((baseline/'results.jsonl').read_bytes()).hexdigest(),
+        'source_dataset_sha256': hashlib.sha256((incoming/'dataset.json').read_bytes()).hexdigest(),
+        'source_results_sha256': hashlib.sha256((incoming/'results.jsonl').read_bytes()).hexdigest(),
+        'replacements': [{
+            'provider': 'p', 'case_id': 'one', 'prior_attempt_id': 'old-one',
+            'selected_attempt_id': 'new-one', 'category': 'invalid_prior_call',
+            'reason': 'The original call ended before returning a result.',
+        }],
+    }
+    path = tmp_path/'scope.json'; path.write_text(json.dumps(receipt))
+    selected, checked = _selected_provider_replacement_rows(
+        baseline, incoming, current, path)
+    assert [row['attempt_id'] for row in selected] == ['new-one']
+    assert checked == receipt
+    current[0]['provider_metadata']['binary_sha256'] = 'b'*64
+    with pytest.raises(ValueError, match='changed the provider binary'):
+        _selected_provider_replacement_rows(baseline, incoming, current, path)
+
+
+@pytest.mark.parametrize('selected_passes', [False, True])
+def test_implementation_correction_replaces_only_a_declared_failed_pair(
+        tmp_path, selected_passes):
+    baseline, incoming = tmp_path/'baseline', tmp_path/'incoming'
+    baseline.mkdir(); incoming.mkdir()
+    dataset = {'cases': [{'id': 'one', 'task_kind': 'body'}]}
+    (baseline/'dataset.json').write_text(json.dumps(dataset))
+    (incoming/'dataset.json').write_text(json.dumps(dataset))
+    prior = {'attempt_id': 'old-one', 'provider': 'p', 'case_id': 'one',
+             'ok': False, 'metrics': {'content_pass': False},
+             'provider_metadata': {'binary_sha256': 'a'*64}}
+    current = {'attempt_id': 'new-one', 'provider': 'p', 'case_id': 'one',
+               'ok': selected_passes,
+               'metrics': {'content_pass': selected_passes},
+               'provider_metadata': {'binary_sha256': 'b'*64}}
+    for root, rows in ((baseline, [prior]), (incoming, [current])):
+        (root/'results.jsonl').write_text(''.join(json.dumps(row)+'\n' for row in rows))
+    receipt = _replacement_scope_receipt(
+        baseline, incoming, prior, current, category='implementation_correction')
+    path = tmp_path/'scope.json'; path.write_text(json.dumps(receipt))
+
+    selected, checked = _selected_provider_replacement_rows(
+        baseline, incoming, [current], path)
+
+    assert selected == [current]
+    assert checked == receipt
+
+
+def test_implementation_correction_rejects_a_declared_baseline_pass(tmp_path):
+    baseline, incoming = tmp_path/'baseline', tmp_path/'incoming'
+    baseline.mkdir(); incoming.mkdir()
+    dataset = {'cases': [{'id': 'one', 'task_kind': 'body'}]}
+    (baseline/'dataset.json').write_text(json.dumps(dataset))
+    (incoming/'dataset.json').write_text(json.dumps(dataset))
+    prior = {'attempt_id': 'old-one', 'provider': 'p', 'case_id': 'one',
+             'ok': True, 'metrics': {'content_pass': True},
+             'provider_metadata': {'binary_sha256': 'a'*64}}
+    current = {'attempt_id': 'new-one', 'provider': 'p', 'case_id': 'one',
+               'ok': False, 'metrics': {'content_pass': False},
+               'provider_metadata': {'binary_sha256': 'b'*64}}
+    for root, rows in ((baseline, [prior]), (incoming, [current])):
+        (root/'results.jsonl').write_text(''.join(json.dumps(row)+'\n' for row in rows))
+    receipt = _replacement_scope_receipt(
+        baseline, incoming, prior, current, category='implementation_correction')
+    path = tmp_path/'scope.json'; path.write_text(json.dumps(receipt))
+
+    with pytest.raises(ValueError, match='baseline machine verdict is not a failure'):
+        _selected_provider_replacement_rows(baseline, incoming, [current], path)
+
+
+def _replacement_scope_receipt(
+        baseline, incoming, prior, current, *, category='invalid_prior_call'):
+    return {
+        'schema_version': 1, 'kind': 'audited_provider_replacement_scope',
+        'provider_calls': 0,
+        'baseline_dataset_sha256': hashlib.sha256(
+            (baseline/'dataset.json').read_bytes()).hexdigest(),
+        'baseline_results_sha256': hashlib.sha256(
+            (baseline/'results.jsonl').read_bytes()).hexdigest(),
+        'source_dataset_sha256': hashlib.sha256(
+            (incoming/'dataset.json').read_bytes()).hexdigest(),
+        'source_results_sha256': hashlib.sha256(
+            (incoming/'results.jsonl').read_bytes()).hexdigest(),
+        'replacements': [{
+            'provider': prior['provider'], 'case_id': prior['case_id'],
+            'prior_attempt_id': prior['attempt_id'],
+            'selected_attempt_id': current['attempt_id'],
+            'category': category,
+            'reason': 'The original call ended before returning a result.',
+        }],
+    }
+
+
+def test_assembled_baseline_keeps_scope_history_when_appending_replacement(source, tmp_path):
+    baseline = tmp_path/'baseline'
+    assemble(source[0], tmp_path/'certificates', [], baseline)
+    dataset = json.loads((baseline/'dataset.json').read_text())
+    case = EvalCase(**dataset['cases'][0])
+
+    class Fixture(Provider):
+        def fetch(self, case, timeout):
+            return ProviderResult(True, 'Expected')
+
+    incoming = tmp_path/'incoming'
+    run_evaluation(output_dir=incoming, dataset_meta=dataset,
+        dataset_path=tmp_path/'input.json', cases=[case],
+        providers=[Fixture('retrying', {'type':'fixture'})],
+        provider_config_path=tmp_path/'providers.json', runs=1,
+        timeout=1, delay=0)
+    prior = json.loads((baseline/'results.jsonl').read_text())
+    current = json.loads((incoming/'results.jsonl').read_text())
+    current_receipt = _replacement_scope_receipt(baseline, incoming, prior, current)
+    current_path = tmp_path/'current-scope.json'
+    current_path.write_text(json.dumps(current_receipt))
+
+    historical_receipt = {
+        **current_receipt,
+        'baseline_dataset_sha256':'1'*64,
+        'baseline_results_sha256':'2'*64,
+        'source_dataset_sha256':'3'*64,
+        'source_results_sha256':'4'*64,
+        'replacements':[{
+            **current_receipt['replacements'][0],
+            'prior_attempt_id':'historical-prior',
+            'selected_attempt_id':'historical-selected',
+        }],
+    }
+    historical = baseline/'history/provider-replacement-scopes/000-historical.json'
+    historical.parent.mkdir(parents=True)
+    historical.write_text(json.dumps(historical_receipt))
+    historical_index = [{
+        'path':'history/provider-replacement-scopes/000-historical.json',
+        'sha256':hashlib.sha256(historical.read_bytes()).hexdigest(),
+        'replacements':historical_receipt['replacements'],
+    }]
+    (baseline/'provider-replacement-scopes.json').write_text(
+        json.dumps(historical_index))
+
+    output = tmp_path/'assembled'
+    assemble(baseline, tmp_path/'certificates', [], output,
+        provider_replacements=[incoming],
+        provider_replacement_scope_receipts=[current_path])
+    selection = json.loads((output/'selection-audit.json').read_text())
+    corrected = next(row for row in selection if row.get('case_id') == case.id)
+    assert corrected['selection_category'] == 'invalid_prior_call'
+    assert corrected['selection_reason'] == 'The original call ended before returning a result.'
+    index = json.loads((output/'provider-replacement-scopes.json').read_text())
+    assert index[0] == historical_index[0]
+    assert (output/index[0]['path']).read_bytes() == historical.read_bytes()
+    assert len(index) == 2
+    assert index[1]['replacements'] == current_receipt['replacements']
+    assert json.loads((output/index[1]['path']).read_text()) == current_receipt
+
+
+def test_assembled_provider_replacement_accepts_no_certificate_tree(source, tmp_path):
+    baseline = tmp_path / 'baseline'
+    assemble(source[0], tmp_path / 'certificates', [], baseline)
+    dataset = json.loads((baseline / 'dataset.json').read_text())
+    case = EvalCase(**dataset['cases'][0])
+
+    class Fixture(Provider):
+        def fetch(self, case, timeout):
+            return ProviderResult(True, 'Expected')
+
+    incoming = tmp_path / 'incoming'
+    run_evaluation(output_dir=incoming, dataset_meta=dataset,
+        dataset_path=tmp_path / 'input.json', cases=[case],
+        providers=[Fixture('retrying', {'type': 'fixture'})],
+        provider_config_path=tmp_path / 'providers.json', runs=1,
+        timeout=1, delay=0)
+    output = tmp_path / 'assembled-without-certificates'
+    assemble(baseline, None, [], output, provider_replacements=[incoming])
+    assert (output / 'results.jsonl').is_file()
+
+    manifest = json.loads((incoming / 'manifest.json').read_text())
+    manifest['attempt_ids'] = []
+    (incoming / 'manifest.json').write_text(json.dumps(manifest))
+    with pytest.raises(ValueError):
+        assemble(baseline, None, [], tmp_path / 'invalid-incoming',
+                 provider_replacements=[incoming])
+
+
+def test_assembly_cli_allows_provider_replacement_without_certificates(monkeypatch, tmp_path):
+    captured = {}
+
+    def fake_assemble(run, certificates, replacements, output, **options):
+        captured.update(run=run, certificates=certificates,
+                        replacements=replacements, output=output, options=options)
+
+    monkeypatch.setattr(assembly_module, 'assemble', fake_assemble)
+    assembly_module.main([
+        '--run-dir', str(tmp_path / 'baseline'),
+        '--provider-replacements', str(tmp_path / 'incoming'),
+        '--output', str(tmp_path / 'output'),
+    ])
+    assert captured['certificates'] is None
+    assert captured['options']['provider_replacements'] == [tmp_path / 'incoming']
+
+
+@pytest.mark.parametrize('damage', ['missing', 'hash', 'outside', 'symlink'])
+def test_inherited_provider_replacement_scope_history_rejects_damage(tmp_path, damage):
+    root = tmp_path/'baseline'
+    receipt = {
+        'schema_version':1, 'kind':'audited_provider_replacement_scope',
+        'provider_calls':0, 'baseline_dataset_sha256':'1'*64,
+        'baseline_results_sha256':'2'*64, 'source_dataset_sha256':'3'*64,
+        'source_results_sha256':'4'*64,
+        'replacements':[{'provider':'p','case_id':'one',
+            'prior_attempt_id':'prior','selected_attempt_id':'selected',
+            'category':'invalid_prior_call','reason':'The prior call was invalid.'}],
+    }
+    stored = root/'history/provider-replacement-scopes/000-scope.json'
+    stored.parent.mkdir(parents=True)
+    stored.write_text(json.dumps(receipt))
+    relative = str(stored.relative_to(root))
+    digest = hashlib.sha256(stored.read_bytes()).hexdigest()
+    if damage == 'missing':
+        stored.unlink()
+    elif damage == 'hash':
+        digest = '0'*64
+    elif damage == 'outside':
+        relative = '../outside.json'
+    elif damage == 'symlink':
+        actual = root/'actual.json'
+        actual.write_text(json.dumps(receipt))
+        stored.unlink()
+        stored.symlink_to(actual)
+    (root/'provider-replacement-scopes.json').write_text(json.dumps([{
+        'path':relative, 'sha256':digest, 'replacements':receipt['replacements']}]))
+    with pytest.raises(ValueError):
+        _provider_replacement_scope_history(root)
+
+
+def test_inherited_provider_replacement_scope_history_requires_its_index(tmp_path):
+    history = tmp_path/'baseline/history/provider-replacement-scopes'
+    history.mkdir(parents=True)
+    (history/'000-scope.json').write_text('{}')
+    with pytest.raises(ValueError, match='has no index'):
+        _provider_replacement_scope_history(tmp_path/'baseline')
+
+
 @pytest.mark.parametrize('config_source', ['configs/custom.json', '/home/private/custom.json'])
 def test_assembly_retains_config_identity_while_omitting_local_paths(source, tmp_path, config_source):
     root, _ = source
@@ -141,7 +498,7 @@ def fetch(self, case, timeout):
     text = 'Expected independent article'
     case = EvalCase('one', 'One', 'https://example.invalid/', 'synthetic', ['Expected'],
                     ground_truth_main_content=text,
-                    source_verification={'state': 'valid', 'method': 'independent source capture',
+                    source_verification={'reference_mode': 'live_exact', 'state': 'valid', 'method': 'independent source capture',
                         'checked_at': datetime.now(timezone.utc).isoformat(),
                         'reference_sha256': hashlib.sha256(text.encode()).hexdigest(),
                         'reference_scope': 'Complete article'})
@@ -263,6 +620,71 @@ def test_assembly_uses_verified_external_reference_trees(source, tmp_path, monke
     assert not (checkout / 'sources').exists()
 
 
+def test_assembly_materializes_registered_multi_source_canonical_references(
+        source, tmp_path, monkeypatch):
+    root, _ = source
+    owner = tmp_path / 'registered' / 'owner'
+    owner.mkdir(parents=True)
+    source_dataset = owner / 'dataset.json'
+    source_dataset.write_bytes((root / 'dataset.json').read_bytes())
+    for tree, relative, raw in (
+            ('sources', 'one/reference.txt', b'bound source'),
+            ('list-references', 'one.json', b'{"case_id":"one"}')):
+        path = owner / tree / relative
+        path.parent.mkdir(parents=True, exist_ok=True)
+        path.write_bytes(raw)
+    canonical = tmp_path / 'canonical' / 'dataset.json'
+    canonical.parent.mkdir()
+    dataset = json.loads((root / 'dataset.json').read_text())
+    dataset.setdefault('comparison', {})['input_sources'] = [{
+        'path': 'registered/owner/dataset.json',
+        'sha256': hashlib.sha256(source_dataset.read_bytes()).hexdigest(),
+        'case_ids': ['one'],
+    }]
+    canonical.write_text(json.dumps(dataset))
+    monkeypatch.setattr(assembly_module, 'REPOSITORY', tmp_path)
+    target = tmp_path / 'assembled-multi-source'
+    assemble(root, tmp_path / 'certificates', [], target, canonical_dataset=canonical)
+    assert (target / 'sources/one/reference.txt').read_bytes() == b'bound source'
+    assert (target / 'list-references/one.json').read_bytes() == b'{"case_id":"one"}'
+
+    dataset['comparison']['input_sources'][0]['sha256'] = '0' * 64
+    canonical.write_text(json.dumps(dataset))
+    with pytest.raises(ValueError, match='input source changed'):
+        assemble(root, tmp_path / 'certificates', [], tmp_path / 'rejected-multi-source',
+                 canonical_dataset=canonical)
+
+
+def test_multi_source_canonical_uses_prior_bound_reference_for_reused_case(
+        tmp_path, monkeypatch):
+    earlier = tmp_path / 'registered/earlier/dataset.json'
+    current = tmp_path / 'registered/current/dataset.json'
+    for path, cases in ((earlier, ['one', 'two']), (current, ['two'])):
+        path.parent.mkdir(parents=True)
+        path.write_text(json.dumps({'cases': [{'id': case} for case in cases]}))
+    prior = earlier.parent / 'sources/two/reference.txt'
+    prior.parent.mkdir(parents=True)
+    prior.write_text('earlier bound capture')
+    canonical_path = tmp_path / 'canonical/dataset.json'
+    canonical_path.parent.mkdir()
+    canonical = {
+        'cases': [{'id': 'one'}, {'id': 'two'}],
+        'comparison': {'input_sources': [
+            {'path': 'registered/earlier/dataset.json',
+             'sha256': hashlib.sha256(earlier.read_bytes()).hexdigest(),
+             'case_ids': ['one']},
+            {'path': 'registered/current/dataset.json',
+             'sha256': hashlib.sha256(current.read_bytes()).hexdigest(),
+             'case_ids': ['two']},
+        ]},
+    }
+    canonical_path.write_text(json.dumps(canonical))
+    monkeypatch.setattr(assembly_module, 'REPOSITORY', tmp_path)
+    output = tmp_path / 'materialized'
+    assembly_module._materialize_canonical_references(output, canonical, canonical_path)
+    assert (output / 'sources/two/reference.txt').read_text() == 'earlier bound capture'
+
+
 @pytest.mark.parametrize('change', ['changed-retry', 'missing-retry', 'linked-primary', 'linked-root'])
 def test_assembly_rejects_changed_missing_or_linked_evidence(source, tmp_path, change):
     root, records = source
@@ -288,3 +710,131 @@ def test_assembly_rejects_changed_missing_or_linked_evidence(source, tmp_path, c
         assemble(root, tmp_path / 'certificates', [], target)
     assert not target.exists()
     assert not list(tmp_path.glob('.rejected-*'))
+
+
+@pytest.mark.parametrize('operation', ['addition', 'replacement'])
+def test_scored_cohort_composition_keeps_authority_without_starting_review(source, tmp_path, operation):
+    from harness.web_fetch.reference_lifecycle import valid_scoring_revision
+    from harness.web_fetch.scoring_revision import revise
+
+    root, _ = source
+    revise(root, root / 'dataset.json', root_cause_category='answer-surface',
+        root_cause='Synthetic retained-answer correction is checked on the complete cohort.',
+        regression_ids=['answer-title-supplies-required-fact'])
+    assert valid_scoring_revision(root)
+    original_bytes = (root / 'results.jsonl').read_bytes()
+    original_history = (root / 'scoring-revisions.json').read_bytes()
+    dataset = json.loads((root / 'dataset.json').read_text())
+    incoming_dataset = json.loads(json.dumps(dataset))
+    if operation == 'replacement':
+        incoming_dataset['cases'][0]['description'] = 'Corrected reader-facing explanation.'
+        incoming_dataset['cases'][0]['ground_truth_evidence'] = [{
+            'source': 'independent observation', 'note': 'Corrected provenance note.'}]
+        incoming_dataset['cases'][0]['source_verification'] = {
+            'status': 'verified', 'note': 'Reader-facing source review metadata.'}
+    case = EvalCase(**incoming_dataset['cases'][0])
+    class Fixture(Provider):
+        def fetch(self, case, timeout):
+            return ProviderResult(True, 'Expected')
+    provider = 'added' if operation == 'addition' else 'retrying'
+    incoming = tmp_path / 'incoming'
+    run_evaluation(output_dir=incoming, dataset_meta={**incoming_dataset,
+            'coverage_plan': {'web': [provider]}}, dataset_path=tmp_path / 'input.json',
+        cases=[case], providers=[Fixture(provider, {'type': 'fixture'})],
+        provider_config_path=tmp_path / 'providers.json', runs=1, timeout=1, delay=0)
+    output = tmp_path / 'assembled'
+    assemble(root, tmp_path / 'certificates', [], output,
+        provider_additions=[incoming] if operation == 'addition' else [],
+        provider_replacements=[incoming] if operation == 'replacement' else [])
+    assert valid_scoring_revision(output)
+    assert (output / 'diagnostics/inherited-scoring-history.json').read_bytes() == original_history
+    receipt = json.loads((output / 'scoring-revisions.json').read_text())[-1]
+    assert receipt['inherited_scoring_authority']['receipts_sha256'] == hashlib.sha256(original_history).hexdigest()
+    assert receipt['task_decision_changes'] == []
+    assert not (output / 'result-review.json').exists()
+    assert (root / 'results.jsonl').read_bytes() == original_bytes
+    assert (root / 'scoring-revisions.json').read_bytes() == original_history
+    result = [json.loads(line) for line in (output / 'results.jsonl').read_text().splitlines()]
+    inputs = ([json.loads(line) for line in original_bytes.splitlines()]
+              if operation == 'addition' else [])
+    inputs += [json.loads(line) for line in (incoming / 'results.jsonl').read_text().splitlines()]
+    indexed = {(row['provider'], row['case_id']): row for row in inputs}
+    assert len(result) == len(indexed)
+    for row in result:
+        old = indexed[row['provider'], row['case_id']]
+        assert row == old
+        for field in ('attempt_id', 'run_id', 'elapsed_ms', 'started_at', 'completed_at', 'metrics'):
+            assert row.get(field) == old.get(field)
+        assert (output / row['artifact_path']).read_bytes() == (
+            (root if row['provider'] == 'retrying' and operation == 'addition' else incoming)
+            / old['artifact_path']).read_bytes()
+
+
+@pytest.mark.parametrize('field,changed', [
+    ('url', 'https://other.example.invalid/'),
+    ('task_prompt', 'Return a different scope.'),
+    ('retrieval_hints', {'version': 3, 'mode': 'native'}),
+])
+def test_provider_replacement_rejects_request_bearing_task_changes(
+        source, tmp_path, field, changed):
+    root, _ = source
+    dataset = json.loads((root / 'dataset.json').read_text())
+    incoming_dataset = json.loads(json.dumps(dataset))
+    incoming_dataset['cases'][0][field] = changed
+    case = EvalCase(**incoming_dataset['cases'][0])
+
+    class Fixture(Provider):
+        def fetch(self, case, timeout):
+            return ProviderResult(True, 'Expected')
+
+    incoming = tmp_path / 'incoming'
+    run_evaluation(output_dir=incoming, dataset_meta=incoming_dataset,
+        dataset_path=tmp_path / 'input.json', cases=[case],
+        providers=[Fixture('retrying', {'type': 'fixture'})],
+        provider_config_path=tmp_path / 'providers.json', runs=1, timeout=1, delay=0)
+    with pytest.raises(ValueError, match='changed task rules'):
+        assemble(root, tmp_path / 'certificates', [], tmp_path / 'assembled',
+                 provider_replacements=[incoming])
+
+
+@pytest.mark.parametrize('damage', ['source-authority', 'incoming-verdict', 'declared-review'])
+def test_scored_cohort_composition_rejects_invalid_authority_or_changed_verdict(source, tmp_path, damage):
+    from harness.web_fetch.scoring_revision import revise
+
+    root, _ = source
+    if damage == 'declared-review':
+        metadata = json.loads((root / 'dataset.json').read_text())
+        metadata.setdefault('comparison', {})['require_independent_result_review'] = True
+        (root / 'dataset.json').write_text(json.dumps(metadata))
+    revise(root, root / 'dataset.json', root_cause_category='answer-surface',
+        root_cause='Synthetic retained-answer correction is checked on the complete cohort.',
+        regression_ids=['answer-title-supplies-required-fact'])
+    dataset = json.loads((root / 'dataset.json').read_text())
+    case = EvalCase(**dataset['cases'][0])
+    class Fixture(Provider):
+        def fetch(self, case, timeout):
+            return ProviderResult(True, 'Expected')
+    incoming = tmp_path / 'incoming'
+    run_evaluation(output_dir=incoming, dataset_meta={**dataset,
+            'coverage_plan': {'web': ['added']}}, dataset_path=tmp_path / 'input.json',
+        cases=[case], providers=[Fixture('added', {'type': 'fixture'})],
+        provider_config_path=tmp_path / 'providers.json', runs=1, timeout=1, delay=0)
+    if damage == 'source-authority':
+        path = root / 'scoring-revisions.json'
+        history = json.loads(path.read_text())
+        history[-1]['output_results_sha256'] = 'f' * 64
+        path.write_text(json.dumps(history))
+    elif damage == 'incoming-verdict':
+        path = incoming / 'results.jsonl'
+        row = json.loads(path.read_text())
+        row['metrics']['content_pass'] = False
+        path.write_text(json.dumps(row) + '\n')
+    protected = {folder: {p.relative_to(folder): p.read_bytes() for p in folder.rglob('*')
+                          if p.is_file()} for folder in (root, incoming)}
+    output = tmp_path / 'assembled'
+    with pytest.raises(ValueError):
+        assemble(root, tmp_path / 'certificates', [], output, provider_additions=[incoming])
+    assert not output.exists()
+    for folder, files in protected.items():
+        assert {p.relative_to(folder): p.read_bytes() for p in folder.rglob('*')
+                if p.is_file()} == files
diff --git a/tests/test_body_text_acceptance_roles.py b/tests/test_body_text_acceptance_roles.py
new file mode 100644
index 000000000..192f0ec29
--- /dev/null
+++ b/tests/test_body_text_acceptance_roles.py
@@ -0,0 +1,141 @@
+"""Body extraction acceptance, independent of page-shell output."""
+
+import copy
+
+import pytest
+
+from harness.web_fetch.metrics import task_passed
+from harness.web_fetch.risk_control_dataset import assign_content_acceptance_roles
+from harness.web_fetch.scoring import score_attempt
+from harness.web_fetch.scoring_regressions import load_scoring_regressions
+from harness.web_fetch.stable_tasks import validate_acceptance_contract
+
+
+def body_case():
+    row = load_scoring_regressions()["explicit-body-without-page-shell-passes"]
+    return copy.deepcopy(row["case"])
+
+
+@pytest.mark.parametrize(
+    "artifact,accepted",
+    [
+        ("alpha bravo charlie delta echo foxtrot golf hotel", True),
+        ("<main>alpha bravo charlie delta echo foxtrot golf hotel</main>", True),
+        ("Account login and site footer", False),
+        ("alpha bravo charlie delta", False),
+        ("", False),
+    ],
+)
+def test_body_contract_controls_acceptance_across_answer_formats(artifact, accepted):
+    metrics = score_attempt(body_case(), artifact.encode(), ok=True)
+    assert task_passed(True, metrics) is accepted
+    assert metrics["stable_anchor_total"] == 1
+
+
+def test_final_url_mismatch_remains_diagnostic_with_complete_body():
+    case = body_case()
+    case["track"] = "risk_control"
+    case["source_benchmark"] = {
+        "risk_control": {
+            "navigation_contract": {
+                "requested_url": case["url"],
+                "observed_final_url": case["url"],
+                "target_language": "en",
+            }
+        }
+    }
+    metrics = score_attempt(
+        case,
+        b"alpha bravo charlie delta echo foxtrot golf hotel",
+        ok=True,
+        final_url="https://example.test/wrong",
+    )
+    assert task_passed(True, metrics)
+    assert metrics["page_identity_status"] == "mismatch"
+    assert metrics["final_url_consistent"] is False
+    assert metrics["page_identity_required"] is False
+
+
+def test_diagnostic_role_cannot_remove_the_only_acceptance_gate():
+    case = body_case()
+    del case["body_requirements"]
+    with pytest.raises(ValueError, match="requires body, composite, or page-pattern"):
+        assign_content_acceptance_roles([case])
+    with pytest.raises(ValueError, match="requires body, composite, or page-pattern"):
+        score_attempt(case, b"unrelated body", ok=True)
+
+
+def test_page_pattern_can_own_scope_while_legacy_literals_stay_diagnostic():
+    case = body_case()
+    del case["body_requirements"]
+    case["acceptance_contract"]["page_patterns"] = [r"archive introduction"]
+    assign_content_acceptance_roles([case])
+    passing = score_attempt(case, b"archive introduction", ok=True)
+    failing = score_attempt(case, b"Account login and site footer", ok=True)
+    assert task_passed(True, passing)
+    assert not task_passed(True, failing)
+
+
+def test_empty_composite_owner_cannot_make_stable_text_diagnostic():
+    case = body_case()
+    del case["body_requirements"]
+    case["composite_acceptance"] = {"version": 1, "groups": []}
+    with pytest.raises(ValueError, match="requires body, composite, or page-pattern"):
+        assign_content_acceptance_roles([case])
+
+
+def test_structured_contract_cannot_relax_its_stable_text():
+    contract = {
+        "version": 1,
+        "schema": "named_link",
+        "minimum_records": 1,
+        "hosts": ["example.test"],
+        "entry_path": "/item/[0-9]+",
+        "stable_text_role": "diagnostic",
+    }
+    with pytest.raises(ValueError, match="body-text"):
+        validate_acceptance_contract(contract)
+
+
+def test_compiler_policy_does_not_infer_diagnostic_from_gate_presence():
+    body = body_case()
+    del body["acceptance_contract"]["stable_text_role"]
+    composite = copy.deepcopy(body)
+    del composite["body_requirements"]
+    composite["composite_acceptance"] = {
+        "version": 1,
+        "groups": [
+            {"id": "identity", "kind": "literals", "required_literals": ["Target identity"]}
+        ],
+    }
+    assign_content_acceptance_roles([body, composite])
+    assert "stable_text_role" not in body["acceptance_contract"]
+    assert "stable_text_role" not in composite["acceptance_contract"]
+
+
+def test_explicit_diagnostic_role_is_preserved_with_an_independent_body_gate():
+    case = body_case()
+    assert case["acceptance_contract"]["stable_text_role"] == "diagnostic"
+    assign_content_acceptance_roles([case])
+    assert case["acceptance_contract"]["stable_text_role"] == "diagnostic"
+
+
+@pytest.mark.parametrize("restriction", ["forbidden", "blocked", "too_short"])
+def test_diagnostic_shell_does_not_bypass_other_body_gates(restriction):
+    case = body_case()
+    artifact = "alpha bravo charlie delta echo foxtrot golf hotel"
+    if restriction == "forbidden":
+        case["forbidden_any"] = ["foxtrot"]
+    elif restriction == "blocked":
+        artifact += "\nAccess denied"
+    else:
+        case["min_content_chars"] = len(artifact) + 1
+    metrics = score_attempt(case, artifact.encode(), ok=True)
+    assert not task_passed(True, metrics)
+
+
+def test_omitted_role_preserves_the_existing_mandatory_heading_contract():
+    case = body_case()
+    del case["acceptance_contract"]["stable_text_role"]
+    metrics = score_attempt(case, b"alpha bravo charlie delta echo foxtrot golf hotel", ok=True)
+    assert not task_passed(True, metrics)
diff --git a/tests/test_browser_observation_contracts.py b/tests/test_browser_observation_contracts.py
index 2af350803..95914ed98 100644
--- a/tests/test_browser_observation_contracts.py
+++ b/tests/test_browser_observation_contracts.py
@@ -206,6 +206,10 @@ class Page(BaseHTTPRequestHandler):
         def do_GET(self):
             body = b"""<html><body><nav>Navigation only</nav><main>
             <div style="display:none">Hidden panel</div>
+            <div style="opacity:0"><span>Transparent menu</span></div>
+            <span>Visible duplicate</span><div style="opacity:0">Visible duplicate</div>
+            <p style="opacity:0.5">Translucent text</p>
+            <p>Inline <strong>formatting</strong> preserved</p>
             <div aria-hidden="true" style="display:none">Excluded panel</div>
             </main><footer>Footer only</footer>
             <script>setTimeout(()=>{for(let i=0;i<10;i++){
@@ -245,6 +249,13 @@ def test_live_multielement_completion_preserves_declared_content_scope(rendered_
     assert all(f"Card {i}" in row["content_text"] for i in range(10))
     assert "Navigation only" not in row["content_text"]
     assert "Footer only" not in row["content_text"]
+    assert ("Transparent menu" in row["content_text"]) == (mode != "visible")
+    assert "Visible duplicate" in row["content_text"]
+    assert "Translucent text" in row["content_text"]
+    assert "Inline formatting preserved" in " ".join(row["content_text"].split())
+    if mode == "visible":
+        assert "Inline formatting preserved" in row["content_text"]
+        assert row["content_text"].count("Visible duplicate") == 1
     assert ("Hidden panel" in row["content_text"]) == (mode != "visible")
     assert ("Excluded panel" in row["content_text"]) == (mode == "dom")
 
diff --git a/tests/test_browser_reference_scope.py b/tests/test_browser_reference_scope.py
index 5a6d9d3e1..3824a2b02 100644
--- a/tests/test_browser_reference_scope.py
+++ b/tests/test_browser_reference_scope.py
@@ -1,6 +1,9 @@
 """Browser reference capture must preserve scope and isolate case failures."""
 import json
 import os
+import sys
+from types import SimpleNamespace
+from unittest.mock import patch
 
 import pytest
 
@@ -103,6 +106,97 @@ def observe(case, *args, **kwargs):
         browser_capture.capture_batch([cases[1]],**options)
 
 
+def test_checkpoint_cannot_cross_dns_modes(tmp_path, monkeypatch):
+    binary = tmp_path / 'browser'
+    binary.write_bytes(b'synthetic browser identity')
+    monkeypatch.setattr(browser_capture, 'capture_with_retries', lambda case, *args, **kwargs: {
+        'case_id': case['id'], 'status': 'success', 'completion': {'satisfied': True},
+    })
+    options = dict(timeout_ms=1000, attempts=1, checkpoints=tmp_path / 'checkpoints',
+                   browser_binary=str(binary))
+    case = {'id': 'article', 'url': 'https://example.com/article'}
+    browser_capture.capture_batch([case], dns_mode='system', **options)
+    with pytest.raises(ValueError, match='inputs changed'):
+        browser_capture.capture_batch([case], dns_mode='public_doh', **options)
+
+
+def test_public_doh_capture_uses_fresh_persistent_profile_and_records_route(monkeypatch):
+    observed = {}
+    class Response:
+        def server_addr(self):
+            return {'ip_address': '203.0.113.8', 'port': 443}
+    class Page:
+        url = 'https://example.com/'
+        def goto(self, *args, **kwargs): return Response()
+        def title(self): return 'Example'
+    browser = SimpleNamespace(version='Chromium 155')
+    class Context:
+        def __init__(self): self.browser = browser
+        def new_page(self): return Page()
+        def close(self): observed['closed'] = True
+    class Chromium:
+        def launch_persistent_context(self, directory, **kwargs):
+            from harness.web_fetch.network_dns import DNS_ENDPOINT
+            observed['directory'] = directory
+            observed['launch'] = kwargs
+            state = json.loads((browser_capture.Path(directory) / 'Local State').read_text())
+            assert state['dns_over_https'] == {
+                'mode': 'secure', 'templates': DNS_ENDPOINT + '{?dns}',
+            }
+            return Context()
+        def launch(self, **kwargs):
+            raise AssertionError('public_doh must not use an ephemeral non-profile launch')
+    class Driver:
+        def __enter__(self): return SimpleNamespace(chromium=Chromium())
+        def __exit__(self, *args): observed['driver_closed'] = True
+    module = SimpleNamespace(sync_playwright=lambda: Driver())
+    captured = {
+        'content_text': '', 'selector': 'resources', 'observation_method': 'fixture',
+        'observed_records': 1, 'resource_scope_identity': {}, 'resource_candidates': [],
+        'resource_candidates_sha256': 'a' * 64, 'target_matches': [],
+        'completion': {'satisfied': True, 'elapsed_ms': 1, 'timeout_ms': 1000},
+    }
+    monkeypatch.setattr(browser_capture, 'capture_resource_observation',
+                        lambda *args, **kwargs: captured)
+    with patch.dict(sys.modules, {'playwright.sync_api': module}):
+        row = browser_capture.capture(
+            {'id': 'resource', 'url': 'https://example.com/', 'track': 'image',
+             'task_kind': 'resource', 'expected_resources': []},
+            1000, '/chrome', dns_mode='public_doh')
+    assert row['observer']['dns_mode'] == 'public_doh'
+    assert row['observer']['resolution_method'] == 'chromium_secure_dns'
+    assert row['observer']['system_dns_fallback'] is False
+    assert row['observer']['dns_override'] is False
+    assert row['observer']['browser_version'] == 'Chromium 155'
+    assert row['observer']['primary_response_server_addr'] == {
+        'ip_address': '203.0.113.8', 'port': 443,
+    }
+    assert observed['launch']['args'] == []
+    assert observed['closed'] and observed['driver_closed']
+    assert not browser_capture.Path(observed['directory']).exists()
+
+
+def test_public_doh_retry_never_pre_resolves_or_accepts_forced_ip(monkeypatch):
+    monkeypatch.setattr(browser_capture, 'resolve_public_host', lambda *args: (_ for _ in ()).throw(
+        AssertionError('public_doh must not use system DNS or a forced-IP mapping')))
+    observed = {}
+    def capture(case, timeout_ms, browser_binary, resolved_ip, **kwargs):
+        observed.update(resolved_ip=resolved_ip, kwargs=kwargs)
+        return {'case_id': case['id'], 'status': 'success', 'observer': {},
+                'completion': {'satisfied': True}}
+    monkeypatch.setattr(browser_capture, 'capture', capture)
+    row = capture_with_retries(
+        {'id': 'public', 'url': 'https://example.com/'}, 1000, 1, '/chrome',
+        dns_mode='public_doh')
+    assert observed == {'resolved_ip': None, 'kwargs': {'dns_mode': 'public_doh'}}
+    assert row['observer']['resolution_method'] == 'chromium_secure_dns'
+    assert row['observer']['system_dns_fallback'] is False
+    with pytest.raises(ValueError, match='cannot use a resolved-IP'):
+        capture_with_retries(
+            {'id': 'public', 'url': 'https://example.com/'}, 1000, 1, '/chrome',
+            '203.0.113.8', dns_mode='public_doh')
+
+
 def test_rendered_wikipedia_selector_preserves_main_article_text():
     html = """
     <div class="mw-parser-output">
diff --git a/tests/test_composite_tasks.py b/tests/test_composite_tasks.py
index 4ac979d78..872d05818 100644
--- a/tests/test_composite_tasks.py
+++ b/tests/test_composite_tasks.py
@@ -148,6 +148,35 @@ def test_record_line_pattern_keeps_support_links_inside_the_article_card():
     assert result["composite_group_results"][0]["count"] == 2
 
 
+def test_scoped_repeated_titles_close_cards_without_borrowing_navigation():
+    rules = {
+        "version": 1,
+        "groups": [{
+            "id": "cards",
+            "kind": "name_description",
+            "minimum_records": 2,
+            "start_pattern": r"^# Catalog$",
+            "end_pattern": r"^# End$",
+        }],
+    }
+    cards = (
+        "# Catalog\n\nAlpha film\n\nA complete first description.\n\nAlpha film\n\n"
+        "Beta film\n\nA complete second description.\n\nBeta film\n\n# End"
+    )
+    result = evaluate_composite_acceptance(cards, rules, base_url="https://example.test")
+    assert result["composite_acceptance_pass"] is True
+    assert result["composite_group_results"][0]["count"] == 2
+
+    outside = (
+        "Home\n\nExplore everything we offer today.\n\nHome\n\n"
+        "About\n\nLearn why customers choose us.\n\nAbout\n\n"
+        "# Catalog\n\nAlpha film\n\nA complete first description.\n\nAlpha film\n\n# End"
+    )
+    result = evaluate_composite_acceptance(outside, rules, base_url="https://example.test")
+    assert result["composite_acceptance_pass"] is False
+    assert result["composite_group_results"][0]["count"] == 1
+
+
 def test_first_repeated_link_does_not_replace_the_visible_record_name():
     rules = contract(
         named(
@@ -245,6 +274,111 @@ def test_linked_table_requires_link_and_fields_in_same_row():
     )["composite_acceptance_pass"]
 
 
+def test_linearized_linked_table_preserves_rows_without_borrowing_fields():
+    rules = contract({
+        "id": "repositories", "kind": "linked_table", "minimum_records": 2,
+        "hosts": ["example.test"], "entry_path": r"/repo/[a-z]+",
+        "required_columns": [
+            {"id": "name", "kind": "text", "aliases": ["Name"]},
+            {"id": "description", "kind": "text", "aliases": ["Description"]},
+            {"id": "owner", "kind": "text", "aliases": ["Owner"]},
+        ],
+        "identity_column": "name", "link_column": "name",
+    })
+    complete = """[Name](/sort/name)\n[Description](/sort/description)\n[Owner](/sort/owner)\n\n[alpha](/repo/alpha)\n[Alpha summary](/repo/alpha)\n[Alice](/owner/alice)\n\n[beta](/repo/beta)\n[Beta summary](/repo/beta)\n[Bob](/owner/bob)"""
+    assert evaluate_composite_acceptance(
+        complete, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+    for missing in ("[Beta summary](/repo/beta)\n", "[Bob](/owner/bob)"):
+        incomplete = complete.replace(missing, "")
+        if missing == "[Bob](/owner/bob)":
+            incomplete += "\n2 months\n[summary](/repo/beta)"
+        assert not evaluate_composite_acceptance(
+            incomplete, rules, base_url="https://example.test/"
+        )["composite_acceptance_pass"]
+
+
+def test_labeled_fields_may_share_a_line_but_stay_inside_their_card():
+    rules = contract(named(
+        "news", r"^# News$", r"^# End$", 2,
+        required_fields=[
+            {"id": "published", "kind": "date_or_time", "aliases": ["Published"]},
+            {"id": "comments", "kind": "integer", "aliases": ["Comments"]},
+        ],
+    ))
+    complete = """# News\n[First](/item/1)\nPublished: Tue 08:30 UTC Comments: 0\n[Second](/item/2)\nPublished: Wed 09:45 UTC Comments: 3\n# End"""
+    assert evaluate_composite_acceptance(
+        complete, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+    assert not evaluate_composite_acceptance(
+        complete.replace("Comments: 0", "Comments:"),
+        rules, base_url="https://example.test/",
+    )["composite_acceptance_pass"]
+
+
+def test_labeled_fields_accept_unpunctuated_values_on_independent_lines():
+    rules = contract(named(
+        "news", r"^# News$", r"^# End$", 2,
+        required_fields=[
+            {"id": "published", "kind": "date_or_time", "aliases": ["Published"]},
+            {"id": "comments", "kind": "integer", "aliases": ["Comments"]},
+        ],
+    ))
+    content = """# News
+[First](/item/1)
+Published Tue 08:30 UTC
+Comments 0
+[Second](/item/2)
+Published Wed 09:45 UTC
+Comments 3
+# End"""
+    assert evaluate_composite_acceptance(
+        content, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+
+    dashed = content.replace("Published ", "Published - ").replace(
+        "Comments ", "Comments - "
+    )
+    assert evaluate_composite_acceptance(
+        dashed, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+
+
+def test_standalone_labels_do_not_lend_one_following_value_to_other_fields():
+    rules = contract(named(
+        "news", r"^# News$", r"^# End$", 1,
+        required_fields=[
+            {"id": "publisher", "kind": "text", "aliases": ["Publisher"]},
+            {"id": "comments", "kind": "integer", "aliases": ["Comments"]},
+        ],
+    ))
+    label_after_label = """# News\n[First](/item/1)\nPublisher\nComments: 3\n# End"""
+    assert not evaluate_composite_acceptance(
+        label_after_label, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+
+    unpunctuated_label_after_label = """# News
+[First](/item/1)
+Publisher
+Comments 3
+# End"""
+    assert not evaluate_composite_acceptance(
+        unpunctuated_label_after_label, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+
+    repeated = contract(named(
+        "news", r"^# News$", r"^# End$", 1,
+        required_fields=[
+            {"id": "first", "kind": "integer", "aliases": ["Count"]},
+            {"id": "second", "kind": "integer", "aliases": ["Count"]},
+        ],
+    ))
+    assert not evaluate_composite_acceptance(
+        "# News\n[First](/item/1)\nCount\n3\n# End",
+        repeated, base_url="https://example.test/",
+    )["composite_acceptance_pass"]
+
+
 def test_field_report_binds_fixed_values_to_their_labels():
     rules = contract(
         {
@@ -266,6 +400,201 @@ def test_field_report_binds_fixed_values_to_their_labels():
     )["composite_acceptance_pass"]
 
 
+def test_field_report_reads_owned_markdown_table_cells_before_fixed_value_checks():
+    rules = contract(
+        {
+            "id": "report",
+            "kind": "field_report",
+            "required_fields": [
+                {"id": "page_id", "kind": "integer", "aliases": ["ID"]},
+                {
+                    "id": "wikidata",
+                    "kind": "text",
+                    "aliases": ["Wikidata ID"],
+                    "pattern": r"Q[0-9]+",
+                },
+                {"id": "pageviews", "kind": "integer", "aliases": ["Pageviews"]},
+            ],
+            "fixed_values": {
+                "page_id": "1164",
+                "wikidata": "Q11660",
+                "pageviews": "567652",
+            },
+        }
+    )
+    positive = """|  |  |
+| --- | --- |
+| ID | [1164](/page/1164) |
+| Wikidata ID | [Q11660](/entity/Q11660) · 214 sitelinks |
+| Pageviews (30 days) | [567,652](/views) |
+"""
+    assert evaluate_composite_acceptance(
+        positive, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+    wrong_owned_cells = positive.replace("[1164](/page/1164)", "999").replace(
+        "214 sitelinks", "214 sitelinks; unrelated note 1164"
+    )
+    assert not evaluate_composite_acceptance(
+        wrong_owned_cells, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+
+
+def test_field_report_prefers_the_longest_declared_label():
+    rules = contract(
+        {
+            "id": "report",
+            "kind": "field_report",
+            "required_fields": [
+                {"id": "page_id", "kind": "integer", "aliases": ["ID"]},
+            ],
+            "fixed_values": {"page_id": "1164"},
+        }
+    )
+    assert not evaluate_composite_acceptance(
+        "Wikidata ID: Q1164 · 214 sitelinks",
+        rules,
+        base_url="https://example.test/",
+    )["composite_acceptance_pass"]
+
+
+def test_field_report_explicit_fields_may_share_one_line_without_sharing_values():
+    rules = contract(
+        {
+            "id": "report",
+            "kind": "field_report",
+            "required_fields": [
+                {"id": "page_id", "kind": "integer", "aliases": ["ID"]},
+                {
+                    "id": "wikidata",
+                    "kind": "text",
+                    "aliases": ["Wikidata ID"],
+                    "pattern": r"Q[0-9]+",
+                },
+            ],
+            "fixed_values": {"page_id": "1164", "wikidata": "Q11660"},
+        }
+    )
+    assert evaluate_composite_acceptance(
+        "ID: 1164 Wikidata ID: Q11660",
+        rules,
+        base_url="https://example.test/",
+    )["composite_acceptance_pass"]
+    assert not evaluate_composite_acceptance(
+        "ID: 1164 Wikidata ID:",
+        rules,
+        base_url="https://example.test/",
+    )["composite_acceptance_pass"]
+
+
+def test_field_value_equal_to_its_label_consumes_the_owned_value_span():
+    rules = contract(named(
+        "items", r"^# Items$", r"^# End$", 1,
+        required_fields=[
+            {"id": "owner", "kind": "text", "aliases": ["Owner"]},
+            {"id": "comments", "kind": "integer", "aliases": ["Comments"]},
+        ],
+    ))
+    assert evaluate_composite_acceptance(
+        "# Items\n[First](/item/1)\nOwner: Owner Comments: 3\n# End",
+        rules,
+        base_url="https://example.test/",
+    )["composite_acceptance_pass"]
+
+
+def test_field_report_section_scope_requires_the_declared_subfield():
+    rules = contract(
+        {
+            "id": "prose",
+            "kind": "field_report",
+            "start_pattern": r"^Prose$",
+            "end_pattern": r"^Registered edits$",
+            "required_fields": [
+                {"id": "words", "kind": "integer", "aliases": ["Words"]},
+                {"id": "references", "kind": "integer", "aliases": ["References"]},
+            ],
+        }
+    )
+    complete = """Other section
+Bytes
+999999
+Prose
+Bytes
+84958
+Words
+12599
+References
+558
+Registered edits"""
+    assert evaluate_composite_acceptance(
+        complete, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+    assert not evaluate_composite_acceptance(
+        complete.replace("Words\n12599\n", ""), rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+
+
+@pytest.mark.parametrize(
+    ("general", "prose", "registered"),
+    [
+        ("General statistics", "Prose", "Registered edits"),
+        ("## General statistics", "## Prose", "## Registered edits"),
+        ("##General statistics", "#Prose", "###Registered edits · 100"),
+        (r"#### General statistics \[show\] \[hide\]", "Prose", "Registered edits: 100"),
+    ],
+)
+def test_field_report_scope_accepts_plain_or_markdown_heading_boundaries(
+    general, prose, registered
+):
+    general_pattern = (
+        r"^(?:#{1,6}\s*)?General statistics"
+        r"(?:\s+(?:\\)?\[(?:show|hide)(?:\\)?\])*$"
+    )
+    prose_pattern = r"^(?:#{1,6}\s*)?Prose\s*$"
+    registered_pattern = (
+        r"^(?:#{1,6}\s*)?Registered edits(?:\s*(?:·|:|[-–—])\s*.*)?$"
+    )
+    rules = contract(
+        {
+            "id": "general",
+            "kind": "field_report",
+            "start_pattern": general_pattern,
+            "end_pattern": prose_pattern,
+            "required_fields": [
+                {"id": "page_id", "kind": "integer", "aliases": ["ID"]},
+            ],
+            "fixed_values": {"page_id": "1164"},
+        },
+        {
+            "id": "prose",
+            "kind": "field_report",
+            "start_pattern": prose_pattern,
+            "end_pattern": registered_pattern,
+            "required_fields": [
+                {"id": "words", "kind": "integer", "aliases": ["Words"]},
+                {"id": "references", "kind": "integer", "aliases": ["References"]},
+            ],
+        },
+    )
+    content = f"""General statistics
+Navigation only
+{general}
+ID | 1164
+{prose}
+Bytes 84958
+Words 12599
+References 558
+{registered}
+Words 999999"""
+    assert evaluate_composite_acceptance(
+        content, rules, base_url="https://example.test/"
+    )["composite_acceptance_pass"]
+    assert not evaluate_composite_acceptance(
+        content.replace(registered, "Registered editors"),
+        rules,
+        base_url="https://example.test/",
+    )["composite_acceptance_pass"]
+
+
 def test_field_report_cannot_reuse_one_unlabelled_line_for_multiple_fields():
     rules = contract(
         {
@@ -381,3 +710,227 @@ def test_invalid_contract_fails_closed():
                 }
             )
         )
+
+
+@pytest.mark.parametrize("date", [
+    "Jan. 14, 2026", "Feb. 14, 2026", "Mar. 14, 2026", "Apr. 14, 2026",
+    "May 14, 2026", "Jun. 14, 2026", "Jul. 14, 2026", "Aug. 14, 2026",
+    "Sep. 14, 2026", "Oct. 14, 2026", "Nov. 14, 2026", "Dec. 14, 2026",
+    "14 Oct. 2026", "Oct 14, 2026", "October 14, 2026", "14 October 2026",
+])
+def test_article_dates_accept_english_month_abbreviation_punctuation(date):
+    from harness.web_fetch.metrics import task_passed
+    from harness.web_fetch.scoring import score_attempt
+
+    case = {
+        "url": "https://example.test/news",
+        "composite_acceptance": contract(named(
+            "news", r"^# News$", r"^# End$", 1,
+            required_fields=[{"id": "published", "kind": "date_or_time"}],
+        )),
+    }
+    body = f"# News\n[Article](https://example.test/item/1)\n{date}\n# End"
+    assert task_passed(True, score_attempt(case, body.encode(), ok=True))
+
+
+@pytest.mark.parametrize("date", ["October", "Oct.", "2026", "No publication date"])
+def test_article_date_requires_a_day_or_time_not_just_month_or_year(date):
+    from harness.web_fetch.metrics import task_passed
+    from harness.web_fetch.scoring import score_attempt
+
+    case = {
+        "url": "https://example.test/news",
+        "composite_acceptance": contract(named(
+            "news", r"^# News$", r"^# End$", 1,
+            required_fields=[{"id": "published", "kind": "date_or_time"}],
+        )),
+    }
+    body = f"# News\n[Article](https://example.test/item/1)\n{date}\n# End"
+    assert not task_passed(True, score_attempt(case, body.encode(), ok=True))
+
+
+@pytest.mark.parametrize('content,minimum,expected', [
+    ('<article><header><a href="/item/1">First House</a><p>$100,000</p></header><section><p>900 sqft</p></section></article>',1,True),
+    ('<article><a href="/item/1">First House</a><p>$100,000</p><aside><p>Unrelated notice</p></aside><p>900 sqft</p></article>',1,True),
+    ('<article><a href="/item/1">First House</a><p>$100,000</p><p>900 sqft</p></article>',1,True),
+    ('<article><p>$100,000</p><a href="/item/1">First House</a><p>900 sqft</p></article>',1,True),
+    ('<article><a href="/item/1">First House</a><p>$100,000</p></article><article><p>900 sqft</p><a href="/item/2">Second House</a></article>',1,False),
+    ('<ul><li><a href="/item/1">First House</a><p>$100,000</p></li><li><p>900 sqft</p><a href="/item/2">Second House</a></li></ul>',1,False),
+    ('<div><div><a href="/item/1">First House</a><p>$100,000</p></div><div><p>900 sqft</p><a href="/item/2">Second House</a></div></div>',1,False),
+    ('<article><a href="/item/1">First House</a><p>$100,000</p></article><aside><p>900 sqft</p></aside>',1,False),
+    ('<article><a href="/item/1">First House</a><p>$100,000</p><aside><p>900 sqft</p></aside></article>',1,False),
+    ('<article><a href="/item/1">First House</a><p>$100,000</p></article><article><p>900 sqft</p><a href="/item/2"><img src="/cover.png" alt="Second House"></a></article>',1,False),
+    ('<article><p>$100,000</p><a href="/item/1">First House</a><p>900 sqft</p></article><article><p>$200,000</p><a href="/item/2">Second House</a><p>1000 sqft</p></article>',2,True),
+])
+def test_public_scorer_keeps_html_fields_with_their_record_owner(content, minimum, expected):
+    from harness.web_fetch.scoring import score_attempt
+    from harness.web_fetch.metrics import task_passed
+    rules=contract(named('houses',None,None,minimum,required_fields=[
+        {'id':'price','kind':'price'},{'id':'area','kind':'area'}]))
+    rules['groups'][0].pop('start_pattern');rules['groups'][0].pop('end_pattern')
+    case={'url':'https://example.test/catalog','task_kind':'body','min_content_chars':1,'composite_acceptance':rules}
+    metrics=score_attempt(case,content.encode(),ok=True)
+    assert metrics['composite_acceptance_pass'] is expected
+    assert task_passed(True,metrics,'body') is expected
+
+
+@pytest.mark.parametrize('container', ['article','li','div'])
+@pytest.mark.parametrize('wrappers', [0,1,3])
+@pytest.mark.parametrize('field_tags', ['paragraphs','attribute_list'])
+@pytest.mark.parametrize('complete', [False,True])
+def test_html_record_layout_wrappers_and_attribute_lists_preserve_verdict(container, wrappers, field_tags, complete):
+    from harness.web_fetch.scoring import score_attempt
+    from harness.web_fetch.metrics import task_passed
+    def fields(values):
+        if field_tags=='attribute_list':
+            return '<ul>'+''.join('<li>'+value+'</li>' for value in values)+'</ul>'
+        return ''.join('<p>'+value+'</p>' for value in values)
+    first=('<a href="/item/1">First House</a>'
+           +fields(['$100,000','900 sqft'] if complete else ['$100,000']))
+    second=(fields(['$200,000','1000 sqft'] if complete else ['900 sqft'])
+            +'<a href="/item/2">Second House</a>')
+    for _ in range(wrappers):
+        first='<div class="content">'+first+'</div>'
+        second='<div class="content">'+second+'</div>'
+    content='<main><'+container+'>'+first+'</'+container+'><'+container+'>'+second+'</'+container+'></main>'
+    if container=='li':content='<ul>'+content+'</ul>'
+    rules=contract(named('houses',None,None,2 if complete else 1,required_fields=[
+        {'id':'price','kind':'price'},{'id':'area','kind':'area'}]))
+    rules['groups'][0].pop('start_pattern');rules['groups'][0].pop('end_pattern')
+    case={'url':'https://example.test/catalog','task_kind':'body','min_content_chars':1,'composite_acceptance':rules}
+    metrics=score_attempt(case,content.encode(),ok=True)
+    assert metrics['composite_acceptance_pass'] is complete
+    assert task_passed(True,metrics,'body') is complete
+
+
+@pytest.mark.parametrize(
+    ("content", "minimum", "expected"),
+    [
+        (
+            '<main><div><p><a href="/item/1">First House</a><br>$100,000</p></div>'
+            '<div><p>900 sqft<br><a href="/item/2">Second House</a></p></div></main>',
+            1,
+            False,
+        ),
+        (
+            '<main><section><div><p><a href="/item/1">First House</a><br>$100,000</p></div></section>'
+            '<section><div><p>900 sqft<br><a href="/item/2">Second House</a></p></div></section></main>',
+            1,
+            False,
+        ),
+        (
+            '<article><ul><li><a href="/item/1">First House</a></li></ul>'
+            '<p>$100,000</p><p>900 sqft</p></article>',
+            1,
+            True,
+        ),
+        (
+            '<article><ul><li><a href="/item/1">First House</a></li>'
+            '<li><a href="/item/2">Second House</a></li></ul>'
+            '<p>$100,000</p><p>900 sqft</p></article>',
+            2,
+            False,
+        ),
+    ],
+)
+def test_html_record_owner_uses_effective_card_not_layout_container(
+    content, minimum, expected
+):
+    from harness.web_fetch.metrics import task_passed
+    from harness.web_fetch.scoring import score_attempt
+
+    rules = contract(
+        named(
+            "houses",
+            None,
+            None,
+            minimum,
+            required_fields=[
+                {"id": "price", "kind": "price"},
+                {"id": "area", "kind": "area"},
+            ],
+        )
+    )
+    rules["groups"][0].pop("start_pattern")
+    rules["groups"][0].pop("end_pattern")
+    case = {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "min_content_chars": 1,
+        "composite_acceptance": rules,
+    }
+    metrics = score_attempt(case, content.encode(), ok=True)
+    assert metrics["composite_acceptance_pass"] is expected
+    assert task_passed(True, metrics, "body") is expected
+
+
+@pytest.mark.parametrize("complete_first", [False, True])
+def test_duplicate_identity_is_validated_per_dom_record_before_deduplication(
+    complete_first,
+):
+    from harness.web_fetch.metrics import task_passed
+    from harness.web_fetch.scoring import score_attempt
+
+    incomplete = '<article><a href="/item/1">First House</a><p>$100,000</p></article>'
+    complete = (
+        '<article><a href="/item/1">First House</a>'
+        '<p>$100,000</p><p>900 sqft</p></article>'
+    )
+    content = complete + incomplete if complete_first else incomplete + complete
+    rules = contract(
+        named(
+            "houses",
+            None,
+            None,
+            1,
+            required_fields=[
+                {"id": "price", "kind": "price"},
+                {"id": "area", "kind": "area"},
+            ],
+        )
+    )
+    rules["groups"][0].pop("start_pattern")
+    rules["groups"][0].pop("end_pattern")
+    case = {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "min_content_chars": 1,
+        "composite_acceptance": rules,
+    }
+    metrics = score_attempt(case, content.encode(), ok=True)
+    assert metrics["composite_acceptance_pass"] is True
+    assert task_passed(True, metrics, "body") is True
+
+
+def test_duplicate_incomplete_dom_records_cannot_combine_name_and_fields():
+    from harness.web_fetch.metrics import task_passed
+    from harness.web_fetch.scoring import score_attempt
+
+    content = (
+        '<article><a href="/item/1"><img alt="First House" src="/one.png"></a>'
+        '<p>$100,000</p><p>900 sqft</p></article>'
+        '<article><a href="/item/1">First House</a></article>'
+    )
+    rules = contract(
+        named(
+            "houses",
+            None,
+            None,
+            1,
+            required_fields=[
+                {"id": "price", "kind": "price"},
+                {"id": "area", "kind": "area"},
+            ],
+        )
+    )
+    rules["groups"][0].pop("start_pattern")
+    rules["groups"][0].pop("end_pattern")
+    case = {
+        "url": "https://example.test/catalog",
+        "task_kind": "body",
+        "min_content_chars": 1,
+        "composite_acceptance": rules,
+    }
+    metrics = score_attempt(case, content.encode(), ok=True)
+    assert metrics["composite_acceptance_pass"] is False
+    assert task_passed(True, metrics, "body") is False
diff --git a/tests/test_dataset_assembly.py b/tests/test_dataset_assembly.py
new file mode 100644
index 000000000..d545111c9
--- /dev/null
+++ b/tests/test_dataset_assembly.py
@@ -0,0 +1,322 @@
+import copy
+import hashlib
+import json
+from pathlib import Path
+
+import pytest
+
+from harness.web_fetch.dataset_assembly import assemble_profile_dataset
+from harness.web_fetch.reference_lifecycle import homepage_prompt_anchor_correction
+
+
+def _write(path: Path, value: dict) -> None:
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(value, ensure_ascii=False) + "\n", encoding="utf-8")
+
+
+def test_homepage_anchor_reference_correction_preserves_reader_constraints():
+    suffix = "不点击子页面、翻页、登录或执行其他 Browser Use 操作。"
+    old = {
+        "source_benchmark": {"mode": "ranked_domain_homepage"},
+        "task_prompt": "保留 Current；Retired。" + suffix,
+        "reference_answer": "保留 Current；Retired。" + suffix,
+        "acceptance_contract": {
+            "version": 1,
+            "schema": "body_text",
+            "minimum_records": 0,
+            "stable_text_anchors": [
+                {"id": "current", "alternatives": ["Current"]},
+                {"id": "retired", "alternatives": ["Retired"]},
+            ],
+        },
+    }
+    current = copy.deepcopy(old)
+    current["task_prompt"] = current["reference_answer"] = "保留 Current。" + suffix
+    current["acceptance_contract"]["stable_text_anchors"] = [
+        {"id": "current", "alternatives": ["Current"]},
+    ]
+    assert homepage_prompt_anchor_correction(old, current)
+
+    current["task_prompt"] = current["reference_answer"] = (
+        "保留 Current。不点击子页面、翻页后再登录。"
+    )
+    assert not homepage_prompt_anchor_correction(old, current)
+
+
+def _fixture(tmp_path: Path) -> tuple[Path, dict]:
+    profile = {
+        "dataset_id": "combined",
+        "comparison_kind": "headless_markdown",
+        "case_count": 2,
+        "case_ids_sha256": hashlib.sha256(b'["plain","frame"]').hexdigest(),
+        "providers": ["lightpanda", "chromium"],
+        "timeout_seconds": 45,
+        "runs_per_case": 1,
+        "concurrency": 1,
+        "max_failure_retries": 0,
+        "retry_selection": "transient_transport_or_http_failure_only; final_physical_attempt_is_authoritative",
+        "require_independent_result_review": False,
+        "reference_binding_mode": "frozen_inputs",
+        "report_output": "reports/combined",
+        "case_inventory": {"web": ["plain"], "dynamic": ["frame"]},
+    }
+    _write(tmp_path / "profile.json", profile)
+    sources = {
+        "plain.json": {"cases": [{"id": "plain", "url": "https://example.test", "track": "web"}]},
+        "dynamic.json": {
+            "cases": [
+                {
+                    "id": "frame",
+                    "url": "https://example.test/frame",
+                    "track": "dynamic",
+                    "retrieval_hints": {"version": 3, "mode": "native"},
+                }
+            ]
+        },
+    }
+    declarations = []
+    for name, source in sources.items():
+        _write(tmp_path / name, source)
+        declarations.append(
+            {
+                "path": name,
+                "sha256": hashlib.sha256((tmp_path / name).read_bytes()).hexdigest(),
+                "tracks": ["web" if name == "plain.json" else "dynamic"],
+            }
+        )
+    assembly = {
+        "schema_version": 1,
+        "kind": "profile_dataset_assembly",
+        "profile": "profile.json",
+        "dataset": {
+            "id": "combined",
+            "name": "Combined",
+            "tool": "web_fetch",
+            "dynamic_scoring": "stable",
+        },
+        "sources": declarations,
+    }
+    _write(tmp_path / "assembly.json", assembly)
+    return tmp_path / "assembly.json", assembly
+
+
+def test_profile_review_scope_survives_dataset_assembly(tmp_path):
+    path, _assembly = _fixture(tmp_path)
+    profile_path = tmp_path / "profile.json"
+    profile = json.loads(profile_path.read_text())
+    profile["require_independent_result_review"] = True
+    for scope in ("all", "machine-failures"):
+        profile["independent_result_review_scope"] = scope
+        _write(profile_path, profile)
+        dataset, raw = assemble_profile_dataset(
+            path, repository=tmp_path, require_output_hash=False)
+        assert dataset["comparison"]["independent_result_review_scope"] == scope
+        assert json.loads(raw)["comparison"]["independent_result_review_scope"] == scope
+    profile["independent_result_review_scope"] = "unsupported"
+    _write(profile_path, profile)
+    with pytest.raises(ValueError, match="Unsupported declared"):
+        assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+
+
+def test_profile_dataset_assembly_preserves_native_contract(tmp_path):
+    path, _assembly = _fixture(tmp_path)
+    dataset, raw = assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+    assert len(dataset["cases"]) == 2
+    assert dataset["cases"][1]["retrieval_hints"] == {"version": 3, "mode": "native"}
+    assert dataset["coverage_plan"] == {
+        "web": ["lightpanda", "chromium"],
+        "dynamic": ["lightpanda", "chromium"],
+    }
+    assert json.loads(raw) == dataset
+
+
+def test_reusable_assembly_requires_external_profile(tmp_path):
+    path, assembly = _fixture(tmp_path)
+    assembly.pop("profile")
+    _write(path, assembly)
+    with pytest.raises(ValueError, match="external report profile"):
+        assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+    dataset, _raw = assemble_profile_dataset(
+        path,
+        repository=tmp_path,
+        require_output_hash=False,
+        profile_path_override=Path("profile.json"),
+    )
+    assert dataset["comparison"]["reproduction_profile"] == "profile.json"
+
+
+def test_profile_dataset_assembly_rejects_stale_source_and_wrong_owner(tmp_path):
+    path, assembly = _fixture(tmp_path)
+    changed = copy.deepcopy(assembly)
+    changed["sources"][1]["sha256"] = "0" * 64
+    _write(path, changed)
+    with pytest.raises(ValueError, match="source hash changed"):
+        assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+    changed = copy.deepcopy(assembly)
+    changed["sources"][1]["tracks"] = ["web"]
+    _write(path, changed)
+    with pytest.raises(ValueError, match="track ownership"):
+        assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+
+
+def test_profile_dataset_assembly_applies_hash_locked_case_corrections(tmp_path):
+    path, assembly = _fixture(tmp_path)
+    source_case = json.loads((tmp_path / "plain.json").read_text())["cases"][0]
+    definition_sha256 = hashlib.sha256(
+        json.dumps(source_case, ensure_ascii=False, sort_keys=True, separators=(",", ":")).encode()
+    ).hexdigest()
+    corrections = {
+        "schema_version": 2,
+        "kind": "profile_case_corrections",
+        "cases": [
+            {
+                "case_id": "plain",
+                "execution_effect": "rescore_only",
+                "expected_definition_sha256": definition_sha256,
+                "set": {
+                    "ground_truth_main_content": "Current copy",
+                    "source_verification": {
+                        "state": "valid",
+                        "reference_sha256": hashlib.sha256(b"Current copy").hexdigest(),
+                    },
+                    "required_facts": [{"id": "current", "alternatives": ["Current copy"]}],
+                },
+                "evidence": {
+                    "source": "https://example.test",
+                    "observed_at": "2026-10-13",
+                    "observed_text": "Current copy",
+                    "regression_ids": [
+                        "example-current-body-passes",
+                        "example-retired-body-does-not-pass",
+                    ],
+                },
+            }
+        ],
+    }
+    _write(tmp_path / "corrections.json", corrections)
+    assembly["schema_version"] = 2
+    assembly["case_corrections"] = {
+        "path": "corrections.json",
+        "sha256": hashlib.sha256((tmp_path / "corrections.json").read_bytes()).hexdigest(),
+    }
+    _write(path, assembly)
+    dataset, _raw = assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+    assert dataset["cases"][0]["ground_truth_main_content"] == "Current copy"
+    assert dataset["cases"][0]["source_verification"]["state"] == "valid"
+    assert dataset["cases"][0]["required_facts"][0]["alternatives"] == ["Current copy"]
+    assert dataset["comparison"]["case_corrections"]["rerun_all_methods"] == []
+
+    corrections["cases"][0]["expected_definition_sha256"] = "0" * 64
+    _write(tmp_path / "corrections.json", corrections)
+    assembly["case_corrections"]["sha256"] = hashlib.sha256(
+        (tmp_path / "corrections.json").read_bytes()
+    ).hexdigest()
+    _write(path, assembly)
+    with pytest.raises(ValueError, match="correction input changed"):
+        assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+
+
+@pytest.mark.parametrize(
+    "mutate",
+    [
+        lambda row: row["set"].update({"provider": "favored-method"}),
+        lambda row: row["evidence"].pop("observed_at"),
+        lambda row: row["evidence"].update({"regression_ids": ["unknown-control"]}),
+    ],
+)
+def test_profile_dataset_assembly_rejects_unbounded_case_corrections(tmp_path, mutate):
+    path, assembly = _fixture(tmp_path)
+    source_case = json.loads((tmp_path / "plain.json").read_text())["cases"][0]
+    definition_sha256 = hashlib.sha256(
+        json.dumps(
+            source_case,
+            ensure_ascii=False,
+            sort_keys=True,
+            separators=(",", ":"),
+        ).encode()
+    ).hexdigest()
+    row = {
+        "case_id": "plain",
+        "execution_effect": "rescore_only",
+        "expected_definition_sha256": definition_sha256,
+        "set": {"required_facts": [{"id": "current", "alternatives": ["Current copy"]}]},
+        "evidence": {
+            "source": "https://example.test",
+            "observed_at": "2026-10-13",
+            "observed_text": "Current copy",
+            "regression_ids": [
+                "example-current-body-passes",
+                "example-retired-body-does-not-pass",
+            ],
+        },
+    }
+    mutate(row)
+    corrections = {
+        "schema_version": 2,
+        "kind": "profile_case_corrections",
+        "cases": [row],
+    }
+    _write(tmp_path / "corrections.json", corrections)
+    assembly["schema_version"] = 2
+    assembly["case_corrections"] = {
+        "path": "corrections.json",
+        "sha256": hashlib.sha256((tmp_path / "corrections.json").read_bytes()).hexdigest(),
+    }
+    _write(path, assembly)
+    with pytest.raises(ValueError):
+        assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+
+
+def test_input_changing_case_correction_requires_all_method_rerun(tmp_path):
+    path, assembly = _fixture(tmp_path)
+    source_case = json.loads((tmp_path / "plain.json").read_text())["cases"][0]
+    definition_sha256 = hashlib.sha256(
+        json.dumps(source_case, sort_keys=True, separators=(",", ":")).encode()
+    ).hexdigest()
+    row = {
+        "case_id": "plain",
+        "execution_effect": "rescore_only",
+        "expected_definition_sha256": definition_sha256,
+        "set": {
+            "category": "current_homepage",
+            "name": "Current example",
+            "tags": ["current"],
+            "url": "https://example.test/current",
+        },
+        "evidence": {
+            "source": "https://example.test/current",
+            "observed_at": "2026-10-13",
+            "observed_text": "Current copy",
+            "regression_ids": [
+                "example-current-body-passes",
+                "example-retired-body-does-not-pass",
+            ],
+        },
+    }
+    corrections = {
+        "schema_version": 2,
+        "kind": "profile_case_corrections",
+        "cases": [row],
+    }
+    _write(tmp_path / "corrections.json", corrections)
+    assembly["schema_version"] = 2
+    assembly["case_corrections"] = {
+        "path": "corrections.json",
+        "sha256": hashlib.sha256((tmp_path / "corrections.json").read_bytes()).hexdigest(),
+    }
+    _write(path, assembly)
+    with pytest.raises(ValueError, match="bounded fields or evidence"):
+        assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+
+    row["execution_effect"] = "rerun_all_methods"
+    _write(tmp_path / "corrections.json", corrections)
+    assembly["case_corrections"]["sha256"] = hashlib.sha256(
+        (tmp_path / "corrections.json").read_bytes()
+    ).hexdigest()
+    _write(path, assembly)
+    dataset, _raw = assemble_profile_dataset(path, repository=tmp_path, require_output_hash=False)
+    assert dataset["cases"][0]["url"] == "https://example.test/current"
+    assert dataset["cases"][0]["name"] == "Current example"
+    assert dataset["cases"][0]["category"] == "current_homepage"
+    assert dataset["cases"][0]["tags"] == ["current"]
+    assert dataset["comparison"]["case_corrections"]["rerun_all_methods"] == ["plain"]
diff --git a/tests/test_dynamic_100_moli_119.py b/tests/test_dynamic_100_moli_119.py
index 0c3963382..4d2ca9315 100644
--- a/tests/test_dynamic_100_moli_119.py
+++ b/tests/test_dynamic_100_moli_119.py
@@ -7,7 +7,8 @@
 from harness.web_fetch import local_audit
 from harness.web_fetch.reference_inputs import input_tree
 from harness.web_fetch.report import local_audit_banner, provider_configuration
-from harness.web_fetch.scoring import SCORING_SOURCE_SHA256
+from harness.web_fetch.scoring import score_attempt
+from harness.web_fetch.metrics import task_passed
 from harness.web_fetch.scoring_regressions import load_scoring_regressions
 from harness.web_fetch.stable_tasks import validate_acceptance_contract
 from tests.conftest import read_frozen_dataset_bytes
@@ -17,13 +18,28 @@
 RECEIPT_PATH = ROOT / "research/dynamic-100-moli-119-local-audit.json"
 COMPATIBILITY_PATH = ROOT / "research/dynamic-100-moli-119-risk-scorer-compatibility.json"
 REVISION_PATH = ROOT / "research/moli-111-three-cohort-evaluation-revision.json"
+PRE_CALL_PATH = ROOT / "research/dynamic-native-retrieval-contract-pre-call-revision.json"
+
+
+def _authority_binding(path):
+    path = Path(path)
+    if path.parts[:2] == ("evaluation", "dynamic-content-100-moli-webfetch"):
+        owner = ROOT / "evaluation/dynamic-content-100-moli-webfetch"
+        tree = path.parts[2]
+        relative = Path(*path.parts[3:])
+    else:
+        owner = ROOT / "evaluation"
+        tree = path.parts[1]
+        relative = Path(*path.parts[2:])
+    manifest = json.loads((owner / "source-inputs.json").read_text())
+    return owner, tree, relative, manifest["trees"][tree][relative.as_posix()]
 
 
 def _dataset():
     return json.loads(read_frozen_dataset_bytes(DATASET_PATH).decode("utf-8"))
 
 
-def test_dynamic_100_dataset_matches_the_frozen_local_audit():
+def test_dynamic_100_dataset_matches_the_frozen_local_audit(tmp_path):
     dataset = _dataset()
     cases = dataset["cases"]
     receipt = json.loads(RECEIPT_PATH.read_text(encoding="utf-8"))
@@ -32,26 +48,273 @@ def test_dynamic_100_dataset_matches_the_frozen_local_audit():
     assert len(cases) == receipt["scope"]["cases"] == 100
     assert len({case["id"] for case in cases}) == 100
     assert len({case["url"] for case in cases}) == 100
+    from harness.web_fetch.models import EvalCase
+    from harness.web_fetch.providers.headless import (
+        HeadlessProvider,
+        cli_command,
+        output_mode_for_case,
+    )
+    from harness.web_fetch.providers.headless_worker import fetch as worker_fetch
+    from harness.web_fetch.report_interfaces import browser_task_interface_matrix
+    from harness.web_fetch.retrieval_hints import native_contract_for_case
+
+    typed_cases = [EvalCase(**case) for case in cases]
+    assert all(output_mode_for_case("lightpanda", "headless_markdown", case) == "markdown"
+               for case in typed_cases)
+    assert sum(bool((contract := native_contract_for_case(case))
+                    and contract.include_subdocuments) for case in typed_cases) == 3
+    matrix = browser_task_interface_matrix(
+        {case["id"]: case for case in cases}, ["lightpanda"])
+    dynamic = next(row for row in matrix["rows"] if row["track"] == "dynamic")
+    assert dynamic["cells"]["lightpanda"][0]["mode"] == "markdown"
+    assert dynamic["cells"]["lightpanda"][0]["count"] == 100
+    assert "不传逐题选择器、数量、延迟或 iframe 参数" in matrix["capabilities"]["lightpanda"]
     revision = json.loads(REVISION_PATH.read_text(encoding="utf-8"))
     assert revision["provider_calls_for_revision"] == 0
     assert revision["dynamic_dataset"]["historical_sha256"] == receipt["bindings"]["dataset_sha256"]
     historical = read_frozen_dataset_bytes(DATASET_PATH).decode("utf-8")
+    pre_call = json.loads(PRE_CALL_PATH.read_text())
+    assert pre_call["provider_calls"] == 0
+    for binding in ("dataset_manifest", "dataset_catalog", "contract_registry"):
+        item = pre_call[binding]
+        assert hashlib.sha256((ROOT / item["path"]).read_bytes()).hexdigest() == item["sha256"]
+    authoritative = pre_call["compiled_dataset_input"]
+    assembly_binding = authoritative["assembly"]
+    assert hashlib.sha256((ROOT / assembly_binding["path"]).read_bytes()).hexdigest() == (
+        assembly_binding["sha256"]
+    )
+    assert (
+        authoritative["superseded_pre_call_dataset_sha256"]
+        != authoritative["revised_pre_call_dataset_sha256"]
+    )
+    assert authoritative["case_count"] == 430
+    assert authoritative["provider_calls"] == 0
+    correction = pre_call["assembly_correction"]
+    assert correction["revised_native_dataset_sha256"] == authoritative[
+        "revised_pre_call_dataset_sha256"
+    ]
+    assert correction["provider_route_changed"] is False
+    assert correction["acceptance_changed"] is False
+    assert correction["provider_calls"] == 0
+    delayed_correction = pre_call["delayed_completion_correction"]
+    assert delayed_correction["case_id"] == "dynamic-delayed"
+    assert delayed_correction["completion"] == {
+        "selector": ".quote", "minimum_count": 10,
+        "minimum_text_fragments": 3}
+    assert delayed_correction["source_authority"] == {
+        "path": "evaluation/sources/dynamic-delayed/render-audit.json",
+        "sha256": "cb72f36b479827c25816f1df5e2448885c0935ab61c0ad130bc145a2d466cc93",
+        "provider_output_used": False,
+    }
+    owner, tree, relative, bound = _authority_binding(
+        delayed_correction["source_authority"]["path"])
+    assert bound == delayed_correction["source_authority"]["sha256"]
+    delayed_audit = json.loads((input_tree(owner / "dataset.json", tree) / relative).read_text())
+    assert delayed_audit["completion"]["satisfied"] is True
+    assert delayed_audit["completion"]["condition"] == (
+        "dynamic-delayed: 10 nonempty target records with populated text fields; no interaction")
+    rendered_coverage = delayed_audit["coverage"]["rendered"]
+    assert rendered_coverage["hits"] == rendered_coverage["total"] == 30
+    assert rendered_coverage["all_present"] is True
+    assert delayed_correction["required_new_calls"] == {
+        "moli_fixed": 1, "moli_pr919": 1, "lightpanda": 1,
+        "obscura": 1, "chromium": 1, "kitesurf": 1,
+        "physical_calls": 6}
+    assert delayed_correction["deduplication"] == (
+        "These six calls replace the already-declared dynamic-delayed calls in the "
+        "method scopes below; they do not increase the 76-call physical total.")
+    assert delayed_correction["provider_calls"] == 0
+    assert pre_call["execution_effect"]["required_new_calls"] == {
+        "moli_fixed": 39, "moli_pr919": 21, "lightpanda": 4,
+        "obscura": 4, "chromium": 4, "kitesurf": 4,
+        "physical_calls": 76}
+    assert pre_call["execution_effect"]["interface_policy"] == {
+        "lightpanda_dynamic": "official_native_markdown",
+        "lightpanda_dynamic_case_count": 100,
+        "lightpanda_iframe_behavior": (
+            "three contracts preserve their named completion plan and add official frame flags inside "
+            "the native Markdown JSON transport envelope; native Markdown omission remains a scored failure"),
+        "non_chromium_body": "browser-native Markdown",
+        "chromium_body": "rendered HTML converted by node-html-markdown 2.0.0",
+    }
+    from harness.web_fetch.task_outputs import require_native_task_routes
+
+    by_id = {case.id: case for case in typed_cases}
+    raw_by_id = {case["id"]: case for case in cases}
+    fixture_binary = tmp_path / "lightpanda"
+    fixture_binary.write_text(
+        "#!/bin/sh\n"
+        "if [ \"$1\" = \"--version\" ]; then echo 'lightpanda fixture'; exit 0; fi\n"
+        "printf '%s\\n' '{\"content\":\"# Browser-native Markdown\","
+        "\"url\":\"https://example.com/final\",\"http_status\":200}'\n"
+    )
+    fixture_binary.chmod(0o755)
+    provider = HeadlessProvider("lightpanda", {
+        "type": "headless_markdown",
+        "engine": "lightpanda",
+        "binary": str(fixture_binary),
+        "native_metadata": {"format": "lightpanda_json"},
+    })
+    for changed in pre_call["changed_cases"]:
+        case = by_id[changed["case_id"]]
+        contract = native_contract_for_case(case)
+        plan = contract.completion_plan(45_000).worker_dict()
+        command = cli_command(
+            "lightpanda", "/lightpanda", case.url, 45, "markdown",
+            retrieval_plan=plan,
+            include_subdocuments=contract.include_subdocuments,
+            native_metadata={"format": "lightpanda_json"},
+        )
+        assert command[command.index("--dump") + 1] == "markdown"
+        assert command.count("--json") == 1
+        assert command[command.index("--wait-until") + 1] == "load"
+        assert "--wait-selector" in command or "--wait-script" in command
+        if case.id == "dynamic-delayed":
+            assert command[command.index("--wait-script") + 1] == plan["wait_value"]
+            assert plan["minimum_text_fragments"] == 3
+        if contract.include_subdocuments:
+            assert command.count("--with-frames") == 1
+            assert command[command.index("--load-resources") + 1] == "iframe"
+        else:
+            assert "--with-frames" not in command
+            assert "--load-resources" not in command
+
+        metadata = {
+            "extractor": "lightpanda_native_markdown",
+            "output_contract": "markdown",
+        }
+        if contract.include_subdocuments:
+            metadata["subdocuments"] = {
+                "requested": True,
+                "support": "native_markdown_omits_child_document",
+                "interface": "--load-resources iframe + --with-frames",
+                "harness_content_assembly": False,
+            }
+        row = {"provider": "lightpanda", "case_id": case.id,
+               "provider_metadata": metadata}
+        require_native_task_routes([raw_by_id[case.id]], [row])
+        if contract.include_subdocuments:
+            invalid = {**metadata}
+            invalid.pop("subdocuments")
+        else:
+            optional = {**metadata, "subdocuments": {
+                "requested": True,
+                "support": "native_markdown_omits_child_document",
+                "interface": "--load-resources iframe + --with-frames",
+                "harness_content_assembly": False,
+                "scope": "dynamic_task_family",
+            }}
+            # Family-wide native frames are permitted, not required. They must
+            # still disclose native support and cannot assemble child content.
+            require_native_task_routes([raw_by_id[case.id]], [{**row, "provider_metadata": optional}])
+            invalid = {**optional, "subdocuments": {
+                **optional["subdocuments"], "harness_content_assembly": True}}
+        with pytest.raises(ValueError, match="Native task route contract violated"):
+            require_native_task_routes([raw_by_id[case.id]], [{**row,
+                "provider_metadata": invalid}])
+
+        declared = metadata if contract.include_subdocuments else optional
+        for field, value in (("requested", False), ("support", "invented_support"),
+                             ("interface", "external_frame_parser"), ("scope", "case_specific")):
+            invalid = {**declared, "subdocuments": {**declared["subdocuments"], field: value}}
+            with pytest.raises(ValueError, match="Native task route contract violated"):
+                require_native_task_routes([raw_by_id[case.id]], [{**row, "provider_metadata": invalid}])
+
+        # Exercise the disposable worker process itself.  A mocked worker used
+        # to hide that the serialized request had lost the case identity.
+        result = provider.fetch(case, 45)
+        assert result.ok, result.error_message
+        assert result.content == "# Browser-native Markdown"
+        assert result.metadata["completion"]["selector"] == contract.selector
+        if contract.include_subdocuments:
+            assert result.metadata["subdocuments"]["interface"] == (
+                "--load-resources iframe + --with-frames")
+
+    frame_case = by_id["dynamic-iframe"]
+    frame_contract = native_contract_for_case(frame_case)
+    frame_request = {
+        "engine": "lightpanda",
+        "binary": str(fixture_binary),
+        "url": frame_case.url,
+        "timeout": 45,
+        "output_mode": "markdown",
+        "task_kind": "body",
+        "track": "dynamic",
+        "retrieval_plan": frame_contract.completion_plan(45_000).worker_dict(),
+        "include_subdocuments": True,
+        "retrieval_hints": frame_case.retrieval_hints,
+        "native_metadata": {"format": "lightpanda_json"},
+    }
+    for bad_case_id in (None, "dynamic-delayed"):
+        invalid_request = {**frame_request}
+        if bad_case_id is not None:
+            invalid_request["case_id"] = bad_case_id
+        with pytest.raises(ValueError, match="case_id|belongs to another case"):
+            worker_fetch(invalid_request)
+    assert hashlib.sha256(historical.encode()).hexdigest() == pre_call["revised_dataset_sha256"]
+    current_dataset = json.loads(historical)
+    for row in pre_call["changed_cases"]:
+        case = next(c for c in current_dataset["cases"] if c["id"] == row["case_id"])
+        assert case.pop("retrieval_hints") == {
+            "version": 3, "mode": "native", "contract": row["contract"]}
+    historical = json.dumps(current_dataset, ensure_ascii=False, indent=2) + "\n"
+    assert hashlib.sha256(historical.encode()).hexdigest() == pre_call["predecessor_dataset_sha256"]
     expected_hash=revision['dynamic_dataset']['revised_sha256']
     for followup in revision.get('dynamic_dataset_followups',[]):
         assert followup['predecessor_sha256']==expected_hash
         assert followup['provider_calls']==0
         assert followup['source_authority']['provider_output_used'] is False
-        relative = Path(followup['source_authority']['path']).relative_to('evaluation/sources').as_posix()
-        manifest = json.loads((ROOT / 'evaluation/source-inputs.json').read_text())
-        assert manifest['trees']['sources'][relative] == followup['source_authority']['sha256']
+        owner, tree, relative, bound = _authority_binding(followup['source_authority']['path'])
+        assert bound == followup['source_authority']['sha256']
+        if followup['case_id'] == 'dynamic-082-allocine-films':
+            assert followup['provider_outputs_used'] is False
+            effect = followup['acceptance_effect']
+            assert effect == {
+                'changed': True,
+                'required_stable_anchor_count_before': 55,
+                'required_stable_anchor_count_after': 54,
+                'removed_required_anchor_id': 'phase1-stable-0e2130d4bdb9',
+                'effect': ('An otherwise valid result no longer fails solely because TVActu '
+                           'is absent; all 54 remaining anchors, the 57-record minimum, host, '
+                           'entry-path and link rules remain required.'),
+                'record_and_link_rules_changed': False,
+            }
+            current = next(c for c in cases if c['id'] == followup['case_id'])
+            assert len(current['acceptance_contract']['stable_text_anchors']) == 54
+            source = json.loads((input_tree(owner / 'dataset.json', tree) / relative).read_text())
+            assert source['independent'] is True
+            assert source['observation_method'] == followup['source_basis']['observation_method']
+            assert source['checked_at'] == followup['source_basis']['checked_at']
+            assert ('TVActu' in source['content_text']) is followup['source_basis'][
+                'captured_text_contains_removed_anchor']
         expected_hash=followup['revised_sha256']
-    assert hashlib.sha256(read_frozen_dataset_bytes(DATASET_PATH)).hexdigest()==expected_hash
+    assert hashlib.sha256(historical.encode()).hexdigest() == expected_hash
+    assert hashlib.sha256(read_frozen_dataset_bytes(DATASET_PATH)).hexdigest() == pre_call["revised_dataset_sha256"]
     for followup in reversed(revision.get('dynamic_dataset_followups',[])):
         case=next(c for c in cases if c['id']==followup['case_id'])
-        assert case['acceptance_contract']['link_base_url']==followup['value']
-        line='        "link_base_url": '+json.dumps(followup['value'])+',\n'
-        assert historical.count(line)==1
-        historical=historical.replace(line,'',1)
+        changes = followup.get('changes') or [{
+            'field_path': followup['field_path'],
+            'value': followup['value'],
+        }]
+        historical_dataset = json.loads(historical)
+        historical_case = next(c for c in historical_dataset['cases'] if c['id']==followup['case_id'])
+        for change in changes:
+            current = case
+            restored = historical_case
+            for key in change['field_path'][:-1]:
+                current = current[key]
+                restored = restored[key]
+            leaf = change['field_path'][-1]
+            if change.get('operation') == 'remove_list_item':
+                assert change['removed_value'] not in current[leaf]
+                restored[leaf].insert(change['index'], change['removed_value'])
+                continue
+            assert current[leaf] == change['value']
+            if 'previous_value' in change:
+                restored[leaf] = change['previous_value']
+            else:
+                restored.pop(leaf)
+        historical = json.dumps(historical_dataset, ensure_ascii=False, indent=2) + '\n'
         assert hashlib.sha256(historical.encode()).hexdigest()==followup['predecessor_sha256']
     controls = load_scoring_regressions()
     for change in revision["dynamic_dataset"]["changes"]:
@@ -65,15 +328,59 @@ def test_dynamic_100_dataset_matches_the_frozen_local_audit():
     assert len(revision["dynamic_dataset"]["changes"]) == 9
     assert hashlib.sha256(historical.encode()).hexdigest() == receipt["bindings"]["dataset_sha256"]
     scorer_revision = revision["shared_scorer"]
+    known_sources = {scorer_revision['revised_sha256']}
     for followup in revision.get('shared_scorer_followups', []):
         assert followup['predecessor_source_sha256'] == scorer_revision['revised_sha256']
         assert followup['provider_calls'] == 0
         assert set(scorer_revision['regression_ids']) <= set(followup['regression_ids'])
         scorer_revision = {**scorer_revision, **followup}
+        known_sources.add(followup['revised_sha256'])
+    for parallel in revision.get('shared_scorer_parallel_followups', []):
+        assert parallel['predecessor_source_sha256'] in known_sources
+        assert parallel['provider_calls'] == 0
+        assert any(row.get('parallel_predecessor_source_sha256') == parallel['revised_sha256']
+                   for row in revision['shared_scorer_followups'])
+        assert set(parallel['regression_ids']) <= set(scorer_revision['regression_ids'])
     assert scorer_revision["main_baseline_sha256"] == compatibility["bindings"]["scoring_source_sha256"]
-    assert scorer_revision["revised_sha256"] == SCORING_SOURCE_SHA256
-    assert scorer_revision["scoring_regressions_sha256"] == hashlib.sha256(
-        (ROOT / "evaluation/scoring-regressions.json").read_bytes()).hexdigest()
+    successor = revision["current_shared_scorer_authority"]
+    successor_path = ROOT / successor["path"]
+    assert hashlib.sha256(successor_path.read_bytes()).hexdigest() == successor["sha256"]
+    successor_receipt = json.loads(successor_path.read_text())
+    assert successor_receipt["provider_calls"] == 0
+    assert successor_receipt["scorer_binding"]["revised_scoring_source_sha256"] == (
+        "8bc386c7c081b70701d635e4fc2ead8c22a7f9a6004ec42adcaf391f9d470f1b"
+    )
+    assembly_definition = json.loads(
+        (ROOT / "evaluation/webfetch-seven-family-430/dataset-assembly.json").read_text())
+    correction_binding = assembly_definition["case_corrections"]
+    correction_path = ROOT / correction_binding["path"]
+    assert hashlib.sha256(correction_path.read_bytes()).hexdigest() == correction_binding["sha256"]
+    current_corrections = json.loads(correction_path.read_text())
+    current_scorer_bindings = {
+        row["evidence"]["scoring_source_sha256"]
+        for row in current_corrections["cases"]
+        if row.get("evidence", {}).get("scoring_source_sha256")
+    }
+    # These reference-correction receipts record their original scorer, not
+    # whatever unrelated scoring fixes are present in the current checkout.
+    assert current_scorer_bindings == {
+        "db507a6f0a90c8346aaa0fc7613505c8050c20427547cfccd94754548f1c8e9f"}
+    current_regression_ids = {
+        identifier
+        for row in current_corrections["cases"]
+        for identifier in row.get("evidence", {}).get("regression_ids", [])
+    }
+    assert current_regression_ids <= set(controls)
+    for identifier in current_regression_ids:
+        control = controls[identifier]
+        metrics = score_attempt(control['case'], control['artifact'].encode(), ok=control['ok'],
+                                metadata=control.get('metadata'), title=control.get('title'),
+                                final_url=control.get('final_url'))
+        assert task_passed(control['ok'], metrics, control['case'].get('task_kind','body')) is control['expected_task_pass']
+        for key, expected in control.get('expected_metrics', {}).items():
+            assert metrics.get(key) == expected
+
+    assert set(successor_receipt["correction_provenance"]["regression_ids"]) <= set(controls)
     assert set(scorer_revision["regression_ids"]) <= set(controls)
     modes = {}
     for identifier in scorer_revision["regression_ids"]:
@@ -108,12 +415,6 @@ def test_dynamic_100_dataset_matches_the_frozen_local_audit():
     ]
     assert bindings["scoring_source_sha256"] == scorer_revision["main_baseline_sha256"]
     assert bindings["scoring_regressions_sha256"] != scorer_revision["scoring_regressions_sha256"]
-    assert bindings["composite_tests_sha256"] == hashlib.sha256(
-        (ROOT / "tests/test_composite_tasks.py").read_bytes()
-    ).hexdigest()
-    assert bindings["stable_tests_sha256"] == hashlib.sha256(
-        (ROOT / "tests/test_stable_tasks.py").read_bytes()
-    ).hexdigest()
     assert "Moli 1.1.9 local audit complete" in dataset["approval_status"]
     assert dataset["comparison"]["local_audit_receipt"] == RECEIPT_PATH.relative_to(ROOT).as_posix()
 
@@ -127,13 +428,22 @@ def require_historical_inputs():
 
 def test_dynamic_followup_reference_values_match_bound_external_source():
     require_historical_inputs()
-    sources = input_tree(ROOT / 'evaluation/dataset.json', 'sources')
     revision = json.loads(REVISION_PATH.read_text())
     for followup in revision.get('dynamic_dataset_followups', []):
-        relative = Path(followup['source_authority']['path']).relative_to('evaluation/sources')
-        authority = sources / relative
+        owner, tree, relative, _ = _authority_binding(followup['source_authority']['path'])
+        dataset = DATASET_PATH if owner.name == "dynamic-content-100-moli-webfetch" else ROOT / "evaluation/dataset.json"
+        authority = input_tree(dataset, tree) / relative
         assert hashlib.sha256(authority.read_bytes()).hexdigest() == followup['source_authority']['sha256']
-        assert json.loads(authority.read_text())['expected_final_url'] == followup['value']
+        record = json.loads(authority.read_text())
+        assert record.get('provider_output_used', False) is False
+        if 'value' in followup:
+            assert record['expected_final_url'] == followup['value']
+        elif followup['case_id'] == 'dynamic-069-ja-nintendo-search':
+            assert record['rendered_valid_record_counts'] == [10, 10, 10]
+            assert record['minimum_records'] == 8
+        else:
+            assert record['case_id'] == followup['case_id']
+            assert record['independent'] is True
 
 
 def test_historical_scoring_controls_allow_only_new_tail_entries(tmp_path, monkeypatch):
@@ -173,13 +483,17 @@ def repository_file(relative):
 
 
 def test_dynamic_100_contracts_are_valid_and_do_not_configure_provider_waits():
+    registered = json.loads((ROOT / "evaluation/native-retrieval-contracts.json").read_text())["contracts"]
     for case in _dataset()["cases"]:
         validate_acceptance_contract(case["acceptance_contract"])
         serialized = json.dumps(case, ensure_ascii=False).lower()
         assert "wait_for_selector" not in serialized
         assert "wait_after_load_ms" not in serialized
         assert "extraction_script" not in serialized
-        assert "retrieval_hints" not in serialized
+        hints = case.get("retrieval_hints")
+        if hints and "contract" in hints:
+            assert hints["contract"] in registered
+            assert registered[hints["contract"]]["case_id"] == case["id"]
 
 
 def test_native_moli_report_describes_the_frozen_uniform_call():
@@ -194,7 +508,7 @@ def test_native_moli_report_describes_the_frozen_uniform_call():
     }
     text = provider_configuration("moli-webfetch", [record] * 100, {})
     assert "默认 done" in text
-    assert "除目标 URL 外没有逐例等待元素" in text
+    assert "除目标 URL 外，没有逐例等待元素" in text
 
 
 def test_local_audit_banner_has_no_pull_request_number():
diff --git a/tests/test_dynamic_lists.py b/tests/test_dynamic_lists.py
index f25ab7f2c..d637a84f1 100644
--- a/tests/test_dynamic_lists.py
+++ b/tests/test_dynamic_lists.py
@@ -8,6 +8,23 @@ class DynamicListTests(unittest.TestCase):
     def setUp(self):
         self.contract = {"hosts": ["example.com"], "entry_path": r"/item/\d+", "minimum_entries": 3}
 
+    def test_named_table_columns_must_be_complete_and_distinct(self):
+        from harness.web_fetch.stable_tasks import validate_acceptance_contract
+        for columns in (
+            {"markdown_title_column": "Name"},
+            {"markdown_link_column": "Details"},
+            {"markdown_title_column": "Name", "markdown_link_column": "Name"},
+        ):
+            with self.subTest(columns=columns):
+                contract = {
+                    "version": 1, "schema": "named_link", "minimum_records": 1,
+                    "hosts": ["example.com"], "entry_path": r"/item/\d+",
+                    "stable_text_anchors": [],
+                    "entry_scope": {"html_selector": "tr[data-item]", **columns},
+                }
+                with self.assertRaisesRegex(ValueError, "distinct title and link columns"):
+                    validate_acceptance_contract(contract)
+
     def test_declared_identity_deduplicates_tracking_paths_for_same_entity(self):
         contract = {
             "hosts": ["example.com"],
@@ -120,17 +137,13 @@ def test_dense_flattened_link_collection_is_not_mistaken_for_prose(self):
         )
         self.assertEqual(extract_named_entries(prose, self.contract, 'https://example.com/'), [])
 
-    def test_image_link_can_use_one_matching_heading_in_the_same_card(self):
-        content = (
-            '[![First title](https://img.example/1.jpg)](/item/1)\n\n'
-            '[Category](/category)\n\n## First title\n\nDescription\n\n'
-            '[![Second title](https://img.example/2.jpg)](/item/2)\n\n'
-            '## Different heading\n'
-        )
-        self.assertEqual(
-            extract_named_entries(content, self.contract, 'https://example.com/'),
-            [{'url': 'https://example.com/item/1', 'title': 'First title'}],
-        )
+    def test_image_alternative_and_unlinked_heading_do_not_name_a_record(self):
+        content = ('[![First title](https://img.example/1.jpg)](/item/1)\n\n'
+                   '## Different visible title\n\nDescription\n')
+        self.assertEqual(extract_named_entries(content, self.contract, 'https://example.com/'), [])
+        visible = content.replace('Different visible title', 'First title')
+        self.assertEqual(extract_named_entries(visible, self.contract, 'https://example.com/'), [
+            {'url': 'https://example.com/item/1', 'title': 'First title'}])
 
     def check(self, text, ok=True):
         return evaluate_dynamic_list(text, self.contract, "https://example.com", ok)
@@ -182,10 +195,10 @@ def test_nested_image_names_and_numeric_ranks(self):
             f"[![Poster](https://img.test/{i}.png) Title {i}](/item/{i})" for i in range(3)
         )
         self.assertTrue(self.check(visible_names)["structure_pass"])
-        image_only = "\n".join(
+        accessible_image_links = "\n".join(
             f"[![New title {i}](https://img.test/{i}.png)](/item/{i})" for i in range(3)
         )
-        self.assertFalse(self.check(image_only)["structure_pass"])
+        self.assertFalse(self.check(accessible_image_links)["structure_pass"])
         text = "\n".join(f"- {i}\nhttps://example.com/item/{i}" for i in range(10))
         self.assertEqual(self.check(text)["named_entry_count"], 0)
 
@@ -237,3 +250,12 @@ def test_preserve_access_query_and_scheme(self):
                 }
             ],
         )
+
+
+def test_long_non_table_output_keeps_linear_processing_cost():
+    import time
+    from harness.web_fetch.structured_tables import table_text_surface
+    body = '\n'.join('Ordinary prose line number ' + str(i) for i in range(20000))
+    started = time.monotonic()
+    assert table_text_surface(body) == body
+    assert time.monotonic() - started < 1.5
diff --git a/tests/test_dynamic_provider_waits.py b/tests/test_dynamic_provider_waits.py
index 482142cd5..d4574c982 100644
--- a/tests/test_dynamic_provider_waits.py
+++ b/tests/test_dynamic_provider_waits.py
@@ -451,3 +451,61 @@ def test_dynamic_providers_reject_answer_bearing_hint_fields(cloudflare_request,
     assert firecrawl.error_type == "configuration"
     cloudflare_request.assert_not_called()
     firecrawl_request.assert_not_called()
+
+
+@patch("harness.web_fetch.providers.cloudflare.request")
+def test_kitesurf_native_dynamic_completion_uses_ordinary_url_route(mock_request):
+    from dataclasses import replace
+    mock_request.return_value = HttpResponse(200, "u", {}, b'{"success":true,"result":"Example"}')
+    case = replace(dynamic_case(), retrieval_hints={"version": 3, "mode": "native"})
+    result = CloudflareMarkdownProvider("kitesurf", {
+        "api_token": "x", "account_id": "a", "browser": "kitesurf"
+    }).fetch(case, 45)
+    assert result.ok
+    body = mock_request.call_args.kwargs["json_body"]
+    assert body["url"] == case.url
+    assert body["gotoOptions"]["waitUntil"] == "networkidle2"
+    assert "waitForSelector" not in body
+    assert "waitForTimeout" not in body
+    assert result.metadata["route"] == "browser_rendering_markdown"
+
+
+@patch("harness.web_fetch.providers.cloudflare.request")
+def test_kitesurf_maps_shared_completion_but_discloses_missing_frame_output(mock_request):
+    from dataclasses import replace
+    mock_request.return_value = HttpResponse(200, "u", {}, b'{"success":true,"result":"outer page"}')
+    case = replace(dynamic_case(), id="dynamic-iframe", retrieval_hints={
+        "version": 3, "mode": "native", "contract": "iframe-fourteen-family-headings"})
+    with patch("harness.web_fetch.retrieval_hints._verify_contract_source"):
+        result = CloudflareMarkdownProvider("kitesurf", {
+            "api_token": "x", "account_id": "a", "browser": "kitesurf"
+        }).fetch(case, 45)
+    assert result.ok
+    body = mock_request.call_args.kwargs["json_body"]
+    assert "waitForTimeout" not in body
+    assert "waitForSelector" not in body
+    assert result.metadata["wait"]["completion_support"] == "approximate"
+    assert result.metadata["wait"]["subdocuments"] == {
+        "requested": True, "support": "unsupported", "harness_content_assembly": False}
+
+
+@patch("harness.web_fetch.providers.cloudflare.request")
+def test_kitesurf_uniform_dynamic_family_uses_product_default_completion(mock_request):
+    from dataclasses import replace
+    mock_request.return_value = HttpResponse(200, "u", {}, b'{"success":true,"result":"records"}')
+    case = replace(
+        dynamic_case(),
+        id="dynamic-delayed",
+        retrieval_hints={"version": 3, "mode": "native"},
+    )
+    result = CloudflareMarkdownProvider("kitesurf", {
+        "api_token": "x", "account_id": "a", "browser": "kitesurf",
+        "uniform_native_parameters": True,
+    }).fetch(case, 45)
+    assert result.ok
+    body = mock_request.call_args.kwargs["json_body"]
+    assert "waitForSelector" not in body
+    assert "waitForTimeout" not in body
+    assert "timeout" not in body["gotoOptions"]
+    assert "actionTimeout" not in body
+    assert result.metadata["wait"] is None
diff --git a/tests/test_failure_diagnosis.py b/tests/test_failure_diagnosis.py
index 038b1852e..d561602e4 100644
--- a/tests/test_failure_diagnosis.py
+++ b/tests/test_failure_diagnosis.py
@@ -34,6 +34,24 @@ def test_timeout_option_name_is_not_timeout_error(self):
   self.assertEqual(diagnose(self.record(),{},raw)['category'],'浏览器执行上下文中断')
   self.assertEqual(diagnose(self.record(),{},'Check waitForTimeout options.')['category'],'服务取页失败')
   self.assertEqual(diagnose(self.record(error_type='request_timeout'),{},'')['category'],'加载 / 提取超时')
+ def test_explicit_output_rejection_precedes_incidental_timeout_configuration(self):
+  for debug in ['timeout_ms=40500','request_timeout_ms=45000','timeout=45000','"timeout": 45000']:
+   message='DEBUG waiting '+debug+' stage=Load\nError: failed to fetch\nReason: raw download output only supports automatic output or --dump json'
+   row=self.record(error_type='tool_error',error_message=message)
+   before=deepcopy(row)
+   result=diagnose(row,{'task_kind':'body'},'')
+   self.assertEqual(result['category'],'不支持所需输出格式')
+   self.assertEqual(result['stage'],'内容交付')
+   self.assertIn('raw download output only supports',result['evidence'])
+   self.assertNotIn(debug,result['evidence'])
+   self.assertEqual(row,before)
+ def test_debug_timeout_fields_do_not_establish_a_timeout(self):
+  for debug in ['timeout_ms=40500','request_timeout_ms=45000','timeout=45000','"timeout": 45000']:
+   self.assertEqual(diagnose(self.record(error_type='tool_error',error_message=debug),{},'')['category'],'服务取页失败')
+  for message in ['request timed out','Timeout 45000ms exceeded','deadline exceeded']:
+   self.assertEqual(diagnose(self.record(error_type='tool_error',error_message=message),{},'')['category'],'加载 / 提取超时')
+  self.assertEqual(diagnose(self.record(error_type='request_timeout'),{},'')['category'],'加载 / 提取超时')
+
  def test_capability_and_security_separated(self):
   for code,expected in [('WEB_REDIRECT_BLOCKED','方法禁止跨站跳转'),('WEB_UNSUPPORTED_CONTENT_TYPE','不支持输入类型'),('WEB_BLOCKED_URL','方法安全限制')]:
    self.assertEqual(diagnose(self.record(error_type=code),{},'')['category'],expected)
diff --git a/tests/test_fairness.py b/tests/test_fairness.py
index df84ffc00..eae6d1ece 100644
--- a/tests/test_fairness.py
+++ b/tests/test_fairness.py
@@ -157,7 +157,7 @@ def test_reviewed_region_threshold_keeps_every_floor_but_allows_reordering(self)
         self.assertFalse(evaluate_body_requirements(below_floor, contract)['body_coverage_pass'])
 
     def test_markdown_table_contract_rejects_flattened_cells(self):
-        rule = {'id':'table', 'pattern':r'(?mi)^(?:\s*\|)?\s*:?-{3,}:?\s*\|\s*:?-{3,}:?\s*\|\s*:?-{3,}:?\s*(?:\|\s*)?$|<table\b'}
+        rule = {'id':'table', 'match_scope':'output', 'pattern':r'(?mi)^(?:\s*\|)?\s*:?-{3,}:?\s*\|\s*:?-{3,}:?\s*\|\s*:?-{3,}:?\s*(?:\|\s*)?$|<table\b'}
         valid = '| A | B | C |\n| --- | --- | --- |\n| 1 | 2 | 3 |'
         self.assertTrue(evaluate_content(valid, [], required_patterns=[rule])['content_pass'])
         self.assertTrue(evaluate_content('<table><tr><td>A</td></tr></table>', [], required_patterns=[rule])['content_pass'])
@@ -349,7 +349,7 @@ def test_historical_file_missing_is_unmeasured_not_failed(self):
         self.assertFalse(task_measured(m))
         self.assertEqual(result_label(r,c),'未测')
         self.assertIn('data-result="unmeasured"',case_attrs(r,c))
-        self.assertIn('0/1', ranking([r],{'x':c},'image'))
+        self.assertIn('0/1', ranking([r],{'x':c},'media_file'))
 
     def test_file_bytes_are_typed_hashed_and_target_bound(self):
         raw = b'\x89PNG\r\n\x1a\n' + b'payload'*10
diff --git a/tests/test_fixed_native_comparison_audit.py b/tests/test_fixed_native_comparison_audit.py
new file mode 100644
index 000000000..8c4e43590
--- /dev/null
+++ b/tests/test_fixed_native_comparison_audit.py
@@ -0,0 +1,328 @@
+import base64
+import hashlib
+import json
+from dataclasses import asdict
+from pathlib import Path
+
+import pytest
+
+from harness.web_fetch.artifacts import materialize_bound_artifacts
+from harness.web_fetch.comparison_audit import audit_fixed_native_comparison
+from harness.web_fetch.evidence import finalize_aggregate
+from harness.web_fetch.models import EvalCase, ProviderResult
+from harness.web_fetch.providers.base import Provider
+from harness.web_fetch.runner import run_evaluation
+
+
+class NativeFixture(Provider):
+    def __init__(self, name, config):
+        super().__init__(name, config)
+        self._implementation_identity = {
+            "reported_version": config["expected_reported_version"],
+            "binary_sha256": config["expected_binary_sha256"],
+        }
+
+    def fetch(self, case, timeout):
+        diagnostic = (self.name + "/" + case.id + " debug\n").encode()
+        metadata = {
+            "route": "dynamic_native_markdown" if case.track == "dynamic" else "ordinary_markdown",
+            "output": "markdown",
+            "dump": "markdown",
+            "diagnostic_log_sha256": hashlib.sha256(diagnostic).hexdigest(),
+            "diagnostic_log_bytes": len(diagnostic),
+            "diagnostic_log_truncated": False,
+            "_diagnostic_log_b64": base64.b64encode(diagnostic).decode(),
+        }
+        if case.track == "dynamic":
+            metadata.update(
+                layout=True,
+                with_frames=True,
+                wait_until="domstable",
+                wait={
+                    "wait_until": "domstable",
+                    "scope": "dynamic_task_family",
+                    "strategy": "native_task_family_completion",
+                    "layout": {
+                        "requested": True,
+                        "support": "native",
+                        "interface": "--layout",
+                        "scope": "dynamic_task_family",
+                    },
+                    "subdocuments": {
+                        "requested": True,
+                        "support": "native",
+                        "interface": "--with-frames",
+                        "harness_content_assembly": False,
+                        "scope": "dynamic_task_family",
+                    },
+                },
+            )
+        if self.name == "moli-stack-1432" and case.id == "timeout":
+            return ProviderResult(False, "", error_type="timeout", error_message="deadline",
+                                  metadata=metadata)
+        content = (
+            "missing"
+            if self.name == "moli-stack-1432" and case.id == "web"
+            else "anchor"
+        )
+        return ProviderResult(True, content, metadata={**metadata,
+            "reported_version": self.config["expected_reported_version"],
+            "binary_sha256": self.config["expected_binary_sha256"],
+        })
+
+
+def comparison_cohort(tmp_path: Path, *, call_order="case-alternating") -> dict[str, Path]:
+    source_cases = [
+        EvalCase("web", "Web", "https://93.184.216.34/web", "web", ["anchor"]),
+        EvalCase("dynamic", "Dynamic", "https://93.184.216.34/dynamic", "dynamic",
+                 ["anchor"], track="dynamic"),
+        EvalCase("timeout", "Timeout", "https://93.184.216.34/timeout", "web", ["anchor"]),
+    ]
+    source = {
+        "id": "source",
+        "tool": "web_fetch",
+        "cases": [asdict(case) for case in source_cases],
+    }
+    source_path = tmp_path / "source.json"
+    source_path.write_text(json.dumps(source))
+    source_hash = hashlib.sha256(source_path.read_bytes()).hexdigest()
+    measured = json.loads(json.dumps(source))
+    measured["cases"][1]["retrieval_hints"] = {"version": 3, "mode": "native"}
+    measured["comparison"] = {
+        "input_dataset_sha256": source_hash,
+        "retrieval_mode": "native_task_family_completion",
+    }
+    measured["coverage_plan"] = {
+        "web": ["moli", "moli-stack-1432"],
+        "dynamic": ["moli", "moli-stack-1432"],
+    }
+    measured_path = tmp_path / "measured.json"
+    measured_path.write_text(json.dumps(measured))
+
+    configs = {
+        name: {
+            "type": "moli_webfetch",
+            "label": name,
+            "binary": "/fixture/" + name,
+            "expected_reported_version": "moli " + ("1.1.15" if name == "moli" else "stack"),
+            "expected_binary_sha256": character * 64,
+            "dns_mode": "system",
+            "wait_until": "done",
+            "dynamic_wait_until": "domstable",
+            "block_private_networks": True,
+            "uniform_native_parameters": True,
+            "max_bytes": 20_000_000,
+            "log_level": "debug",
+            "retain_complete_diagnostic_log": True,
+            "max_diagnostic_bytes": 100_000_000,
+            **({"source_url": "https://example.test/candidate"}
+               if name == "moli-stack-1432" else {}),
+        }
+        for name, character in (("moli", "a"), ("moli-stack-1432", "b"))
+    }
+    config_path = tmp_path / "providers.json"
+    config_path.write_text(json.dumps({"schema_version": 1, "providers": configs}))
+    evidence = tmp_path / "evidence"
+    worker = evidence / "workers" / "interleaved"
+    providers = [
+        NativeFixture(name, configs[name]) for name in ("moli", "moli-stack-1432")
+    ]
+    records, _ = run_evaluation(
+        output_dir=worker,
+        dataset_meta=measured,
+        dataset_path=measured_path,
+        cases=[EvalCase(**case) for case in measured["cases"]],
+        providers=providers,
+        provider_config_path=config_path,
+        runs=1,
+        timeout=1,
+        delay=0,
+        call_order=call_order,
+    )
+    materialize_bound_artifacts(evidence, worker, records)
+    manifest = json.loads((worker / "manifest.json").read_text())
+    (evidence / "dataset.json").write_text(json.dumps(measured))
+    (evidence / "results.jsonl").write_text(
+        "".join(json.dumps(row) + "\n" for row in records)
+    )
+    (evidence / "execution.json").write_text(json.dumps({
+        "schema_version": 1,
+        "aggregate": {
+            "providers": ["moli", "moli-stack-1432"],
+            "case_ids": ["web", "dynamic", "timeout"],
+            "batch_count": 1,
+            "call_order": call_order,
+        },
+        "batches": [manifest],
+    }))
+    observations = tmp_path / "observations.json"
+    observations.write_text("[]\n")
+    finalize_aggregate(evidence, observations)
+
+    receipt_path = tmp_path / "receipt.json"
+    receipt_path.write_text(json.dumps({
+        "schema_version": 1,
+        "inputs": {"dataset_sha256": source_hash, "case_count": 3},
+        "stable": {
+            "reported_version": configs["moli"]["expected_reported_version"],
+            "binary_sha256": configs["moli"]["expected_binary_sha256"],
+            "source_revision": "1" * 40,
+        },
+        "candidate": {
+            "reported_version": configs["moli-stack-1432"]["expected_reported_version"],
+            "binary_sha256": configs["moli-stack-1432"]["expected_binary_sha256"],
+            "revision": "2" * 40,
+        },
+        "execution": {
+            "workers": 1,
+            "call_order": call_order,
+            "runs": 1,
+            "caller_retries": 0,
+            "retrieval_mode": "native",
+            "runtime_source_sha256": manifest["runtime_source_sha256"],
+            "evidence_state": "certified",
+        },
+    }))
+    return {
+        "evidence": evidence,
+        "source": source_path,
+        "config": config_path,
+        "receipt": receipt_path,
+        "json": tmp_path / "audit.json",
+        "markdown": tmp_path / "audit.md",
+    }
+
+
+def run_audit(paths):
+    return audit_fixed_native_comparison(
+        paths["evidence"],
+        source_dataset=paths["source"],
+        provider_config=paths["config"],
+        run_receipt=paths["receipt"],
+        output_json=paths["json"],
+        output_markdown=paths["markdown"],
+        stable_provider="moli",
+        candidate_provider="moli-stack-1432",
+    )
+
+
+def convert_to_provider_batches(paths):
+    config = json.loads(paths["config"].read_text())
+    paths["config"].write_text(json.dumps(config))
+    config_sha = hashlib.sha256(paths["config"].read_bytes()).hexdigest()
+
+    rows = [json.loads(line) for line in
+            paths["evidence"].joinpath("results.jsonl").read_text().splitlines()]
+    providers = ["moli", "moli-stack-1432"]
+
+    execution_path = paths["evidence"] / "execution.json"
+    execution = json.loads(execution_path.read_text())
+    original = execution["batches"][0]
+    batches = []
+    for provider in providers:
+        batch = json.loads(json.dumps(original))
+        batch["providers"] = [
+            item for item in batch["providers"] if item["name"] == provider
+        ]
+        batch["parameters"].update(
+            call_order="provider",
+            concurrency_scope="providers_parallel_cases_sequential_per_provider",
+        )
+        batch["attempt_ids"] = [
+            row["attempt_id"] for row in rows if row["provider"] == provider
+        ]
+        batch["attempt_count"] = len(batch["attempt_ids"])
+        batch["provider_config_sha256"] = config_sha
+        batches.append(batch)
+    execution["aggregate"].update(batch_count=2, call_order="provider")
+    execution["batches"] = batches
+    execution_path.write_text(json.dumps(execution))
+
+    receipt = json.loads(paths["receipt"].read_text())
+    receipt["execution"]["call_order"] = "provider"
+    paths["receipt"].write_text(json.dumps(receipt))
+
+
+def test_comparison_audit_proves_protocol_and_lists_every_case(tmp_path):
+    paths = comparison_cohort(tmp_path)
+    audit = run_audit(paths)
+    assert audit["scope"]["result_count"] == 6
+    assert audit["verdict_relations"] == {
+        "pass_to_pass": 1,
+        "pass_to_fail": 2,
+        "fail_to_pass": 0,
+        "fail_to_fail": 0,
+    }
+    assert [row["case_id"] for row in audit["cases"]] == ["web", "dynamic", "timeout"]
+    assert audit["cases"][0]["call_order"] == ["moli", "moli-stack-1432"]
+    assert audit["cases"][1]["call_order"] == ["moli-stack-1432", "moli"]
+    assert "`web`" in paths["markdown"].read_text()
+
+
+def test_comparison_audit_accepts_serial_provider_batches_with_native_defaults(tmp_path):
+    paths = comparison_cohort(tmp_path, call_order="provider")
+    convert_to_provider_batches(paths)
+    audit = run_audit(paths)
+    assert audit["scope"]["call_order"] == "serial_provider_batches"
+    assert all(row["call_order"] == ["moli", "moli-stack-1432"]
+               for row in audit["cases"])
+    assert "serial provider-batch order" in paths["markdown"].read_text()
+
+
+@pytest.mark.parametrize("value", [None, False])
+def test_comparison_audit_requires_uniform_native_parameters(tmp_path, value):
+    paths = comparison_cohort(tmp_path)
+    config = json.loads(paths["config"].read_text())
+    for item in config["providers"].values():
+        if value is None:
+            item.pop("uniform_native_parameters")
+        else:
+            item["uniform_native_parameters"] = value
+    paths["config"].write_text(json.dumps(config))
+    with pytest.raises(ValueError, match="provider configuration is not fixed native"):
+        run_audit(paths)
+
+
+def test_comparison_audit_keeps_diagnostic_evidence_explicit(tmp_path):
+    paths = comparison_cohort(tmp_path)
+    dataset_path = paths["evidence"] / "dataset.json"
+    dataset = json.loads(dataset_path.read_text())
+    dataset.setdefault("comparison", {})["evidence_state"] = "diagnostic"
+    dataset_path.write_text(json.dumps(dataset))
+    execution_path = paths["evidence"] / "execution.json"
+    execution = json.loads(execution_path.read_text())
+    for batch in execution["batches"]:
+        batch["evidence_state"] = "diagnostic"
+    execution_path.write_text(json.dumps(execution))
+    receipt = json.loads(paths["receipt"].read_text())
+    receipt["execution"]["evidence_state"] = "diagnostic"
+    paths["receipt"].write_text(json.dumps(receipt))
+
+    audit = run_audit(paths)
+    assert audit["scope"]["evidence_state"] == "diagnostic"
+
+
+@pytest.mark.parametrize("damage", ["missing_result", "parameter_drift", "artifact", "order"])
+def test_comparison_audit_rejects_incomplete_or_unfair_evidence(tmp_path, damage):
+    paths = comparison_cohort(tmp_path)
+    if damage == "missing_result":
+        rows = paths["evidence"].joinpath("results.jsonl").read_text().splitlines()
+        paths["evidence"].joinpath("results.jsonl").write_text("\n".join(rows[:-1]) + "\n")
+    elif damage == "parameter_drift":
+        config = json.loads(paths["config"].read_text())
+        config["providers"]["moli-stack-1432"]["max_bytes"] = 10
+        paths["config"].write_text(json.dumps(config))
+    elif damage == "artifact":
+        row = json.loads(paths["evidence"].joinpath("results.jsonl").read_text().splitlines()[0])
+        paths["evidence"].joinpath(row["artifact_path"]).write_text("changed")
+    else:
+        rows = [json.loads(line) for line in
+                paths["evidence"].joinpath("results.jsonl").read_text().splitlines()]
+        rows[0]["started_at"], rows[-1]["started_at"] = (
+            rows[-1]["started_at"], rows[0]["started_at"]
+        )
+        paths["evidence"].joinpath("results.jsonl").write_text(
+            "".join(json.dumps(row) + "\n" for row in rows)
+        )
+    with pytest.raises(ValueError):
+        run_audit(paths)
diff --git a/tests/test_fixed_native_policy.py b/tests/test_fixed_native_policy.py
index b123835fa..653bc1622 100644
--- a/tests/test_fixed_native_policy.py
+++ b/tests/test_fixed_native_policy.py
@@ -39,15 +39,45 @@ def test_fixed_native_requests_preserve_capabilities_without_product_timers(kind
 
 @pytest.mark.parametrize("kind", ["moli_webfetch", "firecrawl", "tavily_extract", "exa_contents",
     "cloudflare_markdown", "cowagent_builtin", "subprocess_jsonl"])
-def test_fixed_native_rejects_hints_and_auxiliary_routes_before_call(kind):
+def test_fixed_native_rejects_per_case_hints_before_call(kind):
     provider = build_provider(kind, {"type": kind, "uniform_native_parameters": True})
     case = EvalCase("one", "one", "https://example.com/", "control", [],
         retrieval_hints={"completion": {"selector": ".answer"}})
     with pytest.raises(ValueError, match="per-case"):
         provider.fetch(case, 45)
-    case = replace(case, retrieval_hints={}, track="document")
-    with pytest.raises(ValueError, match="auxiliary"):
-        provider.fetch(case, 45)
+
+
+@pytest.mark.parametrize("track,task_kind", [
+    ("web", "body"), ("dynamic", "body"), ("challenge", "structure"),
+    ("risk_control", "body"), ("document", "body"), ("document", "file"),
+    ("image", "body"), ("image", "resource"), ("video", "body"),
+    ("video", "resource"),
+])
+def test_fixed_native_accepts_public_task_routes_without_per_case_assistance(track, task_kind):
+    provider = build_provider("fixture", {"type": "fixture", "uniform_native_parameters": True})
+    hints = {"version": 3, "mode": "native"} if track == "dynamic" else {}
+    case = EvalCase("one", "one", "https://example.com/", "control", [],
+        track=track, task_kind=task_kind, retrieval_hints=hints)
+    provider.check_native_call(case)
+
+
+def test_fixed_native_rejects_case_specific_page_capabilities():
+    provider = build_provider("fixture", {"type": "fixture", "uniform_native_parameters": True})
+    case = EvalCase("dynamic-iframe", "frame", "https://example.com/", "control", [],
+        track="dynamic", task_kind="body", retrieval_hints={
+            "version": 3, "mode": "native", "contract": "iframe-fourteen-family-headings"})
+    with pytest.raises(ValueError, match="per-case"):
+        provider.check_native_call(case)
+
+
+@pytest.mark.parametrize("track,task_kind", [("document", "resource"), ("image", "file"),
+    ("unknown", "body")])
+def test_fixed_native_rejects_undeclared_task_routes(track, task_kind):
+    provider = build_provider("fixture", {"type": "fixture", "uniform_native_parameters": True})
+    case = EvalCase("one", "one", "https://example.com/", "control", [],
+        track=track, task_kind=task_kind)
+    with pytest.raises(ValueError, match="declared task route"):
+        provider.check_native_call(case)
 
 
 @pytest.mark.parametrize("runs,retries", [(2, 0), (2, 1), (2, 3)])
@@ -59,3 +89,26 @@ def test_runner_rejects_extra_attempts_before_preflight(tmp_path, runs, retries)
             cases=[EvalCase("one", "one", "https://example.com/", "control", [])], providers=[provider], provider_config_path=tmp_path / "absent-providers.json",
             runs=runs, timeout=45, delay=0, max_failure_retries=retries)
     assert not (tmp_path / "run").exists()
+
+
+def test_native_dataset_marker_reaches_real_runner_without_per_case_assistance(tmp_path):
+    from harness.web_fetch.retrieval_hints import native_fetch_dataset
+    from harness.web_fetch.runner import run_evaluation
+    from harness.web_fetch.config import load_dataset
+    source = {"id": "native-dynamic", "tool": "web_fetch", "cases": [{"id": "dynamic", "name": "Dynamic",
+        "url": "https://example.com/", "category": "dynamic", "track": "dynamic", "expected_any": ["fixture"]}]}
+    dataset = native_fetch_dataset(source)
+    assert native_fetch_dataset(dataset) == dataset
+    path = tmp_path / "dataset.json"
+    path.write_text(json.dumps(dataset))
+    _, cases = load_dataset(path)
+    provider = build_provider("native", {"type": "fixture", "uniform_native_parameters": True})
+    config = tmp_path / "providers.json"
+    config.write_text(json.dumps({"providers": {"native": {"type": "fixture", "uniform_native_parameters": True}}}))
+    rows, _ = run_evaluation(output_dir=tmp_path / "run", dataset_meta=dataset, dataset_path=path,
+        cases=cases, providers=[provider], provider_config_path=config, runs=1, timeout=45, delay=0)
+    assert len(rows) == 1 and rows[0]["ok"]
+    for extra in ({"selector": ".answer"}, {"delay_ms": 10}, {"completion": {}}, {"mode": "guided"}):
+        changed = replace(cases[0], retrieval_hints={**cases[0].retrieval_hints, **extra})
+        with pytest.raises(ValueError):
+            provider.check_native_call(changed)
diff --git a/tests/test_freeze_headless_references.py b/tests/test_freeze_headless_references.py
index 05863cd63..f063022e3 100644
--- a/tests/test_freeze_headless_references.py
+++ b/tests/test_freeze_headless_references.py
@@ -8,6 +8,7 @@
 from harness.web_fetch.body_coverage import body_requirements
 from harness.web_fetch.reference_freeze import (
     _digest_json,
+    _change_for_case,
     _require_promotion,
     compute_reference_update,
     main,
@@ -37,6 +38,32 @@ def setUp(self):
                 'revision':'oldid:123','source_snapshot_sha256':'c'*64},
         }
 
+    def test_freezing_preserves_explicit_result_review_scope(self):
+        # Reference capture must not opt a cohort into a separate result audit.
+        for policy in ({}, {'require_independent_result_review': False},
+                       {'require_independent_result_review': True}):
+            with self.subTest(policy=policy), tempfile.TemporaryDirectory() as directory:
+                root=Path(directory)
+                captures=root/'captures';captures.mkdir()
+                (captures/'audit.json').write_text('[]\n')
+                source=root/'input.json';output=root/'frozen'
+                dataset={'comparison': policy, 'cases': [{
+                    'id': 'synthetic-stable', 'track': 'web',
+                    'acceptance_contract': {'version': 1, 'schema': 'body_text',
+                                            'minimum_records': 0,
+                                            'stable_text_anchors': [{'id': 'body',
+                                                'alternatives': ['Source prose']}]}}]}
+                source.write_text(json.dumps(dataset))
+                main(['--dataset', str(source), '--captures', str(captures),
+                      '--output', str(output)])
+                frozen=json.loads((output/'dataset.json').read_text())
+                self.assertEqual(frozen['comparison'], policy)
+                self.assertEqual(json.loads(source.read_text()), dataset)
+
+    def test_promotion_reports_missing_computed_change_as_validation_error(self):
+        with self.assertRaisesRegex(ValueError,'omit promoted case: missing'):
+            _change_for_case([{'case_id':'present'}],'missing')
+
     def test_changed_reference_fails_closed_without_explicit_promotion(self):
         with self.assertRaisesRegex(ValueError,'explicit --reference-promotion'):
             _require_promotion(None,dataset_sha256='d'*64,
@@ -121,7 +148,7 @@ def test_unavailable_body_reference_recovers_from_complete_clean_capture(self):
                   'url':'https://example.com/docs','track':'web','task_kind':'body',
                   'ground_truth_main_content':'','body_requirements':{},
                   'required_facts':[{'id':'fact','alternatives':['recovery fact']}],
-                  'source_verification':{'state':'unavailable','checked_at':'2026-09-01T00:00:00Z',
+                  'source_verification':{'reference_mode':'live_exact','state':'unavailable','checked_at':'2026-09-01T00:00:00Z',
                                          'method':'Independent HTTP response'}}
             audit={'case_id':case['id'],'status':200,'state':'captured',
                    'checked_at':'2026-09-14T00:00:00Z','selector':'main',
@@ -145,7 +172,7 @@ def test_unavailable_body_reference_stays_unavailable_when_capture_is_blocked(se
                   'url':'https://example.com/blocked','track':'web','task_kind':'body',
                   'ground_truth_main_content':'','body_requirements':{},
                   'required_facts':[],
-                  'source_verification':{'state':'unavailable','checked_at':'2026-09-01T00:00:00Z',
+                  'source_verification':{'reference_mode':'live_exact','state':'unavailable','checked_at':'2026-09-01T00:00:00Z',
                                          'method':'Independent HTTP response'}}
             audit={'case_id':case['id'],'status':403,'state':'unavailable',
                    'checked_at':'2026-09-14T00:00:00Z','selector':'main',
@@ -166,7 +193,7 @@ def test_freeze_writes_nothing_until_changed_scope_is_promoted(self):
                   'url':'https://en.wikipedia.org/w/index.php?title=Fixture&oldid=123',
                   'track':'web','task_kind':'body','ground_truth_main_content':old,
                   'body_requirements':body_requirements(old),'required_facts':[],
-                  'source_verification':{'state':'valid','checked_at':checked,
+                  'source_verification':{'reference_mode':'live_exact','state':'valid','checked_at':checked,
                                          'method':'fixture','reference_sha256':
                                          hashlib.sha256(old.encode()).hexdigest()}}
             dataset={'cases':[case],'coverage_plan':{'web':['p']}}
diff --git a/tests/test_headless.py b/tests/test_headless.py
index db963faf9..3522d8ce8 100644
--- a/tests/test_headless.py
+++ b/tests/test_headless.py
@@ -13,6 +13,7 @@
     HeadlessProvider,
     _resolve_binary,
     cli_command,
+    completion_metadata,
     output_mode_for_case,
 )
 from harness.web_fetch.providers.headless_worker import fetch
@@ -29,7 +30,262 @@
 from harness.web_fetch.runner import run_evaluation
 
 
+class NativeMetadataTests(unittest.TestCase):
+    def test_chromium_public_dns_uses_strict_secure_profile(self):
+        import sys
+        from types import SimpleNamespace
+        from harness.web_fetch.network_dns import DNS_ENDPOINT
+        observed = {}
+        class Page:
+            url = 'https://example.com/'
+            def goto(self, *args, **kwargs):
+                return SimpleNamespace(status=200)
+        class Context:
+            browser = SimpleNamespace(version='fixture-chromium')
+            def new_page(self): return Page()
+            def close(self): observed['closed'] = True
+        class Chromium:
+            def launch_persistent_context(self, directory, **kwargs):
+                observed['local_state'] = json.loads(
+                    (Path(directory) / 'Local State').read_text()
+                )
+                return Context()
+        class Driver:
+            def __enter__(self):
+                return SimpleNamespace(chromium=Chromium())
+            def __exit__(self, *args):
+                observed['driver_closed'] = True
+        request = {
+            'engine': 'chromium',
+            'binary': '/chromium',
+            'url': 'https://example.com/',
+            'timeout': 1,
+            'output_mode': 'resource',
+            'track': 'image',
+            'dns_mode': 'public_doh',
+        }
+        module = SimpleNamespace(sync_playwright=Driver, Error=RuntimeError)
+        with patch.dict(sys.modules, {'playwright.sync_api': module}), \
+             patch('harness.web_fetch.providers.headless_worker._page_projection',
+                   return_value='{"urls":["https://example.com/image.png"]}'):
+            result = fetch(request)
+        self.assertTrue(result['ok'])
+        self.assertEqual(observed['local_state']['dns_over_https'], {
+            'mode': 'secure', 'templates': DNS_ENDPOINT + '{?dns}',
+        })
+        self.assertTrue(observed['local_state']['built_in_dns_client_enabled'])
+        self.assertFalse(result['metadata']['system_dns_fallback'])
+        self.assertTrue(observed['closed'] and observed['driver_closed'])
+
+    def test_kitesurf_page_deliverables_use_the_native_markdown_endpoint(self):
+        from harness.web_fetch.models import ProviderResult
+        for track,kind,url in (
+            ('image','resource','https://example.com/'),
+            ('video','resource','https://example.com/'),
+            ('document','body','https://example.com/viewer/'),
+            ('video','body','https://example.com/watch'),
+        ):
+            with self.subTest(track=track,kind=kind):
+                provider=HeadlessProvider('kitesurf',{'type':'headless_markdown','engine':'kitesurf',
+                    'account_id':'account','api_token':'token','wait_until':'networkidle2'})
+                case=EvalCase('case','Case',url,'public',[],track=track,task_kind=kind)
+                native=ProviderResult(True,'public Markdown',metadata={
+                    'route':'browser_rendering_markdown',
+                    'extractor':'cloudflare_native_markdown',
+                    'browser':'kitesurf',
+                })
+                with patch.object(provider,'_run_local_worker',side_effect=AssertionError('CDP projection is forbidden')) as worker, \
+                        patch('harness.web_fetch.providers.cloudflare.CloudflareMarkdownProvider.fetch',return_value=native) as markdown:
+                    result=provider.fetch(case,45)
+                worker.assert_not_called()
+                markdown.assert_called_once_with(case,45)
+                self.assertEqual(result.content,'public Markdown')
+                self.assertEqual(result.metadata['extractor'],'cloudflare_native_markdown')
+                self.assertNotIn('output_projection_sha256',result.metadata)
+
+    def test_native_envelope_preserves_content_and_actual_destination(self):
+        from types import SimpleNamespace
+        for engine, envelope in (
+            ('lightpanda', {'content': '# Body', 'url': 'https://example.com/final', 'http_status': 200}),
+            ('obscura', {'content': '# Body', 'final_url': 'https://example.com/final', 'title': 'Body'}),
+        ):
+            with self.subTest(engine=engine), tempfile.TemporaryDirectory() as directory:
+                script = Path(directory) / 'native.js'
+                script.write_text('"# Body"')
+                metadata = {'format': 'lightpanda_json'} if engine == 'lightpanda' else {
+                    'format': 'obscura_eval', 'script_path': str(script),
+                    'script_sha256': hashlib.sha256(script.read_bytes()).hexdigest()}
+                request = {'engine': engine, 'binary': '/browser', 'url': 'https://example.com/start',
+                           'timeout': 5, 'output_mode': 'markdown', 'native_metadata': metadata}
+                response = SimpleNamespace(returncode=0, stdout=json.dumps(envelope).encode(), stderr=b'')
+                with patch('harness.web_fetch.providers.headless_worker.subprocess.run', return_value=response) as run:
+                    result = fetch(request)
+                self.assertTrue(result['ok'], result)
+                self.assertEqual(result['content'], '# Body')
+                self.assertEqual(result['final_url'], 'https://example.com/final')
+                self.assertEqual(base64.b64decode(result['metadata']['_raw_stdout_b64']), response.stdout)
+                command = run.call_args.args[0]
+                if engine == 'lightpanda':
+                    self.assertIn('--json', command)
+                else:
+                    self.assertNotIn('--dump', command)
+                    self.assertIn('location.href', command[command.index('--eval')+1])
+
+    def test_missing_destination_does_not_invent_requested_url(self):
+        from types import SimpleNamespace
+        request = {'engine': 'lightpanda', 'binary': '/browser', 'url': 'https://example.com/start',
+                   'timeout': 5, 'output_mode': 'markdown',
+                   'native_metadata': {'format': 'lightpanda_json'}}
+        response = SimpleNamespace(returncode=0, stdout=b'{"content":"Body"}', stderr=b'')
+        with patch('harness.web_fetch.providers.headless_worker.subprocess.run', return_value=response):
+            result = fetch(request)
+        self.assertTrue(result['ok'])
+        self.assertIsNone(result['final_url'])
+        response.stdout = b'{"url":"https://example.com/final"}'
+        with patch('harness.web_fetch.providers.headless_worker.subprocess.run', return_value=response):
+            result = fetch(request)
+        self.assertFalse(result['ok'])
+        self.assertIn('string content', result['error_message'])
+
+    def test_modified_vendor_script_is_rejected_before_browser_call(self):
+        with tempfile.TemporaryDirectory() as directory:
+            script = Path(directory) / 'native.js'
+            script.write_text('"changed"')
+            with self.assertRaisesRegex(ValueError, 'hash mismatch'):
+                cli_command('obscura', '/browser', 'https://example.com/', 5, 'markdown',
+                            native_metadata={'format': 'obscura_eval', 'script_path': str(script),
+                                             'script_sha256': '0'*64})
+
+
+    def test_isolated_resource_worker_needs_no_host_script_path(self):
+        from types import SimpleNamespace
+        with tempfile.TemporaryDirectory() as directory:
+            script = Path(directory) / 'native.js'
+            script.write_text('"# Isolated body"')
+            digest = hashlib.sha256(script.read_bytes()).hexdigest()
+            provider = HeadlessProvider('obscura', {
+                'type': 'headless_markdown', 'engine': 'obscura',
+                'resource_sample_interval_ms': 50,
+                'resource_container_image': 'fixture:local', 'resource_binary': '/browser',
+                'native_metadata': {'format': 'obscura_eval', 'script_path': str(script),
+                                    'script_sha256': digest},
+            })
+            captured = []
+            class IsolatedWorker:
+                def run(self, request, timeout):
+                    captured.append(request)
+                    # Model the container boundary: the host source file is
+                    # unavailable when the worker constructs its browser call.
+                    script.unlink()
+                    response = SimpleNamespace(returncode=0, stderr=b'', stdout=json.dumps({
+                        'content': '# Isolated body', 'final_url': 'https://example.com/final'}).encode())
+                    with patch('harness.web_fetch.providers.headless_worker.subprocess.run', return_value=response) as command:
+                        result = fetch(request)
+                    if result['ok']:
+                        self.expression = command.call_args.args[0][command.call_args.args[0].index('--eval') + 1]
+                    return ContainerCall(stdout=json.dumps(result).encode(), stderr=b'', exit_code=0,
+                        duration_ms=1, resource={'cpu_ms': 1, 'memory_peak_bytes': 2, 'network_rx_bytes': 3},
+                        environment={'backend': 'docker_cgroup_v2'})
+            runner = IsolatedWorker()
+            identity = {'binary_sha256': 'a'*64, 'reported_version': 'obscura 0.2.4',
+                        'version_probe_error': None}
+            case = EvalCase('case', 'Case', 'https://example.com/start', 'web', [])
+            with patch.object(provider, '_resource_runner', return_value=runner), \
+                 patch.object(provider, 'implementation_identity', return_value=identity):
+                result = provider.fetch(case, 1)
+            self.assertTrue(result.ok, result.error_message)
+            self.assertEqual(result.content, '# Isolated body')
+            self.assertEqual(result.final_url, 'https://example.com/final')
+            self.assertEqual(result.metadata['native_metadata']['script_sha256'], digest)
+            self.assertNotIn('script_path', captured[0]['native_metadata'])
+            self.assertIn('location.href', runner.expression)
+            self.assertIn('"# Isolated body"', runner.expression)
+
+    def test_altered_in_transit_native_script_is_rejected_before_browser_launch(self):
+        request = {'engine': 'obscura', 'binary': '/browser', 'url': 'https://example.com/',
+                   'timeout': 1, 'output_mode': 'markdown',
+                   'native_metadata': {'format': 'obscura_eval', 'script_source': '"changed"',
+                                       'script_sha256': hashlib.sha256(b'"original"').hexdigest()}}
+        with patch('harness.web_fetch.providers.headless_worker.subprocess.run') as command:
+            result = fetch(request)
+        self.assertFalse(result['ok'])
+        self.assertIn('hash mismatch', result['error_message'])
+        command.assert_not_called()
+
 class HeadlessTests(unittest.TestCase):
+    def test_local_browser_request_carries_declared_public_dns_environment(self):
+        provider = HeadlessProvider('lightpanda', {
+            'type': 'headless_markdown',
+            'engine': 'lightpanda',
+            'binary': '/lightpanda',
+            'dns_mode': 'public_doh',
+            'native_dns_library': '/resolver.dylib',
+        })
+        raw = json.dumps({'ok': True, 'content': '# Body', 'metadata': {}}).encode()
+        identity = {'binary_sha256': 'a' * 64, 'reported_version': 'lightpanda fixture',
+                    'version_probe_error': None}
+        case = EvalCase('case', 'Case', 'https://example.com/', 'web', [])
+        with patch.object(provider, '_run_local_worker',
+                          return_value=(raw, '', None, 0, len(raw), 0)) as worker, \
+             patch.object(provider, 'implementation_identity', return_value=identity):
+            result = provider.fetch(case, 45)
+        request = worker.call_args.args[1]
+        self.assertTrue(result.ok)
+        self.assertEqual(request['dns_mode'], 'public_doh')
+        self.assertEqual(request['native_dns_library'], '/resolver.dylib')
+        self.assertEqual(result.metadata['dns_mode'], 'public_doh')
+
+    @patch("harness.web_fetch.retrieval_hints._verify_contract_source")
+    def test_lightpanda_receives_shared_native_frame_contract(self, _verify_source):
+        provider = HeadlessProvider('lightpanda', {
+            'type': 'headless_markdown', 'engine': 'lightpanda', 'binary': '/lightpanda'})
+        case = EvalCase('dynamic-iframe', 'Frame', 'https://example.com/', 'dynamic', [],
+            track='dynamic', retrieval_hints={
+                'version': 3, 'mode': 'native',
+                'contract': 'iframe-fourteen-family-headings'})
+        raw = json.dumps({'ok': True, 'content': 'native frame body', 'metadata': {}}).encode()
+        identity = {'binary_sha256': 'a' * 64, 'reported_version': 'lightpanda fixture',
+                    'version_probe_error': None}
+        with patch.object(provider, '_run_local_worker', return_value=(raw, '', None, 0, len(raw), 0)) as worker, \
+             patch.object(provider, 'implementation_identity', return_value=identity):
+            result = provider.fetch(case, 45)
+        request = worker.call_args.args[1]
+        self.assertTrue(request['include_subdocuments'])
+        self.assertEqual(request['output_mode'], 'markdown')
+        self.assertIn('h3.family-name', request['retrieval_plan']['wait_value'])
+        self.assertEqual(result.metadata['subdocuments']['interface'],
+                         '--load-resources iframe + --with-frames')
+        self.assertEqual(result.metadata['subdocuments']['support'],
+                         'native_markdown_omits_child_document')
+        self.assertEqual(result.metadata['extractor'], 'lightpanda_native_markdown')
+        self.assertEqual(result.metadata['output_contract'], 'markdown')
+        self.assertFalse(result.metadata['subdocuments']['harness_content_assembly'])
+
+    @patch("harness.web_fetch.retrieval_hints._verify_contract_source")
+    def test_engines_without_native_frame_markdown_do_not_assemble_child_content(
+        self, _verify_source
+    ):
+        case = EvalCase('dynamic-iframe', 'Frame', 'https://example.com/', 'dynamic', [],
+            track='dynamic', retrieval_hints={
+                'version': 3, 'mode': 'native',
+                'contract': 'iframe-fourteen-family-headings'})
+        raw = json.dumps({'ok': True, 'content': 'outer document only', 'metadata': {}}).encode()
+        identity = {'binary_sha256': 'a' * 64, 'reported_version': 'fixture',
+                    'version_probe_error': None}
+        for engine in ('obscura', 'chromium'):
+            provider = HeadlessProvider(engine, {
+                'type': 'headless_markdown', 'engine': engine, 'binary': '/' + engine})
+            with self.subTest(engine=engine), \
+                 patch.object(provider, '_run_local_worker', return_value=(raw, '', None, 0, len(raw), 0)) as worker, \
+                 patch.object(provider, 'implementation_identity', return_value=identity), \
+                 patch('harness.web_fetch.providers.headless.converter_package', return_value=Path('/converter')):
+                result = provider.fetch(case, 45)
+            request = worker.call_args.args[1]
+            self.assertTrue(request['include_subdocuments'])
+            self.assertEqual(result.metadata['subdocuments']['support'], 'unsupported')
+            self.assertIsNone(result.metadata['subdocuments']['interface'])
+            self.assertFalse(result.metadata['subdocuments']['harness_content_assembly'])
+
     def test_resource_mode_routes_remote_client_through_isolated_container(self):
         provider = HeadlessProvider('kitesurf', {
             'type': 'headless_markdown', 'engine': 'kitesurf',
@@ -343,6 +599,78 @@ def test_native_markdown_commands_keep_each_cli_readiness_contract(self):
         self.assertIn('--terminate-ms', lightpanda)
         self.assertNotIn('--wait-until', obscura)
 
+    def test_subdocuments_use_only_native_serializer_flags(self):
+        for engine in ('moli', 'lightpanda'):
+            command = cli_command(engine, '/' + engine, 'https://example.com/', 5,
+                                  'markdown', include_subdocuments=True)
+            self.assertEqual(command.count('--with-frames'), 1)
+            if engine == 'lightpanda':
+                self.assertEqual(command[command.index('--load-resources') + 1], 'iframe')
+            else:
+                self.assertNotIn('--load-resources', command)
+            self.assertNotIn('--eval', command)
+        obscura = cli_command('obscura', '/obscura', 'https://example.com/', 5,
+                              'markdown', include_subdocuments=True)
+        self.assertNotIn('--with-frames', obscura)
+        self.assertNotIn('--eval', obscura)
+
+    def test_lightpanda_json_envelope_preserves_completion_and_frame_flags(self):
+        plan = {
+            'version': 3, 'wait_until': 'load', 'selector': 'li',
+            'minimum_count': 100, 'timeout_ms': 45000, 'delay_ms': 0,
+            'frame_selector': 'iframe', 'minimum_text_fragments': 0,
+            'wait_kind': 'script',
+            'wait_value': '() => document.querySelectorAll("li").length >= 100',
+        }
+        command = cli_command(
+            'lightpanda', '/lightpanda', 'https://example.com/', 45, 'markdown',
+            retrieval_plan=plan, include_subdocuments=True,
+            native_metadata={'format': 'lightpanda_json'})
+        self.assertEqual(command[command.index('--dump') + 1], 'markdown')
+        self.assertEqual(command.count('--json'), 1)
+        self.assertEqual(command[command.index('--wait-until') + 1], 'load')
+        self.assertEqual(command[command.index('--load-resources') + 1], 'iframe')
+        self.assertEqual(command.count('--with-frames'), 1)
+        self.assertEqual(command[command.index('--wait-script') + 1], plan['wait_value'])
+
+    def test_lightpanda_script_wait_does_not_claim_enforcement(self):
+        plan = {
+            'version': 3, 'wait_until': 'load', 'selector': '.quote',
+            'minimum_count': 10, 'timeout_ms': 45000, 'delay_ms': 0,
+            'frame_selector': None, 'minimum_text_fragments': 3,
+            'wait_kind': 'script', 'wait_value': '() => false',
+        }
+        metadata = completion_metadata('lightpanda', plan, 'markdown')
+        self.assertEqual(metadata['strategy'], 'native_script_not_enforced')
+        self.assertEqual(metadata['completion_support'], 'unsupported')
+        self.assertFalse(metadata['minimum_count_enforced'])
+        self.assertEqual(metadata['minimum_text_fragments'], 3)
+        self.assertIn('script_enforcement', metadata['unsupported'])
+        self.assertIn('minimum_text_fragments', metadata['unsupported'])
+
+    def test_lightpanda_selector_wait_keeps_its_native_capability(self):
+        plan = {
+            'version': 3, 'wait_until': 'load', 'selector': '.ready',
+            'minimum_count': 1, 'timeout_ms': 45000, 'delay_ms': 0,
+            'frame_selector': None, 'minimum_text_fragments': 0,
+            'wait_kind': 'selector', 'wait_value': '.ready',
+        }
+        metadata = completion_metadata('lightpanda', plan, 'markdown')
+        self.assertEqual(metadata['completion_support'], 'exact')
+        self.assertEqual(metadata['minimum_text_fragments'], 0)
+        self.assertEqual(metadata['unsupported'], [])
+
+    def test_lightpanda_iframe_capability_receipt_does_not_overclaim_markdown(self):
+        receipt = json.loads(Path(
+            'research/lightpanda-100-native-iframe-capability.json').read_text())
+        self.assertEqual(receipt['provider_calls'], 0)
+        observations = receipt['observations']
+        both = ['--load-resources', 'iframe', '--with-frames']
+        self.assertTrue(any(row['dump'] == 'html' and row['flags'] == both
+                            and row['child_marker_present'] for row in observations))
+        self.assertTrue(all(not row['child_marker_present']
+                            for row in observations if row['dump'] == 'markdown'))
+
     def test_obscura_loopback_fixture_requires_explicit_private_network_flag(self):
         command = cli_command(
             'obscura', '/obscura', 'http://127.0.0.1:8123/case/x', 1.5,
@@ -414,58 +742,20 @@ def test_moli_raw_file_command_omits_dump(self):
     def test_every_measured_moli_version_uses_raw_route_for_direct_files(self):
         pdf = EvalCase('pdf', 'PDF', 'https://example.com/paper.pdf', 'document', [],
                        track='document')
+        embedded = EvalCase('embedded', 'Embedded document',
+                            'https://example.com/viewer.html', 'document', [],
+                            track='document')
         image = EvalCase('image', 'Image', 'https://example.com/image.png', 'image', [],
                          track='image', task_kind='file')
         for name in ('moli-1.0.6', 'moli', 'moli-1.1.3'):
             with self.subTest(provider=name):
                 self.assertEqual(output_mode_for_case('moli', 'headless_markdown', pdf),
-                                 'document')
+                                 'markdown')
+                self.assertEqual(output_mode_for_case('moli', 'headless_markdown', embedded),
+                                 'markdown')
                 self.assertEqual(output_mode_for_case('moli', 'headless_markdown', image),
                                  'file')
 
-    def test_moli_raw_pdf_is_extracted_and_preserved(self):
-        from types import SimpleNamespace
-        raw = b'%PDF-fixture'
-        request = dict(engine='moli', binary='/moli', url='https://example.com/paper.pdf',
-                       timeout=1, output_mode='document')
-        with patch('harness.web_fetch.providers.headless_worker.subprocess.run', return_value=SimpleNamespace(
-                returncode=0, stdout=raw, stderr=b'')), patch(
-                'harness.web_fetch.providers.headless_worker.extract_document_text', return_value=('Paper body', 'pypdf')):
-            result = fetch(request)
-        self.assertTrue(result['ok'])
-        self.assertEqual(result['content'], 'Paper body')
-        self.assertEqual(result['metadata']['document_extractor'], 'pypdf')
-        self.assertEqual(result['metadata']['raw_stdout_sha256'], hashlib.sha256(raw).hexdigest())
-        self.assertIn('_raw_stdout_b64', result['metadata'])
-
-    def test_moli_raw_file_is_returned_without_text_decoding(self):
-        from types import SimpleNamespace
-        raw = b'\x89PNG\r\n\x1a\n' + b'payload'
-        request = dict(engine='moli', binary='/moli', url='https://example.com/image.png',
-                       timeout=1, output_mode='file')
-        with patch('harness.web_fetch.providers.headless_worker.subprocess.run', return_value=SimpleNamespace(
-                returncode=0, stdout=raw, stderr=b'')):
-            result = fetch(request)
-        self.assertTrue(result['ok'])
-        self.assertEqual(result['content'], '')
-        self.assertEqual(result['files_b64'], [base64.b64encode(raw).decode('ascii')])
-
-    def test_moli_document_html_fallback_remains_a_scored_text_answer(self):
-        from types import SimpleNamespace
-        request = dict(engine='moli', binary='/moli', url='https://example.com/file.docx',
-                       timeout=1, output_mode='document')
-        completed = [
-            SimpleNamespace(returncode=0, stdout=b'<h1>Unsupported document</h1>', stderr=b''),
-            SimpleNamespace(returncode=0, stdout='v1'.encode(), stderr=b''),
-            SimpleNamespace(returncode=0, stdout=b'# Unsupported document\n', stderr=b''),
-        ]
-        with patch('harness.web_fetch.providers.headless_worker.subprocess.run', side_effect=completed):
-            result = fetch(request)
-        self.assertTrue(result['ok'])
-        self.assertEqual(result['content'], '# Unsupported document\n')
-        self.assertEqual(result['metadata']['document_response'],
-                         'serialized_html_not_raw_document')
-
     def test_unknown_cli_rejected(self):
         with self.assertRaises(ValueError):
             cli_command('unknown', '/binary', 'https://example.com', 45)
diff --git a/tests/test_headless_access.py b/tests/test_headless_access.py
index 08be2b2f5..2ee994183 100644
--- a/tests/test_headless_access.py
+++ b/tests/test_headless_access.py
@@ -13,7 +13,11 @@ def test_all_measured_engines_have_account_and_official_sources(self):
         with tempfile.TemporaryDirectory() as directory:
             root = Path(directory)
             (root / 'adoption').mkdir()
-            body = render_interfaces(root, [])
+            (root/'body.txt').write_text('Public body')
+            row={'provider':'kitesurf','case_id':'static-simple','attempt_id':'kitesurf-example',
+                 'artifact_path':'body.txt','provider_metadata':{'api_token':'credential-canary',
+                 'headers':{'Authorization':'Bearer credential-canary'},'engine':'kitesurf'}}
+            body = render_interfaces(root, [row])
             self.assertEqual(body.count('<h3>账号与获取入口</h3>'), len(set(SPECS) & set(HEADLESS_ACCESS)))
             for name, access in HEADLESS_ACCESS.items():
                 if name in SPECS:
@@ -23,7 +27,36 @@ def test_all_measured_engines_have_account_and_official_sources(self):
                 self.assertTrue(access['links'])
                 self.assertTrue(all(url.startswith('https://') for _, url in access['links']))
             self.assertIn('&lt;API_TOKEN&gt;', body)
-            self.assertIn('不公开真实凭据', body)
+            self.assertNotIn('credential-canary', body)
+            self.assertNotIn('credential-canary',(root/'adoption/interfaces/kitesurf.json').read_text())
+
+
+    def test_exported_chromium_interface_uses_observed_completion(self):
+        for wait in ('load', 'domcontentloaded', 'networkidle'):
+            with self.subTest(wait=wait), tempfile.TemporaryDirectory() as directory:
+                root = Path(directory)
+                (root / 'adoption').mkdir()
+                (root / 'body.txt').write_text('Body')
+                record = {'provider': 'chromium', 'case_id': 'static-simple',
+                          'attempt_id': 'chromium__static-simple__r001',
+                          'artifact_path': 'body.txt',
+                          'provider_metadata': {'navigation_wait_until': wait}}
+                render_interfaces(root, [record])
+                interface = json.loads((root / 'adoption/interfaces/chromium.json').read_text())['interface']
+                self.assertEqual(interface['request']['wait_until'], wait)
+                self.assertEqual(next(row[2] for row in interface['params'] if row[0] == 'wait_until'), wait)
+        self.assertEqual(SPECS['chromium']['request']['wait_until'], 'load')
+
+    def test_executable_version_is_not_replaced_by_cdp_compatibility_version(self):
+        from harness.web_fetch.report_interfaces import method_version
+        for name,version,compat in [('moli','1.1.15','145.0.0.0'),('lightpanda','1.0.0','124.0.6367.29'),('obscura','0.2.4','145.0.0.0')]:
+            row={'provider':name,'provider_metadata':{'binary_sha256':'hash','browser_version':compat}}
+            self.assertEqual(method_version(row,{'hash':{'version':version}}),version)
+            self.assertIsNone(method_version(row))
+            row['provider_metadata']['reported_version']=version
+            self.assertEqual(method_version(row),version)
+        self.assertEqual(method_version({'provider':'chromium','provider_metadata':{'browser_version':'155.0.8059.39'}}),'155.0.8059.39')
+        self.assertEqual(method_version({'provider':'kitesurf','provider_metadata':{'browser_version':'145.0.0.0'}}),'Beta · 托管后端版本未公开')
 
 
 if __name__ == '__main__':
diff --git a/tests/test_headless_cancellation.py b/tests/test_headless_cancellation.py
new file mode 100644
index 000000000..dc5b0a64a
--- /dev/null
+++ b/tests/test_headless_cancellation.py
@@ -0,0 +1,200 @@
+"""Local browser deadlines stop physical work without dropping later tasks."""
+import json
+import os
+import signal
+import subprocess
+import sys
+import tempfile
+import threading
+import time
+import unittest
+from pathlib import Path
+from unittest.mock import patch
+
+from harness.web_fetch.models import EvalCase, ProviderResult
+from harness.web_fetch.providers.headless import HeadlessProvider
+from harness.web_fetch.runner import run_evaluation
+
+
+@unittest.skipUnless(os.name == 'posix', 'process-group worker contract')
+class HeadlessCancellationTests(unittest.TestCase):
+    def worker(self, root):
+        worker = root / 'worker.py'
+        worker.write_text('''import json, os, subprocess, sys, time
+from pathlib import Path
+request = json.load(sys.stdin)
+if request['url'].endswith('/slow'):
+    Path(request['pid_file']).write_text(str(os.getpid()))
+    child = subprocess.Popen([sys.executable, '-c',
+        "import time; from pathlib import Path; time.sleep(2); Path(" + repr(request['marker']) + ").write_text('orphan')"], start_new_session=True)
+    Path(request['pid_file'] + '.child').write_text(str(child.pid))
+    print('browser still waiting', file=sys.stderr, flush=True)
+    print(json.dumps({'content': 'late answer'}), flush=True)
+    time.sleep(10)
+else:
+    print(json.dumps({'content': 'on-time answer'}), flush=True)
+''')
+        return worker
+
+    def cleanup(self, pid_file):
+        for owned in (pid_file, Path(str(pid_file) + '.child')):
+            if owned.exists():
+                try:
+                    os.killpg(int(owned.read_text()), signal.SIGKILL)
+                except ProcessLookupError:
+                    pass
+
+    def test_timeout_stops_browser_children_retains_logs_and_runs_next_case(self):
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            worker = self.worker(root)
+            pid_file, marker = root / 'pid', root / 'orphan'
+
+            class LocalWorker(HeadlessProvider):
+                def fetch(self, case, timeout):
+                    # The outer budget includes preparation/launch and must
+                    # cancel even when the inner worker deadline is later.
+                    raw, stderr, stopped, code, _, _ = self._run_local_worker(
+                        worker, {'url': case.url, 'pid_file': str(pid_file),
+                                 'marker': str(marker)}, 10, 100_000)
+                    return ProviderResult(not stopped,
+                        '' if stopped else json.loads(raw)['content'],
+                        error_type=stopped, metadata={'stderr': stderr, 'exit_code': code})
+
+            provider = LocalWorker('local', {'type': 'headless_markdown', 'engine': 'obscura', 'binary': sys.executable})
+            cases = [EvalCase(name, name, 'https://example.test/' + name, 'web', [])
+                     for name in ('slow', 'fast')]
+            try:
+                with patch('socket.getaddrinfo', return_value=[(2,1,6,'',('93.184.216.34',443))]):
+                    records, _ = run_evaluation(output_dir=root / 'run',
+                    dataset_meta={'id': 'cancellation', 'cases': []},
+                    dataset_path=root / 'dataset.json', cases=cases,
+                    providers=[provider], provider_config_path=root / 'providers.json',
+                    runs=1, timeout=.3, delay=0)
+                self.assertEqual([row['case_id'] for row in records], ['slow', 'fast'])
+                self.assertEqual(records[0]['error_type'], 'timeout')
+                self.assertLess(records[0]['elapsed_ms'], 500)
+                self.assertIn('browser still waiting', records[0]['provider_metadata']['stderr'])
+                self.assertLess(records[0]['provider_metadata']['exit_code'], 0)
+                self.assertEqual((root / 'run' / records[0]['artifact_path']).read_text(), '')
+                self.assertEqual((root / 'run' / records[1]['artifact_path']).read_text(), 'on-time answer')
+                time.sleep(2.1)
+                self.assertFalse(marker.exists(), 'timed-out browser child continued physical work')
+            finally:
+                self.cleanup(pid_file)
+
+    def test_cancellation_during_process_creation_kills_the_late_child(self):
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            worker = self.worker(root)
+            pid_file, marker = root / 'pid', root / 'orphan'
+            provider = HeadlessProvider('local', {'type': 'headless_markdown', 'engine': 'lightpanda'})
+            created, release = threading.Event(), threading.Event()
+            real_popen = subprocess.Popen
+            children, results = [], []
+
+            def slow_popen(*args, **kwargs):
+                child = real_popen(*args, **kwargs)
+                if args and str(worker) in args[0]:
+                    children.append(child)
+                    created.set()
+                    release.wait(1)
+                return child
+
+            provider.begin_call()
+            def run():
+                results.append(provider._run_local_worker(worker,
+                    {'url': 'https://example.test/slow', 'pid_file': str(pid_file),
+                     'marker': str(marker)}, 10, 100_000))
+            thread = threading.Thread(target=run, daemon=True)
+            try:
+                with patch('harness.web_fetch.providers.headless.subprocess.Popen', side_effect=slow_popen):
+                    thread.start()
+                    self.assertTrue(created.wait(1))
+                    provider.cancel()
+                    release.set()
+                    thread.join(1)
+                self.assertFalse(thread.is_alive())
+                self.assertEqual(results[0][2], 'timeout')
+                self.assertIsNotNone(children[0].poll())
+            finally:
+                release.set()
+                for child in children:
+                    if child.poll() is None:
+                        os.killpg(child.pid, signal.SIGKILL)
+                    child.wait()
+                self.cleanup(pid_file)
+                thread.join(1)
+
+    @unittest.skipUnless(os.environ.get('CHROMIUM_BINARY'), 'set CHROMIUM_BINARY for real browser cancellation')
+    def test_cancellation_stops_actual_chromium_detached_session(self):
+        from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+        arrived = threading.Event()
+        release = threading.Event()
+
+        class Handler(BaseHTTPRequestHandler):
+            def log_message(self, *args):
+                pass
+
+            def do_GET(self):
+                arrived.set()
+                release.wait(10)
+                body = b'<html><body>Completed body</body></html>'
+                try:
+                    self.send_response(200)
+                    self.send_header('Content-Length', str(len(body)))
+                    self.end_headers()
+                    self.wfile.write(body)
+                except (BrokenPipeError, ConnectionResetError):
+                    pass
+
+        def process_rows():
+            output = subprocess.check_output(['ps', '-axo', 'pid=,ppid=,pgid=,stat='], text=True)
+            return {int(parts[0]): (int(parts[1]), int(parts[2]), parts[3])
+                    for line in output.splitlines() if len(parts := line.split()) == 4}
+
+        server = ThreadingHTTPServer(('127.0.0.1', 0), Handler)
+        server_thread = threading.Thread(target=server.serve_forever, daemon=True)
+        server_thread.start()
+        provider = HeadlessProvider('chromium', {'engine': 'chromium',
+            'binary': os.environ['CHROMIUM_BINARY'], 'allow_private_network': True})
+        case = EvalCase('slow-navigation', 'slow-navigation',
+            'http://127.0.0.1:' + str(server.server_port), 'web', [])
+        results = []
+        owned_groups = set()
+        provider.begin_call()
+        thread = threading.Thread(target=lambda: results.append(provider.fetch(case, 10)), daemon=True)
+        try:
+            thread.start()
+            self.assertTrue(arrived.wait(8), 'real Chromium did not navigate to the controlled page')
+            process = provider._active_process
+            self.assertIsNotNone(process)
+            rows = process_rows()
+            owned = {process.pid}
+            while (expanded := owned | {pid for pid, row in rows.items() if row[0] in owned}) != owned:
+                owned = expanded
+            owned_groups = {rows[pid][1] for pid in owned}
+            self.assertTrue(owned_groups - {process.pid}, 'control did not exercise a detached browser session')
+            provider.cancel()
+            thread.join(2)
+            self.assertFalse(thread.is_alive(), 'cancelled Chromium call did not finish')
+            self.assertEqual(results[0].error_type, 'timeout')
+            survivors = process_rows()
+            self.assertFalse({pid for pid in owned if pid in survivors and not survivors[pid][2].startswith('Z')},
+                             'physical Chromium work survived cancellation')
+        finally:
+            release.set()
+            for group in owned_groups:
+                try:
+                    os.killpg(group, signal.SIGKILL)
+                except ProcessLookupError:
+                    pass
+            thread.join(2)
+            server.shutdown()
+            server.server_close()
+            server_thread.join(1)
+
+    def test_cleanup_grace_requires_an_actively_cancellable_local_route(self):
+        for config in ({'engine': 'kitesurf'}, {'engine': 'chromium', 'resource_sample_interval_ms': 50}):
+            self.assertEqual(HeadlessProvider('remote', config).cancellation_cleanup_seconds, 0)
+        self.assertGreater(HeadlessProvider('local', {'engine': 'chromium'}).cancellation_cleanup_seconds, 0)
diff --git a/tests/test_headless_completion.py b/tests/test_headless_completion.py
new file mode 100644
index 000000000..02da32ee8
--- /dev/null
+++ b/tests/test_headless_completion.py
@@ -0,0 +1,150 @@
+"""Browser integration controls for native whole-page completion."""
+import os
+import threading
+import time
+import unittest
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+
+from harness.web_fetch.providers.headless_worker import fetch
+
+BINARY = os.environ.get('CHROMIUM_BINARY')
+
+
+@unittest.skipUnless(BINARY, 'set CHROMIUM_BINARY to run real browser controls')
+class NativePageCompletionTests(unittest.TestCase):
+    def test_native_completion_observes_load_body_and_preserves_explicit_early_snapshot(self):
+        class Handler(BaseHTTPRequestHandler):
+            def log_message(self, *args):
+                pass
+
+            def do_GET(self):
+                if self.path == '/slow.gif':
+                    time.sleep(.8)
+                    body = bytes.fromhex('47494638396101000100800000000000ffffff21f90401000000002c00000000010001000002024401003b')
+                    kind = 'image/gif'
+                else:
+                    delayed = self.path == '/delayed'
+                    body = ('''<!doctype html><html><body><p>Initial body</p>'''
+                        + ('''<img src="/slow.gif"><script>window.addEventListener('load',()=>{
+                            document.querySelector('p').textContent='Completed page body';
+                            });</script>''' if delayed else '<p>Completed page body</p>')
+                        + '</body></html>').encode()
+                    kind = 'text/html; charset=utf-8'
+                self.send_response(200)
+                self.send_header('Content-Type', kind)
+                self.send_header('Content-Length', str(len(body)))
+                self.end_headers()
+                try:
+                    self.wfile.write(body)
+                except BrokenPipeError:
+                    pass
+
+        server = ThreadingHTTPServer(('127.0.0.1', 0), Handler)
+        thread = threading.Thread(target=server.serve_forever, daemon=True)
+        thread.start()
+        origin = 'http://127.0.0.1:' + str(server.server_port)
+        request = {'engine': 'chromium', 'binary': BINARY, 'timeout': 10,
+                   'output_mode': 'markdown', 'task_kind': 'body', 'track': 'dynamic',
+                   'retrieval_hints': {'version': 3, 'mode': 'native'},
+                   'allow_private_network': True}
+        try:
+            early = fetch({**request, 'url': origin + '/delayed', 'wait_until': 'domcontentloaded'})
+            self.assertTrue(early['ok'], early)
+            self.assertNotIn('Completed page body', early['content'])
+            self.assertEqual(early['metadata']['navigation_wait_until'],'domcontentloaded')
+            native = fetch({**request, 'url': origin + '/delayed'})
+            self.assertTrue(native['ok'], native)
+            self.assertIn('Completed page body', native['content'])
+            self.assertEqual(native['metadata']['navigation_wait_until'],'load')
+            fast = fetch({**request, 'url': origin + '/fast'})
+            self.assertTrue(fast['ok'], fast)
+            self.assertIn('Completed page body', fast['content'])
+        finally:
+            server.shutdown()
+            server.server_close()
+            thread.join(1)
+
+
+class RedirectDuringExtractionTests(unittest.TestCase):
+    """A redirect may replace a document after navigation completion."""
+
+    def test_read_new_document_after_redirect_without_repeating_navigation(self):
+        from unittest.mock import Mock, patch
+        from playwright.sync_api import Error
+        from harness.web_fetch.providers.headless_worker import _evaluate_document
+        page = Mock()
+        page.evaluate.side_effect = [
+            Error('Page.evaluate: Execution context was destroyed, most likely because of a navigation'),
+            '<html><body>Final document body</body></html>',
+        ]
+        with patch('harness.web_fetch.providers.headless_worker.time.monotonic', return_value=100):
+            result = _evaluate_document(page, 'document.documentElement.outerHTML', 101, {})
+        self.assertIn('Final document body', result)
+        self.assertEqual(page.evaluate.call_count, 2)
+        page.wait_for_load_state.assert_called_once_with('domcontentloaded', timeout=1000)
+        page.goto.assert_not_called()
+
+    def test_script_error_is_not_retried_as_a_navigation(self):
+        from unittest.mock import Mock, patch
+        from playwright.sync_api import Error
+        from harness.web_fetch.providers.headless_worker import _evaluate_document
+        page = Mock()
+        page.evaluate.side_effect = Error('Page.evaluate: TypeError: application failed')
+        with patch('harness.web_fetch.providers.headless_worker.time.monotonic', return_value=100):
+            with self.assertRaisesRegex(Error, 'TypeError: application failed'):
+                _evaluate_document(page, 'document.documentElement.outerHTML', 101, {})
+        self.assertEqual(page.evaluate.call_count, 1)
+        page.wait_for_load_state.assert_not_called()
+
+    def test_repeated_replacement_is_bounded_to_one_recovery(self):
+        from unittest.mock import Mock, patch
+        from playwright.sync_api import Error
+        from harness.web_fetch.providers.headless_worker import _evaluate_document
+        page = Mock()
+        page.evaluate.side_effect = Error('Page.evaluate: Execution context was destroyed, most likely because of a navigation')
+        with patch('harness.web_fetch.providers.headless_worker.time.monotonic', return_value=100):
+            with self.assertRaisesRegex(Error, 'Execution context was destroyed'):
+                _evaluate_document(page, 'document.documentElement.outerHTML', 101, {})
+        self.assertEqual(page.evaluate.call_count, 2)
+        self.assertEqual(page.wait_for_load_state.call_count, 1)
+        page.goto.assert_not_called()
+
+    def test_expired_budget_does_not_wait_or_repeat_the_read(self):
+        from unittest.mock import Mock, patch
+        from playwright.sync_api import Error
+        from harness.web_fetch.providers.headless_worker import _evaluate_document
+        page = Mock()
+        page.evaluate.side_effect = Error('Page.evaluate: Execution context was destroyed, most likely because of a navigation')
+        with patch('harness.web_fetch.providers.headless_worker.time.monotonic', side_effect=[100,102]):
+            with self.assertRaises(TimeoutError):
+                _evaluate_document(page, 'document.documentElement.outerHTML', 101, {})
+        self.assertEqual(page.evaluate.call_count, 1)
+        page.wait_for_load_state.assert_not_called()
+
+
+class FamilySubdocumentPolicyTests(unittest.TestCase):
+    def test_native_frame_flags_follow_family_policy_for_unrelated_urls(self):
+        import json
+        from unittest.mock import patch
+        from harness.web_fetch.models import EvalCase
+        from harness.web_fetch.providers.headless import HeadlessProvider
+        provider = HeadlessProvider('lightpanda', {
+            'type':'headless_markdown', 'engine':'lightpanda', 'binary':'/lightpanda',
+            'include_subdocuments_by_track': {'dynamic':True},
+        })
+        identity = {'binary_sha256':'fixture', 'reported_version':'1.0.0', 'version_probe_error':None}
+        raw = json.dumps({'ok':True, 'content':'native body', 'metadata':{}}).encode()
+        for identifier,track,url in [('alpha','dynamic','https://example.com/alpha'),
+                                     ('beta','dynamic','https://example.org/beta'),
+                                     ('gamma','web','https://example.net/gamma')]:
+            case = EvalCase(identifier,identifier,url,'public',[],track=track,
+                retrieval_hints={'version':3,'mode':'native'} if track=='dynamic' else {})
+            with self.subTest(track=track,url=url), \
+                 patch('harness.web_fetch.providers.headless._resolve_binary',return_value='/lightpanda'), \
+                 patch.object(provider,'implementation_identity',return_value=identity), \
+                 patch.object(provider,'_run_local_worker',return_value=(raw,'',False,0,len(raw),0)) as run:
+                result=provider.fetch(case,45)
+            self.assertTrue(result.ok)
+            request=run.call_args.args[1]
+            self.assertEqual(request['include_subdocuments'],track=='dynamic')
+            self.assertEqual(request['output_mode'],'markdown')
diff --git a/tests/test_headless_files.py b/tests/test_headless_files.py
new file mode 100644
index 000000000..546df072f
--- /dev/null
+++ b/tests/test_headless_files.py
@@ -0,0 +1,348 @@
+"""Actual browser controls for native binary delivery, independent of websites."""
+import base64
+import os
+import io
+import zipfile
+import threading
+import unittest
+from pathlib import Path
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from harness.web_fetch.models import EvalCase
+from harness.web_fetch.providers.headless import output_mode_for_case
+from harness.web_fetch.providers.headless_worker import fetch
+
+BINARY = os.environ.get("CHROMIUM_BINARY")
+PNG = base64.b64decode("iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+a3e8AAAAASUVORK5CYII=")
+
+
+class NativeFileRouteTests(unittest.TestCase):
+    def test_direct_document_route_preserves_html_viewer_and_plain_text_tasks(self):
+        for url in ('https://example.test/paper.pdf','https://example.test/paper.pdf#page=2','https://example.test/file.docx?download=1','https://example.test/pdf/1706.03762'):
+            case=EvalCase('doc','Document',url,'document',[],track='document')
+            for engine in ('moli','chromium','obscura','lightpanda','kitesurf'):
+                self.assertEqual(output_mode_for_case(engine,'headless_markdown',case),'markdown')
+        for url in ('https://example.test/plain.txt','https://example.test/documentation'):
+            case=EvalCase('doc','Document',url,'document',[],track='document')
+            self.assertEqual(output_mode_for_case('chromium','headless_markdown',case),'markdown')
+
+    def test_file_contract_selects_browser_bytes_for_supported_engines(self):
+        case = EvalCase("file", "File", "https://example.test/download", "image", [], task_kind="file")
+        for engine in ("moli", "chromium", "obscura", "lightpanda", "kitesurf"):
+            self.assertEqual(output_mode_for_case(engine, "headless_markdown", case), "file")
+
+
+@unittest.skipUnless(BINARY, "set CHROMIUM_BINARY for actual browser controls")
+class ChromiumFileDeliveryTests(unittest.TestCase):
+    def test_inline_redirect_attachment_and_http_error_use_native_navigation(self):
+        calls = []
+        class Handler(BaseHTTPRequestHandler):
+            def log_message(self, *args): pass
+            def do_GET(self):
+                calls.append(self.path)
+                if self.path == "/redirect":
+                    self.send_response(302); self.send_header("Location", "/inline"); self.end_headers(); return
+                body = b"Access denied" if self.path == "/denied" else PNG
+                self.send_response(403 if self.path == "/denied" else 200)
+                self.send_header("Content-Type", "text/plain" if self.path == "/denied" else "image/png")
+                self.send_header("Content-Length", str(len(body)))
+                if self.path == "/attachment": self.send_header("Content-Disposition", 'attachment; filename="file.png"')
+                self.end_headers(); self.wfile.write(body)
+        server = ThreadingHTTPServer(("127.0.0.1", 0), Handler)
+        thread = threading.Thread(target=server.serve_forever, daemon=True); thread.start()
+        origin = "http://127.0.0.1:" + str(server.server_port)
+        try:
+            for path in ("/inline", "/redirect", "/attachment", "/denied"):
+                with self.subTest(path=path):
+                    before = len(calls)
+                    result = fetch({"engine": "chromium", "binary": BINARY,
+                                    "url": origin + path, "timeout": 10,
+                                    "output_mode": "file", "task_kind": "file", "track": "image"})
+                    if path == "/denied":
+                        self.assertFalse(result["ok"], result)
+                        self.assertEqual(result["status_code"], 403)
+                    else:
+                        self.assertTrue(result["ok"], result)
+                        self.assertEqual([base64.b64decode(value) for value in result["files_b64"]], [PNG])
+                        self.assertEqual(result["final_url"], origin + ("/inline" if path == "/redirect" else path))
+                    self.assertEqual(calls[before:].count(path), 1 + result.get("metadata", {}).get("native_attachment_fetch_count", 0), "only the declared native attachment interface may add a fetch")
+        finally:
+            server.shutdown(); server.server_close(); thread.join(1)
+
+
+@unittest.skipUnless(BINARY, "set CHROMIUM_BINARY for actual browser controls")
+class ChromiumDocumentDeliveryTests(unittest.TestCase):
+    def test_native_document_bytes_use_the_shared_text_extractor(self):
+        from pypdf import PdfWriter
+        from pypdf.generic import DecodedStreamObject, DictionaryObject, NameObject
+        writer = PdfWriter(); page = writer.add_blank_page(width=200, height=100)
+        font = DictionaryObject({NameObject("/Type"): NameObject("/Font"),
+                                 NameObject("/Subtype"): NameObject("/Type1"),
+                                 NameObject("/BaseFont"): NameObject("/Helvetica")})
+        page[NameObject("/Resources")] = DictionaryObject({NameObject("/Font"): DictionaryObject({NameObject("/F1"): writer._add_object(font)})})
+        stream = DecodedStreamObject(); stream.set_data(b"BT /F1 12 Tf 20 50 Td (Frozen PDF body) Tj ET")
+        page[NameObject("/Contents")] = writer._add_object(stream)
+        pdf = io.BytesIO(); writer.write(pdf)
+        docx = io.BytesIO()
+        with zipfile.ZipFile(docx, "w") as archive:
+            archive.writestr("word/document.xml", '<w:document xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"><w:body><w:p><w:r><w:t>Frozen DOCX body</w:t></w:r></w:p></w:body></w:document>')
+        files = {"/fixture.pdf": (pdf.getvalue(), "application/pdf", "Frozen PDF body"),
+                 "/fixture.docx": (docx.getvalue(), "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "Frozen DOCX body")}
+        files.update({"/inline.docx": files["/fixture.docx"],
+                      "/wrong-mime.docx": (docx.getvalue(), "text/html", "Frozen DOCX body"),
+                      "/not-a-document.pdf": (b"<html><body>Access challenge</body></html>", "text/html", None)})
+        calls = []
+        class Handler(BaseHTTPRequestHandler):
+            def log_message(self, *args): pass
+            def do_GET(self):
+                calls.append(self.path)
+                raw, mime, _ = files.get(self.path, (b"missing", "text/plain", ""))
+                self.send_response(200 if self.path in files else 404)
+                self.send_header("Content-Type", mime); self.send_header("Content-Length", str(len(raw)))
+                if self.path == "/fixture.docx": self.send_header("Content-Disposition", 'attachment; filename="fixture.docx"')
+                self.end_headers(); self.wfile.write(raw)
+        server = ThreadingHTTPServer(("127.0.0.1", 0), Handler)
+        thread = threading.Thread(target=server.serve_forever, daemon=True); thread.start()
+        origin = "http://127.0.0.1:" + str(server.server_port)
+        try:
+            for path, (raw, _, expected) in files.items():
+                with self.subTest(path=path):
+                    result = fetch({"engine": "chromium", "binary": BINARY,
+                                    "url": origin + path, "timeout": 10,
+                                    "output_mode": "document", "task_kind": "body", "track": "document"})
+                    if expected is None:
+                        self.assertFalse(result["ok"], result)
+                        self.assertEqual(calls.count(path), 1, "invalid document bytes must not trigger another request")
+                        continue
+                    self.assertTrue(result["ok"], result)
+                    self.assertIn(expected, result["content"])
+                    self.assertEqual(base64.b64decode(result["metadata"]["_raw_stdout_b64"]), raw)
+                    self.assertEqual(calls.count(path), 1 + result.get("metadata", {}).get("native_attachment_fetch_count", 0), "only the declared native attachment interface may add a fetch")
+        finally:
+            server.shutdown(); server.server_close(); thread.join(1)
+
+
+@unittest.skipUnless(BINARY, "set CHROMIUM_BINARY for actual browser controls")
+class ChromiumFileTrustTests(unittest.TestCase):
+    def test_fixture_tls_exception_is_limited_to_declared_loopback_fixture(self):
+        import ssl
+        import subprocess
+        import tempfile
+        with tempfile.TemporaryDirectory() as temporary:
+            certificate = Path(temporary) / "certificate.pem"
+            key = Path(temporary) / "key.pem"
+            subprocess.run(["/usr/bin/openssl", "req", "-x509", "-newkey", "rsa:2048",
+                            "-nodes", "-keyout", str(key), "-out", str(certificate),
+                            "-days", "1", "-subj", "/CN=localhost"],
+                           check=True, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL)
+            class Handler(BaseHTTPRequestHandler):
+                def log_message(self, *args): pass
+                def do_GET(self):
+                    self.send_response(200)
+                    self.send_header("Content-Type", "image/png")
+                    self.send_header("Content-Length", str(len(PNG)))
+                    self.end_headers(); self.wfile.write(PNG)
+            server = ThreadingHTTPServer(("127.0.0.1", 0), Handler)
+            tls = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
+            tls.load_cert_chain(certificate, key)
+            server.socket = tls.wrap_socket(server.socket, server_side=True)
+            thread = threading.Thread(target=server.serve_forever, daemon=True); thread.start()
+            request = {"engine": "chromium", "binary": BINARY,
+                       "url": f"https://127.0.0.1:{server.server_port}/file.png",
+                       "timeout": 10, "output_mode": "file", "task_kind": "file", "track": "image"}
+            try:
+                for declared in ({}, {"ca_cert": str(certificate)},
+                                 {"network_policy": "loopback_only"}):
+                    result = fetch(dict(request, **declared))
+                    self.assertFalse(result["ok"], result)
+                result = fetch(dict(request, ca_cert=str(certificate), network_policy="loopback_only"))
+                self.assertTrue(result["ok"], result)
+                self.assertEqual(base64.b64decode(result["files_b64"][0]), PNG)
+            finally:
+                server.shutdown(); server.server_close(); thread.join(1)
+
+
+@unittest.skipUnless(os.environ.get("OBSCURA_BINARY"), "set OBSCURA_BINARY for actual browser controls")
+class ObscuraDocumentDeliveryTests(unittest.TestCase):
+    def test_original_document_bytes_use_shared_extraction(self):
+        # The same independent PDF/DOCX fixture and byte-identity assertions
+        # apply to each native route; only the supported invocation differs.
+        from unittest.mock import patch
+        original_fetch = fetch
+        def obscura_fetch(request):
+            return original_fetch({**request, "engine": "obscura", "allow_private_network": True})
+        with patch(__name__ + ".BINARY", os.environ["OBSCURA_BINARY"]), patch(__name__ + ".fetch", obscura_fetch):
+            ChromiumDocumentDeliveryTests().test_native_document_bytes_use_the_shared_text_extractor()
+
+
+@unittest.skipUnless(os.environ.get("LIGHTPANDA_BINARY"), "set LIGHTPANDA_BINARY for actual browser controls")
+class LightpandaDocumentDeliveryTests(unittest.TestCase):
+    def test_original_document_bytes_use_shared_extraction(self):
+        from unittest.mock import patch
+        original_fetch = fetch
+        def native_fetch(request):
+            return original_fetch({**request, "engine": "lightpanda"})
+        with patch(__name__ + ".BINARY", os.environ["LIGHTPANDA_BINARY"]), patch(__name__ + ".fetch", native_fetch):
+            ChromiumDocumentDeliveryTests().test_native_document_bytes_use_the_shared_text_extractor()
+
+
+@unittest.skipUnless(os.environ.get("MOLI_BINARY"), "set MOLI_BINARY for actual browser controls")
+class MoliNativeDeliveryTests(unittest.TestCase):
+    def test_inline_attachment_redirect_and_denial_deliver_only_native_bytes(self):
+        self._run_shared(ChromiumFileDeliveryTests().test_inline_redirect_attachment_and_http_error_use_native_navigation)
+
+    def test_document_body_matches_native_markdown_without_external_parsing(self):
+        import hashlib, subprocess
+        from unittest.mock import patch
+        from pypdf import PdfWriter
+        from harness.web_fetch.providers.moli import MoliWebFetchProvider
+        pdf = io.BytesIO()
+        writer = PdfWriter(); writer.add_blank_page(width=200, height=100); writer.write(pdf)
+        docx = io.BytesIO()
+        with zipfile.ZipFile(docx, "w") as archive:
+            archive.writestr("word/document.xml", '<w:document xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"><w:body><w:p><w:r><w:t>Document body</w:t></w:r></w:p></w:body></w:document>')
+        files = {"/body.html": (b"<html><body><main>Native document body</main></body></html>", "text/html"),
+                 "/plain.txt": (b"Native document body", "text/plain"),
+                 "/fixture.pdf": (pdf.getvalue(), "application/pdf"),
+                 "/fixture.docx": (docx.getvalue(), "application/vnd.openxmlformats-officedocument.wordprocessingml.document")}
+        class Handler(BaseHTTPRequestHandler):
+            def log_message(self, *args): pass
+            def do_GET(self):
+                raw, mime = files[self.path]
+                self.send_response(200); self.send_header("Content-Type", mime)
+                self.send_header("Content-Length", str(len(raw))); self.end_headers(); self.wfile.write(raw)
+        server = ThreadingHTTPServer(("127.0.0.1", 0), Handler)
+        thread = threading.Thread(target=server.serve_forever, daemon=True); thread.start()
+        binary = os.environ["MOLI_BINARY"]
+        provider = MoliWebFetchProvider("moli", {"binary": binary, "block_private_networks": False,
+            "expected_reported_version": subprocess.check_output([binary, "--version"], text=True).strip(),
+            "expected_binary_sha256": hashlib.sha256(Path(binary).read_bytes()).hexdigest()})
+        try:
+            for path in files:
+                with self.subTest(path=path):
+                    url = "http://127.0.0.1:" + str(server.server_port) + path
+                    native = subprocess.run([binary, "fetch", "--dump", "markdown", "--wait-until", "done",
+                        "--timeout", "10000", url], capture_output=True, timeout=12)
+                    with patch("harness.web_fetch.providers.headless_worker.extract_document_text",
+                               side_effect=AssertionError("external document conversion is forbidden")) as external:
+                        result = provider.fetch(EvalCase("native-document", "Document", url, "document", [], track="document"), 10)
+                    external.assert_not_called()
+                    self.assertEqual(result.metadata["route"], "ordinary_markdown")
+                    self.assertEqual(result.metadata["output"], "markdown")
+                    if native.returncode == 0:
+                        self.assertTrue(result.ok, result.error_message)
+                        self.assertEqual(result.content.strip(), native.stdout.decode("utf-8", errors="replace").strip())
+                    else:
+                        self.assertFalse(result.ok, result)
+                        self.assertEqual(result.error_type, "tool_error")
+                    if path in {"/body.html", "/plain.txt"}:
+                        self.assertTrue(result.ok, result)
+                        self.assertIn("Native document body", result.content)
+        finally:
+            server.shutdown(); server.server_close(); thread.join(1)
+
+    def test_original_file_byte_budget_is_preserved(self):
+        import hashlib, subprocess
+        from harness.web_fetch.providers.moli import MoliWebFetchProvider
+        calls=[]
+        class Handler(BaseHTTPRequestHandler):
+            def log_message(self,*args): pass
+            def do_GET(self):
+                calls.append(self.path)
+                self.send_response(200);self.send_header('Content-Type','image/png')
+                self.send_header('Content-Length',str(len(PNG)));self.end_headers();self.wfile.write(PNG)
+        server=ThreadingHTTPServer(('127.0.0.1',0),Handler)
+        thread=threading.Thread(target=server.serve_forever,daemon=True);thread.start()
+        try:
+            binary=os.environ['MOLI_BINARY']
+            provider=MoliWebFetchProvider('moli',{'binary':binary,'block_private_networks':False,'max_bytes':50,
+                'expected_reported_version':subprocess.check_output([binary,'--version'],text=True).strip(),
+                'expected_binary_sha256':hashlib.sha256(Path(binary).read_bytes()).hexdigest()})
+            case=EvalCase('original-byte-budget','Fixture','http://127.0.0.1:'+str(server.server_port)+'/file.png',
+                          'image',[],track='image',task_kind='file')
+            result=provider.fetch(case,5)
+            self.assertFalse(result.ok,result)
+            self.assertEqual(result.error_type,'output_too_large')
+            self.assertEqual(result.metadata['original_file_bytes'],len(PNG))
+            self.assertEqual(calls,['/file.png'])
+        finally:
+            server.shutdown();server.server_close();thread.join(1)
+
+    def _run_shared(self, control):
+        from unittest.mock import patch
+        import hashlib, subprocess
+        from harness.web_fetch.providers.moli import MoliWebFetchProvider
+        binary = os.environ["MOLI_BINARY"]
+        config = {"binary":binary,"block_private_networks":False,
+                  "expected_reported_version":subprocess.check_output([binary,"--version"],text=True).strip(),
+                  "expected_binary_sha256":hashlib.sha256(Path(binary).read_bytes()).hexdigest()}
+        def native_fetch(request):
+            provider=MoliWebFetchProvider('moli',config)
+            case=EvalCase('independent-native-delivery','Fixture',request['url'],'fixture',[],
+                          track=request['track'],task_kind=request['task_kind'])
+            result=provider.fetch(case,request['timeout'])
+            return dict(ok=result.ok,content=result.content,status_code=result.status_code,final_url=result.final_url,
+                        error_type=result.error_type,error_message=result.error_message,metadata=result.metadata,
+                        files_b64=[base64.b64encode(file['data']).decode() for file in result.files])
+        with patch(__name__ + ".BINARY", binary), patch(__name__ + ".fetch", native_fetch):
+            control()
+
+
+class NativeAttachmentResolverTests(unittest.TestCase):
+    def test_attachment_cli_keeps_resolver_and_redirect_target_within_deadline(self):
+        import time
+        from contextlib import contextmanager
+        from types import SimpleNamespace
+        from unittest.mock import patch
+        from harness.web_fetch.providers.headless_worker import _native_browser_file
+        for original, target in (('https://example.test/file', 'https://example.test/file'),
+                                 ('https://example.test/redirect', 'https://cdn.example.test/file')):
+            with self.subTest(original=original):
+                class Page:
+                    def on(self, event, callback): self.callback = callback
+                    def goto(self, url, **kwargs):
+                        self.callback(SimpleNamespace(url=target))
+                @contextmanager
+                def resolver(mode, library, deadline, metadata):
+                    self.assertEqual((mode, library), ('public_doh', '/declared.dylib'))
+                    self.assertGreater(deadline, time.monotonic())
+                    yield {'DECLARED_RESOLVER': 'strict-public'}
+                    metadata.update(dns_mode=mode, dns_resolutions=[{'hostname':'cdn.example.test'}])
+                metadata = {}
+                with patch('harness.web_fetch.network_dns.native_process_dns_environment', resolver), patch(
+                    'harness.web_fetch.providers.headless_worker.subprocess.run',
+                    return_value=SimpleNamespace(returncode=0, stdout=PNG, stderr=b'')) as call:
+                    result = _native_browser_file(Page(), {'engine':'moli', 'binary':'/moli',
+                        'url':original, 'dns_mode':'public_doh', 'native_dns_library':'/declared.dylib'},
+                        5, time.monotonic(), metadata)
+                self.assertTrue(result['ok'])
+                self.assertIn(target, call.call_args.args[0])
+                self.assertEqual(call.call_args.kwargs['env'], {'DECLARED_RESOLVER':'strict-public'})
+                self.assertLessEqual(call.call_args.kwargs['timeout'], 5)
+                self.assertEqual(metadata['native_attachment_dns']['dns_resolutions'], [{'hostname':'cdn.example.test'}])
+
+
+    def test_attachment_timeout_retains_the_resolver_trace(self):
+        import subprocess
+        import time
+        from contextlib import contextmanager
+        from types import SimpleNamespace
+        from unittest.mock import patch
+        from harness.web_fetch.providers.headless_worker import _native_browser_file
+        class Page:
+            def on(self, event, callback): self.callback = callback
+            def goto(self, url, **kwargs): self.callback(SimpleNamespace(url=url))
+        @contextmanager
+        def resolver(mode, library, deadline, metadata):
+            try:
+                yield {'DECLARED_RESOLVER': 'strict-public'}
+            finally:
+                metadata['dns_resolutions'] = [{'hostname':'example.test'}]
+        metadata = {}
+        with patch('harness.web_fetch.network_dns.native_process_dns_environment', resolver), patch(
+            'harness.web_fetch.providers.headless_worker.subprocess.run',
+            side_effect=subprocess.TimeoutExpired('moli', 1)):
+            with self.assertRaises(subprocess.TimeoutExpired):
+                _native_browser_file(Page(), {'engine':'moli', 'binary':'/moli',
+                    'url':'https://example.test/file', 'dns_mode':'public_doh'},
+                    5, time.monotonic(), metadata)
+        self.assertEqual(metadata['native_attachment_dns']['dns_resolutions'], [{'hostname':'example.test'}])
diff --git a/tests/test_headless_projection.py b/tests/test_headless_projection.py
index cf1e0c3b3..d07d55d42 100644
--- a/tests/test_headless_projection.py
+++ b/tests/test_headless_projection.py
@@ -30,10 +30,11 @@ def test_projects_only_a_complete_provider_without_changing_artifacts(self):
                     path.write_bytes(data)
                     records.append({"attempt_id": f"{provider}__{identifier}__r001",
                         "provider": provider, "case_id": identifier, "run": 1,
+                        "error_message": "正文\u2028包含\u2029合法 Unicode 分隔符",
                         "started_at": "2026-01-01T00:00:00+00:00",
                         "completed_at": "2026-01-01T00:00:01+00:00", "elapsed_ms": 1000,
                         "artifact_path": relative, "metrics": {"content_sha256": hashlib.sha256(data).hexdigest()}})
-            (source / "results.jsonl").write_text("".join(json.dumps(row) + "\n" for row in records))
+            (source / "results.jsonl").write_text("".join(json.dumps(row, ensure_ascii=False) + "\n" for row in records))
             manifest = {"started_at": "2026-01-01T00:00:00+00:00",
                 "completed_at": "2026-01-01T00:00:02+00:00",
                 "dataset": {"id": "d", "case_count": 2},
diff --git a/tests/test_headless_report.py b/tests/test_headless_report.py
index 88514aa99..4e55bc208 100644
--- a/tests/test_headless_report.py
+++ b/tests/test_headless_report.py
@@ -41,6 +41,30 @@
 from harness.web_fetch.speed_cohort import build_summary as build_speed_summary
 
 
+class BrowserCohortRegistryTests(unittest.TestCase):
+    def test_generic_method_name_uses_observed_version_without_an_old_release_label(self):
+        from harness.web_fetch.methods import method_page_model
+        from harness.web_fetch.report_methods import display_name
+        for version in ('1.1.15','1.2.0'):
+            records=[{'provider_type':'moli_webfetch','provider_metadata':{'reported_version':'moli '+version}}]
+            model=method_page_model('moli',display_name('moli'),records)
+            self.assertIn('Moli '+version,model['title'])
+            self.assertNotIn('1.1.5',model['title'])
+
+
+    def test_task_specific_moli_adapter_keeps_browser_report_routes(self):
+        from harness.web_fetch.report import is_headless_cohort
+        from harness.web_fetch.report_explainer import _is_headless_comparison, supports_authored_explainer
+        records = [{'provider_type': 'moli_webfetch'}, {'provider_type': 'headless_markdown'}]
+        self.assertTrue(is_headless_cohort(records))
+        self.assertTrue(_is_headless_comparison(records))
+        self.assertFalse(supports_authored_explainer({'risk': {'track': 'risk_control'}}))
+        for unrelated in ([], [{'provider_type': 'moli_webfetch'}],
+                          records + [{'provider_type': 'firecrawl'}]):
+            self.assertFalse(is_headless_cohort(unrelated))
+            self.assertFalse(_is_headless_comparison(unrelated))
+
+
 class HeadlessReportTests(unittest.TestCase):
     def test_resource_cards_name_each_actual_metric_winner(self):
         providers = ['moli', 'lightpanda', 'obscura', 'chromium']
@@ -78,13 +102,14 @@ def test_resource_co_leaders_are_named_in_both_languages(self):
         self.assertTrue(result['winner_tied'])
         english = localize_html(page, PurePosixPath('guide/index.html'))
         self.assertIn('Resource-efficiency co-leaders in this run', english)
-        self.assertIn('Moli 1.1.1, Lightpanda, Obscura, Chromium', english)
+        self.assertIn('Moli 1.1.15 · independent resource cohort, Lightpanda, Obscura, Chromium', english)
         self.assertNotIn('资源效率并列领先', english)
 
     def test_resource_table_excludes_unobservable_remote_provider(self):
-        selected = ['moli', 'chromium', 'lightpanda', 'obscura', 'kitesurf']
+        resource_providers = ['moli', 'chromium', 'lightpanda', 'obscura']
+        selected = ['moli-fixed', 'chromium', 'lightpanda', 'obscura', 'kitesurf']
         rows = []
-        for index, provider in enumerate(selected[:-1], 1):
+        for index, provider in enumerate(resource_providers, 1):
             metrics = {
                 'cpu_ms': {'mean': index * 10, 'p50': index * 9, 'p95': index * 12},
                 'cpu_average_utilization_pct': {'mean': index * 2},
@@ -99,11 +124,14 @@ def test_resource_table_excludes_unobservable_remote_provider(self):
                 'network_tx_bytes_per_second': {'mean': index * 2048},
             }
             rows.append({'provider': provider, 'metrics': metrics})
-        summary = {'rows': rows, 'common_pass_cases': ['a'] * 8,
+        summary = {'providers': resource_providers, 'rows': rows, 'common_pass_cases': ['a'] * 8,
                    'planned_cases': ['a'] * 20}
         page, interpretation = _render_article_resources(summary, selected)
         self.assertNotIn('<th scope="col">Kitesurf</th>', page)
-        self.assertIn('<strong>8/20</strong> 个普通网页', page)
+        self.assertIn('data-resource-population="all_declared_calls"', page)
+        self.assertIn('全部 20 个普通网页，包含失败调用', page)
+        self.assertIn('共同通过 <strong>8/20</strong>', page)
+        self.assertIn('不用于选择资源表的样本', page)
         self.assertIn('本轮资源效率领先', page)
         self.assertIn('data-resource-winner="moli"', page)
         self.assertEqual(page.count('data-resource-metric-winner="moli"'), 12)
@@ -265,6 +293,9 @@ def binding(cs, row):
         annotated = record | {'diagnosis': {'independent_source_check': 'available'},
                               'title_quality': {'score': 0.5}, 'failure_category': 'label'}
         self.assertEqual(binding(cases, annotated), expected)
+        local = record | {'provider_metadata': record['provider_metadata'] | {
+            'local_report_complete_diagnostic_links': True}}
+        self.assertEqual(binding(cases, local), expected)
         mutations = [record | {'ok': False}, record | {'elapsed_ms': 11},
                      record | {'metrics': record['metrics'] | {'content_pass': False}},
                      record | {'metrics': record['metrics'] | {'content_sha256': 'changed'}},
@@ -525,7 +556,7 @@ def prepare(self,root):
         now=datetime.now(timezone.utc)
         case={'id':'body','name':'Body','url':'https://example.test/body','track':'web',
             'task_kind':'body','ground_truth_main_content':'Reference body',
-            'source_verification':{'state':'valid','method':'independent fixture',
+            'source_verification':{'state':'valid','reference_mode':'live_exact','method':'independent fixture',
                 'checked_at':(now-timedelta(seconds=10)).isoformat(),
                 'reference_sha256':sha256('Reference body')}}
         dataset={'cases':[case],'coverage_plan':{'web':['p']}}
@@ -594,3 +625,531 @@ def test_diagnostic_assembly_does_not_bypass_publication_gate(self):
             with self.assertRaises(ReferenceLifecycleError):
                 build_report(root/'diagnostic',root/'report')
             self.assertFalse((root/'report').exists())
+
+class CurrentBrowserArticleTests(unittest.TestCase):
+    def example(self, root):
+        from harness.web_fetch.report_explainer import _digest, _headless_article_input
+        cases={cid:{'id':cid,'name':cid,'track':track,'url':'https://example.com/'+cid,
+                    'ground_truth_main_content':'Expected complete body'}
+               for cid,track in [('web-case','web'),('risk-case','risk_control')]}
+        rows=[]
+        for name,values in [('moli',[(True,10),(False,30)]),('lightpanda',[(True,20),(True,40)])]:
+            for (cid,case),(passed,ms) in zip(cases.items(),values):
+                attempt=name+'__'+cid
+                artifact='artifacts/'+attempt+'.txt'
+                (root/artifact).parent.mkdir(exist_ok=True)
+                (root/artifact).write_text('Expected complete body' if passed else 'Access denied')
+                (root/'attempts').mkdir(exist_ok=True)
+                (root/'attempts'/f'{attempt}.html').write_text('<p>Canonical result and error</p>')
+                rows.append({'provider':name,'provider_type':'headless_markdown','case_id':cid,
+                             'attempt_id':attempt,'artifact_path':artifact,'ok':passed,'elapsed_ms':ms,
+                             'started_at':'2026-10-09T00:00:00Z','provider_metadata':(
+                                 {'dns_mode':'public_doh','system_dns_fallback':False}
+                                 if name=='moli' else {'dns_mode':'system'}),
+                             'error_type':None if passed else 'http_status',
+                             'error_message':None if passed else 'Origin returned HTTP 403',
+                             'metrics':{'content_pass':passed}})
+        content={'schema':'webfetch_browser_interpretation/1',
+                 'evidence_sha256':_digest(_headless_article_input(cases,rows,['moli','lightpanda'])),
+                 'title':'浏览器结果解读','intro':'相同任务和规则下的测量。',
+                 'scoring':'正文是验收目标，最终页面地址只用于诊断。','conclusions':'结合正文与交付结果选择方法。',
+                 'providers':{name:{'explanation':'这一节解释实际返回的内容。',
+                                    'specimen_case_id':'risk-case'} for name in ['moli','lightpanda']}}
+        p=root/'report-assets/content.json';p.parent.mkdir();p.write_text(json.dumps(content,ensure_ascii=False))
+        binding={'path':'report-assets/content.json','sha256':hashlib.sha256(p.read_bytes()).hexdigest()}
+        return cases,rows,binding
+
+    def bind_failure_review(self, root, cases, rows, binding):
+        result_path = root/'results.jsonl'
+        if not result_path.exists():
+            result_path.write_text(''.join(json.dumps(row)+'\n' for row in rows))
+        failed = next(row for row in rows if not row['ok'])
+        artifact = root/failed['artifact_path']
+        review = {'schema':'webfetch_failure_review/1',
+                  'results_sha256':hashlib.sha256(result_path.read_bytes()).hexdigest(),
+                  'failures':[{'attempt_id':failed['attempt_id'],'provider':failed['provider'],
+                               'case_id':failed['case_id'],'category':'source_access_denied',
+                               'category_label':'源站拒绝访问',
+                               'reason':'源站返回 HTTP 403，输出明确写明 Access denied。',
+                               'remediation_status':'保留失败；评测端不绕过访问限制。',
+                               'evidence_paths':[{'path':failed['artifact_path'],
+                                  'sha256':hashlib.sha256(artifact.read_bytes()).hexdigest()}]}]}
+        path=root/'report-assets/failures.json';path.write_text(json.dumps(review,ensure_ascii=False))
+        content_path=root/binding['path'];content=json.loads(content_path.read_text())
+        content.update(require_failure_review=True, failure_review={
+            'path':'report-assets/failures.json','sha256':hashlib.sha256(path.read_bytes()).hexdigest()})
+        content['background']='网页正文与文件内容按各自交付要求验收。'
+        import base64
+        image=root/'report-assets/delivery.png'
+        image.write_bytes(base64.b64decode('iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+jRZkAAAAASUVORK5CYII='))
+        content['figures']=[{'path':'report-assets/delivery.png',
+                            'sha256':hashlib.sha256(image.read_bytes()).hexdigest(),
+                            'alt':'同一输入分别取得正文或文件', 'caption':'不同任务检查不同的交付内容。'}]
+
+        content['case_examples']=[{'provider':'lightpanda','case_id':'web-case',
+                                  'explanation':'这个实例返回全部固定正文，满足相同验收要求。'}]
+        content_path.write_text(json.dumps(content,ensure_ascii=False))
+        binding['sha256']=hashlib.sha256(content_path.read_bytes()).hexdigest()
+        return review
+
+    def test_reference_reading_components_reject_missing_or_false_visuals(self):
+        from bs4 import BeautifulSoup
+        from harness.web_fetch.report_explainer import render_explainer,check_current_browser_article
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            self.bind_failure_review(root,cases,rows,binding)
+            path=root/binding['path'];content=json.loads(path.read_text())
+            content.update(focus_provider='lightpanda',comparison_provider='moli',version_baseline='moli',
+                comparisons=[{'id':'complete-scope','title':'全部任务','tracks':['web','risk_control'],'left':'lightpanda','right':'moli'}],
+                results_explanation='两种配置在相同任务上的完整结果。')
+            for row in rows:
+                row['metrics'].update(word_recall=0.8,word_precision=0.7,word_f1=0.75)
+            content['evidence_sha256']=_digest(_headless_article_input(cases,rows,['moli','lightpanda']))
+            (root/'results.jsonl').write_text(''.join(json.dumps(row)+'\n' for row in rows))
+            review_path=root/content['failure_review']['path'];review=json.loads(review_path.read_text())
+            review['results_sha256']=hashlib.sha256((root/'results.jsonl').read_bytes()).hexdigest();review_path.write_text(json.dumps(review))
+            content['failure_review']['sha256']=hashlib.sha256(review_path.read_bytes()).hexdigest()
+            path.write_text(json.dumps(content,ensure_ascii=False));binding['sha256']=hashlib.sha256(path.read_bytes()).hexdigest()
+            body=render_explainer(root,cases,rows,content_binding=binding);page=root/'guide/index.html';page.write_text(body)
+            check_current_browser_article(root,cases,rows,binding)
+            parsed=BeautifulSoup(body,'html.parser')
+            self.assertEqual(len(parsed.select('[data-reading-speed]')),6)
+            self.assertEqual([int(node['data-count']) for node in parsed.select('[data-version-relation]')],[1,1,0,0])
+            self.assertEqual(len(parsed.select('[data-browser-metric^="quality_"]')),6)
+            for label,selector,attribute,value in [
+                ('opening','.m-hero','class','missing'),
+                ('bar length','[data-reading-speed] .m-speed-track i','style','width:1%'),
+                ('highlight','[data-reading-speed] .m-speed-track i','class','best'),
+                ('case selection','.case-choice','id','missing-case'),
+                ('case comparison','.case-compare','class','missing-compare'),
+                ('verdict color','[data-example-check]','class','bad'),
+                ('failure frequency','[data-reading-cause]','data-count','99'),
+                ('version scope','[data-version-relation]','data-count','99'),
+            ]:
+                with self.subTest(label=label):
+                    changed=BeautifulSoup(body,'html.parser');node=changed.select_one(selector);node[attribute]=value;page.write_text(str(changed))
+                    with self.assertRaises(ValueError):check_current_browser_article(root,cases,rows,binding)
+            page.write_text(body)
+
+    def test_empty_response_has_zero_delivered_characters(self):
+        from harness.web_fetch.report_explainer import browser_example_evidence
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,_=self.example(root);row=rows[0]
+            (root/row['artifact_path']).write_bytes(b'')
+            evidence=browser_example_evidence(root,cases[row['case_id']],row)
+            self.assertEqual(evidence['actual_chars'],0)
+            self.assertEqual(evidence['actual'],'本次没有返回内容。')
+
+    def test_reference_excerpt_is_verbatim_and_never_accepts_an_invented_focus(self):
+        from harness.web_fetch.report_explainer import browser_example_evidence
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,_=self.example(root);row=rows[0];case=cases[row['case_id']]
+            original=case['ground_truth_main_content']
+            evidence=browser_example_evidence(root,case,row,reference_focus='complete body')
+            self.assertEqual(evidence['reference'],'complete body')
+            self.assertEqual(case['ground_truth_main_content'],original)
+            with self.assertRaises(ValueError):browser_example_evidence(root,case,row,reference_focus='invented abstract')
+
+    def test_compact_interfaces_group_same_output_without_guessing_missing_records(self):
+        from harness.web_fetch.report_interfaces import browser_task_interface_matrix
+        cases={cid:dict(id=cid,url='https://example.com/'+cid,track='image',task_kind=kind)
+               for cid,kind in [('address','resource'),('metadata','body'),('unknown','body')]}
+        rows=[dict(provider='moli',case_id=cid,provider_metadata=(
+            dict(extractor='moli_native_markdown',dump='markdown',route=cid)
+            if cid!='unknown' else {})) for cid in cases]
+        matrix=browser_task_interface_matrix(cases,['moli'],rows,compact=True)
+        parts=matrix['rows'][0]['cells']['moli']
+        self.assertEqual([(p['count'],p['description']) for p in parts],[(2,'原生 Markdown'),(1,'接口未记录')])
+
+    def test_example_focus_is_verbatim_and_does_not_modify_saved_answer(self):
+        from harness.web_fetch.report_explainer import browser_example_evidence
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root);row=rows[0]
+            answer='Navigation\n'*900+'# Product body\nVisible article text'
+            (root/row['artifact_path']).write_text(answer)
+            evidence=browser_example_evidence(root,cases[row['case_id']],row,focus='# Product body')
+            self.assertTrue(evidence['actual'].startswith('# Product body'))
+            self.assertEqual((root/row['artifact_path']).read_text(),answer)
+            with self.assertRaisesRegex(ValueError,'focus is absent'):
+                browser_example_evidence(root,cases[row['case_id']],row,focus='Invented body')
+
+    def test_failure_review_is_complete_current_and_independent_of_program_errors(self):
+        from harness.web_fetch.report_explainer import render_explainer, check_current_browser_article
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            self.bind_failure_review(root,cases,rows,binding)
+            body=render_explainer(root,cases,rows,content_binding=binding)
+            (root/'guide/index.html').write_text(body)
+            model=check_current_browser_article(root,cases,rows,binding)
+            self.assertEqual(model['stats']['moli']['failure_counts'],{'http_status':1})
+            self.assertEqual(model['stats']['moli']['reviewed_failure_counts'],{'source_access_denied':1})
+            self.assertNotIn('data-reviewed-reason=',body)
+            self.assertIn('../attempts/moli__risk-case.html',body)
+            self.assertIn('程序返回分类',body)
+            self.assertIn('03 测试方法与实例',body)
+            self.assertIn('data-browser-figure="report-assets/delivery.png"',body)
+            self.assertIn('05 失败任务与正文缺失',body)
+            # Only the authored specimen embeds complete output in the independent edition.
+            offline=(root/'guide/article.html').read_text()
+            self.assertIn('offline-result-lightpanda__web-case',offline)
+            self.assertIn('src="data:image/png;base64,',offline)
+            from bs4 import BeautifulSoup
+            document=BeautifulSoup(offline,'html.parser')
+            for anchor in document.select('a[href^="#"]'):
+                self.assertIsNotNone(document.find(id=anchor['href'][1:]))
+            page=root/'guide/index.html'
+            for changed in [body.replace('data-reviewed-failure="moli"','data-removed="moli"',1),
+                            body.replace('id="reading-method"','id="missing-method"',1),
+                            body.replace('data-browser-figure="report-assets/delivery.png"','data-removed-figure="x"',1),
+                            body.replace('data-example-expected=','data-hidden-expected=',1),
+                            body.replace('data-example-actual=','data-hidden-actual=',1),
+                            body.replace('data-example-check=','data-hidden-check=',1),
+                            body.replace('data-example-verdict=','data-hidden-verdict=',1),
+                            body.replace('data-reading-contents=','data-hidden-contents=',1),
+                            body.replace('P50 是中位数','P50 值',1)]:
+                page.write_text(changed)
+                with self.assertRaises(ValueError):
+                    check_current_browser_article(root,cases,rows,binding)
+
+    def test_interpretation_examples_use_saved_checks_and_do_not_decode_binary_files(self):
+        from harness.web_fetch.report_explainer import browser_example_evidence
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            row=deepcopy(rows[0]);case=deepcopy(cases[row['case_id']])
+            case['min_content_chars']=10
+            case['body_requirements']={'minimum_coverage':0.9}
+            row['metrics'].update(length_pass=True,content_chars=22,
+                fact_results=[{'id':'body','alternatives':['Expected complete body'],'matched':['Expected complete body'],'pass':True}],
+                body_region_results=[{'id':'opening','coverage':0.5,'pass':False}],body_coverage_pass=False,
+                stable_anchor_results=[{'id':'heading','alternatives':['Expected'],'matched':['Expected'],'pass':True}],
+                stable_field_results=[{'field':'name','count':2,'minimum':3,'pass':False}],
+                stable_unique_record_count=2,stable_minimum_records=3,stable_structure_pass=False)
+            evidence=browser_example_evidence(root,case,row)
+            checks={item['key']:item for item in evidence['checks']}
+            self.assertEqual(checks['length']['actual'],'22 字符')
+            self.assertEqual(checks['fact_results_1']['verdict'],'通过')
+            self.assertEqual(checks['body_region_results_1']['verdict'],'未通过')
+            self.assertIn('50.0%',checks['body_region_results_1']['actual'])
+            self.assertEqual(checks['stable_field_results_1']['expected'],'3')
+            self.assertEqual(checks['records']['actual'],'2')
+            # Direct file inspection uses retained file metadata even if no text artifact can be read.
+            case['task_kind']='file';row['artifact_path']='must-not-read.bin'
+            row['metrics']['raw_file_pass']=True
+            row['provider_metadata']['file_evaluation']={'files':[{'mime':'video/mp4','bytes':12,'sha256':'abc','pass':True}]}
+            evidence=browser_example_evidence(root,case,row)
+            self.assertIn('video/mp4',evidence['actual'])
+            self.assertIn('abc',evidence['actual'])
+            self.assertTrue(evidence['passed'])
+            case['task_kind']='body';row['artifact_path']=rows[0]['artifact_path']
+            (root/row['artifact_path']).write_bytes(b'')
+            self.assertEqual(browser_example_evidence(root,case,row)['actual'],'本次没有返回内容。')
+            (root/row['artifact_path']).write_bytes(b'%PDF-1.7 binary data')
+            self.assertIn('二进制响应',browser_example_evidence(root,case,row)['actual'])
+
+    def test_failure_review_rejects_incomplete_stale_and_misattributed_diagnoses(self):
+        from harness.web_fetch.report_explainer import current_browser_article_model
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            original=self.bind_failure_review(root,cases,rows,binding)
+            content_path=root/binding['path'];content=json.loads(content_path.read_text())
+            review_path=root/content['failure_review']['path']
+            mutations=[lambda value:value.update(failures=[]),
+                       lambda value:value['failures'].append(deepcopy(value['failures'][0])),
+                       lambda value:value.update(results_sha256='0'*64),
+                       lambda value:value['failures'][0].update(attempt_id=rows[0]['attempt_id'],case_id=rows[0]['case_id']),
+                       lambda value:value['failures'][0].update(provider='lightpanda'),
+                       lambda value:value['failures'][0].update(category=''),
+                       lambda value:value['failures'][0].update(reason=''),
+                       lambda value:value['failures'][0].update(evidence_paths=[]),
+                       lambda value:value['failures'][0]['evidence_paths'][0].update(sha256='0'*64)]
+            for mutation in mutations:
+                value=deepcopy(original);mutation(value)
+                review_path.write_text(json.dumps(value,ensure_ascii=False))
+                content['failure_review']['sha256']=hashlib.sha256(review_path.read_bytes()).hexdigest()
+                content_path.write_text(json.dumps(content,ensure_ascii=False))
+                binding['sha256']=hashlib.sha256(content_path.read_bytes()).hexdigest()
+                with self.subTest(mutation=mutations.index(mutation)), self.assertRaises(ValueError):
+                    current_browser_article_model(root,cases,rows,binding)
+            content.pop('failure_review');content_path.write_text(json.dumps(content))
+            binding['sha256']=hashlib.sha256(content_path.read_bytes()).hexdigest()
+            with self.assertRaisesRegex(ValueError,'requires a failure review'):
+                current_browser_article_model(root,cases,rows,binding)
+
+    def test_new_cohort_has_dynamic_families_populations_and_evidence(self):
+        from harness.web_fetch.report_explainer import render_explainer, check_current_browser_article
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            body=render_explainer(root,cases,rows,content_binding=binding)
+            (root/'guide/index.html').write_text(body)
+            model=check_current_browser_article(root,cases,rows,binding)
+            self.assertEqual(model['cases'],2)
+            self.assertEqual(model['stats']['moli']['pass_rate'],0.5)
+            self.assertEqual(model['stats']['moli']['all']['mean'],20)
+            self.assertEqual(model['stats']['moli']['successful']['mean'],10)
+            self.assertEqual(model['stats']['lightpanda']['successful']['n'],2)
+            self.assertIn('风控网页正文',body)
+            self.assertIn('Origin returned HTTP 403',body)
+            self.assertIn('独立结果审查：0/4',body)
+            self.assertIn('data-network-method="moli" data-network-mode="public_doh"', body)
+            self.assertIn('public_doh 2 次', body)
+            self.assertIn('统一解析策略不保证', body)
+            self.assertNotIn('150 道',body)
+            self.assertNotIn('1.1.5',body)
+
+    def test_interpretation_bounds_long_program_errors_without_changing_evidence(self):
+        from bs4 import BeautifulSoup
+        from harness.web_fetch.report_explainer import render_explainer, check_current_browser_article
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            row=next(row for row in rows if not row['ok'])
+            row['error_message']='BEGIN FULL DEBUG LOG\n'+('debug line\n'*12000)+'FINAL ERROR: connection reset'
+            original=row['error_message']
+            content_path=root/binding['path'];content=json.loads(content_path.read_text())
+            content['evidence_sha256']=_digest(_headless_article_input(cases,rows,['moli','lightpanda']))
+            content_path.write_text(json.dumps(content,ensure_ascii=False))
+            binding['sha256']=hashlib.sha256(content_path.read_bytes()).hexdigest()
+            body=render_explainer(root,cases,rows,content_binding=binding)
+            page=root/'guide/index.html';page.write_text(body)
+            model=check_current_browser_article(root,cases,rows,binding)
+            excerpt=BeautifulSoup(body,'html.parser').select_one('[data-browser-error="moli"]').get_text()
+            self.assertLess(len(excerpt),4100)
+            self.assertTrue(excerpt.endswith('FINAL ERROR: connection reset'))
+            self.assertNotIn('BEGIN FULL DEBUG LOG',excerpt)
+            self.assertIn('完整错误和日志见结果详情',excerpt)
+            self.assertEqual(row['error_message'],original)
+            self.assertEqual(model['stats']['moli']['specimen']['error_message'],original)
+            page.write_text(body.replace('FINAL ERROR: connection reset','different failure',1))
+            with self.assertRaisesRegex(ValueError,'error excerpt'):
+                check_current_browser_article(root,cases,rows,binding)
+
+    def test_real_provider_revision_gate_checks_bound_article_with_measured_labels(self):
+        from harness.web_fetch.methods import with_measured_method_labels
+        from harness.web_fetch.report_explainer import render_explainer
+        from harness.web_fetch.report_check import check_revision
+        class FollowingReleaseStage(Exception): pass
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            self.assertTrue(all(row['provider_type']!='fixture' for row in rows))
+            for row in rows:
+                if row['provider']=='moli':row['provider_metadata']['binary_sha256']='example-binary'
+            (root/'implementation-provenance.json').write_text(json.dumps({'implementations':[
+                {'provider':'moli','binary_sha256':'example-binary','version':'9.2.3'}]}))
+            content_path=root/binding['path'];content=json.loads(content_path.read_text())
+            content['evidence_sha256']=_digest(_headless_article_input(cases,rows,['moli','lightpanda']))
+            content_path.write_text(json.dumps(content));binding['sha256']=hashlib.sha256(content_path.read_bytes()).hexdigest()
+            (root/'dataset.json').write_text(json.dumps({'cases':list(cases.values()),'comparison':{'report_interpretation':binding}}))
+            (root/'results.jsonl').write_text(''.join(json.dumps(row)+'\n' for row in rows))
+            (root/'index.html').write_text('<a href="providers/moli.html">Moli 9.2.3</a>')
+            body=with_measured_method_labels(render_explainer)(root,cases,rows,content_binding=binding)
+            self.assertIn('Moli 9.2.3',body)
+            page=root/'guide/index.html';page.write_text(body)
+            # The real-provider public revision boundary must finish the bound
+            # semantic check before proceeding to unrelated release stages.
+            with patch('harness.web_fetch.report_check.check_language_contract',side_effect=FollowingReleaseStage) as following:
+                with self.assertRaises(FollowingReleaseStage):
+                    check_revision(root,authority_root=Path(__file__).resolve().parents[1])
+                following.assert_called_once()
+            page.write_text(body.replace('data-browser-interface="moli"','data-missing-interface="moli"',1))
+            with patch('harness.web_fetch.report_check.check_language_contract') as following:
+                with self.assertRaisesRegex(ValueError,'interface matrix'):
+                    check_revision(root,authority_root=Path(__file__).resolve().parents[1])
+                following.assert_not_called()
+
+    def test_network_disclosure_uses_recorded_modes_and_separates_service_network(self):
+        from harness.web_fetch.report_explainer import _browser_network_rows
+        records = [
+            {'provider': 'moli', 'provider_metadata': {
+                'dns_mode': 'public_doh', 'system_dns_fallback': False}},
+            {'provider': 'moli', 'provider_metadata': {
+                'dns_mode': 'public_doh', 'system_dns_fallback': False}},
+            {'provider': 'chromium', 'provider_metadata': {
+                'dns_mode': 'public_doh', 'secure_dns_mode': 'strict',
+                'system_dns_fallback': False}},
+            {'provider': 'lightpanda', 'provider_metadata': {}},
+            {'provider': 'kitesurf', 'provider_metadata': {'dns_mode': 'public_doh'}},
+        ]
+        rows = {row['provider']: row for row in _browser_network_rows(
+            records, ['moli', 'chromium', 'lightpanda', 'kitesurf'])}
+        self.assertEqual(rows['moli']['mode'], 'public_doh')
+        self.assertIn('不回退系统 DNS', rows['moli']['text'])
+        self.assertIn('不保证', rows['moli']['text'])
+        self.assertEqual(rows['chromium']['mode'], 'public_doh')
+        self.assertIn('严格安全 DNS 配置', rows['chromium']['text'])
+        self.assertEqual(rows['lightpanda']['mode'], 'unknown')
+        self.assertEqual(rows['kitesurf']['mode'], 'service_network')
+        self.assertIn('托管网络', rows['kitesurf']['text'])
+
+    def test_release_rejects_wrong_highlights_values_and_missing_evidence(self):
+        from harness.web_fetch.report_explainer import render_explainer, check_current_browser_article
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            body=render_explainer(root,cases,rows,content_binding=binding)
+            page=root/'guide/index.html';page.write_text(body)
+            changes=[body.replace(' data-winner="true"','',1),
+                     body.replace('data-value="0.5"','data-value="0.9"',1),
+                     body.replace('data-browser-error="moli"','data-removed="moli"',1),
+                     body.replace('../attempts/moli__risk-case.html','../attempts/absent.html',1),
+                     body.replace('data-count="1"','data-count="9"',1),
+                     body.replace('data-browser-interface="moli"','data-removed-interface="moli"',1),
+                     body.replace('data-network-method="moli"','data-removed-network="moli"',1),
+                     body.replace('data-network-mode="public_doh"','data-network-mode="system"',1),
+                     body.replace('public_doh 2 次','public_doh 9 次',1),
+                     body.replace('其中 2 次明确记录不回退系统 DNS','其中 1 次明确记录不回退系统 DNS',1),
+                     body.replace('data-case-count="1"','data-case-count="9"',1),
+                     body.replace('1 题：接口未记录','1 题：共同转换',1),
+                     body.replace('data-browser-wait=','data-removed-wait=',1)]
+            for changed in changes:
+                with self.subTest(change=changes.index(changed)):
+                    page.write_text(changed)
+                    with self.assertRaises(ValueError):check_current_browser_article(root,cases,rows,binding)
+            page.write_text(body)
+            (root/'attempts/moli__risk-case.html').unlink()
+            with self.assertRaisesRegex(ValueError,'target is broken'):
+                check_current_browser_article(root,cases,rows,binding)
+
+    def test_new_content_cannot_hide_incomplete_matrix_or_changed_measurements(self):
+        from harness.web_fetch.report_explainer import render_explainer, _digest, _headless_article_input
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);cases,rows,binding=self.example(root)
+            changed=deepcopy(rows);changed[0]['elapsed_ms']=100
+            with self.assertRaisesRegex(ValueError,'evidence changed'):
+                render_explainer(root,cases,changed,content_binding=binding)
+            p=root/binding['path'];content=json.loads(p.read_text())
+            content['evidence_sha256']=_digest(_headless_article_input(cases,rows[:-1],['moli','lightpanda']))
+            p.write_text(json.dumps(content));binding['sha256']=hashlib.sha256(p.read_bytes()).hexdigest()
+            with self.assertRaisesRegex(ValueError,'complete declared matrix'):
+                render_explainer(root,cases,rows[:-1],content_binding=binding)
+
+    def test_public_builder_materializes_bound_prose_and_preserves_scores(self):
+        from harness.web_fetch.config import load_dataset
+        from harness.web_fetch.providers.fixture import FixtureProvider
+        from harness.web_fetch.runner import run_evaluation
+        from harness.web_fetch.report_build import build_report
+        from harness.web_fetch.report_explainer import _digest, _headless_article_input, check_current_browser_article
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);source=root/'evidence';report=root/'report'
+            dataset={'schema_version':1,'id':'synthetic-browser-cohort','name':'Synthetic cohort',
+                     'tool':'web_fetch','cases':[
+                         {'id':cid,'name':cid+'\u2028正文\u0085保留','category':'test','track':track,
+                          'url':'https://example.com/'+cid,'expected_any':['Expected body'],
+                          'required_facts':[{'id':'body','label':'正文','alternatives':['Expected body']}],
+                          'source_verification':{'selector':'main'},
+                          'source_benchmark':{'stable_annotation':{
+                              'anchor_evidence':'sources/retired-qualification.txt',
+                              'anchor_evidence_sha256':'0'*64}}}
+                         for cid,track in [('web-case','web'),('risk-case','risk_control')]],
+                     'coverage_plan':{'web':['moli','lightpanda'],'risk_control':['moli','lightpanda']},
+                     'comparison':{'kind':'synthetic_browser_report','require_independent_result_review':False,
+                         'timeout_seconds':5,'runs_per_case':1,'concurrency':1,'conversion':'offline fixture',
+                         'reference_binding_mode':'frozen_task_contracts','publication_state':'verified',
+                         'unverified_reference_cases':[]}}
+            input_path=root/'dataset.json';input_path.write_text(json.dumps(dataset))
+            configuration=root/'providers.json';configuration.write_text('{}')
+            metadata,cases=load_dataset(input_path)
+            rows,_=run_evaluation(output_dir=source,dataset_meta=metadata,dataset_path=input_path,
+                                 cases=cases,providers=[FixtureProvider('moli',{'type':'fixture','fail_cases':['risk-case']}),
+                                                       FixtureProvider('lightpanda',{'type':'fixture'})],
+                                 provider_config_path=configuration,runs=1,timeout=5,delay=0)
+            measured=json.loads((source/'dataset.json').read_text());case_map={c['id']:c for c in measured['cases']}
+            content={'schema':'webfetch_browser_interpretation/1',
+                     'evidence_sha256':_digest(_headless_article_input(case_map,rows,['moli','lightpanda'])),
+                     'title':'新一轮浏览器结果','intro':'统一规则的合成测试。',
+                     'scoring':'正文必须满足题目要求。','conclusions':'完整比较所有调用。',
+                     'providers':{name:{'specimen_case_id':'risk-case','explanation':'展示实际调用及程序验收结果。'} for name in ['moli','lightpanda']}}
+            content_path=source/'report-assets/content.json';content_path.parent.mkdir();content_path.write_text(json.dumps(content,ensure_ascii=False))
+            binding={'path':'report-assets/content.json','sha256':hashlib.sha256(content_path.read_bytes()).hexdigest()}
+            self.bind_failure_review(source,case_map,rows,binding)
+            provenance=source/'implementation-provenance.json'
+            provenance.write_text(json.dumps({'schema_version':1,'implementations':[
+                {'provider':'moli','binary_sha256':'synthetic','version':'synthetic'}]}))
+            measured['comparison']['implementation_provenance']={
+                'path':'implementation-provenance.json','sha256':hashlib.sha256(provenance.read_bytes()).hexdigest()}
+            measured['comparison']['report_interpretation']=binding
+            (source/'dataset.json').write_text(json.dumps(measured))
+            before=(source/'results.jsonl').read_bytes()
+            build_report(source,report)
+            self.assertEqual((report/'results.jsonl').read_bytes(),before)
+            analysis=(report/'analysis/index.html').read_text()
+            self.assertNotIn('已核验判定',analysis,
+                             'A machine-only cohort must not claim independently reviewed verdicts')
+            self.assertIn('程序判定',analysis)
+            self.assertEqual((report/binding['path']).read_bytes(),content_path.read_bytes())
+            self.assertEqual((report/'report-assets/failures.json').read_bytes(),(source/'report-assets/failures.json').read_bytes())
+            self.assertEqual((report/'report-assets/delivery.png').read_bytes(),(source/'report-assets/delivery.png').read_bytes())
+            failed=next(row for row in rows if not row['ok'])
+            self.assertIn('失败原因专题核验',(report/'attempts'/f"{failed['attempt_id']}.html").read_text())
+            self.assertEqual((report/'implementation-provenance.json').read_bytes(),provenance.read_bytes())
+            check_current_browser_article(report,case_map,rows,binding)
+            from bs4 import BeautifulSoup
+            offline=BeautifulSoup((report/'guide/article.html').read_text(),'html.parser')
+            self.assertFalse(offline.select('script,link[rel="stylesheet"]'))
+            for anchor in offline.select('a[href]'):
+                self.assertTrue(anchor['href'].startswith(('http://','https://','#')))
+                if anchor['href'].startswith('#'):
+                    self.assertIsNotNone(offline.find(id=anchor['href'][1:]))
+            for row in rows:
+                if row['case_id']=='risk-case':
+                    detail=offline.find(id='offline-result-'+row['attempt_id'])
+                    self.assertIsNotNone(detail)
+                    self.assertIn(row['attempt_id'],detail.get_text())
+            self.assertIn('新一轮浏览器结果',(report/'index.html').read_text())
+            home=(report/'index.html').read_text()
+            self.assertLess(home.index('id="overall-ranking"'),home.index('id="overview"'))
+            self.assertNotIn('达标率',(report/'datasets/index.html').read_text())
+            self.assertNotIn('全部方法执行结果',(report/'datasets/risk-case.html').read_text())
+            self.assertIn('../analysis/index.html#inspect?query=risk-case',(report/'datasets/risk-case.html').read_text())
+            self.assertIn('查看各方法执行结果',(report/'datasets/risk-case.html').read_text())
+            self.assertNotIn('其余六种方法',(report/'accounts/index.html').read_text())
+            self.assertTrue('Moli 1.1.1 的普通网页' not in (report/'adoption/index.html').read_text(),'Measured-method introduction retained an old generic version')
+
+            # Exercise the published CLI and release gate with a compact profile,
+            # without duplicating complete task/reference content into Git.
+            import subprocess, sys
+            from harness.web_fetch.storage import frozen_input_bindings
+            manifest=json.loads((source/'manifest.json').read_text())
+            (source/'execution.json').write_text(json.dumps({'batches':[manifest]}))
+            profile={'schema_version':1,'dataset_id':measured['id'],
+                     'comparison_kind':measured['comparison']['kind'],'case_count':2,
+                     'case_ids_sha256':hashlib.sha256(json.dumps([c['id'] for c in measured['cases']],
+                         separators=(',',':'),ensure_ascii=True).encode()).hexdigest(),
+                     'providers':['moli','lightpanda'],
+                     **{k:v for k,v in measured['comparison'].items() if k!='kind'},
+                     'case_inventory':{track:[c['id'] for c in measured['cases'] if c['track']==track]
+                                       for track in ['web','risk_control']},
+                     'frozen_inputs':frozen_input_bindings(source)}
+            repository=Path(__file__).resolve().parents[1]
+            with tempfile.TemporaryDirectory(prefix='report-profile-test-',dir=repository/'evaluation') as profile_dir:
+                profile_path=Path(profile_dir)/'current-report.json'
+                measured['comparison']['reproduction_profile']=profile_path.relative_to(repository).as_posix()
+                measured['comparison']['report_output']='reports/synthetic-browser'
+                (source/'dataset.json').write_text(json.dumps(measured))
+                profile['frozen_inputs']=frozen_input_bindings(source)
+                profile_path.write_text(json.dumps(profile))
+                cli_report=root/'cli-report'
+                build=subprocess.run([sys.executable,'scripts/build_report.py','--profile',str(profile_path),
+                                      '--evidence',str(source),'--output',str(cli_report),'--language','zh'],
+                                     cwd=repository,capture_output=True,text=True)
+                self.assertEqual(build.returncode,0,build.stderr)
+                self.assertIn('新一轮浏览器结果',(cli_report/'index.html').read_text())
+                self.assertIn('data-english-not-generated',(cli_report/'en/index.html').read_text())
+                gate=subprocess.run([sys.executable,'scripts/check_report.py',str(cli_report),
+                                     '--profile',str(profile_path)],cwd=repository,capture_output=True,text=True)
+                self.assertEqual(gate.returncode,0,gate.stderr+gate.stdout)
+                revision_gate=subprocess.run([sys.executable,'scripts/check_report_revision.py',str(cli_report)],
+                                             cwd=repository,capture_output=True,text=True)
+                self.assertEqual(revision_gate.returncode,0,revision_gate.stderr+revision_gate.stdout)
+                self.assertIn(measured['comparison']['reproduction_profile'],(cli_report/'reproduce/index.html').read_text())
+                manifest_path=cli_report/'report-manifest.json';original_manifest=manifest_path.read_bytes()
+                for mutation in ('renderer','dataset_sha256'):
+                    manifest=json.loads(original_manifest)
+                    if mutation=='renderer':manifest['template']['renderer']='copied_renderer.py'
+                    else:manifest['dataset_sha256']='0'*64
+                    manifest_path.write_text(json.dumps(manifest))
+                    rejected=subprocess.run([sys.executable,'scripts/check_report.py',str(cli_report),
+                                             '--profile',str(profile_path)],cwd=repository,capture_output=True,text=True)
+                    self.assertNotEqual(rejected.returncode,0)
+                manifest_path.write_bytes(original_manifest)
+            content_path.write_text('{}')
+            with self.assertRaisesRegex(ValueError,'differs from binding'):
+                build_report(source,root/'tampered-report')
+            self.assertFalse((root/'tampered-report').exists())
diff --git a/tests/test_headless_review.py b/tests/test_headless_review.py
index dee974a5c..714ce9a91 100644
--- a/tests/test_headless_review.py
+++ b/tests/test_headless_review.py
@@ -16,6 +16,34 @@
 
 
 class HeadlessReviewTests(unittest.TestCase):
+    def test_navigation_transport_failures_keep_specific_error_types(self):
+        from types import SimpleNamespace
+
+        cases = [
+            ('Page.goto: net::ERR_CONNECTION_CLOSED at https://example.com/', 'network'),
+            ('Page.goto: net::ERR_NAME_NOT_RESOLVED at https://example.com/', 'dns'),
+            ('Page.goto: net::ERR_CONNECTION_TIMED_OUT at https://example.com/', 'timeout'),
+            ('Page.goto: net::ERR_CERT_AUTHORITY_INVALID at https://example.com/', 'browser_error'),
+            ('Page.goto: net::ERR_BLOCKED_BY_CLIENT at https://example.com/', 'browser_error'),
+            ('Page.evaluate: net::ERR_CONNECTION_CLOSED', 'browser_error'),
+        ]
+        for message, expected in cases:
+            with self.subTest(message=message):
+                page = SimpleNamespace(goto=lambda *a, **kw: (_ for _ in ()).throw(RuntimeError(message)))
+                context = SimpleNamespace(new_page=lambda: page)
+                browser = SimpleNamespace(version='fixture', new_context=lambda **kw: context, close=lambda: None)
+                class Driver:
+                    def __enter__(self):
+                        return SimpleNamespace(chromium=SimpleNamespace(launch=lambda **kw: browser))
+                    def __exit__(self, *args):
+                        return False
+                with patch.dict(sys.modules, {'playwright.sync_api': SimpleNamespace(sync_playwright=Driver)}):
+                    result = fetch({'engine': 'chromium', 'binary': '/fixture',
+                                    'url': 'https://example.com/', 'timeout': 1})
+                self.assertFalse(result['ok'])
+                self.assertEqual(result['error_type'], expected)
+                self.assertIn(message, result['error_message'])
+
     def test_postcheck_uses_case_track_coverage(self):
         dataset = {'coverage_plan': {'web': ['web-p'], 'resources': ['resource-p']}}
         self.assertEqual(expected_providers(dataset, {'track': 'resources'}), {'resource-p'})
diff --git a/tests/test_headless_runner.py b/tests/test_headless_runner.py
index 6426adbdf..3d16b903d 100644
--- a/tests/test_headless_runner.py
+++ b/tests/test_headless_runner.py
@@ -157,6 +157,9 @@ def experiment(tmp_path, monkeypatch):
     SyntheticBrowser.calls = []
     monkeypatch.setattr(runner, "build_provider", SyntheticBrowser)
     monkeypatch.setattr(runner, "load_runtime_env", lambda *args: None)
+    # These providers never access a network; DNS is a controlled public fixture.
+    monkeypatch.setattr('socket.getaddrinfo', lambda *args, **kwargs:
+        [(2, 1, 6, '', ('93.184.216.34', 443))])
 
     def run(payload, *extra):
         config.write_text(json.dumps(payload))
@@ -196,6 +199,14 @@ def test_custom_registry_defaults_to_its_methods_and_retains_true_input_identity
     assert manifest["provider_config_source"] == config.name
 
 
+def test_headless_runner_rejects_native_web_fetch_provider_before_execution(experiment):
+    run, _, _, output = experiment
+    with pytest.raises(SystemExit):
+        run({"providers": {"moli": {"type": "moli_webfetch"}}})
+    assert SyntheticBrowser.calls == []
+    assert not output.exists()
+
+
 def test_headless_run_copies_references_only_for_selected_tasks(experiment):
     run, dataset, _, output = experiment
     files = {
@@ -409,7 +420,10 @@ def test_native_command_runs_a_custom_binary_and_preserves_its_identity(tmp_path
     completed = subprocess.run(
         [
             sys.executable,
-            str(runner.ROOT / "scripts/run_headless_benchmark.py"),
+            '-c',
+            "import runpy; from unittest.mock import patch; "
+            "dns = patch('socket.getaddrinfo', return_value=[(2,1,6,'',('93.184.216.34',443))]); "
+            "dns.start(); runpy.run_path(" + repr(str(runner.ROOT / "scripts/run_headless_benchmark.py")) + ", run_name='__main__')",
             "--dataset",
             str(dataset),
             "--config",
@@ -518,7 +532,9 @@ def test_synthetic_inputs_remain_non_release_after_selection_and_native_calls(tm
     env.write_text('')
     output = tmp_path / 'measured'
     result = subprocess.run([sys.executable, '-c',
-        'from harness.web_fetch.headless_runner import main; main()', '--dataset', str(tasks),
+        "from unittest.mock import patch; "
+        "dns = patch('socket.getaddrinfo', return_value=[(2,1,6,'',('93.184.216.34',443))]); "
+        "dns.start(); from harness.web_fetch.headless_runner import main; main()", '--dataset', str(tasks),
         '--config', str(methods), '--env-file', str(env), '--output', str(output)],
         text=True, capture_output=True)
     assert result.returncode == 0, result.stdout + result.stderr
@@ -530,3 +546,24 @@ def test_synthetic_inputs_remain_non_release_after_selection_and_native_calls(tm
     with pytest.raises(ValueError, match='Diagnostic'):
         build(output, tmp_path / 'published.zip')
     assert not (tmp_path / 'published.zip').exists()
+
+
+def test_shipped_cohorts_keep_portable_dns_through_public_boundaries():
+    from types import SimpleNamespace
+    from unittest.mock import MagicMock, patch
+    from harness.web_fetch.config import load_provider_settings
+    from harness.web_fetch.providers import build_provider
+    from harness.web_fetch.network_preflight import preflight_guarded_providers
+    settings = load_provider_settings(runner.ROOT/'configs/providers.headless.json')
+    for resource in (False, True):
+        _, cohort, configs = runner.select_cohort(settings, resource=resource)
+        providers = [build_provider(name, config) for name, config in configs.items()]
+        with patch('harness.web_fetch.network_preflight.inspect_system_dns', return_value={'hosts': []}):
+            assert preflight_guarded_providers(providers, [SimpleNamespace(url='https://example.com/')])['dns_mode'] == 'system'
+        if resource:
+            for name, config in configs.items():
+                provider = build_provider(name, {**config, 'resource_sample_interval_ms':100,
+                    'resource_container_image':cohort['resource_container_image']})
+                with patch.object(provider, '_resource_runner', return_value=MagicMock()), patch.object(
+                    provider, 'implementation_identity', return_value={'reported_version':'moli 1.1.1'}):
+                    assert provider.validate() == []
diff --git a/tests/test_interrupted_evidence.py b/tests/test_interrupted_evidence.py
new file mode 100644
index 000000000..06758af8a
--- /dev/null
+++ b/tests/test_interrupted_evidence.py
@@ -0,0 +1,143 @@
+from dataclasses import asdict
+import json
+from pathlib import Path
+import tempfile
+import unittest
+
+from harness.web_fetch.models import EvalCase
+from harness.web_fetch.providers.fixture import FixtureProvider
+from harness.web_fetch.runner import run_evaluation
+from harness.web_fetch.evidence import project_provider_run
+
+
+class InterruptedEvidenceTests(unittest.TestCase):
+    def setUp(self):
+        self.temp = tempfile.TemporaryDirectory()
+        self.addCleanup(self.temp.cleanup)
+        self.root = Path(self.temp.name)
+        self.source = self.root / "interrupted"
+        cases = [EvalCase(id=name, name=name, url="https://example.test/" + name,
+                         category="web", expected_any=["anchor"])
+                 for name in ("pass", "fail", "pending")]
+        dataset = {"tool": "web_fetch", "cases": [asdict(case) for case in cases],
+                   "coverage_plan": {"web": ["fixture"]}}
+        path = self.root / "input.json"
+        path.write_text(json.dumps(dataset))
+        config = self.root / "providers.json"
+        config.write_text(json.dumps({"providers": {"fixture": {"type": "fixture"}}}))
+        run_evaluation(output_dir=self.source, dataset_meta=dataset, dataset_path=path,
+                       cases=cases, providers=[FixtureProvider("fixture", {"type": "fixture", "fail_cases": ["fail"]})],
+                       provider_config_path=config, runs=1, timeout=1, delay=0)
+        self.rows = [json.loads(line) for line in (self.source / "results.jsonl").read_text().split("\n") if line]
+        self.rows = self.rows[:2]
+        (self.source / "results.jsonl").write_text("".join(json.dumps(row) + "\n" for row in self.rows))
+        manifest = json.loads((self.source / "manifest.json").read_text())
+        for key in ("completed_at", "attempt_ids", "attempt_count"):
+            manifest.pop(key)
+        (self.source / "manifest.json").write_text(json.dumps(manifest))
+        self.original = {str(p.relative_to(self.source)): p.read_bytes()
+                         for p in self.source.rglob("*") if p.is_file()}
+
+    def test_recovers_every_saved_pass_and_failure_without_calls_or_source_mutation(self):
+        output = self.root / "retained"
+        project_provider_run(self.source, output, "fixture", retain_completed=True)
+        rows = [json.loads(line) for line in (output / "results.jsonl").read_text().split("\n") if line]
+        self.assertEqual(rows, self.rows)
+        self.assertEqual([row["ok"] for row in rows], [True, False])
+        self.assertEqual({str(p.relative_to(self.source)): p.read_bytes()
+                          for p in self.source.rglob("*") if p.is_file()}, self.original)
+        batch = json.loads((output / "execution.json").read_text())["batches"][0]
+        self.assertEqual(batch["attempt_ids"], [row["attempt_id"] for row in rows])
+        self.assertEqual(batch["recovery"]["original_batch_completed"], False)
+        self.assertEqual(batch["recovery"]["pending_logical_results"], 1)
+        self.assertEqual(batch["completed_at"], rows[-1]["completed_at"])
+
+    def test_rejects_changed_input_configuration_log_or_output(self):
+        for kind in ("input", "config", "log", "output", "identity"):
+            with self.subTest(kind=kind):
+                manifest = json.loads((self.source / "manifest.json").read_text())
+                if kind == "input": target = Path(manifest["dataset"]["source"])
+                elif kind == "config": target = Path(manifest["provider_config_source"])
+                elif kind == "output": target = self.source / self.rows[0]["artifact_path"]
+                elif kind == "log": target = self.source / self.rows[0]["provider_metadata"]["call_log"]["path"]
+                else: target = self.source / "results.jsonl"
+                before = target.read_bytes()
+                if kind == "identity":
+                    changed = json.loads(json.dumps(self.rows))
+                    changed[0]["attempt_id"] = "fixture__other__r001"
+                    target.write_text("".join(json.dumps(row) + "\n" for row in changed))
+                else: target.write_bytes(before + b" ")
+                try:
+                    with self.assertRaises(ValueError):
+                        project_provider_run(self.source, self.root / kind, "fixture", retain_completed=True)
+                finally: target.write_bytes(before)
+
+    def test_recovery_cannot_select_only_passing_cases(self):
+        with self.assertRaises(ValueError):
+            project_provider_run(self.source, self.root / "selected", "fixture", case_ids={"pass"}, retain_completed=True)
+
+
+class ProviderAssemblyReviewPolicyTests(unittest.TestCase):
+    def test_adding_a_provider_preserves_the_declared_review_policy(self):
+        from harness.web_fetch.assembly import assemble
+        for required in (False, True):
+            with self.subTest(required=required), tempfile.TemporaryDirectory() as directory:
+                root = Path(directory)
+                case = EvalCase(id="a", name="A", url="https://example.test/a",
+                                category="web", expected_any=["anchor"])
+                runs = []
+                for provider in ("fixture", "peer"):
+                    dataset = {"tool": "web_fetch", "cases": [asdict(case)],
+                               "comparison": {"require_independent_result_review": required},
+                               "coverage_plan": {"web": [provider]}}
+                    path = root / (provider + ".json")
+                    path.write_text(json.dumps(dataset))
+                    config = root / (provider + "-config.json")
+                    config.write_text(json.dumps({"providers": {provider: {"type": "fixture"}}}))
+                    output = root / provider
+                    run_evaluation(output_dir=output, dataset_meta=dataset, dataset_path=path,
+                                   cases=[case], providers=[FixtureProvider(provider, {"type": "fixture"})],
+                                   provider_config_path=config, runs=1, timeout=1, delay=0)
+                    (output / "sources").mkdir()
+                    (output / "list-references").mkdir()
+                    runs.append(output)
+                target = root / "assembled"
+                assemble(runs[0], root / "unused", [], target, provider_additions=[runs[1]])
+                from harness.web_fetch.artifacts import verify_record_public_call_logs
+                from harness.record_io import parse_jsonl
+                for row in parse_jsonl((target / 'results.jsonl').read_bytes()):
+                    verify_record_public_call_logs(target, row)
+                saved = json.loads((target / "dataset.json").read_text())
+                self.assertEqual(saved["comparison"]["require_independent_result_review"], required)
+                self.assertEqual(saved["coverage_plan"], {"web": ["fixture", "peer"]})
+
+
+class CaseAssemblyExecutionBatchTests(unittest.TestCase):
+    def test_case_addition_retains_every_certified_batch_and_call_log(self):
+        from harness.web_fetch.assembly import assemble
+        from harness.record_io import parse_jsonl
+        from harness.web_fetch.artifacts import verify_record_public_call_logs
+        with tempfile.TemporaryDirectory() as directory:
+            root=Path(directory);runs=[]
+            for cid in ('first','second'):
+                case=EvalCase(id=cid,name=cid,url='https://example.test/'+cid,category='web',expected_any=['anchor'])
+                dataset={'tool':'web_fetch','cases':[asdict(case)],
+                         'comparison':{'require_independent_result_review':False},
+                         'coverage_plan':{'web':['fixture','peer']}}
+                path=root/(cid+'.json');path.write_text(json.dumps(dataset))
+                config=root/(cid+'-config.json');config.write_text('{}')
+                output=root/cid
+                run_evaluation(output_dir=output,dataset_meta=dataset,dataset_path=path,cases=[case],
+                               providers=[FixtureProvider(n,{'type':'fixture'}) for n in ['fixture','peer']],
+                               provider_config_path=config,runs=1,timeout=1,delay=0)
+                manifest=json.loads((output/'manifest.json').read_text())
+                (output/'execution.json').write_text(json.dumps({'batches':[manifest]}))
+                (output/'manifest.json').unlink()
+                (output/'sources').mkdir();(output/'list-references').mkdir();runs.append(output)
+            target=root/'assembled'
+            assemble(runs[0],root/'unused',[],target,additions=[runs[1]])
+            rows=parse_jsonl((target/'results.jsonl').read_bytes())
+            self.assertEqual({(r['case_id'],r['provider']) for r in rows},
+                             {(cid,p) for cid in ('first','second') for p in ('fixture','peer')})
+            self.assertEqual(len(json.loads((target/'execution.json').read_text())['batches']),2)
+            for row in rows:verify_record_public_call_logs(target,row)
diff --git a/tests/test_jsonl_evidence.py b/tests/test_jsonl_evidence.py
new file mode 100644
index 000000000..4c59d8fa5
--- /dev/null
+++ b/tests/test_jsonl_evidence.py
@@ -0,0 +1,18 @@
+import json
+import unittest
+
+from harness.record_io import parse_jsonl
+
+
+class JsonlEvidenceTests(unittest.TestCase):
+    def test_unicode_content_survives_physical_line_boundaries(self):
+        rows = [{"text": "正文" + separator + "保留", "index": index}
+                for index, separator in enumerate(("\u0085", "\u2028", "\u2029", "\v", "\f"))]
+        raw = "\n".join(json.dumps(row, ensure_ascii=False) for row in rows) + "\n"
+        for payload in (raw, raw.encode("utf-8"), raw.replace("\n", "\r\n")):
+            with self.subTest(kind=type(payload).__name__):
+                self.assertEqual(parse_jsonl(payload), rows)
+
+    def test_malformed_record_is_rejected_without_discarding_it(self):
+        with self.assertRaises(json.JSONDecodeError):
+            parse_jsonl('{"case":"a"}\ninvalid\n')
diff --git a/tests/test_local_audit.py b/tests/test_local_audit.py
index c8794a330..1f1df472f 100644
--- a/tests/test_local_audit.py
+++ b/tests/test_local_audit.py
@@ -181,7 +181,8 @@ def test_local_audit_requires_complete_inventory_and_review_lineage(tmp_path, mo
         local_audit.require_local_audit(source, dataset, [record])
 
 
-def test_new_local_matrix_is_complete_and_keeps_logs_without_claiming_review(tmp_path, monkeypatch):
+@pytest.mark.parametrize("include_english,primary_language", [(False,"zh"), (True,"zh"), (True,"en")])
+def test_new_local_matrix_is_complete_and_keeps_logs_without_claiming_review(tmp_path, monkeypatch, include_english, primary_language):
     from pathlib import Path
     from harness.web_fetch.config import load_dataset
     from harness.web_fetch.providers import build_provider
@@ -230,7 +231,7 @@ def test_new_local_matrix_is_complete_and_keeps_logs_without_claiming_review(tmp
     monkeypatch.setattr(local_audit, "ROOT", tmp_path / "repo")
     assert local_audit.require_local_audit(evidence, dataset, records) is None
     output = tmp_path / "report"
-    build_report(evidence, output, local_audit=True)
+    build_report(evidence, output, local_audit=True, include_english=include_english)
     home = (output / "index.html").read_text()
     assert "本地实测版" in home
     assert "1 个案例 · 1 次调用，机器判分。" in home
@@ -267,6 +268,8 @@ def test_new_local_matrix_is_complete_and_keeps_logs_without_claiming_review(tmp
     assert "Actions" not in page
     assert "Actions" in provider_page_body("firecrawl", method_records, method_cases, [], [])
 
+    from harness.report_languages import select_report_language
+    select_report_language(output, primary_language)
     # Explanatory edits of a historical snapshot must preserve every measured
     # byte, even after the repository scorer has moved on.
     from harness.web_fetch.report_build import refresh_local_presentation
@@ -304,6 +307,8 @@ def interrupted_swap(path, target):
     allowed = {"index.html", "methodology/index.html", "adoption/index.html",
                "reproduce/index.html", "changes/index.html", "providers/fixture.html",
                "adoption/interfaces/fixture.json", "report-manifest.json"}
+    if include_english:
+        allowed.update('en/' + path for path in list(allowed) if path.endswith('.html'))
     for relative, digest in before.items():
         if relative not in allowed:
             assert _digest(output / relative) == digest
diff --git a/tests/test_markdown.py b/tests/test_markdown.py
index 0914b6a22..d34731543 100644
--- a/tests/test_markdown.py
+++ b/tests/test_markdown.py
@@ -30,3 +30,33 @@ def test_converter_rejects_absent_or_wrong_dependency_without_using_another_copy
         (tmp_path / 'package.json').write_text(json.dumps({'version': version}))
     with pytest.raises(ValueError, match='node-html-markdown 2.0.0'):
         require_converter(str(tmp_path))
+
+
+@pytest.mark.parametrize('markup', ['<script setup>', '<span data-value="literal">'])
+def test_converter_keeps_literal_markup_in_link_labels_and_prose(tmp_path, markup):
+    from html import escape
+    from harness.web_fetch.scoring import score_attempt
+    from harness.web_fetch.metrics import task_passed
+
+    package = require_converter(str(DEFAULT_PACKAGE))
+    literal = escape(markup)
+    html = (f'<p>Syntax: {literal}</p>'
+            f'<a href="https://example.test/syntax">{literal}</a>'
+            '<p>Following explanation remains readable.</p>'
+            '<span data-secret="not reader text">Visible text</span>')
+    result = subprocess.run(converter_command(package), input=html, text=True,
+                            capture_output=True, check=True, cwd=tmp_path)
+    case = {'url': 'https://example.test/', 'required_facts': [
+        {'id': 'following-prose', 'alternatives': ['Following explanation remains readable.']},
+        {'id': 'literal-syntax', 'alternatives': [markup]},
+    ]}
+    assert task_passed(True, score_attempt(case, result.stdout.encode(), ok=True))
+    assert 'not reader text' not in result.stdout
+
+
+def test_converter_keeps_fenced_literal_code_without_prose_escaping(tmp_path):
+    package = require_converter(str(DEFAULT_PACKAGE))
+    html = '<pre><code class="language-html">&lt;span&gt;Example&lt;/span&gt;</code></pre>'
+    result = subprocess.run(converter_command(package), input=html, text=True,
+                            capture_output=True, check=True, cwd=tmp_path)
+    assert '```html\n<span>Example</span>\n```' in result.stdout
diff --git a/tests/test_metrics.py b/tests/test_metrics.py
index e96d8a154..f3aca9989 100644
--- a/tests/test_metrics.py
+++ b/tests/test_metrics.py
@@ -2,7 +2,7 @@
 
 from harness.web_fetch.metrics import (
     evaluate_content, evaluate_resources, normalize_for_match,
-    normalize_resource_url, summarize, word_overlap,
+    normalize_resource_url, summarize, task_passed, word_overlap,
 )
 
 
@@ -14,6 +14,38 @@ def test_html_required_pattern_counts_only_visible_prose(self):
         self.assertFalse(evaluate_content(hidden, [], required_patterns=rule)["content_pass"])
         self.assertTrue(evaluate_content(visible, [], required_patterns=rule)["content_pass"])
 
+    def test_required_result_section_remains_an_acceptance_gate_with_stable_rules(self):
+        contract = {
+            "version": 1,
+            "schema": "body_text",
+            "minimum_records": 0,
+            "stable_text_anchors": [{
+                "id": "page-section",
+                "alternatives": ["Result"],
+            }],
+        }
+        rules = [{
+            "id": "rendered-result",
+            "pattern": r"(?is)\bResult\b\s+(?!Loading\b).*?\bName\b.*?\bJohn\b",
+        }]
+        loading = evaluate_content(
+            "const rows = ['John'];\nResult Loading...",
+            [],
+            acceptance_contract=contract,
+            required_patterns=rules,
+        )
+        rendered = evaluate_content(
+            "Result\nName\nJohn",
+            [],
+            acceptance_contract=contract,
+            required_patterns=rules,
+        )
+        self.assertTrue(loading["stable_task_pass"])
+        self.assertFalse(loading["content_pass"])
+        self.assertFalse(task_passed(True, loading, "body"))
+        self.assertTrue(rendered["content_pass"])
+        self.assertTrue(task_passed(True, rendered, "body"))
+
     def test_only_pure_markdown_table_rules_are_layout(self):
         divider = 'December 2007\n| Sun | Mon | Tue |\n| :---- | ---: | --- |'
         self.assertEqual(normalize_for_match(divider), 'december 2007 sun mon tue')
@@ -265,6 +297,29 @@ def test_target_only_image_contract_parses_img_src_and_srcset(self) -> None:
         self.assertEqual(by_url["https://example.test/logo.png"],
                          ["content.html_img_srcset"])
 
+    def test_resource_discovery_reads_only_visible_inline_frame_documents(self) -> None:
+        content = (
+            '<iframe id="result" data-moli-frame-url="about:blank" '
+            'srcdoc="&lt;img src=&quot;pic_trulli.jpg&quot;&gt;"></iframe>'
+            '<iframe style="display:none" srcdoc="&lt;img src=&quot;ad.jpg&quot;&gt;"></iframe>'
+        )
+        result = evaluate_resources(
+            content,
+            {},
+            [{"id": "target", "kind": "image", "urls": ["/html/pic_trulli.jpg"]}],
+            base_url="https://www.w3schools.com/html/tryit.asp?filename=images",
+            output_contract={"candidate_scope": "image_answer_fields", "unexpected": "reject"},
+        )
+        self.assertTrue(result["resource_pass"])
+        self.assertEqual(
+            result["resource_candidate_urls"],
+            ["https://www.w3schools.com/html/pic_trulli.jpg"],
+        )
+        self.assertEqual(
+            result["resource_candidates"][0]["sources"],
+            ["content.frame_html_img"],
+        )
+
     def test_invalid_target_only_contract_fails_closed(self) -> None:
         invalid = (
             ({"candidate_scope": "all", "unexpected": "reject"},
diff --git a/tests/test_moli_provider.py b/tests/test_moli_provider.py
index 20ad08893..5e88da992 100644
--- a/tests/test_moli_provider.py
+++ b/tests/test_moli_provider.py
@@ -1,6 +1,5 @@
 import base64
 import hashlib
-import json
 import os
 import sys
 import tempfile
@@ -147,11 +146,11 @@ def test_committed_nonredirect_post_and_get_preserve_same_document_identity(self
                 self.assertTrue(task_passed(True,metrics,'body'))
 
     def test_resource_route_enumerates_bounded_same_origin_frame_documents(self):
-        from harness.web_fetch.providers.moli import _RESOURCE_PAGE_EXPRESSION
+        from harness.web_fetch.task_outputs import RESOURCE_PAGE_EXPRESSION
 
-        self.assertIn("frame.contentDocument", _RESOURCE_PAGE_EXPRESSION)
-        self.assertIn("roots.length < 16", _RESOURCE_PAGE_EXPRESSION)
-        self.assertNotIn("pic_trulli", _RESOURCE_PAGE_EXPRESSION)
+        self.assertIn("frame.contentDocument", RESOURCE_PAGE_EXPRESSION)
+        self.assertIn("roots.length < 16", RESOURCE_PAGE_EXPRESSION)
+        self.assertNotIn("pic_trulli", RESOURCE_PAGE_EXPRESSION)
 
     def test_cancellation_between_popen_and_handle_registration_is_latched(self):
         import subprocess
@@ -163,8 +162,9 @@ def test_cancellation_between_popen_and_handle_registration_is_latched(self):
 
         def launch(*args, **kwargs):
             process = original(*args, **kwargs)
-            children.append(process)
-            provider.cancel()  # Real child exists but fetch has not received its handle.
+            if args and args[0][0] == str(self.binary):
+                children.append(process)
+                provider.cancel()  # Real child exists but fetch has not received its handle.
             return process
 
         provider.begin_call()
@@ -206,7 +206,8 @@ def test_fixed_native_cli_omits_internal_timers(self):
             "import sys\n"
             "assert not {'--timeout', '--http-timeout', '--http-connect-timeout', '--eval'} & set(sys.argv)\n"
             "assert sys.argv[sys.argv.index('--dump') + 1] == 'markdown'\n"
-            "assert '--dump' in sys.argv and '--http-max-response-size' in sys.argv\n"
+            "assert '--layout' not in sys.argv and '--with-frames' not in sys.argv\n"
+            "assert '--dump' in sys.argv and '--http-max-response-size' not in sys.argv\n"
             "print('complete native answer')\n",
             uniform_native_parameters=True,
         )
@@ -222,15 +223,16 @@ def test_cli_contract_and_diagnostics(self):
         provider = self.provider(
             "import sys\n"
             'expected=["fetch","--dump","markdown","--wait-until","done",'
-            '"--timeout","2000","--http-timeout","2000","--http-connect-timeout","2000",'
-            '"--http-max-response-size","20000000","--block-private-networks",'
+            '"--timeout","40500","--http-timeout","40500",'
+            '"--http-connect-timeout","40500",'
+            '"--block-private-networks",'
             '"https://example.com/?a=1&b=2"]\n'
             "assert sys.argv[1:]==expected\n"
             'print("# Example Domain")\n'
             'print("diagnostic only",file=sys.stderr)\n'
         )
         self.assertEqual(provider.validate(), [])
-        result = provider.fetch(self.case, 2)
+        result = provider.fetch(self.case, 45)
         self.assertTrue(result.ok)
         self.assertEqual(result.content, "# Example Domain\n")
         self.assertIn("diagnostic only", result.metadata["stderr"])
@@ -239,9 +241,69 @@ def test_cli_contract_and_diagnostics(self):
         self.assertEqual(len(result.metadata["binary_sha256"]), 64)
         self.assertEqual(result.metadata["route"], "ordinary_markdown")
         self.assertEqual(result.metadata["output"], "markdown")
+        self.assertEqual(result.metadata["output_contract"], "markdown")
+        self.assertEqual(result.metadata["extractor"], "moli_native_markdown")
         self.assertEqual(result.metadata["wait"], {"wait_until": "done"})
+        self.assertEqual(result.metadata["http_connect_timeout_ms"], 40_500)
         self.assertTrue(result.metadata["block_private_networks"])
 
+    def test_internal_deadline_preserves_typed_cli_error_before_outer_deadline(self):
+        from harness.web_fetch.call_boundary import fetch_with_deadline
+
+        provider = self.provider(
+            "import sys, time\n"
+            "values = [sys.argv[sys.argv.index(flag) + 1] for flag in "
+            "('--timeout', '--http-timeout', '--http-connect-timeout')]\n"
+            "assert values == ['250', '250', '250'], values\n"
+            "time.sleep(0.27)\n"
+            "print('Error: failed to fetch `https://example.com/?a=1&b=2`\\n' "
+            "      'Reason: fetch readiness timed out after 250 ms while waiting for load', "
+            "file=sys.stderr, flush=True)\n"
+            "raise SystemExit(1)\n"
+        )
+        self.assertEqual(provider.validate(), [])
+
+        result, worker = fetch_with_deadline(provider, self.case, 0.5)
+
+        self.assertFalse(worker.is_alive())
+        self.assertEqual(result.error_type, "timeout")
+        self.assertEqual(result.metadata["exit_code"], 1)
+        self.assertEqual(result.metadata["http_connect_timeout_ms"], 250)
+        self.assertEqual(
+            result.error_message,
+            "Error: failed to fetch `https://example.com/?a=1&b=2`\n"
+            "Reason: fetch readiness timed out after 250 ms while waiting for load\n",
+        )
+
+    def test_outer_deadline_still_stops_cli_that_ignores_internal_deadline(self):
+        from harness.web_fetch.call_boundary import fetch_with_deadline
+
+        provider = self.provider(
+            "import sys, time\n"
+            "values = [sys.argv[sys.argv.index(flag) + 1] for flag in "
+            "('--timeout', '--http-timeout', '--http-connect-timeout')]\n"
+            "assert values == ['250', '250', '250'], values\n"
+            "time.sleep(5)\n"
+            "print('late answer')\n"
+        )
+        self.assertEqual(provider.validate(), [])
+
+        def kill(process):
+            if process is not None and process.poll() is None:
+                process.kill()
+            return True
+
+        with patch(
+            "harness.web_fetch.providers.moli.terminate_owned_process_tree",
+            side_effect=kill,
+        ):
+            result, worker = fetch_with_deadline(provider, self.case, 0.5)
+
+        self.assertEqual(result.error_type, "timeout")
+        self.assertEqual(result.content, "")
+        self.assertFalse(worker.is_alive())
+        self.assertLessEqual(result.metadata["_answer_elapsed_ms"], 550)
+
     def test_ordinary_markdown_exposes_effective_url_from_debug_stderr(self):
         provider = self.provider(
             "import sys\n"
@@ -334,6 +396,38 @@ def test_native_dynamic_uses_markdown_without_generated_wait_or_eval(self):
         self.assertTrue(result.ok)
         self.assertEqual(result.metadata["route"], "dynamic_native_markdown")
 
+    def test_native_wait_override_applies_to_every_page_in_a_family(self):
+        provider = self.provider(
+            "import sys\n"
+            "url = sys.argv[-1]\n"
+            "wait = sys.argv[sys.argv.index('--wait-until') + 1]\n"
+            "assert wait == ('domstable' if '/risk-' in url else 'done')\n"
+            "assert '--wait-selector' not in sys.argv and '--wait-script' not in sys.argv\n"
+            "assert '--eval' not in sys.argv and '--delay-ms' not in sys.argv\n"
+            "print('native page body')\n",
+            wait_until_by_track={"risk_control": "domstable"},
+        )
+        for index in range(2):
+            with self.subTest(index=index):
+                result = provider.fetch(self.case_with(
+                    id=f"risk-{index}", track="risk_control",
+                    url=f"https://example.com/risk-{index}",
+                ), 2)
+                self.assertTrue(result.ok, repr(result))
+                self.assertEqual(result.metadata["wait"]["scope"], "risk_control_task_family")
+                self.assertEqual(result.metadata["wait_until"], "domstable")
+        result = provider.fetch(self.case_with(track="web"), 2)
+        self.assertTrue(result.ok, repr(result))
+        self.assertEqual(result.metadata["wait_until"], "done")
+
+    def test_wait_override_rejects_case_specific_and_invalid_settings(self):
+        for overrides in ({"risk-123": "domstable"}, {"risk_control": "invalid"},
+                          {"risk_control": []}, ["risk_control"]):
+            with self.subTest(overrides=overrides):
+                provider = self.provider("raise AssertionError('must not execute')",
+                                         wait_until_by_track=overrides)
+                self.assertIn("wait_until_by_track", provider.validate())
+
     def test_network_trace_cannot_change_markdown_scoring_route(self):
         provider = self.provider('raise AssertionError("should not run")', trace_network=True)
         self.assertIn(
@@ -363,16 +457,11 @@ def test_private_network_guard_stays_on_for_unknown_host(self):
         self.assertTrue(result.ok, repr(result))
         self.assertFalse(result.metadata["private_network_guard_exception"])
 
-    def test_video_body_uses_generic_answer_free_metadata_extraction(self):
+    def test_video_body_uses_native_markdown_without_metadata_projection(self):
         provider = self.provider(
             "import sys\n"
-            'assert "--eval" in sys.argv and "--dump" not in sys.argv\n'
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "document.title" in expression and "document.body?.innerText" in expression\n'
-            'assert "itemprop=\\"author\\"" in expression\n'
-            'assert "application/ld+json" in expression\n'
-            'assert "expected-video-title" not in expression\n'
-            'assert "expected-publisher" not in expression\n'
+            'assert "--eval" not in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
             'print("A video title\\n\\nA publisher")'
         )
         case = self.case_with(
@@ -386,12 +475,9 @@ def test_video_body_uses_generic_answer_free_metadata_extraction(self):
         result = provider.fetch(case, 2)
         self.assertTrue(result.ok, repr(result))
         self.assertEqual(result.content, "A video title\n\nA publisher\n")
-        self.assertEqual(result.metadata["route"], "media_metadata_runtime")
-        self.assertEqual(result.metadata["output"], "visible_text_and_standard_media_metadata")
-        self.assertEqual(
-            result.metadata["wait"]["extraction"],
-            "visible_text_and_standard_media_metadata",
-        )
+        self.assertEqual(result.metadata["route"], "ordinary_markdown")
+        self.assertEqual(result.metadata["output"], "markdown")
+        self.assertNotIn("output_projection_sha256", result.metadata)
 
     def test_non_video_body_keeps_ordinary_markdown_route(self):
         provider = self.provider(
@@ -406,80 +492,49 @@ def test_non_video_body_keeps_ordinary_markdown_route(self):
         self.assertTrue(result.ok, repr(result))
         self.assertEqual(result.metadata["route"], "ordinary_markdown")
 
-    def test_challenge_route_uses_one_json_trace_and_converts_final_dom(self):
-        envelope = {
-            "final_url": "https://example.com/final",
-            "status": 200,
-            "title": "Catalog",
-            "headers": [{"name": "content-type", "value": "text/html"}],
-            "redirect_chain": [
-                {
-                    "from_url": "https://example.com/start",
-                    "to_url": "https://example.com/final",
-                    "status": 302,
-                }
-            ],
-            "html": '<main><a href="/item/1">Real product</a></main>',
-            "network": {
-                "main_document": {"status": 200, "redirected": True, "redirect_count": 1},
-                "subresources": [{"ok": False, "error_text": "blocked"}],
-            },
-        }
+    def test_popular_site_uses_native_markdown_without_local_conversion(self):
         provider = self.provider(
-            "import json,sys\n"
-            'assert "--dump" in sys.argv and sys.argv[sys.argv.index("--dump")+1]=="json"\n'
-            'assert "--trace-network" in sys.argv and "--eval" not in sys.argv\n'
-            f"print({json.dumps(envelope)!r})"
-        )
-        result = provider.fetch(self.case_with(track="challenge", task_kind="structure"), 10)
+            'import sys\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
+            'assert "--trace-network" not in sys.argv and "--eval" not in sys.argv\n'
+            'print("# Native catalog\\n\\n[Real product](/item/1)")')
+        self.assertEqual(provider.validate(), [])
+        with patch("harness.web_fetch.providers.moli.subprocess.run", side_effect=AssertionError("Local converter must not run")):
+            result = provider.fetch(self.case_with(track="challenge", task_kind="structure"), 10)
         self.assertTrue(result.ok, repr(result))
-        self.assertIn("[Real product]", result.content)
-        self.assertEqual(result.status_code, 200)
-        self.assertEqual(result.final_url, "https://example.com/final")
-        self.assertEqual(result.title, "Catalog")
-        self.assertEqual(result.metadata["route"], "challenge_json_trace")
-        self.assertEqual(result.metadata["network_trace"]["failed_subresource_count"], 1)
-        self.assertEqual(
-            result.metadata["network_trace"]["response_header_names"], ["content-type"]
-        )
-        self.assertIn("_raw_stdout_b64", result.metadata)
+        self.assertEqual(result.content, "# Native catalog\n\n[Real product](/item/1)\n")
+        self.assertEqual(result.metadata["route"], "ordinary_markdown")
+        self.assertEqual(result.metadata["output"], "markdown")
+        self.assertFalse(result.metadata["network_trace_requested"])
 
-    def test_page_identity_uses_same_call_json_for_single_and_multihop_redirects(self):
+    def test_required_final_url_never_switches_native_markdown_to_json(self):
         from harness.web_fetch.scoring import score_attempt
         from harness.web_fetch.metrics import task_passed
-        for hops in (1, 2):
-            with self.subTest(hops=hops):
+        for supplied_url in (None, 'https://example.com/document'):
+            with self.subTest(final_url=supplied_url):
                 final='https://example.com/document'
-                envelope={'final_url':final,'status':200,'title':'Article',
-                          'html':'<main>Complete required body</main>',
-                          'redirect_chain':[{'from_url':'https://example.com/redirect',
-                                             'to_url':final,'status':302}]*hops}
+                log = (f'DEBUG fetch request complete method=GET url={self.case.url} final_url={final} status=200' if supplied_url else '')
                 provider=self.provider(
                     'import sys\n'
-                    'assert sys.argv[sys.argv.index("--dump")+1]=="json"\n'
+                    'assert sys.argv[sys.argv.index("--dump")+1]=="markdown"\n'
                     'assert "--trace-network" not in sys.argv\n'
-                    'print("DEBUG fetch request complete method=GET url=https://cdn.example.com/app.js final_url=https://cdn.example.com/app.js status=200",file=sys.stderr)\n'
-                    f'print({json.dumps(envelope)!r})')
+                    f'print({log!r},file=sys.stderr)\n'
+                    'print("Complete required body")')
                 case=self.case_with(track='risk_control',task_kind='body',
                     source_benchmark={'risk_control':{'navigation_contract':{'requested_url':self.case.url,'observed_final_url':final,'target_language':'en'}}})
                 result=provider.fetch(case,10)
                 self.assertTrue(result.ok,repr(result))
-                self.assertEqual(result.final_url,final)
-                self.assertEqual(result.metadata['final_url_source'],'same_call_json')
-                self.assertEqual(result.metadata['output'],'final_dom_html+local_markdown')
-                self.assertFalse(result.metadata['network_trace_requested'])
+                self.assertEqual(result.final_url,supplied_url)
+                self.assertEqual(result.content.strip(),'Complete required body')
+                self.assertEqual(result.metadata['route'],'ordinary_markdown')
+                self.assertEqual(result.metadata['output'],'markdown')
                 config={'id':'article','url':case.url,'track':'risk_control','task_kind':'body',
                         'source_benchmark':case.source_benchmark,
                         'acceptance_contract':{'version':1,'schema':'body_text','minimum_records':0,
                           'stable_text_anchors':[{'id':'body','alternatives':['Complete required body']}]}}
                 metrics=score_attempt(config,result.content.encode(),ok=result.ok,
                                       status_code=result.status_code,final_url=result.final_url)
-                self.assertEqual(metrics['page_identity_status'],'verified')
                 self.assertTrue(task_passed(result.ok,metrics,'body'))
-                wrong=score_attempt(config,result.content.encode(),ok=True,status_code=200,
-                                    final_url='https://cdn.example.com/app.js')
-                self.assertEqual(wrong['page_identity_status'],'mismatch')
-                self.assertFalse(task_passed(True,wrong,'body'))
 
     def test_legacy_multihop_log_does_not_select_interleaved_resource(self):
         log=(
@@ -493,37 +548,141 @@ def test_legacy_multihop_log_does_not_select_interleaved_resource(self):
             'DEBUG published standalone replacement Document page_id=1\n')
         self.assertIsNone(_diagnostic_main_document_url(log,'https://example.com/start'))
 
-    def test_challenge_http_error_keeps_body_but_request_fails(self):
-        envelope = {
-            "final_url": "https://example.com/gate",
-            "status": 403,
-            "title": "Access denied",
-            "headers": [],
-            "redirect_chain": [],
-            "html": "<h1>Access denied</h1>",
-            "network": {},
-        }
-        provider = self.provider(f"print({json.dumps(envelope)!r})")
+    def test_popular_site_native_http_error_keeps_body_but_request_fails(self):
+        provider = self.provider('print("**Error:** Forbidden\\n\\n**403**: Forbidden")')
         result = provider.fetch(self.case_with(track="challenge", task_kind="structure"), 10)
         self.assertFalse(result.ok)
         self.assertEqual(result.error_type, "api_error")
         self.assertEqual(result.status_code, 403)
-        self.assertIn("Access denied", result.content)
+        self.assertIn("Forbidden", result.content)
+
+    def test_native_document_http_status_preserves_markdown_and_status_scope(self):
+        request = self.case.url
+        for name, log, expected_status in (
+            ("main-service-failure", f"DEBUG fetch request complete method=GET url={request} "
+             f"final_url={request} status=503", 503),
+            ("main-ok-subresource-service-failure", f"DEBUG fetch request complete method=GET url={request} "
+             f"final_url={request} status=200\nDEBUG fetch request complete method=GET "
+             "url=https://cdn.example.com/app.js final_url=https://cdn.example.com/app.js "
+             "status=503", 200),
+            ("unowned-redirect-service-failure", f"DEBUG fetch request complete method=GET url={request} "
+             f"final_url={request} status=302\nDEBUG fetch request complete method=GET "
+             "url=https://cdn.example.com/app.js final_url=https://cdn.example.com/app.js "
+             "status=503", None),
+            ("subresource-service-failure", "DEBUG fetch request complete method=GET "
+             "url=https://cdn.example.com/app.js final_url=https://cdn.example.com/app.js "
+             "status=503", None),
+            ("stale-document-response", f"DEBUG fetch request complete method=GET url={request} "
+             f"final_url={request} status=503\n"
+             "DEBUG detached committed main WindowProxy for replacement context page_id=1", None),
+            ("ambiguous-same-url", (f"DEBUG fetch request complete method=GET url={request} "
+             f"final_url={request} status=503\n") * 2, None),
+            ("console-status-prose", "INFO console.log=DEBUG fetch request complete method=GET "
+             f"url={request} final_url={request} status=503", None),
+        ):
+            with self.subTest(name=name):
+                body = "# Service documentation\nHTTP 503 and timeout are described here."
+                provider = self.provider(f"print({body!r})\nprint({log!r}, file=sys.stderr)\n")
+                result = provider.fetch(self.case, 10)
+                self.assertEqual(result.content, body + "\n")
+                self.assertEqual(result.status_code, expected_status)
+                self.assertEqual(result.ok, expected_status is None or expected_status < 400)
+
+    def test_empty_native_service_failure_preserves_http_status(self):
+        log = (f"DEBUG fetch request complete method=GET url={self.case.url} "
+               f"final_url={self.case.url} status=503")
+        result = self.provider(f"print({log!r}, file=sys.stderr)\n").fetch(self.case, 10)
+        self.assertEqual(result.content, "")
+        self.assertEqual(result.status_code, 503)
+        self.assertEqual(result.error_type, "api_error")
 
-    def test_page_json_runtime_error_is_not_a_serialization_error(self):
-        for exit_code in (0, 1):
-            with self.subTest(exit_code=exit_code):
+    def test_native_best_effort_deadline_marks_only_empty_delivery(self):
+        warning = ("2026-10-15T00:00:00.000000Z  WARN fetch readiness wait timed out; "
+                   f"returning best-effort page page_id=1 url={self.case.url} "
+                   f"final_url={self.case.url} wait_until=DomStable timeout_ms=40500 "
+                   "remaining_ms=30000 error=deadline has elapsed")
+        for name, body, log, expected_error, expected_ok in (
+            ("empty-native-deadline", "", warning, "timeout", False),
+            ("usable-body", "# Expected article\nComplete content.", warning, None, True),
+            ("empty-without-deadline", "", "DEBUG ordinary fetch completed", "empty_response", False),
+            ("console-deadline-prose", "", "INFO console.log=" + warning, "empty_response", False),
+            ("different-document-deadline", "", warning.replace(self.case.url, "https://other.example/"),
+             "empty_response", False),
+        ):
+            with self.subTest(name=name):
+                provider = self.provider(f"sys.stdout.write({body!r})\nprint({log!r}, file=sys.stderr)\n")
+                result = provider.fetch(self.case, 10)
+                self.assertEqual(result.content, body)
+                self.assertEqual(result.error_type, expected_error)
+                self.assertEqual(result.ok, expected_ok)
+                if body:
+                    from harness.web_fetch.scoring import score_attempt
+                    from harness.web_fetch.metrics import task_passed
+                    case = self.case_with(min_content_chars=1000)
+                    metrics = score_attempt(vars(case), body.encode(), ok=result.ok,
+                                            metadata=result.metadata)
+                    self.assertFalse(task_passed(result.ok, metrics, case.task_kind))
+
+    def test_native_failures_have_specific_error_types(self):
+        scenarios = (
+            (
+                "dns",
+                "Error: failed to fetch `https://example.com/`\n"
+                "Reason: failed to resolve example.com:443: failed to lookup address "
+                "information: Temporary failure in name resolution",
+                "dns",
+            ),
+            (
+                "curl_timeout",
+                "Error: failed to fetch `https://example.com/`\n"
+                "Reason: curl request failed for https://example.com/ after active=500ms "
+                "queued=2ms: [28] Timeout was reached",
+                "timeout",
+            ),
+            (
+                "curl_transfer",
+                "Error: failed to fetch `https://example.com/`\n"
+                "Reason: curl request failed for https://example.com/ after active=500ms "
+                "queued=2ms: [56] Failure when receiving data from the peer",
+                "network",
+            ),
+            (
+                "certificate",
+                "Error: failed to fetch `https://example.com/`\n"
+                "Reason: curl request failed for https://example.com/ after active=500ms "
+                "queued=2ms: [60] SSL peer certificate or SSH remote key was not OK",
+                "tool_error",
+            ),
+            (
+                "content_contract",
+                "Error: failed to fetch `https://example.com/`\n"
+                "Reason: raw download output only supports automatic output or --dump json",
+                "tool_error",
+            ),
+            (
+                "ambiguous",
+                "SSL connect error: connection reset",
+                "tool_error",
+            ),
+        )
+        for name, stderr, error_type in scenarios:
+            with self.subTest(name=name):
                 provider = self.provider(
-                    'import sys\n'
-                    'print("SSL connect error: connection reset", file=sys.stderr)\n'
-                    f'sys.exit({exit_code})\n')
-                result = provider.fetch(self.case_with(track="challenge", task_kind="structure"), 10)
+                    "import sys\n"
+                    f"print({stderr!r}, file=sys.stderr)\n"
+                    "raise SystemExit(1)\n"
+                )
+                result = provider.fetch(self.case, 2)
                 self.assertFalse(result.ok)
-                self.assertEqual(result.error_type, 'tool_error' if exit_code else 'invalid_output')
-                if exit_code:
-                    self.assertIn('SSL connect error', result.error_message)
-                self.assertEqual(result.metadata['exit_code'], exit_code)
-                self.assertEqual(result.metadata['raw_stdout_sha256'], hashlib.sha256(b'').hexdigest())
+                self.assertEqual(result.error_type, error_type)
+
+    def test_native_markdown_runtime_error_keeps_official_stderr(self):
+        provider = self.provider('import sys\nprint("SSL connect error: connection reset", file=sys.stderr)\nsys.exit(1)\n')
+        result = provider.fetch(self.case_with(track="risk_control", task_kind="body", source_benchmark={"risk_control":{"navigation_contract":{"requested_url":self.case.url,"observed_final_url":"https://example.com/final"}}}), 10)
+        self.assertFalse(result.ok)
+        self.assertEqual(result.error_type, 'tool_error')
+        self.assertIn('SSL connect error', result.error_message)
+        self.assertEqual(result.metadata['route'], 'ordinary_markdown')
 
     def test_dynamic_task_without_hints_fails_closed(self):
         provider = self.provider('raise AssertionError("should not run")')
@@ -531,17 +690,74 @@ def test_dynamic_task_without_hints_fails_closed(self):
         self.assertFalse(result.ok)
         self.assertEqual(result.error_type, "configuration")
 
+    def test_dynamic_native_completion_keeps_native_markdown_route(self):
+        for task_kind in ("body", "structure"):
+            with self.subTest(task_kind=task_kind):
+                provider = self.provider(
+                    'import sys\n'
+                    'assert "--eval" not in sys.argv and "--wait-selector" not in sys.argv\n'
+                    'assert "--wait-script" not in sys.argv\n'
+                    'assert "--layout" in sys.argv and "--with-frames" in sys.argv\n'
+                    'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
+                    'assert sys.argv[sys.argv.index("--wait-until")+1] == "domstable"\n'
+                    'print("# Native dynamic page")'
+                )
+                result = provider.fetch(self.case_with(
+                    track="dynamic", task_kind=task_kind,
+                    retrieval_hints={"version": 3, "mode": "native"}), 10)
+                self.assertTrue(result.ok, result.error_message)
+                self.assertEqual(result.content, "# Native dynamic page\n")
+                self.assertEqual(result.metadata["output"], "markdown")
+                self.assertTrue(result.metadata["layout"])
+                self.assertTrue(result.metadata["with_frames"])
+                self.assertEqual(result.metadata["wait_interface"], "--wait-until")
+                self.assertEqual(result.metadata["wait"], {
+                    "wait_until": "domstable", "scope": "dynamic_task_family",
+                    "strategy": "native_task_family_completion",
+                    "layout": {"requested": True, "support": "native",
+                               "interface": "--layout", "scope": "dynamic_task_family"},
+                    "subdocuments": {"requested": True, "support": "native",
+                                     "interface": "--with-frames",
+                                     "harness_content_assembly": False,
+                                     "scope": "dynamic_task_family"}})
+
+    def test_wait_option_selects_a_supported_native_cli_without_version_branching(self):
+        provider = self.provider(
+            'import sys\n'
+            'assert "--wait-until" not in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--wait")+1] == "domstable"\n'
+            'assert "--layout" in sys.argv and "--with-frames" in sys.argv\n'
+            'print("# Native dynamic page")',
+            wait_option="wait",
+        )
+        result = provider.fetch(self.case_with(
+            track="dynamic", task_kind="structure",
+            retrieval_hints={"version": 3, "mode": "native"}), 10)
+        self.assertTrue(result.ok, result.error_message)
+        self.assertEqual(result.metadata["wait_interface"], "--wait")
+
+    def test_dynamic_family_wait_is_configurable_but_not_case_specific(self):
+        provider = self.provider(
+            'import sys\n'
+            'assert sys.argv[sys.argv.index("--wait-until")+1] == "networkidle"\n'
+            'print("# Native body")',
+            dynamic_wait_until="networkidle",
+        )
+        result = provider.fetch(self.case_with(track="dynamic", retrieval_hints={
+            "version": 3, "mode": "native"}), 10)
+        self.assertTrue(result.ok, result.error_message)
+        self.assertEqual(result.metadata["wait"]["scope"], "dynamic_task_family")
+
     def test_dynamic_task_prefers_predeclared_selector_without_answer_leakage(self):
         provider = self.provider(
             "import sys\n"
-            'assert sys.argv[1]=="fetch" and "--eval" in sys.argv\n'
-            'assert "--dump" not in sys.argv\n'
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "main article" in expression and "const lines = node" in expression\n'
+            'assert sys.argv[1]=="fetch" and "--eval" not in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
             'expected=["--wait-selector","main article","--wait-until","domcontentloaded",'
-            '"--delay-ms","999","--timeout","10000","--http-timeout",'
+            '"--timeout","9000","--http-timeout",'
             '"https://example.com/?a=1&b=2"]\n'
             "assert all(value in sys.argv for value in expected),sys.argv\n"
+            'assert "--delay-ms" not in sys.argv\n'
             'assert "answer-must-not-become-a-wait" not in sys.argv\n'
             'print("ready")'
         )
@@ -569,11 +785,9 @@ def test_dynamic_task_prefers_predeclared_selector_without_answer_leakage(self):
                 "selector": "main article",
                 "minimum_count": 1,
                 "frame_selector": None,
-                "delay_ms": 999,
-                "timeout_ms": 10000,
                 "wait_until": "domcontentloaded",
                 "completion_support": "exact",
-                "extraction": "selected_records_or_rendered_body_fallback",
+                "output_extraction": "native_markdown",
             },
         )
         self.assertEqual(result.metadata["wait_until"], "domcontentloaded")
@@ -631,15 +845,15 @@ def test_dynamic_complete_records_wait_for_nonempty_text_fragments(self):
         self.assertTrue(result.ok, repr(result))
         self.assertEqual(result.metadata["wait"]["minimum_text_fragments"], 2)
 
-    def test_iframe_waits_for_child_count_and_serializes_frames(self):
+    def test_frame_completion_waits_without_extracting_or_serializing_content(self):
         provider = self.provider(
             "import sys\n"
-            'assert "--eval" in sys.argv and "--wait-script" in sys.argv\n'
-            'assert "frame.contentDocument.querySelectorAll(\\"h3.family-name\\")" in sys.argv[5]\n'
-            'assert "--delay-ms" in sys.argv and "3000" in sys.argv\n'
-            'assert "--dump" not in sys.argv and "--with-frames" not in sys.argv\n'
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "iframe#iframe" in expression and "const lines = node" in expression\n'
+            'assert "--eval" not in sys.argv and "--wait-script" in sys.argv\n'
+            'wait=sys.argv[sys.argv.index("--wait-script")+1]\n'
+            'assert "frame.contentDocument.querySelectorAll(\\"h3.family-name\\")" in wait\n'
+            'assert "--delay-ms" not in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
+            'assert "--with-frames" not in sys.argv\n'
             'print("Carettochelyidae")'
         )
         case = self.case_with(
@@ -652,25 +866,36 @@ def test_iframe_waits_for_child_count_and_serializes_frames(self):
                     "selector": "h3.family-name",
                     "minimum_count": 14,
                     "timeout_ms": 45000,
-                    "delay_ms": 3000,
+                    "delay_ms": 0,
                 },
             },
         )
         result = provider.fetch(case, 45)
         self.assertTrue(result.ok, repr(result))
         self.assertEqual(result.metadata["wait"]["strategy"], "frame_selector_count_script")
-        self.assertEqual(result.metadata["route"], "dynamic_selected_text")
+        self.assertEqual(result.metadata["route"], "dynamic_native_markdown")
+        self.assertEqual(result.metadata["output"], "markdown")
 
-    def test_dynamic_selected_text_is_generic_and_answer_free(self):
+    def test_native_dynamic_marker_rejects_a_per_case_contract_before_process(self):
+        provider = self.provider('raise AssertionError("should not run")')
+        case = self.case_with(id="dynamic-iframe", track="dynamic", retrieval_hints={
+            "version": 3, "mode": "native", "contract": "iframe-fourteen-family-headings"})
+        with patch("harness.web_fetch.providers.moli.subprocess.Popen") as process:
+            result = provider.fetch(case, 10)
+        self.assertFalse(result.ok)
+        self.assertEqual(result.error_type, "configuration")
+        self.assertIn("one family marker", result.error_message)
+        process.assert_not_called()
+
+    def test_dynamic_completion_only_waits_and_never_extracts_answer_text(self):
         provider = self.provider(
             "import sys\n"
-            'assert "--eval" in sys.argv and "--wait-script" in sys.argv\n'
-            'assert "--dump" not in sys.argv and "--with-frames" not in sys.argv\n'
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert expression.startswith("(() =>") and expression.endswith("})()")\n'
-            'assert "iframe#results" in expression and "h3.family-name" in expression\n'
-            'assert "const lines = node" in expression and "root?.body" in expression\n'
-            'assert "answer-must-not-leak" not in expression\n'
+            'assert "--eval" not in sys.argv and "--wait-script" in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
+            'assert "--with-frames" not in sys.argv\n'
+            'wait=sys.argv[sys.argv.index("--wait-script")+1]\n'
+            'assert "iframe#results" in wait and "h3.family-name" in wait\n'
+            'assert "answer-must-not-leak" not in wait\n'
             'print("Family One\\n\\nFamily Two")'
         )
         case = self.case_with(
@@ -690,19 +915,18 @@ def test_dynamic_selected_text_is_generic_and_answer_free(self):
         )
         result = provider.fetch(case, 10)
         self.assertTrue(result.ok, repr(result))
-        self.assertEqual(result.metadata["route"], "dynamic_selected_text")
-        self.assertEqual(result.metadata["output"], "selected_records_or_rendered_body_fallback")
+        self.assertEqual(result.metadata["route"], "dynamic_native_markdown")
+        self.assertEqual(result.metadata["output"], "markdown")
         self.assertEqual(
-            result.metadata["wait"]["extraction"],
-            "selected_records_or_rendered_body_fallback",
+            result.metadata["wait"]["output_extraction"],
+            "native_markdown",
         )
 
-    def test_dynamic_selected_records_are_not_duplicated_by_page_body(self):
+    def test_legacy_completion_wait_does_not_replace_native_markdown_output(self):
         provider = self.provider(
             "import sys\n"
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            "assert \"? records.join('\\\\n\\\\n') : fallback\" in expression\n"
-            "assert \"records.join('\\\\n\\\\n') +\" not in expression\n"
+            'assert "--eval" not in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
             'print("record one\\n\\nrecord two")'
         )
         case = self.case_with(
@@ -725,9 +949,8 @@ def test_dynamic_selected_records_are_not_duplicated_by_page_body(self):
     def test_dynamic_v1_does_not_guess_ancestors_from_completion_selector(self):
         provider = self.provider(
             "import sys\n"
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "node.parentElement" not in expression\n'
-            'assert ")].slice(0, 16)" in expression\n'
+            'assert "--eval" not in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
             'wait=sys.argv[sys.argv.index("--wait-script")+1]\n'
             'assert "querySelectorAll(\\"button\\").length >= 16" in wait\n'
             'print("Free shipping\\nProduct\\n$10.00\\nor 2 x$5.00\\nAdd to cart")'
@@ -749,17 +972,11 @@ def test_dynamic_v1_does_not_guess_ancestors_from_completion_selector(self):
         self.assertTrue(result.ok, repr(result))
         self.assertNotIn("extraction_ancestor_levels", result.metadata["wait"])
 
-    def test_dynamic_v2_extracts_declared_cards_without_interactive_controls(self):
+    def test_dynamic_v2_extraction_contract_does_not_replace_native_markdown(self):
         provider = self.provider(
             "import sys\n"
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "main main > div > div" in expression\n'
-            'assert ")].slice(0, 16)" in expression\n'
-            'assert "node.querySelectorAll(item)" in expression\n'
-            'assert "cloneNode" not in expression and "clone.textContent" not in expression\n'
-            'assert "values.filter(value => !omitted.has(value))" in expression\n'
-            'assert "node.parentElement" not in expression\n'
-            'assert "document.body" in expression\n'
+            'assert "--eval" not in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
             'wait=sys.argv[sys.argv.index("--wait-script")+1]\n'
             'assert "querySelectorAll(\\"button\\").length >= 16" in wait\n'
             'print("Product\\n$10.00\\nor 2 x$5.00")'
@@ -785,23 +1002,13 @@ def test_dynamic_v2_extracts_declared_cards_without_interactive_controls(self):
         )
         result = provider.fetch(case, 10)
         self.assertTrue(result.ok, repr(result))
-        self.assertEqual(
-            result.metadata["wait"]["extraction_scope"],
-            {
-                "selector": "main main > div > div",
-                "maximum_count": 16,
-                "frame_selector": None,
-                "exclude_selectors": ["button"],
-                "fallback": "body",
-            },
-        )
+        self.assertEqual(result.metadata["wait"]["output_extraction"], "native_markdown")
 
-    def test_dynamic_v2_missing_iframe_falls_back_to_top_level_body(self):
+    def test_dynamic_v2_iframe_extraction_is_not_run_by_moli(self):
         provider = self.provider(
             "import sys\n"
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "iframe#results" in expression\n'
-            'assert "root?.body || root?.documentElement || document.body" in expression\n'
+            'assert "--eval" not in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
             'print("top-level fallback")'
         )
         case = self.case_with(
@@ -826,333 +1033,89 @@ def test_dynamic_v2_missing_iframe_falls_back_to_top_level_body(self):
         result = provider.fetch(case, 10)
         self.assertTrue(result.ok, repr(result))
 
-    def test_resource_page_uses_bounded_runtime_url_discovery(self):
+    def test_resource_page_uses_native_markdown_for_common_url_scoring(self):
         provider = self.provider(
             "import sys\n"
-            'assert "--dump" not in sys.argv\n'
-            'assert "--eval" in sys.argv\n'
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "[src],[href],[data],[poster],[srcset]" in expression\n'
-            'assert "astro-island[component-url]" in expression\n'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
+            'assert "--eval" not in sys.argv\n'
+            'assert "--trace-network" not in sys.argv\n'
+            'assert "--with-frames" in sys.argv\n'
             'assert not ({"--image","--video","--media","--resource"} & set(sys.argv))\n'
-            'print("{\\"links\\":[\\"https://example.com/movie.mp4\\"]}")'
+            'print("[movie](https://example.com/movie.mp4)")'
         )
         result = provider.fetch(self.case_with(track="image", task_kind="resource"), 10)
         self.assertTrue(result.ok, repr(result))
-        self.assertEqual(result.metadata["route"], "resource_page_runtime")
-        self.assertEqual(result.metadata["output"], "structured_resource_urls")
-        self.assertIn("movie.mp4", result.content)
-
-    def test_resource_contract_takes_priority_over_page_family(self):
-        for track, path in (("challenge", "/page"), ("document", "/document.pdf"),
-                            ("document", "/document.docx"), ("document", "/viewer.html"),
-                            ("video", "/page"), ("image", "/page")):
-            with self.subTest(track=track, path=path):
-                provider = self.provider(
-                    'import sys\n'
-                    'assert "--eval" in sys.argv and "--dump" not in sys.argv\n'
-                    'assert "--trace-network" not in sys.argv\n'
-                    'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-                    'assert "[src],[href],[data],[poster],[srcset]" in expression\n'
-                    'print("{\\"links\\":[\\"https://example.com/movie.mp4\\"]}")'
-                )
-                with patch("harness.web_fetch.providers.moli.require_converter",
-                           side_effect=AssertionError("resource discovery must not convert Markdown")):
-                    result = provider.fetch(self.case_with(
-                        track=track, url="https://example.com" + path, task_kind="resource"), 10)
-                self.assertTrue(result.ok, repr(result))
-                self.assertEqual(result.metadata["route"], "resource_page_runtime")
-                self.assertEqual(result.metadata["output"], "structured_resource_urls")
-                self.assertFalse(result.metadata["network_trace_requested"])
-                self.assertEqual(json.loads(result.content)["links"], ["https://example.com/movie.mp4"])
-
-    def test_file_contract_never_initializes_page_conversion(self):
-        for track in ("challenge", "document", "video", "image"):
-            with self.subTest(track=track):
-                provider = self.provider(
-                    'import sys\n'
-                    'assert "--dump" not in sys.argv and "--eval" not in sys.argv\n'
-                    'assert "--trace-network" not in sys.argv\n'
-                    'sys.stdout.buffer.write(b"fixture-file")'
-                )
-                with patch("harness.web_fetch.providers.moli.require_converter",
-                           side_effect=AssertionError("file delivery must not convert Markdown")):
-                    result = provider.fetch(self.case_with(track=track, task_kind="file"), 10)
-                self.assertTrue(result.ok, repr(result))
-                self.assertEqual(result.files[0]["data"], b"fixture-file")
-                self.assertEqual(result.metadata["route"], "raw_file")
-                self.assertEqual(result.metadata["output"], "raw_bytes")
-                self.assertFalse(result.metadata["network_trace_requested"])
-
-    def test_dynamic_resource_honors_declared_completion(self):
-        provider = self.provider(
-            'import sys\n'
-            'assert sys.argv[sys.argv.index("--wait-selector")+1]=="main article"\n'
-            'assert sys.argv.count("--wait-until")==1\n'
-            'assert sys.argv[sys.argv.index("--wait-until")+1]=="domcontentloaded"\n'
-            'assert sys.argv[sys.argv.index("--delay-ms")+1]=="999"\n'
-            'assert sys.argv[sys.argv.index("--timeout")+1]=="3000"\n'
-            'assert "[src],[href],[data],[poster],[srcset]" in sys.argv[sys.argv.index("--eval")+1]\n'
-            'import json\nprint(json.dumps(dict(links=["https://example.com/image.png"])))'
-        )
-        result = provider.fetch(self.case_with(
-            track="dynamic", task_kind="resource", retrieval_hints={
-                "version": 1, "wait_until": "domcontentloaded", "completion": {
-                    "selector": "main article", "minimum_count": 1,
-                    "timeout_ms": 3000, "delay_ms": 999,
-                },
-            }), 10)
-        self.assertTrue(result.ok, repr(result))
-        self.assertEqual(result.metadata["route"], "resource_page_runtime")
-        self.assertEqual(result.metadata["wait"]["selector"], "main article")
-        self.assertEqual(result.metadata["wait"]["completion_support"], "exact")
-
-    def test_dynamic_file_cannot_discard_valid_dom_completion(self):
-        marker = Path(self.directory.name) / "fetch-executed"
-        provider = self.provider(
-            f'from pathlib import Path\nPath({str(marker)!r}).write_text("executed")\n'
-            'print("unexpected output")'
+        self.assertEqual(result.metadata["route"], "resource_native_markdown")
+        self.assertEqual(result.metadata["output"], "native_markdown_resource_urls")
+        self.assertEqual(result.metadata["output_contract"], "native_markdown_resource_urls")
+        self.assertEqual(
+            result.metadata["wait"]["subdocuments"]["scope"],
+            "resource_task_family",
         )
-        result = provider.fetch(self.case_with(
-            track="dynamic", task_kind="file", retrieval_hints={
-                "version": 1, "wait_until": "load", "completion": {
-                    "selector": "main", "minimum_count": 1,
-                    "timeout_ms": 3000, "delay_ms": 0,
-                },
-            }), 10)
-        self.assertFalse(marker.exists())
-        self.assertFalse(result.ok)
-        self.assertEqual(result.error_type, "configuration")
-        self.assertIn("DOM completion", result.error_message)
-
-    def test_resource_route_cannot_discard_declared_text_extraction(self):
-        marker = Path(self.directory.name) / "fetch-executed"
-        provider = self.provider(
-            f'from pathlib import Path\nPath({str(marker)!r}).write_text("executed")\n'
-            'print("unexpected output")'
+        self.assertIn("movie.mp4", result.content)
+        from harness.web_fetch.metrics import evaluate_resources
+        scored = evaluate_resources(
+            result.content,
+            {},
+            [{"id": "movie", "kind": "video", "urls": ["https://example.com/movie.mp4"]}],
+            base_url="https://example.com/gallery",
         )
-        result = provider.fetch(self.case_with(
-            track="dynamic", task_kind="resource", retrieval_hints={
-                "version": 2, "wait_until": "load", "completion": {
-                    "selector": "main", "minimum_count": 1,
-                    "timeout_ms": 3000, "delay_ms": 0,
-                },
-                "extraction": {"selector": "article", "maximum_count": 2,
-                               "exclude_selectors": [], "fallback": "empty"},
-            }), 10)
-        self.assertFalse(marker.exists())
-        self.assertFalse(result.ok)
-        self.assertEqual(result.error_type, "configuration")
-        self.assertIn("Declared text extraction", result.error_message)
-
-    def test_scoring_answers_do_not_change_execution(self):
-        provider = self.provider('import json, sys\nprint(json.dumps(sys.argv[1:]))')
-        original = provider.fetch(self.case, 2)
-        changed = provider.fetch(self.case_with(
-            id="unrelated-id", name="Unrelated label", expected_any=["secret-answer"],
-            reference_answer="secret-reference", required_facts=["secret-fact"],
-            ground_truth_main_content="secret-body", expected_resources=["secret-resource"],
-        ), 2)
-        self.assertTrue(original.ok, repr(original))
-        self.assertTrue(changed.ok, repr(changed))
-        self.assertEqual(original.content, changed.content)
-        self.assertEqual(original.metadata["route"], changed.metadata["route"])
-
-    def test_file_task_preserves_binary_stdout(self):
-        from dataclasses import replace
+        self.assertTrue(scored["resource_pass"])
 
+    def test_video_resource_page_uses_the_same_native_markdown_route(self):
         provider = self.provider(
             "import sys\n"
-            'assert "--dump" not in sys.argv\n'
-            'assert "--wait-until" not in sys.argv\n'
-            'assert sys.argv[1:6]==["fetch","--timeout","2000","--http-timeout","2000"]\n'
-            'sys.stdout.buffer.write(b"\\x89PNG\\r\\n\\x1a\\n" + b"x"*40)'
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
+            'assert "--trace-network" not in sys.argv and "--with-frames" in sys.argv\n'
+            'assert sys.argv[sys.argv.index("--wait-until")+1] == "done"\n'
+            'assert "--delay-ms" not in sys.argv\n'
+            'print("[stream](https://example.com/movie.m3u8)")'
         )
-        result = provider.fetch(replace(self.case, task_kind="file"), 2)
-        self.assertTrue(result.ok)
-        self.assertEqual(result.files[0]["data"], b"\x89PNG\r\n\x1a\n" + b"x" * 40)
-        self.assertEqual(result.content, "")
-        self.assertIsNone(result.metadata["dump"])
-        self.assertIsNone(result.metadata["wait_until"])
-        self.assertIsNone(result.metadata["wait"])
-        self.assertEqual(result.metadata["route"], "raw_file")
-        self.assertEqual(result.metadata["output"], "raw_bytes")
-
-    def test_direct_pdf_body_uses_raw_fetch_and_extracts_inside_call(self):
-        import io
-        from dataclasses import replace
-
-        from pypdf import PdfWriter
-
-        output = io.BytesIO()
-        writer = PdfWriter()
-        writer.add_blank_page(width=72, height=72)
-        writer.write(output)
-        encoded = repr(output.getvalue())
-        provider = self.provider(
-            "import sys\n"
-            'assert "--dump" not in sys.argv\n'
-            'assert "--wait-until" not in sys.argv\n'
-            'assert "--http-timeout" in sys.argv\n'
-            f"sys.stdout.buffer.write({encoded})"
-        )
-        document = replace(
-            self.case,
-            url="https://example.com/fixed.PDF?download=1#page=2",
-            track="document",
-        )
-        result = provider.fetch(document, 2)
-        self.assertTrue(result.ok)  # The request completed; the blank PDF still fails task scoring.
-        self.assertIsNone(result.error_type)
-        self.assertEqual(result.metadata["document_extractor"], "pypdf")
-        self.assertEqual(result.metadata["dump"], None)
-        self.assertEqual(result.metadata["route"], "raw_document")
-        self.assertEqual(result.metadata["output"], "raw_document_bytes+local_text")
-        self.assertIn("_raw_stdout_b64", result.metadata)
-
-    def test_docx_runtime_fetch_extracts_valid_ooxml_and_discloses_second_request(self):
-        from dataclasses import replace
-
-        document_bytes = b"PK\x03\x04fixture"
-        encoded = base64.b64encode(document_bytes).decode("ascii")
-        provider = self.provider(
-            "import json,sys\n"
-            'assert "--eval" in sys.argv and "--dump" not in sys.argv\n'
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "fetch(location.href" in expression and "arrayBuffer" in expression\n'
-            f'print(json.dumps({{"kind":"document_base64","source":'
-            f'"https://example.com/demo.docx","status":200,'
-            f'"content_type":"application/vnd.openxmlformats-officedocument.'
-            f'wordprocessingml.document","data":"{encoded}"}}))'
-        )
-        document = replace(
-            self.case,
-            url="https://example.com/demo.docx",
-            track="document",
-        )
-        with patch(
-            "harness.web_fetch.providers.moli.extract_document_text",
-            return_value=("DOCX body", "python-docx"),
-        ):
-            result = provider.fetch(document, 2)
+        result = provider.fetch(self.case_with(track="video", task_kind="resource"), 10)
         self.assertTrue(result.ok, repr(result))
-        self.assertEqual(result.content, "DOCX body")
-        self.assertEqual(result.status_code, 200)
-        self.assertEqual(result.metadata["route"], "document_runtime_fetch")
-        self.assertEqual(result.metadata["output"], "runtime_document_base64+local_text")
-        self.assertTrue(result.metadata["document_runtime_second_http_fetch"])
-        self.assertEqual(base64.b64decode(result.metadata["_raw_stdout_b64"]), document_bytes)
-
-    def test_docx_runtime_fetch_rejects_non_ooxml_envelope_and_preserves_evidence(self):
-        from dataclasses import replace
-
-        raw = b'{"kind":"document_base64","data":"bm90LW9veG1s"}'
-        provider = self.provider(f"import sys\nsys.stdout.buffer.write({raw!r})")
-        document = replace(
-            self.case,
-            url="https://example.com/demo.docx",
-            track="document",
-        )
-        result = provider.fetch(document, 2)
-        self.assertFalse(result.ok)
-        self.assertEqual(result.error_type, "invalid_output")
-        self.assertEqual(result.content, "")
-        self.assertEqual(result.metadata["raw_stdout_sha256"], hashlib.sha256(raw).hexdigest())
-        self.assertEqual(base64.b64decode(result.metadata["_raw_stdout_b64"]), raw)
-
-    def test_docx_runtime_local_extraction_must_finish_inside_call_budget(self):
-        import time
-
-        encoded = base64.b64encode(b"PK\x03\x04fixture").decode("ascii")
+        self.assertEqual(result.metadata["route"], "resource_native_markdown")
+        self.assertEqual(result.metadata["output"], "native_markdown_resource_urls")
+        self.assertEqual(result.metadata["output_contract"], "native_markdown_resource_urls")
+        self.assertFalse(result.metadata["network_trace_requested"])
+        from harness.web_fetch.metrics import evaluate_resources
+        scored = evaluate_resources(
+            result.content,
+            {},
+            [{"id": "movie", "kind": "video", "urls": ["https://example.com/movie.m3u8"]}],
+            base_url="https://example.com/player",
+        )
+        self.assertTrue(scored["resource_pass"])
+
+    def test_fixed_native_resource_uses_product_timers_and_native_markdown(self):
         provider = self.provider(
-            f'import json\nprint(json.dumps({{"kind":"document_base64","data":"{encoded}"}}))'
-        )
-        document = self.case_with(url="https://example.com/demo.docx", track="document")
-
-        real_clock = time.monotonic
-        for extraction_seconds, expected_ok in ((0.1, True), (11, False)):
-            with self.subTest(extraction_seconds=extraction_seconds):
-                elapsed = [0.0]
-
-                def extract(_raw):
-                    elapsed[0] += extraction_seconds
-                    return "extracted content", "fixture"
-
-                clock = SimpleNamespace(monotonic=lambda: real_clock() + elapsed[0])
-                with (
-                    patch("harness.web_fetch.providers.moli.time", clock),
-                    patch("harness.web_fetch.providers.moli.extract_document_text",
-                          side_effect=extract) as extractor,
-                ):
-                    result = provider.fetch(document, 10)
-                extractor.assert_called_once()
-                self.assertEqual(result.ok, expected_ok)
-                if expected_ok:
-                    self.assertEqual(result.content, "extracted content")
-                else:
-                    self.assertEqual(result.error_type, "timeout")
-                    self.assertIn("runtime extraction", result.error_message)
-
-    def test_document_extraction_must_finish_inside_the_call_budget(self):
-        import time
-
-        provider = self.provider('import sys\nsys.stdout.buffer.write(b"%PDF-fixture")')
-        document = self.case_with(url="https://example.com/fixed.pdf", track="document")
-
-        def slow_extract(_raw):
-            time.sleep(3.2)
-            return "late content", "fixture"
-
-        with patch(
-            "harness.web_fetch.providers.moli.extract_document_text",
-            side_effect=slow_extract,
-        ):
-            result = provider.fetch(document, 3)
-        self.assertFalse(result.ok)
-        self.assertEqual(result.error_type, "timeout")
-        self.assertIn("extraction", result.error_message)
-
-    def test_pdfjs_viewer_uses_runtime_document_text(self):
-        provider = self.provider(
-            "import json,sys\n"
-            'assert "--dump" not in sys.argv and "--eval" in sys.argv\n'
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "PDFViewerApplication" in expression and "getTextContent" in expression\n'
-            'print(json.dumps({"kind":"text","source":"https://example.com/paper.pdf",'
-            '"text":"TraceMonkey nested trace trees"}))'
-        )
-        result = provider.fetch(
-            self.case_with(
-                url="https://mozilla.github.io/pdf.js/web/viewer.html", track="document"
-            ),
-            2,
+            "import sys\n"
+            "assert not {'--timeout', '--http-timeout', '--http-connect-timeout', '--eval'} & set(sys.argv)\n"
+            'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
+            'print("![photo](https://example.com/photo.jpg)")',
+            uniform_native_parameters=True,
         )
+        result = provider.fetch(self.case_with(track="image", task_kind="resource"), 45)
         self.assertTrue(result.ok, repr(result))
-        self.assertEqual(result.content, "TraceMonkey nested trace trees")
-        self.assertEqual(result.metadata["route"], "document_page_runtime")
-        self.assertEqual(result.metadata["document_extractor"], "pdfjs_runtime")
+        self.assertEqual(result.metadata["internal_timeout_policy"], "native_default")
+        self.assertIsNone(result.metadata["http_connect_timeout_ms"])
 
-    def test_embedded_pdf_page_returns_bytes_for_local_extraction(self):
-        encoded = base64.b64encode(b"%PDF-fixture").decode("ascii")
-        provider = self.provider(
-            "import json,sys\n"
-            'assert "--dump" not in sys.argv and "--eval" in sys.argv\n'
-            'expression=sys.argv[sys.argv.index("--eval")+1]\n'
-            'assert "embed[src],iframe[src],object[data],a[href]" in expression\n'
-            f'print(json.dumps({{"kind":"pdf_base64","source":"https://example.com/sample.pdf",'
-            f'"data":"{encoded}"}}))'
-        )
-        with patch(
-            "harness.web_fetch.providers.moli.extract_document_text",
-            return_value=("embedded PDF text", "fixture"),
+    def test_document_urls_use_native_text_without_external_parsing(self):
+        for url in (
+            "https://example.com/paper.pdf",
+            "https://example.com/file.docx",
+            "https://example.com/document-viewer.html",
         ):
-            result = provider.fetch(
-                self.case_with(url="https://pdfobject.com/static/", track="document"), 2
-            )
-        self.assertTrue(result.ok, repr(result))
-        self.assertEqual(result.content, "embedded PDF text")
-        self.assertEqual(result.metadata["document_extractor"], "fixture")
-        self.assertEqual(result.metadata["embedded_document_url"], "https://example.com/sample.pdf")
+            with self.subTest(url=url):
+                provider = self.provider(
+                    "import sys\n"
+                    'assert sys.argv[sys.argv.index("--dump")+1] == "markdown"\n'
+                    'assert "--eval" not in sys.argv\n'
+                    'print("Native document text")')
+                result = provider.fetch(self.case_with(url=url, track="document"), 2)
+                self.assertTrue(result.ok, repr(result))
+                self.assertEqual(result.content.strip(), "Native document text")
+                self.assertEqual(result.metadata["route"], "ordinary_markdown")
+                self.assertNotIn("document_extractor", result.metadata)
 
     def test_invalid_dynamic_hints_fail_before_process(self):
         for hints in (
@@ -1185,6 +1148,28 @@ def test_dynamic_raw_route_cannot_bypass_missing_hints(self):
         self.assertEqual(result.error_type, "configuration")
         process.assert_not_called()
 
+    def test_answer_capacity_does_not_limit_native_resource_downloads(self):
+        for fixed_native in (False, True):
+            with self.subTest(fixed_native=fixed_native):
+                provider = self.provider(
+                    "assert '--http-max-response-size' not in sys.argv\n"
+                    "print('short answer')\n",
+                    max_bytes=32, uniform_native_parameters=fixed_native,
+                )
+                result = provider.fetch(self.case, 2)
+                self.assertTrue(result.ok, repr(result))
+                self.assertEqual(result.content, "short answer\n")
+                self.assertIsNone(result.metadata["http_max_response_bytes"])
+                self.assertEqual(result.metadata["retained_output_max_bytes"], 32)
+                oversized = self.provider(
+                    "assert '--http-max-response-size' not in sys.argv\n"
+                    "print('answer exceeding the capture limit')\n",
+                    max_bytes=32, uniform_native_parameters=fixed_native,
+                ).fetch(self.case, 2)
+                self.assertFalse(oversized.ok)
+                self.assertEqual(oversized.error_type, "output_too_large")
+                self.assertEqual(oversized.content, "")
+
     def test_failure_binary_and_oversized_output(self):
         for script, config, expected, retained in [
             ('import sys\nprint("partial")\nsys.exit(7)', {}, "tool_error", False),
@@ -1195,7 +1180,9 @@ def test_failure_binary_and_oversized_output(self):
              "diagnostic_log_too_large", True),
         ]:
             with self.subTest(expected=expected):
-                result = self.provider(script, **config).fetch(self.case, 2)
+                provider = self.provider(script, **config)
+                self.assertEqual(provider.validate(), [])
+                result = provider.fetch(self.case, 2)
                 self.assertFalse(result.ok)
                 self.assertEqual(result.error_type, expected)
                 self.assertEqual("_diagnostic_log_b64" in result.metadata, retained)
@@ -1229,11 +1216,12 @@ def test_diagnostic_only_options_require_explicit_retention(self):
             ).validate(),
         )
 
-    def test_zero_exit_empty_markdown_is_request_success(self):
+    def test_zero_exit_empty_markdown_is_an_empty_response(self):
         result = self.provider('print(" ")').fetch(self.case, 2)
-        self.assertTrue(result.ok)
+        self.assertFalse(result.ok)
         self.assertEqual(result.content.strip(), "")
-        self.assertIsNone(result.error_type)
+        self.assertEqual(result.error_type, "empty_response")
+        self.assertEqual(result.metadata["exit_code"], 0)
 
     def test_zero_exit_whole_response_forbidden_page_is_request_failure(self):
         result = self.provider(
@@ -1271,47 +1259,77 @@ def test_outer_deadline_preserves_live_cli_log_and_rejects_late_answer(self):
         self.assertIn(b"DEBUG actual fixture CLI started", raw)
         self.assertNotIn(b"late answer", raw)
         self.assertIn(b"native_cli_start", raw)
+    def test_timeout_stops_a_browser_child_in_an_independent_session(self):
+        import signal, time
+        pid_file = Path(self.directory.name) / 'detached-child.pid'
+        marker = Path(self.directory.name) / 'orphan-work'
+        child_source = ('import time; from pathlib import Path; time.sleep(2); '
+                        + 'Path(' + repr(str(marker)) + ').write_text("orphan")')
+        script = ('import subprocess, time\nfrom pathlib import Path\n'
+                  + 'child = subprocess.Popen([sys.executable, "-c", ' + repr(child_source)
+                  + '], start_new_session=True)\n'
+                  + 'Path(' + repr(str(pid_file)) + ').write_text(str(child.pid))\n'
+                  + 'time.sleep(10)\n')
+        try:
+            provider = self.provider(script)
+            self.assertEqual(provider.validate(), [])
+            result = provider.fetch(self.case, 1)
+            self.assertEqual(result.error_type, 'timeout')
+            self.assertTrue(pid_file.exists(), 'fixture did not start the independent browser child')
+            time.sleep(2.1)
+            self.assertFalse(marker.exists(), 'browser child continued physical work after timeout')
+        finally:
+            if pid_file.exists():
+                try:
+                    os.killpg(int(pid_file.read_text()), signal.SIGKILL)
+                except ProcessLookupError:
+                    pass
 
     def test_timeout_is_failure(self):
         result = self.provider("import time\ntime.sleep(10)").fetch(self.case, 0.05)
         self.assertEqual(result.error_type, "timeout")
 
-    def test_process_group_permission_error_falls_back_to_direct_kill(self):
+    def test_cancel_does_not_abandon_descendants_when_group_signalling_is_forbidden(self):
         process = Mock(pid=123)
         process.poll.return_value = None
-        with patch(
-            "harness.web_fetch.providers.moli.os.killpg",
-            side_effect=PermissionError("group signal forbidden"),
-        ):
-            from harness.web_fetch.providers.moli import MoliWebFetchProvider
-
-            MoliWebFetchProvider._kill(process)
-        process.kill.assert_called_once_with()
+        provider = self.provider('print("unused")')
+        provider._active_process = process
+        with patch('harness.web_fetch.providers.base.subprocess.run',
+                   return_value=SimpleNamespace(stdout='123 1 123\n124 123 124\n')), patch(
+                   'harness.web_fetch.providers.base.os.killpg',
+                   side_effect=PermissionError('group signal forbidden')):
+            provider.cancel()
+        process.kill.assert_not_called()
+        self.assertIsNone(process.poll(), 'unresolved physical work must remain visible to the deadline boundary')
 
-    def test_cancel_swallows_direct_kill_oserror(self):
+    def test_cancel_does_not_signal_an_unobservable_process_tree(self):
         process = Mock(pid=123)
         process.poll.return_value = None
-        process.kill.side_effect = OSError("direct signal forbidden")
         provider = self.provider('print("unused")')
         provider._active_process = process
-        with patch(
-            "harness.web_fetch.providers.moli.os.killpg",
-            side_effect=PermissionError("group signal forbidden"),
-        ):
+        with patch('harness.web_fetch.providers.base.subprocess.run',
+                   side_effect=OSError('process inventory unavailable')), patch(
+                   'harness.web_fetch.providers.base.os.killpg') as signal_group:
             provider.cancel()
+        signal_group.assert_not_called()
+        process.kill.assert_not_called()
 
-    def test_cancel_permission_error_does_not_replace_deadline_timeout(self):
+    def test_cancel_permission_error_preserves_timeout_and_unresolved_worker(self):
         from harness.web_fetch.call_boundary import fetch_with_deadline
-
-        provider = self.provider("import time\ntime.sleep(10)")
-        with patch(
-            "harness.web_fetch.providers.moli.os.killpg",
-            side_effect=PermissionError("group signal forbidden"),
-        ):
-            result, worker = fetch_with_deadline(provider, self.case, 0.05)
-        self.assertFalse(result.ok)
-        self.assertEqual(result.error_type, "timeout")
-        worker.join(1)
+        provider = self.provider('import time\ntime.sleep(10)')
+        worker = None
+        try:
+            with patch('harness.web_fetch.providers.base.os.killpg',
+                       side_effect=PermissionError('group signal forbidden')):
+                result, worker = fetch_with_deadline(provider, self.case, .1)
+            self.assertFalse(result.ok)
+            self.assertEqual(result.error_type, 'timeout')
+            self.assertTrue(worker.is_alive(), 'failed cleanup must not hide remaining physical work')
+        finally:
+            provider.cancel()
+            if worker is not None:
+                worker.join(2)
+                self.assertFalse(worker.is_alive())
 
     def test_url_and_config_validation_before_process(self):
         provider = self.provider('raise AssertionError("should not run")')
@@ -1320,6 +1338,11 @@ def test_url_and_config_validation_before_process(self):
                 provider.fetch(EvalCase("x", "x", "file:///etc/passwd", "x", []), 1)
             process.assert_not_called()
         self.assertIn("wait_until", self.provider("", wait_until="invalid").validate())
+        self.assertIn(
+            "dynamic_wait_until",
+            self.provider("", dynamic_wait_until="invalid").validate(),
+        )
+        self.assertIn("wait_option", self.provider("", wait_option="invalid").validate())
         self.assertIn(
             "private_network_allowlist_hosts",
             self.provider("", private_network_allowlist_hosts=["https://example.com"]).validate(),
diff --git a/tests/test_native_browser_variants.py b/tests/test_native_browser_variants.py
new file mode 100644
index 000000000..a7ed752b2
--- /dev/null
+++ b/tests/test_native_browser_variants.py
@@ -0,0 +1,282 @@
+import unittest
+import hashlib
+import json
+import tempfile
+from pathlib import Path
+
+from harness.web_fetch.task_outputs import require_native_task_routes
+from harness.web_fetch.report_interfaces import SPECS, browser_task_interface_matrix, method_access, method_spec
+
+
+class NativeBrowserVariantTests(unittest.TestCase):
+    candidate = "moli-release"
+    cases = [{"id": "body", "url": "https://example.com/", "track": "web", "task_kind": "body"}]
+
+    def row(self, metadata, **fields):
+        return {"provider": self.candidate, "provider_type": "moli_webfetch", "case_id": "body", "ok": True,
+                "provider_metadata": metadata, **fields}
+
+    def test_branch_build_has_same_native_body_acceptance_as_release(self):
+        require_native_task_routes(self.cases, [self.row({"route": "ordinary_markdown", "output": "markdown"})])
+        with self.assertRaises(ValueError):
+            require_native_task_routes(self.cases, [self.row({"route": "json_body", "extractor": "node-html-markdown"})])
+
+    def test_branch_configuration_failure_is_not_browser_capability(self):
+        with self.assertRaises(ValueError):
+            require_native_task_routes(self.cases, [self.row({"route": "ordinary_markdown", "output": "markdown"},
+                                                         ok=False, error_type="configuration")])
+
+    def test_candidate_slot_is_registered_as_moli(self):
+        from harness.web_fetch.methods import browser_method_label, native_browser_engine
+        self.assertEqual(native_browser_engine("moli-candidate"), "moli")
+        self.assertEqual(browser_method_label("moli-candidate"), "Moli candidate build")
+
+    def test_candidate_slot_is_distinct_from_release_without_report_lineage(self):
+        from harness.web_fetch.methods import browser_method_label, browser_method_registry, native_browser_engine
+        self.assertEqual(native_browser_engine("moli-candidate"), "moli")
+        self.assertEqual(browser_method_label("moli-release"), "Moli release build")
+        self.assertEqual(browser_method_registry()["moli-candidate"]["source_url"],
+                         "https://github.com/lexmount/moli")
+        self.assertNotEqual(browser_method_label("moli-candidate"),
+                            browser_method_label("moli-release"))
+
+    def test_report_labels_mixed_fixed_evidence_by_measured_versions_and_counts(self):
+        from harness.web_fetch.methods import browser_method_label, with_measured_method_labels
+
+        @with_measured_method_labels
+        def render(out, dataset, records):
+            return browser_method_label("moli-candidate")
+
+        records = [
+            {"provider": "moli-candidate", "provider_metadata": {"binary_sha256": "a" * 64}},
+            {"provider": "moli-candidate", "provider_metadata": {"binary_sha256": "a" * 64}},
+            {"provider": "moli-candidate", "provider_metadata": {"binary_sha256": "b" * 64}},
+        ]
+        with tempfile.TemporaryDirectory() as folder:
+            out = Path(folder)
+            (out / "implementation-provenance.json").write_text(json.dumps({
+                "implementations": [
+                    {"provider": "moli", "binary_sha256": "a" * 64, "version": "1.1.15"},
+                    {"provider": "moli-candidate", "binary_sha256": "b" * 64,
+                     "version": "1.1.17（60773df3）"},
+                ]
+            }))
+            self.assertEqual(
+                render(out, {}, records),
+                "Moli 多构建结果（2 例 1.1.15；1 例 1.1.17（60773df3））",
+            )
+
+    def test_report_uses_one_short_label_for_multiple_builds_of_same_fixed_release(self):
+        from harness.web_fetch.methods import browser_method_label, with_measured_method_labels
+
+        @with_measured_method_labels
+        def render(out, dataset, records):
+            return browser_method_label("moli-candidate")
+
+        records = [
+            {"provider": "moli-candidate", "provider_metadata": {"binary_sha256": "a" * 64}},
+            {"provider": "moli-candidate", "provider_metadata": {"binary_sha256": "b" * 64}},
+        ]
+        with tempfile.TemporaryDirectory() as folder:
+            out = Path(folder)
+            (out / "implementation-provenance.json").write_text(json.dumps({
+                "implementations": [
+                    {"provider": "moli-candidate", "binary_sha256": "a" * 64,
+                     "version": "1.1.17（a737f2ae，保留结果）"},
+                    {"provider": "moli-candidate", "binary_sha256": "b" * 64,
+                     "version": "1.1.17（0d9a7ceb，修正结果）"},
+                ]
+            }))
+            self.assertEqual(render(out, {}, records), "Moli 1.1.17（候选版）")
+
+    def test_unknown_native_participant_cannot_bypass_route_validation(self):
+        with self.assertRaises(ValueError):
+            require_native_task_routes(self.cases, [self.row(
+                {}, provider="unregistered-browser", provider_type="headless_markdown"
+            )])
+
+    def test_version_labeled_moli_uses_its_declared_provider_type(self):
+        require_native_task_routes(self.cases, [self.row(
+            {"route": "ordinary_markdown", "output": "markdown"},
+            provider="moli-1.1.16-stack-1432",
+        )])
+
+    def test_interface_matrix_covers_every_family_for_six_configurations(self):
+        cases = {family: {"id": family, "url": "https://example.com/file.pdf" if family == "document" else "https://example.com/",
+                           "track": family, "task_kind": "resource" if family in {"image", "video"} else "body"}
+                 for family in ["web", "dynamic", "challenge", "risk_control", "document", "image", "video"]}
+        cases["media-file"] = {"id": "media-file", "url": "https://example.com/file.png",
+                                 "track": "image", "task_kind": "file"}
+        providers = ["moli", "lightpanda", "obscura", "chromium", "kitesurf", self.candidate]
+        matrix = browser_task_interface_matrix(cases, providers)
+        self.assertEqual(len(matrix["rows"]), 7)
+        self.assertEqual(sum(len(row["cells"]) for row in matrix["rows"]), 42)
+        for row in matrix["rows"]:
+            self.assertEqual(row["cells"]["moli"], row["cells"][self.candidate])
+        self.assertEqual(matrix["capabilities"]["moli"], matrix["capabilities"][self.candidate])
+        dynamic = next(row for row in matrix["rows"] if row["track"] == "dynamic")
+        dynamic_route = str(dynamic["cells"]["moli"])
+        self.assertIn("--layout", dynamic_route)
+        self.assertIn("--with-frames", dynamic_route)
+        self.assertIn("不使用逐题 selector", dynamic_route)
+
+    def test_measured_interface_matrix_uses_saved_route_and_wait_fields(self):
+        cases = {
+            "web": {"id": "web", "url": "https://example.test/", "track": "web",
+                    "task_kind": "body"},
+            "dynamic": {"id": "dynamic", "url": "https://example.test/app",
+                        "track": "dynamic", "task_kind": "body"},
+        }
+        records = [
+            {"provider": "moli", "case_id": "web", "provider_metadata": {
+                "route": "ordinary_markdown", "dump": "markdown",
+                "extractor": "moli_native_markdown", "output_contract": "markdown",
+                "wait_until": "done"}},
+            {"provider": "moli", "case_id": "dynamic", "provider_metadata": {
+                "route": "dynamic_native_markdown", "dump": "markdown",
+                "extractor": "moli_native_markdown", "output_contract": "markdown",
+                "wait_until": "domstable"}},
+            {"provider": "lightpanda", "case_id": "web", "provider_metadata": {}},
+            {"provider": "lightpanda", "case_id": "dynamic", "provider_metadata": {
+                "extractor": "lightpanda_native_markdown", "output_contract": "markdown",
+                "wait_until": "load", "navigation_wait_until": "domcontentloaded"}},
+        ]
+        matrix = browser_task_interface_matrix(cases, ["moli", "lightpanda"], records)
+        rows = {row["track"]: row for row in matrix["rows"]}
+        self.assertIn("Moli 原生 Markdown", rows["web"]["cells"]["moli"][0]["description"])
+        self.assertEqual(rows["web"]["cells"]["moli"][0]["wait"], "输出完成条件 done")
+        self.assertEqual(rows["dynamic"]["cells"]["moli"][0]["wait"],
+                         "输出完成条件 domstable")
+        unknown = rows["web"]["cells"]["lightpanda"][0]["description"]
+        self.assertIn("未提供可核对的接口路线", unknown)
+        self.assertNotIn("原生 HTML", unknown)
+        self.assertEqual(rows["dynamic"]["cells"]["lightpanda"][0]["wait"],
+                         "导航等待 domcontentloaded；输出完成条件 load")
+
+    def test_branch_interface_description_uses_native_moli_contract(self):
+        self.assertIsNotNone(method_access(self.candidate, []))
+        description = method_spec(self.candidate, self.row({"reported_version": "moli 1.1.15"}))
+        self.assertIn("Moli", description["entry"])
+        self.assertNotIn("pypdf", description["notes"])
+        self.assertEqual(
+            description["request"]["dynamic_body"],
+            "moli fetch --dump markdown --layout --with-frames "
+            "--wait-until domstable URL",
+        )
+        self.assertIn("不按题目设置 selector", description["notes"])
+
+    def test_versioned_moli_entry_does_not_invent_an_html_route(self):
+        for provider in (self.candidate, "moli-candidate"):
+            description = method_spec(provider, self.row({
+                "reported_version": "moli 1.1.15", "route": "ordinary_markdown",
+                "dump": "markdown", "extractor": "moli_native_markdown",
+                "wait_until": "done",
+            }, provider=provider))
+            self.assertEqual(description["entry"],
+                             "CLI · Moli · 路线以逐次调用记录为准")
+            self.assertNotIn("HTML", description["entry"])
+
+    def test_moli_interface_discloses_native_default_timeout_policy(self):
+        description = method_spec(self.candidate, self.row({
+            "reported_version": "moli 1.1.17",
+            "internal_timeout_policy": "native_default",
+            "http_connect_timeout_ms": None,
+        }))
+        self.assertIn("未传入 Moli 内部超时参数", description["notes"])
+        self.assertIn("保留该二进制默认值", str(description["params"]))
+
+    def test_moli_base_timeout_description_covers_both_evidence_policies(self):
+        for method in ("moli-webfetch", "moli"):
+            description = str(SPECS[method]["params"])
+            self.assertIn("内部参数以冻结的调用记录为准", description)
+            self.assertIn("显式模式留出收尾和清理时间", description)
+            self.assertIn("uniform", description)
+            self.assertIn("沿用产品默认值", description)
+
+    def test_moli_interface_discloses_observed_explicit_timeout_policy(self):
+        from harness.web_fetch.report_i18n import translate_text
+
+        for timeout_ms in (45_000, 40_500):
+            with self.subTest(timeout_ms=timeout_ms):
+                description = method_spec(self.candidate, self.row({
+                    "reported_version": "moli 1.1.15",
+                    "internal_timeout_policy": "explicit",
+                    "http_connect_timeout_ms": timeout_ms,
+                }))
+                self.assertIn("显式 Moli 超时", description["notes"])
+                self.assertIn(f"{timeout_ms:,} 毫秒", str(description["params"]))
+                self.assertNotIn("产品默认值。", str(description["params"]))
+                timeout_description = next(
+                    detail for key, _, detail in description["params"] if key == "外层截止"
+                )
+                self.assertIn(f"{timeout_ms:,} ms", translate_text(timeout_description))
+
+    def test_chromium_interface_uses_observed_wait_and_binds_converter_wrapper(self):
+        digest = "a" * 64
+        row = {"provider": "chromium", "provider_type": "headless_markdown",
+               "provider_metadata": {"wait_until": "domcontentloaded",
+                                     "navigation_wait_until": "load",
+                                     "converter_sha256": digest}}
+        description = method_spec("chromium", row)
+        self.assertEqual(description["request"]["wait_until"], "load")
+        self.assertEqual(description["request"]["converter_sha256"], digest)
+        self.assertIn(digest, str(description["params"]))
+        self.assertIn("代码块围栏", description["notes"])
+
+    def test_chromium_interface_does_not_invent_unobserved_converter_hash(self):
+        row = {"provider": "chromium", "provider_type": "headless_markdown",
+               "provider_metadata": {"wait_until": "domcontentloaded"}}
+        description = method_spec("chromium", row)
+        self.assertNotIn("converter_sha256", description["request"])
+
+    def test_branch_only_report_requires_native_interface_contract(self):
+        from harness.web_fetch.storage import require_current_report_profile
+        with tempfile.TemporaryDirectory() as folder:
+            root = Path(folder)
+            comparison = {"kind": "headless_markdown", "timeout_seconds": 45,
+                          "runs_per_case": 1, "concurrency": 1, "conversion": None,
+                          "reference_binding_mode": "strict", "publication_state": "verified",
+                          "unverified_reference_cases": [], "require_independent_result_review": False}
+            profile = {"dataset_id": "branch", "comparison_kind": comparison["kind"],
+                       "case_count": 1, "providers": [self.candidate],
+                       "case_ids_sha256": hashlib.sha256(b'["body"]').hexdigest(),
+                       **{k: v for k, v in comparison.items() if k != "kind"}}
+            (root / "profile.json").write_text(json.dumps(profile))
+            (root / "dataset.json").write_text(json.dumps({"id": "branch", "cases": self.cases,
+                "coverage_plan": {"web": [self.candidate]}, "comparison": comparison}))
+            row = self.row({"route": "ordinary_markdown", "output": "markdown"}, attempt_id="branch-body")
+            (root / "results.jsonl").write_text(json.dumps(row) + "\n")
+            with self.assertRaisesRegex(ValueError, "requires native_task_route_contract"):
+                require_current_report_profile(root, root / "profile.json")
+            profile["native_task_route_contract"] = 4
+            (root / "profile.json").write_text(json.dumps(profile))
+            require_current_report_profile(root, root / "profile.json")
+
+    def test_interpretation_counts_engines_and_configurations_separately(self):
+        from harness.web_fetch.report_explainer import _render_current_browser_article, _digest, _headless_article_input
+        providers = ["moli", "lightpanda", "obscura", "chromium", "kitesurf", self.candidate]
+        families = ["web", "dynamic", "challenge", "risk_control", "document", "image", "video"]
+        cases = {f: {"id": f, "name": f, "url": "https://example.com/", "track": f,
+                     "task_kind": "body", "ground_truth_main_content": "Required body"} for f in families}
+        cases["media-file"] = {"id": "media-file", "name": "media-file",
+                                 "url": "https://example.com/file.png", "track": "image",
+                                 "task_kind": "file", "ground_truth_main_content": ""}
+        records = [{"provider": p, "case_id": f, "attempt_id": p + "-" + f,
+                    "ok": False, "metrics": {}, "elapsed_ms": 10, "started_at": "2026-10-10T00:00:00Z",
+                    "artifact_path": "output.txt"} for p in providers for f in cases]
+        with tempfile.TemporaryDirectory() as folder:
+            out = Path(folder)
+            (out / "output.txt").write_text("Observed body")
+            content = {"schema": "webfetch_browser_interpretation/1", "title": "配置对比",
+                       "intro": "同一任务和答案。", "scoring": "按任务验收。", "conclusions": "保留实际结果。",
+                       "evidence_sha256": _digest(_headless_article_input(cases, records, sorted(providers))),
+                       "providers": {p: {"specimen_case_id": "web", "explanation": "未满足要求。"} for p in providers}}
+            path = out / "article.json"
+            path.write_text(json.dumps(content))
+            body = _render_current_browser_article(out, cases, records,
+                {"path": "article.json", "sha256": hashlib.sha256(path.read_bytes()).hexdigest()})
+            self.assertIn("5 种浏览器", body)
+            self.assertIn("6 种配置", body)
+            self.assertIn("Moli release build", body)
+            self.assertNotRegex(body, r"6\s*[种个]\s*浏览器")
+            self.assertEqual(body.count('data-browser-interface='), 42)
diff --git a/tests/test_native_network_dns.py b/tests/test_native_network_dns.py
index de85aba66..03b1ce6c6 100644
--- a/tests/test_native_network_dns.py
+++ b/tests/test_native_network_dns.py
@@ -84,7 +84,11 @@ def resolver(host, timeout):
             self.assertEqual(broker.traces, [])
 
 
-@unittest.skipUnless(platform.system() == "Darwin" and shutil.which("cc"), "Darwin native bridge")
+@unittest.skipUnless(
+    platform.system() == "Darwin" and shutil.which("cc")
+    and subprocess.run(["xcode-select", "-p"], capture_output=True).returncode == 0,
+    "Darwin native bridge requires installed developer tools; cc alone can be an installer shim",
+)
 class NativeDnsInteropTests(unittest.TestCase):
     def test_native_addresses_flags_concurrent_allocations_and_binding(self):
         source = r"""
diff --git a/tests/test_native_task_outputs.py b/tests/test_native_task_outputs.py
new file mode 100644
index 000000000..49a5ce955
--- /dev/null
+++ b/tests/test_native_task_outputs.py
@@ -0,0 +1,606 @@
+"""Browser-facing controls for shared output scope and forbidden answer repair."""
+import json
+import os
+import threading
+import unittest
+from collections import Counter
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+from unittest.mock import patch
+
+from harness.web_fetch.models import EvalCase
+from harness.web_fetch.providers.moli import MoliWebFetchProvider
+from harness.web_fetch.providers.headless_worker import fetch
+
+
+class NativeTaskOutputTests(unittest.TestCase):
+    def test_resource_discovery_reads_dom_without_mining_unrendered_modules(self):
+        engines = {name: os.environ.get(name.upper() + '_BINARY')
+                   for name in ('moli', 'lightpanda', 'obscura', 'chromium')}
+        engines = {name: binary for name, binary in engines.items() if binary}
+        if not engines:
+            self.skipTest('set native browser binary variables for actual controls')
+        calls = Counter()
+        page = b'''<!doctype html><title>Resource fixture</title>
+        <img src="/visible.png" srcset="/small.png 1x, /large.png 2x">
+        <img src="/image/a,b.png"><img src="/image/thumb.png?crop=10,20">
+        <img srcset="/set/a,b.png 1x, /set/thumb.png?crop=10,20 2x">
+        <video src="/visible.mp4"></video>
+        <script type="module" src="/module.js"></script>'''
+        hidden = 'https://answer-repair.invalid/unrendered.mp4'
+        class Handler(BaseHTTPRequestHandler):
+            def log_message(self, *args): pass
+            def do_GET(self):
+                calls[self.path] += 1
+                body = page if self.path == '/' else ('const unrendered = ' + json.dumps(hidden) + ';').encode()
+                self.send_response(200)
+                self.send_header('Content-Type', 'text/html' if self.path == '/' else 'application/javascript')
+                self.send_header('Content-Length', str(len(body)))
+                self.end_headers(); self.wfile.write(body)
+        server = ThreadingHTTPServer(('127.0.0.1', 0), Handler)
+        thread = threading.Thread(target=server.serve_forever, daemon=True); thread.start()
+        origin = 'http://127.0.0.1:' + str(server.server_port)
+        try:
+            for engine, binary in engines.items():
+                with self.subTest(engine=engine):
+                    calls.clear()
+                    if engine == 'moli':
+                        import hashlib, subprocess
+                        provider = MoliWebFetchProvider('moli', {'binary':binary,
+                            'block_private_networks':False, 'expected_reported_version':subprocess.check_output([binary, '--version'], text=True).strip(),
+                            'expected_binary_sha256':hashlib.sha256(__import__('pathlib').Path(binary).read_bytes()).hexdigest()})
+                        case = EvalCase('unseen-resource', 'Fixture', origin + '/', 'image', [], track='image', task_kind='resource')
+                        result = provider.fetch(case, 10)
+                        self.assertTrue(result.ok, result.error_message)
+                        content = result.content
+                    else:
+                        result = fetch({'engine':engine, 'binary':binary, 'url':origin + '/', 'timeout':10,
+                                        'output_mode':'resource', 'task_kind':'resource', 'track':'image', 'allow_private_network':True})
+                        self.assertTrue(result['ok'], result)
+                        content = result['content']
+                    if engine == 'moli':
+                        from harness.web_fetch.metrics import evaluate_resources
+                        scored = evaluate_resources(
+                            content, {}, [{"urls": [origin + '/visible.png']}],
+                            base_url=origin + '/',
+                        )
+                        links = set(scored['resource_candidate_urls'])
+                    else:
+                        links = set(json.loads(content)['links'])
+                    expected = {origin+'/visible.png', origin+'/image/a,b.png',
+                                origin+'/image/thumb.png?crop=10,20'}
+                    if engine != 'moli':
+                        expected |= {origin+'/small.png', origin+'/large.png',
+                                     origin+'/set/a,b.png', origin+'/set/thumb.png?crop=10,20'}
+                    self.assertTrue(expected <= links, links)
+                    self.assertNotIn(origin+'/image/a', links)
+                    self.assertNotIn(origin+'/20', links)
+                    self.assertNotIn(hidden, links)
+                    self.assertNotIn(origin+'/visible.mp4', links, 'an image task must not return video sources')
+                    self.assertEqual(calls['/'], 1)
+                    self.assertLessEqual(calls['/module.js'], 1, 'adapter must not refetch scripts to manufacture resource answers')
+        finally:
+            server.shutdown(); server.server_close(); thread.join(1)
+
+    def test_native_document_projection_rejects_bytes_and_preserves_native_text(self):
+        from unittest.mock import patch
+        from harness.web_fetch.providers.headless_worker import _projection_text
+        from harness.web_fetch.task_outputs import DOCUMENT_PAGE_EXPRESSION
+        import time
+        self.assertNotIn('fetch(', DOCUMENT_PAGE_EXPRESSION)
+        for kind in ('text', 'page_text'):
+            with self.subTest(kind=kind):
+                meta={}
+                actual=_projection_text(json.dumps({'kind':kind,'text':'Native document content'}),
+                                        'document_page',meta,time.monotonic()+10)
+                self.assertEqual(actual,'Native document content')
+        with patch('harness.web_fetch.providers.headless_worker.extract_document_text',
+                   side_effect=AssertionError('external parsing is forbidden')) as parser:
+            with self.assertRaises(ValueError):
+                _projection_text(json.dumps({'kind':'pdf_base64','data':'JVBERg=='}),
+                                 'document_page',{},time.monotonic()+10)
+            parser.assert_not_called()
+
+
+class NativeRoutePublicationTests(unittest.TestCase):
+    def test_standard_body_contract_allows_only_native_markdown_except_chromium(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+
+        case = {'id': 'body', 'url': 'https://example.com/',
+                'track': 'dynamic', 'task_kind': 'body'}
+        accepted = {
+            'moli': {'route': 'dynamic_native_markdown', 'output': 'markdown',
+                     'dump': 'markdown', 'extractor': 'moli_native_markdown',
+                     'output_contract': 'markdown'},
+            'lightpanda': {'extractor': 'lightpanda_native_markdown',
+                           'output_contract': 'markdown'},
+            'obscura': {'extractor': 'obscura_native_markdown',
+                        'output_contract': 'markdown'},
+            'kitesurf': {'route': 'browser_rendering_markdown',
+                         'extractor': 'cloudflare_native_markdown',
+                         'browser': 'kitesurf', 'output_contract': 'markdown'},
+            'chromium': {'extractor': 'node-html-markdown',
+                         'extractor_version': '2.0.0',
+                         'output_contract': 'markdown'},
+        }
+        for provider, metadata in accepted.items():
+            row = {'provider': provider, 'case_id': case['id'],
+                   'provider_metadata': metadata}
+            with self.subTest(provider=provider):
+                require_native_task_routes([case], [row])
+            if provider != 'chromium':
+                with self.subTest(provider=provider, shared_converter=True), \
+                        self.assertRaises(ValueError):
+                    require_native_task_routes([case], [{**row, 'provider_metadata': {
+                        **metadata, 'extractor': 'node-html-markdown'}}])
+            with self.subTest(provider=provider, html_contract=True), \
+                    self.assertRaises(ValueError):
+                require_native_task_routes([case], [{**row, 'provider_metadata': {
+                    **metadata, 'output_contract': 'native_html'}}])
+
+    def test_dynamic_native_markdown_accepts_registered_builds_but_not_conversion(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+        case={'id':'dynamic-page','url':'https://example.com/app','track':'dynamic','task_kind':'body'}
+        native={'route':'dynamic_native_markdown','output':'markdown','dump':'markdown'}
+        for provider in ('moli','moli-1.1.15'):
+            row={'provider':provider,'case_id':case['id'],'provider_metadata':native}
+            with self.subTest(provider=provider):
+                require_native_task_routes([case],[row])
+            for bad in ({**native,'output':'final_dom_html+local_markdown'},
+                        {**native,'route':'dynamic_selected_text'},
+                        {**native,'dump':'json'}):
+                with self.subTest(provider=provider,bad=bad),self.assertRaises(ValueError):
+                    require_native_task_routes([case],[{**row,'provider_metadata':bad}])
+            with self.subTest(provider=provider,wrong_family=True),self.assertRaises(ValueError):
+                require_native_task_routes([{**case,'track':'web'}],[row])
+
+    def test_moli_native_dynamic_family_requires_one_shared_route(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+
+        case = {'id':'dynamic-page','url':'https://example.com/app','track':'dynamic',
+                'task_kind':'body','retrieval_hints':{'version':3,'mode':'native'}}
+        family_receipt = {
+            'route':'dynamic_native_markdown','output':'markdown','dump':'markdown',
+            'extractor':'moli_native_markdown','output_contract':'markdown',
+            'layout':True,'with_frames':True,'wait_until':'domstable',
+            'wait':{
+                'wait_until':'domstable','scope':'dynamic_task_family',
+                'strategy':'native_task_family_completion',
+                'layout':{'requested':True,'support':'native','interface':'--layout',
+                          'scope':'dynamic_task_family'},
+                'subdocuments':{'requested':True,'support':'native',
+                                'interface':'--with-frames',
+                                'harness_content_assembly':False,
+                                'scope':'dynamic_task_family'},
+            },
+        }
+        row={'provider':'moli','case_id':case['id'],'provider_metadata':family_receipt}
+        for task_kind in ('body','structure'):
+            with self.subTest(task_kind=task_kind):
+                require_native_task_routes([{**case,'task_kind':task_kind}],[row])
+        invalid = (
+            {**family_receipt,'layout':False},
+            {**family_receipt,'with_frames':False},
+            {**family_receipt,'wait':{**family_receipt['wait'],
+                                      'scope':'declared_native_contract'}},
+            {**family_receipt,'wait':{**family_receipt['wait'],
+                                      'selector':'#case-specific'}},
+        )
+        for task_kind in ('body','structure'):
+            for metadata in invalid:
+                with self.subTest(task_kind=task_kind,metadata=metadata),self.assertRaises(ValueError):
+                    require_native_task_routes([{**case,'task_kind':task_kind}],
+                                               [{**row,'provider_metadata':metadata}])
+
+    @patch("harness.web_fetch.retrieval_hints._verify_contract_source")
+    def test_iframe_contract_accepts_native_markdown_receipts_without_content_assembly(self, _source):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+
+        case = {'id':'dynamic-iframe','url':'https://example.com/frames','track':'dynamic',
+                'task_kind':'body','retrieval_hints':{'version':3,'mode':'native',
+                'contract':'iframe-fourteen-family-headings'}}
+        frame_receipt = {'requested':True,'support':'native','interface':'--with-frames',
+                         'harness_content_assembly':False,
+                         'scope':'declared_native_contract'}
+        moli = {'route':'dynamic_native_markdown','output':'markdown','dump':'markdown',
+                'extractor':'moli_native_markdown','output_contract':'markdown',
+                'wait':{'subdocuments':frame_receipt}}
+        require_native_task_routes([case],[{'provider':'moli','case_id':'dynamic-iframe',
+                                            'provider_metadata':moli}])
+        for bad_receipt in ({**frame_receipt,'scope':'resource_task_family'},
+                            {**frame_receipt,'harness_content_assembly':True},
+                            {**frame_receipt,'answer_selector':'h3.family-name'}):
+            with self.subTest(moli_receipt=bad_receipt), self.assertRaises(ValueError):
+                require_native_task_routes([case],[{'provider':'moli','case_id':'dynamic-iframe',
+                    'provider_metadata':{**moli,'wait':{'subdocuments':bad_receipt}}}])
+
+        unsupported = {'requested':True,'support':'unsupported','interface':None,
+                       'harness_content_assembly':False}
+        kitesurf = {'route':'browser_rendering_markdown_dynamic',
+                    'extractor':'cloudflare_native_markdown','browser':'kitesurf',
+                    'output_contract':'markdown','subdocuments':unsupported}
+        require_native_task_routes([case],[{'provider':'kitesurf','case_id':'dynamic-iframe',
+                                            'provider_metadata':kitesurf}])
+        for bad in ({**kitesurf,'extractor':'node-html-markdown'},
+                    {**kitesurf,'route':'browser_rendering_html'},
+                    {**kitesurf,'subdocuments':{**unsupported,
+                                                'harness_content_assembly':True}}):
+            with self.subTest(kitesurf=bad), self.assertRaises(ValueError):
+                require_native_task_routes([case],[{'provider':'kitesurf','case_id':'dynamic-iframe',
+                                                    'provider_metadata':bad}])
+
+    def test_dynamic_family_native_frame_option_has_exact_receipt_and_no_converter(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+        frames = {'requested':True, 'support':'native_markdown_omits_child_document',
+                  'interface':'--load-resources iframe + --with-frames',
+                  'harness_content_assembly':False}
+        meta = {'engine':'lightpanda', 'extractor':'lightpanda_native_markdown',
+                'output_contract':'markdown', 'subdocuments':frames}
+        for identifier,url in [('alpha','https://example.com/alpha'),
+                               ('beta','https://example.org/beta')]:
+            case = {'id':identifier, 'url':url, 'track':'dynamic', 'task_kind':'body',
+                    'retrieval_hints':{'version':3,'mode':'native'}}
+            row = {'provider':'lightpanda', 'case_id':identifier, 'provider_metadata':meta}
+            require_native_task_routes([case],[row])
+            require_native_task_routes([case],[{**row,'provider_metadata':{**meta,
+                'subdocuments':{**frames,'scope':'dynamic_task_family'}}}])
+            invalid = [
+                {**meta,'extractor':'node-html-markdown'},
+                {**meta,'output_contract':'html'},
+                *[{**meta,'subdocuments':bad} for bad in (
+                    {**frames,'requested':False},
+                    {**frames,'support':'native'},
+                    {**frames,'interface':'--dump html'},
+                    {**frames,'harness_content_assembly':True},
+                    {**frames,'answer_selector':'iframe'},
+                    {**frames,'scope':'declared_native_contract'},
+                    {k:v for k,v in frames.items() if k!='harness_content_assembly'},
+                )],
+            ]
+            for bad in invalid:
+                with self.subTest(metadata=bad), self.assertRaises(ValueError):
+                    require_native_task_routes([case],[{**row,'provider_metadata':bad}])
+            with self.assertRaises(ValueError):
+                require_native_task_routes([{**case,'track':'web'}],[row])
+            with self.assertRaises(ValueError):
+                require_native_task_routes([case],[{**row,'provider':'obscura',
+                    'provider_metadata':{**meta,'extractor':'obscura_native_markdown'}}])
+
+    def test_kitesurf_dynamic_route_is_limited_to_dynamic_native_markdown(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+
+        meta = {'route':'browser_rendering_markdown_dynamic',
+                'extractor':'cloudflare_native_markdown','browser':'kitesurf',
+                'output_contract':'markdown'}
+        dynamic = {'id':'page','url':'https://example.com/app','track':'dynamic',
+                   'task_kind':'body'}
+        require_native_task_routes([dynamic],[{'provider':'kitesurf','case_id':'page',
+                                               'provider_metadata':meta}])
+        with self.assertRaises(ValueError):
+            require_native_task_routes([{**dynamic,'track':'web'}],[{
+                'provider':'kitesurf','case_id':'page','provider_metadata':meta}])
+
+    def test_moli_video_body_requires_native_markdown(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+
+        case={'id':'video-body','url':'https://example.com/watch','track':'video','task_kind':'body'}
+        row={'provider':'moli','case_id':'video-body','provider_metadata':{
+            'route':'ordinary_markdown','output':'markdown','dump':'markdown'}}
+        require_native_task_routes([case],[row])
+        with self.assertRaises(ValueError):
+            require_native_task_routes([case],[{**row,'provider_metadata':{
+                'route':'media_metadata_runtime','output':'visible_text_and_standard_media_metadata',
+                'output_projection_sha256':'0'*64}}])
+
+    def test_native_browsers_use_native_markdown_for_page_media_and_embedded_documents(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+
+        cases = [
+            {'id':'image-resource','url':'https://example.com/gallery','track':'image',
+             'task_kind':'resource'},
+            {'id':'video-resource','url':'https://example.com/watch','track':'video',
+             'task_kind':'resource'},
+            {'id':'video-body','url':'https://example.com/watch','track':'video',
+             'task_kind':'body'},
+            {'id':'embedded-document','url':'https://example.com/viewer/','track':'document',
+             'task_kind':'body'},
+        ]
+        metadata = {
+            'lightpanda': {'extractor':'lightpanda_native_markdown',
+                           'output_contract':'markdown'},
+            'obscura': {'extractor':'obscura_native_markdown',
+                        'output_contract':'markdown'},
+            'kitesurf': {'route':'browser_rendering_markdown',
+                         'extractor':'cloudflare_native_markdown',
+                         'browser':'kitesurf','output_contract':'markdown'},
+            'chromium': {'extractor':'node-html-markdown',
+                         'extractor_version':'2.0.0',
+                         'output_contract':'markdown'},
+        }
+        for case in cases:
+            for provider, meta in metadata.items():
+                row = {'provider':provider,'case_id':case['id'],'provider_metadata':meta}
+                with self.subTest(case=case['id'], provider=provider):
+                    require_native_task_routes([case],[row])
+                with self.subTest(case=case['id'], provider=provider, projection=True), \
+                        self.assertRaises(ValueError):
+                    require_native_task_routes([case],[{**row,'provider_metadata':{
+                        'extractor':'rendered_dom_resources',
+                        'output_projection_sha256':'0'*64}}])
+
+    def test_page_routes_prioritize_native_output_and_keep_required_identity(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+        pages=[{'id':'page','url':'https://example.com/page','track':'challenge','task_kind':'structure'}]
+        accepted={'moli':{'route':'ordinary_markdown','output':'markdown'},
+                  'lightpanda':{'extractor':'lightpanda_native_markdown'},
+                  'obscura':{'extractor':'obscura_native_markdown'},
+                  'chromium':{'extractor':'node-html-markdown','extractor_version':'2.0.0'},
+                  'kitesurf':{'route':'browser_rendering_markdown','extractor':'cloudflare_native_markdown','browser':'kitesurf'}}
+        for provider,meta in accepted.items():
+            row={'provider':provider,'case_id':'page','provider_metadata':meta}
+            require_native_task_routes(pages,[row])
+            with self.subTest(provider=provider),self.assertRaises(ValueError):
+                require_native_task_routes(pages,[{**row,'provider_metadata':{}}])
+        with self.assertRaises(ValueError):
+            require_native_task_routes(pages,[{'provider':'moli','case_id':'page','provider_metadata':{
+                'route':'challenge_json_trace','output':'final_dom_html+local_markdown+network_diagnostics'}}])
+        identity=[{**pages[0],'track':'risk_control','task_kind':'body','source_benchmark':{'risk_control':{'navigation_contract':{
+            'requested_url':pages[0]['url'],'observed_final_url':'https://example.com/final'}}}}]
+        meta={'route':'page_identity_json','output':'final_dom_html+local_markdown','final_url_source':'same_call_json'}
+        row={'provider':'moli','case_id':'page','provider_metadata':meta}
+        with self.assertRaises(ValueError):
+            require_native_task_routes(identity,[row])
+        require_native_task_routes(identity,[{**row,'provider_metadata':accepted['moli']}])
+        for provider,meta in [('moli',{'route':'ordinary_markdown','output':'markdown'}),
+                              ('chromium',{'extractor':'node-html-markdown'})]:
+            case_scope=identity if provider=='moli' else pages
+            stopped={'provider':provider,'case_id':'page','ok':False,'error_type':'timeout','provider_metadata':meta}
+            require_native_task_routes(case_scope,[stopped])
+            if provider=='chromium':
+                with self.assertRaises(ValueError):
+                    require_native_task_routes(case_scope,[{**stopped,'ok':True}])
+
+    def test_configuration_failures_cannot_be_published_as_browser_results(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+        cases=[{'id':'pdf','url':'https://example.com/file.pdf','track':'document','task_kind':'body'}]
+        native={'moli':{'route':'ordinary_markdown','output':'markdown'},
+                'lightpanda':{'extractor':'lightpanda_native_markdown'},
+                'obscura':{'extractor':'obscura_native_markdown'},
+                'chromium':{'extractor':'node-html-markdown','extractor_version':'2.0.0'},
+                'kitesurf':{'route':'browser_rendering_markdown','extractor':'cloudflare_native_markdown','browser':'kitesurf'}}
+        for provider,meta in native.items():
+            row={'provider':provider,'case_id':'pdf','provider_metadata':meta,'ok':False}
+            with self.subTest(provider=provider):
+                require_native_task_routes(cases,[{**row,'error_type':'api_error'}])
+                with self.assertRaisesRegex(ValueError,'Native task route contract violated'):
+                    require_native_task_routes(cases,[{**row,'error_type':'configuration'}])
+
+    def test_document_text_cannot_be_supplied_by_external_converter(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+        cases=[{'id':'pdf','url':'https://example.com/file.pdf','track':'document','task_kind':'body'}]
+        native={'moli':{'route':'ordinary_markdown','output':'markdown'},
+                'lightpanda':{'extractor':'lightpanda_native_markdown'},
+                'obscura':{'extractor':'obscura_native_markdown'},
+                'chromium':{'extractor':'node-html-markdown','extractor_version':'2.0.0'},
+                'kitesurf':{'route':'browser_rendering_markdown','extractor':'cloudflare_native_markdown','browser':'kitesurf'}}
+        for provider,meta in native.items():
+            row={'provider':provider,'case_id':'pdf','provider_metadata':meta,'ok':False}
+            require_native_task_routes(cases,[row])
+            for bad in ({**meta,'document_extractor':'pypdf'},
+                        {'route':'raw_document','extractor':provider+'_cdp_response+document_text'},
+                        {'route':'workers_ai_tomarkdown','extractor':'external_conversion'}):
+                with self.subTest(provider=provider,bad=bad),self.assertRaises(ValueError):
+                    require_native_task_routes(cases,[{**row,'provider_metadata':bad}])
+        with self.assertRaises(ValueError):
+            require_native_task_routes(cases,[{'provider':'moli','case_id':'pdf',
+                'provider_metadata':{'route':'document_page_runtime',
+                'extractor':'browser_runtime_document_text',
+                'document_extractor':'pdfjs_runtime',
+                'output_contract':'readable_document_text'}}])
+
+    def test_kitesurf_resource_uses_native_markdown(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+        cases=[{'id':'images','url':'https://example.com/','track':'image','task_kind':'resource'}]
+        meta={'browser':'kitesurf','route':'browser_rendering_markdown',
+              'extractor':'cloudflare_native_markdown','output_contract':'markdown'}
+        row={'provider':'kitesurf','case_id':'images','provider_metadata':meta}
+        require_native_task_routes(cases,[row])
+        for field in ('browser','route','extractor'):
+            bad={k:v for k,v in meta.items() if k!=field}
+            with self.subTest(missing=field),self.assertRaises(ValueError):
+                require_native_task_routes(cases,[{**row,'provider_metadata':bad}])
+
+    def test_kitesurf_native_markdown_covers_each_page_deliverable_family(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+
+        examples = [
+            ({'id':'image','url':'https://example.com/gallery','track':'image',
+              'task_kind':'resource'}),
+            ({'id':'video','url':'https://example.com/watch','track':'video',
+              'task_kind':'resource'}),
+            ({'id':'video-link','url':'https://example.com/watch','track':'video',
+              'task_kind':'resource','expected_resources':[{'kind':'video-link'}]}),
+            ({'id':'video-body','url':'https://example.com/watch','track':'video',
+              'task_kind':'body'}),
+            ({'id':'document-page','url':'https://example.com/viewer/','track':'document',
+              'task_kind':'body'}),
+        ]
+        for case in examples:
+            meta = {
+                'browser':'kitesurf',
+                'route':'browser_rendering_markdown',
+                'extractor':'cloudflare_native_markdown',
+                'output_contract':'markdown',
+            }
+            row = {'provider':'kitesurf','case_id':case['id'],
+                   'provider_metadata':meta}
+            with self.subTest(case=case['id']):
+                require_native_task_routes([case],[row])
+            with self.subTest(case=case['id'], shared_projection=True), \
+                    self.assertRaises(ValueError):
+                require_native_task_routes([case],[{**row,'provider_metadata':{
+                    **meta,'extractor':'rendered_dom_resources',
+                    'output_projection_sha256':'0'*64}}])
+
+    def test_network_timeout_with_only_runner_receipts_is_not_an_adapter_substitution(self):
+        from harness.web_fetch.task_outputs import require_native_task_routes
+        cases=[{'id':'images','url':'https://example.com/','track':'image','task_kind':'resource'}]
+        row={'provider':'kitesurf','case_id':'images','ok':False,'error_type':'timeout',
+             'provider_metadata':{'call_log':{'path':'call.json','sha256':'0'*64},
+                                  'configured_min_interval_seconds':0,'client_throttle_wait_ms':0,
+                                  'retry':{'physical_attempts':2,'retries_used':1}}}
+        require_native_task_routes(cases,[row])
+        with self.assertRaises(ValueError):
+            require_native_task_routes(cases,[{**row,'provider_metadata':{**row['provider_metadata'],'browser':'chromium'}}])
+
+    def test_resource_routes_bind_each_native_markdown_and_chromium_projection(self):
+        import hashlib
+        from harness.web_fetch.task_outputs import require_native_task_routes, resource_expression
+        cases=[{'id':'images','url':'https://example.com/','track':'image','task_kind':'resource'}]
+        digest=hashlib.sha256(resource_expression('image').encode()).hexdigest()
+        resource_frames={'requested':True,'support':'native','interface':'--with-frames',
+                         'harness_content_assembly':False,
+                         'scope':'resource_task_family'}
+        moli={'route':'resource_native_markdown','output':'native_markdown_resource_urls',
+              'output_contract':'native_markdown_resource_urls','dump':'markdown',
+              'extractor':'moli_native_markdown','network_trace_requested':False,
+              'wait':{'subdocuments':resource_frames}}
+        row={'provider':'moli','case_id':'images','provider_metadata':moli}
+        require_native_task_routes(cases,[row])
+        for bad in ({**moli,'dump':'html'},
+                    {**moli,'output_projection_sha256':digest},
+                    {**moli,'output_contract':'structured_resource_urls'},
+                    {**moli,'route':'resource_native_html','output':'native_html_resource_urls',
+                     'dump':'html','extractor':'moli_native_html'},
+                    {**moli,'route':'resource_native_json_trace','output':'native_json_resource_urls',
+                     'dump':'json','extractor':'moli_native_json',
+                     'network_trace_requested':True},
+                    {**moli,'wait':{'subdocuments':{
+                        **resource_frames,'scope':'declared_native_contract'}}}):
+            with self.subTest(provider='moli',bad=bad),self.assertRaises(ValueError):
+                require_native_task_routes(cases,[{**row,'provider_metadata':bad}])
+        video_cases=[{'id':'video','url':'https://example.com/','track':'video','task_kind':'resource'}]
+        video={**moli,'wait_until':'done'}
+        require_native_task_routes(video_cases,[{'provider':'moli','case_id':'video','provider_metadata':video}])
+        with self.assertRaises(ValueError):
+            require_native_task_routes(video_cases,[{'provider':'moli','case_id':'video',
+                'provider_metadata':{**video,'network_trace_requested':True}}])
+        for provider in ('lightpanda','obscura'):
+            meta={'extractor':provider+'_native_markdown','output_contract':'markdown'}
+            row={'provider':provider,'case_id':'images','provider_metadata':meta}
+            require_native_task_routes(cases,[row])
+            with self.subTest(provider=provider),self.assertRaises(ValueError):
+                require_native_task_routes(cases,[{**row,'provider_metadata':{
+                    'output_projection_sha256':digest}}])
+        chromium={'provider':'chromium','case_id':'images',
+                  'provider_metadata':{'extractor':'node-html-markdown',
+                                       'extractor_version':'2.0.0',
+                                       'output_contract':'markdown'}}
+        require_native_task_routes(cases,[chromium])
+        with self.assertRaises(ValueError):
+            require_native_task_routes(cases,[{**chromium,'provider_metadata':{
+                'output_projection_sha256':digest}}])
+
+
+class AllFamilyInterfaceTests(unittest.TestCase):
+    def test_reader_matrix_exposes_all_families_and_non_native_processing(self):
+        from copy import deepcopy
+        from harness.web_fetch.report_interfaces import browser_task_interface_matrix
+        providers=['moli','lightpanda','obscura','chromium','kitesurf']
+        cases={track:{'id':track,'url':'https://example.test/page','track':track,'task_kind':'body'}
+               for track in ['web','dynamic','challenge','risk_control','document','image','video']}
+        cases['document']['url']='https://example.test/file.pdf'
+        cases['image']['task_kind']=cases['video']['task_kind']='resource'
+        cases['media-file']={'id':'media-file','url':'https://example.test/file.png',
+                             'track':'image','task_kind':'file'}
+        cases['risk_control']['source_benchmark']={'risk_control':{'navigation_contract':{
+            'requested_url':'https://example.test/page','observed_final_url':'https://example.test/final'}}}
+        matrix=browser_task_interface_matrix(cases,providers)
+        self.assertEqual(len(matrix['rows']),7)
+        self.assertEqual(sum(len(row['cells']) for row in matrix['rows']),35)
+        rows={row['track']:row for row in matrix['rows']}
+        for provider in providers:
+            self.assertIn('不使用外部',rows['document']['cells'][provider][0]['description'])
+            self.assertTrue(rows['web']['cells'][provider][0]['wait'])
+        for provider in ('lightpanda','obscura','kitesurf'):
+            self.assertIn('Markdown',rows['web_media']['cells'][provider][0]['description'])
+        self.assertIn('共同转换',rows['web_media']['cells']['chromium'][0]['description'])
+        self.assertIn('直接 PDF/DOCX 未提供可读正文',rows['document']['cells']['moli'][0]['description'])
+        self.assertIn('共同转换',rows['web']['cells']['chromium'][0]['description'])
+        self.assertIn('内置转换',rows['challenge']['cells']['moli'][0]['description'])
+        self.assertIn('内置转换',rows['risk_control']['cells']['moli'][0]['description'])
+        self.assertNotIn('共同转换',rows['risk_control']['cells']['moli'][0]['description'])
+        self.assertEqual(len(rows['web_media']['cells']['moli']),1)
+        self.assertIn('原生 Markdown',rows['web_media']['cells']['moli'][0]['description'])
+        self.assertIn('共同评分器只识别题目指定的资源 URL',rows['web_media']['cells']['moli'][0]['description'])
+        self.assertIn('直接从原生 Markdown 核对',rows['web_media']['cells']['moli'][0]['description'])
+        self.assertEqual(rows['media_file']['count'],1)
+        changed=deepcopy(cases)
+        for case in changed.values():
+            case.update(ground_truth_main_content='Different hidden answer',expected_resources=[{'url':'https://secret.test/answer'}])
+        self.assertEqual(browser_task_interface_matrix(changed,providers),matrix)
+
+    def test_wait_labels_distinguish_page_interfaces_from_document_and_media_interfaces(self):
+        from harness.web_fetch.report_interfaces import browser_task_interface_matrix
+        cases={
+            'page':{'url':'https://example.test/page','track':'web','task_kind':'body'},
+            'embedded':{'url':'https://example.test/viewer.html','track':'document','task_kind':'body'},
+            'metadata':{'url':'https://example.test/watch','track':'video','task_kind':'body'},
+            'resources':{'url':'https://example.test/gallery','track':'image','task_kind':'resource'},
+        }
+        providers=['lightpanda','kitesurf','obscura']
+        rows={row['track']:row for row in browser_task_interface_matrix(cases,providers)['rows']}
+        self.assertIn('done',rows['web']['cells']['lightpanda'][0]['wait'])
+        self.assertIn('networkidle2',rows['web']['cells']['kitesurf'][0]['wait'])
+        for provider in providers:
+            self.assertEqual(rows['document']['cells'][provider][0]['mode'], 'markdown')
+            media_parts={part['mode']:part for part in rows['web_media']['cells'][provider]}
+            self.assertEqual(set(media_parts), {'markdown'})
+            self.assertIn('Markdown', media_parts['markdown']['description'])
+
+    def test_all_thirty_five_combinations_follow_deliverable_without_answer_values(self):
+        from harness.web_fetch.providers.headless import ENGINES, output_mode_for_case
+        from harness.web_fetch.task_outputs import resource_detail_links, resource_expression
+        families = [('web','body','https://example.test/page','markdown'),
+                    ('dynamic','body','https://example.test/app','markdown'),
+                    ('challenge','body','https://example.test/popular','markdown'),
+                    ('risk_control','body','https://example.test/protected','markdown'),
+                    ('document','body','https://example.test/paper.pdf#page=2','markdown'),
+                    ('image','resource','https://example.test/gallery',None),
+                    ('video','resource','https://example.test/watch',None)]
+        for engine in ENGINES:
+            for track, kind, url, expected_mode in families:
+                with self.subTest(engine=engine, track=track):
+                    case = EvalCase('arbitrary-id','Arbitrary',url,track,[],track=track,task_kind=kind)
+                    selected = output_mode_for_case(engine,'headless_markdown',case)
+                    expected = expected_mode
+                    if expected is None:
+                        expected = ('markdown' if engine in {
+                            'lightpanda','obscura','chromium','kitesurf'} else 'resource')
+                    self.assertEqual(selected,expected)
+        for answer in ('https://secret-answer.test/video/42','https://different-answer.test/watch/99'):
+            case = EvalCase('arbitrary-id','Arbitrary','https://example.test/', 'video',[],
+                            track='video',task_kind='resource',expected_resources=[{'kind':'video-link','url':answer}])
+            expression = resource_expression(case.track,resource_detail_links(case))
+            self.assertNotIn(answer,expression)
+            self.assertEqual(expression,resource_expression('video',True))
+
+class ResourceAttributeParsingTests(unittest.TestCase):
+    def test_single_url_commas_and_srcset_candidates_preserve_address_identity(self):
+        import shutil, subprocess
+        from harness.web_fetch.task_outputs import resource_expression
+        node = shutil.which('node')
+        if not node:
+            self.skipTest('Node is required by the repository UI test runtime')
+        attributes = [{'src': '/image/a,b.png'}, {'src': '/image/thumb.png?crop=10,20'},
+                      {'srcset': '/set/a,b.png 1x, /set/thumb.png?crop=10,20 2x'},
+                      {'srcset': '/first.png, /second.png 2x'}, {'src': 'data:image/png;base64,AA=='}]
+        setup = '''const location={href:'https://example.test/page'};
+        const nodes=ATTRS.map(attrs=>({baseURI:location.href,getAttribute:name=>attrs[name]||null}));
+        const document={baseURI:location.href,querySelectorAll:selector=>selector==='iframe,frame'?[]:nodes};
+        process.stdout.write(eval(EXPR));'''
+        code = setup.replace('ATTRS', json.dumps(attributes)).replace('EXPR', json.dumps(resource_expression('image')))
+        result = subprocess.run([node, '-e', code], check=True, capture_output=True, text=True)
+        self.assertEqual(set(json.loads(result.stdout)['links']), {
+            'https://example.test/image/a,b.png', 'https://example.test/image/thumb.png?crop=10,20',
+            'https://example.test/set/a,b.png', 'https://example.test/set/thumb.png?crop=10,20',
+            'https://example.test/first.png', 'https://example.test/second.png'})
diff --git a/tests/test_network_dns.py b/tests/test_network_dns.py
index 25d5649f9..fdb20e6ec 100644
--- a/tests/test_network_dns.py
+++ b/tests/test_network_dns.py
@@ -8,6 +8,57 @@
 
 
 class NetworkDnsTests(unittest.TestCase):
+    def test_shared_chromium_profile_enables_strict_doh_without_system_fallback(self):
+        import tempfile
+        from pathlib import Path
+        from harness.web_fetch.network_dns import (
+            DNS_ENDPOINT,
+            configure_chromium_dns_profile,
+        )
+        with tempfile.TemporaryDirectory() as directory:
+            profile = Path(directory)
+            metadata = configure_chromium_dns_profile(profile, "public_doh")
+            state = json.loads((profile / "Local State").read_text())
+            self.assertEqual(state["dns_over_https"], {
+                "mode": "secure", "templates": DNS_ENDPOINT + "{?dns}",
+            })
+            self.assertTrue(state["built_in_dns_client_enabled"])
+            self.assertFalse(metadata["system_dns_fallback"])
+        with tempfile.TemporaryDirectory() as directory:
+            metadata = configure_chromium_dns_profile(directory, "system")
+            self.assertEqual(metadata, {"dns_mode": "system"})
+            self.assertFalse((Path(directory) / "Local State").exists())
+
+    def test_native_process_environment_records_binding_and_resolutions(self):
+        import time
+        from pathlib import Path
+        from harness.web_fetch.network_dns import native_process_dns_environment
+        observed = {}
+        class Broker:
+            traces = [{'hostname': 'public.example', 'addresses': ['203.0.113.1']}]
+            def __enter__(self): return self
+            def __exit__(self, *args): observed['closed'] = True
+            def begin_call(self, remaining): observed['remaining'] = remaining
+            def environment(self, library, base=None):
+                observed.update(library=library, base=base)
+                return {'DNS': 'public'}
+        metadata = {}
+        with patch('harness.web_fetch.network_dns.validate_native_dns_library',
+                   return_value=(Path('/resolver.dylib'), {'library_sha256': 'a'*64})), \
+             patch('harness.web_fetch.network_dns.NativeDnsBroker', return_value=Broker()):
+            with native_process_dns_environment(
+                'public_doh', '/resolver.dylib', time.monotonic() + 2,
+                metadata, {'BASE': '1'}
+            ) as environment:
+                self.assertEqual(environment, {'DNS': 'public'})
+        self.assertEqual(observed['library'], Path('/resolver.dylib'))
+        self.assertEqual(observed['base'], {'BASE': '1'})
+        self.assertGreater(observed['remaining'], 0)
+        self.assertTrue(observed['closed'])
+        self.assertEqual(metadata['dns_mode'], 'public_doh')
+        self.assertEqual(metadata['dns_resolutions'], Broker.traces)
+        self.assertEqual(metadata['native_dns_binding']['library_sha256'], 'a'*64)
+
     def test_resolves_both_families_without_filtering_native_safety_input(self):
         calls = []
         def open_response(request, timeout):
diff --git a/tests/test_network_preflight.py b/tests/test_network_preflight.py
index c1411b6d7..0c137dc63 100644
--- a/tests/test_network_preflight.py
+++ b/tests/test_network_preflight.py
@@ -5,7 +5,11 @@
 
 class NetworkPreflightTests(unittest.TestCase):
     def test_synthetic_dns_fails_before_calls_but_public_dns_passes(self):
-        for address, accepted in [('198.19.93.254', False), ('185.199.108.153', True)]:
+        for address, accepted in [
+            ('198.19.93.254', False),
+            ('10.2.0.11', False),
+            ('185.199.108.153', True),
+        ]:
             with self.subTest(address=address):
                 def resolve(host, port, **kwargs):
                     return [(socket.AF_INET, socket.SOCK_STREAM, 6, '', (address, port))]
@@ -25,7 +29,9 @@ def resolve(host, port, **kwargs):
         audit=inspect_system_dns(['https://public.example/a', 'https://public.example/b'], resolver=resolve)
         self.assertEqual(calls, ['public.example'])
         self.assertEqual(audit['hosts'][0]['dns_error'], 'gaierror')
-        self.assertTrue(audit['usable_for_guarded_local_comparison'])
+        self.assertFalse(audit['usable_for_guarded_local_comparison'])
+        with self.assertRaisesRegex(ValueError, 'resolution failed'):
+            require_usable_public_dns(audit)
 
 
     def test_runner_rejects_synthetic_dns_before_calls_and_artifacts(self):
@@ -75,14 +81,115 @@ def test_mixed_native_dns_modes_fail_before_resolution(self):
                 preflight_guarded_providers(providers, [])
         resolve.assert_not_called()
 
-    def test_public_dns_resolver_failure_stops_before_product_calls(self):
+    def test_local_browser_and_native_method_must_share_dns_mode(self):
         from types import SimpleNamespace
         from unittest.mock import patch
         from harness.web_fetch.network_preflight import preflight_guarded_providers
-        provider = SimpleNamespace(type='cowagent_builtin', config={'dns_mode': 'public_doh'})
-        with patch('harness.web_fetch.network_dns.lookup_public_dns', side_effect=socket.gaierror('failure')):
-            with self.assertRaisesRegex(ValueError, 'Public DNS preflight failed'):
-                preflight_guarded_providers([provider], [SimpleNamespace(url='https://example.com/')])
+        providers = [
+            SimpleNamespace(type='moli_webfetch', config={'dns_mode': 'public_doh'}),
+            SimpleNamespace(type='headless_markdown',
+                            config={'engine': 'lightpanda', 'dns_mode': 'system'}),
+            SimpleNamespace(type='headless_markdown',
+                            config={'engine': 'kitesurf'}),
+        ]
+        with patch('harness.web_fetch.network_preflight.inspect_system_dns') as resolve:
+            with self.assertRaisesRegex(ValueError, 'same dns_mode'):
+                preflight_guarded_providers(providers, [])
+        resolve.assert_not_called()
+
+    def test_partial_public_dns_failure_is_retained_for_the_affected_calls(self):
+        from types import SimpleNamespace
+        from unittest.mock import patch
+        from harness.web_fetch.network_preflight import preflight_guarded_providers
+        for mode in ('system','public_doh'):
+            provider = SimpleNamespace(type='cowagent_builtin', config={'dns_mode':mode})
+            def resolve(host, *args, **kwargs):
+                if host == 'unresolved.example':raise socket.gaierror('failure')
+                return ([(socket.AF_INET,socket.SOCK_STREAM,6,'',('185.199.108.153',443))]
+                        if mode=='system' else [('185.199.108.153',4)])
+            target=('socket.getaddrinfo' if mode=='system' else 'harness.web_fetch.network_dns.lookup_public_dns')
+            with self.subTest(mode=mode), patch(target,side_effect=resolve):
+                audit = preflight_guarded_providers([provider], [
+                    SimpleNamespace(url='https://public.example/'),
+                    SimpleNamespace(url='https://unresolved.example/')])
+                self.assertEqual(audit['unresolved_hosts'], ['unresolved.example'])
+                self.assertFalse(audit['usable_for_guarded_local_comparison'])
+
+    def test_all_public_dns_failures_stop_before_product_calls(self):
+        from types import SimpleNamespace
+        from unittest.mock import patch
+        from harness.web_fetch.network_preflight import preflight_guarded_providers
+        for mode in ('system','public_doh'):
+            provider=SimpleNamespace(type='cowagent_builtin',config={'dns_mode':mode})
+            target=('socket.getaddrinfo' if mode=='system' else 'harness.web_fetch.network_dns.lookup_public_dns')
+            with self.subTest(mode=mode), patch(target,side_effect=socket.gaierror('failure')):
+                with self.assertRaisesRegex(ValueError,'all declared public benchmark hosts'):
+                    preflight_guarded_providers([provider],[SimpleNamespace(url='https://one.example/'),
+                                                            SimpleNamespace(url='https://two.example/')])
+
+    def test_partial_dns_failure_reaches_both_measured_calls(self):
+        from pathlib import Path
+        from tempfile import TemporaryDirectory
+        from unittest.mock import patch
+        from harness.web_fetch.models import EvalCase, ProviderResult
+        from harness.web_fetch.providers.base import Provider
+        from harness.web_fetch.runner import run_evaluation
+        for mode in ('system','public_doh'):
+            calls=[]
+            class GuardedFixture(Provider):
+                def fetch(self, case, timeout):
+                    calls.append(case.id)
+                    return ProviderResult(ok=case.id=='resolved',
+                        content='public body' if case.id=='resolved' else '',
+                        error_type=None if case.id=='resolved' else 'dns',
+                        error_message=None if case.id=='resolved' else 'name resolution failed',metadata={})
+            provider=GuardedFixture('guarded',{'type':'openclaw_builtin','dns_mode':mode})
+            def resolve(host,*args,**kwargs):
+                if host=='unresolved.example':raise socket.gaierror('failure')
+                return ([(socket.AF_INET,socket.SOCK_STREAM,6,'',('185.199.108.153',443))]
+                        if mode=='system' else [('185.199.108.153',4)])
+            target=('socket.getaddrinfo' if mode=='system' else 'harness.web_fetch.network_dns.lookup_public_dns')
+            with self.subTest(mode=mode), TemporaryDirectory() as directory, patch(target,side_effect=resolve):
+                output=Path(directory)/'measurement'
+                rows,_=run_evaluation(output_dir=output,dataset_meta={},dataset_path=Path('fixture.json'),
+                    cases=[EvalCase('resolved','resolved','https://public.example/','control',[]),
+                           EvalCase('unresolved','unresolved','https://unresolved.example/','control',[])],
+                    providers=[provider],provider_config_path=Path('fixture-providers.json'),
+                    runs=1,timeout=45,delay=0,max_failure_retries=0)
+                audit=__import__('json').loads((output/'network-preflight.json').read_text())
+                self.assertEqual(calls,['resolved','unresolved'])
+                self.assertEqual([row['error_type'] for row in rows],[None,'dns'])
+                self.assertEqual(audit['unresolved_hosts'],['unresolved.example'])
+
+    def test_partial_failure_does_not_hide_private_or_synthetic_answers(self):
+        from types import SimpleNamespace
+        from unittest.mock import patch
+        from harness.web_fetch.network_preflight import preflight_guarded_providers
+        for mode in ('system','public_doh'):
+            provider=SimpleNamespace(type='cowagent_builtin',config={'dns_mode':mode})
+            for unsafe in ('198.18.0.1','10.0.0.1'):
+                def resolve(host,*args,**kwargs):
+                    if host=='unresolved.example':raise socket.gaierror('failure')
+                    return ([(socket.AF_INET,socket.SOCK_STREAM,6,'',(unsafe,443))]
+                            if mode=='system' else [(unsafe,4)])
+                target=('socket.getaddrinfo' if mode=='system' else 'harness.web_fetch.network_dns.lookup_public_dns')
+                with self.subTest(mode=mode,address=unsafe),patch(target,side_effect=resolve):
+                    with self.assertRaisesRegex(ValueError,'Do not disable'):
+                        preflight_guarded_providers([provider],[SimpleNamespace(url='https://unresolved.example/'),
+                                                                SimpleNamespace(url='https://unsafe.example/')])
+
+
+    def test_strict_public_dns_failure_never_falls_back_to_system_resolution(self):
+        from unittest.mock import Mock, patch
+        from harness.web_fetch.network_dns import public_dns_context
+        fallback = Mock(side_effect=AssertionError('system fallback must not run'))
+        resolver = Mock(side_effect=socket.gaierror('failure'))
+        with patch('harness.web_fetch.network_dns._SYSTEM_GETADDRINFO', fallback):
+            with public_dns_context('public_doh', 1, resolver=resolver):
+                with self.assertRaises(socket.gaierror):
+                    socket.getaddrinfo('unresolved.example', 443)
+        resolver.assert_called_once()
+        fallback.assert_not_called()
 
     def test_browser_workers_cannot_bypass_shared_dns_gate(self):
         from types import SimpleNamespace
@@ -94,3 +201,39 @@ def test_browser_workers_cannot_bypass_shared_dns_gate(self):
                 with self.assertRaisesRegex(ValueError, 'synthetic'):
                     preflight_guarded_providers([SimpleNamespace(type=kind, config={})],
                                                [SimpleNamespace(url='https://example.com/')])
+
+
+def test_explicit_isolated_fixtures_reach_the_runner(tmp_path):
+    from unittest.mock import patch
+    from harness.web_fetch.models import EvalCase, ProviderResult
+    from harness.web_fetch.providers.base import Provider
+    from harness.web_fetch.runner import run_evaluation
+    class Fixture(Provider):
+        def fetch(self, case, timeout):
+            return ProviderResult(ok=True, content='Fixture body')
+    provider = Fixture('isolated', {'type': 'headless_markdown', 'engine': 'chromium',
+        'network_policy': 'loopback_only', 'allow_private_network': True})
+    with patch('socket.getaddrinfo', side_effect=AssertionError('fixture requires no public DNS lookup')):
+        rows, _ = run_evaluation(output_dir=tmp_path/'run', dataset_meta={},
+            dataset_path=tmp_path/'dataset.json',
+            cases=[EvalCase('fixture', 'Fixture', 'http://127.0.0.1:12345/fixture', 'web', [])],
+            providers=[provider], provider_config_path=tmp_path/'providers.json',
+            runs=1, timeout=5, delay=0, max_failure_retries=0)
+    assert len(rows) == 1 and rows[0]['ok']
+
+
+def test_fixture_exemption_requires_isolation_and_loopback_scope():
+    from types import SimpleNamespace
+    from unittest.mock import patch
+    import pytest
+    from harness.web_fetch.network_preflight import preflight_guarded_providers
+    fixture = {'engine': 'chromium', 'allow_private_network': True, 'network_policy': 'loopback_only'}
+    with pytest.raises(ValueError, match='loopback task URLs'):
+        preflight_guarded_providers([SimpleNamespace(type='headless_markdown', config=fixture)],
+            [SimpleNamespace(url='https://example.com/')])
+    for incomplete in ({'engine':'chromium', 'allow_private_network':True},
+                       {'engine':'chromium', 'network_policy':'loopback_only'}):
+        with patch('socket.getaddrinfo', return_value=[(socket.AF_INET,socket.SOCK_STREAM,6,'',('127.0.0.1',80))]):
+            with pytest.raises(ValueError, match='non-public'):
+                preflight_guarded_providers([SimpleNamespace(type='headless_markdown', config=incomplete)],
+                    [SimpleNamespace(url='http://127.0.0.1/')])
diff --git a/tests/test_private_raw_response_artifacts.py b/tests/test_private_raw_response_artifacts.py
index 97b9f4bc3..485de4e52 100644
--- a/tests/test_private_raw_response_artifacts.py
+++ b/tests/test_private_raw_response_artifacts.py
@@ -121,7 +121,9 @@ def __init__(self):
             def fetch(self, case, timeout):
                 self.calls += 1
                 raw = f'private-{self.calls}'.encode()
-                return ProviderResult(self.calls == 2, 'wrong' if self.calls == 1 else 'Expected',
+                return ProviderResult(self.calls == 2, '' if self.calls == 1 else 'Expected',
+                    error_type='network' if self.calls == 1 else None,
+                    error_message='synthetic transient failure' if self.calls == 1 else None,
                     metadata={
                         '_raw_response_b64': base64.b64encode(raw).decode('ascii'),
                         'raw_response_sha256': hashlib.sha256(raw).hexdigest(),
diff --git a/tests/test_provider_evidence_boundary.py b/tests/test_provider_evidence_boundary.py
index 4406bf68f..0229561b4 100644
--- a/tests/test_provider_evidence_boundary.py
+++ b/tests/test_provider_evidence_boundary.py
@@ -165,7 +165,13 @@ class Fixture(Provider):
         def fetch(self, case, timeout):
             self.calls[case.id] = self.calls.get(case.id, 0) + 1
             private = b'{"synthetic_private_response":true}'
-            return ProviderResult(True, 'Expected fixture' if self.calls[case.id] == 2 else 'Wrong',
+            return ProviderResult(
+                self.calls[case.id] == 2,
+                'Expected fixture' if self.calls[case.id] == 2 else '',
+                error_type=None if self.calls[case.id] == 2 else 'network',
+                error_message=(
+                    None if self.calls[case.id] == 2 else 'synthetic transient failure'
+                ),
                 metadata={'_rendered_html': '<main>fixture</main>',
                           'rendered_html_sha256': hashlib.sha256(b'<main>fixture</main>').hexdigest(),
                           '_raw_stdout_b64': base64.b64encode(b'fixture stdout').decode(),
@@ -200,7 +206,7 @@ def dataset(fresh=False):
                      'synthetic', ['Expected']) for identifier in ('one', 'two')]
     if fresh:
         cases = [replace(case, ground_truth_main_content='Expected fixture',
-            source_verification={'state': 'valid', 'method': 'independent source capture',
+            source_verification={'reference_mode': 'live_exact', 'state': 'valid', 'method': 'independent source capture',
                 'checked_at': datetime.now(timezone.utc).isoformat(),
                 'reference_scope': 'Complete article',
                 'reference_sha256': hashlib.sha256(b'Expected fixture').hexdigest()}) for case in cases]
@@ -335,6 +341,8 @@ def test_case_certificates_remain_the_authority_for_an_unfinalized_physical_run(
             'completion': {'satisfied': True, 'elapsed_ms': 1, 'timeout_ms': 1000}}
         certify_case(source, certificates, case,
                      [row for row in rows if row['case_id'] == case['id']], observation)
+    with pytest.raises(ValueError, match='requires certificate evidence'):
+        assemble(source, None, [], tmp_path / 'missing-certificates')
     output = tmp_path / 'assembled'
     assemble(source, certificates, [], output)
     saved = [json.loads(line) for line in (output / 'results.jsonl').read_text().splitlines()]
diff --git a/tests/test_providers.py b/tests/test_providers.py
index 85cc8b7d7..52097c3ad 100644
--- a/tests/test_providers.py
+++ b/tests/test_providers.py
@@ -1041,6 +1041,46 @@ def test_cloudflare_image_resource_uses_scrape_and_resolves_srcset(
         selectors = mock_request.call_args.kwargs["json_body"]["elements"]
         self.assertEqual(selectors, [{"selector": "img"}, {"selector": "picture source"}])
 
+    @patch("harness.web_fetch.providers.cloudflare.request")
+    @patch("harness.web_fetch.providers.cloudflare._get_document")
+    @patch("harness.web_fetch.providers.cloudflare._post_multipart")
+    def test_kitesurf_cannot_receive_external_download_and_ai_conversion_credit(self, convert, download, native_request):
+        case = EvalCase("pdf", "PDF", "https://example.com/paper.pdf", "document", [], track="document", task_kind="body")
+        native_request.return_value = HttpResponse(503, "u", {}, b'{"success":false,"errors":[]}')
+        result = CloudflareMarkdownProvider("kitesurf", {"api_token":"x", "account_id":"a", "browser":"kitesurf"}).fetch(case, 45)
+        self.assertFalse(result.ok)
+        self.assertEqual(result.error_type, "api_error")
+        native_request.assert_called_once()
+        self.assertIn("/browser-rendering/markdown?browser=kitesurf", native_request.call_args.args[0])
+        download.assert_not_called()
+        convert.assert_not_called()
+
+    @patch("harness.web_fetch.providers.cloudflare.request")
+    def test_kitesurf_resource_request_cannot_silently_select_chromium(self, mock_request):
+        from urllib.parse import urlsplit, parse_qs
+        mock_request.return_value = HttpResponse(200, "u", {}, b'{"success":true,"result":[]}')
+        for track in ("image", "video"):
+            case = EvalCase("resource", "Resource", "https://example.com/", track, [], track=track, task_kind="resource")
+            CloudflareMarkdownProvider("kitesurf", {"api_token":"x", "account_id":"a", "browser":"kitesurf"}).fetch(case, 45)
+            self.assertEqual(parse_qs(urlsplit(mock_request.call_args.args[0]).query).get("browser"), ["kitesurf"])
+
+    @patch("harness.web_fetch.providers.cloudflare.request")
+    def test_kitesurf_headless_route_keeps_page_resources_in_native_markdown(self, mock_request):
+        mock_request.return_value = HttpResponse(
+            200, "u", {}, b'{"success":true,"result":"![image](asset.png)"}'
+        )
+        case = EvalCase("resource", "Resource", "https://example.com/", "image", [],
+                        track="image", task_kind="resource")
+        result = CloudflareMarkdownProvider("kitesurf", {
+            "api_token":"x", "account_id":"a", "browser":"kitesurf",
+            "page_output":"native_markdown",
+        }).fetch(case, 45)
+        self.assertTrue(result.ok)
+        self.assertEqual(result.content, "![image](asset.png)")
+        self.assertIn("/browser-rendering/markdown?browser=kitesurf",
+                      mock_request.call_args.args[0])
+        self.assertEqual(result.metadata["route"], "browser_rendering_markdown")
+
     @patch("harness.web_fetch.providers.cloudflare.request")
     def test_cloudflare_video_resource_scrape_filters_ordinary_links(
         self, mock_request
@@ -1241,6 +1281,17 @@ def test_cloudflare_failed_document_download_does_not_fallback_or_convert(
         self.assertEqual(base64.b64decode(result.metadata["_raw_response_b64"]), body)
         mock_post_multipart.assert_not_called()
 
+    @patch("harness.web_fetch.providers.cloudflare.request")
+    def test_cloudflare_identity_uses_observed_destination_only(self, mock_request):
+        provider = CloudflareMarkdownProvider("cf", {"api_token": "x", "account_id": "a"})
+        for meta, expected in (({}, None), ({"finalUrl": "https://example.com/final"},
+                                          "https://example.com/final")):
+            with self.subTest(meta=meta):
+                body = json.dumps({"success": True, "result": "Body", "meta": meta}).encode()
+                mock_request.return_value = HttpResponse(200, "u", {}, body)
+                result = provider.fetch(self.case, 45)
+                self.assertEqual(result.final_url, expected)
+
     @patch("harness.web_fetch.providers.cloudflare.request")
     def test_cloudflare_empty_target_2xx_succeeds_but_origin_error_fails(self, mock_request) -> None:
         examples = (
diff --git a/tests/test_public_call_logs.py b/tests/test_public_call_logs.py
index eb041c0be..b0329c948 100644
--- a/tests/test_public_call_logs.py
+++ b/tests/test_public_call_logs.py
@@ -167,8 +167,10 @@ def __init__(self):
 
             def fetch(self, case, timeout):
                 self.calls += 1
-                return ProviderResult(True, "wrong" if self.calls == 1 else "Expected",
-                                      metadata={"route": "best_route"})
+                if self.calls == 1:
+                    return ProviderResult(False, "", error_type="network",
+                                          metadata={"route": "best_route"})
+                return ProviderResult(True, "Expected", metadata={"route": "best_route"})
 
         with tempfile.TemporaryDirectory() as directory:
             root = Path(directory)
diff --git a/tests/test_public_report_language.py b/tests/test_public_report_language.py
index 45b5a286f..269a5fd0e 100644
--- a/tests/test_public_report_language.py
+++ b/tests/test_public_report_language.py
@@ -164,8 +164,12 @@ def test_default_english_has_localized_ui_and_preserved_task_text(tmp_path):
     source_text = {"中文", "确定性安装测试", "固定"}
     source_text.update(case["name"] for case in dataset["cases"])
     source_text.update(case["task_prompt"] for case in dataset["cases"])
-    for page in (run / "report/en").rglob("*.html"):
-        assert not untranslated_english_narrative(page.read_text(), source_text), page
+    untranslated = {
+        str(page.relative_to(run / "report/en")): fragments
+        for page in (run / "report/en").rglob("*.html")
+        if (fragments := untranslated_english_narrative(page.read_text(), source_text))
+    }
+    assert not untranslated, untranslated
     for case in dataset["cases"]:
         assert case["task_prompt"] in (run / f"report/en/datasets/{case['id']}.html").read_text()
 
diff --git a/tests/test_publication_privacy.py b/tests/test_publication_privacy.py
index dcefff46a..49b588e4a 100644
--- a/tests/test_publication_privacy.py
+++ b/tests/test_publication_privacy.py
@@ -14,10 +14,124 @@
 
 from harness.web_fetch.publication_check import check as check_bundle
 from harness.web_fetch.publication_check import scored_output_hash
-from harness.web_fetch.publication_privacy import project_file, publication_risk
+from harness.web_fetch.publication_privacy import (
+    project_file,
+    project_redundant_result_streams,
+    publication_risk,
+)
 
 
 class PublicationPrivacyTests(unittest.TestCase):
+    def test_result_streams_are_omitted_only_when_a_public_call_log_owns_them(self):
+        with_log = {
+            'attempt_id': 'browser__case__r001',
+            'provider_metadata': {
+                'stderr': 'large diagnostic stream',
+                'browser_stderr': 'browser stream',
+                'call_log': {'path': 'call-logs/browser/case/run-001.json', 'sha256': 'abc'},
+            },
+            'metrics': {'content_pass': False},
+        }
+        without_log = {
+            'attempt_id': 'browser__other__r001',
+            'provider_metadata': {'stderr': 'only retained copy'},
+        }
+        raw = (json.dumps(with_log) + '\n' + json.dumps(without_log) + '\n').encode()
+        projected, receipt = project_redundant_result_streams('results.jsonl', raw)
+        rows = [json.loads(line) for line in projected.splitlines()]
+        self.assertNotIn('stderr', rows[0]['provider_metadata'])
+        self.assertNotIn('browser_stderr', rows[0]['provider_metadata'])
+        self.assertEqual(rows[0]['provider_metadata']['call_log'], with_log['provider_metadata']['call_log'])
+        self.assertEqual(rows[0]['metrics'], with_log['metrics'])
+        self.assertEqual(rows[1], without_log)
+        self.assertEqual(receipt['omitted_fields'], {'stderr': 1, 'browser_stderr': 1})
+        self.assertEqual(project_redundant_result_streams('dataset.json', raw), (raw, None))
+
+    def test_truncated_quoted_sensitive_values_are_redacted_at_text_boundaries(self):
+        import html
+        fragments=["{'cookie':'PRIVATE_CANARY", '{"authorization":"Bearer PRIVATE_CANARY',
+                   '"api_key":"PRIVATE_CANARY', "'refresh_token':'PRIVATE_CANARY"]
+        for fragment in fragments:
+            for encoding in (lambda value:value,html.escape):
+                with self.subTest(fragment=fragments.index(fragment),encoded=encoding is html.escape):
+                    raw=('<p>Recorded failure: '+encoding(fragment)+'</p><p>Independent explanation.</p><a href="../result.html">Evidence</a>').encode()
+                    self.assertEqual(publication_risk(raw),'sensitive field value')
+                    projected,receipt=project_file('attempts/example.html',raw)
+                    self.assertNotIn(b'PRIVATE_CANARY',projected)
+                    self.assertIn(b'Independent explanation.',projected)
+                    self.assertIn(b'href="../result.html"',projected)
+                    self.assertIsNone(publication_risk(projected))
+                    self.assertEqual(project_file('attempts/example.html',projected),(projected,None))
+                    self.assertTrue(receipt)
+        # Ordinary partial JSON and already-redacted values remain intact.
+        for fragment in ("{'status':'unavailable", "{'cookie':'[REDACTED]", "{'authorization':'<TOKEN>"):
+            raw=('<p>'+html.escape(fragment)+'</p>').encode()
+            self.assertIsNone(publication_risk(raw))
+            self.assertEqual(project_file('attempts/example.html',raw),(raw,None))
+
+    def test_public_cors_boolean_and_abnf_are_not_credentials(self):
+        for policy in (b'Access-Control-Allow-Credentials: true',
+                       b'Access-Control-Allow-Credentials = %s"true"',
+                       b'Access-Control-Allow-Credentials = %i"false"',
+                       b'Access&#45;Control&#45;Allow&#45;Credentials = %s"true"'):
+            with self.subTest(policy=policy):
+                self.assertIsNone(publication_risk(policy))
+                self.assertEqual(project_file('response.txt',policy),(policy,None))
+                mixed=policy+b'\nAuthorization: Bearer PRIVATE_CANARY\n'
+                projected,receipt=project_file('response.txt',mixed)
+                self.assertIn(policy,projected)
+                self.assertNotIn(b'PRIVATE_CANARY',projected)
+                self.assertIsNone(publication_risk(projected))
+                self.assertIsNotNone(receipt)
+        for secret in (b'Access-Control-Allow-Credentials: PRIVATE_CANARY',
+                       b'Credentials: PRIVATE_CANARY',b'Authorization: Bearer PRIVATE_CANARY'):
+            with self.subTest(secret=secret):
+                self.assertEqual(publication_risk(secret),'sensitive field value')
+                projected,_=project_file('response.txt',secret)
+                self.assertNotIn(b'PRIVATE_CANARY',projected)
+                self.assertIsNone(publication_risk(projected))
+
+    def test_header_at_end_of_json_text_cannot_consume_following_record_fields(self):
+        record={'body':'RFC example: Authorization: Basic PRIVATE_CANARY',
+                'metrics':{'passed':False,'count':7},'case_id':'rfc-example'}
+        raw=(json.dumps(record)+'\n').encode()
+        projected, receipt=project_file('results.jsonl',raw)
+        result=json.loads(projected)
+        self.assertEqual(result['metrics'],record['metrics'])
+        self.assertEqual(result['case_id'],record['case_id'])
+        self.assertNotIn('PRIVATE_CANARY',result['body'])
+        self.assertIsNone(publication_risk(projected))
+        self.assertEqual(project_file('results.jsonl',projected),(projected,None))
+        self.assertEqual(receipt['replacements'],1)
+
+    def test_entity_encoded_query_equals_in_rendered_text_and_links_are_projected(self):
+        for equals in ('&#61;', '&#x3d;', '&equals;'):
+            with self.subTest(equals=equals):
+                url='https://example.test/video?category'+equals+'news&amp;x-signature'+equals+'PRIVATE_CANARY'
+                raw=('<p>'+url+'</p><a href="'+url+'">video</a>').encode()
+                self.assertEqual(publication_risk(raw), 'sensitive URL query value')
+                projected, receipt=project_file('attempts/case.html',raw)
+                self.assertNotIn(b'PRIVATE_CANARY', projected)
+                self.assertIsNone(publication_risk(projected))
+                self.assertEqual(receipt['replacements'],2)
+                soup=BeautifulSoup(projected,'html.parser')
+                self.assertEqual(soup.a['href'], 'https://example.test/video?category=news&x-signature=[REDACTED]')
+                self.assertEqual(project_file('attempts/case.html',projected),(projected,None))
+                clean=('<p>https://example.test/video?category'+equals+'news&amp;page'+equals+'2</p>').encode()
+                self.assertEqual(project_file('attempts/case.html',clean),(clean,None))
+
+    def test_nested_entity_escaped_query_separator_is_projected_once(self):
+        raw = json.dumps({
+            'url': 'https://example.test/video?category=news&amp;amp;token=PRIVATE_CANARY',
+        }).encode()
+        self.assertEqual(publication_risk(raw), 'sensitive URL query value')
+        projected, receipt = project_file('results.jsonl', raw)
+        self.assertNotIn(b'PRIVATE_CANARY', projected)
+        self.assertIn('[REDACTED]', json.loads(projected)['url'])
+        self.assertIsNone(publication_risk(projected))
+        self.assertEqual(project_file('results.jsonl', projected), (projected, None))
+        self.assertEqual(receipt['replacements'], 1)
+
     def test_entity_escaped_fields_inside_json_logs_preserve_json_and_mask_values(self):
         for quote in ('&quot;','&#34;','&#x22;','&apos;','&#39;','&#x27;'):
             with self.subTest(quote=quote):
@@ -281,6 +395,8 @@ def test_packaged_downloads_and_disclosure(self):
                 '<pre data-kind="call-log">{"event":"complete"}</pre></dialog></body></html>')
             (source / 'attempts/browser__file-case__r001.html').write_text(
                 '<html><body><h2>目标文件与实际返回</h2>'
+                '<pre>DEBUG href="/not-a-report-link.css" '
+                '&lt;link href="/another-diagnostic.css"&gt;</pre>'
                 '<pre data-kind="metadata">{"field":"parsed"}</pre>'
                 '<pre data-kind="metadata">{&quot;access_token&quot;:&quot;canary-private-123&quot;}</pre>'
                 '<pre data-kind="metadata">{"field":"response"}</pre></body></html>')
diff --git a/tests/test_real_smoke.py b/tests/test_real_smoke.py
index 9324574c4..bfd32507f 100644
--- a/tests/test_real_smoke.py
+++ b/tests/test_real_smoke.py
@@ -54,7 +54,7 @@ def test_moli_same_call_page_identity(self) -> None:
             },
         }})
         result = self.assert_provider_smoke("moli-webfetch", case)
-        self.assertEqual(result.metadata["route"], "page_identity_json")
+        self.assertEqual(result.metadata["route"], "ordinary_markdown")
         self.assertEqual(result.final_url, case.url)
 
     def test_lexmount_global_real_fetch(self) -> None:
diff --git a/tests/test_reference_inputs.py b/tests/test_reference_inputs.py
index 86ec51add..3dc9aaf54 100644
--- a/tests/test_reference_inputs.py
+++ b/tests/test_reference_inputs.py
@@ -1,5 +1,6 @@
 """Reference-input boundaries independent of any third-party historical dataset."""
 
+import gzip
 import hashlib
 import json
 import shutil
@@ -12,6 +13,7 @@
 from harness.web_fetch.reference_inputs import (
     check_reference_input_boundary,
     import_inputs,
+    import_packed_snapshot,
     input_tree,
     load_manifest,
     main,
@@ -168,9 +170,9 @@ def intercept(stage, arguments):
     assert prepared['cases'] == json.loads(original)['cases']
     assert not dataset.exists()
     assert read_dataset_bytes(dataset) == original
-    from harness.web_fetch.source_capture import main as collect_sources
-    assert commands[0][0] is collect_sources
-    assert commands[0][1][0] == str(work / 'input-dataset.json')
+    from harness.web_fetch import reference_freeze
+    assert commands[0][0] is reference_freeze.main
+    assert str(work / 'input-dataset.json') in commands[0][1]
 
 
 @pytest.mark.parametrize("with_source_tree", [True, False])
@@ -418,6 +420,127 @@ def test_manifest_rejects_wrong_dataset_escaping_paths_and_invalid_bindings(inpu
         load_manifest(manifest_path, dataset)
 
 
+def packed_snapshot(files):
+    payload = bytearray()
+    blocks = {}
+    entries = {}
+    for name, raw in files.items():
+        key = sha(raw)
+        blocks[key] = {"pack": "data/0.gz", "offset": len(payload), "size": len(raw)}
+        entries[name] = {"parts": [key], "size": len(raw), "sha256": key}
+        payload.extend(raw)
+    manifest = json.dumps(
+        {"schema_version": 2, "files": entries, "blocks": blocks},
+        sort_keys=True,
+    ).encode()
+    return manifest, gzip.compress(bytes(payload), mtime=0)
+
+
+def test_packed_snapshot_import_restores_only_hash_bound_benchmark_inputs(tmp_path, monkeypatch):
+    dataset = b'{"cases": []}'
+    manifest, pack = packed_snapshot(
+        {
+            "dataset.json": dataset,
+            "sources/case-a/reference.txt": b"frozen source",
+            "list-references/list-a.json": b'{"items": []}',
+            "results/private-attempt.json": b"must not be imported",
+        }
+    )
+    manifest_url = "https://artifact.example/release/manifest.json?version=frozen"
+    requested = []
+
+    def fetch(url):
+        requested.append(url)
+        if url == manifest_url:
+            return manifest
+        assert url == "https://artifact.example/release/data/0.gz?version=frozen"
+        return pack
+
+    monkeypatch.setenv("BROWSER_EVAL_DATA_HOME", str(tmp_path / "data-home"))
+    output = import_packed_snapshot(
+        manifest_url,
+        sha(manifest),
+        sha(dataset),
+        "public-snapshot-v1",
+        fetch_bytes=fetch,
+    )
+    assert (output / "dataset.json").read_bytes() == dataset
+    assert (output / "sources/case-a/reference.txt").read_bytes() == b"frozen source"
+    assert (output / "list-references/list-a.json").read_bytes() == b'{"items": []}'
+    assert not (output / "results").exists()
+    assert requested.count("https://artifact.example/release/data/0.gz?version=frozen") == 1
+    receipt = json.loads((output / "import-receipt.json").read_text())
+    assert receipt["input_file_count"] == 3
+    assert receipt["downloaded_packs"] == ["data/0.gz"]
+
+
+def test_packed_snapshot_import_rejects_publication_projected_dataset(
+    tmp_path, monkeypatch
+):
+    dataset = b'{"cases": []}'
+    manifest, pack = packed_snapshot({"dataset.json": dataset})
+    definition = json.loads(manifest)
+    definition["files"]["dataset.json"]["source_sha256"] = "0" * 64
+    manifest = json.dumps(definition, sort_keys=True).encode()
+    manifest_url = "https://artifact.example/release/manifest.json"
+
+    def fetch(url):
+        return manifest if url == manifest_url else pack
+
+    monkeypatch.setenv("BROWSER_EVAL_DATA_HOME", str(tmp_path / "data-home"))
+    with pytest.raises(ValueError, match="publication projection"):
+        import_packed_snapshot(
+            manifest_url,
+            sha(manifest),
+            sha(dataset),
+            "public-snapshot-v1",
+            fetch_bytes=fetch,
+        )
+    assert not (tmp_path / "data-home/reference-inputs/public-snapshot-v1").exists()
+
+
+@pytest.mark.parametrize("damage", ["manifest", "dataset", "block", "path"])
+def test_packed_snapshot_import_rejects_changed_or_escaping_evidence(
+    tmp_path, monkeypatch, damage
+):
+    dataset = b'{"cases": []}'
+    names = {"dataset.json": dataset, "sources/case-a/reference.txt": b"source"}
+    manifest, pack = packed_snapshot(names)
+    expected_manifest = sha(manifest)
+    expected_dataset = sha(dataset)
+    if damage == "manifest":
+        expected_manifest = "0" * 64
+    elif damage == "dataset":
+        expected_dataset = "0" * 64
+    elif damage == "block":
+        pack = gzip.compress(b"changed", mtime=0)
+    else:
+        definition = json.loads(manifest)
+        definition["files"]["sources/../../escape.txt"] = definition["files"].pop(
+            "sources/case-a/reference.txt"
+        )
+        manifest = json.dumps(definition, sort_keys=True).encode()
+        expected_manifest = sha(manifest)
+
+    manifest_url = "https://artifact.example/release/manifest.json"
+
+    def fetch(url):
+        return manifest if url == manifest_url else pack
+
+    monkeypatch.setenv("BROWSER_EVAL_DATA_HOME", str(tmp_path / "data-home"))
+    with pytest.raises(ValueError):
+        import_packed_snapshot(
+            manifest_url,
+            expected_manifest,
+            expected_dataset,
+            "public-snapshot-v1",
+            fetch_bytes=fetch,
+        )
+    parent = tmp_path / "data-home/reference-inputs"
+    assert not (parent / "public-snapshot-v1").exists()
+    assert not list(parent.glob(".reference-inputs-*"))
+
+
 def test_explicit_custom_dataset_uses_its_own_sources_without_global_state(tmp_path):
     dataset = tmp_path / "custom.json"
     dataset.write_text("{}")
diff --git a/tests/test_reference_lifecycle.py b/tests/test_reference_lifecycle.py
index efd5db3aa..056021f16 100644
--- a/tests/test_reference_lifecycle.py
+++ b/tests/test_reference_lifecycle.py
@@ -32,12 +32,41 @@ def setUp(self):
         self.now = datetime(2026, 9, 3, 12, tzinfo=timezone.utc)
         self.case = EvalCase(id="body", name="Body", url="https://example.test/body",
             category="static", expected_any=["Price"], ground_truth_main_content="Price 10 dollars",
-            source_verification={"state": "valid", "method": "independent source capture",
+            source_verification={"state": "valid", "reference_mode": "live_exact", "method": "independent source capture",
                 "checked_at": (self.now - timedelta(minutes=1)).isoformat(),
                 "reference_sha256": sha256("Price 10 dollars"), "reference_scope": "Complete article"})
         self.dataset_path = self.root / "dataset.json"
         self.run = self.root / "run"
 
+    def test_frozen_body_answer_does_not_imply_live_reference_checks(self):
+        from harness.web_fetch.reference_lifecycle import requires_fresh_reference
+        verification = {key: value for key, value in self.case.source_verification.items()
+                        if key != 'reference_mode'}
+        verification['checked_at'] = '2020-01-01T00:00:00Z'
+        case = replace(self.case, source_verification=verification)
+        original = deepcopy(case.__dict__)
+        self.assertFalse(requires_fresh_reference(case))
+        self.assertIsNone(self.checks(case))
+        self.assertEqual(case.__dict__, original)
+        self.assertFalse((self.root / 'sources').exists())
+
+    def test_live_reference_checks_require_an_explicit_mode(self):
+        from harness.web_fetch.reference_lifecycle import requires_fresh_reference
+        case = replace(self.case, source_verification={
+            **self.case.source_verification, 'reference_mode': 'live_exact'})
+        self.assertTrue(requires_fresh_reference(case))
+        self.assertIsNotNone(self.checks(case))
+        stale = replace(case, source_verification={
+            **case.source_verification, 'checked_at': '2020-01-01T00:00:00Z'})
+        with self.assertRaises(ReferenceLifecycleError):
+            self.checks(stale)
+
+    def test_misspelled_reference_mode_is_rejected(self):
+        case = replace(self.case, source_verification={
+            **self.case.source_verification, 'reference_mode': 'live_excat'})
+        with self.assertRaisesRegex(ReferenceLifecycleError, 'reference mode'):
+            self.checks(case)
+
     def write_json(self, path, value):
         path.parent.mkdir(parents=True, exist_ok=True)
         path.write_text(json.dumps(value), encoding="utf-8")
@@ -171,6 +200,21 @@ def test_resource_source_requires_hash_bound_independent_full_target_coverage(se
         with self.assertRaisesRegex(ReferenceLifecycleError, "SHA-256 mismatch"):
             validate_resource_source_evidence(case, self.dataset_path)
 
+    def test_frozen_resource_execution_does_not_repeat_admission(self):
+        import shutil
+        case = self.resource_case()
+        self.dataset_path.write_text(json.dumps({'comparison': {
+            'source_reference_policy': 'frozen_benchmark_inputs_with_explicit_live_exact_checks'}}))
+        shutil.rmtree(self.root / 'sources')
+        self.assertIsNone(validate_resource_source_evidence(case, self.dataset_path, execution=True))
+        with self.assertRaisesRegex(ReferenceLifecycleError, 'invalid resource source evidence'):
+            validate_resource_source_evidence(case, self.dataset_path)
+        live = replace(case, source_verification={**case.source_verification, 'reference_mode': 'live_exact'})
+        with self.assertRaisesRegex(ReferenceLifecycleError, 'invalid resource source evidence'):
+            validate_resource_source_evidence(live, self.dataset_path, execution=True)
+        invalid = replace(case, source_verification={**case.source_verification, 'state': 'invalid'})
+        with self.assertRaisesRegex(ReferenceLifecycleError, 'not valid'):
+            validate_resource_source_evidence(invalid, self.dataset_path, execution=True)
     def test_resource_source_rejects_missing_target_and_http_challenge(self):
         missing = self.resource_case(evidence_updates={"resources": []})
         with self.assertRaisesRegex(ReferenceLifecycleError, "does not cover every"):
@@ -515,7 +559,7 @@ def test_public_guard_does_not_upgrade_unversioned_historical_fresh_record(self)
             {"tool": "web_fetch", "attempt_ids": [record["attempt_id"]]},
             cases=self.dataset(), records=[record])
 
-    def test_public_guard_allows_uncertified_stable_and_resource_records(self):
+    def test_public_guard_allows_complete_current_batch_without_live_references(self):
         stable = replace(
             self.case,
             id="stable",
@@ -528,13 +572,85 @@ def test_public_guard_allows_uncertified_stable_and_resource_records(self):
         )
         resource = replace(self.case, id="resource", track="image", task_kind="resource")
         records = [
-            {"attempt_id": "p__stable__r001", "case_id": "stable", "provider": "p"},
-            {"attempt_id": "p__resource__r001", "case_id": "resource", "provider": "p"},
+            {"attempt_id": "p__stable__r001", "case_id": "stable", "provider": "p",
+             "started_at": "2026-01-01T00:00:01+00:00", "elapsed_ms": 10,
+             "completed_at": "2026-01-01T00:00:01.010000+00:00"},
+            {"attempt_id": "p__resource__r001", "case_id": "resource", "provider": "p",
+             "started_at": "2026-01-01T00:00:02+00:00", "elapsed_ms": 10,
+             "completed_at": "2026-01-01T00:00:02.010000+00:00"},
         ]
+        batch = {"schema_version": 1, "tool": "web_fetch",
+                 "attempt_count": len(records),
+                 "attempt_ids": [record["attempt_id"] for record in records],
+                 "started_at": "2026-01-01T00:00:00+00:00",
+                 "completed_at": "2026-01-01T00:00:03+00:00"}
+        records[1]["elapsed_ms"] = 10_000
+        with patch(
+            "harness.web_fetch.reference_lifecycle.latency_correction_original_elapsed",
+            return_value={("p", "resource"): 10},
+        ):
+            require_verified_reference_checks(
+                [batch], cases=[stable, resource], records=records)
+
+    def test_public_guard_rejects_incomplete_current_batch_without_live_references(self):
+        stable = replace(
+            self.case,
+            id="stable",
+            acceptance_contract={
+                "version": 1,
+                "schema": "product",
+                "minimum_records": 1,
+                "stable_text_anchors": [{"id": "section", "alternatives": ["Catalog"]}],
+            },
+        )
+        records = [
+            {"attempt_id": "p__stable__r001", "case_id": "stable", "provider": "p",
+             "started_at": "2026-01-01T00:00:01+00:00", "elapsed_ms": 10},
+            {"attempt_id": "q__stable__r001", "case_id": "stable", "provider": "q",
+             "started_at": "2026-01-01T00:00:02+00:00", "elapsed_ms": 10},
+        ]
+        base = {"schema_version": 1, "tool": "web_fetch",
+                "started_at": "2026-01-01T00:00:00+00:00",
+                "completed_at": "2026-01-01T00:00:03+00:00"}
+        empty = {**base, "attempt_count": 0, "attempt_ids": []}
+        with self.assertRaisesRegex(ReferenceLifecycleError, "Incomplete batch attempt identity"):
+            require_verified_reference_checks([empty], cases=[stable], records=records)
+        partial = {**base, "attempt_count": 1, "attempt_ids": [records[0]["attempt_id"]]}
+        with self.assertRaisesRegex(ReferenceLifecycleError, "exactly cover measured records"):
+            require_verified_reference_checks([partial], cases=[stable], records=records)
+        duplicate = {**base, "attempt_count": 2,
+                     "attempt_ids": [record["attempt_id"] for record in records]}
+        with self.assertRaisesRegex(ReferenceLifecycleError, "more than one current batch"):
+            require_verified_reference_checks(
+                [duplicate, deepcopy(duplicate)], cases=[stable], records=records)
+
+    def test_current_batch_is_strict_inside_mixed_historical_manifests(self):
+        stable = replace(
+            self.case,
+            id="stable",
+            acceptance_contract={
+                "version": 1,
+                "schema": "product",
+                "minimum_records": 1,
+                "stable_text_anchors": [{"id": "section", "alternatives": ["Catalog"]}],
+            },
+        )
+        current = {"attempt_id": "p__stable__r001", "case_id": "stable", "provider": "p",
+                   "started_at": "2026-01-01T00:00:01+00:00", "elapsed_ms": 10}
+        historical = {"attempt_id": "legacy__stable__r001", "case_id": "stable",
+                      "provider": "legacy"}
+        batch = {"schema_version": 1, "tool": "web_fetch", "attempt_count": 1,
+                 "attempt_ids": [current["attempt_id"]],
+                 "started_at": "2026-01-01T00:00:00+00:00",
+                 "completed_at": "2026-01-01T00:00:02+00:00"}
         require_verified_reference_checks(
-            [{"schema_version": 1, "tool": "web_fetch",
-              "attempt_ids": [record["attempt_id"] for record in records]}],
-            cases=[stable, resource], records=records)
+            [batch, {"historical": True}], cases=[stable],
+            records=[current, historical])
+        damaged = {**batch, "attempt_ids": ["missing__stable__r001"]}
+        with self.assertRaisesRegex(ReferenceLifecycleError, "Missing or duplicate measured attempts"):
+            require_verified_reference_checks(
+                [damaged, {"historical": True}], cases=[stable],
+                records=[current, historical])
 
     def test_latency_only_correction_preserves_original_certificate_timeline(self):
         manifest = self.verified_run()
diff --git a/tests/test_reference_quality.py b/tests/test_reference_quality.py
index 52fe43d74..fdc60c482 100644
--- a/tests/test_reference_quality.py
+++ b/tests/test_reference_quality.py
@@ -1,3 +1,5 @@
+import subprocess
+import sys
 import unittest
 from harness.web_fetch.reference_quality import (audit_reference, clean_reference_text,
     blocked_page_hits, markdown_link_destinations, markdown_links, reference_anchor_in_text,
@@ -7,6 +9,36 @@
 
 
 class ReferenceQualityTests(unittest.TestCase):
+    def test_unmatched_markdown_brackets_preserve_body_scoring_within_budget(self):
+        code = """
+from harness.web_fetch.scoring import score_attempt
+case = {'id': 'body', 'url': 'https://example.test/', 'track': 'web',
+        'acceptance_contract': {'version': 1, 'schema': 'body_text',
+            'minimum_records': 0, 'stable_text_anchors': [
+                {'id': 'body', 'alternatives': ['Source prose']}]}}
+for brackets in ('[' * 20000, '[x](' * 5000):
+    for present in (True, False):
+        text = ('Source prose' if present else 'Unrelated prose') + brackets
+        result = score_attempt(case, text.encode(), ok=True)
+        assert result['content_pass'] is present
+"""
+        result = subprocess.run([sys.executable, '-c', code], capture_output=True,
+                                text=True, timeout=5)
+        self.assertEqual(result.returncode, 0, result.stderr)
+
+    def test_nested_and_escaped_link_delimiters_retain_existing_destinations(self):
+        samples = [
+            (r'\[Docs](/guide)', 'Docs', '/guide'),
+            (r'[Docs \[with note](/guide)', r'Docs \[with note', '/guide'),
+            ('[Docs [nested]](/guide(a))', 'Docs [nested]', '/guide(a)'),
+            (r'[Docs](/guide\))', 'Docs', r'/guide\)'),
+        ]
+        for text, label, destination in samples:
+            with self.subTest(text=text):
+                self.assertEqual([(link.label, link.destination)
+                                  for link in markdown_links(text)],
+                                 [(label, destination)])
+
     def test_script_payload_shell_rejects_state_dump_but_not_readable_js_article(self):
         state = '\n'.join(
             f'window.__STATE{i}__ = {{"article":"Required readable sentence {i}",'
@@ -66,6 +98,20 @@ def test_balanced_multiline_nested_markdown_keeps_labels_not_destinations(self):
         self.assertEqual(markdown_link_destinations(
             '[![Moon](//cdn.example/moon(large).jpg)](/file/moon)'),
             ['/file/moon', '//cdn.example/moon(large).jpg'])
+
+    def test_escaped_literal_bang_before_link_is_not_an_image(self):
+        odd = r'OpenWrt wants you\![Join the project](#join)'
+        even = r'OpenWrt wants you\\![Join the project](avatar.png)'
+
+        odd_links = markdown_links(odd)
+        self.assertEqual([(link.label, link.is_image) for link in odd_links],
+                         [('Join the project', False)])
+        self.assertEqual(normalize_for_match(visible_markdown_links(odd)),
+                         normalize_for_match('OpenWrt wants you! Join the project'))
+
+        even_links = markdown_links(even)
+        self.assertEqual([(link.label, link.is_image) for link in even_links],
+                         [('Join the project', True)])
     def test_relative_path_autolinks_are_visible_but_html_closing_tags_are_not_rewritten(self):
         value = ('Questions: </help/start>, </help/advanced>, or '
                  '[Support](https://support.example.test/). </div>')
diff --git a/tests/test_report_body_scope.py b/tests/test_report_body_scope.py
index 845c6eae2..baa49d45f 100644
--- a/tests/test_report_body_scope.py
+++ b/tests/test_report_body_scope.py
@@ -16,10 +16,12 @@
     write_support,
 )
 from harness.web_fetch.report_components import (
-    task_contract_guide, task_pass_guide, examples, list_rule_description, metric_guide, reference_status, task_instruction,
+    task_contract_guide, task_pass_guide, examples, list_rule_description, metric_guide, reference_status,
+    stable_contract_details, task_instruction,
 )
 from harness.web_fetch.stable_tasks import evaluate_stable_task
 from harness.web_fetch.scoring import SCORING_SOURCE_SHA256
+from harness.web_fetch.report_i18n import translate_text
 
 
 def case(identifier='list', kind='structure', track='challenge'):
@@ -52,6 +54,56 @@ def table_cells(rendered, identifier):
 
 
 class ReportBodyScopeTests(unittest.TestCase):
+    def test_scoped_presentation_refresh_updates_only_explicit_result_details(self):
+        cases=[case('first'),case('second')]
+        rows=[record(c,passed=False,ok=False) for c in cases]
+        for row in rows:
+            row['error_type']='tool_error'
+            row['error_message']='raw download output only supports automatic output or --dump json'
+            row['diagnosis']={'category':'旧分类','stage':'旧阶段','evidence':'旧解释','certainty':'直接返回依据'}
+        with tempfile.TemporaryDirectory() as directory:
+            out=Path(directory)
+            for row in rows:
+                artifact=out/row['artifact_path'];artifact.parent.mkdir(parents=True,exist_ok=True);artifact.write_text('output')
+            with patch('harness.web_fetch.report_explainer.render_explainer',return_value='article'), patch('harness.web_fetch.report.write_support'):
+                generate(out,{'cases':cases},rows,[])
+                detail_paths=[out/'attempts'/f"{row['attempt_id']}.html" for row in rows]
+                before=[path.read_bytes() for path in detail_paths]
+                dataset_before=(out/'datasets/first.html').read_bytes()
+                from harness.web_fetch.failure_diagnosis import diagnose
+                for row in rows:row['diagnosis']=diagnose(row,cases[0],'')
+                generate(out,{'cases':cases},rows,[],presentation_only=True)
+                self.assertEqual([path.read_bytes() for path in detail_paths],before)
+                generate(out,{'cases':cases},rows,[],presentation_only=True,detail_attempt_ids={rows[0]['attempt_id']})
+                self.assertIn('不支持所需输出格式',detail_paths[0].read_text())
+                self.assertNotEqual(detail_paths[0].read_bytes(),before[0])
+                self.assertEqual(detail_paths[1].read_bytes(),before[1])
+                self.assertEqual((out/'datasets/first.html').read_bytes(),dataset_before)
+                with self.assertRaisesRegex(ValueError,'Unknown detail'):
+                    generate(out,{'cases':cases},rows,[],presentation_only=True,detail_attempt_ids={'absent'})
+
+    def test_media_report_families_follow_the_deliverable(self):
+        from harness.web_fetch.models import REPORT_FAMILIES, report_family
+        cases = [
+            {'track': 'image', 'task_kind': 'resource'},
+            {'track': 'video', 'task_kind': 'resource'},
+            {'track': 'video', 'task_kind': 'body'},
+            {'track': 'image', 'task_kind': 'file'},
+            {'track': 'video', 'task_kind': 'file'},
+        ]
+        self.assertEqual(
+            [report_family(case) for case in cases],
+            ['web_media', 'web_media', 'web_media', 'media_file', 'media_file'],
+        )
+        self.assertEqual(REPORT_FAMILIES['web_media'], '网页内嵌媒体')
+        self.assertEqual(REPORT_FAMILIES['media_file'], '直接媒体文件')
+
+    def test_task_family_names_and_order_share_the_report_registry(self):
+        from harness.web_fetch.report_explainer import TRACK_NAMES
+        self.assertIs(TRACK_NAMES, TRACKS)
+        self.assertEqual(list(TRACKS), ['web','dynamic','challenge','risk_control','document','image','video'])
+        self.assertEqual(TRACKS['risk_control'], '风控网页正文')
+
     def test_all_call_latency_keeps_failed_calls_and_rejects_partial_matrix(self):
         c=case('body',kind='body')
         rows=[record(c,passed=True,elapsed=100),record(c,passed=False,elapsed=900)]
@@ -78,6 +130,21 @@ def test_body_display_uses_visible_body_without_title_or_scripts(self):
                 self.assertEqual(len(rows),1)
                 self.assertNotIn('ghijkl</pre>',cards)
 
+    def test_body_display_uses_same_mixed_html_surface_as_scorer(self):
+        from harness.web_fetch.scoring import score_attempt
+        contract={'version':3,'unit':'region_compact_hexagram_recall',
+                  'minimum_coverage':.8,'minimum_floor':.6,'minimum_region_passes':1,
+                  'regions':[{'id':'body','text':'abcdefghijkl'}]}
+        c=case('body',kind='body');c['body_requirements']=contract
+        output='# Heading\nabcdefghijkl<script>hidden words</script>'
+        r={'ok':True,'status_code':200}
+        metrics=score_attempt(c,output.encode(),ok=True)
+        scoring_text=_body_scoring_text(r,output)
+        self.assertNotIn('hidden words',scoring_text)
+        rows,cards=body_region_rows(c,metrics,scoring_text)
+        self.assertEqual(len(rows),1)
+        self.assertIn('abcdefghijkl',''.join(cards))
+
     def test_body_evidence_uses_the_canonical_global_allocation(self):
         shared='abcdefghijklmnopqrstuvwx'*3
         contract={'version':3,'unit':'region_compact_hexagram_recall',
@@ -123,6 +190,50 @@ def test_long_stable_text_and_record_lists_scroll_only_after_five_items(self):
         self.assertIn('<div class="anchor-grid" data-scroll-after="5">',evidence)
         self.assertIn('<div class="record-scroll" data-scroll-after="5">',stable_checks(metrics))
         self.assertNotIn('data-scroll-after="5"',stable_answer_panel({**contract,'stable_text_anchors':anchors[:5]}))
+
+    def test_diagnostic_stable_text_is_not_described_as_required(self):
+        anchors=[{'id':f'a-{index}','alternatives':[f'Stable text {index}']} for index in range(6)]
+        contract={'version':1,'schema':'body_text','minimum_records':0,
+                  'stable_text_role':'diagnostic','stable_text_anchors':anchors}
+        c=case('diagnostic-anchor','body','risk_control');c['acceptance_contract']=contract
+        answer=stable_answer_panel(contract)
+        details=stable_contract_details(c)
+        metrics={'stable_anchors_required':False,'stable_anchor_results':[
+            {'id':item['id'],'alternatives':item['alternatives'],'matched':[],'pass':False}
+            for item in anchors]}
+        evidence=stable_anchor_evidence(metrics,'complete body without shell labels')
+        guide=task_pass_guide('risk_control',cases={c['id']:c})
+        for rendered in (answer,details,evidence,guide):
+            self.assertIn('不影响是否通过',rendered)
+            self.assertNotIn('全部参与评分',rendered)
+            self.assertNotIn('所有组均须通过',rendered)
+        self.assertNotIn('必须出现的稳定文字',answer)
+        self.assertIn('范围核对文字',evidence)
+        self.assertNotIn('<b>标准答案</b>',evidence)
+
+    def test_required_stable_text_keeps_acceptance_language(self):
+        contract={'version':1,'schema':'body_text','minimum_records':0,
+                  'stable_text_role':'required',
+                  'stable_text_anchors':[{'id':'a','alternatives':['Required text']}]}
+        c=case('required-anchor','body','risk_control');c['acceptance_contract']=contract
+        self.assertIn('必须出现的稳定文字',stable_answer_panel(contract))
+        self.assertIn('所有组均须通过',stable_contract_details(c))
+
+    def test_diagnostic_stable_text_explanation_has_english_copy(self):
+        chinese=('页面正文按登记的正文规则核验；稳定文字只用于核对抓取范围，不影响是否通过；'
+                 '新闻、日期、轮播卡片、仓库状态等易变内容不固定为答案。'
+                 '历史完整快照只作诊断，不进入全文质量汇总。')
+        english=translate_text(chinese)
+        self.assertNotEqual(english,chinese)
+        self.assertIn('does not affect acceptance',english)
+
+    def test_method_guide_distinguishes_required_and_diagnostic_anchors(self):
+        rendered=task_contract_guide()
+        self.assertIn('必需锚点参与验收',rendered)
+        self.assertIn('诊断锚点只核对抓取范围',rendered)
+        self.assertNotIn('稳定内容锚点仍用于任务验收',rendered)
+        english=translate_text('标为必需的稳定内容锚点参与验收；诊断锚点只核对抓取范围。')
+        self.assertIn('required affect acceptance',english)
     def test_local_report_links_complete_private_debug_log(self):
         c = case('debug-log', 'body', 'risk_control')
         r = record(c)
@@ -252,9 +363,9 @@ def test_text_coverage_repeated_denominator_removed_but_different_scopes_disclos
             self.assertEqual(row[7],'100.0%')
         self.assertNotIn('· 1/2 例',rendered)
 
-    def test_four_text_tracks_share_columns_and_text_coverage_semantics(self):
+    def test_all_text_tracks_share_columns_and_text_coverage_semantics(self):
         headers=[]
-        for track in ('web','dynamic','challenge','document'):
+        for track in ('web','dynamic','challenge','risk_control','document'):
             c=case('example','body');c['track']=track
             r=record(c,passed=False)
             r['metrics']['fact_results']=[{'id':'a','pass':True},{'id':'b','pass':False}]
@@ -267,6 +378,18 @@ def test_four_text_tracks_share_columns_and_text_coverage_semantics(self):
             headers.append([re.sub(r'<[^>]*>','',h) for h in re.findall(r'<th[^>]*>(.*?)</th>',rendered,re.S)])
         self.assertTrue(all(h==headers[0] for h in headers))
 
+    def test_body_without_full_reference_keeps_metrics_unavailable(self):
+        for track in ('web','dynamic','challenge','risk_control','document'):
+            with self.subTest(track=track):
+                c=case('example','body',track)
+                c['ground_truth_main_content']=''
+                r=record(c)
+                rendered=ranking([r],{'example':c},track)
+                row=table_cells(rendered,'ranking-'+track)[0]
+                self.assertEqual(row[4:7],['—']*3)
+                self.assertNotIn('资源命中率',rendered)
+                self.assertNotIn('直接文件必须',rendered)
+
     def test_nonliteral_snapshot_not_promoted_into_invariant_body_quality(self):
         c=case('example','body'); c['track']='dynamic'
         c['acceptance_contract']={'schema':'product','minimum_records':3}
@@ -358,7 +481,7 @@ def test_case_and_attempt_labels_preserve_measured_task(self):
 
     def test_example_order_and_metric_explanations(self):
         rendered=examples()
-        positions=[rendered.index('data-tab="'+t+'"') for t in ['web','dynamic','challenge','document','image','video']]
+        positions=[rendered.index('data-tab="'+t+'"') for t in ['web','dynamic','challenge','risk_control','document','web_media','media_file']]
         self.assertEqual(positions,sorted(positions))
         guide=metric_guide()
         for phrase in ['0 次通过不等于 F1 为 0','请求失败计 0','仍按实际正文评分','不是平均完整度与平均纯净度的调和平均']:
@@ -412,7 +535,9 @@ def test_rendered_pages_preserve_results_and_label_only_missing_word_metrics(sel
                 self.assertIn(phrase,detail)
             self.assertNotIn('正文未评测',detail)
             self.assertNotIn('评分方式',detail)
-            self.assertIn('100.0%',(out/'datasets/index.html').read_text())
+            self.assertIn('100.0%',(out/'index.html').read_text())
+            self.assertNotIn('<th>达标率</th>',(out/'datasets/index.html').read_text())
+            self.assertIn('../analysis/index.html#inspect?query=list',(out/'datasets/list.html').read_text())
             self.assertNotIn('正文未评测',(out/'datasets/list.html').read_text())
             for page in ['index.html', 'datasets/list.html']:
                 self.assertIn('稳定标题、栏目、说明', (out/page).read_text())
@@ -500,9 +625,9 @@ def test_attempt_call_record_uses_hash_bound_native_log_when_available(self):
             self.assertIn('查看本次真实日志',detail)
             self.assertIn('<ol class="log-lines">',detail)
             self.assertIn('event=request.start',detail)
-            self.assertIn('下载已保存的公开日志',detail)
             self.assertIn('下载调用日志 JSON',detail)
             self.assertIn(r['call_log_sha256'],detail)
+            self.assertFalse((out/'public-logs').exists())
 
     def test_attempt_call_record_renders_every_retry_log(self):
         c=case('retried','body','web');r=record(c)
@@ -522,8 +647,20 @@ def test_attempt_call_record_renders_every_retry_log(self):
             for phrase in ('物理调用 1','物理调用 2','ERROR first physical call',
                            'final_url=https://example.com/retried','physical-1.json','physical-2.json'):
                 self.assertIn(phrase,rendered)
-            self.assertTrue((out/'public-logs/fixture/retried/run-001-physical-001.stderr.log').is_file())
-            self.assertTrue((out/'public-logs/fixture/retried/run-001-physical-002.stderr.log').is_file())
+            self.assertFalse((out/'public-logs').exists())
+
+    def test_failure_log_exposes_complete_runtime_error_and_actual_method_identity(self):
+        r=record(case());r.update(ok=False,error_type='timeout',error_message='Full runtime error '+('details '*100),
+            provider_metadata={'browser_version':'155.0.8059.39','binary_sha256':'actual-hash'})
+        with tempfile.TemporaryDirectory() as directory:
+            rendered=run_log_section(Path(directory),r,'')
+        self.assertIn(r['error_message'],rendered)
+        self.assertIn('<h3>程序错误</h3>',rendered)
+        self.assertIn('timeout',rendered)
+        self.assertIn('155.0.8059.39',rendered)
+        self.assertIn('actual-hash',rendered)
+        self.assertNotIn('Moli 版本',rendered)
+        self.assertNotIn('Markdown 输出',rendered)
 
     def test_run_log_section_uses_supplied_output_when_artifact_path_is_absent(self):
         c=case('unpersisted','body','web');r=record(c);r.pop('artifact_path')
@@ -575,12 +712,11 @@ def test_attempt_log_drilldown_uses_canonical_call_log_stderr_in_both_languages(
             self.assertIn('ERROR challenge page returned',detail)
             self.assertIn('../'+debug_path,detail)
             self.assertIn(hashlib.sha256(debug).hexdigest(),detail)
-            for phrase in ['查看完整运行字段','查看本次真实日志','下载已保存的公开日志','下载调用日志 JSON']:
+            for phrase in ['查看完整运行字段','查看本次真实日志','下载调用日志 JSON']:
                 self.assertIn(phrase,detail)
             english=(out/'en/attempts'/f"{r['attempt_id']}.html").read_text()
             for phrase in ['View complete run fields','View this run\'s real log',
-                           'ERROR challenge page returned','Download the retained public log',
-                           'Download call-log JSON']:
+                           'ERROR challenge page returned','Download call-log JSON']:
                 self.assertIn(phrase,english)
             for phrase in ['查看本次真实日志','下载已保存的公开日志']:
                 self.assertNotIn(phrase,english)
@@ -816,6 +952,31 @@ def test_stable_failure_categories_preserve_diagnosis_and_filters(self):
                 self.assertIn((label,label),failure_filters([r],{'list':c})[1][2])
                 self.assertIn('data-failure-category="'+label+'"',attempt_row(r,c)[0])
 
+    def test_fixed_contract_rules_survive_absent_historical_attachment(self):
+        from harness.web_fetch.report_components import stable_contract_details
+        c=case();c['acceptance_contract']={'schema':'named_link','minimum_records':3,
+            'hosts':['example.com'],'entry_path':'/items/.*',
+            'stable_text_anchors':[{'id':'heading','alternatives':['Fixed heading']}]}
+        c['source_benchmark']['stable_annotation']={'anchor_evidence':'sources/early.txt'}
+        with tempfile.TemporaryDirectory() as directory:
+            root=Path(directory)
+            rendered=stable_contract_details(c,evidence_root=root)
+            self.assertIn('Fixed heading',rendered)
+            self.assertNotIn('href="../sources/early.txt"',rendered)
+            (root/'sources').mkdir();(root/'sources/early.txt').write_text('Fixed heading')
+            self.assertIn('href="../sources/early.txt"',stable_contract_details(c,evidence_root=root))
+
+    def test_body_coverage_explanation_uses_the_declared_unit_and_region_rules(self):
+        c=case(kind='body',track='web');c['body_requirements']={
+            'unit':'region_compact_hexagram_recall','minimum_coverage':.8,
+            'minimum_floor':.6,'minimum_region_passes':4,
+            'regions':[{'id':str(i),'text':'reference'} for i in range(5)]}
+        rendered=task_pass_guide('web',cases={c['id']:c})
+        self.assertIn('字符六元组',rendered)
+        self.assertIn('通过区域数',rendered)
+        self.assertNotIn('词语计数覆盖',rendered)
+        self.assertNotIn('逐区达到 80%',rendered)
+
     def test_schema_fields_are_explained_without_internal_version_or_empty_sections(self):
         from harness.web_fetch.report_components import stable_contract_details, FIELD_REQUIREMENTS
         from harness.web_fetch.stable_tasks import SCHEMA_FIELDS, UNIQUE_FIELDS
diff --git a/tests/test_report_capabilities.py b/tests/test_report_capabilities.py
index 91af0038c..c22fb086a 100644
--- a/tests/test_report_capabilities.py
+++ b/tests/test_report_capabilities.py
@@ -9,6 +9,32 @@
 
 
 class CapabilityTests(unittest.TestCase):
+    def test_native_cohort_discloses_native_document_output_without_external_processing(self):
+        from harness.web_fetch.report_capabilities import task_capabilities
+        with tempfile.TemporaryDirectory() as directory:
+            out=Path(directory)
+            (out/'dataset.json').write_text(json.dumps({'cases':[
+                {'id':'body','url':'https://example.com/','track':'web','task_kind':'body'},
+                {'id':'pdf','url':'https://example.com/a.pdf','track':'document','task_kind':'body'}]}))
+            names=['moli','lightpanda','obscura','chromium','kitesurf']
+            claims=task_capabilities(out,names,[{'provider_metadata':{'output_contract':'readable_document_text'}}])
+            self.assertEqual(claims['moli']['document']['status'],'有限支持')
+            self.assertIn('直接 PDF/DOCX 未提供可读正文',claims['moli']['document']['detail'])
+            for name in ('lightpanda','obscura','kitesurf'):
+                self.assertEqual(claims[name]['document']['status'],'原生输出')
+            self.assertEqual(claims['chromium']['document']['status'],'共同转换')
+            for name in ('moli','lightpanda','obscura','kitesurf'):
+                self.assertIn('网页内嵌媒体与正文统一走原生 Markdown',claims[name]['notes'])
+            self.assertIn('固定标准包',claims['chromium']['notes'])
+            for name in names:
+                self.assertIn('不使用外部',claims[name]['document']['detail'])
+                self.assertNotIn('没有 PDF / Office 解析器',claims[name]['document']['detail'])
+            self.assertIn('官方 JS 实现',claims['obscura']['scope'])
+            self.assertIn('原生 Markdown',claims['moli']['scope'])
+            self.assertIn('browser=kitesurf',claims['kitesurf']['scope'])
+            self.assertEqual(CAPABILITIES['lightpanda']['document']['status'],'未声明')
+            self.assertIsNone(task_capabilities(out,['firecrawl'],[{'provider_metadata':{'output_contract':'markdown'}}]))
+
     def test_source_backed_capabilities_link_to_current_pinned_revisions(self):
         expected = {
             'claw': '12c4bdf7482f24c85b011e9d858fdec3c245101c',
@@ -59,10 +85,17 @@ def test_current_capability_page_matches_the_certified_routes(self):
         self.assertNotIn('未启用专用 PDF 策略', CAPABILITIES['crawl4ai']['tested'])
         self.assertIn('Actions wait', CAPABILITIES['firecrawl']['tested'])
         self.assertIn('iframe', CAPABILITIES['firecrawl']['tested'])
-        self.assertIn('Moli 1.1.4', CAPABILITIES['moli-webfetch']['tested'])
-        self.assertIn('不传 --dump', CAPABILITIES['moli-webfetch']['tested'])
+        self.assertIn('统一使用 Moli 原生 Markdown', CAPABILITIES['moli-webfetch']['tested'])
+        self.assertIn('网页媒体只核对同一 Markdown 输出', CAPABILITIES['moli-webfetch']['tested'])
         self.assertIn('selector', CAPABILITIES['moli-webfetch']['tested'])
 
+    def test_moli_document_capabilities_never_credit_external_parsing(self):
+        for name in ('moli-1.0.6', 'moli', 'moli-1.1.3', 'moli-1.1.11'):
+            row = CAPABILITIES[name]
+            self.assertIn('原生 Markdown 接口直接交付', row['notes'])
+            self.assertIn('不再外部解析', row['notes'])
+            self.assertNotIn('评测在同一次预算内解析', row['notes'])
+
     def test_official_task_routes_are_not_collapsed_into_webpage_markdown(self):
         cloudflare = CAPABILITIES['cloudflare-markdown']
         for route in ('/markdown', '/scrape', '/ai/tomarkdown'):
diff --git a/tests/test_report_changes.py b/tests/test_report_changes.py
index 8d6b940f8..50d24c129 100644
--- a/tests/test_report_changes.py
+++ b/tests/test_report_changes.py
@@ -7,6 +7,50 @@
 from harness.web_fetch.report import overview_card, ranking
 
 class ReportChangesTests(unittest.TestCase):
+    def test_report_bound_history_overrides_legacy_registry(self):
+        with tempfile.TemporaryDirectory() as directory:
+            out = Path(directory)
+            source = out / 'report-assets/report-changes.json'
+            source.parent.mkdir()
+            data = {
+                'schema_version': 2,
+                'history_scope': 'Bound history.',
+                'review_rounds': [{
+                    'date': '2026-10-16', 'title': 'Review', 'scope': 'Two results',
+                    'finding': 'No defect', 'fix': 'No change', 'pending': 'None',
+                }],
+                'releases': [{
+                    'id': 'bound-release', 'date': '2026-10-16',
+                    'comparison_kinds': ['headless_markdown'],
+                    'title': 'Bound release', 'summary': 'Evidence-bound summary.',
+                    'changes': [['Scope', 'Old', 'New', 'No score change']],
+                }],
+            }
+            source.write_text(json.dumps(data))
+            render_changes(
+                out, {}, [{'provider': 'p', 'provider_type': 'headless_markdown'}],
+                {'comparison': {'kind': 'headless_markdown'}},
+            )
+            public = json.loads((out / 'report-changes.json').read_text())
+            self.assertEqual([row['id'] for row in public['releases']], ['bound-release'])
+
+    def test_unpublished_corrections_are_not_public_history_or_revision_bindings(self):
+        from harness.web_fetch.report_changes import select_cohort_history, require_revision_release_bindings
+        public={'id':'public','publication_state':'published','comparison_kinds':['headless_markdown'],'scoring_revision_input_sha256':'published'}
+        draft={'id':'draft','comparison_kinds':['headless_markdown'],'publication_state':'unpublished','scoring_revision_input_sha256':'draft'}
+        data={'schema_version':3,'releases':[draft,public],'review_rounds':[{'id':'review','description':'Synthetic review'}]}
+        with patch('harness.web_fetch.report_changes.require_review_rounds',return_value=[]):
+            selected=select_cohort_history(data,{'comparison':{'kind':'headless_markdown'}},[])
+        self.assertEqual(selected['releases'],[public])
+        unmarked={k:v for k,v in public.items() if k!='publication_state'}
+        with patch('harness.web_fetch.report_changes.require_review_rounds',return_value=[]), self.assertRaisesRegex(ValueError,'publication state'):
+            select_cohort_history({**data,'releases':[unmarked]}, {'comparison':{'kind':'headless_markdown'}}, [])
+        require_revision_release_bindings([{'input_results_sha256':'published'}],[draft,public])
+        with self.assertRaises(ValueError):
+            require_revision_release_bindings([{'input_results_sha256':'draft'}],[draft,public])
+        with self.assertRaisesRegex(ValueError,'publication state'):
+            require_revision_release_bindings([{'input_results_sha256':'published'}],[{**public,'publication_state':'typo'}])
+
     def test_webmainbench_history_is_localized_from_one_record(self):
         from harness.web_fetch.report_changes import ROOT
         source = json.loads((ROOT / 'research/report-changes.json').read_text(encoding='utf-8'))
@@ -49,6 +93,29 @@ def test_web_fetch_release_translations_come_from_history(self):
                 for zh, en in zip(source, target, strict=True):
                     self.assertEqual(translate_text(zh, translations), en, row['id'])
 
+    def test_release_translation_reuse_requires_one_unambiguous_english_value(self):
+        from harness.web_fetch.report_i18n import release_translations, translate_text
+        release = {
+            'id': 'first', 'title': '版本', 'summary': '摘要',
+            'changes': [['项目', '原问题', '修正', '边界']],
+            'i18n': {'en': {'title': 'Release', 'summary': 'Summary',
+                           'changes': [['Item', 'Prior issue', 'Correction', 'Limits']]}},
+        }
+        matching = json.loads(json.dumps(release))
+        matching['id'] = 'second'
+        translations = release_translations({'releases': [release, matching]})
+        self.assertEqual(translate_text('修正', translations), 'Correction')
+        for field in ('title', 'summary', 'changes'):
+            conflicting = json.loads(json.dumps(matching))
+            if field == 'changes':
+                conflicting['i18n']['en']['changes'][0][2] = 'Different correction'
+            else:
+                conflicting['i18n']['en'][field] = 'Different English text'
+            with self.subTest(field=field), self.assertRaisesRegex(
+                ValueError, 'Conflicting English release translation'
+            ):
+                release_translations({'releases': [release, conflicting]})
+
     def test_dynamic_local_audit_release_is_selected_only_for_its_cohort(self):
         from harness.web_fetch.report_changes import ROOT, select_cohort_history
         data = json.loads((ROOT / 'research/report-changes.json').read_text(encoding='utf-8'))
@@ -204,7 +271,7 @@ def test_explicit_comparison_kind_overrides_legacy_partition(self):
     def test_ranking_uses_planned_judgment_denominator(self):
         c={'id':'file','name':'File','track':'video','task_kind':'file'}
         r={'case_id':'file','provider':'p','ok':True,'elapsed_ms':1,'metrics':{'task_kind':'file'}}
-        page=ranking([r],{'file':c},'video')
+        page=ranking([r],{'file':c},'media_file')
         self.assertIn('判分完整性',page)
         self.assertNotIn('已执行/总案例',page)
         self.assertIn('缺少验收证据的案例',page)
diff --git a/tests/test_report_check_owner.py b/tests/test_report_check_owner.py
index 5a27fae3e..66f1cd595 100644
--- a/tests/test_report_check_owner.py
+++ b/tests/test_report_check_owner.py
@@ -296,3 +296,74 @@ def test_presentation_inventories_require_unique_registered_entries(tmp_path, de
         )
     with pytest.raises(ValueError, match="Duplicate adoption|Interface inventory"):
         check_revision(root, authority_root=authority)
+
+
+@pytest.mark.parametrize('defect', [None, 'missing', 'duplicate', 'unregistered'])
+def test_registered_browser_build_has_its_own_interface_panel(tmp_path, defect):
+    from harness.web_fetch.report_check import check_revision
+    from tests.report_check_fixture import create_revision_report
+    root, authority = create_revision_report(tmp_path)
+    row=json.loads((root/'results.jsonl').read_text())
+    row['provider']='moli-fixed'
+    (root/'results.jsonl').write_text(json.dumps(row)+'\n')
+    counts=json.loads((root/'adoption/counts.json').read_text())
+    for item in counts['methods']:
+        if item['provider']=='alpha':item['provider']='moli-fixed'
+    write_json(root/'adoption/counts.json',counts)
+    panel='<details class="interface-panel" id="interface-moli-fixed"><pre>Request</pre><pre>Response</pre></details>'
+    path=root/'adoption/index.html'
+    additions='' if defect=='missing' else panel
+    if defect=='duplicate':additions+=panel
+    if defect=='unregistered':additions+=panel.replace('moli-fixed','unknown-build')
+    path.write_text(path.read_text().replace('</body>',additions+'</body>'))
+    if defect:
+        with pytest.raises(ValueError):check_revision(root,authority_root=authority)
+    else:
+        assert check_revision(root,authority_root=authority).startswith('PASS:')
+
+
+@pytest.mark.parametrize('family', ['web','dynamic','challenge','risk_control','document'])
+@pytest.mark.parametrize('defect', [False, True])
+def test_body_family_rankings_reject_resource_columns(tmp_path, family, defect):
+    from harness.web_fetch.report import ranking
+    from harness.web_fetch.report_check import check_revision
+    from tests.report_check_fixture import create_revision_report
+    from tests.test_report_body_scope import case, record
+
+    root, authority = create_revision_report(tmp_path)
+    dataset=json.loads((root/'dataset.json').read_text())
+    c=case(family,'body',family)
+    dataset['cases'].append(c)
+    rendered=ranking([record(c)],{family:c},family)
+    if defect:
+        rendered=rendered.replace('完整度','资源命中率')
+    path=root/'index.html'
+    path.write_text(path.read_text()+rendered)
+    write_json(root/'dataset.json',dataset)
+    if defect:
+        with pytest.raises(ValueError,match='Body ranking metric columns'):
+            check_revision(root,authority_root=authority)
+    else:
+        assert check_revision(root,authority_root=authority).startswith('PASS:')
+
+@pytest.mark.parametrize('label', ['Moli 1.1.15', 'Moli', 'Moli 1.1.16'])
+def test_release_rejects_missing_or_relabelled_measured_version(tmp_path,label):
+    from harness.web_fetch.report_check import check_revision
+    from tests.report_check_fixture import create_revision_report
+    root,authority=create_revision_report(tmp_path)
+    row=json.loads((root/'results.jsonl').read_text())
+    row['provider']='moli'
+    row['provider_metadata']={'binary_sha256':'measured-binary'}
+    (root/'results.jsonl').write_text(json.dumps(row)+'\n')
+    counts=json.loads((root/'adoption/counts.json').read_text())
+    counts['methods']=[item for item in counts['methods'] if item['provider']!='alpha']
+    write_json(root/'adoption/counts.json',counts)
+    write_json(root/'implementation-provenance.json',{'implementations':[
+        {'provider':'moli','binary_sha256':'measured-binary','version':'1.1.15'}]})
+    p=root/'index.html'
+    p.write_text(p.read_text()+'<a href="providers/moli.html">'+label+'</a>')
+    if label=='Moli 1.1.15':
+        assert check_revision(root,authority_root=authority).startswith('PASS:')
+    else:
+        with pytest.raises(ValueError,match='Measured method version label'):
+            check_revision(root,authority_root=authority)
diff --git a/tests/test_report_content_ownership.py b/tests/test_report_content_ownership.py
index 046000131..34580ff14 100644
--- a/tests/test_report_content_ownership.py
+++ b/tests/test_report_content_ownership.py
@@ -1,13 +1,27 @@
 """Keep the evidence browser usable without requiring the editorial article."""
 import unittest
+import json
+from pathlib import Path
 from bs4 import BeautifulSoup
 from harness.web_fetch.report_components import task_pass_guide, examples, metric_legend, TRACK_CONTEXT
 from harness.web_fetch.report import ranking, TRACKS
+from harness.web_fetch.models import REPORT_FAMILIES
 
 
 class ContentOwnershipTests(unittest.TestCase):
+    def test_reusable_dataset_does_not_store_report_instance(self):
+        root = Path(__file__).resolve().parents[1]
+        authority = root / "evaluation/webfetch-seven-family-430"
+        self.assertFalse((authority / "current-report.json").exists())
+        self.assertFalse((authority / "rerun-scope.json").exists())
+        assembly = json.loads((authority / "dataset-assembly.json").read_text())
+        self.assertNotIn("profile", assembly)
+        archive = json.loads((root / "evaluation/publication-archives.json").read_text())
+        self.assertEqual(archive["schema_version"], 1)
+        self.assertTrue(archive["archives"][0]["site_url"].startswith("https://"))
+
     def test_every_track_explains_meaning_example_and_boundary(self):
-        self.assertEqual(set(TRACK_CONTEXT),set(TRACKS))
+        self.assertTrue(set(TRACKS) <= set(TRACK_CONTEXT))
         for track in TRACKS:
             soup=BeautifulSoup(task_pass_guide(track),'html.parser')
             self.assertTrue(soup.select_one('.track-meaning').get_text().strip())
@@ -42,7 +56,7 @@ def test_home_metric_details_precede_table_and_start_closed(self):
 
     def test_every_ranking_links_to_its_methodology_example(self):
         page = examples()
-        for track in ('web', 'dynamic', 'document', 'image', 'video', 'challenge'):
+        for track in REPORT_FAMILIES:
             guide = task_pass_guide(track, '../')
             self.assertIn(f'../methodology/index.html#task-examples-{track}', guide)
             self.assertIn(f'id="task-examples-{track}"', page)
diff --git a/tests/test_report_inventory.py b/tests/test_report_inventory.py
index d9a61196f..27abdcc1d 100644
--- a/tests/test_report_inventory.py
+++ b/tests/test_report_inventory.py
@@ -35,7 +35,7 @@ def check(self):
             root/'dataset.json': json.dumps(self.dataset),
             root/'results.jsonl': '\n'.join(json.dumps(r, ensure_ascii=False) for r in self.records),
             root/'execution.json': json.dumps({'batches': [{'attempt_ids': [r['attempt_id'] for r in self.records]}]}),
-            root/'index.html': '<h2>6 类任务概览</h2> 本类最高： 判分完整性 <h2>综合通过率总榜</h2> <h2>6 类分榜</h2>',
+            root/'index.html': '<h2>综合通过率总榜</h2> <h2>6 类任务概览</h2> 本类最高： 判分完整性 <h2>6 类分榜</h2>',
             root/'methodology/index.html': '计入耗时 不计入耗时 供应商上报的服务端耗时只作附加证据 形成可送入统一评分器的最终答案',
             ROOT/'configs/evaluation-inventory.json': json.dumps(self.inventory),
         }
diff --git a/tests/test_report_links.py b/tests/test_report_links.py
index be9a0c541..64c6ab138 100644
--- a/tests/test_report_links.py
+++ b/tests/test_report_links.py
@@ -42,6 +42,18 @@ def test_rejects_missing_fragment(self) -> None:
             self.assertEqual(result.returncode, 1)
             self.assertIn("missing fragment", result.stdout)
 
+    def test_inspection_links_use_the_declared_filter_contract(self):
+        for attribute in ('data-filter','data-wmb-filter'):
+            with self.subTest(attribute=attribute), tempfile.TemporaryDirectory() as directory:
+                root=Path(directory)
+                (root/'index.html').write_text('<a href="analysis.html#inspect?query=case-a">结果</a>')
+                (root/'analysis.html').write_text('<input '+attribute+'="query"><select '+attribute+'="result"><option value="">全部</option><option value="fail">失败</option></select>')
+                self.assertEqual(self.run_check(root).returncode,0)
+                (root/'index.html').write_text('<a href="analysis.html#inspect?unknown=case-a">结果</a>')
+                self.assertEqual(self.run_check(root).returncode,1)
+                (root/'index.html').write_text('<a href="analysis.html#inspect?result=invalid">结果</a>')
+                self.assertEqual(self.run_check(root).returncode,1)
+
     def test_honors_document_base(self) -> None:
         with tempfile.TemporaryDirectory() as directory:
             root = Path(directory)
diff --git a/tests/test_report_methods.py b/tests/test_report_methods.py
index 8f88e37a1..c14bc291a 100644
--- a/tests/test_report_methods.py
+++ b/tests/test_report_methods.py
@@ -41,6 +41,22 @@ def test_method_page_model_resolves_moli_profile_before_rendering(self):
   self.assertIn('本轮 100 例',model['configuration'])
   self.assertIn('默认 done',model['configuration'])
 
+ def test_method_page_model_reports_uniform_dynamic_family_completion(self):
+  record={'provider_type':'moli_webfetch','provider_metadata':{
+      'reported_version':'moli 1.1.15','dump':'markdown',
+      'route':'dynamic_native_markdown','wait_until':'domstable',
+      'layout':True,'with_frames':True,
+      'wait':{'strategy':'native_task_family_completion'}}}
+  model=method_page_model('moli','Moli',[record]*100)
+  self.assertEqual(
+      model['endpoint'],
+      'moli fetch --dump markdown --layout --with-frames --wait-until domstable URL')
+  self.assertIn('100 个动态网站正文任务',model['configuration'])
+  self.assertIn('统一使用',model['configuration'])
+  self.assertIn('没有逐题等待元素',model['configuration'])
+  self.assertIn('--layout',model['configuration'])
+  self.assertIn('--with-frames',model['configuration'])
+
  def test_future_method_page_is_registry_driven_without_renderer_changes(self):
   method={'endpoint':'future fetch URL','contract':'URL → text','output':'text',
           'freshness':'fresh process','leaderboard':'body',
@@ -111,3 +127,36 @@ def test_metric_definitions_cover_each_ranking(self):
   for title in ['请求成功率','任务通过率','结构达标率','资源命中率','文件取得率','信息通过率','完整度','纯净度','F1','均值','P50','P95']:
    self.assertIn('<dt>'+title+'</dt>',metric_legend([title]))
   self.assertNotIn('条件通过率',metric_guide())
+
+def test_report_labels_distinguish_release_and_source_build_with_same_version(tmp_path):
+    import json
+    from harness.web_fetch.methods import with_measured_method_labels
+    from harness.web_fetch.report import provider_label
+    from harness.web_fetch.report_methods import display_name
+    from harness.web_fetch.report_explainer import provider_name
+
+    identities={'implementations':[
+        {'provider':'moli-release','binary_sha256':'stable','version':'1.1.15'},
+        {'provider':'moli-candidate','binary_sha256':'branch',
+         'version':'1.1.17 · candidate build (99a22382)'}]}
+    (tmp_path/'implementation-provenance.json').write_text(json.dumps(identities))
+    records=[{'provider':x['provider'],'provider_metadata':{'binary_sha256':x['binary_sha256']}}
+             for x in identities['implementations']]
+    original=provider_label('moli-release')
+
+    @with_measured_method_labels
+    def render(out,dataset,rows):
+        for label in (provider_label,display_name,lambda n:provider_name(n,n)):
+            assert label('moli-release')=='Moli 1.1.15'
+            assert label('moli-candidate')=='Moli 1.1.17 · candidate build (99a22382)'
+
+    render(tmp_path,{},records)
+    assert provider_label('moli-release')==original
+    records[0]['provider_metadata']['binary_sha256']='different-build'
+
+    @with_measured_method_labels
+    def unrelated(out,dataset,rows):
+        assert provider_label('moli-release')==original
+
+    unrelated(tmp_path,{},records)
+    assert provider_label('moli-release')==original
diff --git a/tests/test_report_presentation.py b/tests/test_report_presentation.py
index da7737ff7..376fe644b 100644
--- a/tests/test_report_presentation.py
+++ b/tests/test_report_presentation.py
@@ -1,4 +1,5 @@
 import tempfile
+import json
 from pathlib import Path
 import unittest
 from harness.web_fetch.report import EXTRA,active_tracks,failure_category,filter_controls,case_attrs,failure_filters,overall_ranking,overview_matched_latency,provider_configuration,review_cell,table,write
@@ -30,6 +31,14 @@ def test_overview_latency_includes_every_configuration_and_same_case_mean(self):
   self.assertIn('调用矩阵尚不完整',overview_matched_latency(records[1:],cases))
 
  def row(self,**kw):return dict({'ok':True,'metrics':{'content_pass':False,'length_pass':True}},**kw)
+ def test_provider_filter_defaults_to_the_complete_population(self):
+  controls=filter_controls([('provider','方法',[('one','One'),('two','Two')])])
+  self.assertIn('data-filter="provider" aria-label="方法"><option value="">全部</option>',controls)
+ def test_case_search_includes_identifier_and_source_url(self):
+  c={'id':'case-a','name':'Readable title','url':'https://example.com/source','category':'test','task_kind':'body'}
+  r=self.row(provider='one',case_id='case-a')
+  attrs=case_attrs(r,c)
+  self.assertIn('data-search="case-a Readable title https://example.com/source ',attrs)
  def test_result_default_failure(self):
   controls=filter_controls([('result','结果',[('pass','任务通过'),('fail','任务失败')])])
   self.assertIn('value="fail" selected',controls)
@@ -42,12 +51,14 @@ def test_overall_ranking_shows_all_call_latency_without_affecting_pass_order(sel
    {'provider':'slow-high-pass','case_id':'a','ok':True,'elapsed_ms':100,'metrics':{'content_pass':True}},
    {'provider':'slow-high-pass','case_id':'b','ok':True,'elapsed_ms':200,'metrics':{'content_pass':True}},
   ]
-  rendered=overall_ranking(records,cases)
+  rendered=overall_ranking(records,cases,call_budget_seconds=45)
   from bs4 import BeautifulSoup
   headers=[cell.get_text(' ',strip=True) for cell in BeautifulSoup(rendered,'html.parser').select('#ranking-overall thead th')]
-  self.assertEqual(headers[-3:],['均值 ↕','P50 ↕','P95 ↕'])
+  self.assertEqual(headers[-3:],['总耗时均值 ↕','总耗时 P50 ↕','总耗时 P95 ↕'])
   self.assertNotIn('全调用', ' '.join(headers))
-  self.assertIn('全调用均值 / P50 / P95',rendered)
+  self.assertIn('总耗时均值 / P50 / P95',rendered)
+  self.assertIn('包含失败重试和重试等待',rendered)
+  self.assertIn('每次物理调用预算为 45 秒',rendered)
   from harness.web_fetch.report_i18n import translate_text
   self.assertEqual([translate_text(label) for label in ('均值','P50','P95')],['Mean','P50','P95'])
   self.assertIn('包含通过与失败',rendered)
@@ -159,7 +170,11 @@ def test_provider_configuration_is_method_specific(self):
   chromium=provider_configuration('chromium',[{'provider_type':'headless_markdown','provider_metadata':{'extractor':'node-html-markdown','output_contract':'markdown'}}],default)
   self.assertIn('rawBase64',firecrawl)
   self.assertNotIn('Exa、Tavily、Firecrawl',builtin)
-  self.assertIn('Chromium 渲染 DOM',chromium)
+  self.assertIn('渲染 DOM',chromium)
+  self.assertIn('node-html-markdown 2.0.0',chromium)
+  moli=provider_configuration('moli',[{'provider_type':'headless_markdown','provider_metadata':{'extractor':'node-html-markdown','output_contract':'markdown'}}],default)
+  self.assertNotIn('Chromium',moli)
+  self.assertIn('node-html-markdown 2.0.0',moli)
  def test_dynamic_cohort_copy_has_english_translations(self):
   from harness.web_fetch.report_i18n import translate_text
   self.assertEqual(translate_text('90 个案例 · 12 种方法 · 4类分榜与一个综合通过率总榜。'),
@@ -280,3 +295,35 @@ def test_article_embedded_assets_and_measured_markup_stay_distinct(self):
   self.assertIn('<pre><img src="data:image/png;base64,YQ==" alt="文章目录"></pre>',translated)
   outside=localize_html(markup,PurePosixPath('attempts/example.html'))
   self.assertIn('src="data:image/png;base64,YQ==" data-en-src="data:image/png;base64,Yg=="',outside)
+
+class MeasuredInterfaceIdentityTests(unittest.TestCase):
+ def render(self, records, name='moli'):
+  import json
+  from harness.web_fetch.report_interfaces import render_interfaces
+  with tempfile.TemporaryDirectory() as directory:
+   out=Path(directory);(out/'adoption').mkdir();(out/'answer.md').write_text('Body')
+   rows=[{'case_id':'static-simple','attempt_id':str(i),'artifact_path':'answer.md',**r} for i,r in enumerate(records)]
+   render_interfaces(out,rows)
+   return json.loads((out/'adoption/interfaces'/f'{name}.json').read_text())
+ def test_generic_moli_uses_observed_release_and_task_adapter(self):
+  record={'provider':'moli','provider_type':'moli_webfetch','provider_metadata':{'reported_version':'moli 1.1.15'}}
+  output=self.render([record]);access=output['access']
+  self.assertIn('/tag/v1.1.15',access['links'][0][1])
+  self.assertNotIn('1.1.5',str(access))
+  self.assertEqual(output['interface']['source'],'harness/web_fetch/providers/moli.py')
+  old={'provider':'moli-1.0.6','provider_type':'headless_markdown','provider_metadata':{'reported_version':'moli 1.0.6'}}
+  output=self.render([old],'moli-1.0.6')
+  self.assertIn('1.0.6',output['access']['links'][0][1])
+  self.assertEqual(output['interface'],json.loads(json.dumps(SPECS['moli-1.0.6'])))
+ def test_unknown_or_mixed_generic_versions_do_not_invent_a_release(self):
+  rows=[{'provider':'moli','provider_metadata':{'reported_version':'moli '+v}} for v in ('1.1.14','1.1.15')]
+  for records in ([],rows):
+   self.assertNotIn('/tag/',str(self.render(records)['access']))
+ def test_native_metadata_envelopes_keep_native_output_and_actual_cli_examples(self):
+  engines=[('lightpanda','lightpanda_json','--json'),('obscura','obscura_eval','--eval')]
+  for name,format_name,flag in engines:
+   record={'provider':name,'provider_type':'headless_markdown','provider_metadata':{'native_metadata':{'format':format_name,'script_sha256':'a'*64,'script_path':'/private/local-script.js'}}}
+   output=self.render([record],name)
+   self.assertIn(flag,output['interface']['entry'])
+   self.assertNotIn('/private/local-script.js',str(output))
+   if name=='obscura':self.assertNotIn('--dump',str(output['interface']['request']))
diff --git a/tests/test_report_presentation_contract.py b/tests/test_report_presentation_contract.py
index 1c6cb71ff..d3ff4208a 100644
--- a/tests/test_report_presentation_contract.py
+++ b/tests/test_report_presentation_contract.py
@@ -24,3 +24,17 @@ def test_evidence_and_negative_controls(self):
         check_presentation(page)
         for broken in [page.replace('id="result-logs"','id="missing"'),page.replace('data-kind="error"',''),page.replace('</div><dl','</div><div data-result-summary></div><dl'),page.replace('</dialog>','</dialog><pre>flattened raw log</pre>')]:
             with self.assertRaises(ValueError):check_presentation(broken)
+
+
+class SharedRankingPresentationTests(unittest.TestCase):
+    def test_raw_column_extremes_zero_ties_and_unavailable_values(self):
+        from harness.web_fetch.report import cell, comparative_rows, table
+        rows=[('',cell('A')+cell('0 ms',0)+cell('50%',0.5)),
+              ('',cell('B')+cell('10 ms',10)+cell('50%',0.5)),
+              ('',cell('C')+cell('—',-1)+cell('—',-1))]
+        rendered=table(['Method','Mean','Pass rate'],comparative_rows(rows,{1:('mean','min'),2:('pass','max')}))
+        check_presentation(rendered)
+        self.assertEqual(rendered.count('comparison-winner'),1)
+        self.assertIn('comparison-winner good">0 ms',rendered)
+        with self.assertRaises(ValueError):
+            check_presentation(rendered.replace('comparison-winner good','good'))
diff --git a/tests/test_report_pricing.py b/tests/test_report_pricing.py
index 192f14dd5..cc64bb403 100644
--- a/tests/test_report_pricing.py
+++ b/tests/test_report_pricing.py
@@ -38,7 +38,7 @@ def test_catalog_has_sources_dates_and_no_invented_annual_prices():
     assert firecrawl['verified_at'] == '2026-09-11'
     assert 'proxy=auto' in firecrawl['scope']
     assert 'parsers=[]' in firecrawl['scope']
-    assert '不是本轮实测账单' in firecrawl['scope']
+    assert '不代表调用方的实际账单' in firecrawl['scope']
     assert '不代表实际扣费' in firecrawl['scope']
     assert firecrawl['rates'][0] == [
         '基础 Scrape / auto / enhanced',
@@ -87,6 +87,26 @@ def test_render_only_registered_providers():
     assert 'id="pricing-firecrawl"' not in rendered
 
 
+def test_report_bound_pricing_overrides_legacy_catalog(tmp_path):
+    bound = {
+        "checked_at": "2026-10-16",
+        "providers": [],
+        "other_methods": [{
+            "ids": ["local-browser"], "label": "Local browser",
+            "status": "Self-hosted", "note": "Caller pays infrastructure.",
+            "sources": [{"label": "Source", "url": "https://example.test/pricing"}],
+        }],
+    }
+    path = tmp_path / "report-assets/provider-pricing.json"
+    path.parent.mkdir()
+    path.write_text(json.dumps(bound))
+    rendered = render_pricing(
+        tmp_path, ["local-browser"], table=table, cell=cell, link=link, esc=esc
+    )
+    assert "Local browser" in rendered
+    assert json.loads((tmp_path / "adoption/pricing.json").read_text()) == bound
+
+
 def test_firecrawl_current_route_and_billing_boundaries_are_localized_one_to_one():
     with tempfile.TemporaryDirectory() as directory:
         rendered = render_pricing(
@@ -101,7 +121,7 @@ def test_firecrawl_current_route_and_billing_boundaries_are_localized_one_to_one
         'Official sources for this entry verified: 2026-09-11.',
         'Base Scrape / auto / enhanced',
         '+1 credit/PDF page on top of the base price',
-        'The capacity preflight only checks whether the account can cover the declared call count',
+        'Capacity preflight only checks whether the account can cover the declared call count',
     ]:
         assert text in english
     assert untranslated_english_narrative(english) == []
diff --git a/tests/test_report_templates.py b/tests/test_report_templates.py
index 858c9be13..bb9e0db41 100644
--- a/tests/test_report_templates.py
+++ b/tests/test_report_templates.py
@@ -81,6 +81,20 @@ def test_body_failure_quotes_frozen_reference_not_matching_fragments(self):
         self.assertIn('见标准答案',diagnostic_findings(row,files)[0]['expected'])
         self.assertNotIn('befo port',diagnostic_findings(row,files)[0]['expected'])
 
+    def test_page_identity_is_reported_only_as_an_observed_diagnostic(self):
+        from harness.web_fetch.report_diagnostic import diagnostic_findings
+        row={'initial_pass':False,'failure':'page_identity_not_verified','log':{'path':'call.json'}}
+        for status, expected_count in (('mismatch', 1), ('unknown', 0), ('not_verified', 0), ('unavailable', 0)):
+            with self.subTest(status=status):
+                log={'ok':True,'final_url':'https://redirect.example/final',
+                     'metrics':{'page_identity_status':status,'observed_document_language':'en'}}
+                findings=diagnostic_findings(row,{'call.json':json.dumps(log).encode()})
+                identity=[finding for finding in findings if finding['kind']=='identity']
+                self.assertEqual(len(identity),expected_count)
+                if identity:
+                    self.assertIn('不参与通过判定',identity[0]['label'])
+                    self.assertEqual(identity[0]['expected'],'仅供核对访问路径，无通过要求')
+
     def test_release_privacy_gate_also_checks_unreferenced_extra_files(self):
         with tempfile.TemporaryDirectory() as temp:
             root=Path(temp);diagnostic_example(root/'source')
diff --git a/tests/test_report_ui.mjs b/tests/test_report_ui.mjs
index 16065c4d8..ba414fdc1 100644
--- a/tests/test_report_ui.mjs
+++ b/tests/test_report_ui.mjs
@@ -265,3 +265,21 @@ vm.runInContext('wmbCompare()',wmbCompareContext);
 assert.deepEqual(wmbCompareRows.map(r=>r.hidden),[true,false,true]);
 assert.equal(wmbCompareChecks[0].disabled,true);
 console.log('PASS: WebMainBench same-page group comparison combines methods, delivery pattern and official categories');
+
+// A task deep link must show both pass and fail results across providers,
+// even when the inventory was previously narrowed to one provider's failures.
+const taskFilters=[choices('provider',['one','two']),choices('result',['fail','pass']),
+ {tagName:'INPUT',dataset:{filter:'query'},value:''}];
+taskFilters.slice(0,2).forEach(f=>f.tagName='SELECT');
+const taskRows=[
+ {dataset:{provider:'one',result:'fail',search:'case-a'},textContent:'First result'},
+ {dataset:{provider:'two',result:'pass',search:'case-a'},textContent:'Second result'},
+ {dataset:{provider:'two',result:'fail',search:'case-b'},textContent:'Other task'}];
+const taskContext=vm.createContext({URLSearchParams,window:{addEventListener(){}},document:{
+ addEventListener(){},querySelectorAll(s){return s==='#rows tr'?taskRows:s==='select[data-filter]'?taskFilters.slice(0,2):s==='[data-filter]'?taskFilters:[]},
+ querySelector(s){return s==='#count'?count:{scrollIntoView(){}}}}});
+vm.runInContext(js,taskContext);
+assert.equal(vm.runInContext("wmbInspect('inspect?query=case-a')",taskContext),true);
+assert.deepEqual(taskFilters.map(f=>f.value),['','','case-a']);
+assert.deepEqual(taskRows.map(r=>r.hidden),[false,false,true]);
+console.log('PASS: same-task deep link clears unrelated filters and includes every outcome');
diff --git a/tests/test_reporting_publication.py b/tests/test_reporting_publication.py
index e09d2b5c4..f1e8fa41a 100644
--- a/tests/test_reporting_publication.py
+++ b/tests/test_reporting_publication.py
@@ -1,11 +1,48 @@
 """Release archives must contain exactly the validated bytes or preserve the prior release."""
 import json
+import os
 import zipfile
 from pathlib import Path
 
 import pytest
 
-from harness.reporting.publication import package_archive
+from harness.reporting.publication import package_archive, snapshot_publication
+
+
+@pytest.mark.skipif(os.name == 'nt', reason='Windows lacks Unix change-time semantics')
+def test_packet_guards_do_not_reread_unchanged_report_payloads(tmp_path, monkeypatch):
+    report, authority, output, _ = fixture(tmp_path)
+    with snapshot_publication(output, inputs=[report, authority]) as snapshot:
+        with monkeypatch.context() as guards:
+            guards.setattr(Path, 'read_bytes', lambda _: pytest.fail('unchanged payload reread'))
+            for _ in range(100):
+                snapshot.check()
+        snapshot.verify()
+
+
+@pytest.mark.parametrize('damage', ['page', 'profile', 'source-archive', 'frozen-archive',
+                                  'new-file', 'deleted-file', 'replacement', 'symlink'])
+def test_packet_guards_detect_input_edits_even_with_restored_mtime(tmp_path, damage):
+    report, authority, output, _ = fixture(tmp_path)
+    with snapshot_publication(output, inputs=[report, authority]) as snapshot:
+        target = {'page': report / 'index.html', 'profile': authority,
+                  'source-archive': output, 'frozen-archive': snapshot.archive}.get(damage)
+        if target is not None:
+            before = target.stat()
+            target.write_bytes(target.read_bytes()[::-1])
+            os.utime(target, ns=(before.st_atime_ns, before.st_mtime_ns))
+        elif damage == 'new-file':
+            (report / 'extra.txt').write_text('unexpected')
+        elif damage == 'deleted-file':
+            (report / 'index.html').unlink()
+        elif damage == 'replacement':
+            page = report / 'index.html'
+            page.unlink()
+            page.write_text('different page')
+        else:
+            (report / 'linked').symlink_to(authority)
+        with pytest.raises(ValueError):
+            snapshot.check()
 
 
 def fixture(tmp_path):
@@ -200,3 +237,24 @@ def retarget():
         run(report, authority, alias / output.name, alias / receipt.name, retarget)
     assert (output.read_bytes(), receipt.read_bytes()) == before
     assert not list(other.iterdir())
+
+
+@pytest.mark.parametrize('status', [404, 403, 410, 500])
+def test_operation_recovery_handles_real_http_errors_without_replacing_key(tmp_path, status):
+    from urllib.error import HTTPError
+
+    from harness.reporting.publication import PublicationOperation
+    operation = PublicationOperation(tmp_path / 'pending.json', 'test-')
+    identity = {'slug': 'existing', 'archive_sha256': 'bound'}
+    pending, _ = operation.pending(identity, allow_create=True)
+    before = operation.journal.read_bytes()
+    error = HTTPError('https://example.test/api/operations/key', status, 'status', {}, None)
+    def request(*args, **kwargs):
+        raise error
+    if status == 404:
+        assert operation.completed(pending['key'], request=request, decode=lambda *_: None) is None
+    else:
+        with pytest.raises(HTTPError) as caught:
+            operation.completed(pending['key'], request=request, decode=lambda *_: None)
+        assert caught.value.code == status
+    assert operation.journal.read_bytes() == before
diff --git a/tests/test_resource_build_context.py b/tests/test_resource_build_context.py
new file mode 100644
index 000000000..ee5b958c6
--- /dev/null
+++ b/tests/test_resource_build_context.py
@@ -0,0 +1,31 @@
+"""The resource image receives runtime code without evaluation credentials."""
+from pathlib import Path
+import tarfile
+import tempfile
+import unittest
+
+from docker.utils.build import tar
+
+ROOT = Path(__file__).resolve().parents[1]
+
+
+class ResourceBuildContextTests(unittest.TestCase):
+    def test_build_context_excludes_credentials_and_host_dependencies(self):
+        excluded = {'.env', '.env.local', 'nested/.env', 'nested/.env.production',
+                    'node_modules/example/package.json', 'nested/node_modules/example/package.json'}
+        required = {'pyproject.toml', 'uv.lock', 'package.json', 'package-lock.json',
+                    'harness/provider.py', 'scripts/worker.py',
+                    'examples/web_fetch/docker/resource.Dockerfile'}
+        patterns = [line.strip() for line in (ROOT / '.dockerignore').read_text().splitlines()
+                    if line.strip() and not line.lstrip().startswith('#')]
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            for name in excluded | required:
+                path = root / name
+                path.parent.mkdir(parents=True, exist_ok=True)
+                path.write_text('fixture')
+            with tar(str(root), exclude=patterns) as context:
+                with tarfile.open(fileobj=context) as archive:
+                    names = {item.name.removeprefix('./') for item in archive.getmembers() if item.isfile()}
+        self.assertFalse(names & excluded, names & excluded)
+        self.assertTrue(required <= names, required - names)
diff --git a/tests/test_resource_cohort_boundary.py b/tests/test_resource_cohort_boundary.py
index 1eae5273f..035cc3f6b 100644
--- a/tests/test_resource_cohort_boundary.py
+++ b/tests/test_resource_cohort_boundary.py
@@ -151,3 +151,84 @@ def test_resource_summary_rejects_incomplete_scope_and_invalid_measurements(runs
         }[damage]
     with pytest.raises(ValueError):
         build_summary(dataset, records, batches)
+
+
+def resource_population_fixture(tmp_path):
+    from copy import deepcopy
+    root = tmp_path / 'resource-populations'
+    original = make_run(root, 6, resource=True)
+    dataset = json.loads((root / 'dataset.json').read_text())
+    dataset['coverage_plan']['web'] = ['fixture', 'other']
+    records = deepcopy(original)
+    for index, row in enumerate(records):
+        row['provider_metadata']['client_resource']['cpu_ms'] = 100 if index == 5 else 1
+        if index == 5:
+            row['metrics']['content_pass'] = False
+    for row in original:
+        added = deepcopy(row)
+        added['provider'] = 'other'
+        added['attempt_id'] = row['attempt_id'].replace('fixture', 'other')
+        records.append(added)
+    batches = [json.loads((root / 'manifest.json').read_text())]
+    return dataset, records, batches
+
+
+def test_resource_primary_population_keeps_failed_calls_and_conditional_counts(tmp_path):
+    dataset, records, batches = resource_population_fixture(tmp_path)
+    summary = build_summary(dataset, records, batches)
+    indexed = {row['provider']:row for row in summary['rows']}
+    assert indexed['fixture']['metrics']['cpu_ms'] == {'n':6,'mean':17.5,'p50':1,'p95':100}
+    assert summary['primary_population'] == 'all_declared_calls'
+    assert indexed['other']['metrics']['cpu_ms']['mean'] == 2
+    assert indexed['fixture']['successful_attempts'] == 5
+    assert indexed['fixture']['successful_metrics']['cpu_ms']['mean'] == 1
+    assert indexed['other']['successful_attempts'] == 6
+    assert len(summary['common_pass_cases']) == 5
+
+
+def test_resource_cohort_with_no_common_success_still_reports_complete_measurements(tmp_path):
+    dataset, records, batches = resource_population_fixture(tmp_path)
+    for row in records:
+        if row['provider'] == 'fixture':
+            row['metrics']['content_pass'] = False
+    summary = build_summary(dataset, records, batches)
+    assert summary['common_pass_cases'] == []
+    assert all(row['attempts'] == 6 for row in summary['rows'])
+    failed = next(row for row in summary['rows'] if row['provider'] == 'fixture')
+    assert failed['successful_metrics']['cpu_ms'] == {'n':0,'mean':None,'p50':None,'p95':None}
+    assert failed['metrics']['cpu_ms']['mean'] == 17.5
+
+
+@pytest.mark.parametrize('damage', [None,'wrong-population','missing-value','wrong-value','missing-winner','tied-winner','wrong-leader','wrong-direction'])
+def test_resource_release_checks_populations_measurements_and_unique_highlights(tmp_path, damage):
+    from bs4 import BeautifulSoup
+    from harness.web_fetch.report_resources import check_resource_presentation, render_resource_comparison
+    dataset, records, batches = resource_population_fixture(tmp_path)
+    summary = build_summary(dataset, records, batches)
+    html, _ = render_resource_comparison(summary, summary['providers'])
+    soup = BeautifulSoup(html,'html.parser')
+    cpu = soup.select_one('td[data-resource-provider="other"][data-resource-key="cpu_ms"][data-resource-statistic="mean"]')
+    assert cpu.select_one('.comparison-winner') is not None
+    tied = soup.select_one('td[data-resource-key="memory_mean_bytes"]')
+    assert tied.select_one('.comparison-winner') is None
+    if damage == 'wrong-population':
+        soup.select_one('[data-resource-population]')['data-resource-cases'] = '5'
+    elif damage == 'missing-value':
+        cpu.decompose()
+    elif damage == 'wrong-value':
+        cpu['data-sort'] = '999'
+    elif damage == 'missing-winner':
+        cpu.select_one('.comparison-winner').unwrap()
+    elif damage == 'tied-winner':
+        tied.append(BeautifulSoup('<strong class="comparison-winner">wrong</strong>','html.parser'))
+    elif damage == 'wrong-leader':
+        soup.select_one('[data-resource-winner]')['data-resource-winner'] = 'fixture'
+    elif damage == 'wrong-direction':
+        for cell in soup.select('td[data-resource-key="cpu_ms"][data-resource-statistic="mean"]'):
+            cell['data-metric-direction'] = 'neutral'
+        cpu.select_one('.comparison-winner').unwrap()
+    if damage is None:
+        check_resource_presentation(str(soup),summary)
+    else:
+        with pytest.raises(ValueError):
+            check_resource_presentation(str(soup),summary)
diff --git a/tests/test_resource_contract_lifecycle.py b/tests/test_resource_contract_lifecycle.py
index 65f093752..3abcbc82d 100644
--- a/tests/test_resource_contract_lifecycle.py
+++ b/tests/test_resource_contract_lifecycle.py
@@ -72,7 +72,7 @@ def test_scope_identity_binds_resource_targets_and_output_policy(self):
         self.assertNotEqual(digest(scope_identity(changed_targets)), original)
         self.assertNotEqual(digest(scope_identity(changed_policy)), original)
 
-    def test_audited_recall_policy_may_update_matching_prompt_but_not_prompt_alone(self):
+    def test_audited_revision_may_update_reader_prompt_but_not_provider_url(self):
         original = self.resource_case()
         original["source_verification"] = {"reference_sha256": sha256("")}
         binding = {
@@ -90,6 +90,49 @@ def test_audited_recall_policy_may_update_matching_prompt_but_not_prompt_alone(s
         with self.assertRaises(ReferenceLifecycleError):
             check_case_scoring_revision_binding(prompt_only, binding)
 
+        different_call = json.loads(json.dumps(prompt_only))
+        different_call["url"] = "https://other.example.test/gallery"
+        with self.assertRaises(ReferenceLifecycleError):
+            check_case_scoring_revision_binding(different_call, binding)
+
+    def test_audited_homepage_revision_may_sync_anchor_prose_but_not_call_scope(self):
+        suffix = "不点击子页面、翻页、登录或执行其他 Browser Use 操作。"
+        original = {
+            "id": "homepage",
+            "url": "https://example.test/",
+            "track": "challenge",
+            "task_kind": "structure",
+            "task_prompt": "保留 Current；Retired。" + suffix,
+            "source_benchmark": {"mode": "ranked_domain_homepage"},
+            "acceptance_contract": {
+                "version": 1,
+                "schema": "body_text",
+                "minimum_records": 0,
+                "stable_text_anchors": [
+                    {"id": "current", "alternatives": ["Current"]},
+                    {"id": "retired", "alternatives": ["Retired"]},
+                ],
+            },
+            "ground_truth_main_content": "",
+            "source_verification": {"reference_sha256": sha256("")},
+        }
+        binding = {
+            "reference_sha256": sha256(""),
+            "expected_normalized_sha256": sha256(""),
+            "scope_identity": scope_identity(original),
+        }
+        corrected = json.loads(json.dumps(original))
+        corrected["task_prompt"] = "保留 Current。" + suffix
+        corrected["acceptance_contract"]["stable_text_anchors"] = [
+            {"id": "current", "alternatives": ["Current"]},
+        ]
+        check_case_scoring_revision_binding(corrected, binding)
+
+        changed_call = json.loads(json.dumps(corrected))
+        changed_call["task_prompt"] = "保留 Current。不点击子页面、翻页后再登录。"
+        with self.assertRaises(ReferenceLifecycleError):
+            check_case_scoring_revision_binding(changed_call, binding)
+
     def test_dynamic_frozen_case_retains_complete_resource_contract(self):
         case = self.resource_case()
         frozen = frozen_case(case)
diff --git a/tests/test_result_review.py b/tests/test_result_review.py
index 645c31899..fa4115904 100644
--- a/tests/test_result_review.py
+++ b/tests/test_result_review.py
@@ -169,6 +169,32 @@ def test_review_cannot_publish_a_known_scoring_disagreement(self):
             with self.assertRaisesRegex(ValueError,'correct and re-review'):
                 require_result_review(root,dataset,records)
 
+    def test_declared_full_review_rejects_failure_only_even_with_no_failures(self):
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            dataset, records, review = self.fixture(root)
+            dataset['comparison']['independent_result_review_scope'] = 'all'
+            (root / 'dataset.json').write_text(json.dumps(dataset))
+            review['bindings']['dataset_sha256'] = hashlib.sha256(
+                (root / 'dataset.json').read_bytes()).hexdigest()
+            review['review_protocol']['scope'] = 'machine-failures'
+            review['attempts'] = []
+            with self.assertRaisesRegex(ValueError, 'declared full review'):
+                require_result_review(root, dataset, records, review)
+            review['review_protocol']['scope'] = 'all'
+            review['attempts'] = [{'attempt_id': records[0]['attempt_id'],
+                                  'machine_verdict': 'pass', 'agent_verdict': 'pass',
+                                  'final_verdict': 'pass'}]
+            result = require_result_review(root, dataset, records, review)
+            self.assertEqual(result['reviewed_attempts'], 1)
+            self.assertEqual(result['accepted_unreviewed_passes'], 0)
+            dataset['comparison']['independent_result_review_scope'] = 'unsupported'
+            (root / 'dataset.json').write_text(json.dumps(dataset))
+            review['bindings']['dataset_sha256'] = hashlib.sha256(
+                (root / 'dataset.json').read_bytes()).hexdigest()
+            with self.assertRaisesRegex(ValueError, 'Unsupported declared'):
+                require_result_review(root, dataset, records, review)
+
     def test_machine_failure_scope_reviews_only_failures_and_accounts_for_passes(self):
         with tempfile.TemporaryDirectory() as directory:
             root=Path(directory);dataset,records,review=self.fixture(root)
@@ -278,6 +304,10 @@ def test_nonjudgmental_dataset_metadata_can_rebind_but_cases_cannot(self):
                     'cases':[{'id':'a','task_kind':'body'}]}
             after=json.loads(json.dumps(before));after['id']='current';after['name']='Current'
             after['comparison']['conversion']='corrected description'
+            after['comparison']['report_interpretation'] = {
+                'path': 'report-assets/article.json', 'sha256': 'b' * 64}
+            after['comparison']['implementation_provenance'] = {
+                'path': 'implementation-provenance.json', 'sha256': 'c' * 64}
             row={'attempt_id':'p__a__r001','provider':'p','case_id':'a',
                  'artifact_path':'artifacts/a.txt','ok':True,'error_type':None,
                  'metrics':{'content_pass':True,'content_sha256':'a'*64}}
@@ -321,6 +351,43 @@ def test_nonjudgmental_dataset_metadata_can_rebind_but_cases_cannot(self):
                 rebind_unchanged_result_review(
                     path,after_bytes,results,after_bytes,changed_results,rebound_at='later')
 
+    def test_equal_empty_answers_do_not_reuse_changed_runtime_diagnosis(self):
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            dataset, records, review = self.fixture(root)
+            record = records[0]
+            record.update(ok=False, error_type='tool_error', error_message='Engine panic A')
+            record['provider_metadata'] = {
+                'diagnostic_log_path': 'private_artifacts/current.stderr.log',
+                'diagnostic_log_sha256': 'a' * 64,
+                'diagnostic_log_bytes': 100,
+            }
+            record['metrics'].update(content_pass=False, content_sha256='e' * 64)
+            before = (json.dumps(record) + '\n').encode()
+            review['bindings']['results_sha256'] = hashlib.sha256(before).hexdigest()
+            review['attempts'][0].update(machine_verdict='fail', agent_verdict='fail',
+                                         final_verdict='fail')
+            path = root / 'result-review.json'
+            path.write_text(json.dumps(review))
+            self.assertTrue(rebind_unchanged_result_review(
+                path, (root / 'dataset.json').read_bytes(), before,
+                (root / 'dataset.json').read_bytes(), before, rebound_at='now'))
+            for change in ('diagnostic_hash', 'error_message'):
+                changed = json.loads(json.dumps(record))
+                if change == 'diagnostic_hash':
+                    changed['provider_metadata']['diagnostic_log_sha256'] = 'b' * 64
+                else:
+                    changed['error_message'] = 'Transport reset B'
+                after = (json.dumps(changed) + '\n').encode()
+                path.write_text(json.dumps(review))
+                original = path.read_bytes()
+                with self.subTest(change=change), self.assertRaisesRegex(
+                        IndependentReviewRequired, 'Review-visible input changed'):
+                    rebind_unchanged_result_review(
+                        path, (root / 'dataset.json').read_bytes(), before,
+                        (root / 'dataset.json').read_bytes(), after, rebound_at='now')
+                self.assertEqual(path.read_bytes(), original)
+
     def test_superseded_review_is_hash_addressed_and_binding_checked(self):
         with tempfile.TemporaryDirectory() as directory:
             root=Path(directory);dataset,records,review=self.fixture(root)
diff --git a/tests/test_retrieval_hints.py b/tests/test_retrieval_hints.py
index c405328be..58742e30a 100644
--- a/tests/test_retrieval_hints.py
+++ b/tests/test_retrieval_hints.py
@@ -1,33 +1,63 @@
 import json
+import tempfile
 from copy import deepcopy
 from pathlib import Path
 
 import pytest
 
 from harness.web_fetch.config import load_dataset
-from harness.web_fetch.retrieval_hints import complete_text_wait_value, parse_retrieval_hints
+from harness.web_fetch.retrieval_hints import (
+    complete_text_wait_value,
+    native_contract_for_case,
+    parse_retrieval_hints,
+)
 
 
 def test_native_execution_keeps_dynamic_scenario_and_acceptance_without_injected_hints():
     from copy import deepcopy
-    from harness.web_fetch.retrieval_hints import native_fetch_dataset
+
     from harness.web_fetch.models import EvalCase
-    from harness.web_fetch.retrieval_hints import plan_for_case
+    from harness.web_fetch.retrieval_hints import native_fetch_dataset, plan_for_case
     dataset={'tool':'web_fetch','coverage_plan':{'dynamic':['browser']},'cases':[
         {'id':'native-page','name':'Dynamic site','url':'https://example.com/',
          'category':'dynamic_content','track':'dynamic','expected_any':[],
          'task_kind':'body','acceptance_contract':{'version':1,'schema':'body_text'},
          'min_content_chars':1000}]}
-    original=deepcopy(dataset);selected=native_fetch_dataset(dataset)
+    original = deepcopy(dataset)
+    selected = native_fetch_dataset(dataset)
     assert dataset==original
+    assert selected['cases'][0]['track']=='dynamic'
+    assert selected['coverage_plan']==original['coverage_plan']
     assert selected['cases'][0]['category']=='dynamic_content'
-    assert selected['cases'][0]['source_benchmark']['scenario_track']=='dynamic'
+    assert 'source_benchmark' not in selected['cases'][0]
     assert selected['cases'][0]['acceptance_contract']==original['cases'][0]['acceptance_contract']
     assert selected['cases'][0]['min_content_chars']==1000
     assert plan_for_case(EvalCase(**selected['cases'][0])) is None
+    with tempfile.TemporaryDirectory() as directory:
+        path = Path(directory) / 'dataset.json'
+        path.write_text(json.dumps(selected))
+        _, cases = load_dataset(path)
+        assert cases[0].track == 'dynamic'
+        assert plan_for_case(cases[0]) is None
     dataset['cases'][0]['retrieval_hints']={'version':1,'completion':{'selector':'.record'}}
-    with pytest.raises(ValueError,match='cannot discard'):
-        native_fetch_dataset(dataset)
+    normalized = native_fetch_dataset(dataset)
+    assert normalized['cases'][0]['retrieval_hints'] == {'version': 3, 'mode': 'native'}
+
+
+@pytest.mark.parametrize("case_specific", [
+    {"version": 1, "completion": {"selector": ".record", "minimum_count": 10,
+                                     "timeout_ms": 30000, "delay_ms": 100}},
+    {"version": 3, "mode": "native", "contract": "any-case-contract"},
+    {"selector": "iframe", "minimum_count": 100, "include_subdocuments": True},
+])
+def test_native_execution_normalizes_every_dynamic_case_to_one_family_marker(case_specific):
+    from harness.web_fetch.retrieval_hints import native_fetch_dataset
+    source = {"tool": "web_fetch", "cases": [
+        {"id": "arbitrary-dynamic-case", "track": "dynamic",
+         "retrieval_hints": case_specific},
+    ]}
+    selected = native_fetch_dataset(source)
+    assert selected["cases"][0]["retrieval_hints"] == {"version": 3, "mode": "native"}
 
 
 def _write_dataset(tmp_path, case):
@@ -233,15 +263,22 @@ def test_frame_complete_text_wait_checks_child_record_fields():
     assert "innerText.split" in plan.wait_value
 
 
-def test_committed_native_100_dataset_loads_without_wait_or_extraction_overrides():
+def test_committed_native_100_dataset_uses_only_native_answer_free_contracts():
     from harness.web_fetch.retrieval_hints import plan_for_case
     from tests.conftest import read_frozen_dataset_bytes
     path = Path("evaluation/dynamic-content-100-moli-webfetch/dataset.json")
     read_frozen_dataset_bytes(path)
     raw, cases = load_dataset(path)
     assert len(cases) == 100
-    assert all(not c.retrieval_hints and plan_for_case(c) is None for c in cases)
-    assert all("retrieval_hints" not in c for c in raw["cases"])
+    assert all(plan_for_case(c) is None for c in cases)
+    assert all(
+        not case.get("retrieval_hints")
+        or (
+            case["retrieval_hints"].get("version") == 3
+            and case["retrieval_hints"].get("mode") == "native"
+        )
+        for case in raw["cases"]
+    )
 
 
 def test_native_default_contract_must_be_valid(tmp_path):
@@ -250,3 +287,142 @@ def test_native_default_contract_must_be_valid(tmp_path):
     case["acceptance_contract"] = {"version": 1, "schema": "unknown"}
     with pytest.raises(ValueError):
         load_dataset(_write_dataset(tmp_path, case))
+
+
+def test_named_native_contract_resolves_a_source_bound_page_shape(monkeypatch):
+    monkeypatch.setattr(
+        "harness.web_fetch.retrieval_hints._verify_contract_source", lambda *_: None
+    )
+    case = {"id": "dynamic-iframe", "track": "dynamic", "retrieval_hints": {
+        "version": 3, "mode": "native", "contract": "iframe-fourteen-family-headings"}}
+    assert parse_retrieval_hints("dynamic", case["retrieval_hints"], identifier=case["id"]) is None
+    contract = native_contract_for_case(case)
+    assert contract.include_subdocuments is True
+    plan = contract.completion_plan(45_000)
+    assert plan.wait_kind == "script" and plan.timeout_ms == 45_000
+    assert "h3.family-name" in plan.wait_value and ".length >= 14" in plan.wait_value
+
+
+def test_delayed_native_contract_waits_for_complete_visible_records(monkeypatch):
+    monkeypatch.setattr(
+        "harness.web_fetch.retrieval_hints._verify_contract_source", lambda *_: None
+    )
+    case = {"id": "dynamic-delayed", "track": "dynamic", "retrieval_hints": {
+        "version": 3, "mode": "native", "contract": "delayed-ten-records"}}
+    contract = native_contract_for_case(case)
+    plan = contract.completion_plan(45_000)
+
+    assert contract.selector == ".quote"
+    assert contract.minimum_count == 10
+    assert contract.minimum_text_fragments == 3
+    assert plan.wait_kind == "script"
+    assert 'document.querySelectorAll(".quote")' in plan.wait_value
+    assert "nodes.length >= 10" in plan.wait_value
+    assert "nodes.slice(0, 10).every" in plan.wait_value
+    assert "innerText.split" in plan.wait_value
+    assert ">= 3" in plan.wait_value
+    assert "Albert Einstein" not in plan.wait_value
+
+
+def test_public_dataset_loader_binds_named_contract_to_the_current_task_definition(tmp_path):
+    from tests.conftest import read_frozen_dataset_bytes
+
+    dataset = json.loads(read_frozen_dataset_bytes(
+        Path("evaluation/dynamic-content-100-moli-webfetch/dataset.json")
+    ))
+    original = next(case for case in dataset["cases"] if case["id"] == "dynamic-iframe")
+    load_dataset(_write_dataset(tmp_path, deepcopy(original)))
+
+    changed_url = deepcopy(original)
+    changed_url["url"] += "?different-task=1"
+    changed_body_requirement = deepcopy(original)
+    changed_body_requirement["min_content_chars"] += 1
+    changed_acceptance = deepcopy(original)
+    changed_acceptance["acceptance_contract"]["minimum_records"] -= 1
+    for changed in (changed_url, changed_body_requirement, changed_acceptance):
+        with pytest.raises(ValueError, match="does not match the current task definition"):
+            load_dataset(_write_dataset(tmp_path, changed))
+
+
+@pytest.mark.parametrize("field", ["completion", "include_subdocuments", "answer_text", "timeout_ms"])
+def test_native_dataset_rows_reject_inline_capabilities_and_answers(field):
+    hints = {"version": 3, "mode": "native", field: {"selector": ".record"}}
+    with pytest.raises(ValueError, match="native retrieval_hints"):
+        parse_retrieval_hints("dynamic", hints, identifier="control")
+
+
+@pytest.mark.parametrize("hints", [
+    {"version": 3, "mode": "native", "answer_text": "expected answer"},
+    {"version": 3, "mode": "guided"}, {"version": 3},
+])
+def test_native_contract_rejects_unknown_or_non_native_fields(hints):
+    with pytest.raises(ValueError, match="native retrieval_hints"):
+        parse_retrieval_hints("dynamic", hints)
+
+
+def test_named_contract_is_bound_to_one_case_and_unknown_names_fail_closed():
+    with pytest.raises(ValueError, match="belongs to another case"):
+        parse_retrieval_hints("dynamic", {"version": 3, "mode": "native",
+            "contract": "iframe-fourteen-family-headings"}, identifier="another-case")
+    with pytest.raises(ValueError, match="unknown native retrieval contract"):
+        parse_retrieval_hints("dynamic", {"version": 3, "mode": "native",
+            "contract": "unknown-contract"}, identifier="another-case")
+
+
+@pytest.mark.parametrize("selector", [".answer", "#correct-answer"])
+def test_registry_rejects_answer_derived_selectors(tmp_path, monkeypatch, selector):
+    import harness.web_fetch.retrieval_hints as owner
+    registry = {"schema_version": 1, "contracts": {"answer-derived": {
+        "case_id": "control", "task_definition_sha256": "b" * 64,
+        "source_authority": {"path": "source.json",
+            "sha256": "a" * 64, "provider_output_used": False},
+        "capabilities": {"completion": {"selector": selector, "minimum_count": 1}}}}}
+    path = tmp_path / "registry.json"
+    path.write_text(json.dumps(registry))
+    monkeypatch.setattr(owner, "_CONTRACT_REGISTRY_PATH", path)
+    owner._native_contract_registry.cache_clear()
+    monkeypatch.setattr(owner, "_verify_task_definition", lambda *_: None)
+    monkeypatch.setattr(owner, "_verify_contract_source", lambda *_: None)
+    with pytest.raises(ValueError, match="answer-derived"):
+        owner.native_contract_for_case({"id": "control", "track": "dynamic",
+            "retrieval_hints": {"version": 3, "mode": "native", "contract": "answer-derived"}})
+    owner._native_contract_registry.cache_clear()
+
+
+def test_registry_source_hash_must_match_bound_external_bytes(tmp_path, monkeypatch):
+    import harness.web_fetch.retrieval_hints as owner
+    registry = json.loads(Path("evaluation/native-retrieval-contracts.json").read_text())
+    registry["contracts"]["delayed-ten-records"]["source_authority"]["sha256"] = "0" * 64
+    path = tmp_path / "registry.json"
+    path.write_text(json.dumps(registry))
+    monkeypatch.setattr(owner, "_CONTRACT_REGISTRY_PATH", path)
+    owner._native_contract_registry.cache_clear()
+    with pytest.raises(ValueError, match="source hash is not in the source manifest"):
+        owner.native_contract_for_case({"id": "dynamic-delayed", "track": "dynamic",
+            "retrieval_hints": {"version": 3, "mode": "native",
+                                "contract": "delayed-ten-records"}})
+    owner._native_contract_registry.cache_clear()
+
+
+def test_native_contract_does_not_waive_missing_dynamic_execution_contract():
+    assert parse_retrieval_hints("dynamic", {"version": 3, "mode": "native"}) is None
+    with pytest.raises(ValueError, match="require retrieval_hints"):
+        parse_retrieval_hints("dynamic", None)
+
+
+@pytest.mark.parametrize("version", [True, 3.0, "3", None])
+def test_native_completion_version_requires_an_integer(version):
+    with pytest.raises(ValueError):
+        parse_retrieval_hints("dynamic", {"version": version, "mode": "native"})
+
+
+def test_worker_accepts_explicit_native_dynamic_contract_without_injected_plan():
+    from harness.web_fetch.providers.headless_worker import require_normalized_retrieval_plan
+    assert require_normalized_retrieval_plan({
+        "track": "dynamic", "retrieval_plan": None,
+        "retrieval_hints": {"version": 3, "mode": "native"}}) is None
+    with pytest.raises(ValueError, match="explicit native contract"):
+        require_normalized_retrieval_plan({"track": "dynamic", "retrieval_plan": None})
+    with pytest.raises(ValueError, match="native completion cannot carry"):
+        require_normalized_retrieval_plan({"track": "dynamic", "retrieval_plan": {"selector": "body"},
+            "retrieval_hints": {"version": 3, "mode": "native"}})
diff --git a/tests/test_risk_control_compiler.py b/tests/test_risk_control_compiler.py
index 47b3b99f4..b6502fc31 100644
--- a/tests/test_risk_control_compiler.py
+++ b/tests/test_risk_control_compiler.py
@@ -42,6 +42,15 @@ def definitions(tmp_path, monkeypatch):
         if index < 79:
             section += "- **正文参考：** 单区\n"
             bodies[identifier] = {"regions": [{"lines": [2, 2]}]}
+            if index == 0:
+                bodies[identifier]["stable_text_role"] = "diagnostic"
+            elif index == 1:
+                bodies[identifier].update(
+                    {
+                        "stable_text_role": "diagnostic",
+                        "page_patterns": [r"^Independent anchor 001-00$"],
+                    }
+                )
         sections.append(section)
         cases.append(
             {
@@ -58,7 +67,7 @@ def definitions(tmp_path, monkeypatch):
                 },
             }
         )
-        if index < 21:
+        if index < 20:
             lists[identifier] = {
                 "groups": [
                     {
@@ -71,11 +80,28 @@ def definitions(tmp_path, monkeypatch):
                     for group in range(7 if index == 0 else 1)
                 ]
             }
+        elif index == 20:
+            lists[identifier] = {
+                "stable_text_role": "diagnostic",
+                "page_patterns": [r"^Independent source body paragraph 020\.$"],
+                "groups": [],
+            }
         elif index < 23:
             lists[identifier] = {
                 "groups": [
                     {"id": "literal", "kind": "literals", "required_literals": ["Independent"]}
                 ]
+                + (
+                    [
+                        {
+                            "id": "second-field-scope",
+                            "kind": "literals",
+                            "required_literals": ["source"],
+                        }
+                    ]
+                    if index == 21
+                    else []
+                )
             }
     rules = [root / name for name in ("first-30-rule-review.md", "remaining-70-rule-review.md")]
     rules[0].write_text("\n".join(sections[:30]))
@@ -108,6 +134,7 @@ def definitions(tmp_path, monkeypatch):
         compiler, "EXPECTED_RULE_HASHES", {path.name: digest(path.read_bytes()) for path in rules}
     )
     monkeypatch.setattr(compiler, "EXPECTED_COHORT_HASH", digest(cohort.read_bytes()))
+    monkeypatch.setattr(compiler, "EXPECTED_STABLE_LITERAL_COUNT", 1600)
     return root, proofs
 
 
@@ -119,13 +146,55 @@ def test_complete_independent_definitions_compile_to_an_executable_dataset(defin
     assert dataset["case_count"] == len(dataset["cases"]) == 100
     assert dataset["body_case_count"] == 79
     assert dataset["stable_literal_count"] == 1600
-    assert dataset["independent_quantity_group_count"] == 27
+    assert dataset["independent_quantity_group_count"] == 26
+    assert dataset["list_or_field_case_count"] == 22
+    assert dataset["composite_group_count"] == 29
     assert dataset["source_bindings"]["body_contracts_sha256"] == digest(
         (root / "body-contracts.json").read_bytes()
     )
     assert dataset["cases"][0]["body_requirements"]["regions"][0]["text"] == (
         "Independent source body paragraph 000."
     )
+    roles = [
+        case["acceptance_contract"].get("stable_text_role", "required")
+        for case in dataset["cases"]
+    ]
+    assert roles.count("diagnostic") == 3
+    assert roles.count("required") == 97
+    assert dataset["cases"][1]["acceptance_contract"]["page_patterns"] == [
+        r"^Independent anchor 001-00$"
+    ]
+    assert dataset["cases"][20]["acceptance_contract"]["stable_text_role"] == "diagnostic"
+    assert "composite_acceptance" not in dataset["cases"][20]
+
+
+def test_current_scope_owners_declare_only_proven_complete_contracts():
+    bodies = json.loads(compiler.BODY_CONTRACTS.read_text())["contracts"]
+    lists = json.loads(compiler.LIST_CONTRACTS.read_text())["contracts"]
+    assert bodies["risk-diverse-042"]["stable_text_role"] == "diagnostic"
+    assert bodies["risk-diverse-011"]["stable_text_role"] == "required"
+    assert lists["risk-diverse-192"]["stable_text_role"] == "diagnostic"
+    assert len(lists["risk-diverse-192"]["page_patterns"]) == 1
+
+
+def test_current_rules_keep_responsive_page_chrome_out_of_body_acceptance():
+    removed = {
+        "risk-diverse-038": {"Recent changes"},
+        "risk-diverse-117": {"Search"},
+        "risk-diverse-225": {"Resources"},
+        "risk-diverse-241": {"Cart", "Home"},
+        "risk-diverse-268": {"Main Site", "Recent Changes", "Site Index", "Categories"},
+        "risk-diverse-201": {"Main page", "Table of contents", "Getting involved"},
+        "risk-diverse-209": {"Search"},
+        "risk-diverse-237": {"Discord"},
+    }
+    sections = {row["id"]: row for row in compiler.parse_sections()}
+    for case_id, labels in removed.items():
+        stable = {value for alternatives in sections[case_id]["stable"] for value in alternatives}
+        assert labels.isdisjoint(stable), case_id
+    assert sum(len(row["stable"]) for row in sections.values()) == (
+        compiler.EXPECTED_STABLE_LITERAL_COUNT
+    )
 
 
 def test_changed_independent_proof_cannot_produce_a_dataset(definitions, tmp_path):
diff --git a/tests/test_risk_control_dataset.py b/tests/test_risk_control_dataset.py
index 5e7c4c4b0..3e1c3b7d4 100644
--- a/tests/test_risk_control_dataset.py
+++ b/tests/test_risk_control_dataset.py
@@ -8,12 +8,11 @@
 import pytest
 
 from harness.web_fetch.composite_tasks import validate_composite_acceptance
-from harness.web_fetch.metrics import evaluate_content, normalize_for_match
+from harness.web_fetch.metrics import evaluate_content, normalize_for_match, task_passed
 from harness.web_fetch.report_build import require_risk_control_certification
 from harness.web_fetch.risk_control import main as run_risk_control
 from harness.web_fetch.risk_control import (
     measured_risk_control_dataset,
-    reference_proof_snapshot,
     require_complete_diagnostic_logs,
 )
 from harness.web_fetch.risk_control_dataset import (
@@ -26,6 +25,7 @@
     evidence_roots,
     parse_sections,
 )
+from harness.web_fetch.scoring import score_attempt
 from harness.web_fetch.stable_tasks import evaluate_stable_task, validate_acceptance_contract
 from tests.conftest import read_frozen_dataset_bytes
 
@@ -46,12 +46,24 @@ def restricted(name, *args, **kwargs):
 '''
     result = subprocess.run([sys.executable, "-c", code], cwd=ROOT, text=True, capture_output=True)
     assert result.returncode == 0, result.stderr
-DATASET = ROOT / "evaluation/risk-control/dataset.json"
+
+
+def test_risk_control_history_contains_no_executable_input_versions():
+    history = ROOT / "evaluation/risk-control/history"
+    files = sorted(path.relative_to(history).as_posix() for path in history.rglob("*") if path.is_file())
+    assert files == ["v5/dataset-catalog.json"]
+    assert not list(history.rglob("source-inputs.json"))
+    assert not list(history.rglob("run-profile.json"))
+
+
+DATASET = ROOT / "evaluation/risk-control/current/dataset.json"
 COHORT = ROOT / "evaluation/risk-control/qualification/cohort/cohort-manifest.json"
 COHORT_RECEIPT = ROOT / "evaluation/risk-control/qualification/cohort/cohort-receipt.json"
 RUN_PROFILE = ROOT / "evaluation/risk-control/run-profile.json"
 LANGUAGE_REVISION = ROOT / "research/risk-control-language-rule-revision.json"
 ZILLOW_REVISION = ROOT / "research/risk-control-zillow-sample-revision.json"
+XTOOLS_REVISION = ROOT / "research/risk-control-xtools-field-scope-revision.json"
+CONTENT_OWNER_REVISION = ROOT / "research/risk-control-explicit-content-owner-revision.json"
 
 
 @pytest.fixture(scope="module")
@@ -64,13 +76,13 @@ def test_dataset_covers_the_exact_audited_cohort(dataset):
     assert dataset["case_count"] == len(dataset["cases"]) == 100
     assert [case["id"] for case in dataset["cases"]] == [case["id"] for case in cohort["cases"]]
     assert dataset["site_count"] == 74
-    assert dataset["stable_literal_count"] == 1600
+    assert dataset["stable_literal_count"] == 1586
     assert "page_context_literal_count" not in dataset
-    assert dataset["observed_literal_count"] == 1600
+    assert dataset["observed_literal_count"] == 1586
     assert dataset["body_case_count"] == 79
-    assert dataset["quantity_case_count"] == 21
-    assert dataset["independent_quantity_group_count"] == 27
-    assert dataset["list_or_field_case_count"] == 23
+    assert dataset["quantity_case_count"] == 20
+    assert dataset["independent_quantity_group_count"] == 26
+    assert dataset["list_or_field_case_count"] == 22
     assert dataset["composite_group_count"] == 29
 
 
@@ -132,9 +144,30 @@ def test_zillow_sample_revision_binds_current_frozen_inputs():
     locale=json.loads((ROOT/'research/risk-control-navigation-language-revision.json').read_text())
     for key in ('dataset','run_profile'):
         assert full_page['correction']['new_'+key+'_sha256'] == locale['correction']['predecessor_'+key+'_sha256']
-    assert locale['correction']['new_dataset_sha256'] == hashlib.sha256(read_frozen_dataset_bytes(DATASET)).hexdigest()
-    assert locale['correction']['new_run_profile_sha256'] == hashlib.sha256(RUN_PROFILE.read_bytes()).hexdigest()
-    assert profile["dataset"]["sha256"] == locale["correction"]["new_dataset_sha256"]
+    responsive=json.loads((ROOT/'research/risk-control-responsive-navigation-revision.json').read_text())
+    xtools=json.loads(XTOOLS_REVISION.read_text())
+    content_owner=json.loads(CONTENT_OWNER_REVISION.read_text())
+    assert responsive['predecessor_revision'] == 'research/risk-control-navigation-language-revision.json'
+    assert locale['correction']['new_dataset_sha256'] == responsive['correction']['predecessor_dataset_sha256']
+    assert locale['correction']['new_run_profile_sha256'] == responsive['correction']['predecessor_run_profile_sha256']
+    assert xtools['predecessor_revision'] == 'research/risk-control-responsive-navigation-revision.json'
+    assert responsive['correction']['new_dataset_sha256'] == xtools['correction']['predecessor_dataset_sha256']
+    assert responsive['correction']['new_run_profile_sha256'] == xtools['correction']['predecessor_run_profile_sha256']
+    assert xtools['correction']['predecessor_dataset_sha256'] == responsive['correction']['new_dataset_sha256']
+    assert xtools['correction']['predecessor_run_profile_sha256'] == responsive['correction']['new_run_profile_sha256']
+    assert content_owner['predecessor_revision'] == str(
+        XTOOLS_REVISION.relative_to(ROOT)
+    )
+    assert content_owner['correction']['predecessor_dataset_sha256'] == xtools['correction']['new_dataset_sha256']
+    assert content_owner['correction']['predecessor_run_profile_sha256'] == xtools['correction']['new_run_profile_sha256']
+    assert content_owner['correction']['new_dataset_sha256'] == hashlib.sha256(
+        read_frozen_dataset_bytes(DATASET)
+    ).hexdigest()
+    assert content_owner['correction']['new_run_profile_sha256'] == hashlib.sha256(
+        RUN_PROFILE.read_bytes()
+    ).hexdigest()
+    assert profile["dataset"]["sha256"] == content_owner["correction"]["new_dataset_sha256"]
+    assert profile["dataset"]["path"] == "evaluation/risk-control/current/dataset.json"
     assert revision["correction"]["provider_calls"] == 1
     assert revision["correction"]["rerun_case_ids"] == ["risk-diverse-134"]
 
@@ -354,32 +387,24 @@ def test_direct_formal_execution_is_rejected_before_provider_validation(tmp_path
         run_risk_control(["--execute", "--output", str(tmp_path / "run")])
 
 
-def test_reference_proof_snapshot_requires_exact_unchanged_100_file_scope(tmp_path):
-    roots = {"proofs": tmp_path}
-    cases = []
-    for index in range(100):
-        identifier = f"case-{index:03d}"
-        path = tmp_path / f"{identifier}.txt"
-        path.write_text(f"evidence {index}\n")
-        cases.append(
-            {
-                "id": identifier,
-                "source_benchmark": {
-                    "risk_control": {
-                        "reference_proof": {
-                            "root": "proofs",
-                            "path": path.name,
-                            "sha256": hashlib.sha256(path.read_bytes()).hexdigest(),
-                        }
-                    }
-                },
-            }
-        )
-    before = reference_proof_snapshot(cases, roots)
-    assert before["case_count"] == 100
-    (tmp_path / "case-042.txt").write_text("changed\n")
-    with pytest.raises(ValueError, match="Changed reference proof: case-042"):
-        reference_proof_snapshot(cases, roots)
+def test_frozen_execution_inputs_do_not_require_historical_source_files(tmp_path):
+    from harness.web_fetch.risk_control import frozen_risk_control_input_snapshot
+    profile = json.loads(RUN_PROFILE.read_text())
+    profile_path = tmp_path / "evaluation/risk-control/run-profile.json"
+    profile_path.parent.mkdir(parents=True)
+    profile_path.write_bytes(RUN_PROFILE.read_bytes())
+    bindings = [profile["dataset"], *profile["source_bindings"].values(),
+                {"path": profile["provider"]["config_path"]}]
+    for binding in bindings:
+        target = tmp_path / binding["path"]
+        target.parent.mkdir(parents=True, exist_ok=True)
+        target.write_bytes(read_frozen_dataset_bytes(ROOT / binding["path"]) if binding == profile['dataset'] else (ROOT / binding["path"]).read_bytes())
+    # There is no qualification data home or browser.txt tree in this fixture.
+    snapshot = frozen_risk_control_input_snapshot(profile_path)
+    assert snapshot["case_count"] == 100
+    (tmp_path / profile["dataset"]["path"]).write_text('{"cases": []}')
+    with pytest.raises(ValueError, match="Changed frozen input"):
+        frozen_risk_control_input_snapshot(profile_path)
 
 
 def certified_report_fixture(tmp_path):
@@ -633,13 +658,11 @@ def test_corrected_rule_evidence_conflicts_are_encoded_exactly(dataset):
 
     ibiblio = cases["risk-diverse-192"]
     assert "body_requirements" not in ibiblio
-    assert "collections of collections" not in json.dumps(ibiblio, ensure_ascii=False)
-    news = ibiblio["composite_acceptance"]["groups"]
-    assert len(news) == 1
-    assert news[0]["id"] == "homepage-news"
-    assert news[0]["minimum_records"] == 3
-    assert news[0]["hosts"] == ["www.ibiblio.org"]
-    assert [field["id"] for field in news[0]["required_fields"]] == ["published", "summary"]
+    assert "composite_acceptance" not in ibiblio
+    assert ibiblio["acceptance_contract"]["stable_text_role"] == "diagnostic"
+    patterns = ibiblio["acceptance_contract"]["page_patterns"]
+    assert len(patterns) == 1
+    assert "collections? of collections" in patterns[0]
 
     anton_paar = cases["risk-diverse-225"]
     assert len(anton_paar["body_requirements"]["regions"]) == 1
@@ -826,60 +849,21 @@ def test_stable_text_groups_are_unique_after_display_normalization(dataset):
         assert len(anchors) == len(set(anchors)), case["id"]
 
 
-def test_ibiblio_news_requires_three_unique_real_article_cards(dataset):
+def test_ibiblio_scope_requires_archive_identity_and_collection_introduction(dataset):
     case = next(case for case in dataset["cases"] if case["id"] == "risk-diverse-192")
-    contract = case["composite_acceptance"]
-    cards = [
-        ("Importance of Summer", "/archive/2026/06/importance-of-summer/", "19 June 2026"),
-        (
-            "Poetry Available through ibiblio",
-            "/archive/2024/03/poetry-available-through-ibiblio/",
-            "4 March 2024",
-        ),
-        (
-            "SoundExchange and Digital Audio Streaming",
-            "/archive/2024/01/soundexchange-and-digital-audio-streaming/",
-            "24 January 2024",
-        ),
-    ]
-
-    def markdown(selected):
-        return "\n\n".join(
-            f"## [{title}]({path})\n"
-            "This is a sufficiently long same-record article summary explaining "
-            f"the news item in useful detail.\n[{date}]({path})"
-            for title, path, date in selected
-        )
-
-    from harness.web_fetch.composite_tasks import evaluate_composite_acceptance
-
-    positive = evaluate_composite_acceptance(
-        markdown(cards), contract, base_url="https://ibiblio.org/"
+    complete = (
+        "ibiblio.org is a public digital library and collection of collections. "
+        "It preserves freely available information about software, music, literature, art, "
+        "history, science, politics, and cultural studies in collaboration with the "
+        "University of North Carolina at Chapel Hill."
     )
-    assert positive["composite_acceptance_pass"]
-    assert positive["composite_group_results"][0]["count"] == 3
-
-    missing = evaluate_composite_acceptance(
-        markdown(cards[:2]), contract, base_url="https://ibiblio.org/"
-    )
-    assert not missing["composite_acceptance_pass"]
-    assert missing["composite_group_results"][0]["count"] == 2
-
-    duplicate = evaluate_composite_acceptance(
-        markdown([cards[0], cards[0], cards[1]]),
-        contract,
-        base_url="https://ibiblio.org/",
-    )
-    assert not duplicate["composite_acceptance_pass"]
-    assert duplicate["composite_group_results"][0]["count"] == 2
-
-    wrong_path = list(cards)
-    wrong_path[2] = (wrong_path[2][0], "/about/", wrong_path[2][2])
-    invalid = evaluate_composite_acceptance(
-        markdown(wrong_path), contract, base_url="https://ibiblio.org/"
-    )
-    assert not invalid["composite_acceptance_pass"]
-    assert invalid["composite_group_results"][0]["count"] == 2
+    news_and_footer = "ibiblio News One Two Three Logos Hosted by UNC Chapel Hill"
+    wrong_identity = complete.replace("ibiblio.org", "Another Archive")
+    identity_only = "ibiblio.org is hosted with UNC Chapel Hill. Browse Logos and news."
+    assert task_passed(True, score_attempt(case, complete.encode(), ok=True))
+    assert not task_passed(True, score_attempt(case, news_and_footer.encode(), ok=True))
+    assert not task_passed(True, score_attempt(case, wrong_identity.encode(), ok=True))
+    assert not task_passed(True, score_attempt(case, identity_only.encode(), ok=True))
 
 
 def test_formal_run_requires_one_complete_hash_bound_diagnostic_log_per_case():
@@ -967,7 +951,7 @@ def test_archwiki_requires_both_page_chrome_and_full_body(dataset):
         ),
         (
             "risk-diverse-225",
-            ["Products", "Services & Support", "Resources"],
+            ["Products", "Services & Support"],
         ),
     ],
 )
@@ -1035,3 +1019,30 @@ def test_certified_report_preserves_certificate_bound_files(tmp_path, capsys):
                  "reference-proof-verification.json", "certification.json"):
         assert (report / name).read_bytes() == (tmp_path / name).read_bytes()
     require_risk_control_certification(report, measured, records)
+
+
+def test_new_risk_certification_uses_frozen_inputs_and_preserves_old_receipts(tmp_path):
+    from harness.web_fetch.risk_control import frozen_risk_control_input_snapshot
+    dataset, records, receipt, manifest, execution = certified_report_fixture(tmp_path)
+    snapshot = frozen_risk_control_input_snapshot(RUN_PROFILE)
+    verification = {"schema_version": 1, "kind": "risk_control_frozen_input_verification",
+                    "before": snapshot, "after": snapshot, "unchanged": True}
+    path = tmp_path / "frozen-input-verification.json"
+    path.write_text(json.dumps(verification))
+    digest = hashlib.sha256(path.read_bytes()).hexdigest()
+    manifest.pop("reference_proof_verification_sha256")
+    manifest["frozen_input_verification_sha256"] = digest
+    receipt.pop("reference_proof_verification_sha256")
+    receipt.update(kind="certified_risk_control_100_moli_v2",
+                   frozen_input_verification_sha256=digest)
+    (tmp_path / "reference-proof-verification.json").unlink()
+    rewrite_certified_report_fixture(tmp_path, records, receipt, manifest, execution)
+    require_risk_control_certification(tmp_path, dataset, records)
+    verification["after"] = {**snapshot, "case_count": 99}
+    path.write_text(json.dumps(verification))
+    digest = hashlib.sha256(path.read_bytes()).hexdigest()
+    manifest["frozen_input_verification_sha256"] = digest
+    receipt["frozen_input_verification_sha256"] = digest
+    rewrite_certified_report_fixture(tmp_path, records, receipt, manifest, execution)
+    with pytest.raises(ValueError, match="frozen input verification"):
+        require_risk_control_certification(tmp_path, dataset, records)
diff --git a/tests/test_risk_control_report.py b/tests/test_risk_control_report.py
index 237ba6499..b635eadca 100644
--- a/tests/test_risk_control_report.py
+++ b/tests/test_risk_control_report.py
@@ -8,7 +8,7 @@
 from tests.conftest import read_frozen_dataset_bytes
 
 ROOT = Path(__file__).resolve().parents[1]
-DATASET = ROOT / "evaluation/risk-control/dataset.json"
+DATASET = ROOT / "evaluation/risk-control/current/dataset.json"
 
 
 def test_full_risk_control_matrix_builds_existing_interactive_report(tmp_path, capsys):
@@ -46,8 +46,8 @@ def test_full_risk_control_matrix_builds_existing_interactive_report(tmp_path, c
     capsys.readouterr()
     report = tmp_path / "report"
     index = build_report(evidence, report, include_english=True)
-    detail = (report / "attempts/fixture-risk__risk-diverse-192__r001.html").read_text()
-    case_page = (report / "datasets/risk-diverse-192.html").read_text()
+    detail = (report / "attempts/fixture-risk__risk-diverse-045__r001.html").read_text()
+    case_page = (report / "datasets/risk-diverse-045.html").read_text()
     style = (report / "assets/style.css").read_text()
     home = index.read_text()
 
@@ -57,17 +57,21 @@ def test_full_risk_control_matrix_builds_existing_interactive_report(tmp_path, c
     guide = (report / 'guide/index.html').read_text()
     assert '本报告包含 100 个任务' in guide
     assert '静态网站正文：0' not in guide
-    assert "历史访问受限网址" in home
+    assert "风控网页正文" in home
     assert "风控网站内容" not in home
     assert "资格只解释样本来源" in home
     assert "组合规则结果" in detail
-    assert "homepage-news" in detail
+    assert "news" in detail
     assert "同条目字段" in detail
     assert "运行日志与证据" in detail
     assert "查看本次真实日志" in detail
     assert "diagnostic-log" in detail
     assert "至少 3 条" in case_page
-    assert "/archive/" in case_page
+    assert "/admin_posts/" in case_page
+    archive_detail = (report / "attempts/fixture-risk__risk-diverse-192__r001.html").read_text()
+    archive_case = (report / "datasets/risk-diverse-192.html").read_text()
+    assert "homepage-news" not in archive_detail
+    assert "freely" in archive_case
     assert ".table-wrap{overflow:auto" in style
     assert "pre{white-space:pre-wrap;overflow-wrap:anywhere" in style
     assert "max-height:70vh;overflow:auto" in style
diff --git a/tests/test_run_benchmark.py b/tests/test_run_benchmark.py
index 45d121fa9..72cd4934e 100644
--- a/tests/test_run_benchmark.py
+++ b/tests/test_run_benchmark.py
@@ -48,6 +48,84 @@ def run_main(self, args):
             run_benchmark.main(['--output', str(self.output), *args])
         return build
 
+    def test_alternating_cohort_keeps_each_task_pair_adjacent_and_all_outputs(self):
+        calls = []
+
+        class ObservedProvider(Provider):
+            def fetch(self, case, timeout):
+                calls.append((self.name, case.id))
+                return ProviderResult(True, f"content {self.name} {case.id}")
+
+        config = self.root / 'configs/providers.example.json'
+        with patch.object(run_benchmark, 'build_provider', side_effect=ObservedProvider):
+            self.run_main([
+                '--dataset', str(self.root / 'evaluation/dataset.json'),
+                '--provider-config', str(config), '--providers', 'fixture-one,fixture-two',
+                '--workers', '1', '--call-order', 'case-alternating', '--measure-only',
+            ])
+        self.assertEqual(calls, [
+            ('fixture-one', 'web-a'), ('fixture-two', 'web-a'),
+            ('fixture-two', 'dynamic-a'), ('fixture-one', 'dynamic-a'),
+            ('fixture-one', 'dynamic-b'), ('fixture-two', 'dynamic-b'),
+        ])
+        records = [json.loads(line) for line in (self.output / 'results.jsonl').read_text().splitlines()]
+        self.assertEqual(len(records), 6)
+        for record in records:
+            expected = f"content {record['provider']} {record['case_id']}"
+            self.assertEqual((self.output / record['artifact_path']).read_text(), expected)
+        execution = json.loads((self.output / 'execution.json').read_text())
+        self.assertEqual(execution['aggregate']['call_order'], 'case-alternating')
+        self.assertEqual(execution['batches'][0]['parameters']['provider_concurrency'], 1)
+        observations = self.root / 'observations.json'
+        observations.write_text('[]\n')
+        from harness.web_fetch.evidence import finalize_aggregate
+        finalize_aggregate(self.output, observations)
+        finalized = json.loads((self.output / 'execution.json').read_text())
+        self.assertEqual(finalized['batches'][0]['attempt_ids'],
+                         execution['batches'][0]['attempt_ids'])
+
+    def test_alternating_cohort_rejects_parallel_workers_before_creating_evidence(self):
+        with redirect_stderr(io.StringIO()), self.assertRaises(SystemExit):
+            self.run_main(['--call-order', 'case-alternating', '--workers', '2'])
+        self.assertFalse(self.output.exists())
+
+    def test_alternating_cohort_stops_when_a_timed_out_call_cannot_be_cancelled(self):
+        import threading
+        from harness.web_fetch.config import load_dataset
+        from harness.web_fetch.runner import IncompleteEvaluationError, run_evaluation
+
+        release = threading.Event()
+        finished = threading.Event()
+        calls = []
+
+        class BlockingProvider(Provider):
+            def fetch(self, case, timeout):
+                calls.append((self.name, case.id))
+                if self.name == 'blocked':
+                    try:
+                        release.wait(5)
+                    finally:
+                        finished.set()
+                return ProviderResult(True, 'content')
+
+        dataset, cases = load_dataset(self.root / 'evaluation/dataset.json')
+        providers = [BlockingProvider(name, {'type': 'fixture'}) for name in ('blocked', 'next')]
+        try:
+            with redirect_stdout(io.StringIO()), self.assertRaises(IncompleteEvaluationError):
+                run_evaluation(
+                    output_dir=self.output, dataset_meta=dataset,
+                    dataset_path=self.root / 'evaluation/dataset.json', cases=cases,
+                    providers=providers, provider_config_path=self.root / 'configs/providers.example.json',
+                    runs=1, timeout=.01, delay=0, call_order='case-alternating',
+                )
+        finally:
+            release.set()
+            self.assertTrue(finished.wait(2))
+        self.assertEqual(calls, [('blocked', 'web-a')])
+        manifest = json.loads((self.output / 'manifest.json').read_text())
+        self.assertEqual(manifest['attempt_count'], 1)
+        self.assertTrue(manifest['unexecuted'])
+
     def test_dynamic_subset_real_fixture_calls_and_exact_coverage(self):
         self.run_main(['--track', 'dynamic', '--providers', 'fixture-one,fixture-two'])
         data = json.loads((self.output/'dataset.json').read_text())
diff --git a/tests/test_run_certified_benchmark.py b/tests/test_run_certified_benchmark.py
index 2ae604127..d3164dbd3 100644
--- a/tests/test_run_certified_benchmark.py
+++ b/tests/test_run_certified_benchmark.py
@@ -76,11 +76,11 @@ def execute(stage, arguments):
                 self.assertFalse((root/'formal').exists())
                 saved=json.loads((output/'dataset.json').read_text())
                 self.assertEqual(saved['comparison']['evidence_state'],'diagnostic')
-                self.assertEqual(saved['comparison']['unqualified_reference_cases'],['stable'])
+                self.assertEqual(saved['comparison']['unqualified_reference_cases'],[])
                 batches=json.loads((output/'execution.json').read_text())['batches']
                 self.assertTrue(all(b['parameters']['max_failure_retries']==retries for b in batches))
                 self.assertTrue(all(b['evidence_state']=='diagnostic' and
-                    b['unqualified_reference_cases']==['stable'] for b in batches))
+                    b['unqualified_reference_cases']==[] for b in batches))
                 # Dropping dataset display metadata cannot erase execution provenance.
                 saved['comparison']={}
                 with self.assertRaisesRegex(ReferenceLifecycleError,'[Dd]iagnostic'):
@@ -90,25 +90,76 @@ def execute(stage, arguments):
                 self.assertFalse((root/'formal-report').exists())
                 self.assertEqual(dataset.read_bytes(),original)
 
-    def test_stable_rules_alone_cannot_be_mistaken_for_live_source_certification(self):
+    def test_frozen_contract_execution_needs_no_historical_qualification_files(self):
+        from harness.web_fetch import reference_freeze, benchmark_runner
+        from harness.web_fetch.evidence import finalize_aggregate
+        from harness.web_fetch.reference_lifecycle import require_verified_reference_checks
         with tempfile.TemporaryDirectory() as directory:
-            root=Path(directory);dataset=root/'dataset.json'
-            dataset.write_text(json.dumps({'cases':[{'id':'stable','acceptance_contract':{
-                'version':1,'schema':'body_text','minimum_records':0,
-                'stable_text_anchors':[{'id':'a','alternatives':['Required label']} ]}}]}))
-            arguments=['--dataset',str(dataset),'--output',str(root/'run'),
-                       '--work-root',str(root/'work'),'--providers','p','--case-ids','stable']
-            with patch('harness.web_fetch.certification.run') as invoked:
-                with self.assertRaises(SystemExit):main(arguments)
-            invoked.assert_not_called()
-            def completed(stage, arguments):
-                command = [stage, *arguments]
-                script=stage_name(command)
-                if script=='source_capture.main':self.write_capture(Path(command[2]),'stable')
-                if script=='benchmark_runner.main':self.write_output_dataset(command,dataset)
-            with patch('harness.web_fetch.certification.run',side_effect=completed):
-                main([*arguments,'--diagnostic'])
-            self.assertEqual(json.loads(dataset.read_text())['cases'][0]['acceptance_contract']['stable_text_anchors'][0]['alternatives'],['Required label'])
+            root = Path(directory)
+            dataset = root / 'dataset.json'
+            output = root / 'run'
+            case = {'id': 'stable', 'name': 'Stable page',
+                    'url': 'https://example.test/page', 'category': 'web',
+                    'track': 'web', 'expected_any': ['Required label'],
+                    'source_benchmark': {'risk_control': {'reference_proof': {
+                        'root': 'historical', 'path': 'missing/browser.txt',
+                        'sha256': 'a' * 64}}},
+                    'acceptance_contract': {'version': 1, 'schema': 'body_text',
+                        'minimum_records': 0, 'stable_text_anchors': [
+                            {'id': 'a', 'alternatives': ['Required label']}]}}
+            import hashlib
+            fixed = {'id': 'fixed-answer', 'name': 'Fixed answer',
+                     'url': 'https://example.test/fixed', 'category': 'web', 'track': 'web',
+                     'expected_any': ['Required label'], 'ground_truth_main_content': 'Required label',
+                     'source_verification': {'state': 'valid', 'checked_at': '2020-01-01T00:00:00Z',
+                        'method': 'Independent source capture',
+                        'reference_sha256': hashlib.sha256(b'Required label').hexdigest()}}
+            resource = {'id': 'fixed-resource', 'name': 'Fixed image target',
+                        'url': 'https://example.test/gallery', 'category': 'image', 'track': 'image',
+                        'task_kind': 'resource', 'expected_any': ['https://example.test/image.png'],
+                        'expected_resources': [{'id': 'image', 'urls': ['https://example.test/image.png']}],
+                        'source_verification': {'state': 'valid', 'checked_at': '2020-01-01T00:00:00Z',
+                            'method': 'Independent source capture',
+                            'evidence_path': 'sources/fixed-resource/evidence.json',
+                            'evidence_sha256': 'b' * 64}}
+            dataset.write_text(json.dumps({'tool': 'web_fetch', 'comparison': {}, 'cases': [case, fixed, resource]}))
+            original = dataset.read_bytes()
+            config = root / 'providers.json'
+            config.write_text(json.dumps({'providers': {'fixture': {'type': 'fixture'}}}))
+            (root / 'evaluation/list-references').mkdir(parents=True)
+            stages = []
+
+            def execute(stage, arguments):
+                script = stage.__module__.rsplit('.', 1)[-1] + '.' + stage.__name__
+                stages.append(script)
+                if script == 'reference_freeze.main':
+                    reference_freeze.main(arguments)
+                elif script == 'benchmark_runner.main':
+                    with patch.object(benchmark_runner, 'load_runtime_env'):
+                        benchmark_runner.main(arguments)
+                elif script == 'reference_freeze.postcheck_main':
+                    self.fail('Frozen stable contracts must not trigger live-source recapture')
+                elif script == 'evidence.finalize_main':
+                    finalize_aggregate(output, root / 'work/post-captures/observations.json')
+                else:
+                    self.fail('Unexpected external work: ' + script)
+
+            with patch('harness.web_fetch.certification.run', side_effect=execute):
+                main(['--dataset', str(dataset), '--output', str(output),
+                      '--work-root', str(root / 'work'), '--providers', 'fixture',
+                      '--provider-config', str(config), '--case-ids', 'stable,fixed-answer,fixed-resource'])
+            measured = json.loads((output / 'dataset.json').read_text())
+            self.assertEqual(measured['cases'], [case, fixed, resource])
+            self.assertEqual(dataset.read_bytes(), original)
+            self.assertEqual(measured['comparison']['source_reference_policy'],
+                             'frozen_benchmark_inputs_with_explicit_live_exact_checks')
+            batches = json.loads((output / 'execution.json').read_text())['batches']
+            records = [json.loads(line) for line in (output / 'results.jsonl').read_text().splitlines()]
+            self.assertEqual(len(records), 3)
+            resource_record = next(row for row in records if row['case_id'] == 'fixed-resource')
+            self.assertTrue(resource_record['metrics']['content_pass'])
+            self.assertNotIn('collect_source_evidence.py', stages)
+            require_verified_reference_checks(batches, cases=measured, records=records, source=output)
 
     def test_dispatches_complete_webmainbench_certification(self) -> None:
         arguments = ["--output-root", "/tmp/run", "--source", "/tmp/source.jsonl"]
@@ -159,7 +210,7 @@ def test_builds_mandatory_lifecycle_in_order(self) -> None:
             dataset.write_text(json.dumps({"cases": [{
                 "id": "javascript-spa", "track": "web", "task_kind": "body",
                 "ground_truth_main_content": "reference",
-                "source_verification": {
+                "source_verification": {"reference_mode": "live_exact",
                     "method": "Independent visible browser DOM; complete declared scope"
                 },
             }]}))
@@ -205,7 +256,7 @@ def test_requires_explicit_browser_for_rendered_case(self) -> None:
             dataset.write_text(json.dumps({"cases": [{
                 "id": "javascript-spa", "track": "web", "task_kind": "body",
                 "ground_truth_main_content": "reference",
-                "source_verification": {
+                "source_verification": {"reference_mode": "live_exact",
                     "method": "Independent visible browser DOM; complete declared scope"
                 },
             }]}))
@@ -256,7 +307,7 @@ def test_http_capture_failure_uses_browser_for_any_case_id(self) -> None:
             dataset.write_text(json.dumps({"cases": [{
                 "id": "previously-unknown-browser-fallback", "track": "web",
                 "task_kind": "body", "ground_truth_main_content": "reference",
-                "source_verification": {
+                "source_verification": {"reference_mode": "live_exact",
                     "method": "Independent HTTP response and reviewed article selector",
                     "selector": "main",
                 },
@@ -310,7 +361,7 @@ def test_post_http_failure_adds_browser_fallback_not_selected_pre_call(self) ->
             dataset.write_text(json.dumps({"cases": [{
                 "id": case_id, "track": "web", "task_kind": "body",
                 "ground_truth_main_content": "reference",
-                "source_verification": {
+                "source_verification": {"reference_mode": "live_exact",
                     "method": "Independent HTTP response and reviewed article selector",
                     "selector": "main",
                 },
@@ -358,7 +409,7 @@ def test_http_capture_failure_without_browser_stops_before_provider_calls(self)
             dataset.write_text(json.dumps({"cases": [{
                 "id": "http-unavailable", "track": "web", "task_kind": "body",
                 "ground_truth_main_content": "reference",
-                "source_verification": {
+                "source_verification": {"reference_mode": "live_exact",
                     "method": "Independent HTTP response and reviewed article selector"
                 },
             }]}))
@@ -388,7 +439,7 @@ def test_failed_pre_browser_observation_stops_before_freeze_and_provider_calls(s
                 "id": case_id, "url": "https://example.com/",
                 "track": "web", "task_kind": "body",
                 "ground_truth_main_content": "reference",
-                "source_verification": {
+                "source_verification": {"reference_mode": "live_exact",
                     "method": "Independent rendered browser DOM; complete declared scope"
                 },
             }]}))
@@ -429,7 +480,7 @@ def test_failed_post_browser_observation_cannot_reach_lifecycle_finalization(sel
                 "id": case_id, "url": "https://example.com/",
                 "track": "web", "task_kind": "body",
                 "ground_truth_main_content": "reference",
-                "source_verification": {
+                "source_verification": {"reference_mode": "live_exact",
                     "method": "Independent rendered browser DOM; complete declared scope"
                 },
             }]}))
@@ -476,7 +527,7 @@ def test_explicit_browser_reference_route_is_used_even_with_usable_http_capture(
         "task_kind": "body",
         "ground_truth_main_content": "Required fact",
         "required_facts": [{"alternatives": ["Required fact"]}],
-        "source_verification": {"observation_route": "browser"},
+        "source_verification": {"reference_mode": "live_exact", "observation_route": "browser"},
     }
     (tmp_path / case["id"]).mkdir()
     (tmp_path / case["id"] / "reference.txt").write_text("Required fact")
@@ -494,6 +545,7 @@ def test_conflicting_http_route_and_browser_provenance_is_rejected(tmp_path):
         "ground_truth_main_content": "Required fact",
         "required_facts": [{"alternatives": ["Required fact"]}],
         "source_verification": {
+            "reference_mode": "live_exact",
             "observation_route": "http",
             "method": "Independent rendered browser DOM; complete declared scope",
         },
@@ -514,7 +566,7 @@ def test_explicit_empty_arguments_do_not_dispatch_an_ambient_subcommand(monkeypa
 
 def test_invalid_selected_reference_route_stops_before_any_capture(tmp_path):
     dataset = tmp_path / "dataset.json"
-    dataset.write_text(json.dumps({"cases": [{"id": "one", "track": "web", "task_kind": "body", "ground_truth_main_content": "Required fact", "source_verification": {"observation_route": "http", "method": "Independent rendered browser DOM; complete declared scope"}}]}))
+    dataset.write_text(json.dumps({"cases": [{"id": "one", "track": "web", "task_kind": "body", "ground_truth_main_content": "Required fact", "source_verification": {"reference_mode": "live_exact", "observation_route": "http", "method": "Independent rendered browser DOM; complete declared scope"}}]}))
     with patch("harness.web_fetch.certification.run") as invoked:
         with pytest.raises(ValueError, match="contradicts browser reference provenance"):
             main(["--dataset", str(dataset), "--case-ids", "one", "--providers", "p", "--output", str(tmp_path / "output"), "--work-root", str(tmp_path / "work")])
diff --git a/tests/test_runner_concurrency.py b/tests/test_runner_concurrency.py
index f86b4f5ef..e730c6033 100644
--- a/tests/test_runner_concurrency.py
+++ b/tests/test_runner_concurrency.py
@@ -1,13 +1,17 @@
 import json
+import socket
+import ssl
 import tempfile
 import threading
 import unittest
+import urllib.error
 from pathlib import Path
 
 from harness.web_fetch.models import EvalCase, ProviderResult
 from harness.web_fetch.providers.base import Provider
 from harness.web_fetch.runner import (
     IncompleteEvaluationError, preflight_declared_capacity, run_evaluation,
+    classify_exception,
 )
 
 
@@ -22,6 +26,19 @@ def fetch(self, case: EvalCase, timeout: float) -> ProviderResult:
 
 
 class RunnerConcurrencyTest(unittest.TestCase):
+    def test_certificate_and_transport_errors_are_classified(self):
+        certificate = ssl.SSLCertVerificationError(1, "certificate verify failed")
+        for error, expected in (
+            (certificate, "tls_certificate"),
+            (urllib.error.URLError(certificate), "tls_certificate"),
+            (urllib.error.URLError(socket.gaierror("DNS lookup failed")), "dns"),
+            (urllib.error.URLError(TimeoutError("read timed out")), "timeout"),
+        ):
+            with self.subTest(error=error):
+                kind, message = classify_exception(error)
+                self.assertEqual(kind, expected)
+                self.assertTrue(message)
+
     def test_deadline_retains_cancelled_process_diagnostics_never_late_answer(self):
         from harness.web_fetch.call_boundary import fetch_with_deadline
         class Cancelled(Provider):
@@ -172,7 +189,7 @@ def fetch(self, case, timeout):
             self.assertEqual(manifest['attempt_count'], 1)
             self.assertNotIn('physical_attempt_count', manifest)
 
-    def test_explicit_failure_retry_keeps_both_calls_and_uses_second(self):
+    def test_transient_failure_retry_keeps_both_calls_and_uses_second(self):
         class Flaky(Provider):
             def __init__(self):
                 super().__init__('flaky', {'type': 'fixture'})
@@ -180,7 +197,9 @@ def __init__(self):
 
             def fetch(self, case, timeout):
                 self.calls += 1
-                return ProviderResult(True, 'wrong' if self.calls == 1 else 'Expected')
+                if self.calls == 1:
+                    return ProviderResult(False, '', error_type='network')
+                return ProviderResult(True, 'Expected')
 
         case = EvalCase('case', 'Case', 'https://example.com', 'static', ['Expected'])
         provider = Flaky()
@@ -197,7 +216,7 @@ def fetch(self, case, timeout):
             self.assertEqual(retry['physical_attempts'], 2)
             self.assertEqual(retry['retries_used'], 1)
             self.assertEqual([item['task_pass'] for item in retry['attempts']], [False, True])
-            self.assertEqual((root / retry['attempts'][0]['artifact_path']).read_text(), 'wrong')
+            self.assertEqual((root / retry['attempts'][0]['artifact_path']).read_text(), '')
             self.assertEqual((root / records[0]['artifact_path']).read_text(), 'Expected')
             manifest = json.loads((root / 'manifest.json').read_text())
             self.assertEqual(manifest['attempt_count'], 1)
diff --git a/tests/test_scoring.py b/tests/test_scoring.py
index 2e778660f..f7a41cb9d 100644
--- a/tests/test_scoring.py
+++ b/tests/test_scoring.py
@@ -44,6 +44,241 @@ def legacy_benchmark():
 
 
 class ScoringTests(unittest.TestCase):
+    def test_scoped_link_caption_stays_owned_by_its_link(self):
+        c = case(
+            acceptance_contract={
+                "version": 1,
+                "schema": "named_link",
+                "minimum_records": 2,
+                "hosts": ["example.test"],
+                "entry_path": r"/item/\d+",
+                "name_validation": "nonempty",
+                "entry_scope": {
+                    "html_selector": "main a:has(h3):has(p)",
+                    "title_selector": "p",
+                    "link_selector": "a[href]",
+                    "start_pattern": r"(?m)^# Catalog$",
+                    "end_pattern": r"(?m)^# End$",
+                    "markdown_label_pattern": (
+                        r"(?s)<br>\s*(?P<label>[^<>\n]+?)\s*<br>\s*$"
+                    ),
+                },
+            }
+        )
+        cards = (
+            "[![Artwork](/one.jpg)<h3>Artwork title</h3>First caption](/item/1)\n\n"
+            "[![Artwork](/two.jpg)<h3>Other artwork title</h3>Second caption](/item/2)"
+        )
+        for body, passed in (
+            (cards, True),
+            (cards.replace("Second caption", ""), False),
+            (cards.replace("Second caption", "<span hidden>Second caption</span>"), False),
+            (cards.replace("Second caption", "") + "\n# End\nSecond caption", False),
+        ):
+            with self.subTest(body=body):
+                metrics = score_attempt(c, ("# Catalog\n\n" + body + "\n\n# End").encode(), ok=True)
+                self.assertEqual(task_passed(True, metrics), passed)
+
+    def test_structured_records_use_visible_html_only(self):
+        c = case(acceptance_contract={
+            "version": 1,
+            "schema": "review",
+            "minimum_records": 2,
+            "stable_text_anchors": [],
+        })
+        cards = (
+            '<div class="review"><p>2026-09-01</p><p>First delivered review</p></div>'
+            '<div class="review"><p>2026-09-02</p><p>Second delivered review</p></div>'
+        )
+        hidden = (
+            '<div id="reviews"></div><script type="application/json">'
+            '[{"date":"2026-09-01","text":"First delivered review"},'
+            '{"date":"2026-09-02","text":"Second delivered review"}]</script>'
+        )
+        for body, passed in (
+            (cards, True),
+            (cards.replace('<div class="review">', "<li>").replace("</div>", "</li>"), True),
+            ("<h1>Reviews</h1>" + cards, True),
+            (hidden, False),
+            (cards.replace("2026-09-02", ""), False),
+            (cards.replace("2026-09-02", "&amp;#50;026-09-02"), False),
+            (cards.replace('<div class="review">', '<div class="review" hidden>', 1), False),
+        ):
+            with self.subTest(body=body):
+                metrics = score_attempt(c, ("<html><body>" + body + "</body></html>").encode(), ok=True)
+                self.assertEqual(task_passed(True, metrics), passed)
+
+    def test_character_references_match_visible_body_once(self):
+        c = case(body_requirements={
+            "version": 3,
+            "unit": "region_compact_hexagram_recall",
+            "minimum_coverage": 1.0,
+            "minimum_floor": 1.0,
+            "minimum_region_passes": 1,
+            "regions": [{"id": "body", "text": "Alpha Beta Gamma Delta"}],
+        })
+        for content, passed in (
+            ("Alpha Beta Gamma Delta", True),
+            ("Alpha&#32;Beta&#x20;Gamma&nbsp;Delta", True),
+            ("Alpha&#32;Beta&#x20;Gamma&nbsp;Wrong", False),
+            ("Alpha&amp;#32;Beta&amp;#x20;Gamma&amp;nbsp;Delta", False),
+            ("<html><body>Alpha Beta<script> Gamma Delta</script></body></html>", False),
+        ):
+            with self.subTest(content=content):
+                metrics = score_attempt(c, content.encode(), ok=True)
+                self.assertEqual(task_passed(True, metrics), passed)
+
+    def test_composite_html_keeps_only_visible_links(self):
+        c = case(
+            expected_any=["Directory"],
+            composite_acceptance={
+                "version": 1,
+                "groups": [{
+                    "id": "entries",
+                    "kind": "named_link",
+                    "minimum_records": 2,
+                    "hosts": ["example.test"],
+                    "entry_path": r"/base/[^/]+",
+                }],
+            },
+        )
+        for content, passed in (
+            ('<html><body><h1>Directory</h1><a href="/base/alpha/">Alpha</a><a href="/base/beta/">Beta</a></body></html>', True),
+            ('<ul><li>Directory</li><li><a href="/base/alpha/">Alpha</a></li><li><a href="/base/beta/">Beta</a></li></ul>', True),
+            ('<hr><h1>Directory</h1><div><a href="/base/alpha/">Alpha</a><a href="/base/beta/">Beta</a></div>', True),
+            ('<table><tr><th>Directory</th></tr><tr><td><a href="/base/alpha/">Alpha</a></td></tr><tr><td><a href="/base/beta/">Beta</a></td></tr></table>', True),
+            ('<h1>Directory</h1><div><a href="/base/alpha/">Alpha</a><a href="/base/beta/">Beta</a></div>', True),
+            ('<html><body><h1>Directory</h1><a href="/base/alpha/">Alpha</a><a>Beta</a></body></html>', False),
+            ('<html><body><h1>Directory</h1><a href="/base/alpha/">Alpha</a><a hidden href="/base/beta/">Beta</a></body></html>', False),
+            ('<html><body><h1>Directory</h1><a href="/base/alpha/">Alpha</a><script><a href="/base/beta/">Beta</a></script></body></html>', False),
+            ('<h1>Directory</h1><a href="/base/alpha/">Alpha</a><a href="/bad/) [Beta](/base/beta/">Decoy</a>', False),
+        ):
+            with self.subTest(content=content):
+                metrics = score_attempt(c, content.encode(), ok=True)
+                self.assertEqual(task_passed(True, metrics), passed)
+
+    def test_scoped_markdown_may_use_uniquely_owned_native_link_metadata(self):
+        c = case(acceptance_contract={
+            "version": 1,
+            "schema": "named_link",
+            "minimum_records": 2,
+            "hosts": ["example.test"],
+            "entry_path": r"/item/\d+",
+            "entry_scope": {
+                "html_selector": "main a[href]",
+                "start_pattern": "^Target list$",
+                "end_pattern": "^Footer$",
+            },
+        })
+        links = [
+            {"text": "First entry", "href": "https://example.test/item/1"},
+            {"text": "Second entry", "href": "https://example.test/item/2"},
+        ]
+        for content, metadata_links, passed in (
+            ("## Target list\n[<h3>First entry</h3>](/item/1)\n[<h3>Second entry</h3>](/item/2)\n## Footer", [], True),
+            ("## Target list\nFirst entry\nSecond entry\n## Footer", links, True),
+            ("## Target list\nFirst entry\n## Footer\nSecond entry", links, False),
+            ('<html><body><main>Target list</main><footer><a href="/item/1">First entry</a><a href="/item/2">Second entry</a></footer></body></html>', [], False),
+            ("## Target list\nFirst entry\nSecond entry\n## Footer\nFirst entry", links, False),
+            ("## Target list\nFirst entry\nSecond entry\n## Footer\nSee First entry for details", links, False),
+        ):
+            with self.subTest(content=content):
+                metrics = score_attempt(c, content.encode(), ok=True, metadata={"links": metadata_links})
+                self.assertEqual(task_passed(True, metrics), passed)
+
+        chinese_links = [
+            {"text": "第一项", "href": "https://example.test/item/1"},
+            {"text": "第二项", "href": "https://example.test/item/2"},
+        ]
+        unique = "## Target list\n第一项\n第二项\n## Footer"
+        repeated = unique + "\n查看第一项详情"
+        self.assertTrue(task_passed(True, score_attempt(
+            c, unique.encode(), ok=True, metadata={"links": chinese_links}
+        )))
+        self.assertFalse(task_passed(True, score_attempt(
+            c, repeated.encode(), ok=True, metadata={"links": chinese_links}
+        )))
+
+        for label, content in (
+            ("VIP", "## Target list\nVIP\nSecond entry\n## Footer\n开通VIP会员"),
+            ("Alpha", "## Target list\nAlpha\nSecond entry\n## Footer\n查看Alpha详情"),
+        ):
+            mixed_links = [
+                {"text": label, "href": "https://example.test/item/1"},
+                {"text": "Second entry", "href": "https://example.test/item/2"},
+            ]
+            self.assertFalse(task_passed(True, score_attempt(
+                c, content.encode(), ok=True, metadata={"links": mixed_links}
+            )))
+
+    def test_html_link_projection_keeps_parenthesized_path_identity(self):
+        c = case(
+            expected_any=["Directory"],
+            composite_acceptance={
+                "version": 1,
+                "groups": [{
+                    "id": "entries",
+                    "kind": "named_link",
+                    "minimum_records": 1,
+                    "hosts": ["example.test"],
+                    "entry_path": r"/base/foo\(bar\)",
+                }],
+            },
+        )
+        metrics = score_attempt(
+            c,
+            b'<h1>Directory</h1><a href="/base/foo(bar)">Parenthesized</a>',
+            ok=True,
+        )
+        self.assertTrue(task_passed(True, metrics), metrics)
+
+    def test_html_link_projection_keeps_unicode_path_identity(self):
+        c = case(
+            expected_any=["Directory"],
+            composite_acceptance={
+                "version": 1,
+                "groups": [{
+                    "id": "entries",
+                    "kind": "named_link",
+                    "minimum_records": 1,
+                    "hosts": ["example.test"],
+                    "entry_path": r"/新闻/\d+",
+                }],
+            },
+        )
+        for href in ("/新闻/1", "/%E6%96%B0%E9%97%BB/1"):
+            with self.subTest(href=href):
+                metrics = score_attempt(
+                    c,
+                    f'<h1>Directory</h1><a href="{href}">News</a>'.encode(),
+                    ok=True,
+                )
+                self.assertTrue(task_passed(True, metrics), metrics)
+
+    def test_invalid_percent_bytes_do_not_become_unicode_path_identity(self):
+        c = case(
+            expected_any=["Directory"],
+            composite_acceptance={
+                "version": 1,
+                "groups": [{
+                    "id": "entries",
+                    "kind": "named_link",
+                    "minimum_records": 2,
+                    "hosts": ["example.test"],
+                    "entry_path": r"/(?:item/\d+|bad/ÿ/tail)",
+                }],
+            },
+        )
+        metrics = score_attempt(
+            c,
+            (
+                '<h1>Directory</h1><a href="/item/1">Valid</a>'
+                '<a href="/bad/%FF%2Ftail">Invalid bytes</a>'
+            ).encode(),
+            ok=True,
+        )
+        self.assertFalse(task_passed(True, metrics), metrics)
+
     def test_untagged_source_requires_explicitly_observed_empty_language(self):
         c = case(track="dynamic", evaluation_url="https://example.test/page",
                  expected_final_url="https://example.test/page",
@@ -63,7 +298,7 @@ def test_untagged_source_requires_explicitly_observed_empty_language(self):
                                         final_url="https://example.test/page")
         self.assertEqual(observed_tagged["page_identity_status"], "mismatch")
 
-    def test_risk_control_requires_declared_page_identity(self):
+    def test_risk_control_acceptance_uses_content_not_final_url(self):
         navigation = {
             "risk_control": {
                 "navigation_contract": {
@@ -85,14 +320,24 @@ def test_risk_control_requires_declared_page_identity(self):
             source_benchmark=navigation,
         )
         wrong = score_attempt(c, b"Expected", ok=True, final_url="https://other.test/")
-        self.assertTrue(wrong["page_identity_required"])
+        self.assertFalse(wrong["page_identity_required"])
         self.assertEqual(wrong["page_identity_status"], "mismatch")
         self.assertTrue(task_measured(wrong))
-        self.assertFalse(task_passed(True, wrong))
+        self.assertTrue(task_passed(True, wrong))
         missing = score_attempt(c, b"Expected", ok=True)
         self.assertEqual(missing["page_identity_status"], "unavailable")
-        self.assertFalse(task_measured(missing))
-        self.assertFalse(task_passed(True, missing))
+        self.assertTrue(task_measured(missing))
+        self.assertTrue(task_passed(True, missing))
+        for diagnostic in (wrong, missing):
+            stats = summarize([{
+                "provider": "fixture", "provider_type": "fixture",
+                "case_id": c.id, "case_name": c.name, "category": c.category,
+                "ok": True, "elapsed_ms": 1,
+                "metrics": diagnostic,
+            }])["providers"]["fixture"]
+            self.assertEqual(stats["task_evaluated_attempts"], 1)
+            self.assertEqual(stats["task_unmeasured_attempts"], 0)
+            self.assertEqual(stats["task_pass_rate"], 1.0)
         failed = score_attempt(c, b"", ok=False)
         self.assertEqual(failed["page_identity_status"], "unavailable")
         self.assertTrue(task_measured(failed))
@@ -191,6 +436,23 @@ def test_cloudflare_empty_success_is_request_success_but_not_task_success(self):
         self.assertFalse(task_passed(result.ok, measured))
         self.assertEqual(measured["content_check_coverage"], 0)
 
+    def test_kitesurf_document_urls_reach_native_markdown_without_ai_conversion(self):
+        for url in ('https://example.test/paper.pdf', 'https://example.test/file.docx',
+                    'https://example.test/plain.txt'):
+            with self.subTest(url=url):
+                provider=CloudflareMarkdownProvider('kitesurf', {'account_id':'account',
+                    'api_token':'token','browser':'kitesurf'})
+                with patch('harness.web_fetch.providers.cloudflare.request', return_value=HttpResponse(
+                    200,'https://example.test/api',{},b'{"success":true,"result":"Native document text"}')) as request, \
+                    patch.object(provider,'_fetch_direct_document',side_effect=AssertionError('external AI conversion forbidden')):
+                    result=provider.fetch(case(url=url,track='document'),1)
+                self.assertTrue(result.ok,repr(result))
+                self.assertEqual(result.content,'Native document text')
+                request.assert_called_once()
+                endpoint=request.call_args.args[0]
+                self.assertIn('/browser-rendering/markdown?browser=kitesurf',endpoint)
+                self.assertNotIn('/ai/',endpoint)
+
     def test_dataclass_and_dict_inputs_produce_same_metrics_without_mutation(self):
         c = case(required_facts=[{"id": "a", "alternatives": ["Alpha"]}])
         mapping = asdict(c)
diff --git a/tests/test_scoring_regressions.py b/tests/test_scoring_regressions.py
index e816ae3d7..0995bbe4a 100644
--- a/tests/test_scoring_regressions.py
+++ b/tests/test_scoring_regressions.py
@@ -4,7 +4,7 @@
 import unittest
 from pathlib import Path
 
-from harness.web_fetch.metrics import task_passed
+from harness.web_fetch.metrics import task_passed, task_measured
 from harness.web_fetch.reference_lifecycle import (
     reference_revision_cases,
     scoring_revision_history_sha256,
@@ -12,14 +12,65 @@
 )
 from harness.web_fetch.scoring import score_attempt
 from harness.web_fetch.scoring_regressions import (
-    load_scoring_regressions,
-    require_scoring_regressions,
+    active_scoring_regressions, require_scoring_regressions,
     valid_correction_provenance,
 )
-from harness.web_fetch.scoring_revision import correction_provenance
+from harness.web_fetch.scoring_revision import ALLOWED_FIELDS, correction_provenance
 
 
 class ScoringRegressionTests(unittest.TestCase):
+    def test_policy_supersession_preserves_inputs_and_rejects_changed_body(self):
+        document=json.loads((Path(__file__).resolve().parents[1]/'evaluation/scoring-regressions.json').read_text())
+        self.assertTrue(document['superseded_cases'])
+        with tempfile.TemporaryDirectory() as directory:
+            path=Path(directory)/'controls.json'
+            path.write_text(json.dumps(document))
+            current=active_scoring_regressions(path)
+            old,new=next(iter(document['superseded_cases'].items()))
+            self.assertNotIn(old,current)
+            self.assertIn(new,current)
+            for field,value in (('artifact','Changed body'),('final_url','https://different.test/')):
+                changed=json.loads(json.dumps(document))
+                next(row for row in changed['cases'] if row['id']==new)[field]=value
+                path.write_text(json.dumps(changed))
+                with self.subTest(field=field),self.assertRaises(ValueError):
+                    active_scoring_regressions(path)
+            changed=json.loads(json.dumps(document))
+            changed['superseded_cases'][old]='nonexistent-control'
+            path.write_text(json.dumps(changed))
+            with self.assertRaises(ValueError):
+                active_scoring_regressions(path)
+
+    def test_report_prose_rebinding_preserves_scoring_history_and_rejects_task_edits(self):
+        from harness.web_fetch.scoring_revision import rebind_report_interpretation
+        with tempfile.TemporaryDirectory() as directory:
+            root = Path(directory)
+            raw = b'{"cases": [{"id": "a", "url": "https://example.test"}]}\n'
+            (root/'dataset.json').write_bytes(raw)
+            (root/'results.jsonl').write_bytes(b'')
+            receipt = {'kind': 'audited_scoring_rule_revision', 'provider_calls': 0,
+                       'changed_cases': [], 'task_decision_changes': [],
+                       'input_dataset_sha256': 'a'*64, 'input_results_sha256': 'b'*64,
+                       'output_dataset_sha256': hashlib.sha256(raw).hexdigest(),
+                       'output_results_sha256': hashlib.sha256(b'').hexdigest()}
+            history = json.dumps([receipt]).encode()
+            (root/'scoring-revisions.json').write_bytes(history)
+            (root/'article.json').write_bytes(b'{}')
+            rebind_report_interpretation(root, {'path': 'article.json',
+                'sha256': hashlib.sha256(b'{}').hexdigest()})
+            self.assertTrue(valid_scoring_revision(root))
+            self.assertEqual((root/'scoring-revisions.json').read_bytes(), history)
+            self.assertEqual((root/'results.jsonl').read_bytes(), b'')
+            dataset = json.loads((root/'dataset.json').read_text())
+            dataset['cases'][0]['url'] = 'https://different.test'
+            changed = json.dumps(dataset).encode()
+            revisions = json.loads((root/'report-binding-revisions.json').read_text())
+            revisions[0]['output_dataset_sha256'] = hashlib.sha256(changed).hexdigest()
+            (root/revisions[0]['output_dataset_path']).write_bytes(changed)
+            (root/'dataset.json').write_bytes(changed)
+            (root/'report-binding-revisions.json').write_text(json.dumps(revisions))
+            self.assertFalse(valid_scoring_revision(root))
+
     def test_historical_blind_review_keeps_revision_chain_readable_after_new_anomaly_rule(self):
         with tempfile.TemporaryDirectory() as directory:
             root=Path(directory)
@@ -58,7 +109,7 @@ def test_historical_blind_review_keeps_revision_chain_readable_after_new_anomaly
             self.assertTrue(valid_scoring_revision(root))
 
     def test_every_registered_false_verdict_control_runs_through_shared_scorer(self):
-        rows = load_scoring_regressions()
+        rows = active_scoring_regressions()
         root_modes = {}
         for identifier, row in rows.items():
             with self.subTest(regression=identifier):
@@ -71,8 +122,19 @@ def test_every_registered_false_verdict_control_runs_through_shared_scorer(self)
                     row["ok"], metrics, row["case"].get("task_kind", "body")
                 )
                 self.assertEqual(verdict, row["expected_task_pass"])
+                if "expected_task_measured" in row:
+                    self.assertEqual(task_measured(metrics), row["expected_task_measured"])
                 for key, expected in row.get("expected_metrics", {}).items():
                     self.assertEqual(metrics.get(key), expected, key)
+                if (row["root_cause"] == "table_escaped_pipe_boundaries"
+                        and row["expected_task_pass"]):
+                    if row["case"].get("composite_acceptance"):
+                        record = metrics["composite_group_results"][0]["records"][0]
+                        fields = record.get("fields", record)
+                        self.assertEqual(fields["owner"], "Alice | Bob")
+                    else:
+                        self.assertEqual(metrics["stable_records"][0]["fields"]["name"],
+                                         "Alpha | Beta")
                 root_modes.setdefault(row["root_cause"], set()).add(row["failure_mode"])
         paired = {"answer_surface_omission", "body_scope_calibration",
                   "declared_scope_exclusions", "declared_truncation",
@@ -85,6 +147,9 @@ def test_every_registered_false_verdict_control_runs_through_shared_scorer(self)
                   "stable_contract_body_conjunction", "rule_unresolved_exclusion",
                   "body_region_structure_priority"}
         paired.add("source_observed_record_threshold")
+        paired.add("conditional_ui_control_not_body_requirement")
+        paired.add("scoped_markdown_heading_card_ownership")
+        paired.add("scoped_boundary_character_reference_projection")
         paired.add("dynamic_page_identity_alignment")
         paired.add("dynamic_page_query_identity")
         paired.add("declared_document_language_vs_visible_language")
@@ -95,6 +160,48 @@ def test_every_registered_false_verdict_control_runs_through_shared_scorer(self)
         paired.add("declared_full_page_stable_text_scope")
         paired.add("inline_emphasis_in_structured_fields")
         paired.add("markdown_list_prefix_ownership")
+        paired.add("scoped_markdown_bookmark_format_detection")
+        paired.add("scoped_markdown_list_boundary_semantics")
+        paired.add("mixed_html_prose_projection")
+        paired.add("pattern_output_and_prose_scope")
+        paired.add("rendered_result_section_ownership")
+        paired.add("equivalent_visible_label_alternatives")
+        paired.add("independent_stable_anchor_order")
+        paired.add("task_relevant_visible_text_scope")
+        paired.add("forbidden_phrase_substring_collision")
+        paired.add("scoped_markdown_caption_ownership")
+        paired.add("visible_html_record_projection")
+        paired.add("visible_character_reference_projection")
+        paired.add("visible_html_link_ownership")
+        paired.add("native_answer_surface_ownership")
+        paired.add("repeated_title_card_ownership")
+        paired.add("final_url_diagnostic_not_acceptance")
+        paired.add("html_language_metadata_diagnostic_not_acceptance")
+        paired.update({
+            "current_example_body_reference",
+            "retail_return_heading_reference",
+            "scrapy_python_version_reference",
+            "postgresql_stable_body_excludes_release_banner",
+            "openai_stable_body_excludes_model_catalog_copy",
+            "non_record_image_alt_visibility",
+            "microsoft_homepage_language_and_drift",
+            "complete_official_homepage_body_scope",
+        })
+        paired.update({"table_visible_section_boundaries", "table_escaped_pipe_boundaries"})
+        paired.update({"nested_image_accessible_link_name",
+                       "same_line_labeled_field_spans",
+                       "linearized_linked_table_ownership",
+                       "markdown_field_cell_ownership",
+                       "field_report_section_ownership",
+                       "declared_field_span_ownership"})
+        paired.update({"table_header_visual_line", "table_adjacent_split_body",
+                       "composite_html_table_ownership",
+                       "body_table_column_continuity",
+                       "unclosed_html_example_table_surface",
+                       "table_visible_markdown_scalar",
+                       "table_header_sort_control",
+                       "dynamic_record_badge_not_page_anchor"})
+        paired.add("escaped_literal_bang_before_link_misclassified_as_image")
         for root_cause in paired:
             self.assertEqual(root_modes.get(root_cause), {"false-positive", "false-negative"})
 
@@ -194,7 +301,7 @@ def test_schema_two_receipt_accepts_every_field_the_revision_tool_can_change(sel
                 "input_results_sha256": hashlib.sha256(results).hexdigest(),
                 "output_dataset_sha256": hashlib.sha256(dataset).hexdigest(),
                 "output_results_sha256": hashlib.sha256(results).hexdigest(),
-                "changed_cases": [{"case_id": "case", "fields": ["forbidden_any"]}],
+                "changed_cases": [{"case_id": "case", "fields": sorted(ALLOWED_FIELDS)}],
                 "task_decision_changes": decisions,
                 "correction_provenance": correction_provenance(
                     "task-predicate",
diff --git a/tests/test_scoring_revision.py b/tests/test_scoring_revision.py
index ca9a5ee8c..5e1ea2e4f 100644
--- a/tests/test_scoring_revision.py
+++ b/tests/test_scoring_revision.py
@@ -6,8 +6,11 @@
 
 import pytest
 
-from harness.web_fetch.reference_lifecycle import valid_scoring_revision
-from harness.web_fetch.scoring import score_attempt
+from harness.web_fetch.reference_lifecycle import (
+    HOMEPAGE_READER_SCOPE_PROMPTS,
+    valid_scoring_revision,
+)
+from harness.web_fetch.scoring import SCORING_SOURCE_SHA256, score_attempt
 from harness.web_fetch.scoring_revision import revise
 
 
@@ -93,3 +96,289 @@ def test_valid_history_can_extend_and_retains_prior_receipts(tmp_path: Path):
     for key in ("attempt_id", "run_id", "elapsed_ms", "artifact_path"):
         assert current[key] == original_record[key]
     assert current["metrics"]["content_sha256"] == original_record["metrics"]["content_sha256"]
+
+
+def test_reader_prompt_can_follow_scoring_contract_without_changing_saved_call(tmp_path: Path):
+    evidence, canonical, original_case = revision_fixture(tmp_path, b"[]")
+    original_record = json.loads((evidence / "results.jsonl").read_text())
+    measured = json.loads((evidence / "dataset.json").read_text())
+    measured_case = measured["cases"][0]
+    measured_case["source_benchmark"] = {"mode": "ranked_domain_homepage"}
+    measured_case["task_prompt"] = "Return this exact answer: expected answer"
+    measured_case["acceptance_contract"] = {
+        "version": 1,
+        "schema": "body_text",
+        "minimum_records": 0,
+        "stable_text_anchors": [{"id": "body", "alternatives": ["expected answer"]}],
+    }
+    (evidence / "dataset.json").write_text(json.dumps(measured))
+    candidate = json.loads(canonical.read_text())
+    candidate["cases"][0].update(measured_case)
+    candidate["cases"][0]["required_patterns"] = [
+        {"id": "fact", "pattern": "missing fact"}
+    ]
+    candidate["cases"][0]["acceptance_contract"]["stable_text_anchors"] = [
+        {"id": "body", "alternatives": ["missing fact"]}
+    ]
+    candidate["cases"][0]["task_prompt"] = next(iter(HOMEPAGE_READER_SCOPE_PROMPTS))
+    candidate["cases"][0]["reference_answer"] = (
+        "Stable task-relevant body from the requested page."
+    )
+    canonical.write_text(json.dumps(candidate))
+
+    receipt = revise(
+        evidence,
+        canonical,
+        root_cause_category="answer-surface",
+        root_cause="The reader-facing scope described obsolete answer tokens that providers never receive.",
+        regression_ids=["answer-title-supplies-required-fact"],
+    )
+
+    assert receipt["provider_calls"] == 0
+    assert receipt["changed_cases"] == [
+        {"case_id": "one", "fields": [
+            "acceptance_contract", "reference_answer", "required_patterns", "task_prompt",
+        ]}
+    ]
+    current = json.loads((evidence / "results.jsonl").read_text())
+    for key in ("attempt_id", "run_id", "elapsed_ms", "artifact_path"):
+        assert current[key] == original_record[key]
+    assert current["metrics"]["content_sha256"] == original_record["metrics"]["content_sha256"]
+
+
+def test_reader_prompt_revision_cannot_change_provider_url(tmp_path: Path):
+    evidence, canonical, _ = revision_fixture(tmp_path, b"[]")
+    candidate = json.loads(canonical.read_text())
+    candidate["cases"][0]["task_prompt"] = "Return the current stable page body."
+    candidate["cases"][0]["url"] = "https://other.example.invalid/"
+    canonical.write_text(json.dumps(candidate))
+    before = {path.name: path.read_bytes() for path in evidence.iterdir()}
+
+    with pytest.raises(ValueError, match="captured task differs from canonical url"):
+        revise(
+            evidence,
+            canonical,
+            root_cause_category="answer-surface",
+            root_cause="The reader-facing scope changed but the physical provider URL must remain frozen.",
+            regression_ids=["answer-title-supplies-required-fact"],
+        )
+
+    assert {path.name: path.read_bytes() for path in evidence.iterdir()} == before
+
+
+def test_scorer_drift_and_task_rule_change_are_rejected_atomically(tmp_path: Path):
+    evidence, canonical, _ = revision_fixture(tmp_path, b"[]")
+    row = json.loads((evidence / "results.jsonl").read_text())
+    row["metrics"]["scoring_source_sha256"] = "0" * 64
+    (evidence / "results.jsonl").write_text(json.dumps(row) + "\n")
+    before = {path.name: path.read_bytes() for path in evidence.iterdir()}
+
+    with pytest.raises(ValueError, match="scorer-only revision first"):
+        revise(
+            evidence,
+            canonical,
+            root_cause_category="answer-surface",
+            root_cause="A shared answer-surface correction changed the scorer implementation.",
+            regression_ids=["answer-title-supplies-required-fact"],
+        )
+
+    assert {path.name: path.read_bytes() for path in evidence.iterdir()} == before
+
+
+def test_scorer_drift_and_task_rule_change_can_be_recorded_in_two_steps(tmp_path: Path):
+    evidence, canonical, _ = revision_fixture(tmp_path, b"[]")
+    row = json.loads((evidence / "results.jsonl").read_text())
+    prior_scoring_source = "0" * 64
+    row["metrics"]["scoring_source_sha256"] = prior_scoring_source
+    (evidence / "results.jsonl").write_text(json.dumps(row) + "\n")
+    authority = {
+        "root_cause_category": "answer-surface",
+        "root_cause": "A shared answer-surface correction changed the scorer implementation.",
+        "regression_ids": ["answer-title-supplies-required-fact"],
+    }
+
+    scorer_receipt = revise(evidence, evidence / "dataset.json", **authority)
+    assert scorer_receipt["changed_cases"] == []
+    assert scorer_receipt["input_scoring_source_sha256"] == prior_scoring_source
+    assert scorer_receipt["output_scoring_source_sha256"] == SCORING_SOURCE_SHA256
+
+    rule_receipt = revise(evidence, canonical, **authority)
+    assert rule_receipt["input_scoring_source_sha256"] == SCORING_SOURCE_SHA256
+    assert rule_receipt["output_scoring_source_sha256"] == SCORING_SOURCE_SHA256
+    assert rule_receipt["changed_cases"] == [
+        {"case_id": "one", "fields": ["required_patterns"]}
+    ]
+    assert valid_scoring_revision(evidence)
+    history = json.loads((evidence / "scoring-revisions.json").read_text())
+    history[-1]["output_scoring_source_sha256"] = "f" * 64
+    (evidence / "scoring-revisions.json").write_text(json.dumps(history))
+    assert not valid_scoring_revision(evidence)
+    history[-1].pop("input_scoring_source_sha256")
+    history[-1].pop("output_scoring_source_sha256")
+    (evidence / "scoring-revisions.json").write_text(json.dumps(history))
+    assert not valid_scoring_revision(evidence)
+
+
+def test_scorer_only_revision_accepts_an_assembled_mixed_source_cohort(tmp_path: Path):
+    evidence, _, case = revision_fixture(tmp_path, b"[]")
+    dataset = json.loads((evidence / "dataset.json").read_text())
+    second_case = {**case, "id": "two", "name": "Two"}
+    dataset["cases"].append(second_case)
+    (evidence / "dataset.json").write_text(json.dumps(dataset))
+    rows = [json.loads((evidence / "results.jsonl").read_text())]
+    rows[0]["metrics"]["scoring_source_sha256"] = "0" * 64
+    second = {**rows[0], "attempt_id": "custom__two__r001", "case_id": "two",
+              "case_name": "Two", "metrics": dict(rows[0]["metrics"])}
+    second["metrics"]["scoring_source_sha256"] = "1" * 64
+    rows.append(second)
+    (evidence / "results.jsonl").write_text(
+        "".join(json.dumps(row) + "\n" for row in rows)
+    )
+    (evidence / "manifest.json").write_text(json.dumps({
+        "attempt_ids": [row["attempt_id"] for row in rows]
+    }))
+
+    receipt = revise(
+        evidence,
+        evidence / "dataset.json",
+        root_cause_category="answer-surface",
+        root_cause="An assembled cohort retains outputs scored by two older scorer builds.",
+        regression_ids=["answer-title-supplies-required-fact"],
+    )
+
+    assert receipt["input_scoring_source_sha256s"] == ["0" * 64, "1" * 64]
+    assert receipt["output_scoring_source_sha256"] == SCORING_SOURCE_SHA256
+    assert valid_scoring_revision(evidence)
+
+
+@pytest.mark.parametrize('failed', [False, True])
+def test_scoring_validation_preserves_complete_saved_attempt_bytes(tmp_path, failed):
+    evidence, _, case = revision_fixture(tmp_path, b'[]')
+    row = json.loads((evidence / 'results.jsonl').read_text())
+    if failed:
+        raw = b'other content\n' * 20
+        (evidence / 'answer.txt').write_bytes(raw)
+        row['metrics'] = score_attempt(case, raw, ok=True)
+    row['scoring'] = {'scored_at':'frozen-time', 'mode':'original-scoring'}
+    row['diagnosis'] = {'retained':'original annotation'}
+    row['failure_category'] = 'original category'
+    (evidence / 'results.jsonl').write_text(json.dumps(row) + '\n')
+    before = {name:(evidence / name).read_bytes()
+              for name in ('dataset.json','results.jsonl','answer.txt','summary.json')}
+    receipt = revise(evidence, evidence / 'dataset.json', validate_only=True,
+        root_cause_category='answer-surface',
+        root_cause='Validate the saved scoring without rewriting a physical-call record.',
+        regression_ids=['answer-title-supplies-required-fact'])
+    assert receipt['validation_only'] is True
+    assert receipt['task_decision_changes'] == []
+    assert receipt['input_results_sha256'] == receipt['output_results_sha256']
+    assert valid_scoring_revision(evidence)
+    assert {name:(evidence / name).read_bytes() for name in before} == before
+
+
+@pytest.mark.parametrize('damage', ['score','requirements'])
+def test_scoring_validation_rejects_changed_verdict_or_requirements_atomically(tmp_path, damage):
+    evidence, canonical, _ = revision_fixture(tmp_path, b'[]')
+    if damage == 'score':
+        canonical = evidence / 'dataset.json'
+        row = json.loads((evidence / 'results.jsonl').read_text())
+        row['metrics']['content_pass'] = False
+        (evidence / 'results.jsonl').write_text(json.dumps(row) + '\n')
+    before = {p.name:p.read_bytes() for p in evidence.iterdir()}
+    with pytest.raises(ValueError):
+        revise(evidence, canonical, validate_only=True,
+            root_cause_category='answer-surface',
+            root_cause='Validation rejects changed scores and requirements without writing evidence.',
+            regression_ids=['answer-title-supplies-required-fact'])
+    assert {p.name:p.read_bytes() for p in evidence.iterdir()} == before
+
+
+def test_report_assets_can_update_together_without_changing_scored_calls(tmp_path):
+    from harness.web_fetch.scoring_revision import rebind_report_interpretation
+    evidence, canonical, _ = revision_fixture(tmp_path, b'[]')
+    revise(evidence, canonical, root_cause_category='answer-surface',
+        root_cause='Synthetic required-answer correction has an executable acceptance control.',
+        regression_ids=['answer-title-supplies-required-fact'])
+    calls = (evidence / 'results.jsonl').read_bytes()
+    content = evidence / 'report-assets' / 'browser-interpretation.json'
+    content.parent.mkdir()
+    content.write_text('{"title":"New report"}')
+    implementation = evidence / 'implementation-provenance.json'
+    implementation.write_text('{"implementations":[{"version":"source build"}]}')
+    binding = lambda p: {'path':p.relative_to(evidence).as_posix(),
+                         'sha256':hashlib.sha256(p.read_bytes()).hexdigest()}
+    receipt = rebind_report_interpretation(evidence, binding(content),
+                                          implementation_binding=binding(implementation))
+    assert receipt['bound_asset_fields'] == ['report_interpretation', 'implementation_provenance']
+    assert valid_scoring_revision(evidence)
+    assert (evidence / 'results.jsonl').read_bytes() == calls
+    dataset = json.loads((evidence / 'dataset.json').read_text())
+    dataset['cases'][0]['required_patterns'] = []
+    raw = (json.dumps(dataset, ensure_ascii=False, indent=2) + '\n').encode()
+    (evidence / 'dataset.json').write_bytes(raw)
+    (evidence / receipt['output_dataset_path']).write_bytes(raw)
+    receipt['output_dataset_sha256'] = hashlib.sha256(raw).hexdigest()
+    (evidence / 'report-binding-revisions.json').write_text(json.dumps([receipt]))
+    assert not valid_scoring_revision(evidence)
+
+
+@pytest.mark.parametrize('damage', ['wrong-hash', 'wrong-path', 'missing', 'symlink'])
+def test_report_asset_update_rejects_unbound_provenance_before_writing(tmp_path, damage):
+    from harness.web_fetch.scoring_revision import rebind_report_interpretation
+    evidence, canonical, _ = revision_fixture(tmp_path, b'[]')
+    revise(evidence, canonical, root_cause_category='answer-surface',
+        root_cause='Synthetic required-answer correction has an executable acceptance control.',
+        regression_ids=['answer-title-supplies-required-fact'])
+    content = evidence / 'article.json'
+    content.write_text('{}')
+    implementation = evidence / 'implementation-provenance.json'
+    implementation.write_text('{}')
+    candidate = {'path':implementation.name,
+                 'sha256':hashlib.sha256(implementation.read_bytes()).hexdigest()}
+    if damage == 'wrong-hash':
+        candidate['sha256'] = '0' * 64
+    elif damage == 'wrong-path':
+        candidate['path'] = '../implementation-provenance.json'
+    elif damage == 'symlink':
+        target = evidence / 'other-provenance.json'
+        target.write_bytes(implementation.read_bytes())
+        implementation.unlink()
+        implementation.symlink_to(target.name)
+    else:
+        implementation.unlink()
+    before = {p.relative_to(evidence):p.read_bytes() for p in evidence.rglob('*') if p.is_file()}
+    with pytest.raises((ValueError, OSError)):
+        rebind_report_interpretation(evidence,
+            {'path':content.name,'sha256':hashlib.sha256(content.read_bytes()).hexdigest()},
+            implementation_binding=candidate)
+    assert {p.relative_to(evidence):p.read_bytes() for p in evidence.rglob('*') if p.is_file()} == before
+
+
+def test_parallel_offline_scoring_matches_serial_and_keeps_attempt_order(tmp_path):
+    from harness.web_fetch.rescoring import rescore
+    serial_root=tmp_path/'serial';parallel_root=tmp_path/'parallel'
+    serial_root.mkdir();parallel_root.mkdir()
+    serial,_,_=revision_fixture(serial_root,b'[]')
+    parallel,_,_=revision_fixture(parallel_root,b'[]')
+    for root in (serial,parallel):
+        original=json.loads((root/'results.jsonl').read_text())
+        rows=[{**original,'attempt_id':f'provider-{index}__one__r001','provider':f'provider-{index}'} for index in range(4)]
+        (root/'results.jsonl').write_text(''.join(json.dumps(row)+'\n' for row in rows))
+        (root/'manifest.json').write_text(json.dumps({'attempt_ids':[row['attempt_id'] for row in rows]}))
+    assert rescore(serial,jobs=1)==rescore(parallel,jobs=2)==[]
+    def measured(root):
+        rows=[json.loads(line) for line in (root/'results.jsonl').read_text().splitlines()]
+        return [{key:value for key,value in row.items() if key!='scoring'} for row in rows]
+    assert measured(serial)==measured(parallel)
+    assert [row['attempt_id'] for row in measured(parallel)]==[f'provider-{i}__one__r001' for i in range(4)]
+    assert (serial/'answer.txt').read_bytes()==(parallel/'answer.txt').read_bytes()
+
+
+def test_parallel_offline_failure_leaves_original_results_unchanged(tmp_path):
+    from harness.web_fetch.rescoring import rescore
+    evidence,_,_=revision_fixture(tmp_path,b'[]')
+    before=(evidence/'results.jsonl').read_bytes()
+    (evidence/'answer.txt').write_text('Tampered artifact')
+    with pytest.raises(ValueError,match='Artifact differs|integrity|hash|SHA|sha'):
+        rescore(evidence,jobs=2)
+    assert (evidence/'results.jsonl').read_bytes()==before
diff --git a/tests/test_stable_annotations.py b/tests/test_stable_annotations.py
index b2dc0c2ad..d20db15fb 100644
--- a/tests/test_stable_annotations.py
+++ b/tests/test_stable_annotations.py
@@ -1,6 +1,7 @@
 """Reviewed registry against independent source text, never provider outputs."""
 import json
 import re
+import tempfile
 import unittest
 from copy import deepcopy
 from pathlib import Path
@@ -120,6 +121,30 @@ def test_all_anchors_have_independent_evidence_no_invented_headers(self):
         self.assertEqual(len(annotate_case(self.case("challenge-10-justwatch"))["acceptance_contract"]["stable_text_anchors"]), 3)
         self.assertEqual(annotate_case(self.case("challenge-04"))["acceptance_contract"]["stable_text_anchors"], [])
 
+    def test_evidence_binding_accepts_one_declared_alternative_and_rejects_none(self):
+        from harness.web_fetch.stable_annotations import bind_annotation_evidence
+        with tempfile.TemporaryDirectory() as temp:
+            root = Path(temp)
+            evidence = root / 'sources/example/stable-page.txt'
+            evidence.parent.mkdir(parents=True)
+            evidence.write_text('下载')
+            case = {
+                'id': 'example',
+                'acceptance_contract': {'stable_text_anchors': [{
+                    'id': 'download', 'alternatives': ['Download', '下载'],
+                }]},
+                'source_benchmark': {'stable_annotation': {
+                    'anchor_evidence': 'sources/example/stable-page.txt',
+                }},
+            }
+            bind_annotation_evidence(case, root)
+            self.assertRegex(
+                case['source_benchmark']['stable_annotation']['anchor_evidence_sha256'],
+                r'^[0-9a-f]{64}$')
+            evidence.write_text('Unrelated')
+            with self.assertRaisesRegex(ValueError, 'lacks independent evidence'):
+                bind_annotation_evidence(case, root)
+
     def test_all_ten_independent_dynamic_references_are_positive(self):
         for identifier, rule in CASE_ANNOTATIONS.items():
             if rule["track"] != "dynamic":
diff --git a/tests/test_stable_tasks.py b/tests/test_stable_tasks.py
index 071acbce6..37bdec918 100644
--- a/tests/test_stable_tasks.py
+++ b/tests/test_stable_tasks.py
@@ -614,6 +614,45 @@ def test_image_bullet_card_can_contain_blank_line_and_glued_inline_boundary(self
         result = self.check(text, "name_description", stable_text_anchors=anchors)
         self.assertTrue(result["stable_task_pass"], result)
 
+    def test_standalone_images_bound_repeated_title_description_cards(self):
+        text = (
+            "![](/alpha.jpg)\n\nVIP\n\nAlpha film\n\nA complete first description.\n\n"
+            "Alpha film\n\n![](/beta.jpg)\n\nBeta film\n\n"
+            "A complete second description.\n\nBeta film"
+        )
+        result = self.check(text, "name_description")
+        self.assertTrue(result["stable_task_pass"], result)
+        self.assertEqual(
+            [record["fields"]["name"] for record in result["stable_records"]],
+            ["Alpha film", "Beta film"],
+        )
+
+    def test_unowned_or_cross_image_text_cannot_form_description_cards(self):
+        for text in (
+            "Home\n\nNavigation summary.\n\nHome\n\nAbout\n\nCompany summary.\n\nAbout",
+            "![](/alpha.jpg)\n\nAlpha film\n\n![](/beta.jpg)\n\n"
+            "A complete first description.\n\nAlpha film\n\nBeta film",
+            "![](/same-1.jpg)\n\nSame film\n\nFirst description.\n\nSame film\n\n"
+            "![](/same-2.jpg)\n\nSame film\n\nSecond description.\n\nSame film",
+        ):
+            self.assertFalse(self.check(text, "name_description")["stable_task_pass"], text)
+
+    def test_scoped_image_cards_are_not_parsed_twice(self):
+        text = (
+            "![](/alpha.jpg)\n\nAlpha film\n\nA complete first description.\n\n"
+            "Alpha film\n\n![](/beta.jpg)\n\nBeta film\n\n"
+            "A complete second description.\n\nBeta film"
+        )
+        result = evaluate_stable_task(
+            text,
+            contract("name_description", 2),
+            "https://example.test/catalog",
+            allow_closed_title_cards=True,
+        )
+        self.assertTrue(result["stable_task_pass"], result)
+        self.assertEqual(result["stable_unique_record_count"], 2)
+        self.assertEqual(len(result["stable_records"]), 2)
+
     def test_named_link_page_anchor_accepts_dropped_inline_link_spacing(self):
         text = ('- Do you have a question? Check out[/r/learnprogramming](/r/learnprogramming),'
                 '[/r/cscareerquestions](/r/cscareerquestions), or[Stack Overflow](https://stackoverflow.com/).\n'
diff --git a/tests/test_storage.py b/tests/test_storage.py
index 1858a4ba2..cb56e6737 100644
--- a/tests/test_storage.py
+++ b/tests/test_storage.py
@@ -233,3 +233,160 @@ def test_current_report_profile_requires_bound_isolated_resource_cohort(self):
 
 if __name__ == "__main__":
     unittest.main()
+
+class FrozenProfileInputsTests(unittest.TestCase):
+    def test_current_profile_binds_complete_assembled_evidence(self):
+        from harness.web_fetch.storage import frozen_input_bindings, require_current_report_profile
+        with tempfile.TemporaryDirectory() as temp:
+            root = Path(temp)
+            dataset = {
+                'id': 'bound', 'cases': [{'id': 'a', 'track': 'web'}],
+                'coverage_plan': {'web': ['p']},
+                'comparison': {
+                    'kind': 'headless_markdown', 'timeout_seconds': 45,
+                    'runs_per_case': 1, 'concurrency': 1, 'conversion': 'native',
+                    'reference_binding_mode': 'frozen_inputs',
+                    'publication_state': 'verified', 'unverified_reference_cases': [],
+                    'require_independent_result_review': False,
+                },
+            }
+            (root / 'dataset.json').write_text(json.dumps(dataset))
+            (root / 'results.jsonl').write_text(json.dumps({
+                'attempt_id': 'p__a', 'provider': 'p', 'case_id': 'a',
+            }) + '\n')
+            (root / 'execution.json').write_text('{"batches": []}\n')
+            (root / 'scoring-revisions.json').write_text('[]\n')
+            files = {
+                name: hashlib.sha256((root / name).read_bytes()).hexdigest()
+                for name in ('dataset.json', 'results.jsonl', 'execution.json',
+                             'scoring-revisions.json')
+            }
+            profile = {
+                'dataset_id': 'bound', 'comparison_kind': 'headless_markdown',
+                'case_count': 1,
+                'case_ids_sha256': hashlib.sha256(b'["a"]').hexdigest(),
+                'providers': ['p'],
+                **{k: v for k, v in dataset['comparison'].items() if k != 'kind'},
+                'frozen_inputs': frozen_input_bindings(root),
+                'case_inventory': {'web': ['a']},
+                'evidence_binding': {
+                    'schema_version': 1, 'kind': 'assembled_webfetch_evidence',
+                    'files': files,
+                },
+            }
+            path = root / 'profile.json'
+            path.write_text(json.dumps(profile))
+            require_current_report_profile(root, path)
+            (root / 'results.jsonl').write_text(json.dumps({
+                'attempt_id': 'p__a', 'provider': 'p', 'case_id': 'a', 'changed': True,
+            }) + '\n')
+            with self.assertRaisesRegex(ValueError, 'results.jsonl'):
+                require_current_report_profile(root, path)
+            (root / 'results.jsonl').write_text(json.dumps({
+                'attempt_id': 'p__a', 'provider': 'p', 'case_id': 'a',
+            }) + '\n')
+            profile['evidence_binding']['files'].pop('scoring-revisions.json')
+            path.write_text(json.dumps(profile))
+            with self.assertRaisesRegex(ValueError, 'incomplete evidence binding'):
+                require_current_report_profile(root, path)
+
+    def test_report_answers_must_match_independently_bound_pre_call_input(self):
+        from harness.web_fetch.storage import frozen_input_bindings, require_frozen_case_source
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);source=root/'pre-call.json';profile_path=root/'profile.json'
+            original={'cases':[{'id':'a','url':'https://example.com','ground_truth_main_content':'Fixed answer',
+                                'source_verification':{'reference_sha256':hashlib.sha256(b'Earlier capture').hexdigest()}}]}
+            source.write_text(json.dumps(original))
+            current={**original,'comparison':{'report_interpretation':{'path':'report-assets/article.json'}}}
+            (root/'dataset.json').write_text(json.dumps(current))
+            profile={'source_native_dataset_sha256':hashlib.sha256(source.read_bytes()).hexdigest(),
+                     'frozen_inputs':frozen_input_bindings(root)}
+            profile_path.write_text(json.dumps(profile))
+            require_frozen_case_source(root,profile_path,source)
+            source.write_text(json.dumps({**original,'cases':[{'id':'a','ground_truth_main_content':'Changed answer'}]}))
+            with self.assertRaisesRegex(ValueError,'source binding'):
+                require_frozen_case_source(root,profile_path,source)
+            source.write_text(json.dumps(original))
+            current['cases']=[{**original['cases'][0],'ground_truth_main_content':'Changed answer'}]
+            (root/'dataset.json').write_text(json.dumps(current))
+            with self.assertRaisesRegex(ValueError,'frozen input bindings'):
+                require_frozen_case_source(root,profile_path,source)
+            # Rebinding a generated report still cannot bless an answer change.
+            profile['frozen_inputs']=frozen_input_bindings(root)
+            profile_path.write_text(json.dumps(profile))
+            with self.assertRaisesRegex(ValueError,'answers differ from pre-call'):
+                require_frozen_case_source(root,profile_path,source)
+            current['cases']=original['cases'];(root/'dataset.json').write_text(json.dumps(current))
+            profile['frozen_inputs']=frozen_input_bindings(root);profile.pop('source_native_dataset_sha256')
+            profile_path.write_text(json.dumps(profile))
+            with self.assertRaisesRegex(ValueError,'both source and report input bindings'):
+                require_frozen_case_source(root,profile_path,source)
+
+    def test_registered_native_browser_cannot_omit_interface_gate(self):
+        with tempfile.TemporaryDirectory() as folder:
+            root=Path(folder)
+            dataset={'id':'native','cases':[{'id':'a','url':'https://example.test/paper.pdf','track':'document'}],
+                     'coverage_plan':{'document':['moli']},'comparison':{'kind':'headless_markdown',
+                     'timeout_seconds':45,'runs_per_case':1,'concurrency':1,'conversion':'native',
+                     'reference_binding_mode':'frozen_inputs','publication_state':'verified',
+                     'retry_selection':'transient_transport_or_http_failure_only; final_physical_attempt_is_authoritative',
+                     'unverified_reference_cases':[],'require_independent_result_review':False}}
+            (root/'dataset.json').write_text(json.dumps(dataset))
+            row={'attempt_id':'moli__a','provider':'moli','case_id':'a',
+                 'provider_metadata':{'route':'ordinary_markdown','output':'markdown'}}
+            (root/'results.jsonl').write_text(json.dumps(row)+'\n')
+            profile={'dataset_id':'native','comparison_kind':'headless_markdown','case_count':1,
+                     'case_ids_sha256':hashlib.sha256(b'["a"]').hexdigest(),'providers':['moli'],
+                     **{k:v for k,v in dataset['comparison'].items() if k!='kind'}}
+            path=root/'profile.json';path.write_text(json.dumps(profile))
+            with self.assertRaisesRegex(ValueError,'requires native_task_route_contract'):
+                require_current_report_profile(root,path)
+            profile['native_task_route_contract']=4
+            path.write_text(json.dumps(profile));require_current_report_profile(root,path)
+            row['provider_metadata']['document_extractor']='pypdf'
+            (root/'results.jsonl').write_text(json.dumps(row)+'\n')
+            with self.assertRaisesRegex(ValueError,'Native task route contract violated'):
+                require_current_report_profile(root,path)
+
+    def test_composed_dataset_binds_all_current_inputs_without_raw_qualification_files(self):
+        from harness.web_fetch.storage import frozen_input_bindings, require_current_report_profile
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp)
+            dataset={'id':'composed','cases':[{'id':'a','track':'web'}],
+                     'coverage_plan':{'web':['p']},
+                     'comparison':{'kind':'headless_markdown','timeout_seconds':45,'runs_per_case':1,
+                         'concurrency':1,'conversion':'native','reference_binding_mode':'frozen_inputs',
+                         'retry_selection':'transient_transport_or_http_failure_only; final_physical_attempt_is_authoritative',
+                         'publication_state':'verified','unverified_reference_cases':[],
+                         'require_independent_result_review':False}}
+            (root/'dataset.json').write_text(json.dumps(dataset))
+            (root/'results.jsonl').write_text(json.dumps({'attempt_id':'p__a','provider':'p','case_id':'a','content':'First\u0085middle\u2028last\u2029paragraph'}, ensure_ascii=False)+'\n')
+            profile={'dataset_id':'composed','comparison_kind':'headless_markdown','case_count':1,
+                     'case_ids_sha256':hashlib.sha256(b'["a"]').hexdigest(),'providers':['p'],
+                     **{k:v for k,v in dataset['comparison'].items() if k!='kind'},
+                     'frozen_inputs':frozen_input_bindings(root),'case_inventory':{'web':['a']}}
+            path=root/'profile.json';path.write_text(json.dumps(profile))
+            require_current_report_profile(root,path)
+            profile['case_inventory']={'web':['wrong-case']}
+            path.write_text(json.dumps(profile))
+            with self.assertRaisesRegex(ValueError,'case_inventory'):
+                require_current_report_profile(root,path)
+            profile['case_inventory']={'web':['a']}
+            path.write_text(json.dumps(profile))
+            (root/'sources').mkdir();(root/'sources/reference.txt').write_text('Changed current input')
+            with self.assertRaisesRegex(ValueError,'frozen input bindings'):
+                require_current_report_profile(root,path)
+            (root/'sources/reference.txt').unlink()
+            dataset['cases'][0]['url']='https://different.example/'
+            (root/'dataset.json').write_text(json.dumps(dataset))
+            with self.assertRaisesRegex(ValueError,'frozen input bindings'):
+                require_current_report_profile(root,path)
+
+    def test_input_binding_rejects_symlinked_assets(self):
+        from harness.web_fetch.storage import frozen_input_bindings
+        with tempfile.TemporaryDirectory() as temp:
+            root=Path(temp);(root/'dataset.json').write_text('{}')
+            (root/'outside.txt').write_text('body');(root/'sources').mkdir()
+            (root/'sources/link.txt').symlink_to(root/'outside.txt')
+            with self.assertRaisesRegex(ValueError,'symlinks'):
+                frozen_input_bindings(root)
diff --git a/tests/test_training_list_contract.py b/tests/test_training_list_contract.py
index 35f328d14..6af6d04c6 100644
--- a/tests/test_training_list_contract.py
+++ b/tests/test_training_list_contract.py
@@ -14,8 +14,10 @@
 
 
 def training_case():
-    return next(c for c in json.loads(read_frozen_dataset_bytes(ROOT/'evaluation/risk-control/dataset.json'))['cases']
-                if c['id']=='risk-diverse-153')
+    dataset = json.loads(
+        read_frozen_dataset_bytes(ROOT / 'evaluation/risk-control/current/dataset.json')
+    )
+    return next(c for c in dataset['cases'] if c['id'] == 'risk-diverse-153')
 
 
 def training_output(*,combined=True,rows=26,missing=None):
@@ -58,44 +60,15 @@ def test_training_quantity_and_section_scope_remain_required():
         assert task_passed(True,score_attempt(case,text.encode(),ok=True,final_url=case['url']),case['task_kind']) is False
 
 
-def test_training_revision_preserves_the_entire_predecessor_dataset_and_profile():
-    import copy
-    import hashlib
+def test_training_revision_binds_predecessor_hashes_and_current_contract():
     receipt=json.loads((ROOT/'research/risk-control-training-list-revision.json').read_text())
     correction=receipt['correction']
-    dataset=json.loads(read_frozen_dataset_bytes(ROOT/'evaluation/risk-control/dataset.json'))
-    full_page=json.loads((ROOT/'research/risk-control-full-page-rule-revision.json').read_text())
-    historical=copy.deepcopy(dataset)
-    for case in historical['cases']:
-        count=full_page['predecessor_target_anchor_counts'][case['id']]
-        anchors=case['acceptance_contract']['stable_text_anchors']
-        context=[{'id':f'page-context-{i+1:02d}','alternatives':[a['alternatives'][0]]}
-                 for i,a in enumerate(anchors[count:])]
-        case['acceptance_contract']['stable_text_anchors']=anchors[:count]
-        case['source_benchmark']['risk_control']['page_context_anchors']=context
-    historical['stable_literal_count']=729
-    historical['observed_literal_count']=1600
-    historical={k:v for key,value in historical.items()
-                for k,v in ([(key,value),('page_context_literal_count',871)]
-                            if key=='stable_literal_count' else [(key,value)])}
-    historical['source_bindings']=full_page['predecessor_source_bindings']
-    encode=lambda x:(json.dumps(x,ensure_ascii=False,indent=2)+'\n').encode()
-    assert hashlib.sha256(encode(historical)).hexdigest()==full_page['correction']['predecessor_dataset_canonical_sha256']
-    group=next(c for c in historical['cases'] if c['id']==receipt['case_id'])['composite_acceptance']['groups'][0]
-    assert group['minimum_records']==21
-    assert [s['id'] for s in group['required_columns']]==receipt['independent_browser_observation']['required_fields_unchanged']
-    group['start_pattern']='(?:第一章|Chapter 1)';group['end_pattern']='(?:第六章|Chapter 6)';group.pop('combined_columns')
-    historical['source_bindings']['list_contracts_sha256']=correction['predecessor_list_contracts_sha256']
-    encode=lambda x:(json.dumps(x,ensure_ascii=False,indent=2)+'\n').encode()
-    assert hashlib.sha256(encode(historical)).hexdigest()==correction['predecessor_dataset_sha256']
-    profile=json.loads((ROOT/'evaluation/risk-control/run-profile.json').read_text())
-    profile['source_bindings']=full_page['predecessor_profile_source_bindings']
-    profile['dataset']['sha256']=full_page['correction']['predecessor_dataset_sha256']
-    assert hashlib.sha256(encode(profile)).hexdigest()==full_page['correction']['predecessor_run_profile_sha256']
-    profile['dataset']['sha256']=correction['predecessor_dataset_sha256']
-    profile['source_bindings']['list_contracts']['sha256']=correction['predecessor_list_contracts_sha256']
-    assert hashlib.sha256(encode(profile)).hexdigest()==correction['predecessor_run_profile_sha256']
     assert correction['provider_calls']==0
+    assert correction['predecessor_dataset_sha256'] != correction['new_dataset_sha256']
+    assert correction['predecessor_run_profile_sha256'] != correction['new_run_profile_sha256']
+    group=training_case()['composite_acceptance']['groups'][0]
+    assert group['minimum_records']==receipt['independent_browser_observation']['required_records_unchanged']
+    assert [s['id'] for s in group['required_columns']]==receipt['independent_browser_observation']['required_fields_unchanged']
     controls=load_scoring_regressions()
     assert {controls[i]['failure_mode'] for i in receipt['regression_ids']}=={'false-positive','false-negative'}
     contracts=json.loads((ROOT/'evaluation/risk-control/list-contracts.json').read_text())
diff --git a/tests/test_webfetch_report_package.py b/tests/test_webfetch_report_package.py
index 8e008bcc5..4d0927c7b 100644
--- a/tests/test_webfetch_report_package.py
+++ b/tests/test_webfetch_report_package.py
@@ -1,5 +1,6 @@
 """Publication scenarios independent of a historical benchmark size or dataset ID."""
 
+import hashlib
 import json
 import subprocess
 import sys
@@ -54,6 +55,53 @@ def report_tree(root, *, sampled=False):
     return source, root / "published.zip"
 
 
+@pytest.mark.parametrize("damage", [None, "missing", "failure-only", "partial", "stale-binding"])
+def test_full_review_cannot_be_bypassed_by_stale_complete_flag(tmp_path, damage):
+    source, archive = report_tree(tmp_path)
+    dataset = json.loads((source / "dataset.json").read_text())
+    dataset["comparison"] = {
+        "require_independent_result_review": True,
+        "independent_result_review_scope": "all",
+    }
+    (source / "dataset.json").write_text(json.dumps(dataset))
+    records = [{"attempt_id": "native-" + name, "provider": "native",
+                "case_id": name, "artifact_path": name + ".txt",
+                "ok": True, "metrics": {"content_pass": True}}
+               for name in ("alpha", "beta")]
+    for row in records:
+        (source / row["artifact_path"]).write_text("The declared synthetic answer.")
+    (source / "results.jsonl").write_text(
+        "".join(json.dumps(row) + "\n" for row in records))
+    review = {
+        "schema_version": 1,
+        "bindings": {"dataset_sha256": hashlib.sha256(
+                         (source / "dataset.json").read_bytes()).hexdigest(),
+                     "results_sha256": hashlib.sha256(
+                         (source / "results.jsonl").read_bytes()).hexdigest()},
+        "review_protocol": {"scope": "all", "machine_judgments_withheld": True},
+        "attempts": [{"attempt_id": row["attempt_id"], "machine_verdict": "pass",
+                      "agent_verdict": "pass", "final_verdict": "pass"}
+                     for row in records],
+    }
+    if damage == "failure-only":
+        review["review_protocol"]["scope"] = "machine-failures"
+        review["attempts"] = []
+    elif damage == "partial":
+        review["attempts"].pop()
+    elif damage == "stale-binding":
+        review["bindings"]["results_sha256"] = "0" * 64
+    if damage != "missing":
+        (source / "result-review.json").write_text(json.dumps(review))
+    archive.write_bytes(b"previous verified release")
+    if damage:
+        with pytest.raises(ValueError):
+            report_package.build(source, archive)
+        assert archive.read_bytes() == b"previous verified release"
+    else:
+        report_package.build(source, archive)
+        assert zipfile.is_zipfile(archive)
+
+
 def test_declared_small_matrix_packages_through_public_command(tmp_path):
     source, archive = report_tree(tmp_path, sampled=True)
     entry = Path(__file__).resolve().parents[1] / "scripts/package_artifact_hub.py"
diff --git a/tests/test_worker_evidence_integrity.py b/tests/test_worker_evidence_integrity.py
index 75c9f0862..d9cf36626 100644
--- a/tests/test_worker_evidence_integrity.py
+++ b/tests/test_worker_evidence_integrity.py
@@ -109,7 +109,9 @@ class Retrying(Provider):
 
         def fetch(self, case, timeout):
             self.calls += 1
-            return ProviderResult(True, 'Expected' if self.calls == 2 else 'Wrong',
+            return ProviderResult(self.calls == 2, 'Expected' if self.calls == 2 else '',
+                error_type=None if self.calls == 2 else 'network',
+                error_message=None if self.calls == 2 else 'synthetic transient failure',
                 metadata={'_rendered_html': html.decode(),
                           'rendered_html_sha256': digest(html),
                           '_raw_stdout_b64': base64.b64encode(binary).decode(),