@@ -19,14 +19,17 @@ dynamic-import Script-goal graphs, dependency-free module roots, `$262.agent`
1919host paths, and supplemental feature contracts. Its strict 16-column TSV
2020schema records source hashes, complete metadata shapes, graph edges and closure
2121sizes, lookup priority, execution goal, and host cohort policy. Every
22- ` dynamic-import-root ` also declares its initial bytecode expectation: an
23- ` initial-import-tree ` must already contain the authenticated import opcode,
24- while ` runtime-compiled-import ` authorizes a later runtime compilation and
25- requires the initial tree not to contain it. A missing or unknown policy fails
26- closed. Both coordinator and isolated worker parse and authenticate the same
27- file; malformed, unsorted, duplicate, open-graph, mixed-goal, or
28- checksum-drifted data fails closed. The cohort generators emit ` --admissions `
29- rows and compare their owned group against this file in normal check mode.
22+ ` dynamic-import-root ` also declares a closed root policy. An
23+ ` initial-import-tree ` must already contain the authenticated import opcode;
24+ ` runtime-compiled-import ` authorizes a later runtime compilation and requires
25+ the initial tree not to contain it; ` parse-rejected ` admits only an exact,
26+ request-free, one-file ` negative=parse/SyntaxError ` root and hard-fails if it
27+ reaches bytecode publication. Parse-negative roots cannot claim either
28+ bytecode policy. A missing or unknown policy fails closed. Both coordinator and
29+ isolated worker parse and authenticate the same file; malformed, unsorted,
30+ duplicate, open-graph, mixed-goal, or checksum-drifted data fails closed. The
31+ cohort generators emit ` --admissions ` rows and compare their owned group
32+ against this file in normal check mode.
3033
3134` negative-diagnostics.tsv ` is a strict, source-authenticated overlay for
3235negative variants whose QuickJS failure reason and location are part of the
0 commit comments