w2.9: reclassify protocol-verified hosts — DEEP_VERIFIED → PROTOCOL_VERIFIED

Rename SupportTier.DEEP_VERIFIED to PROTOCOL_VERIFIED across 5 files:
installer/models.py (enum), installer/hosts/{codex,claude}.py (tier ref),
scripts/check-enhancement-declaration.py (governance expectations + warning),
tests/test_installer_status_doctor.py (assertion strings).

Preserve Codex/Claude adapters, 5 verified_features, 3 declared_enhancements.
PROTOCOL_VERIFIED covers protocol entry + payload + bootstrap + handoff-first;
does not imply receipt/finalize write API (W2.9b/W3 scope).

Rewrite plan.md/tasks.md W2.9 section: "Remove Deep Host Adapters" →
"Reclassify Protocol-Verified Hosts" with boundary note.

163 passed / 0 failed. rg deep_verified in installer/scripts/tests → 0 hits.

Author: Li-Sanze

.sopify-skills/plan/20260605_p8_protocol_kernel_runtime_retirement/plan.md

@@ -13,9 +13,9 @@ depends_on: [P7 (payload_only_onboarding_mainline), P6 (writer_cutover), P5 (con
 ## Plan Snapshot
 
 - **Goal**: 把 AI 开发过程中的方案、决策、交接、执行/验证证据收敛为可追溯审计资产；真相源从 runtime 切到 protocol.md + sopify_writer，并用 Qoder 证明这些资产可跨宿主接续
-- **Status**: W1 完成 / W2 进行中（W2.0a-W2.8 done，W2.9 next）
-- **Next**: W2.9 — Rename DEEP_VERIFIED → PROTOCOL_VERIFIED, preserve Codex/Claude install
-- **Task**: W2.9 tier 重命名（5 文件），然后 W2.9b writer receipt API → W2.10 删 runtime/ → ...
+- **Status**: W1 完成 / W2 进行中（W2.0a-W2.9 done，W2.10 next）
+- **Next**: W2.10 — Delete runtime/ full directory (~16K LOC / 37 files)
+- **Task**: W2.10 删 runtime/ 全目录，然后 W2.11 dogfood smoke → ...
 
 ## Context / Why
 
@@ -126,7 +126,7 @@ Qoder 接续写入优先走 `sopify_writer` 库 API；如果宿主限制导致
 - W2.6 Registry 退场：删除 `plan/_registry.yaml`、registry 生产/消费代码、priority 建议渲染与 registry 测试
 - W2.7 ✅ Tests 重分类：删 20 个 runtime 镜像测试 + 外科修 installer/status/release 测试 + 新增 sopify_writer 测试锚点（163 passed / 0 failed）
 - W2.8 ✅ 删 runtime entry/smoke 脚本 + 清 validate.py smoke helper + 修 CONTRIBUTING 文档引用
-- W2.9 删除 `installer/hosts/{codex,claude}/` deep adapter（保留 copilot/）
+- W2.9 ✅ Reclassify Protocol-Verified Hosts: `DEEP_VERIFIED` → `PROTOCOL_VERIFIED`（5 文件 tier 重命名，保留 Codex/Claude adapter）。边界：PROTOCOL_VERIFIED 验证 protocol entry + payload + bootstrap + handoff-first，不承诺 receipt/finalize write API（W2.9b/W3 scope）
 - W2.10 删除 `runtime/` 全目录（~16K LOC / 37 文件）
 - W2.11 Dogfood smoke：当前 repo 跑 new-plan / continuation / finalize 三场景各 1 次
 

.sopify-skills/plan/20260605_p8_protocol_kernel_runtime_retirement/tasks.md

@@ -348,14 +348,22 @@ created: 2026-06-05
 - [x] Verify: `scripts/check-bundle-smoke.sh` 和 `scripts/check-prompt-runtime-gate-smoke.py` 不存在
 - [x] Verify: `installer/validate.py` 无 `run_bundle_smoke_check` / `subprocess` / `shlex` 引用
 
-### W2.9 Remove Deep Host Adapters
-
-- [ ] Depends: W2.2 / W2.8
-- [ ] Input: `installer/hosts/{codex,claude}.py`
-- [ ] Output: delete deep adapters for Codex/Claude
-- [ ] Output: keep payload-capable host path, including Copilot if still useful
-- [ ] Output: installer host exports updated
-- [ ] Verify: `rg "deep_verified|hosts.codex|hosts.claude|runtime gate" installer docs README.md README.zh-CN.md` returns no active deep path
+### W2.9 Reclassify Protocol-Verified Hosts
+
+- [x] Depends: W2.2 / W2.8
+- [x] Input: `SupportTier.DEEP_VERIFIED` enum value + all references
+- [x] Output: rename `DEEP_VERIFIED` / `"deep_verified"` → `PROTOCOL_VERIFIED` / `"protocol_verified"` in 5 files:
+  - `installer/models.py` (enum definition)
+  - `installer/hosts/codex.py` (support_tier reference)
+  - `installer/hosts/claude.py` (support_tier reference)
+  - `scripts/check-enhancement-declaration.py` (TIER_EXPECTATIONS + warning string)
+  - `tests/test_installer_status_doctor.py` (assertion strings)
+- [x] Output: preserve `installer/hosts/codex.py` and `installer/hosts/claude.py` — Codex/Claude remain installable targets
+- [x] Output: preserve 5 verified_features (PROMPT_INSTALL, PAYLOAD_INSTALL, WORKSPACE_BOOTSTRAP, HANDOFF_FIRST, HOST_BRIDGE) and 3 declared_enhancements unchanged
+- [x] Output: 边界说明 — PROTOCOL_VERIFIED 验证 protocol entry + payload + bootstrap + handoff-first 能力，不承诺 receipt/finalize write API；writer API 属 W2.9b/W3 scope，不在本波新增 FeatureId
+- [x] Verify: `rg "deep_verified|DEEP_VERIFIED" installer scripts tests` returns 0 active hits
+- [x] Verify: Codex/Claude still installable (`install-sopify --target codex:zh-CN` does not error)
+- [x] Verify: `pytest tests -q` → 163 passed / 0 failed
 
 ### W2.10 Delete runtime/ Directory
 

installer/hosts/claude.py

@@ -15,7 +15,7 @@
 
 CLAUDE_CAPABILITY = HostCapability(
     host_id="claude",
-    support_tier=SupportTier.DEEP_VERIFIED,
+    support_tier=SupportTier.PROTOCOL_VERIFIED,
     install_enabled=True,
     declared_features=(
         FeatureId.PROMPT_INSTALL,

installer/hosts/codex.py

@@ -15,7 +15,7 @@
 
 CODEX_CAPABILITY = HostCapability(
     host_id="codex",
-    support_tier=SupportTier.DEEP_VERIFIED,
+    support_tier=SupportTier.PROTOCOL_VERIFIED,
     install_enabled=True,
     declared_features=(
         FeatureId.PROMPT_INSTALL,

installer/models.py

@@ -37,7 +37,7 @@ class InstallError(RuntimeError):
 class SupportTier(StrEnum):
     """Stable product-support tiers for host registry declarations."""
 
-    DEEP_VERIFIED = "deep_verified"
+    PROTOCOL_VERIFIED = "protocol_verified"
     BASELINE_SUPPORTED = "baseline_supported"
     DOCUMENTED_ONLY = "documented_only"
     EXPERIMENTAL = "experimental"

scripts/check-enhancement-declaration.py

@@ -23,7 +23,7 @@
 ALL_GROUPS = frozenset(EnhancementGroup)
 
 TIER_EXPECTATIONS: dict[SupportTier, frozenset[EnhancementGroup]] = {
-    SupportTier.DEEP_VERIFIED: ALL_GROUPS,
+    SupportTier.PROTOCOL_VERIFIED: ALL_GROUPS,
     SupportTier.BASELINE_SUPPORTED: frozenset({EnhancementGroup.CONTINUATION}),
     SupportTier.EXPERIMENTAL: frozenset(),
     SupportTier.DOCUMENTED_ONLY: frozenset(),
@@ -40,9 +40,9 @@ def check_host(host_id: str, tier: SupportTier, declared: frozenset[EnhancementG
         labels = ", ".join(sorted(g.value for g in missing))
         warnings.append(f"[{host_id}] tier={tier.value} expects [{labels}] but not declared")
 
-    if tier == SupportTier.DEEP_VERIFIED and declared != ALL_GROUPS:
+    if tier == SupportTier.PROTOCOL_VERIFIED and declared != ALL_GROUPS:
         labels = ", ".join(sorted(g.value for g in ALL_GROUPS - declared))
-        warnings.append(f"[{host_id}] deep_verified should declare all groups; missing: [{labels}]")
+        warnings.append(f"[{host_id}] protocol_verified should declare all groups; missing: [{labels}]")
 
     return warnings
 

tests/test_installer_status_doctor.py

@@ -46,8 +46,8 @@ def test_registry_returns_complete_capabilities_for_declared_hosts(self) -> None
         codex = get_host_capability("codex")
         claude = get_host_capability("claude")
 
-        self.assertEqual(codex.support_tier.value, "deep_verified")
-        self.assertEqual(claude.support_tier.value, "deep_verified")
+        self.assertEqual(codex.support_tier.value, "protocol_verified")
+        self.assertEqual(claude.support_tier.value, "protocol_verified")
         self.assertTrue(codex.install_enabled)
         self.assertTrue(claude.install_enabled)
         self.assertIn("handoff_first", [feature.value for feature in claude.verified_features])