From fb145029cf8155ce7800dd866375cdec027d52ce Mon Sep 17 00:00:00 2001
From: Chumaniac <3408601995@qq.com>
Date: Tue, 27 Oct 2026 10:52:01 +0800
Subject: [PATCH] Organize verification tasks and share bounded offline report
 content

---
 docs/batch-acceptance.md               | 18 +++++++-
 src/reporters/artifacts-html.ts        | 60 +++++++++++++++-----------
 src/reporters/batch-html.ts            |  9 ++--
 src/workbench/page.ts                  | 57 ++++++++++++++++--------
 tests/reporters/artifacts-html.test.ts |  8 ++++
 tests/workbench/batch.test.ts          |  4 ++
 tests/workbench/page.test.ts           | 24 +++++++++++
 7 files changed, 131 insertions(+), 49 deletions(-)

diff --git a/docs/batch-acceptance.md b/docs/batch-acceptance.md
index 58a2d3e..b25688f 100644
--- a/docs/batch-acceptance.md
+++ b/docs/batch-acceptance.md
@@ -25,7 +25,7 @@ skillsync batch inspect --package /project/corrected-review.json --contract /pro
 
 The run exits 0 for all passed, 1 for failed, or 2 for incomplete/invalid evidence. Inspection exits 0 when the package is internally valid even if its acceptance result failed; use the embedded status/exitCode when making an acceptance decision. Output files must be new; existing packages and source files are never overwritten. A retry verifies passed input hashes before reusing evidence. Changed contract bytes, case identities or passed input content require a fresh run, without reusing the previous package. Current and prior reports remain available for comparison; unknown or truncated evidence cannot claim resolved findings.
 
-In **gui**, expand the multi-batch acceptance and offline review section, choose a plan and preflight it, then explicitly run into a new file. After a correction, select the prior package and the failed-only option, preflight again and run into another new file. Open an existing package read-only with an optional expected SHA-256 obtained independently. Opening evidence clears any single-Skill repair capability. Cancellation may retain an already published package: inspect the chosen output before retrying.
+In **gui**, choose the multi-batch acceptance task, select a plan and preflight it, then explicitly run into a new file. After a correction, select the prior package and the failed-only option, preflight again and run into another new file. Open an existing package read-only with an optional expected SHA-256 obtained independently. Opening evidence clears any single-Skill repair capability. Cancellation may retain an already published package: inspect the chosen output before retrying.
 
 The single JSON package includes the exact original plan SHA-256, the public declaration, per-batch file inventory, file/report hashes, complete bounded reports and comparisons. It omits source bodies, raw record values, contract expected scalar values and absolute source paths. Relative file names, case names and column metadata may still be sensitive. The scriptless HTML view can be reconstructed offline; oversized detail views are omitted with a visible notice, while the bounded JSON evidence remains.
 
@@ -34,3 +34,19 @@ Shared admission limits: 16 batches, 10,000 files, 20,000 input entries, 16 MiB/
 Package verification checks internal structure, counts, file/report digest bindings and comparison consistency. An expected package SHA-256 binds exact bytes; supplying the original contract also verifies its exact bytes and declaration scope. Optional `--plan` checks exact plan bytes without reading source data; a source-path mapping change also invalidates prior-plan reuse. These checks do not authenticate authorship, fetch cited sources, rerun original business data, or establish production acceptance. A self-consistent replacement package can be written by anyone; keep the digest through an independent trusted channel.
 
 The design independently applies declared validation batches and retained validation results described by [Great Expectations Checkpoints](https://docs.greatexpectations.io/docs/reference/api/checkpoint_class/) and [Frictionless validation](https://framework.frictionlessdata.io/docs/guides/validating-data). No upstream code or runtime dependency is copied. This source change does not republish existing v0.3.0 downloads or npm releases.
+
+
+The workbench separates single-directory verification, batch acceptance and saved
+history. Switching tasks keeps the same form nodes and entered paths, without
+submitting a request or changing a repair approval. Reports remain associated
+with the task that produced them. Cancellation stays available across tasks;
+new verification hides the previous result until a fresh response arrives.
+
+Offline batch reports share the standalone artifact renderer and one style
+sheet. Each batch has its own section IDs and links; its check details are plain
+HTML under a disclosure, rather than another full document in a nested frame.
+The display still bounds each report and the combined HTML independently of
+JSON evidence. Scripts, source bodies and expected scalar values remain absent.
+The workbench retains its outer sandboxed report frame. These changes adapt
+Impeccable/Interface Design's task hierarchy and code-humanizer's reuse of proven
+rendering logic; no upstream runtime or global configuration is installed.
diff --git a/src/reporters/artifacts-html.ts b/src/reporters/artifacts-html.ts
index 90dddb5..4be246c 100644
--- a/src/reporters/artifacts-html.ts
+++ b/src/reporters/artifacts-html.ts
@@ -72,11 +72,11 @@ function reconciliationCard(check: ReconciliationSummary, rowBudget: { remaining
     </article>`;
 }
 
-function comparisonSection(report: ArtifactReport): string {
+function comparisonSection(report: ArtifactReport, scope: (id: string) => string): string {
   const value = report.comparison;
   if (!value) return "";
   const checks = value.checks ?? [];
-  return `<section id="comparison" aria-labelledby="comparison-title"><h2 id="comparison-title">Changes since baseline review</h2>
+  return `<section id="${scope("comparison")}" aria-labelledby="${scope("comparison-title")}"><h2 id="${scope("comparison-title")}">Changes since baseline review</h2>
     <p>Caller-supplied history is not authenticated. The current directory was inspected again; previous messages and record positions are not copied into this comparison.</p>
     <p>Previous result: <strong>${text(value.baseline_status)}</strong> · Current inspection: <strong>${text(value.current_status)}</strong></p>
     ${value.status === "unavailable" ? `<p class="notice">Comparison unavailable: ${text(value.reason)}. No improvement or resolution is established.</p>` : `<p>Finding categories: <strong>${text(value.findings?.added)}</strong> new · <strong>${text(value.findings?.ongoing)}</strong> ongoing · <strong>${text(value.findings?.resolved)}</strong> resolved. Categories use code, file and column, not record identities.</p>
@@ -87,10 +87,10 @@ function comparisonSection(report: ArtifactReport): string {
     <details><summary>Baseline report identity</summary><code>${text(value.baseline_report_sha256)}</code><p>SHA-256 binds the supplied JSON bytes; it does not establish their author or truth.</p></details></section>`;
 }
 
-function declarationSection(report: ArtifactReport): string {
+function declarationSection(report: ArtifactReport, scope: (id: string) => string): string {
   const value = report.declarations;
-  if (!value) return '<section id="declarations"><h2>Declared cross-file checks</h2><p>Declaration metadata is unavailable in this snapshot. Consult its original contract; no expectations are inferred.</p></section>';
-  return `<section id="declarations" aria-labelledby="declarations-title"><h2 id="declarations-title">Declared cross-file checks</h2>
+  if (!value) return `<section id="${scope('declarations')}"><h2>Declared cross-file checks</h2><p>Declaration metadata is unavailable in this snapshot. Consult its original contract; no expectations are inferred.</p></section>`;
+  return `<section id="${scope("declarations")}" aria-labelledby="${scope("declarations-title")}"><h2 id="${scope("declarations-title")}">Declared cross-file checks</h2>
     <p>These are declarations, not proof of a completed check. Per-file type, digest and scalar-value rules remain in the original contract; expected values and raw cells are omitted here.</p>
     <p>Limits: ${text(value.limits.max_files)} files · ${text(value.limits.max_file_bytes)} bytes per file · ${text(value.limits.max_total_bytes)} total bytes.</p>
     <p>Showing ${Math.min(128, value.checks.length)} of ${value.checks.length} declarations. Up to 8 mappings per declaration are shown; JSON retains the complete declared mappings.</p>
@@ -106,12 +106,14 @@ function declarationSection(report: ArtifactReport): string {
         source = check.source.path; target = check.target.path;
         fields = `Identity: <code>${columns(check.source.key)}</code> → <code>${columns(check.target.key)}</code><p>Integer value: <code>${text(check.source.value)}</code> → <code>${text(check.target.value)}</code></p>`;
       }
-      return `<article class="check" id="declared-check-${text(ordinal)}"><h3>Declaration ${text(ordinal)} · <code>${text(check.type)}</code></h3><p>Source: <code>${text(source)}</code> → Target: <code>${text(target)}</code></p>${fields}</article>`;
+      return `<article class="check" id="${text(scope("declared-check-" + ordinal))}"><h3>Declaration ${text(ordinal)} · <code>${text(check.type)}</code></h3><p>Source: <code>${text(source)}</code> → Target: <code>${text(target)}</code></p>${fields}</article>`;
     }).join("") || '<p>No cross-file check was declared. Consult the original contract for file-level requirements.</p>'}</section>`;
 }
 
 /** Use the same path policy as text/JSON, including when called directly. */
-export function renderArtifactsHtml(rawReport: ArtifactReport): string {
+function renderArtifactsContent(rawReport: ArtifactReport, prefix: string, heading: "h1" | "h2"): string {
+  if (prefix && !/^[a-zA-Z][a-zA-Z0-9._-]*$/.test(prefix)) throw new Error("Invalid report section prefix");
+  const scope = (id: string) => prefix + id;
   const report = redactLocalPaths(rawReport);
   const checks = report.reconciliations ?? [];
   const incomplete = checks.filter(check => check.status === "unknown").length;
@@ -121,35 +123,41 @@ export function renderArtifactsHtml(rawReport: ArtifactReport): string {
     finding.code === "artifact.reference-value-mismatch" || finding.code === "artifact.reference-value-unavailable");
   const title = passed ? "Declared checks passed" : report.exitCode === 2 ? "Check setup required"
     : referenceOnly ? "Reference metadata needs review" : "Review required";
-  const csp = "default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'";
   const files = report.files.slice(0, FILE_DETAILS);
   // Failed and incomplete checks stay visible before successful checks.
   const ordered = [...checks.filter(check => check.status !== "passed"), ...checks.filter(check => check.status === "passed")];
   const rowBudget = { remaining: 64 };
   const referenceBudget = { remaining: REFERENCE_DETAILS };
   const referenceCount = report.findings.filter(finding => finding.reference).length;
-  return `<!doctype html>
-<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
-<meta http-equiv="Content-Security-Policy" content="${text(csp)}"><title>SkillSync delivery review — ${title}</title>
-<style>
-:root{color-scheme:light;font-family:system-ui,-apple-system,"Segoe UI",sans-serif;color:#182c35;background:#f3f6f8;line-height:1.55}*{box-sizing:border-box}body{margin:0}a{color:#075f70}.skip{position:absolute;top:-60px;left:16px;background:white;padding:12px}.skip:focus{top:12px;z-index:2}:focus-visible{outline:3px solid #207d94;outline-offset:4px}header,main,footer{max-width:1120px;margin:auto;padding:28px 24px}header{display:flex;flex-wrap:wrap;justify-content:space-between;gap:16px;border-bottom:1px solid #d6e0e5}.brand{font-weight:800;letter-spacing:-.04em;font-size:24px}.kicker{font-size:12px;letter-spacing:.14em;color:#526976;text-transform:uppercase}nav{display:flex;gap:18px;align-items:center;flex-wrap:wrap}main{padding-top:36px}h1{font-size:clamp(28px,4vw,46px);line-height:1.15;letter-spacing:-.04em;margin:10px 0 18px}h2{font-size:24px;margin:0 0 16px}h3{font-size:17px;margin:0}p{margin:10px 0;color:#49616e}.hero{padding:30px;border:1px solid #d8e3e8;border-radius:18px;background:white;border-top:5px solid #087566}.hero.fail{border-top-color:#b44838}.badge{display:inline-block;font-weight:700;font-size:12px;padding:5px 10px;border-radius:20px;background:#e9eff3;color:#334f60}.badge.pass{background:#dff3ec;color:#075f48}.badge.fail{background:#fbe8e3;color:#993c2d}.badge.unknown{background:#fff1d4;color:#745600}.binding{margin-top:18px;display:flex;gap:12px;flex-wrap:wrap;align-items:center}section{margin-top:36px}.check{background:white;padding:22px;border:1px solid #d7e2e7;border-radius:14px;margin:12px 0}.check-heading{display:flex;justify-content:space-between;gap:14px;align-items:center;flex-wrap:wrap}.sides{display:grid;grid-template-columns:1fr 1fr;gap:18px;margin:12px 0}.sides p{border-left:3px solid #c5d9e2;padding-left:14px}.sides span,.sides strong,.sides code,small{display:block}.sides span{font-size:12px;text-transform:uppercase;letter-spacing:.08em}code{font-family:ui-monospace,monospace;font-size:.9em;overflow-wrap:anywhere}.counts{display:flex;gap:20px;flex-wrap:wrap;margin:16px 0 0}.counts dt{color:#526976;font-size:12px}.counts dd{font-size:23px;font-weight:700;margin:3px 0;font-variant-numeric:tabular-nums}.notice{background:#fff7e5;padding:14px;border-radius:8px}.table-wrap{overflow:auto;border:1px solid #d7e2e7;border-radius:12px;background:white}table{border-collapse:collapse;width:100%;text-align:left}th,td{padding:14px 16px;border-bottom:1px solid #e3eaee;vertical-align:top;overflow-wrap:anywhere}th{background:#ecf2f5;font-size:12px;text-transform:uppercase;letter-spacing:.06em}td{max-width:340px}td p{margin:0 0 8px}small{color:#526976;font-size:12px;margin-top:5px}details{margin-top:16px;border:1px solid #d7e2e7;padding:16px;border-radius:10px;background:white}summary{cursor:pointer;font-weight:600;min-height:44px}dl.evidence{display:grid;grid-template-columns:180px 1fr;gap:8px}.evidence dd{margin:0;overflow-wrap:anywhere}footer{font-size:12px;color:#526976;border-top:1px solid #d7e2e7;margin-top:30px}footer code{display:block}@media(max-width:640px){header,main,footer{padding-left:16px;padding-right:16px}.hero{padding:20px}.sides{grid-template-columns:1fr}.check{padding:16px}dl.evidence{grid-template-columns:1fr;gap:4px}.evidence dd{margin-bottom:8px}th,td{padding:12px;min-width:110px}}@media print{body{background:white}header nav,.skip{display:none}main{padding-top:16px}.hero,.check,details{border-radius:0;break-inside:avoid}.table-wrap{overflow:visible}a{color:inherit}}
-
-.review-summary{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between;gap:18px;padding-top:18px;margin-top:18px;border-top:1px solid #d6e0e5}.review-summary p{margin:0;font-variant-numeric:tabular-nums}.review-link{display:inline-flex;align-items:center;min-height:44px;padding:8px 14px;background:#075f70;color:white;border-radius:6px;text-decoration:none;font-weight:650}.review-link:hover{background:#064956}.reference-location{border-top:1px solid #d6e0e5;margin-top:14px;padding-top:12px;font-size:14px}.reference-location strong,.reference-location span,.reference-location small{display:block}.reference-location ul{list-style:none;padding:0;margin:8px 0}.reference-location li{margin:5px 0}.reference-location code{overflow-wrap:anywhere}h2[tabindex="-1"]{scroll-margin-top:24px}h2[tabindex="-1"]:focus{outline:3px solid #207d94;outline-offset:5px}
-</style></head><body><a class="skip" href="#review">Skip to delivery review</a>
-<header><div><div class="brand">SkillSync</div><div class="kicker">Offline delivery review</div></div><nav aria-label="Report sections"><a href="#declarations">Declared checks</a><a href="#checks">Record checks</a><a href="#issues">Review actions</a><a href="#files">Files</a></nav></header>
-<main id="review"><div class="hero${passed ? "" : " fail"}"><span class="badge ${passed ? "pass" : "fail"}">${passed ? "Passed" : "Not accepted"}</span><h1>${title}</h1>
+  return `<div class="hero${passed ? "" : " fail"}"><span class="badge ${passed ? "pass" : "fail"}">${passed ? "Passed" : "Not accepted"}</span><${heading}${heading === "h2" ? ' class="artifact-outcome"' : ""}>${title}</${heading}>
 <p>${passed ? "Declared file checks passed. Business approval is separate." : "Review the findings below. Keep the original files."}</p>
 <div class="review-summary"><p><strong>${report.files.length}</strong> inspected ${report.files.length === 1 ? "file" : "files"} · <strong>${report.findings.length}</strong> reported ${report.findings.length === 1 ? "finding" : "findings"}${checks.length ? ` · ${failedChecks} failed and ${incomplete} incomplete allocation checks` : ""}</p>
-<a class="review-link" href="${report.findings.length ? "#issue-title" : "#file-title"}">${report.findings.length ? `Review ${report.findings.length} reported ${report.findings.length === 1 ? "finding" : "findings"}` : "Review inspected files"}</a></div>
+<a class="review-link" href="${report.findings.length ? "#" + scope("issue-title") : "#" + scope("file-title")}">${report.findings.length ? `Review ${report.findings.length} reported ${report.findings.length === 1 ? "finding" : "findings"}` : "Review inspected files"}</a></div>
 <div class="binding"><strong>Receipt / file binding</strong><span class="badge">${text(report.receipt_binding)}</span><small>Local hashes checked; author identity unverified.</small></div></div>
-${comparisonSection(report)}
-${declarationSection(report)}
-<section id="checks" aria-labelledby="check-title"><h2 id="check-title">Allocation and identity checks</h2><p>Showing ${Math.min(CHECK_DETAILS, checks.length)} of ${checks.length} reconciliation checks. Failed and incomplete checks appear first.</p>
+${comparisonSection(report, scope)}
+${declarationSection(report, scope)}
+<section id="${scope("checks")}" aria-labelledby="${scope("check-title")}"><h2 id="${scope("check-title")}">Allocation and identity checks</h2><p>Showing ${Math.min(CHECK_DETAILS, checks.length)} of ${checks.length} reconciliation checks. Failed and incomplete checks appear first.</p>
 ${ordered.slice(0, CHECK_DETAILS).map(check => reconciliationCard(check, rowBudget)).join("") || "<p>No record reconciliation was declared. Other declared file checks are reflected in the result.</p>"}</section>
-<section id="issues" aria-labelledby="issue-title"><h2 id="issue-title" tabindex="-1">Review actions</h2>${referenceCount > REFERENCE_DETAILS ? `<p>Reference locations: first ${REFERENCE_DETAILS} of ${referenceCount} reported findings shown. The JSON report retains all location metadata.</p>` : ""}${report.findings.length ? `<div class="table-wrap" tabindex="0" aria-label="Review findings table"><table><thead><tr><th>Finding</th><th>Affected metadata</th><th>Next review step</th></tr></thead><tbody>${report.findings.slice(0, 256).map(finding => findingRow(finding, referenceBudget)).join("")}</tbody></table></div>` : "<p>No findings in the declared scope.</p>"}</section>
-<section id="files" aria-labelledby="file-title"><h2 id="file-title" tabindex="-1">Observed files</h2><p>Showing ${files.length} of ${report.files.length} files. </p>
+<section id="${scope("issues")}" aria-labelledby="${scope("issue-title")}"><h2 id="${scope("issue-title")}" tabindex="-1">Review actions</h2>${referenceCount > REFERENCE_DETAILS ? `<p>Reference locations: first ${REFERENCE_DETAILS} of ${referenceCount} reported findings shown. The JSON report retains all location metadata.</p>` : ""}${report.findings.length ? `<div class="table-wrap" tabindex="0" aria-label="Review findings table"><table><thead><tr><th>Finding</th><th>Affected metadata</th><th>Next review step</th></tr></thead><tbody>${report.findings.slice(0, 256).map(finding => findingRow(finding, referenceBudget)).join("")}</tbody></table></div>` : "<p>No findings in the declared scope.</p>"}</section>
+<section id="${scope("files")}" aria-labelledby="${scope("file-title")}"><h2 id="${scope("file-title")}" tabindex="-1">Observed files</h2><p>Showing ${files.length} of ${report.files.length} files. </p>
 <div class="table-wrap" tabindex="0" aria-label="Observed file metadata table"><table><thead><tr><th>Declared path</th><th>Bytes</th><th>Rows</th><th>SHA-256</th></tr></thead><tbody>${files.map(file => `<tr><td><code>${text(file.path)}</code></td><td>${text(file.bytes)}</td><td>${text(file.rows)}</td><td><code>${text(file.sha256)}</code></td></tr>`).join("") || '<tr><td colspan="4">No accepted file observation is available.</td></tr>'}</tbody></table></div></section>
 <details><summary>Evidence boundaries and snapshot identity</summary><p>Local inspection only: no Skill execution, author authentication or business approval. Metadata values longer than 160 characters are shortened; JSON retains full metadata.</p>
-<dl class="evidence"><dt>Evidence</dt><dd>physical-files</dd><dt>Execution</dt><dd><code>execution: not-run</code></dd><dt>Provenance</dt><dd><code>provenance: not-authenticated</code></dd><dt>Contract SHA-256</dt><dd><code>${text(report.contract_sha256)}</code></dd><dt>Artifact set SHA-256</dt><dd><code>${text(report.artifact_set_sha256)}</code></dd></dl></details></main>
-<footer>SkillSync source ${text(VERSION)} · Standalone HTML, no scripts or external requests.<code>${text(report.schema)}</code></footer></body></html>\n`;
+<dl class="evidence"><dt>Evidence</dt><dd>physical-files</dd><dt>Execution</dt><dd><code>execution: not-run</code></dd><dt>Provenance</dt><dd><code>provenance: not-authenticated</code></dd><dt>Contract SHA-256</dt><dd><code>${text(report.contract_sha256)}</code></dd><dt>Artifact set SHA-256</dt><dd><code>${text(report.artifact_set_sha256)}</code></dd></dl></details>`;
+}
+
+export function renderArtifactsFragment(rawReport: ArtifactReport, prefix: string): string {
+  return renderArtifactsContent(rawReport, prefix, "h2");
+}
+
+export const artifactsReviewStyle = `:root{color-scheme:light;font-family:system-ui,-apple-system,"Segoe UI",sans-serif;color:#182c35;background:#f3f6f8;line-height:1.55}*{box-sizing:border-box}body{margin:0}a{color:#075f70}.skip{position:absolute;top:-60px;left:16px;background:white;padding:12px}.skip:focus{top:12px;z-index:2}:focus-visible{outline:3px solid #207d94;outline-offset:4px}header,main,footer{max-width:1120px;margin:auto;padding:28px 24px}header{display:flex;flex-wrap:wrap;justify-content:space-between;gap:16px;border-bottom:1px solid #d6e0e5}.brand{font-weight:800;letter-spacing:-.04em;font-size:24px}.kicker{font-size:12px;letter-spacing:.14em;color:#526976;text-transform:uppercase}nav{display:flex;gap:18px;align-items:center;flex-wrap:wrap}main{padding-top:36px}h1{font-size:30px;line-height:1.15;letter-spacing:-.04em;margin:10px 0 18px}h2{font-size:24px;margin:0 0 16px}h3{font-size:17px;margin:0}p{margin:10px 0;color:#49616e}.hero{padding:30px;border:1px solid #d8e3e8;border-radius:8px;background:white;border-top:5px solid #087566}.hero.fail{border-top-color:#b44838}.badge{display:inline-block;font-weight:700;font-size:12px;padding:5px 10px;border-radius:20px;background:#e9eff3;color:#334f60}.badge.pass{background:#dff3ec;color:#075f48}.badge.fail{background:#fbe8e3;color:#993c2d}.badge.unknown{background:#fff1d4;color:#745600}.binding{margin-top:18px;display:flex;gap:12px;flex-wrap:wrap;align-items:center}section{margin-top:36px}.check{background:white;padding:22px;border:1px solid #d7e2e7;border-radius:6px;margin:12px 0}.check-heading{display:flex;justify-content:space-between;gap:14px;align-items:center;flex-wrap:wrap}.sides{display:grid;grid-template-columns:1fr 1fr;gap:18px;margin:12px 0}.sides p{border-left:3px solid #c5d9e2;padding-left:14px}.sides span,.sides strong,.sides code,small{display:block}.sides span{font-size:12px;text-transform:uppercase;letter-spacing:.08em}code{font-family:ui-monospace,monospace;font-size:.9em;overflow-wrap:anywhere}.counts{display:flex;gap:20px;flex-wrap:wrap;margin:16px 0 0}.counts dt{color:#526976;font-size:12px}.counts dd{font-size:23px;font-weight:700;margin:3px 0;font-variant-numeric:tabular-nums}.notice{background:#fff7e5;padding:14px;border-radius:8px}.table-wrap{overflow:auto;border:1px solid #d7e2e7;border-radius:12px;background:white}table{border-collapse:collapse;width:100%;text-align:left}th,td{padding:14px 16px;border-bottom:1px solid #e3eaee;vertical-align:top;overflow-wrap:anywhere}th{background:#ecf2f5;font-size:12px;text-transform:uppercase;letter-spacing:.06em}td{max-width:340px}td p{margin:0 0 8px}small{color:#526976;font-size:12px;margin-top:5px}details{margin-top:16px;border:1px solid #d7e2e7;padding:16px;border-radius:10px;background:white}summary{cursor:pointer;font-weight:600;min-height:44px}dl.evidence{display:grid;grid-template-columns:180px 1fr;gap:8px}.evidence dd{margin:0;overflow-wrap:anywhere}footer{font-size:12px;color:#526976;border-top:1px solid #d7e2e7;margin-top:30px}footer code{display:block}@media(max-width:640px){header,main,footer{padding-left:16px;padding-right:16px}.hero{padding:20px}.sides{grid-template-columns:1fr}.check{padding:16px}dl.evidence{grid-template-columns:1fr;gap:4px}.evidence dd{margin-bottom:8px}th,td{padding:12px;min-width:110px}}@media print{body{background:white}header nav,.skip{display:none}main{padding-top:16px}.hero,.check,details{border-radius:0;break-inside:avoid}.table-wrap{overflow:visible}a{color:inherit}}
+
+.review-summary{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between;gap:18px;padding-top:18px;margin-top:18px;border-top:1px solid #d6e0e5}.review-summary p{margin:0;font-variant-numeric:tabular-nums}.review-link{display:inline-flex;align-items:center;min-height:44px;padding:8px 14px;background:#075f70;color:white;border-radius:6px;text-decoration:none;font-weight:650}.review-link:hover{background:#064956}.reference-location{border-top:1px solid #d6e0e5;margin-top:14px;padding-top:12px;font-size:14px}.reference-location strong,.reference-location span,.reference-location small{display:block}.reference-location ul{list-style:none;padding:0;margin:8px 0}.reference-location li{margin:5px 0}.reference-location code{overflow-wrap:anywhere}h2[tabindex="-1"]{scroll-margin-top:24px}h2[tabindex="-1"]:focus{outline:3px solid #207d94;outline-offset:5px}
+
+.artifact-outcome{font-size:26px;line-height:1.2;letter-spacing:-.02em;margin:10px 0 18px}
+`;
+
+export function renderArtifactsHtml(rawReport: ArtifactReport): string {
+  const body = renderArtifactsContent(rawReport, "", "h1");
+  const csp = "default-src 'none'; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'";
+  return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta http-equiv="Content-Security-Policy" content="${text(csp)}"><title>SkillSync delivery review</title><style>${artifactsReviewStyle}</style></head><body><a class="skip" href="#review">Skip to delivery review</a><header><div><div class="brand">SkillSync</div><div class="kicker">Offline delivery review</div></div><nav aria-label="Report sections"><a href="#declarations">Declared checks</a><a href="#checks">Record checks</a><a href="#issues">Review actions</a><a href="#files">Files</a></nav></header><main id="review" tabindex="-1">${body}</main><footer>SkillSync source ${text(VERSION)} · Standalone HTML, no scripts or external requests.<code>${text(rawReport.schema)}</code></footer></body></html>\n`;
 }
diff --git a/src/reporters/batch-html.ts b/src/reporters/batch-html.ts
index 7f12c54..ff9e790 100644
--- a/src/reporters/batch-html.ts
+++ b/src/reporters/batch-html.ts
@@ -1,5 +1,5 @@
 import {type BatchReport,canonicalJson,validateBatchReport} from "../domain/batch-report.js";
-import {renderArtifactsHtml} from "./artifacts-html.js";
+import {artifactsReviewStyle,renderArtifactsFragment} from "./artifacts-html.js";
 
 const escape=(value:unknown)=>String(value).replace(/[&<>"']/g,char=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[char]!));
 const HTML_LIMIT=7*1024*1024;
@@ -10,13 +10,14 @@ export function renderBatchHtml(input:BatchReport):string {
  const sections=report.batches.map(item=>{
   let detail='<p>Full bounded evidence remains in the JSON review package. This report is above the offline detail display budget.</p>';
   if(Buffer.byteLength(canonicalJson(item.report))<=256*1024){
-   const rendered=renderArtifactsHtml(item.report),size=Buffer.byteLength(rendered);
-   if(size<=512*1024&&used+size*6<5*1024*1024){used+=size*6;detail=`<details><summary>Inspect declared checks and affected records</summary><iframe title="${escape(item.id)} artifact evidence" sandbox="" loading="lazy" srcdoc="${escape(rendered)}"></iframe></details>`;}
+   const rendered=renderArtifactsFragment(item.report, 'batch-'+item.id+'-'),size=Buffer.byteLength(rendered);
+   if(size<=512*1024&&used+size<5*1024*1024){used+=size;detail=`<details><summary>Inspect declared checks and affected records</summary><div class="artifact-review">${rendered}</div></details>`;}
   }
   const comparison=item.comparison?.status==='compared'?`<p>Compared with the retained prior report: ${item.comparison.findings!.added} new, ${item.comparison.findings!.ongoing} ongoing, ${item.comparison.findings!.resolved} resolved finding categories.</p>`:item.comparison?`<p>Comparison unavailable: ${escape(item.comparison.reason)}. No improvement is inferred from incomplete evidence.</p>`:'';
   return `<section id="batch-${escape(item.id)}"><h2>${escape(item.id)} · ${escape(item.status)}</h2><p>${item.mode==='reused'?'Recorded reuse of unchanged passed inputs.':'Recorded inspection of the selected inputs.'} ${item.source_files} files · ${item.source_bytes} bytes.</p>${comparison}<details><summary>Evidence bindings</summary><p>Input snapshot: <code>${escape(item.source_sha256??'unavailable')}</code></p><p>Report: <code>${item.report_sha256}</code></p></details>${detail}</section>`;
  }).join('');
- const html=`<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; frame-src about: 'self'; base-uri 'none'; form-action 'none'"><title>SkillSync Batch acceptance</title><style>:root{--bg:#f1f5fa;--surface:#fff;--text:#17283e;--muted:#50667d;--line:#cbd8e6;--accent:#2055a0}*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:15px/1.6 system-ui,sans-serif}main{max-width:1100px;margin:auto;padding:28px 20px}h1{font-size:28px}h2{font-size:20px}section,.summary{background:var(--surface);border:1px solid var(--line);border-radius:12px;padding:20px;margin:20px 0}p{overflow-wrap:anywhere}code{font-size:12px;overflow-wrap:anywhere}a{color:var(--accent)}table{width:100%;border-collapse:collapse}th,td{text-align:left;padding:12px;border-bottom:1px solid var(--line);overflow-wrap:anywhere}iframe{width:100%;height:640px;border:1px solid var(--line);margin-top:12px}summary{cursor:pointer}small{color:var(--muted)}@media(max-width:600px){main{padding:16px 10px}section,.summary{padding:14px}th,td{padding:8px;font-size:12px}}</style><main><h1>Batch acceptance</h1><div class="summary"><p><strong>${escape(report.status)}</strong> · ${report.counts.passed} passed · ${report.counts.failed} failed · ${report.counts.incomplete} incomplete.</p><p>Review-package integrity is verified. Original data is not rechecked by opening this page; authors are not authenticated. Results describe the recorded contract and input snapshots.</p><p>${escape(report.createdAt)} · SkillSync ${escape(report.tool_version)} · read-only validation · no Skill execution.</p><p>Plan: <code>${report.declaration.plan_sha256}</code></p><p>Contract: <code>${report.declaration.contract_sha256}</code></p></div><table aria-label="Batch acceptance results"><thead><tr><th>Batch</th><th>Outcome</th><th>Evidence source</th><th>Findings</th></tr></thead><tbody>${rows}</tbody></table>${sections}<p><small>Raw data rows, original absolute paths and scalar expected values are omitted. User-defined batch IDs, relative file names, column/check declarations and record coordinates may still be sensitive. Hashes establish integrity bindings, not trusted authorship or scientific/production acceptance. Detail display has an independent capacity budget.</small></p></main></html>`;
+ const html=`<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; frame-src about: 'self'; base-uri 'none'; form-action 'none'"><title>SkillSync Batch acceptance</title><style>${artifactsReviewStyle}
+:root{--bg:#f1f5fa;--surface:#fff;--text:#17283e;--muted:#50667d;--line:#cbd8e6;--accent:#2055a0}*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:15px/1.6 system-ui,sans-serif}main{max-width:1100px;margin:auto;padding:28px 20px}h1{font-size:28px}h2{font-size:20px}section,.summary{background:var(--surface);border:1px solid var(--line);border-radius:12px;padding:20px;margin:20px 0}p{overflow-wrap:anywhere}code{font-size:12px;overflow-wrap:anywhere}a{color:var(--accent)}table{width:100%;border-collapse:collapse}th,td{text-align:left;padding:12px;border-bottom:1px solid var(--line);overflow-wrap:anywhere}.artifact-review>section{border:0;border-top:1px solid var(--line);border-radius:0;padding-inline:0}.artifact-review .hero{margin-top:16px}.artifact-review h2{scroll-margin-top:16px}summary{cursor:pointer}small{color:var(--muted)}@media(max-width:600px){main{padding:16px 10px}section,.summary{padding:14px}th,td{padding:8px;font-size:12px}}</style><main><h1>Batch acceptance</h1><div class="summary"><p><strong>${escape(report.status)}</strong> · ${report.counts.passed} passed · ${report.counts.failed} failed · ${report.counts.incomplete} incomplete.</p><p>Review-package integrity is verified. Original data is not rechecked by opening this page; authors are not authenticated. Results describe the recorded contract and input snapshots.</p><p>${escape(report.createdAt)} · SkillSync ${escape(report.tool_version)} · read-only validation · no Skill execution.</p><p>Plan: <code>${report.declaration.plan_sha256}</code></p><p>Contract: <code>${report.declaration.contract_sha256}</code></p></div><table aria-label="Batch acceptance results"><thead><tr><th>Batch</th><th>Outcome</th><th>Evidence source</th><th>Findings</th></tr></thead><tbody>${rows}</tbody></table>${sections}<p><small>Raw data rows, original absolute paths and scalar expected values are omitted. User-defined batch IDs, relative file names, column/check declarations and record coordinates may still be sensitive. Hashes establish integrity bindings, not trusted authorship or scientific/production acceptance. Detail display has an independent capacity budget.</small></p></main></html>`;
  if(Buffer.byteLength(html)>HTML_LIMIT)throw new Error('Offline batch display exceeds its capacity.');
  return html;
 }
diff --git a/src/workbench/page.ts b/src/workbench/page.ts
index f7b9b20..06d558d 100644
--- a/src/workbench/page.ts
+++ b/src/workbench/page.ts
@@ -1,20 +1,33 @@
 /** Static local UI. All evidence is inserted as text or in a scriptless report frame. */
 export function workbenchPage(nonce: string): string {
-  return `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="client" content="${nonce}"><title>SkillSync 核验台</title><link rel="stylesheet" href="/style.css"></head><body><main>
-<header><h1>SkillSync 核验台</h1></header>
-<section aria-labelledby="batch-title"><details><summary id="batch-title">多批次验收与离线复核包</summary><p>按计划只读核验多个交付；修正失败批次后保留已通过的证据。打开复核包只检查完整性，不重新核验原始数据或认证作者。</p><label for="batch-plan">验收计划文件</label><div class="row"><input id="batch-plan" autocomplete="off" placeholder="/project/acceptance-plan.json"><button id="choose-batch-plan" type="button">选择计划…</button></div><button id="batch-preview" type="button">预检验收计划</button><p id="batch-info" role="status"></p><label for="batch-output">新复核包文件</label><input id="batch-output" autocomplete="off"><label for="batch-previous">上次复核包（可选）</label><input id="batch-previous" autocomplete="off"><label><input id="batch-retry" type="checkbox">只重验失败或不完整批次，已通过输入必须保持不变</label><div class="row actions"><button id="batch-run" type="button" disabled>执行并生成复核包</button></div><label for="batch-package">打开已有复核包</label><div class="row"><input id="batch-package" autocomplete="off"><button id="choose-batch-package" type="button">选择复核包…</button></div><label for="batch-digest">预期 SHA-256（可选，来自独立可信来源）</label><input id="batch-digest" autocomplete="off" maxlength="64"><button id="batch-open" type="button">打开并复核完整性</button><p id="batch-receipt" role="status"></p></details></section>
-<section aria-labelledby="history-title"><details><summary id="history-title">历史核验</summary><p id="history-info" role="status"></p><div id="history-list"></div><div class="row actions"><button id="history-prev" type="button" disabled>上一页</button><button id="history-next" type="button" disabled>下一页</button><button id="history-refresh" type="button">刷新</button></div><p>选择历史记录作为基线，再核验当前文件。历史记录只读。</p></details></section>
-<section aria-labelledby="selection"><h2 id="selection">1. 选择目录</h2><label for="root">Skill 或交付目录</label><div class="row"><input id="root" placeholder="/path/to/skill…" autocomplete="off"><button id="choose" type="button">选择目录…</button></div><label for="kind">核验内容</label><select id="kind"><option value="skill">Skill 结构与兼容性</option><option value="artifacts">交付文件与验收清单</option></select><div id="contract-fields" hidden><label for="contract">验收清单路径（YAML / JSON）</label><div class="row"><input id="contract" autocomplete="off"><button id="choose-contract" type="button">选择清单…</button></div><label><input id="delivery" type="checkbox">按 SkillTape 交付清单核验（delivery.json）</label></div><div class="row actions"><button id="verify" type="button">核验目录</button><button id="cancel" type="button" disabled>取消核验</button></div></section>
-<p id="status" role="status" aria-live="polite">尚未核验</p><section id="result" hidden aria-labelledby="result-title"><h2 id="result-title">2. 核验结果</h2><p id="comparison" role="status"></p><button id="export-summary" type="button" disabled>导出摘要</button><iframe id="report" title="核验报告" sandbox=""></iframe><button id="plan" type="button">生成修复计划</button></section>
-<section id="fix" hidden aria-labelledby="fix-title"><h2 id="fix-title">3. 审阅修复计划</h2><pre id="changes"></pre><label><input id="confirm" type="checkbox">我已审阅，应用以上安全修复并保留备份</label><div class="row actions"><button id="apply" type="button" disabled>应用并备份</button><button id="reverify" type="button">重新核验</button></div><p id="receipt"></p></section><footer><p>只检查本机文件，不运行 Skill。</p><details><summary>报告保存位置</summary><p>报告、计划和回执保存在本机私有目录；历史功能启用前的文件仍保留。</p></details></footer></main><script src="/app.js"></script></body></html>`;
+  return `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="client" content="${nonce}"><title>SkillSync 核验台</title><link rel="stylesheet" href="/style.css"></head><body><a class="skip-link" href="#workspace">跳到当前操作</a><main id="workspace" tabindex="-1">
+<header><p class="product-name">SkillSync</p><h1>本机核验台</h1><p>选择要检查的目录或交付，核对证据后再决定下一步。</p></header>
+<nav class="task-nav" aria-label="核验任务"><button id="nav-single" type="button" aria-controls="task-single" aria-pressed="true">单目录核验</button><button id="nav-batch" type="button" aria-controls="task-batch" aria-pressed="false">多批次验收</button><button id="nav-history" type="button" aria-controls="task-history" aria-pressed="false">历史记录</button></nav>
+<section id="task-batch" hidden aria-labelledby="batch-title"><h2 id="batch-title" tabindex="-1">验收多个交付</h2><p class="task-steps">预检计划 → 逐批核验 → 保存复核包</p><p>按计划只读核验多个交付；修正失败批次后保留已通过的证据。打开复核包只检查完整性，不重新核验原始数据或认证作者。</p><label for="batch-plan">验收计划文件</label><div class="row"><input id="batch-plan" autocomplete="off" placeholder="/project/acceptance-plan.json"><button id="choose-batch-plan" type="button">选择计划…</button></div><button id="batch-preview" type="button">预检验收计划</button><p id="batch-info" role="status"></p><label for="batch-output">新复核包文件</label><input id="batch-output" autocomplete="off"><label for="batch-previous">上次复核包（可选）</label><input id="batch-previous" autocomplete="off"><label><input id="batch-retry" type="checkbox">只重验失败或不完整批次，已通过输入必须保持不变</label><div class="row actions"><button class="primary" id="batch-run" type="button" disabled>执行并生成复核包</button></div><hr><h3>查阅已保存的复核包</h3><p>此操作只读取已有证据，不重新核验原始文件。</p><label for="batch-package">复核包路径</label><div class="row"><input id="batch-package" autocomplete="off"><button id="choose-batch-package" type="button">选择复核包…</button></div><label for="batch-digest">预期 SHA-256（可选，来自独立可信来源）</label><input id="batch-digest" autocomplete="off" maxlength="64"><button id="batch-open" type="button">打开并复核完整性</button><p id="batch-receipt" role="status"></p></section>
+<section id="task-history" hidden aria-labelledby="history-title"><h2 id="history-title" tabindex="-1">查看已存证据</h2><p id="history-info" role="status"></p><div id="history-list"></div><div class="row actions"><button id="history-prev" type="button" disabled>上一页</button><button id="history-next" type="button" disabled>下一页</button><button id="history-refresh" type="button">刷新</button></div><p>选择历史记录作为基线，再核验当前文件。历史记录只读，打开不会重新执行核验或授予修复权限。</p></section>
+<section id="task-single" aria-labelledby="selection"><h2 id="selection" tabindex="-1">核验一个目录</h2><p class="task-steps">选择目录与范围 → 核验 → 查看结果</p><label for="root">Skill 或交付目录</label><div class="row"><input id="root" placeholder="/path/to/skill…" autocomplete="off"><button id="choose" type="button">选择目录…</button></div><label for="kind">核验内容</label><select id="kind"><option value="skill">Skill 结构与兼容性</option><option value="artifacts">交付文件与验收清单</option></select><div id="contract-fields" hidden><label for="contract">验收清单路径（YAML / JSON）</label><div class="row"><input id="contract" autocomplete="off"><button id="choose-contract" type="button">选择清单…</button></div><label><input id="delivery" type="checkbox">按 SkillTape 交付清单核验（delivery.json）</label></div><div class="row actions"><button class="primary" id="verify" type="button">核验目录</button></div></section>
+<div class="operation-status"><p id="status" role="status" aria-live="polite">尚未核验</p><button id="cancel" type="button" disabled>取消当前核验</button></div><section id="result" hidden aria-labelledby="result-title"><h2 id="result-title" tabindex="-1">核验结果与证据</h2><p id="comparison" role="status"></p><button id="export-summary" type="button" disabled>导出摘要</button><iframe id="report" title="核验报告" sandbox=""></iframe><button id="plan" type="button">生成修复计划</button></section>
+<section id="fix" hidden aria-labelledby="fix-title"><h2 id="fix-title" tabindex="-1">审阅修复计划</h2><pre id="changes"></pre><label><input id="confirm" type="checkbox">我已审阅，应用以上安全修复并保留备份</label><div class="row actions"><button id="apply" type="button" disabled>应用并备份</button><button id="reverify" type="button">重新核验</button></div><p id="receipt"></p></section><footer><p>只检查本机文件，不运行 Skill。</p><details><summary>报告保存位置</summary><p>报告、计划和回执保存在本机私有目录；历史功能启用前的文件仍保留。</p></details></footer></main><script src="/app.js"></script></body></html>`;
 }
 
-export const workbenchStyle = `:root{font:16px/1.6 system-ui;color:#19343c;background:#f3f6f6}*{box-sizing:border-box}main{max-width:1040px;margin:auto;padding:32px 20px}header{margin-bottom:28px}h1{margin:8px 0;font-size:36px}h2{font-size:20px}section{padding:20px;background:white;border:1px solid #c8d8dc;border-radius:8px;margin:20px 0}label{display:block;margin:12px 0 6px}input:not([type=checkbox]),select{font:inherit;min-height:44px;padding:8px;width:100%;border:1px solid #829fa7;border-radius:4px}input[type=checkbox]{width:24px;height:24px;vertical-align:middle;margin-right:8px}label:has(input[type=checkbox]){min-height:44px;display:flex;align-items:center}button{font:inherit;min-height:44px;padding:8px 18px;border:1px solid #6f939d;border-radius:4px;color:#19343c;background:#edf5f6;cursor:pointer}button:disabled{opacity:.55;cursor:default}.row{display:flex;gap:12px;align-items:center}.row input{flex:1;min-width:0}.row button{white-space:nowrap}.actions{flex-wrap:wrap;margin-top:18px}:focus-visible{outline:3px solid #087a91;outline-offset:3px}iframe{width:100%;height:580px;border:1px solid #c8d8dc;margin-bottom:16px}pre{white-space:pre-wrap;overflow-wrap:anywhere;font:14px/1.7 ui-monospace,monospace}#history-list p,#batch-receipt,#batch-info{overflow-wrap:anywhere}footer{font-size:13px;color:#496771}footer p{margin:8px 0}summary{cursor:pointer;min-height:44px;padding:8px 0}#status{padding:12px;border-left:3px solid #318496}[hidden]{display:none!important}@media(max-width:580px){.row{flex-wrap:wrap}.row input{flex-basis:100%}main{padding:16px}section{padding:16px}}`;
+export const workbenchStyle = `:root{font:16px/1.6 system-ui;color:#19343c;background:#f3f6f6}*{box-sizing:border-box}main{max-width:1040px;margin:auto;padding:32px 20px}header{margin-bottom:28px}h1{margin:8px 0;font-size:28px;line-height:1.2}h3{font-size:17px}.product-name{font-weight:750;letter-spacing:-.02em;margin:0}.task-nav{display:flex;flex-wrap:wrap;gap:8px;padding-bottom:16px;border-bottom:1px solid #c8d8dc}.task-nav button[aria-pressed=true]{color:white;background:#235661;border-color:#235661}.primary{color:white;background:#235661;border-color:#235661}.task-steps{color:#496771;font-size:14px}.skip-link{position:absolute;top:-100px;padding:12px;background:white;color:#19343c}.skip-link:focus{top:8px;z-index:10}h2[tabindex],main{scroll-margin-top:16px}h2[tabindex]:focus{outline:3px solid #087a91;outline-offset:5px}hr{border:0;border-top:1px solid #c8d8dc;margin:28px 0}h2{font-size:20px}section{padding:20px;background:white;border:1px solid #c8d8dc;border-radius:8px;margin:20px 0}label{display:block;margin:12px 0 6px}input:not([type=checkbox]),select{font:inherit;min-height:44px;padding:8px;width:100%;border:1px solid #829fa7;border-radius:4px}input[type=checkbox]{width:24px;height:24px;vertical-align:middle;margin-right:8px}label:has(input[type=checkbox]){min-height:44px;display:flex;align-items:center}button{font:inherit;min-height:44px;padding:8px 18px;border:1px solid #6f939d;border-radius:4px;color:#19343c;background:#edf5f6;cursor:pointer}button:disabled{opacity:.55;cursor:default}.row{display:flex;gap:12px;align-items:center}.row input{flex:1;min-width:0}.row button{white-space:nowrap}.actions{flex-wrap:wrap;margin-top:18px}:focus-visible{outline:3px solid #087a91;outline-offset:3px}iframe{width:100%;height:580px;border:1px solid #c8d8dc;margin-bottom:16px}pre{white-space:pre-wrap;overflow-wrap:anywhere;font:14px/1.7 ui-monospace,monospace}#history-list p,#batch-receipt,#batch-info{overflow-wrap:anywhere}footer{font-size:13px;color:#496771}footer p{margin:8px 0}summary{cursor:pointer;min-height:44px;padding:8px 0}.operation-status{display:flex;align-items:center;justify-content:space-between;gap:12px}.operation-status button{flex-shrink:0}.operation-status p{overflow-wrap:anywhere}#status{padding:12px;border-left:3px solid #318496}[hidden]{display:none!important}@media(max-width:580px){.operation-status{align-items:flex-start;flex-direction:column}.row{flex-wrap:wrap}.row input{flex-basis:100%}main{padding:16px}section{padding:16px}}`;
 
 export const workbenchScript = `"use strict";
 const $ = id => document.getElementById(id);
 const nonce = document.querySelector('meta[name="client"]').content;
 let busy = false, planId = null, selected = null, baselineId = null, historyId = null, historyOffset = 0, historyTotal = 0, historyLoading = false, historyRefreshQueued = false, renderedHistory = null, batchReady=false;
+// Switching tasks hides existing controls; it never replaces form nodes or submits them.
+let activeTask='single', resultOwner='single', resultAvailable=false, fixAvailable=false;
+function syncWorkspace(){
+ for(const task of ['single','batch','history']){ $('task-'+task).hidden=task!==activeTask; $('nav-'+task).setAttribute('aria-pressed',String(task===activeTask)); }
+ $('result').hidden=!resultAvailable||resultOwner!==activeTask;
+ $('fix').hidden=!fixAvailable||activeTask!=='single';
+}
+function setTask(task){activeTask=task;syncWorkspace();if(!$('result').hidden&&reportHtml)mountReport();$(task==='single'?'selection':task==='batch'?'batch-title':'history-title').focus();}
+function revealResult(owner){resultOwner=owner;resultAvailable=true;syncWorkspace();if(activeTask===owner)$('result-title').focus();}
+function hideResult(){resultAvailable=false;syncWorkspace();}
+function setFix(visible){fixAvailable=visible;syncWorkspace();}
+for(const task of ['single','batch','history'])$('nav-'+task).onclick=()=>setTask(task);
 async function api(action, body = {}) {
  let response; try { response = await fetch('/api/' + action, {method:'POST',headers:{'Content-Type':'application/json','X-SkillSync-Client':nonce},body:JSON.stringify(body)}); }
  catch { throw new Error('无法连接本机服务，请确认核验台已启动后重试。'); }
@@ -22,20 +35,27 @@ async function api(action, body = {}) {
  if(response.status===403) throw new Error('核验台会话已失效，请重新打开页面后重试。');
  if(!response.ok) throw new Error(data.error || '请求未完成，请重试。'); return data;
 }
-function showReport(html){ $('report').srcdoc=html.replaceAll('href="#','href="about:srcdoc#'); }
+// Keep one bounded report string and one fresh opaque browsing context.
+let reportHtml='';
+function mountReport(){
+ const frame=document.createElement('iframe');frame.id='report';frame.title='核验报告';frame.setAttribute('sandbox','');
+ frame.srcdoc=reportHtml;$('report').replaceWith(frame);
+}
+function showReport(html){reportHtml=html.replaceAll('href="#','href="about:srcdoc#');if(!$('result').hidden)mountReport();}
+function clearReport(){reportHtml='';$('report').srcdoc='';}
 function status(text){ $('status').textContent = text; }
 function lock(value, applying = false){ busy=value; ['verify','plan','reverify','choose','choose-contract','root','contract','kind','delivery','history-refresh','batch-plan','batch-preview','batch-output','batch-previous','batch-retry','batch-package','batch-digest','batch-open','choose-batch-plan','choose-batch-package'].forEach(id => $(id).disabled=value); $('batch-run').disabled=value||!batchReady; document.querySelectorAll('.history-open').forEach(button=>button.disabled=value); $('history-prev').disabled=value||historyOffset===0; $('history-next').disabled=value||historyOffset+12>=historyTotal; $('export-summary').disabled=value||!historyId; $('cancel').disabled=!value || applying; $('apply').disabled=value || !$('confirm').checked || !planId; }
-function clearPlan(){planId=null;$('confirm').checked=false;$('fix').hidden=true;$('changes').textContent='';$('apply').disabled=true;}
-function invalidate(){ selected=null; planId=null; baselineId=null; historyId=null; $('comparison').textContent=''; $('export-summary').disabled=true; $('result').hidden=true; $('fix').hidden=true; $('confirm').checked=false; $('report').srcdoc=''; status('目录或模式已更改，请重新核验'); }
+function clearPlan(){planId=null;$('confirm').checked=false;setFix(false);$('changes').textContent='';$('apply').disabled=true;}
+function invalidate(){ selected=null; planId=null; baselineId=null; historyId=null; $('comparison').textContent=''; $('export-summary').disabled=true; hideResult(); setFix(false); $('confirm').checked=false; clearReport(); status('目录或模式已更改，请重新核验'); }
 ['root','contract','kind','delivery'].forEach(id => $(id).addEventListener('change', () => {invalidate(); $('contract-fields').hidden=$('kind').value!=='artifacts';}));
 for(const [button,field] of [['choose','root'],['choose-contract','contract']]) $(button).onclick=async()=>{ lock(true,true); status('请在系统窗口中选择；取消后也可直接填写完整路径。'); try { const data=await api('choose',{file:field==='contract'}); $(field).value=data.path; invalidate(); } catch(e){status(e.message);} finally{lock(false);} };
-async function verify(recheck=false){ clearPlan();selected=null;$('plan').hidden=true;lock(true); status(recheck?'正在重新核验…':'正在核验…'); try {
- if(!recheck){ await api('select',{path:$('root').value,kind:$('kind').value,contract:$('contract').value,delivery:$('delivery').checked,...(baselineId?{baselineId}:{})}); planId=null; $('fix').hidden=true; $('confirm').checked=false; }
- const data=await api('verify'); selected=true; historyId=data.historyId; baselineId=data.baselineId; planId=null; $('confirm').checked=false; $('fix').hidden=true; showComparison(data.comparison); await loadHistory(true); showReport(data.html); $('result').hidden=false; $('plan').hidden=$('kind').value!=='skill'; status((recheck?'重新核验完成':'核验完成')+' · '+data.status); if(recheck) $('receipt').textContent='最新核验：'+data.status;
+async function verify(recheck=false){ clearPlan();hideResult();clearReport();selected=null;$('plan').hidden=true;lock(true); status(recheck?'正在重新核验…':'正在核验…'); try {
+ if(!recheck){ await api('select',{path:$('root').value,kind:$('kind').value,contract:$('contract').value,delivery:$('delivery').checked,...(baselineId?{baselineId}:{})}); planId=null; setFix(false); $('confirm').checked=false; }
+ const data=await api('verify'); selected=true; historyId=data.historyId; baselineId=data.baselineId; planId=null; $('confirm').checked=false; setFix(false); showComparison(data.comparison); await loadHistory(true); revealResult('single'); showReport(data.html); $('plan').hidden=$('kind').value!=='skill'; status((recheck?'重新核验完成':'核验完成')+' · '+data.status); if(recheck) $('receipt').textContent='最新核验：'+data.status;
  }catch(e){status(e.message);}finally{lock(false);} }
 $('verify').onclick=()=>verify(); $('reverify').onclick=()=>verify(true);
 $('cancel').onclick=async()=>{try{await api('cancel');status('已请求取消，等待核验器退出…');}catch(e){status(e.message);}};
-$('plan').onclick=async()=>{if(!selected)return;clearPlan();lock(true);try{const data=await api('plan');planId=data.id; $('changes').textContent=data.description; $('fix').hidden=false; $('confirm').checked=false; $('receipt').textContent='确认应用后才会修改文件。'; status('计划已生成，请审阅'); await loadHistory(true);}catch(e){status(e.message);}finally{lock(false);}};
+$('plan').onclick=async()=>{if(!selected)return;clearPlan();lock(true);try{const data=await api('plan');planId=data.id; $('changes').textContent=data.description; setFix(true); $('confirm').checked=false; $('receipt').textContent='确认应用后才会修改文件。'; status('计划已生成，请审阅'); await loadHistory(true);}catch(e){status(e.message);}finally{lock(false);}};
 $('confirm').onchange=()=>{$('apply').disabled=busy||!$('confirm').checked||!planId;};
 $('apply').onclick=async()=>{lock(true,true);try{const data=await api('apply',{id:planId,confirm:$('confirm').checked}); planId=null; $('confirm').checked=false; $('receipt').textContent=data.message; status('已备份并应用，请重新核验'); await loadHistory(true);}catch(e){planId=null;$('confirm').checked=false;status(e.message+'；请重新核验当前目录');}finally{lock(false);}};
 function showComparison(value){ $('comparison').textContent=!value?'此次结果可作为后续复查基线。':value.status==='compared'?'与基线相比：新增 '+value.added+' · 仍然存在 '+value.ongoing+' · 证据变化 '+(value.changed||0)+' · 本次不再出现 '+value.resolved:'基线无法比较：范围已变化或证据不完整。'; }
@@ -47,7 +67,7 @@ async function loadHistory(newest=false){
  const signature=JSON.stringify(data.items); if(signature!==renderedHistory){ $('history-list').replaceChildren();
  for(const item of data.items){const row=document.createElement('p'), label=document.createElement('span'), button=document.createElement('button');
  label.textContent=new Date(item.createdAt).toLocaleString()+' · '+({verify:'核验',plan:'修复计划','apply-intent':'应用请求',apply:'应用回执'}[item.kind])+' · '+item.label+' '; button.type='button';button.className='history-open';button.textContent=item.kind==='verify'?'查看并设为基线':'查看'; button.disabled=busy;
- button.onclick=async()=>{lock(true,true);try{const data=await api('history/open',{id:item.id}); selected=null;planId=null;baselineId=data.baselineId||null;historyId=data.id;$('root').value=data.selection.path;$('kind').value=data.selection.kind;$('contract').value=data.selection.contract||'';$('delivery').checked=data.selection.delivery;$('contract-fields').hidden=data.selection.kind!=='artifacts';$('confirm').checked=false;$('fix').hidden=true;$('plan').hidden=true;showReport(data.html);$('result').hidden=false;showComparison(data.comparison);status('正在查看历史记录；点击“核验目录”检查当前文件。');}catch(e){status(e.message);}finally{lock(false);}};
+ button.onclick=async()=>{lock(true,true);try{const data=await api('history/open',{id:item.id}); selected=null;planId=null;baselineId=data.baselineId||null;historyId=data.id;$('root').value=data.selection.path;$('kind').value=data.selection.kind;$('contract').value=data.selection.contract||'';$('delivery').checked=data.selection.delivery;$('contract-fields').hidden=data.selection.kind!=='artifacts';$('confirm').checked=false;setFix(false);$('plan').hidden=true;revealResult('history');showReport(data.html);showComparison(data.comparison);status('正在查看历史记录；点击“核验目录”检查当前文件。');}catch(e){status(e.message);}finally{lock(false);}};
  row.append(label,button);$('history-list').append(row);}
  renderedHistory=signature; }
  $('history-info').textContent=data.total+' 条记录 · 保存文件 '+data.capacity.files+'/'+data.capacity.maxFiles+(data.unavailable?' · '+data.unavailable+' 条索引无法读取':'');
@@ -58,12 +78,13 @@ $('history-refresh').onclick=()=>loadHistory(true);
 $('history-prev').onclick=()=>{if(historyLoading)return;historyOffset=Math.max(0,historyOffset-12);loadHistory();};
 $('history-next').onclick=()=>{if(historyLoading)return;historyOffset+=12;loadHistory();};
 $('export-summary').onclick=async()=>{lock(true,true);try{const data=await api('history/export',{id:historyId});const url=URL.createObjectURL(new Blob([data.html],{type:'text/html;charset=utf-8'})),link=document.createElement('a');link.href=url;link.download='skillsync-comparison.html';link.click();setTimeout(()=>URL.revokeObjectURL(url),1000);}catch(e){status(e.message);}finally{lock(false);}};
-function clearBatchContext(){clearPlan();selected=null;historyId=null;baselineId=null;$('plan').hidden=true;$('fix').hidden=true;$('export-summary').disabled=true;$('comparison').textContent='';$('result').hidden=true;$('report').srcdoc='';}
+function clearBatchContext(){$('batch-receipt').textContent='';clearPlan();selected=null;historyId=null;baselineId=null;$('plan').hidden=true;setFix(false);$('export-summary').disabled=true;$('comparison').textContent='';hideResult();clearReport();}
 $('batch-plan').addEventListener('input',()=>{batchReady=false;$('batch-run').disabled=true;$('batch-info').textContent='计划已改变，请重新预检。';});
 for(const [button,field]of [['choose-batch-plan','batch-plan'],['choose-batch-package','batch-package']])$(button).onclick=async()=>{lock(true,true);try{const data=await api('choose',{file:true});$(field).value=data.path;if(field==='batch-plan'){batchReady=false;$('batch-info').textContent='请选择预检。';}}catch(e){status(e.message);}finally{lock(false);}};
 $('batch-preview').onclick=async()=>{clearBatchContext();batchReady=false;lock(true);status('正在预检多批次计划…');try{const data=await api('batch/preview',{path:$('batch-plan').value});batchReady=true;$('batch-output').value=data.suggestedOutput;$('batch-info').textContent=data.batches.map(item=>item.id+' · '+item.files+' 文件 / '+item.bytes+' 字节'+(item.available?'':' · 来源不可用')).join('；');status('计划预检完成，尚未生成复核包。');}catch(e){status(e.message);}finally{lock(false);}};
-function showBatch(data){showReport(data.html);$('result').hidden=false;$('plan').hidden=true;$('fix').hidden=true;const c=data.summary.counts;$('batch-receipt').textContent='复核包完整性已验证 · 通过 '+c.passed+' · 失败 '+c.failed+' · 不完整 '+c.incomplete+' · SHA-256 '+data.package_sha256;$('batch-digest').value=data.package_sha256;status('已读取有界验收证据；原始数据未在打开时重新核验，作者未认证。');}
+function showBatch(data){$('plan').hidden=true;setFix(false);const c=data.summary.counts;$('batch-receipt').textContent='复核包完整性已验证 · 通过 '+c.passed+' · 失败 '+c.failed+' · 不完整 '+c.incomplete+' · SHA-256 '+data.package_sha256;$('batch-digest').value=data.package_sha256;status('已读取有界验收证据；原始数据未在打开时重新核验，作者未认证。');revealResult('batch');showReport(data.html);}
 $('batch-run').onclick=async()=>{clearBatchContext();batchReady=false;lock(true);status('正在逐批核验并生成新复核包…');try{const data=await api('batch/run',{path:$('batch-plan').value,output:$('batch-output').value,previous:$('batch-previous').value,retryFailed:$('batch-retry').checked});$('batch-package').value=data.packagePath;showBatch(data);}catch(e){status(e.message);}finally{lock(false);}};
 $('batch-open').onclick=async()=>{clearBatchContext();batchReady=false;lock(true);status('正在复核已保存的包…');try{showBatch(await api('batch/open',{path:$('batch-package').value,expectSha256:$('batch-digest').value}));}catch(e){status(e.message);}finally{lock(false);}};
+syncWorkspace();
 loadHistory();
 `;
diff --git a/tests/reporters/artifacts-html.test.ts b/tests/reporters/artifacts-html.test.ts
index 1249534..0c70e75 100644
--- a/tests/reporters/artifacts-html.test.ts
+++ b/tests/reporters/artifacts-html.test.ts
@@ -1,5 +1,6 @@
 import { describe, expect, it } from "vitest";
 import { renderArtifacts, type ArtifactReport } from "../../src/cli/commands/artifacts.js";
+import { renderArtifactsFragment } from "../../src/reporters/artifacts-html.js";
 import { VERSION } from "../../src/version.js";
 
 function report(): ArtifactReport {
@@ -13,6 +14,13 @@ function report(): ArtifactReport {
 }
 
 describe("offline artifact acceptance HTML", () => {
+  it("isolates batch anchor namespaces and rejects attribute injection in a prefix", () => {
+    const html=renderArtifactsFragment(report(),"batch-north-");
+    expect(html).toContain('id="batch-north-issue-title"');
+    expect(html).toContain('href="#batch-north-file-title"');
+    expect(html).not.toMatch(/<!doctype|<style|<iframe|<script/i);
+    expect(()=>renderArtifactsFragment(report(),'bad" onclick="x')).toThrow("Invalid report section prefix");
+  });
   it("escapes and bounds declaration metadata with no scripts or external destinations", () => {
     const value = report();
     value.declarations = { limits: { max_files: 3, max_file_bytes: 4096, max_total_bytes: 8192 }, checks: Array.from({ length: 128 }, (_, index) => ({ ordinal: index + 1, check: { type: "csv_summary" as const, csv: "<script>SOURCE</script>", json: "/private/tmp/PRIVATE_DECLARATION", row_count_field: "rows", sums: Array.from({ length: 128 }, () => ({ column: "&".repeat(128), field: "&".repeat(128) })) } })) };
diff --git a/tests/workbench/batch.test.ts b/tests/workbench/batch.test.ts
index 535fbad..6e428f5 100644
--- a/tests/workbench/batch.test.ts
+++ b/tests/workbench/batch.test.ts
@@ -17,6 +17,10 @@ it('previews then creates and reopens a batch package without enabling Skill rep
  const post=async(action:string,body={})=>{const response=await fetch(app.url+'/api/'+action,{method:'POST',headers:{'Content-Type':'application/json','X-SkillSync-Client':nonce},body:JSON.stringify(body)});return {status:response.status,data:await response.json()};};
  const preview=await post('batch/preview',{path});expect(preview.status).toBe(200);expect(preview.data.batches).toHaveLength(2);
  const output=join(base,'first.json');const result=await post('batch/run',{path,output});expect(result.status).toBe(200);expect(result.data.summary.status).toBe('failed');expect(result.data.html).toContain('Batch acceptance');
+ expect(result.data.html).not.toMatch(/<iframe\b|srcdoc=/i);
+ expect((result.data.html.match(/<style>/g)||[]).length).toBe(1);
+ expect(result.data.html).toContain('id="batch-north-issues"');
+ expect(result.data.html).toContain('id="batch-south-issues"');
  const saved=await readFile(output);
  expect((await post('apply',{id:'old',confirm:true})).status).toBe(400);
  const reopened=await post('batch/open',{path:output,expectSha256:result.data.package_sha256});expect(reopened.status).toBe(200);expect(reopened.data.integrity).toBe('verified');
diff --git a/tests/workbench/page.test.ts b/tests/workbench/page.test.ts
index 98c964e..400bf55 100644
--- a/tests/workbench/page.test.ts
+++ b/tests/workbench/page.test.ts
@@ -8,7 +8,12 @@ class Element {
   children: Element[] = [];
   onclick?: () => Promise<void> | void;
   onchange?: () => void;
+  attributes = new Map<string,string>();
+  focused = false;
+  setAttribute(name: string, value: string) { this.attributes.set(name,value); }
+  focus() { this.focused = true; }
   addEventListener() {}
+  replaceWith(element: Element) { Object.assign(this, element); }
   replaceChildren() { this.children = []; }
   append(...elements: Element[]) { this.children.push(...elements); }
 }
@@ -49,6 +54,18 @@ async function page(failure?: "network" | "invalid-json" | "expired-session", de
 }
 
 describe("workbench interactions", () => {
+  it("switches task surfaces without submitting or losing entered paths and approved-plan state", async () => {
+    const ui = await page(); await ui.click("verify"); await ui.click("plan");
+    ui.get("root").value="/synthetic/kept"; ui.get("batch-plan").value="/synthetic/plan.json";
+    ui.get("confirm").checked=true;ui.get("confirm").onchange?.();
+    await ui.click("nav-batch");
+    expect(ui.get("task-single").hidden).toBe(true);expect(ui.get("task-batch").hidden).toBe(false);
+    expect(ui.get("fix").hidden).toBe(true);expect(ui.get("result").hidden).toBe(true);
+    await ui.click("nav-single");
+    expect(ui.get("root").value).toBe("/synthetic/kept");expect(ui.get("batch-plan").value).toBe("/synthetic/plan.json");
+    expect(ui.get("confirm").checked).toBe(true);expect(ui.get("fix").hidden).toBe(false);
+    expect(ui.get("selection").focused).toBe(true);expect(ui.get("nav-single").attributes.get("aria-pressed")).toBe("true");
+  });
   it.each([["reverify", "verify", "Synthetic verification failed"], ["reverify", "verify", "核验已取消"], ["plan", "plan", "Synthetic plan failed"]])("revokes the old plan when %s does not complete: %s", async (button, action, message) => {
     const ui = await page(); await ui.click("verify"); await ui.click("plan");
     ui.get("confirm").checked = true; ui.get("confirm").onchange?.();
@@ -57,6 +74,13 @@ describe("workbench interactions", () => {
     expect(ui.get("fix").hidden).toBe(true); expect(ui.get("confirm").checked).toBe(false);
     expect(ui.get("apply").disabled).toBe(true);
   });
+  it("hides stale evidence when a later verification fails", async () => {
+    const ui=await page();await ui.click("verify");
+    expect(ui.get("result").hidden).toBe(false);
+    ui.fail("verify","Synthetic verification failed");await ui.click("verify");
+    expect(ui.get("result").hidden).toBe(true);expect(ui.get("report").srcdoc).toBe("");
+    expect(ui.get("verify").disabled).toBe(false);
+  });
   it("refreshes the latest result even when the initial history read arrives later", async () => {
     const ui = await page(undefined, true);
     await ui.click("verify"); await ui.finishInitialHistory();