feat(deploy): 將 governance-service 納入 deploy 啟動

artifacts/spec-to-done/governance-service-deploy-state.md

@@ -0,0 +1,9 @@
+P0.ok | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=spec approved; linked worktree active; main workspace avoided
+P1.ok | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=deploy.ps1 impact LOW; PowerShell helper functions not indexed, fallback tests required
+P3.ok | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=implemented launcher/deploy/stop-all/tests; static test and deploy dry-run passed
+P4.ok | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=deploy -Build -SkipKit -SkipConversion -StrictPostVerify passed; governance/coordinator/proxy health probes 200; A1 Playwright 2 passed; screenshots artifacts/e2e/a1-m1-closeout-*.png
+P5.ok | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=adversarial reviewer Carson approved; blocking findings none
+P6.ready | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=user requested commit push PR; targeted static and dry-run checks passed; GitNexus detect_changes returned no changes despite dirty linked worktree
+P6.fix | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=PR #215 pr-review-agent failed missing_openspec; added active OpenSpec change governance-service-deploy and validate passed
+P6.ok | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=PR #215 CodeRabbit pass and pr-review-agent pass after OpenSpec blocker fix
+P7.done | spec=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\docs\superpowers\specs\2026-06-16-governance-service-deploy-design.md | slug=governance-service-deploy | userFacing=true | dateStamp=2026-06-16 | branch=docs/governance-service-deploy-spec | worktree=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec | planPath=C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec\artifacts\spec-to-done\governance-service-deploy\plan.md | diagnosis=authorized scope complete through PR checks; merge/closeout not performed because merge was not explicitly requested

artifacts/spec-to-done/governance-service-deploy/plan.md

@@ -0,0 +1,30 @@
+# spec-to-done Plan: governance-service-deploy
+
+## Inputs
+
+- Spec: `docs/superpowers/specs/2026-06-16-governance-service-deploy-design.md`
+- Implementation plan: `docs/superpowers/plans/2026-06-16-governance-service-deploy.md`
+- Worktree: `C:\Repos\active\iot\AI-BIM-governance\.worktrees\governance-service-deploy-spec`
+- Branch: `docs/governance-service-deploy-spec`
+- User-facing: true
+
+## Gate Summary
+
+- P0 args: OK.
+- Existing linked worktree: OK; not main workspace.
+- Spec approval: Approved by reviewer agent Planck, blocking findings none after third review.
+- GitNexus impact pre-scan:
+  - `scripts/deploy.ps1` file impact: LOW, no direct processes reported.
+  - `Start-HostNativeConversion` / `Start-HostNativeKit`: not indexed as symbols; fallback guard is focused static search and script tests.
+
+## Execution Strategy
+
+Implement sequentially in the existing worktree:
+
+1. Add `Start-HostNativeGovernance` to `scripts/lib/host-native-launcher.ps1`.
+2. Wire `scripts/deploy.ps1` parameters, runtime signature, dry-run audit fields, Phase 4a lifecycle, Docker env injection, and Phase 5 probes.
+3. Add governance to `scripts/stop-all.ps1`.
+4. Extend `scripts/tests/test-deploy-dryrun.ps1` and add `scripts/tests/test-deploy-governance-static.ps1`.
+5. Run focused syntax/static/dry-run validation.
+6. Attempt runtime smoke and browser evidence if local runtime permits; otherwise record HELD at P4 with exact blocker.
+

artifacts/spec-to-done/governance-service-deploy/tasks.md

@@ -0,0 +1,14 @@
+# spec-to-done Tasks: governance-service-deploy
+
+- [x] P0: Read skill, AGENTS, product/script contract, spec, implementation plan, and worktree status.
+- [x] P1: Confirm spec approved and aligned.
+- [x] P1: Run GitNexus impact pre-scan or documented fallback.
+- [x] P3: Add `Start-HostNativeGovernance`.
+- [x] P3: Wire governance into `deploy.ps1`.
+- [x] P3: Update `stop-all.ps1`.
+- [x] P3: Add/update tests.
+- [x] P3: Run syntax/static/dry-run validation.
+- [x] P4: Run backend stack preflight and runtime smoke.
+- [x] P4: Collect A1 browser evidence, or HELD if browser/runtime evidence is unavailable.
+- [x] P5: Run adversarial verification.
+- [x] P7: Final report.