完善(08-09-deployment-contract-single-source-harness): 收敛部署合同并补失败路径

.trellis/tasks/08-09-deployment-contract-single-source-harness/task.json

@@ -0,0 +1,26 @@
+{
+  "id": "deployment-contract-single-source-harness",
+  "name": "deployment-contract-single-source-harness",
+  "title": "部署合同单一事实源与失败路径覆盖",
+  "description": "收敛 deploy.sh 与 production preflight 的候选构建身份合同，并以本地 fake SSH/Docker harness 覆盖历史失败路径；不连接或修改生产。",
+  "status": "in_progress",
+  "dev_type": null,
+  "scope": "deploy/trialrun/check-source-provenance.mjs, deploy.sh, production-preflight.mjs/remote helper, validate-env-contract.js and focused deployment safety tests",
+  "package": null,
+  "priority": "P2",
+  "creator": "shunli",
+  "assignee": "shunli",
+  "createdAt": "2026-08-09",
+  "completedAt": null,
+  "branch": null,
+  "base_branch": "main",
+  "worktree_path": null,
+  "commit": null,
+  "pr_url": null,
+  "subtasks": [],
+  "children": [],
+  "parent": null,
+  "relatedFiles": [],
+  "notes": "本地 tooling hardening 已实现并通过 31/31 focused tests、全部门禁与只读 reviewer 复核；未连接生产。低风险 residual：deploy.sh 整对象解析尚无完整 fake deployment 子进程。",
+  "meta": {}
+}