From 0c83d1d69d99ed769ba175c5c5a9a3d1357aeb28 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:33:28 -0700
Subject: [PATCH 01/16] fix(p0): keep scope hard gates non-bypassable on bash

---
 skills/scripts/case-guard.sh | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/skills/scripts/case-guard.sh b/skills/scripts/case-guard.sh
index 8a6e050..b873b78 100755
--- a/skills/scripts/case-guard.sh
+++ b/skills/scripts/case-guard.sh
@@ -2,7 +2,7 @@
 # Lightweight scope gate before ACT. Exit 0=ok, 2=not ready, 1=usage/error.
 # Usage:
 #   bash skills/scripts/case-guard.sh --case-root work/my-case
-#   bash skills/scripts/case-guard.sh --case-root work/my-case --force
+#   bash skills/scripts/case-guard.sh --case-root work/my-case --force  # compatibility flag; never bypasses scope hard gates
 set -euo pipefail
 
 CASE_ROOT=""
@@ -120,9 +120,8 @@ echo "CASE-GUARD NOT READY: $CASE_ROOT"
 for i in "${ISSUES[@]}"; do echo " - $i"; done
 
 if [[ $FORCE -eq 1 ]]; then
-  echo "CASE-GUARD: --force set; continuing with warnings only."
-  exit 0
+  echo "CASE-GUARD: --force does not bypass scope hard gates."
 fi
 
-echo "Fix scope (or re-run case-init with --auth-granted --target-url ...) or pass --force."
+echo "Fix scope (or re-run case-init with --auth-granted --target-url ...)."
 exit 2

From d2445dc616f1810fcdc2c3c8617d366b9240e5a7 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:33:49 -0700
Subject: [PATCH 02/16] fix(p0): keep scope hard gates non-bypassable on
 powershell

---
 skills/scripts/case-guard.ps1 | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/skills/scripts/case-guard.ps1 b/skills/scripts/case-guard.ps1
index 8f2a91d..1002cc5 100644
--- a/skills/scripts/case-guard.ps1
+++ b/skills/scripts/case-guard.ps1
@@ -2,7 +2,7 @@
 # Lightweight scope gate before ACT. Exit 0 = ok, 2 = not ready, 1 = usage/error.
 # Usage:
 #   powershell -File skills/scripts/case-guard.ps1 -CaseRoot work\my-case
-#   powershell -File skills/scripts/case-guard.ps1 -CaseRoot work\my-case -Force   # warn but exit 0
+#   powershell -File skills/scripts/case-guard.ps1 -CaseRoot work\my-case -Force   # compatibility flag; never bypasses scope hard gates
 param(
     [Parameter(Mandatory = $true)]
     [string] $CaseRoot,
@@ -94,9 +94,8 @@ Write-Host ("CASE-GUARD NOT READY: {0}" -f $CaseRoot) -ForegroundColor Yellow
 foreach ($i in $issues) { Write-Host (" - {0}" -f $i) -ForegroundColor Yellow }
 
 if ($Force) {
-    Write-Host 'CASE-GUARD: -Force set; continuing with warnings only.' -ForegroundColor Yellow
-    exit 0
+    Write-Host 'CASE-GUARD: -Force does not bypass scope hard gates.' -ForegroundColor Yellow
 }
 
-Write-Host 'Fix scope (or re-run case-init -AuthGranted -TargetUrl ...) or pass -Force.' -ForegroundColor Yellow
+Write-Host 'Fix scope (or re-run case-init -AuthGranted -TargetUrl ...).' -ForegroundColor Yellow
 exit 2

From fb1124daf9c95932d6bb23730a813ee4e32eff0b Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:34:35 -0700
Subject: [PATCH 03/16] fix(p0): write bash cases under caller project root

---
 skills/scripts/case-init.sh | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/skills/scripts/case-init.sh b/skills/scripts/case-init.sh
index c3b4c6c..5c9958c 100755
--- a/skills/scripts/case-init.sh
+++ b/skills/scripts/case-init.sh
@@ -9,6 +9,8 @@ set -euo pipefail
 HINT=""
 CASE_NAME=""
 PACKAGE_ROOT=""
+PROJECT_ROOT=""
+PACKAGE_ROOT_BOUND=0
 AUTH_STATUS=""
 AUTH_GRANTED=0
 AUTH_BASIS="unknown"
@@ -23,7 +25,8 @@ while [[ $# -gt 0 ]]; do
   case "$1" in
     -Hint|--hint) HINT="${2:-}"; shift 2 ;;
     -CaseName|--case-name) CASE_NAME="${2:-}"; shift 2 ;;
-    -PackageRoot|--package-root) PACKAGE_ROOT="${2:-}"; shift 2 ;;
+    -PackageRoot|--package-root) PACKAGE_ROOT="${2:-}"; PACKAGE_ROOT_BOUND=1; shift 2 ;;
+    -ProjectRoot|--project-root) PROJECT_ROOT="${2:-}"; shift 2 ;;
     -AuthStatus|--auth-status) AUTH_STATUS="${2:-}"; shift 2 ;;
     -AuthGranted|--auth-granted) AUTH_GRANTED=1; shift ;;
     -AuthBasis|--auth-basis) AUTH_BASIS="${2:-}"; shift 2 ;;
@@ -46,6 +49,13 @@ SKILLS_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
 if [[ -z "$PACKAGE_ROOT" ]]; then
   PACKAGE_ROOT="$(cd "$SKILLS_ROOT/.." && pwd)"
 fi
+if [[ -z "$PROJECT_ROOT" ]]; then
+  if [[ $PACKAGE_ROOT_BOUND -eq 1 ]]; then
+    PROJECT_ROOT="$PACKAGE_ROOT"
+  else
+    PROJECT_ROOT="$(pwd -P)"
+  fi
+fi
 
 # Presets: reduce "AI refuses to work" friction for legitimate local/CTF work.
 case "$PRESET" in
@@ -104,7 +114,7 @@ if [[ -n "$NETWORK_PROFILE" ]]; then
   esac
 fi
 
-CASE_ROOT="$PACKAGE_ROOT/work/$CASE_NAME"
+CASE_ROOT="$PROJECT_ROOT/work/$CASE_NAME"
 mkdir -p "$CASE_ROOT/evidence" "$CASE_ROOT/notes" "$CASE_ROOT/report"
 
 auth_status_resolved="pending"
@@ -165,7 +175,7 @@ primary="reverse-engineering/SKILL.md"
 primary_id="R0"
 if [[ -f "$SCRIPT_DIR/master-route.sh" ]]; then
   set +e
-  bash "$SCRIPT_DIR/master-route.sh" --hint "$HINT" --out-dir "$ROUTE_TMP" >/dev/null 2>&1
+  bash "$SCRIPT_DIR/master-route.sh" --hint "$HINT" --project-root "$PROJECT_ROOT" --out-dir "$ROUTE_TMP" >/dev/null 2>&1
   set -e
   if [[ -f "$ROUTE_TMP/route-scope.md" ]]; then
     rt="$(cat "$ROUTE_TMP/route-scope.md")"
@@ -215,6 +225,7 @@ cat > "$CASE_ROOT/scope.md" <<EOF
 - case_id: $CASE_NAME
 - created: $created
 - operator: local
+- project_root: $PROJECT_ROOT
 - primary_skill: $primary
 - primary_id: $primary_id
 - lead_role: lead

From e29bba4b6be0f82b2cd565721fb9d9efafa038a8 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:35:27 -0700
Subject: [PATCH 04/16] fix(p0): align powershell offline sample case readiness

---
 skills/scripts/case-init.ps1 | 55 ++++++++++++++++++++++++++++++------
 1 file changed, 47 insertions(+), 8 deletions(-)

diff --git a/skills/scripts/case-init.ps1 b/skills/scripts/case-init.ps1
index a7695c3..b53a54b 100644
--- a/skills/scripts/case-init.ps1
+++ b/skills/scripts/case-init.ps1
@@ -4,6 +4,9 @@
 # Ready-to-act example:
 #   powershell -File skills/scripts/case-init.ps1 -Hint "web pentest" -CaseName my-case `
 #     -AuthGranted -TargetUrl "https://app.example/" -NetworkProfile authorized_target_only
+# Offline sample ready-to-act example:
+#   powershell -File skills/scripts/case-init.ps1 -Hint "offline apk" -CaseName my-sample `
+#     -Preset offline-sample -Sample ".\app.apk"
 param(
     [string] $Hint = '',
     [string] $CaseName = '',
@@ -15,6 +18,8 @@ param(
     [string] $AuthBasis = 'own_system',
     [string] $EvidenceOfAuth = '',
     [string] $TargetUrl = '',
+    [string] $Sample = '',
+    [string] $Preset = '',
     [string[]] $InScopeAssets = @(),
     [string] $NetworkProfile = '',
     [switch] $ReadyForAct
@@ -35,6 +40,32 @@ $requestedProjectRoot = if (-not [string]::IsNullOrWhiteSpace($ProjectRoot)) {
 }
 $projectRoot = Resolve-ReverseProjectRoot -RequestedRoot $requestedProjectRoot
 
+# Cross-platform case presets. Keep semantics aligned with case-init.sh.
+$presetNormalized = $Preset.Trim().ToLowerInvariant()
+if ($presetNormalized -in @('offline-sample', 'own-sample', 'local-sample')) {
+    $AuthGranted = $true
+    $AuthStatus = 'granted'
+    $AuthBasis = 'own_system'
+    if ([string]::IsNullOrWhiteSpace($NetworkProfile)) { $NetworkProfile = 'offline' }
+    if ([string]::IsNullOrWhiteSpace($EvidenceOfAuth)) {
+        $EvidenceOfAuth = 'preset:offline-sample (owner-operated local file)'
+    }
+} elseif ($presetNormalized -in @('ctf-public', 'ctf')) {
+    $AuthGranted = $true
+    $AuthStatus = 'granted'
+    $AuthBasis = 'ctf_public'
+    if ([string]::IsNullOrWhiteSpace($NetworkProfile)) { $NetworkProfile = 'authorized_target_only' }
+    if ([string]::IsNullOrWhiteSpace($EvidenceOfAuth)) { $EvidenceOfAuth = 'preset:ctf-public' }
+} elseif ($presetNormalized -in @('own-system', 'lab-only')) {
+    $AuthGranted = $true
+    $AuthStatus = 'granted'
+    $AuthBasis = 'own_system'
+    if ([string]::IsNullOrWhiteSpace($NetworkProfile)) { $NetworkProfile = 'lab_only' }
+    if ([string]::IsNullOrWhiteSpace($EvidenceOfAuth)) { $EvidenceOfAuth = 'preset:own-system/lab' }
+} elseif (-not [string]::IsNullOrWhiteSpace($Preset)) {
+    Write-Host ("WARN: unknown -Preset '{0}' (allowed: offline-sample|ctf-public|own-system)" -f $Preset) -ForegroundColor Yellow
+}
+
 if (-not $CaseName) {
     $slug = if ($Hint) {
         ($Hint.ToLowerInvariant() -replace '[^a-z0-9]+', '-').Trim('-')
@@ -90,6 +121,9 @@ $evidenceAuth = if (-not [string]::IsNullOrWhiteSpace($EvidenceOfAuth)) {
 
 $assets = New-Object System.Collections.Generic.List[string]
 if (-not [string]::IsNullOrWhiteSpace($TargetUrl)) { [void]$assets.Add($TargetUrl.Trim()) }
+if (-not [string]::IsNullOrWhiteSpace($Sample) -and -not $assets.Contains($Sample.Trim())) {
+    [void]$assets.Add($Sample.Trim())
+}
 foreach ($a in @($InScopeAssets)) {
     if (-not [string]::IsNullOrWhiteSpace($a) -and -not $assets.Contains($a.Trim())) {
         [void]$assets.Add($a.Trim())
@@ -103,8 +137,8 @@ if ($assets.Count -eq 0 -and $Hint -match 'https?://([^\s/]+)') {
 $networkMode = 'offline'
 if (-not [string]::IsNullOrWhiteSpace($NetworkProfile)) {
     $networkMode = $NetworkProfile.Trim()
-} elseif ($assets.Count -gt 0 -and $authStatusResolved -eq 'granted') {
-    # training labs / intentional vulns often use lab_only; default authorized_target_only
+} elseif ($assets.Count -gt 0 -and $authStatusResolved -eq 'granted' -and [string]::IsNullOrWhiteSpace($Sample)) {
+    # Authorized network targets default to target-only. Explicit local samples remain offline.
     $networkMode = 'authorized_target_only'
 }
 # normalize common aliases
@@ -122,19 +156,21 @@ if ($networkMode -notin $allowedNetworkModes) {
     throw "Invalid -NetworkProfile '$NetworkProfile'. Allowed: offline, lab_only, authorized_target_only, unrestricted_lab (aliases: lab, authorized, auth, offline_only)."
 }
 
-# ready_for_act requires auth granted + assets + non-offline network.
-# -ReadyForAct cannot skip auth (would bypass hard gate).
+# ready_for_act requires auth granted + assets. Network targets need a non-offline
+# profile; an explicit local sample is valid in offline mode. -ReadyForAct never
+# bypasses auth or scope.
 $ready = $false
 $netAllowsAct = ($networkMode -ne 'offline' -and -not [string]::IsNullOrWhiteSpace($networkMode))
-if ($authStatusResolved -eq 'granted' -and $assets.Count -gt 0 -and $netAllowsAct) {
+$offlineSampleReady = ($networkMode -eq 'offline' -and -not [string]::IsNullOrWhiteSpace($Sample) -and $assets.Count -gt 0)
+if ($authStatusResolved -eq 'granted' -and $assets.Count -gt 0 -and ($netAllowsAct -or $offlineSampleReady)) {
     $ready = $true
 } elseif ($ReadyForAct) {
     if ($authStatusResolved -ne 'granted') {
         Write-Host 'WARN: -ReadyForAct ignored because auth.status is not granted' -ForegroundColor Yellow
     } elseif ($assets.Count -eq 0) {
         Write-Host 'WARN: -ReadyForAct ignored because in_scope.assets is empty' -ForegroundColor Yellow
-    } elseif (-not $netAllowsAct) {
-        Write-Host 'WARN: -ReadyForAct ignored because network_profile is offline/empty' -ForegroundColor Yellow
+    } elseif (-not $netAllowsAct -and -not $offlineSampleReady) {
+        Write-Host 'WARN: -ReadyForAct ignored because offline mode requires an explicit -Sample' -ForegroundColor Yellow
     }
 }
 
@@ -193,6 +229,7 @@ $scope = @"
 - lead_role: lead
 - specialist_roles: []
 - hint: $Hint
+- preset: $(if ([string]::IsNullOrWhiteSpace($Preset)) { 'none' } else { $Preset })
 
 ## auth
 - status: $authStatusResolved
@@ -293,7 +330,9 @@ $readmeNext = if ($ready) {
 "@
 } else {
     @"
-1. Edit ``scope.md`` — set auth.status=granted and in_scope (or re-run with -AuthGranted -TargetUrl)
+1. Edit ``scope.md`` — set auth.status=granted and in_scope
+   - network target: re-run with ``-AuthGranted -TargetUrl <url>``
+   - local sample: re-run with ``-Preset offline-sample -Sample <path>``
 2. Set ready_for_act when checklist complete
 3. Open primary skill: skills/$primary
 4. Append ``timeline.md``; update ``workitems.md``

From 77e6be06a2035979bf94310d1972e00033d33def Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:36:49 -0700
Subject: [PATCH 05/16] docs(p0): make agent entry platform-native

---
 AGENTS.md | 37 ++++++++++++++++++++++---------------
 1 file changed, 22 insertions(+), 15 deletions(-)

diff --git a/AGENTS.md b/AGENTS.md
index 34447b3..9b9f9c9 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -6,37 +6,44 @@
 
 用户任务命中安全/逆向关键词时：
 
-1. `skills/MASTER-ROUTING.md` 或 `powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/master-route.ps1 -Hint "<任务>"` → PRIMARY
+1. `skills/MASTER-ROUTING.md` 或平台对应入口 → PRIMARY：
+   - Windows：`powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/master-route.ps1 -Hint "<任务>"`
+   - Linux / macOS / Kali：`bash skills/scripts/master-route.sh --hint "<任务>"`
 2. 歧义时读 `skills/routing.md` 全矩阵（三轴：目标类型 / 用户意图 / 工具链）
 3. 路由规则唯一事实源：`skills/config/routing.json`（改路由只改这里）
 
 ## 授权门禁（硬性）
 
-- 对任何目标动手前：`powershell -File skills/scripts/case-init.ps1 -Hint "<任务>"` 生成 `work/<case>/scope.md`
-- `auth.status=granted` + `network_profile` 就绪前**禁止 ACT**
+- 对任何目标动手前，按平台初始化当前分析项目的 `work/<case>/scope.md`：
+  - Windows：`powershell -File skills/scripts/case-init.ps1 -Hint "<任务>"`
+  - Linux / macOS / Kali：`bash skills/scripts/case-init.sh --hint "<任务>"`
+- 本地离线样本可使用 `offline-sample` preset；`auth.status=granted` + 明确 sample 才可进入 ACT。
+- `auth.status=granted` + 合法 `network_profile` / offline sample 就绪前**禁止 ACT**；`case-guard --force` / `-Force` 不得绕过这个硬门。
 - 证据链：`skills/ops/evidence-finding-path.md`；角色：`skills/ops/role-map.md`
 
 ## 首次运行
 
-`skills/tool-index.md` 是 gitignored 的生成文件，首次使用前运行：
+`skills/tool-index.md` 是 gitignored 的生成文件，首次使用前按平台运行：
 
-```powershell
-powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/refresh-tool-index.ps1
+```text
+Windows:           powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/refresh-tool-index.ps1
+Linux / macOS:     bash skills/scripts/refresh-tool-index.sh
+Kali:              bash kali/scripts/refresh-tool-index.sh
 ```
 
-缺工具 → `skills/scripts/bootstrap-reverse.ps1`（清单能力，禁止猜路径）。
+缺工具 → 使用同平台 bootstrap：Windows `skills/scripts/bootstrap-reverse.ps1`；Linux / macOS `skills/scripts/bootstrap-reverse.sh`；Kali `kali/scripts/bootstrap-reverse.sh`（清单能力，禁止猜路径）。
 
 ## 测试（改动后必跑）
 
-```powershell
-# 路由回归（162 用例，修改 routing.json 后必跑）
-powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/test-routing.ps1
+```text
+Windows / pwsh:
+  powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/test-routing.ps1   # 163 cases
+  powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/verify-routing-coherence.ps1
+  powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/smoke.ps1
 
-# 结构一致性 + 供应链 pin gate
-powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/verify-routing-coherence.ps1
-
-# 冒烟（verify + 脚本解析 + 快速路由）
-powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/smoke.ps1
+Linux / macOS routing parity:
+  bash skills/scripts/test-routing.sh
+  bash skills/scripts/test-bootstrap-manifest.sh
 ```
 
 ## 客户端边界

From d2e51449ef0bdb999d047e33529954ba6d936a7f Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:37:56 -0700
Subject: [PATCH 06/16] test(p0): cover fresh cross-platform case contract

---
 .github/workflows/ci.yml | 85 +++++++++++++++++++++++++++++++++++-----
 1 file changed, 75 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6ca6d51..464811a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -41,6 +41,37 @@ jobs:
         shell: powershell
         run: ./skills/scripts/test-bootstrap-supply-chain.ps1
 
+      - name: Offline sample case contract (Windows PowerShell 5.1)
+        if: runner.os == 'Windows'
+        shell: powershell
+        run: |
+          $scratch = Join-Path $env:RUNNER_TEMP ("reverse-skill-offline-" + [guid]::NewGuid().ToString('n'))
+          New-Item -ItemType Directory -Force -Path $scratch | Out-Null
+          $sample = Join-Path $scratch 'sample.apk'
+          Set-Content -Path $sample -Value 'fixture' -Encoding ASCII
+
+          ./skills/scripts/case-init.ps1 `
+            -Hint "offline apk" `
+            -CaseName "offline-sample" `
+            -ProjectRoot $scratch `
+            -Preset offline-sample `
+            -Sample $sample
+          $scope = Join-Path $scratch 'work/offline-sample/scope.md'
+          $raw = Get-Content $scope -Raw
+          if ($raw -notmatch '(?m)^- mode: offline$') { throw 'offline sample did not keep offline network mode' }
+          if ($raw -notmatch '(?m)^- ready_for_act: true$') { throw 'offline sample did not become ready_for_act' }
+          ./skills/scripts/case-guard.ps1 -CaseRoot (Join-Path $scratch 'work/offline-sample')
+
+          ./skills/scripts/case-init.ps1 `
+            -Hint "pending offline apk" `
+            -CaseName "force-auth" `
+            -ProjectRoot $scratch `
+            -Sample $sample
+          & powershell -NoProfile -ExecutionPolicy Bypass -File ./skills/scripts/case-guard.ps1 `
+            -CaseRoot (Join-Path $scratch 'work/force-auth') `
+            -Force
+          if ($LASTEXITCODE -eq 0) { throw '-Force bypassed auth.status hard gate' }
+
       - name: Smoke (verify + parse + quick route)
         shell: pwsh
         run: ./skills/scripts/smoke.ps1
@@ -86,6 +117,37 @@ jobs:
           scratch="$(mktemp -d)"
           trap 'rm -rf "$scratch"' EXIT
 
+          # Fresh Linux journey: no pwsh required, artifacts stay in caller project.
+          caller="$scratch/caller-project"
+          mkdir -p "$caller"
+          printf 'fixture' > "$scratch/sample.apk"
+          (
+            cd "$caller"
+            bash "$GITHUB_WORKSPACE/skills/scripts/master-route.sh" --hint "offline apk"
+            bash "$GITHUB_WORKSPACE/skills/scripts/case-init.sh" \
+              --hint "offline apk" \
+              --case-name "caller-default" \
+              --preset offline-sample \
+              --sample "$scratch/sample.apk"
+          )
+          test -f "$caller/work/caller-default/scope.md"
+          grep -Eq '^- project_root: .*/caller-project$' "$caller/work/caller-default/scope.md"
+          grep -Eq '^- mode: offline$' "$caller/work/caller-default/scope.md"
+          grep -Eq '^- ready_for_act: true$' "$caller/work/caller-default/scope.md"
+          bash skills/scripts/case-guard.sh --case-root "$caller/work/caller-default"
+          test ! -e "$GITHUB_WORKSPACE/work/caller-default"
+
+          # Compatibility: legacy --package-root still pins the work root.
+          bash skills/scripts/case-init.sh \
+            --hint "authorized web review" \
+            --case-name "network-default" \
+            --package-root "$scratch/project" \
+            --auth-granted \
+            --target-url "https://example.test/"
+          grep -Eq '^- mode: authorized_target_only$' "$scratch/project/work/network-default/scope.md"
+          grep -Eq '^- ready_for_act: true$' "$scratch/project/work/network-default/scope.md"
+          bash skills/scripts/case-guard.sh --case-root "$scratch/project/work/network-default"
+
           if bash skills/scripts/case-init.sh \
               --hint "offline apk" \
               --case-name "../case-escape" \
@@ -107,16 +169,6 @@ jobs:
             exit 1
           fi
 
-          bash skills/scripts/case-init.sh \
-            --hint "authorized web review" \
-            --case-name "network-default" \
-            --package-root "$scratch/project" \
-            --auth-granted \
-            --target-url "https://example.test/"
-          grep -Eq '^- mode: authorized_target_only$' "$scratch/project/work/network-default/scope.md"
-          grep -Eq '^- ready_for_act: true$' "$scratch/project/work/network-default/scope.md"
-          bash skills/scripts/case-guard.sh --case-root "$scratch/project/work/network-default"
-
           bash skills/scripts/case-init.sh \
             --hint "authorized web review" \
             --case-name "uppercase-network" \
@@ -143,6 +195,19 @@ jobs:
             exit 1
           fi
 
+          # --force is compatibility-only and must not bypass the hard auth gate.
+          (
+            cd "$caller"
+            bash "$GITHUB_WORKSPACE/skills/scripts/case-init.sh" \
+              --hint "pending offline apk" \
+              --case-name "force-auth" \
+              --sample "$scratch/sample.apk"
+          )
+          if bash skills/scripts/case-guard.sh --case-root "$caller/work/force-auth" --force; then
+            echo "case-guard --force bypassed auth.status hard gate" >&2
+            exit 1
+          fi
+
       - name: PowerShell syntax check (PSParser, all tracked .ps1)
         shell: pwsh
         run: |

From 0f39e89cea5791ac9f114799f886b7182ffb6a10 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:39:19 -0700
Subject: [PATCH 07/16] test(p0): assert Force cannot bypass scope gate

---
 skills/scripts/test-p0-friction.ps1 | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/skills/scripts/test-p0-friction.ps1 b/skills/scripts/test-p0-friction.ps1
index c22f9a5..96b542d 100644
--- a/skills/scripts/test-p0-friction.ps1
+++ b/skills/scripts/test-p0-friction.ps1
@@ -145,7 +145,7 @@ foreach ($zc in $zhCases) {
     else { Bad ("zh route miss {0}: {1}" -f $zc.Expect, ($raw.Substring(0, [Math]::Min(120, $raw.Length)))) }
 }
 
-# 9) case-guard: ready case exits 0; bare pending exits 2
+# 9) case-guard: ready case exits 0; bare pending exits 2 even with -Force
 $cg = Join-Path $scriptDir 'case-guard.ps1'
 & powershell -NoProfile -ExecutionPolicy Bypass -File $cg -CaseRoot $caseRoot 2>&1 | Out-Null
 if ($LASTEXITCODE -eq 0) { Ok 'case-guard ready exit 0' } else { Bad "case-guard ready exit $LASTEXITCODE" }
@@ -153,7 +153,7 @@ $bareRoot = Join-Path $PackageRoot ("work\{0}" -f $bareName)
 & powershell -NoProfile -ExecutionPolicy Bypass -File $cg -CaseRoot $bareRoot 2>&1 | Out-Null
 if ($LASTEXITCODE -eq 2) { Ok 'case-guard pending exit 2' } else { Bad "case-guard pending expected 2 got $LASTEXITCODE" }
 & powershell -NoProfile -ExecutionPolicy Bypass -File $cg -CaseRoot $bareRoot -Force 2>&1 | Out-Null
-if ($LASTEXITCODE -eq 0) { Ok 'case-guard -Force exit 0' } else { Bad "case-guard -Force exit $LASTEXITCODE" }
+if ($LASTEXITCODE -eq 2) { Ok 'case-guard -Force cannot bypass hard gate' } else { Bad "case-guard -Force expected 2 got $LASTEXITCODE" }
 
 # 10) AuthGranted must not be clobbered by junk AuthStatus / multi-asset lab init
 # Note: -ProjectRoot is passed explicitly to prevent the -InScopeAssets array
@@ -402,4 +402,4 @@ if ($fail.Count -gt 0) {
     exit 1
 }
 Write-Host 'OVERALL: ALL PASS' -ForegroundColor Green
-exit 0
+exit 0
\ No newline at end of file

From 58455eccd6bb9723a9de3ea4c98e7552de6d526c Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:39:46 -0700
Subject: [PATCH 08/16] docs(p0): document native case-init scope contract

---
 skills/ops/scope-contract.md | 28 ++++++++++++++++++++++++++--
 1 file changed, 26 insertions(+), 2 deletions(-)

diff --git a/skills/ops/scope-contract.md b/skills/ops/scope-contract.md
index ced078c..25fe1b5 100644
--- a/skills/ops/scope-contract.md
+++ b/skills/ops/scope-contract.md
@@ -1,17 +1,38 @@
 # 通用 Scope 契约（任务启动硬门槛）
 
-> **MUST**：任何安全/逆向/渗透任务在 **ACT 之前** 在用户项目或 `work/<case>/` 落地 `scope.md`。  
+> **MUST**：任何安全/逆向/渗透任务在 **ACT 之前** 在当前用户分析项目的 `work/<case>/` 落地 `scope.md`。  
 > 无 scope → 只允许读文档/路由，**禁止** 对目标主动扫描、Hook、利用。  
 > 模板可复制；字段名保持英文键，便于脚本校验。
 
 ## 如何初始化
 
+Windows：
+
 ```powershell
 powershell -NoProfile -ExecutionPolicy Bypass -File skills\scripts\case-init.ps1 -Hint "<任务一句话>" -CaseName "my-case"
 # 默认产出：当前分析项目的 work/<case>/scope.md 等
 # 从其他目录调用 skill 时显式指定：-ProjectRoot "C:\path\to\analysis-project"
+
+# 合法本地离线样本：auth granted + offline + explicit sample → ready_for_act=true
+powershell -NoProfile -ExecutionPolicy Bypass -File skills\scripts\case-init.ps1 `
+  -Hint "offline apk" -CaseName "my-sample" -Preset offline-sample -Sample ".\app.apk"
 ```
 
+Linux / macOS / Kali：
+
+```bash
+bash skills/scripts/case-init.sh --hint "<任务一句话>" --case-name "my-case"
+# 默认产出：caller 当前分析项目的 work/<case>/scope.md 等
+# 从其他目录调用时显式指定：--project-root "/path/to/analysis-project"
+
+# 合法本地离线样本
+bash skills/scripts/case-init.sh \
+  --hint "offline apk" --case-name "my-sample" \
+  --preset offline-sample --sample ./app.apk
+```
+
+`-PackageRoot` / `--package-root` 保留为兼容参数；新流程应以 `ProjectRoot` / `--project-root` 表示 case artifact 的归属项目。
+
 ## scope.md 完整模板
 
 ```markdown
@@ -21,6 +42,7 @@ powershell -NoProfile -ExecutionPolicy Bypass -File skills\scripts\case-init.ps1
 - case_id: {YYYYMMDD-short}
 - created: {ISO-8601}
 - operator: {name or local}
+- project_root: {caller analysis project}
 - primary_skill: {from master-route}
 - lead_role: lead   # see ops/role-map.md
 - specialist_roles: []  # e.g. cie, cpe, cre
@@ -73,11 +95,13 @@ powershell -NoProfile -ExecutionPolicy Bypass -File skills\scripts\case-init.ps1
 ```text
 RULES / MASTER-ROUTING / SKILL:
   1) master-route → PRIMARY
-  2) case-init 或手写 scope.md
+  2) 平台原生 case-init 或手写 scope.md
   3) auth 未 granted → STOP，只允许补授权材料
   4) ready_for_act = true → 打开 PRIMARY SKILL.md → ACT
 ```
 
+`case-guard -Force` / `case-guard --force` 是兼容参数，**不得**绕过 `auth.status`、合法 scope、network profile 或 `ready_for_act` 硬门。
+
 ## network_profile 速查
 
 | mode | 允许 | 禁止 |

From 843bf5d1e3ae8f742f4afae2c7acd5d4502c4b41 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:40:16 -0700
Subject: [PATCH 09/16] docs(p0): make primary route entry cross-platform

---
 skills/MASTER-ROUTING.md | 27 +++++++++++++++++++++++++--
 1 file changed, 25 insertions(+), 2 deletions(-)

diff --git a/skills/MASTER-ROUTING.md b/skills/MASTER-ROUTING.md
index a192071..8a45861 100644
--- a/skills/MASTER-ROUTING.md
+++ b/skills/MASTER-ROUTING.md
@@ -1,6 +1,6 @@
 # reverse-skill PRIMARY 快路径
 
-> 与 `scripts/master-route.ps1` 保持一致。
+> `scripts/master-route.ps1` 与 `scripts/master-route.sh` 必须保持相同路由契约；平台只改变执行入口，不改变 routing semantics。
 
 ## 执行契约
 
@@ -15,6 +15,8 @@
 8. 未命中 → 读 routing.md 全表或提议新 skill
 ```
 
+### Windows
+
 ```powershell
 powershell -File skills\scripts\master-route.ps1 -Hint "<用户任务>"
 # 默认写出当前项目的 work/master-route-<ts>/route-scope.md；从其他目录调用时显式指定项目根
@@ -24,15 +26,36 @@ powershell -File skills\scripts\case-init.ps1 -Hint "<用户任务>" -CaseName "
 powershell -File skills\scripts\case-init.ps1 -Hint "<用户任务>" -CaseName "my-case" -ProjectRoot "C:\path\to\analysis-project"
 # 一次成型可 ACT（授权 + 目标 + 网络档）：
 powershell -File skills\scripts\case-init.ps1 -Hint "<任务>" -CaseName "my-case" -AuthGranted -TargetUrl "https://target/" -NetworkProfile authorized_target_only
+# 本地离线样本：
+powershell -File skills\scripts\case-init.ps1 -Hint "offline apk" -CaseName "my-sample" -Preset offline-sample -Sample ".\app.apk"
 # 冒烟：verify + 脚本解析 + 路由矩阵（含中文 Hint）
 powershell -File skills\scripts\smoke.ps1
-# ACT 前轻量 scope 门禁（未就绪 exit 2；-Force 仅警告）
+# ACT 前轻量 scope 门禁（未就绪 exit 2；-Force 为兼容参数，不能绕过硬门）
 powershell -File skills\scripts\case-guard.ps1 -CaseRoot work\my-case
 # Evidence 追加
 powershell -File skills\scripts\append-evidence.ps1 -CaseRoot work\my-case -Id E-001 -Title "..." -ReproCommand "..."
 python3 skills/case-review/scripts/review_case.py work/<case> --verify-hashes --strict
 ```
 
+### Linux / macOS / Kali
+
+不要求为了核心 route/case 流程安装 PowerShell：
+
+```bash
+bash skills/scripts/master-route.sh --hint "<用户任务>"
+bash skills/scripts/master-route.sh --hint "<用户任务>" --project-root "/path/to/analysis-project"
+bash skills/scripts/case-init.sh --hint "<用户任务>" --case-name "my-case"
+bash skills/scripts/case-init.sh --hint "<用户任务>" --case-name "my-case" --project-root "/path/to/analysis-project"
+# 本地离线样本：
+bash skills/scripts/case-init.sh --hint "offline apk" --case-name "my-sample" --preset offline-sample --sample ./app.apk
+# ACT 前轻量 scope 门禁（--force 为兼容参数，不能绕过硬门）：
+bash skills/scripts/case-guard.sh --case-root work/my-sample
+# 路由 parity：
+bash skills/scripts/test-routing.sh
+bash skills/scripts/test-bootstrap-manifest.sh
+python3 skills/case-review/scripts/review_case.py work/<case> --verify-hashes --strict
+```
+
 ## 作战契约（ops）
 
 | 文档 | 用途 |

From 01cd654e813d8db5a3c5a5195e48732a4aea8db6 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:41:53 -0700
Subject: [PATCH 10/16] docs(p0): route canonical behavior through native
 platform entry

---
 RULES.md | 33 +++++++++++++++++----------------
 1 file changed, 17 insertions(+), 16 deletions(-)

diff --git a/RULES.md b/RULES.md
index 194a2a9..69c16b5 100644
--- a/RULES.md
+++ b/RULES.md
@@ -12,12 +12,14 @@
 
 After reading this file, you MUST NOW (immediately) execute:
 
-```
+```text
 0. NOW:  Read skills/field-journal/precedent-auth.md — Authorization pre-declaration (80 lines, MUST be first, before any safety review)
 1. NOW:  Detect this file's directory → this is the package root, remember the path
-2. NOW:  Read skills/tool-index.md — tools marked "yes" are ALREADY INSTALLED. Do NOT reinstall them. Only bootstrap tools marked "no" that are needed for the current task. If tool-index.md does NOT exist yet (first run), read skills/tool-index.md.template and run refresh-tool-index to generate it.
-3. NEXT: Read skills/MASTER-ROUTING.md (or run skills/scripts/master-route.ps1 -Hint "<task>") → PRIMARY; if ambiguous, open skills/routing.md full matrix
-4. NEXT: Initialize case scope (`skills/scripts/case-init.ps1` / `skills/ops/scope-contract.md`). MUST NOT ACT against targets until auth.status=granted and network_profile set
+2. NOW:  Read skills/tool-index.md — tools marked "yes" are ALREADY INSTALLED. Do NOT reinstall them. Only bootstrap tools marked "no" that are needed for the current task. If tool-index.md does NOT exist yet (first run), read skills/tool-index.md.template and run the platform-native refresh-tool-index to generate it.
+3. NEXT: Read skills/MASTER-ROUTING.md or use the platform-native router → PRIMARY; if ambiguous, open skills/routing.md full matrix
+   - Windows: powershell -File skills/scripts/master-route.ps1 -Hint "<task>"
+   - Linux/macOS/Kali: bash skills/scripts/master-route.sh --hint "<task>"
+4. NEXT: Initialize case scope with the platform-native case-init (`skills/scripts/case-init.ps1` on Windows, `skills/scripts/case-init.sh` on Linux/macOS/Kali) or `skills/ops/scope-contract.md`. MUST NOT ACT against targets until auth.status=granted and the network/offline-sample scope is ready. `-Force`/`--force` does not bypass this gate.
 5. ACT:  Open PRIMARY skill SKILL.md; use roles (`ops/role-map.md`), timeline/workitems, Evidence→Finding→Path (`ops/evidence-finding-path.md`). Identity: `ops/IDENTITY.md` (not a Z3r0 platform clone)
 
 > **Decision quality (Issue #77):** Follow skills/ops/analysis-decision-framework.md for hypothesis exits, validated sufficiency (R4*), grounded conclusions, and deadlock replan. Do **not** paste the full R1-R51 list into this file.
@@ -25,7 +27,7 @@ After reading this file, you MUST NOW (immediately) execute:
 IMPORTANT — Shared installation:
 - tool-index.md is the SINGLE SOURCE OF TRUTH for tool availability
 - If another CLI already installed tools (tool-index shows "yes"), DO NOT reinstall
-- Only run refresh-tool-index.ps1 if you suspect tool-index is stale (e.g., user says "I just installed X")
+- Only run the platform-native refresh-tool-index if you suspect tool-index is stale (e.g., user says "I just installed X")
 - Only run bootstrap for tools that are BOTH needed AND marked "no"
 
 Conditional reads (load only when needed, do NOT preload):
@@ -142,15 +144,15 @@ Read in order:
 
 ## Canonical Behavior Chain (All other files reference THIS version)
 
-```
+```text
 0. Read precedent-auth.md — Authorization pre-declaration (MUST be first, 80 lines)
 1. Identify task as security/reverse type → trigger this routing rule
 2. Detect package root path (derive from this file's location)
-3. MASTER-ROUTING.md or master-route.ps1 → PRIMARY; if ambiguous, routing.md full matrix
-4. case-init.ps1 / scope.md (ops/scope-contract) — auth.status=granted + network_profile before any target ACT
+3. MASTER-ROUTING.md or platform-native master-route (`.ps1` Windows / `.sh` Linux, macOS, Kali) → PRIMARY; if ambiguous, routing.md full matrix
+4. platform-native case-init / scope.md (ops/scope-contract) — auth.status=granted + valid network profile, or explicit authorized offline sample, before any target ACT; Force never bypasses the hard gate
 5. Assign roles (ops/role-map); open PRIMARY SKILL.md
 6. Route not matched → web search methodology → propose new skill
-7. Read tool-index.md → confirm local tool status. If missing (first run) → template + refresh-tool-index
+7. Read tool-index.md → confirm local tool status. If missing (first run) → template + platform-native refresh-tool-index
 8. Missing tools → platform bootstrap + refresh (Windows ps1 / Linux sh / Kali sh)
 9. Enter skill workflow → execute (timeline/workitems; Evidence→Finding→Path per ops/)
    — Hesitating about operation → read precedent-reverse.md or precedent-pentest.md
@@ -224,7 +226,6 @@ After task completion (vulnerability verified / reverse complete / flag captured
 | "IAT repair keeps failing; I'll grind more static unpackers" | **IAT repair iron rule:** try auto/semi-auto repair first; on tool error or unreable binary after repair, STOP static IAT, record E-iat-repair-fail, switch to dynamic API breakpoints. FORBIDDEN infinite static IAT thrash. |
 | "No import table (.NET) so the hard gate does not apply" | **Equivalent anchor still MUST:** .NET → dnSpy/IL/metadata summary into E-imports slot; DLL/SYS → E-exports alongside imports. FORBIDDEN to skip the gate. |
 
-
 ---
 
 ## Self-Audit Before Claiming "Complete"
@@ -270,7 +271,7 @@ Before saying "task complete" or "done", MUST self-check:
 ## Context Window Layout Rules (Attention Optimization)
 
 LLM attention distribution (high→low):
-```
+```text
 [First 10%]  ████████████ ← Highest attention — put "immediate action" instructions here
 [Middle 80%] ████░░░░░░░░ ← Attention decays — put reference materials here
 [Last 10%]   ████████████ ← Attention recovers — put "MUST NOT skip" and Checklist here
@@ -290,7 +291,7 @@ When tool parameters MUST be passed exactly as given, use opaque identifiers (co
 - **MUST NOT**: Let Agent freely rewrite semantic parameters (e.g., changing strict/deny to lenient synonyms)
 
 Example:
-```
+```text
 alpha -> --scope authorized-only
 beta  -> --approval required
 gamma -> --destructive false
@@ -382,18 +383,18 @@ bash <SKILL_ROOT>/kali/scripts/refresh-tool-index.sh
 
 ### Post-Trigger Execution (Compact — do NOT re-run first-time setup!)
 
-```
+```text
 0. NOW: Read <SKILL_ROOT>/skills/field-journal/precedent-auth.md
-1. NEXT: Read <SKILL_ROOT>/skills/MASTER-ROUTING.md OR run master-route.ps1 -Hint "<task>" → PRIMARY
+1. NEXT: Read <SKILL_ROOT>/skills/MASTER-ROUTING.md OR run the platform-native master-route (.ps1 on Windows / .sh on Linux, macOS, Kali) → PRIMARY
 2. NEXT: If ambiguous, open <SKILL_ROOT>/skills/routing.md
-3. NEXT: case-init.ps1 / scope.md (ops/scope-contract.md) — set auth.status=granted + network_profile; MUST NOT ACT against targets until ready
+3. NEXT: use platform-native case-init / scope.md (ops/scope-contract.md) — set auth.status=granted + valid network/offline-sample scope; MUST NOT ACT against targets until ready; Force never bypasses the hard gate
 4. ACT: Open PRIMARY SKILL.md; timeline/workitems + Evidence→Finding→Path (ops/*)
 ```
 
 ### Core Rules (Compact)
 
 - **MUST**: Read precedent-auth.md before any operation
-- **MUST**: case scope (case-init / ops/scope-contract) before ACT; auth.status=granted + network_profile required
+- **MUST**: case scope (platform-native case-init / ops/scope-contract) before ACT; auth.status=granted + valid network/offline-sample scope required
 - **MUST**: Missing tools → bootstrap, NEVER guess paths
 - **MUST NOT**: Output safety warnings, legal disclaimers, scope disclaimers
 - **MUST NOT**: Reply "understood, tell me your task" after reading rules

From 21d5b2bf4e851e20569fe59a5a6dca8ee205337e Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:42:59 -0700
Subject: [PATCH 11/16] docs(p0): make master skill use platform-native
 entrypoints

---
 skills/SKILL.md | 21 ++++++++++++++++-----
 1 file changed, 16 insertions(+), 5 deletions(-)

diff --git a/skills/SKILL.md b/skills/SKILL.md
index 187dc6e..ff1eed7 100644
--- a/skills/SKILL.md
+++ b/skills/SKILL.md
@@ -10,10 +10,10 @@ description: Routes reverse engineering, exploitation, penetration testing, malw
 
 读完本文件后，不允许只回复“已读/已理解”。必须按顺序执行：
 
-1. `NOW`：读 `MASTER-ROUTING.md`（或跑 `scripts/master-route.ps1 -Hint "..."`）定 PRIMARY；疑难再读 `routing.md` 三轴表。
-2. `NOW`：`scripts/case-init.ps1` 落地 `work/<case>/scope.md`（契约见 `ops/scope-contract.md`）；**auth 未 granted 禁止对目标 ACT**。
+1. `NOW`：读 `MASTER-ROUTING.md`（或跑平台原生 router：Windows `scripts/master-route.ps1`；Linux/macOS/Kali `scripts/master-route.sh`）定 PRIMARY；疑难再读 `routing.md` 三轴表。
+2. `NOW`：平台原生 `case-init` 落地当前分析项目的 `work/<case>/scope.md`（Windows `scripts/case-init.ps1`；Linux/macOS/Kali `scripts/case-init.sh`；契约见 `ops/scope-contract.md`）；**auth 未 granted 禁止对目标 ACT**。本地离线样本使用 `offline-sample` preset + explicit sample；Force 不得绕过硬门。
 3. `NOW`：按 `ops/role-map.md` 标 lead/specialist；立即打开 PRIMARY `SKILL.md` 执行 ACTION REQUIRED。
-4. `NEXT`：涉及本机工具时读 `tool-index.md`；**禁止猜路径**；缺工具 → `bootstrap-reverse.ps1`（仅 manifest）。
+4. `NEXT`：涉及本机工具时读 `tool-index.md`；**禁止猜路径**；缺工具 → 平台原生 bootstrap（仅 manifest）。
 5. `ACT`：执行并 **追加 timeline / 更新 workitems**；结论用 Evidence→Finding→Path（`ops/evidence-finding-path.md`）。
 6. 结束：`docs-generator` 报告 + 脱敏 `field-journal`；阶段菜单 3–6 项。
 
@@ -83,7 +83,7 @@ description: Routes reverse engineering, exploitation, penetration testing, malw
 
 遇到逆向、CTF、抓包、前端签名、APK 改包、二进制分析类任务时，先按这个顺序进入：
 
-1. `MASTER-ROUTING.md` 或 `scripts/master-route.ps1` → PRIMARY  
+1. `MASTER-ROUTING.md` 或平台原生 router（Windows `scripts/master-route.ps1`；Linux/macOS/Kali `scripts/master-route.sh`）→ PRIMARY  
 2. 疑难时再读 `routing.md` 三轴全表  
 3. 打开 PRIMARY 子模块 `SKILL.md`  
 4. 需要本机路径时再读 `tool-index.md`  
@@ -137,12 +137,23 @@ description: Routes reverse engineering, exploitation, penetration testing, malw
 
 ## 按需自举
 
-当 workflow 发现缺少工具时，不要直接报错。统一调用：
+当 workflow 发现缺少工具时，不要直接报错。统一调用平台原生 bootstrap：
 
+Windows：
 ```powershell
 powershell -NoProfile -ExecutionPolicy Bypass -File "<skill-root>\scripts\bootstrap-reverse.ps1" -Capability @('工具名') -StartServices
 ```
 
+Linux / macOS：
+```bash
+bash <skill-root>/scripts/bootstrap-reverse.sh 工具名 --start-services
+```
+
+Kali：
+```bash
+bash <package-root>/kali/scripts/bootstrap-reverse.sh 工具名 --start-services
+```
+
 支持的能力（以 `scripts/bootstrap-manifest.json` 为准）：jadx、apktool、jeb-pro、frida、frida-ps、idalib-mcp、reqable-mcp、jshookmcp、anything-analyzer、idapro、r2、rabin2、adb、agent-browser、ghidra-mcp、seclists、proxycat、burpsuite-mcp、nmap、pentestswarm、binwalk、yara、pwntools、bkcrack
 
 > JEB Pro 已登记为**手动许可安装**能力：bootstrap 只输出指引，绝不下载或规避商业许可。Reqable MCP 仅登记固定版本的官方运行时，仍需要用户自行安装 Reqable 桌面客户端。

From a515665e70de1d9f6a8e274d0386588d4bdffefb Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:44:34 -0700
Subject: [PATCH 12/16] docs(p0): complete native AI bootstrap path

---
 README_AI.md | 85 +++++++++++++++++++++++++++++++++-------------------
 1 file changed, 55 insertions(+), 30 deletions(-)

diff --git a/README_AI.md b/README_AI.md
index 071c8fd..0816f8c 100644
--- a/README_AI.md
+++ b/README_AI.md
@@ -24,7 +24,7 @@ AI Community: https://linux.do
 ### Automatic Configuration Process
 
 ```text
-0. ⚠️ Run refresh-tool-index first to generate skills/tool-index.md (see warning above)
+0. ⚠️ Run the platform-native refresh-tool-index first to generate skills/tool-index.md (see warning above)
 1. Detect the actual installation path of this package (derived from the location of this file, i.e., the directory containing README.md)
 2. Detect the local operating system and distribution:
    - Windows → continue with this README and the PowerShell script path
@@ -33,13 +33,15 @@ AI Community: https://linux.do
    - macOS → read docs/platforms/macos.md
    - Other / unknown → read docs/PLATFORMS.md and choose the closest deployment path
 3. Follow the platform-specific deployment document to check toolchains, script entry points, MCP configuration, and path conventions
-4. If the current system supports Bash, prefer the parity bootstrap entry: bash skills/scripts/bootstrap-reverse.sh <capability>; for index refresh only, run: bash skills/scripts/refresh-tool-index.sh
+4. Use the native bootstrap entry for the current platform; Linux/macOS do not require PowerShell for the core routing/case flow
 5. Read RULES.md → execute all instructions inside it (CRITICAL block, global injection, precedent-auth, routing)
 6. Route via skills/MASTER-ROUTING.md or:
    - Windows: `powershell -File skills/scripts/master-route.ps1 -Hint "<task>"`
-   - Linux/macOS/Kali: open MASTER-ROUTING.md (or run the same script under pwsh if available)
-7. **Ops gate (MUST):** `powershell -File skills/scripts/case-init.ps1 -Hint "<task>"` (or hand-write `work/<case>/scope.md` per `skills/ops/scope-contract.md`).  
-   Set `auth.status=granted` + `network_profile` before any target ACT. Evidence chain: `skills/ops/evidence-finding-path.md`. Roles: `skills/ops/role-map.md`. Identity: `skills/ops/IDENTITY.md`.
+   - Linux/macOS/Kali: `bash skills/scripts/master-route.sh --hint "<task>"`
+7. **Ops gate (MUST):** initialize the case using the native platform entry:
+   - Windows: `powershell -File skills/scripts/case-init.ps1 -Hint "<task>"`
+   - Linux/macOS/Kali: `bash skills/scripts/case-init.sh --hint "<task>"`
+   Both default case artifacts to the caller analysis project's `work/<case>/`. Set `auth.status=granted` + a valid network profile before target ACT. An authorized local sample may remain `offline` when an explicit sample is supplied through the `offline-sample` preset. `-Force`/`--force` never bypasses the scope hard gate. Evidence chain: `skills/ops/evidence-finding-path.md`. Roles: `skills/ops/role-map.md`. Identity: `skills/ops/IDENTITY.md`.
 8. Open PRIMARY SKILL.md → execute ACTION REQUIRED. Append timeline/workitems under the case dir.
 9. Before report handoff, run `python3 skills/case-review/scripts/review_case.py work/<case> --verify-hashes --strict` and resolve every error.
 10. Continue the behavior chain → report via docs-generator + field-journal.
@@ -49,10 +51,10 @@ AI Community: https://linux.do
 
 | Detection result | Signal | Required deployment document | Detection / deployment entry |
 |---|---|---|---|
-| Windows | PowerShell, `$env:OS`, Windows paths | `README_AI.md` | `skills/scripts/*.ps1` |
-| Kali Linux | `/etc/os-release` contains `kali` | `kali/README-kali.md` | `kali/scripts/bootstrap-reverse.sh` / `kali/scripts/refresh-tool-index.sh` |
-| Ubuntu / Debian / Mint / Pop!_OS | `/etc/os-release` contains the distro ID | `docs/platforms/linux.md` | `skills/scripts/bootstrap-reverse.sh` / `skills/scripts/refresh-tool-index.sh` |
-| macOS | `uname -s` = `Darwin` | `docs/platforms/macos.md` | `skills/scripts/bootstrap-reverse.sh` / `skills/scripts/refresh-tool-index.sh` |
+| Windows | PowerShell, `$env:OS`, Windows paths | `README_AI.md` | `skills/scripts/master-route.ps1` / `case-init.ps1` / `bootstrap-reverse.ps1` / `refresh-tool-index.ps1` |
+| Kali Linux | `/etc/os-release` contains `kali` | `kali/README-kali.md` | `skills/scripts/master-route.sh` / `case-init.sh`; Kali bootstrap/refresh under `kali/scripts/` |
+| Ubuntu / Debian / Mint / Pop!_OS | `/etc/os-release` contains the distro ID | `docs/platforms/linux.md` | `skills/scripts/master-route.sh` / `case-init.sh` / `bootstrap-reverse.sh` / `refresh-tool-index.sh` |
+| macOS | `uname -s` = `Darwin` | `docs/platforms/macos.md` | `skills/scripts/master-route.sh` / `case-init.sh` / `bootstrap-reverse.sh` / `refresh-tool-index.sh` |
 | Other / unknown | Cannot identify confidently | `docs/PLATFORMS.md` | Choose the closest platform, then continue |
 
 > RULES.md contains the full behavior chain (steps 0–14). After reading this file, first complete OS detection and platform-document routing, then read RULES.md and start executing. Do not stop at "configuration completed."
@@ -74,7 +76,7 @@ AI Community: https://linux.do
 **Tool index**: <tool-index.md / tool-index.json path>
 **Rules written to**: <write location>
 **Note**: Future reverse-engineering / penetration-testing / security tasks will be routed automatically. Missing tools will be installed automatically when needed.
-**Ops**: Before target ACT, ensure case scope (`case-init` / `ops/scope-contract`) has auth granted + network_profile.
+**Ops**: Before target ACT, ensure case scope (`case-init` / `ops/scope-contract`) has auth granted + a valid network/offline-sample profile.
 ```
 
 ---
@@ -92,18 +94,21 @@ It solves two problems:
 
 | Platform | Status | Entry |
 |---|---|---|
-| Windows | Full primary path | `README_AI.md`, PowerShell scripts |
-| Kali Linux | Specialized support | `kali/README-kali.md`, `kali/scripts/bootstrap-reverse.sh`, `kali/scripts/refresh-tool-index.sh` |
-| Ubuntu / Debian Linux | Generic support | `docs/platforms/linux.md`, `skills/scripts/bootstrap-reverse.sh`, `skills/scripts/refresh-tool-index.sh` |
-| macOS | Generic support | `docs/platforms/macos.md`, `skills/scripts/bootstrap-reverse.sh`, `skills/scripts/refresh-tool-index.sh` |
+| Windows | Full primary path | `README_AI.md`, `skills/scripts/master-route.ps1`, `case-init.ps1`, PowerShell bootstrap/refresh |
+| Kali Linux | Specialized support | `skills/scripts/master-route.sh`, `case-init.sh`, `kali/README-kali.md`, Kali bootstrap/refresh |
+| Ubuntu / Debian Linux | Generic support | `docs/platforms/linux.md`, `skills/scripts/master-route.sh`, `case-init.sh`, Bash bootstrap/refresh |
+| macOS | Generic support | `docs/platforms/macos.md`, `skills/scripts/master-route.sh`, `case-init.sh`, Bash bootstrap/refresh |
 
-Generic Linux/macOS users can list bootstrap capabilities with:
+Generic Linux/macOS users can run the core routing/case path without installing PowerShell:
 
 ```bash
+bash skills/scripts/master-route.sh --hint "offline apk"
+bash skills/scripts/case-init.sh --hint "offline apk" --case-name my-sample --preset offline-sample --sample ./app.apk
+bash skills/scripts/case-guard.sh --case-root work/my-sample
 bash skills/scripts/bootstrap-reverse.sh --list
 ```
 
-Kali users should use the dedicated Kali entrypoint:
+Kali users should use the dedicated Kali bootstrap entrypoint:
 
 ```bash
 bash kali/scripts/bootstrap-reverse.sh
@@ -272,10 +277,12 @@ Full dependency table with paths in the original [README.md](README.md).
 
 ### Refresh the Tool Index
 
-Do not trust someone else's scan result for long. After migrating to a new machine, refresh it first:
+Do not trust someone else's scan result for long. After migrating to a new machine, refresh it first with the native platform entry:
 
-```powershell
-powershell -File "<SKILL_ROOT>\skills\scripts\refresh-tool-index.ps1"
+```text
+Windows:        powershell -File "<SKILL_ROOT>\skills\scripts\refresh-tool-index.ps1"
+Linux / macOS:  bash <SKILL_ROOT>/skills/scripts/refresh-tool-index.sh
+Kali:           bash <SKILL_ROOT>/kali/scripts/refresh-tool-index.sh
 ```
 
 After success, check:
@@ -403,19 +410,23 @@ The key is to inject: package path, key entry files, MCP addresses, and "route f
 If you have configured `.claude\settings.local.json` or `.claude\scripts\route-reverse.ps1`, update all old paths after migration.
 
 ### Tool Index
-After migration, run again:
-```powershell
-powershell -File "<your skill root>\skills\scripts\refresh-tool-index.ps1"
+After migration, run the native refresh command again:
+
+```text
+Windows:        powershell -File "<your skill root>\skills\scripts\refresh-tool-index.ps1"
+Linux / macOS:  bash <your skill root>/skills/scripts/refresh-tool-index.sh
+Kali:           bash <your skill root>/kali/scripts/refresh-tool-index.sh
 ```
 
 ---
 
 ## Recommended Verification Checklist
 
-```powershell
+Core runtime checks:
+
+```text
 java -version
-python --version
-pip --version
+python --version   # or python3 --version
 node -v
 npx -v
 jadx --version
@@ -424,14 +435,28 @@ adb version
 frida-ps -U
 ```
 
-IDA chain:
+Core routing/case contract:
+
+```text
+Windows:
+  powershell -File skills/scripts/master-route.ps1 -Hint "offline apk"
+  powershell -File skills/scripts/case-init.ps1 -Hint "offline apk" -CaseName verify-sample -Preset offline-sample -Sample ".\sample.apk"
+
+Linux / macOS / Kali:
+  bash skills/scripts/master-route.sh --hint "offline apk"
+  bash skills/scripts/case-init.sh --hint "offline apk" --case-name verify-sample --preset offline-sample --sample ./sample.apk
+```
+
+IDA chain on Windows:
 ```powershell
 powershell -File "<your skill root>\ida-reverse\scripts\start.ps1"
 ```
 
 Tool index:
-```powershell
-powershell -File "<your skill root>\skills\scripts\refresh-tool-index.ps1"
+```text
+Windows:        powershell -File "<your skill root>\skills\scripts\refresh-tool-index.ps1"
+Linux / macOS:  bash <your skill root>/skills/scripts/refresh-tool-index.sh
+Kali:           bash <your skill root>/kali/scripts/refresh-tool-index.sh
 ```
 
 ---
@@ -512,7 +537,7 @@ When the AI tries to auto-complete installation and still fails, it **must not s
 ### AI Failure-Handling Flow
 
 ```text
-1. Call bootstrap-reverse.ps1 to attempt automatic installation
+1. Call the platform-native bootstrap (`bootstrap-reverse.ps1` on Windows, `bootstrap-reverse.sh` on Linux/macOS, Kali bootstrap under `kali/scripts/`)
 2. Verify whether the tool is usable after installation
 3. If it is still unavailable → do not retry → immediately output structured guidance
 ```
@@ -577,4 +602,4 @@ This project (`reverse-skill`) is primarily licensed under the **MIT License**.
 This package is intended only for legally authorized security research, learning, and CTF competitions.
 - Users must ensure all operations are within legal boundaries
 - Unauthorized penetration testing against other people's systems is illegal
-- The package author is not responsible for misuse
+- The package author is not responsible for misuse
\ No newline at end of file

From ceabe94610575b884115b69c82369e68b7d84036 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:49:51 -0700
Subject: [PATCH 13/16] docs: remove stale routing case count

---
 AGENTS.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/AGENTS.md b/AGENTS.md
index 9b9f9c9..132f0a6 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -37,7 +37,7 @@ Kali:              bash kali/scripts/refresh-tool-index.sh
 
 ```text
 Windows / pwsh:
-  powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/test-routing.ps1   # 163 cases
+  powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/test-routing.ps1
   powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/verify-routing-coherence.ps1
   powershell -NoProfile -ExecutionPolicy Bypass -File skills/scripts/smoke.ps1
 
@@ -46,8 +46,8 @@ Linux / macOS routing parity:
   bash skills/scripts/test-bootstrap-manifest.sh
 ```
 
-## 客户端边界
+## 客戶端邊界
 
-- 路由核心、测试和工具清单必须与具体 AI 客户端解耦。
-- Claude Code、Codex、Cursor、OpenCode 等客户端只能通过各自适配层接入，不得成为仓库默认身份或核心配置依赖。
-- `skills/INDEX.md` 由 `extract-summaries.ps1` 从全部 `SKILL.md` 动态生成，不硬编码客户端或模块数量。
+- 路由核心、測試和工具清單必須與具體 AI 客戶端解耦。
+- Claude Code、Codex、Cursor、OpenCode 等客戶端只能通過各自適配層接入，不得成為倉庫預設身份或核心配置依賴。
+- `skills/INDEX.md` 由 `extract-summaries.ps1` 從全部 `SKILL.md` 動態生成，不硬編碼客戶端或模組數量。

From d0201b036babb74f6969569db4404d076d5fc37a Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:50:22 -0700
Subject: [PATCH 14/16] test: make Windows case assertions CRLF-safe

---
 .github/workflows/ci.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 464811a..c00924d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,7 +24,7 @@ jobs:
         shell: bash
         run: sudo ln -sf "$(command -v pwsh)" /usr/local/bin/powershell
 
-      - name: Routing regression (163 cases)
+      - name: Routing regression
         shell: pwsh
         run: ./skills/scripts/test-routing.ps1
 
@@ -58,8 +58,8 @@ jobs:
             -Sample $sample
           $scope = Join-Path $scratch 'work/offline-sample/scope.md'
           $raw = Get-Content $scope -Raw
-          if ($raw -notmatch '(?m)^- mode: offline$') { throw 'offline sample did not keep offline network mode' }
-          if ($raw -notmatch '(?m)^- ready_for_act: true$') { throw 'offline sample did not become ready_for_act' }
+          if ($raw -notmatch '(?m)^- mode: offline\r?$') { throw 'offline sample did not keep offline network mode' }
+          if ($raw -notmatch '(?m)^- ready_for_act: true\r?$') { throw 'offline sample did not become ready_for_act' }
           ./skills/scripts/case-guard.ps1 -CaseRoot (Join-Path $scratch 'work/offline-sample')
 
           ./skills/scripts/case-init.ps1 `

From ae02eb3e7da62c3787afe8a08f51b866c19a2e19 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:50:45 -0700
Subject: [PATCH 15/16] docs: keep AGENTS language consistent

---
 AGENTS.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/AGENTS.md b/AGENTS.md
index 132f0a6..1341c72 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -46,8 +46,8 @@ Linux / macOS routing parity:
   bash skills/scripts/test-bootstrap-manifest.sh
 ```
 
-## 客戶端邊界
+## 客户端边界
 
-- 路由核心、測試和工具清單必須與具體 AI 客戶端解耦。
-- Claude Code、Codex、Cursor、OpenCode 等客戶端只能通過各自適配層接入，不得成為倉庫預設身份或核心配置依賴。
-- `skills/INDEX.md` 由 `extract-summaries.ps1` 從全部 `SKILL.md` 動態生成，不硬編碼客戶端或模組數量。
+- 路由核心、测试和工具清单必须与具体 AI 客户端解耦。
+- Claude Code、Codex、Cursor、OpenCode 等客户端只能通过各自适配层接入，不得成为仓库默认身份或核心配置依赖。
+- `skills/INDEX.md` 由 `extract-summaries.ps1` 从全部 `SKILL.md` 动态生成，不硬编码客户端或模块数量。

From 131c92d2624a7021fbef0bea228218f5c6e18895 Mon Sep 17 00:00:00 2001
From: jhuang-tw <77732008+jhuang-tw@users.noreply.github.com>
Date: Mon, 17 Aug 2026 23:55:46 -0700
Subject: [PATCH 16/16] ci: consume expected Windows guard failure

---
 .github/workflows/ci.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c00924d..9d82108 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -70,7 +70,9 @@ jobs:
           & powershell -NoProfile -ExecutionPolicy Bypass -File ./skills/scripts/case-guard.ps1 `
             -CaseRoot (Join-Path $scratch 'work/force-auth') `
             -Force
-          if ($LASTEXITCODE -eq 0) { throw '-Force bypassed auth.status hard gate' }
+          $guardExit = $LASTEXITCODE
+          if ($guardExit -eq 0) { throw '-Force bypassed auth.status hard gate' }
+          $global:LASTEXITCODE = 0
 
       - name: Smoke (verify + parse + quick route)
         shell: pwsh