diff --git a/.gitattributes b/.gitattributes
index 29987070..6b420ef4 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,3 +1,18 @@
+# Freeze artifacts are written by tests and read back by tests, so what checkout puts in the
+# working tree must be exactly what a regeneration writes. Left to core.autocrlf, checkout produced
+# CRLF on Windows while the writer produced LF; Git then reported the file modified to avoid
+# overwriting local work, and `git checkout` and `git bisect` aborted on a clean green run. The
+# content was never in question - `git diff` was empty - so pinning the checkout is the fix, not
+# changing what the artifacts say.
+# Kept to the directories a test regenerates. A wider rule reaches artifacts whose recorded hash
+# was taken over a checkout rather than over the committed bytes, and changing what checkout
+# produces would silently redefine whether those still verify - a separate question, not this one.
+/eval/a99-closed-loop/pdf-canary-072/** text eol=lf
+/eval/a99-closed-loop/docx-i8-doc0256/** text eol=lf
+/eval/a99-closed-loop/semantic-conflict-frozen-replay/** text eol=lf
+/eval/verification/** text eol=lf
+/eval/a99-closed-loop/pdf-gold-doc0252/** text eol=lf
+
# These benchmark artifacts are bound by raw SHA-256 in N12/N14. Keep their Git blobs byte-identical
# in every checkout; their .json extension does not grant Git permission to rewrite line endings.
/eval/benchmark-n0/silver-labels/*.json -text
diff --git a/.github/workflows/deterministic.yml b/.github/workflows/deterministic.yml
new file mode 100644
index 00000000..dd9edb0d
--- /dev/null
+++ b/.github/workflows/deterministic.yml
@@ -0,0 +1,57 @@
+name: deterministic-contract
+
+on:
+ push:
+ branches:
+ - main
+ - refactor/a99-semantic-control-plane-vnext
+ pull_request:
+
+permissions:
+ contents: read
+
+env:
+ DOTNET_CLI_TELEMETRY_OPTOUT: '1'
+ DOTNET_NOLOGO: 'true'
+ A99_FREEZE_UPDATE: '0'
+ OPENROUTER_API_KEY: ''
+ SGLANG_API_KEY: ''
+ LMSTUDIO_API_KEY: ''
+
+jobs:
+ deterministic:
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout
+ uses: actions/checkout@v4
+
+ - name: Setup .NET
+ uses: actions/setup-dotnet@v4
+ with:
+ dotnet-version: 9.0.x
+
+ - name: Restore
+ run: dotnet restore
+
+ - name: Build Release
+ run: dotnet build -c Release --no-restore
+
+ - name: Focused authority and experiment contracts
+ run: >-
+ dotnet test tests/DocxHeaderExtractor.Tests/DocxHeaderExtractor.Tests.csproj
+ -c Release --no-build
+ --filter
+ "FullyQualifiedName~PdfExperimentManifestTests|FullyQualifiedName~PdfGoldAuthorityTests|FullyQualifiedName~PdfGoldEvaluatorTests|FullyQualifiedName~PdfGoldOccurrenceAuthorityTests|FullyQualifiedName~PdfGoldReviewDecisionAuthorityTests|FullyQualifiedName~PdfGoldReviewPackTests|FullyQualifiedName~P4ReachabilityCleanupTests"
+
+ - name: Full deterministic Release suite
+ run: dotnet test -c Release --no-build
+
+ - name: Generated-artifact cleanliness
+ shell: bash
+ run: |
+ git diff --check
+ if [ -n "$(git status --porcelain)" ]; then
+ echo 'Working tree changed during deterministic CI; frozen artifacts must not be regenerated.'
+ git status --short
+ exit 1
+ fi
diff --git a/.gitignore b/.gitignore
index 07039ad1..56c90cf5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -58,3 +58,8 @@ bench/09-dien-mat-di.key
# Bản kết xuất outline — sinh lại được bằng `dhx extract`, không đưa vào repo
outline_out/
outline_llm/
+
+# Cấu hình agent cục bộ. Nó thuộc về máy đang làm việc, không thuộc về mã nguồn:
+# skills và worktrees khác nhau giữa các máy, và worktrees còn chứa bản sao repo.
+.claude/
+.agents/
diff --git a/Directory.Packages.props b/Directory.Packages.props
index d306f4a2..5c243c40 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -12,9 +12,7 @@
-
-