audit: independent audit role, auto-pushback, rebuild branch, three tightenings, QA full-chain

Independent audit (no code, independent re-run, separate signature;
CONDITIONAL never passes; deviation needs due todo) and automatic
pushback (fail -> derived fix subtask, merge/release blocked,
package with per-item evidence, full re-audit, 3-round limit with
a separate CI auto-fix counter, ledger hash-chain interface for
track 4, gate-block interface for track 1). Over 3 failures per
module per contract version: rebuild only that module from the
frozen contract (old implementation archived, avoidance list),
contract/design root cause -> G2 re-freeze escalation instead.
Tightenings: 3rd-failure triage (structural early rebuild /
early refreeze, near-complete one targeted round), rebuild keeps
tests and passed assets with an old-test first gate, audit-of-
audit sampling/correction and G6 user-only acceptance plus
acceptance-rebuild user confirmation. QA full chain: self-test
three parts, PRD coverage, agent six, cross-client matrix with
honest uncompiled verdicts, G5 gates, impact-scoped regression,
dual QA/audit signatures, failed-link re-runs in re-audit.
Skill text is purely additive (+459/-0) against main v0.2 text;
port this section into v0.3/v0.4/v0.5 texts on merge, never
overwrite them with this file.

cloud/tests/test_skill_appendix_provenance.py

@@ -8,13 +8,13 @@ script. The appendix was therefore unverifiable -- a drifted chapter
 would pass CI silently.
 
 This file pins the repair, and nothing else:
-- tools/check_appendix.py passes on the real pack (all eleven
+- tools/check_appendix.py passes on the real pack (all twelve
   chapters match their templates/roles/ sources, CHANGELOG present
   and mentioning templates/roles/);
 - the same script FAILS (nonzero exit) on a temp copy with a source
   deleted, a source tampered, or an extra source added -- so a future
   "source missing" or "appendix drifted" state cannot slip through;
-- --emit output is exactly the eleven headings plus the eleven
+- --emit output is exactly the eleven headings plus the twelve
   source bodies, so the spliced form is itself derived from the
   sources.
 
@@ -40,7 +40,8 @@ SCRIPT = SKILL_DIR / "tools" / "check_appendix.py"
 EXPECTED_IDS = ["00-coordinator", "01-product-manager", "02-architect",
                 "03-designer", "04-client-developer", "05-backend",
                 "06-qa", "07-acceptance", "08-shared-core",
-                "09-ops", "10-iteration"]
+                "09-ops", "10-iteration",
+                "11-auditor"]
 
 
 def _run(skill_dir=None):
@@ -112,7 +113,7 @@ class AppendixProvenanceTestCase(unittest.TestCase):
                       / (cid + ".md")).read_text(encoding="utf-8")
             expected_parts.append(heading + "\n\n" + source.rstrip("\n"))
         self.assertEqual(result.stdout, "\n\n".join(expected_parts) + "\n",
-                         "--emit 输出须恰为 11 章标题 + 11 份源正文")
+                         "--emit 输出须恰为 12 章标题 + 12 份源正文")
 
 
 if __name__ == "__main__":