@@ -15,6 +15,27 @@ Short 1-2 sentence summary of the change.
 
 Low / Medium / High -- note if it touches infra or public API.
 
+## Harness/evaluator governance
+
+Required when this PR touches Evolver harness/evaluator/self-evolution surfaces:
+GEP schemas, prompt/selector/mutation/solidify/candidate/evaluator logic,
+evolve pipeline, adapter execution bridge, proxy routing/trace, bundled GEP
+assets, or the EvoX bridge contract. For unrelated PRs, write
+`N/A -- not a harness/evaluator governance change` on each line.
+
+Upstream governance surface: <typed Evolver surface, or N/A>
+Downstream EvoX impact: <bridge/contract/runtime impact, or N/A>
+Rollout-local scope: <proposal/shadow/cohort boundary before promotion, or N/A>
+Promotion boundary: <proposal→rollout→PR/default boundary, or N/A>
+Evaluator mismatch sets: <observation/action/repair/verification/evidence/belief sets covered, or N/A>
+Non-regression evidence: <tests/shadow runs/replay/doc-only rationale, or N/A>
+Fix-severity review: <low | medium | high | critical>
+Owner approval: <owning module/reviewer requirement, or N/A>
+Security boundary: <data/tool/host/network/secrets impact, or N/A>
+Rollback: <disable/revert/quarantine path, or N/A>
+Live promotion: no
+Autonomous evaluator self-editing: no
+
 ## Self-check
 
 Tick only the boxes that apply, but every applicable box must be ticked. Bugbot
 
@@ -1,75 +1,68 @@
 name: test
 
-# Runs the Node test suite on every PR and on pushes to main. Originally
-# Ubuntu-only (#198): PR checks were Cursor Bugbot + Security, neither of
-# which runs `npm test`, so a green PR did NOT mean the tests passed.
+# Runs PR governance checks and the Node test suite.
 #
-# This workflow now also runs the suite on Windows + macOS via a second job
-# (test-cross). #198 explicitly flagged Windows / macOS as a follow-up: the
-# suite still has Linux-specific assumptions (symlink reliance, hard-coded
-# ~/.volta layout, POSIX-style path equality) that would fail on those
-# hosts. test-cross runs on PRs in **advisory** mode (continue-on-error)
-# so those red signals are visible to reviewers without blocking merge
-# while the suite is being made hermetic. Each fix can flip its tests
-# from "red on Win/Mac" to "green on Win/Mac" incrementally. Once the
-# remaining failures are cleaned up, drop `continue-on-error: true` and
-# add `test-cross` to required checks to make cross-platform green a
-# hard merge gate.
+# Pull requests use pull_request_target on self-hosted Linux runners and only
+# execute trusted base-branch code against PR metadata. They intentionally do not
+# checkout, install, or test PR-controlled code on the self-hosted runner.
+# Pushes to main run the full Node suite on the merged repository state.
 #
-# main pushes skip test-cross to keep private-repo billing predictable
-# (macos-latest is 10x and windows-latest is 2x the ubuntu rate).
+# Cross-platform Windows/macOS coverage remains a future advisory lane once it
+# can run on available self-hosted runners or an explicitly funded hosted pool.
 
 on:
-  pull_request:
+  pull_request_target:
   push:
     branches: [main]
 
 permissions:
   contents: read
+  pull-requests: read
 
 concurrency:
-  group: test-${{ github.workflow }}-${{ github.ref }}
+  group: test-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, Linux, X64]
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout trusted base for PR guard
+        if: github.event_name == 'pull_request_target'
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+          fetch-depth: 1
+
+      - name: Checkout merged code for main tests
+        if: github.event_name == 'push'
+        uses: actions/checkout@v4
 
       - uses: actions/setup-node@v4
         with:
           node-version: '22' # engines: node >=22.12
           cache: npm
 
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run tests (node --test)
-        run: npm test
-
-  test-cross:
-    # Advisory cross-platform run: PR-only (skips main push to save billing),
-    # continue-on-error so a known Win/Mac regression does not block merge
-    # while the suite is being hardened. Reviewers still see the result and
-    # can opt-in to wait for a fix on a per-PR basis.
-    if: github.event_name == 'pull_request'
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [windows-latest, macos-latest]
-    runs-on: ${{ matrix.os }}
-    continue-on-error: true
-    steps:
-      - uses: actions/checkout@v4
+      - name: Collect changed files for governance guard
+        if: github.event_name == 'pull_request_target'
+        env:
+          GH_TOKEN: ${{ github.token }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          REPO: ${{ github.repository }}
+        run: |
+          gh api --paginate "repos/$REPO/pulls/$PR_NUMBER/files" --jq '.[].filename' > pr-changed-files.txt
 
-      - uses: actions/setup-node@v4
-        with:
-          node-version: '22'
-          cache: npm
+      - name: Harness/evaluator governance guard
+        if: github.event_name == 'pull_request_target'
+        env:
+          PR_BODY: ${{ github.event.pull_request.body }}
+          PR_CHANGED_FILES_FILE: pr-changed-files.txt
+        run: node scripts/harness-governance-check.js
 
       - name: Install dependencies
+        if: github.event_name == 'push'
         run: npm ci
 
       - name: Run tests (node --test)
+        if: github.event_name == 'push'
         run: npm test
@@ -1,4 +1,4 @@
-assets/cover.png
+assets/logo.png
 /test/
 /docs/
 /memory/
 
@@ -11,6 +11,18 @@ Submit PRs with clear intent and scope.
 
 ### Engineering conventions
 
+- **Evolver is the upstream governance source for EvoX harness/evolver behavior.**
+  Any PR that changes harness/evaluator/self-evolution surfaces (GEP schemas,
+  prompt/selector/mutation/solidify/candidate/evaluator logic, evolve pipeline,
+  adapter execution bridge, proxy routing/trace, bundled GEP assets, or the EvoX
+  bridge contract) must fill the `## Harness/evaluator governance` PR-template
+  packet. The required packet documents the whitelisted surface, downstream EvoX
+  impact, rollout-local scope, promotion boundary, evaluator mismatch sets,
+  non-regression evidence, fix severity, owner approval, security boundary,
+  rollback, and the two hard denials: `Live promotion: no` and
+  `Autonomous evaluator self-editing: no`. `scripts/harness-governance-check.js`
+  enforces this on PRs.
+
 - **Spawn child CLIs as `node <entry.js>` — never via a `.cmd` shim, npm symlink, or bare command name.** When launching a harness/tool subprocess (claude-code, openclaw, codex, ...), resolve the JS entry behind the launcher and hand it to `node` directly. Two reasons:
   1. On Windows, `child_process.spawn` without `shell:true` on a `.cmd`/`.bat` throws `EINVAL` since the CVE-2024-27980 fix (Node >=18.20.2 / 20.12.2 / 21.7.3) — this silently broke the auto-exec bridge on Windows.
   2. Across platforms, shims/wrappers can emit warnings or silently exit on some machines. `node <entry>` is zero-shell, deterministic, and passes args via argv (no shell-injection surface).
 
@@ -99,28 +99,6 @@ evolver setup-hooks --platform=claude-code
 
 通过 `~/.claude/` 向 Claude Code 的 hook 系统注册 Evolver。安装完成后重启 Claude Code CLI。
 
-#### Codex
-
-```bash
-evolver setup-hooks --platform=codex
-```
-
-写入 `~/.codex/hooks.json`，将 hook 脚本安装到 `~/.codex/hooks/`，并在 `config.toml` 中启用 `codex_hooks` 特性。重启 Codex CLI 后生效。
-
-##### Codex 注意事项
-
-Codex CLI 暴露 `SessionStart` / `Stop` / `PostToolUse` 钩子（`setup-hooks --platform=codex` 通过它们接入 Evolver）。Codex 会将会话转写写入 `~/.codex/sessions/*.jsonl`，但 Stop 钩子的 payload 不包含 `transcript_path` 字段。自 v1.87.0 起，Evolver 会自动发现 `~/.codex/sessions/`（以及 Claude Code 的 `~/.claude/projects/`）下的转写文件，无需手动 export `EVOLVER_CURSOR_TRANSCRIPTS_DIR`，因此 `evolver --review` 可以在 Codex 上读取原始会话日志。
-
-`setup-hooks --platform=codex` 仅做生命周期集成，不会将 Codex 的模型请求路由到 Evolver Proxy。如需路由 Codex 的模型流量，请运行 Evolver Proxy，并为 Codex 配置一个用户级 OpenAI Responses 兼容的自定义 provider，其 `base_url` 指向 proxy 的 `/v1` 端点，鉴权命令运行 `evolver proxy-token` 或源码检出中 `scripts/internal-proxy-env.sh --codex-config` 输出的绝对路径 `node index.js proxy-token --settings ...` 辅助脚本。
-
-除会话转写外，Evolver 还按以下顺序读取：
-
-1. 工作区根目录的 `MEMORY.md` / `USER.md`（需自行维护）；
-2. `setup-hooks --platform=codex` 注入到项目 `AGENTS.md` 的 `<!-- evolver-evolution-memory -->` 段落；
-3. 本地 `memory_graph.jsonl` 的尾部（Evolver 自行写入的每轮结果日志）。
-
-如果以上来源在前几轮都还没有内容，你会看到 `memory_missing` / `user_missing` / `session_logs_missing` 作为 advisory 信号出现。随着 `memory_graph.jsonl` 积累结果，这些信号会自行消失——无需手动配置。
-
 #### OpenClaw
 
 OpenClaw 会识别 Evolver 向 stdout 输出的 `sessions_spawn(...)` 协议，**无需安装 hooks**。将 Evolver 克隆到 OpenClaw workspace 中，在会话内运行即可：
 
@@ -66,11 +66,11 @@ metadata:
     reads:
       - "~/.evolver/settings.json (Proxy address discovery)"
       - "~/.evomap/node_id (node identity)"
-      - "assets/gep/* (GEP assets)"
-      - "memory/* (evolution memory)"
+      - "$EVOLVER_HOME/gep/* (runtime GEP assets)"
+      - "$EVOLVER_HOME/memory/* (runtime evolution memory)"
     writes:
-      - "assets/gep/* (genes, capsules, events)"
-      - "memory/* (memory graph, narrative, reflection)"
+      - "$EVOLVER_HOME/gep/* (runtime genes, capsules, events)"
+      - "$EVOLVER_HOME/memory/* (runtime memory graph, narrative, reflection)"
       - "src/** (evolved code, only during solidify)"
 ---
 
@@ -346,10 +346,10 @@ node index.js --review
 
 ## GEP Protocol (Auditable Evolution)
 
-Local asset store:
-- `assets/gep/genes.json` -- reusable Gene definitions
-- `assets/gep/capsules.json` -- success capsules
-- `assets/gep/events.jsonl` -- append-only evolution events
+Local runtime asset store (created and maintained by Evolver; these mutable runtime files are not bundled in the published Skill package):
+- `$EVOLVER_HOME/gep/genes.json` -- reusable Gene definitions
+- `$EVOLVER_HOME/gep/capsules.json` -- success capsules
+- `$EVOLVER_HOME/gep/events.jsonl` -- append-only evolution events
 
 ---
 
 
@@ -0,0 +1,73 @@
+'use strict';
+
+const path = require('path');
+
+const PROXY_PATH_FLAGS = new Map([
+  ['--home', 'home'],
+  ['--store', 'store'],
+  ['--settings', 'settings'],
+  ['--env-file', 'envFile'],
+]);
+
+function expandHomePath(value, env = process.env) {
+  if (value === '~') return env.HOME || require('os').homedir();
+  if (value.startsWith('~/') || value.startsWith('~\\')) {
+    return path.join(env.HOME || require('os').homedir(), value.slice(2));
+  }
+  return value;
+}
+
+function parseProxyCliPathOptions(argv, env = process.env) {
+  const options = {};
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = String(argv[index]);
+    const equalsIndex = arg.indexOf('=');
+    const flag = equalsIndex >= 0 ? arg.slice(0, equalsIndex) : arg;
+    const key = PROXY_PATH_FLAGS.get(flag);
+    if (!key) continue;
+
+    const value = equalsIndex >= 0 ? arg.slice(equalsIndex + 1) : argv[++index];
+    if (!value || !String(value).trim() || (equalsIndex < 0 && String(value).startsWith('-'))) {
+      throw new Error(flag + ' requires a path');
+    }
+    options[key] = path.resolve(expandHomePath(String(value).trim(), env));
+  }
+  return options;
+}
+
+function applyProxyCliPathOptions(options, env = process.env) {
+  if (options.envFile) env.EVOLVER_ENV_FILE = options.envFile;
+  if (options.home) {
+    env.EVOMAP_DIR = options.home;
+    env.EVOLVER_HOME = options.home;
+    env.EVOMAP_HOME = options.home;
+    env.EVOLVER_SETTINGS_DIR = options.home;
+    env.EVOLVER_PROXY_STORE = path.join(options.home, 'mailbox');
+    env.EVOLVER_PROXY_SETTINGS_FILE = path.join(options.home, 'settings.json');
+    env.EVOMAP_PROXY_TRACE_FILE = path.join(options.home, 'proxy', 'traces', 'proxy-traces.jsonl');
+  }
+  if (options.store) env.EVOLVER_PROXY_STORE = options.store;
+  if (options.settings) env.EVOLVER_PROXY_SETTINGS_FILE = options.settings;
+  return options;
+}
+
+function prepareProxyCliEnvironment(argv, env = process.env, dotenv = require('dotenv')) {
+  const options = parseProxyCliPathOptions(argv, env);
+  let envFile = { loaded: false, error: null };
+  const selectedEnvFile = options.envFile || env.EVOLVER_ENV_FILE;
+  if (selectedEnvFile) {
+    const resolvedEnvFile = path.resolve(expandHomePath(String(selectedEnvFile).trim(), env));
+    env.EVOLVER_ENV_FILE = resolvedEnvFile;
+    const result = dotenv.config({ path: resolvedEnvFile, processEnv: env });
+    envFile = { loaded: !result.error, error: result.error || null };
+  }
+  applyProxyCliPathOptions(options, env);
+  return { options, envFile };
+}
+
+module.exports = {
+  applyProxyCliPathOptions,
+  expandHomePath,
+  parseProxyCliPathOptions,
+  prepareProxyCliEnvironment,
+};
@@ -206,6 +206,19 @@ if (process.argv[2] === 'proxy-token') {
   }
 }
 
+const {
+  applyProxyCliPathOptions,
+  prepareProxyCliEnvironment,
+} = require('./cli-options');
+
+let _proxyCliBootstrap = { options: {}, envFile: { loaded: false, error: null } };
+let _proxyCliBootstrapError = null;
+try {
+  _proxyCliBootstrap = prepareProxyCliEnvironment(process.argv.slice(2), process.env);
+} catch (error) {
+  _proxyCliBootstrapError = error;
+}
+
 // Load .env BEFORE any internal require so that a2aProtocol and ATP
 // modules see A2A_NODE_SECRET / A2A_NODE_ID / A2A_HUB_URL at first
 // access and never fall back to a stale persisted/cached secret.
@@ -242,6 +255,9 @@ try {
   if (_root && _root !== process.cwd()) {
     require('dotenv').config({ path: _path.join(_root, '.env') });
   }
+  // CLI paths have the highest priority, including over values loaded from
+  // either the selected env file or the repository defaults.
+  applyProxyCliPathOptions(_proxyCliBootstrap.options, process.env);
   if (_prevQuiet === undefined) delete process.env.EVOLVER_QUIET_PARENT_GIT;
   else process.env.EVOLVER_QUIET_PARENT_GIT = _prevQuiet;
 } catch (e) { /* dotenv is optional */ }
@@ -831,6 +847,14 @@ function refuseHelloIfDaemonRunning(toolLabel) {
 }
 
 async function main() {
+  if (_proxyCliBootstrapError) {
+    console.error('[evolver] ' + _proxyCliBootstrapError.message);
+    process.exitCode = 1;
+    return;
+  }
+  if (_proxyCliBootstrap.envFile.error) {
+    console.warn('[evolver] Failed to load --env-file: ' + _proxyCliBootstrap.envFile.error.message);
+  }
   const args = process.argv.slice(2);
   const command = args[0];
   // Solo mode (--solo): the "constrained wild" profile. Implies loop (a solo
@@ -1450,6 +1474,7 @@ async function main() {
             const { startProxy } = require('./src/proxy');
             const proxyInfo = await startProxy({
               hubUrl: process.env.A2A_HUB_URL,
+              dataDir: process.env.EVOLVER_PROXY_STORE,
               clientSettings: {},
             });
             console.log('[Proxy] Started on ' + proxyInfo.url);
@@ -3690,6 +3715,11 @@ async function main() {
                                 (read versioned node secrets from a JSON file)
     - --hub-private-key=<path>|--hub-private-key <path>
                                 (decrypt hub_key_envelope trace rows with a local private key)
+  - run path flags (CLI overrides environment variables):
+    - --home=<dir>              (root for assets, mailbox, settings, and traces)
+    - --store=<dir>             (mailbox store directory; EVOLVER_PROXY_STORE)
+    - --settings=<path>         (proxy settings file; EVOLVER_PROXY_SETTINGS_FILE)
+    - --env-file=<path>         (environment file; EVOLVER_ENV_FILE)
   - webui flags:
     - --port=<N>               (local Web UI port, default 19821)
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-assets/cover.png`
	`1`	`+assets/logo.png`
`2`	`2`	`/test/`
`3`	`3`	`/docs/`
`4`	`4`	`/memory/`