Довёл fix20: firewall-mode, staged state, diagnostics, readiness и build-gate

tools/build/lib/acceptance.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+run_fix20_acceptance_subset() {
+  local package_dir="$1"
+  [ -d "$package_dir" ] || fail "acceptance: package dir not found: $package_dir"
+
+  log_step "Acceptance: package layout sanity"
+  [ -x "$package_dir/install.sh" ] || fail "acceptance: install.sh is missing or not executable"
+  [ -x "$package_dir/orchestrator/hy2xs-orchestrator" ] || fail "acceptance: orchestrator artifact is missing"
+
+  log_step "Acceptance: orchestrator CLI help path"
+  "$package_dir/orchestrator/hy2xs-orchestrator" diagnostics collect --package-dir "$package_dir" >/dev/null 2>&1 || true
+
+  log_step "Acceptance: firewall mode defaults in config"
+  grep -q '^HY2XS_FIREWALL_MODE=' "$package_dir/config/hy2xs.env" || fail "acceptance: HY2XS_FIREWALL_MODE missing in runtime config"
+
+  log_step "Acceptance: systemd unit production env"
+  grep -q '^Environment=GIN_MODE=release$' "$package_dir/systemd/hy2xs-admin.service" || fail "acceptance: GIN_MODE=release missing"
+
+  log_step "Acceptance: docs matrix markers"
+  grep -q 'Fix20 production matrix' docs/11-testing-and-acceptance.md || fail "acceptance: fix20 matrix section missing"
+}
+