diff --git a/dsh/README.md b/dsh/README.md
index 87e8ac7..b6b438f 100644
--- a/dsh/README.md
+++ b/dsh/README.md
@@ -144,13 +144,18 @@ dsh/
     cordis.patch.yml      inserts the dsh-harness row
     index.js              ctx.tools.guard + agent/pre-step + /role
     command-role.js       /role command glue
+    command-check.js      dsh-harness-check command glue
     lib/guards.js         DSH tool call -> claude-harness hook JSON
     lib/bootstrap.js      superpowers skill resolution, marker, dedupe
     lib/role.js           role layers and text (pure)
+    lib/selfcheck.js      bundle contract self-check (pure)
     dsh-tools.md          superpowers tool mapping
     hooks -> ../../hooks  local install: tested hooks are reused, not copied
     locale/{en,ru}.json
     icon.svg
+  sync/                   vendored sync machinery (Node builtins only)
+    sync-from-upstream.mjs  pinned upstream -> adapted skills (asserted transforms)
+    verify-skills.mjs       synced-tree validation (frontmatter, prefixes, links)
   tests/
   install.sh
   skills/{role,sdd}/SKILL.md  model-invocable skills installed into ~/.dsh
diff --git a/openspec/changes/dsh-port-v2/specs/dsh-install/spec.md b/openspec/changes/dsh-port-v2/specs/dsh-install/spec.md
index 77532fc..1ad61fe 100644
--- a/openspec/changes/dsh-port-v2/specs/dsh-install/spec.md
+++ b/openspec/changes/dsh-port-v2/specs/dsh-install/spec.md
@@ -4,7 +4,8 @@
 копии клона» на sync по пину `v7.0.1`, бандл получает самопроверку контракта.
 
 **BREAKING:** `--skills` без явного источника теперь требует сеть (клон пина);
-офлайн-прогон без клона — `FAIL`, а не тихий legacy и не «WARN + код 0».
+офлайн-прогон без клона и без legacy-источника — `FAIL`, а не тихий пропуск
+и не «WARN + код 0» (legacy-источник, если он есть, остаётся сырым WARN-путём).
 Отмена #67 (авто-pull unpinned HEAD) — решение design.md D-2.
 
 ## ADDED Requirements