diff --git a/tests/CMakeLists.txt b/tests/CMakeLists.txt
index 966d654..e05b6e8 100644
--- a/tests/CMakeLists.txt
+++ b/tests/CMakeLists.txt
@@ -4,6 +4,16 @@ add_test(NAME stcompiler_version
 add_test(NAME bytecode_executor_version
          COMMAND BytecodeExecutor)
 
+# CLI 级：编译需 --machine；缺参必须失败（WILL_FAIL）
+add_test(NAME cli_compile
+         COMMAND STCompiler ${CMAKE_SOURCE_DIR}/tests/cases/01_empty_main/project.toml
+                 -o ${CMAKE_CURRENT_BINARY_DIR}/cli_case01.stb
+                 --machine ${CMAKE_SOURCE_DIR}/compiler/machine.toml)
+add_test(NAME cli_missing_machine
+         COMMAND STCompiler ${CMAKE_SOURCE_DIR}/tests/cases/01_empty_main/project.toml
+                 -o ${CMAKE_CURRENT_BINARY_DIR}/cli_nope.stb)
+set_tests_properties(cli_missing_machine PROPERTIES WILL_FAIL TRUE)
+
 # isa 合同测试：链接 isa 库，断言覆盖饱和/编解码/disasm/哈希/映像/sidecar
 add_executable(isa_test
                ./src/isa_test.cpp)
diff --git a/tests/src/codegen_test.cpp b/tests/src/codegen_test.cpp
index 4f28b18..2146d57 100644
--- a/tests/src/codegen_test.cpp
+++ b/tests/src/codegen_test.cpp
@@ -698,6 +698,16 @@ static bool test_line1() {
     CHECK(std::strcmp(buf, "STORE_Q r8, 3") == 0);       // Q0_0（io.output）
     isa::disasm(im[16], buf, sizeof buf);
     CHECK(std::strcmp(buf, "RET") == 0);
+
+    // 12.13 写侧自检：型号标识 + SHA-256（compiler::StbView）
+    const compiler::StbView self = compiler::StbView::from(img);
+    CHECK(self.ok());
+    CHECK(self.model_matches("STATOR", 1));
+    CHECK(self.sha_ok());
+    std::vector<uint8_t> tampered = img;
+    tampered[100] ^= 0x01;  // 篡改代码段一字节
+    const compiler::StbView bad = compiler::StbView::from(tampered);
+    CHECK(bad.ok() && !bad.sha_ok());  // 结构可解析但 SHA 校验失败
     return true;
 }