diff --git a/tests/project-contract.test.mjs b/tests/project-contract.test.mjs
index 18f0686..5188789 100644
--- a/tests/project-contract.test.mjs
+++ b/tests/project-contract.test.mjs
@@ -51,6 +51,7 @@ test('login has no committed demo credentials and inbound operation implements t
 	assert.doesNotMatch(operation, /resolveCurrentSku|resolvedSku|skuInput|selectedInboundCode|chooseInbound|class="inbound-tabs"/)
 	assert.doesNotMatch(operation, /InboundList|柜内入仓码/)
 	assert.doesNotMatch(inbound, /skus\/resolve/)
+	assert.doesNotMatch(operation, /\.split\([^\n]*['"]#['"]/, '前端必须原样提交完整箱码，禁止按 # 猜测入仓码或箱序号')
 	assert.match(operation, /const payload = isFba \? \{ inboundCode: this\.activeInbound\.inboundCode, palletCode: this\.resolvedPallet\.palletCode, packageCount: Number\(this\.packageCount\) \}/)
 	assert.doesNotMatch(operation, /skuCode/)
 	assert.match(operation, /clearReceiptContext\(\)[\s\S]*activeScanTarget = 'carton'/)