ace-assign 0.64.0 → 0.66.0

data/lib/ace/assign/molecules/protected_workspace_exclusion.rb

@@ -0,0 +1,330 @@
+# frozen_string_literal: true
+
+require_relative "lifecycle_exclusion"
+require_relative "../authority/posix_acl"
+require "ace/runtime/molecules/protected_artifact_set"
+
+module Ace
+  module Assign
+    module Molecules
+      class LifecycleExclusion
+        # A retained reader lease only. It cannot provision, reset or publish.
+        # Source-owned original PreparedInput selects its closed projection.
+        class WorkspaceReader
+          attr_reader :projection
+          class Protection < Ace::Runtime::Molecules::ProtectedArtifactSet::Protection
+            def initialize(projection:, acl: Authority::PosixAcl.new, **options)
+              super(**options)
+              @projection, @acl = projection, acl
+            end
+
+            def verify!(path, handle, directory:)
+              super
+              unless (handle.stat.mode & 0o7000).zero? && @acl.entries(path).nil? &&
+                  (!directory || @acl.entries(path, attribute: "system.posix_acl_default").nil?)
+                raise AttemptErrors::EvidenceUnavailable, "Lifecycle reader protection differs"
+              end
+              root = @projection.fetch("root_resource")
+              if path == root_path(root)
+                actual = handle.stat
+                unless directory && [actual.dev, actual.ino, actual.uid, actual.gid, actual.mode & 0o7777] ==
+                    root.values_at("device", "inode", "uid", "gid") + [0o755]
+                  raise AttemptErrors::EvidenceUnavailable, "Lifecycle reader root identity differs"
+                end
+                verify_root_mount!(path, handle, root)
+              elsif !directory
+                unless handle.stat.nlink == 1 && (handle.stat.mode & 0o7777) == 0o644
+                  raise AttemptErrors::EvidenceUnavailable, "Lifecycle reader file protection differs"
+                end
+              end
+            end
+
+            private
+
+            def root_path(root) = root.fetch("view_path")
+
+            def verify_root_mount!(path, handle, root)
+                mount = @mounts.mount_identity(handle)
+                table = Ace::Runtime::Molecules::LinuxMountInfo.new(
+                  @mounts.read("/proc/self/mountinfo", limit: Ace::Runtime::Molecules::LinuxMountInfo::LIMIT))
+                selected = table.by_id(mount.fetch("mount_id"))
+                unless mount == selected.slice(*mount.keys) && selected.fetch("mountpoint") == path &&
+                    selected.fetch("filesystem_type") == root.fetch("filesystem_type") &&
+                    selected.fetch("options").include?("ro") && !selected.fetch("options").include?("rw")
+                  raise AttemptErrors::EvidenceUnavailable, "Lifecycle reader view is not the selected readonly mount"
+                end
+            end
+
+            def trusted_owner?(stat)
+              [0, @projection.fetch("authority_uid")].include?(stat.uid)
+            end
+          end
+
+          def initialize(projection:, protection: nil, files: File)
+            @projection = JSON.parse(JSON.generate(projection))
+            validate_projection!
+            pending = [@projection]
+            until pending.empty?
+              value = pending.pop
+              pending.concat(value.values) if value.is_a?(Hash)
+              pending.concat(value) if value.is_a?(Array)
+              value.freeze
+            end
+            @root = @projection.fetch("root_resource").fetch("view_path")
+            @protection = protection || Protection.new(projection: @projection)
+            @files = files
+            @handles, @lock, @active = {}, nil, false
+          end
+
+          def acquire!
+            raise AttemptErrors::Conflict, "Lifecycle reader already acquired" if @active || !@handles.empty?
+            parts = @root.split("/").reject(&:empty?)
+            (["/"] + parts.each_index.map { |index| "/" + parts.take(index + 1).join("/") }).each do |path|
+              pin!(path, directory: true)
+            end
+            @lock = pin!(path_for("lock"), directory: false)
+            stat = @lock.stat
+            unless stat.size.zero? && [stat.uid, stat.gid] == @projection.values_at("authority_uid", "authority_gid")
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle reader immutable lock differs"
+            end
+            unless @lock.flock(lock_mode | File::LOCK_NB)
+              raise AttemptErrors::MaintenanceBusy, "Lifecycle workspace is under maintenance"
+            end
+            @active = true
+            marker = pin!(path_for("state.json"), directory: false)
+            state = read_marker!(marker)
+            owner = [marker.stat.uid, marker.stat.gid]
+            unless owner == @projection.values_at("authority_uid", "authority_gid") || state.fetch("removed") && owner == [0, 0]
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle marker selected owner differs"
+            end
+            require_live_marker!(state)
+            verify_unchanged!
+            self
+          rescue Ace::Runtime::RuntimeUnavailableError, SystemCallError, IOError, JSON::ParserError, KeyError, TypeError, ArgumentError
+            close!
+            raise AttemptErrors::EvidenceUnavailable, "Original lifecycle reader admission is unavailable"
+          rescue Exception
+            close!
+            raise
+          end
+
+          def verify_unchanged!
+            raise AttemptErrors::EvidenceUnavailable, "Lifecycle reader is not held" unless @active
+            @handles.each do |path, entry|
+              unless identity(entry.fetch(:handle).stat) == entry.fetch(:identity) &&
+                  identity(@files.lstat(path)) == entry.fetch(:identity)
+                raise AttemptErrors::EvidenceUnavailable, "Lifecycle reader retained object changed"
+              end
+              @protection.verify!(path, entry.fetch(:handle), directory: entry.fetch(:directory))
+            end
+            true
+          end
+
+          # The maintained creator calls this only after confirmed completion.
+          # Unknown child ownership retains the lease until its owner exits.
+          def close!
+            begin
+              @lock.flock(File::LOCK_UN) if @active && @lock && !@lock.closed?
+            ensure
+              close_error = nil
+              @handles.values.reverse_each do |entry|
+                begin
+                  entry.fetch(:handle).close unless entry.fetch(:handle).closed?
+                rescue IOError, SystemCallError => error
+                  close_error ||= error
+                end
+              end
+              @handles.clear
+              @active = false
+              raise close_error if close_error
+            end
+          end
+
+          private
+
+          def require_live_marker!(state)
+            raise AttemptErrors::Conflict, "Original lifecycle workspace was fenced for removal" if state.fetch("removed")
+          end
+
+          def lock_mode = File::LOCK_SH
+
+          def validate_projection!
+            fields = %w[authority_gid authority_uid key root_resource worker_cwd_resource]
+            resource_fields = %w[device filesystem_type gid host_path inode mount_id uid view_path]
+            unless @projection.is_a?(Hash)
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle original reader projection differs"
+            end
+            root, cwd = @projection.values_at("root_resource", "worker_cwd_resource")
+            unless @projection.keys.sort == fields && [root, cwd].all? { |value| value.is_a?(Hash) && value.keys.sort == resource_fields } &&
+                %w[authority_uid authority_gid].all? { |key| @projection[key].is_a?(Integer) && @projection[key].positive? }
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle original reader projection differs"
+            end
+            unless [root, cwd].all? { |value|
+                %w[host_path view_path].all? { |key| value[key].is_a?(String) && value[key].valid_encoding? &&
+                  value[key].bytesize.between?(1, 4096) && !value[key].include?("\0") && value[key].start_with?("/") &&
+                  File.expand_path(value[key]) == value[key] } &&
+                %w[device inode uid gid].all? { |key| value[key].is_a?(Integer) && value[key] >= 0 } &&
+                value["mount_id"].is_a?(Integer) && value["mount_id"].positive? &&
+                %w[ext4 xfs btrfs tmpfs].include?(value["filesystem_type"]) }
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle original reader resource differs"
+            end
+            mapping = root.fetch("view_path").delete_prefix("/run/ace/lifecycle-exclusion/")
+            digest = Atoms::EvidenceDigest.digest(cwd)
+            unless mapping.match?(/\A[A-Za-z0-9][A-Za-z0-9._-]{0,127}\z/) &&
+                @projection.fetch("key") == "workspace:#{mapping}:#{digest}" &&
+                root.fetch("host_path").end_with?("/workspaces/#{mapping}/#{digest}") &&
+                root.values_at("uid", "gid") == @projection.values_at("authority_uid", "authority_gid")
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle original reader association differs"
+            end
+          end
+
+          def pin!(path, directory:)
+            file = @files.open(path, File::RDONLY | File::NOFOLLOW | File::NONBLOCK)
+            @protection.verify!(path, file, directory: directory)
+            stat = file.stat
+            unless (directory ? stat.directory? : stat.file?) && identity(stat) == identity(@files.lstat(path))
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle reader object is substituted"
+            end
+            @handles[path] = {handle: file, identity: identity(stat), directory: directory}
+            file
+          ensure
+            file&.close unless @handles.key?(path)
+          end
+
+          def identity(stat)
+            core = [stat.dev, stat.ino, stat.uid, stat.gid, stat.mode]
+            stat.directory? ? core : core + [stat.nlink, stat.size, stat.mtime, stat.ctime]
+          end
+
+          def path_for(suffix)
+            File.join(@root, "#{Digest::SHA256.hexdigest(@projection.fetch('key'))}.#{suffix}")
+          end
+
+          def read_marker!(file)
+            size = file.stat.size
+            unless size.between?(1, 8192)
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle marker bytes differ"
+            end
+            bytes = file.read(8193).force_encoding(Encoding::UTF_8)
+            unless bytes.valid_encoding? && bytes.bytesize == size
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle marker is not bounded UTF8"
+            end
+            state = LifecycleExclusion.workspace_marker!(bytes: bytes, key: @projection.fetch("key"))
+            @marker_bytes = bytes.freeze
+            state
+          end
+        end
+        # Native activation owns this host lease for the original scope lifetime.
+        # An admission deadline must not become a provider lifetime ceiling.
+        class WorkspaceNativeReader < WorkspaceReader
+          def initialize(projection:, protection: nil, files: File)
+            super(projection: projection, protection: protection, files: files)
+            @root = @projection.fetch("root_resource").fetch("host_path")
+            @protection = protection || WorkspaceHostReader::Protection.new(projection: @projection)
+          end
+        end
+
+        class WorkspaceHostReader < WorkspaceReader
+          class Protection < WorkspaceReader::Protection
+            private
+            def root_path(root) = root.fetch("host_path")
+            def verify_root_mount!(_path, handle, root)
+              unless @mounts.mount_identity(handle).fetch("filesystem_type") == root.fetch("filesystem_type")
+                raise AttemptErrors::EvidenceUnavailable, "Lifecycle writer filesystem differs"
+              end
+            end
+          end
+
+          def initialize(projection:, protection: nil, files: File)
+            super(projection: projection, protection: protection, files: files)
+            @root = @projection.fetch("root_resource").fetch("host_path")
+            @protection = protection || Protection.new(projection: @projection)
+          end
+
+          def acquire!(deadline:)
+            @deadline = deadline
+            deadline!(deadline)
+            super()
+            deadline!(deadline)
+            self
+          rescue Exception
+            close!
+            raise
+          end
+
+          def verify_unchanged!
+            deadline!(@deadline) unless @deadline.nil?
+            super
+          end
+
+          private
+          def deadline!(value)
+            unless value.is_a?(Numeric) && value.finite? && value > Process.clock_gettime(Process::CLOCK_MONOTONIC)
+              raise AttemptErrors::MaintenanceBusy, "Lifecycle maintenance deadline elapsed"
+            end
+          end
+        end
+
+        # Inspection evidence only: never permits creation or publication.
+        class WorkspaceFenceReader < WorkspaceHostReader
+          def fence_evidence!
+            verify_unchanged!
+            bytes = @marker_bytes
+            reference = {"path" => path_for("state.json").freeze,
+              "sha256" => Digest::SHA256.hexdigest(bytes).freeze, "bytes" => bytes.bytesize}.freeze
+            {"reference" => reference, "bytes" => bytes}.freeze
+          end
+
+          private
+          def require_live_marker!(_state); end
+        end
+
+        class WorkspaceWriter < WorkspaceHostReader
+          # Refusal fence only; canonical physical proof is owned separately.
+          def publish_removed!(removed_at:)
+            verify_unchanged!
+            unless removed_at.is_a?(String) && Time.iso8601(removed_at).utc.iso8601 == removed_at
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle fence timestamp differs"
+            end
+            bytes = Atoms::EvidenceDigest.canonical_json({"key" => @projection.fetch("key"),
+              "removed" => true, "removed_at" => removed_at}).freeze
+            target = path_for("state.json")
+            temporary = File.join(@root, ".#{SecureRandom.hex(16)}.fence")
+            begin
+              @files.open(temporary, File::WRONLY | File::CREAT | File::EXCL | File::NOFOLLOW | File::NONBLOCK, 0o644) do |file|
+                file.chmod(0o644)
+                file.write(bytes)
+                file.flush
+                unless file.stat.file? && file.stat.nlink == 1 && file.stat.size == bytes.bytesize &&
+                    [file.stat.uid, file.stat.gid, file.stat.mode & 0o7777] == [0, 0, 0o644]
+                  raise AttemptErrors::EvidenceUnavailable, "Lifecycle temporary fence protection differs"
+                end
+                file.fsync
+              end
+              verify_unchanged!
+              @files.rename(temporary, target)
+              @handles.fetch(@root).fetch(:handle).fsync
+              previous = @handles.delete(target)
+              previous.fetch(:handle).close
+              marker = pin!(target, directory: false)
+              unless [marker.stat.uid, marker.stat.gid] == [0, 0] && read_marker!(marker).fetch("removed")
+                raise AttemptErrors::EvidenceUnavailable, "Lifecycle published fence owner differs"
+              end
+              verify_unchanged!
+              reference = {"path" => target.freeze, "sha256" => Digest::SHA256.hexdigest(bytes).freeze,
+                "bytes" => bytes.bytesize}.freeze
+              {"reference" => reference, "bytes" => bytes}.freeze
+            ensure
+              @files.unlink(temporary) if @files.exist?(temporary)
+            end
+          rescue SystemCallError, IOError, ArgumentError
+            raise AttemptErrors::EvidenceUnavailable, "Lifecycle removal fence publication is unavailable"
+          end
+
+          private
+          def lock_mode = File::LOCK_EX
+        end
+      end
+    end
+  end
+end

data/lib/ace/assign/molecules/protected_workspace_provisioner.rb

@@ -0,0 +1,164 @@
+# frozen_string_literal: true
+
+require_relative "protected_workspace_exclusion"
+
+module Ace
+  module Assign
+    module Molecules
+      class LifecycleExclusion
+        # Original full-privilege operator phase, before publication/start.
+        # It only provisions derived exclusion artifacts, never a workspace.
+        class WorkspaceProvisioner
+          class Protection < WorkspaceHostReader::Protection
+            private
+            def root_path(_root) = nil
+          end
+
+          def initialize(mapping_id:, project_id:, authority:, cwd_resource:, files: File, directories: Dir, protection: nil)
+            @selection = LifecycleExclusion.workspace_selection(mapping_id: mapping_id, project_id: project_id,
+              authority: authority, cwd_resource: cwd_resource)
+            @authority = authority.slice("state_root", "uid", "gid").freeze
+            @files, @directories = files, directories
+            @protection = protection || Protection.new(projection: {"authority_uid" => authority.fetch("uid"),
+              "authority_gid" => authority.fetch("gid"), "root_resource" => {}})
+            @handles = {}
+          end
+
+          def provision!
+            root = @authority.fetch("state_root")
+            parts = root.split("/").reject(&:empty?)
+            (["/"] + parts.each_index.map { |index| "/" + parts.take(index + 1).join("/") }).each do |path|
+              hold_directory!(path)
+            end
+            selected_directory!(@handles.fetch(root), mode: 0o700)
+            relative = @selection.fetch("host_path").delete_prefix(root + "/").split("/")
+            parent = root
+            relative.each_with_index do |part, index|
+              path = File.join(parent, part)
+              mode = index == relative.length - 1 ? 0o755 : 0o700
+              provision_directory!(path, parent, mode)
+              verify_unchanged!
+              parent = path
+            end
+            project = File.dirname(File.dirname(File.dirname(@selection.fetch("host_path"))))
+            provision_directory!(File.join(project, "control"), project, 0o700)
+            root_stat = @handles.fetch(@selection.fetch("host_path")).stat
+            host_identity = {"device" => root_stat.dev, "inode" => root_stat.ino,
+              "uid" => root_stat.uid, "gid" => root_stat.gid}.freeze
+            # Resource mount identity is observed by the existing boundary owner;
+            # provision returns only association/host inode, not a namespace pin.
+            provision_file!("lock", "")
+            marker = provision_file!("state.json", LifecycleExclusion.workspace_initial_marker(key: @selection.fetch("key")))
+            bytes = marker.read(8193)
+            state = LifecycleExclusion.workspace_marker!(bytes: bytes, key: @selection.fetch("key"))
+            raise AttemptErrors::Conflict, "Original lifecycle workspace is already fenced" if state.fetch("removed")
+            unless [marker.stat.uid, marker.stat.gid] == @authority.values_at("uid", "gid")
+              raise AttemptErrors::EvidenceUnavailable, "Initial lifecycle marker owner differs"
+            end
+            verify_unchanged!
+            result = @selection.merge("host_identity" => host_identity)
+            result.fetch("host_identity").freeze
+            result.each_value(&:freeze)
+            result.freeze
+          rescue Ace::Runtime::RuntimeUnavailableError, SystemCallError, IOError
+            raise AttemptErrors::EvidenceUnavailable, "Original lifecycle provisioning is unavailable"
+          ensure
+            close!
+          end
+
+          private
+
+          def provision_directory!(path, parent, mode)
+            created = begin
+              @directories.mkdir(path, 0o700)
+              true
+            rescue Errno::EEXIST
+              false
+            end
+            handle = hold_directory!(path)
+            if created
+              handle.chown(@authority.fetch("uid"), @authority.fetch("gid"))
+              handle.chmod(mode)
+              handle.fsync
+              @handles.fetch(parent).fsync
+            end
+            selected_directory!(handle, mode: mode)
+          end
+
+          def hold_directory!(path)
+            handle = @files.open(path, File::RDONLY | File::NOFOLLOW | File::NONBLOCK)
+            unless handle.stat.directory? && identity(handle.stat) == identity(@files.lstat(path))
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle provisioning directory differs"
+            end
+            @protection.verify!(path, handle, directory: true)
+            @handles[path] = handle
+          ensure
+            handle&.close unless @handles[path] == handle
+          end
+
+          def selected_directory!(handle, mode:)
+            stat = handle.stat
+            unless [stat.uid, stat.gid, stat.mode & 0o7777] == @authority.values_at("uid", "gid") + [mode]
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle provisioning selected directory differs"
+            end
+          end
+
+          def provision_file!(suffix, bytes)
+            root = @selection.fetch("host_path")
+            path = File.join(root, "#{Digest::SHA256.hexdigest(@selection.fetch('key'))}.#{suffix}")
+            created = true
+            handle = begin
+              @files.open(path, File::RDWR | File::CREAT | File::EXCL | File::NOFOLLOW | File::NONBLOCK, 0o600)
+            rescue Errno::EEXIST
+              created = false
+              @files.open(path, File::RDONLY | File::NOFOLLOW | File::NONBLOCK)
+            end
+            if created
+              handle.write(bytes)
+              handle.flush
+              handle.chown(@authority.fetch("uid"), @authority.fetch("gid"))
+              handle.chmod(0o644)
+              handle.fsync
+              @handles.fetch(root).fsync
+            end
+            stat = handle.stat
+            unless stat.file? && stat.nlink == 1 && (stat.mode & 0o7777) == 0o644 &&
+                identity(stat) == identity(@files.lstat(path)) && stat.size <= 8192 &&
+                (suffix != "lock" || stat.size.zero? && [stat.uid, stat.gid] == @authority.values_at("uid", "gid"))
+              raise AttemptErrors::EvidenceUnavailable, "Lifecycle provisioning file differs"
+            end
+            @protection.verify!(path, handle, directory: false)
+            handle.rewind
+            @handles[path] = handle
+          ensure
+            handle&.close unless @handles[path] == handle
+          end
+
+          def verify_unchanged!
+            @handles.each do |path, handle|
+              unless identity(handle.stat) == identity(@files.lstat(path))
+                raise AttemptErrors::EvidenceUnavailable, "Lifecycle provisioned object was replaced"
+              end
+              @protection.verify!(path, handle, directory: handle.stat.directory?)
+            end
+          end
+
+          def identity(stat) = [stat.dev, stat.ino, stat.uid, stat.gid, stat.mode]
+
+          def close!
+            error = nil
+            @handles.values.reverse_each do |handle|
+              begin
+                handle.close unless handle.closed?
+              rescue SystemCallError, IOError => caught
+                error ||= caught
+              end
+            end
+            @handles.clear
+            raise error if error
+          end
+        end
+      end
+    end
+  end
+end

data/lib/ace/assign/molecules/queue_scanner.rb

@@ -53,19 +53,42 @@ module Ace
           end.compact
         end
 
+        # Source-authenticated callers retain exact step/report bytes through
+        # validation and parsing. No pathname reopen chooses executable work.
+        def scan_captured(steps:, assignment:, reports:)
+          parsed = Atoms::StepSorter.sort(steps.keys).map do |filename|
+            path = File.join(assignment.steps_dir, filename)
+            info = Atoms::StepFileParser.parse_filename(filename)
+            report_name = Atoms::StepFileParser.generate_report_filename(info.fetch(:number), info.fetch(:name))
+            report = reports[report_name]
+            report = Atoms::StepFileParser.parse(report).fetch(:body).strip if report
+            parse_step_content(path, steps.fetch(filename), report)
+          end
+          Models::QueueState.new(steps: parsed, assignment: assignment)
+        end
+
         private
 
         def parse_step_file(file_path)
           content = File.read(file_path)
+          filename_info = Atoms::StepFileParser.parse_filename(File.basename(file_path))
+          report = load_report(file_path, filename_info[:number], filename_info[:name])
+          parse_step_content(file_path, content, report)
+        rescue ArgumentError => e
+          warn "Invalid step file #{file_path}: #{e.message}"
+          nil
+        rescue => e
+          warn "Failed to parse step file #{file_path}: #{e.message}" if Ace::Assign.debug?
+          nil
+        end
+
+        def parse_step_content(file_path, content, report)
           parsed = Atoms::StepFileParser.parse(content)
           fields = Atoms::StepFileParser.extract_fields(parsed)
 
           # Extract number and name from filename
           filename_info = Atoms::StepFileParser.parse_filename(File.basename(file_path))
 
-          # Load report from separate file if it exists
-          report = load_report(file_path, filename_info[:number], filename_info[:name])
-
           Models::Step.new(
             number: filename_info[:number],
             name: fields[:name] || filename_info[:name],
@@ -93,14 +116,6 @@ module Ace
             stall_reason: fields[:stall_reason],
             file_path: file_path
           )
-        rescue ArgumentError => e
-          # ArgumentError indicates invalid data (e.g., invalid context value)
-          # Surface these errors visibly to help users fix configuration
-          warn "Invalid step file #{file_path}: #{e.message}"
-          nil
-        rescue => e
-          warn "Failed to parse step file #{file_path}: #{e.message}" if Ace::Assign.debug?
-          nil
         end
 
         # Load report from the reports/ directory

data/lib/ace/assign/molecules/receipt_verifier.rb

@@ -24,12 +24,16 @@ module Ace
         # @param identity_resolver [ExecutionIdentityResolver] Trust boundary
         # @param artifact_reader [#call, nil] Source-owned canonical byte
         #   reader for protected composition; nil selects explicit local files
-        def initialize(identity_resolver: nil, artifact_reader: nil)
+        def initialize(identity_resolver: nil, artifact_reader: nil, campaign_verifier: nil)
           @identity_resolver = identity_resolver || ExecutionIdentityResolver.new
           unless artifact_reader.nil? || artifact_reader.respond_to?(:call)
             raise ArgumentError, "artifact reader must be a source-owned callable"
           end
           @artifact_reader = artifact_reader
+          unless campaign_verifier.nil? || campaign_verifier.respond_to?(:call)
+            raise ArgumentError, "campaign verifier must be a source-owned callable"
+          end
+          @campaign_verifier = campaign_verifier
         end
 
         # Validate a submitted receipt against an attempt.
@@ -93,7 +97,11 @@ module Ace
         # readers always reverify imported bytes, including historical reads.
         def verify_accepted_evidence!(data, live_head:, repo_root:, historical: false)
           verify_head(data, live_head)
-          verify_artifacts(data, repo_root) if @artifact_reader || !historical
+          artifacts = data["artifacts"]
+          reject_unless(artifacts.is_a?(Array), "accepted artifacts must be an array")
+          if (@artifact_reader || !historical) && (data["verdict"] == "succeeded" || !artifacts.empty?)
+            verify_artifacts(data, repo_root)
+          end
           verify_checks(data)
           verify_review(data)
           verify_campaign(data, repo_root: repo_root, live_head: live_head) if @artifact_reader
@@ -239,20 +247,18 @@ module Ace
           end
           result = JSON.parse(artifact_bytes(data, reference, repo_root))
           reject_unless(result.is_a?(Hash), "campaign result must be an object")
-          require "ace/review"
-          current = Ace::Review::Organisms::CampaignManager.new(repo_root: repo_root).status(campaign["id"])
-          unless result["campaign_id"] == campaign["id"] && result["accepted"] == true &&
-              result["dry_run"] == false && current["accepted"] == true &&
-              result["result_identity"] == current["result_identity"] &&
-              result.dig("evidence", "current_head") == live_head && current.dig("evidence", "current_head") == live_head
-            reject("campaign result is stale, incomplete, blocked or does not match live authority")
-          end
-          approval = current["rounds"].last["approval"]
-          unless approval["producer"] == data.dig("producer", "actor") &&
-              approval["reviewer"] == data.dig("review", "reviewer", "actor") &&
-              approval["head"] == data["head"]
-            reject("campaign producer/reviewer attribution does not match independently validated receipt")
+          if @campaign_verifier
+            @campaign_verifier.call(data, result, live_head)
+            return
           end
+          require "ace/review"
+          manager = Ace::Review::Organisms::CampaignManager.new(repo_root: repo_root)
+          current = manager.status(campaign["id"])
+          reject("campaign result ID differs from receipt") unless result["campaign_id"] == campaign["id"]
+          manager.with_verified_result!(result: result, subject: current.fetch("subject"),
+            contract_identity: current.fetch("contract_identity"), policy: current.fetch("effective_policy"),
+            head: live_head, base: current.fetch("evidence").fetch("current_base"),
+            producer: data.dig("producer", "actor"), reviewer: data.dig("review", "reviewer", "actor")) { true }
         rescue JSON::ParserError, ArgumentError, TypeError, KeyError => e
           reject("invalid campaign result: #{e.message}")
         end