@actuarial-ts/compliance 0.7.1 → 0.8.0

package/dist/customizationHistoryReplay.d.ts

@@ -0,0 +1,39 @@
+import { type AnalysisStatisticDefinition, type CustomizationResourceLimits, type HistoricalDatasetInput } from "@actuarial-ts/core";
+import { type CustomizationExternalStateAdapter } from "@actuarial-ts/data";
+import { type ComputedDiagnosticArtifactDigest } from "./diagnosticArtifactStream.js";
+import { type BoundedReplayMeasure } from "./customizationBoundedReplay.js";
+type MergeableHistoryStatistic = Extract<AnalysisStatisticDefinition, {
+    readonly kind: "sum" | "ratio" | "weighted-mean" | "minimum" | "maximum";
+}>;
+/** Statistics that can be calculated directly while normalized history is streamed. */
+export interface BoundedHistoryReplayMeasure extends Omit<BoundedReplayMeasure, "statistic" | "orderedPopulationSize"> {
+    readonly statistic: MergeableHistoryStatistic;
+}
+/**
+ * Connects raw versioned history to independently verifiable bounded replay.
+ *
+ * The function performs two host-owned external stages. The first resolves raw
+ * revisions one claim at a time. The second retains normalized selected
+ * records until preparation has completed without findings. No replay header
+ * is emitted before that review gate passes, so failed or cancelled work cannot
+ * be mistaken for a completed artifact.
+ *
+ * This path intentionally supports mergeable statistics only. Exact distinct
+ * counts and quantiles require their documented external ordering, while
+ * exposure joins and shared financial terms use their capability-specific
+ * execution paths.
+ */
+export declare function writeBoundedHistoryAnalysisReplay(input: {
+    readonly runId: string;
+    readonly sourceArtifact: ComputedDiagnosticArtifactDigest;
+    readonly header: Omit<HistoricalDatasetInput, "records">;
+    readonly records: AsyncIterable<unknown> | Iterable<unknown>;
+    readonly evaluationDate: string;
+    readonly observationSelection: "exact" | "latest-on-or-before";
+    readonly measures: readonly BoundedHistoryReplayMeasure[];
+    readonly adapter: CustomizationExternalStateAdapter;
+    readonly limits: CustomizationResourceLimits;
+    readonly signal?: AbortSignal;
+}): AsyncGenerator<Uint8Array>;
+export {};
+//# sourceMappingURL=customizationHistoryReplay.d.ts.map

package/dist/customizationHistoryReplay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customizationHistoryReplay.d.ts","sourceRoot":"","sources":["../src/customizationHistoryReplay.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAG5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAML,KAAK,iCAAiC,EACvC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,iCAAiC,CAAC;AAEzC,KAAK,yBAAyB,GAAG,OAAO,CACtC,2BAA2B,EAC3B;IACE,QAAQ,CAAC,IAAI,EACT,KAAK,GACL,OAAO,GACP,eAAe,GACf,SAAS,GACT,SAAS,CAAC;CACf,CACF,CAAC;AAEF,uFAAuF;AACvF,MAAM,WAAW,2BACf,SAAQ,IAAI,CAAC,oBAAoB,EAAE,WAAW,GAAG,uBAAuB,CAAC;IACzE,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;CAC/C;AAkCD;;;;;;;;;;;;;GAaG;AACH,wBAAuB,iCAAiC,CAAC,KAAK,EAAE;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,gCAAgC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IACzD,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,GAAG,qBAAqB,CAAC;IAC/D,QAAQ,CAAC,QAAQ,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,GAAG,cAAc,CAAC,UAAU,CAAC,CAmH7B"}

package/dist/customizationHistoryReplay.js

@@ -0,0 +1,147 @@
+import { canonicalJson, fnv1a64, isDiagnosticToken, isRealIsoDate, } from "@actuarial-ts/core";
+import { externalSortCustomizationRecords, parseCustomizationResourceLimits, parseHistoricalDatasetInput, streamPreparedHistoricalDataset, } from "@actuarial-ts/data";
+import { ComplianceError } from "./errors.js";
+import { assertComputedDiagnosticArtifactDigest, } from "./diagnosticArtifactStream.js";
+import { writeBoundedAnalysisReplay, parseBoundedReplayMeasures, } from "./customizationBoundedReplay.js";
+function selectedRecord(observation) {
+    const claimKey = canonicalJson([
+        observation.sourceNamespace,
+        observation.claimId,
+    ]);
+    const identity = canonicalJson([
+        observation.sourceNamespace,
+        observation.claimId,
+        observation.evaluationDate,
+    ]);
+    return {
+        id: `selected-${fnv1a64(identity)}`,
+        partitionKey: claimKey,
+        orderKey: observation.evaluationDate,
+        value: { measures: observation.measures },
+    };
+}
+function reviewFailure(code, message) {
+    throw new ComplianceError("BAD_DIAGNOSTIC_RUN", `Historical preparation review failed (${code}): ${message}`, "$.boundedHistoryReplay");
+}
+/**
+ * Connects raw versioned history to independently verifiable bounded replay.
+ *
+ * The function performs two host-owned external stages. The first resolves raw
+ * revisions one claim at a time. The second retains normalized selected
+ * records until preparation has completed without findings. No replay header
+ * is emitted before that review gate passes, so failed or cancelled work cannot
+ * be mistaken for a completed artifact.
+ *
+ * This path intentionally supports mergeable statistics only. Exact distinct
+ * counts and quantiles require their documented external ordering, while
+ * exposure joins and shared financial terms use their capability-specific
+ * execution paths.
+ */
+export async function* writeBoundedHistoryAnalysisReplay(input) {
+    const runId = input.runId;
+    const sourceArtifact = input.sourceArtifact;
+    const records = input.records;
+    const adapter = input.adapter;
+    const signal = input.signal;
+    const evaluationDate = input.evaluationDate;
+    const observationSelection = input.observationSelection;
+    const limits = parseCustomizationResourceLimits(input.limits);
+    const parsedHeader = parseHistoricalDatasetInput({ ...input.header, records: [] });
+    const { records: _emptyRecords, ...header } = parsedHeader;
+    const parsedMeasures = parseBoundedReplayMeasures(input.measures, limits);
+    if (parsedMeasures.some((measure) => !["sum", "ratio", "weighted-mean", "minimum", "maximum"].includes(measure.statistic.kind)))
+        reviewFailure("unsupported-statistic", "Raw-history replay supports mergeable statistics only");
+    const measures = parsedMeasures;
+    const historyContext = JSON.parse(canonicalJson(header));
+    if (!isDiagnosticToken(runId))
+        reviewFailure("invalid-run", "runId must be a valid token");
+    assertComputedDiagnosticArtifactDigest(sourceArtifact);
+    if (!isRealIsoDate(evaluationDate))
+        reviewFailure("invalid-period", "evaluationDate must be a real Gregorian date");
+    if (observationSelection !== "exact" && observationSelection !== "latest-on-or-before")
+        reviewFailure("invalid-selection", "observationSelection is invalid");
+    async function* normalized() {
+        let claimKey;
+        let claim = [];
+        const selected = function* () {
+            const candidates = claim.filter((observation) => observationSelection === "exact"
+                ? observation.evaluationDate === evaluationDate
+                : observation.evaluationDate <= evaluationDate);
+            const observation = candidates.reduce((latest, candidate) => latest === undefined || candidate.evaluationDate > latest.evaluationDate
+                ? candidate
+                : latest, undefined);
+            if (observation !== undefined)
+                yield selectedRecord(observation);
+            claim = [];
+        };
+        for await (const event of streamPreparedHistoricalDataset({
+            runId: `${runId}-raw`,
+            header,
+            records,
+            adapter,
+            limits,
+            ...(signal === undefined ? {} : { signal }),
+        })) {
+            if (event.kind === "finding")
+                reviewFailure(event.finding.code, event.finding.message);
+            if (event.kind === "observation") {
+                const nextClaimKey = canonicalJson([
+                    event.observation.sourceNamespace,
+                    event.observation.claimId,
+                ]);
+                if (claimKey !== undefined && nextClaimKey !== claimKey)
+                    yield* selected();
+                claimKey = nextClaimKey;
+                claim.push(event.observation);
+            }
+        }
+        yield* selected();
+    }
+    const staged = externalSortCustomizationRecords({
+        runId: `${runId}-selected`,
+        records: normalized(),
+        adapter,
+        limits,
+        ...(signal === undefined ? {} : { signal }),
+    });
+    const iterator = staged[Symbol.asyncIterator]();
+    // Pulling the first record completes both preparation and the review gate.
+    // It retains at most one selected record in SDK memory.
+    const first = await iterator.next();
+    async function* reviewedRecords() {
+        try {
+            if (!first.done)
+                yield first.value;
+            if (!first.done) {
+                for (;;) {
+                    const next = await iterator.next();
+                    if (next.done)
+                        break;
+                    yield next.value;
+                }
+            }
+        }
+        finally {
+            await iterator.return?.(undefined);
+        }
+    }
+    try {
+        yield* writeBoundedAnalysisReplay({
+            runId,
+            sourceArtifact,
+            measures,
+            calculationContext: {
+                history: historyContext,
+                evaluationDate,
+                observationSelection,
+            },
+            records: reviewedRecords(),
+            limits,
+            ...(signal === undefined ? {} : { signal }),
+        });
+    }
+    finally {
+        await iterator.return?.(undefined);
+    }
+}
+//# sourceMappingURL=customizationHistoryReplay.js.map

package/dist/customizationHistoryReplay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customizationHistoryReplay.js","sourceRoot":"","sources":["../src/customizationHistoryReplay.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,OAAO,EACP,iBAAiB,EACjB,aAAa,GAMd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,2BAA2B,EAC3B,+BAA+B,GAGhC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,sCAAsC,GAEvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAE3B,MAAM,iCAAiC,CAAC;AAwBzC,SAAS,cAAc,CACrB,WAA0C;IAE1C,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,WAAW,CAAC,eAAe;QAC3B,WAAW,CAAC,OAAO;KACpB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,WAAW,CAAC,eAAe;QAC3B,WAAW,CAAC,OAAO;QACnB,WAAW,CAAC,cAAc;KAC3B,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,YAAY,OAAO,CAAC,QAAQ,CAAC,EAAE;QACnC,YAAY,EAAE,QAAQ;QACtB,QAAQ,EAAE,WAAW,CAAC,cAAc;QACpC,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAsC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAClD,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,yCAAyC,IAAI,MAAM,OAAO,EAAE,EAC5D,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,iCAAiC,CAAC,KAWxD;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAC5C,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACxD,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,2BAA2B,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC;IAC3D,MAAM,cAAc,GAAG,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1E,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7H,aAAa,CAAC,uBAAuB,EAAE,uDAAuD,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,cAAwD,CAAC;IAC1E,MAAM,cAAc,GAAc,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;QAC3B,aAAa,CAAC,aAAa,EAAE,6BAA6B,CAAC,CAAC;IAC9D,sCAAsC,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;QAChC,aAAa,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC;IAClF,IAAI,oBAAoB,KAAK,OAAO,IAAI,oBAAoB,KAAK,qBAAqB;QACpF,aAAa,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,CAAC;IACxE,KAAK,SAAS,CAAC,CAAC,UAAU;QAGxB,IAAI,QAA4B,CAAC;QACjC,IAAI,KAAK,GAAoC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC;YAGxB,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAC9C,oBAAoB,KAAK,OAAO;gBAC9B,CAAC,CAAC,WAAW,CAAC,cAAc,KAAK,cAAc;gBAC/C,CAAC,CAAC,WAAW,CAAC,cAAc,IAAI,cAAc,CACjD,CAAC;YACF,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CACnC,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CACpB,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc;gBACtE,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,EACZ,SAAS,CACV,CAAC;YACF,IAAI,WAAW,KAAK,SAAS;gBAAE,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;YACjE,KAAK,GAAG,EAAE,CAAC;QACb,CAAC,CAAC;QACF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,+BAA+B,CAAC;YACxD,KAAK,EAAE,GAAG,KAAK,MAAM;YACrB,MAAM;YACN,OAAO;YACP,OAAO;YACP,MAAM;YACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC,EAAE,CAAC;YACH,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAC1B,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAG,aAAa,CAAC;oBACjC,KAAK,CAAC,WAAW,CAAC,eAAe;oBACjC,KAAK,CAAC,WAAW,CAAC,OAAO;iBAC1B,CAAC,CAAC;gBACH,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,KAAK,QAAQ;oBAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3E,QAAQ,GAAG,YAAY,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,gCAAgC,CAAC;QAC9C,KAAK,EAAE,GAAG,KAAK,WAAW;QAC1B,OAAO,EAAE,UAAU,EAAE;QACrB,OAAO;QACP,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAEhD,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACpC,KAAK,SAAS,CAAC,CAAC,eAAe;QAG7B,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,MAAM,KAAK,CAAC,KAAK,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,SAAS,CAAC;oBACR,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,IAAI,IAAI,CAAC,IAAI;wBAAE,MAAM;oBACrB,MAAM,IAAI,CAAC,KAAK,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,KAAK,CAAC,CAAC,0BAA0B,CAAC;YAChC,KAAK;YACL,cAAc;YACd,QAAQ;YACR,kBAAkB,EAAE;gBAClB,OAAO,EAAE,cAAc;gBACvB,cAAc;gBACd,oBAAoB;aACrB;YACD,OAAO,EAAE,eAAe,EAAE;YAC1B,MAAM;YACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/customizationRun.d.ts

@@ -0,0 +1,29 @@
+import { type AnalysisDefinition, type AnalysisRecipe, type AnalysisResult, type CustomizationExposureObservation, type ExposureAllocationTarget, type ExposureRevisionSelection, type HistoricalDatasetInput } from "@actuarial-ts/core";
+import { type ComputedDiagnosticArtifactDigest } from "./diagnosticArtifactStream.js";
+import type { DiagnosticArtifactDigest } from "./diagnosticRun.js";
+declare const verifiedCustomizationRunBrand: unique symbol;
+export interface VerifiedCustomizationAnalysisRun {
+    readonly [verifiedCustomizationRunBrand]: true;
+    readonly assurance: "sdk-rerun-verified";
+    readonly runIdentity: string;
+    readonly result: AnalysisResult;
+    readonly inputArtifacts: readonly DiagnosticArtifactDigest[];
+}
+/**
+ * Revalidates and reruns a complete supported customization recipe, then issues
+ * an authentic receipt binding the exact output to the supplied source digests.
+ */
+export declare function verifyCustomizationAnalysisRun(input: {
+    readonly history: HistoricalDatasetInput;
+    readonly definition: AnalysisDefinition;
+    readonly recipe: AnalysisRecipe;
+    readonly expectedResult: AnalysisResult;
+    readonly inputArtifacts: readonly ComputedDiagnosticArtifactDigest[];
+    readonly exposureObservations?: readonly CustomizationExposureObservation[];
+    readonly exposureTargets?: readonly ExposureAllocationTarget[];
+    readonly exposureRevisionSelection?: ExposureRevisionSelection;
+    readonly evaluationDate?: string;
+}): VerifiedCustomizationAnalysisRun;
+export declare function assertVerifiedCustomizationAnalysisRun(value: unknown): asserts value is VerifiedCustomizationAnalysisRun;
+export {};
+//# sourceMappingURL=customizationRun.d.ts.map

package/dist/customizationRun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customizationRun.d.ts","sourceRoot":"","sources":["../src/customizationRun.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAC;AAW5B,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEnE,OAAO,CAAC,MAAM,6BAA6B,EAAE,OAAO,MAAM,CAAC;AAC3D,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,CAAC,6BAA6B,CAAC,EAAE,IAAI,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC9D;AAQD;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,SAAS,gCAAgC,EAAE,CAAC;IACrE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,gCAAgC,EAAE,CAAC;IAC5E,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC/D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IAC/D,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,GAAG,gCAAgC,CA+CnC;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,KAAK,IAAI,gCAAgC,CAGnD"}

package/dist/customizationRun.js

@@ -0,0 +1,60 @@
+import { canonicalJson, fnv1a64, isRealIsoDate, runAnalysisRecipe, } from "@actuarial-ts/core";
+import { parseAnalysisDefinition, parseAnalysisRecipe, parseAnalysisResult, parseCustomizationExposureObservations, parseExposureAllocationTargets, parseExposureRevisionSelection, parseHistoricalDatasetInput, } from "@actuarial-ts/data";
+import { ComplianceError } from "./errors.js";
+import { assertComputedDiagnosticArtifactDigest, } from "./diagnosticArtifactStream.js";
+const verifiedRuns = new WeakSet();
+function invalid(message, path = "$.customizationRun") {
+    throw new ComplianceError("BAD_DIAGNOSTIC_RUN", message, path);
+}
+/**
+ * Revalidates and reruns a complete supported customization recipe, then issues
+ * an authentic receipt binding the exact output to the supplied source digests.
+ */
+export function verifyCustomizationAnalysisRun(input) {
+    if (!Array.isArray(input.inputArtifacts) || input.inputArtifacts.length === 0)
+        invalid("Customization verification requires at least one authentic input artifact", "$.inputArtifacts");
+    const artifacts = [...input.inputArtifacts];
+    artifacts.forEach(assertComputedDiagnosticArtifactDigest);
+    if (new Set(artifacts.map((artifact) => artifact.id)).size !== artifacts.length)
+        invalid("Customization input artifact IDs must be unique", "$.inputArtifacts");
+    if (input.evaluationDate !== undefined && !isRealIsoDate(input.evaluationDate))
+        invalid("Customization evaluationDate must be a real Gregorian date", "$.evaluationDate");
+    const history = parseHistoricalDatasetInput(input.history);
+    const definition = parseAnalysisDefinition(input.definition);
+    const recipe = parseAnalysisRecipe(input.recipe);
+    const expected = parseAnalysisResult(input.expectedResult);
+    const exposureObservations = parseCustomizationExposureObservations(input.exposureObservations ?? []);
+    const exposureTargets = parseExposureAllocationTargets(input.exposureTargets ?? []);
+    const exposureRevisionSelection = input.exposureRevisionSelection === undefined
+        ? undefined
+        : parseExposureRevisionSelection(input.exposureRevisionSelection);
+    const result = runAnalysisRecipe({
+        history,
+        definition,
+        recipe,
+        exposureObservations,
+        exposureTargets,
+        ...(exposureRevisionSelection === undefined ? {} : { exposureRevisionSelection }),
+        ...(input.evaluationDate === undefined ? {} : { evaluationDate: input.evaluationDate }),
+    });
+    if (canonicalJson(result) !== canonicalJson(expected))
+        throw new ComplianceError("DIAGNOSTIC_MISMATCH", "Customization result does not match an exact fresh SDK rerun", "$.expectedResult");
+    const inputArtifacts = Object.freeze(artifacts);
+    const runIdentity = `fnv1a64-jcs-v1:${fnv1a64(canonicalJson({
+        result,
+        inputArtifacts,
+    }))}`;
+    const receipt = Object.freeze({
+        assurance: "sdk-rerun-verified",
+        runIdentity,
+        result,
+        inputArtifacts,
+    });
+    verifiedRuns.add(receipt);
+    return receipt;
+}
+export function assertVerifiedCustomizationAnalysisRun(value) {
+    if (value === null || typeof value !== "object" || !verifiedRuns.has(value))
+        invalid("Value is not an authentic SDK-rerun-verified customization run");
+}
+//# sourceMappingURL=customizationRun.js.map

package/dist/customizationRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customizationRun.js","sourceRoot":"","sources":["../src/customizationRun.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,OAAO,EACP,aAAa,EACb,iBAAiB,GAQlB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,sCAAsC,EACtC,8BAA8B,EAC9B,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,sCAAsC,GAEvC,MAAM,+BAA+B,CAAC;AAYvC,MAAM,YAAY,GAAG,IAAI,OAAO,EAAU,CAAC;AAE3C,SAAS,OAAO,CAAC,OAAe,EAAE,IAAI,GAAG,oBAAoB;IAC3D,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAU9C;IACC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3E,OAAO,CAAC,2EAA2E,EAAE,kBAAkB,CAAC,CAAC;IAC3G,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,SAAS,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC1D,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAC7E,OAAO,CAAC,iDAAiD,EAAE,kBAAkB,CAAC,CAAC;IACjF,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QAC5E,OAAO,CAAC,4DAA4D,EAAE,kBAAkB,CAAC,CAAC;IAE5F,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,oBAAoB,GAAG,sCAAsC,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACtG,MAAM,eAAe,GAAG,8BAA8B,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,yBAAyB,GAAG,KAAK,CAAC,yBAAyB,KAAK,SAAS;QAC7E,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,OAAO;QACP,UAAU;QACV,MAAM;QACN,oBAAoB;QACpB,eAAe;QACf,GAAG,CAAC,yBAAyB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;KACxF,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC;QACnD,MAAM,IAAI,eAAe,CACvB,qBAAqB,EACrB,8DAA8D,EAC9D,kBAAkB,CACnB,CAAC;IACJ,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAwC,CAAC;IACvF,MAAM,WAAW,GAAG,kBAAkB,OAAO,CAAC,aAAa,CAAC;QAC1D,MAAM;QACN,cAAc;KACf,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,SAAS,EAAE,oBAA6B;QACxC,WAAW;QACX,MAAM;QACN,cAAc;KACf,CAAqC,CAAC;IACvC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;QACzE,OAAO,CAAC,gEAAgE,CAAC,CAAC;AAC9E,CAAC"}

package/dist/index.d.ts

@@ -9,6 +9,9 @@ export * from "./diagnosticArtifactStream.js";
 export { createCompactDiagnosticRunIdentity, assertVerifiedCompactDiagnosticRunProvenance, type CompactDiagnosticArtifactEvidence, type CreateCompactDiagnosticRunIdentityInput, type VerifiedCompactDiagnosticRunProvenance, } from "./diagnosticCompactRun.js";
 export * from "./diagnosticReplayWriter.js";
 export * from "./diagnosticReplayReader.js";
+export * from "./customizationBoundedReplay.js";
+export * from "./customizationHistoryReplay.js";
+export * from "./customizationRun.js";
 export * from "./bundle.js";
 export * from "./ave.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EACL,kCAAkC,EAClC,4CAA4C,EAC5C,KAAK,iCAAiC,EACtC,KAAK,uCAAuC,EAC5C,KAAK,sCAAsC,GAC5C,MAAM,2BAA2B,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EACL,kCAAkC,EAClC,4CAA4C,EAC5C,KAAK,iCAAiC,EACtC,KAAK,uCAAuC,EAC5C,KAAK,sCAAsC,GAC5C,MAAM,2BAA2B,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}

package/dist/index.js

@@ -9,6 +9,9 @@ export * from "./diagnosticArtifactStream.js";
 export { createCompactDiagnosticRunIdentity, assertVerifiedCompactDiagnosticRunProvenance, } from "./diagnosticCompactRun.js";
 export * from "./diagnosticReplayWriter.js";
 export * from "./diagnosticReplayReader.js";
+export * from "./customizationBoundedReplay.js";
+export * from "./customizationHistoryReplay.js";
+export * from "./customizationRun.js";
 export * from "./bundle.js";
 export * from "./ave.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EACL,kCAAkC,EAClC,4CAA4C,GAI7C,MAAM,2BAA2B,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,OAAO,EACL,kCAAkC,EAClC,4CAA4C,GAI7C,MAAM,2BAA2B,CAAC;AACnC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const COMPLIANCE_PACKAGE_VERSION = "0.7.1";
+export declare const COMPLIANCE_PACKAGE_VERSION = "0.8.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
-export const COMPLIANCE_PACKAGE_VERSION = "0.7.1";
+export const COMPLIANCE_PACKAGE_VERSION = "0.8.0";
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actuarial-ts/compliance",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "ASOP-compliance-support layer for the actuarial-ts SDK: estimate metadata, assumption ledger, disclosures, model cards, diagnostics provenance, reproducibility bundles, and actual-vs-expected roll-forward. Responsibility for compliance remains with the credentialed actuary.",
   "license": "Apache-2.0",
   "type": "module",
@@ -47,14 +47,15 @@
     "prepublishOnly": "node ../../tools/release/verify-release-attestation.mjs @actuarial-ts/compliance"
   },
   "dependencies": {
-    "@actuarial-ts/core": "^0.7.1",
-    "@actuarial-ts/data": "^0.7.1",
-    "@actuarial-ts/interchange": "^0.7.1"
+    "@actuarial-ts/core": "^0.8.0",
+    "@actuarial-ts/data": "^0.8.0",
+    "@actuarial-ts/interchange": "^0.8.0",
+    "zod": "^3.25.76"
   },
   "devDependencies": {
     "@types/node": "^22.10.5",
     "typescript": "^5.7.3",
-    "vitest": "^3.0.5"
+    "vitest": "^5.0.1"
   },
   "publishConfig": {
     "access": "public"