@agent-cards/checkout 0.9.0 → 0.9.1

package/PREFLIGHT.md

@@ -212,6 +212,12 @@ The JSON contract uses `schema_version: 1`. The catalog bundled with this releas
 
 Kernel can integrate the JSON contract immediately and supply its validated native capabilities later. No deployed Agentcard endpoint or payment request is required for that work.
 
+## Review native evidence
+
+Use the [native qualification kit](./examples/preflight/kernel-native/README.md) to review every catalog processor before declaring native support. The kit records pinned Kernel documentation separately from runtime evidence and checks that a release profile names the tested native build.
+
+The current inventory leaves every native runtime status `unknown`. Kernel documents five adapters; the remaining processors have no declaration in those sources. Documentation, client SDK versions, and direct SDK test results cannot establish native support.
+
 ## Interpret the result
 
 | Status | Meaning | Next step |

package/examples/preflight/kernel-native/README.md

@@ -0,0 +1,112 @@
+# Qualify Kernel native coverage
+
+You can detect a checkout's PSP before entering card details with `@agent-cards/checkout@0.9.0`. Kernel native support needs a separate profile for the native adapter that actually runs the checkout. The direct SDK's coverage does not establish Kernel's native coverage.
+
+No qualified native profile accompanies this kit. The inventory covers all 23 PSPs in the checkout catalog and reports `unknown` for every native runtime status. Kernel's pinned documentation lists Stripe, Shopify, Square, Recurly, and Razorpay. The other processors are unestablished, rather than explicitly unsupported. See the endpoint constraints and source hashes in [documented-adapters.json](./documented-adapters.json).
+
+## Use the detector now
+
+Install the published detector in your application:
+
+```bash
+npm install --save-exact @agent-cards/checkout@0.9.0
+node node_modules/@agent-cards/checkout/examples/preflight/classify-kernel.mjs
+```
+
+The example reads synthetic Stripe observations and an empty native profile. The detector identifies Stripe and returns `unknown` for native support. The example needs no credentials and submits no payment. Follow [PREFLIGHT.md](../../../PREFLIGHT.md) to collect observations from a browser or supply normalized JSON from Kernel.
+
+The qualification commands below are available in this source kit. The published `0.9.0` detector does not contain the new qualification commands. From the checkout package directory, build the source kit with Node.js 22 or later:
+
+```bash
+cd apps/agent-cards/packages/checkout
+npm run build
+node examples/preflight/kernel-native/qualification.mjs inventory
+```
+
+The inventory pairs each canonical PSP and mode with its documentation status. `documentation: "documented"` records a statement in the pinned source; `status: "unknown"` records the absence of qualified runtime evidence. The documentation baseline grants no permission to send card data anywhere.
+
+The checker compares PSP membership and payment modes with the SDK's separate request registry before comparing the saved inventory. Removing a processor from both the preflight catalog and the inventory still fails this check.
+
+When an installed SDK package includes this kit, run the commands directly from that package:
+
+```bash
+node node_modules/@agent-cards/checkout/examples/preflight/kernel-native/qualification.mjs inventory --check
+```
+
+## Identify the native build
+
+Kernel must provide access to the native adapter source and build, or a test deployment whose adapter identity can be independently checked. Record the actual adapter's version and SHA-256 artifact digest in a runtime JSON file with the fields `version` and `artifact_sha256`.
+
+Obtain the runtime identity from the deployed artifact or a trusted deployment record. Do not copy the identity from the test report, use the client SDK's npm version, or use the CLI version. Public API and client documentation do not currently supply a native adapter build identity.
+
+Kernel must also provide a way to exercise that build with the intended payment environment. A documented sandbox processor hostname does not establish that the native card API permits sandbox testing. Agree on the supported test environment before preparing an execution run.
+
+## Declare only tested coverage
+
+Start from [kernel-profile.empty.json](../kernel-profile.empty.json). Set `integration.version` to the independently identified native adapter version. Keep unqualified declarations absent so that the detector returns `unknown`.
+
+A `processor_entries` declaration covers a PSP, mode, and scenario. A flow entry in `entries` also binds the specific flow, operation, and operation version. A successful test of one checkout flow cannot justify processor-wide coverage. The reviewer must check that the tests cover the whole declaration being released.
+
+Every declaration in this kit needs explicit `limitations`, including supported declarations. Use `unsupported` only for an established native exclusion, with evidence and a useful explanation. Shared Vault exclusions still apply; a profile cannot override them. The checker refuses supported subscription renewals and hosted-form scenarios other than `one_time`.
+
+A profile is trusted application configuration. Never accept a profile from a merchant page. Continue to supply the actual running adapter version separately when calling `assessCheckoutSupport`.
+
+## Test the native path
+
+Run each declared case through Kernel's native Agentcard interception and approval path. A browser connected over CDP while the direct checkout SDK performs interception tests the direct SDK. Synthetic fixtures and unit tests verify the checker; they do not qualify a native adapter.
+
+Each supported declaration requires the following passed checks and retained evidence:
+
+| Check ID | What the evidence must establish |
+| --- | --- |
+| `native_recognition` | The identified native build recognizes the intended request layout and processor operation. |
+| `approval_pause_resume` | The payment pauses for approval and resumes once after approval. |
+| `processor_replay` | The approved request reaches the processor through the native path and its response returns to the merchant. |
+| `merchant_confirmation` | The merchant confirms the intended payment outcome; approval or token creation alone is insufficient. |
+| `unrecognized_request_passthrough` | A request outside the declared native recognition rules follows the documented unrecognized-request behavior. |
+| `decline_or_error` | A processor refusal or error reaches the caller as a failure rather than a successful purchase. |
+| `no_duplicate_submission` | Timeout, retry, and repeated approval handling do not produce duplicate submissions. |
+| `authentication_or_explicit_exclusion` | Required authentication completes, or the profile states and the evidence establishes the excluded authentication cases. |
+
+Supported `save_card` declarations also require `stored_card_consent` and `merchant_card_saved`. Supported `subscription_initial` declarations also require `stored_card_consent` and `merchant_subscription_confirmation`. An unsupported declaration requires `native_exclusion` instead of the support checks.
+
+Retain sanitized evidence files without card details, credentials, or approval secrets. Store evidence under one directory and reference each file by a relative path and its SHA-256 digest.
+
+## Bind the execution report
+
+The report records `schema_version: 1`, `execution: "kernel_native"`, the adapter's `version` and `artifact_sha256`, the harness commit, and the reviewer's identity. `harness_commit` must be a full 40-character Git commit. `reviewed_by` identifies the person accountable for checking the native execution evidence.
+
+The report's `catalog_sha256` and `profile_sha256` bind the exact catalog and profile JSON. Compute both using the exported `digest` function in `qualification.mjs`. The function sorts object keys recursively before hashing JSON; a hash of a pretty-printed file is different. Evidence digests hash the file's exact bytes.
+
+The report contains exactly one `claims` entry per profile declaration. Each entry has a `key` and `checks`. Use these key formats:
+
+```text
+processor:<psp>:<mode>:<scenario>
+flow:<flow>:<operation>:<operation_version>:<mode>:<scenario>
+```
+
+Each check contains `id`, `outcome: "passed"`, and `evidence: { "path": "relative-file", "sha256": "file-digest" }`. Failed, missing, duplicate, and extra checks prevent qualification. The checker also rejects evidence that escapes the evidence directory or differs from its retained digest.
+
+## Check a candidate release
+
+After a reviewed native execution run has produced the profile, report, independent runtime identity, and retained evidence, run:
+
+```bash
+node examples/preflight/kernel-native/qualification.mjs release \
+  --profile /tmp/kernel-native-validation/profile.json \
+  --report /tmp/kernel-native-validation/report.json \
+  --runtime /tmp/kernel-native-validation/runtime.json \
+  --evidence-dir /tmp/kernel-native-validation/evidence
+```
+
+The command prints `status: "qualified"` only when the supplied records satisfy the checks. The command does not publish a package, deploy the adapter, or install the profile in an application. Requalify after a change to the native build, profile, or catalog.
+
+The checker verifies consistency and retained file bytes. A matching digest does not prove that a native execution happened, that the stated deployment identity is truthful, or that the evidence supports every declared case. A trusted reviewer must establish those facts before accepting the profile.
+
+Without a complete candidate, the command exits with status `1`. The following stderr was captured by running `node examples/preflight/kernel-native/qualification.mjs release` without its required files:
+
+```text
+Native qualification failed. Check the arguments, catalog, build identity, profile, and retained evidence against README.md.
+```
+
+Supply the completed files with the command above. Keep native results `unknown` until the execution evidence and independent build identity are available.

package/examples/preflight/kernel-native/documented-adapters.json

@@ -0,0 +1,113 @@
+{
+  "schema_version": 1,
+  "baseline_version": "kernel-native-docs-2026-09-11.1",
+  "reviewed_at": "2026-09-11",
+  "evidence_level": "documentation_only",
+  "native_build": null,
+  "sources": [
+    {
+      "id": "kernel-payments-overview",
+      "repository": "kernel/docs",
+      "commit": "fd81f0d8c7ff33e81d6feae2dd314347b6ebb355",
+      "path": "integrations/payments/overview.mdx",
+      "url": "https://github.com/kernel/docs/blob/fd81f0d8c7ff33e81d6feae2dd314347b6ebb355/integrations/payments/overview.mdx",
+      "sha256": "a6c3633ef6aa8cb09deb210d5a36cccb2f3561cffa470ccb5cf2f7de5e7b4ab9"
+    },
+    {
+      "id": "kernel-agentcard-guide",
+      "repository": "kernel/docs",
+      "commit": "fd81f0d8c7ff33e81d6feae2dd314347b6ebb355",
+      "path": "integrations/payments/agentcard.mdx",
+      "url": "https://github.com/kernel/docs/blob/fd81f0d8c7ff33e81d6feae2dd314347b6ebb355/integrations/payments/agentcard.mdx",
+      "sha256": "0075bd44e45fe43147f63348a01bf6e9bb6dbdd6eb7c33eea46f09fcfc778a7b"
+    }
+  ],
+  "documented_adapters": [
+    {
+      "psp": "stripe",
+      "method": "POST",
+      "scheme": "https",
+      "body_encoding": "form",
+      "url_patterns": [
+        "https://api.stripe.com/v1/payment_methods",
+        "https://api.stripe.com/v1/tokens",
+        "https://api.stripe.com/v1/payment_intents/{id}/confirm",
+        "https://api.stripe.com/v1/payment_pages/{id}/confirm"
+      ],
+      "source_id": "kernel-payments-overview",
+      "limitations": [
+        "Other layouts, payment scenarios, and authentication flows are unqualified."
+      ]
+    },
+    {
+      "psp": "shopify",
+      "method": "POST",
+      "scheme": "https",
+      "body_encoding": "json",
+      "url_patterns": [
+        "https://checkout.pci.shopifyinc.com/sessions",
+        "https://deposit.<region>.shopifycs.com/sessions"
+      ],
+      "source_id": "kernel-payments-overview",
+      "limitations": [
+        "Card sessions only; this list does not qualify native checkout GraphQL.",
+        "Allowed regions are not enumerated."
+      ]
+    },
+    {
+      "psp": "square",
+      "method": "POST",
+      "scheme": "https",
+      "body_encoding": "json",
+      "url_patterns": [
+        "https://pci-connect.squareup.com/v2/card-nonce",
+        "https://pci-connect.squareupsandbox.com/v2/card-nonce"
+      ],
+      "source_id": "kernel-payments-overview",
+      "limitations": [
+        "A listed sandbox hostname does not establish sandbox card-item availability.",
+        "CORS, preparation, and replay timing remain unqualified."
+      ]
+    },
+    {
+      "psp": "recurly",
+      "method": "POST",
+      "scheme": "https",
+      "body_encoding": "form",
+      "url_patterns": [
+        "https://api.recurly.com/js/v1/token",
+        "https://api.eu.recurly.com/js/v1/token"
+      ],
+      "source_id": "kernel-payments-overview",
+      "limitations": [
+        "Form POST only; JSONP, saved-card use, and subscriptions remain unqualified."
+      ]
+    },
+    {
+      "psp": "razorpay",
+      "method": "POST",
+      "scheme": "https",
+      "body_encoding": "form",
+      "url_patterns": [
+        "https://api.razorpay.com/v1/payments/create/ajax",
+        "https://api.razorpay.com/v1/standard_checkout/payments/create/ajax"
+      ],
+      "source_id": "kernel-payments-overview",
+      "limitations": [
+        "Tokenization-only layouts and authentication continuation remain unqualified."
+      ]
+    }
+  ],
+  "limitations": [
+    "Documentation claims only; this baseline is neither runtime-test evidence nor a deployable capability profile.",
+    "Kernel lists these five adapters for Link and Agentcard. Unlisted processors remain unestablished, not explicitly unsupported.",
+    "Recognition requires every alias and the expected HTTPS method, destination, content type, and card-field layout. Complete body schemas are unavailable.",
+    "Kernel says non-Stripe coverage needs further tests with actual SDKs and hosted checkouts.",
+    "Encrypted, differently structured, or unrecognized requests bypass native handoff.",
+    "Patterns describe the documentation; they grant no payment admission or native execution capability.",
+    "Agentcard begins authorization after recognition; no separate authorize operation is advertised.",
+    "Ready item state, approval, and replay results do not confirm a paid merchant order.",
+    "No adapter build identity or conformance results accompany this table. Client SDK and CLI versions identify different artifacts.",
+    "Direct SDK tests cannot qualify Kernel native support. Release requires evidence for the actual native build."
+  ]
+}

package/examples/preflight/kernel-native/inventory.json

@@ -0,0 +1,224 @@
+{
+  "schema_version": 1,
+  "catalog_version": "2026-09-11.2",
+  "catalog_sha256": "367915b082fe3360cd6a9115feaeb8edeb0e8493388cee88557c8a5a12eff821",
+  "baseline_version": "kernel-native-docs-2026-09-11.1",
+  "baseline_sha256": "d86722f49633d8223fccae54cd3d485df4375aee06aa156a273cc689b7c8507c",
+  "native_build": null,
+  "processors": [
+    {
+      "psp": "shopify",
+      "mode": "token",
+      "documentation": "documented",
+      "status": "unknown",
+      "limitations": [
+        "Card sessions only; this list does not qualify native checkout GraphQL.",
+        "Allowed regions are not enumerated.",
+        "Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "stripe",
+      "mode": "token",
+      "documentation": "documented",
+      "status": "unknown",
+      "limitations": [
+        "Other layouts, payment scenarios, and authentication flows are unqualified.",
+        "Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "braintree",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "checkout_com",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "adyen",
+      "mode": "cse",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "tranzila",
+      "mode": "hosted_form",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "square",
+      "mode": "token",
+      "documentation": "documented",
+      "status": "unknown",
+      "limitations": [
+        "A listed sandbox hostname does not establish sandbox card-item availability.",
+        "CORS, preparation, and replay timing remain unqualified.",
+        "Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "authorize_net",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "worldpay",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "nuvei",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "airwallex",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "rapyd",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "dlocal",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "ebanx",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "mercado_pago",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "payu",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "razorpay",
+      "mode": "token",
+      "documentation": "documented",
+      "status": "unknown",
+      "limitations": [
+        "Tokenization-only layouts and authentication continuation remain unqualified.",
+        "Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "mollie",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "paysafe",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "recurly",
+      "mode": "token",
+      "documentation": "documented",
+      "status": "unknown",
+      "limitations": [
+        "Form POST only; JSONP, saved-card use, and subscriptions remain unqualified.",
+        "Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "moneris",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "bambora",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    },
+    {
+      "psp": "global_payments",
+      "mode": "token",
+      "documentation": "not_documented",
+      "status": "unknown",
+      "limitations": [
+        "No adapter declaration was found in the pinned documentation. Native runtime evidence is missing."
+      ]
+    }
+  ]
+}

package/examples/preflight/kernel-native/qualification.mjs

@@ -0,0 +1,182 @@
+// Maintainer tooling. Reports are trusted review inputs, never merchant-page inputs.
+import { createHash } from 'node:crypto';
+import { readFile, realpath } from 'node:fs/promises';
+import { isAbsolute, relative, resolve, sep } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { BUILTIN_REGISTRY } from '@agent-cards/checkout';
+import { assessCheckoutSupport, getCheckoutPreflightCatalog } from '@agent-cards/checkout/preflight';
+
+export const SUPPORTED_CHECKS = Object.freeze([
+  'native_recognition', 'approval_pause_resume', 'processor_replay',
+  'merchant_confirmation', 'unrecognized_request_passthrough', 'decline_or_error',
+  'no_duplicate_submission', 'authentication_or_explicit_exclusion',
+]);
+const SCENARIOS = ['one_time', 'save_card', 'subscription_initial', 'subscription_renewal'];
+const sha256 = bytes => createHash('sha256').update(bytes).digest('hex');
+const canonical = value => Array.isArray(value) ? value.map(canonical)
+  : value !== null && typeof value === 'object'
+    ? Object.fromEntries(Object.keys(value).sort().map(key => [key, canonical(value[key])])) : value;
+export const digest = value => sha256(JSON.stringify(canonical(value)));
+const fail = message => { throw new Error(message); };
+const requireThat = (condition, message) => { if (!condition) fail(message); };
+const record = value => value !== null && typeof value === 'object' && !Array.isArray(value);
+const id = value => typeof value === 'string' && /^[A-Za-z0-9][A-Za-z0-9._+-]{0,119}$/.test(value);
+const hash = value => typeof value === 'string' && /^[a-f0-9]{64}$/.test(value);
+const text = value => typeof value === 'string' && value.trim().length > 0 && value.length <= 256 && !/[\x00-\x1f]/.test(value);
+const keys = (value, required, optional = []) => record(value)
+  && required.every(key => Object.hasOwn(value, key))
+  && Object.keys(value).every(key => [...required, ...optional].includes(key));
+
+function requireCompleteCatalog(catalog) {
+  requireThat(record(catalog) && catalog.schema_version === 1 && Array.isArray(catalog.processors), 'Invalid catalog.');
+  // This projection comes from request recognition, independently of preflight's
+  // capability projection. Regenerating a reduced inventory cannot hide a PSP.
+  const expected = new Map(BUILTIN_REGISTRY.map(({ psp, mode = 'token' }) => [psp, mode]));
+  const seen = new Set();
+  for (const processor of catalog.processors) {
+    requireThat(record(processor) && !seen.has(processor.psp) && expected.has(processor.psp)
+      && expected.get(processor.psp) === processor.mode, 'Canonical processor membership or mode mismatch.');
+    seen.add(processor.psp);
+  }
+  requireThat(seen.size === expected.size, 'The catalog omits a canonical processor.');
+}
+
+export function buildInventory(catalog, baseline) {
+  requireCompleteCatalog(catalog);
+  requireThat(baseline.evidence_level === 'documentation_only' && baseline.native_build === null
+    && Array.isArray(baseline.documented_adapters), 'Expected a documentation-only baseline.');
+  const documented = new Map(baseline.documented_adapters.map(adapter => [adapter.psp, adapter]));
+  requireThat(documented.size === baseline.documented_adapters.length
+    && [...documented.keys()].every(psp => catalog.processors.some(processor => processor.psp === psp)), 'Baseline processor drift.');
+  return {
+    schema_version: 1, catalog_version: catalog.catalog_version, catalog_sha256: digest(catalog),
+    baseline_version: baseline.baseline_version, baseline_sha256: digest(baseline), native_build: null,
+    processors: catalog.processors.map(({ psp, mode }) => ({
+      psp, mode, documentation: documented.has(psp) ? 'documented' : 'not_documented', status: 'unknown',
+      limitations: documented.has(psp) ? [...documented.get(psp).limitations, 'Native runtime evidence is missing.']
+        : ['No adapter declaration was found in the pinned documentation. Native runtime evidence is missing.'],
+    })),
+  };
+}
+
+function profileClaims(catalog, profile, now) {
+  requireThat(keys(profile, ['schema_version', 'profile_version', 'catalog_version', 'integration', 'entries'], ['processor_entries', 'expires_at'])
+    && profile.schema_version === 1 && id(profile.profile_version)
+    && keys(profile.integration, ['id', 'version']) && profile.integration.id === 'kernel_native'
+    && id(profile.integration.version), 'Invalid native profile.');
+  requireThat(profile.catalog_version === catalog.catalog_version, 'Profile catalog mismatch.');
+  // Ask the installed classifier to validate its own contract, including dates.
+  // Empty observations exercise profile validation without claiming a checkout.
+  const assessment = assessCheckoutSupport({ schema_version: 1, catalog_version: catalog.catalog_version,
+    signals: [], observation: { complete: true, truncated: false, reasons: [] } },
+  { integration: profile.integration, profile, now });
+  requireThat(assessment.reason_codes.every(code => ['psp_not_detected', 'checkout_flow_unidentified'].includes(code)),
+    'The installed classifier rejected the profile, catalog, or current time.');
+  requireThat(Array.isArray(profile.entries) && profile.entries.length <= 256
+    && (profile.processor_entries === undefined || (Array.isArray(profile.processor_entries) && profile.processor_entries.length <= 256)), 'Invalid profile declarations.');
+  const claims = new Map();
+  const add = (entry, kind) => {
+    const isFlow = kind === 'flow';
+    const required = isFlow ? ['flow', 'operation', 'operation_version', 'mode', 'scenario', 'status', 'limitations']
+      : ['psp', 'mode', 'scenario', 'status', 'limitations'];
+    requireThat(keys(entry, required) && SCENARIOS.includes(entry.scenario)
+      && ['supported', 'unsupported'].includes(entry.status)
+      && Array.isArray(entry.limitations) && entry.limitations.length > 0 && entry.limitations.length <= 16
+      && entry.limitations.every(text), 'Each declaration needs a valid status, scenario, and explicit limitations.');
+    const definition = isFlow ? catalog.flows.find(flow => flow.id === entry.flow)
+      : catalog.processors.find(processor => processor.psp === entry.psp);
+    requireThat(definition && definition.mode === entry.mode
+      && (!isFlow || (definition.operation === entry.operation && definition.operation_version === entry.operation_version)), 'Unknown declaration or operation/mode mismatch.');
+    if (entry.status === 'supported') {
+      requireThat(definition.server_constraint !== 'unsupported' && entry.scenario !== 'subscription_renewal'
+        && !(entry.mode === 'hosted_form' && entry.scenario !== 'one_time'), 'Shared Vault exclusion cannot be overridden.');
+    }
+    const key = isFlow ? `flow:${entry.flow}:${entry.operation}:${entry.operation_version}:${entry.mode}:${entry.scenario}`
+      : `processor:${entry.psp}:${entry.mode}:${entry.scenario}`;
+    requireThat(!claims.has(key), 'Duplicate profile declaration.');
+    const checks = entry.status === 'supported' ? [...SUPPORTED_CHECKS] : ['native_exclusion'];
+    if (entry.status === 'supported' && ['save_card', 'subscription_initial'].includes(entry.scenario)) {
+      checks.push('stored_card_consent', entry.scenario === 'save_card' ? 'merchant_card_saved' : 'merchant_subscription_confirmation');
+    }
+    claims.set(key, checks);
+  };
+  profile.entries.forEach(entry => add(entry, 'flow'));
+  (profile.processor_entries ?? []).forEach(entry => add(entry, 'processor'));
+  requireThat(claims.size > 0, 'An empty profile is an integration draft, not a qualified release.');
+  return claims;
+}
+
+async function verifyEvidence(evidence, directory) {
+  requireThat(keys(evidence, ['path', 'sha256']) && typeof evidence.path === 'string'
+    && evidence.path.length > 0 && evidence.path.length <= 1024 && !/[\x00-\x1f\\]/.test(evidence.path)
+    && !isAbsolute(evidence.path) && !evidence.path.split('/').includes('..') && hash(evidence.sha256), 'Invalid evidence path or digest.');
+  const actual = await realpath(resolve(directory, evidence.path));
+  const inside = relative(directory, actual);
+  requireThat(inside !== '' && inside !== '..' && !inside.startsWith(`..${sep}`) && !isAbsolute(inside), 'Evidence escapes its directory.');
+  requireThat(sha256(await readFile(actual)) === evidence.sha256, 'Evidence digest mismatch.');
+}
+
+/** Validates a trusted attestation and its retained files, not the truth of a test run. */
+export async function verifyRelease({ catalog, profile, report, runtime, evidenceDirectory, now = new Date().toISOString() }) {
+  requireCompleteCatalog(catalog);
+  const claims = profileClaims(catalog, profile, now);
+  requireThat(keys(runtime, ['version', 'artifact_sha256']) && id(runtime.version) && hash(runtime.artifact_sha256), 'Actual native build identity is required.');
+  requireThat(keys(report, ['schema_version', 'execution', 'adapter', 'catalog_sha256', 'profile_sha256', 'harness_commit', 'reviewed_by', 'claims'])
+    && report.schema_version === 1 && report.execution === 'kernel_native'
+    && keys(report.adapter, ['version', 'artifact_sha256'])
+    && typeof report.harness_commit === 'string' && /^[a-f0-9]{40}$/.test(report.harness_commit)
+    && text(report.reviewed_by) && Array.isArray(report.claims), 'A reviewed native execution report is required.');
+  requireThat(report.adapter.version === runtime.version && report.adapter.artifact_sha256 === runtime.artifact_sha256
+    && profile.integration.version === runtime.version, 'Native build mismatch.');
+  requireThat(report.catalog_sha256 === digest(catalog), 'Catalog evidence drift. Requalify this catalog.');
+  requireThat(report.profile_sha256 === digest(profile), 'Profile evidence drift. Requalify these declarations.');
+  requireThat(report.claims.length === claims.size, 'Evidence must cover exactly the declared claims.');
+  const directory = await realpath(evidenceDirectory);
+  const seen = new Set();
+  for (const claim of report.claims) {
+    requireThat(keys(claim, ['key', 'checks']) && claims.has(claim.key) && !seen.has(claim.key)
+      && Array.isArray(claim.checks), 'Unknown or duplicate evidence claim.');
+    seen.add(claim.key);
+    const expected = claims.get(claim.key);
+    requireThat(claim.checks.length === expected.length, 'Missing or extra native checks.');
+    const checks = new Set();
+    for (const check of claim.checks) {
+      requireThat(keys(check, ['id', 'outcome', 'evidence']) && expected.includes(check.id)
+        && !checks.has(check.id) && check.outcome === 'passed', 'Missing, failed, or duplicate native check.');
+      checks.add(check.id);
+      await verifyEvidence(check.evidence, directory);
+    }
+  }
+  return { status: 'qualified', integration: profile.integration, profile_sha256: digest(profile) };
+}
+
+async function main(args) {
+  const catalog = getCheckoutPreflightCatalog();
+  const readJSON = async path => JSON.parse(await readFile(path, 'utf8'));
+  if (args[0] === 'inventory' && (args.length === 1 || (args.length === 2 && args[1] === '--check'))) {
+    const inventory = buildInventory(catalog, await readJSON(new URL('./documented-adapters.json', import.meta.url)));
+    if (args[1] === '--check') {
+      requireThat(digest(inventory) === digest(await readJSON(new URL('./inventory.json', import.meta.url))), 'Inventory drift. Review the catalog and documentation before updating inventory.json.');
+      console.log('Native inventory matches the reviewed catalog and documentation. Runtime support remains unknown.');
+    } else console.log(JSON.stringify(inventory, null, 2));
+    return;
+  }
+  const flags = ['--profile', '--report', '--runtime', '--evidence-dir'];
+  requireThat(args[0] === 'release' && args.length === 9, 'Use inventory [--check] or release --profile JSON --report JSON --runtime JSON --evidence-dir DIRECTORY.');
+  const values = {};
+  for (let index = 1; index < args.length; index += 2) {
+    requireThat(flags.includes(args[index]) && !Object.hasOwn(values, args[index]) && args[index + 1], 'Invalid or duplicate release option.');
+    values[args[index]] = args[index + 1];
+  }
+  const result = await verifyRelease({ catalog, profile: await readJSON(values['--profile']), report: await readJSON(values['--report']),
+    runtime: await readJSON(values['--runtime']), evidenceDirectory: values['--evidence-dir'] });
+  console.log(JSON.stringify(result, null, 2));
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  main(process.argv.slice(2)).catch(() => {
+    // Paths/reports may contain private deployment metadata. Keep failures out of CLI logs.
+    console.error('Native qualification failed. Check the arguments, catalog, build identity, profile, and retained evidence against README.md.');
+    process.exitCode = 1;
+  });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-cards/checkout",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Let browser agents pay with the user's own card, without your infrastructure ever touching card data.",
   "type": "module",
   "main": "dist/index.js",
@@ -27,13 +27,14 @@
     "_comment_build": "The public SDK keeps zero runtime dependencies. Its build vendors deterministic metadata and substitution artifacts from the internal payment core; TypeScript remains pinned.",
     "build": "node ../payment-core/scripts/build.mjs && node scripts/generate-payment-core.mjs && npx -y -p typescript@5.9.3 tsc && node scripts/generate-preflight-contract.mjs",
     "prepublishOnly": "pnpm build",
-    "test": "node test.mjs && node --test lifecycle.test.mjs merchant-abort.test.mjs preparation.test.mjs braintree.test.mjs autopilot.test.mjs payment-core.test.mjs prepared-processor.test.mjs minimum-delay.test.mjs paysafe.test.mjs attachment.test.mjs && node --test preflight-package.test.mjs preflight-collector.test.mjs",
+    "test": "node test.mjs && node --test lifecycle.test.mjs merchant-abort.test.mjs preparation.test.mjs braintree.test.mjs autopilot.test.mjs payment-core.test.mjs prepared-processor.test.mjs minimum-delay.test.mjs paysafe.test.mjs attachment.test.mjs && node --test preflight-package.test.mjs preflight-collector.test.mjs && node --test kernel-native-qualification.test.mjs",
     "test:browser": "node browser.test.mjs && node stripe-browser.test.mjs && node preparation-browser.test.mjs && node owned-shop-browser.test.mjs",
     "check:payment-core": "node scripts/generate-payment-core.mjs --check",
-    "test:preflight": "node --test preflight-package.test.mjs preflight-collector.test.mjs",
+    "test:preflight": "node --test preflight-package.test.mjs preflight-collector.test.mjs kernel-native-qualification.test.mjs",
     "test:preflight:browser": "node preflight-browser.test.mjs",
     "pack:preview": "node scripts/pack-preflight-preview.mjs",
-    "test:preflight:schemas": "node --test preflight-schemas.test.mjs"
+    "test:preflight:schemas": "node --test preflight-schemas.test.mjs",
+    "check:kernel-native": "node examples/preflight/kernel-native/qualification.mjs inventory --check"
   },
   "keywords": [
     "payments",