@agentguard-run/spend 0.15.2 → 0.15.4

package/dist/receipts/portability.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatLineage = void 0;
+exports.workloadProvenance = workloadProvenance;
+const aggregate_1 = require("../dashboard/aggregate");
+const defaultKeyOf = (d) => d.triggeredScopeKey ?? 'default';
+/**
+ * Build the portable per-workload provenance manifest from signed ledger
+ * entries. Pass the async `verifyChain` result as `continuity` so this stays a
+ * pure, synchronous function (never null-continuity in production — a manifest
+ * without tamper evidence is not the product).
+ */
+function workloadProvenance(entries, continuity = { verified: false, entries: 0, reason: 'NOT_CHECKED' }, keyOf = defaultKeyOf) {
+    const groups = new Map();
+    for (const entry of entries) {
+        const d = entry.decision;
+        const kind = d.entryType ?? 'decision';
+        if (kind !== 'decision')
+            continue; // settlements/outcomes don't add model steps
+        const key = keyOf(d);
+        const grp = groups.get(key) ?? {
+            calls: 0, spent: 0, frontier: 0, dark: 0, first: null, last: null,
+            models: new Map(), ordered: [],
+        };
+        const model = d.modelResolved || d.modelRequested || 'unknown';
+        const { origin } = (0, aggregate_1.classifyOrigin)(d);
+        const cents = (0, aggregate_1.decisionCents)(d);
+        grp.calls += 1;
+        grp.spent += cents;
+        if (origin === 'frontier')
+            grp.frontier += cents;
+        else if (origin === 'dark')
+            grp.dark += cents;
+        if (d.timestamp) {
+            if (!grp.first || d.timestamp < grp.first)
+                grp.first = d.timestamp;
+            if (!grp.last || d.timestamp > grp.last)
+                grp.last = d.timestamp;
+        }
+        const mu = grp.models.get(model) ?? { model, origin, provider: d.provider ?? 'unknown', calls: 0, cents: 0 };
+        mu.calls += 1;
+        mu.cents += cents;
+        grp.models.set(model, mu);
+        grp.ordered.push({ seq: entry.sequence, model, origin });
+        groups.set(key, grp);
+    }
+    const workloads = [];
+    for (const [key, grp] of groups) {
+        grp.ordered.sort((a, b) => a.seq - b.seq);
+        const swaps = [];
+        for (let i = 1; i < grp.ordered.length; i++) {
+            const prev = grp.ordered[i - 1];
+            const cur = grp.ordered[i];
+            if (cur.model !== prev.model) {
+                swaps.push({
+                    atSequence: cur.seq,
+                    fromModel: prev.model, toModel: cur.model,
+                    fromOrigin: prev.origin, toOrigin: cur.origin,
+                    crossesBoundary: prev.origin !== cur.origin
+                        && prev.origin !== 'unknown' && cur.origin !== 'unknown',
+                });
+            }
+        }
+        // lineage = models in first-appearance order (collapse consecutive repeats)
+        const lineage = [];
+        for (const step of grp.ordered)
+            if (lineage[lineage.length - 1] !== step.model)
+                lineage.push(step.model);
+        workloads.push({
+            key,
+            calls: grp.calls,
+            spentCents: grp.spent,
+            frontierCents: grp.frontier,
+            darkCents: grp.dark,
+            firstAt: grp.first,
+            lastAt: grp.last,
+            models: [...grp.models.values()].sort((a, b) => b.cents - a.cents),
+            lineage,
+            swaps,
+        });
+    }
+    workloads.sort((a, b) => b.spentCents - a.spentCents);
+    return { workloads, continuity };
+}
+/** Human-readable lineage, e.g. "claude-5 → gpt-5-mini → glm-5.2". */
+const formatLineage = (w) => w.lineage.join(' → ');
+exports.formatLineage = formatLineage;
+//# sourceMappingURL=portability.js.map

package/dist/receipts/portability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portability.js","sourceRoot":"","sources":["../../src/receipts/portability.ts"],"names":[],"mappings":";;;AAwEA,gDAgFC;AA7HD,sDAAyF;AAqCzF,MAAM,YAAY,GAAG,CAAC,CAAgB,EAAU,EAAE,CAAC,CAAC,CAAC,iBAAiB,IAAI,SAAS,CAAC;AAEpF;;;;;GAKG;AACH,SAAgB,kBAAkB,CAChC,OAAiC,EACjC,aAAqD,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAC3G,QAAsC,YAAY;IAOlD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAExC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC;QACvC,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS,CAAC,6CAA6C;QAEhF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,GAAG,GAAU,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;YACpC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YACjE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE;SAC/B,CAAC;QACF,MAAM,KAAK,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,cAAc,IAAI,SAAS,CAAC;QAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,0BAAc,EAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,IAAA,yBAAa,EAAC,CAAC,CAAC,CAAC;QAE/B,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC;QACnB,IAAI,MAAM,KAAK,UAAU;YAAE,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC;aAC5C,IAAI,MAAM,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK;gBAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC;YACnE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC;QAClE,CAAC;QACD,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC7G,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC;QACd,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAChC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAgB,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC;oBACT,UAAU,EAAE,GAAG,CAAC,GAAG;oBACnB,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK;oBACzC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM;oBAC7C,eAAe,EAAE,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;2BACtC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;iBAC3D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,4EAA4E;QAC5E,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO;YAAE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzG,SAAS,CAAC,IAAI,CAAC;YACb,GAAG;YACH,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,GAAG,CAAC,KAAK;YACrB,aAAa,EAAE,GAAG,CAAC,QAAQ;YAC3B,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,OAAO,EAAE,GAAG,CAAC,KAAK;YAClB,MAAM,EAAE,GAAG,CAAC,IAAI;YAChB,MAAM,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YAClE,OAAO;YACP,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACtD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,sEAAsE;AAC/D,MAAM,aAAa,GAAG,CAAC,CAAqB,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAzE,QAAA,aAAa,iBAA4D"}

package/dist/types.d.ts

@@ -16,6 +16,36 @@ export type SpendWindow = 'per_call' | 'per_minute' | 'per_hour' | 'per_day' | '
 export type Provider = 'openai' | 'anthropic' | 'bedrock' | 'gemini' | 'unknown';
 export type EnforcementMode = 'shadow' | 'canary' | 'enforce';
 export type CapabilityTier = 'read_only' | 'data_write' | 'payment_initiate' | 'payment_execute';
+/**
+ * DAG-TAT attestation requirement attached to a SpendPolicy.
+ *
+ * Claims listed in `requireFor` are no longer trusted as self-declared
+ * strings: the call must carry an attestation chain (a signed receipt DAG)
+ * that verifies under `signerKeys` and clears the trust/depth gate for the
+ * claimed tier. Node/envelope shapes are defined in receipts/dag.ts; they are
+ * typed structurally here to keep core types free of that dependency.
+ */
+export interface AttestationRequirement {
+    /** Capability claims that must be backed by a verified attestation chain. */
+    requireFor: CapabilityTier[];
+    /**
+     * Trusted Ed25519 signer public keys: a single hex/raw key, or a map of
+     * signer fingerprint -> key for multi-signer chains.
+     */
+    signerKeys: Record<string, string> | string;
+    /**
+     * Optional per-level overrides of the trust/depth gate thresholds
+     * (levels: READ_ONLY | TRANSACT | ADMIN | ORCHESTRATE).
+     */
+    thresholds?: Partial<Record<'READ_ONLY' | 'TRANSACT' | 'ADMIN' | 'ORCHESTRATE', {
+        minTrust?: number;
+        minDepth?: number;
+    }>>;
+}
+/** Structural shape for an attestation chain carried on a call. */
+export type AttestationChainInput = ReadonlyArray<Record<string, unknown>> | {
+    nodes: ReadonlyArray<Record<string, unknown>>;
+};
 /**
  * A spend cap with one or more thresholds across configurable windows.
  * All amounts are USD cents (integer math, no floating-point cost drift).
@@ -97,12 +127,22 @@ export interface SpendPolicy {
      *
      * The tier set is informed by the capability-tier framework of Patent D
      * §7.3 (App. No. 63/984,626). The SDK enforces a flat ordered comparison
-     * between the call's capability claim and this requirement. Sourcing the
-     * capability claim from a DAG-TAT verifier, an enterprise identity
-     * provider, an ERC-8004 credential, or any other attestation mechanism is
-     * out of scope of this package and is performed by the integrating code.
+     * between the call's capability claim and this requirement. To require the
+     * claim itself to be PROVEN rather than self-declared, also set
+     * `attestation`: listed claims must be backed by a verified receipt-DAG
+     * attestation chain (DAG-TAT) or the call is blocked.
      */
     requiredCapability?: CapabilityTier;
+    /** Optional DAG-TAT attestation requirement for capability claims.
+     *
+     * When present, any call whose `capabilityClaim` is listed in
+     * `attestation.requireFor` must carry a `CallContext.attestation` chain
+     * that (a) verifies as a signed, acyclic receipt DAG under `signerKeys`
+     * and (b) clears the trust/depth gate for the claimed tier. Verification
+     * is local (Ed25519, no network). Fails closed: a listed claim without a
+     * valid chain blocks in every enforcement mode.
+     */
+    attestation?: AttestationRequirement;
     /** Optional governance posture used by Advisor and provenance policy. */
     posture?: GovernancePosture;
     /** Optional outcome definitions for Reviewer Cascade alpha policies. */
@@ -150,6 +190,12 @@ export interface CallContext {
     builderCode?: string;
     /** Optional capability tier the caller claims */
     capabilityClaim?: CapabilityTier;
+    /**
+     * Optional DAG-TAT attestation chain backing the capability claim.
+     * Required when the policy's `attestation.requireFor` lists the claimed
+     * tier. An array of signed receipt-DAG nodes or an envelope of them.
+     */
+    attestation?: AttestationChainInput;
     /** Optional consent receipt for foreign origin model weights. */
     foreignOriginConsentReceiptId?: string;
     /** Captured provider provenance for the call. */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAErE,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAE3F,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjF,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,YAAY,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;AAEjG;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,MAAM,EAAE,WAAW,CAAC;IACpB,oEAAoE;IACpE,MAAM,EAAE,WAAW,CAAC;IACpB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uBAAuB;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAGD,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,wBAAwB,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,mBAAmB,EAAE,MAAM,EAAE,CAAA;CAAE,GACjC;IAAE,gCAAgC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,CAAC,EAAE,wBAAwB,GAAG;QAAE,OAAO,CAAC,EAAE,sBAAsB,EAAE,CAAA;KAAE,CAAC;IAC7E,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC1C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,KAAK,EAAE,UAAU,CAAC;IAClB,kEAAkE;IAClE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,6CAA6C;IAC7C,IAAI,EAAE,eAAe,CAAC;IACtB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,cAAc,CAAC;IACpC,yEAAyE;IACzE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClD,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,KAAK,EAAE,UAAU,CAAC;IAClB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,iEAAiE;IACjE,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,iDAAiD;IACjD,UAAU,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,gDAAgD;IAChD,YAAY,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC9B,4CAA4C;IAC5C,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,4BAA4B;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,iCAAiC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,eAAe,EAAE,eAAe,CAAC;IACjC,8BAA8B;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,GAAG,YAAY,CAAC;IACjE,2DAA2D;IAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,6FAA6F;IAC7F,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,QAAQ,EAAE,aAAa,CAAC;IACxB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE;;;OAGG;IACH,oBAAoB,CAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB;;;;OAIG;IACH,kBAAkB,CAAC,CACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,CAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,mDAAmD;IACnD,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC9E,iEAAiE;IACjE,IAAI,CACF,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;CACtC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAErE,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAE3F,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjF,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,YAAY,GAAG,kBAAkB,GAAG,iBAAiB,CAAC;AAEjG;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;IAC5C;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAClB,MAAM,CAAC,WAAW,GAAG,UAAU,GAAG,OAAO,GAAG,aAAa,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CACrG,CAAC;CACH;AAED,mEAAmE;AACnE,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,CAAC;AAE/H;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,MAAM,EAAE,WAAW,CAAC;IACpB,oEAAoE;IACpE,MAAM,EAAE,WAAW,CAAC;IACpB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uBAAuB;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAGD,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,wBAAwB,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,mBAAmB,EAAE,MAAM,EAAE,CAAA;CAAE,GACjC;IAAE,gCAAgC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,CAAC,EAAE,wBAAwB,GAAG;QAAE,OAAO,CAAC,EAAE,sBAAsB,EAAE,CAAA;KAAE,CAAC;IAC7E,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACrB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC1C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,KAAK,EAAE,UAAU,CAAC;IAClB,kEAAkE;IAClE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjB,6CAA6C;IAC7C,IAAI,EAAE,eAAe,CAAC;IACtB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,cAAc,CAAC;IACpC;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,yEAAyE;IACzE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClD,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,KAAK,EAAE,UAAU,CAAC;IAClB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,iEAAiE;IACjE,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,iDAAiD;IACjD,UAAU,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,gDAAgD;IAChD,YAAY,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC9B,4CAA4C;IAC5C,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,4BAA4B;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,iCAAiC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,8DAA8D;IAC9D,eAAe,EAAE,eAAe,CAAC;IACjC,8BAA8B;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,GAAG,YAAY,CAAC;IACjE,2DAA2D;IAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wEAAwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,6FAA6F;IAC7F,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,sBAAsB;IACrC,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,QAAQ,EAAE,aAAa,CAAC;IACxB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE;;;OAGG;IACH,oBAAoB,CAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB;;;;OAIG;IACH,kBAAkB,CAAC,CACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,CAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,mDAAmD;IACnD,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC9E,iEAAiE;IACjE,IAAI,CACF,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;CACtC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentguard-run/spend",
-  "version": "0.15.2",
+  "version": "0.15.4",
   "description": "All terminology and labels used in AgentGuard materials are descriptive of software functionality only, not legal definitions or guarantees of compliance. Terms like receipt, audit log, evidence, audit trail, and attestation refer solely to cryptographically-signed records produced by the software. Full functional-use disclaimer in README.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -148,14 +148,18 @@
     "src/cli/byo.ts",
     "docs/patents/CLAIM_MAPPING.md",
     "src/frameworks",
-    "src/operating-pack.ts"
+    "src/operating-pack.ts",
+    "src/dashboard"
   ],
   "scripts": {
     "build": "tsc",
     "prepublishOnly": "npm run build",
     "clean": "rm -rf dist dist-test",
-    "test": "AGENTGUARD_HOME=./dist-test/home tsc -p tsconfig.test.json && rm -rf dist-test/home && AGENTGUARD_HOME=./dist-test/home node --test dist-test/**/*.test.js",
-    "verify": "node dist/verify-test-vector.js"
+    "demo:attestation": "npx --yes tsx examples/dag-attestation-demo.ts",
+    "test": "AGENTGUARD_HOME=./dist-test/home tsc -p tsconfig.test.json && rm -rf dist-test/home && AGENTGUARD_HOME=./dist-test/home AGENTGUARD_LICENSE_ENDPOINT=http://127.0.0.1:9 node --test dist-test/**/*.test.js",
+    "verify": "node dist/verify-test-vector.js",
+    "demo:dashboard": "npx --yes tsx examples/cfo-dashboard-demo.ts",
+    "demo:hotswap": "npx --yes tsx examples/hot-swap-provenance-demo.ts"
   },
   "keywords": [
     "ai-agent-security",

package/src/dashboard/aggregate.test.ts

@@ -0,0 +1,103 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { aggregateLedger, classifyOrigin, decisionCents } from './aggregate';
+import type { SignedDecisionLogEntry, SpendDecision, Provider } from '../types';
+import type { ProvenanceProvider } from '../receipts/schema';
+
+let seq = 0;
+function entry(d: Partial<SpendDecision>): SignedDecisionLogEntry {
+  const decision: SpendDecision = {
+    decisionId: `d${seq}`,
+    timestamp: '2026-07-10T14:00:00.000Z',
+    action: 'allow',
+    triggeredCap: null,
+    triggeredScopeKey: null,
+    projectedCents: 0,
+    windowSpendBefore: 0,
+    windowSpendAfter: 0,
+    provider: 'openai',
+    modelRequested: 'gpt-5',
+    modelResolved: 'gpt-5',
+    policyId: 'p',
+    policyVersion: 1,
+    enforcementMode: 'enforce',
+    reasons: [],
+    ...d,
+  };
+  return {
+    sequence: seq++, decision, previousHash: '0'.repeat(64),
+    entryHash: 'x', signature: 'y', signerFingerprint: 'f',
+  };
+}
+function withProvenance(fam: ProvenanceProvider, route = 'api'): SpendDecision['provenance'] {
+  return {
+    model_identity: { provider: fam, model_id: 'm', model_version: '1', model_family: 'x', weights_origin_country: 'US' },
+    hosting: { provider_route: route, jurisdiction_country: 'US', jurisdiction_region: 'us' },
+    compliance: {
+      baa_in_force: false, baa_vendor: null, hipaa_eligible: false, data_retention_days: null,
+      data_residency_attested: false, foreign_origin_weight_flag: false,
+      foreign_origin_consent_receipt_id: null, inference_billing: 'customer_managed',
+    },
+    captured_at: '2026-07-10T14:00:00.000Z',
+  };
+}
+
+test('classifyOrigin: self-hosted provenance = dark, not inferred', () => {
+  const d = entry({ provenance: withProvenance('self_hosted') }).decision;
+  assert.deepEqual(classifyOrigin(d), { origin: 'dark', inferred: false });
+});
+
+test('classifyOrigin: open-weight family = dark; frontier family = frontier', () => {
+  assert.equal(classifyOrigin(entry({ provenance: withProvenance('deepseek') }).decision).origin, 'dark');
+  assert.equal(classifyOrigin(entry({ provenance: withProvenance('anthropic') }).decision).origin, 'frontier');
+});
+
+test('classifyOrigin: no provenance falls back to provider and is flagged inferred', () => {
+  assert.deepEqual(classifyOrigin(entry({ provider: 'anthropic' }).decision), { origin: 'frontier', inferred: true });
+  assert.deepEqual(classifyOrigin(entry({ provider: 'unknown' as Provider }).decision), { origin: 'dark', inferred: true });
+});
+
+test('decisionCents: blocked = 0, settled actual beats projection', () => {
+  assert.equal(decisionCents(entry({ action: 'block', projectedCents: 500 }).decision), 0);
+  assert.equal(decisionCents(entry({ projectedCents: 500, actualCents: 420 }).decision), 420);
+  assert.equal(decisionCents(entry({ projectedCents: 500 }).decision), 500);
+});
+
+test('aggregate: dark share, savings, true-up, and buckets', () => {
+  seq = 0;
+  const entries = [
+    entry({ action: 'allow', provider: 'anthropic', modelResolved: 'claude-5', projectedCents: 100, actualCents: 100, provenance: withProvenance('anthropic') }),
+    entry({ action: 'allow', modelResolved: 'glm-5.2', projectedCents: 4, actualCents: 4, provider: 'unknown' as Provider, provenance: withProvenance('self_hosted', 'self-hosted-gpu') }),
+    entry({ action: 'downgrade', provider: 'openai', modelResolved: 'gpt-5-mini', projectedCents: 200, actualCents: 20 }),
+    entry({ action: 'block', provider: 'openai', modelResolved: 'gpt-5', projectedCents: 300 }),
+    entry({ entryType: 'settlement', actualCents: 98, projectedCents: 0 }),
+  ];
+  const dash = aggregateLedger(entries, { verified: true, entries: entries.length });
+
+  // 4 enforcement decisions (settlement not counted as a call)
+  assert.equal(dash.totals.calls, 4);
+  // spend = 100 + 4 + 20 + 0(blocked) = 124
+  assert.equal(dash.totals.spentCents, 124);
+  assert.equal(dash.totals.darkCents, 4);
+  assert.equal(dash.totals.frontierCents, 120); // 100 anthropic + 20 downgraded openai(inferred frontier)
+  assert.equal(dash.totals.darkSharePct, Math.round((4 / 124) * 1000) / 10);
+  // savings = downgrade delta (200-20=180) + blocked projection (300) = 480
+  assert.equal(dash.enforcement.estimatedSavedCents, 480);
+  assert.equal(dash.enforcement.blocked, 1);
+  assert.equal(dash.enforcement.downgraded, 1);
+  // true-up: settled actual 98 vs reserved (100+4+200+300=604)
+  assert.equal(dash.trueUp.settledCents, 98);
+  assert.equal(dash.trueUp.reservedCents, 604);
+  assert.equal(dash.trueUp.driftCents, 98 - 604);
+  // integrity passthrough
+  assert.equal(dash.integrity.verified, true);
+  // model bucket present
+  assert.ok(dash.byModel.find(b => b.key === 'claude-5' && b.cents === 100));
+});
+
+test('aggregate: empty ledger is safe', () => {
+  const dash = aggregateLedger([]);
+  assert.equal(dash.totals.calls, 0);
+  assert.equal(dash.totals.darkSharePct, 0);
+  assert.equal(dash.integrity.verified, false);
+});

package/src/dashboard/aggregate.ts

@@ -0,0 +1,201 @@
+/**
+ * AgentGuard® — CFO cost dashboard, read side.
+ *
+ * Aggregates the signed, hash-chained decision log into a CFO-legible view:
+ * spend over time, by model, by provider, frontier-vs-"dark" (local /
+ * open-weight / self-hosted) tokens, reserved-vs-settled true-up, an
+ * enforcement/savings summary, and a tamper-evidence check. Everything is
+ * derived IN-PROCESS from the customer-held ledger — no proxy, no data plane,
+ * no provider billing API required.
+ *
+ * The "dark token" view is the differentiator: open-source / self-hosted usage
+ * never appears on any provider's bill, so a provider console structurally
+ * cannot show it. The signed ledger can, because the receipt is written where
+ * the call is made.
+ *
+ * Honest scope note: the signed SpendDecision carries time, provider, model,
+ * cents, action, builderCode, entryType and a provenance block — but NOT full
+ * tenant/agent identity (only the scope key a cap matched on). Per-agent /
+ * per-tenant breakdown therefore requires recording a metadata-only scope
+ * digest on the decision; see `scopeKeyBreakdown` (best-effort from
+ * triggeredScopeKey) and DASHBOARD.md. We do not invent attribution the ledger
+ * does not carry.
+ *
+ * Patent notice: signed hash-chained decision log (U.S. application filed May
+ * 2026); composes with DAG Trust Attestation, Patent D §7.3 (App. No.
+ * 63/984,626). AgentGuard® is a U.S. registered trademark (Reg. No. 8281464)
+ * of Dunecrest Ventures Inc.
+ */
+import type { Provider, SignedDecisionLogEntry, SpendDecision } from '../types';
+import type { ProvenanceProvider } from '../receipts/schema';
+
+/** Model families that are open-weight / self-hostable → "dark" when self-hosted. */
+const OPEN_WEIGHT_FAMILIES = new Set<ProvenanceProvider>([
+  'meta', 'mistral', 'cohere', 'fireworks', 'baseten', 'together',
+  'deepseek', 'moonshot', 'alibaba', 'self_hosted',
+]);
+const FRONTIER_PROVIDERS = new Set<Provider>(['openai', 'anthropic', 'gemini', 'bedrock']);
+
+export type TokenOrigin = 'frontier' | 'dark' | 'unknown';
+
+/** Classify a decision as frontier vs dark (local/open-weight) spend.
+ *  Prefers the signed provenance block; falls back to the coarse provider
+ *  field and labels the result `inferred` so the UI never overstates. */
+export function classifyOrigin(decision: SpendDecision): { origin: TokenOrigin; inferred: boolean } {
+  const prov = decision.provenance;
+  if (prov?.model_identity) {
+    const fam = prov.model_identity.provider;
+    if (fam === 'self_hosted') return { origin: 'dark', inferred: false };
+    const selfHosted = /self|local|on[-_]?prem|in[-_]?house/i.test(prov.hosting?.provider_route ?? '');
+    if (selfHosted) return { origin: 'dark', inferred: false };
+    if (OPEN_WEIGHT_FAMILIES.has(fam)) return { origin: 'dark', inferred: false };
+    if (fam === 'anthropic' || fam === 'openai' || fam === 'google') return { origin: 'frontier', inferred: false };
+  }
+  if (FRONTIER_PROVIDERS.has(decision.provider)) return { origin: 'frontier', inferred: true };
+  if (decision.provider === 'unknown') return { origin: 'dark', inferred: true };
+  return { origin: 'unknown', inferred: true };
+}
+
+/** Cents this decision actually cost the org: settled actuals win over the
+ *  pre-dispatch projection; blocked calls cost zero. */
+export function decisionCents(decision: SpendDecision): number {
+  if (decision.action === 'block') return 0;
+  if (typeof decision.actualCents === 'number') return decision.actualCents;
+  return decision.projectedCents ?? 0;
+}
+
+export interface BucketSpend {
+  key: string;
+  cents: number;
+  calls: number;
+}
+export interface CfoDashboard {
+  generatedAt: string;
+  windowStart: string | null;
+  windowEnd: string | null;
+  totals: {
+    calls: number;
+    spentCents: number;
+    frontierCents: number;
+    darkCents: number;
+    darkSharePct: number;      // dark / total spend, 0..100
+    inferredCents: number;     // spend whose origin was inferred, not from provenance
+  };
+  enforcement: {
+    allowed: number;
+    downgraded: number;
+    blocked: number;
+    shadow: number;
+    /** Cents NOT spent because a call was blocked or downgraded — the ROI line. */
+    estimatedSavedCents: number;
+  };
+  trueUp: {
+    reservedCents: number;     // sum of projections on decision entries
+    settledCents: number;      // sum of actuals on settlement entries
+    driftCents: number;        // settled - reserved (over/under-estimate)
+  };
+  byHour: BucketSpend[];       // ISO hour → spend
+  byModel: BucketSpend[];      // modelResolved → spend, desc
+  byProvider: BucketSpend[];
+  byBuilderCode: BucketSpend[];
+  scopeKeyBreakdown: BucketSpend[];  // best-effort from triggeredScopeKey (may be sparse)
+  integrity: { verified: boolean; entries: number; reason?: string; sequence?: number };
+}
+
+function topBuckets(map: Map<string, BucketSpend>, limit = 50): BucketSpend[] {
+  return [...map.values()].sort((a, b) => b.cents - a.cents).slice(0, limit);
+}
+
+function bump(map: Map<string, BucketSpend>, key: string, cents: number) {
+  const cur = map.get(key) ?? { key, cents: 0, calls: 0 };
+  cur.cents += cents;
+  cur.calls += 1;
+  map.set(key, cur);
+}
+
+/**
+ * Build the CFO dashboard from signed ledger entries. Pure + synchronous.
+ * `integrity` is passed in (compute via verifyChain, which is async) so this
+ * stays a pure function; pass null to skip.
+ */
+export function aggregateLedger(
+  entries: SignedDecisionLogEntry[],
+  integrity: CfoDashboard['integrity'] | null = null,
+  now: string = new Date().toISOString(),
+): CfoDashboard {
+  const byHour = new Map<string, BucketSpend>();
+  const byModel = new Map<string, BucketSpend>();
+  const byProvider = new Map<string, BucketSpend>();
+  const byBuilder = new Map<string, BucketSpend>();
+  const byScopeKey = new Map<string, BucketSpend>();
+
+  let calls = 0, spent = 0, frontier = 0, dark = 0, inferred = 0;
+  let allowed = 0, downgraded = 0, blocked = 0, shadow = 0, saved = 0;
+  let reserved = 0, settled = 0;
+  let minTs: string | null = null, maxTs: string | null = null;
+
+  for (const entry of entries) {
+    const d = entry.decision;
+    const kind = d.entryType ?? 'decision';
+
+    if (kind === 'settlement') {
+      if (typeof d.actualCents === 'number') settled += d.actualCents;
+      // settlement entries adjust true-up only; not double-counted as calls
+      continue;
+    }
+    if (kind === 'outcome' || kind === 'governance') continue;
+
+    // provider enforcement decision
+    calls += 1;
+    const cents = decisionCents(d);
+    spent += cents;
+    reserved += d.projectedCents ?? 0;
+
+    const { origin, inferred: wasInferred } = classifyOrigin(d);
+    if (origin === 'frontier') frontier += cents;
+    else if (origin === 'dark') dark += cents;
+    if (wasInferred) inferred += cents;
+
+    switch (d.action) {
+      case 'allow': allowed += 1; break;
+      case 'downgrade': downgraded += 1; saved += Math.max(0, (d.projectedCents ?? 0) - cents); break;
+      case 'block': blocked += 1; saved += d.projectedCents ?? 0; break;
+      case 'shadow': shadow += 1; break;
+    }
+
+    const ts = d.timestamp;
+    if (ts) {
+      if (!minTs || ts < minTs) minTs = ts;
+      if (!maxTs || ts > maxTs) maxTs = ts;
+      bump(byHour, ts.slice(0, 13) + ':00', cents); // ISO hour bucket
+    }
+    bump(byModel, d.modelResolved || d.modelRequested || 'unknown', cents);
+    bump(byProvider, d.provider || 'unknown', cents);
+    if (d.builderCode) bump(byBuilder, d.builderCode, cents);
+    if (d.triggeredScopeKey) bump(byScopeKey, d.triggeredScopeKey, cents);
+  }
+
+  return {
+    generatedAt: now,
+    windowStart: minTs,
+    windowEnd: maxTs,
+    totals: {
+      calls,
+      spentCents: spent,
+      frontierCents: frontier,
+      darkCents: dark,
+      darkSharePct: spent > 0 ? Math.round((dark / spent) * 1000) / 10 : 0,
+      inferredCents: inferred,
+    },
+    enforcement: { allowed, downgraded, blocked, shadow, estimatedSavedCents: saved },
+    trueUp: { reservedCents: reserved, settledCents: settled, driftCents: settled - reserved },
+    byHour: [...byHour.values()].sort((a, b) => a.key.localeCompare(b.key)),
+    byModel: topBuckets(byModel),
+    byProvider: topBuckets(byProvider),
+    byBuilderCode: topBuckets(byBuilder),
+    scopeKeyBreakdown: topBuckets(byScopeKey),
+    integrity: integrity ?? { verified: false, entries: entries.length, reason: 'NOT_CHECKED' },
+  };
+}
+
+export const centsToUsd = (c: number): string => `$${(c / 100).toFixed(2)}`;

package/src/receipts/portability.test.ts

@@ -0,0 +1,68 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { workloadProvenance, formatLineage } from './portability';
+import type { SignedDecisionLogEntry, SpendDecision, Provider } from '../types';
+import type { ProvenanceProvider } from './schema';
+
+let seq = 0;
+function entry(model: string, fam: ProvenanceProvider, route: string, extra: Partial<SpendDecision> = {}): SignedDecisionLogEntry {
+  const decision: SpendDecision = {
+    decisionId: `d${seq}`, timestamp: `2026-07-10T14:${String(seq).padStart(2, '0')}:00.000Z`,
+    action: 'allow', triggeredCap: null, triggeredScopeKey: 'tenant:acme|agent:planner',
+    projectedCents: 10, actualCents: 10, windowSpendBefore: 0, windowSpendAfter: 0,
+    provider: (fam === 'self_hosted' ? 'unknown' : fam) as Provider,
+    modelRequested: model, modelResolved: model, policyId: 'p', policyVersion: 1,
+    enforcementMode: 'enforce', reasons: [],
+    provenance: {
+      model_identity: { provider: fam, model_id: model, model_version: '1', model_family: fam, weights_origin_country: 'US' },
+      hosting: { provider_route: route, jurisdiction_country: 'US', jurisdiction_region: 'us' },
+      compliance: { baa_in_force: false, baa_vendor: null, hipaa_eligible: false, data_retention_days: null, data_residency_attested: false, foreign_origin_weight_flag: false, foreign_origin_consent_receipt_id: null, inference_billing: 'customer_managed' },
+      captured_at: '2026-07-10T14:00:00.000Z',
+    },
+    ...extra,
+  };
+  return { sequence: seq++, decision, previousHash: '0'.repeat(64), entryHash: 'x', signature: 'y', signerFingerprint: 'f' };
+}
+
+test('lineage, swaps, and boundary crossing across a hot-swap sequence', () => {
+  seq = 0;
+  const entries = [
+    entry('claude-5', 'anthropic', 'anthropic-api'),
+    entry('claude-5', 'anthropic', 'anthropic-api'),     // repeat: no swap
+    entry('gpt-5-mini', 'openai', 'openai-api'),          // frontier→frontier swap
+    entry('glm-5.2', 'self_hosted', 'self-hosted-gpu'),   // frontier→dark swap (boundary)
+  ];
+  const report = workloadProvenance(entries, { verified: true, entries: entries.length });
+  assert.equal(report.workloads.length, 1);
+  const w = report.workloads[0];
+  assert.deepEqual(w.lineage, ['claude-5', 'gpt-5-mini', 'glm-5.2']);
+  assert.equal(formatLineage(w), 'claude-5 → gpt-5-mini → glm-5.2');
+  assert.equal(w.swaps.length, 2);
+  assert.equal(w.swaps[0].crossesBoundary, false);        // frontier→frontier
+  assert.equal(w.swaps[1].crossesBoundary, true);         // frontier→dark
+  assert.equal(w.swaps[1].fromModel, 'gpt-5-mini');
+  assert.equal(w.swaps[1].toModel, 'glm-5.2');
+  assert.equal(w.darkCents, 10);
+  assert.equal(w.frontierCents, 30);
+  assert.equal(report.continuity.verified, true);         // one chain spans all swaps
+});
+
+test('groups by keyOf; separate workloads do not merge', () => {
+  seq = 0;
+  const a = entry('claude-5', 'anthropic', 'api', { triggeredScopeKey: 'wf:A' });
+  const b = entry('glm-5.2', 'self_hosted', 'self', { triggeredScopeKey: 'wf:B' });
+  const report = workloadProvenance([a, b], { verified: true, entries: 2 });
+  assert.equal(report.workloads.length, 2);
+  assert.ok(report.workloads.every(w => w.swaps.length === 0));
+});
+
+test('settlement/outcome entries add no model steps', () => {
+  seq = 0;
+  const entries = [
+    entry('claude-5', 'anthropic', 'api'),
+    entry('claude-5', 'anthropic', 'api', { entryType: 'settlement', actualCents: 9 }),
+  ];
+  const w = workloadProvenance(entries, { verified: true, entries: 2 }).workloads[0];
+  assert.equal(w.calls, 1);
+  assert.equal(w.swaps.length, 0);
+});