@agentguard-run/spend 0.4.3 → 0.5.0

package/dist/workflow/types.d.ts

@@ -0,0 +1,74 @@
+export type WorkflowState = 'active' | 'paused' | 'cancelled' | 'completed' | 'budget_capped' | 'duration_capped';
+export type ReviewerVerdict = 'approve' | 'block' | 'revise' | null;
+export interface WorkflowConfig {
+    name: string;
+    budget_cap_usd: number;
+    duration_cap_hours: number;
+    checkpoint_every_outcomes?: number;
+    parent_outcomes?: string[];
+    resume_if_exists?: boolean;
+    metadata?: Record<string, string | number | boolean>;
+    user_id?: string;
+    api_base_url?: string;
+    license_key?: string;
+    post_json?: (url: string, body: unknown, headers: Record<string, string>) => Promise<unknown>;
+    get_json?: (url: string, headers: Record<string, string>) => Promise<unknown>;
+}
+export interface ReviewerCascadeEvidence {
+    triggered: boolean;
+    drafter_model: string | null;
+    reviewer_model: string | null;
+    drafter_output_hash: string | null;
+    reviewer_verdict: ReviewerVerdict;
+    reviewer_reasoning_hash: string | null;
+    review_started_at: string | null;
+    review_completed_at: string | null;
+}
+export interface ReceiptV2 {
+    receipt_id: string;
+    schema_version: 2;
+    outcome_name: string;
+    user_id: string;
+    cost_usd: number;
+    signed_at: string;
+    signature: string;
+    public_key_fingerprint: string;
+    workflow_id: string | null;
+    parent_receipt_id: string | null;
+    chain_validation_hash: string | null;
+    workflow_checkpoint_idx: number | null;
+    workflow_total_spend_usd_to_date: number | null;
+    is_checkpoint: boolean;
+    checkpoint_label: string | null;
+    reviewer_cascade: ReviewerCascadeEvidence | null;
+    receipt_type?: 'outcome' | 'checkpoint' | 'cancel' | 'cap_hit' | 'completed';
+    cancelled_reason?: string | null;
+}
+export interface CheckpointReceipt extends ReceiptV2 {
+    is_checkpoint: true;
+}
+export interface WorkflowStatus {
+    workflow_id: string;
+    state: WorkflowState;
+    total_spend_usd: number;
+    budget_cap_usd: number;
+    budget_remaining_usd: number;
+    budget_pct_used: number;
+    outcome_count: number;
+    last_receipt_id: string | null;
+    last_checkpoint_id: string | null;
+    last_chain_hash: string | null;
+    duration_elapsed_ms: number;
+    duration_cap_ms: number;
+    duration_remaining_ms: number;
+}
+export interface ValidationResult {
+    ok: true;
+}
+export interface ValidationFailure {
+    ok: false;
+    broken_at: number;
+    reason: 'signature_invalid' | 'chain_hash_mismatch' | 'parent_reference_mismatch';
+}
+export type ChainValidationResult = ValidationResult | ValidationFailure;
+//# sourceMappingURL=types.d.ts.map

package/dist/workflow/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/workflow/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,QAAQ,GACR,WAAW,GACX,WAAW,GACX,eAAe,GACf,iBAAiB,CAAC;AAEtB,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9F,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,EAAE,eAAe,CAAC;IAClC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,CAAC,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,gCAAgC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,YAAY,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IAC7E,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IAClD,aAAa,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,aAAa,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,IAAI,CAAC;CACV;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,mBAAmB,GAAG,qBAAqB,GAAG,2BAA2B,CAAC;CACnF;AAED,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC"}

package/dist/workflow/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/workflow/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/workflow/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@agentguard-run/spend",
-  "version": "0.4.3",
-  "description": "Local-runtime spend caps and capability-gated model routing for AI agents. Prompts, API keys, and signing keys stay inside the customer runtime. Zero data plane involvement.",
+  "version": "0.5.0",
+  "description": "All terminology and labels used in AgentGuard materials are descriptive of software functionality only, not legal definitions or guarantees of compliance. Terms like receipt, audit log, evidence, audit trail, and attestation refer solely to cryptographically-signed records produced by the software. Full functional-use disclaimer in README.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -44,6 +44,11 @@
       "types": "./dist/advisor/conversation.d.ts",
       "require": "./dist/advisor/conversation.js",
       "default": "./dist/advisor/conversation.js"
+    },
+    "./workflow": {
+      "types": "./dist/workflow/index.d.ts",
+      "require": "./dist/workflow/index.js",
+      "default": "./dist/workflow/index.js"
     }
   },
   "bin": {
@@ -65,7 +70,8 @@
     "src/cli/wizard.ts",
     "src/bindings",
     "src/advisor",
-    "src/cli/advisor.ts"
+    "src/cli/advisor.ts",
+    "src/workflow"
   ],
   "scripts": {
     "build": "tsc",
@@ -103,7 +109,8 @@
     "url": "https://agentguard.run/contact"
   },
   "dependencies": {
-    "@noble/ed25519": ">=2.3.0 <4.0.0"
+    "@noble/ed25519": "^3.1.0",
+    "@noble/hashes": "^2.2.0"
   },
   "peerDependencies": {
     "@anthropic-ai/sdk": ">=0.30.0",

package/src/advisor/conversation.ts

@@ -38,6 +38,9 @@ export interface AdvisorBusinessProfile {
   requiredCapability: CapabilityTier;
   primaryModel: string;
   fallbackModel: string;
+  hostedOssModel: string;
+  offlineModel: string;
+  baaCoveredModel: string;
   perCallCapCents: number;
   perDayCapCents: number;
   perMonthCapCents: number;
@@ -70,8 +73,40 @@ export const ADVISOR_QUESTIONS: AdvisorQuestion[] = [
   { id: 'confirm', prompt: 'Confirm the setup or list any refinements before I write policy.yaml and quickstart code.' },
 ];
 
+
+
+const CHINESE_ORIGIN_MODEL_PATTERNS = [/kimi/i, /qwen/i, /deepseek/i, /(^|\/)yi([-/]|$)/i, /01-ai/i];
+const HOSTED_OSS_DEFAULT = 'baseten/llama-4';
+const HOSTED_OSS_VELOCITY = 'baseten/llama-4-13b';
+const OFFLINE_DEFAULT = 'offline/llama-4-m4-ultra';
+const BAA_COVERED_DEFAULT = 'anthropic.claude-sonnet-4-v1:0';
+
+export function isChineseOriginModel(model: string): boolean {
+  return CHINESE_ORIGIN_MODEL_PATTERNS.some((pattern) => pattern.test(model));
+}
+
+export function enforceAdvisorModelPolicy(model: string, posture: GovernancePosture, replacement = 'anthropic/claude-haiku-4-5'): string {
+  if (posture === 'compliance' && isChineseOriginModel(model)) {
+    console.warn(`AgentGuard Advisor blocked ${model} for compliance posture and selected ${replacement}.`);
+    return replacement;
+  }
+  return model;
+}
+
+function defaultModelsFor(vertical: string, hint: { primary: string; fallback: string }, posture: GovernancePosture): { primary: string; fallback: string; hostedOss: string; offline: string; baaCovered: string } {
+  if (posture === 'velocity') {
+    return { primary: HOSTED_OSS_VELOCITY, fallback: 'anthropic/claude-haiku-4-5', hostedOss: HOSTED_OSS_VELOCITY, offline: OFFLINE_DEFAULT, baaCovered: BAA_COVERED_DEFAULT };
+  }
+  if (posture === 'compliance') {
+    const regulatedPrimary = vertical === 'accounting' ? 'openai/gpt-5' : vertical === 'real-estate' ? 'google/gemini-3.1-pro-preview' : 'anthropic/claude-opus-4-7';
+    return { primary: regulatedPrimary, fallback: 'anthropic/claude-sonnet-4-6', hostedOss: HOSTED_OSS_DEFAULT, offline: OFFLINE_DEFAULT, baaCovered: BAA_COVERED_DEFAULT };
+  }
+  return { primary: hint.primary, fallback: HOSTED_OSS_DEFAULT, hostedOss: HOSTED_OSS_DEFAULT, offline: OFFLINE_DEFAULT, baaCovered: BAA_COVERED_DEFAULT };
+}
+
 const VERTICAL_HINTS: Array<{ vertical: string; needles: string[]; scopeLabel: string; capability: CapabilityTier; primary: string; fallback: string; perCall: number }> = [
   { vertical: 'law-firm', needles: ['law', 'legal', 'attorney', 'paralegal', 'contract', 'matter', 'discovery'], scopeLabel: 'matter', capability: 'data_write', primary: 'anthropic/claude-sonnet-4-6', fallback: 'anthropic/claude-haiku-4-5', perCall: 300 },
+  { vertical: 'insurance', needles: ['insurance', 'carrier', 'producer', 'agency', 'policy comparison', 'quote letter', 'certificate of insurance', 'renewal', 'e&o'], scopeLabel: 'policy', capability: 'data_write', primary: 'anthropic/claude-sonnet-4-6', fallback: 'baseten/llama-4', perCall: 150 },
   { vertical: 'healthcare', needles: ['health', 'medical', 'dental', 'clinic', 'patient', 'chart', 'hipaa', 'encounter'], scopeLabel: 'encounter', capability: 'data_write', primary: 'anthropic.claude-sonnet-4-v1:0', fallback: 'amazon.nova-lite-v1:0', perCall: 300 },
   { vertical: 'ecommerce', needles: ['shopify', 'commerce', 'store', 'order', 'refund', 'chargeback', 'fraud', 'returns'], scopeLabel: 'order', capability: 'payment_initiate', primary: 'openai/gpt-5-mini', fallback: 'openai/gpt-4o-mini', perCall: 25 },
   { vertical: 'accounting', needles: ['accounting', 'bookkeeping', 'tax', 'ledger', 'receipt', 'close', 'audit', 'sox'], scopeLabel: 'engagement', capability: 'data_write', primary: 'anthropic/claude-sonnet-4-6', fallback: 'anthropic/claude-haiku-4-5', perCall: 150 },
@@ -157,6 +192,7 @@ export function buildBusinessProfile(answers: AdvisorAnswers, cwd = process.cwd(
   const tasks = parseTasks(answers.tasks ?? answers.building ?? hint.vertical);
   const perMonthCapCents = Math.max(1000, budgetCents);
   const perDayCapCents = Math.max(hint.perCall * 10, Math.ceil(perMonthCapCents / 20));
+  const models = defaultModelsFor(hint.vertical, hint, posture);
   return {
     vertical: hint.vertical,
     tenantId: tenantIdFromBusiness(answers.building ?? hint.vertical),
@@ -165,8 +201,11 @@ export function buildBusinessProfile(answers: AdvisorAnswers, cwd = process.cwd(
     tasks,
     monthlyBudgetCents: perMonthCapCents,
     requiredCapability: capabilityFor(joined, hint.capability, posture),
-    primaryModel: hint.primary,
-    fallbackModel: hint.fallback,
+    primaryModel: enforceAdvisorModelPolicy(models.primary, posture),
+    fallbackModel: enforceAdvisorModelPolicy(models.fallback, posture),
+    hostedOssModel: enforceAdvisorModelPolicy(models.hostedOss, posture),
+    offlineModel: models.offline,
+    baaCoveredModel: enforceAdvisorModelPolicy(models.baaCovered, posture),
     perCallCapCents: hint.perCall,
     perDayCapCents,
     perMonthCapCents,

package/src/advisor/output.ts

@@ -120,6 +120,10 @@ requiredCapability: ${policy.requiredCapability ?? 'read_only'}
 scope:
   tenantId: ${quoteYaml(policy.scope.tenantId)}
 models:
+  cloudFrontierPrimary: ${profile.primaryModel}
+  hostedOssFallback: ${profile.hostedOssModel}
+  offlineOption: ${profile.offlineModel}
+  baaCoveredOption: ${profile.baaCoveredModel}
   primary: ${profile.primaryModel}
   fallback: ${profile.fallbackModel}
 governancePosture:
@@ -127,7 +131,10 @@ governancePosture:
   auditRetentionDays: ${posture.auditRetentionDays}
   approvalGates: ${posture.approvalGates}
   downgradeStyle: ${posture.downgradeStyle}
-${canary}tasks:
+${canary}reviewerCascade:
+  default: ${profile.posture === 'compliance' ? 'always' : 'risk_triggered'}
+  triageClassifier: local-3b
+tasks:
 ${tasks}
 caps:
 ${caps}
@@ -180,7 +187,7 @@ function whyForWindow(window: string): string {
 
 function systemInstructions(profile: AdvisorBusinessProfile): string {
   const posture = postureProfile(profile.posture);
-  return `Run ${profile.vertical} tasks with ${profile.requiredCapability} capability under ${posture.label} governance posture. Prefer ${profile.primaryModel} for high-value work and ${profile.fallbackModel} for routine work. Keep evidence pointers in outputs and escalate anything outside the configured capability tier.`;
+  return `Run ${profile.vertical} tasks with ${profile.requiredCapability} capability under ${posture.label} governance posture. Prefer ${profile.primaryModel} for high-value work, ${profile.hostedOssModel} for hosted OSS fallback, ${profile.offlineModel} for offline runs, and ${profile.baaCoveredModel} when a BAA-covered provider is required. Keep evidence pointers in outputs and escalate anything outside the configured capability tier.`;
 }
 
 function quoteYaml(value: string): string {

package/src/advisor/system-prompt.ts

@@ -70,7 +70,9 @@ Standard: default for most SaaS, e-commerce, real estate, agencies, local servic
 
 Compliance: for law, healthcare, dental, accounting, SOX, fintech, and regulated workflows. Default mode is canary, meaning enforce with a 5 percent sticky shadow sample. Capabilities are strict, with payment_execute for financial workflows and data_write minimum for PHI or PII workflows. Downgrade chains are conservative, and regulated capabilities block instead of downgrade. Audit retention is 7 years. Per-action approval gates are on for payment_execute.
 
-Custom: a Solo tier posture for future Outcome Builder workflows. In this release, tell the user Solo tier is required and choose Velocity, Standard, or Compliance instead.`,
+Custom: a Solo tier posture for future Outcome Builder workflows. In this release, tell the user Solo tier is required and choose Velocity, Standard, or Compliance instead.
+
+Chinese-origin model block for compliance posture: do not recommend Kimi K2, Qwen, DeepSeek, Yi, 01.AI, or hosted derivatives of those families for regulated or sensitive workflows. The block applies to cloud-frontier routes and hosted-OSS routes. If a user asks for one, state that Advisor cannot select it for compliance posture and offer Claude, GPT, Gemini, Llama on Baseten, Azure OpenAI, AWS Bedrock, Google Vertex, or Amazon Q instead.`,
   },
 
   {
@@ -80,7 +82,7 @@ Custom: a Solo tier posture for future Outcome Builder workflows. In this releas
 
 Law firms. Default posture: compliance. Pricing anchor: Solo $49 is about one Clio EasyStart seat. Startup $199 is below one CoCounsel seat. Growth $999 is a fraction of one Harvey seat. Outcomes: contract redlined, cap $2.00, model anthropic/claude-sonnet-4-6, tier data_write. Research memo delivered, cap $3.00, model anthropic/claude-opus-4-7, tier read_only. Matter intake closed, cap $1.50, model anthropic/claude-haiku-4-5, tier data_write. Deposition pack assembled, cap $5.00, model anthropic/claude-opus-4-7, tier read_only. Brief or motion drafted, cap $7.50, model anthropic/claude-opus-4-7, tier data_write. Compliance citations: ABA Model Rule 1.1 competence, ABA Model Rule 1.6 confidentiality, ABA Formal Opinion 512 on generative AI.
 
-Healthcare and dental. Default posture: compliance. Pricing anchor: Solo $49 is below common scribe entry pricing. Startup $199 fits a small multi-provider practice. Growth $999 governs several AI vendors. Outcomes: encounter documented, cap $0.50, model anthropic/claude-haiku-4-5 or BAA-covered Bedrock Anthropic, tier data_write. Claim coded and submitted, cap $0.25, model anthropic/claude-haiku-4-5, tier data_write. Prior auth letter drafted, cap $1.00, model anthropic/claude-sonnet-4-6, tier data_write. Inbox message resolved, cap $0.20, model anthropic/claude-haiku-4-5, tier data_write. Front desk call resolved, cap $0.30, model anthropic/claude-haiku-4-5, tier data_write. Compliance citations: 45 CFR 164.312(b) audit controls, 45 CFR 164.312(c)(1) integrity, 45 CFR 164.314 BAA organizational requirements.
+Insurance agencies. Default posture: compliance. Pricing anchor: Solo $49 is about half a HawkSoft seat at $94 per user. Outcomes: quote letter drafted, cap $0.50, model anthropic/claude-haiku-4-5, tier data_write. Policy comparison generated, cap $1.50, model anthropic/claude-sonnet-4-6, tier data_write. Certificate of insurance issued, cap $0.25, model anthropic/claude-haiku-4-5, tier data_write. Renewal outreach completed, cap $0.15, model anthropic/claude-haiku-4-5, tier data_write. Inbound lead qualified, cap $0.30, model openai/gpt-5-mini, tier data_write. Reviewer Cascade always runs for policy comparisons, quote letters, and claims correspondence. Compliance citations: NAIC Model Bulletin on AI systems, 11 NYCRR section 215.13, Verisk CG 40 47 and CG 40 48 AI exclusions.
 
 Accounting and bookkeeping. Default posture: compliance. Pricing anchor: Solo $49 is about one QuickBooks or low-end practice seat. Startup $199 is below four Karbon Team seats. Growth $999 fits a 10 to 15 staff firm. Outcomes: bookkeeping cycle closed, cap $5.00, model anthropic/claude-haiku-4-5, tier data_write. Tax return drafted, cap $7.50, model openai/gpt-5, tier data_write. IRS or state notice response, cap $3.00, model anthropic/claude-sonnet-4-6, tier data_write. Client email resolved, cap $0.50, model anthropic/claude-haiku-4-5, tier data_write. Workpaper completed, cap $4.00, model openai/gpt-5, tier data_write. Compliance citations: PCAOB AS 1215 audit documentation retention, SOX 802 and 18 U.S.C. 1519 record preservation, GLBA Safeguards Rule 16 CFR Part 314.
 
@@ -96,7 +98,7 @@ Real estate and mortgage. Default posture: standard. Pricing anchor: Solo $49 is
 Law firm:
 Tasks: contract redline, novel contract review, legal research, brief drafting, deposition prep, discovery review. Models: anthropic/claude-haiku-4-5 for boilerplate and discovery, anthropic/claude-sonnet-4-6 for research and novel terms, anthropic/claude-opus-4-7 for brief drafting and deposition analysis. Caps: $0.25 discovery tagging, $1 contract redline, $3 novel review, $4 legal research, $8 brief drafting. Scope key: matter or client matter code in agentId, attorney in userId. Compliance: privilege workflows need zero proxy, per-matter accounting, jurisdiction-aware model allowlists, and signed decision receipts for audit packets.
 
-Healthcare:
+Healthcare partner-only:
 Tasks: patient triage, chart review, clinical documentation drafting, prior authorization narrative, medical literature search, patient education, insurance verification, appointment scheduling. Models: BAA-covered Bedrock Anthropic for PHI, OpenRouter openai/gpt-5-mini or anthropic/claude-haiku-4-5 for non-PHI. Caps: $0.10 education, $0.25 insurance verification, $0.50 triage, $2 chart review, $3 documentation, $5 prior authorization. Scope key: encounter or patient encounter in agentId, clinician in userId. Compliance: PHI workflows require data_write minimum plus provider BAA controls. Non-PHI can use OpenRouter.
 
 E-commerce:
@@ -160,6 +162,7 @@ anthropic.claude-opus-4-v1:0: input $15.00, output $75.00.
 anthropic.claude-sonnet-4-v1:0: input $3.00, output $15.00.
 amazon.nova-pro-v1:0: input $0.80, output $3.20.
 amazon.nova-lite-v1:0: input $0.06, output $0.24.
+Baseten hosted OSS default: baseten/llama-4 at $0.108 per H100-hour as a cost-best hosted fallback. Velocity posture may use baseten/llama-4-13b as primary with anthropic/claude-haiku-4-5 as fallback. Compliance posture uses a cloud frontier primary such as anthropic/claude-opus-4-7, openai/gpt-5, or google/gemini-3.1-pro-preview, with Reviewer Cascade always triggered for regulated outcomes. Offline options are Llama-4 on M4 Ultra or dual H100. BAA-covered options are Azure OpenAI, AWS Bedrock, Google Vertex, and Amazon Q.
 For unknown live OpenRouter models, ask the customer to run agentguard models --sync-pricing before using them in a policy.`,
   },
   {

package/src/cli/advisor.ts

@@ -12,6 +12,7 @@ import { readDecisionSpend, reviewAnomalies } from '../advisor/anomaly';
 import { ADVISOR_SYSTEM_PROMPT } from '../advisor/system-prompt';
 import { createAdvisorSessionLogger, writeAdvisorOutputs } from '../advisor/output';
 import { banner, cyanBold, dim, green, yellow } from './colors';
+import { confirmPostureSoftCap } from './soft-cap';
 
 interface AdvisorCliOptions {
   provider: AdvisorProvider;
@@ -48,8 +49,14 @@ export async function runAdvisor(argv: string[]): Promise<number> {
 
   const options = parseOptions(argv);
   if (options.posture === 'custom') {
-    console.log('Solo tier required for custom governance posture. Choose velocity, standard, or compliance in this release.');
-    return 0;
+    const ok = await confirmPostureSoftCap('custom', { yes: options.yes || options.defaults });
+    if (!ok) return 0;
+    options.posture = 'standard';
+  }
+  if (options.posture && options.posture !== 'standard' && !process.env.AGENTGUARD_LICENSE_KEY) {
+    const ok = await confirmPostureSoftCap(options.posture, { yes: options.yes || options.defaults });
+    if (!ok) return 0;
+    options.posture = 'standard';
   }
   const apiKey = resolveAdvisorApiKey(options.provider);
   if (options.provider !== 'mock' && !apiKey) {

package/src/cli/auth.ts

@@ -5,6 +5,7 @@ import * as https from 'https';
 import * as path from 'path';
 import * as readline from 'readline';
 import { AGENTGUARD_SPEND_VERSION } from '../index';
+import { licenseKeyFingerprint, readConfiguredLicenseKey, writeConfiguredLicenseKey } from '../license';
 import { agentguardHome, banner, dim, green, statusBar, yellow } from './colors';
 
 const OPENROUTER_AUTH_URL = 'https://openrouter.ai/api/v1/auth/key';
@@ -50,11 +51,12 @@ export function writeOpenRouterKey(key: string): void {
 
 export async function runAuth(argv: string[]): Promise<number> {
   if (argv.includes('--help') || argv.includes('-h')) {
-    console.log('agentguard auth openrouter | status | clear openrouter');
+    console.log('agentguard auth openrouter | license-key <KEY> | status | clear openrouter');
     return 0;
   }
   const sub = argv[0] ?? 'status';
   if (sub === 'status') return authStatus();
+  if (sub === 'license-key') return configureLicenseKey(argv[1]);
   if (sub === 'clear' && argv[1] === 'openrouter') return clearOpenRouter();
   if (sub === 'openrouter') return configureOpenRouter(argv);
   console.error(`agentguard auth: unknown command '${argv.join(' ')}'`);
@@ -93,12 +95,28 @@ function authStatus(): number {
   } else {
     console.log(`  ${yellow('openrouter')} not configured`);
   }
+  const licenseKey = readConfiguredLicenseKey();
+  if (licenseKey) {
+    console.log(`  ${green('license')} configured  fingerprint ${licenseKeyFingerprint(licenseKey)}`);
+  } else {
+    console.log(`  ${yellow('license')} free tier`);
+  }
   console.log('');
   console.log('  ' + statusBar());
   console.log('');
   return 0;
 }
 
+function configureLicenseKey(key?: string): number {
+  if (!key?.trim()) {
+    console.error('Usage: agentguard auth license-key <KEY>');
+    return 2;
+  }
+  writeConfiguredLicenseKey(key);
+  console.log(`License key saved. fingerprint ${licenseKeyFingerprint(key)}`);
+  return 0;
+}
+
 function clearOpenRouter(): number {
   try { fs.unlinkSync(openRouterKeyPath()); } catch { return 0; }
   console.log('OpenRouter key removed.');

package/src/workflow/chain-validator.ts

@@ -0,0 +1,35 @@
+import { canonicalJSONStringify, sha256, verifyReceipt } from './receipt';
+import type { ChainValidationResult, ReceiptV2 } from './types';
+
+export async function validateReceiptChain(receipts: ReceiptV2[]): Promise<ChainValidationResult> {
+  if (receipts.length === 0) return { ok: true };
+
+  for (let i = 0; i < receipts.length; i++) {
+    if (!verifyReceipt(receipts[i]!)) {
+      return { ok: false, broken_at: i, reason: 'signature_invalid' };
+    }
+    if (i === 0) continue;
+    const prev = receipts[i - 1]!;
+    const curr = receipts[i]!;
+    const expectedHash = await computeChainHash(prev);
+    if (curr.chain_validation_hash !== expectedHash) {
+      return { ok: false, broken_at: i, reason: 'chain_hash_mismatch' };
+    }
+    if (curr.parent_receipt_id !== prev.receipt_id) {
+      return { ok: false, broken_at: i, reason: 'parent_reference_mismatch' };
+    }
+  }
+
+  return { ok: true };
+}
+
+export async function computeChainHash(receipt: ReceiptV2): Promise<string> {
+  const canonical = canonicalJSONStringify({
+    receipt_id: receipt.receipt_id,
+    workflow_id: receipt.workflow_id,
+    cost_usd: receipt.cost_usd,
+    signed_at: receipt.signed_at,
+    signature: receipt.signature,
+  });
+  return sha256(canonical);
+}