@agenticprimitives/contracts 1.0.0-alpha.25 → 1.0.0-alpha.26

package/AUDIT.md

@@ -52,6 +52,11 @@ This package ships the **on-chain enforcement layer** for the agenticprimitives
 | 2.12 | **CustodyPolicy reinstall is permanently forbidden.** | ✅ CLOSED audit C-11 | `CustodyPolicy.sol:onUninstall` + `onInstall` reinstall gate; tested in `CustodyPolicyWave2C.t.sol` |
 | 2.13 | **`SmartAgentPaymaster.getHash` binds `address(entryPoint)` + chainId.** | ✅ CLOSED H7-C.7 / CON-PAYMASTER-004 | `SmartAgentPaymaster.sol:206-222`; tested in `SmartAgentPaymasterValidateR610.t.sol` |
 | 2.14 | **`SmartAgentPaymaster` constructor takes EXPLICIT `devMode` (no implicit fail-open).** | ✅ CLOSED R5.7 / PKG-PAYMASTER-002 / external audit P0-2 | `SmartAgentPaymaster.sol:126-141`; tested in `SmartAgentPaymaster.t.sol::test_R5_7_*` |
+| 2.15 | **The account's `execute` never reaches its own custody-tier contracts from below the custody tier.** `CustodyPolicy.onUninstall` reverts `StillInstalledOn` unless `uninstallModule` already dropped the module; a delegation stack (`_delegationExecCtx`) may not target `custodyPolicy` or `approvedHashRegistry` at all. | ✅ CLOSED R917-C-1 (spec 408 §1.1) | `CustodyPolicy.sol:onUninstall`, `AgentAccount.sol:_isAccountTrustedTarget`; `test/HardeningR917.t.sol` |
+| 2.16 | **An approved hash dies with the custody set that approved it.** The `0x03` sentinel consults `isApproved(this, keccak256(hash ‖ custodyEpoch))`; `custodyEpoch` bumps on every credential retirement (`removeCustodian` / `removePasskey`); `ApprovedHashRegistry.revokeAll()` voids per signer. | ✅ CLOSED R917-C-2 (spec 408 §1.2) | `AgentAccount.sol:approvedHashKey`, `ApprovedHashRegistry.sol`; `test/HardeningR917.t.sol`, `test/ApprovedHashIsValidSignature.t.sol` |
+| 2.17 | **A digest-bound redemption is single-use per step.** `DigestBindingEnforcer` is stateful + DM-only: `(delegator, delegationHash, kind, stepNonce)` consumed in `beforeHook`. | ✅ CLOSED R917-C-4 (spec 408 §1.4) | `enforcers/DigestBindingEnforcer.sol`; `test/DigestBindingEnforcer.t.sol` |
+| 2.18 | **Network posture is a constructor fact, never a chain-id list.** `AgentAccountFactory.relaxedT4Floor` (immutable) is the only way to lift the 1 h T4 floor; recorded in the deployments JSON; refused by `check:production-deploy` off anvil. | ✅ CLOSED R917-C-5 (spec 408 §1.3) | `AgentAccountFactory.sol:_custodyInitData`; `test/AgentAccountFactoryMode.t.sol` |
+| 2.19 | **Receipt anchors are keyed by who anchored.** `(anchoredBy, receiptDigest)` — no squat on a public mempool. | ✅ CLOSED R917-C-3 (spec 408 §1.5) | `provenance/ReceiptAnchorRegistry.sol`; `test/provenance/ReceiptAnchorRegistry.t.sol` |
 
 ## 3. Per-contract notes for the external review
 

package/README.md

@@ -1,5 +1,7 @@
 # @agenticprimitives/contracts
 
+> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)
+
 **Contracts and SDK are one artifact.**
 
 This is the on-chain enforcement layer of the agenticprimitives substrate — 42 Solidity sources, all present and audited under `src/`, none of them stubs. ERC-4337 v0.7 Smart Agent core, ERC-7710-style delegation manager with caveat enforcers, an ERC-7579 modular CustodyPolicy, a three-mode paymaster, `.agent` TLD naming with hierarchical subregistries, ontology and profile resolvers, identity facets, and an ERC-6492-aware UniversalSignatureValidator. The package publishes ABI subpaths, per-network deployment JSON, flattened sources, and the Solidity itself — so a TypeScript consumer pulls addresses and ABIs from the same artifact the auditors read.

package/deployments-faithchain.json

@@ -45,5 +45,6 @@
     "household": "0x9c3373E8F28739Df3aA478C18209fD7eeD769F5b"
   },
   "agentRegistryBase": "0x0Be172F1b5cfD1d084CEc2cF2Af0A0cE9023Deb1",
-  "digestBindingEnforcer": "0xA3bb9BCC9b2F6F2419E1aBe5ED6Fd5399b9E68e1"
+  "digestBindingEnforcer": "0xA3bb9BCC9b2F6F2419E1aBe5ED6Fd5399b9E68e1",
+  "receiptAnchorRegistry": "0x0e339334B4438F7546FD53837FDC8943cB3Cf54C"
 }

package/dist/abi/AgentAccount.json

@@ -99,6 +99,25 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "function",
+    "name": "approvedHashKey",
+    "inputs": [
+      {
+        "name": "hash",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      }
+    ],
+    "outputs": [
+      {
+        "name": "",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      }
+    ],
+    "stateMutability": "view"
+  },
   {
     "type": "function",
     "name": "bundlerSigner",
@@ -138,6 +157,19 @@
     ],
     "stateMutability": "view"
   },
+  {
+    "type": "function",
+    "name": "custodyEpoch",
+    "inputs": [],
+    "outputs": [
+      {
+        "name": "",
+        "type": "uint64",
+        "internalType": "uint64"
+      }
+    ],
+    "stateMutability": "view"
+  },
   {
     "type": "function",
     "name": "decodeWebAuthnAssertion",
@@ -1071,6 +1103,19 @@
     ],
     "anonymous": false
   },
+  {
+    "type": "event",
+    "name": "CustodyEpochBumped",
+    "inputs": [
+      {
+        "name": "epoch",
+        "type": "uint64",
+        "indexed": false,
+        "internalType": "uint64"
+      }
+    ],
+    "anonymous": false
+  },
   {
     "type": "event",
     "name": "DelegationManagerRotated",

package/dist/abi/AgentAccountFactory.json

@@ -36,6 +36,11 @@
         "name": "approvedHashRegistry_",
         "type": "address",
         "internalType": "address"
+      },
+      {
+        "name": "relaxedT4Floor_",
+        "type": "bool",
+        "internalType": "bool"
       }
     ],
     "stateMutability": "nonpayable"
@@ -289,6 +294,19 @@
     ],
     "stateMutability": "view"
   },
+  {
+    "type": "function",
+    "name": "relaxedT4Floor",
+    "inputs": [],
+    "outputs": [
+      {
+        "name": "",
+        "type": "bool",
+        "internalType": "bool"
+      }
+    ],
+    "stateMutability": "view"
+  },
   {
     "type": "function",
     "name": "sessionIssuer",

package/dist/abi/ApprovedHashRegistry.json

@@ -17,12 +17,12 @@
     "name": "approved",
     "inputs": [
       {
-        "name": "",
+        "name": "signer",
         "type": "address",
         "internalType": "address"
       },
       {
-        "name": "",
+        "name": "hash",
         "type": "bytes32",
         "internalType": "bytes32"
       }
@@ -36,6 +36,25 @@
     ],
     "stateMutability": "view"
   },
+  {
+    "type": "function",
+    "name": "epochOf",
+    "inputs": [
+      {
+        "name": "signer",
+        "type": "address",
+        "internalType": "address"
+      }
+    ],
+    "outputs": [
+      {
+        "name": "",
+        "type": "uint64",
+        "internalType": "uint64"
+      }
+    ],
+    "stateMutability": "view"
+  },
   {
     "type": "function",
     "name": "isApproved",
@@ -60,6 +79,13 @@
     ],
     "stateMutability": "view"
   },
+  {
+    "type": "function",
+    "name": "revokeAll",
+    "inputs": [],
+    "outputs": [],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "revokeHash",
@@ -73,6 +99,25 @@
     "outputs": [],
     "stateMutability": "nonpayable"
   },
+  {
+    "type": "event",
+    "name": "AllHashesRevoked",
+    "inputs": [
+      {
+        "name": "signer",
+        "type": "address",
+        "indexed": true,
+        "internalType": "address"
+      },
+      {
+        "name": "epoch",
+        "type": "uint64",
+        "indexed": false,
+        "internalType": "uint64"
+      }
+    ],
+    "anonymous": false
+  },
   {
     "type": "event",
     "name": "HashApproved",

package/dist/abi/CustodyPolicy.json

@@ -1076,6 +1076,17 @@
       }
     ]
   },
+  {
+    "type": "error",
+    "name": "StillInstalledOn",
+    "inputs": [
+      {
+        "name": "account",
+        "type": "address",
+        "internalType": "address"
+      }
+    ]
+  },
   {
     "type": "error",
     "name": "SystemPaused",

package/dist/abi/DigestBindingEnforcer.json

@@ -1,4 +1,15 @@
 [
+  {
+    "type": "constructor",
+    "inputs": [
+      {
+        "name": "delegationManager_",
+        "type": "address",
+        "internalType": "address"
+      }
+    ],
+    "stateMutability": "nonpayable"
+  },
   {
     "type": "function",
     "name": "afterHook",
@@ -62,12 +73,12 @@
         "internalType": "bytes"
       },
       {
-        "name": "",
+        "name": "delegationHash",
         "type": "bytes32",
         "internalType": "bytes32"
       },
       {
-        "name": "",
+        "name": "delegator",
         "type": "address",
         "internalType": "address"
       },
@@ -93,7 +104,91 @@
       }
     ],
     "outputs": [],
-    "stateMutability": "pure"
+    "stateMutability": "nonpayable"
+  },
+  {
+    "type": "function",
+    "name": "delegationManager",
+    "inputs": [],
+    "outputs": [
+      {
+        "name": "",
+        "type": "address",
+        "internalType": "address"
+      }
+    ],
+    "stateMutability": "view"
+  },
+  {
+    "type": "function",
+    "name": "isUsed",
+    "inputs": [
+      {
+        "name": "delegator",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "delegationHash",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "kind",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "stepNonce",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      }
+    ],
+    "outputs": [
+      {
+        "name": "",
+        "type": "bool",
+        "internalType": "bool"
+      }
+    ],
+    "stateMutability": "view"
+  },
+  {
+    "type": "event",
+    "name": "DigestBindingRedeemed",
+    "inputs": [
+      {
+        "name": "delegator",
+        "type": "address",
+        "indexed": true,
+        "internalType": "address"
+      },
+      {
+        "name": "delegationHash",
+        "type": "bytes32",
+        "indexed": true,
+        "internalType": "bytes32"
+      },
+      {
+        "name": "kind",
+        "type": "bytes32",
+        "indexed": true,
+        "internalType": "bytes32"
+      },
+      {
+        "name": "presented",
+        "type": "bytes32",
+        "indexed": false,
+        "internalType": "bytes32"
+      },
+      {
+        "name": "stepNonce",
+        "type": "bytes32",
+        "indexed": false,
+        "internalType": "bytes32"
+      }
+    ],
+    "anonymous": false
   },
   {
     "type": "error",
@@ -125,5 +220,32 @@
         "internalType": "bytes32"
       }
     ]
+  },
+  {
+    "type": "error",
+    "name": "NotDelegationManager",
+    "inputs": [
+      {
+        "name": "caller",
+        "type": "address",
+        "internalType": "address"
+      }
+    ]
+  },
+  {
+    "type": "error",
+    "name": "StepNonceReused",
+    "inputs": [
+      {
+        "name": "kind",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      },
+      {
+        "name": "stepNonce",
+        "type": "bytes32",
+        "internalType": "bytes32"
+      }
+    ]
   }
 ]

package/dist/abi/ICustodyPolicyAccountModuleView.json

@@ -0,0 +1,31 @@
+[
+  {
+    "type": "function",
+    "name": "isModuleInstalled",
+    "inputs": [
+      {
+        "name": "moduleTypeId",
+        "type": "uint256",
+        "internalType": "uint256"
+      },
+      {
+        "name": "module",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "additionalContext",
+        "type": "bytes",
+        "internalType": "bytes"
+      }
+    ],
+    "outputs": [
+      {
+        "name": "",
+        "type": "bool",
+        "internalType": "bool"
+      }
+    ],
+    "stateMutability": "view"
+  }
+]

package/dist/abi/{ContentCorpusRegistry.json → ReceiptAnchorRegistry.json}

@@ -4,29 +4,19 @@
     "name": "anchor",
     "inputs": [
       {
-        "name": "corpusRef",
+        "name": "receiptDigest",
         "type": "bytes32",
         "internalType": "bytes32"
       },
       {
-        "name": "corpusRoot",
+        "name": "intentDigest",
         "type": "bytes32",
         "internalType": "bytes32"
       },
       {
-        "name": "manifestHash",
+        "name": "mandateRef",
         "type": "bytes32",
         "internalType": "bytes32"
-      },
-      {
-        "name": "issuer",
-        "type": "address",
-        "internalType": "address"
-      },
-      {
-        "name": "signature",
-        "type": "bytes",
-        "internalType": "bytes"
       }
     ],
     "outputs": [],
@@ -34,44 +24,61 @@
   },
   {
     "type": "function",
-    "name": "anchorDigest",
+    "name": "anchorOf",
     "inputs": [
       {
-        "name": "corpusRef",
-        "type": "bytes32",
-        "internalType": "bytes32"
-      },
-      {
-        "name": "corpusRoot",
-        "type": "bytes32",
-        "internalType": "bytes32"
+        "name": "anchoredBy",
+        "type": "address",
+        "internalType": "address"
       },
       {
-        "name": "manifestHash",
+        "name": "receiptDigest",
         "type": "bytes32",
         "internalType": "bytes32"
-      },
-      {
-        "name": "issuer",
-        "type": "address",
-        "internalType": "address"
       }
     ],
     "outputs": [
       {
         "name": "",
-        "type": "bytes32",
-        "internalType": "bytes32"
+        "type": "tuple",
+        "internalType": "struct ReceiptAnchorRegistry.Anchor",
+        "components": [
+          {
+            "name": "anchoredBy",
+            "type": "address",
+            "internalType": "address"
+          },
+          {
+            "name": "at",
+            "type": "uint64",
+            "internalType": "uint64"
+          },
+          {
+            "name": "intentDigest",
+            "type": "bytes32",
+            "internalType": "bytes32"
+          },
+          {
+            "name": "mandateRef",
+            "type": "bytes32",
+            "internalType": "bytes32"
+          }
+        ]
       }
     ],
     "stateMutability": "view"
   },
   {
     "type": "function",
-    "name": "corpusRoot",
+    "name": "isAnchored",
     "inputs": [
       {
-        "name": "corpusRef",
+        "name": "anchoredBy",
+        "type": "address",
+        "internalType": "address"
+      },
+      {
+        "name": "receiptDigest",
         "type": "bytes32",
         "internalType": "bytes32"
       }
@@ -79,96 +86,68 @@
     "outputs": [
       {
         "name": "",
-        "type": "bytes32",
-        "internalType": "bytes32"
+        "type": "bool",
+        "internalType": "bool"
       }
     ],
     "stateMutability": "view"
   },
   {
-    "type": "function",
-    "name": "getCorpus",
+    "type": "event",
+    "name": "ReceiptAnchored",
     "inputs": [
       {
-        "name": "corpusRef",
+        "name": "receiptDigest",
         "type": "bytes32",
+        "indexed": true,
         "internalType": "bytes32"
-      }
-    ],
-    "outputs": [
+      },
       {
-        "name": "issuer",
+        "name": "anchoredBy",
         "type": "address",
+        "indexed": true,
         "internalType": "address"
       },
       {
-        "name": "corpusRoot",
+        "name": "intentDigest",
         "type": "bytes32",
+        "indexed": true,
         "internalType": "bytes32"
       },
       {
-        "name": "manifestHash",
+        "name": "mandateRef",
         "type": "bytes32",
+        "indexed": false,
         "internalType": "bytes32"
       },
       {
-        "name": "anchoredAt",
+        "name": "at",
         "type": "uint64",
+        "indexed": false,
         "internalType": "uint64"
       }
     ],
-    "stateMutability": "view"
+    "anonymous": false
   },
   {
-    "type": "event",
-    "name": "CorpusAnchored",
+    "type": "error",
+    "name": "AlreadyAnchored",
     "inputs": [
       {
-        "name": "corpusRef",
+        "name": "receiptDigest",
         "type": "bytes32",
-        "indexed": true,
         "internalType": "bytes32"
       },
       {
-        "name": "issuer",
+        "name": "by",
         "type": "address",
-        "indexed": true,
         "internalType": "address"
-      },
-      {
-        "name": "corpusRoot",
-        "type": "bytes32",
-        "indexed": false,
-        "internalType": "bytes32"
-      },
-      {
-        "name": "manifestHash",
-        "type": "bytes32",
-        "indexed": false,
-        "internalType": "bytes32"
       }
-    ],
-    "anonymous": false
+    ]
   },
   {
     "type": "error",
-    "name": "InvalidIssuerSignature",
+    "name": "ZeroDigest",
     "inputs": []
-  },
-  {
-    "type": "error",
-    "name": "IssuerMismatch",
-    "inputs": [
-      {
-        "name": "expected",
-        "type": "address",
-        "internalType": "address"
-      },
-      {
-        "name": "provided",
-        "type": "address",
-        "internalType": "address"
-      }
-    ]
   }
 ]

package/dist/abi/index.d.ts

@@ -34,6 +34,7 @@ export declare const IAgenticPrimitivesAgentAccount: Abi;
 export declare const IApprovedHashRegistryView: Abi;
 export declare const IAttributeReader: Abi;
 export declare const ICaveatEnforcer: Abi;
+export declare const ICustodyPolicyAccountModuleView: Abi;
 export declare const ICustodyPolicyFactoryView: Abi;
 export declare const ICustodyPolicyPauseView: Abi;
 export declare const IDelegationManager: Abi;
@@ -54,6 +55,7 @@ export declare const PaymentEscrow: Abi;
 export declare const PaymentReceiptRegistry: Abi;
 export declare const PermissionlessSubregistry: Abi;
 export declare const QuorumEnforcer: Abi;
+export declare const ReceiptAnchorRegistry: Abi;
 export declare const RelationshipTypeRegistry: Abi;
 export declare const ShapeRegistry: Abi;
 export declare const SignatureSlotRecovery: Abi;

package/dist/abi/index.js

@@ -34,6 +34,7 @@ export { default as IAgenticPrimitivesAgentAccount } from './IAgenticPrimitivesA
 export { default as IApprovedHashRegistryView } from './IApprovedHashRegistryView.json' with { type: 'json' };
 export { default as IAttributeReader } from './IAttributeReader.json' with { type: 'json' };
 export { default as ICaveatEnforcer } from './ICaveatEnforcer.json' with { type: 'json' };
+export { default as ICustodyPolicyAccountModuleView } from './ICustodyPolicyAccountModuleView.json' with { type: 'json' };
 export { default as ICustodyPolicyFactoryView } from './ICustodyPolicyFactoryView.json' with { type: 'json' };
 export { default as ICustodyPolicyPauseView } from './ICustodyPolicyPauseView.json' with { type: 'json' };
 export { default as IDelegationManager } from './IDelegationManager.json' with { type: 'json' };
@@ -54,6 +55,7 @@ export { default as PaymentEscrow } from './PaymentEscrow.json' with { type: 'js
 export { default as PaymentReceiptRegistry } from './PaymentReceiptRegistry.json' with { type: 'json' };
 export { default as PermissionlessSubregistry } from './PermissionlessSubregistry.json' with { type: 'json' };
 export { default as QuorumEnforcer } from './QuorumEnforcer.json' with { type: 'json' };
+export { default as ReceiptAnchorRegistry } from './ReceiptAnchorRegistry.json' with { type: 'json' };
 export { default as RelationshipTypeRegistry } from './RelationshipTypeRegistry.json' with { type: 'json' };
 export { default as ShapeRegistry } from './ShapeRegistry.json' with { type: 'json' };
 export { default as SignatureSlotRecovery } from './SignatureSlotRecovery.json' with { type: 'json' };