@agentplat/inference-control 0.3.0-beta.2 → 0.3.0-beta.3

package/dist/context-integrity-contracts.d.ts

@@ -0,0 +1,304 @@
+import type { JsonValue } from "@agentplat/core";
+export declare const CONTEXT_INTEGRITY_SCHEMA_VERSION_V1: 1;
+export declare const CONTEXT_INTEGRITY_STATE_FORMAT_V1: "application/vnd.agentplat.context-integrity.v1+json";
+export declare const CONTEXT_INTEGRITY_SOURCE_ZONES_V1: readonly ["doctrine_trusted", "mission_trusted", "role_trusted", "operator_trusted", "local_trusted", "user_untrusted", "environment_untrusted", "peer_untrusted", "tool_untrusted", "retrieval_untrusted", "provider_untrusted", "assessor_untrusted"];
+export type ContextIntegritySourceZoneV1 = (typeof CONTEXT_INTEGRITY_SOURCE_ZONES_V1)[number];
+export declare const CONTEXT_INTEGRITY_MEMORY_TIERS_V1: readonly ["doctrine", "mission", "role", "episodic", "working"];
+export type ContextIntegrityMemoryTierV1 = (typeof CONTEXT_INTEGRITY_MEMORY_TIERS_V1)[number];
+export type ContextIntegrityCheckpointV1 = "pre_inference" | "pre_step" | "post_output" | "pre_action";
+export type ContextIntegrityTargetKindV1 = "context" | "output" | "action";
+export type ContextIntegrityAssessmentDispositionV1 = "clear" | "caution" | "quarantine" | "deny" | "unavailable";
+export type ContextIntegrityItemActionV1 = "admit" | "restrict" | "isolate" | "require_corroboration" | "deny";
+export type ContextIntegrityStateStatusV1 = "active" | "degraded" | "paused" | "denied";
+export interface ContextIntegrityThresholdsV1 {
+    readonly cautionRiskBps: number;
+    readonly quarantineRiskBps: number;
+    readonly denyRiskBps: number;
+    readonly maximumUncertaintyBps: number;
+    readonly contradictionRiskBps: number;
+}
+export interface ContextIntegrityLimitsV1 {
+    readonly maximumItemsPerRequest: number;
+    readonly maximumRetainedHeads: number;
+    readonly rollingWindowAssessments: number;
+    readonly maximumReasonCodesPerAssessment: number;
+    readonly maximumThreatKindsPerAssessment: number;
+    readonly maximumEvidenceDigestsPerAssessment: number;
+    readonly maximumCorroborationGroupsPerItem: number;
+    readonly maximumSteps: number;
+    readonly maximumAssessmentTtlMs: number;
+    readonly maximumDecisionTtlMs: number;
+    readonly maximumCommitAttempts: number;
+}
+export interface ContextIntegrityPolicyV1 {
+    readonly schemaVersion: 1;
+    readonly policyId: string;
+    readonly policyVersion: number;
+    readonly parentPolicyDigest: string | null;
+    readonly trustedSourceZones: readonly ContextIntegritySourceZoneV1[];
+    readonly allowedFilterBindingDigests: readonly string[];
+    readonly thresholds: ContextIntegrityThresholdsV1;
+    readonly minimumCorroborationGroups: number;
+    readonly adverseSignalsToPause: number;
+    readonly recoverySignalsRequired: number;
+    readonly allowEmptyAfterIsolation: boolean;
+    readonly limits: ContextIntegrityLimitsV1;
+}
+export interface ContextIntegrityPolicyRecordV1 {
+    readonly schemaVersion: 1;
+    readonly policy: ContextIntegrityPolicyV1;
+    readonly policyDigest: string;
+}
+/** Exact implementation binding for a component that physically removes items. */
+export interface ContextIntegrityFilterBindingV1 {
+    readonly schemaVersion: 1;
+    readonly filterId: string;
+    readonly filterVersion: number;
+    readonly filterImplementationDigest: string;
+    readonly filterBindingDigest: string;
+}
+/** Content-free binding for one exact context, output or action item. */
+export interface ContextIntegrityItemV1 {
+    readonly schemaVersion: 1;
+    readonly itemId: string;
+    readonly sourceZone: ContextIntegritySourceZoneV1;
+    readonly sourceId: string;
+    readonly sourceVersion: number;
+    readonly sourceRevision: number;
+    readonly memoryTier: ContextIntegrityMemoryTierV1;
+    readonly contentDigest: string;
+    readonly provenanceDigest: string;
+    readonly claimKeyDigest: string | null;
+    readonly claimValueDigest: string | null;
+    readonly corroborationGroupIds: readonly string[];
+    readonly observedAtLogicalMs: number;
+    readonly expiresAtLogicalMs: number;
+    readonly itemDigest: string;
+}
+export interface ContextIntegrityScopeV1 {
+    readonly tenantId: string;
+    readonly sessionId: string;
+    readonly agentId: string;
+    readonly objectiveId: string;
+}
+export interface ContextIntegrityRequestV1 {
+    readonly schemaVersion: 1;
+    readonly requestId: string;
+    readonly checkpoint: ContextIntegrityCheckpointV1;
+    readonly targetKind: ContextIntegrityTargetKindV1;
+    readonly scope: ContextIntegrityScopeV1;
+    readonly logicalTimeMs: number;
+    readonly filterBindingDigest: string | null;
+    readonly items: readonly ContextIntegrityItemV1[];
+    readonly requestDigest: string;
+}
+/** Ephemeral content verified against an item digest and never retained. */
+export interface ContextIntegrityEphemeralContentV1 {
+    readonly itemId: string;
+    readonly mediaType: "text" | "json";
+    readonly content: JsonValue;
+    readonly contentDigest: string;
+}
+export interface ContextIntegrityAssessmentV1 {
+    readonly schemaVersion: 1;
+    readonly assessmentId: string;
+    readonly requestId: string;
+    readonly requestDigest: string;
+    readonly itemId: string;
+    readonly itemDigest: string;
+    readonly analyzerId: string;
+    readonly analyzerVersion: number;
+    readonly analyzerImplementationDigest: string;
+    readonly analyzerRevision: number;
+    readonly disposition: ContextIntegrityAssessmentDispositionV1;
+    readonly riskBps: number;
+    readonly uncertaintyBps: number;
+    readonly instructionConflictBps: number;
+    readonly threatKinds: readonly string[];
+    readonly reasonCodes: readonly string[];
+    readonly evidenceDigests: readonly string[];
+    readonly assessedAtLogicalMs: number;
+    readonly expiresAtLogicalMs: number;
+    readonly analysisDigest: string;
+    readonly assessmentDigest: string;
+}
+export interface ContextIntegrityAnalyzerV1 {
+    readonly analyzerId: string;
+    readonly analyzerVersion: number;
+    readonly analyzerImplementationDigest: string;
+    analyze(input: {
+        readonly request: ContextIntegrityRequestV1;
+        readonly item: ContextIntegrityItemV1;
+        readonly content: ContextIntegrityEphemeralContentV1;
+    }): Promise<ContextIntegrityAssessmentV1> | ContextIntegrityAssessmentV1;
+}
+export interface ContextIntegrityHeadV1 {
+    readonly schemaVersion: 1;
+    readonly headKey: string;
+    readonly itemId: string;
+    readonly sourceId: string;
+    readonly sourceVersion: number;
+    readonly sourceRevision: number;
+    readonly contentDigest: string;
+    readonly analyzerId: string;
+    readonly analyzerRevision: number;
+    readonly analysisDigest: string;
+    readonly assessmentDigest: string;
+    readonly expiresAtLogicalMs: number;
+}
+export interface ContextIntegrityWindowEntryV1 {
+    readonly schemaVersion: 1;
+    readonly requestDigest: string;
+    readonly maximumRiskBps: number;
+    readonly maximumUncertaintyBps: number;
+    readonly isolatedItems: number;
+    readonly deniedItems: number;
+    readonly evaluatedAtLogicalMs: number;
+}
+export interface ContextIntegrityInterventionCountsV1 {
+    readonly restricted: number;
+    readonly isolated: number;
+    readonly corroborationRequired: number;
+    readonly denied: number;
+}
+export interface ContextIntegrityStateV1 {
+    readonly format: typeof CONTEXT_INTEGRITY_STATE_FORMAT_V1;
+    readonly schemaVersion: 1;
+    readonly stateKey: string;
+    readonly controllerId: string;
+    readonly controllerVersion: number;
+    readonly implementationId: string;
+    readonly policyId: string;
+    readonly policyVersion: number;
+    readonly policyDigest: string;
+    readonly analyzerId: string;
+    readonly analyzerVersion: number;
+    readonly analyzerImplementationDigest: string;
+    readonly revision: number;
+    readonly logicalTimeHighWaterMs: number;
+    readonly stepCount: number;
+    readonly status: ContextIntegrityStateStatusV1;
+    readonly degraded: boolean;
+    readonly adverseStreak: number;
+    readonly recoveryStreak: number;
+    readonly interventionCounts: ContextIntegrityInterventionCountsV1;
+    readonly heads: readonly ContextIntegrityHeadV1[];
+    readonly rollingWindow: readonly ContextIntegrityWindowEntryV1[];
+    readonly predecessorStateDigest: string | null;
+    readonly lastRequestDigest: string | null;
+    readonly lastDecision: ContextIntegrityDecisionV1 | null;
+    readonly stateDigest: string;
+}
+export interface ContextIntegrityHandoffEnvelopeV1 {
+    readonly schemaVersion: 1;
+    readonly contentClass: "context_integrity_state";
+    readonly controllerId: string;
+    readonly controllerVersion: number;
+    readonly implementationId: string;
+    readonly policyDigest: string;
+    readonly analyzerId: string;
+    readonly analyzerVersion: number;
+    readonly analyzerImplementationDigest: string;
+    readonly sourceStateKey: string;
+    readonly sourceStateDigest: string;
+    readonly targetStateKey: string;
+    readonly exportedAtLogicalMs: number;
+    readonly sourceState: ContextIntegrityStateV1;
+    readonly handoffDigest: string;
+}
+export interface ContextIntegrityItemDecisionV1 {
+    readonly schemaVersion: 1;
+    readonly itemId: string;
+    readonly itemDigest: string;
+    readonly action: ContextIntegrityItemActionV1;
+    readonly riskBps: number;
+    readonly uncertaintyBps: number;
+    readonly reasonCodes: readonly string[];
+    readonly assessmentDigest: string | null;
+}
+export interface ContextIntegrityDecisionV1 {
+    readonly schemaVersion: 1;
+    readonly decisionId: string;
+    readonly controllerId: string;
+    readonly controllerVersion: number;
+    readonly implementationId: string;
+    readonly policyId: string;
+    readonly policyVersion: number;
+    readonly policyDigest: string;
+    readonly analyzerId: string;
+    readonly analyzerVersion: number;
+    readonly analyzerImplementationDigest: string;
+    readonly requestId: string;
+    readonly requestDigest: string;
+    readonly evaluatedAtLogicalMs: number;
+    readonly expiresAtLogicalMs: number;
+    readonly priorStateRevision: number;
+    readonly committedStateRevision: number;
+    readonly disposition: "allow" | "abstain" | "deny";
+    readonly filterRequired: boolean;
+    readonly stateStatus: ContextIntegrityStateStatusV1;
+    readonly degraded: boolean;
+    readonly items: readonly ContextIntegrityItemDecisionV1[];
+    readonly decisionDigest: string;
+}
+export interface ContextIntegrityStoreV1 {
+    load(stateKey: string): Promise<ContextIntegrityStateV1 | null>;
+    save(input: {
+        readonly state: ContextIntegrityStateV1;
+        readonly expectedRevision: number | null;
+    }): Promise<boolean>;
+}
+export interface ContextIntegrityRuntimeOptionsV1 {
+    readonly controllerId: string;
+    readonly controllerVersion: number;
+    readonly implementationId: string;
+    readonly policy: ContextIntegrityPolicyRecordV1;
+    readonly analyzer: ContextIntegrityAnalyzerV1;
+    readonly store: ContextIntegrityStoreV1;
+}
+export interface ContextIntegrityEvaluationInputV1 {
+    readonly stateKey: string;
+    readonly request: ContextIntegrityRequestV1;
+    readonly contents: readonly ContextIntegrityEphemeralContentV1[];
+}
+export interface ContextIntegrityPortV1 {
+    readonly controllerId: string;
+    readonly controllerVersion: number;
+    readonly implementationId: string;
+    readonly policyId: string;
+    readonly policyVersion: number;
+    readonly policyDigest: string;
+    readonly analyzerId: string;
+    readonly analyzerVersion: number;
+    readonly analyzerImplementationDigest: string;
+    evaluate(input: ContextIntegrityEvaluationInputV1): Promise<ContextIntegrityDecisionV1>;
+    getState(stateKey: string): Promise<ContextIntegrityStateV1 | null>;
+    exportHandoff(input: {
+        readonly sourceStateKey: string;
+        readonly targetStateKey: string;
+        readonly logicalTimeMs: number;
+    }): Promise<ContextIntegrityHandoffEnvelopeV1>;
+    importHandoff(input: {
+        readonly handoff: ContextIntegrityHandoffEnvelopeV1;
+        readonly targetStateKey: string;
+        readonly logicalTimeMs: number;
+    }): Promise<ContextIntegrityStateV1>;
+}
+export interface ContextIntegrityReductionInputV1 {
+    readonly state: ContextIntegrityStateV1;
+    readonly policy: ContextIntegrityPolicyRecordV1;
+    readonly request: ContextIntegrityRequestV1;
+    readonly assessments: readonly ContextIntegrityAssessmentV1[];
+}
+export interface ContextIntegrityReductionResultV1 {
+    readonly state: ContextIntegrityStateV1;
+    readonly decision: ContextIntegrityDecisionV1;
+}
+export interface ContextIntegrityRoleProjectionV1 {
+    readonly roleStatus: "active" | "paused" | "realignment_required" | "denied" | "unavailable";
+    readonly degraded: boolean;
+    readonly coherenceBps: number;
+    readonly uncertaintyBps: number;
+    readonly projectionDigest: string;
+}
+//# sourceMappingURL=context-integrity-contracts.d.ts.map

package/dist/context-integrity-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-integrity-contracts.d.ts","sourceRoot":"","sources":["../src/context-integrity-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,eAAO,MAAM,mCAAmC,EAAG,CAAU,CAAC;AAC9D,eAAO,MAAM,iCAAiC,EAC5C,qDAA8D,CAAC;AAEjE,eAAO,MAAM,iCAAiC,yPAanC,CAAC;AAEZ,MAAM,MAAM,4BAA4B,GACtC,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,eAAO,MAAM,iCAAiC,iEAMnC,CAAC;AAEZ,MAAM,MAAM,4BAA4B,GACtC,CAAC,OAAO,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,MAAM,4BAA4B,GACtC,eAAe,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,CAAC;AAE9D,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE3E,MAAM,MAAM,uCAAuC,GACjD,OAAO,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,GAAG,aAAa,CAAC;AAE9D,MAAM,MAAM,4BAA4B,GACtC,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,uBAAuB,GAAG,MAAM,CAAC;AAEtE,MAAM,MAAM,6BAA6B,GACvC,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,+BAA+B,EAAE,MAAM,CAAC;IACjD,QAAQ,CAAC,+BAA+B,EAAE,MAAM,CAAC;IACjD,QAAQ,CAAC,mCAAmC,EAAE,MAAM,CAAC;IACrD,QAAQ,CAAC,iCAAiC,EAAE,MAAM,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACrE,QAAQ,CAAC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,yEAAyE;AACzE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,4EAA4E;AAC5E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,uCAAuC,CAAC;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;QAC5C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QACtC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;KACtD,GAAG,OAAO,CAAC,4BAA4B,CAAC,GAAG,4BAA4B,CAAC;CAC1E;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,OAAO,iCAAiC,CAAC;IAC1D,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,EAAE,oCAAoC,CAAC;IAClE,QAAQ,CAAC,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACjE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACnD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAC1D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE;QACV,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;QACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1C,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,SAAS,kCAAkC,EAAE,CAAC;CAClE;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CACN,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IACpE,aAAa,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC/C,aAAa,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;QACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC/D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,EACjB,QAAQ,GAAG,QAAQ,GAAG,sBAAsB,GAAG,QAAQ,GAAG,aAAa,CAAC;IAC1E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC"}

package/dist/context-integrity-contracts.js

@@ -0,0 +1,24 @@
+export const CONTEXT_INTEGRITY_SCHEMA_VERSION_V1 = 1;
+export const CONTEXT_INTEGRITY_STATE_FORMAT_V1 = "application/vnd.agentplat.context-integrity.v1+json";
+export const CONTEXT_INTEGRITY_SOURCE_ZONES_V1 = Object.freeze([
+    "doctrine_trusted",
+    "mission_trusted",
+    "role_trusted",
+    "operator_trusted",
+    "local_trusted",
+    "user_untrusted",
+    "environment_untrusted",
+    "peer_untrusted",
+    "tool_untrusted",
+    "retrieval_untrusted",
+    "provider_untrusted",
+    "assessor_untrusted",
+]);
+export const CONTEXT_INTEGRITY_MEMORY_TIERS_V1 = Object.freeze([
+    "doctrine",
+    "mission",
+    "role",
+    "episodic",
+    "working",
+]);
+//# sourceMappingURL=context-integrity-contracts.js.map

package/dist/context-integrity-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-integrity-contracts.js","sourceRoot":"","sources":["../src/context-integrity-contracts.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAU,CAAC;AAC9D,MAAM,CAAC,MAAM,iCAAiC,GAC5C,qDAA8D,CAAC;AAEjE,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,kBAAkB;IAClB,iBAAiB;IACjB,cAAc;IACd,kBAAkB;IAClB,eAAe;IACf,gBAAgB;IAChB,uBAAuB;IACvB,gBAAgB;IAChB,gBAAgB;IAChB,qBAAqB;IACrB,oBAAoB;IACpB,oBAAoB;CACZ,CAAC,CAAC;AAKZ,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,UAAU;IACV,SAAS;IACT,MAAM;IACN,UAAU;IACV,SAAS;CACD,CAAC,CAAC"}

package/dist/context-integrity-model.d.ts

@@ -0,0 +1,25 @@
+import { type ContextIntegrityFilterBindingV1, type ContextIntegrityMemoryTierV1, type ContextIntegrityPortV1, type ContextIntegrityScopeV1 } from "./context-integrity-contracts.js";
+import type { ControlledModelContextGateV1, ControlledModelRequestV1 } from "./model.js";
+import type { ContextEntryV1 } from "./types.js";
+export interface ContextIntegrityModelClassificationV1 {
+    readonly memoryTier: ContextIntegrityMemoryTierV1;
+    readonly claimKeyDigest: string | null;
+    readonly claimValueDigest: string | null;
+    readonly corroborationGroupIds: readonly string[];
+}
+export interface ContextIntegrityControlledModelGateOptionsV1 {
+    readonly controller: ContextIntegrityPortV1;
+    readonly filterId: string;
+    readonly filterVersion: number;
+    readonly filterImplementationDigest: string;
+    readonly itemTtlMs: number;
+    readonly logicalTimeMs: (request: ControlledModelRequestV1) => number;
+    readonly scope?: (request: ControlledModelRequestV1) => ContextIntegrityScopeV1;
+    readonly stateKey?: (request: ControlledModelRequestV1, scope: ContextIntegrityScopeV1) => string;
+    readonly classify?: (entry: ContextEntryV1) => ContextIntegrityModelClassificationV1;
+}
+export interface ContextIntegrityControlledModelGateV1 extends ControlledModelContextGateV1 {
+    readonly filterBinding: ContextIntegrityFilterBindingV1;
+}
+export declare function createContextIntegrityControlledModelGateV1(options: ContextIntegrityControlledModelGateOptionsV1): ContextIntegrityControlledModelGateV1;
+//# sourceMappingURL=context-integrity-model.d.ts.map

package/dist/context-integrity-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-integrity-model.d.ts","sourceRoot":"","sources":["../src/context-integrity-model.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,+BAA+B,EAEpC,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAE7B,MAAM,kCAAkC,CAAC;AAS1C,OAAO,KAAK,EAEV,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAC;AAQhE,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,MAAM,CAAC;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,CACf,OAAO,EAAE,wBAAwB,KAC9B,uBAAuB,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,uBAAuB,KAC3B,MAAM,CAAC;IACZ,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,KAAK,EAAE,cAAc,KAClB,qCAAqC,CAAC;CAC5C;AAED,MAAM,WAAW,qCAAsC,SAAQ,4BAA4B;IACzF,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;CACzD;AAED,wBAAgB,2CAA2C,CACzD,OAAO,EAAE,4CAA4C,GACpD,qCAAqC,CAyGvC"}

package/dist/context-integrity-model.js

@@ -0,0 +1,192 @@
+import { validateContextEntryV1 } from "./context.js";
+import { CONTEXT_INTEGRITY_SCHEMA_VERSION_V1, } from "./context-integrity-contracts.js";
+import { createContextIntegrityEphemeralContentV1, createContextIntegrityFilterBindingV1, createContextIntegrityItemV1, createContextIntegrityRequestV1, digestContextIntegrityJsonV1, validateContextIntegrityDecisionV1, } from "./context-integrity-runtime.js";
+import { assertDigest, assertIdentifier, assertSafeInteger, deepFreeze, } from "./validation.js";
+export function createContextIntegrityControlledModelGateV1(options) {
+    if (!options || typeof options !== "object")
+        fail("context_integrity_model_gate_options_required");
+    const controller = normalizeController(options.controller);
+    if (typeof options.logicalTimeMs !== "function")
+        fail("context_integrity_logical_time_resolver_required");
+    if (options.scope !== undefined && typeof options.scope !== "function")
+        fail("context_integrity_scope_resolver_invalid");
+    if (options.stateKey !== undefined && typeof options.stateKey !== "function")
+        fail("context_integrity_state_key_resolver_invalid");
+    if (options.classify !== undefined && typeof options.classify !== "function")
+        fail("context_integrity_classifier_invalid");
+    const itemTtlMs = positive(options.itemTtlMs, "itemTtlMs");
+    const filterBinding = createContextIntegrityFilterBindingV1({
+        schemaVersion: CONTEXT_INTEGRITY_SCHEMA_VERSION_V1,
+        filterId: identifier(options.filterId, "filterId"),
+        filterVersion: positive(options.filterVersion, "filterVersion"),
+        filterImplementationDigest: digest(options.filterImplementationDigest, "filterImplementationDigest"),
+    });
+    return deepFreeze({
+        filterBinding,
+        filterBindingDigest: filterBinding.filterBindingDigest,
+        async evaluate({ request, contextEntries }) {
+            if (!Array.isArray(contextEntries))
+                fail("context_integrity_context_entries_invalid");
+            const logicalTimeMs = nonNegative(options.logicalTimeMs(request), "logicalTimeMs");
+            const scope = options.scope
+                ? options.scope(request)
+                : defaultScope(request);
+            const entries = contextEntries.map(validateContextEntryV1);
+            if (entries.length !== request.contextEntryIds.length ||
+                entries.some((entry, index) => entry.contextEntryId !== request.contextEntryIds[index] ||
+                    entry.runId !== request.runId ||
+                    entry.tenantId !== request.tenantId))
+                fail("context_integrity_context_entry_binding_invalid");
+            const items = entries.map((entry) => itemFromEntry(entry, options.classify?.(entry) ?? defaultClassification(entry), itemTtlMs));
+            const requestIdSeed = deepFreeze({
+                checkpoint: "pre_inference",
+                scope,
+                logicalTimeMs,
+                filterBindingDigest: filterBinding.filterBindingDigest,
+                itemDigests: items.map(({ itemDigest }) => itemDigest),
+            });
+            const requestIdDigest = digestContextIntegrityJsonV1("request", requestIdSeed);
+            const integrityRequest = createContextIntegrityRequestV1({
+                schemaVersion: CONTEXT_INTEGRITY_SCHEMA_VERSION_V1,
+                requestId: `context-integrity-request.${requestIdDigest.slice(7)}`,
+                checkpoint: "pre_inference",
+                targetKind: "context",
+                scope,
+                logicalTimeMs,
+                filterBindingDigest: filterBinding.filterBindingDigest,
+                items,
+            });
+            const stateKey = options.stateKey
+                ? identifier(options.stateKey(request, scope), "stateKey")
+                : defaultStateKey(scope);
+            const decision = validateContextIntegrityDecisionV1({
+                decision: await controller.evaluate({
+                    stateKey,
+                    request: integrityRequest,
+                    contents: entries.map((entry) => createContextIntegrityEphemeralContentV1({
+                        itemId: entry.contextEntryId,
+                        mediaType: entry.mediaType,
+                        content: entry.content,
+                    })),
+                }),
+                request: integrityRequest,
+                expected: controller,
+                logicalTimeMs,
+            });
+            const admitted = decision.items
+                .filter(({ action }) => action === "admit" || action === "restrict")
+                .map(({ itemId }) => itemId);
+            return deepFreeze({
+                disposition: decision.disposition,
+                filterRequired: decision.filterRequired,
+                admittedContextEntryIds: admitted,
+                decisionDigest: decision.decisionDigest,
+            });
+        },
+    });
+}
+function itemFromEntry(entry, classification, itemTtlMs) {
+    const expiresAtLogicalMs = safeAdd(entry.createdAtLogicalMs, itemTtlMs, "context_integrity_item_expiry_overflow");
+    return createContextIntegrityItemV1({
+        schemaVersion: CONTEXT_INTEGRITY_SCHEMA_VERSION_V1,
+        itemId: entry.contextEntryId,
+        sourceZone: sourceZoneForContext(entry.zone),
+        sourceId: entry.sourceId,
+        sourceVersion: entry.sourceVersion,
+        sourceRevision: entry.sourceVersion,
+        memoryTier: classification.memoryTier,
+        contentDigest: entry.contentDigest,
+        provenanceDigest: entry.provenanceDigest,
+        claimKeyDigest: classification.claimKeyDigest,
+        claimValueDigest: classification.claimValueDigest,
+        corroborationGroupIds: classification.corroborationGroupIds,
+        observedAtLogicalMs: entry.createdAtLogicalMs,
+        expiresAtLogicalMs,
+    });
+}
+function defaultClassification(entry) {
+    return deepFreeze({
+        memoryTier: memoryTierForContext(entry.zone),
+        claimKeyDigest: null,
+        claimValueDigest: null,
+        corroborationGroupIds: [
+            digestContextIntegrityJsonV1("projection", {
+                sourceKind: entry.sourceKind,
+                sourceId: entry.sourceId,
+            }),
+        ],
+    });
+}
+function defaultScope(request) {
+    const agentId = request.scope?.agentId ?? "controlled-model-executor";
+    const objectiveId = request.scope?.kind === "coordinated"
+        ? request.scope.objectiveId
+        : request.runId;
+    return deepFreeze({
+        tenantId: request.tenantId,
+        sessionId: request.runId,
+        agentId,
+        objectiveId,
+    });
+}
+function defaultStateKey(scope) {
+    const stateDigest = digestContextIntegrityJsonV1("state", scope);
+    return `context-integrity-state.${stateDigest.slice(7)}`;
+}
+function sourceZoneForContext(zone) {
+    if (zone === "policy")
+        return "doctrine_trusted";
+    if (zone === "objective")
+        return "mission_trusted";
+    return zone;
+}
+function memoryTierForContext(zone) {
+    if (zone === "policy")
+        return "doctrine";
+    if (zone === "objective")
+        return "mission";
+    return zone === "local_trusted" ? "episodic" : "working";
+}
+function normalizeController(input) {
+    if (!input ||
+        typeof input !== "object" ||
+        typeof input.evaluate !== "function" ||
+        typeof input.getState !== "function")
+        fail("context_integrity_controller_required");
+    identifier(input.controllerId, "controller.controllerId");
+    positive(input.controllerVersion, "controller.controllerVersion");
+    identifier(input.implementationId, "controller.implementationId");
+    identifier(input.policyId, "controller.policyId");
+    positive(input.policyVersion, "controller.policyVersion");
+    digest(input.policyDigest, "controller.policyDigest");
+    identifier(input.analyzerId, "controller.analyzerId");
+    positive(input.analyzerVersion, "controller.analyzerVersion");
+    digest(input.analyzerImplementationDigest, "controller.analyzerImplementationDigest");
+    return input;
+}
+function identifier(input, label) {
+    assertIdentifier(input, label);
+    return input;
+}
+function digest(input, label) {
+    assertDigest(input, label);
+    return input;
+}
+function positive(input, label) {
+    assertSafeInteger(input, label, 1);
+    return input;
+}
+function nonNegative(input, label) {
+    assertSafeInteger(input, label, 0);
+    return input;
+}
+function safeAdd(left, right, reason) {
+    const result = left + right;
+    if (!Number.isSafeInteger(result))
+        fail(reason);
+    return result;
+}
+function fail(message) {
+    throw new TypeError(message);
+}
+//# sourceMappingURL=context-integrity-model.js.map

package/dist/context-integrity-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-integrity-model.js","sourceRoot":"","sources":["../src/context-integrity-model.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACL,mCAAmC,GAOpC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,wCAAwC,EACxC,qCAAqC,EACrC,4BAA4B,EAC5B,+BAA+B,EAC/B,4BAA4B,EAC5B,kCAAkC,GACnC,MAAM,gCAAgC,CAAC;AAOxC,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,GACX,MAAM,iBAAiB,CAAC;AAgCzB,MAAM,UAAU,2CAA2C,CACzD,OAAqD;IAErD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACzC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;QAC7C,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU;QACpE,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAC1E,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAC1E,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,qCAAqC,CAAC;QAC1D,aAAa,EAAE,mCAAmC;QAClD,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;QAClD,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC;QAC/D,0BAA0B,EAAE,MAAM,CAChC,OAAO,CAAC,0BAA0B,EAClC,4BAA4B,CAC7B;KACF,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC;QAChB,aAAa;QACb,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;QACtD,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE;YACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;gBAChC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACpD,MAAM,aAAa,GAAG,WAAW,CAC/B,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,EAC9B,eAAe,CAChB,CAAC;YACF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK;gBACzB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBACxB,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC3D,IACE,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,MAAM;gBACjD,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;oBACvD,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;oBAC7B,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CACtC;gBAED,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,aAAa,CACX,KAAK,EACL,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,EACzD,SAAS,CACV,CACF,CAAC;YACF,MAAM,aAAa,GAAG,UAAU,CAAC;gBAC/B,UAAU,EAAE,eAAe;gBAC3B,KAAK;gBACL,aAAa;gBACb,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;gBACtD,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,4BAA4B,CAClD,SAAS,EACT,aAAqC,CACtC,CAAC;YACF,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;gBACvD,aAAa,EAAE,mCAAmC;gBAClD,SAAS,EAAE,6BAA6B,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAClE,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,SAAS;gBACrB,KAAK;gBACL,aAAa;gBACb,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;gBACtD,KAAK;aACN,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;gBAC/B,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC;gBAC1D,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,QAAQ,GAAG,kCAAkC,CAAC;gBAClD,QAAQ,EAAE,MAAM,UAAU,CAAC,QAAQ,CAAC;oBAClC,QAAQ;oBACR,OAAO,EAAE,gBAAgB;oBACzB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,wCAAwC,CAAC;wBACvC,MAAM,EAAE,KAAK,CAAC,cAAc;wBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CACH;iBACF,CAAC;gBACF,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,UAAU;gBACpB,aAAa;aACd,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK;iBAC5B,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU,CAAC;iBACnE,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,UAAU,CAAC;gBAChB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,uBAAuB,EAAE,QAAQ;gBACjC,cAAc,EAAE,QAAQ,CAAC,cAAc;aACK,CAAC,CAAC;QAClD,CAAC;KAC8C,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CACpB,KAAqB,EACrB,cAAqD,EACrD,SAAiB;IAEjB,MAAM,kBAAkB,GAAG,OAAO,CAChC,KAAK,CAAC,kBAAkB,EACxB,SAAS,EACT,wCAAwC,CACzC,CAAC;IACF,OAAO,4BAA4B,CAAC;QAClC,aAAa,EAAE,mCAAmC;QAClD,MAAM,EAAE,KAAK,CAAC,cAAc;QAC5B,UAAU,EAAE,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,UAAU,EAAE,cAAc,CAAC,UAAU;QACrC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,cAAc,EAAE,cAAc,CAAC,cAAc;QAC7C,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;QACjD,qBAAqB,EAAE,cAAc,CAAC,qBAAqB;QAC3D,mBAAmB,EAAE,KAAK,CAAC,kBAAkB;QAC7C,kBAAkB;KACnB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAqB;IAErB,OAAO,UAAU,CAAC;QAChB,UAAU,EAAE,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5C,cAAc,EAAE,IAAI;QACpB,gBAAgB,EAAE,IAAI;QACtB,qBAAqB,EAAE;YACrB,4BAA4B,CAAC,YAAY,EAAE;gBACzC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,OAAiC;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,2BAA2B,CAAC;IACtE,MAAM,WAAW,GACf,OAAO,CAAC,KAAK,EAAE,IAAI,KAAK,aAAa;QACnC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;QAC3B,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACpB,OAAO,UAAU,CAAC;QAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,KAAK;QACxB,OAAO;QACP,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAA8B;IACrD,MAAM,WAAW,GAAG,4BAA4B,CAC9C,OAAO,EACP,KAA6B,CAC9B,CAAC;IACF,OAAO,2BAA2B,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAmB;IAEnB,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC;IACjD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,iBAAiB,CAAC;IACnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAmB;IAEnB,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACzC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA6B;IAE7B,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU;QACpC,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU;QAEpC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAChD,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IAC1D,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,CAAC;IAClE,UAAU,CAAC,KAAK,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IAClE,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAC1D,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;IACtD,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC9D,MAAM,CACJ,KAAK,CAAC,4BAA4B,EAClC,yCAAyC,CAC1C,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC"}