@agentplat/inference-control 0.3.0-beta.2 → 0.3.0-beta.4

package/README.md

@@ -22,11 +22,55 @@ pnpm add @agentplat/inference-control@next
   ledger and gateway.
 - `@agentplat/inference-control/trust` — content-free outcome-to-Claim
   conversion plus opt-in legacy and authenticated state-backed Trust gates.
+- `@agentplat/inference-control/portable-agent` — fail-closed bridge from a
+  portable-agent session control point to a bound inference-control policy and
+  assessor. It maps `pre_step`, `post_output`, and `pre_action` to `pre_run`,
+  `post_run`, and `pre_tool`; it does not invoke a provider or grant actions.
+- `@agentplat/inference-control/role-alignment` — deterministic longitudinal
+  role anchors, coherence signals, recovery hysteresis and bounded local
+  interventions.
+- `@agentplat/inference-control/role-alignment/portable-agent` — stateful
+  Portable Agent controller plus checkpoint-handoff continuity.
+- `@agentplat/inference-control/role-realignment` — content-free discovery,
+  trusted-catalog admission, deterministic selection, certificates and the
+  pure realignment reducer.
+- `@agentplat/inference-control/role-realignment/portable-agent` — restart-safe
+  discovery-to-activation orchestration with Trust eligibility, exact Runtime
+  role updates and checkpoint-handoff continuity.
+- `@agentplat/inference-control/context-integrity` — content-free longitudinal
+  context decisions, bounded CAS state, explainable reference analysis and
+  conservative analyzer composition.
+- `@agentplat/inference-control/context-integrity/model` — exact pre-provider
+  filtering for immutable controlled-model context entries.
+- `@agentplat/inference-control/context-integrity/portable-agent` — a
+  manifest-bound filtering wrapper for heterogeneous agents plus state handoff.
+- `@agentplat/inference-control/intervention` — capability-negotiated,
+  content-free intervention gates for opaque APIs, token streams,
+  representation sidecars, portable agents and multimodal action agents.
+- `@agentplat/inference-control/cognitive-adapters` — concrete cognitive-agent
+  adapters for black-box and representation-aware local inference, plus a
+  bounded HTTP chat-completions port for locally operated endpoints.
+- `@agentplat/inference-control/operational-control` — executable cognitive
+  control loop for black-box and representation-aware inference, anytime
+  observations, safe stopping and immediate pre-tool/pre-effect fencing.
+- `@agentplat/inference-control/assessor-ensemble` — request-bound,
+  independent-group assessment across heterogeneous surfaces and modalities.
+- `@agentplat/inference-control/semantic-metrics` — provider-neutral vector
+  metrics and fixed-horizon descriptive bounds.
+- `@agentplat/inference-control/semantic-guarantees` — durable, anytime-valid
+  confidence sequences with explicit error spending, missingness policies and
+  horizon/replanning decisions.
 
 The root entry point has no Node runtime dependency and imports only
 `@agentplat/core`. Adapter subpaths depend only on public AgentPlat contracts
 and never import a vendor SDK.
 
+The cognitive adapters keep context, memory and tool use behind the reference
+control boundary. Representation-aware execution applies the configured
+representation intervention before the embedded engine runs. Both forms emit
+content-bound receipts for the collective cognitive runtime; neither model
+output nor a transport response grants action authority.
+
 ## Minimal controlled model
 
 Create a `CapabilityRegistryV1`, register the exact wrapper descriptor and
@@ -80,6 +124,117 @@ Context entries are immutable and digest-bound. Only `policy`, `objective` and
 configured `local_trusted` entries may supply instructions; user, peer, tool,
 retrieval, provider and assessor content remains ordinary untrusted data.
 
+## Long-horizon context integrity
+
+Context Integrity evaluates the complete original input set and returns an
+item decision: `admit`, `restrict`, `isolate`, `require_corroboration` or
+`deny`. An inference may continue with a reduced set only when the request and
+policy contain the exact digest of the installed filtering implementation.
+
+```js
+import {
+  ContextIntegrityRuntimeV1,
+  createContextIntegrityReferenceAnalyzerV1,
+} from "@agentplat/inference-control/context-integrity";
+import { createContextIntegrityControlledModelGateV1 } from "@agentplat/inference-control/context-integrity/model";
+
+const controller = new ContextIntegrityRuntimeV1({
+  controllerId: "context-integrity:local",
+  controllerVersion: 1,
+  implementationId: "context-integrity:local:v1",
+  policy: localContextIntegrityPolicy,
+  analyzer: createContextIntegrityReferenceAnalyzerV1({
+    analyzerId: "context-analyzer:local",
+    analyzerVersion: 1,
+    assessmentTtlMs: 5_000,
+  }),
+  store: durableContextIntegrityStore,
+});
+
+const contextGate = createContextIntegrityControlledModelGateV1({
+  controller,
+  filterId: "context-filter:model",
+  filterVersion: 1,
+  filterImplementationDigest,
+  itemTtlMs: 60_000,
+  logicalTimeMs: trustedLogicalClock,
+});
+```
+
+The reference analyzer is a transparent baseline, not a universal injection
+detector. Applications can compose model, classifier, semantic-entropy or
+representation-probe analyzers. State and handoff envelopes retain only
+digests, revisions, bounded scores and reason codes; raw content remains
+ephemeral. See the [implementation plan](../../docs/inference-control/long-horizon-context-integrity-v1-implementation-plan.md),
+[ADR](../../docs/adr/0020-long-horizon-context-integrity.md) and [threat
+model](../../docs/security/long-horizon-context-integrity-threat-model.md).
+
+## Continuous role alignment
+
+The role-alignment controller turns exact checkpoint assessments into bounded
+session history. It can allow a healthy step, reinforce the current role,
+abstain on contradictory context, pause, request a successor role or deny. A
+single healthy assessment does not erase accumulated degradation: recovery
+requires the policy's consecutive healthy-signal threshold.
+
+```js
+import { createRoleAlignmentPortableAgentControlV1 } from "@agentplat/inference-control/role-alignment/portable-agent";
+
+const control = createRoleAlignmentPortableAgentControlV1({
+  controlId: "alignment:local",
+  controlVersion: 1,
+  implementationId: "alignment:local:v1",
+  policy: localRoleAlignmentPolicy,
+  assessorBinding: localAssessorBinding,
+  assessor: localAssessor,
+  assessmentTtlMs: 5_000,
+});
+```
+
+The scorer is deliberately application-provided. It may use deterministic
+rules, another model, representation probes exposed by an open-weight adapter
+or an ensemble, but its result never creates role or action authority. State is
+content-free and can be exported alongside an exact Portable Agent checkpoint
+transfer so a handoff cannot silently reset adverse history.
+
+## Adaptive role realignment
+
+The realignment controller consumes an exact `realignment_required` state and
+can close the loop without accepting role instructions from a peer. Discovery
+strategies propose only trusted catalog references. Independent Trust-eligible
+evaluators score the resolved definitions, the pure reducer selects one with
+integer arithmetic and a certificate gates installation of the exact successor
+role revision.
+
+```js
+import { createRoleRealignmentPortableAgentV1 } from "@agentplat/inference-control/role-realignment/portable-agent";
+```
+
+Definitions may narrow capabilities, resource classes, action budget or
+validity, but cannot widen the request's authority ceiling. Runtime-first
+activation is retryable: a process interruption after the role update does not
+create a second revision. See the [integration guide](../../docs/inference-control/adaptive-role-realignment-v1.md).
+
+## Heterogeneous inference intervention
+
+The `./intervention` subpath provides one provider-neutral policy boundary for
+pre-input and context assessment, trusted transformations, streamed token and
+window checks, final-output release, tool/action gating and optional
+representation-sidecar intervention. An adapter advertises a closed capability
+set; construction fails when the policy requires a hook that the adapter cannot
+enforce.
+
+Durable state contains only identities, digests, counters, logical-time heads
+and an invocation reservation. Raw inputs, context, multimodal payload handles,
+tokens and model output remain volatile. A `modify` decision requires a trusted
+transformation port and a verified receipt; otherwise the invocation is
+blocked. Stable invocation IDs and CAS reservations make retries explicit and
+prevent a conflicting request from reusing an invocation identity.
+
+This boundary controls only calls routed through it. Provider cancellation,
+distributed idempotency, monotonic storage anchors and downstream tool or
+action fencing remain application responsibilities.
+
 ## Security boundary
 
 Protection applies only to calls routed through the exact controlled executor
@@ -129,3 +284,208 @@ These gates remain opt-in and point-in-time. They do not issue assessments or
 grants, replace idempotency/fencing, or claim atomic revocation after an
 external effect has started. The legacy synchronous-resolver helpers remain
 available unchanged for Alpha 3 compatibility.
+
+## Heterogeneous assessor ensemble
+
+Import `@agentplat/inference-control/assessor-ensemble` to combine bounded,
+request-bound votes from rule, model, classifier, representation and multimodal
+assessors. Policy requires both vote count and independent-group coverage for
+the requested surface and modalities. Missing, timed-out, conflicting,
+same-group divergent or uncovered evidence produces `unresolved`; the supplied
+operation gate dispatches only on an exact `allow` verdict.
+
+Invocations are prepared durably before assessor calls. An exact retry of an
+active reservation never masquerades as a blocked verdict: it requires an
+authenticated reconciliation. A `confirmed_not_applied` receipt durably
+authorizes only that same invocation digest to reclaim the reservation and
+retry; any competing or changed invocation still fails closed. Completed
+verdicts are idempotent, and an external monotonic anchor detects rollback.
+Independence labels and assessor quality remain deployment attestations rather
+than facts inferred by the runtime.
+
+Governed role catalogs are nominal runtimes. Closed host currentness paths use
+the catalog's module-owned resolver and its construction-time mission identity;
+plain structural adapters, prototype-only objects, instance method replacement,
+subclass overrides and later option rebinding cannot create an active role
+binding.
+
+## Anytime semantic guarantees
+
+Import `@agentplat/inference-control/semantic-guarantees` when a control loop
+will inspect semantic or coherence evidence repeatedly. The engine allocates a
+separate absolute error budget to every metric and an inverse-quadratic budget
+to every observation count. Its intervals therefore remain simultaneous over
+all configured metrics and all emitted observation counts, subject to the
+digested bounded-martingale and pre-observation selection assumptions.
+
+State contains integer accumulators, counters and evidence digests only. A CAS
+store plus a monotonically anchored state digest makes restart, exact retry,
+equivocation and rollback behavior explicit. `createSemanticHorizonControlV1`
+binds to the exact guarantee-policy and assumption digests, then emits
+`continue`, `shorten_horizon`, `replan` or `safe_stop` with a bounded horizon.
+The concrete engine and horizon control are nominal, construction-time-bound
+runtimes. Their module-owned invokers and ECMAScript-private state transitions
+ignore instance replacement and subclass overrides. Exhaustive output
+validation rejects unknown directives, malformed bounds, inconsistent error
+budgets and mismatched state/policy/assumption bindings before control can
+authorize a tool or effect.
+
+Null metrics are never silently discarded. `fail_closed` permanently stops
+the bound from authorizing continued operation after a missing observation;
+`worst_case_imputation` inserts zero for benefit metrics and 10,000 for risk
+metrics; `predictable_skip` requires an assumption-evidence digest and is valid
+only when the skip decision is fixed before the unavailable value could be
+observed. These confidence sequences target the average conditional mean, not
+a stationary population mean, causal effect, future outcome or proof that an
+assessor is calibrated. See the [statistical contract and limits](../../docs/inference-control/anytime-semantic-guarantees-v1.md).
+
+## Operational cognitive control
+
+`OperationalCognitiveControllerV1` closes the provider-neutral control loop by
+composing the existing black-box controller, optional representation controller,
+heterogeneous intervention runtime and anytime guarantee engine. Four explicit
+observer ports report role coherence, objective alignment, context conflict and
+uncertainty at `pre_turn`, `post_turn`, `pre_tool` and `pre_effect` checkpoints.
+Their content-free metric sample is committed to the configured confidence
+sequence before the associated operation can continue.
+
+`runTurn` applies memory, context and tool constraints before the inference port
+is called. In representation-aware mode it also verifies and controls the
+activation before execution. Output remains withheld when the horizon controller
+requires `replan` or `safe_stop`, or when the output intervention gate blocks it.
+`runPreTool` and `runPreEffect` accept callbacks and invoke them only after the
+final gate, keeping the check adjacent to dispatch instead of returning a
+detached authorization boolean.
+
+The controller snapshots both intervention gate functions at construction, so
+later mutation or rebinding cannot replace them with allow-all callbacks. A
+`shorten_horizon` decision installs a non-refilling operational budget. Actual
+inference, tool dispatch and effect commit each consume one step; repeated
+shortening decisions can reduce but never refill it. Exhaustion blocks the
+callback and returns `replan_required` or `semantic_horizon_exhausted` while
+preserving immediate `replan` and `safe_stop` behavior.
+
+The budget is a hash-chained CAS ledger bound to the guarantee state, control
+policy, assumptions and directive. Supplying `horizonBudgetStore`,
+`horizonBudgetMonotonicAnchor` and `horizonBudgetStateKey` preserves the exact
+remaining count across process reconstruction and detects rollback. The
+in-memory implementations support local composition and restart tests; closed
+reference stacks require explicit durable state and anchor repositories.
+Consumption tombstones are retained as an exact retry window. When a newer
+guarantee creates a new consumption epoch and that window reaches its bound,
+older epochs are folded into a hash-chained count/digest accumulator. Exact
+retries remain idempotent while present in the window and fail closed after
+compaction; new current-epoch work can continue without refilling a finite
+horizon.
+
+Pre-effect consumption IDs include the checkpoint kind, preventing an earlier
+tool debit from authorizing an effect with the same operation ID. A durable
+effect saga can reconcile an exact retained pre-effect debit and resume only
+its callback after a crash, even if the guarantee sequence has since advanced.
+If the required tombstone has already been compacted, replay is ambiguous and
+fails closed instead of re-observing an old sequence.
+
+Generic operational compositions may still install provider ports, but every
+guarantee and decision is exhaustively validated and malformed output fails
+closed. `isOperationalCognitiveControllerBoundToSemanticGuaranteesV1` is true
+only when the controller captured the concrete engine and horizon identities;
+the closed reference host requires this stronger nominal binding.
+
+```js
+import { OperationalCognitiveControllerV1 } from "@agentplat/inference-control/operational-control";
+
+const control = new OperationalCognitiveControllerV1({
+  controlId: "cognitive-control:primary",
+  mode: "black_box",
+  guaranteeStateKey: "semantic-guarantees:session-42",
+  blackBoxPolicy,
+  observers: { coherence, objective, context, uncertainty },
+  intervention,
+  guarantee,
+  horizonControl,
+  inference,
+  observationSink,
+});
+
+const turn = await control.runTurn(turnRequest);
+const tool = await control.runPreTool(toolRequest, () =>
+  toolDispatcher(toolRequest),
+);
+const effect = await control.runPreEffect(effectRequest, () =>
+  effectSink(effectRequest),
+);
+```
+
+Observation sequences are caller-supplied so durable deployments can preserve
+ordering across restarts. A turn consumes its declared sequence at `pre_turn`
+and the following sequence at `post_turn`; later tool and effect checkpoints
+must use strictly later values. The in-memory guarantee store is development
+support. Production use still requires a durable CAS store, external monotonic
+anchor and downstream-atomic effect fencing.
+
+## Collective capability closure
+
+Semantic Alignment & Agility Control V1 and Heterogeneous Agent Composition V1
+are control-plane inputs to the collective capability closure. They publish
+bounded, provider-neutral assessment and intervention evidence; neither a
+model result, assessor vote nor provider adapter can create assignment or
+effect authority. Unresolved, stale, unsupported or conflicting results must
+remain restrictive at the receiving control gate.
+
+Semantic requests retain no provider material or action payload, but their
+canonical digest includes `materialDigest` and the exact pre-action payload
+digest. A replay with different material or payload is rejected before a
+cached decision can be returned. Successful action dispatch receives a
+`SemanticActionAuthorizationV1` receipt binding the allow decision, current
+policy and assessor set, authority, effect consumer, exact `sinkId` and
+`sinkKeyDigest`, full action target, material, payload, committed revision and
+a bounded logical-time window. A raw
+SHA is not authority: the runtime resolves and authenticates the receipt through
+the configured `SemanticActionAuthorizationAuthorityV1` immediately before the
+effect. Dispatch requires a `SemanticActionEffectSinkV1` that atomically keys
+the external effect by `authorizationDigest`; an exact retry returns the
+original authenticated `SemanticActionEffectReceiptV1` without repeating the
+effect. A sink with a different ID or key digest is rejected. Replicas using
+the authorized sink identity must share the same atomic idempotency store. The
+included in-memory
+authority is process-local development support; production deployments need a
+durable signed or MAC-authenticated lookup.
+
+Authorization windows are inclusive at `validUntilLogicalTimeMs`. Verification
+rejects a caller clock below the semantic state's logical-time high-water and
+requires the exact allow request/decision record to remain in bounded state.
+Later decisions do not revoke a retained receipt by themselves; policy,
+assessor-set, binding, consumer or sink-identity change, receipt eviction,
+explicit authority revocation, or expiry does. Size
+`maximumRetainedDecisions` for the maximum
+delay and number of simultaneously dispatchable proposals.
+
+Action payload bytes are bounded before hashing or assessor work. Exploration
+requests with candidates or a selected course fail closed when diversity or
+novelty lacks configured independent-group coverage, and course history
+advances only for a pre-step course that may actually proceed.
+
+Heterogeneous composition derives checkpoint ordering from the portable
+session's bounded `stepSequence`, not its lifecycle revision. Construction
+therefore rejects manifests whose maximum step count cannot fit both semantic
+and intervention policy ceilings, and requires an explicit logical-time ceiling
+that fits the semantic policy. Output/action item indexes are bounded and form
+disjoint sequence ranges within each step. The composed portable control runs
+role and intervention prerequisites before semantic authorization. Returned
+action proposals remain inert; dispatch them only through
+`composition.actionGateway`, which reauthenticates the stored receipt, checks
+expiry/current revision, proves the portable step and proposal were durably
+committed, and compares the canonically encoded full proposal (`actionId`,
+class, input, risk and metadata) at the effect boundary. Both the explicit
+`currentLogicalTimeMs` argument to `runtime.dispatchAction` and the gateway's
+`currentLogicalTimeMs` must come from a trusted monotonic source, never from
+`request.logicalTimeMs` or other caller-controlled request data. Exactly-once
+external effects require the sink
+to co-locate its authorization-digest compare-and-set with the effect; the
+gateway does not claim atomicity across an arbitrary downstream service.
+
+Production integrations own provider identity, input/output redaction,
+durable idempotency, logical time, current policy binding and any model-specific
+security properties. The package exposes no scheduler or global agent graph.
+See [ADR 0042](../../docs/adr/0042-collective-capability-closure.md) and the
+[architecture and threat model](../../docs/security/collective-capability-closure-v1.md).

package/dist/anytime-semantic-guarantees.d.ts

@@ -0,0 +1,216 @@
+import type { SemanticMetricSampleV1 } from "./semantic-metric-engine.js";
+export declare const ANYTIME_SEMANTIC_GUARANTEE_STATE_FORMAT_V1: "agentplat.inference-control.anytime-semantic-guarantee-state.v1";
+export declare const SEMANTIC_GUARANTEE_METRICS_V1: readonly ["roleCoherence", "missionAlignment", "contextConflict", "uncertainty", "courseActionDiversity", "courseActionNovelty"];
+export type SemanticGuaranteeMetricV1 = (typeof SEMANTIC_GUARANTEE_METRICS_V1)[number];
+export type SemanticGuaranteeDirectionV1 = "higher_is_better" | "lower_is_better";
+export type SemanticGuaranteeMissingnessV1 = "fail_closed" | "predictable_skip" | "worst_case_imputation";
+export interface AnytimeSemanticAssumptionsV1 {
+    readonly schemaVersion: 1;
+    /** The guarantee targets the average conditional mean, not a stationary population mean. */
+    readonly estimand: "average_conditional_mean";
+    /** Supports adaptive histories when the centered observations form bounded martingale differences. */
+    readonly dependenceModel: "bounded_martingale_differences";
+    readonly observationRange: "basis_points_0_10000";
+    /** Sampling and skip decisions must be fixed before the current metric value is observed. */
+    readonly selectionTiming: "before_metric_observation";
+    readonly assumptionEvidenceDigests: readonly string[];
+    readonly assumptionsDigest: string;
+}
+export interface SemanticMetricGuaranteePolicyV1 {
+    readonly direction: SemanticGuaranteeDirectionV1;
+    /** Absolute family-wise error allocation for this metric, in parts per million. */
+    readonly errorBudgetPpm: number;
+    readonly missingness: SemanticGuaranteeMissingnessV1;
+}
+export interface AnytimeSemanticGuaranteePolicyV1 {
+    readonly schemaVersion: 1;
+    readonly policyId: string;
+    /** Upper bound on the sum of all metric error budgets. */
+    readonly familywiseErrorBudgetPpm: number;
+    readonly boundMethod: "hoeffding_azuma_two_sided";
+    readonly spendingSchedule: "inverse_quadratic_telescoping";
+    readonly minimumInferenceSamples: number;
+    readonly maximumRetainedEvidenceDigests: number;
+    readonly maximumCasAttempts: number;
+    readonly metrics: Readonly<Record<SemanticGuaranteeMetricV1, SemanticMetricGuaranteePolicyV1>>;
+    readonly assumptions: AnytimeSemanticAssumptionsV1;
+    readonly policyDigest: string;
+}
+export interface AnytimeSemanticAssumptionsInputV1 {
+    readonly assumptionEvidenceDigests: readonly string[];
+}
+export interface AnytimeSemanticGuaranteePolicyInputV1 {
+    readonly policyId: string;
+    readonly familywiseErrorBudgetPpm: number;
+    readonly minimumInferenceSamples: number;
+    readonly maximumRetainedEvidenceDigests?: number;
+    readonly maximumCasAttempts?: number;
+    readonly metrics: Readonly<Record<SemanticGuaranteeMetricV1, SemanticMetricGuaranteePolicyV1>>;
+    readonly assumptions: AnytimeSemanticAssumptionsInputV1;
+}
+export interface SemanticMetricAccumulatorV1 {
+    readonly reportedCount: number;
+    readonly missingCount: number;
+    /** Count after the declared missingness transformation. */
+    readonly inferenceCount: number;
+    readonly sumBasisPoints: number;
+    readonly latestWasMissing: boolean;
+}
+export interface AnytimeSemanticGuaranteeStateV1 {
+    readonly format: typeof ANYTIME_SEMANTIC_GUARANTEE_STATE_FORMAT_V1;
+    readonly schemaVersion: 1;
+    readonly stateKey: string;
+    readonly policyDigest: string;
+    readonly assumptionsDigest: string;
+    readonly revision: number;
+    readonly sampleCount: number;
+    readonly sequenceHighWater: number;
+    readonly logicalTimeHighWaterMs: number;
+    readonly lastSampleDigest: string;
+    readonly metrics: Readonly<Record<SemanticGuaranteeMetricV1, SemanticMetricAccumulatorV1>>;
+    readonly recentEvidenceDigests: readonly string[];
+    readonly predecessorStateDigest: string | null;
+    readonly stateDigest: string;
+}
+export interface AnytimeSemanticGuaranteeStoreV1 {
+    load(stateKey: string): Promise<AnytimeSemanticGuaranteeStateV1 | null>;
+    /** Production implementations must atomically advance the rollback anchor. */
+    compareAndSet(input: {
+        readonly stateKey: string;
+        readonly expectedRevision: number | null;
+        readonly expectedStateDigest: string | null;
+        readonly next: AnytimeSemanticGuaranteeStateV1;
+    }): Promise<boolean>;
+}
+export interface AnytimeSemanticGuaranteeAnchorV1 {
+    readAnchor(stateKey: string): Promise<{
+        readonly revision: number;
+        readonly sequenceHighWater: number;
+        readonly logicalTimeHighWaterMs: number;
+        readonly stateDigest: string;
+    } | null>;
+}
+export interface AnytimeSemanticMetricBoundV1 {
+    readonly reportedCount: number;
+    readonly missingCount: number;
+    readonly inferenceCount: number;
+    /** Integer sufficient statistic used to verify every emitted bound. */
+    readonly sumBasisPoints: number;
+    readonly meanBasisPoints: number | null;
+    readonly lowerBasisPoints: number | null;
+    readonly upperBasisPoints: number | null;
+    readonly errorBudgetPpm: number;
+    /** Error allocated to the current inference count by the spending schedule. */
+    readonly currentLookErrorBudgetPpm: number | null;
+    readonly missingness: SemanticGuaranteeMissingnessV1;
+    readonly latestWasMissing: boolean;
+}
+export interface AnytimeSemanticGuaranteeV1 {
+    readonly schemaVersion: 1;
+    readonly stateKey: string;
+    readonly policyDigest: string;
+    readonly assumptionsDigest: string;
+    readonly stateDigest: string;
+    readonly throughSequence: number;
+    readonly throughLogicalTimeMs: number;
+    readonly familywiseErrorBudgetPpm: number;
+    readonly simultaneousConfidenceBasisPoints: number;
+    readonly minimumInferenceSamples: number;
+    readonly estimand: "average_conditional_mean";
+    readonly roleCoherence: AnytimeSemanticMetricBoundV1;
+    readonly missionAlignment: AnytimeSemanticMetricBoundV1;
+    readonly contextConflict: AnytimeSemanticMetricBoundV1;
+    readonly uncertainty: AnytimeSemanticMetricBoundV1;
+    readonly courseActionDiversity: AnytimeSemanticMetricBoundV1;
+    readonly courseActionNovelty: AnytimeSemanticMetricBoundV1;
+    readonly evidenceDigests: readonly string[];
+}
+export type SemanticHorizonDirectiveV1 = "continue" | "shorten_horizon" | "replan" | "safe_stop";
+export interface SemanticHorizonThresholdV1 {
+    readonly thresholdBasisPoints: number;
+    readonly enabled: boolean;
+}
+export interface SemanticHorizonControlPolicyV1 {
+    readonly schemaVersion: 1;
+    readonly expectedGuaranteePolicyDigest: string;
+    readonly expectedAssumptionsDigest: string;
+    readonly nominalHorizonSteps: number;
+    readonly cautionHorizonSteps: number;
+    readonly replanHorizonSteps: number;
+    readonly thresholds: Readonly<Record<SemanticGuaranteeMetricV1, SemanticHorizonThresholdV1>>;
+    readonly controlPolicyDigest: string;
+}
+export type SemanticHorizonControlPolicyInputV1 = Omit<SemanticHorizonControlPolicyV1, "schemaVersion" | "controlPolicyDigest">;
+export interface SemanticHorizonDecisionV1 {
+    readonly schemaVersion: 1;
+    readonly directive: SemanticHorizonDirectiveV1;
+    readonly recommendedHorizonSteps: number;
+    readonly replanRequired: boolean;
+    readonly reasonCodes: readonly string[];
+    readonly guaranteeStateDigest: string;
+    readonly policyDigest: string;
+    readonly assumptionsDigest: string;
+    readonly controlPolicyDigest: string;
+}
+export interface SemanticHorizonControlPortV1 {
+    decide(guarantee: AnytimeSemanticGuaranteeV1): SemanticHorizonDecisionV1;
+}
+type AnytimeSemanticGuaranteeAppendInputV1 = {
+    readonly stateKey: string;
+    readonly sample: SemanticMetricSampleV1;
+};
+export declare function createAnytimeSemanticAssumptionsV1(input: AnytimeSemanticAssumptionsInputV1): AnytimeSemanticAssumptionsV1;
+export declare function createAnytimeSemanticGuaranteePolicyV1(input: AnytimeSemanticGuaranteePolicyInputV1): AnytimeSemanticGuaranteePolicyV1;
+export declare class InMemoryAnytimeSemanticGuaranteeStoreV1 implements AnytimeSemanticGuaranteeStoreV1, AnytimeSemanticGuaranteeAnchorV1 {
+    #private;
+    load(stateKey: string): Promise<AnytimeSemanticGuaranteeStateV1 | null>;
+    readAnchor(stateKey: string): Promise<{
+        revision: number;
+        sequenceHighWater: number;
+        logicalTimeHighWaterMs: number;
+        stateDigest: string;
+    } | null>;
+    compareAndSet(input: {
+        readonly stateKey: string;
+        readonly expectedRevision: number | null;
+        readonly expectedStateDigest: string | null;
+        readonly next: AnytimeSemanticGuaranteeStateV1;
+    }): Promise<boolean>;
+}
+export interface AnytimeSemanticGuaranteeEngineOptionsV1 {
+    readonly policy: AnytimeSemanticGuaranteePolicyV1;
+    readonly store?: AnytimeSemanticGuaranteeStoreV1;
+    readonly monotonicAnchor?: AnytimeSemanticGuaranteeAnchorV1;
+}
+/**
+ * Portable confidence-sequence engine. It uses a fixed-time Hoeffding-Azuma
+ * bound at each inference count and an inverse-quadratic alpha-spending union
+ * bound, making all emitted intervals simultaneous across metrics and time.
+ */
+export declare class AnytimeSemanticGuaranteeEngineV1 {
+    #private;
+    readonly policy: AnytimeSemanticGuaranteePolicyV1;
+    readonly store: AnytimeSemanticGuaranteeStoreV1;
+    readonly anchor: AnytimeSemanticGuaranteeAnchorV1;
+    constructor(options: AnytimeSemanticGuaranteeEngineOptionsV1);
+    append(input: AnytimeSemanticGuaranteeAppendInputV1): Promise<AnytimeSemanticGuaranteeV1>;
+    current(stateKey: string): Promise<AnytimeSemanticGuaranteeV1>;
+}
+/** Nominal check for the concrete time-uniform guarantee engine. */
+export declare function isAnytimeSemanticGuaranteeEngineV1(value: unknown): value is AnytimeSemanticGuaranteeEngineV1;
+/** Appends through the construction-time engine closure. */
+export declare function invokeAnytimeSemanticGuaranteeAppendV1(engine: AnytimeSemanticGuaranteeEngineV1, input: AnytimeSemanticGuaranteeAppendInputV1): Promise<AnytimeSemanticGuaranteeV1>;
+/** Reads through the construction-time engine closure. */
+export declare function invokeAnytimeSemanticGuaranteeCurrentV1(engine: AnytimeSemanticGuaranteeEngineV1, stateKey: string): Promise<AnytimeSemanticGuaranteeV1>;
+/** Exhaustively validates a portable guarantee before it can authorize control. */
+export declare function validateAnytimeSemanticGuaranteeV1(input: AnytimeSemanticGuaranteeV1): AnytimeSemanticGuaranteeV1;
+/** Exhaustively validates a horizon decision and its exact guarantee binding. */
+export declare function validateSemanticHorizonDecisionV1(input: SemanticHorizonDecisionV1, guarantee: AnytimeSemanticGuaranteeV1): SemanticHorizonDecisionV1;
+export declare function createSemanticHorizonControlPolicyV1(input: SemanticHorizonControlPolicyInputV1): SemanticHorizonControlPolicyV1;
+export declare function createSemanticHorizonControlV1(raw: SemanticHorizonControlPolicyV1): SemanticHorizonControlPortV1;
+/** Nominal check for a library-created semantic horizon control. */
+export declare function isSemanticHorizonControlV1(value: unknown): value is SemanticHorizonControlPortV1;
+/** Decides through the immutable policy closure. */
+export declare function invokeSemanticHorizonControlV1(control: SemanticHorizonControlPortV1, guarantee: AnytimeSemanticGuaranteeV1): SemanticHorizonDecisionV1;
+export {};
+//# sourceMappingURL=anytime-semantic-guarantees.d.ts.map

package/dist/anytime-semantic-guarantees.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anytime-semantic-guarantees.d.ts","sourceRoot":"","sources":["../src/anytime-semantic-guarantees.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAG1E,eAAO,MAAM,0CAA0C,EACrD,iEAA0E,CAAC;AAE7E,eAAO,MAAM,6BAA6B,kIAO/B,CAAC;AAEZ,MAAM,MAAM,yBAAyB,GACnC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,MAAM,MAAM,4BAA4B,GACtC,kBAAkB,GAAG,iBAAiB,CAAC;AACzC,MAAM,MAAM,8BAA8B,GACxC,aAAa,GAAG,kBAAkB,GAAG,uBAAuB,CAAC;AAE/D,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,sGAAsG;IACtG,QAAQ,CAAC,eAAe,EAAE,gCAAgC,CAAC;IAC3D,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,6FAA6F;IAC7F,QAAQ,CAAC,eAAe,EAAE,2BAA2B,CAAC;IACtD,QAAQ,CAAC,yBAAyB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC;IACjD,mFAAmF;IACnF,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;CACtD;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,0DAA0D;IAC1D,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,+BAA+B,CAAC;IAC3D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CACxB,MAAM,CAAC,yBAAyB,EAAE,+BAA+B,CAAC,CACnE,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,yBAAyB,EAAE,SAAS,MAAM,EAAE,CAAC;CACvD;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CACxB,MAAM,CAAC,yBAAyB,EAAE,+BAA+B,CAAC,CACnE,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,iCAAiC,CAAC;CACzD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,2DAA2D;IAC3D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,OAAO,0CAA0C,CAAC;IACnE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CACxB,MAAM,CAAC,yBAAyB,EAAE,2BAA2B,CAAC,CAC/D,CAAC;IACF,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC,CAAC;IACxE,8EAA8E;IAC9E,aAAa,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QACzC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5C,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;KAChD,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,gCAAgC;IAC/C,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;QACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,GAAG,IAAI,CAAC,CAAC;CACX;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,iCAAiC,EAAE,MAAM,CAAC;IACnD,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,4BAA4B,CAAC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;IACxD,QAAQ,CAAC,eAAe,EAAE,4BAA4B,CAAC;IACvD,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,QAAQ,CAAC,qBAAqB,EAAE,4BAA4B,CAAC;IAC7D,QAAQ,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;IAC3D,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,0BAA0B,GACpC,UAAU,GAAG,iBAAiB,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE1D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAC3B,MAAM,CAAC,yBAAyB,EAAE,0BAA0B,CAAC,CAC9D,CAAC;IACF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,8BAA8B,EAC9B,eAAe,GAAG,qBAAqB,CACxC,CAAC;AAEF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,SAAS,EAAE,0BAA0B,GAAG,yBAAyB,CAAC;CAC1E;AAED,KAAK,qCAAqC,GAAG;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACzC,CAAC;AAuCF,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,iCAAiC,GACvC,4BAA4B,CAiB9B;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,qCAAqC,GAC3C,gCAAgC,CA6ElC;AAED,qBAAa,uCACX,YAAW,+BAA+B,EAAE,gCAAgC;;IAatE,IAAI,CACR,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;IAI5C,UAAU,CAAC,QAAQ,EAAE,MAAM;kBAbnB,MAAM;2BACG,MAAM;gCACD,MAAM;qBACjB,MAAM;;IAcjB,aAAa,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QACzC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5C,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;KAChD,GAAG,OAAO,CAAC,OAAO,CAAC;CAmBrB;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,eAAe,CAAC,EAAE,gCAAgC,CAAC;CAC7D;AAED;;;;GAIG;AACH,qBAAa,gCAAgC;;IAC3C,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,+BAA+B,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;gBAKtC,OAAO,EAAE,uCAAuC;IAoCtD,MAAM,CACV,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,0BAA0B,CAAC;IAoDhC,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;CA6GrE;AAED,oEAAoE;AACpE,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,gCAAgC,CAM3C;AAED,4DAA4D;AAC5D,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,gCAAgC,EACxC,KAAK,EAAE,qCAAqC,GAC3C,OAAO,CAAC,0BAA0B,CAAC,CAQrC;AAED,0DAA0D;AAC1D,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,gCAAgC,EACxC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,0BAA0B,CAAC,CAQrC;AAED,mFAAmF;AACnF,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,0BAA0B,GAChC,0BAA0B,CAmI5B;AAED,iFAAiF;AACjF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,yBAAyB,EAChC,SAAS,EAAE,0BAA0B,GACpC,yBAAyB,CAqD3B;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,mCAAmC,GACzC,8BAA8B,CA8ChC;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,8BAA8B,GAClC,4BAA4B,CAuF9B;AAED,oEAAoE;AACpE,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,4BAA4B,CAMvC;AAED,oDAAoD;AACpD,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,4BAA4B,EACrC,SAAS,EAAE,0BAA0B,GACpC,yBAAyB,CAS3B"}