@aikdna/kdna-core 0.19.0 → 0.21.0

package/CHANGELOG.md

@@ -2,6 +2,68 @@
 
 ## Unreleased
 
+- Validate decrypted external-grant and password payload plaintext against the
+  same declared Payload schema used for ordinary assets. Correct credentials
+  can no longer load schema-invalid judgment bytes.
+- Close `core_structure` relation objects to the existing public relation
+  fields and project only that allowlist in compact Runtime Capsules, blocking
+  private Creation state hidden in arbitrary relation properties.
+- Make the external-grant conformance golden carry one deterministic, actual
+  encrypted `.kdna` byte snapshot. The regression now checks the exact package
+  digest, Core validation, signed authorization, LoadPlan and authorized load
+  against that same artifact instead of deriving grant identity from
+  zlib-dependent repacking.
+- Warn with `KDNA_DISPATCHER_DEGRADED` when the container dispatcher fails to
+  load for any reason other than the dispatcher file itself being absent,
+  instead of silently degrading to the legacy reader. The absence check now
+  resolves the dispatcher path up front, so a present dispatcher with a
+  missing internal dependency, a syntax or initialization error, or a
+  permission error is reported instead of being mistaken for a missing
+  module.
+- Fail closed on hostile Argon2id parameters in untrusted password envelopes:
+  `memory_kib`, `iterations`, and `parallelism` must be integers within
+  defensive bounds (256 MiB / 16 / 8), removing a remote denial-of-service
+  path when loading third-party protected assets.
+
+## 0.21.0 (2026-07-20)
+
+### Changed
+
+- Keep `planLoad` fail-closed for password-protected assets until the supplied
+  credential is actually verified by `load`; a mere password-present signal
+  no longer reports `ready` or `can_load_now: true`.
+- Require at least one non-empty, author-neutral judgment unit and explicit
+  scope or boundary semantics while keeping optional creator provenance
+  separate from format validity.
+- Preserve every declared pattern in compact projection instead of silently
+  applying a prefix budget.
+- Report every non-empty payload path intentionally omitted by compact
+  projection, including deterministic counts, in Runtime Capsule trace and
+  prompt output; preserve complete axiom applicability lists and stop trimming
+  a full-statement fallback.
+- Make `checksums.json` optional under one container authority and verify it
+  whenever it is present.
+- Withdraw asset-signature containers from the Development Preview contract;
+  malformed or legacy signature declarations now fail closed. External grants
+  and Human Lock provenance remain separate responsibilities.
+- Close licensed entitlement validation around the declared `password`,
+  `local_receipt`, `account`, and `org` profiles.
+- Load external-grant Schemas through static package imports so bundler-based
+  ecosystem adapters retain the exact Core validators instead of failing at
+  activation time.
+
+## 0.20.0 (2026-07-17)
+
+### Changed
+
+- Keep Core authority limited to technical facts: Runtime manifests reject
+  intrinsic quality, risk, trust, recommendation, certification, and
+  production-readiness fields; Runtime Capsules and generic Judgment Reports
+  no longer project `risk_level` or `quality_badge`. External assessment and
+  caller adoption policy remain outside Core conformance.
+
+## 0.19.0 (2026-07-16)
+
 ### Added
 
 - Add the separate `@aikdna/kdna-core/remote-runtime` package subpath for a
@@ -10,8 +72,6 @@
   package-root consumer loaders continue to return
   `KDNA_AUTH_REMOTE_RUNTIME_REQUIRED`.
 
-## 0.19.0 (2026-07-16)
-
 ### Fixed
 
 - Enforce `compatibility.min_loader_version` as a strict `x.y.z` loader package

package/README.md

@@ -1,5 +1,9 @@
 # @aikdna/kdna-core
 
+> **Status:** Pre-release. This source tree contains the unreleased `0.21.0`
+> corrective candidate; the published incumbent is `0.20.0`. Candidate source,
+> APIs, and evidence must not be described as already published.
+
 Core library for packaged `.kdna` judgment assets. It implements one current
 container contract, authorization planning, integrity evidence, Runtime Capsule
 projection, and the correlated Agent Host execution boundary.
@@ -7,9 +11,13 @@ projection, and the correlated Agent Host execution boundary.
 ## Install
 
 ```bash
-npm install @aikdna/kdna-core
+npm install @aikdna/kdna-core@0.20.0
 ```
 
+That command installs the published incumbent. Use its release notes for the
+exact `0.20.0` contract. The examples below describe the current source
+candidate and require its final release coordinate before registry use.
+
 ## Pack, validate, plan, and load
 
 Use the package root. Version-qualified entry points and parallel generation
@@ -58,7 +66,7 @@ separate from loadability: `planLoad` and every load path block a valid asset
 that requires a newer loader with `KDNA_LOADER_VERSION_UNSUPPORTED` before
 projection.
 
-## Stable Runtime contracts
+## Current candidate Runtime contracts
 
 There is one current responsibility chain:
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@aikdna/kdna-core",
-    "version": "0.19.0",
+    "version": "0.21.0",
     "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
     "engines": {
         "node": ">=18.0.0"

package/schema/manifest.schema.json

@@ -40,6 +40,14 @@
           }
         }
       }
+    },
+    {
+      "if": { "properties": { "access": { "const": "licensed" } }, "required": ["access"] },
+      "then": { "required": ["entitlement"] }
+    },
+    {
+      "if": { "required": ["entitlement"] },
+      "then": { "properties": { "access": { "const": "licensed" } }, "required": ["access"] }
     }
   ],
   "properties": {
@@ -139,10 +147,31 @@
       "enum": ["public", "licensed", "remote"],
       "description": "Stable delivery and authorization mode for the asset."
     },
+    "entitlement": {
+      "type": "object",
+      "required": ["profile"],
+      "additionalProperties": true,
+      "properties": {
+        "profile": {
+          "type": "string",
+          "enum": ["password", "local_receipt", "account", "org"]
+        },
+        "offline": { "type": "boolean" },
+        "revocable": { "type": "boolean" }
+      }
+    },
     "summary": { "type": "string" },
     "description": { "type": "string" },
     "language": { "type": "string" },
     "languages": { "type": "array", "items": { "type": "string" } },
+    "quality_badge": false,
+    "risk_level": false,
+    "trusted": false,
+    "recommended": false,
+    "high_quality": false,
+    "expert_reviewed": false,
+    "production_ready": false,
+    "officially_approved": false,
     "license": {
       "oneOf": [
         { "type": "string" },
@@ -215,19 +244,8 @@
         }
       }
     },
-    "signatures": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["role", "path", "algorithm"],
-        "properties": {
-          "role": { "type": "string" },
-          "path": { "type": "string" },
-          "algorithm": { "type": "string" },
-          "key_id": { "type": "string" }
-        }
-      }
-    },
+    "signature": false,
+    "signatures": false,
     "dependencies": {
       "type": "object",
       "additionalProperties": {
@@ -235,7 +253,7 @@
       }
     },
     "extends": {
-      "description": "Asset inheritance declaration (Story 12). This asset inherits judgment content from the named base asset. Distinct from 'dependencies' (peer composition): 'extends' creates a single-inheritance hierarchy where the child specialises the parent. The child's cards override the parent's cards with the same ID; parent cards not overridden are inherited. Format: '@scope/name@semver-range' string, or an object with 'name' and optional 'version' fields.",
+      "description": "Asset inheritance declaration. This asset inherits judgment content from the named base asset. Distinct from 'dependencies' (peer composition): 'extends' creates a single-inheritance hierarchy where the child specialises the parent. The child's cards override the parent's cards with the same ID; parent cards not overridden are inherited. Format: '@scope/name@semver-range' string, or an object with 'name' and optional 'version' fields.",
       "oneOf": [
         {
           "type": "string",

package/schema/payload-profile.schema.json

@@ -18,11 +18,63 @@
     },
     "core": {
       "type": "object",
-      "required": ["highest_question", "axioms"],
+      "required": ["axioms"],
       "additionalProperties": true,
+      "anyOf": [
+        { "required": ["highest_question"] },
+        {
+          "required": ["judgment_role"],
+          "properties": {
+            "judgment_role": {
+              "anyOf": [
+                { "required": ["acts_as"] },
+                { "required": ["does_not_act_as"] },
+                { "required": ["responsibility"] }
+              ]
+            }
+          }
+        },
+        {
+          "required": ["boundaries"],
+          "properties": { "boundaries": { "minItems": 1 } }
+        },
+        {
+          "properties": {
+            "axioms": {
+              "contains": {
+                "type": "object",
+                "anyOf": [
+                  {
+                    "required": ["applies_when"],
+                    "properties": {
+                      "applies_when": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                      }
+                    }
+                  },
+                  {
+                    "required": ["does_not_apply_when"],
+                    "properties": {
+                      "does_not_apply_when": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        }
+      ],
       "properties": {
         "highest_question": {
           "type": "string",
+          "minLength": 1,
+          "pattern": "\\S",
           "description": "The single most important question this judgment system answers."
         },
         "worldview": {
@@ -39,23 +91,121 @@
           "type": "object",
           "additionalProperties": true,
           "properties": {
-            "acts_as": { "type": "string" },
+            "acts_as": { "type": "string", "minLength": 1, "pattern": "\\S" },
             "does_not_act_as": {
               "oneOf": [
-                { "type": "string" },
-                { "type": "array", "items": { "type": "string" } }
+                { "type": "string", "minLength": 1, "pattern": "\\S" },
+                {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                }
               ]
             },
-            "responsibility": { "type": "string" }
+            "responsibility": { "type": "string", "minLength": 1, "pattern": "\\S" }
           },
           "description": "The authority this asset exercises and the responsibilities explicitly outside it."
         },
+        "core_structure": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["from", "to", "via"],
+            "properties": {
+              "from": { "type": "string", "minLength": 1, "pattern": "\\S" },
+              "to": { "type": "string", "minLength": 1, "pattern": "\\S" },
+              "via": { "type": "string", "enum": ["priority", "exception"] },
+              "applies_when": {
+                "type": "array",
+                "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+              },
+              "does_not_apply_when": {
+                "type": "array",
+                "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+              }
+            }
+          },
+          "description": "Ordered public judgment relations. Relation objects are closed so private authoring state cannot enter Runtime projection."
+        },
         "axioms": {
           "type": "array",
-          "description": "The list of axioms. Phase 1 accepts an empty array."
+          "minItems": 1,
+          "items": {
+            "oneOf": [
+              { "type": "string", "minLength": 1, "pattern": "\\S" },
+              {
+                "type": "object",
+                "minProperties": 1,
+                "properties": {
+                  "applies_when": {
+                    "type": "array",
+                    "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                  },
+                  "does_not_apply_when": {
+                    "type": "array",
+                    "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                  }
+                },
+                "anyOf": [
+                  {
+                    "required": ["statement"],
+                    "properties": { "statement": { "type": "string", "minLength": 1, "pattern": "\\S" } }
+                  },
+                  {
+                    "required": ["one_sentence"],
+                    "properties": { "one_sentence": { "type": "string", "minLength": 1, "pattern": "\\S" } }
+                  },
+                  {
+                    "required": ["full_statement"],
+                    "properties": { "full_statement": { "type": "string", "minLength": 1, "pattern": "\\S" } }
+                  }
+                ]
+              }
+            ]
+          },
+          "description": "At least one non-empty judgment statement with an actual selection meaning."
         },
         "boundaries": {
           "type": "array",
+          "items": {
+            "oneOf": [
+              { "type": "string", "minLength": 1, "pattern": "\\S" },
+              {
+                "type": "object",
+                "minProperties": 1,
+                "anyOf": [
+                  { "required": ["scope"], "properties": { "scope": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["out_of_scope"], "properties": { "out_of_scope": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["text"], "properties": { "text": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["statement"], "properties": { "statement": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["one_sentence"], "properties": { "one_sentence": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["boundary"], "properties": { "boundary": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["stance"], "properties": { "stance": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  {
+                    "required": ["applies_when"],
+                    "properties": {
+                      "applies_when": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                      }
+                    }
+                  },
+                  {
+                    "required": ["does_not_apply_when"],
+                    "properties": {
+                      "does_not_apply_when": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                      }
+                    }
+                  }
+                ]
+              }
+            ]
+          },
           "description": "Explicit out-of-scope statements."
         },
         "risk_model": {

package/schema/runtime-capsule.schema.json

@@ -11,7 +11,6 @@
     "digests",
     "signature",
     "access",
-    "risk_level",
     "profile",
     "context",
     "trace"
@@ -37,7 +36,6 @@
     },
     "signature": { "$ref": "#/$defs/signature" },
     "access": { "enum": ["public", "licensed", "remote"] },
-    "risk_level": { "type": ["string", "null"] },
     "profile": { "enum": ["index", "compact", "scenario", "full"] },
     "context": { "type": "object" },
     "trace": { "$ref": "#/$defs/trace" }
@@ -84,8 +82,7 @@
       "required": ["state"],
       "additionalProperties": false,
       "properties": {
-        "state": { "enum": ["verified", "not_checked", "absent"] },
-        "issuer": { "type": "string", "minLength": 1 }
+        "state": { "const": "absent" }
       }
     },
     "trace": {
@@ -108,9 +105,51 @@
         "input_kind": { "enum": ["packaged_file", "packaged_bytes"] },
         "runtime_eligible": { "const": true },
         "schema_valid": { "const": true },
-        "signature_state": { "enum": ["verified", "not_checked", "absent"] },
-        "profile": { "enum": ["index", "compact", "scenario", "full"] }
+        "signature_state": { "const": "absent" },
+        "profile": { "enum": ["index", "compact", "scenario", "full"] },
+        "projection_report": { "$ref": "#/$defs/projectionReport" }
       }
+    },
+    "projectionReport": {
+      "type": "object",
+      "required": ["status", "omitted", "omitted_total"],
+      "additionalProperties": false,
+      "properties": {
+        "status": { "enum": ["complete", "partial"] },
+        "omitted": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["path", "count"],
+            "additionalProperties": false,
+            "properties": {
+              "path": { "type": "string", "pattern": "^/" },
+              "count": { "type": "integer", "minimum": 1 }
+            }
+          }
+        },
+        "omitted_total": { "type": "integer", "minimum": 0 }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "status": { "const": "complete" } } },
+          "then": {
+            "properties": {
+              "omitted": { "maxItems": 0 },
+              "omitted_total": { "const": 0 }
+            }
+          }
+        },
+        {
+          "if": { "properties": { "status": { "const": "partial" } } },
+          "then": {
+            "properties": {
+              "omitted": { "minItems": 1 },
+              "omitted_total": { "minimum": 1 }
+            }
+          }
+        }
+      ]
     }
   }
 }

package/src/asset-reader.js

@@ -190,7 +190,6 @@ function normalizeInput(input) {
 
 function manifestForDigest(manifest) {
   const copy = { ...(manifest || {}) };
-  delete copy.signature;
   delete copy.asset_digest;
   delete copy.container_sha256;
   delete copy.content_digest;
@@ -205,7 +204,7 @@ function manifestForDigest(manifest) {
 
 function buildContentDigest(asset) {
   const parts = [];
-  const excluded = new Set(['.DS_Store', 'signature.json', 'build-receipt.json']);
+  const excluded = new Set(['.DS_Store', 'build-receipt.json']);
   for (const entryName of sortedEntryNames(asset.entries)) {
     if (excluded.has(entryName)) continue;
     if (entryName.startsWith('reports/')) continue;
@@ -221,92 +220,6 @@ function buildContentDigest(asset) {
   return `sha256:${sha256Hex(Buffer.from(parts.join('\n')))}`;
 }
 
-function manifestForSignature(manifest, { stripDigestFields = true } = {}) {
-  // Mirrors manifestForDigest above. The two must agree on every field
-  // they strip, or the signing and digest paths will hash different
-  // representations of the same manifest and verifiers will report a
-  // mismatch on otherwise-valid assets.
-  //
-  // Bug: prior version omitted the `authoring.content_digest` strip
-  // that manifestForDigest performs, so the signing payload included
-  // a digest field that the digest payload did not.
-  const copy = { ...(manifest || {}) };
-  delete copy.signature;
-  delete copy._source;
-  if (stripDigestFields) {
-    delete copy.asset_digest;
-    delete copy.container_sha256;
-    delete copy.content_digest;
-    if (copy.authoring && typeof copy.authoring === 'object') {
-      const auth = { ...copy.authoring };
-      delete auth.content_digest;
-      copy.authoring = auth;
-    }
-  }
-  return copy;
-}
-
-function canonicalJsonEntry(entryName, entryBuf, options = {}) {
-  const parsed = parseJson(entryBuf, entryName);
-  const value = entryName === 'kdna.json' ? manifestForSignature(parsed, options) : parsed;
-  return Buffer.from(stableStringify(value));
-}
-
-function buildSigningPayload(asset, options = {}) {
-  // Bug (#147): the prior version only excluded `.DS_Store` and
-  // `signature.json`, while `buildContentDigest` above also excludes
-  // `build-receipt.json` and any entry under `reports/`. A producer
-  // that signed with this code and a verifier that digested the
-  // asset with `buildContentDigest` would compute two different
-  // byte strings and the signature would fail to verify. The fix
-  // mirrors `buildContentDigest`'s exclusion set exactly.
-  const parts = [];
-  for (const entryName of sortedEntryNames(asset.entries)) {
-    if (entryName === '.DS_Store' || entryName === 'signature.json') continue;
-    if (entryName === 'build-receipt.json') continue;
-    if (entryName.startsWith('reports/')) continue;
-    const entryBuf = asset.readEntry(entryName);
-    let payloadBuf = entryBuf;
-    if (JSON_ENTRY_RE.test(entryName)) {
-      payloadBuf = canonicalJsonEntry(entryName, entryBuf, options);
-    }
-    parts.push(`${entryName}:${sha256Hex(payloadBuf)}`);
-  }
-  return parts.join('\n');
-}
-
-function verifySignature(asset, manifest, errors, warnings) {
-  if (!manifest.signature) {
-    warnings.push('kdna.json.signature missing');
-    return null;
-  }
-  if (!manifest.author?.public_key_pem) {
-    errors.push('kdna.json.author.public_key_pem missing');
-    return false;
-  }
-  if (!manifest.author?.pubkey) {
-    errors.push('kdna.json.author.pubkey missing');
-    return false;
-  }
-
-  const fingerprint = `ed25519:${sha256Hex(Buffer.from(manifest.author.public_key_pem))}`;
-  if (fingerprint !== manifest.author.pubkey) {
-    errors.push('author.public_key_pem fingerprint does not match author.pubkey');
-    return false;
-  }
-
-  try {
-    const signature = Buffer.from(String(manifest.signature).replace(/^ed25519:/, ''), 'hex');
-    const publicKey = crypto.createPublicKey(manifest.author.public_key_pem);
-    const ok = crypto.verify(null, Buffer.from(buildSigningPayload(asset)), publicKey, signature);
-    if (!ok) errors.push('Ed25519 signature invalid');
-    return ok;
-  } catch (e) {
-    errors.push(`signature verification failed: ${e.message}`);
-    return false;
-  }
-}
-
 function verifyMediaType(asset, errors) {
   if (!asset.entries.has('mimetype')) {
     errors.push('required entry missing: mimetype');
@@ -464,9 +377,12 @@ function verifySync(asset, options = {}) {
 
   // The current implementation is the sole authority for container,
   // manifest, CBOR payload, checksum, and load-contract validity. The reader
-  // adds transport identity and legacy signature hooks; it must not maintain a
-  // second manifest or payload dialect.
+  // adds transport identity; it must not maintain a second manifest or payload
+  // dialect.
   appendCurrentValidationErrors(asset, errors);
+  if (options.requireSignature === true) {
+    errors.push('asset signatures are outside the current Preview contract');
+  }
 
   if (!asset.entries.has('kdna.json')) errors.push('required entry missing: kdna.json');
   verifyMediaType(asset, errors);
@@ -484,7 +400,6 @@ function verifySync(asset, options = {}) {
   }
 
   let manifest = null;
-  let signature_valid = null;
   if (asset.entries.has('kdna.json')) {
     try {
       manifest = readManifest(asset);
@@ -515,9 +430,6 @@ function verifySync(asset, options = {}) {
           }
         }
       }
-      if (options.requireSignature || manifest.signature) {
-        signature_valid = verifySignature(asset, manifest, errors, warnings);
-      }
       // ── Human Lock signature verification ──────────────────
       if (asset.entries.has('KDNA_Core.json')) {
         try {
@@ -540,7 +452,6 @@ function verifySync(asset, options = {}) {
     manifest,
     asset_digest,
     content_digest,
-    signature_valid,
   };
 }
 
@@ -630,6 +541,9 @@ function createKdnaAssetReader() {
       const entries = [...asset.entries.keys()].sort();
 
       appendCurrentValidationErrors(asset, errors);
+      if (options.requireSignature === true) {
+        errors.push('asset signatures are outside the current Preview contract');
+      }
 
       if (!asset.entries.has('kdna.json')) errors.push('required entry missing: kdna.json');
       verifyMediaType(asset, errors);
@@ -647,7 +561,6 @@ function createKdnaAssetReader() {
       }
 
       let manifest = null;
-      let signature_valid = null;
       if (asset.entries.has('kdna.json')) {
         try {
           manifest = parseJson(asset.readEntry('kdna.json'), 'kdna.json');
@@ -678,9 +591,6 @@ function createKdnaAssetReader() {
               }
             }
           }
-          if (options.requireSignature || manifest.signature) {
-            signature_valid = verifySignature(asset, manifest, errors, warnings);
-          }
         } catch (e) {
           errors.push(e.message);
         }
@@ -694,7 +604,6 @@ function createKdnaAssetReader() {
         manifest,
         asset_digest,
         content_digest,
-        signature_valid,
       };
     },