@allocator-one/rcl 4.4.19

package/dist/report/checkpoint-consensus.d.ts

@@ -0,0 +1,59 @@
+import type { SealedAsyncProof } from '../dispatch/checkpoint-async-context.js';
+import type { Finding, ModelReview } from '../consensus/types.js';
+import type { BlockingHealthSummary } from './blocking-health.js';
+import type { assembleCompletedReview, CompletedReviewInput } from './assembly.js';
+import { type CheckpointContribution, type CheckpointReportProjection } from './checkpoint-projection.js';
+import { type ConsensusAssembly, type ConsensusAssemblyContribution } from './consensus-assembly.js';
+import { type SupplementalAsync } from './supplemental-async.js';
+export interface CheckpointAssemblyInput extends Pick<CompletedReviewInput, 'diff' | 'startTime' | 'run'> {
+    projection: CheckpointReportProjection;
+    supplementalAsync: SupplementalAsync;
+    /** Original-owned physical accounting, distinct from opportunistic voting arrivals. */
+    asyncExecution?: SealedAsyncProof;
+}
+export type CheckpointFindingOrigin = {
+    kind: 'checkpoint';
+} & Omit<CheckpointContribution, 'finding' | 'eligibility'>;
+export interface AsyncFindingOrigin {
+    kind: 'async';
+    snapshotSha256: string;
+    reviewIndex: number;
+    findingIndex: number;
+}
+export type AssemblyFindingOrigin = CheckpointFindingOrigin | AsyncFindingOrigin;
+export interface CheckpointAssemblyContribution {
+    reportIdentity: string;
+    disposition: 'kept' | 'below_threshold';
+    origins: AssemblyFindingOrigin[];
+}
+export interface CheckpointAssemblyObservation {
+    origin: AssemblyFindingOrigin;
+    finding: Finding;
+    reason: 'incomplete_seat' | 'unsuccessful_attempt' | 'async_shadowed_by_blocking' | 'unsuccessful_async';
+}
+export interface CheckpointAssemblyResult {
+    report: Awaited<ReturnType<typeof assembleCompletedReview>>;
+    contributions: CheckpointAssemblyContribution[];
+    observations: CheckpointAssemblyObservation[];
+    /** Raw lineage and successor-only physical attempts; merged reviews are not a billing ledger. */
+    projection: CheckpointReportProjection;
+}
+/** Display-only summary of validated assignment coverage; merged opinions never redefine its quorum. */
+export declare function summarizeCheckpointBlockingHealth(input: CheckpointAssemblyInput, reviews: readonly ModelReview[]): BlockingHealthSummary;
+export interface CheckpointConsensusResult extends Pick<CheckpointAssemblyResult, 'contributions' | 'observations' | 'projection'> {
+    /** Deterministic pre-verification bodies; no gate approval is inferred. */
+    consensus: ConsensusAssembly;
+}
+/**
+ * Assemble from validated checkpoint evidence and its frozen aggregation inputs.
+ * Callers still establish complete source authority, async snapshot inheritance,
+ * current native launch ownership and server admission outside this adapter.
+ */
+export declare function prepareCheckpointAssembly(input: CheckpointAssemblyInput): {
+    completedInput: CompletedReviewInput;
+    mapContributions: (groups: ConsensusAssemblyContribution[]) => CheckpointAssemblyContribution[];
+    observations: CheckpointAssemblyObservation[];
+    projection: CheckpointReportProjection;
+};
+/** Rebuild findings and attribution without any provider, clock, or admission side effect. */
+export declare function deriveCheckpointConsensus(input: CheckpointAssemblyInput): CheckpointConsensusResult;

package/dist/report/checkpoint-consensus.js

@@ -0,0 +1,197 @@
+import { decodeCapturedInputs } from '../dispatch/captured-inputs.js';
+import { mergeChunkReviewsWithContributions } from '../dispatch/merge.js';
+import { isCapturedAggregationInputs } from './aggregation-inputs.js';
+import { isCheckpointReportProjection } from './checkpoint-projection.js';
+import { assertReviewerRunBindings } from './reviewer-evidence.js';
+import { deriveConsensusAssembly } from './consensus-assembly.js';
+import { buildRunHeader, diffDigest, stableStringify } from './run-header.js';
+import { isSupplementalAsync } from './supplemental-async.js';
+/** Display-only summary of validated assignment coverage; merged opinions never redefine its quorum. */
+export function summarizeCheckpointBlockingHealth(input, reviews) {
+    const { projection } = input;
+    if (!isCheckpointReportProjection(projection))
+        throw new Error('checkpoint_assembly_unvalidated_projection');
+    const { health } = projection, plan = projection.proofs[0].proof.plan;
+    const complete = new Set(projection.completeSeats);
+    return {
+        version: 1, fraction: health.policy.fraction, seats: health.policy.seatCount,
+        required: health.policy.minimumSuccessful, successful: health.successfulSeats.length,
+        conclusive: health.conclusive,
+        excludedSuccesses: {
+            secondary: plan.version === 2 ? plan.roster.filter(seat => seat.lane === 'secondary' && complete.has(seat.seat)).length : 0,
+            async: reviews.filter(review => review.async === true && review.status === 'success').length,
+            // Verifier calls are separate sealed evidence, not reviewer result rows.
+            verification: 0,
+        },
+    };
+}
+function reviewerKey(review) {
+    return `${review.model}::${review.role}`;
+}
+function checkpointOrigin(contribution) {
+    const { finding: _finding, eligibility: _eligibility, ...origin } = contribution;
+    return { kind: 'checkpoint', ...origin };
+}
+/** Compose the existing merge's positional map; never reconstruct attribution from finding text or IDs. */
+function mergeWithOrigins(inputs) {
+    const merged = mergeChunkReviewsWithContributions(inputs.map(input => input.review));
+    return merged.reviews.map((review, reviewIndex) => ({ review,
+        origins: merged.contributions[reviewIndex].map(references => references.flatMap(reference => {
+            const origins = inputs[reference.reviewIndex]?.origins[reference.findingIndex];
+            if (!origins?.length)
+                throw new Error('checkpoint_assembly_invalid_merge_reference');
+            return origins;
+        })),
+    }));
+}
+function blockingReviews(projection) {
+    const plan = projection.proofs[0].proof.plan;
+    const complete = new Set(projection.completeSeats);
+    const completeKeys = new Set(plan.roster.filter(seat => complete.has(seat.seat)).map(reviewerKey));
+    const proofDigests = new Map(projection.proofs.map(item => [item.runId, item.proof.digest]));
+    const placeholders = new Set();
+    const seats = [];
+    for (const seat of plan.roster) {
+        if (complete.has(seat.seat)) {
+            const parts = projection.selectedCells.filter(cell => cell.seat === seat.seat).map(cell => {
+                if (!cell.review || cell.review.status !== 'success' || !cell.runId || !cell.attemptId || !cell.resultSha256) {
+                    throw new Error('checkpoint_assembly_incomplete_success');
+                }
+                const proofDigest = proofDigests.get(cell.runId);
+                if (!proofDigest)
+                    throw new Error('checkpoint_assembly_missing_source');
+                return { review: structuredClone(cell.review), origins: cell.review.findings.map((_, findingIndex) => [{
+                            kind: 'checkpoint', runId: cell.runId, proofDigest, cell: cell.cell, seat: cell.seat,
+                            attemptId: cell.attemptId, resultSha256: cell.resultSha256, findingIndex,
+                        }]) };
+            });
+            const merged = mergeWithOrigins(parts);
+            if (merged.length !== 1)
+                throw new Error('checkpoint_assembly_invalid_seat');
+            seats.push(merged[0]);
+        }
+        else if (!completeKeys.has(reviewerKey(seat)) && !placeholders.has(reviewerKey(seat))) {
+            // Preserve legacy blocking/async precedence without letting an incomplete
+            // duplicate assignment poison a complete model-role opinion.
+            const incomplete = projection.seatReviews.find(item => item.seat === seat.seat);
+            seats.push({ review: { ...structuredClone(incomplete.review), findings: [] }, origins: [] });
+            placeholders.add(reviewerKey(seat));
+        }
+    }
+    return mergeWithOrigins(seats);
+}
+/**
+ * Assemble from validated checkpoint evidence and its frozen aggregation inputs.
+ * Callers still establish complete source authority, async snapshot inheritance,
+ * current native launch ownership and server admission outside this adapter.
+ */
+export function prepareCheckpointAssembly(input) {
+    if (!isCheckpointReportProjection(input?.projection))
+        throw new Error('checkpoint_assembly_unvalidated_projection');
+    if (!isSupplementalAsync(input.supplementalAsync))
+        throw new Error('checkpoint_assembly_unvalidated_async');
+    const { projection, supplementalAsync } = input;
+    const successor = projection.proofs.at(-1);
+    const captureBytes = successor.proof.bindings['captured-inputs'];
+    if (captureBytes === undefined)
+        throw new Error('checkpoint_assembly_missing_capture');
+    for (const item of projection.proofs) {
+        if (item.proof.bindings['captured-inputs'] !== captureBytes)
+            throw new Error('checkpoint_assembly_capture_mismatch');
+    }
+    const captured = decodeCapturedInputs(captureBytes, successor.proof.plan);
+    const aggregation = captured.aggregation;
+    if (!isCapturedAggregationInputs(aggregation))
+        throw new Error('checkpoint_assembly_missing_aggregation');
+    if (stableStringify(captured.policy) !== stableStringify(projection.health.policy))
+        throw new Error('checkpoint_assembly_policy_mismatch');
+    if (input.run.id !== successor.runId)
+        throw new Error('checkpoint_assembly_run_mismatch');
+    // Do not hydrate defaults into config: that would change its captured digest.
+    // Legacy captures omitted the true appendix default while separately sealing
+    // the effective aggregation value. An explicit value must still match.
+    const capturedAppendix = captured.config.output?.belowThresholdAppendix;
+    if (stableStringify(captured.config.thresholds) !== stableStringify(aggregation.thresholds) ||
+        capturedAppendix !== aggregation.belowThresholdAppendix &&
+            !(capturedAppendix === undefined && aggregation.belowThresholdAppendix)) {
+        throw new Error('checkpoint_assembly_static_config_mismatch');
+    }
+    const diff = structuredClone(input.diff), run = structuredClone(input.run);
+    const config = structuredClone(captured.config);
+    if (diffDigest(diff.files) !== successor.proof.plan.patchSha256 || aggregation.diffSha256 !== successor.proof.plan.patchSha256) {
+        throw new Error('checkpoint_assembly_diff_mismatch');
+    }
+    const gatingConfig = { ...aggregation.gating }, thresholds = { ...aggregation.thresholds };
+    const header = buildRunHeader({ ...run, config, diff, gating: gatingConfig, thresholds,
+        finishedAt: run.startedAt, ciExitCode: 1 });
+    assertReviewerRunBindings(header, successor.proof, captured);
+    const blocking = blockingReviews(projection);
+    const blockingKeys = new Set(blocking.map(item => reviewerKey(item.review)));
+    const asyncInputs = supplementalAsync.reviews.map((review, reviewIndex) => ({
+        review: structuredClone(review),
+        origins: review.findings.map((_, findingIndex) => [{ kind: 'async', snapshotSha256: supplementalAsync.digest, reviewIndex, findingIndex }]),
+    }));
+    const merged = mergeWithOrigins([...blocking, ...asyncInputs]);
+    const expected = new Map();
+    const observations = [];
+    for (const contribution of projection.contributions) {
+        const origin = checkpointOrigin(contribution);
+        if (contribution.eligibility === 'voting')
+            expected.set(stableStringify(origin), origin);
+        else
+            observations.push({ origin, finding: structuredClone(contribution.finding), reason: contribution.eligibility });
+    }
+    for (const item of asyncInputs) {
+        for (const [findingIndex, finding] of item.review.findings.entries()) {
+            const origin = item.origins[findingIndex][0];
+            if (item.review.status !== 'success')
+                observations.push({ origin, finding: structuredClone(finding), reason: 'unsuccessful_async' });
+            else if (blockingKeys.has(reviewerKey(item.review))) {
+                observations.push({ origin, finding: structuredClone(finding), reason: 'async_shadowed_by_blocking' });
+            }
+            else
+                expected.set(stableStringify(origin), origin);
+        }
+    }
+    // Check conservation before the verifier can run, then again after dedupe.
+    function checkConservation(origins) {
+        const seen = new Set();
+        for (const origin of origins) {
+            const key = stableStringify(origin);
+            if (!expected.has(key) || seen.has(key))
+                throw new Error('checkpoint_assembly_contribution_mismatch');
+            seen.add(key);
+        }
+        if (seen.size !== expected.size)
+            throw new Error('checkpoint_assembly_missing_contribution');
+    }
+    checkConservation(merged.filter(item => item.review.status === 'success').flatMap(item => item.origins.flat()));
+    const completedInput = { chunkReviews: blocking.map(item => item.review),
+        arrivedAsync: asyncInputs.map(item => item.review), asyncLaunched: supplementalAsync.asyncLaunched,
+        startTime: input.startTime, roleMap: new Map(aggregation.roles.map(item => [item.name, structuredClone(item.role)])),
+        config, diff, gatingConfig, reviewerHealth: projection.health, run, dedupeOrdering: 'utf16',
+        ...(aggregation.modelWeights === undefined ? {} : { modelWeights: new Map(aggregation.modelWeights.map(item => [item.model, item.weight])) }), };
+    function mapContributions(groups) {
+        const contributions = groups.map(group => ({ reportIdentity: group.reportIdentity, disposition: group.disposition,
+            origins: group.contributions.flatMap(reference => {
+                const origins = merged[reference.reviewIndex]?.origins[reference.findingIndex];
+                if (!origins?.length)
+                    throw new Error('checkpoint_assembly_invalid_dedupe_reference');
+                return origins.map(origin => ({ ...origin }));
+            }),
+        }));
+        checkConservation(contributions.flatMap(group => group.origins));
+        return contributions;
+    }
+    return { completedInput, mapContributions, observations, projection };
+}
+/** Rebuild findings and attribution without any provider, clock, or admission side effect. */
+export function deriveCheckpointConsensus(input) {
+    const prepared = prepareCheckpointAssembly(input), completed = prepared.completedInput;
+    const consensus = deriveConsensusAssembly({ runId: completed.run.id, chunkReviews: completed.chunkReviews,
+        arrivedAsync: completed.arrivedAsync, roleMap: completed.roleMap, thresholds: completed.config.thresholds,
+        modelWeights: completed.modelWeights, collectContributions: true, dedupeOrdering: completed.dedupeOrdering });
+    return { consensus, contributions: prepared.mapContributions(consensus.contributions),
+        observations: prepared.observations, projection: prepared.projection };
+}
+//# sourceMappingURL=checkpoint-consensus.js.map

package/dist/report/checkpoint-consensus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-consensus.js","sourceRoot":"","sources":["../../src/report/checkpoint-consensus.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,OAAO,EAAE,4BAA4B,EAAgE,MAAM,4BAA4B,CAAC;AACxI,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAA8D,MAAM,yBAAyB,CAAC;AAC9H,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAA0B,MAAM,yBAAyB,CAAC;AAkCtF,wGAAwG;AACxG,MAAM,UAAU,iCAAiC,CAC/C,KAA8B,EAAE,OAA+B;IAE/D,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC7G,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACnD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS;QAC5E,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;QACpF,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,iBAAiB,EAAE;YACjB,SAAS,EAAE,IAAI,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3H,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;YAC5F,yEAAyE;YACzE,YAAY,EAAE,CAAC;SAChB;KACF,CAAC;AACJ,CAAC;AAYD,SAAS,WAAW,CAAC,MAA2C;IAC9D,OAAO,GAAG,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAoC;IAC5D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC;IACjF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,2GAA2G;AAC3G,SAAS,gBAAgB,CAAC,MAA2B;IACnD,MAAM,MAAM,GAAG,kCAAkC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM;QAC1D,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,WAAW,CAAE,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC/E,IAAI,CAAC,OAAO,EAAE,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACrF,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,UAAsC;IAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IACnG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACxF,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC7G,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjD,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;4BACrG,IAAI,EAAE,YAAqB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;4BAC9F,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,YAAY,EAAE,IAAI,CAAC,YAAa,EAAE,YAAY;yBAC3E,CAAC,CAAC,EAAE,CAAC;YACR,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACxF,0EAA0E;YAC1E,6DAA6D;YAC7D,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAE,CAAC;YACjF,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7F,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAA8B;IACtE,IAAI,CAAC,4BAA4B,CAAC,KAAK,EAAE,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACpH,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC5G,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC;IAChD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACjE,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1G,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3I,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1F,8EAA8E;IAC9E,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxE,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC;QACzF,gBAAgB,KAAK,WAAW,CAAC,sBAAsB;YACrD,CAAC,CAAC,gBAAgB,KAAK,SAAS,IAAI,WAAW,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/H,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,YAAY,GAAG,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,EAAE,UAAU,GAAG,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC;IAC3F,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU;QACpF,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,yBAAyB,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE7D,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAwB,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,EAAE,eAAe,CAAC,MAAM,CAAgB;QAC9C,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;KAC5I,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC1D,MAAM,YAAY,GAAoC,EAAE,CAAC;IACzD,KAAK,MAAM,YAAY,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,YAAY,CAAC,WAAW,KAAK,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;;YACpF,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAE,CAAC,CAAC,CAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;iBAChI,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACpD,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACzG,CAAC;;gBAAM,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,SAAS,iBAAiB,CAAC,OAAgC;QACzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACtG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC/F,CAAC;IACD,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChH,MAAM,cAAc,GAAyB,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5F,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,iBAAiB,CAAC,aAAa;QAClG,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAS,CAAC,CAAC,CAAC;QAC5H,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO;QAC3F,GAAG,CAAC,WAAW,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAC9I,CAAC;IACF,SAAS,gBAAgB,CAAC,MAAuC;QAC/D,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC/G,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;gBAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC/E,IAAI,CAAC,OAAO,EAAE,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACtF,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC,CAAC;SACH,CAAC,CAAC,CAAC;QACJ,iBAAiB,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACxE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,yBAAyB,CAAC,KAA8B;IACtE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC,cAAc,CAAC;IACvF,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,EAAG,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY;QACxG,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU;QACzG,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,oBAAoB,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAChH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,aAAc,CAAC;QACpF,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;AAC3E,CAAC"}

package/dist/report/checkpoint-gating.d.ts

@@ -0,0 +1,36 @@
+import { type CheckpointAsyncExecution } from '../dispatch/checkpoint-async-context.js';
+import { type GatingPlan, type VerificationStats } from '../consensus/gating.js';
+import type { ConsensusFinding } from '../consensus/types.js';
+import { type VerificationState } from '../dispatch/checkpoint-verification.js';
+import { type CheckpointAssemblyInput, type CheckpointConsensusResult } from './checkpoint-consensus.js';
+export interface SealedVerificationProof {
+    bytes: string;
+    digest: string;
+}
+export interface CheckpointGatingProjection {
+    derived: CheckpointConsensusResult;
+    plan?: GatingPlan;
+    findings: ConsensusFinding[];
+    appendix: ConsensusFinding[];
+    verification?: VerificationStats;
+    phase?: {
+        proof: SealedVerificationProof;
+        state: VerificationState;
+    };
+    asyncExecution?: CheckpointAsyncExecution;
+    disposition: 'plain' | 'deterministic' | 'replayed' | 'strict_fallback';
+}
+/**
+ * Pure retained-checkpoint verifier projection. It validates local structural
+ * evidence only; callers retain source, native, server, producer and provider
+ * authority. It performs no IO or live ask.
+ */
+export declare function prepareCheckpointGating(assembly: CheckpointAssemblyInput): {
+    derived: CheckpointConsensusResult;
+    plan?: GatingPlan;
+    originalAsync: number;
+    currentReviewerCalls: number;
+    asyncExecution?: CheckpointAsyncExecution;
+};
+/** Replay a complete or failed sealed phase, never a live provider request. */
+export declare function deriveCheckpointGating(assembly: CheckpointAssemblyInput, sealed?: SealedVerificationProof): CheckpointGatingProjection;

package/dist/report/checkpoint-gating.js

@@ -0,0 +1,110 @@
+import { validateCheckpointAsync } from '../dispatch/checkpoint-async-context.js';
+import { isAsyncOutcomeUnknown } from '../dispatch/checkpoint-async-unknown.js';
+import { createHash } from 'node:crypto';
+import { planGatingForCapturedContract, replayGating } from '../consensus/gating.js';
+import { decodeCapturedInputs } from '../dispatch/captured-inputs.js';
+import { decodeVerificationProof, parseVerificationAnswer } from '../dispatch/checkpoint-verification.js';
+import { verificationContextForCheckpointProof } from '../dispatch/checkpoint-verification-context.js';
+import { detectProvider } from '../roles/dispatcher.js';
+import { deriveCheckpointConsensus } from './checkpoint-consensus.js';
+import { stableStringify } from './run-header.js';
+const sha256 = (bytes) => createHash('sha256').update(bytes).digest('hex');
+const equal = (a, b) => stableStringify(a) === stableStringify(b);
+const gatedAppendix = (findings) => findings.map(finding => ({ ...structuredClone(finding), gating: { reason: 'none' } }));
+/**
+ * Pure retained-checkpoint verifier projection. It validates local structural
+ * evidence only; callers retain source, native, server, producer and provider
+ * authority. It performs no IO or live ask.
+ */
+export function prepareCheckpointGating(assembly) {
+    const derived = deriveCheckpointConsensus(assembly);
+    const successor = assembly.projection.proofs.at(-1);
+    const capture = successor.proof.bindings['captured-inputs'];
+    if (capture === undefined)
+        throw new Error('checkpoint_gating_missing_capture');
+    const captured = decodeCapturedInputs(capture, successor.proof.plan);
+    const aggregation = captured.aggregation;
+    if (!aggregation)
+        throw new Error('checkpoint_gating_missing_aggregation');
+    const currentReviewerCalls = successor.proof.state.records.filter(row => row.type === 'intent').length;
+    const root = assembly.projection.proofs[0];
+    const asyncExecution = validateCheckpointAsync(root.proof, assembly.asyncExecution);
+    if (asyncExecution && asyncExecution.context.runId !== root.runId)
+        throw new Error('checkpoint_gating_async_run_mismatch');
+    const allIds = new Set(assembly.projection.allPhysicalAttempts.map(row => row.attemptId));
+    if (asyncExecution && !isAsyncOutcomeUnknown(asyncExecution) &&
+        asyncExecution.state.intents.some(row => allIds.has(row.attemptId)))
+        throw new Error('checkpoint_gating_duplicate_attempt');
+    if (assembly.supplementalAsync.asyncLaunched > 0 && asyncExecution === undefined) {
+        throw new Error('checkpoint_gating_unbound_async_launches');
+    }
+    if (asyncExecution && isAsyncOutcomeUnknown(asyncExecution) &&
+        (assembly.supplementalAsync.asyncLaunched > 0 || assembly.supplementalAsync.reviewBytes.length > 0)) {
+        throw new Error('checkpoint_gating_unknown_async_supplemental');
+    }
+    if (captured.async && assembly.supplementalAsync.asyncLaunched > captured.async.calls.length) {
+        throw new Error('checkpoint_gating_async_launch_count');
+    }
+    // Prior-round voting arrivals do not imply current paid calls. A recovered
+    // unknown outcome reserves its captured ceiling without inventing attempts.
+    const originalAsync = assembly.projection.proofs.length === 1
+        ? asyncExecution === undefined ? 0
+            : isAsyncOutcomeUnknown(asyncExecution) ? asyncExecution.physicalCallUpperBound
+                : asyncExecution.physicalAttempts.length
+        : 0;
+    if (currentReviewerCalls + originalAsync > 500)
+        throw new Error('checkpoint_gating_call_cap');
+    if (aggregation.gating.mode !== 'verified-consensus' || !assembly.projection.health.conclusive) {
+        return { derived, asyncExecution, originalAsync, currentReviewerCalls };
+    }
+    const plan = planGatingForCapturedContract(derived.consensus.reportFindings, {
+        minModels: aggregation.gating.minModels,
+        verificationModel: aggregation.gating.verificationModel,
+        verificationReasoningEffort: aggregation.gating.verificationReasoningEffort,
+        verificationTimeoutMs: aggregation.gating.verificationTimeoutMs,
+        verificationPassTimeoutMs: aggregation.gating.verificationPassTimeoutMs,
+        diffFiles: assembly.diff.files,
+        ...(aggregation.modelWeights === undefined ? {} : { modelWeights: new Map(aggregation.modelWeights.map(row => [row.model, row.weight])) }),
+    }, aggregation.verifierContractVersion ?? 1);
+    return { derived, asyncExecution, plan, originalAsync, currentReviewerCalls };
+}
+/** Replay a complete or failed sealed phase, never a live provider request. */
+export function deriveCheckpointGating(assembly, sealed) {
+    const { derived, plan, originalAsync, currentReviewerCalls, asyncExecution } = prepareCheckpointGating(assembly);
+    if (plan === undefined) {
+        if (sealed !== undefined)
+            throw new Error('checkpoint_gating_phase_not_applicable');
+        return { derived, asyncExecution, findings: structuredClone(derived.consensus.reportFindings),
+            appendix: structuredClone(derived.consensus.droppedFindings), disposition: 'plain' };
+    }
+    if (plan.batches.length === 0) {
+        if (sealed !== undefined)
+            throw new Error('checkpoint_gating_phase_not_applicable');
+        const replay = replayGating(plan, [], 0);
+        return { derived, asyncExecution, plan, findings: replay.findings, appendix: gatedAppendix(derived.consensus.droppedFindings), ...(replay.verification ? { verification: replay.verification } : {}), disposition: 'deterministic' };
+    }
+    if (sealed === undefined)
+        throw new Error('checkpoint_gating_missing_phase');
+    if (typeof sealed.bytes !== 'string' || !/^[a-f0-9]{64}$/.test(sealed.digest) || sha256(sealed.bytes) !== sealed.digest)
+        throw new Error('checkpoint_gating_invalid_phase');
+    const context = verificationContextForCheckpointProof(assembly.projection.proofs.at(-1).proof);
+    if (context.runId !== assembly.run.id)
+        throw new Error('checkpoint_gating_run_mismatch');
+    const state = decodeVerificationProof(sealed.bytes, context);
+    const expected = { runId: context.runId, gatingPlanBytes: stableStringify(plan), model: plan.model, provider: detectProvider(plan.model), batches: plan.batches.map(({ systemPrompt, userPrompt }) => ({ systemPrompt, userPrompt })), verificationTimeoutMs: plan.verificationTimeoutMs, verificationPassTimeoutMs: plan.verificationPassTimeoutMs };
+    const actual = state.plan;
+    if (!equal({ runId: actual.runId, gatingPlanBytes: actual.gatingPlanBytes, model: actual.model, provider: actual.provider, batches: actual.batches, verificationTimeoutMs: actual.verificationTimeoutMs, verificationPassTimeoutMs: actual.verificationPassTimeoutMs }, expected))
+        throw new Error('checkpoint_gating_plan_mismatch');
+    const ids = new Set([...(asyncExecution && !isAsyncOutcomeUnknown(asyncExecution)
+            ? asyncExecution.state.intents.map(row => row.attemptId) : []), ...assembly.projection.allPhysicalAttempts.map(row => row.attemptId)]);
+    if (state.intents.some(row => ids.has(row.attemptId)))
+        throw new Error('checkpoint_gating_duplicate_attempt');
+    if (currentReviewerCalls + state.plan.maxPhysicalCalls + originalAsync > 500)
+        throw new Error('checkpoint_gating_call_cap');
+    const phase = { proof: Object.freeze({ bytes: sealed.bytes, digest: sealed.digest }), state };
+    if (state.terminal.status === 'failed')
+        return { derived, asyncExecution, plan, findings: structuredClone(derived.consensus.reportFindings), appendix: structuredClone(derived.consensus.droppedFindings), phase, disposition: 'strict_fallback' };
+    const replay = replayGating(plan, state.outcomes.map(row => ({ batchIndex: row.batchIndex, kind: 'answer', answer: parseVerificationAnswer(row.answerBytes, state.plan) })), state.terminal.finishedAtMs - state.plan.startedAtMs);
+    return { derived, asyncExecution, plan, findings: replay.findings, appendix: gatedAppendix(derived.consensus.droppedFindings), ...(replay.verification ? { verification: replay.verification } : {}), phase, disposition: 'replayed' };
+}
+//# sourceMappingURL=checkpoint-gating.js.map

package/dist/report/checkpoint-gating.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-gating.js","sourceRoot":"","sources":["../../src/report/checkpoint-gating.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAiC,MAAM,yCAAyC,CAAC;AACjH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,YAAY,EAA2C,MAAM,wBAAwB,CAAC;AAE9H,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAA0B,MAAM,wCAAwC,CAAC;AAClI,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAgE,MAAM,2BAA2B,CAAC;AACpI,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAalD,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3F,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,CAAU,EAAW,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC;AAC7F,MAAM,aAAa,GAAG,CAAC,QAA4B,EAAsB,EAAE,CACzE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAe,EAAE,EAAE,CAAC,CAAC,CAAC;AAElG;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAiC;IAGvE,MAAM,OAAO,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IACrD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3E,MAAM,oBAAoB,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IACvG,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IACpF,IAAI,cAAc,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1F,IAAI,cAAc,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC;QAC1D,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9H,IAAI,QAAQ,CAAC,iBAAiB,CAAC,aAAa,GAAG,CAAC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,cAAc,IAAI,qBAAqB,CAAC,cAAc,CAAC;QACzD,CAAC,QAAQ,CAAC,iBAAiB,CAAC,aAAa,GAAG,CAAC,IAAI,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACtG,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,iBAAiB,CAAC,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3D,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,sBAAsB;gBAC7E,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,MAAM;QAC5C,CAAC,CAAC,CAAC,CAAC;IACN,IAAI,oBAAoB,GAAG,aAAa,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9F,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/F,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,6BAA6B,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE;QAC3E,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS;QACvC,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,iBAAiB;QACvD,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAAC,2BAA2B;QAC3E,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAAC,qBAAqB;QAC/D,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAAC,yBAAyB;QACvE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK;QAC9B,GAAG,CAAC,WAAW,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3I,EAAE,WAAW,CAAC,uBAAuB,IAAI,CAAC,CAAC,CAAC;IAC7C,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC;AAChF,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,QAAiC,EAAE,MAAgC;IACxG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,oBAAoB,EAAE,cAAc,EAAE,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACpF,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC;YAC3F,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IACvO,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC7E,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5K,MAAM,OAAO,GAAG,qCAAqC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,EAAE,yBAAyB,EAAE,IAAI,CAAC,yBAAyB,EAAE,CAAC;IACtV,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,EAAE,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACtU,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC;YAC/E,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACzI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9G,IAAI,oBAAoB,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,GAAG,aAAa,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5H,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IAC9F,IAAI,KAAK,CAAC,QAAS,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACpP,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,uBAAuB,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAS,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7O,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACzO,CAAC"}

package/dist/report/checkpoint-projection.d.ts

@@ -0,0 +1,76 @@
+import type { Finding, ModelReview } from '../consensus/types.js';
+import { type CheckpointProof } from '../dispatch/checkpoint.js';
+import type { QuorumPolicy } from '../dispatch/quorum.js';
+import { type ReviewerHealth } from './reviewer-health.js';
+export interface CheckpointRunProof {
+    readonly runId: string;
+    readonly proof: CheckpointProof;
+}
+export interface CheckpointProjectionInput {
+    /** Chronological, already source-authorized ancestry; never an arbitrary bag of successes. */
+    readonly sources: readonly CheckpointRunProof[];
+    readonly successor: CheckpointRunProof;
+    readonly policy: Pick<QuorumPolicy, 'version' | 'fraction'>;
+}
+export interface PhysicalCheckpointAttempt {
+    readonly runId: string;
+    readonly proofDigest: string;
+    readonly attemptId: string;
+    readonly kind: 'paid' | 'unknown';
+    readonly cell: string;
+    readonly seat: string;
+    readonly chunk: number;
+    readonly certainty: 'observed' | 'uncertain';
+    readonly possiblyBilled: boolean;
+    readonly review?: ModelReview;
+    readonly reviewBytes?: string;
+    readonly resultSha256?: string;
+}
+export interface SelectedCheckpointCell {
+    readonly cell: string;
+    readonly seat: string;
+    readonly status: 'observed' | 'uncertain' | 'unstarted';
+    readonly runId?: string;
+    readonly attemptId?: string;
+    readonly review?: ModelReview;
+    readonly reviewBytes?: string;
+    readonly resultSha256?: string;
+}
+export interface CheckpointContribution {
+    readonly runId: string;
+    readonly proofDigest: string;
+    readonly cell: string;
+    readonly seat: string;
+    readonly attemptId: string;
+    readonly resultSha256: string;
+    readonly findingIndex: number;
+    readonly finding: Finding;
+    readonly eligibility: 'voting' | 'incomplete_seat' | 'unsuccessful_attempt';
+}
+export interface CheckpointReportProjection {
+    readonly health: ReviewerHealth;
+    readonly completeSeats: readonly string[];
+    readonly proofs: readonly CheckpointRunProof[];
+    readonly selectedCells: readonly SelectedCheckpointCell[];
+    readonly seatReviews: readonly {
+        readonly seat: string;
+        readonly complete: boolean;
+        readonly review: ModelReview;
+    }[];
+    /** Complete synchronous seats collapsed to the existing distinct model-role opinion identity. */
+    readonly votingReviews: readonly ModelReview[];
+    readonly contributions: readonly CheckpointContribution[];
+    readonly nonVotingObservations: readonly CheckpointContribution[];
+    readonly allPhysicalAttempts: readonly PhysicalCheckpointAttempt[];
+    /** Successor-owned intents, including interrupted/possibly billed ones; never source usage. */
+    readonly newPhysicalAttempts: readonly PhysicalCheckpointAttempt[];
+}
+/** Recognizes local derivation only; serialized evidence must be validated and projected again. */
+export declare function isCheckpointReportProjection(value: unknown): value is CheckpointReportProjection;
+/**
+ * Project a validated checkpoint lineage without changing its opaque result bytes.
+ * The caller establishes source/run authority and complete ancestry. This pure
+ * view validates local conservation and accounting; it is not server admission.
+ * Supplemental async voting remains the existing assembly's responsibility.
+ */
+export declare function projectCheckpointReport(input: CheckpointProjectionInput): CheckpointReportProjection;